Function at 0x404f6a
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x1e4
mov eax, 0x48496f
call fcn.00466686
and dword [ebp - 0x9c], 0
push str.UniAccessAgent.ini
lea eax, [ebp - 0x170]
mov ebx, ecx
push eax
mov dword [ebp - 0xe0], ebx
call fcn.00424e0d
and dword [ebp - 4], 0
lea eax, [ebp - 0x170]
push eax
lea eax, [ebx + 0x2c]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.004273c5
add esp, 0xc
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 2
call fcn.0042523a
push str.prepare_ini_from_section_start_file
lea eax, [ebp - 0x144]
push eax
call fcn.00424e0d
push 0x121
lea eax, [ebp - 0x104]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, 0x4a5bc8
mov byte [ebp - 4], 3
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 4
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x94]
call fcn.0042735a
push eax
mov esi, 0x4a5bc8
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 2
call fcn.0042523a
push str.lva.ini
lea eax, [ebp - 0x144]
push eax
call fcn.00424e0d
lea eax, [ebp - 0x94]
lea edx, [ebx + 0xc]
push eax
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 5
call fcn.0040fa3a
pop ecx
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 2
call fcn.0042523a
push 0xa
push dword [ebp - 0x9c]
lea esi, [ebp - 0xdc]
call fcn.00424b5b
push 0x48b184
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 6
call fcn.00424e0d
mov byte [ebp - 4], 7
push str.get_file_from_pe_section_lva.ini_to
lea eax, [ebp - 0x144]
push eax
call fcn.00424e0d
push 0x124
lea eax, [ebp - 0x104]
push eax
mov ecx, str.._thread_install.cpp
mov edx, 0x4a5bc8
mov byte [ebp - 4], 8
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 9
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x94]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x124]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0xdc]
call fcn.0042735a
push eax
mov esi, 0x4a5bc8
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x144]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 2
call fcn.0042523a
cmp dword [ebp - 0x9c], 0
je 0x4052d0
push str._failed.
lea eax, [ebp - 0x124]
push eax
call fcn.00424e0d
push str.get_file_from_pe_section
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0xa
call fcn.00424e0d
push 0x128
lea eax, [ebp - 0x104]
mov ebx, esi
push eax
mov ecx, str.._thread_install.cpp
mov edx, ebx
mov byte [ebp - 4], 0xb
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0xc
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x94]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x124]
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 2
call fcn.0042523a
push 2
push 0x64
pop esi
push esi
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4a5b18], 0
jne 0x4052bd
push str.MSG_TIPS
lea eax, [ebp - 0x124]
push eax
call fcn.00424e0d
push str.MSG_MUST_CUST
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0xd
call fcn.00424e0d
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0xe
call fcn.004040fc
mov edi, eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0xf
call fcn.004040fc
add esp, 0x10
mov ecx, eax
push 0
mov eax, edi
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0x94]
call fcn.0042523a
mov eax, esi
call fcn.00466709
ret
lea eax, [ebp - 0x94]
push eax
call fcn.0040f4e2
mov edi, edx
pop ecx
mov esi, eax
test edi, edi
jg 0x4054bb
jl 0x4052f4
cmp esi, 0x64
ja 0x4054bb
push str._Must_Cust_Error...
