Function at 0x4534b0
Capabilities:
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56013c
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x5c49f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [ebp - 0xd0]
call fcn.00430270
push 0
push 0
push 0x5c5414
push 0x425a90
push 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.004264f0
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [0x5c98cc]
cmp eax, dword [esi + 4]
jle 0x453563
push 0x5c98cc
call fcn.0053357d
add esp, 4
cmp dword [0x5c98cc], 0xffffffff
jne 0x453563
push str.DMOK
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0x5c98cc
mov dword [0x5c98d0], eax
call fcn.0053353e
add esp, 4
push dword [0x5c98d0]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x5c9840]
cmp eax, dword [esi + 4]
jle 0x4535ae
push 0x5c9840
call fcn.0053357d
add esp, 4
cmp dword [0x5c9840], 0xffffffff
jne 0x4535ae
call fcn.004366f0
push 0x560310
call fcn.00533907
push 0x5c9840
call fcn.0053353e
add esp, 8
push str.UpdateUserData_Finish
push 0
push 0x5b063c
push 0x5c9848
call fcn.004367d0
add esp, 0x10
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
xor cl, cl
call fcn.004530d0
mov eax, dword [0x5c9840]
cmp eax, dword [esi + 4]
jle 0x453618
push 0x5c9840
call fcn.0053357d
add esp, 4
cmp dword [0x5c9840], 0xffffffff
jne 0x453618
call fcn.004366f0
push 0x560310
call fcn.00533907
push 0x5c9840
call fcn.0053353e
add esp, 8
push str.update_it
push 0
push 0x5b063c
push 0x5c9848
call fcn.004367d0
add esp, 0x10
mov dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
push 0
push 0x5b03e0
call fcn.0042c1b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa0]
push 0
push 0x5b03e0
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
call fcn.0042c1b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
push 0
push 0x5b03e0
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
call fcn.0042c1b0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 3
push eax
call fcn.0042f990
lea eax, [ebp - 0x88]
push eax
call fcn.0042fba0
push 0
push 0x5b03e0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
call fcn.0042c1b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
push 0
push 0x5b03e0
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
call fcn.0042c1b0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 5
push eax
call fcn.0042f990
lea eax, [ebp - 0x58]
push eax
call fcn.0042fba0
push 0
push 0x5b03e0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.0042c1b0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
push 0
push 0x5b03e0
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.0042c1b0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x40]
push eax
call fcn.0042f990
lea eax, [ebp - 0x28]
push eax
call fcn.0042fba0
cmp dword [ebp - 0x90], 0
jbe 0x4537b9
cmp dword [ebp - 0x78], 0
jbe 0x4537b9
cmp byte [0x5c91ac], 0
jne 0x4537b9
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00450f70
cmp dword [ebp - 0x60], 0
jbe 0x4537d2
cmp dword [ebp - 0x48], 0
jbe 0x4537d2
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00420ae0
cmp dword [ebp - 0x30], 0
jbe 0x4537f8
cmp dword [ebp - 0x18], 0
jbe 0x4537f8
cmp byte [0x5c91ac], 0
jne 0x45393e
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0044e050
cmp byte [0x5c91ac], 0
jne 0x45393e
mov eax, dword [edi]
mov ecx, edi
push 0x3c
call dword [eax + 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x453823
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0042ce80
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x45384a
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0042ce80
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x453871
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0042ce80
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x453898
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0042ce80
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x4538c5
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.0042ce80
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
cmp eax, 0x10
jb 0x4538f8
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.0042ce80
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
cmp eax, 0x10
jb 0x4535d2
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.0042ce80
jmp 0x4535d2
mov eax, dword [0x5c9840]
cmp eax, dword [esi + 4]
jle 0x45397d
push 0x5c9840
call fcn.0053357d
add esp, 4
cmp dword [0x5c9840], 0xffffffff
jne 0x45397d
call fcn.004366f0
push 0x560310
call fcn.00533907
push 0x5c9840
call fcn.0053353e
add esp, 8
push str.installer_mode.
push 0
push 0x5b063c
push 0x5c9848
call fcn.004367d0
mov eax, dword [ebp - 0x14]
add esp, 0x10
cmp eax, 0x10
jb 0x4539ab
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0042ce80
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x4539d2
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0042ce80
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x4539f9
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0042ce80
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x453a20
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0042ce80
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x453a4d
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.0042ce80
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
cmp eax, 0x10
jb 0x453a80
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.0042ce80
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
cmp eax, 0x10
jb 0x453abd
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.0042ce80
mov eax, dword [0x5c9840]
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
cmp eax, dword [esi + 4]
jle 0x453b17
push 0x5c9840
call fcn.0053357d
add esp, 4
cmp dword [0x5c9840], 0xffffffff
jne 0x453b17
call fcn.004366f0
push 0x560310
call fcn.00533907
push 0x5c9840
call fcn.0053353e
add esp, 8
push str.upgrade_exit
push 0
push 0x5b063c
push 0x5c9848
call fcn.004367d0
mov byte [edi + 0x2b4], 1
add esp, 0x10
mov eax, dword [0x5c9840]
cmp eax, dword [esi + 4]
jle 0x453b76
push 0x5c9840
call fcn.0053357d
add esp, 4
cmp dword [0x5c9840], 0xffffffff
jne 0x453b76
call fcn.004366f0
push 0x560310
call fcn.00533907
push 0x5c9840
call fcn.0053353e
add esp, 8
push 0
push str.ExitPro__d
push 0
push 0x5b063c
push 0x5c9848
call fcn.004367d0
add esp, 0x14
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]