Function at 0x447ab3
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
push 0x2f4
mov eax, 0x48ba68
call fcn.0045e574
push 5
push 0x66
xor eax, eax
mov dword [ebp - 0x2c0], eax
mov edi, dword [0x4b5b94]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0x8d2
push dword [0x4b5b60]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2c4], edi
call ebx
lea ecx, [ebp - 0x278]
call fcn.00404d4b
cmp dword [ebp - 0x278], 5
lea ecx, [ebp - 0x260]
je 0x448fd9
call fcn.0041bb22
lea ecx, [ebp - 0x2b4]
call fcn.00404d4b
cmp dword [ebp - 0x2a8], 5
lea ecx, [ebp - 0x29c]
jl 0x448fd9
call fcn.0041bb22
lea ecx, [ebp - 0x128]
call fcn.00404de3
push str.UniAccessAgent_Net_Installer
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 4
call fcn.0041b69b
mov byte [ebp - 4], 5
lea edx, [ebp - 0x108]
cmp dword [ebp - 0xf4], 8
lea ecx, [ebp - 0x124]
cmovae edx, dword [ebp - 0x108]
cmp dword [ebp - 0x110], 8
cmovae ecx, dword [ebp - 0x124]
call fcn.00441743
mov ebx, 0x4b5c30
test eax, eax
je 0x447c03
push 0xa
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b2c2
push str.FirewallOpen_res
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 6
call fcn.0041b69b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xb8]
mov ecx, ebx
push eax
push 0x31e
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0xb8]
call fcn.0041bb22
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.0041bb22
lea edx, [edi + 0x224]
lea ecx, [edi + 0x208]
call fcn.00411f64
lea ecx, [ebp - 0x2c]
call fcn.00404c21
push eax
lea ecx, [edi + 0x240]
mov byte [ebp - 4], 8
call fcn.0041b82a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041bb22
lea esi, [edi + 0x25c]
mov byte [ebp - 0x2b5], 0
lea edx, [ebp - 0x2b5]
mov ecx, esi
call fcn.004476b5
cmp byte [ebp - 0x2b5], 0
jne 0x447c62
mov ecx, esi
call fcn.0041d511
lea ecx, [ebp - 0x2c]
call fcn.00404de3
push eax
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 9
call fcn.0041b82a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
call fcn.00405334
push eax
lea ecx, [edi + 0x28]
mov byte [ebp - 4], 0xa
call fcn.0041b82a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041bb22
push str.08A6D228_353A_4AB0_B89F_0B1C04351B6E_VIP
lea ecx, [ebp - 0xb8]
call fcn.0041b69b
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x128]
call fcn.0041e21c
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
call fcn.0041dc07
push eax
lea ecx, [edi + 0x1ec]
mov byte [ebp - 4], 0xc
call fcn.0041b82a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041bb22
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xf
push 0x66
push 0x8d2
push dword [0x4b5b60]
call esi
mov ecx, edi
mov byte [ebp - 0x2b5], 0
call fcn.00445f4d
test eax, eax
je 0x447d9a
push 0xa
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b2c2
push str.prepare_cust_ini_from_section_failed_iRet
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.0041b69b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xb8]
mov ecx, ebx
push eax
push 0x338
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0xb8]
call fcn.0041bb22
lea ecx, [ebp - 0x48]
call fcn.0041bb22
call fcn.004471b9
jmp 0x448fc3
push 0x14
push 0x66
push 0x8d2
push dword [0x4b5b60]
call esi
mov ecx, edi
call fcn.004471ee
xor ebx, ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], ebx
mov dword [ebp - 0x2d4], ebx
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e0], ebx
mov byte [ebp - 4], 0x11
cmp dword [edi + 0xe4], ebx
je 0x447e08
lea eax, [edi + 0xd0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.004042d5
push 0x4a0aac
lea ecx, [ebp - 0xb8]
call fcn.0041b69b
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [edi + 0xb4]
call fcn.0041d823
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x11
call fcn.0041bb22
mov esi, dword [ebp - 0x2e8]
mov dword [ebp - 0x2fc], 0x1c
cmp esi, dword [ebp - 0x2e4]
je 0x447e88
push 0x1c
pop edi
push esi
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.004490e1
add esi, edi
cmp esi, dword [ebp - 0x2e4]
jne 0x447e5f
mov edi, dword [ebp - 0x2c4]
lea ecx, [ebp - 0xf0]
call fcn.0041b087
mov byte [ebp - 4], 0x13
cmp dword [edi + 0x170], ebx
je 0x447f2c
lea esi, [edi + 0x17c]
cmp dword [esi + 0x10], ebx
je 0x447f2c
lea eax, [edi + 0x15c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b6f8
push 0x1c
pop eax
mov byte [ebp - 4], al
call fcn.00405284
test al, al
je 0x447ed5
push esi
lea ecx, [ebp - 0x44]
call fcn.0041e21c
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.004042d5
cmp dword [ebp - 0xdc], 0
jne 0x447f14
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c1f5
add eax, 4
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0xec]
call fcn.0041e21c
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x2b5], 1
mov byte [ebp - 4], 0x13
call fcn.0041bb22
jmp 0x448115
push str.lva_setup_
lea ecx, [ebp - 0xb8]
call fcn.0041b69b
mov byte [ebp - 4], 0x14
call fcn.00405284
test al, al
je 0x447f71
push str.lva_setup64_
lea ecx, [ebp - 0x48]
call fcn.0041b69b
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041e21c
lea ecx, [ebp - 0x48]
call fcn.0041bb22
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x2d0]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x448104
lea eax, [edi + 0x10c]
mov dword [ebp - 0x2c0], eax
lea eax, [edi + 0x80]
mov dword [ebp - 0x2bc], eax
xor edi, edi
lea ecx, [ebp - 0x48]
call fcn.0041b087
