Function at 0x43ad2b
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2b7a
mov eax, dword fs:[0]
push eax
mov eax, 0x1a14
call fcn.00492f50
mov eax, dword [0x656514]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x19e8], ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x1770]
mov esi, 0x6411b4
push esi
call fcn.004021c0
xor edi, edi
lea ecx, [ebp - 0x1758]
push esi
mov dword [ebp - 4], edi
call fcn.004021c0
xor eax, eax
lea ecx, [ebp - 0x1740]
inc eax
push esi
mov byte [ebp - 4], al
call fcn.004021c0
push esi
lea ecx, [ebp - 0x1728]
mov byte [ebp - 4], 2
call fcn.004021c0
push esi
lea ecx, [ebp - 0x1710]
mov byte [ebp - 4], 3
call fcn.004021c0
push esi
lea ecx, [ebp - 0x1788]
mov byte [ebp - 4], 4
call fcn.004021c0
push esi
lea ecx, [ebp - 0x16b0]
mov byte [ebp - 4], 5
call fcn.004021c0
xor eax, eax
mov byte [ebp - 4], 6
mov esi, str.1.0.1.3
mov dword [ebp - 0x15f4], 7
push esi
mov dword [ebp - 0x15f8], edi
mov word [ebp - 0x1608], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1608]
call fcn.004022f0
lea eax, [ebp - 0x1608]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1740]
call fcn.00429262
xor esi, esi
lea ecx, [ebp - 0x1620]
push edi
inc esi
push esi
call fcn.004023f0
push edi
push esi
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 6
call fcn.00402230
lea eax, [ebp - 0x1698]
push edi
push eax
call fcn.0041ea3d
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
add esp, 0x10
lea ecx, [ebp - 0x1728]
push eax
call fcn.00429262
push edi
push esi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push edi
push esi
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], 6
call fcn.00402230
push 0x208
lea eax, [ebp - 0x218]
push edi
push eax
call fcn.005a8e00
push 0x208
lea eax, [ebp - 0x628]
push edi
push eax
call fcn.005a8e00
push 0x208
lea eax, [ebp - 0xa38]
push edi
push eax
call fcn.005a8e00
push 0x208
lea eax, [ebp - 0x830]
push edi
push eax
call fcn.005a8e00
add esp, 0x30
lea ecx, [ebp - 0x19dc]
call fcn.0042edd8
lea eax, [ebp - 0x830]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x19dc]
call fcn.0042f8e3
xor eax, eax
mov dword [ebp - 0x15f4], 7
mov dword [ebp - 0x15f8], edi
mov word [ebp - 0x1608], ax
cmp word [ebp - 0x218], ax
jne 0x43af48
mov eax, edi
jmp 0x43af55
lea eax, [ebp - 0x218]
push eax
call fcn.005abff2
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1608]
call fcn.004022f0
lea eax, [ebp - 0x1608]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1770]
call fcn.00429262
push edi
push esi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push edi
push esi
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 9
call fcn.00402230
call fcn.0042b3c1
mov ecx, eax
call fcn.00432005
push eax
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1758]
call fcn.00429262
push edi
push esi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push edi
push esi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 9
call fcn.00402230
push 0x6411b4
lea ecx, [ebp - 0x1638]
call fcn.004021c0
xor eax, eax
mov byte [ebp - 4], 0xc
mov esi, str.PushKeyName
mov dword [ebp - 0x15f4], 7
push esi
mov dword [ebp - 0x15f8], edi
mov word [ebp - 0x1608], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1608]
call fcn.004022f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0xd
call dword [eax + 0x1c]
push edi
mov esi, eax
mov byte [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x1608]
call fcn.00402230
test esi, esi
je 0x43b154
