Function at 0x1003cae0
Capabilities:
Create directory
Delete registry value
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x5504
call fcn.10126240
mov eax, dword [0x1017455c]
xor eax, esp
mov dword [esp + 0x5500], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x207
mov dword [esp + 0x24], eax
lea eax, [esp + 0x13d5]
push ebx
push eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], edx
mov byte [esp + 0x13dc], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea ecx, [esp + 0x11cd]
push ebx
push ecx
mov byte [esp + 0x11d4], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea edx, [esp + 0xfc5]
push ebx
push edx
mov byte [esp + 0xfcc], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea eax, [esp + 0x18ed]
push ebx
push eax
mov byte [esp + 0x18f4], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea ecx, [esp + 0x2305]
push ebx
push ecx
mov byte [esp + 0x230c], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea edx, [esp + 0x15dd]
push ebx
push edx
mov byte [esp + 0x15e4], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea eax, [esp + 0xdbd]
push ebx
push eax
mov byte [esp + 0xdc4], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea ecx, [esp + 0x1cfd]
push ebx
push ecx
mov byte [esp + 0x1d04], bl
call fcn.10116880
add esp, 0xc
push 0x207
lea edx, [esp + 0x1af5]
push ebx
push edx
mov byte [esp + 0x1afc], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea eax, [esp + 0x17e5]
push ebx
push eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x17ec], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea ecx, [esp + 0x3f5]
push ebx
push ecx
mov byte [esp + 0x3fc], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0x70d]
push ebx
push edx
mov byte [esp + 0x714], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea eax, [esp + 0x815]
push ebx
push eax
mov byte [esp + 0x81c], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea ecx, [esp + 0xa25]
push ebx
push ecx
mov byte [esp + 0xa2c], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0xb2d]
push ebx
push edx
mov byte [esp + 0xb34], bl
call fcn.10116880
add esp, 0xc
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x54], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea edi, [esp + 0xa20]
mov dword [esp + 0x58], eax
mov dword [esp + 0x38], ebx
call fcn.10039e30
cmp eax, 1
je 0x1003cd07
mov ecx, edi
call fcn.10039fe0
push 0x208
lea ebx, [esp + 0xdbc]
lea esi, [esp + 0xa24]
call fcn.10042910
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
mov eax, ebx
push eax
mov ecx, esi
push ecx
call edi
xor ebx, ebx
cmp byte [esp + 0xa20], bl
je 0x1003cd68
mov eax, esi
lea ecx, [ecx]
inc eax
cmp byte [eax], bl
jne 0x1003cd40
lea edx, [esp + 0xa20]
sub eax, edx
je 0x1003cd68
cmp byte [esp + eax + 0xa1f], 0x5c
je 0x1003cd68
push 0x10149ea8
mov eax, edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [0x101936f4], ebx
je 0x1003cda1
cmp byte [esp + 0xa20], bl
je 0x1003cd95
xor eax, eax
jmp 0x1003cd80
mov cl, byte [esp + eax + 0xa20]
mov byte [esp + eax + 0xb28], cl
inc eax
cmp cl, bl
jne 0x1003cd80
jmp 0x1003cdb5
mov byte [esp + 0xb28], bl
jmp 0x1003ce71
lea esi, [esp + 0xb28]
call fcn.1004eee0
cmp eax, ebx
je 0x1003ce71
cmp byte [esp + 0xb28], bl
je 0x1003ce71
lea ecx, [esp + 0xb28]
call fcn.10049c40
lea ecx, [esp + 0xb28]
push ecx
lea edx, [esp + 0x814]
push edx
call edi
lea ecx, [esp + 0x810]
call fcn.10049c40
push str.mailscan.ini
lea eax, [esp + 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x818]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1003ce20
mov byte [esp + 0x810], bl
jmp 0x1003ce49
push 0x208
lea ebx, [esp + 0xdbc]
lea esi, [esp + 0xb2c]
call fcn.10042910
add esp, 4
mov ecx, ebx
push ecx
mov edx, esi
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor ebx, ebx
cmp byte [esp + 0xb28], bl
je 0x1003ce71
lea eax, [esp + 0xb28]
lea ecx, [esp + 0xa20]
call fcn.10031890
test eax, eax
je 0x1003ce71
mov dword [esp + 0x38], 1
cmp dword [ebp + 0x10], ebx
je 0x1003ce8e
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
push eax
push ecx
push str._CBD__BDC__s__CVD__s_
push ebx
call fcn.10053700
add esp, 0x10
lea edi, [esp + 0x17e0]
call fcn.10039e30
test eax, eax
je 0x1003cf9b
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, edi
push edx
lea eax, [esp + 0x3f4]
push eax
call esi
cmp byte [esp + 0x3f0], bl
je 0x1003cef1
lea eax, [esp + 0x3f0]
inc eax
cmp byte [eax], bl
jne 0x1003cec5
lea ecx, [esp + 0x3f0]
sub eax, ecx
je 0x1003cef1
cmp byte [esp + eax + 0x3ef], 0x5c
je 0x1003cef1
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10149ea8
mov edx, ecx
push edx
call edi
jmp 0x1003cef7
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.eupdate.ini
lea eax, [esp + 0x3f4]
push eax
call edi
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x3f8]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003cf26
mov dword [esp + 0x1c], 1
lea ecx, [esp + 0x17e0]
push ecx
lea edx, [esp + 0x70c]
push edx
call esi
cmp byte [esp + 0x708], bl
je 0x1003cf6c
lea eax, [esp + 0x708]
inc eax
cmp byte [eax], bl
jne 0x1003cf48
lea ecx, [esp + 0x708]
sub eax, ecx
je 0x1003cf6c
cmp byte [esp + eax + 0x707], 0x5c
je 0x1003cf6c
push 0x10149ea8
mov edx, ecx
push edx
call edi
push str.iupdate.ini
lea eax, [esp + 0x70c]
push eax
call edi
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x710]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003cf9b
