Function at 0x42fe01
Capabilities:
Contain obfuscated stackstrings
Delete file
Delete registry key
Get common file path
Get file size
Move file
Parse pe header
Read file on windows
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x268bc]
mov eax, 0x268bc
call fcn.0043dd90
push 0xffffffffffffffff
push 0x4c54de
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x509690]
xor eax, ebp
mov dword [ebp + 0x268b8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c], ecx
call fcn.0040d21f
mov ecx, eax
call fcn.0040aae1
push eax
lea ecx, [ebp + 0x26598]
call fcn.004015d0
xor edi, edi
push 0x4e3074
lea ecx, [ebp + 0x26598]
mov dword [ebp - 4], edi
call fcn.00403470
lea eax, [ebp + 0x26598]
push eax
lea ecx, [ebp + 0x265ec]
call fcn.00403330
lea eax, [ebp + 0x26598]
push eax
lea ecx, [ebp + 0x264b8]
mov byte [ebp - 4], 1
call fcn.00403330
push str.Slation.exe
lea ecx, [ebp + 0x264b8]
mov byte [ebp - 4], 2
call fcn.00403470
push 0x206
lea eax, [ebp + 0x266b2]
push edi
push eax
mov word [ebp + 0x266b0], di
call fcn.0043db10
lea eax, [ebp + 0x26598]
push eax
lea eax, [ebp + 0x26560]
push eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x6c], edi
call fcn.0041ede9
add esp, 0x14
push str.Temp.xml
lea ecx, [ebp + 0x26560]
mov byte [ebp - 4], 3
call fcn.0040b036
lea eax, [ebp + 0x26560]
push eax
lea eax, [ebp + 0x265b4]
push eax
call fcn.0041f4bb
pop ecx
pop ecx
cmp dword [ebp + 0x265cc], 8
mov eax, dword [ebp + 0x265b8]
mov byte [ebp - 4], 4
jae 0x42ff24
lea eax, [ebp + 0x265b8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x26598]
push eax
lea eax, [ebp + 0x2649c]
push eax
call fcn.0041ede9
pop ecx
pop ecx
push str.Config.xml
lea ecx, [ebp + 0x2649c]
mov byte [ebp - 4], 5
call fcn.0040b036
lea eax, [ebp + 0x26598]
push eax
lea eax, [ebp + 0x264d4]
push eax
call fcn.0041ede9
pop ecx
pop ecx
push str.temp.dat
lea ecx, [ebp + 0x264d4]
mov byte [ebp - 4], 6
call fcn.0040b036
lea ecx, [ebp - 0x278]
call fcn.0045ee60
push 0x38
mov byte [ebp - 4], 7
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x1c], eax
cmp eax, edi
mov byte [ebp - 4], 8
je 0x42ffb7
push 0x4e3070
push 0x4cfdcc
push 0x4cfdc8
mov ecx, eax
call fcn.0045f280
jmp 0x42ffb9
xor eax, eax
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 7
call fcn.0045e3b0
push 0x50
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x1c], eax
cmp eax, edi
mov byte [ebp - 4], 9
je 0x42ffed
push str.TheQueryInfo
mov ecx, eax
call fcn.0045f770
mov dword [ebp - 0x38], eax
jmp 0x42fff0
mov dword [ebp - 0x38], edi
push 0x50
mov byte [ebp - 4], 7
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x1c], eax
cmp eax, edi
mov byte [ebp - 4], 0xa
je 0x430018
push str.PushList
mov ecx, eax
call fcn.0045f770
mov dword [ebp - 0x24], eax
jmp 0x43001b
mov dword [ebp - 0x24], edi
push str.anV6aWJyb3dzZQ
lea ecx, [ebp + 0x26544]
mov byte [ebp - 4], 7
call fcn.004015d0
sub esp, 0x1c
lea eax, [ebp + 0x26544]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xb
call fcn.00403330
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp + 0x264f0]
push eax
call fcn.0042fbb8
push str.aGFvMTIza2FudHU
lea ecx, [ebp + 0x26544]
mov byte [ebp - 4], 0xc
call fcn.00403360
sub esp, 0x1c
lea eax, [ebp + 0x26544]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00403330
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp + 0x26528]
push eax
call fcn.0042fbb8
mov esi, dword [ebp + 0x268c4]
mov eax, dword [esi + 8]
add esi, 4
push esi
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1c], esi
call fcn.0040e7d0
mov eax, dword [esi + 8]
push esi
jmp 0x4319cb
lea ecx, [ebp - 0x9c]
call fcn.0040e125
mov ebx, dword [eax + 0x1c]
push str.PushName
lea ecx, [ebp + 0x265d0]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x265d0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0xe
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x265d0]
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.ChooseInstall
lea ecx, [ebp + 0x265d0]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x265d0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0xf
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x265d0]
mov esi, eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
cmp esi, edi
je 0x4319b9
cmp dword [esi + 0x18], 8
jb 0x430141
mov esi, dword [esi + 4]
jmp 0x430144
add esi, 4
push 0x4ca764
push esi
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x4319b9
push str.PushName
lea ecx, [ebp + 0x265d0]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x265d0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x10
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x265d0]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.PushKeyName
lea ecx, [ebp - 0x1dc]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1dc]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x11
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallPushUrl
lea ecx, [ebp + 0x26624]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x26624]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x12
