Function at 0x4c7490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5429d4
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
mov eax, dword [0x5938b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x468], 0
mov dword [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040e030
movzx eax, al
test eax, eax
jne 0x4c74f4
lea ecx, [ebp + 8]
push ecx
call fcn.00415610
add esp, 4
movzx edx, al
test edx, edx
jne 0x4c7508
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040ac80
jmp 0x4c7ee4
push 0x10
lea eax, [ebp + 8]
push eax
call fcn.004184b0
add esp, 8
lea ecx, [ebp - 0x220]
push ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004c99b0
mov dword [ebp - 0x3d8], eax
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3dc], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x3dc]
push eax
lea ecx, [ebp + 8]
call fcn.004168e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220]
call fcn.0040ac80
lea ecx, [ebp + 8]
push ecx
call fcn.004153f0
add esp, 4
movzx edx, al
test edx, edx
jne 0x4c757b
lea eax, [ebp + 8]
push eax
call fcn.0042b3a0
add esp, 4
push 0x10
lea ecx, [ebp + 8]
push ecx
call fcn.004184b0
add esp, 8
lea edx, [ebp - 0x238]
push edx
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9a70
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3e4]
push ecx
lea ecx, [ebp + 8]
call fcn.004168e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x238]
call fcn.0040ac80
lea edx, [ebp + 8]
push edx
call fcn.004153f0
add esp, 4
movzx eax, al
test eax, eax
jne 0x4c75ee
lea ecx, [ebp + 8]
push ecx
call fcn.0042b3a0
add esp, 4
lea edx, [ebp + 8]
push edx
call fcn.004153f0
add esp, 4
movzx eax, al
test eax, eax
je 0x4c7614
lea ecx, [ebp + 8]
push ecx
call fcn.00415610
add esp, 4
movzx edx, al
test edx, edx
jne 0x4c7628
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040ac80
jmp 0x4c7ee4
call fcn.00418660
movzx eax, ax
push eax
lea ecx, [ebp + 8]
call fcn.00413950
lea ecx, [ebp - 0x58]
push ecx
call fcn.004ccb10
add esp, 4
mov byte [ebp - 4], 3
push 0x54d5ec
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00416910
add esp, 0xc
mov byte [ebp - 4], 4
push 0x563068
lea ecx, [ebp - 0x1a8]
call fcn.0040e120
mov byte [ebp - 4], 5
push 0x563068
lea ecx, [ebp - 0x1c0]
call fcn.0040e120
mov byte [ebp - 4], 6
push str.2345Pic.exe
lea ecx, [ebp - 0x1d8]
call fcn.0040e120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x268]
push ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9ad0
mov dword [ebp - 0x3e8], eax
mov edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3f0], edx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x250]
push ecx
call fcn.004cca80
add esp, 8
mov dword [ebp - 0x3ec], eax
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f4], edx
mov byte [ebp - 4], 9
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x3f0]
push edx
lea eax, [ebp - 0x1c0]
push eax
mov ecx, dword [ebp - 0x3f4]
push ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x250]
call fcn.0040ac80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x268]
call fcn.0040ac80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1d8]
call fcn.0040ac80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c0]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a8]
call fcn.0040ac80
push 0x54d6c4
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x280]
push eax
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x444]
mov dword [ebp - 0x3f8], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x280]
call fcn.0040ac80
push 0x563068
lea ecx, [ebp - 0x160]
call fcn.0040e120
mov byte [ebp - 4], 0xb
push 0x563068
lea ecx, [ebp - 0x178]
call fcn.0040e120
mov byte [ebp - 4], 0xc
push str.2345PicViewer.exe
lea ecx, [ebp - 0x190]
call fcn.0040e120
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x2b0]
push eax
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9ad0
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x404], ecx
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x190]
push edx
lea eax, [ebp - 0x298]
push eax
call fcn.004cca80
add esp, 8
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x400]
mov dword [ebp - 0x408], ecx
mov byte [ebp - 4], 0xf
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x404]
push ecx
lea edx, [ebp - 0x178]
push edx
mov eax, dword [ebp - 0x408]
push eax
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x298]
call fcn.0040ac80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2b0]
call fcn.0040ac80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x190]
call fcn.0040ac80
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x178]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x160]
call fcn.0040ac80
push 0x54d74c
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x2c8]
push edx
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x410], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.0040ac80
push 0x563068
lea ecx, [ebp - 0x118]
call fcn.0040e120
mov byte [ebp - 4], 0x11
push 0x563068
lea ecx, [ebp - 0x148]
call fcn.0040e120
mov byte [ebp - 4], 0x12
push str.2345PicEdit.exe
lea ecx, [ebp - 0x130]
call fcn.0040e120
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x3d0]
push edx
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9ad0
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x2e0]
push edx
call fcn.004cca80
add esp, 8
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x420], eax
mov byte [ebp - 4], 0x15
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x148]
push ecx
mov edx, dword [ebp - 0x420]
push edx
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2e0]