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
push edi
push esi
lea esi, [ebp - 0x144]
mov byte [ebp - 4], 0x10
call fcn.00424ae2
push str.size
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x11
call fcn.00424e0d
push str.GetFileLen::
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0x12
call fcn.00424e0d
push 0x132
lea eax, [ebp - 0x104]
push eax
push 3
mov ebx, 0x4a5bc8
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x13
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x14
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x94]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x124]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x144]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0xbc]
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0x144]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.0042523a
push 2
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4a5b18], 0
jne 0x4054b3
push str.MSG_TIPS
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push str.MSG_MUST_CUST
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x15
call fcn.00424e0d
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x16
call fcn.004040fc
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0x17
call fcn.004040fc
add esp, 0x10
mov ecx, eax
push 0
mov eax, esi
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
push 0x65
pop esi
jmp 0x4052bd
lea edi, [ebp - 0x74]
call fcn.004160f2
lea eax, [ebp - 0x94]
lea esi, [ebp - 0x54]
mov byte [ebp - 4], 0x18
call fcn.00424f31
mov ecx, edi
call fcn.004169b6
push str.UUID
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
mov edi, str.Main
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x19
call fcn.00424e0d
lea eax, [ebx + 0x6c]
push eax
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.CustTime
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00424e0d
lea eax, [ebx + 0x8c]
push eax
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.package_name
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00424e0d
lea esi, [ebx + 0xac]
lea eax, [ebp - 0xdc]
push esi
push eax
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push 0x48a97c
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.0042836b
pop ecx
pop ecx
mov byte [ebp - 4], 0x20
call fcn.00424f31
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.str_x86_url
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x21
call fcn.00424e0d
lea eax, [ebx + 0x18c]
push eax
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x22
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.str_x64_url
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x23
call fcn.00424e0d
lea eax, [ebx + 0x1ac]
push eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x24
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.ins_user
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x25
call fcn.00424e0d
lea eax, [ebx + 0x1cc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x26
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.ins_pass
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x27
call fcn.00424e0d
lea esi, [ebx + 0x1ec]
push esi
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x28
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.ins_domain
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x29
call fcn.00424e0d
lea eax, [ebx + 0x20c]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x2a
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xdc]
call fcn.0042523a
push 0x48a97c
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2b
call fcn.0042836b
pop ecx
pop ecx
mov byte [ebp - 4], 0x2c
call fcn.00424f31
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.UseBeeDwn
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00424e0d
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
add ebx, 0x2d0
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2e
call fcn.00416d0d
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.ServerIP
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
mov esi, str.AgentCOMM
push esi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00424e0d
mov ebx, dword [ebp - 0xe0]
lea eax, [ebx + 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x30
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.OnlineServerIP
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
mov byte [ebp - 4], 0x31
push esi
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
lea eax, [ebx + 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x32
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.ServerPort
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push esi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x33
call fcn.00424e0d
lea eax, [ebx + 0x10c]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x34
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.0042523a
push str.WebPort
