Function at 0x43f948
Capabilities:
Copy file
Persist via lnk shortcut
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc00
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0xba8], eax
lea eax, [ebp - 0x193]
push ebx
push eax
mov byte [ebp - 0x194], bl
call fcn.005306b0
add esp, 0xc
mov esi, 0x3ff
push esi
lea eax, [ebp - 0x69b]
push ebx
push eax
mov byte [ebp - 0x69c], bl
call fcn.005306b0
add esp, 0xc
push esi
lea eax, [ebp - 0xba3]
push ebx
push eax
mov byte [ebp - 0xba4], bl
call fcn.005306b0
xor eax, eax
mov word [ebp - 0xbcc], bx
lea edi, [ebp - 0xbca]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0xbdc], bx
lea edi, [ebp - 0xbda]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push 0x3f
stosw word es:[edi], ax
lea eax, [ebp - 0x8b]
push ebx
push eax
mov dword [ebp - 0xbb8], ebx
mov byte [ebp - 0x8c], bl
call fcn.005306b0
add esp, 0xc
call fcn.00418802
test eax, eax
jne 0x43fa0f
push ebx
xor ecx, ecx
call fcn.00411a5e
pop ecx
call fcn.00415783
push ebx
call fcn.004ca282
pop ecx
push 2
pop edi
call fcn.00416142
push 0x270f
call fcn.00414752
pop ecx
push ebx
push str.8Ex0_0T_I__lQegYdiyovQ8
call fcn.004cf702
push eax
push 0x55ad2c
push ebx
call fcn.004ce595
add esp, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, str.UpStrdedP2_221277_avcdii22.flg
push esi
push ebx
call fcn.00493278
pop ecx
pop ecx
mov edi, eax
call fcn.00432263
test eax, eax
jne 0x43fc2e
push 0x15e
push str..Installation.c
push esi
push ebx
call fcn.00493278
pop ecx
pop ecx
mov edx, 0x566e8c
mov ecx, eax
call fcn.00434df1
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x43fc2e
push str.FLAG
push esi
call fcn.00530ffb
pop ecx
pop ecx
mov ecx, esi
call fcn.00435239
jmp 0x43fc2e
push 0
push str.zbiiSeQ_iREuKaXaa_fIO
call fcn.004cf702
push eax
push 0x54f2dc
call fcn.0041679b
mov ecx, dword [0x607ce8]
add esp, 0x10
cmp dword [ebp - 0xba8], ecx
je 0x43faf1
call fcn.00406f62
test eax, eax
je 0x43faf1
mov eax, dword [0x607ce8]
mov dword [ebp - 0xba8], eax
jmp 0x43fc2e
push dword [ebp - 0xba8]
push str.:7:InstallPAULA__s__encountered_a_problem:_The_archive_could_not_be_found_
call fcn.0042b70b
push str._n_nThe_installation_archive_could_not_be_found.
call fcn.0041679b
add esp, 0xc
push dword [ebp - 0xba8]
push str._nArchive:___s_
call fcn.0041679b
push str._n_nPlease_enter_the_path_and_filename_of_the_installation_archive.
call fcn.0041679b
add esp, 0xc
push str._nFilename:
call fcn.0041679b
pop ecx
lea eax, [ebp - 0x194]
call fcn.0041957e
lea eax, [ebp - 0x194]
push str.desktop
push eax
call fcn.005318fe
test eax, eax
pop ecx
pop ecx
jne 0x43fbd5
push 1
lea ecx, [ebp - 0x194]
call fcn.004112a5
pop ecx
mov edx, eax
call fcn.004ccc0d
test eax, eax
jne 0x43fb93
mov ecx, str.InstallPaula2.exe
lea ebx, [ebp - 0x194]
call fcn.004cd3c9
mov edi, ebx
call fcn.00432263
test eax, eax
jne 0x43fb93
mov eax, ebx
call fcn.004ccb8b
lea edi, [ebp - 0x194]
call fcn.00432263
test eax, eax
jne 0x43fc1d
push 2
mov ecx, edi
call fcn.004112a5
pop ecx
mov edx, eax
call fcn.004ccc0d
test eax, eax
jne 0x43fc1d
mov ecx, str.InstallPaula2.exe
mov ebx, edi
call fcn.004cd3c9
call fcn.00432263
test eax, eax
jne 0x43fc1d
mov eax, edi
call fcn.004ccb8b
jmp 0x43fc1d
lea eax, [ebp - 0x194]
push str.temp
push eax
call fcn.005318fe
test eax, eax
pop ecx
pop ecx
jne 0x43fc1d
lea eax, [ebp - 0x194]
push str.InstallPaula2.exe
push eax
call fcn.00493278
pop ecx
pop ecx
lea edi, [ebp - 0x194]
call fcn.00432263
test eax, eax
je 0x43fc1d
mov eax, edi
push eax
push str.:10:Installation_Exception:_Archive_manually_redirected_to___s__
call fcn.0042b70b
pop ecx
pop ecx
lea eax, [ebp - 0x194]
mov dword [ebp - 0xba8], eax
call fcn.00415783
mov edi, dword [ebp - 0xba8]
call fcn.00432263
test eax, eax
je 0x43fab0
lea eax, [ebp - 0x194]
cmp edi, eax
jne 0x43fc58
push edi
push str.:7:InstallPAULA__s__encountered_a_problem:_Had_to_use_alternate_archive_path.
