Function at 0x42224a
Capabilities:
Get geographical location
Reference sql statements
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x16
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x422252
call fcn.004ceb50
push dword [esp + 0x7c]
call fcn.0044f440
mov edx, dword [esp + 0x68]
lea ecx, [esp]
call fcn.0044f000
mov edx, dword [esp + 0x6c]
lea ecx, [esp + 4]
call fcn.0044f000
mov edx, dword [esp + 0x70]
lea ecx, [esp + 8]
call fcn.0044f000
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0xc]
call fcn.0044f000
mov edx, dword [esp + 0x78]
lea ecx, [esp + 0x10]
call fcn.0044f000
mov edx, 0x5e61a6
lea ecx, [esp + 0x14]
call fcn.0044f008
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5e70f8
push edx
call fcn.004cea70
lea eax, [esp + 0x1c]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0041917b
lea eax, [esp + 0x20]
push eax
call fcn.004ceac0
mov edx, 0x5e60ba
lea ecx, [esp + 0x20]
call fcn.0044f008
mov ebx, dword [0xf812fc]
and ebx, ebx
jle 0x422350
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.__log
push edx
call fcn.004cea70
mov edx, dword [0xf81328]
push edx
call fcn.004cea70
mov edx, str.oinstall_aria2_log1.log___log_levelnotice
push edx
call fcn.004cea70
lea eax, [esp + 0x24]
push eax
call fcn.004ceac0
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.__console_log_levelinfo___check_certificatefalse__j1__c__R__Z__m60___retry_wait5__dOfficeData
push edx
call fcn.004cea70
lea eax, [esp + 0x28]
push eax
call fcn.004ceac0
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5e6a84
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v32.cab
push edx
call fcn.004cea70
lea eax, [esp + 0x2c]
push eax
call fcn.004ceac0
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v32.cab
push edx
call fcn.004cea70
lea eax, [esp + 0x30]
push eax
call fcn.004ceac0
mov edx, 0x5e60ba
lea ecx, [0xf8142c]
call fcn.0044f008
push 3
mov eax, 0x5e60ba
push eax
mov eax, str._t__f__IM_aria2_oinstall.exe
push eax
mov eax, str.taskkill.exe
push eax
call fcn.0048e136
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x42245b
jl 0x422457
cmp ebx, 0
ja 0x42245b
xor eax, eax
jmp 0x422460
mov eax, 1
or eax, eax
je 0x4225a9
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4224b3
jl 0x4224af
cmp ebx, 0
ja 0x4224b3
xor eax, eax
jmp 0x4224b8
mov eax, 1
or eax, eax
je 0x422519
push 3
mov eax, 0x5e60ba
push eax
mov eax, str._t__f__IM_aria2_oinstall.exe
push eax
mov eax, str.taskkill.exe
push eax
call fcn.0048e136
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
jmp 0x422468
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x422564
jl 0x422560
cmp ebx, 0
ja 0x422564
xor eax, eax
jmp 0x422569
mov eax, 1
or eax, eax
je 0x4225a9
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0xc]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4225f4
jl 0x4225f0
cmp ebx, 0
ja 0x4225f4
xor eax, eax
jmp 0x4225f9
mov eax, 1
or eax, eax
je 0x422639
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0xc]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bb760
call fcn.0044f440
and eax, eax
je 0x426120
mov ebp, str.reg_add__HKLMSOFTWAREMicrosoftWindows_Script_HostSettings___v_Enabled__t_REG_DWORD__d_1__f_r_ncscript.exe___dp0Office_Uninstall.vbs___Force_r_n_r_n_r_n_Name:_OffScrubC2R.vbs_r_n_Author:_Microsoft_Customer_Support_Services_r_n_Copyright__c__2014___2016_Microsoft_Corporation_r_n_Script_to_remove_Office_Click_To_Run__C2R__products_r_n_when_a_regular_uninstall_is_no_longer_possible_r_n_r_n_Scope:_Office_2013__2016_and_O365_C2R_products_r_n_r_n_r_nOption_Explicit_r_n_r_n________________________________________________________________________________r_n_r_n___Declaration_of_constants_r_n________________________________________________________________________________r_n_r_n_r_nConst_SCRIPTVERSION_____2.19__r_nConst_SCRIPTFILE________OffScrubC2R.vbs__r_nConst_SCRIPTNAME________OffScrubC2R__r_nConst_RETVALFILE________ScrubRetValFile.txt__r_nConst_ONAME_____________Office_C2R___O365__r_nConst_HKCR_____________H80000000_r_nConst_HKCU_____________H80000001_r_nConst_HKLM_____________H80000002_r_nConst_HKU______________H80000003_r_nConst_PRODLEN__________13_r_nConst_SQUISHED_________20_r_nConst_COMPRESSED_______32_r_nConst_REG_ARP___________SOFTWAREMicrosoftWindowsCurrentVersionUninstall__r_nConst_VB_YES___________6_r_nConst_VB_NO____________7_r_n_r_nConst_ERROR_SUCCESS__________________0___Bit_1.__0_indicates_Success._Script_completed_successfully_r_nConst_ERROR_FAIL_____________________1___Bit_1.__Failure_bit._Indicates_an_overall_script_failure._r_n__________________________________________RESERVED_bit__Returned_when_process_is_killed_from_task_manager_r_nConst_ERROR_REBOOT_REQUIRED__________2___Bit_2.__Reboot_bit._If_set_a_reboot_is_required_r_nConst_ERROR_USERCANCEL_______________4___Bit_3.__User_Cancel_bit._Controlled_cancel_from_script_UI_r_nConst_ERROR_STAGE1___________________8___Bit_4.__Informational._Msiexec_based_install_was_not_possible_r_nConst_ERROR_STAGE2___________________16__Bit_5.__Critical._Not_all_of_the_intended_cleanup_operations_could_be_applied_r_nConst_ERROR_INCOMPLETE_______________32__Bit_6.__Pending_file_renames__del_on_reboot____OR___Removal_needs_to_run_again_after_a_system_reboot._r_nConst_ERROR_DCAF_FAILURE_____________64__Bit_7.__Critical._Da_capo_al_fine__second_attempt__still_failed._r_nConst_ERROR_ELEVATION_USERDECLINED___128_Bit_8.__Critical_script_error._User_declined_to_allow_mandatory_script_elevation_r_nConst_ERROR_ELEVATION________________256_Bit_9.__Critical_script_error._The_attempt_to_elevate_the_process_did_not_succeed_r_nConst_ERROR_SCRIPTINIT_______________512_Bit_10._Critical_script_error._Initialization_failed_r_nConst_ERROR_RELAUNCH_________________1024Bit_11._Critical_script_error._This_is_a_temporary_value_and_must_not_be_the_final_return_code_r_nConst_ERROR_UNKNOWN__________________2048Bit_12_Critical_script_error._Script_did_not_complete_in_a_well_defined_state_r_nConst_ERROR_ALL______________________4095Full_BitMask_r_nConst_ERROR_USER_ABORT_______________HC000013A_RESERVED._Dec__1073741510._Critical_error._Returned_when_user_aborts_with__Ctrl__Break__or_closes_the_cmd_window_r_nConst_ERROR_SUCCESS_CONFIG_COMPLETE__1728_r_nConst_ERROR_SUCCESS_REBOOT_REQUIRED__3010_r_n_r_n________________________________________________________________________________r_n_r_n___Declaration_of_variables_r_n________________________________________________________________________________r_n_r_nDim_oFso__oMsi__oReg__oWShell__oWmiLocal__oShellApp_r_nDim_ComputerItem__Key__Item__LogStream__TmpKey_r_nDim_arrVersion_r_nDim_dicKeepLis__dicApps__dicKeepFolder__dicDelRegKey__dicKeepReg__dicSC_r_nDim_dicInstalledSku__dicRemoveSku__dicKeepSku__dicC2RSuite__dicDelInUse_r_nDim_dicDelFolder_r_nDim_sAppData__sScrubDir__sProgramFiles__sProgramFilesX86__sCommonProgramFiles_r_nDim_sAllusersProfile__sOSVersion__sWinDir__sWICacheDir__sCommonProgramFilesX86_r_nD
mov ebx, ebp
mov ebp, 0x83dc0d
sub ebx, ebp
push ebx
mov ebp, 0x83dc0d
push ebp
push 1
call fcn.004bba00
push 1
call fcn.004bb470
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bb760
call fcn.0044f440
and eax, eax
je 0x426120
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5fc2fa
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004bacd8
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004bacd8
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004bacd8
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0xc]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_branch.txt
push edx
call fcn.004cea70
call fcn.004ceb30
push 0xa
