Function at 0x437d82
Capabilities:
Copy file
Persist via lnk shortcut
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc00
mov eax, dword [0x5c4e68]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0xba8], eax
lea eax, [ebp - 0x193]
push ebx
push eax
mov byte [ebp - 0x194], bl
call fcn.005117f0
add esp, 0xc
mov esi, 0x3ff
push esi
lea eax, [ebp - 0x69b]
push ebx
push eax
mov byte [ebp - 0x69c], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0xba3]
push ebx
push eax
mov byte [ebp - 0xba4], bl
call fcn.005117f0
xor eax, eax
mov word [ebp - 0xbcc], bx
lea edi, [ebp - 0xbca]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0xbdc], bx
lea edi, [ebp - 0xbda]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push 0x3f
stosw word es:[edi], ax
lea eax, [ebp - 0x8b]
push ebx
push eax
mov dword [ebp - 0xbb8], ebx
mov byte [ebp - 0x8c], bl
call fcn.005117f0
add esp, 0xc
call fcn.00415edc
test eax, eax
jne 0x437e49
push ebx
xor ecx, ecx
call fcn.0040fe48
pop ecx
call fcn.004137c2
push ebx
call fcn.004c11ca
pop ecx
push 2
pop edi
call fcn.00414181
push 0x270f
call fcn.00412791
pop ecx
push ebx
push str.8Ex0_0T_I__lQegYdiyovQ8
call fcn.004c6598
push eax
push 0x53a614
push ebx
call fcn.004c5467
add esp, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, str.UpStrdedP2_221277_avcdii22.flg
push esi
push ebx
call fcn.0048a237
pop ecx
pop ecx
mov edi, eax
call fcn.0042ad00
test eax, eax
jne 0x438068
push 0x15f
push str..Installation.c
push esi
push ebx
call fcn.0048a237
pop ecx
pop ecx
mov edx, 0x5448b4
mov ecx, eax
call fcn.0042d2c6
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x438068
push str.FLAG
push esi
call fcn.0051213b
pop ecx
pop ecx
mov ecx, esi
call fcn.0042d70e
jmp 0x438068
push 0
push str.zbiiSeQ_iREuKaXaa_fIO
call fcn.004c6598
push eax
push 0x5302ac
call fcn.004147da
mov ecx, dword [0x5d9ca0]
add esp, 0x10
cmp dword [ebp - 0xba8], ecx
je 0x437f2b
call fcn.0040538e
test eax, eax
je 0x437f2b
mov eax, dword [0x5d9ca0]
mov dword [ebp - 0xba8], eax
jmp 0x438068
push dword [ebp - 0xba8]
push str.:7:InstallPAULA__s__encountered_a_problem:_The_archive_could_not_be_found_
call fcn.004265da
push str._n_nThe_installation_archive_could_not_be_found.
call fcn.004147da
add esp, 0xc
push dword [ebp - 0xba8]
push str._nArchive:___s_
call fcn.004147da
push str._n_nPlease_enter_the_path_and_filename_of_the_installation_archive.
call fcn.004147da
add esp, 0xc
push str._nFilename:
call fcn.004147da
pop ecx
lea eax, [ebp - 0x194]
call fcn.00416c0d
lea eax, [ebp - 0x194]
push str.desktop
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
jne 0x43800f
push 1
lea ecx, [ebp - 0x194]
call fcn.0040f68f
pop ecx
mov edx, eax
call fcn.004c3b34
test eax, eax
jne 0x437fcd
mov ecx, str.InstallPaula2.exe
lea ebx, [ebp - 0x194]
call fcn.004c42f0
mov edi, ebx
call fcn.0042ad00
test eax, eax
jne 0x437fcd
mov eax, ebx
call fcn.004c3ab2
lea edi, [ebp - 0x194]
call fcn.0042ad00
test eax, eax
jne 0x438057
push 2
mov ecx, edi
call fcn.0040f68f
pop ecx
mov edx, eax
call fcn.004c3b34
test eax, eax
jne 0x438057
mov ecx, str.InstallPaula2.exe
mov ebx, edi
call fcn.004c42f0
call fcn.0042ad00
test eax, eax
jne 0x438057
mov eax, edi
call fcn.004c3ab2
jmp 0x438057
lea eax, [ebp - 0x194]
push str.temp
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
jne 0x438057
lea eax, [ebp - 0x194]
push str.InstallPaula2.exe
push eax
call fcn.0048a237
pop ecx
pop ecx
lea edi, [ebp - 0x194]
call fcn.0042ad00
test eax, eax
je 0x438057
mov eax, edi
push eax
push str.:10:Installation_Exception:_Archive_manually_redirected_to___s__
call fcn.004265da
pop ecx
pop ecx
lea eax, [ebp - 0x194]
mov dword [ebp - 0xba8], eax
call fcn.004137c2
mov edi, dword [ebp - 0xba8]
call fcn.0042ad00
test eax, eax
je 0x437eea
lea eax, [ebp - 0x194]
cmp edi, eax
jne 0x438092
push edi
push str.:7:InstallPAULA__s__encountered_a_problem:_Had_to_use_alternate_archive_path.