call fcn.0042b70b
pop ecx
pop ecx
call fcn.0042ddc9
cmp eax, 3
jne 0x43fc72
mov eax, dword [ebp - 0xba8]
call fcn.0043f7d9
jmp 0x440f5d
call fcn.0042ddc9
mov esi, eax
dec esi
dec esi
neg esi
sbb esi, esi
inc esi
push str.DONE
mov dword [ebp - 0xbb0], esi
call fcn.0041679b
pop ecx
call fcn.004415bd
cmp eax, 1
mov ebx, 0x54f2e4
jle 0x43fd59
push 0x558744
xor esi, esi
push esi
push esi
call fcn.00493030
pop ecx
pop ecx
push eax
push 0x553c34
lea eax, [ebp - 0xba4]
push 0x400
push eax
call fcn.004ce4e5
add esp, 0x14
lea edi, [ebp - 0xba4]
call fcn.00432263
test eax, eax
je 0x43ffc1
push 0x56ac58
call fcn.0041679b
mov dword [esp], str._n_The_previous_setup_process_did_not_complete.
call fcn.0041679b
mov dword [esp], str._n_You_can_either_Resume_from_where_you_left_off_
call fcn.0041679b
mov dword [esp], str._n_or_you_can_start_over_from_the_beginning.
call fcn.0041679b
mov dword [esp], str._n_Select_NO_if_you_would_like_to_start_over.
call fcn.0041679b
mov dword [esp], str._n_n_Would_you_like_to_resume_setup___Y_N_
call fcn.0041679b
pop ecx
push esi
call fcn.0043d1a6
test eax, eax
pop ecx
je 0x43ffc1
call fcn.0043f348
push str._n_n_n__Please_wait_a_moment_for_PAULA_Setup_to_start..._n_n
call fcn.0041679b
pop ecx
mov eax, 0x1388
call fcn.0043ce01
xor eax, eax
inc eax
jmp 0x440f5d
push 0x3f
xor edi, edi
lea eax, [ebp - 0x4b]
push edi
push eax
mov byte [ebp - 0x4c], 0
call fcn.005306b0
add esp, 0xc
mov ecx, 0x56adb0
call fcn.00414f21
mov ecx, dword [ebp - 0xba8]
push edi
xor edx, edx
call fcn.004328fa
imul eax, eax, 3
pop ecx
call fcn.00448477
test eax, eax
jne 0x43fd9a
xor eax, eax
jmp 0x440f5d
push 0x56adb4
call fcn.0041679b
pop ecx
mov dword [ebp - 0xbac], 0x3c
push 0x2a
push 0x54f4ec
call fcn.0041679b
dec dword [ebp - 0xbac]
pop ecx
pop ecx
jne 0x43fdaf
push 0x2a
push edi
push str.ZXh_E_co_cV_ta
call fcn.004cf702
pop ecx
pop ecx
mov ecx, eax
push 0x3a
pop eax
call fcn.004ccb93
push eax
push 0x2a
push str._n_c_s_c_n
call fcn.0041679b
add esp, 0x10
mov dword [ebp - 0xbac], 0x3c
push 0x2a
push 0x54f4ec
call fcn.0041679b
dec dword [ebp - 0xbac]
pop ecx
pop ecx
jne 0x43fdf8
cmp esi, edi
push edi
je 0x43fe40
push str.EY_aQ4_v8YpcWSY8uNt_Qq_jk1N
mov dword [ebp - 0xbac], 0xb
mov dword [ebp - 0xbb4], 0x34b
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x10
jmp 0x43fec9
push str.tZcfUbEfZgb_llGP_jW5__pW__WrpulHq_wHac1q_P_u__ik
mov dword [ebp - 0xbac], 6
mov dword [ebp - 0xbb4], 0x21f
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push edi
push str.MdeVMTUPEXi__eXhfh_ZWfuj_Edq_ivu__hvyalZpijtUy5_U_9__sb
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push edi
push str.bEWUTQk_bQ_f_EagQl_a_RK3r_TyQ2_neVcg_EQiyQ2uUgmu
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push edi
push str.XdmhiT_EYaSVKVqou_hXq_ahhEagdxgqlTfsbIei_moEZx6qK_4_e
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x40
push edi
push str.a_bPoqIaanUvSYyRaaofhEughraXc3MIL_VTGO_DYE0r
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push edi
