Function at 0x41b63b
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xbfc
mov eax, 0x445325
call fcn.0042bcc0
mov esi, ecx
mov dword [ebp - 0xbd4], esi
xor ebx, ebx
mov dword [ebp - 0xbf0], esi
mov dword [ebp - 0xbb8], ebx
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x8c], bl
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 1
call fcn.0041b4c5
push 0x74
lea eax, [ebp - 0xadc]
push ebx
push eax
call fcn.0042b470
add esp, 0xc
lea ecx, [ebp - 0xadc]
call fcn.0040bb71
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x44]
rep stosd dword es:[edi], eax
and dword [ebp - 0x3c], 0xfffffe00
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
push ecx
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xadc]
call fcn.0040bbca
test al, al
jne 0x41b718
push 0x44d05a
mov ecx, esi
call fcn.0040276c
xor edi, edi
mov byte [ebp - 4], 2
inc edi
lea ecx, [ebp - 0x44]
mov dword [ebp - 0xbb8], edi
call fcn.0040dd7f
lea ecx, [ebp - 0xadc]
call fcn.00401597
push ebx
push edi
lea ecx, [ebp - 0x8c]
call fcn.00402d99
mov eax, esi
jmp 0x41dca6
push ecx
push 0x44d2ac
lea ecx, [ebp - 0x44]
call fcn.0040e523
lea ecx, [ebp - 0x914]
mov esi, eax
call fcn.0041a09f
mov dword [ebp - 0x1b0], 0xf
mov dword [ebp - 0x1b4], ebx
mov byte [ebp - 0x1c4], bl
lea edx, [ebp - 0x1c4]
mov byte [ebp - 4], 6
call fcn.0041a1cb
lea ecx, [ebp - 0xa4c]
call fcn.0041a343
lea ecx, [ebp - 0xa1c]
mov byte [ebp - 4], 7
call fcn.0041a550
lea ecx, [ebp - 0x9ec]
mov byte [ebp - 4], 8
call fcn.0041a9c4
lea ecx, [ebp - 0xa64]
mov byte [ebp - 4], 9
call fcn.0041abe4
xor edx, edx
mov byte [ebp - 4], 0xa
mov ecx, str.QQ.exe
call fcn.0041ad20
mov edi, str.SoftwareTencentPlatForm_Type_List1
mov byte [ebp - 0xb9c], al
push edi
lea ecx, [ebp - 0x9bc]
call fcn.00402874
push str.TypePath
lea ecx, [ebp - 0x98c]
mov byte [ebp - 4], 0xb
call fcn.00402874
lea eax, [ebp - 0x98c]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x9bc]
mov edx, closesocket
push eax
lea ecx, [ebp - 0x95c]
call fcn.0041aef0
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x92c]
mov byte [ebp - 4], 0xd
call fcn.00402874
push str.TypeName
lea ecx, [ebp - 0x8b4]
mov byte [ebp - 4], 0xe
call fcn.00402874
lea eax, [ebp - 0x8b4]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x92c]
mov edx, closesocket
push eax
lea ecx, [ebp - 0x884]
call fcn.0041aef0
pop ecx
pop ecx
lea ecx, [ebp - 0x854]
mov byte [ebp - 4], 0x10
call fcn.0041b327
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x11
push eax
xor edi, edi
mov ecx, esi
inc edi
push edi
push 0x452ebc
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 0x10
jb 0x41b87b
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0xb90]
call fcn.0041dcac
cmp dword [eax + 0x14], 8
jb 0x41b890
mov eax, dword [eax]
xor edx, edx
mov ecx, eax
call fcn.0041ad20
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 0xb92], al
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x11
call fcn.00402d99
push 0x452ec0
lea ecx, [ebp - 0x194]
call fcn.00402874
push str.InstallDir
lea ecx, [ebp - 0x824]
mov byte [ebp - 4], 0x13
call fcn.00402874
mov byte [ebp - 4], 0x14
call fcn.0041a750
test eax, eax
je 0x41b90a
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x194]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x452ebc
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x194]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x14
call fcn.00402d99
lea eax, [ebp - 0x824]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x7f4]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0x16
call fcn.00402874
lea eax, [ebp - 0x7c4]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x194]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x794]
call fcn.0041aef0
pop ecx
pop ecx
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x18
push eax
push edi
push 0x452f30
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 0x10
jb 0x41b9d8
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0xb90]
call fcn.0041dcac
cmp dword [eax + 0x14], 8
jb 0x41b9ed
mov eax, dword [eax]
xor edx, edx
mov ecx, eax
call fcn.0041ad20
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 0xb76], al
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x18
call fcn.00402d99
push 0x452ec0
lea ecx, [ebp - 0x1f4]
call fcn.00402874
push 0x452f34
lea ecx, [ebp - 0x764]
mov byte [ebp - 4], 0x1a
call fcn.00402874
mov byte [ebp - 4], 0x1b
call fcn.0041a750
test eax, eax
je 0x41ba67
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x1f4]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x452f30
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1f4]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x1b
call fcn.00402d99
lea eax, [ebp - 0x764]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x734]
call fcn.0041aef0
pop ecx
pop ecx
mov dword [ebp - 0x2d0], 0xf
mov dword [ebp - 0x2d4], ebx
mov byte [ebp - 0x2e4], bl
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x1e
push eax