call fcn.004265da
pop ecx
pop ecx
call fcn.004283c4
cmp eax, 3
jne 0x4380ac
mov eax, dword [ebp - 0xba8]
call fcn.00437c13
jmp 0x439393
call fcn.004283c4
mov esi, eax
dec esi
dec esi
neg esi
sbb esi, esi
inc esi
push str.DONE
mov dword [ebp - 0xbb0], esi
call fcn.004147da
pop ecx
call fcn.004399ec
cmp eax, 1
mov ebx, 0x5302b4
jle 0x438193
push 0x5387f4
xor esi, esi
push esi
push esi
call fcn.00489f49
pop ecx
pop ecx
push eax
push 0x533dd4
lea eax, [ebp - 0xba4]
push 0x400
push eax
call fcn.004c53b7
add esp, 0x14
lea edi, [ebp - 0xba4]
call fcn.0042ad00
test eax, eax
je 0x4383f9
push 0x5483a0
call fcn.004147da
mov dword [esp], str._n_The_previous_setup_process_did_not_complete.
call fcn.004147da
mov dword [esp], str._n_You_can_either_Resume_from_where_you_left_off_
call fcn.004147da
mov dword [esp], str._n_or_you_can_start_over_from_the_beginning.
call fcn.004147da
mov dword [esp], str._n_Select_NO_if_you_would_like_to_start_over.
call fcn.004147da
mov dword [esp], str._n_n_Would_you_like_to_resume_setup___Y_N_
call fcn.004147da
pop ecx
push esi
call fcn.00435678
test eax, eax
pop ecx
je 0x4383f9
call fcn.0043781a
push str._n_n_n__Please_wait_a_moment_for_PAULA_Setup_to_start..._n_n
call fcn.004147da
pop ecx
mov eax, 0x1388
call fcn.004352d3
xor eax, eax
inc eax
jmp 0x439393
push 0x3f
xor edi, edi
lea eax, [ebp - 0x4b]
push edi
push eax
mov byte [ebp - 0x4c], 0
call fcn.005117f0
add esp, 0xc
mov ecx, 0x5484f8
call fcn.00412f60
mov ecx, dword [ebp - 0xba8]
push edi
call fcn.0042b397
imul eax, eax, 3
pop ecx
call fcn.00440897
test eax, eax
jne 0x4381d2
xor eax, eax
jmp 0x439393
push 0x5484fc
call fcn.004147da
pop ecx
mov dword [ebp - 0xbac], 0x3c
push 0x2a
push 0x5304bc
call fcn.004147da
dec dword [ebp - 0xbac]
pop ecx
pop ecx
jne 0x4381e7
push 0x2a
push edi
push str.ZXh_E_co_cV_ta
call fcn.004c6598
pop ecx
pop ecx
mov ecx, eax
push 0x3a
pop eax
call fcn.004c3aba
push eax
push 0x2a
push str._n_c_s_c_n
call fcn.004147da
add esp, 0x10
mov dword [ebp - 0xbac], 0x3c
push 0x2a
push 0x5304bc
call fcn.004147da
dec dword [ebp - 0xbac]
pop ecx
pop ecx
jne 0x438230
cmp esi, edi
push edi
je 0x438278
push str.EY_aQ4_v8YpcWSY8uNt_Qq_jk1N
mov dword [ebp - 0xbac], 0xb
mov dword [ebp - 0xbb4], 0x34b
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x10
jmp 0x438301
push str.tZcfUbEfZgb_llGP_jW5__pW__WrpulHq_wHac1q_P_u__ik
mov dword [ebp - 0xbac], 6
mov dword [ebp - 0xbb4], 0x21f
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push edi
push str.MdeVMTUPEXi__eXhfh_ZWfuj_Edq_ivu__hvyalZpijtUy5_U_9__sb
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push edi
push str.bEWUTQk_bQ_f_EagQl_a_RK3r_TyQ2_neVcg_EQiyQ2uUgmu
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push edi
push str.XdmhiT_EYaSVKVqou_hXq_ahhEagdxgqlTfsbIei_moEZx6qK_4_e
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x40
push edi
push str.a_bPoqIaanUvSYyRaaofhEughraXc3MIL_VTGO_DYE0r
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push edi