cmp dword [esi + 0x14], 8
jb 0x43b084
mov eax, dword [esi]
jmp 0x43b086
mov eax, esi
push 0x5dc1cc
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
je 0x43b1f9
cmp dword [esi + 0x14], 8
jb 0x43b0a3
mov esi, dword [esi]
push 0x5dc1d4
push esi
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
je 0x43b1f9
xor eax, eax
mov dword [ebp - 0x166c], 7
mov esi, str.false
mov dword [ebp - 0x1670], edi
push esi
mov word [ebp - 0x1680], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1680]
call fcn.004022f0
xor eax, eax
mov byte [ebp - 4], 0xe
mov esi, str.InstallFlag
mov dword [ebp - 0x15f4], 7
push esi
mov dword [ebp - 0x15f8], edi
mov word [ebp - 0x1608], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1608]
call fcn.004022f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1680]
push ecx
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, ebx
call dword [eax + 8]
xor esi, esi
lea ecx, [ebp - 0x1608]
push edi
inc esi
push esi
call fcn.00402230
lea ecx, [ebp - 0x1680]
jmp 0x43b1ee
xor eax, eax
mov dword [ebp - 0x15f4], 7
push str.false
mov dword [ebp - 0x15f8], edi
mov word [ebp - 0x1608], ax
call fcn.005abff2
pop ecx
push eax
push str.false
lea ecx, [ebp - 0x1608]
call fcn.004022f0
xor eax, eax
mov byte [ebp - 4], 0x10
mov esi, str.InstallFlag
mov dword [ebp - 0x166c], 7
push esi
mov dword [ebp - 0x1670], edi
mov word [ebp - 0x1680], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1680]
call fcn.004022f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
lea ecx, [ebp - 0x1680]
mov byte [ebp - 4], 0x11
push ecx
mov ecx, ebx
call dword [eax + 8]
xor esi, esi
lea ecx, [ebp - 0x1680]
push edi
inc esi
push esi
call fcn.00402230
lea ecx, [ebp - 0x1608]
push edi
push esi
mov byte [ebp - 4], 0xc
call fcn.00402230
xor eax, eax
mov dword [ebp - 0x166c], 7
mov esi, str.InstallNeedInstall
mov dword [ebp - 0x1670], edi
push esi
mov word [ebp - 0x1680], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1680]
call fcn.004022f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1680]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x12
call dword [eax + 0x1c]
push edi
mov esi, eax
mov byte [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x1680]
mov dword [ebp - 0x19f8], esi
call fcn.00402230
test esi, esi
je 0x43c575
xor eax, eax
mov dword [ebp - 0x15f4], 7
mov esi, str.InstallSendDC
mov dword [ebp - 0x15f8], edi
push esi
mov word [ebp - 0x1608], ax
call fcn.005abff2
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1608]
call fcn.004022f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x13
call dword [eax + 0x1c]
xor esi, esi
mov byte [ebp - 4], 0xc
push esi
push 1
lea ecx, [ebp - 0x1608]
mov edi, eax
call fcn.00402230
push esi
push esi
lea ecx, [ebp - 0x1650]
mov dword [ebp - 0x1640], esi
mov dword [ebp - 0x163c], esi
call fcn.00402230
push str.InstallSendSoft
lea ecx, [ebp - 0x1650]
call fcn.004022a0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1650]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x14
call dword [eax + 0x1c]
push 0
push 1
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
mov esi, eax
call fcn.00402230
and dword [ebp - 0x19fc], 0
test edi, edi
je 0x43b329
cmp dword [edi + 0x14], 8
jb 0x43b31c
mov edi, dword [edi]
push str.true
push edi
call fcn.005abf90
pop ecx
pop ecx
test esi, esi
je 0x43b358
cmp dword [esi + 0x14], 8
jb 0x43b335
mov esi, dword [esi]
push str.true
push esi
call fcn.005abf90
pop ecx
pop ecx
mov ecx, dword [ebp - 0x19fc]