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x26624]
mov esi, eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallPush32Url
lea ecx, [ebp + 0x26678]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x26678]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x13
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x26678]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallPush64Url
lea ecx, [ebp + 0x2665c]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x2665c]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x14
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x2665c]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallProgramName
lea ecx, [ebp - 0x1f8]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1f8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x15
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallAppDataName
lea ecx, [ebp - 0x134]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x134]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x16
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallGreenBag
lea ecx, [ebp + 0x26694]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x26694]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x17
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp + 0x26694]
mov dword [ebp - 0xac], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunParam
lea ecx, [ebp - 0x1a4]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x18
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunExe
lea ecx, [ebp - 0x214]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x214]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x19
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x214]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunDll
lea ecx, [ebp - 0x188]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x188]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1a
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x188]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunDllFnName
lea ecx, [ebp - 0x1c0]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x1c0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1b
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallTempName
lea ecx, [ebp - 0xf4]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0xf4]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1c
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunAdmin
lea ecx, [ebp - 0x230]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x230]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallRunLocalExe
lea ecx, [ebp - 0x16c]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x16c]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1e
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallType
lea ecx, [ebp - 0x150]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x150]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1f
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallUACType
lea ecx, [ebp - 0x94]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x94]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x20
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
push str.InstallWmiMode
lea ecx, [ebp - 0x58]
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x58]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x21
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0xd
call fcn.004017a0
lea ecx, [ebp - 0x118]
call fcn.0040de7a
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x22
call fcn.0040de32
test eax, eax
je 0x43056d
cmp dword [ebp - 0x14], edi
je 0x430575
mov esi, dword [ebp - 0x14]
jmp 0x430575
cmp dword [ebp - 0x10], edi
je 0x430575
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
cmp eax, edi
je 0x430842
cmp dword [eax + 0x18], 8
jb 0x430590
add eax, 4
mov dword [ebp - 0x10], eax
mov eax, dword [eax]
jmp 0x430596
add eax, 4
mov dword [ebp - 0x10], eax
push str.zmbd
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x430798
cmp dword [esi + 0x18], 8
jb 0x4305b6
mov esi, dword [esi + 4]
jmp 0x4305b9
add esi, 4
push esi
lea ecx, [ebp + 0x26694]
call fcn.004015d0
mov eax, dword [ebp + 0x26698]
push 8
pop esi
cmp dword [ebp + 0x266ac], esi
mov byte [ebp - 4], 0x23
jae 0x4305e0
lea eax, [ebp + 0x26698]
lea ecx, [ebp + 0x266b0]
push ecx
push eax
call fcn.0041dacb
pop ecx
pop ecx
lea eax, [ebp + 0x265ec]
push eax
lea ecx, [ebp + 0x26640]
call fcn.00403330
lea eax, [ebp + 0x266b0]
push eax
lea ecx, [ebp + 0x26640]
mov byte [ebp - 4], 0x24
call fcn.00403470
cmp dword [ebp + 0x26658], esi
mov eax, dword [ebp + 0x26644]
jae 0x43062b
lea eax, [ebp + 0x26644]
push eax
call fcn.0041f121
pop ecx
lea ecx, [ebp - 0xd8]
call fcn.004013b0
cmp dword [ebp + 0x26604], esi
mov eax, dword [ebp + 0x265f0]
mov byte [ebp - 4], 0x25
jae 0x430655
lea eax, [ebp + 0x265f0]
push eax
lea ecx, [ebp - 0x94]
call fcn.004015d0
cmp dword [ebp + 0x266ac], esi
mov eax, dword [ebp + 0x26698]
mov byte [ebp - 4], 0x26
jae 0x430679
