Function at 0x413820
Capabilities:
Delete file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x624
mov eax, dword [0x44c044]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x20e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x210], ax
call fcn.00428450
add esp, 0xc
cmp dword [0x48ba94], 1
jne 0x4139f2
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push str.Client.cab
push 0x48df60
push 0x43bff0
push 0x486970
call edi
push 0x48db50
push 0x48df60
push str._s_s.dat
push 0x4901d8
call edi
push ebx
push 0x4901d8
call fcn.00422520
add esp, 0x28
test eax, eax
je 0x4138b9
push 0x442fb0
call fcn.00406870
add esp, 4
mov ebx, 9
mov esi, 0x4901d8
call fcn.00413380
test al, al
jne 0x4138d1
push 0x442fd4
jmp 0x413d32
cmp bx, 9
je 0x413d3a
cmp dword [0x489454], 0
jle 0x41399e
cmp dword [0x489868], 0
jbe 0x41399e
mov eax, 0x48a870
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413900
sub eax, edx
sar eax, 1
jne 0x41391b
push 0x443000
jmp 0x4139a3
push 0x48a870
push 0x44304c
push 0x48f198
call edi
add esp, 0xc
push 0x48f198
call fcn.00406870
add esp, 4
push 0x438808
push 0x48a870
push 0x43bff0
push 0x48ba98
call edi
push 0x4387e4
push 0x48a870
push 0x43bff0
push 0x48c0b0
call edi
push str.Presto_7.ini
push 0x48a870
push 0x43bff0
push 0x48c6c8
call edi
push str.Client.cab
push 0x48a870
push 0x43bff0
push 0x486970
call edi
add esp, 0x40
call fcn.004111d0
jmp 0x4139ab
push 0x443084
call fcn.00406870
add esp, 4
push 0
push 0x486970
call fcn.00422520
add esp, 8
test eax, eax
je 0x4139c8
push 0x4430b4
jmp 0x413d32
push 0x4430d4
call fcn.00406870
mov ebx, dword [0x48944c]
dec ebx
add esp, 4
neg ebx
sbb ebx, ebx
mov dword [0x489450], 1
add ebx, 4
jmp 0x413dd5
push 0x206
lea eax, [ebp - 0x416]
xor edx, edx
push ebx
push eax
mov dword [0x48944c], ebx
mov dword [0x489450], ebx
mov word [ebp - 0x418], dx
call fcn.00428450
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x48db50
push 0x48df60
push str._s_s.dat
push 0x4901d8
call edi
push 0x48df60
lea ecx, [ebp - 0x418]
push str._sClient.cab
push ecx
call edi
add esp, 0x1c
cmp dword [0x4906fc], ebx
ja 0x413a62
cmp dword [0x4906f8], ebx
jbe 0x413d50
push ebx
push 0x4901d8
call fcn.00422520
add esp, 8
test eax, eax
mov eax, dword [0x490720]
je 0x413b47
cmp eax, ebx
jne 0x413b49
cmp dword [0x490708], ebx
jbe 0x413cdf
push 5
push str.setup
push 0x48db50
call fcn.004243b6
add esp, 0xc
test eax, eax
je 0x413ab3
push 0x44311c
jmp 0x413d32
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x61e]
push eax
mov word [ebp - 0x620], dx
call fcn.00428450
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [ebp - 0x620]
push str._sVersion.dat
push ecx
call edi
add esp, 0xc
push str.uP_n_q_
mov dword [0x48ba84], 1
call fcn.00406870
mov edx, dword [0x4906fc]
mov eax, dword [0x4906f8]
add esp, 4
push edx
push eax
push str.C:UsersPublicSMR7WM7ClientPackage.cab
xor ecx, ecx
call fcn.004024f0
add esp, 0xc
call fcn.00413070
lea ecx, [ebp - 0x620]
push ecx
push 0xc
push 0x486954
push 0x43d31c
push str.Version
push str.Install
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x413dd5
cmp eax, ebx
jbe 0x413cdf
cmp dword [0x490708], ebx
jbe 0x413cdf
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7ManualUpdate.ini
push edx
mov ebx, 2
call edi
mov eax, dword [0x4906fc]
mov ecx, dword [0x4906f8]
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
lea ecx, [ebx - 1]
call fcn.004024f0
add esp, 0x14