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push esi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x35
call fcn.00424e0d
lea eax, [ebx + 0x12c]
push eax
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea esi, [ebp - 0x34]
call fcn.00424973
push str.MainTitle
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0x37
call fcn.00424e0d
push edi
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x38
call fcn.00424e0d
mov eax, esi
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x39
call fcn.004170da
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x37
call fcn.0042523a
push 0x48a97c
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3a
call fcn.0042836b
pop ecx
pop ecx
mov byte [ebp - 4], 0x3b
call fcn.00424f31
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x37
call fcn.0042523a
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x405b26
lea eax, [ebp - 0x2c]
push eax
push pe_nt_image_headers32
push 0x4a5918
call fcn.004601d9
add esp, 0xc
cmp dword [ebx + 0x144], 0
jne 0x405b71
push 0xa
push 0x50
lea esi, [ebp - 0xbc]
call fcn.00424b5b
mov byte [ebp - 4], 0x3c
mov eax, esi
mov esi, dword [ebp - 0x9c]
call fcn.00424f31
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x37
call fcn.0042523a
push str._strCustOnlineServerIP
lea eax, [ebp - 0x170]
push eax
call fcn.00424e0d
push str._WebPort
lea eax, [ebp - 0x144]
push eax
mov byte [ebp - 4], 0x3d
call fcn.00424e0d
push str._ServerIP
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00424e0d
push str._strCustTime
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0x3f
call fcn.00424e0d
push str.strCustGUID
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00424e0d
push 0x157
lea eax, [ebp - 0x104]
push eax
push 3
mov ebx, 0x4a5bc8
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x41
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x42
call fcn.0042735a
mov esi, eax
mov eax, dword [ebp - 0x150]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0xdc]
call fcn.0042735a
mov esi, eax
mov eax, dword [ebp - 0x14c]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x124]
call fcn.0042735a
mov edi, dword [ebp - 0xe0]
mov esi, eax
lea eax, [edi + 0xcc]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x144]
call fcn.0042735a
mov esi, eax
lea eax, [edi + 0x12c]
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0x170]
call fcn.0042735a
mov esi, eax
lea eax, [edi + 0xec]
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0x144]
call fcn.0042523a
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x37
call fcn.0042523a
mov ecx, edi
call fcn.00404978
cmp dword [0x4a5b1c], 0
mov esi, eax
mov dword [ebp - 0xe0], esi
je 0x405da2
test esi, esi
je 0x405d02
cmp esi, 1
je 0x405d02
cmp esi, 2
jne 0x405da2
push 0xa
push esi
lea esi, [ebp - 0xdc]
call fcn.00424b5b
push str.update_judge_ret
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00424e0d
push 0x15f
lea eax, [ebp - 0x104]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x44
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x45
call fcn.0042735a
mov esi, eax
lea eax, [ebp - 0xdc]
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
call fcn.0042523a
lea ecx, [ebp - 0x34]
call fcn.0042523a
lea eax, [ebp - 0x74]
call fcn.00416152
push 0xfffffffffffffffd
jmp 0x4054b5
mov edi, str..msi
push edi
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
mov edx, dword [ebp - 0x148]
mov byte [ebp - 4], 0x46
push 0
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x9c], 1
call fcn.004264e7
test al, al
je 0x405e11
push edi
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
mov edx, dword [ebp - 0xe4]
xor edi, edi
push edi
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x9c], 3
call fcn.004264e7
test al, al
je 0x405e11
mov byte [ebp - 0x95], 1
jmp 0x405e1a
mov byte [ebp - 0x95], 0
xor edi, edi
test byte [ebp - 0x9c], 2
je 0x405e35
and dword [ebp - 0x9c], 0xfffffffd
lea ecx, [ebp - 0xbc]
call fcn.0042523a
mov dword [ebp - 4], 0x37
test byte [ebp - 0x9c], 1
je 0x405e50
lea ecx, [ebp - 0xdc]
call fcn.0042523a
cmp byte [ebp - 0x95], 0
je 0x4060f6
cmp esi, 1
je 0x405fb6
cmp esi, 2
je 0x405fb6
cmp esi, edi
jne 0x406483
push 2
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4a5b18], edi
jne 0x405f40
push str.MSG_TIPS
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push str.MSG_MUST_SAME_INSTALLED
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x4c
call fcn.00424e0d
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x4d
call fcn.004040fc
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0x4e
call fcn.004040fc
add esp, 0x10
mov ecx, eax
push edi
mov eax, esi
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x37
call fcn.0042523a
push str.Check_current_version_have_already_setup_
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
push 0x175
lea eax, [ebp - 0x104]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x4f
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x50