push str._Te_UK_UdE_p__WE_ctb_rO_qK6q_A
call fcn.004c6598
push eax
push str._n_n__s
call fcn.004147da
add esp, 0x20
push 0x20
push 0x19
lea eax, [ebp - 0x69c]
call fcn.00434fd4
lea esi, [ebp - 0x69c]
call fcn.004c4699
mov esi, dword [ebp - 0xbac]
lea eax, [ebp - 0x69c]
push eax
lea ecx, [esi + 1]
lea eax, [ebp - 0x4c]
call fcn.004c3b66
lea eax, [ebp + esi - 0x69c]
add esp, 0xc
push eax
call fcn.00512917
mov dword [ebp - 0xbbc], eax
pop ecx
lea eax, [ebp - 0xbcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b62ac
mov eax, dword [ebp - 0xbbc]
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043b508
mov esi, eax
lea eax, [ebp - 0x69c]
push eax
mov dword [ebp - 0xbb8], esi
mov word [ebp - 0xbbe], si
call fcn.005120b0
mov ecx, dword [ebp - 0xbac]
add ecx, 4
add esp, 0x14
cmp eax, ecx
jne 0x438520
lea edx, [ebp - 0x4c]
call fcn.004c69c0
cmp eax, dword [ebp - 0xbb4]
jne 0x438520
xor edi, edi
inc edi
cmp dword [ebp - 0xbbc], esi
mov dword [ebp - 0xbb4], edi
jne 0x43920f
call fcn.004137c2
lea eax, [ebp - 0x4c]
push eax
push 0x40
pop ecx
lea eax, [ebp - 0x8c]
call fcn.004c3b66
pop ecx
push edi
call fcn.004b586f
pop ecx
xor esi, esi
push esi
push esi
call fcn.00439b1d
call fcn.004bda15
mov ecx, 0x5488a4
call fcn.00412f60
push str.Installation__Phase_1_of_5_
call fcn.004142e5
add esp, 0xc
lea eax, [ebp - 0xbdc]
push eax
push esi
xor ecx, ecx
call fcn.0042865d
push ecx
push ecx
lea esi, [ebp - 0xbdc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f05c5
add esp, 0x10
push eax
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f05c5
add esp, 0x10
push eax
call fcn.004f0c1d
push eax
call fcn.0051209e
add esp, 0xc
cmp eax, 7
jle 0x43852d
push 0x5484fc
call fcn.004147da
pop ecx
push 0x37
pop esi
push 0x21
push 0x5304bc
call fcn.004147da
dec esi
pop ecx
pop ecx
jne 0x438481
push esi
push str._ur3EZNuagxU___siggSU_HTm_umausos_fu
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.t_ciY_Qje_Z_UxpHTlecprPj_POUoVmT_jNvV_WUzyeo6uxncUbMm0_3cHge_
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.zZel_oKfcVaUbtehKemh_ekzEsgsuKawp_zp_sa_jwyK___X__nX._h.9amc
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.bOEmX_m_gV_QPccQCk_p_yL_Ucyv_CJpgbqEvlYplaRKd_Q__volf_
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x40
push esi
push str.cKXTooacfY_RYfRul__Te_WE__f_
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004c6598
push eax
push 0x5302ac
call fcn.004147da
push esi
push esi
call fcn.00439b1d
add esp, 0x28
xor eax, eax
call fcn.004352d3
call fcn.00437d48
jmp 0x4381cb
xor esi, esi
mov dword [ebp - 0xbb4], esi
jmp 0x439211
mov ax, word [ebp - 0xbb8]
mov word [ebp - 0xbce], ax
sub esp, 0x10
lea esi, [ebp - 0xbdc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043b7d8
add esp, 0x10
call fcn.0048a53c
test eax, eax
je 0x43859f
push 0x5489dc
call fcn.004147da
pop ecx
xor esi, esi
push esi
push str._Gxs_WcheUoeZcTfglYjwhVUbToWtchaXze_m__ZWJ_phglS
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push str._n_nPress_any_key_to_cancel...