lea eax, [ebp + 0x26698]
push eax
lea ecx, [ebp - 0x58]
call fcn.004015d0
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x27
call fcn.00401450
movzx eax, al
xor esi, esi
push edi
inc esi
push esi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], eax
call fcn.004017a0
push edi
push esi
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x25
call fcn.004017a0
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x94]
je 0x4306ec
push 0x4ca764
call fcn.004015d0
push str.DownloadFlag
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x28
call fcn.004015d0
mov byte [ebp - 4], 0x29
jmp 0x43070b
push 0x4ca73c
call fcn.004015d0
push str.DownloadFlag
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2a
call fcn.004015d0
mov byte [ebp - 4], 0x2b
mov eax, dword [ebx]
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, ebx
call dword [eax + 8]
push edi
push esi
lea ecx, [ebp - 0x58]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x25
call fcn.004017a0
cmp dword [ebp - 0x14], edi
je 0x43076f
cmp dword [ebp + 0x26658], 8
mov eax, dword [ebp + 0x26644]
jae 0x430752
lea eax, [ebp + 0x26644]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp eax, edi
je 0x43076f
push str.DownloaderHelper
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x43076f
call eax
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x24
call fcn.00401440
push edi
push esi
lea ecx, [ebp + 0x26640]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26694]
jmp 0x4319a5
cmp dword [ebp + 0x26540], 8
mov ecx, dword [ebp + 0x2652c]
jae 0x4307ad
lea ecx, [ebp + 0x2652c]
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x18], 8
mov eax, dword [ebp - 0x10]
jb 0x4307bb
mov eax, dword [eax]
push ecx
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x43080e
cmp esi, edi
je 0x4319aa
lea ecx, [ebp + 0x26130]
call fcn.00432fa0
cmp dword [esi + 0x18], 8
mov byte [ebp - 4], 0x2c
jb 0x4307ea
mov esi, dword [esi + 4]
jmp 0x4307ed
add esi, 4
push esi
push ebx
lea ecx, [ebp + 0x26130]
call fcn.004336c4
lea ecx, [ebp + 0x26130]
mov byte [ebp - 4], 0x22
call fcn.00432e24
jmp 0x4319aa
cmp dword [ebp + 0x26508], 8
mov ecx, dword [ebp + 0x264f4]
jae 0x430823
lea ecx, [ebp + 0x264f4]
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x18], 8
mov eax, dword [ebp - 0x10]
jb 0x430831
mov eax, dword [eax]
push ecx
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
je 0x4319aa
cmp esi, edi
je 0x4319aa
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x64], 1
jb 0x43085c
mov esi, dword [esi + 4]
jmp 0x43085f
add esi, 4
push esi
lea ecx, [ebp + 0x26640]
call fcn.004015d0
mov eax, dword [ebp + 0x26644]
push 8
pop esi
cmp dword [ebp + 0x26658], esi
mov byte [ebp - 4], 0x2d
jae 0x430886
lea eax, [ebp + 0x26644]
lea ecx, [ebp + 0x266b0]
push ecx
push eax
call fcn.0041dacb
pop ecx
pop ecx
lea eax, [ebp + 0x265ec]
push eax
lea ecx, [ebp + 0x26608]
call fcn.00403330
lea eax, [ebp + 0x266b0]
push eax
lea ecx, [ebp + 0x26608]
mov byte [ebp - 4], 0x2e
call fcn.00403470
cmp dword [ebp + 0x26620], esi
mov eax, dword [ebp + 0x2660c]
jae 0x4308d1
lea eax, [ebp + 0x2660c]
push eax
call fcn.0041f121
pop ecx
lea ecx, [ebp - 0xd0]
call fcn.004013b0
cmp dword [ebp + 0x26604], esi
mov eax, dword [ebp + 0x265f0]
mov byte [ebp - 4], 0x2f
jae 0x4308fb
lea eax, [ebp + 0x265f0]
push eax
lea ecx, [ebp + 0x26678]
call fcn.004015d0
cmp dword [ebp + 0x26658], esi
mov eax, dword [ebp + 0x26644]
mov byte [ebp - 4], 0x30
jae 0x43091f
lea eax, [ebp + 0x26644]
push eax
lea ecx, [ebp + 0x26624]
call fcn.004015d0
lea eax, [ebp + 0x26678]
push eax
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x31
call fcn.00401450
movzx eax, al
xor esi, esi
push edi
inc esi
push esi
lea ecx, [ebp + 0x26624]
mov dword [ebp - 0x10], eax
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26678]
mov byte [ebp - 4], 0x2f
call fcn.004017a0
cmp dword [ebp - 0x10], edi
jne 0x430ab1
lea eax, [ebp + 0x26640]
push eax
lea eax, [ebp + 0x26624]
push eax
mov dword [ebp - 0x10], esi
call fcn.0041ede9
cmp dword [eax + 0x18], 0x10
pop ecx
pop ecx
jb 0x43099b
mov eax, dword [eax + 4]
jmp 0x43099e
add eax, 4
push eax
lea eax, [ebp + 0x25e30]
push eax
call fcn.0043edd0
pop ecx
pop ecx
push edi
push esi
lea ecx, [ebp + 0x26624]
call fcn.00401750
lea eax, [ebp + 0x265ec]
push eax
lea eax, [ebp + 0x26624]
push eax
call fcn.0041ede9
cmp dword [eax + 0x18], 0x10
pop ecx
pop ecx
jb 0x4309da
mov eax, dword [eax + 4]
jmp 0x4309dd
add eax, 4
push eax
lea eax, [ebp + 0x26030]
push eax
call fcn.0043edd0
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp + 0x26624]
call fcn.00401750
lea ecx, [ebp]
call fcn.00427b44
sub esp, 0x300
mov edi, esp
mov ecx, 0xc0
lea esi, [ebp + 0x25e30]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp]
mov byte [ebp - 4], 0x32
call fcn.0042840c
lea ecx, [ebp]
call fcn.00428154
lea ecx, [ebp + 0x26184]
call fcn.00427b05
lea ecx, [ebp]
call fcn.00427ba2
test eax, eax
je 0x430a5a
lea eax, [ebp + 0x26184]
push eax
lea ecx, [ebp]
call fcn.0042804d