push str._Te_UK_UdE_p__WE_ctb_rO_qK6q_A
call fcn.004cf702
push eax
push str._n_n__s
call fcn.0041679b
add esp, 0x20
push 0x20
push 0x19
lea eax, [ebp - 0x69c]
call fcn.0043cb02
lea esi, [ebp - 0x69c]
call fcn.004cd772
mov esi, dword [ebp - 0xbac]
lea eax, [ebp - 0x69c]
push eax
lea ecx, [esi + 1]
lea eax, [ebp - 0x4c]
call fcn.004ccc3f
lea eax, [ebp + esi - 0x69c]
add esp, 0xc
push eax
call fcn.005317e2
mov dword [ebp - 0xbbc], eax
pop ecx
lea eax, [ebp - 0xbcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004bef5c
mov eax, dword [ebp - 0xbbc]
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0041f802
mov esi, eax
lea eax, [ebp - 0x69c]
push eax
mov dword [ebp - 0xbb8], esi
mov word [ebp - 0xbbe], si
call fcn.00530f70
mov ecx, dword [ebp - 0xbac]
add ecx, 4
add esp, 0x14
cmp eax, ecx
jne 0x4400e8
lea edx, [ebp - 0x4c]
call fcn.004cfbf1
cmp eax, dword [ebp - 0xbb4]
jne 0x4400e8
xor edi, edi
inc edi
cmp dword [ebp - 0xbbc], esi
mov dword [ebp - 0xbb4], edi
jne 0x440dd9
call fcn.00415783
lea eax, [ebp - 0x4c]
push eax
push 0x40
pop ecx
lea eax, [ebp - 0x8c]
call fcn.004ccc3f
pop ecx
push edi
call fcn.004be51f
pop ecx
xor esi, esi
push esi
push esi
call fcn.004416ee
call fcn.004c6ac2
mov ecx, 0x56b15c
call fcn.00414f21
push str.Installation__Phase_1_of_5_
call fcn.004162a6
add esp, 0xc
lea eax, [ebp - 0xbdc]
push eax
push esi
xor ecx, ecx
call fcn.0042e062
push ecx
push ecx
lea esi, [ebp - 0xbdc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f96f4
add esp, 0x10
push eax
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f96f4
add esp, 0x10
push eax
call fcn.004f9d9b
push eax
call fcn.0053146e
add esp, 0xc
cmp eax, 7
jle 0x4400f5
push 0x56adb4
call fcn.0041679b
pop ecx
push 0x37
pop esi
push 0x21
push 0x54f4ec
call fcn.0041679b
dec esi
pop ecx
pop ecx
jne 0x440049
push esi
push str._ur3EZNuagxU___siggSU_HTm_umausos_fu
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.t_ciY_Qje_Z_UxpHTlecprPj_POUoVmT_jNvV_WUzyeo6uxncUbMm0_3cHge_
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.zZel_oKfcVaUbtehKemh_ekzEsgsuKawp_zp_sa_jwyK___X__nX._h.9amc
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.bOEmX_m_gV_QPccQCk_p_yL_Ucyv_CJpgbqEvlYplaRKd_Q__volf_
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x40
push esi
push str.cKXTooacfY_RYfRul__Te_WE__f_
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004cf702
push eax
push 0x54f2dc
call fcn.0041679b
push esi
push esi
call fcn.004416ee
add esp, 0x28
xor eax, eax
call fcn.0043ce01
call fcn.0043f90e
jmp 0x43fd93
xor esi, esi
mov dword [ebp - 0xbb4], esi
jmp 0x440ddb
mov ax, word [ebp - 0xbb8]
mov word [ebp - 0xbce], ax
sub esp, 0x10
lea esi, [ebp - 0xbdc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004433b6
add esp, 0x10
call fcn.004935a3
test eax, eax
je 0x440167
push 0x56b294
call fcn.0041679b
pop ecx
xor esi, esi
push esi
push str._Gxs_WcheUoeZcTfglYjwhVUbToWtchaXze_m__ZWJ_phglS
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push str._n_nPress_any_key_to_cancel...