mov dword [esp + 0x3c], 1
mov esi, dword [ebp + 0x10]
cmp esi, ebx
je 0x1003cfc2
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x3f4]
push edx
push eax
push str._CBD__EUI_d__EI_s__IUI_d
push ebx
call fcn.10053700
add esp, 0x14
cmp dword [0x1018cc94], 0xffffffff
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
jne 0x1003d4ac
call fcn.1006c2f0
mov dword [0x1018cc94], eax
cmp esi, ebx
je 0x1003cff2
push eax
push str._CBD__SMBCorp_d
push ebx
call fcn.10053700
add esp, 0xc
cmp dword [0x1018cc94], ebx
je 0x1003d3c2
push 0x103
lea ecx, [esp + 0x91d]
push ebx
push ecx
mov byte [esp + 0x924], bl
call fcn.10116880
add esp, 0xc
push 0x104
lea edx, [esp + 0x91c]
push edx
push 0x1013f817
mov edx, str.server
mov ecx, str.eScan
call fcn.100436c0
add esp, 0xc
cmp byte [esp + 0x918], 0x30
jne 0x1003d2cc
push 0x8000
mov dword [0x1019e05c], 1
call fcn.1010dced
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x1003d0b6
mov eax, dword [esp + 0x58]
push eax
mov ecx, esi
mov byte [esi], bl
call fcn.1005fc50
cmp byte [esi], bl
je 0x1003d0ad
push 0x1015153c
mov ecx, esi
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
je 0x1003d0ad
cmp dword [ebp + 0x10], ebx
je 0x1003d0a3
push str._CBD__UpdatesFromInternet__TRUE___i_
push ebx
call fcn.10053700
add esp, 8
mov dword [0x1019e064], 1
push esi
call fcn.1010dc10
add esp, 4
cmp dword [0x1019e064], ebx
jne 0x1003d2a0
push 0x103
lea ecx, [esp + 0x2b5]
push ebx
push ecx
mov byte [esp + 0x2bc], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0xc35]
push ebx
push edx
mov byte [esp + 0xc3c], bl
call fcn.10116880
add esp, 0xc
lea esi, [esp + 0xc30]
call fcn.1003c8f0
mov esi, eax
cmp dword [ebp + 0x10], ebx
je 0x1003d126
lea eax, [esp + 0xc30]
push eax
push esi
push str._CBD__FromCloud___u__CH___s_
push ebx
call fcn.10053700
add esp, 0x10
cmp dword [0x1019e064], ebx
jne 0x1003d2a0
lea ecx, [esp + 0x3f0]
push ecx
push 0x104
lea edx, [esp + 0x2b8]
push edx
push 0x1013fc40
push str.SecServer
push str.Config
call edi
cmp byte [esp + 0x2b0], 0x31
jne 0x1003d1d3
cmp dword [ebp + 0x10], ebx
je 0x1003d175
push str._CBD__SecServer__1
push ebx
call fcn.10053700
add esp, 8
lea eax, [esp + 0x3f0]
push eax
push 0x104
lea ecx, [esp + 0x2b8]
push ecx
push 0x1013ffd0
push str.SecServerAVUpdateFromInternet
push str.Config
call edi
cmp byte [esp + 0x2b0], 0x31
jne 0x1003d1b8
cmp dword [ebp + 0x10], ebx
je 0x1003d296
push str._CBD__UpdatesFromInternet__TRUE__SecServerAVUpdateFromInternet_
jmp 0x1003d28d
cmp esi, ebx
je 0x1003d2a0
cmp dword [ebp + 0x10], ebx
je 0x1003d296
push str._CBD__UpdatesFromInternet__TRUE__FromCloud_
jmp 0x1003d28d
lea edx, [esp + 0x3f0]
push edx
push 0x104
lea eax, [esp + 0x2b8]
push eax
push 0x1013f817
push str.SecServerAVUpdateFromInternet
push str.Config
call edi
cmp byte [esp + 0x2b0], 0x32
jne 0x1003d213
cmp dword [ebp + 0x10], ebx
je 0x1003d296
push str._CBD__UpdatesFromInternet__TRUE__SecServerAVUpdateFromInternet2_
jmp 0x1003d28d
cmp esi, ebx
je 0x1003d2a0
push 0x3ff
lea ecx, [esp + 0x310d]
push ebx
push ecx
mov byte [esp + 0x3114], bl
call fcn.10116880
add esp, 0xc
lea edx, [esp + 0x3f0]
push edx
push 0x400
lea eax, [esp + 0x3110]
push eax
push 0x1013f817
push str.httphost
push str.Config
call edi
cmp byte [esp + 0x3108], bl
je 0x1003d2a0
lea ecx, [esp + 0xc30]
push ecx
lea ecx, [esp + 0x310c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
je 0x1003d2a0
cmp dword [ebp + 0x10], ebx
je 0x1003d296
push str._CBD__UpdatesFromInternet__TRUE__FromCloudHost_
push ebx
call fcn.10053700
add esp, 8
mov dword [0x1019e064], 1
cmp dword [ebp + 0x10], ebx
je 0x1003d4c9
mov edx, dword [0x1019e064]
mov eax, dword [0x1019e05c]
push edx
push eax
push str._CBD__EI1_d__EI2_d
push ebx
call fcn.10053700
mov esi, dword [ebp + 0x10]
add esp, 0x10
jmp 0x1003d4ac
cmp dword [esp + 0x1c], ebx
je 0x1003d4ac
push 0x3ff
lea ecx, [esp + 0x290d]
push ebx
push ecx
mov byte [esp + 0x2914], bl
call fcn.10116880
add esp, 0xc
lea edx, [esp + 0x3f0]
push edx
push 0x400
lea eax, [esp + 0x2910]
push eax
push 0x1013f817
push str.DownloadFromAnotherServer
push str.Config
call edi
cmp byte [esp + 0x2908], 0x31
jne 0x1003d4ac
lea ecx, [esp + 0x3f0]
push ecx
push 0x400
lea edx, [esp + 0x2910]
push edx
push 0x1013f817
push str.httphost
push str.Config
call edi
push str.mwti.
lea ecx, [esp + 0x290c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
push str.escanav.
lea ecx, [esp + 0x290c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
push str.microworldsystems.
lea ecx, [esp + 0x290c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
mov dword [0x1019e05c], 1
cmp esi, ebx
je 0x1003d4c9
push 1
push str._CBD__EI4_d
jmp 0x1003d4a3
cmp dword [esp + 0x1c], ebx
je 0x1003d4ac
push 0x103
lea eax, [esp + 0x2b5]
push ebx
push eax
mov byte [esp + 0x2bc], bl
call fcn.10116880
add esp, 0xc
lea ecx, [esp + 0x3f0]
push ecx
push 0x104
lea edx, [esp + 0x2b8]
push edx
push 0x1013f817
push str.DownloadFromAnotherServer
push str.Config
call edi
cmp byte [esp + 0x2b0], 0x31
jne 0x1003d4ac
lea eax, [esp + 0x3f0]
push eax
push 0x104
lea ecx, [esp + 0x2b8]
push ecx
push 0x1013f817
push str.httphost
push str.Config
call edi
push str.mwti.
lea ecx, [esp + 0x2b4]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
push str.escanav.
lea ecx, [esp + 0x2b4]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
push str.microworldsystems.
