Function at 0x4b15fd
Capabilities:
Contain obfuscated stackstrings
Identify system language via api

Disassembly:
push 0x40
mov eax, 0x4fcbe8
call fcn.004cb630
mov ebx, edx
mov esi, ecx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x4c], esi
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
mov eax, dword [0x5df834]
cmp eax, dword [edi + 4]
jle 0x4b1670
push 0x5df834
call fcn.004cb09a
cmp dword [0x5df834], 0xffffffff
pop ecx
jne 0x4b1670
xor eax, eax
mov dword [ebp - 4], eax
mov dword [0x5df828], eax
mov dword [0x5df82c], eax
call fcn.0040184d
push 0x4fe5a7
mov dword [0x5df828], eax
call fcn.004caec2
or dword [ebp - 4], 0xffffffff
mov dword [esp], 0x5df834
call fcn.004cb050
pop ecx
mov eax, dword [0x5df830]
cmp eax, dword [edi + 4]
jle 0x4b16b8
push 0x5df830
call fcn.004cb09a
or edi, 0xffffffff
pop ecx
cmp dword [0x5df830], edi
jne 0x4b16bb
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov ecx, 0x804
cmp ax, cx
push 0x5df830
sete byte [0x5df824]
call fcn.004cb050
pop ecx
jmp 0x4b16bb
or edi, 0xffffffff
cmp byte [0x5df824], 0
je 0x4b1ae8
cmp dword [0x5df82c], 0
jne 0x4b1f2b
push 0x5281d4
lea ecx, [ebp - 0x48]
call fcn.004408c6
push 0x5281c0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 1
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528250
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 3
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 4
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528210
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 5
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 6
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528318
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 7
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 8
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x5282b4
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 9
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xa
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x5283e0
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xb
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xc
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528388
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xd
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xe
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str._rN_e
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OS_NOT_SUPPORT
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xf
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x10
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528414
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_PACAGE_INIT
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x11
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x12
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528428
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_BEGIN_DOWNLOAD
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x13
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x14
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x5284e8
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_DOWN_OK
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x15
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x16
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528508
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_DOWN_FAILED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x17
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x18
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push 0x528480
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_CHECK_RETRY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x19
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x1a
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.iRYO_vN
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_SURPLUS_TIME
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x1b
call fcn.004408c6
mov byte [ebp - 4], 0x1c
jmp 0x4b1f03
cmp dword [0x5df82c], 0
jne 0x4b1f2b
push str.Tips
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push 0x5281c0
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x1d
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x1e
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.You_must_cust_the_param_before_you_run_the_program
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x1f
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x20
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.You_have_installed_other_version
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x21
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x22
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.You_have_installed_the_same_version__please_unintalled_first.
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x23
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x24
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.You_have_installed_other_version___do_you_want_to_install_force
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x25
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x26
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.You_have_installed_the_same_version__do_you_want_to_install_force
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x27
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x28
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Please_make_sure_angain
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x29
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x2a
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.The_Os_not_supported
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_MUST_OS_NOT_SUPPORT
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x2b
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x2c
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Package_init...
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_PACAGE_INIT
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x2d
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x2e
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Downloading...
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_BEGIN_DOWNLOAD
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x2f
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x30
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Download_OK
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_DOWN_OK
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x31
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x32
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Download_Failed...
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_DOWN_FAILED
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x33
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x34
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Check_file_failed_retry__times__time...
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_CHECK_RETRY
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x35
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x36
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push str.Suplus_download_Time:about__surplus__seconds
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push str.MSG_SURPLUS_TIME
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x37
call fcn.004408c6
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x48]
push eax
call fcn.00429eb8
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 4]
call fcn.00443405
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], edi
call fcn.00440d6c
push ebx
lea eax, [ebp - 0x4c]
push eax
call fcn.0045a665
mov ecx, dword [eax]
cmp ecx, dword [0x5df828]
je 0x4b1f4c
add ecx, 0x2c
push ecx
mov ecx, esi
call fcn.00440923
jmp 0x4b1f58
push 0x51f46c
mov ecx, esi
call fcn.004408c6
mov eax, esi
call fcn.004cb5da
ret