call fcn.0041679b
add esp, 0x14
push esi
push esi
call fcn.004416ee
pop ecx
pop ecx
mov eax, 0x493e0
call fcn.0043ce01
jmp 0x43fd93
push 0x56b324
xor esi, esi
call fcn.0041679b
cmp dword [ebp - 0xbb0], esi
pop ecx
push esi
je 0x440184
push str.vd_ZGZg_fWaecYkdjhnaK3_.x:ZUY3_kcfzy_2gYk
jmp 0x440189
push str.paeTMWgZ_H_fQbump_b_gExW_AMLcWd_sruk_eX
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x10
push esi
push str._nm_Q_lEQZWNZ_evM_eMsdrh_mg__ZoT._f
call fcn.004cf702
push eax
call fcn.0043d1a6
add esp, 0xc
test eax, eax
jne 0x4401be
push esi
push esi
call fcn.004416ee
pop ecx
pop ecx
jmp 0x43fd93
push 0x54f250
call fcn.0041679b
pop ecx
call fcn.0043f6a5
test eax, eax
je 0x4401b0
push 1
push 1
call fcn.004416ee
test eax, eax
pop ecx
pop ecx
jne 0x4401ec
push str.:7:InstallPAULA___encountered_a_problem:_SetPaulaSetupFlag___FAILED___
call fcn.0042b70b
pop ecx
push esi
push esi
call fcn.00493154
push eax
call fcn.00432310
add esp, 0xc
test eax, eax
jne 0x440212
push esi
push esi
push esi
call fcn.00493154
pop ecx
pop ecx
mov ecx, eax
call fcn.0043262d
pop ecx
push str.ServerSync_
push esi
push esi
call fcn.00493030
pop ecx
pop ecx
push eax
push 0x553c34
lea eax, [ebp - 0xba4]
push 0x400
push eax
call fcn.004ce4e5
lea eax, [ebp - 0xba4]
add esp, 0x14
push eax
call fcn.00432310
test eax, eax
pop ecx
jne 0x440258
push esi
lea ecx, [ebp - 0xba4]
call fcn.0043262d
pop ecx
push 1
push 0x5587bc
push esi
push esi
call fcn.00493030
pop ecx
pop ecx
push eax
push 0x56b434
push esi
call fcn.004ce595
add esp, 0x10
push eax
call fcn.00430603
push str._nPlease_wait..._This_could_take_a_few_minutes...
call fcn.0041679b
add esp, 0xc
push 0xde
lea eax, [ebp - 0x8c]
push eax
push esi
push esi
call fcn.00493030
mov edi, dword [ebp - 0xba8]
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.00404a71
add esp, 0xc
cmp eax, esi
jne 0x44038b
push esi
xor edx, edx
mov ecx, edi
call fcn.004328fa
pop ecx
push eax
call fcn.00404a88
push eax
push edi
push str.:9:InstallPAULA__s__FAILED:_ExpandArchive___FAILED_during_installation.__bBadCheckSum_d:_Archive_size:__d
call fcn.0042b70b
push str._n_n______________________________________________________________________
call fcn.0041679b
add esp, 0x14
call fcn.00404a88
test eax, eax
je 0x440344
push str._n_ERROR:_The_archive_downloaded_is_corrupt.
call fcn.0041679b
mov dword [esp], str._n__This_may_occur_if_the_internet_connection_is_lost_while_downloading.
call fcn.0041679b
mov dword [esp], str._n__Please_download_the_PAULA_installation_from_the_web_site_again.
call fcn.0041679b
mov dword [esp], str._n__Press_any_key_to_return_to_the_download_page...