lea ecx, [esp + 0x2b4]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003d4ac
mov dword [0x1019e05c], 1
cmp esi, ebx
je 0x1003d4c9
push 1
push str._CBD__EI5_d
push ebx
call fcn.10053700
add esp, 0xc
cmp esi, ebx
je 0x1003d4c9
mov edx, dword [esp + 0x1c]
mov eax, dword [0x1018cc94]
push edx
push eax
push str._CBD__SMBCorp:__u___EupdateIniPresent:__u_
push ebx
call fcn.10053700
add esp, 0x10
mov esi, dword [esp + 0x1c]
cmp dword [0x1018cc94], ebx
je 0x1003d57d
cmp esi, ebx
je 0x1003d57d
push 0x103
lea ecx, [esp + 0x2b5]
push ebx
push ecx
mov byte [esp + 0x2bc], bl
call fcn.10116880
add esp, 0xc
lea edx, [esp + 0x3f0]
push edx
push 0x104
lea eax, [esp + 0x2b8]
push eax
push 0x1013f817
push str.IsOtherOSBuild
push str.Config
call edi
cmp dword [ebp + 0x10], ebx
je 0x1003d547
lea ecx, [esp + 0x2b0]
push ecx
lea edx, [esp + 0x3f4]
push edx
push str._CBD__IsOtherOSBuild_EINI:__s___lbuff___s_
push ebx
call fcn.10053700
add esp, 0x10
cmp byte [esp + 0x2b0], 0x31
jne 0x1003d565
lea eax, [esp + 0x2b0]
push eax
call fcn.1010dc05
add esp, 4
mov dword [esp + 0x54], eax
cmp dword [ebp + 0x10], ebx
je 0x1003d57d
mov ecx, dword [esp + 0x54]
push ecx
push str._CBD__DownloadOtherOSFiles_d
push ebx
call fcn.10053700
add esp, 0xc
cmp dword [0x1019e064], ebx
jne 0x1003d732
cmp dword [0x1019e05c], ebx
jne 0x1003d609
cmp esi, ebx
je 0x1003d732
push 0x103
lea edx, [esp + 0x91d]
push ebx
push edx
mov byte [esp + 0x924], bl
call fcn.10116880
add esp, 0xc
lea eax, [esp + 0x3f0]
push eax
push 0x104
lea ecx, [esp + 0x920]
push ecx
push 0x1013f817
push str.DownloadType
push str.Config
call edi
cmp byte [esp + 0x918], 0x33
jne 0x1003d732
mov dword [0x1019e05c], 1
cmp dword [ebp + 0x10], ebx
je 0x1003d732
push 1
push str._CBD__EI6_d
jmp 0x1003d729
cmp esi, ebx
je 0x1003d732
push 0x103
lea edx, [esp + 0x1ad]
push ebx
push edx
mov byte [esp + 0x1b4], bl
call fcn.10116880
add esp, 0xc
lea eax, [esp + 0x3f0]
push eax
push 0x104
lea ecx, [esp + 0x1b0]
push ecx
push 0x1013f817
push str.DownloadType
push str.Config
call edi
cmp byte [esp + 0x1a8], 0x32
jne 0x1003d732
lea edx, [esp + 0x3f0]
push edx
push 0x104
lea eax, [esp + 0x1b0]
push eax
push 0x1013f817
push str.httphost
push str.Config
mov byte [esp + 0x1c0], bl
call edi
cmp byte [esp + 0x1a8], bl
je 0x1003d732
mov eax, str.http:__
inc eax
cmp byte [eax], bl
jne 0x1003d6a1
sub eax, str.http:__
mov esi, eax
push esi
mov eax, str.http:__
lea ecx, [esp + 0x1ac]
call fcn.100318e0
add esp, 4
test eax, eax
jne 0x1003d6e0
lea eax, [esp + esi + 0x1a8]
lea edx, [esp + 0x1a8]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x1003d6d6
lea ecx, [esp + 0x1a8]
push 0x2f
push ecx
call fcn.1010d780
add esp, 8
cmp eax, ebx
je 0x1003d6f8
mov byte [eax], bl
lea edx, [esp + 0x1a8]
push edx
push 0x1019e068
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [0x1019e068], bl
je 0x1003d732
mov dword [0x1019e060], 1
cmp dword [ebp + 0x10], ebx
je 0x1003d732
push 1
push str._CBD__EC7_d
push ebx
call fcn.10053700
add esp, 0xc
cmp dword [ebp + 0xc], 2
mov eax, dword [0x1019e05c]
jne 0x1003d770
cmp eax, ebx
je 0x1003d756
cmp eax, 1
jne 0x1003f1b1
cmp dword [0x1019e064], eax
jne 0x1003f1b1
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
cmp eax, ebx
je 0x1003d7d6
cmp eax, 1
jne 0x1003d781
cmp dword [0x1019e064], eax
je 0x1003d7d6
push 0x103
lea eax, [esp + 0x91d]
push ebx
push eax
mov byte [esp + 0x924], bl
call fcn.10116880
add esp, 0xc
lea esi, [esp + 0x918]
call fcn.100580d0
lea eax, [esp + 0x17e0]
mov ecx, esi
call fcn.10031890
test eax, eax
je 0x1003d7d6
mov dword [0x1019e05c], ebx
cmp dword [ebp + 0x10], ebx
je 0x1003d7d6
push ebx
push str._CBD__EC8_d
push ebx
call fcn.10053700
add esp, 0xc
mov edi, dword [esp + 0x20]
cmp edi, ebx
je 0x1003f19f
cmp dword [esp + 0x14], ebx
je 0x1003f19f
cmp byte [edi], bl
je 0x1003f19f
push ebx
push edi
call fcn.10044cc0
add esp, 8
test eax, eax
je 0x1003f19f
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x2300], bl
mov byte [esp + 0x1af0], bl
mov byte [esp + 0xdb8], bl
mov byte [esp + 0x11c8], bl
mov byte [esp + 0x13d0], bl
mov byte [ecx], bl
mov byte [esp + 0xfc0], bl
mov byte [esp + 0x1cf8], bl
cmp eax, ebx
je 0x1003d85c
cmp byte [eax], bl
je 0x1003d85c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push eax
lea edx, [esp + 0x13d4]
push edx
call esi
jmp 0x1003d88c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
lea eax, [esp + 0x13d4]
push eax
call esi
lea ecx, [esp + 0x13d0]
call fcn.10049c40
push str.versions.dat
lea ecx, [esp + 0x13d4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [ebp + 0x10], ebx
je 0x1003d8a7
lea edx, [esp + 0x13d0]
push edx
push str._CBD__VD_s
push ebx
call fcn.10053700
add esp, 0xc
lea eax, [esp + 0x68]
push 1
push eax
lea edx, [esp + 0x18]
lea ecx, [esp + 0x13d8]
call fcn.10044660
add esp, 8
test eax, eax
je 0x1003d8f6
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x13d0]
push ecx
push str.Unable_to_find__s_
push edx
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
test byte [esp + 0x68], 7
je 0x1003d910
push 0x80
lea eax, [esp + 0x13d4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp dword [esp + 0x10], ebx
ja 0x1003d953
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x13d0]
push ecx
push str._s_is_of_zero_bytes_
push edx
call fcn.1010d6a8
add esp, 0xc
lea eax, [esp + 0x13d0]
call fcn.10033960
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x13d0]
push eax
call fcn.100581b0