push str..exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.0041b69b
push str._uai_download_downloadAgent.htm_filedownload_uai_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x17
call fcn.0041b69b
push 0x49b6d4
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x18
call fcn.0041b69b
push str.http:__
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x19
call fcn.0041b69b
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x44]
push eax
call fcn.004086f5
lea eax, [esi + 4]
add eax, edi
lea ecx, [ebp - 0x44]
push eax
call fcn.004086f5
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea ecx, [ebp - 0xd4]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.0041bb22
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.004042d5
cmp dword [ebp - 0xdc], 0
jne 0x4480d9
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c1f5
add eax, 4
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xec]
call fcn.0041e21c
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x48]
call fcn.0041bb22
mov eax, dword [ebp - 0x2cc]
inc ebx
sub eax, dword [ebp - 0x2d0]
push 0x1c
pop ecx
cdq
add edi, ecx
idiv ecx
cmp ebx, eax
jb 0x447fa5
mov edi, dword [ebp - 0x2c4]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x13
call fcn.0041bb22
xor ebx, ebx
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.0041cd97
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041bb22
push 0x50
pop ecx
push 0x62
pop eax
test bl, bl
cmove ecx, eax
push ecx
push 0x66
push 0x8d2
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x64]
call fcn.00405334
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x1e
push ecx
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.0041dde9
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x20
call fcn.0041bb22
xor ebx, ebx
cmp dword [edi + 0x1a8], ebx
je 0x448256
cmp dword [edi + 0x1c4], ebx
je 0x448256
push str.LVASetupTmp_
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x21
call fcn.00405202
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.0041dde9
pop ecx
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.0041bb22
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041c1f5
add eax, 4
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x25
call fcn.0041bb22
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041d3d9
test eax, eax
je 0x44824e
push ebx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c2aa
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.00406158
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x25
call fcn.0041bb22
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0041e21c
lea ecx, [ebp - 0x48]
call fcn.0041bb22
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
mov word [ebp - 0x2ec], 1
mov dword [ebp - 0x2f8], 0x4a1074
push 1
mov ecx, edi
mov byte [ebp - 4], 0x28
call fcn.004474b0
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2dc]
sub eax, ecx
push 0xffffffffffffff9c
pop ebx
push 0x1c
cdq
pop esi
idiv esi
and dword [ebp - 0x2c0], 0
test eax, eax
je 0x448ea9
xor eax, eax
mov dword [ebp - 0x2c4], eax
add eax, ecx
lea ecx, [ebp - 0x48]
push eax
call fcn.0041b6f8
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041b69b
push str.try_to_download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
call fcn.0041b69b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x64]
mov esi, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x393
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041bb22
xor esi, esi
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
lea ecx, [ebp - 0x80]
call fcn.00406aed
mov eax, dword [edi + 0x278]
cmp eax, 1
je 0x44836d
cmp eax, 3
jne 0x4483e2
push dword [edi + 0x27c]
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.0043d6c1
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x4483c0
cmp byte [ebp - 0x2b5], al
jne 0x44880d
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447848
mov ebx, eax
test ebx, ebx
je 0x448860
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x44880d
cmp ebx, 0xfffffc15
je 0x448343
cmp dword [edi + 0x278], 3
je 0x448343
push 0xa
push ebx
lea ecx, [ebp - 0xd4]
call fcn.0041b2c2
push str._ret
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2c
call fcn.0041b69b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2d
call fcn.0041b69b
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2e
call fcn.0041b69b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3ba
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x29
call fcn.0041bb22
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.00418553
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
test ebx, ebx
jne 0x448508
cmp byte [ebp - 0x2b5], al
jne 0x44880d
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447848
mov ebx, eax
test ebx, ebx
je 0x448860
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x44880d
push str._to
lea ecx, [ebp - 0x64]
call fcn.0041b69b
push str.ZDownloadWithIE_Failed_Try_WinHttp_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.0041b69b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x64]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3c7
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041bb22
lea ecx, [ebp - 0x80]
call fcn.00406aed
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.0044774c
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x4485e2
cmp byte [ebp - 0x2b5], al
jne 0x44880d