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bb740
call fcn.0044f440
and eax, eax
je 0x42280d
push 2
push dword [esp + 0x10]
push 0xa
call fcn.004bbe50
push 0xa
call fcn.004bb470
mov dword [0xf81370], 0
mov edx, 0x5e60ba
lea ecx, [esp + 0x30]
call fcn.0044f008
mov dword [esp + 0x34], 0
jmp 0x42282f
push 0x47
call fcn.004b03ac
mov ebx, eax
dec ebx
cmp ebx, dword [esp + 0x34]
jl 0x4245dc
push dword [esp + 0x34]
push 0x47
call fcn.004b0425
mov ebx, eax
and ebx, 2
and ebx, ebx
je 0x4245d2
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push dword [esp + 0x3c]
push 0x47
call fcn.004b040f
lea eax, [esp + 0x34]
push eax
call fcn.004ceac0
mov dword [esp + 0x38], 0
jmp 0x422893
push dword [0xf81460]
call fcn.004c528b
cmp eax, dword [esp + 0x38]
jl 0x4245d2
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [0xf81464]
imul edx, dword [esp + 0x40]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xf81460]
push dword [ebp]
call fcn.004cd100
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push dword [esp + 0x3c]
call fcn.004cd100
call fcn.0044f450
mov edx, eax
pop ecx
push ecx
call fcn.0044f450
mov ecx, eax
call fcn.0044f3d0
je 0x4245c8
mov edx, dword [0xf81464]
imul edx, dword [esp + 0x38]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0xf81460]
mov edx, dword [ebp]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
lea eax, [esp + 0x40]
push eax
call fcn.004ceac0
push dword [esp + 8]
mov edx, 0x5e77e2
pop ecx
call fcn.0044f3d0
je 0x423005
push dword [esp]
mov edx, 0x5ea818
pop ecx
call fcn.0044f3d0
je 0x422b17
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0xaa
mov dword [0xf81370], ebx
jmp 0x423000
push dword [esp]
mov edx, 0x5ee48e
pop ecx
call fcn.0044f3d0
je 0x422cca
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0xaa
mov dword [0xf81370], ebx
jmp 0x423000
push dword [esp]
mov edx, 0x5f6372
pop ecx
call fcn.0044f3d0
je 0x423000
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x154
mov dword [0xf81370], ebx
jmp 0x4245c8
push dword [esp + 8]
mov edx, 0x5e7814
pop ecx
call fcn.0044f3d0
je 0x4245c8
push dword [esp]
mov edx, 0x5ea818
pop ecx
call fcn.0044f3d0
je 0x423691
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4230ae
jl 0x4230aa
cmp ebx, 0
ja 0x4230ae
xor eax, eax
jmp 0x4230b3
mov eax, 1
or eax, eax
je 0x42317c
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4231fc
jl 0x4231f8
cmp ebx, 0
ja 0x4231fc
xor eax, eax
jmp 0x423201
mov eax, 1
or eax, eax
je 0x4232ca
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._sp32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x15e
mov dword [0xf81370], ebx
jmp 0x4245c8
push dword [esp]
mov edx, 0x5ee48e
pop ecx
call fcn.0044f3d0
je 0x423c92
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x423725
jl 0x423721
cmp ebx, 0
ja 0x423725
xor eax, eax
jmp 0x42372a
mov eax, 1
or eax, eax
je 0x4237f3
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x423873
jl 0x42386f
cmp ebx, 0
ja 0x423873
xor eax, eax
jmp 0x423878
mov eax, 1
or eax, eax
je 0x423941
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._sp64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x15e
mov dword [0xf81370], ebx
jmp 0x4245c8
push dword [esp]
mov edx, 0x5f6372
pop ecx
call fcn.0044f3d0
je 0x4245c8
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x423d26
jl 0x423d22
cmp ebx, 0
ja 0x423d26
xor eax, eax
jmp 0x423d2b
mov eax, 1
or eax, eax
je 0x423df4
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x423e74
jl 0x423e70
cmp ebx, 0
ja 0x423e74
xor eax, eax
jmp 0x423e79
mov eax, 1
or eax, eax
je 0x423f42
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
mov edx, str.i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._sp32
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, 0x5ebe58
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.