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
push str._n_n_nOpening_web_page__please_wait....
call fcn.0041679b
mov dword [esp], str.InstallPaula2.exe
push esi
call fcn.00493278
pop ecx
pop ecx
call fcn.004314ff
jmp 0x4400de
push str._n_ERROR:_The_installation_archive_could_not_be_expanded.
call fcn.0041679b
mov dword [esp], str._n__Please_ensure_the_root_drive_is_not_full_and_that_the_downloaded
call fcn.0041679b
mov dword [esp], str._n__file_is_accessable.__You_may_call_HoodSoftware_Tech_Support
call fcn.0041679b
mov dword [esp], 0x556890
push str._n__for_help_with_this_issue_at__s.
call fcn.0041679b
push str._n__Press_any_key_to_exit...
call fcn.0041679b
add esp, 0xc
xor eax, eax
jmp 0x44015d
cmp eax, 0xffffffff
jne 0x440459
lea eax, [ebp - 0x8c]
push eax
push edi
push esi
push str.11_____ra__y6IBBQ90____gTM_c6niXlpnZ__Km1____dn_Df_vBcU2gzhXu_cv_vb.W_LS
call fcn.004cf702
pop ecx
pop ecx
push eax
call fcn.0042b70b
add esp, 0xc
push 0x56afb0
call fcn.0041679b
pop ecx
push 0x3c
pop edi
push 0x21
push 0x54f4ec
call fcn.0041679b
dec edi
pop ecx
pop ecx
jne 0x4403c0
push esi
push str.xzux6E_fnGkXpb_dmE45_3Er_covcV_ZrQp_yZV_M
call fcn.004cf702
push eax
push str._n__s
call fcn.0041679b
push esi
push str.vagZSW__e_IT_Inuhi_hmnXscOcmzQneNgacgZTu_mdTq7jgs0
call fcn.004cf702
push eax
push str._n_________s
call fcn.0041679b
mov eax, dword [0x610418]
add esp, 0x20
inc dword [0x610418]
cmp eax, 7
jge 0x44043c
push esi
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004cf702
push eax
push str._n_s
call fcn.0043d1a6
add esp, 0x10
test eax, eax
jne 0x440ede
push 0x54f250
call fcn.0041679b
pop ecx
push esi
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.t_gTQLcST_nKHhMtv_FO_
jmp 0x440f13
push str.E32Settings.flg
push esi
push esi
call fcn.00493030
pop ecx
pop ecx
push eax
mov ebx, 0x553c34
lea eax, [ebp - 0xba4]
push ebx
push eax
call fcn.00531b2f
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.00432263
test eax, eax
je 0x4404c4
call fcn.0041846f
push str.PaulaConfig.cfg
push esi
push esi
mov dword [ebp - 0xbb0], 1
call fcn.00493030
pop ecx
pop ecx
push eax
push ebx
mov eax, edi
push 0x400
push eax
call fcn.004ce4e5
add esp, 0x14
mov eax, edi
call fcn.004314ff
jmp 0x440519
cmp dword [ebp - 0xbb0], esi
je 0x440513
push dword [ebp - 0xba8]
push str.:9:InstallPAULA___s___encountered_a_problem:_the_EXE_has_been_flagged_as_a_DEMO_but_the_demo_file_flag_is_not_in_the_archive___
call fcn.0042b70b
push str._n_n______________________________________
call fcn.0041679b
add esp, 0xc
push str._n_ERROR:_The_DEMO_flag_is_missing.
call fcn.0041679b
mov dword [esp], str._n________This_is_not_a_demo_
call fcn.0041679b
mov dword [esp], str._n________Press_any_key_to_continue_anyway...
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
mov dword [ebp - 0xbb0], esi
push 0x56b980
call fcn.0041679b
mov dword [esp], str._nPerforming_setup..._Please_wait_a_moment..
call fcn.0041679b
pop ecx
push 0xa
pop esi
push 0x551adc
call fcn.0041679b
mov dword [esp], 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x440533
push 0x56afb0
call fcn.0041679b
pop ecx
push 1
lea ecx, [ebp - 0x69c]
call fcn.004112a5
pop ecx
mov edx, eax
call fcn.004ccc0d
test eax, eax
mov esi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
je 0x44064a
mov edi, str._GetLastError_
push edi
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_ALLUSER__FAILED:__s
call fcn.0042b70b
add esp, 0xc
push dword [ebp - 0xba8]
push str.:5:InstallPAULA__s__EAP:_The_desktop_icon_could_not_be_placed_on_the_all_users_desktop_
call fcn.0042bd38
push 2
lea ecx, [ebp - 0x69c]
call fcn.004112a5
add esp, 0xc
mov edx, eax
call fcn.004ccc0d
test eax, eax
je 0x4405e5
push edi
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_CURRENTUSER__FAILED:__s
call fcn.0042b70b
add esp, 0xc
lea eax, [ebp - 0x69c]
push str.C:Documents_and_SettingsAll_Users
push eax
call fcn.005312a0
pop ecx
pop ecx
mov ecx, str.PAULA.lnk
lea ebx, [ebp - 0x69c]
call fcn.004cd3c9
lea eax, [ebp - 0xba4]
push str.Paula_2.lnk
push eax
call fcn.00493030