call fcn.004147da
add esp, 0x14
push esi
push esi
call fcn.00439b1d
pop ecx
pop ecx
mov eax, 0x493e0
call fcn.004352d3
jmp 0x4381cb
push 0x548a6c
xor esi, esi
call fcn.004147da
cmp dword [ebp - 0xbb0], esi
pop ecx
push esi
je 0x4385bc
push str.vd_ZGZg_fWaecYkdjhnaK3_.x:ZUY3_kcfzy_2gYk
jmp 0x4385c1
push str.paeTMWgZ_H_fQbump_b_gExW_AMLcWd_sruk_eX
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x10
push esi
push str._nm_Q_lEQZWNZ_evM_eMsdrh_mg__ZoT._f
call fcn.004c6598
push eax
call fcn.00435678
add esp, 0xc
test eax, eax
jne 0x4385f6
push esi
push esi
call fcn.00439b1d
pop ecx
pop ecx
jmp 0x4381cb
push 0x530220
call fcn.004147da
pop ecx
call fcn.00437b77
test eax, eax
je 0x4385e8
push 1
push 1
call fcn.00439b1d
test eax, eax
pop ecx
pop ecx
jne 0x438624
push str.:7:InstallPAULA___encountered_a_problem:_SetPaulaSetupFlag___FAILED___
call fcn.004265da
pop ecx
push esi
push esi
call fcn.0048a119
push eax
call fcn.0042adad
add esp, 0xc
test eax, eax
jne 0x43864a
push esi
push esi
push esi
call fcn.0048a119
pop ecx
pop ecx
mov ecx, eax
call fcn.0042b0ca
pop ecx
push str.ServerSync_
push esi
push esi
call fcn.00489f49
pop ecx
pop ecx
push eax
push 0x533dd4
lea eax, [ebp - 0xba4]
push 0x400
push eax
call fcn.004c53b7
lea eax, [ebp - 0xba4]
add esp, 0x14
push eax
call fcn.0042adad
test eax, eax
pop ecx
jne 0x438690
push esi
lea ecx, [ebp - 0xba4]
call fcn.0042b0ca
pop ecx
push 1
push 0x53886c
push esi
push esi
call fcn.00489f49
pop ecx
pop ecx
push eax
push 0x548b7c
push esi
call fcn.004c5467
add esp, 0x10
push eax
call fcn.00429dfa
push str._nPlease_wait..._This_could_take_a_few_minutes...
call fcn.004147da
add esp, 0xc
push 0xde
lea eax, [ebp - 0x8c]
push eax
push esi
push esi
call fcn.00489f49
mov edi, dword [ebp - 0xba8]
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.004033a2
add esp, 0xc
cmp eax, esi
jne 0x4387c1
push esi
mov ecx, edi
call fcn.0042b397
pop ecx
push eax
call fcn.004033b9
push eax
push edi
push str.:9:InstallPAULA__s__FAILED:_ExpandArchive___FAILED_during_installation.__bBadCheckSum_d:_Archive_size:__d
call fcn.004265da
push str._n_n______________________________________________________________________
call fcn.004147da
add esp, 0x14
call fcn.004033b9
test eax, eax
je 0x43877a
push str._n_ERROR:_The_archive_downloaded_is_corrupt.
call fcn.004147da
mov dword [esp], str._n__This_may_occur_if_the_internet_connection_is_lost_while_downloading.
call fcn.004147da
mov dword [esp], str._n__Please_download_the_PAULA_installation_from_the_web_site_again.
call fcn.004147da
mov dword [esp], str._n__Press_any_key_to_return_to_the_download_page...