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0x34]
call fcn.0042523a
lea eax, [ebp - 0x74]
call fcn.00416152
push 0xfffffffffffffffe
jmp 0x4054b5
push 2
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4a5b18], edi
jne 0x40607f
push str.MSG_TIPS
lea eax, [ebp - 0xdc]
push eax
call fcn.00424e0d
push str.MSG_MUST_OTHER_INSTALLED
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x47
call fcn.00424e0d
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x48
call fcn.004040fc
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0x49
call fcn.004040fc
add esp, 0x10
mov ecx, eax
push edi
mov eax, esi
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x37
call fcn.0042523a
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
push 0x16d
lea eax, [ebp - 0x104]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x4a
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x4b
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0xbc]
call fcn.0042523a
lea ecx, [ebp - 0x34]
call fcn.0042523a
lea eax, [ebp - 0x74]
call fcn.00416152
or esi, 0xffffffff
jmp 0x4052bd
cmp esi, 1
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
mov edi, str.MSG_TIPS
je 0x406113
cmp dword [ebp - 0xe0], 2
jne 0x406245
cmp dword [0x4a5b18], 0
jne 0x406245
push 2
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
lea eax, [ebp - 0x144]
push eax
call fcn.00424e0d
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x51
call fcn.00424e0d
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x1d0]
push eax
mov byte [ebp - 4], 0x52
call fcn.004040fc
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x1f0]
push eax
mov byte [ebp - 4], 0x53
call fcn.004040fc
add esp, 0x10
mov ecx, eax
mov eax, dword [ebp - 0xe4]
push 4
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call esi
cmp eax, 6
lea ecx, [ebp - 0x1f0]
setne byte [ebp - 0x95]
call fcn.0042523a
lea ecx, [ebp - 0x1d0]
call fcn.0042523a
lea ecx, [ebp - 0x124]
call fcn.0042523a
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x37
call fcn.0042523a
cmp byte [ebp - 0x95], 0
je 0x406245
push str.Artificial__exit
lea eax, [ebp - 0xbc]
push eax
call fcn.00424e0d
push 0x182
lea eax, [ebp - 0x1d0]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x54
call fcn.0041110d
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x55
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x1d0]
jmp 0x4060ce
cmp dword [ebp - 0xe0], 0
jne 0x406483
push 2
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4a5b18], 0
jne 0x406483
push edi
lea eax, [ebp - 0x104]
push eax
call fcn.00424e0d
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea eax, [ebp - 0x170]
push eax
mov byte [ebp - 4], 0x56
call fcn.00424e0d
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x190]
push eax
mov byte [ebp - 4], 0x57
call fcn.004040fc
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x58
call fcn.004040fc
add esp, 0x10
mov ecx, eax
mov eax, dword [ebp - 0xe4]
push 4
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call esi
cmp eax, 6
lea ecx, [ebp - 0x1b0]
sete byte [ebp - 0x95]
call fcn.0042523a
lea ecx, [ebp - 0x190]
call fcn.0042523a
lea ecx, [ebp - 0x170]
call fcn.0042523a
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x37
call fcn.0042523a
cmp byte [ebp - 0x95], 0
je 0x40644b
push edi
lea eax, [ebp - 0x170]
push eax
call fcn.00424e0d
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 0x59
call fcn.00424e0d
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x5a
call fcn.004040fc
mov edi, eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x190]
push eax
mov byte [ebp - 4], 0x5b
call fcn.004040fc
add esp, 0x10
mov ecx, eax
push 4
mov eax, edi
call fcn.00425210
push eax
mov eax, ecx
call fcn.00425210
push eax
push dword [0x4a5874]
call esi
cmp eax, 6
lea ecx, [ebp - 0x190]
setne byte [ebp - 0x95]
call fcn.0042523a
lea ecx, [ebp - 0x1b0]
call fcn.0042523a
lea ecx, [ebp - 0x104]
call fcn.0042523a
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x37
call fcn.0042523a
cmp byte [ebp - 0x95], 0
je 0x406483
push str.current_version_have_already_setup__exit
lea eax, [ebp - 0x104]
push eax
call fcn.00424e0d
push 0x192
lea eax, [ebp - 0x190]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x5c
call fcn.0041110d
mov esi, eax
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x104]
call fcn.0042735a
push eax
mov esi, ebx
call fcn.00410fba
lea ecx, [ebp - 0x190]
call fcn.0042523a
lea ecx, [ebp - 0x104]
jmp 0x405f9a
push str.Check_current_version_have_already_setup_
lea eax, [ebp - 0x104]
push eax
call fcn.00424e0d
push 0x198
lea eax, [ebp - 0x190]
push eax
push 3
mov ecx, str.._thread_install.cpp
pop edi
mov edx, ebx
mov byte [ebp - 4], 0x5e
call fcn.0041110d
mov esi, eax
mov byte [ebp - 4], 0x5f
jmp 0x406422
push 1
push 0x64
push 0x8d2
push dword [0x4a5874]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x34]
call fcn.0042523a
lea eax, [ebp - 0x74]
call fcn.00416152
xor esi, esi
jmp 0x4052bd