xor ebx, ebx
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
jne 0x4407b9
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
jmp 0x4407d0
mov ecx, str.PAULA.lnk
lea ebx, [ebp - 0x69c]
call fcn.004cd3c9
lea eax, [ebp - 0xba4]
push str.Paula_2.lnk
push eax
call fcn.00493030
xor ebx, ebx
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
jne 0x4406b0
mov edi, str._GetLastError_
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
jmp 0x440593
push 3
push 0x10000000
lea ecx, [ebp - 0x69c]
call fcn.00434493
cmp dword [ebp - 0xbb0], ebx
pop ecx
pop ecx
je 0x4408e8
push ebx
push ebx
call fcn.00493030
push eax
lea eax, [ebp - 0xba4]
push str._sCounting_Archive.lnk
push eax
call fcn.00531b2f
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004ccf84
push str.Counting_Archive.lnk
push eax
call fcn.005312b0
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
mov edi, str._GetLastError_
mov esi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
jne 0x440745
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
push ebx
push ebx
call fcn.00493030
push eax
lea eax, [ebp - 0xba4]
push str._sQuick_Keys.lnk
push eax
call fcn.00531b2f
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004ccf84
push str.Quick_Keys.lnk
push eax
call fcn.005312b0
push ebx
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
jne 0x4408e8
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
jmp 0x4408e8
xor ebx, ebx
push 3
push 0x10000000
lea ecx, [ebp - 0x69c]
inc ebx
call fcn.00434493
pop ecx
pop ecx
xor eax, eax
cmp dword [ebp - 0xbb0], eax
je 0x4408b8
push eax
push eax
call fcn.00493030
push eax
lea eax, [ebp - 0xba4]
push str._sCounting_Archive.lnk
push eax
call fcn.00531b2f
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004ccf84
push str.Counting_Archive.lnk
push eax
call fcn.005312b0
push 0
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
jne 0x44084a
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
push 0
push 0
call fcn.00493030
push eax
lea eax, [ebp - 0xba4]
push str._sQuick_Keys.lnk
push eax
call fcn.00531b2f
add esp, 0x14
lea eax, [ebp - 0x69c]
call fcn.004ccf84
push str.Quick_Keys.lnk
push eax
call fcn.005312b0
push 0
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
call fcn.00431386
add esp, 0x14
test eax, eax
jne 0x4408b8
push edi
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0xba8]
push esi
call fcn.0042b70b
add esp, 0x14
test ebx, ebx
jne 0x4408e6
push str._n_n____________________________________________
call fcn.0041679b
mov dword [esp], str._n_ERROR:_Could_not_create_the_desktop_icon_
call fcn.0041679b
mov dword [esp], str._n________Press_any_key...
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
xor ebx, ebx
push 0x558744
push ebx
push ebx
call fcn.00493030
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xba4]
push 0x553c34
push eax
call fcn.00531b2f
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.00432263
test eax, eax
jne 0x44095a
mov eax, edi
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_Could_not_find___s__
call fcn.0042b70b
add esp, 0xc
push str._n_n____________________________________________
call fcn.0041679b
mov dword [esp], str._n_ERROR:_The_PAULA_installation_FAILED_
call fcn.0041679b
mov dword [esp], str._n________Press_any_key...
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
call fcn.00446f7a
test eax, eax
mov esi, str._n_n________________________________________________________
mov edi, str._n__________Press_any_key_to_continue_anyway...
jne 0x44099f
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateSpawnInstallationScript___FAILED_
call fcn.0042b70b
push esi
call fcn.0041679b
add esp, 0xc
push str._n_WARNING:_Could_not_create_the_spawn_installation_script.
call fcn.0041679b
pop ecx
push edi
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
call fcn.004468d5
test eax, eax
jne 0x4409da
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateStartupScript___FAILED_
call fcn.0042b70b
push esi
call fcn.0041679b
add esp, 0xc
push str._n_WARNING:_Could_not_create_the_startup_script.