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
push str._n_n_nOpening_web_page__please_wait....
call fcn.004147da
mov dword [esp], str.InstallPaula2.exe
push esi
call fcn.0048a237
pop ecx
pop ecx
call fcn.0042a76b
jmp 0x438516
push str._n_ERROR:_The_installation_archive_could_not_be_expanded.
call fcn.004147da
mov dword [esp], str._n__Please_ensure_the_root_drive_is_not_full_and_that_the_downloaded
call fcn.004147da
mov dword [esp], str._n__file_is_accessable.__You_may_call_HoodSoftware_Tech_Support
call fcn.004147da
mov dword [esp], 0x536a30
push str._n__for_help_with_this_issue_at__s.
call fcn.004147da
push str._n__Press_any_key_to_exit...
call fcn.004147da
add esp, 0xc
xor eax, eax
jmp 0x438595
cmp eax, 0xffffffff
jne 0x43888f
lea eax, [ebp - 0x8c]
push eax
push edi
push esi
push str.11_____ra__y6IBBQ90____gTM_c6niXlpnZ__Km1____dn_Df_vBcU2gzhXu_cv_vb.W_LS
call fcn.004c6598
pop ecx
pop ecx
push eax
call fcn.004265da
add esp, 0xc
push 0x5486f8
call fcn.004147da
pop ecx
push 0x3c
pop edi
push 0x21
push 0x5304bc
call fcn.004147da
dec edi
pop ecx
pop ecx
jne 0x4387f6
push esi
push str.xzux6E_fnGkXpb_dmE45_3Er_covcV_ZrQp_yZV_M
call fcn.004c6598
push eax
push str._n__s
call fcn.004147da
push esi
push str.vagZSW__e_IT_Inuhi_hmnXscOcmzQneNgacgZTu_mdTq7jgs0
call fcn.004c6598
push eax
push str._n_________s
call fcn.004147da
mov eax, dword [0x5e23cc]
add esp, 0x20
inc dword [0x5e23cc]
cmp eax, 7
jge 0x438872
push esi
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004c6598
push eax
push str._n_s
call fcn.00435678
add esp, 0x10
test eax, eax
jne 0x439314
push 0x530220
call fcn.004147da
pop ecx
push esi
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.t_gTQLcST_nKHhMtv_FO_
jmp 0x439349
push str.E32Settings.flg
push esi
push esi
call fcn.00489f49
pop ecx
pop ecx
push eax
mov ebx, 0x533dd4
lea eax, [ebp - 0xba4]
push ebx
push eax
call fcn.00511173
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.0042ad00
test eax, eax
je 0x4388fa
call fcn.00415b51
push str.PaulaConfig.cfg
push esi
push esi
mov dword [ebp - 0xbb0], 1
call fcn.00489f49
pop ecx
pop ecx
push eax
push ebx
mov eax, edi
push 0x400
push eax
call fcn.004c53b7
add esp, 0x14
mov eax, edi
call fcn.0042a76b
jmp 0x43894f
cmp dword [ebp - 0xbb0], esi
je 0x438949
push dword [ebp - 0xba8]
push str.:9:InstallPAULA___s___encountered_a_problem:_the_EXE_has_been_flagged_as_a_DEMO_but_the_demo_file_flag_is_not_in_the_archive___
call fcn.004265da
push str._n_n______________________________________
call fcn.004147da
add esp, 0xc
push str._n_ERROR:_The_DEMO_flag_is_missing.
call fcn.004147da
mov dword [esp], str._n________This_is_not_a_demo_
call fcn.004147da
mov dword [esp], str._n________Press_any_key_to_continue_anyway...
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
mov dword [ebp - 0xbb0], esi
push 0x5490c8
call fcn.004147da
mov dword [esp], str._nPerforming_setup..._Please_wait_a_moment..
