Function at 0x4463e9
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse pe header

Disassembly:
push 0x1b8
mov eax, 0x48bd98
call fcn.0045edb6
mov ebx, ecx
mov dword [ebp - 0x1b8], ebx
and dword [ebp - 0x1bc], 0
lea ecx, [ebp - 0xb8]
push str.UniAccessAgent.ini
call fcn.0041ba7d
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push eax
lea edx, [ebx + 0x28]
lea ecx, [ebp - 0x104]
call fcn.0041e1f8
pop ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.0041bf1b
push str.prepare_ini_from_section_start_file
lea ecx, [ebp - 0x9c]
call fcn.0041ba7d
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
mov edi, 0x4b6c30
push eax
push 0x18e
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, edi
call fcn.0040875a
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call fcn.0041bf1b
push str.lva.ini
lea ecx, [ebp - 0x9c]
call fcn.0041ba7d
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x9c]
call fcn.00406ea9
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.0041bf1b
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0041b6a4
push 0x49e4a0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.0041ba7d
push str.get_file_from_pe_section_lva.ini_to
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.0041ba7d
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x191
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, edi
call fcn.0040875a
lea ecx, [ebp - 0x9c]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0041bf1b
test esi, esi
je 0x4466a4
push str._failed.
lea ecx, [ebp - 0x80]
call fcn.0041ba7d
push 8
pop ebx
push str.get_file_from_pe_section
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.0041ba7d
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x195
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, edi
call fcn.0040875a
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.0041bf1b
push 2
push 0x64
pop edi
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b6b34], 0
jne 0x447642
push 0x4a0ebc
lea ecx, [ebp - 0x80]
call fcn.0041ba7d
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.0041ba7d
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446665
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x44666f
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
jmp 0x447642
lea ecx, [ebp - 0x104]
call fcn.004068ae
mov esi, eax
mov eax, edx
mov dword [ebp - 0x1b4], eax
push 0x64
pop edi
test eax, eax
jg 0x44684a
jl 0x4466ce
cmp esi, edi
ja 0x44684a
push str._Must_Cust_Error...
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
push ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x1b4]
push esi
call fcn.0041b624
push str.size
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.0041ba7d
push str.GetFileLen::
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b6c30
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x19f
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, ebx
call fcn.0040875a
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x9c]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0041bf1b
push 2
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b6b34], 0
jne 0x446842
push 0x4a0ebc
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0041ba7d
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x64]
call fcn.004453a8
add esi, 4
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x446808
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446812
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
push 0x65
pop edi
jmp 0x447642
lea ecx, [ebp - 0xe8]
call fcn.0040e9ce
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041bc23
lea ecx, [ebp - 0xe8]
call fcn.0040f28a
push str.UUID
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
mov esi, str.Main
mov byte [ebp - 4], 0x15
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebx + 0x60]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.CustTime
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.0041ba7d
lea eax, [ebx + 0x7c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.package_name
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.0041ba7d
lea esi, [ebx + 0x98]
mov byte [ebp - 4], 0x1a
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push 0x49c634
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.0041f116
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.0041bc23
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.str_x86_url
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
mov esi, str.Main
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebx + 0x15c]
mov byte [ebp - 4], 0x1e
push eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.str_x64_url
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.0041ba7d
lea eax, [ebx + 0x178]
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x1c4], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.ins_user
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.0041ba7d
lea eax, [ebx + 0x194]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.ins_pass
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.0041ba7d
lea esi, [ebx + 0x1b0]
mov byte [ebp - 4], 0x24
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.ins_domain
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.0041ba7d
lea eax, [ebx + 0x1cc]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push 0x49c634
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.0041f116
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.0041bc23
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.UseBeeDwn
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.0041ba7d
lea eax, [ebx + 0x278]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f627
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.ServerIP
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
mov esi, str.AgentCOMM
mov byte [ebp - 4], 0x2b
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebx + 0xb4]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.OnlineServerIP
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2d
call fcn.0041ba7d
lea eax, [ebx + 0xd0]
mov byte [ebp - 4], 0x2e
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.ServerPort
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
call fcn.0041ba7d
lea eax, [ebx + 0xec]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.WebPort
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x31
call fcn.0041ba7d
lea eax, [ebx + 0x108]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041bf1b
push str.BeeServerPort
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.0041ba7d
add ebx, 0x27c
mov byte [ebp - 4], 0x34
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f627
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
cmp dword [ebx], 0
jne 0x446d42
mov dword [ebx], 0x9914
lea ecx, [ebp - 0x120]
call fcn.0041b469
push str.MainTitle
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x35
call fcn.0041ba7d
mov ebx, str.Main
mov byte [ebp - 4], 0x36
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
lea ecx, [ebp - 0x13c]
call fcn.0041b469
push str.PartnerAgentName
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041ba7d
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.0041ba7d
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fa22
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
mov ebx, 0x49c634
lea ecx, [ebp - 0x2c]
push ebx
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x64]
call fcn.0041f116
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x11c]
call fcn.0041e62b
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