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp]
call fcn.00427bae
test eax, eax
je 0x430a37
lea eax, [ebp + 0x26184]
push eax
lea ecx, [ebp]
call fcn.0042804d
fld qword [ebp + 0x2648c]
fcomp qword [ebp + 0x26494]
fnstsw ax
test ah, 0x44
jp 0x430a97
fldz
fcomp qword [ebp + 0x26494]
fnstsw ax
test ah, 0x44
jp 0x430a9b
and dword [ebp - 0x10], 0
lea ecx, [ebp]
mov byte [ebp - 4], 0x2f
call fcn.00427b9d
cmp dword [ebp - 0x10], 0
je 0x430b6f
push 0x4ca764
lea ecx, [ebp + 0x26678]
call fcn.004015d0
push str.DownloadFlag
lea ecx, [ebp + 0x26624]
mov byte [ebp - 4], 0x33
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x26678]
push ecx
lea ecx, [ebp + 0x26624]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x34
call dword [eax + 8]
xor edi, edi
push edi
push 1
lea ecx, [ebp + 0x26624]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26678]
mov byte [ebp - 4], 0x2f
call fcn.004017a0
mov eax, dword [ebp - 0x20]
push 8
pop esi
cmp dword [eax + 0x18], esi
jb 0x430b20
mov eax, dword [eax + 4]
jmp 0x430b23
add eax, 4
push str.alimama
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x430bd3
lea eax, [ebp - 0x68]
push eax
push GetMenuState
push edi
push str.Software
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x430bd3
push str.AlimamaShortcuts
push dword [ebp - 0x68]
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x430bd3
push 0x4ca73c
lea ecx, [ebp + 0x26624]
call fcn.004015d0
push str.DownloadFlag
lea ecx, [ebp + 0x265d0]
mov byte [ebp - 4], 0x35
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp + 0x26624]
push ecx
lea ecx, [ebp + 0x265d0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x36
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp + 0x265d0]
call fcn.004017a0
push 0
push 1
lea ecx, [ebp + 0x26624]
mov byte [ebp - 4], 0x2f
call fcn.004017a0
push 8
xor edi, edi
pop esi
cmp dword [ebp + 0x26604], esi
mov ecx, dword [ebp + 0x265f0]
jae 0x430be7
lea ecx, [ebp + 0x265f0]
cmp dword [ebp + 0x26658], esi
mov eax, dword [ebp + 0x26644]
jae 0x430bfb
lea eax, [ebp + 0x26644]
push dword [ebp - 0x10]
push ecx
push eax
push str.__s___s___d_
call fcn.0041e185
add esp, 0x10
cmp dword [ebp - 0x10], edi
je 0x43197f
cmp dword [ebp + 0x26604], esi
mov eax, dword [ebp + 0x265f0]
jae 0x430c2a
lea eax, [ebp + 0x265f0]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.004015d0
lea eax, [ebp + 0x266b0]
push eax
lea ecx, [ebp + 0x26624]
mov byte [ebp - 4], 0x37
call fcn.004015d0
mov eax, dword [ebp - 0xac]
cmp eax, edi
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
je 0x430e9c
cmp dword [eax + 0x18], esi
jb 0x430c6e
mov eax, dword [eax + 4]
jmp 0x430c71
add eax, 4
push 0x4ca764
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x430e9c
push 0x4e3094
lea ecx, [ebp + 0x26694]
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x64], edi
call fcn.004015d0
mov esi, dword [ebp - 0xc0]
cmp esi, edi
mov byte [ebp - 4], 0x39
je 0x430ccf
push 0x206
lea eax, [ebp + 0x26296]
push edi
push eax
mov word [ebp + 0x26294], di
call fcn.0043db10
add esp, 0xc
push edi
push 0x26
jmp 0x430cf8
mov esi, dword [ebp - 0xc8]
cmp esi, edi
je 0x430d2a
push 0x206
lea eax, [ebp + 0x26296]
push edi
push eax
mov word [ebp + 0x26294], di
call fcn.0043db10
add esp, 0xc
push edi
push 0x1a
lea eax, [ebp + 0x26294]
push eax
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp + 0x26294]
push eax
lea ecx, [ebp + 0x26694]
call fcn.00403360
push 0x4e3074
lea ecx, [ebp + 0x26694]
call fcn.00403470
jmp 0x430d74
mov esi, dword [ebp - 0xbc]
cmp esi, edi
je 0x430da0
push 0x206
lea eax, [ebp + 0x26296]
push edi
push eax
mov word [ebp + 0x26294], di
call fcn.0043db10
add esp, 0xc
lea eax, [ebp + 0x26294]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp + 0x26294]
push eax
lea ecx, [ebp + 0x26694]
call fcn.00403360
cmp dword [esi + 0x18], 8
jb 0x430d7f
mov esi, dword [esi + 4]
jmp 0x430d82
add esi, 4
push esi
lea ecx, [ebp + 0x26694]
call fcn.00403470
push 0x4e3074
lea ecx, [ebp + 0x26694]
call fcn.00403470
jmp 0x430db8
call fcn.0040d21f
mov ecx, eax
call fcn.0040b080
push eax
lea ecx, [ebp + 0x26694]
call fcn.00403360
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26694]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.00401d10
cmp dword [ebp + 0x26604], 8
mov eax, dword [ebp + 0x265f0]
jae 0x430de2
lea eax, [ebp + 0x265f0]
push eax
lea ecx, [ebp + 0x26678]
call fcn.004015d0
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp + 0x26678]
mov byte [ebp - 4], 0x3a
call fcn.004038f0
lea eax, [ebp + 0x26678]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.0041ede9
pop ecx
pop ecx
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x3b
jb 0x430e2b
mov eax, dword [eax + 4]
jmp 0x430e2e
add eax, 4
cmp dword [ebp + 0x266ac], 8
mov ecx, dword [ebp + 0x26698]
jae 0x430e43
lea ecx, [ebp + 0x26698]
push edi
push edi
push eax
push ecx
call fcn.0040962b
add esp, 0x10
push edi
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401750
cmp dword [ebp + 0x26690], 8
mov eax, dword [ebp + 0x2667c]
