Function at 0x475ea0
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x4dc368
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x50c620]
xor eax, esp
mov dword [esp + 0x88], eax
push esi
push edi
mov eax, dword [0x50c620]
xor eax, esp
push eax
lea eax, [esp + 0x9c]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [esp + 0xac]
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov dword [esp + 0xa4], eax
lea ecx, [esp + 0x64]
push 0xa
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
push str.HaoZip.dll
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], eax
mov word [esp + 0x6c], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 1
xor eax, eax
push 0xa
mov dword [esp + 0x60], 0
lea ecx, [esp + 0x50]
mov dword [esp + 0x64], 0
push str.HaoZip.exe
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 2
xor eax, eax
push 6
mov dword [esp + 0x90], 0
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 0
push 0x4ecfe8
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 3
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x88]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 2
cmp dword [esp + 0x90], 8
jb 0x476012
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], 1
cmp dword [esp + 0x60], 8
jb 0x47604a
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x78], 8
jb 0x47607b
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp byte [esp + 0x2f], al
je 0x476197
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 9
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
mov ecx, edi
push eax
call fcn.00478540
mov al, byte [esp + 0x84]
test al, al
je 0x476123
cmp al, 6
je 0x476123
cmp al, 7
jne 0x476135
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x476181
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0xa
mov ecx, esi
push 0x4f0645
push str.A0350
call fcn.0049efd0
mov byte [esp + 0xa4], 0xb
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 9
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x47625d
push 5
mov dword [esp + 0x78], eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], eax
push str.A0450
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], eax
mov byte [esp + 0x6c], al
call fcn.00402710
mov byte [esp + 0xa4], 0xc
lea ecx, [esp + 0x7c]
push 0x4ecfe8
call fcn.00402470
mov byte [esp + 0xa4], 0xd
lea eax, [esp + 0x64]
push esi
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0xc
cmp dword [esp + 0x90], 8
jb 0x476211
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x78], 0x10
jb 0x476248
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
push 0x10
xor eax, eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x50]
push str.2345ImageApp.dll
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0xe
xor eax, eax
push 0x11
mov dword [esp + 0x90], 0
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 0
push str.2345PicViewer.exe
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0xf
xor eax, eax
push 7
mov dword [esp + 0x78], 0
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], 0
push 0x4ecffc
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x10
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0xf
cmp dword [esp + 0x78], 8
jb 0x47636a
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0xe
cmp dword [esp + 0x90], 8
jb 0x47639f
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x4763d6
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x4764f2
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x16
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
mov ecx, edi
push eax
call fcn.00479ea0
mov al, byte [esp + 0x84]
test al, al
je 0x47647e
cmp al, 6
je 0x47647e
cmp al, 7
jne 0x476490
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x4764dc
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0x17
mov ecx, esi
push 0x4f0655
push str.A0351
call fcn.0049efd0
mov byte [esp + 0xa4], 0x18
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 0x16
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x4765b8
push 5
mov dword [esp + 0x78], eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], eax
push str.A0451
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], eax
mov byte [esp + 0x6c], al
call fcn.00402710
mov byte [esp + 0xa4], 0x19
lea ecx, [esp + 0x7c]
push 0x4ecffc
call fcn.00402470
mov byte [esp + 0xa4], 0x1a
lea eax, [esp + 0x64]
push esi
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x19
cmp dword [esp + 0x90], 8
jb 0x47656c
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x78], 0x10
jb 0x4765a3
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
push 0xa
xor eax, eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x50]
push str.chrome.dll
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x1b
xor eax, eax
push 0x10
mov dword [esp + 0x90], 0
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 0
push 0x4ed194
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x1c
xor eax, eax
push 0xc
mov dword [esp + 0x78], 0
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], 0
push 0x4ecfc8
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x1d
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x1c
cmp dword [esp + 0x78], 8
jb 0x4766c5
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x1b
cmp dword [esp + 0x90], 8
jb 0x4766fa
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x476731