call fcn.0040ac80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3d0]
call fcn.0040ac80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x130]
call fcn.0040ac80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x148]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x118]
call fcn.0040ac80
push 0x54d6d4
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x2f8]
push ecx
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x464], eax
mov edx, dword [ebp - 0x464]
mov dword [ebp - 0x460], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x460]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f8]
call fcn.0040ac80
push 0x563068
lea ecx, [ebp - 0xd0]
call fcn.0040e120
mov byte [ebp - 4], 0x17
push 0x563068
lea ecx, [ebp - 0xe8]
call fcn.0040e120
mov byte [ebp - 4], 0x18
push str.2345PdfReader.exe
lea ecx, [ebp - 0x100]
call fcn.0040e120
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x328]
push ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9ad0
mov dword [ebp - 0x45c], eax
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x454], edx
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x310]
push ecx
call fcn.004cca80
add esp, 8
mov dword [ebp - 0x458], eax
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x450], edx
mov byte [ebp - 4], 0x1b
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x454]
push edx
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0x450]
push ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x310]
call fcn.0040ac80
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x328]
call fcn.0040ac80
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x100]
call fcn.0040ac80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xe8]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd0]
call fcn.0040ac80
push 0x54d638
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x340]
push eax
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x44c], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x448], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x448]
push edx
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x340]
call fcn.0040ac80
push 0x563068
lea ecx, [ebp - 0x88]
call fcn.0040e120
mov byte [ebp - 4], 0x1d
push 0x563068
lea ecx, [ebp - 0xa0]
call fcn.0040e120
mov byte [ebp - 4], 0x1e
push 0x54d650
lea ecx, [ebp - 0xb8]
call fcn.0040e120
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x370]
push eax
mov ecx, dword [ebp - 0x3d4]
call fcn.004c9ad0
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x438], ecx
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0x358]
push eax
call fcn.004cca80
add esp, 8
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x434], ecx
mov byte [ebp - 4], 0x21
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x438]
push ecx
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x434]
push eax
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x358]
call fcn.0040ac80
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x370]
call fcn.0040ac80
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xb8]
call fcn.0040ac80
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa0]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.0040ac80
push 0x54d714
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x388]
push edx
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x42c], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x388]
call fcn.0040ac80
push str.2345PicUpdate.exe
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x3b8]
push eax
call fcn.00416910
add esp, 0xc
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x28]
push ecx
call fcn.004153f0
add esp, 4
movzx edx, al
test edx, edx
je 0x4c7d6e
lea eax, [ebp - 0x28]
push eax
call fcn.0042b460
add esp, 4
push str.Uninstall.exe
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x40]
push edx
call fcn.00416910
add esp, 0xc
mov byte [ebp - 4], 0x24
push 0x54d738
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
call fcn.00416910
add esp, 0xc
mov dword [ebp - 0x428], eax
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x424], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040e0e0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3a0]
call fcn.0040ac80
lea ecx, [ebp - 0x40]
push ecx
call fcn.004153f0
add esp, 4
movzx edx, al
test edx, edx
je 0x4c7e96
lea eax, [ebp - 0x40]
push eax
call fcn.00415610
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x4c7e96
push 0x563068
lea ecx, [ebp - 0x1f0]
call fcn.0040e120
mov byte [ebp - 4], 0x26
push 0x563068
lea ecx, [ebp - 0x208]
call fcn.0040e120
mov byte [ebp - 4], 0x27
push 0x563068
lea ecx, [ebp - 0x70]
call fcn.0040e120
mov byte [ebp - 4], 0x28
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x1f0]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x208]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x3d4]
call fcn.004047d0
mov ecx, eax
call fcn.004cd1c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x70]
call fcn.0040ac80
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x208]
call fcn.0040ac80
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1f0]
call fcn.0040ac80
jmp 0x4c7ea2
lea ecx, [ebp - 0x28]
push ecx
call fcn.0042b460
add esp, 4
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x40]
call fcn.0040ac80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3b8]
call fcn.0040ac80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.0040ac80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.0040ac80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040ac80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f8545
mov esp, ebp
pop ebp
ret 0x18