test eax, eax
push 1
pop edi
cmove ecx, edi
mov dword [ebp - 0x19fc], ecx
jmp 0x43b35b
xor edi, edi
inc edi
push 0xffffffffffffffff
xor esi, esi
lea eax, [ebp - 0x1758]
push esi
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1770]
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push str.ShuRuFa
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x16
call fcn.004202da
push esi
push edi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push str.WanNeng
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x18
call fcn.004202da
push esi
push edi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1740]
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x1a
call fcn.004202da
push esi
push edi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x1c
call fcn.004202da
push esi
push edi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x1650]
call fcn.00402120
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x1620]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x1e
call fcn.004202da
push esi
push edi
lea ecx, [ebp - 0x1620]
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0xc
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1728]
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
lea edi, [ebx + 0x10]
test edi, edi
je 0x43b78f
push str.SoftCheck
lea ecx, [ebp - 0x1650]
call fcn.00402120
mov eax, dword [edi]
lea ecx, [ebp - 0x1650]
push ecx
mov ecx, edi
mov byte [ebp - 4], 0x1f
call dword [eax + 0x1c]
mov ecx, dword [ebp - 0x19e8]
push eax
call fcn.00438849
mov esi, eax
mov byte [ebp - 4], 0xc
xor eax, eax
lea ecx, [ebp - 0x1650]
push 0
inc eax
push eax
call fcn.00402230
test esi, esi
je 0x43b6b2
push str.true
lea ecx, [ebp - 0x1608]
call fcn.00402120
push str.InstallFlag
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0x20
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0x21
push ecx
mov ecx, ebx
call dword [eax + 8]
xor esi, esi
lea ecx, [ebp - 0x1650]
xor edi, edi
push esi
inc edi
push edi
call fcn.00402230
push esi
push edi
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 0xc
call fcn.00402230
jmp 0x43b78f
lea ecx, [ebp - 0x19e4]
call fcn.00426d72
push edi
lea ecx, [ebp - 0x19e4]
mov byte [ebp - 4], 0x22
call fcn.004562c2
push str.InstallExist
lea ecx, [ebp - 0x1650]
call fcn.00402120
mov eax, dword [edi]
lea ecx, [ebp - 0x1650]
push ecx
mov ecx, edi
mov byte [ebp - 4], 0x23
call dword [eax + 0x1c]
xor edi, edi
mov byte [ebp - 4], 0x22
push 0
inc edi
lea ecx, [ebp - 0x1650]
push edi
mov esi, eax
call fcn.00402230
test esi, esi
je 0x43b77e
cmp dword [esi + 0x14], 8
jb 0x43b712
mov esi, dword [esi]
push str.true
push esi
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43b77e
push str.true
lea ecx, [ebp - 0x1608]
call fcn.00402120
push str.InstallFlag
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0x24
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
lea ecx, [ebp - 0x1650]
mov byte [ebp - 4], 0x25
push ecx
mov ecx, ebx
call dword [eax + 8]
xor esi, esi
lea ecx, [ebp - 0x1650]
push esi
push edi
call fcn.00402230
push esi
push edi
lea ecx, [ebp - 0x1608]
call fcn.00402230
jmp 0x43b780
xor esi, esi
lea ecx, [ebp - 0x19e4]
mov byte [ebp - 4], 0xc
call fcn.00401c50
push str.PushName
lea ecx, [ebp - 0x1650]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1650]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x26
call dword [eax + 0x1c]
mov edi, eax
mov byte [ebp - 4], 0xc
xor eax, eax
lea ecx, [ebp - 0x1650]
push esi
inc eax
push eax
call fcn.00402230
push str.PushNameEx
lea ecx, [ebp - 0x1608]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1608]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x27
call dword [eax + 0x1c]
mov dword [ebp - 0x1a10], eax
lea ecx, [ebp - 0x1608]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.ChooseInstall
lea ecx, [ebp - 0x17a0]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x17a0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x28
call dword [eax + 0x1c]
mov dword [ebp - 0x1a20], eax
lea ecx, [ebp - 0x17a0]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.DownloadFlag
lea ecx, [ebp - 0x17b8]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x17b8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x29
call dword [eax + 0x1c]
mov dword [ebp - 0x1a1c], eax
lea ecx, [ebp - 0x17b8]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.InstallFlag
lea ecx, [ebp - 0x17d0]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x17d0]
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, ebx
call dword [eax + 0x1c]
mov dword [ebp - 0x1a18], eax
lea ecx, [ebp - 0x17d0]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.CreateProcessFlag
lea ecx, [ebp - 0x16e0]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x16e0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x2b
call dword [eax + 0x1c]
mov dword [ebp - 0x1a14], eax
lea ecx, [ebp - 0x16e0]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.InstallPushPos
lea ecx, [ebp - 0x16f8]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x16f8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x2c
call dword [eax + 0x1c]
mov dword [ebp - 0x1a04], eax
lea ecx, [ebp - 0x16f8]
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
push eax
call fcn.00402230
push str.InstallCheckName
lea ecx, [ebp - 0x1698]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1698]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x2d
call dword [eax + 0x1c]
mov esi, eax
mov byte [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x1a08], esi
push 0
inc eax
lea ecx, [ebp - 0x1698]
push eax
call fcn.00402230
push str.WriteShutCutNameToReg
lea ecx, [ebp - 0x1620]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1620]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x2e
call dword [eax + 0x1c]
mov dword [ebp - 0x1a0c], eax
lea ecx, [ebp - 0x1620]
xor eax, eax
mov byte [ebp - 4], 0xc
push 0
inc eax
push eax
call fcn.00402230
test esi, esi
je 0x43b9f7
cmp dword [esi + 0x14], 8
jb 0x43b9b9
mov eax, dword [esi]
jmp 0x43b9bb
mov eax, esi
push 0x5dc1cc
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
je 0x43b9e9
cmp dword [esi + 0x14], 8
jb 0x43b9d6
mov eax, dword [esi]
jmp 0x43b9d8
mov eax, esi
push 0x5dc1d4
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43b9f7
mov ecx, dword [ebp - 0x19e8]
push 0
push esi
call fcn.00442d39
xor eax, eax
mov dword [ebp - 0x19f4], eax
mov dword [ebp - 0x19ec], eax
mov dword [ebp - 0x19f0], eax
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19f8]
cmp dword [eax + 0x14], 8
jb 0x43ba1f
mov eax, dword [eax]
push str.true
push eax
call fcn.005abf90
pop ecx
pop ecx
xor ecx, ecx
test eax, eax
push 1
pop eax
cmove ecx, eax
mov eax, dword [ebp - 0x1a20]
mov dword [ebp - 0x19f8], ecx
test eax, eax
je 0x43ba6f
cmp dword [eax + 0x14], 8
jb 0x43ba4e
mov eax, dword [eax]
push str.true
push eax
call fcn.005abf90
pop ecx
pop ecx
mov ecx, dword [ebp - 0x19f4]
test eax, eax