call fcn.0041679b
pop ecx
push edi
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
push 0xffffffffffffffff
push ebx
call fcn.00492f0c
push eax
push str.HCTC
push str.NET_SHARE___s___s___GRANT:Everyone_READ
mov esi, 0x400
lea eax, [ebp - 0x69c]
push esi
push eax
call fcn.004ce4e5
add esp, 0x1c
lea ebx, [ebp - 0x69c]
call fcn.0041740c
mov edi, str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
push edi
call fcn.00419451
pop ecx
push 0xffffffffffffffff
push 0
call fcn.00492f0c
push eax
push str.HCTC
push str.NET_SHARE___s___s_
mov eax, ebx
push esi
push eax
call fcn.004ce4e5
add esp, 0x1c
call fcn.0041740c
push edi
call fcn.00419451
mov dword [esp], str.Preparing_for_setup..._n_n_n_n_n_n_n_n_n_n_n_n
call fcn.0041679b
pop ecx
push 3
push 0x10000000
push 0xffffffffffffffff
xor ebx, ebx
push ebx
call fcn.00492f0c
pop ecx
pop ecx
mov ecx, eax
call fcn.00434493
test eax, eax
pop ecx
pop ecx
jne 0x440aa5
push str.One_moment..._n_n
call fcn.0041679b
pop ecx
push 3
push 0xc0000000
push 0xffffffffffffffff
push ebx
call fcn.00492f0c
pop ecx
pop ecx
mov ecx, eax
call fcn.00434493
test eax, eax
pop ecx
pop ecx
jne 0x440aa5
push str.:8:SetFileUserRights___FAILED_during_installation.
call fcn.0042b70b
pop ecx
push str.E32Settings.flg
push ebx
push ebx
call fcn.00493030
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xba4]
push 0x553c34
push eax
call fcn.00531b2f
add esp, 0x10
lea edi, [ebp - 0xba4]
call fcn.00432263
test eax, eax
je 0x440d84
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0xbfc], ebx
lea edi, [ebp - 0xbf8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0x103
push edi
lea eax, [ebp - 0x7a3]
push ebx
push eax
mov byte [ebp - 0x7a4], bl
call fcn.005306b0
add esp, 0xc
push edi
lea eax, [ebp - 0x29b]
push ebx
push eax
mov byte [ebp - 0x29c], bl
call fcn.005306b0
add esp, 0xc
mov edi, 0x5f5380
push edi
push ebx
push ebx
call fcn.00493030
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x29c]
push 0x553c34
push eax
call fcn.00531b2f
push ebx
lea ecx, [ebp - 0x29c]
call fcn.0043262d
add esp, 0x14
lea eax, [ebp - 0x29c]
push eax
push edi
push str.NET_SHARE___s___s___GRANT:Everyone_FULL
lea eax, [ebp - 0x69c]
push esi
push eax
call fcn.004ce4e5
add esp, 0x14
lea ebx, [ebp - 0x69c]
call fcn.0041740c
mov edi, str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
push edi
call fcn.00419451
pop ecx
lea eax, [ebp - 0x29c]
push eax
push 0x5f5380
push str.NET_SHARE___s___s_
mov eax, ebx
push esi
push eax
call fcn.004ce4e5
add esp, 0x14
call fcn.0041740c
push edi
call fcn.00419451
pop ecx
xor ebx, ebx
push ebx
push ebx
call fcn.00493030
push eax
lea eax, [ebp - 0x7a4]
push str._sSA12_Archive
push eax
call fcn.00531b2f
add esp, 0x14
lea edi, [ebp - 0x7a4]
call fcn.00432263
test eax, eax
mov edi, str._n________Press_any_key_to_continue...
jne 0x440c24
lea eax, [ebp - 0x7a4]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_This_is_a_DEMO_install_but_could_not_find___s__
call fcn.0042b70b
add esp, 0xc
mov esi, str._n_n________________________________________________________
push esi
call fcn.0041679b
mov dword [esp], str._n_ERROR:_Could_not_find_the_SA12_Archive_
call fcn.0041679b
pop ecx
push edi
call fcn.0041679b
pop ecx
xor eax, eax
call fcn.0043ce01
jmp 0x440c29
mov esi, str._n_n________________________________________________________
push str.P2_DC001
push 0x5f5380
push ebx
push ebx
call fcn.00493030
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x29c]
push str._s_s_sSA12_Archive
push eax
call fcn.00531b2f
add esp, 0x14
push ebx
lea ecx, [ebp - 0x29c]
call fcn.0043262d
test eax, eax
pop ecx
jne 0x440ca4
lea eax, [ebp - 0x29c]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_CreateDirectorySuper___s___FAILED_
call fcn.0042b70b
add esp, 0xc
push esi
call fcn.0041679b
pop ecx
lea eax, [ebp - 0x29c]
push eax
push str._n_ERROR:_Could_not_create___s__
call fcn.0041679b
push edi
call fcn.0041679b
add esp, 0xc
xor eax, eax
call fcn.0043ce01
push str._n_nCopying_Virtual_SA12_Data..._n_n_n
call fcn.0041679b
pop ecx
lea eax, [ebp - 0x7a4]
push eax
call fcn.00530f70
mov byte [ebp + eax - 0x7a3], bl
pop ecx
lea eax, [ebp - 0x29c]
push eax
call fcn.00530f70
mov byte [ebp + eax - 0x29b], bl
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0x29c]
mov dword [ebp - 0xbf0], eax
pop ecx
lea eax, [ebp - 0xbfc]
push eax
mov dword [ebp - 0xbfc], ebx
mov dword [ebp - 0xbf8], 2
mov word [ebp - 0xbec], 0x710
mov dword [ebp - 0xbe6], ebx
mov dword [ebp - 0xbe2], str.PAULA_is_creating_Virtual_SA12...