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [ebp - 0x210]
call fcn.00413380
test al, al
jne 0x413bb1
push 0x4431f4
jmp 0x413d32
push 0x44322c
call fcn.00406870
add esp, 4
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x490780], 0
jbe 0x413c0f
mov ecx, dword [str.run1.exe]
push ecx
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push edx
call edi
mov eax, dword [0x4906fc]
mov ecx, dword [0x4906f8]
add esp, 0xc
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
mov ecx, 5
call fcn.004024f0
jmp 0x413dd2
cmp dword [0x490798], 0
jbe 0x413c52
mov eax, dword [str.run2.exe]
push eax
lea ecx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push ecx
call edi
mov edx, dword [0x4906fc]
mov eax, dword [0x4906f8]
add esp, 0xc
push edx
push eax
lea ecx, [ebp - 0x210]
push ecx
mov ecx, 6
call fcn.004024f0
jmp 0x413dd2
cmp dword [0x4907b0], 0
jbe 0x413c97
mov edx, dword [str.rms.exe]
push edx
lea eax, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push eax
call edi
mov ecx, dword [0x4906fc]
mov edx, dword [0x4906f8]
add esp, 0xc
push ecx
push edx
lea eax, [ebp - 0x210]
push eax
mov ecx, 7
call fcn.004024f0
jmp 0x413dd2
cmp dword [0x4907c8], 0
jbe 0x413dd5
mov ecx, dword [str.run3.exe]
push ecx
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push edx
call edi
mov eax, dword [0x4906fc]
mov ecx, dword [0x4906f8]
add esp, 0xc
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
mov ecx, 8
call fcn.004024f0
jmp 0x413dd2
mov ebx, 0x44e414
mov esi, 0x490718
lea esp, [esp]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esi - 4]
push eax
mov eax, dword [esi - 8]
push ecx
mov ecx, dword [esi - 0x10]
push edx
mov edx, dword [ebx]
push eax
push ecx
push edx
push str.__s___lu___I64d___lu___lu_
push 0x48f198
call edi
push 0x48f198
call fcn.00406870
add esi, 0x18
add esp, 0x24
add ebx, 4
cmp esi, 0x4907f0
jl 0x413cf0
push 0x4432c4
call fcn.00406870
add esp, 4
mov eax, 9
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004217a4
mov esp, ebp
pop ebp
ret
push ebx
push 0x4901d8
call fcn.00422520
add esp, 8
test eax, eax
jne 0x413d2d
lea eax, [ebp - 0x418]
push ebx
push eax
call fcn.00422520
add esp, 8
test eax, eax
jne 0x413d2d
push eax
push 0x4901d8
lea ebx, [eax + 1]
call fcn.00422520
add esp, 8
test eax, eax
je 0x413d9d
push 0x4432e8
call fcn.00406870
add esp, 4
mov ebx, 9
mov esi, 0x4901d8
call fcn.00413380
test al, al
jne 0x413db2
push 0x443310
jmp 0x413d32
push str.uP_n_tg_
call fcn.00406870
add esp, 4
lea ecx, [ebp - 0x418]
push ecx
push 0x4428a8
push 0x486970
call edi
add esp, 0xc
mov eax, 0x488c18
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413de0
mov ecx, dword [0x489450]
sub eax, edx
mov edx, dword [0x489438]
sar eax, 1
push eax
mov eax, dword [0x489434]
push 0x4881c0
push 0x4881a0
push edx
mov edx, dword [0x48944c]
push eax
mov eax, dword [0x489430]
push ecx
mov ecx, dword [0x48942c]
push edx
mov edx, dword [0x44d62c]
push eax
mov eax, dword [0x489428]
push ecx
mov ecx, dword [0x489424]
push edx
mov edx, dword [0x489420]
push eax
mov eax, dword [0x48941c]
push ecx
mov ecx, dword [0x489418]
push edx
mov edx, dword [0x44d3a4]
push eax
push ecx
push edx
push 0x486954
push 0x487580
push 0x486b78
push str.zfga_R
push 0x48f198
call edi
add esp, 0x54
push 0x48f198
call fcn.00406870
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
pop esi
mov ax, bx
xor ecx, ebp
pop ebx
call fcn.004217a4
mov esp, ebp
pop ebp
ret