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x47684d
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x23
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
mov ecx, edi
push eax
call fcn.0047ba90
mov al, byte [esp + 0x84]
test al, al
je 0x4767d9
cmp al, 6
je 0x4767d9
cmp al, 7
jne 0x4767eb
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x476837
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0x24
mov ecx, esi
push 0x4f0665
push str.A0352
call fcn.0049efd0
mov byte [esp + 0xa4], 0x25
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 0x23
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x476913
push 5
mov dword [esp + 0x78], eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], eax
push str.A0452
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], eax
mov byte [esp + 0x6c], al
call fcn.00402710
mov byte [esp + 0xa4], 0x26
lea ecx, [esp + 0x7c]
push 0x4ecfc8
call fcn.00402470
mov byte [esp + 0xa4], 0x27
lea eax, [esp + 0x64]
push esi
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x26
cmp dword [esp + 0x90], 8
jb 0x4768c7
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x78], 0x10
jb 0x4768fe
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
push 0x14
xor eax, eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x50]
push str.2345PinyinUpdate.exe
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x28
xor eax, eax
push 0xe
mov dword [esp + 0x90], 0
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 0
push str.2345Pinyin.ime
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x29
xor eax, eax
push 0xa
mov dword [esp + 0x78], 0
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], 0
push 0x4ed010
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], ax
call fcn.00402ad0
mov byte [esp + 0xa4], 0x2a
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x29
cmp dword [esp + 0x78], 8
jb 0x476a20
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x28
cmp dword [esp + 0x90], 8
jb 0x476a55
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x476a8c
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x476ba6
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x2c
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.0047d280
mov al, byte [esp + 0x84]
test al, al
je 0x476b32
cmp al, 6
je 0x476b32
cmp al, 7
jne 0x476b44
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x476b90
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0x2d
mov ecx, esi
push 0x4f0675
push str.A0354
call fcn.0049efd0
mov byte [esp + 0xa4], 0x2e
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 0x2c
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x476c4f
push str.A0454
lea ecx, [esp + 0x80]
call fcn.004023e0
mov byte [esp + 0xa4], 0x2f
lea ecx, [esp + 0x64]
push 0x4ed010
call fcn.00402470
mov byte [esp + 0xa4], 0x30
lea eax, [esp + 0x7c]
push esi
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x2f
cmp dword [esp + 0x78], 8
jb 0x476c00
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x90], 0x10
jb 0x476c34
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], 0
mov byte [esp + 0x7c], 0
push str.2345SafeTray.exe
lea ecx, [esp + 0x50]
call fcn.00402470
mov byte [esp + 0xa4], 0x31
lea ecx, [esp + 0x7c]
push str.2345MPCSafe.exe
call fcn.00402470
mov byte [esp + 0xa4], 0x32
lea ecx, [esp + 0x64]
push 0x4ed02c
call fcn.00402470
mov byte [esp + 0xa4], 0x33
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x32
cmp dword [esp + 0x78], 8
jb 0x476ccc
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x31
cmp dword [esp + 0x90], 8
jb 0x476d01
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x476d38
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x476e54
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x35
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
mov ecx, edi
push eax
call fcn.0047e3e0
mov al, byte [esp + 0x84]
test al, al
je 0x476de0
cmp al, 6
je 0x476de0
cmp al, 7
jne 0x476df2
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x476e3e
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0x36
mov ecx, esi
push 0x4f0685
push str.A0355
call fcn.0049efd0
mov byte [esp + 0xa4], 0x37
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 0x35
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x476efd
push str.A0455
lea ecx, [esp + 0x80]
call fcn.004023e0
mov byte [esp + 0xa4], 0x38
lea ecx, [esp + 0x64]
push 0x4ed02c
call fcn.00402470
mov byte [esp + 0xa4], 0x39
lea eax, [esp + 0x7c]
push esi
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x38
cmp dword [esp + 0x78], 8
jb 0x476eae
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x90], 0x10
jb 0x476ee2
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], 0
mov byte [esp + 0x7c], 0
push str.2345SoftSvc.exe
lea ecx, [esp + 0x50]
call fcn.00402470
mov byte [esp + 0xa4], 0x3a
lea ecx, [esp + 0x7c]
push str.2345SoftMgr.exe
call fcn.00402470
mov byte [esp + 0xa4], 0x3b
lea ecx, [esp + 0x64]
push str.2345SoftMgr
call fcn.00402470
mov byte [esp + 0xa4], 0x3c
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x3b
cmp dword [esp + 0x78], 8
jb 0x476f7a
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x3a
cmp dword [esp + 0x90], 8
jb 0x476faf
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x476fe6
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x477102