jae 0x430e72
lea eax, [ebp + 0x2667c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
push 1
lea ecx, [ebp + 0x26678]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26694]
mov byte [ebp - 4], 0x38
call fcn.004017a0
push 8
pop esi
mov eax, dword [ebp - 0xb8]
cmp eax, edi
je 0x430f69
cmp dword [eax + 0x18], esi
jb 0x430eb4
mov eax, dword [eax + 4]
jmp 0x430eb7
add eax, 4
push eax
lea ecx, [ebp + 0x26624]
call fcn.00403360
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.004038f0
cmp dword [ebp - 0x14], edi
jne 0x4312e1
cmp dword [ebp + 0x26674], esi
mov ecx, dword [ebp + 0x26660]
jae 0x430ef5
lea ecx, [ebp + 0x26660]
cmp dword [ebp + 0x26620], esi
mov eax, dword [ebp + 0x2660c]
jae 0x430f09
lea eax, [ebp + 0x2660c]
push ecx
push eax
call fcn.0041dbeb
cmp dword [ebp + 0x26674], esi
pop ecx
pop ecx
mov ecx, dword [ebp + 0x26660]
jae 0x430f26
lea ecx, [ebp + 0x26660]
cmp dword [ebp + 0x26620], esi
mov eax, dword [ebp + 0x2660c]
jae 0x430f3a
lea eax, [ebp + 0x2660c]
push ecx
push eax
push str.__s___s_
call fcn.0041e185
mov eax, dword [ebp + 0x2660c]
add esp, 0xc
cmp dword [ebp + 0x26620], esi
jae 0x430f5d
lea eax, [ebp + 0x2660c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4312e1
mov eax, dword [ebp - 0xc4]
cmp eax, edi
je 0x4312cf
cmp dword [eax + 0x18], esi
mov dword [ebp - 0x10], 1
jb 0x430f88
mov eax, dword [eax + 4]
jmp 0x430f8b
add eax, 4
push eax
lea ecx, [ebp + 0x26624]
call fcn.00403360
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.004038f0
cmp dword [ebp - 0x14], edi
jne 0x431038
cmp dword [ebp + 0x26674], esi
mov ecx, dword [ebp + 0x26660]
jae 0x430fc9
lea ecx, [ebp + 0x26660]
cmp dword [ebp + 0x26620], esi
mov eax, dword [ebp + 0x2660c]
jae 0x430fdd
lea eax, [ebp + 0x2660c]
push ecx
push eax
call fcn.0041dbeb
cmp dword [ebp + 0x26674], esi
pop ecx
pop ecx
mov ecx, dword [ebp + 0x26660]
jae 0x430ffa
lea ecx, [ebp + 0x26660]
cmp dword [ebp + 0x26620], esi
mov eax, dword [ebp + 0x2660c]
jae 0x43100e
lea eax, [ebp + 0x2660c]
push ecx
push eax
push str.__s___s_
call fcn.0041e185
mov eax, dword [ebp + 0x2660c]
add esp, 0xc
cmp dword [ebp + 0x26620], esi
jae 0x431031
lea eax, [ebp + 0x2660c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x74]
cmp eax, edi
je 0x431064
cmp dword [eax + 0x18], esi
jb 0x431049
mov eax, dword [eax + 4]
jmp 0x43104c
add eax, 4
push 0x4cfb10
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x431064
mov dword [ebp - 0x30], 1
lea eax, [ebp + 0x2665c]
push eax
lea ecx, [ebp + 0x265d0]
call fcn.00403330
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp + 0x26678]
push eax
mov byte [ebp - 4], 0x3c
call fcn.0042fd13
push 0x4e3094
lea ecx, [ebp + 0x26694]
mov byte [ebp - 4], 0x3d
call fcn.004015d0
mov esi, dword [ebp - 0x2c]
push 0xffffffffffffffff
lea eax, [ebp + 0x265d0]
push edi
lea ecx, [ebp + 0x26694]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00401d10
cmp esi, edi
je 0x4310e7
push 0x4cfb0c
lea ecx, [ebp + 0x26694]
call fcn.00403470
cmp dword [esi + 0x18], 8
jb 0x4310d8
mov esi, dword [esi + 4]
jmp 0x4310db
add esi, 4
push esi
lea ecx, [ebp + 0x26694]
call fcn.00403470
cmp dword [ebp + 0x266ac], 8
mov ecx, dword [ebp + 0x26698]
jae 0x4310fc
lea ecx, [ebp + 0x26698]
cmp dword [ebp + 0x26690], 8
mov eax, dword [ebp + 0x2667c]
jae 0x431111
lea eax, [ebp + 0x2667c]
push ecx
push eax
lea eax, [ebp + 0x25f28]
push 0x4ca55c
push eax
call fcn.0043ec14
add esp, 0x10
cmp dword [ebp - 0x30], edi
je 0x431292
push 0x50
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 0x3f
je 0x431154
push str.PushItem
mov ecx, eax
call fcn.0045f770
mov dword [ebp - 0x20], eax
jmp 0x431157
mov dword [ebp - 0x20], edi
push 0x50
mov byte [ebp - 4], 0x3e
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 0x40
je 0x43117e
push 0x4cfaf0
mov ecx, eax
call fcn.0045f770
mov esi, eax
jmp 0x431180
xor esi, esi
push 0x1f3
lea eax, [ebp + 0x262a9]
push edi
push eax
mov byte [ebp - 4], 0x3e
mov byte [ebp + 0x262a8], 0
call fcn.0043db10
mov eax, dword [ebp + 0x2667c]
add esp, 0xc
cmp dword [ebp + 0x26690], 8
jae 0x4311b5
lea eax, [ebp + 0x2667c]
lea ecx, [ebp + 0x262a8]
push ecx
push eax
call fcn.0041d426
push 0x30
call fcn.00433bd9
add esp, 0xc
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 0x41
je 0x4311e7
lea ecx, [ebp + 0x262a8]
push ecx
mov ecx, eax
call fcn.0042ec46
jmp 0x4311e9
xor eax, eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3e
call fcn.0045e3b0
mov ecx, dword [ebp - 0x20]
push esi
call fcn.0045e3b0
push 0x50
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 0x42
je 0x431221
push 0x4cfae0
mov ecx, eax
call fcn.0045f770
mov esi, eax
jmp 0x431223
xor esi, esi
cmp dword [ebp + 0x266ac], 8
mov eax, dword [ebp + 0x26698]
mov byte [ebp - 4], 0x3e
jae 0x43123c
lea eax, [ebp + 0x26698]
lea ecx, [ebp + 0x262a8]
push ecx
push eax
call fcn.0041d426
push 0x30
call fcn.00433bd9
add esp, 0xc
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 0x43
je 0x43126e
lea ecx, [ebp + 0x262a8]
push ecx
mov ecx, eax
call fcn.0042ec46