push edi
push 0x452f3c
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x14], 0x10
jb 0x41bb13
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0xb90]
call fcn.0041dcac
cmp dword [eax + 0x14], 8
jb 0x41bb28
mov eax, dword [eax]
xor edx, edx
mov ecx, eax
call fcn.0041ad20
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 0xb94], al
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x1e
call fcn.00402d99
push 0x452ec0
lea ecx, [ebp - 0x164]
call fcn.00402874
push 0x452f40
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x20
call fcn.00402874
mov byte [ebp - 4], 0x21
call fcn.0041a750
test eax, eax
je 0x41bba2
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x164]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x452f3c
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x164]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x21
call fcn.00402d99
lea eax, [ebp - 0x704]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x6d4]
call fcn.0041aef0
pop ecx
pop ecx
push str.InstallVersion
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 0x23
call fcn.00402874
lea eax, [ebp - 0x6a4]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x164]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x674]
call fcn.0041aef0
pop ecx
pop ecx
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x25
push eax
push edi
push 0x452f78
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x26
cmp dword [eax + 0x14], 0x10
jb 0x41bc70
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0xb90]
call fcn.0041dcac
cmp dword [eax + 0x14], 8
jb 0x41bc85
mov eax, dword [eax]
xor edx, edx
mov ecx, eax
call fcn.0041ad20
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 0xb97], al
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x25
call fcn.00402d99
push 0x452ec0
lea ecx, [ebp - 0xec]
call fcn.00402874
push str.InstallDir
lea ecx, [ebp - 0x644]
mov byte [ebp - 4], 0x27
call fcn.00402874
mov byte [ebp - 4], 0x28
call fcn.0041a750
test eax, eax
je 0x41bcff
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0xec]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x452f78
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xec]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x28
call fcn.00402d99
lea eax, [ebp - 0x644]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x614]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x2a
call fcn.00402874
lea eax, [ebp - 0x5e4]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0xec]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x5b4]
call fcn.0041aef0
pop ecx
pop ecx
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x2c
push eax
push edi
push 0x452f7c
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x2d
cmp dword [eax + 0x14], 0x10
jb 0x41bdcd
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0xb90]
call fcn.0041dcac
cmp dword [eax + 0x14], 8
jb 0x41bde2
mov eax, dword [eax]
xor edx, edx
mov ecx, eax
call fcn.0041ad20
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 0xb99], al
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x2c
call fcn.00402d99
push 0x452ec0
lea ecx, [ebp - 0x134]
call fcn.00402874
push 0x452f80
lea ecx, [ebp - 0x584]
mov byte [ebp - 4], 0x2e
call fcn.00402874
mov byte [ebp - 4], 0x2f
call fcn.0041a750
test eax, eax
je 0x41be5c
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x134]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x452f7c
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x134]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x2f
call fcn.00402d99
lea eax, [ebp - 0x584]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x554]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x31
call fcn.00402874
lea eax, [ebp - 0x524]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x134]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x4f4]
call fcn.0041aef0
pop ecx
pop ecx
push str.SoftwarekingsoftOffice6.0common
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x33
call fcn.00402874
push str.InstallRoot
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0x34
call fcn.00402874
lea eax, [ebp - 0x4c4]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x2fc]
mov edx, closesocket
push eax
lea ecx, [ebp - 0x494]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x36
call fcn.00402874
lea eax, [ebp - 0x464]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x2fc]
mov edx, closesocket
push eax
lea ecx, [ebp - 0x434]
call fcn.0041aef0
pop ecx
pop ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x38
call fcn.00402874
push str.InstallLocation
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x39
call fcn.00402874
mov byte [ebp - 4], 0x3a
call fcn.0041a750
test eax, eax
je 0x41bfcd
mov edi, str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstall
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0xd4]
call fcn.004036d1
xor edi, edi
inc edi
xor eax, eax
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], ebx