push 1
pop eax
cmove ecx, eax
mov dword [ebp - 0x19f4], ecx
mov eax, dword [ebp - 0x1a1c]
test eax, eax
je 0x43baa2
cmp dword [eax + 0x14], 8
jb 0x43ba81
mov eax, dword [eax]
push str.true
push eax
call fcn.005abf90
pop ecx
pop ecx
mov ecx, dword [ebp - 0x19ec]
test eax, eax
push 1
pop eax
cmove ecx, eax
mov dword [ebp - 0x19ec], ecx
mov eax, dword [ebp - 0x1a18]
test eax, eax
je 0x43bad5
cmp dword [eax + 0x14], 8
jb 0x43bab4
mov eax, dword [eax]
push str.true
push eax
call fcn.005abf90
pop ecx
pop ecx
mov ecx, dword [ebp - 0x19f0]
test eax, eax
push 1
pop eax
cmove ecx, eax
mov dword [ebp - 0x19f0], ecx
mov eax, dword [ebp - 0x1a14]
test eax, eax
je 0x43bb08
cmp dword [eax + 0x14], 8
jb 0x43bae7
mov eax, dword [eax]
push str.true
push eax
call fcn.005abf90
pop ecx
pop ecx
mov ecx, dword [ebp - 0x19e4]
test eax, eax
push 1
pop eax
cmove ecx, eax
mov dword [ebp - 0x19e4], ecx
push 0x5d9d50
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
push 0x6411b4
lea ecx, [ebp - 0x1788]
call fcn.00437f01
test edi, edi
je 0x43bc69
cmp dword [edi + 0x14], 8
jb 0x43bb3a
mov eax, dword [edi]
jmp 0x43bb3c
mov eax, edi
push eax
lea ecx, [ebp - 0x1620]
call fcn.00402120
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x16e0]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1710]
call fcn.00429262
xor eax, eax
lea ecx, [ebp - 0x16e0]
push 0
inc eax
push eax
call fcn.004023f0
xor eax, eax
mov byte [ebp - 4], 0xc
push 0
inc eax
lea ecx, [ebp - 0x1620]
push eax
call fcn.00402230
cmp dword [edi + 0x14], 8
jb 0x43bb9d
mov eax, dword [edi]
jmp 0x43bb9f
mov eax, edi
push eax
lea ecx, [ebp - 0x1620]
call fcn.00402120
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x16e0]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1788]
call fcn.00429262
xor eax, eax
lea ecx, [ebp - 0x16e0]
push 0
inc eax
push eax
call fcn.004023f0
xor eax, eax
mov byte [ebp - 4], 0xc
push 0
inc eax
lea ecx, [ebp - 0x1620]
push eax
call fcn.00402230
mov eax, dword [ebp - 0x1a10]
test eax, eax
je 0x43bc79
cmp dword [eax + 0x14], 8
jb 0x43bc08
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x1620]
call fcn.00402120
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x16e0]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1710]
mov byte [ebp - 4], 0x32
call fcn.004202da
xor eax, eax
lea ecx, [ebp - 0x16e0]
push 0
inc eax
push eax
call fcn.004023f0
xor eax, eax
mov byte [ebp - 4], 0xc
push 0
inc eax
lea ecx, [ebp - 0x1620]
push eax
call fcn.00402230
jmp 0x43bc79
push str.NoApp
lea ecx, [ebp - 0x1710]
call fcn.00437f01
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x1710]
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
cmp dword [ebp - 0x19f8], 0
lea ecx, [ebp - 0x1638]
je 0x43be67
push 0x5dc1ec
call fcn.00437fbe
push 0x5dc1ec
lea ecx, [ebp - 0x16b0]
call fcn.00437f01
cmp dword [ebp - 0x19f4], 0
lea ecx, [ebp - 0x1638]
je 0x43be56
push 0x5dc1ec
call fcn.00437fbe
push 0x5dc1ec
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
cmp dword [ebp - 0x19ec], 0
lea ecx, [ebp - 0x1638]
je 0x43be21
push 0x5dc1ec
call fcn.00437fbe
push 0x5dc1ec
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
cmp dword [ebp - 0x19f0], 0
lea ecx, [ebp - 0x1638]
je 0x43bdc3
push 0x5dc1ec
call fcn.00437fbe
push str._t1_t1
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
mov ecx, dword [ebp - 0x19e8]
push 0
push esi
call fcn.00442d39
cmp dword [ebp - 0x1a0c], 0
je 0x43bdac
lea esi, [ebx + 0x10]
test esi, esi