jmp 0x431270
xor eax, eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3e
call fcn.0045e3b0
mov ecx, dword [ebp - 0x20]
push esi
call fcn.0045e3b0
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
call fcn.0045e3b0
jmp 0x43129f
lea eax, [ebp + 0x25f28]
push eax
call fcn.0041e775
pop ecx
push edi
push 1
lea ecx, [ebp + 0x26694]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26678]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x265d0]
mov byte [ebp - 4], 0x38
call fcn.004017a0
jmp 0x4312e1
lea eax, [ebp + 0x266b0]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.00403470
mov esi, dword [ebp - 0xa8]
cmp esi, edi
je 0x43131a
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26598]
push eax
lea ecx, [ebp + 0x2665c]
call fcn.00401d10
cmp dword [esi + 0x18], 8
jb 0x43130b
mov esi, dword [esi + 4]
jmp 0x43130e
add esi, 4
push esi
lea ecx, [ebp + 0x2665c]
call fcn.00403470
cmp dword [ebp - 0x10], edi
jne 0x431963
push 0x4e3094
lea ecx, [ebp + 0x26694]
call fcn.004015d0
mov esi, dword [ebp - 0x78]
cmp esi, edi
mov byte [ebp - 4], 0x44
lea ecx, [ebp + 0x26694]
jne 0x431355
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x2665c]
push eax
call fcn.004038f0
jmp 0x43139e
push 0x4cae6c
call fcn.00403470
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x2665c]
push eax
lea ecx, [ebp + 0x26694]
call fcn.004038f0
push 0x4cc524
lea ecx, [ebp + 0x26694]
call fcn.00403470
cmp dword [esi + 0x18], 8
jb 0x43138f
mov esi, dword [esi + 4]
jmp 0x431392
add esi, 4
push esi
lea ecx, [ebp + 0x26694]
call fcn.00403470
mov esi, dword [ebp - 0x74]
cmp esi, edi
je 0x4316a8
mov eax, dword [ebp - 0xa0]
cmp eax, edi
je 0x4313d9
cmp dword [eax + 0x18], 8
jb 0x4313be
mov eax, dword [eax + 4]
jmp 0x4313c1
add eax, 4
push 0x4ca764
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x4313d9
mov dword [ebp - 0x6c], 1
cmp dword [esi + 0x18], 8
jb 0x4313e4
mov eax, dword [esi + 4]
jmp 0x4313e7
lea eax, [esi + 4]
push 0x4cfb10
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x4316a8
call fcn.0041deab
test eax, eax
je 0x43144d
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x43144d
cmp dword [esi + 0x18], 8
lea edi, [esi + 4]
jb 0x431419
mov eax, dword [edi]
jmp 0x43141b
mov eax, edi
push str.direct_open
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
je 0x4316a6
cmp dword [esi + 0x18], 8
jb 0x431438
mov edi, dword [edi]
push str.no_open
push edi
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
je 0x43192d
push 0x50
pop edi
push edi
mov dword [ebp - 0x30], 1
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x45
je 0x43147a
push str.PushItem
mov ecx, eax
call fcn.0045f770
mov dword [ebp - 0x10], eax
jmp 0x43147e
and dword [ebp - 0x10], 0
push edi
mov byte [ebp - 4], 0x44
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x46
je 0x4314a4
push 0x4cfaf0
mov ecx, eax
call fcn.0045f770
mov esi, eax
jmp 0x4314a6
xor esi, esi
push 0x1f3
lea eax, [ebp + 0x262a9]
push 0
push eax
mov byte [ebp - 4], 0x44
mov byte [ebp + 0x262a8], 0
call fcn.0043db10
mov eax, dword [ebp + 0x26660]
add esp, 0xc
cmp dword [ebp + 0x26674], 8
jae 0x4314dc
lea eax, [ebp + 0x26660]
lea ecx, [ebp + 0x262a8]
push ecx
push eax
call fcn.0041d426
push 0x30
pop ebx
push ebx
call fcn.00433bd9
add esp, 0xc
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x47
je 0x431510
lea ecx, [ebp + 0x262a8]
push ecx
mov ecx, eax
call fcn.0042ec46
jmp 0x431512
xor eax, eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x44
call fcn.0045e3b0
mov ecx, dword [ebp - 0x10]
push esi
call fcn.0045e3b0
push edi
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x48
je 0x431549
push 0x4cfae0
mov ecx, eax
call fcn.0045f770
mov esi, eax
jmp 0x43154b
xor esi, esi
mov eax, dword [ebp - 0x78]
test eax, eax
mov byte [ebp - 4], 0x44
je 0x4315ac
cmp dword [eax + 0x18], 8
jb 0x431561
mov eax, dword [eax + 4]
jmp 0x431564
add eax, 4
lea ecx, [ebp + 0x262a8]
push ecx
push eax
call fcn.0041d426
push ebx
call fcn.00433bd9
add esp, 0xc
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x49
je 0x431595
lea ecx, [ebp + 0x262a8]
push ecx
mov ecx, eax
call fcn.0042ec46
jmp 0x431597
xor eax, eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x44
call fcn.0045e3b0
mov ecx, dword [ebp - 0x10]
push esi
call fcn.0045e3b0
cmp dword [ebp - 0x14], 0
jne 0x431611
push edi
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x4a
je 0x4315d4
push str.InstallReBootDel
mov ecx, eax
call fcn.0045f770
mov esi, eax
jmp 0x4315d6
xor esi, esi
push ebx
mov byte [ebp - 4], 0x44
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
mov byte [ebp - 4], 0x4b
je 0x4315fa
push str.true
mov ecx, eax
call fcn.0042ec46
jmp 0x4315fc
xor eax, eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x44
call fcn.0045e3b0
mov ecx, dword [ebp - 0x10]
push esi
call fcn.0045e3b0
mov esi, dword [ebp - 0x34]
test esi, esi
je 0x431696
push edi
call fcn.00433bd9
pop ecx
mov dword [ebp - 0x34], eax
test eax, eax
mov byte [ebp - 4], 0x4c
je 0x43163a
push 0x4cfa94
mov ecx, eax