mov word [ebp - 0x104], ax
push str.Office
lea ecx, [ebp - 0xbd0]
mov byte [ebp - 4], 0x3b
call fcn.0040276c
push str.DisplayName
lea ecx, [ebp - 0xc08]
mov byte [ebp - 4], 0x3c
call fcn.00402874
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0xbd0]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0xc08]
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.0041b201
add esp, 0x14
push ebx
push edi
lea ecx, [ebp - 0xc08]
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xbd0]
mov byte [ebp - 4], 0x40
call fcn.00402d99
mov edi, 0x44d0e4
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0xd4]
call fcn.00402e83
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402ddd
push str.DisplayVersion
lea ecx, [ebp - 0x3a4]
call fcn.00402874
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0xd4]
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
push eax
mov edx, ebx
lea ecx, [ebp - 0x374]
call fcn.0041aef0
pop ecx
pop ecx
xor edx, edx
mov byte [ebp - 4], 0x42
mov ecx, str.Clsmn.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb9b], al
mov ecx, str.scon.exe
call fcn.0041ad20
mov byte [ebp - 0xb96], al
xor edx, edx
mov ecx, str.Pubwin.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb95], al
mov ecx, str.UKeyMain.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb98], al
mov ecx, str.iKeeperSimple.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb91], al
mov ecx, str.BarClientView.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb9a], al
mov ecx, str.yqsclient.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb75], al
mov ecx, str.Rzxclient.exe
call fcn.0041ad20
xor edx, edx
mov byte [ebp - 0xb93], al
mov ecx, str.PowerMaster.exe
call fcn.0041ad20
push str.SOFTWAREPowerShadow
lea ecx, [ebp - 0x2cc]
call fcn.00402874
push str.Version
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 0x43
call fcn.00402874
mov byte [ebp - 4], 0x44
call fcn.0041a750
test eax, eax
je 0x41c1b4
mov edi, str.SOFTWAREWow6432NodePowerShadow
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2cc]
call fcn.004036d1
lea eax, [ebp - 0x35c]
mov edx, ebx
push eax
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x6ec]
call fcn.0041aef0
pop ecx
pop ecx
xor edx, edx
mov byte [ebp - 4], 0x45
mov ecx, str.Defender.exe
call fcn.0041ad20
push str.SOFTWAREShadow_Defender
lea ecx, [ebp - 0x29c]
call fcn.00402874
push str.Path
lea ecx, [ebp - 0x9a4]
mov byte [ebp - 4], 0x46
call fcn.00402874
mov byte [ebp - 4], 0x47
call fcn.0041a750
test eax, eax
je 0x41c22b
mov edi, str.SOFTWAREWow6432NodeShadow_Defender
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x29c]
call fcn.004036d1
lea eax, [ebp - 0x9a4]
mov edx, ebx
push eax
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x6bc]
call fcn.0041aef0
pop ecx
pop ecx
mov ebx, str.Software__UpdateClientState
mov byte [ebp - 4], 0x48
push ebx
lea ecx, [ebp - 0xa4]
call fcn.00402874
push str.UninstallString
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0x49
call fcn.00402874
lea eax, [ebp - 0xbd0]
mov byte [ebp - 4], 0x4a
push eax
push 0
mov edi, 0x452624
mov ecx, esi
push edi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xa4]
call fcn.0041b5be
push 0
push 1
lea ecx, [ebp - 0xbd0]
mov byte [ebp - 4], 0x4a
call fcn.00402d99
push 0x44d05a
lea ecx, [ebp - 0xc08]
call fcn.0040276c
push 0x44d190
lea ecx, [ebp - 0xbd0]
mov byte [ebp - 4], 0x4c
call fcn.00402874
push 0
lea eax, [ebp - 0xc08]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0xbd0]
mov edx, closesocket
push eax
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x284]
call fcn.0041b201
add esp, 0x14
push 0
push 1
lea ecx, [ebp - 0xbd0]
call fcn.00403476
push 0
push 1
lea ecx, [ebp - 0xc08]
mov byte [ebp - 4], 0x50
call fcn.00402d99
push str.Software__UpdateClients
call fcn.0040126a
pop ecx
push eax
push str.Software__UpdateClients
lea ecx, [ebp - 0xa4]
call fcn.004036d1
push 0x4533cc
lea ecx, [ebp - 0x68c]
call fcn.00402874
lea eax, [ebp - 0xbd0]
mov byte [ebp - 4], 0x51
push eax
push 0
push edi
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xa4]
call fcn.0041b5be
xor edi, edi
mov byte [ebp - 4], 0x51
push edi
push 1
lea ecx, [ebp - 0xbd0]
call fcn.00402d99
push 0x44d05a
lea ecx, [ebp - 0xbec]
call fcn.0040276c
push 0x44d190
lea ecx, [ebp - 0xbd0]
mov byte [ebp - 4], 0x53
call fcn.00402874
push edi
lea eax, [ebp - 0xbec]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0xbd0]
mov edx, closesocket
push eax
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa34]
call fcn.0041b201
add esp, 0x14
push edi
push 1
lea ecx, [ebp - 0xbd0]
call fcn.00403476
push edi
push 1
lea ecx, [ebp - 0xbec]
mov byte [ebp - 4], 0x57
call fcn.00402d99
push ebx
lea ecx, [ebp - 0x74]
call fcn.00402874
push str.UninstallString
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x58
call fcn.00402874
lea eax, [ebp - 0xbec]
mov byte [ebp - 4], 0x59
push eax
xor ebx, ebx
mov edi, 0x4533d4
push ebx
push edi
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x74]
call fcn.0041b5be
push ebx
push 1
lea ecx, [ebp - 0xbec]
mov byte [ebp - 4], 0x59
call fcn.00402d99
push 0x44d05a
lea ecx, [ebp - 0xbb4]
call fcn.0040276c
push 0x44d190
lea ecx, [ebp - 0xbec]
mov byte [ebp - 4], 0x5b
call fcn.00402874
push ebx
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x5c
push eax
lea eax, [ebp - 0xbec]
mov edx, closesocket
push eax
lea eax, [ebp - 0x65c]
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x86c]
call fcn.0041b201
add esp, 0x14
push ebx
push 1
lea ecx, [ebp - 0xbec]
call fcn.00403476
push ebx
push 1
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x5f
call fcn.00402d99
mov ebx, str.Software__UpdateClients
push ebx
call fcn.0040126a
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x74]
call fcn.004036d1
lea eax, [ebp - 0xbd0]
xor ebx, ebx
push eax
push ebx
push edi
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x74]
call fcn.0041b5be
xor edi, edi
mov byte [ebp - 4], 0x5f
push ebx
inc edi
lea ecx, [ebp - 0xbd0]
push edi
call fcn.00402d99
push 0x4533cc
lea ecx, [ebp - 0x62c]
call fcn.00402874
push 0x44d05a
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x61
call fcn.0040276c
push 0x44d190
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x62
call fcn.00402874
push ebx
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x63
push eax
lea eax, [ebp - 0xbb4]
mov edx, closesocket
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x344]
call fcn.0041b201
add esp, 0x14
push ebx
push edi
lea ecx, [ebp - 0xbb4]
call fcn.00403476
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x66
call fcn.00402d99
push str.SOFTWARE__UpdateClients
lea ecx, [ebp - 0x2c]
call fcn.00402874
mov byte [ebp - 4], 0x67
call fcn.0041a750
test eax, eax
je 0x41c611
mov edi, str.SOFTWAREWow6432Node__UpdateClients
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.004036d1
xor edi, edi
inc edi
lea eax, [ebp - 0xbb4]
mov ecx, esi
push eax
push ebx
push 0x453460
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x2c]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xbb4]
mov byte [ebp - 4], 0x67
call fcn.00402d99
push 0x4533cc
lea ecx, [ebp - 0x32c]
call fcn.00402874
xor eax, eax
mov dword [ebp - 0x198], 7
mov dword [ebp - 0x19c], ebx
mov word [ebp - 0x1ac], ax
push str.name
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x6a
call fcn.00402874
lea eax, [ebp - 0xbb4]
mov byte [ebp - 4], 0x6b
push eax
push edi
push 0x453460
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x6c
push ecx
push eax
lea eax, [ebp - 0xb90]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x974]
call fcn.0041b201
add esp, 0x14
push ebx
push edi
lea ecx, [ebp - 0xbb4]
call fcn.00402d99
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x6f
call fcn.00403476
mov edi, str.SOFTWARE__UpdateClientState
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.004036d1
push str.UninstallString
lea ecx, [ebp - 0x5fc]
call fcn.00402874
mov byte [ebp - 4], 0x70
call fcn.0041a750
test eax, eax
je 0x41c74d
mov edi, str.SOFTWAREWow6432Node__UpdateClientState
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x453460
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x2c]
call fcn.0041b5be
push ebx
push 1
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x70
call fcn.00402d99
mov edi, 0x44d0e4
push edi
call fcn.0040126a
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402e83
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ddd
lea eax, [ebp - 0x5fc]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x83c]
call fcn.0041aef0
pop ecx
pop ecx
push str.Software__
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x72
call fcn.00402874
push 0x44d190
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 4], 0x73
call fcn.00402874
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x74
push eax
push ebx
mov ebx, 0x453520
mov ecx, esi
push ebx
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xbc]
call fcn.0041b5be
push 0
push 1
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x74
call fcn.00402d99
lea eax, [ebp - 0x5cc]
mov edx, closesocket
push eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x9d4]
call fcn.0041aef0
mov edi, str.Software__PrivateCfg
mov byte [ebp - 4], 0x76
push edi
call fcn.0040126a
add esp, 0xc
lea ecx, [ebp - 0xbc]
push eax
push edi
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push 0
push ebx
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0xbc]
call fcn.0041b5be
xor edi, edi
mov byte [ebp - 4], 0x76
push 0
inc edi
lea ecx, [ebp - 0xb90]
push edi
call fcn.00402d99
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push edi
push ebx
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov byte [ebp - 4], 0x78
cmp dword [eax + 0x14], 0x10
jb 0x41c8f3
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0x59c]
call fcn.0041dcac
xor ebx, ebx
mov byte [ebp - 4], 0x7a
push ebx
push edi
lea ecx, [ebp - 0xb90]
call fcn.00402d99
lea eax, [ebp - 0x59c]
mov edx, closesocket
push eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x80c]
call fcn.0041aef0
pop ecx
pop ecx
push str.Software__
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x7b
call fcn.00402874
push 0x44d190
lea ecx, [ebp - 0x56c]
mov byte [ebp - 4], 0x7c
call fcn.00402874
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x7d
push eax
push ebx
push 0x452628
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x254]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x7d
call fcn.00402d99
lea eax, [ebp - 0x56c]
mov edx, closesocket
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x944]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0x7f
call fcn.00402874
lea eax, [ebp - 0x53c]
mov byte [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x254]
mov edx, closesocket
push eax
lea ecx, [ebp - 0x7dc]
call fcn.0041aef0
pop ecx
pop ecx
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x224]
push 0x452ec0
call fcn.00402874
push str.Path
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0x82
call fcn.00402874
mov byte [ebp - 4], 0x83
call fcn.0041a750
test eax, eax
je 0x41ca4c
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x224]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x453554
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x224]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x83
call fcn.00402d99
lea eax, [ebp - 0x50c]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0xa04]
call fcn.0041aef0
pop ecx
pop ecx
mov dword [ebp - 0x1f8], 0xf
mov dword [ebp - 0x1fc], ebx
mov byte [ebp - 0x20c], bl
push 0x452ec0
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x86
call fcn.00402874
push str.Install_Path_Dir
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x87
call fcn.00402874
mov byte [ebp - 4], 0x88
call fcn.0041a750
test eax, eax
je 0x41cb17
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x14c]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x45357c
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x14c]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x88
call fcn.00402d99
lea eax, [ebp - 0x4dc]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x7ac]
call fcn.0041aef0
pop ecx
pop ecx
push 0x452f34
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 0x8a
call fcn.00402874
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x8b
push eax
lea eax, [ebp - 0x14c]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x4ac]
call fcn.0041aef0
pop ecx
pop ecx
push 0x452ec0
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x8c
call fcn.00402874
push str.InstallerSuccessLaunchCmdLine
lea ecx, [ebp - 0x8fc]
mov byte [ebp - 4], 0x8d
call fcn.00402874
mov byte [ebp - 4], 0x8e
call fcn.0041a750
test eax, eax
je 0x41cc04
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x17c]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x4535bc
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x17c]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x8e
call fcn.00402d99
lea eax, [ebp - 0x8fc]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041aef0
pop ecx
pop ecx
mov byte [ebp - 4], 0x90
cmp dword [ebp - 0x4c], 0
je 0x41cc87
push edi
push ebx
lea ecx, [ebp - 0x5c]
call fcn.004035b1
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x5c]
push edi
dec eax
push eax
call fcn.004035b1
push 0x4533cc
lea ecx, [ebp - 0x47c]
call fcn.00402874
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 0x91
push eax
lea eax, [ebp - 0x17c]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea ecx, [ebp - 0x77c]
call fcn.0041aef0
pop ecx
pop ecx
push str.Software__
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 0x92
call fcn.00402874
push str.Folder
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x93
call fcn.00402874
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x94
push eax
push ebx
push 0x4535d0
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x2b4]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x94
call fcn.00402d99
lea eax, [ebp - 0x44c]
mov edx, closesocket
push eax
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x8e4]
call fcn.0041aef0
pop ecx
pop ecx
mov dword [ebp - 0x228], 0xf
mov dword [ebp - 0x22c], ebx
mov byte [ebp - 0x23c], bl
push str.Software__
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x97
call fcn.00402874
push str.CurrentVersion
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x98
call fcn.00402874
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x99
push eax
push ebx
push 0x4535f4
mov ecx, esi
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x26c]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x99
call fcn.00402d99
lea eax, [ebp - 0x41c]
mov edx, closesocket
push eax
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x74c]
call fcn.0041aef0
pop ecx
pop ecx
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], ebx
mov byte [ebp - 0x1dc], bl
push 0x452ec0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x9c
call fcn.00402874
push 0x4535f8
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x9d
call fcn.00402874
mov byte [ebp - 4], 0x9e
call fcn.0041a750
test eax, eax
je 0x41ce58
push str.SOFTWAREWow6432Node__
call fcn.0040126a
pop ecx
push eax
push str.SOFTWAREWow6432Node__
lea ecx, [ebp - 0x11c]
call fcn.004036d1
lea eax, [ebp - 0xb90]
mov ecx, esi
push eax
push ebx
push 0x453610
call fcn.0040e629
mov ecx, eax
call fcn.0040e4cd
mov ecx, eax
call fcn.0040deaa
mov edx, eax
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x11c]
call fcn.0041b5be
push ebx
push edi
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x9e
call fcn.00402d99
lea eax, [ebp - 0x3ec]
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x11c]
mov edx, esi
push eax
lea ecx, [ebp - 0x8cc]
call fcn.0041aef0
pop ecx
pop ecx
push str.Version
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 0xa0
call fcn.00402874
lea eax, [ebp - 0x3bc]
mov byte [ebp - 4], 0xa1
push eax
lea eax, [ebp - 0x11c]
mov edx, esi
push eax
lea ecx, [ebp - 0x71c]
call fcn.0041aef0
push 0x98
lea eax, [ebp - 0xb74]
mov byte [ebp - 4], 0xa2
push ebx
push eax
call fcn.0042b470
add esp, 0xc
lea ecx, [ebp - 0xb74]
call fcn.00407803
mov byte [ebp - 4], 0xa3
call fcn.00405394
test al, al
jne 0x41cf2b
call fcn.00405404
test al, al
je 0x41cf2d
mov ebx, edi
call fcn.004160e4
mov esi, eax
call fcn.004160e4
mov edi, eax
call fcn.004160e4
xor ecx, ecx
mov edx, eax
cmp byte [ebp - 0xb93], cl
setne cl
push ecx
push ecx
xor ecx, ecx
cmp byte [ebp - 0xb75], cl
setne cl
xor eax, eax
cmp byte [ebp - 0xb9a], al
push ecx
setne al
push ecx
push eax
xor eax, eax
cmp byte [ebp - 0xb91], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb98], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb96], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb9b], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb95], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb99], al
push ecx
push ebx
setne al
lea ebx, [esi + 0x30]
push ecx
push eax
xor eax, eax
lea esi, [edx + 0x18]
cmp byte [ebp - 0xb97], al
mov edx, str._c_:_
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb92], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb94], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb76], al
push ecx
setne al
push eax
xor eax, eax
cmp byte [ebp - 0xb9c], al
push ecx
setne al
push eax
push ecx
lea ecx, [ebp - 0xb74]
call fcn.00409575
mov edx, esi
mov ecx, eax
call fcn.004103f5
mov esi, 0x452598
mov ecx, eax
mov edx, esi
call fcn.00409575
mov edx, str.__u_:_
mov ecx, eax
call fcn.00409575
mov edx, edi
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__diskid_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x1c4]
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__netcardid_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x914]
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__cpuinfo_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0xa4c]
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__resolution_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0xa1c]
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__osinfo_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x9ec]
mov ecx, eax
call fcn.004103f5
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__qq_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov esi, str.__ver_:_
mov ecx, eax
mov edx, esi
call fcn.00409575
lea edx, [ebp - 0x884]
mov ecx, eax
call fcn.004103f5
mov edx, str.___dir_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x95c]
mov ecx, eax
call fcn.004103f5
mov edx, str.___number_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x854]
mov ecx, eax
call fcn.004103f5
mov edi, 0x453634
mov ecx, eax
mov edx, edi
call fcn.00409575
mov edx, str.__client_status_:
mov ecx, eax
call fcn.00409575
mov edx, ebx
mov ecx, eax
call fcn.004103f5
mov edx, str.__sd1_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x734]
mov ecx, eax
call fcn.004103f5
mov ebx, str.___dir_:_
mov ecx, eax
mov edx, ebx
call fcn.00409575
lea edx, [ebp - 0x284]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__sd2_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x674]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x6d4]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__sd3_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x794]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x7f4]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__sd4_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x5b4]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__sd5_:_process_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x4f4]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x554]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__office_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x374]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x3d4]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__wps_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x434]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x494]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__is_virtual_machine_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov esi, 0x44d05a
mov ecx, eax
mov edx, esi
call fcn.00409575
mov edx, str.__pubwin_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__clsmn_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__scon_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__ukeymain_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__ikeepersimple_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__barclientview_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__yqsclient_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, str.__rzxclient_:
mov ecx, eax
call fcn.00409575
pop ecx
mov ecx, eax
call fcn.00410278
mov edx, esi
mov ecx, eax
call fcn.00409575
mov edx, str.__powershadow_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x6ec]
mov ecx, eax
call fcn.004103f5
mov edx, str.___shadow_defender_:_dir_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x6bc]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b1_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0xa34]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x284]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b2_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x344]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x86c]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b3_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x974]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x83c]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b4_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x80c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x9d4]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b5_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x7dc]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x944]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b6_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x20c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0xa04]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b7_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x4ac]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x7ac]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b8_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x77c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x5c]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b9_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x23c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x8e4]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b10_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x74c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x1dc]
mov ecx, eax
call fcn.004103f5
mov edx, edi
mov ecx, eax
call fcn.00409575
mov edx, str.__b11_:_ver_:_
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x71c]
mov ecx, eax
call fcn.004103f5
mov edx, ebx
mov ecx, eax
call fcn.00409575
lea edx, [ebp - 0x8cc]
mov ecx, eax
call fcn.004103f5
mov edx, 0x453614
mov ecx, eax
call fcn.00409575
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0xb74]
call fcn.004078cc
mov ebx, dword [ebp - 0xbd4]
lea eax, [ebp - 0x38c]
push eax
mov ecx, ebx
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
call fcn.00402a78
xor edi, edi
lea ecx, [ebp - 0x38c]
xor esi, esi
inc edi
push esi
push edi
mov dword [ebp - 0xbb8], edi
call fcn.00402d99
lea ecx, [ebp - 0xb74]
call fcn.00406a0a
push esi
push edi
lea ecx, [ebp - 0x71c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x3bc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x8cc]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x3ec]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x11c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x1dc]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x74c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x41c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x26c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x23c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x8e4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x77c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x47c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x5c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x8fc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x17c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x4ac]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x314]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x7ac]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x4dc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x14c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x20c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0xa04]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x50c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x224]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x7dc]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x53c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x944]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x56c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x254]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x80c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x59c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x9d4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x5cc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xbc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x83c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x5fc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x974]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x1ac]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x32c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x344]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x62c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x86c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x65c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x74]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xa34]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x68c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x284]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x89c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xa4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x6bc]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x9a4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x29c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x6ec]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x35c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x2cc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x374]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x3a4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x3d4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x104]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x404]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xd4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x434]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x464]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x494]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x4c4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x2fc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x4f4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x524]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x554]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x584]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x134]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x5b4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x5e4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x614]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x644]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xec]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x674]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x6a4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x6d4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x704]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x164]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x2e4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x734]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x764]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x1f4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x794]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x7c4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x7f4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x824]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x194]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x854]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x884]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x8b4]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x92c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x95c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x98c]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0x9bc]
call fcn.00403476
push esi
push edi
lea ecx, [ebp - 0xa64]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x9ec]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0xa1c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0xa4c]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x1c4]
call fcn.00402d99
push esi
push edi
lea ecx, [ebp - 0x914]
call fcn.00402d99
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.0040dd7f
lea ecx, [ebp - 0xadc]
call fcn.00401597
push esi
push edi
lea ecx, [ebp - 0x8c]
call fcn.00402d99
mov eax, ebx
call fcn.0042bc6f
ret