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, ebx
jne 0x1003d99c
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x13d0]
push ecx
push str.Unable_to_OpenFile__s_
push edx
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
push edi
lea eax, [esp + 0xfc4]
push eax
call esi
lea ecx, [esp + 0xfc0]
call fcn.10049c40
push str.UAGChnge.ini
lea ecx, [esp + 0xfc4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
lea edx, [esp + 0x18ec]
push edx
call esi
lea ecx, [esp + 0x18e8]
call fcn.10049c40
push str.MailScan.ini
lea eax, [esp + 0x18ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
lea ecx, [esp + 0x15dc]
push ecx
call esi
lea ecx, [esp + 0x15d8]
call fcn.10049c40
push str.filelist.dat
lea edx, [esp + 0x15dc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [ebp + 0x10], ebx
je 0x1003da47
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x15e0]
call fcn.10044660
push eax
lea eax, [esp + 0x15e4]
push eax
push str._CBD__FLD_s__isf___d_
push ebx
call fcn.10053700
add esp, 0x18
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x15e0]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003dc4b
mov eax, dword [esp + 0x58]
cmp eax, ebx
jbe 0x1003dc4b
cmp dword [0x1019e16c], eax
jne 0x1003dc4b
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0xfc8]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003dc24
push 0x103
lea ecx, [esp + 0x1ad]
push ebx
push ecx
mov byte [esp + 0x1b4], bl
call fcn.10116880
add esp, 0xc
cmp dword [esp + 0x1c], ebx
je 0x1003db7e
lea ecx, [esp + 0x1a8]
lea eax, [esp + 0x3f0]
call fcn.10036140
test eax, eax
je 0x1003db17
push str.Config
lea esi, [esp + 0x3f4]
lea eax, [esp + 0x1ac]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x3f4]
mov ebx, str.EupdateIni
call fcn.10042d90
add esp, 4
xor ebx, ebx
cmp dword [0x1019e064], ebx
je 0x1003db7e
cmp dword [esp + 0x3c], ebx
je 0x1003db7e
lea ecx, [esp + 0x1a8]
lea eax, [esp + 0x708]
call fcn.10036140
test eax, eax
je 0x1003db7e
push str.Config
lea esi, [esp + 0x70c]
lea eax, [esp + 0x1ac]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x70c]
mov ebx, str.IupdateIni
call fcn.10042d90
add esp, 4
xor ebx, ebx
cmp dword [esp + 0x38], ebx
je 0x1003dc24
cmp byte [esp + 0x810], bl
je 0x1003dc24
lea ecx, [esp + 0x1a8]
lea eax, [esp + 0x810]
call fcn.10036140
test eax, eax
je 0x1003dc24
push str.Config
lea esi, [esp + 0x814]
lea eax, [esp + 0x1ac]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.Config
lea esi, [esp + 0x18ec]
lea eax, [esp + 0x1ac]
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x814]
mov ebx, str.MailScanIni
call fcn.10042d90
add esp, 4
push str.General
lea eax, [esp + 0x18ec]
mov ebx, str.MailScanIniBDC
call fcn.10042d90
add esp, 4
mov edx, dword [esp + 0x18]
push edx
call fcn.1010f263
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
push edi
lea eax, [esp + 0x11cc]
push eax
call esi
lea ecx, [esp + 0x11c8]
call fcn.10049c40
push str.filelist.da_
lea ecx, [esp + 0x11cc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
lea edx, [esp + 0x2304]
push edx
call esi
lea ecx, [esp + 0x2300]
call fcn.10049c40
push str.filelist.da
lea eax, [esp + 0x2304]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x15d8]
call fcn.10033960
lea eax, [esp + 0x11c8]
call fcn.10033960
lea eax, [esp + 0x2300]
call fcn.10033960
lea ecx, [esp + 0x11c8]
push 0x1014a614
push ecx
call fcn.1010ebfe
add esp, 8
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x1003dd1e
mov edx, dword [esp + 0x18]
push edx
call fcn.1010f263
mov ecx, dword [esp + 0x18]
add esp, 4
lea eax, [esp + 0x11c8]
push eax
push str.Unable_to_OpenFile__s_
push ecx
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x2300]
push 0x1014a614
push edx
call fcn.1010ebfe
add esp, 8
mov dword [esp + 0x30], eax
cmp eax, ebx
jne 0x1003dd86
mov eax, dword [esp + 0x18]
push eax
call fcn.1010f263
mov ecx, dword [esp + 0x28]
add esp, 4
push ecx
call fcn.1010f263
mov eax, dword [esp + 0x18]
add esp, 4
lea edx, [esp + 0x2300]
push edx
push str.Unable_to_OpenFile__s_
push eax
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
call fcn.1006a170
test eax, eax
je 0x1003ddfd
push 0x103
lea ecx, [esp + 0x2b5]
push ebx
push ecx
mov byte [esp + 0x2bc], bl
call fcn.10116880
add esp, 0xc
push str.WinPEWindows
lea eax, [esp + 0x4c]
lea edi, [esp + 0x2b4]
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x4c], 0x104
call fcn.100315c0
cmp byte [esp + 0x2b0], bl
je 0x1003ddf9
mov edx, edi
push ebx
push edx
call fcn.10044cc0
add esp, 8
test eax, eax
je 0x1003ddf9
mov eax, edi
push eax
lea ecx, [esp + 0xdbc]
push ecx
call esi
mov edi, dword [esp + 0x20]
cmp byte [esp + 0xdb8], bl
jne 0x1003de11
push edi
lea edx, [esp + 0xdbc]
push edx
call esi
lea ecx, [esp + 0xdb8]
call fcn.10049c40
push str.TEMP
lea eax, [esp + 0xdbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0xdb8]
push ebx
push ecx
call fcn.10044cc0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
add esp, 8
cmp eax, 1
je 0x1003dee5
push ebx
lea edx, [esp + 0xdbc]
push edx
call esi
cmp eax, 1
je 0x1003dee5
lea eax, [esp + 0xdb8]
push eax
call fcn.1005a190
add esp, 4
cmp eax, ebx
jne 0x1003dee5
mov ecx, dword [esp + 0x18]
push ecx
call fcn.1010f263
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.1010f263
mov eax, dword [esp + 0x34]
add esp, 4
push eax
call fcn.1010f263
add esp, 4
lea eax, [esp + 0x11c8]
call fcn.10033960
mov ecx, dword [esp + 0x20]