call fcn.0045f770
mov edi, eax
jmp 0x43163c
xor edi, edi
cmp dword [esi + 0x18], 8
mov byte [ebp - 4], 0x44
jb 0x43164b
mov eax, dword [esi + 4]
jmp 0x43164e
lea eax, [esi + 4]
lea ecx, [ebp + 0x262a8]
push ecx
push eax
call fcn.0041d426
push ebx
call fcn.00433bd9
add esp, 0xc
mov dword [ebp - 0x34], eax
test eax, eax
mov byte [ebp - 4], 0x4d
je 0x43167f
lea ecx, [ebp + 0x262a8]
push ecx
mov ecx, eax
call fcn.0042ec46
jmp 0x431681
xor eax, eax
push eax
mov ecx, edi
mov byte [ebp - 4], 0x44
call fcn.0045e3b0
mov ecx, dword [ebp - 0x10]
push edi
call fcn.0045e3b0
push dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
call fcn.0045e3b0
jmp 0x43192d
xor edi, edi
mov esi, dword [ebp - 0x60]
cmp esi, edi
je 0x4318ef
cmp dword [esi + 0x18], 8
jb 0x4316be
mov eax, dword [esi + 4]
jmp 0x4316c1
lea eax, [esi + 4]
push 0x4cf9c4
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x4317b1
lea ecx, [ebp - 0x5c]
call fcn.00424ca0
push str.InstallConfig1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x4e
call fcn.004015d0
lea ecx, [ebx + 0x18]
mov eax, dword [ecx]
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x4f
call dword [eax + 0x1c]
push edi
push 1
lea ecx, [ebp - 0x58]
mov esi, eax
mov byte [ebp - 4], 0x4e
call fcn.004017a0
cmp dword [esi + 0x18], 8
lea edi, [esi + 4]
jb 0x43171d
mov eax, dword [edi]
jmp 0x43171f
mov eax, edi
push eax
push str.FID:_s
call fcn.0041e185
cmp dword [esi + 0x18], 8
pop ecx
pop ecx
jb 0x431734
mov edi, dword [edi]
push edi
lea ecx, [ebp - 0x5c]
call fcn.0042c9b9
push str.FID_end
mov esi, eax
call fcn.0041e185
test esi, esi
pop ecx
je 0x4317a0
push 0x4ca764
lea ecx, [ebp - 0x94]
call fcn.004015d0
push str.InstallFlag
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x50
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x51
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.004017a0
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.004017a0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x44
call fcn.0042c359
mov esi, dword [ebp - 0x60]
xor edi, edi
cmp dword [esi + 0x18], 8
lea eax, [esi + 4]
mov dword [ebp - 0x14], eax
jb 0x4317bf
mov eax, dword [eax]
push str.greenbaggame
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x431803
lea ecx, [ebp - 0x15]
call sym.setup_Clover.exe_public:_class_DuiLib::CMarkup____thiscall_DuiLib::CDialogBuilder::GetMarkup_void_
lea eax, [ebx + 0x18]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x15]
mov byte [ebp - 4], 0x52
call fcn.0042df4d
push edi
push 1
lea ecx, [ebp - 0x58]
call fcn.004017a0
lea ecx, [ebp - 0x15]
mov byte [ebp - 4], 0x44
call sym.setup_Clover.exe_void___cdecl_DuiLib::DUI__Trace_wchar_t_const__
cmp dword [esi + 0x18], 8
mov eax, dword [ebp - 0x14]
jb 0x43180e
mov eax, dword [eax]
push 0x4cf9bc
push eax
call fcn.0043ecaa
test eax, eax
pop ecx
pop ecx
jne 0x43192d
lea ecx, [ebp - 0x70]
call fcn.00424ca0
push str.InstallConfig1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x53
call fcn.004015d0
lea ecx, [ebx + 0x18]
mov eax, dword [ecx]
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x54
call dword [eax + 0x1c]
push 0
push 1
lea ecx, [ebp - 0x58]
mov esi, eax
mov byte [ebp - 4], 0x53
call fcn.004017a0
cmp dword [esi + 0x18], 8
lea edi, [esi + 4]
jb 0x43186b
mov eax, dword [edi]
jmp 0x43186d
mov eax, edi
push eax
push str.lock:_s
call fcn.0041e185
cmp dword [esi + 0x18], 8
pop ecx
pop ecx
jb 0x431882
mov edi, dword [edi]
push edi
lea ecx, [ebp - 0x70]
call fcn.0042c5dc
test eax, eax
je 0x4318e1
push 0x4ca764
lea ecx, [ebp - 0x94]
call fcn.004015d0
push str.InstallFlag
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x55
call fcn.004015d0
mov eax, dword [ebx]
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x56
call dword [eax + 8]
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.004017a0
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.004017a0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x44
call fcn.0042c359
jmp 0x43192d
cmp dword [ebp + 0x266ac], 8
mov eax, dword [ebp + 0x26698]
jae 0x431904
lea eax, [ebp + 0x26698]
push eax
call fcn.0041e775
cmp dword [ebp + 0x266ac], 8
mov eax, dword [ebp + 0x26698]
pop ecx
jae 0x431920
lea eax, [ebp + 0x26698]
push eax
push 0x4ca34c
call fcn.0041e185
pop ecx
pop ecx
xor esi, esi
cmp dword [ebp - 0x64], esi
je 0x431953
cmp dword [ebp + 0x26674], 8
mov eax, dword [ebp + 0x26660]
jae 0x431949
lea eax, [ebp + 0x26660]
push 5
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push esi
push 1
lea ecx, [ebp + 0x26694]
call fcn.004017a0
xor edi, edi
push edi
push 1
lea ecx, [ebp + 0x26624]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x2665c]
call fcn.004017a0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x2e
call fcn.00401440
push edi
push 1
lea ecx, [ebp + 0x26608]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26640]
call fcn.004017a0
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xd
call fcn.0040dd55
lea ecx, [ebp - 0x9c]
call fcn.0040e048
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 8]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.0040e7d0
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00424dec
test al, al
je 0x4300b6
push dword [ebp - 0x24]
mov ecx, dword [ebp - 0x38]
call fcn.0045e3b0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x278]
call fcn.0045e3b0
cmp dword [ebp + 0x26578], 0x10
mov eax, dword [ebp + 0x26564]
jae 0x431a1f
lea eax, [ebp + 0x26564]
push eax
lea ecx, [ebp - 0x278]
call fcn.0045ef10
cmp dword [ebp + 0x265cc], 8
mov eax, dword [ebp + 0x265b8]
mov dword [ebp - 0x10], edi
jae 0x431a43
lea eax, [ebp + 0x265b8]
push edi
push 0x80
push 4
push edi
push 1
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x431a6c
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x10], eax
mov esi, dword [ebp - 0x10]
inc esi
push esi
call fcn.00433c04
push esi
push edi
push eax
mov dword [ebp - 0x24], eax
call fcn.0043db10
add esp, 0x10
push edi
lea eax, [ebp - 0xa4]
push eax
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0xa4], edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp + 0x2649c]
push eax
lea eax, [ebp + 0x2650c]
push eax
call fcn.0041f4bb
pop ecx
pop ecx
cmp dword [ebp + 0x265cc], 8
mov eax, dword [ebp + 0x265b8]
mov byte [ebp - 4], 0x57
jae 0x431ad2
lea eax, [ebp + 0x265b8]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call esi
push str.GUANGSU
call fcn.0043dff0
pop ecx
xor ecx, ecx
xor edx, edx
cmp dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], eax
jle 0x431b0d
mov eax, dword [ebp - 0x24]
mov bl, byte [ecx + str.GUANGSU]
add eax, edx
xor byte [eax], bl
inc ecx
cmp ecx, dword [ebp - 0x1c]
jl 0x431b07
xor ecx, ecx
inc edx
cmp edx, dword [ebp - 0x10]
jl 0x431af2
cmp dword [ebp + 0x26524], 8
mov eax, dword [ebp + 0x26510]
jae 0x431b22
lea eax, [ebp + 0x26510]
push eax
call esi
lea eax, [ebp + 0x264d4]
push eax
lea eax, [ebp + 0x2657c]
push eax
call fcn.0041f4bb
pop ecx
pop ecx
cmp dword [ebp + 0x26594], 8
mov eax, dword [ebp + 0x26580]
mov byte [ebp - 4], 0x58
jae 0x431b53
lea eax, [ebp + 0x26580]
push eax
call fcn.0041f121
cmp dword [ebp + 0x26594], 8
mov eax, dword [ebp + 0x26580]
pop ecx
jae 0x431b6f
lea eax, [ebp + 0x26580]
push edi
push 0x80
xor esi, esi
inc esi
push esi
push edi
push esi
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x431baa
push edi
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], edi
push dword [ebp - 0x24]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x30], edi
je 0x431d03
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x4e3094
push esi
lea ecx, [ebp + 0x26624]
call fcn.004015d0
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26598]
push eax
lea ecx, [ebp + 0x26624]
mov byte [ebp - 4], 0x59
call fcn.00401d10
push str.Util32.exe
lea ecx, [ebp + 0x26624]
call fcn.00403470
push esi
lea ecx, [ebp + 0x26678]
call fcn.004015d0
mov ebx, 0x4cae6c
push ebx
lea ecx, [ebp + 0x26678]
mov byte [ebp - 4], 0x5a
call fcn.00403360
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp + 0x26678]
call fcn.004038f0
push str.__UnVuSW50ZXJmYWNl
lea ecx, [ebp + 0x26678]
call fcn.00403470
cmp dword [ebp - 0x6c], edi
jne 0x431c64
cmp dword [ebp + 0x26690], 8
mov eax, dword [ebp + 0x2667c]
jae 0x431c58
lea eax, [ebp + 0x2667c]
push eax
call fcn.0041e775
pop ecx
jmp 0x431ce4
push esi
lea ecx, [ebp + 0x26640]
call fcn.004015d0
push ebx
lea ecx, [ebp + 0x26640]
mov byte [ebp - 4], 0x5b
call fcn.00403360
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x264b8]
push eax
lea ecx, [ebp + 0x26640]
call fcn.004038f0
push 0x4cc524
lea ecx, [ebp + 0x26640]
call fcn.00403470
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x26624]
push eax
lea ecx, [ebp + 0x26640]
call fcn.004038f0
cmp dword [ebp + 0x26658], 8
mov eax, dword [ebp + 0x26644]
jae 0x431ccf
lea eax, [ebp + 0x26644]
push eax
call fcn.0041e775
pop ecx
push edi
push 1
lea ecx, [ebp + 0x26640]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26678]
call fcn.004017a0
push edi
push 1
lea ecx, [ebp + 0x26624]
call fcn.004017a0
xor esi, esi
inc esi
push dword [ebp - 0x24]
call fcn.004ba1b0
pop ecx
push edi
push esi
lea ecx, [ebp + 0x2657c]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x2650c]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26528]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x264f0]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26544]
call fcn.004017a0
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 6
call fcn.0040e209
push edi
push esi
lea ecx, [ebp + 0x264d4]
call fcn.00401750
push edi
push esi
lea ecx, [ebp + 0x2649c]
call fcn.00401750
push edi
push esi
lea ecx, [ebp + 0x265b4]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26560]
call fcn.00401750
push edi
push esi
lea ecx, [ebp + 0x264b8]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x265ec]
call fcn.004017a0
push edi
push esi
lea ecx, [ebp + 0x26598]
call fcn.004017a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x268b8]
xor ecx, ebp
call fcn.0043daf5
add ebp, 0x268bc
leave
ret 4