call fcn.004147da
pop ecx
push 0xa
pop esi
push 0x5320c4
call fcn.004147da
mov dword [esp], 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x438969
push 0x5486f8
call fcn.004147da
pop ecx
push 1
lea ecx, [ebp - 0x69c]
call fcn.0040f68f
pop ecx
mov edx, eax
call fcn.004c3b34
test eax, eax
mov esi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
je 0x438a80
mov edi, str._GetLastError_
push edi
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_ALLUSER__FAILED:__s
call fcn.004265da
add esp, 0xc
push dword [ebp - 0xba8]
push str.:5:InstallPAULA__s__EAP:_The_desktop_icon_could_not_be_placed_on_the_all_users_desktop_
call fcn.00426c01
push 2
lea ecx, [ebp - 0x69c]
call fcn.0040f68f
add esp, 0xc
mov edx, eax
call fcn.004c3b34
test eax, eax
je 0x438a1b
push edi
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_CURRENTUSER__FAILED:__s
call fcn.004265da
add esp, 0xc
lea eax, [ebp - 0x69c]
push str.C:Documents_and_SettingsAll_Users
push eax
call fcn.005123e0
pop ecx
pop ecx
mov ecx, str.PAULA.lnk
lea ebx, [ebp - 0x69c]
call fcn.004c42f0
lea eax, [ebp - 0xba4]
push str.Paula_2.lnk
push eax
call fcn.00489f49
xor ebx, ebx
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
jne 0x438bef
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
jmp 0x438c06
mov ecx, str.PAULA.lnk
lea ebx, [ebp - 0x69c]
call fcn.004c42f0
lea eax, [ebp - 0xba4]
push str.Paula_2.lnk
push eax
call fcn.00489f49
xor ebx, ebx
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
jne 0x438ae6
mov edi, str._GetLastError_
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
jmp 0x4389c9
push 3
push 0x10000000
lea ecx, [ebp - 0x69c]
call fcn.0042ca8a
cmp dword [ebp - 0xbb0], ebx
pop ecx
pop ecx
je 0x438d1e
push ebx
push ebx
call fcn.00489f49
push eax
lea eax, [ebp - 0xba4]
push str._sCounting_Archive.lnk
push eax
call fcn.00511173
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004c3eab
push str.Counting_Archive.lnk
push eax
call fcn.005123f0
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
mov edi, str._GetLastError_
mov esi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
jne 0x438b7b
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
push ebx
push ebx
call fcn.00489f49
push eax
lea eax, [ebp - 0xba4]
push str._sQuick_Keys.lnk
push eax
call fcn.00511173
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004c3eab
push str.Quick_Keys.lnk
push eax
call fcn.005123f0
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
jne 0x438d1e
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
jmp 0x438d1e
xor ebx, ebx
push 3
push 0x10000000
lea ecx, [ebp - 0x69c]
inc ebx
call fcn.0042ca8a
pop ecx
pop ecx
xor eax, eax
cmp dword [ebp - 0xbb0], eax
je 0x438cee
push eax
push eax
call fcn.00489f49
push eax
lea eax, [ebp - 0xba4]
push str._sCounting_Archive.lnk
push eax
call fcn.00511173
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004c3eab
push str.Counting_Archive.lnk
push eax
call fcn.005123f0
push 0
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
jne 0x438c80
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
push 0
push 0
call fcn.00489f49
push eax
lea eax, [ebp - 0xba4]
push str._sQuick_Keys.lnk
push eax
call fcn.00511173
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004c3eab
push str.Quick_Keys.lnk
push eax
call fcn.005123f0
push 0
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0042a5f2
add esp, 0x14
test eax, eax
jne 0x438cee
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.004265da
add esp, 0x14
test ebx, ebx
jne 0x438d1c
push str._n_n____________________________________________
call fcn.004147da
mov dword [esp], str._n_ERROR:_Could_not_create_the_desktop_icon_
call fcn.004147da
mov dword [esp], str._n________Press_any_key...
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
xor ebx, ebx
push 0x5387f4
push ebx
push ebx
call fcn.00489f49
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xba4]
push 0x533dd4
push eax
call fcn.00511173
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.0042ad00
test eax, eax
jne 0x438d90
mov eax, edi
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_Could_not_find___s__
call fcn.004265da
add esp, 0xc
push str._n_n____________________________________________
call fcn.004147da
mov dword [esp], str._n_ERROR:_The_PAULA_installation_FAILED_
call fcn.004147da
mov dword [esp], str._n________Press_any_key...
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
call fcn.0043f39a
test eax, eax
mov esi, str._n_n________________________________________________________
mov edi, str._n__________Press_any_key_to_continue_anyway...
jne 0x438dd5
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateSpawnInstallationScript___FAILED_
call fcn.004265da
push esi
call fcn.004147da
add esp, 0xc
push str._n_WARNING:_Could_not_create_the_spawn_installation_script.
call fcn.004147da
pop ecx
push edi
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
call fcn.0043ecf5
test eax, eax
jne 0x438e10
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateStartupScript___FAILED_
call fcn.004265da
push esi
call fcn.004147da
add esp, 0xc
push str._n_WARNING:_Could_not_create_the_startup_script.