call fcn.100355e0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0xdb8]
push ecx
push str.Unable_to_Create_TempFolder__s_
push edx
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x10]
cmp edi, ebx
je 0x1003df02
lea eax, [esp + 0xdb8]
push eax
push str._CBD__Temp_FLD_s
push ebx
call fcn.10053700
add esp, 0xc
lea ecx, [esp + 0xdb8]
push ecx
lea edx, [esp + 0x1cfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0x1cf8]
call fcn.10049c40
push str.Plugins
lea eax, [esp + 0x1cfc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x1cf8]
push ebx
push ecx
call fcn.10044cc0
add esp, 8
cmp eax, 1
je 0x1003dfe6
push ebx
lea edx, [esp + 0x1cfc]
push edx
call esi
cmp eax, 1
je 0x1003dfe6
lea eax, [esp + 0x1cf8]
push eax
call fcn.1005a190
add esp, 4
cmp eax, ebx
jne 0x1003dfe6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.1010f263
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.1010f263
mov eax, dword [esp + 0x34]
add esp, 4
push eax
call fcn.1010f263
add esp, 4
lea eax, [esp + 0x11c8]
call fcn.10033960
mov ecx, dword [esp + 0x20]
call fcn.100355e0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x1cf8]
push ecx
push str.Unable_to_Create_Plugins_Sub_folder_inside_TempFolder__s_
push edx
call fcn.1010d6a8
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
cmp edi, ebx
je 0x1003e000
lea eax, [esp + 0x1cf8]
push eax
push str._CBD__Temp_FLD_Plug_s
push ebx
call fcn.10053700
add esp, 0xc
mov eax, dword [esp + 0x18]
push 0x207
lea ecx, [esp + 0x1af4]
call fcn.10046580
add esp, 4
test eax, eax
je 0x1003efe1
push 0x31
lea ecx, [esp + 0x3c1]
push ebx
push ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], 1
mov dword [esp + 0x34], ebx
mov dword [esp + 0x54], ebx
mov byte [esp + 0x3c8], bl
call fcn.10116880
add esp, 0xc
push 0x3ff
lea edx, [esp + 0x290d]
push ebx
push edx
mov byte [esp + 0x2914], bl
call fcn.10116880
add esp, 0xc
push 0x3ff
lea eax, [esp + 0x1f05]
push ebx
push eax
mov byte [esp + 0x1f0c], bl
call fcn.10116880
add esp, 0xc
push 0x3ff
lea ecx, [esp + 0x2d0d]
push ebx
push ecx
mov byte [esp + 0x2d14], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0x2b5]
push ebx
push edx
mov byte [esp + 0x2bc], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea eax, [esp + 0x1ad]
push ebx
push eax
mov byte [esp + 0x1b4], bl
call fcn.10116880
add esp, 0xc
push 0x3ff
lea ecx, [esp + 0x310d]
push ebx
push ecx
mov byte [esp + 0x3114], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0x4fd]
push ebx
push edx
mov byte [esp + 0x504], bl
call fcn.10116880
lea eax, [esp + 0x1afc]
add esp, 0xc
push eax
call fcn.100454f0
add esp, 4
cmp byte [esp + 0x1af0], bl
je 0x1003efc1
inc dword [esp + 0x50]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x290c]
lea ecx, [esp + 0x1af4]
call fcn.10046ea0
or esi, 0xffffffff
add esp, 4
cmp dword [esp + 0x10], esi
je 0x1003e1bb
lea edx, [esp + 0x10]
push edx
lea edx, [esp + 0x1f04]
lea ecx, [esp + 0x1af4]
call fcn.10046ea0
add esp, 4
cmp dword [esp + 0x10], esi
je 0x1003e1bb
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x2d0c]
lea ecx, [esp + 0x1af4]
call fcn.10046ea0
add esp, 4
cmp dword [esp + 0x10], esi
je 0x1003e1bb
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x310c]
lea ecx, [esp + 0x1af4]
call fcn.10046ea0
add esp, 4
cmp byte [esp + 0x2908], bl
je 0x1003f0b3
cmp byte [esp + 0x1f00], bl
je 0x1003f0b3
cmp byte [esp + 0x2d08], bl
je 0x1003f0b3
cmp byte [esp + 0x3108], bl
je 0x1003f0b3
lea eax, [esp + 0x2908]
inc eax
cmp byte [eax], bl
jne 0x1003e1f6
lea edx, [esp + 0x2908]
sub eax, edx
cmp eax, 1
jne 0x1003f0b3
lea eax, [esp + 0x1f00]
inc eax
cmp byte [eax], bl
jne 0x1003e214
lea ecx, [esp + 0x1f00]
sub eax, ecx
cmp eax, 0x20
jne 0x1003f0b3
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x2d08]
push edx
lea eax, [esp + 0x2b4]
push eax
call esi
push ebx
push 0x10149ea8
lea ecx, [esp + 0x2d10]
push 0x101483c4
push ecx
call fcn.10047ed0
mov edx, dword [esp + 0x30]
add esp, 0x10
push edx
lea eax, [esp + 0x1ac]
push eax
call esi
lea ecx, [esp + 0x1a8]
call fcn.10049c40
lea ecx, [esp + 0x2d08]
push ecx
lea edx, [esp + 0x1ac]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x2d08]
push 0x5c
push eax
call fcn.1010e930
add esp, 8
cmp eax, ebx
je 0x1003e2ac
inc eax
mov dword [esp + 0x4c], eax
jmp 0x1003e2b7
lea ecx, [esp + 0x2d08]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x4c]
mov eax, str.update.txt
call fcn.10031890
test eax, eax
jne 0x1003e2d1
mov dword [esp + 0x48], 1
lea edx, [esp + 0xdb8]
push edx
lea eax, [esp + 0x4fc]
push eax
call esi
lea ecx, [esp + 0x4f8]
call fcn.10049c40
lea ecx, [esp + 0x2d08]
push ecx
lea edx, [esp + 0x4fc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp edi, ebx
je 0x1003e31f
lea eax, [esp + 0x4f8]
push eax
push str._CBD__Dest_s
push ebx
call fcn.10053700
add esp, 0xc
cmp byte [esp + 0x2908], 0x30
jne 0x1003e4bb
mov esi, 1
lea ecx, [esp + 0x2d08]
cmp dword [esp + 0x54], ebx
jne 0x1003e38d
push str.linux
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003e37e
push str.macosx
lea ecx, [esp + 0x2d0c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003e37e
xor esi, esi
cmp edi, ebx
je 0x1003e419
push str._CBD__ContinueWithDownload_b_FALSE
jmp 0x1003e3f5
cmp edi, ebx
je 0x1003e4d5
push str._CBD__ContinueWithDownload_a_TRUE
jmp 0x1003e3f5
push str.version
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
je 0x1003e3fe
push 0x1014a628
lea ecx, [esp + 0x2d0c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003e3ea