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
cmp eax, ebx
je 0x440d75
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x7a4]
push eax
push dword [ebp - 0xba8]
push str.:9:InstallPAULA__s__FAILED:_SHFileOperation___s_____s___FAILED:_error_code__d
call fcn.0042b70b
add esp, 0x14
push esi
call fcn.0041679b
pop ecx
lea eax, [ebp - 0x29c]
push eax
push str._n_ERROR:_SHFileOperation___FAILED_
call fcn.0041679b
push edi
call fcn.0041679b
add esp, 0xc
xor eax, eax
call fcn.0043ce01
jmp 0x440d82
push ebx
push str.Click2.wav
call fcn.004c9c3f
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
call fcn.004416ee
push str._nDone._n
call fcn.0041679b
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0042b117
sub esp, 0x10
lea esi, [ebp - 0xbcc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004beace
call fcn.0042b11e
call fcn.0043f348
push str._n_nPlease_wait_a_moment_for_PAULA_to_start..._n_n
call fcn.0041679b
add esp, 0x14
jmp 0x43fd47
xor esi, esi
lea eax, [ebp - 0x69c]
push str.open
push eax
call fcn.005318fe
test eax, eax
pop ecx
pop ecx
je 0x440f3d
lea eax, [ebp - 0x69c]
push str.temp
push eax
call fcn.005318fe
test eax, eax
pop ecx
pop ecx
je 0x440f3d
lea eax, [ebp - 0x69c]
push eax
push dword [ebp - 0xba8]
push esi
push str.127_XT_nZd__RZ_HS190___IKrnk_Y_cW_bSeg0___Nnoj7Vpa_2EPQw6QTGpc
call fcn.004cf702
pop ecx
pop ecx
push eax
call fcn.0042b70b
add esp, 0xc
push 0x56afb0
call fcn.0041679b
pop ecx
push 0x3c
pop edi
push 0x21
push 0x54f4ec
call fcn.0041679b
dec edi
pop ecx
pop ecx
jne 0x440e42
push esi
push str.qWQQjjZ_G_eaKaXSakksS_P_Xoo_tpr_oc_ac9
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x10
cmp dword [ebp - 0xbb4], esi
je 0x440eb1
cmp dword [0x610414], esi
jle 0x440eb1
push esi
push str.kVWQh_NQfcLQq_gLk_p_ru_7__wdseWchSMTzwsh_ftobiYo2jRs_ywosP__a
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str.adgdYhlM_npEhaSbsgm_WvnYgdubWk8_m_tkc_Ycm5u_OqWQ_BYs_X
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
push esi
push str._bPkRJl_gV_QPc__9YWV__cbdXK__N_gdw_h_lZYGtXi_3pZpc_
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
add esp, 0x30
mov eax, dword [0x610414]
inc dword [0x610414]
cmp eax, 7
jge 0x440ef7
push esi
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004cf702
push eax
push str._n_n_s
call fcn.0043d1a6
add esp, 0x10
test eax, eax
je 0x440eec
push dword [ebp - 0xba8]
call fcn.0043f948
pop ecx
jmp 0x440f5d
push 0x54f250
call fcn.0041679b
pop ecx
push esi
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004cf702
push eax
push 0x54f2dc
call fcn.0041679b
push esi
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004cf702
push eax
push ebx
call fcn.0041679b
xor eax, eax
call fcn.0043ce01
push str._n_n_n_n_n_n_n
call fcn.0041679b
add esp, 0x24
call fcn.0043f92b
jmp 0x43fd93
push esi
push esi
call fcn.00493278
push eax
push str.explorer___s_
call fcn.004174c0
push dword [ebp - 0xba8]
call fcn.0043f948
add esp, 0x14
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret