Function at 0x4b29ce
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse pe header

Disassembly:
push 0x1b8
mov eax, 0x4fd097
call fcn.004cb630
mov ebx, ecx
mov dword [ebp - 0x1b8], ebx
and dword [ebp - 0x1bc], 0
lea ecx, [ebp - 0xb8]
push str.UniAccessAgent.ini
call fcn.004408c6
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push eax
lea edx, [ebx + 0x28]
lea ecx, [ebp - 0x104]
call fcn.004430f1
pop ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00440d6c
push str.prepare_ini_from_section_start_file
lea ecx, [ebp - 0x9c]
call fcn.004408c6
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
mov edi, 0x541580
push eax
push 0x19b
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call fcn.00440d6c
push str.lva.ini
lea ecx, [ebp - 0x9c]
call fcn.004408c6
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x9c]
call fcn.0042b335
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00440d6c
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.004404ed
push 0x520b48
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.004408c6
push str.get_file_from_pe_section_lva.ini_to
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x19e
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x9c]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00440d6c
test esi, esi
je 0x4b2c89
push str._failed.
lea ecx, [ebp - 0x80]
call fcn.004408c6
push 8
pop ebx
push str.get_file_from_pe_section
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.004408c6
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1a2
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.00440d6c
push 2
push 0x64
pop edi
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b3c95
push 0x5281c0
lea ecx, [ebp - 0x80]
call fcn.004408c6
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.004408c6
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b2c4a
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2c54
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
jmp 0x4b3c95
lea ecx, [ebp - 0x104]
call fcn.0042ad33
mov esi, eax
mov eax, edx
mov dword [ebp - 0x1b4], eax
push 0x64
pop edi
test eax, eax
jg 0x4b2e2f
jl 0x4b2cb3
cmp esi, edi
ja 0x4b2e2f
push str._Must_Cust_Error...
lea ecx, [ebp - 0x2c]
call fcn.004408c6
push ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x1b4]
push esi
call fcn.0044046d
push str.size
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.004408c6
push str.GetFileLen::
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x541580
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1ac
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x9c]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00440d6c
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b2e27
push 0x5281c0
lea ecx, [ebp - 0x48]
call fcn.004408c6
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.004408c6
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x64]
call fcn.004b15fd
add esi, 4
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x4b2ded
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2df7
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
push 0x65
pop edi
jmp 0x4b3c95
lea ecx, [ebp - 0xe8]
call fcn.004331e4
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xd4]
call fcn.00440a6c
lea ecx, [ebp - 0xe8]
call fcn.00433aac
push str.UUID
lea ecx, [ebp - 0x48]
call fcn.004408c6
mov esi, str.Main
mov byte [ebp - 4], 0x15
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebx + 0x60]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.CustTime
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.004408c6
lea eax, [ebx + 0x7c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.package_name
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.004408c6
lea esi, [ebx + 0x98]
mov byte [ebp - 4], 0x1a
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b02
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.00440a6c
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.str_x86_url
lea ecx, [ebp - 0x48]
call fcn.004408c6
mov esi, str.Main
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebx + 0x15c]
mov byte [ebp - 4], 0x1e
push eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.str_x64_url
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.004408c6
lea eax, [ebx + 0x178]
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x1c4], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.ins_user
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.004408c6
lea eax, [ebx + 0x194]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.ins_pass
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.004408c6
lea esi, [ebx + 0x1b0]
mov byte [ebp - 4], 0x24
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.ins_domain
lea ecx, [ebp - 0x48]
call fcn.004408c6
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.004408c6
lea eax, [ebx + 0x1cc]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b02
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.00440a6c
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
cmp dword [ebx + 0x1a8], 0
je 0x4b31b4
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
lea esi, [ebx + 0x194]
push eax
mov edx, esi
lea ecx, [ebp - 0xb8]
call fcn.00443b02
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.00440d6c
cmp dword [ebp - 0xa4], 0
je 0x4b31a5
lea eax, [ebp - 0xb4]
push eax
lea ecx, [esi + 4]
call fcn.00443405
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.UseBeeDwn
lea ecx, [ebp - 0x48]
call fcn.004408c6
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.004408c6
lea eax, [ebx + 0x278]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e49
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.ServerIP
lea ecx, [ebp - 0x48]
call fcn.004408c6
mov esi, str.AgentCOMM
mov byte [ebp - 4], 0x2e
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebx + 0xb4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.OnlineServerIP
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.004408c6
lea eax, [ebx + 0xd0]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.ServerPort
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.004408c6
mov byte [ebp - 4], 0x33
lea eax, [ebx + 0xec]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.WebPort
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.004408c6
lea eax, [ebx + 0x108]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d6c
push str.BeeServerPort
lea ecx, [ebp - 0x48]
call fcn.004408c6
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.004408c6
add ebx, 0x27c
mov byte [ebp - 4], 0x37
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e49
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
cmp dword [ebx], 0
jne 0x4b338c
mov dword [ebx], 0x9914
lea ecx, [ebp - 0x120]
call fcn.004402b7
push str.MainTitle
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.004408c6
mov ebx, str.Main
mov byte [ebp - 4], 0x39
push ebx
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x13c]
call fcn.004402b7
push str.PartnerAgentName
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.004408c6
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
call fcn.004408c6
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
mov ebx, 0x51f46c
lea ecx, [ebp - 0x80]
push ebx
call fcn.004408c6
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x64]
call fcn.00443b02
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x11c]
call fcn.00443405
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
push ebx
lea ecx, [ebp - 0x9c]
call fcn.004408c6
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
push eax
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x64]
call fcn.004439b8
pop ecx
add eax, 4
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x138]
call fcn.00443405
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
push 8
pop ebx
cmp dword [ebp - 0x108], ebx
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
push 0x100
push 0x541220
call fcn.004dd683
mov esi, dword [ebp - 0x1b8]
add esp, 0xc
cmp dword [esi + 0x11c], 0
jne 0x4b3542
push 0xa
push 0x50
lea ecx, [ebp - 0x2c]
call fcn.004404ed
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [esi + 0x10c]
call fcn.00443405
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
push str._strCustOnlineServerIP
lea ecx, [ebp - 0xb8]
call fcn.004408c6
push str._WebPort
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x43
call fcn.004408c6
push str._ServerIP
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x44
call fcn.004408c6
push str._strCustTime
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.004408c6
push str.strCustGUID
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x46
call fcn.004408c6
lea eax, [esi + 0xd0]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x541580
push eax
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [esi + 0x7c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1e9
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, 0x541580
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x9c]
call fcn.00440d6c
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
mov ecx, esi
call fcn.004b21ec
cmp dword [0x5414d4], 0
mov esi, eax
mov dword [ebp - 0x1b8], esi
je 0x4b3700
test esi, esi
je 0x4b3693
cmp esi, 1
je 0x4b3693
cmp esi, 2
jne 0x4b3700
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.004404ed
push str.update_judge_ret
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.004408c6
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x2c]
mov ebx, 0x541580
push eax
push 0x1f1
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
call fcn.00440d6c
push 0xfffffffffffffffd
jmp 0x4b3c5b
push str..msi
lea ecx, [ebp - 0x48]
call fcn.004408c6
mov ecx, dword [ebp - 0x1c0]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.00441fe1
test al, al
je 0x4b3768
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.004408c6
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
push 0
push eax
mov dword [ebp - 0x1b4], 3
call fcn.00441fe1
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x4b376f
mov byte [ebp - 0x1ad], 0
test byte [ebp - 0x1b4], 2
je 0x4b3780
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x3b
call fcn.00440d6c
cmp byte [ebp - 0x1ad], 0
je 0x4b3966
cmp esi, 1
je 0x4b38a0
cmp esi, 2
je 0x4b38a0
test esi, esi
jne 0x4b3c5e
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], esi
jne 0x4b385c
push 0x5281c0
lea ecx, [ebp - 0x48]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
call fcn.004408c6
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x80]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x64]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b381e
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3828
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
push eax
push 0x207
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
jmp 0x4b3c54
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b3947
push 0x5281c0
lea ecx, [ebp - 0x48]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.004408c6
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x80]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x64]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3909
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3913
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
push eax
push 0x1ff
jmp 0x4b3a51
cmp esi, 1
je 0x4b3974
cmp esi, 2
jne 0x4b3a89
cmp dword [0x54146c], 0
jne 0x4b3a89
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x5281c0
lea ecx, [ebp - 0x9c]
call fcn.004408c6
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x53
call fcn.004408c6
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1ac]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x190]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b39e9
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b39f3
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.00440d6c
lea ecx, [ebp - 0x1ac]
call fcn.00440d6c
lea ecx, [ebp - 0x80]
call fcn.00440d6c
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
cmp esi, 6
je 0x4b3a83
push str.Artificial__exit
lea ecx, [ebp - 0x2c]
call fcn.004408c6
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x56
push eax
push 0x214
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d6c
or edi, 0xffffffff
jmp 0x4b3c74
mov esi, dword [ebp - 0x1b8]
test esi, esi
jne 0x4b3c5e
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], esi
jne 0x4b3c5e
push 0x5281c0
lea ecx, [ebp - 0x64]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x57
call fcn.004408c6
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x174]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x158]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3b05
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3b0f
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.00440d6c
lea ecx, [ebp - 0x174]
call fcn.00440d6c
lea ecx, [ebp - 0xb8]
call fcn.00440d6c
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
cmp esi, 6
jne 0x4b3c15
push 0x5281c0
lea ecx, [ebp - 0xb8]
call fcn.004408c6
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
call fcn.004408c6
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x158]
call fcn.004b15fd
mov esi, eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x174]
call fcn.004b15fd
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3bab
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3bb5
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.00440d6c
lea ecx, [ebp - 0x158]
call fcn.00440d6c
lea ecx, [ebp - 0x64]
call fcn.00440d6c
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440d6c
cmp esi, 6
je 0x4b3c5e
push str.current_version_have_already_setup__exit
lea ecx, [ebp - 0x64]
call fcn.004408c6
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5d
push eax
push 0x224
jmp 0x4b3c2f
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x64]
call fcn.004408c6
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5e
push eax
push 0x22a
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x64]
call fcn.00440d6c
push 0xfffffffffffffffe
pop edi
jmp 0x4b3c74
push 1
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
lea ecx, [ebp - 0x13c]
call fcn.00440d6c
lea ecx, [ebp - 0x120]
call fcn.00440d6c
lea ecx, [ebp - 0xe8]
call fcn.00433207
lea ecx, [ebp - 0x104]
call fcn.00440d6c
mov eax, edi
call fcn.004cb5da
ret