push str..dat
lea ecx, [esp + 0x2d0c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003e3ea
push str..sig
lea ecx, [esp + 0x2d0c]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
je 0x1003e3fe
xor esi, esi
cmp edi, ebx
je 0x1003e419
push str._CBD__ContinueWithDownload_c_FALSE
push ebx
call fcn.10053700
add esp, 8
cmp edi, ebx
je 0x1003e411
push esi
push str._CBD__ContinueWithDownload_final__u
push ebx
call fcn.10053700
add esp, 0xc
cmp esi, ebx
jne 0x1003e4bb
push 0x207
lea ecx, [esp + 0x250d]
push ebx
push ecx
mov byte [esp + 0x2514], bl
call fcn.10116880
add esp, 0xc
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x500]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003e45a
lea eax, [esp + 0x4f8]
call fcn.10045010
lea edx, [esp + 0x4f8]
push edx
lea eax, [esp + 0x250c]
push str._s.gzip
push eax
call fcn.1010d6a8
add esp, 0xc
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x2510]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003e49b
lea eax, [esp + 0x2508]
call fcn.10045010
cmp edi, ebx
je 0x1003efc1
lea ecx, [esp + 0x4f8]
push ecx
push str._CBD__NotDownloading_s
push ebx
call fcn.10053700
jmp 0x1003efbe
cmp edi, ebx
je 0x1003e4d5
lea edx, [esp + 0x1a8]
push edx
push str._CBD__ActFN_s
push ebx
call fcn.10053700
add esp, 0xc
lea eax, [esp + 0x68]
push 1
push eax
lea edx, [esp + 0x18]
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x18], ebx
call fcn.10044660
add esp, 8
cmp eax, ebx
jne 0x1003e61d
cmp dword [esp + 0x10], ebx
jbe 0x1003e5b5
cmp byte [esp + 0x2908], 0x2d
je 0x1003e5b5
test byte [esp + 0x68], 7
je 0x1003e52d
push 0x80
lea ecx, [esp + 0x1ac]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x3bc]
lea edx, [esp + 0x1a8]
call fcn.10071550
test eax, eax
je 0x1003f02c
lea eax, [esp + 0x3bc]
lea ecx, [esp + 0x1f00]
call fcn.10031890
test eax, eax
jne 0x1003e582
cmp edi, ebx
je 0x1003e579
lea edx, [esp + 0x1a8]
push edx
push str._CBD__Hash_same._Not_to_download_file___s_
push ebx
call fcn.10053700
add esp, 0xc
mov dword [esp + 0x2c], ebx
jmp 0x1003e704
cmp edi, ebx
je 0x1003e704
lea eax, [esp + 0x1f00]
push eax
lea ecx, [esp + 0x3c0]
push ecx
lea edx, [esp + 0x1b0]
push edx
push str._CBD__Hash_DIFFERS___s___FileHash:__s__VerDatHash:__s____so_DOWNLOAD
push ebx
call fcn.10053700
add esp, 0x14
jmp 0x1003e704
cmp edi, ebx
je 0x1003e5cf
lea eax, [esp + 0x1a8]
push eax
push str._CBD__deleting_a__s
push ebx
call fcn.10053700
add esp, 0xc
lea eax, [esp + 0x1a8]
call fcn.10045010
cmp byte [esp + 0x2908], 0x2d
jne 0x1003e704
lea eax, [esp + 0x4f8]
call fcn.10045010
test eax, eax
je 0x1003efc1
cmp edi, ebx
je 0x1003efc1
lea ecx, [esp + 0x4f8]
push ecx
push str._CBD__deleted_b__s
push ebx
call fcn.10053700
jmp 0x1003efbe
cmp byte [esp + 0x2908], 0x2d
jne 0x1003e6ea
push 0x3ff
lea edx, [esp + 0x250d]
push ebx
push edx
mov byte [esp + 0x2514], bl
call fcn.10116880
add esp, 0xc
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x500]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003e686
cmp edi, ebx
je 0x1003e67a
lea eax, [esp + 0x4f8]
push eax
push str._CBD__A_Minus_Entry._Deleting___s_
push ebx
call fcn.10053700
add esp, 0xc
lea eax, [esp + 0x4f8]
call fcn.10045010
lea ecx, [esp + 0x4f8]
push ecx
lea edx, [esp + 0x250c]
push str._s.gzip
push edx
call fcn.1010d6a8
add esp, 0xc
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x2510]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003efc1
cmp edi, ebx
je 0x1003e6d9
lea eax, [esp + 0x2508]
push eax
push str._CBD__B_Minus_Entry._Deleting___s_
push ebx
call fcn.10053700
add esp, 0xc
lea eax, [esp + 0x2508]
call fcn.10045010
jmp 0x1003efc1
cmp edi, ebx
je 0x1003e704
lea ecx, [esp + 0x1a8]
push ecx
push str._CBD__File_Absent___s_
push ebx
call fcn.10053700
add esp, 0xc
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x2c], ebx
je 0x1003efc1
mov esi, 1
lea edx, [esp + 0x68]
push esi
push edx
lea edx, [esp + 0x18]
lea ecx, [esp + 0x500]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003e798
cmp dword [esp + 0x10], ebx
jbe 0x1003e78c
test byte [esp + 0x68], 7
je 0x1003e754
push 0x80
lea eax, [esp + 0x4fc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x3bc]
lea edx, [esp + 0x4f8]
call fcn.10071550
cmp eax, esi
jne 0x1003e798
lea eax, [esp + 0x3bc]
lea ecx, [esp + 0x1f00]
call fcn.10031890
test eax, eax
jne 0x1003e798
mov dword [esp + 0x28], esi
mov dword [esp + 0x60], esi
jmp 0x1003e798
lea eax, [esp + 0x4f8]
call fcn.10045010
push 0x207
lea ecx, [esp + 0x250d]
push ebx
push ecx
mov byte [esp + 0x2514], bl
call fcn.10116880
add esp, 0xc
push 0x103
lea edx, [esp + 0x91d]
push ebx
push edx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x924], bl
call fcn.10116880
add esp, 0xc
mov dword [esp + 0x5c], ebx
cmp edi, ebx
je 0x1003e7f4
lea eax, [esp + 0x4f8]
push eax
push str._CBD__TO_DOWNLOAD_FILE:___s_
push ebx
call fcn.10053700
add esp, 0xc
cmp dword [esp + 0x28], ebx
jne 0x1003e7fe
mov dword [esp + 0x34], esi
cmp byte [0x1019e170], bl
jne 0x1003eb23
push 0x103
lea ecx, [esp + 0xc35]
push ebx
push ecx
mov byte [esp + 0xc3c], bl
call fcn.10116880
add esp, 0xc
push str.MonitorCLB
lea eax, [esp + 0x68]
lea edi, [esp + 0xc34]
mov ecx, 0x101482cc
mov edx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x68], 0x104
mov dword [esp + 0x14], ebx
call fcn.100315c0
cmp byte [esp + 0xc30], bl
je 0x1003e86f
cmp byte [esp + 0xc39], 0x4f
jne 0x1003e86f
cmp byte [esp + 0xc38], 0x52