push edx
call fcn.004cea70
mov edx, dword [esp + 0x38]
push edx
call fcn.004cea70
mov edx, str..proof.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._sp64
push edx
call fcn.004cea70
mov edx, dword [esp + 0x44]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x2bc
mov dword [0xf81370], ebx
inc dword [esp + 0x38]
jno 0x422893
inc dword [esp + 0x34]
jno 0x42282f
mov edx, 0x5e60ba
lea ecx, [esp + 0x40]
call fcn.0044f008
push dword [esp + 8]
mov edx, 0x5e77e2
pop ecx
call fcn.0044f3d0
je 0x424c19
push dword [esp]
mov edx, 0x5ea818
pop ecx
call fcn.0044f3d0
je 0x42479a
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_c2rfireflydata.xml_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v32.cab_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v32_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._fre.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ec7f0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.x_none.dat.cobra
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x3de
mov dword [0xf81370], ebx
jmp 0x424c14
push dword [esp]
mov edx, 0x5ee48e
pop ecx
call fcn.0044f3d0
je 0x424935
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_c2rfireflydata.xml_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v64.cab_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v64_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._fre.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5e9ca0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ef3c8
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.x_none.dat.cobra
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x4a6
mov dword [0xf81370], ebx
jmp 0x424c14
push dword [esp]
mov edx, 0x5f6372
pop ecx
call fcn.0044f3d0
je 0x424c14
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_c2rfireflydata.xml_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v32.cab_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v32_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str..cab_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_c2rfireflydata.xml_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v64.cab_http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_v64_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._fre.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ec7f0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.x_none.dat.cobra
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._fre.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5e9ca0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ef3c8
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.http:__officecdn.microsoft.com_pr_39168D7E_077B_48E7_872C_B232C3E72675_Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.x_none.dat.cobra
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x82a
mov dword [0xf81370], ebx
jmp 0x4256df
push dword [esp + 8]
mov edx, 0x5e7814
pop ecx
call fcn.0044f3d0
je 0x4256df
push dword [esp]
mov edx, 0x5ea818
pop ecx
call fcn.0044f3d0
je 0x424f89
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5e6a84
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, 0x5f544c
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v32_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
mov ebx, dword [0xf81370]
add ebx, 0x28
mov dword [0xf81370], ebx
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i320.cab.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ec7f0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.x_none.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x5aa
mov dword [0xf81370], ebx
jmp 0x4256df
push dword [esp]
mov edx, 0x5ee48e
pop ecx
call fcn.0044f3d0
je 0x425222
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5e6a84
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v64.cab
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v64_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
mov ebx, dword [0xf81370]
add ebx, 0x32
mov dword [0xf81370], ebx
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5e9ca0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ef3c8
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.x_none.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0x6a4