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447848
mov ebx, eax
test ebx, ebx
je 0x448860
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x44880d
push str._to
lea ecx, [ebp - 0x64]
call fcn.0041b69b
push str.WinHttp_Failed_Try_WinINet_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.0041b69b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x64]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3d5
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041bb22
lea ecx, [ebp - 0x80]
call fcn.00406aed
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.0044774c
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x4486bc
cmp byte [ebp - 0x2b5], al
jne 0x44880d
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447848
mov ebx, eax
test ebx, ebx
je 0x448860
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x44880d
cmp dword [edi + 0x278], 2
jne 0x448343
lea eax, [ebp - 0x2f8]
push 0x9914
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.0043d6c1
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x448724
cmp byte [ebp - 0x2b5], al
jne 0x44880d
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447848
mov ebx, eax
test ebx, ebx
je 0x448860
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x44880d
push 0xa
push ebx
lea ecx, [ebp - 0xd4]
call fcn.0041b2c2
push str._ret
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x34
call fcn.0041b69b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x35
call fcn.0041b69b
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.0041b69b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x9c]
mov ecx, 0x4b5c30
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3f0
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, 0x4b5c30
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x29
call fcn.0041bb22
jmp 0x448343
test ebx, ebx
je 0x448860
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041bb22
mov ecx, dword [ebp - 0x2dc]
push 0x1c
pop eax
add dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2d8]
sub eax, ecx
mov esi, dword [ebp - 0x2c0]
cdq
inc esi
idiv dword [ebp - 0x2fc]
mov dword [ebp - 0x2c0], esi
cmp esi, eax
mov eax, dword [ebp - 0x2c4]
jb 0x4482b0
mov esi, 0x4b5c30
jmp 0x448917
push str._OK.
lea ecx, [ebp - 0x9c]
call fcn.0041b69b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x38
call fcn.0041b69b
push str.download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.0041b69b
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x80]
mov esi, 0x4b5c30
push eax
lea eax, [ebp - 0x64]
mov ecx, esi
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3f9
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041bb22
test ebx, ebx
jne 0x448ea9
push 2
mov ecx, edi
call fcn.004474b0
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041cd97
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041bb22
test bl, bl
je 0x448aa0
lea ecx, [ebp - 0x23c]
call fcn.0041768e
push str.MsiExec.exe__qn__i
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.0041b69b
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x80]
call fcn.0041bbe0
push eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x64]
call fcn.0041dde9
pop ecx
add eax, 4
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x238]
call fcn.0041e21c
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.0041bb22
lea ecx, [ebp - 0xd4]
call fcn.0040510c
add eax, 4
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x214]
call fcn.0041e21c
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x42
call fcn.0041bb22
or dword [ebp - 0x21c], 0xffffffff
lea eax, [edi + 0x198]
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x220], 5
call fcn.0041e21c
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041e21c
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.0041e21c
lea ecx, [ebp - 0x23c]
call fcn.00417f3a
mov ebx, eax
lea eax, [ebp - 0xb8]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.004176f4
push eax
push 0x41b
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
mov byte [ebp - 4], 0x4a
call fcn.0040853d
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0xb8]
call fcn.0041bb22
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x28
call fcn.00412ca6
jmp 0x448ceb
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041bbe0
push 0x49c1b0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.0041b69b
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea eax, [edi + 0x48]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.0041bb22
push str._NoQueryBox
lea ecx, [ebp - 0x64]
call fcn.0041b69b
xor ebx, ebx
mov byte [ebp - 4], 0x4d
push ebx
lea eax, [ebp - 0x64]
push eax
lea ecx, [edi + 0x44]
call fcn.0041d36b
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x4b
mov esi, eax
call fcn.0041bb22
cmp esi, 0xffffffff
jne 0x448b6f
push str._NoQueryBox
lea ecx, [ebp - 0x9c]
call fcn.0041b69b
push 0x49c1b0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
call fcn.0041b69b
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x4b
call fcn.0041bb22
cmp dword [0x4b5b90], 0
je 0x448baa
push str.__q__s
lea ecx, [ebp - 0xd4]
call fcn.0041b69b
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x44]
call fcn.004086f5
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x4b
call fcn.0041bb22
push ebx
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_ShowWindow]
push 2
push 0x64
push 0x8d2
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x23c]
call fcn.0041768e
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x238]
call fcn.0041e21c
push ebx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041c2aa
add eax, 4
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x214]
call fcn.0041e21c
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x51
call fcn.0041bb22
lea eax, [edi + 0x198]
mov dword [ebp - 0x220], 5
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x21c], ebx
call fcn.0041e21c
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041e21c
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.0041e21c
lea ecx, [ebp - 0x23c]
call fcn.00417f3a
mov ebx, eax
lea eax, [ebp - 0x144]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.004176f4
push eax
push 0x435
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov esi, 0x4b5c30
mov byte [ebp - 4], 0x53
push 3
mov ecx, esi
call fcn.0040853d
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x51
call fcn.0041bb22
cmp dword [ebp - 0x15c], 0
jne 0x448cd1
push 4
mov ecx, edi
call fcn.004474b0
jmp 0x448cd4
or ebx, 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.00412ca6
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041bb22
test ebx, ebx
je 0x448d42
push 5
mov ecx, edi
call fcn.004474b0
push str.insatll_failed
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
push 0x444
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0x2c]
jmp 0x448f6f
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041cd97
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041bb22
test bl, bl
je 0x448e53
push 0x5f
push 0x66
push 0x8d2
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [ebp - 0x300]
push str.UaaClient.exe
lea ecx, [ebp - 0x9c]
call fcn.0041b69b
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9c]
or ebx, 1
mov dword [ebp - 0x2c0], ebx
call fcn.004473f2
test eax, eax
jne 0x448de6
push 0x49c948
lea ecx, [ebp - 0x64]
call fcn.0041b69b
mov dword [ebp - 4], 0x59
lea ecx, [ebp - 0x64]
or ebx, 2
mov dword [ebp - 0x2c0], ebx
call fcn.004473f2
mov byte [ebp - 0x2b5], 0
test eax, eax
je 0x448ded
mov byte [ebp - 0x2b5], 1
test bl, 2
je 0x448dfd
lea ecx, [ebp - 0x64]
and ebx, 0xfffffffd
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x28
and ebx, 0xfffffffe
call fcn.0041bb22
cmp byte [ebp - 0x2b5], 0
jne 0x448e2b
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x448d8a
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x80]
call fcn.004066d5
test al, al
je 0x448e4a
lea ecx, [ebp - 0x80]
call fcn.00406aed
push 4
mov ecx, edi
call fcn.004474b0
push 0
push 0
push 0x10
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.insalled_end
lea ecx, [ebp - 0x64]
call fcn.0041b69b
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
push eax
push 0x463
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
call fcn.0040853d
mov ecx, eax
call fcn.00407716
push eax
mov ecx, esi
call fcn.00408441
lea ecx, [ebp - 0x64]
call fcn.0041bb22
jmp 0x448f79
push 3
mov ecx, edi
call fcn.004474b0
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041b1b7
push str._vt_all_url_to_down
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.0041b69b
push 0xa
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.0041b2c2
push str.get_down_url_failed
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3d
call fcn.0041b69b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x64]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x404
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0040853d
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
lea ecx, [ebp - 0x64]
call fcn.0041bb22
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
lea ecx, [ebp - 0xd4]
call fcn.0041bb22
call fcn.004471b9
lea ecx, [ebp - 0x80]
mov dword [ebp - method.std::_Facet_base.virtual_4], vtable.HProcess::HFileDownloadCallBack.0
call fcn.0041bb22
lea ecx, [ebp - 0xf0]
call fcn.0041bb22
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x5b
call fcn.00404357
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x5c
call fcn.00404357
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x5d
call fcn.00404357
lea ecx, [ebp - 0x10c]
call fcn.0041bb22
lea ecx, [ebp - 0x128]
jmp 0x4490d6
call fcn.0041bb22
cmp dword [0x4b5b90], 0
jne 0x449088
push str.MSG_TIPS
lea ecx, [ebp - 0x9c]
call fcn.0041b69b
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
push str.MSG_MUST_OS_NOT_SUPPORT
call fcn.0041b69b
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd4]
call fcn.00444f0c
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x144]
call fcn.00444f0c
add esi, 4
cmp dword [esi + 0x14], 8
jb 0x449040
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x44904b
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b60]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x144]
call fcn.0041bb22
lea ecx, [ebp - 0xd4]
call fcn.0041bb22
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.0041bb22
push 0
push 0
push 0x10
push dword [0x4b5b60]
call ebx
push str.os_not_support
lea ecx, [ebp - 0x2c]
call fcn.0041b69b
push 3
pop eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], eax
push ecx
push 0x314
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b5c30
push eax
mov ecx, ebx
call fcn.0040853d
mov ecx, eax
call fcn.00407716
push eax
mov ecx, ebx
call fcn.00408441
lea ecx, [ebp - 0x2c]
call fcn.0041bb22
call fcn.0045e51e
ret