je 0x1003e8b5
push 0x7f
lea edx, [esp + 0xd3d]
push ebx
push edx
mov byte [esp + 0xd44], bl
call fcn.10116880
add esp, 0xc
lea edi, [esp + 0xd38]
call fcn.1006e960
mov eax, str.0200
mov ecx, edi
call fcn.10031890
test eax, eax
je 0x1003e8b5
mov eax, str.0300
mov ecx, edi
call fcn.10031890
test eax, eax
jne 0x1003e8b9
mov dword [esp + 0x10], esi
push 0x104
push 0x1019e170
push 0x1013f817
mov edx, str.DBHost
mov ecx, str.General
call fcn.100436c0
add esp, 0xc
lea eax, [esp + 0x44]
push eax
push str.MonitorCLY
mov ecx, 0x101482cc
mov edx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x4c], ebx
call fcn.10031670
mov eax, dword [esp + 0x44]
cmp eax, 2
jne 0x1003e948
mov ecx, dword [str.download1.mwti.net]
mov edx, dword [0x1014941c]
mov eax, dword [0x10149420]
mov dword [0x1019e170], ecx
mov ecx, dword [0x10149424]
mov dword [0x1019e174], edx
mov dx, word [0x10149428]
mov dword [0x1019e178], eax
mov al, byte [0x1014942a]
mov dword [0x1019e17c], ecx
mov word [0x1019e180], dx
mov byte [0x1019e182], al
jmp 0x1003e952
cmp eax, 4
je 0x1003e952
cmp eax, 5
jne 0x1003e95e
cmp byte [0x1019e170], bl
jne 0x1003eae5
push 0x103
lea ecx, [esp + 0x605]
push ebx
push ecx
mov byte [esp + 0x60c], bl
call fcn.10116880
add esp, 0xc
cmp dword [esp + 0x10], ebx
jne 0x1003e9ea
cmp dword [esp + 0x38], ebx
jne 0x1003e999
call fcn.10035e40
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
je 0x1003e9ea
push str.upgr_mmxvi.cdn.bitdefender.net
push 0x1019e170
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.10035e40
xor edx, edx
mov ecx, 0xa
div ecx
cmp edx, ebx
jne 0x1003e9d2
mov ecx, 6
mov esi, str.www.microworldsystems.com
lea edi, [esp + 0x600]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1003ea40
push edx
lea edx, [esp + 0x604]
push str.update_u.mwti.net
push edx
call fcn.1010d6a8
add esp, 0xc
jmp 0x1003ea40
call fcn.10035e40
xor edx, edx
mov ecx, 0xa
div ecx
cmp edx, ebx
jne 0x1003ea11
mov ecx, 6
mov esi, str.www.microworldsystems.com
mov edi, 0x1019e170
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x1003ea24
push edx
push str.update_u.mwti.net
push 0x1019e170
call fcn.1010d6a8
add esp, 0xc
cmp dword [esp + 0x10], ebx
jne 0x1003ea40
mov ecx, 7
mov esi, str.upgr_mmxvi.cdn.bitdefender.net
lea edi, [esp + 0x600]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push str.General
mov edx, 0x1019e170
mov ecx, str.DBHost
mov dword [esp + 0x48], 5
call fcn.10043bc0
add esp, 4
cmp byte [esp + 0x600], bl
je 0x1003ea81
push str.General
lea edx, [esp + 0x604]
mov ecx, str.AltDBHost
call fcn.10043bc0
add esp, 4
mov eax, dword [esp + 0x44]
mov edi, str.MonitorCLY
mov ebx, 0x101482cc
call fcn.10031430
cmp byte [0x1019e170], 0
jne 0x1003eae3
cmp dword [esp + 0x10], 0
je 0x1003eab8
push str.microworld_24c34601_b5df_4e60_9465_592191c17dae.2d7dd.cdn.bitdefender.net
push 0x1019e170
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor ebx, ebx
jmp 0x1003eb23
push str.upgr_mmxvi.cdn.bitdefender.net
push 0x1019e170
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.General
mov edx, 0x1019e170
mov ecx, str.DBHost
call fcn.10043bc0
add esp, 4
xor ebx, ebx
jmp 0x1003eb23
xor ebx, ebx
push str.mmxiii
mov ecx, 0x1019e170
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
je 0x1003eb23
push str.upgr_mmxvi.cdn.bitdefender.net
push 0x1019e170
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.General
mov edx, 0x1019e170
mov ecx, str.DBHost
call fcn.10043bc0
add esp, 4
mov eax, dword [0x1019e05c]
cmp eax, ebx
je 0x1003ebfb
cmp eax, 1
jne 0x1003eb41
cmp dword [0x1019e064], eax
je 0x1003ebfb
cmp dword [0x1019e060], ebx
je 0x1003eb73
lea edx, [esp + 0x2b0]
push edx
push 0x1019e068
lea eax, [esp + 0x2510]
push str.http:___s_avx__s
push eax
call fcn.1010d6a8
mov edi, dword [ebp + 0x10]
add esp, 0x10
jmp 0x1003eeb2
push str.mac_
lea ecx, [esp + 0x4fc]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003ebca
push str.mdm_
lea ecx, [esp + 0x4fc]
call fcn.10047020
add esp, 4
cmp eax, 0xffffffff
jne 0x1003ebca
lea ecx, [esp + 0x2b0]
push ecx
lea edx, [esp + 0x250c]
push str.http:__microworld_24c34601_b5df_4e60_9465_592191c17dae.2d7dd.cdn.bitdefender.net_av32bit_avx__s.gzip
push edx
call fcn.1010d6a8
mov edi, dword [ebp + 0x10]
add esp, 0xc
jmp 0x1003eeb2
cmp dword [esp + 0x40], ebx
jne 0x1003ee24
push 0x103
lea eax, [esp + 0x605]
push ebx
push eax
mov byte [esp + 0x60c], bl
call fcn.10116880
mov dword [esp + 0x4c], 1
jmp 0x1003eca9
mov edx, dword [esp + 0x4c]
push edx
lea eax, [esp + 0x91c]
push str.SOFTWAREMicroWorldeScan_for_WindowsUpdates_s
push eax
call fcn.1010d6a8
add esp, 0xc
lea ecx, [esp + 0x2c]
push ecx
mov edi, 1
push edi
push ebx
lea edx, [esp + 0x924]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp esi, ebx
jne 0x1003ec81
lea eax, [esp + 0x5c]
push eax
push str.2011
lea ecx, [esp + 0x920]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
je 0x1003ec76
cmp dword [esp + 0x5c], edi
je 0x1003ec76
mov ecx, dword [esp + 0x2c]
push str.2011
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x40], ebx
jne 0x1003ee24
push 0x103
lea eax, [esp + 0x605]
push ebx
push eax
mov byte [esp + 0x60c], bl
call fcn.10116880
mov dword [esp + 0x4c], edi
add esp, 0xc
cmp dword [esp + 0x1c], ebx
je 0x1003ed79
lea ecx, [esp + 0x600]
lea eax, [esp + 0x3f0]
call fcn.10036140
test eax, eax
je 0x1003ed0f
push str.Config
lea esi, [esp + 0x3f4]
lea eax, [esp + 0x604]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x3f4]
mov ebx, str.EupdateIni
call fcn.10042d90
add esp, 4
xor ebx, ebx
mov edi, dword [ebp + 0x10]
cmp dword [0x1019e064], ebx
je 0x1003ed7c
cmp dword [esp + 0x3c], ebx
je 0x1003ed7c
lea ecx, [esp + 0x600]
lea eax, [esp + 0x708]
call fcn.10036140
test eax, eax
je 0x1003ed7c
push str.Config
lea esi, [esp + 0x70c]
lea eax, [esp + 0x604]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x70c]
mov ebx, str.IupdateIni
call fcn.10042d90
add esp, 4
xor ebx, ebx
mov edi, dword [ebp + 0x10]
cmp dword [esp + 0x38], ebx
je 0x1003ee27
cmp byte [esp + 0x810], bl
je 0x1003ee27
lea ecx, [esp + 0x600]
lea eax, [esp + 0x810]
call fcn.10036140
test eax, eax
je 0x1003ee27
push str.Config
lea esi, [esp + 0x814]
lea eax, [esp + 0x604]
mov ebx, str.UserAgent
call fcn.10042d90
add esp, 4
push str.Config
lea esi, [esp + 0x18ec]
lea eax, [esp + 0x604]
call fcn.10042d90
add esp, 4
push str.General
lea esi, [esp + 0xfc4]
lea eax, [esp + 0x814]
mov ebx, str.MailScanIni
call fcn.10042d90
add esp, 4
push str.General
lea eax, [esp + 0x18ec]
mov ebx, str.MailScanIniBDC
call fcn.10042d90
add esp, 4
xor ebx, ebx
mov edi, dword [ebp + 0x10]
lea ecx, [esp + 0x2b0]
push 0x2f
push ecx
call fcn.1010d780
add esp, 8
cmp eax, ebx
jne 0x1003ee46
lea eax, [esp + 0x2b0]
jmp 0x1003ee47
inc eax
lea edx, [esp + 0x1f00]
push edx
push eax
movsx eax, byte [esp + 0x1f0b]
push eax
call fcn.10110cf8
movsx ecx, byte [esp + 0x1f0e]
add esp, 4
push eax
push ecx
call fcn.10110cf8
movsx edx, byte [esp + 0x1f11]
add esp, 4
push eax
push edx
call fcn.10110cf8
add esp, 4
push eax
movsx eax, byte [esp + 0x1f14]
push eax
call fcn.10110cf8
add esp, 4
push eax
push 0x1019e170
lea ecx, [esp + 0x2524]
push str.http:___s_v2_repository__c__c__c__c__s._s.gzip
push ecx
call fcn.1010d6a8
add esp, 0x24
cmp dword [0x1019e060], ebx
je 0x1003eef4
lea edx, [esp + 0x1f00]
push edx
lea eax, [esp + 0x310c]
push eax
lea ecx, [esp + 0x1b0]
push ecx
lea edx, [esp + 0x504]
push edx
mov eax, edx
push eax
lea ecx, [esp + 0x251c]
push ecx
push str._s___s___s___s___s___s
lea edx, [esp + 0x4524]
push edx
jmp 0x1003ef2c
lea eax, [esp + 0x1f00]
push eax
lea ecx, [esp + 0x310c]
push ecx
lea edx, [esp + 0x1b0]
push edx
lea eax, [esp + 0x504]
push eax
mov ecx, eax
push ecx
lea edx, [esp + 0x251c]
push edx
push str._s___s.gzip___s___s___s___s
lea eax, [esp + 0x4524]
push eax
call fcn.1010d6a8
add esp, 0x20
cmp dword [esp + 0x28], ebx
jne 0x1003efa7
cmp dword [esp + 0x48], ebx
je 0x1003ef93
lea ecx, [esp + 0x4508]
push ecx
lea edx, [esp + 0x350c]
push str._s_r_n
push edx
call fcn.1010d6a8
add esp, 0xc
lea eax, [esp + 0x3508]
cmp byte [esp + 0x3508], bl
je 0x1003ef75
lea ecx, [ecx]
inc eax
cmp byte [eax], bl
jne 0x1003ef70
lea ecx, [esp + 0x3508]
sub eax, ecx
mov edx, ecx
push eax
push edx
lea ecx, [esp + 0x15e0]
call fcn.10046040
add esp, 8
jmp 0x1003efc1
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x4508]
push eax
push 0x1014a618
push ecx
jmp 0x1003efb9
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4508]
push edx
push 0x1014a618
push eax
call fcn.10110652
add esp, 0xc
mov eax, dword [esp + 0x18]
push 0x207
lea ecx, [esp + 0x1af4]
call fcn.10046580
add esp, 4
test eax, eax
jne 0x1003e020
mov ecx, dword [esp + 0x18]
push ecx
call fcn.1010f263
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.1010f263
mov eax, dword [esp + 0x34]
add esp, 4
push eax
call fcn.1010f263
add esp, 4
cmp dword [esp + 0x34], ebx
jne 0x1003f0de
lea eax, [esp + 0x11c8]
call fcn.10033960
mov ecx, dword [esp + 0x20]
call fcn.100355e0
jmp 0x1003f169
cmp edi, ebx
je 0x1003f046
lea ecx, [esp + 0x1a8]
push ecx
push str._CBD__GetHash_of__s_failed_
push ebx
call fcn.10053700
add esp, 0xc
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1a8]
push edx
push str.Error_getting_MD5_of__s_
push eax
call fcn.1010d6a8
mov ecx, dword [esp + 0x24]
add esp, 0xc
push ecx
call fcn.1010f263
add esp, 4
mov edx, dword [esp + 0x24]
push edx
call fcn.1010f263
mov eax, dword [esp + 0x34]
add esp, 4
push eax
call fcn.1010f263
add esp, 4
lea eax, [esp + 0x11c8]
call fcn.10033960
mov ecx, dword [esp + 0x20]
call fcn.100355e0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x13d0]
push ecx
push edx
push str.Error_reading_Line__d_of__s_
push eax
call fcn.1010d6a8
mov ecx, dword [esp + 0x28]
push ecx
call fcn.1010f263
add esp, 0x14
jmp 0x1003f06d
push 1
push ebx
xor edx, edx
lea ecx, [esp + 0x15e0]
call fcn.10044660
add esp, 8
test eax, eax
jne 0x1003f12b
lea ecx, [esp + 0x34]
lea edx, [esp + 0x11c8]
mov dword [esp + 0x34], ebx
call fcn.1005bf90
mov esi, dword [esp + 0x34]
cmp esi, ebx
je 0x1003f144
push eax
push esi
lea ecx, [esp + 0x15e0]
call fcn.10046040
push esi
call fcn.1010dc10
add esp, 0xc
jmp 0x1003f144
push ebx
lea edi, [esp + 0x15dc]
lea ebx, [esp + 0x11cc]
call fcn.10063ba0
add esp, 4
xor ebx, ebx
lea eax, [esp + 0x11c8]
call fcn.10033960
push ebx
lea edi, [esp + 0x11cc]
lea ebx, [esp + 0x15dc]
call fcn.10063ba0
add esp, 4
xor ebx, ebx
cmp dword [esp + 0x60], ebx
jne 0x1003f17b
lea eax, [esp + 0x2300]
call fcn.10033960
mov ecx, dword [esp + 0x58]
mov dword [0x1019e16c], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5500]
xor ecx, esp
call fcn.1010d699
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x14]
push str.Invalid_Parameters_
push edx
call fcn.1010d6a8
add esp, 8
mov ecx, dword [esp + 0x550c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.1010d699
mov esp, ebp
pop ebp
ret