mov dword [0xf81370], ebx
jmp 0x4256df
push dword [esp]
mov edx, 0x5f6372
pop ecx
call fcn.0044f3d0
je 0x4256df
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5e6a84
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, 0x5f544c
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v32_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5e6ea8
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v64.cab
push edx
call fcn.004cea70
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea70
mov edx, dword [esp + 0x10]
push edx
call fcn.004cea70
mov edx, str._Office_Data_v64_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, 0x5ee13a
push edx
call fcn.004cea70
lea eax, [esp + 0x44]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x64.x_none.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ef3c8
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i640.cab.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5e9ca0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._stream.x86.x_none.dat.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, 0x5ec7f0
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._i320.cab.cat
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x1c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov edx, str._Office_Data_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str._s320.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bbd00
call fcn.0044f440
mov ebx, dword [0xf81370]
add ebx, 0xc80
mov dword [0xf81370], ebx
push 1
call fcn.004bb470
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi320i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x425754
jl 0x425750
cmp ebx, 0
ja 0x425754
xor eax, eax
jmp 0x425759
mov eax, 1
or eax, eax
je 0x4257f8
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i320i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, str.OInstall_W7_additional_filesi320i.cab
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, 0x5e6a88
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x425863
jl 0x42585f
cmp ebx, 0
ja 0x425863
xor eax, eax
jmp 0x425868
mov eax, 1
or eax, eax
je 0x425907
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
mov edx, str.i640i.cab
push edx
call fcn.004cea70
call fcn.004ceb30
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
mov edx, 0x5e6a88
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004ba902
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x18]
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x425956
cmp edi, 0xffffffff
je 0x42595a
xor eax, eax
jmp 0x42595f
mov eax, 1
or eax, eax
je 0x425972
mov ebx, dword [esp + 0x44]
and ebx, ebx
jne 0x425972
mov eax, 1
jmp 0x425974
xor eax, eax
and eax, eax
je 0x4260dc
push 0
push 0x3c
call fcn.004b02dd
push 0
push 0
push 0x3c
call fcn.004b031c
push 0x3c
call fcn.004b0390
push eax
call sub.USER32.dll_UpdateWindow
mov dword [0xf81370], 0x9c4
push 0
push 0
push 1
push 0x3c
call fcn.004b3275
mov eax, dword [0xf81370]
cdq
push edx
push eax
push 2
push 0x3c
call fcn.004b3275
push 0xffffffff
push 0xffffffff
push 0x3c
call fcn.004b031c
push 0x3c
call fcn.004b0390
push eax
call sub.USER32.dll_UpdateWindow
push 1
push 0
call fcn.004b8b03
push eax
call fcn.0042d65c
mov eax, str._Start_Download_
push eax
call fcn.00417521
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.exe
push edx
call fcn.004cea70
mov edx, dword [esp + 0x48]
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00417521
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov eax, 1
push eax
xor eax, eax
push eax
xor eax, eax
push eax
push dword [esp + 0x14]
push dword [esp + 0x54]
mov edx, dword [esp + 0x34]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00447db3
call fcn.0044f440
mov eax, 0x5e60ba
push eax
push 0x3a
call fcn.004b253c
mov ebx, dword [0xf81360]
and ebx, ebx
jne 0x425ad8
jmp 0x426120
mov edx, 0x5e60ba
lea ecx, [esp + 0x48]
call fcn.0044f008
mov ebx, dword [0xf812fc]
and ebx, ebx
jle 0x425b24
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.___log
push edx
call fcn.004cea70
mov edx, dword [0xf81328]
push edx
call fcn.004cea70
mov edx, str.oinstall_aria2_log2.log___log_levelnotice
push edx
call fcn.004cea70