call fcn.004147da
pop ecx
push edi
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
push 0xffffffffffffffff
push ebx
call fcn.00489f49
push eax
push str.HCTC
push str.NET_SHARE___s___s___GRANT:Everyone_READ
mov esi, 0x400
lea eax, [ebp - 0x69c]
push esi
push eax
call fcn.004c53b7
add esp, 0x1c
lea ebx, [ebp - 0x69c]
call fcn.0041544b
mov edi, str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
push edi
call fcn.00416ae0
pop ecx
push 0xffffffffffffffff
push 0
call fcn.00489f49
push eax
push str.HCTC
push str.NET_SHARE___s___s_
mov eax, ebx
push esi
push eax
call fcn.004c53b7
add esp, 0x1c
call fcn.0041544b
push edi
call fcn.00416ae0
mov dword [esp], str.Preparing_for_setup..._n_n_n_n_n_n_n_n_n_n_n_n
call fcn.004147da
pop ecx
push 3
push 0x10000000
push 0xffffffffffffffff
xor ebx, ebx
push ebx
call fcn.00489f49
pop ecx
pop ecx
mov ecx, eax
call fcn.0042ca8a
test eax, eax
pop ecx
pop ecx
jne 0x438edb
push str.One_moment..._n_n
call fcn.004147da
pop ecx
push 3
push 0xc0000000
push 0xffffffffffffffff
push ebx
call fcn.00489f49
pop ecx
pop ecx
mov ecx, eax
call fcn.0042ca8a
test eax, eax
pop ecx
pop ecx
jne 0x438edb
push str.:8:SetFileUserRights___FAILED_during_installation.
call fcn.004265da
pop ecx
push str.E32Settings.flg
push ebx
push ebx
call fcn.00489f49
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xba4]
push 0x533dd4
push eax
call fcn.00511173
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.0042ad00
test eax, eax
je 0x4391ba
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0xbfc], ebx
lea edi, [ebp - 0xbf8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0x103
push edi
lea eax, [ebp - 0x7a3]
push ebx
push eax
mov byte [ebp - 0x7a4], bl
call fcn.005117f0
add esp, 0xc
push edi
lea eax, [ebp - 0x29b]
push ebx
push eax
mov byte [ebp - 0x29c], bl
call fcn.005117f0
add esp, 0xc
mov edi, 0x5c7330
push edi
push ebx
push ebx
call fcn.00489f49
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x29c]
push 0x533dd4
push eax
call fcn.00511173
push ebx
lea ecx, [ebp - 0x29c]
call fcn.0042b0ca
add esp, 0x14
lea eax, [ebp - 0x29c]
push eax
push edi
push str.NET_SHARE___s___s___GRANT:Everyone_FULL
lea eax, [ebp - 0x69c]
push esi
push eax
call fcn.004c53b7
add esp, 0x14
lea ebx, [ebp - 0x69c]
call fcn.0041544b
mov edi, str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
push edi
call fcn.00416ae0
pop ecx
lea eax, [ebp - 0x29c]
push eax
push 0x5c7330
push str.NET_SHARE___s___s_
mov eax, ebx
push esi
push eax
call fcn.004c53b7
add esp, 0x14
call fcn.0041544b
push edi
call fcn.00416ae0
pop ecx
xor ebx, ebx
push ebx
push ebx
call fcn.00489f49
push eax
lea eax, [ebp - 0x7a4]
push str._sSA12_Archive
push eax
call fcn.00511173
add esp, 0x14
lea edi, [ebp - 0x7a4]
call fcn.0042ad00
test eax, eax
mov edi, str._n________Press_any_key_to_continue...
jne 0x43905a
lea eax, [ebp - 0x7a4]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_This_is_a_DEMO_install_but_could_not_find___s__
call fcn.004265da
add esp, 0xc
mov esi, str._n_n________________________________________________________
push esi
call fcn.004147da
mov dword [esp], str._n_ERROR:_Could_not_find_the_SA12_Archive_
call fcn.004147da
pop ecx
push edi
call fcn.004147da
pop ecx
xor eax, eax
call fcn.004352d3
jmp 0x43905f
mov esi, str._n_n________________________________________________________
push str.P2_DC001
push 0x5c7330
push ebx
push ebx
call fcn.00489f49
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x29c]
push str._s_s_sSA12_Archive
push eax
call fcn.00511173
add esp, 0x14
push ebx
lea ecx, [ebp - 0x29c]
call fcn.0042b0ca
test eax, eax
pop ecx
jne 0x4390da
lea eax, [ebp - 0x29c]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateDirectorySuper___s___FAILED_
call fcn.004265da
add esp, 0xc
push esi
call fcn.004147da
pop ecx
lea eax, [ebp - 0x29c]
push eax
push str._n_ERROR:_Could_not_create___s__
call fcn.004147da
push edi
call fcn.004147da
add esp, 0xc
xor eax, eax
call fcn.004352d3
push str._n_nCopying_Virtual_SA12_Data..._n_n_n
call fcn.004147da
pop ecx
lea eax, [ebp - 0x7a4]
push eax
call fcn.005120b0
mov byte [ebp + eax - 0x7a3], bl
pop ecx
lea eax, [ebp - 0x29c]
push eax
call fcn.005120b0
mov byte [ebp + eax - 0x29b], bl
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0x29c]
mov dword [ebp - 0xbf0], eax
pop ecx
lea eax, [ebp - 0xbfc]
push eax
mov dword [ebp - 0xbfc], ebx
mov dword [ebp - 0xbf8], 2
mov word [ebp - 0xbec], 0x710
mov dword [ebp - 0xbe6], ebx
mov dword [ebp - 0xbe2], str.PAULA_is_creating_Virtual_SA12...