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x3e
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
mov ecx, edi
push eax
call fcn.0047fba0
mov al, byte [esp + 0x84]
test al, al
je 0x47708e
cmp al, 6
je 0x47708e
cmp al, 7
jne 0x4770a0
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x4770ec
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
call fcn.0049dda0
mov byte [esp + 0xa4], 0x3f
mov ecx, esi
push 0x4f06d5
push str.A0356
call fcn.0049efd0
mov byte [esp + 0xa4], 0x40
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0049e100
mov byte [esp + 0xa4], 0x3e
lea ecx, [esp + 0x14]
call fcn.0049df60
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x4771ab
push str.A0456
lea ecx, [esp + 0x80]
call fcn.004023e0
mov byte [esp + 0xa4], 0x41
lea ecx, [esp + 0x64]
push str.2345SoftMgr
call fcn.00402470
mov byte [esp + 0xa4], 0x42
lea eax, [esp + 0x7c]
push esi
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x41
cmp dword [esp + 0x78], 8
jb 0x47715c
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x90], 0x10
jb 0x477190
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], 0
mov byte [esp + 0x7c], 0
push str.2345SafeCenterSvc.exe
lea ecx, [esp + 0x50]
call fcn.00402470
mov byte [esp + 0xa4], 0x43
lea ecx, [esp + 0x7c]
push str.2345RTProtect.exe
call fcn.00402470
mov byte [esp + 0xa4], 0x44
lea ecx, [esp + 0x64]
push str.2345SafeCenter
call fcn.00402470
mov byte [esp + 0xa4], 0x45
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0046b240
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x44
cmp dword [esp + 0x78], 8
jb 0x477228
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x43
cmp dword [esp + 0x90], 8
jb 0x47725d
push dword [esp + 0x7c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x60], 8
jb 0x477294
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp byte [esp + 0x2f], al
je 0x477576
xorps xmm0, xmm0
movdqu xmmword [esp + 0x7c], xmm0
movq qword [esp + 0x8c], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [esp + 0x84], eax
and eax, 0xffffff00
mov dword [esp + 0x84], eax
and eax, 0xfffffeff
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0xa4], 0x47
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], 0
call fcn.0048f670
mov byte [esp + 0xa4], 0x48
xor eax, eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov byte [esp + 0xa4], 0x49
lea ecx, [esp + 0x64]
push str.SOFTWARE_
call fcn.00402470
mov byte [esp + 0xa4], 0x4a
lea ecx, [esp + 0x64]
push str.2345SafeCenter
call fcn.00406010
push str.RunningMode
lea ecx, [esp + 0x18]
call fcn.00402470
mov byte [esp + 0xa4], 0x4b
lea eax, [esp + 0x4c]
cmp dword [esp + 0x60], 8
mov dword [esp + 0x5c], 0
cmovae eax, dword [esp + 0x4c]
xor ecx, ecx
mov word [eax], cx
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
push 0x80000002
lea ecx, [esp + 0x58]
call fcn.0048f870
mov byte [esp + 0x2f], al
mov byte [esp + 0xa4], 0x4a
cmp dword [esp + 0x28], 8
jb 0x4773f5
push dword [esp + 0x14]
call fcn.004b17b6
mov al, byte [esp + 0x33]
add esp, 4
xor ecx, ecx
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], 0
mov word [esp + 0x14], cx
test al, al
je 0x47746e
mov edx, 0x4ed888
lea ecx, [esp + 0x4c]
call fcn.004030c0
test al, al
je 0x47746e
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.00482480
lea ecx, [esp + 0x7c]
call fcn.0049ead0
test al, al
jne 0x4774e0
sub esp, 0x18
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0049dda0
mov byte [esp + 0xbc], 0x4c
mov ecx, esi
push str.A0359
call fcn.0049f410
jmp 0x4774d1
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004812a0
mov al, byte [esp + 0x84]
test al, al
je 0x477490
cmp al, 6
je 0x477490
cmp al, 7
jne 0x4774a2
lea ecx, [esp + 0x7c]
call fcn.0049ea40
test eax, eax
sete al
test al, al
jne 0x4774e0
sub esp, 0x18
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0049dda0
mov byte [esp + 0xbc], 0x4d
mov ecx, esi
push 0x4f0765
push str.A0358
call fcn.0049efd0
mov byte [esp + 0xbc], 0x4a
mov ecx, eax
call fcn.0049e040
mov byte [esp + 0xa4], 0x49
cmp dword [esp + 0x78], 8
jb 0x4774fb
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0xa4], 0x48
cmp dword [esp + 0x60], 8
jb 0x47752d
push dword [esp + 0x4c]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov byte [esp + 0xa4], 0x47
push dword [esp + 0x48]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x48], 0
mov byte [esp + 0xa4], 0
lea ecx, [esp + 0x7c]
call fcn.0049df60
jmp 0x477613
push str.A0458
lea ecx, [esp + 0x68]
call fcn.004023e0
mov byte [esp + 0xa4], 0x4e
lea ecx, [esp + 0x14]
push str.2345SafeCenter
call fcn.00402470
mov byte [esp + 0xa4], 0x4f
lea eax, [esp + 0x64]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00487250
mov byte [esp + 0xa4], 0x4e
cmp dword [esp + 0x28], 8
jb 0x4775cd
push dword [esp + 0x14]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], 0
mov word [esp + 0x14], ax
mov byte [esp + 0xa4], al
cmp dword [esp + 0x78], 0x10
jb 0x4775fe
push dword [esp + 0x64]
call fcn.004b17b6
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
mov dword [esp + 0xa4], 0xffffffff
cmp dword [esp + 0x44], 8
jb 0x477631
push dword [esp + 0x30]
call fcn.004b17b6
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov ecx, dword [esp + 0x9c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.004b0ff2
add esp, 0x9c
ret 4