lea eax, [esp + 0x4c]
push eax
call fcn.004ceac0
push 0x41
call fcn.004b0358
push edx
push eax
and dword [esp], 1
and dword [esp + 4], 0
pop ebx
pop edi
cmp ebx, 0
jne 0x425b49
cmp edi, 0
jne 0x425b49
xor eax, eax
jmp 0x425b4e
mov eax, 1
or eax, eax
je 0x425b91
mov edx, dword [0xf81080]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x4c]
push edx
call fcn.004cea70
mov edx, str.__i_aria2_oinstall.ini__dOfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
lea eax, [esp + 0x28]
push eax
call fcn.004ceac0
jmp 0x425bce
mov edx, dword [0xf8108c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, dword [esp + 0x4c]
push edx
call fcn.004cea70
mov edx, str.__i_aria2_oinstall.ini__dOfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
lea eax, [esp + 0x28]
push eax
call fcn.004ceac0
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x425c19
jl 0x425c15
cmp ebx, 0
ja 0x425c19
xor eax, eax
jmp 0x425c1e
mov eax, 1
or eax, eax
je 0x4260be
push 0
push 0
push 1
push 0x3c
call fcn.004b3275
push 0
push 0x64
push 2
push 0x3c
call fcn.004b3275
push 0
push 5
push 0x3c
call fcn.004b031c
push 0x3c
call fcn.004b0390
push eax
call sub.USER32.dll_UpdateWindow
push 2
push 0
call fcn.004b8b03
push eax
call fcn.0042d65c
push 0
push 0x64
push 0
push 5
push 0
call fcn.004b8b03
push eax
call fcn.00440803
call fcn.0043be33
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.exe
push edx
call fcn.004cea70
mov edx, dword [esp + 0x2c]
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00417521
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, 0x5ec306
push edx
call fcn.004cea70
mov edx, dword [esp + 0xc]
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00417521
call fcn.0044f440
mov edx, 0x5e60ba
lea ecx, [esp + 0x4c]
call fcn.0044f008
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.004ceb30
push 1
call fcn.0044f422
add dword [esp + 4], edx
call fcn.004bb940
call fcn.0044f440
and eax, eax
je 0x425e2a
push 1
call fcn.004bba70
mov ebx, eax
and ebx, ebx
jne 0x425dde
mov edx, dword [esp + 0x4c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push 1
call fcn.004bbbf0
pop eax
mov edx, 0x5f8a50
push edx
call fcn.004cea70
lea eax, [esp + 0x50]
push eax
call fcn.004ceac0
jmp 0x425d8a
push 1
call fcn.004bb470
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
mov edx, str.file_aria2_oinstall.ini_:_r_n
push edx
call fcn.004cea70
mov edx, dword [esp + 0x54]
push edx
call fcn.004cea70
mov edx, 0x5f8a50
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00417521
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov eax, 1
push eax
xor eax, eax
push eax
xor eax, eax
push eax
push dword [esp + 0x14]
push dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.00447db3
call fcn.0044f440
push 0
push 0x64
push 0x3c
call fcn.004b031c
push 0x3c
call fcn.004b0390
push eax
call sub.USER32.dll_UpdateWindow
push 0
push 0x64
push 0
push 0x64
push 0
call fcn.004b8b03
push eax
call fcn.00440803
call fcn.0043be33
mov ebx, dword [0xf81360]
and ebx, ebx
jle 0x4260be
push 0xc
call fcn.004cd990
mov dword [esp + 0x50], eax
mov edx, dword [esp + 4]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.OfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
mov ebp, dword [esp + 0x54]
lea eax, [ebp]
push eax
call fcn.004ceac0
mov edx, dword [esp + 4]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
mov ebp, dword [esp + 0x54]
lea eax, [ebp + 8]
push eax
call fcn.004ceac0
mov ebp, dword [esp + 0x50]
mov edx, 0x5e60ba
lea ecx, [ebp + 4]
call fcn.0044f008
push 0x32
call fcn.004b87e3
push dword [esp + 0x50]
lea eax, [0x440f4b]
push eax
call fcn.00472563
mov dword [esp + 0x54], eax
push dword [esp + 0x54]
call fcn.004723dc
and eax, eax
je 0x425f98
mov ebx, dword [0xf81360]
and ebx, ebx
jne 0x425f87
jmp 0x426120
push 0x32
call fcn.004b87e3
call fcn.0043be33
jmp 0x425f6b
mov ebp, dword [esp + 0x50]
push dword [ebp + 4]
mov edx, 0x5e60ba
pop ecx
call fcn.0044f3d0
jne 0x4260b5
call fcn.004aedd0
and eax, eax
je 0x426016
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [0xf8107c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.MediaWindows_Error.wav
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x426006
jl 0x426002