push ebx
lea ecx, [ebp - 0x80]
call fcn.0041ba7d
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3d
push eax
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x64]
call fcn.0041efcc
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x138]
call fcn.0041e62b
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
push 8
pop ebx
cmp dword [ebp - 0x108], ebx
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
push 0x100
push 0x4b68e8
call fcn.00468172
mov esi, dword [ebp - 0x1b8]
add esp, 0xc
cmp dword [esi + 0x11c], 0
jne 0x446eef
push 0xa
push 0x50
lea ecx, [ebp - 0x2c]
call fcn.0041b6a4
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [esi + 0x10c]
call fcn.0041e62b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
push str._strCustOnlineServerIP
lea ecx, [ebp - 0xb8]
call fcn.0041ba7d
push str._WebPort
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
call fcn.0041ba7d
push str._ServerIP
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x41
call fcn.0041ba7d
push str._strCustTime
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.0041ba7d
push str.strCustGUID
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.0041ba7d
lea eax, [esi + 0xd0]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x4b6c30
push eax
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [esi + 0x7c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1d3
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, 0x4b6c30
call fcn.0040875a
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x9c]
call fcn.0041bf1b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
mov ecx, esi
call fcn.00445c0b
cmp dword [0x4b68c0], 0
mov esi, eax
mov dword [ebp - 0x1b8], esi
je 0x4470ad
test esi, esi
je 0x447040
cmp esi, 1
je 0x447040
cmp esi, 2
jne 0x4470ad
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0041b6a4
push str.update_judge_ret
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.0041ba7d
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x2c]
mov ebx, 0x4b6c30
push eax
push 0x1db
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, ebx
call fcn.0040884b
mov ecx, eax
call fcn.00407854
mov ecx, eax
call fcn.00407854
push eax
mov ecx, ebx
call fcn.0040875a
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
call fcn.0041bf1b
push 0xfffffffffffffffd
jmp 0x447608
push str..msi
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
mov ecx, dword [ebp - 0x1c0]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.0041d190
test al, al
je 0x447115
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
push 0
push eax
mov dword [ebp - 0x1b4], 3
call fcn.0041d190
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x44711c
mov byte [ebp - 0x1ad], 0
test byte [ebp - 0x1b4], 2
je 0x44712d
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x38
call fcn.0041bf1b
cmp byte [ebp - 0x1ad], 0
je 0x447313
cmp esi, 1
je 0x44724d
cmp esi, 2
je 0x44724d
test esi, esi
jne 0x44760b
push 2
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b6b34], esi
jne 0x447209
push 0x4a0ebc
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.0041ba7d
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x80]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x64]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4471cb
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4471d5
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
push eax
push 0x1f1
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b6c30
push 3
mov ecx, ebx
call fcn.0040884b
mov ecx, eax
call fcn.00407854
push eax
mov ecx, ebx
call fcn.0040875a
lea ecx, [ebp - 0x2c]
jmp 0x447601
push 2
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b6b34], 0
jne 0x4472f4
push 0x4a0ebc
lea ecx, [ebp - 0x48]
call fcn.0041ba7d
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.0041ba7d
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x80]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x64]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4472b6
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4472c0
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
push eax
push 0x1e9
jmp 0x4473fe
cmp esi, 1
je 0x447321
cmp esi, 2
jne 0x447436
cmp dword [0x4b6b34], 0
jne 0x447436
push 2
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x4a0ebc
lea ecx, [ebp - 0x9c]
call fcn.0041ba7d
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x50
call fcn.0041ba7d
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1ac]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x190]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x447396
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4473a0
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.0041bf1b
lea ecx, [ebp - 0x1ac]
call fcn.0041bf1b
lea ecx, [ebp - 0x80]
call fcn.0041bf1b
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
cmp esi, 6
je 0x447430
push str.Artificial__exit
lea ecx, [ebp - 0x2c]
call fcn.0041ba7d
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x53
push eax
push 0x1fe
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b6c30
push 3
mov ecx, ebx
call fcn.0040884b
mov ecx, eax
call fcn.00407854
push eax
mov ecx, ebx
call fcn.0040875a
lea ecx, [ebp - 0x2c]
call fcn.0041bf1b
or edi, 0xffffffff
jmp 0x447621
mov esi, dword [ebp - 0x1b8]
test esi, esi
jne 0x44760b
push 2
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b6b34], esi
jne 0x44760b
push 0x4a0ebc
lea ecx, [ebp - 0x64]
call fcn.0041ba7d
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x54
call fcn.0041ba7d
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x174]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x158]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4474b2
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4474bc
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.0041bf1b
lea ecx, [ebp - 0x174]
call fcn.0041bf1b
lea ecx, [ebp - 0xb8]
call fcn.0041bf1b
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
cmp esi, 6
jne 0x4475c2
push 0x4a0ebc
lea ecx, [ebp - 0xb8]
call fcn.0041ba7d
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x57
call fcn.0041ba7d
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x158]
call fcn.004453a8
mov esi, eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x174]
call fcn.004453a8
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x447558
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x447562
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.0041bf1b
lea ecx, [ebp - 0x158]
call fcn.0041bf1b
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x38
call fcn.0041bf1b
cmp esi, 6
je 0x44760b
push str.current_version_have_already_setup__exit
lea ecx, [ebp - 0x64]
call fcn.0041ba7d
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
push eax
push 0x20e
jmp 0x4475dc
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x64]
call fcn.0041ba7d
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5b
push eax
push 0x214
push str.e:works10760uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b6c30
push 3
mov ecx, ebx
call fcn.0040884b
mov ecx, eax
call fcn.00407854
push eax
mov ecx, ebx
call fcn.0040875a
lea ecx, [ebp - 0x64]
call fcn.0041bf1b
push 0xfffffffffffffffe
pop edi
jmp 0x447621
push 1
push edi
push 0x8d2
push dword [0x4b6b08]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
lea ecx, [ebp - 0x13c]
call fcn.0041bf1b
lea ecx, [ebp - 0x120]
call fcn.0041bf1b
lea ecx, [ebp - 0xe8]
call fcn.0040e9f1
lea ecx, [ebp - 0x104]
call fcn.0041bf1b
mov eax, edi
call fcn.0045ed60
ret