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
cmp eax, ebx
je 0x4391ab
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x7a4]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_SHFileOperation___s_____s___FAILED:_error_code__d
call fcn.004265da
add esp, 0x14
push esi
call fcn.004147da
pop ecx
lea eax, [ebp - 0x29c]
push eax
push str._n_ERROR:_SHFileOperation___FAILED_
call fcn.004147da
push edi
call fcn.004147da
add esp, 0xc
xor eax, eax
call fcn.004352d3
jmp 0x4391b8
push ebx
push str.Click2.wav
call fcn.004c0b87
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
call fcn.00439b1d
push str._nDone._n
call fcn.004147da
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00425fec
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b5e1e
call fcn.00425ff3
call fcn.0043781a
push str._n_nPlease_wait_a_moment_for_PAULA_to_start..._n_n
call fcn.004147da
add esp, 0x14
jmp 0x438181
xor esi, esi
lea eax, [ebp - 0x69c]
push str.open
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x439373
lea eax, [ebp - 0x69c]
push str.temp
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x439373
lea eax, [ebp - 0x69c]
push eax
push dword [ebp - 0xba8]
push esi
push str.127_XT_nZd__RZ_HS190___IKrnk_Y_cW_bSeg0___Nnoj7Vpa_2EPQw6QTGpc
call fcn.004c6598
pop ecx
pop ecx
push eax
call fcn.004265da
add esp, 0xc
push 0x5486f8
call fcn.004147da
pop ecx
push 0x3c
pop edi
push 0x21
push 0x5304bc
call fcn.004147da
dec edi
pop ecx
pop ecx
jne 0x439278
push esi
push str.qWQQjjZ_G_eaKaXSakksS_P_Xoo_tpr_oc_ac9
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x10
cmp dword [ebp - 0xbb4], esi
je 0x4392e7
cmp dword [0x5e23c8], esi
jle 0x4392e7
push esi
push str.kVWQh_NQfcLQq_gLk_p_ru_7__wdseWchSMTzwsh_ftobiYo2jRs_ywosP__a
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str.adgdYhlM_npEhaSbsgm_WvnYgdubWk8_m_tkc_Ycm5u_OqWQ_BYs_X
call fcn.004c6598
push eax
push ebx
call fcn.004147da
push esi
push str._bPkRJl_gV_QPc__9YWV__cbdXK__N_gdw_h_lZYGtXi_3pZpc_
call fcn.004c6598
push eax
push ebx
call fcn.004147da
add esp, 0x30
mov eax, dword [0x5e23c8]
inc dword [0x5e23c8]
cmp eax, 7
jge 0x43932d
push esi
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004c6598
push eax
push str._n_n_s
call fcn.00435678
add esp, 0x10
test eax, eax
je 0x439322
push dword [ebp - 0xba8]
call fcn.00437d82
pop ecx
jmp 0x439393
push 0x530220
call fcn.004147da
pop ecx
push esi
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004c6598
push eax
push 0x5302ac
call fcn.004147da
push esi
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004c6598
push eax
push ebx
call fcn.004147da
xor eax, eax
call fcn.004352d3
push str._n_n_n_n_n_n_n
call fcn.004147da
add esp, 0x24
call fcn.00437d65
jmp 0x4381cb
push esi
push esi
call fcn.0048a237
push eax
push str.explorer___s_
call fcn.004154ff
push dword [ebp - 0xba8]
call fcn.00437d82
add esp, 0x14
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051291c
leave
ret