je 0x43bdac
push str.DestopShortName
lea ecx, [ebp - 0x1620]
call fcn.00402120
mov eax, dword [esi]
lea ecx, [ebp - 0x1620]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x33
call dword [eax + 0x1c]
mov esi, eax
mov byte [ebp - 4], 0xc
xor eax, eax
lea ecx, [ebp - 0x1620]
push 0
inc eax
push eax
call fcn.00402230
mov ecx, dword [ebp - 0x19e8]
push esi
push dword [ebp - 0x1a08]
call fcn.00442d39
cmp dword [edi + 0x14], 8
jb 0x43bdb6
mov eax, dword [edi]
jmp 0x43bdb8
mov eax, edi
push eax
push str._s_Install_Successed___
jmp 0x43be4d
mov esi, 0x5dc248
push esi
call fcn.00437fbe
push esi
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
cmp dword [ebp - 0x19e4], 0
lea ecx, [ebp - 0x16b0]
je 0x43be07
push 0x5dc1ec
call fcn.00437fbe
cmp dword [edi + 0x14], 8
jb 0x43bdfd
mov eax, dword [edi]
jmp 0x43bdff
mov eax, edi
push eax
push str._s_Install_Faild_CreateProcess_OK___
jmp 0x43be4d
push esi
call fcn.00437fbe
cmp dword [edi + 0x14], 8
jb 0x43be17
mov eax, dword [edi]
jmp 0x43be19
mov eax, edi
push eax
push str._s_Install_Faild_CreateProcess_Faild___
jmp 0x43be4d
push str._t0_t0
call fcn.00437fbe
push str._t0_t0_t0
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
cmp dword [edi + 0x14], 8
jb 0x43be45
mov eax, dword [edi]
jmp 0x43be47
mov eax, edi
push eax
push str._s_pDownloadFlagString_Faild___
call fcn.0042c9be
pop ecx
pop ecx
jmp 0x43be81
push str._t0_t0_t0
call fcn.00437fbe
push str._t0_t0_t0_t0
jmp 0x43be76
push str._t0_t0_t0_t0
call fcn.00437fbe
push str._t0_t0_t0_t0_t0
lea ecx, [ebp - 0x16b0]
call fcn.00437fbe
mov esi, dword [ebp - 0x1a04]
lea ecx, [ebp - 0x1638]
test esi, esi
je 0x43bf03
push 0x5d9d50
call fcn.00437fbe
cmp dword [esi + 0x14], 8
jb 0x43bea3
mov esi, dword [esi]
push esi
lea ecx, [ebp - 0x1620]
call fcn.00402120
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x1698]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0x35
push esi
push eax
lea ecx, [ebp - 0x1638]
call fcn.004202da
xor eax, eax
lea ecx, [ebp - 0x1698]
push esi
inc eax
push eax
call fcn.004023f0
xor eax, eax
mov byte [ebp - 4], 0xc
push esi
inc eax
lea ecx, [ebp - 0x1620]
push eax
call fcn.00402230
jmp 0x43bf0d
push 0x5dc248
call fcn.00437fbe
cmp dword [ebp - 0x19ec], 0
je 0x43c143
cmp dword [ebp - 0x19f0], 0
jne 0x43c143
push str.PushErrCode
lea ecx, [ebp - 0x1620]
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1620]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x36
call dword [eax + 0x1c]
mov esi, eax
mov byte [ebp - 4], 0xc
xor eax, eax
lea ecx, [ebp - 0x1620]
push 0
inc eax
push eax
call fcn.00402230
test esi, esi
jne 0x43bf6e
push 0x5dc1ec
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43bf78
mov eax, dword [esi]
jmp 0x43bf7a
mov eax, esi
push 0x5dc054
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43bf95
push 0x5dc358
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43bf9f
mov eax, dword [esi]
jmp 0x43bfa1
mov eax, esi
push str.CompressFailed
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43bfbc
push 0x5dc35c
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43bfc6
mov eax, dword [esi]
jmp 0x43bfc8
mov eax, esi
push str.ShotCutExist
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43bfe3
push 0x5dc360
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43bfed
mov eax, dword [esi]
jmp 0x43bfef
mov eax, esi
push str.CreateShortCutFailed
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43c00a
push 0x5dc364
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43c014
mov eax, dword [esi]
jmp 0x43c016
mov eax, esi
push str.AppDataPathError
push eax
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43c031
push 0x5dc368
jmp 0x43c148
cmp dword [esi + 0x14], 8
jb 0x43c039
mov esi, dword [esi]
push str.CreateShortCutSuccess
push esi
call fcn.005abf90
pop ecx
pop ecx
test eax, eax
jne 0x43c153
push 0x5dc36c
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
call fcn.0042b3c1
mov ecx, eax
call fcn.00451a2c
push eax
lea ecx, [ebp - 0x1608]
call fcn.00402120
push 0x640078
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x37
call fcn.00402120
test edi, edi
je 0x43c11e
cmp dword [ebp - 0x15f4], 8
lea eax, [ebp - 0x1608]
cmovae eax, dword [ebp - 0x1608]
cmp dword [edi + 0x14], 8
jb 0x43c0b0
mov ecx, dword [edi]
jmp 0x43c0b2
mov ecx, edi
push eax
push 0
push ecx
push str.UpdateRecord
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0x208
mov esi, eax
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.005a8e00
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x420]
push 0x6412f4
push eax
call fcn.0042cdd3
add esp, 0x18
lea eax, [ebp - 0x1608]
cmp dword [ebp - 0x15f4], 8
cmovae eax, dword [ebp - 0x1608]
cmp dword [edi + 0x14], 8
jb 0x43c10a
mov edi, dword [edi]
push eax
lea eax, [ebp - 0x420]
push eax
push edi
push str.UpdateRecord
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor esi, esi
lea ecx, [ebp - 0x1620]
push 0
inc esi
push esi
call fcn.00402230
push 0
push esi
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 0xc
call fcn.00402230
jmp 0x43c153
push 0x5dc248
lea ecx, [ebp - 0x1638]
call fcn.00437fbe
mov esi, 0xbb8
lea eax, [ebp - 0x15f0]
push esi
push 0
push eax
call fcn.005a8e00
add esp, 0xc
mov dword [ebp - 0x1a00], esi
lea ecx, [ebp - 0x1668]
push 0x6411b4
call fcn.004021c0
lea eax, [ebp - 0x1770]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x1668]
call fcn.00404490
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
push str.WanNeng
lea ecx, [ebp - 0x1620]
call fcn.00402120
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x1698]
push eax
call fcn.0041fd35
pop ecx
pop ecx
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0x3a
push esi
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
xor edi, edi
lea ecx, [ebp - 0x1698]
push esi
inc edi
push edi
call fcn.004023f0
push esi
push edi
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x38
call fcn.00402230
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
or edi, 0xffffffff
lea eax, [ebp - 0x1740]
push edi
push esi
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
push edi
push esi
lea eax, [ebp - 0x1758]
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
push edi
push esi
lea eax, [ebp - 0x1728]
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
push edi
mov edi, dword [ebp - 0x19e8]
lea ecx, [ebp - 0x1668]
push esi
lea eax, [edi + 0x40]
push eax
call fcn.004202da
push 0x5d9d50
lea ecx, [ebp - 0x1668]
call fcn.00437fbe
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1710]
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x16b0]
push eax
lea ecx, [ebp - 0x1668]
call fcn.004202da
lea eax, [ebp - 0x1668]
push eax
lea eax, [ebp - 0x16f8]
push eax
call fcn.0041f684
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1668]
call fcn.00429262
xor eax, eax
lea ecx, [ebp - 0x16f8]
push esi
inc eax
push eax
call fcn.004023f0
cmp dword [ebp - 0x1654], 0x10
lea ecx, [ebp - 0x1a00]
push ecx
lea ecx, [ebp - 0x15f0]
push ecx
push dword [ebp - 0x1658]
lea eax, [ebp - 0x1668]
cmovae eax, dword [ebp - 0x1668]
push eax
call fcn.0041c16e
add esp, 0x10
lea ecx, [ebp - 0x19dd]
call fcn.00447ae0
lea eax, [ebp - 0x15f0]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x19dd]
call fcn.0044abab
push str.http:__
lea ecx, [ebp - 0x16c8]
call fcn.004021c0
push str.tjtv3.wn51.com
lea ecx, [ebp - 0x16c8]
mov byte [ebp - 4], 0x3c
call fcn.00437fbe
push str._kb.php_data
lea ecx, [ebp - 0x16c8]
call fcn.00437fbe
lea eax, [ebp - 0x15f0]
push eax
lea ecx, [ebp - 0x16c8]
call fcn.00437fbe
cmp dword [ebp - 0x19fc], esi
jne 0x43c549
lea eax, [ebp - 0x16c8]
mov ecx, edi
push eax
call fcn.0043cd23
test eax, eax
jne 0x43c4bd
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
lea eax, [ebp - 0x16c8]
mov ecx, edi
push eax
call fcn.0043cd23
test eax, eax
jne 0x43c4bd
push 0x3e8
call esi
lea eax, [ebp - 0x16c8]
mov ecx, edi
push eax
call fcn.0043cd23
test eax, eax
jne 0x43c4bd
push 0x3e8
call esi
lea eax, [ebp - 0x16c8]
mov ecx, edi
push eax
call fcn.0043cd23
test eax, eax
jne 0x43c4bd
push str.false
lea ecx, [ebp - 0x1698]
call fcn.00402120
push str.InstallSendSoft
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x40
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1698]
push ecx
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x41
push ecx
mov ecx, ebx
call dword [eax + 8]
xor edi, edi
lea ecx, [ebp - 0x1620]
xor ebx, ebx
push edi
inc ebx
push ebx
call fcn.00402230
push edi
push ebx
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], 0x3c
call fcn.00402230
lea eax, [ebp - 0x16c8]
push eax
lea eax, [ebp - 0x16f8]
push eax
call fcn.0041f725
pop ecx
pop ecx
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x42
jb 0x43c49e
mov eax, dword [eax]
push eax
push str.fail:_s
call fcn.0042cb9f
pop ecx
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x16f8]
call fcn.00402230
jmp 0x43c54e
push str.true
lea ecx, [ebp - 0x1698]
call fcn.00402120
push str.InstallSendSoft
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x3d
call fcn.00402120
mov eax, dword [ebx]
lea ecx, [ebp - 0x1698]
push ecx
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, ebx
call dword [eax + 8]
xor edi, edi
lea ecx, [ebp - 0x1620]
xor ebx, ebx
push edi
inc ebx
push ebx
call fcn.00402230
push edi
push ebx
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], 0x3c
call fcn.00402230
lea eax, [ebp - 0x16c8]
push eax
lea eax, [ebp - 0x16f8]
push eax
call fcn.0041f725
pop ecx
pop ecx
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x3f
jb 0x43c53e
mov eax, dword [eax]
push eax
push str.ok:_s
jmp 0x43c4a4
xor ebx, ebx
xor edi, edi
inc ebx
push edi
push ebx
lea ecx, [ebp - 0x16c8]
call fcn.004023f0
lea ecx, [ebp - 0x19dd]
call fcn.00401c50
push edi
push ebx
lea ecx, [ebp - 0x1668]
call fcn.004023f0
jmp 0x43c578
xor ebx, ebx
inc ebx
push edi
push ebx
lea ecx, [ebp - 0x1638]
call fcn.004023f0
lea ecx, [ebp - 0x19dc]
call fcn.00401c50
push edi
push ebx
lea ecx, [ebp - 0x16b0]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1788]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1710]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1728]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1740]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1758]
call fcn.004023f0
push edi
push ebx
lea ecx, [ebp - 0x1770]
call fcn.004023f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00492e23
mov esp, ebp
pop ebp
ret 4