cmp ebx, 0
ja 0x426006
xor eax, eax
jmp 0x42600b
mov eax, 1
or eax, eax
je 0x426016
mov eax, 1
jmp 0x426018
xor eax, eax
and eax, eax
je 0x426074
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [0xf8107c]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.MediaWindows_Error.wav
push edx
call fcn.004cea70
call fcn.004ceb30
push 0
call fcn.0044f422
add dword [esp + 4], edx
call fcn.0048f807
call fcn.0044f440
push 0
call fcn.0048f8b2
push 0x7d0
call fcn.004b87e3
push dword [esp + 0x50]
call fcn.004cd930
mov edx, dword [0xf81080]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str.__i_aria2_oinstall.ini__dOfficeData_
push edx
call fcn.004cea70
mov edx, dword [esp + 0x14]
push edx
call fcn.004cea70
lea eax, [esp + 0x28]
push eax
call fcn.004ceac0
jmp 0x425bce
push dword [esp + 0x50]
call fcn.004cd930
mov eax, 0x5e60ba
push eax
push 0x3a
call fcn.004b253c
mov ebx, dword [0xf81360]
and ebx, ebx
jne 0x4260da
jmp 0x426120
jmp 0x426120
push 3
mov eax, 0x5e60ba
push eax
push dword [esp + 0xc]
call fcn.004ba98a
mov edx, 0x5e60ba
lea ecx, [esp + 0x10]
call fcn.0044f008
mov edx, 0x5e71b2
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
pop eax
push eax
call fcn.0044f410
pop edx
add eax, edx
jmp 0x4263e8
push 0x15e
call fcn.004b87e3
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea40
pop edx
push eax
call fcn.0048e048
call fcn.0044f422
add dword [esp], edx
call fcn.004ba6b4
call fcn.0044f422
add dword [esp], edx
call fcn.004bad56
call fcn.0044f440
mov eax, 0x5e60ba
push eax
mov eax, 0x5e60ba
push eax
call fcn.0044607e
push 0
push 0
call fcn.004b8b03
push eax
call fcn.0042d65c
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 0x20]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4261e7
jl 0x4261e3
cmp ebx, 0
ja 0x4261e7
xor eax, eax
jmp 0x4261ec
mov eax, 1
or eax, eax
je 0x426257
push 3
mov eax, 0x5e60ba
push eax
mov eax, str._t__f__IM_aria2_oinstall.exe
push eax
mov eax, str.taskkill.exe
push eax
call fcn.0048e136
push 0x15e
call fcn.004b87e3
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0x24]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
jmp 0x42619c
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4262a2
jl 0x42629e
cmp ebx, 0
ja 0x4262a2
xor eax, eax
jmp 0x4262a7
mov eax, 1
or eax, eax
je 0x4262e7
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [esp + 0xc]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, str._aria2_oinstall.ini
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
push edx
call fcn.004cea40
pop edx
push eax
mov edx, dword [0xf81328]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba73d
call fcn.0044f440
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x426334
jl 0x426330
cmp ebx, 0
ja 0x426334
xor eax, eax
jmp 0x426339
mov eax, 1
or eax, eax
je 0x4263a6
push 3
mov eax, 0x5e60ba
push eax
mov eax, str._t__f__IM_aria2_oinstall.exe
push eax
mov eax, str.taskkill.exe
push eax
call fcn.0048e136
push 0x15e
call fcn.004b87e3
push edx
call fcn.004cea40
pop edx
push eax
push 2
mov edx, dword [0xf81328]
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
mov edx, 0x5ed9e0
push edx
call fcn.004cea70
call fcn.0044f422
add dword [esp], edx
call fcn.004ba894
call fcn.0044f440
jmp 0x4262e7
push 0x1f4
call fcn.004b87e3
push 1
push 0x3c
call fcn.004b02dd
mov edx, 0x5e71ae
push edx
call fcn.004cea40
pop edx
push eax
push edx
call fcn.004cea70
pop eax
push eax
call fcn.0044f410
pop edx
add eax, edx
jmp 0x4263e8
push dword [esp + 0x4c]
call fcn.004cebc0
push dword [esp + 0x40]
call fcn.004cebc0
push dword [esp + 0x2c]
call fcn.004cebc0
push dword [esp + 8]
call fcn.004cebc0
push dword [esp + 0xc]
call fcn.004cebc0
push dword [esp + 0x3c]
call fcn.004cebc0
push dword [esp + 0x10]
call fcn.004cebc0
push dword [esp + 0x20]
call fcn.004cebc0
push dword [esp + 0x48]
call fcn.004cebc0
push dword [esp + 0x14]
call fcn.004cebc0
push dword [esp + 0x1c]
call fcn.004cebc0
push dword [esp + 4]
call fcn.004cebc0
push dword [esp]
call fcn.004cebc0
push dword [esp + 0x18]
call fcn.004cebc0
push dword [esp + 0x24]
call fcn.004cebc0
push dword [esp + 0x30]
call fcn.004cebc0
push dword [esp + 0x28]
call fcn.004cebc0
add esp, 0x58
pop edi
pop ebx
pop ebp
ret 0x14