Function at 0x4125e0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x455ac5
mov eax, dword fs:[0]
push eax
mov eax, 0x14ac
call fcn.00452b30
mov eax, dword [0x47f060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x147c], 0
mov edi, dword [sym.imp.isafepxy.dll_ISAFE_WriteProgramLogNoMask]
push str.CInstaller::SilentInstall__Begin_
call edi
add esp, 4
call fcn.00409f70
mov esi, dword [sym.imp.MSVCR110.dll_void____cdecl_operator_new_unsigned_int_]
test al, al
mov eax, dword [0x48277c]
jne 0x41268b
test eax, eax
jne 0x412676
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x412668
mov ecx, eax
call fcn.004122b0
jmp 0x41266a
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x48277c], eax
cmp byte [eax + 0xe2], 0
jne 0x41268b
push str.CInstaller::SilentInstall__End:_exist_version_older_
call edi
jmp 0x4139cb
test eax, eax
jne 0x4126c1
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x4126b3
mov ecx, eax
call fcn.004122b0
jmp 0x4126b5
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x48277c], eax
mov ecx, dword [eax + 0xd8]
call fcn.00410150
call fcn.0040fb10
xor eax, eax
push 0x616
push eax
mov word [ebp - 0xe48], ax
lea eax, [ebp - 0xe46]
push eax
call sub.MSVCR110.dll_memset
add esp, 4
mov edx, 0x30c
lea ecx, [ebp - 0xe48]
call fcn.0042a830
mov eax, dword [0x48277c]
add esp, 8
test eax, eax
jne 0x41273d
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x41272f
mov ecx, eax
call fcn.004122b0
jmp 0x412731
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x48277c], eax
cmp byte [eax + 0xe1], 0
je 0x41275d
push str.cover
lea ecx, [ebp - 0xefc]
call fcn.00406d00
mov ecx, 1
jmp 0x412797
xor ecx, ecx
push 0xffffffffffffffff
push ecx
add eax, 0x78
mov word [ebp - 0xec0], cx
push eax
lea ecx, [ebp - 0xec0]
mov dword [ebp - 0xeac], 7
mov dword [ebp - 0xeb0], 0
call fcn.00406870
lea eax, [ebp - 0xec0]
mov ecx, 2
mov dword [ebp - 0x147c], ecx
push eax
lea ecx, [ebp - 0xf2c]
call fcn.00406730
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x147c]
mov ebx, dword [sym.imp.MSVCR110.dll_void___cdecl_operator_delete_void__]
test al, 2
je 0x412800
and eax, 0xfffffffd
cmp dword [ebp - 0xeac], 8
mov dword [ebp - 0x147c], eax
jb 0x4127e3
push dword [ebp - 0xec0]
call ebx
mov eax, dword [ebp - 0x147c]
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xeac], 7
mov dword [ebp - 0xeb0], 0
mov word [ebp - 0xec0], cx
mov byte [ebp - 4], 6
test al, 1
je 0x412839
cmp dword [ebp - 0xee8], 8
jb 0x41281c
push dword [ebp - 0xefc]
call ebx
add esp, 4
xor eax, eax
mov dword [ebp - 0xee8], 7
mov dword [ebp - 0xeec], 0
mov word [ebp - 0xefc], ax
mov eax, dword [0x48277c]
test eax, eax
jne 0x41286e
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 7
test eax, eax
je 0x412863
mov ecx, eax
call fcn.004122b0
jmp 0x412865
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
cmp byte [eax + 0xe1], 0
je 0x412db7
push str.CInstaller::SilentInstall__StopiSafeService:_begin_
call edi
add esp, 4
call fcn.0040c370
push str.CInstaller::SilentInstall__StopiSafeService:_end_
call edi
mov eax, dword [0x482724]
add esp, 4
test al, 1
jne 0x4128b2
or eax, 1
push 0x45aec0
mov dword [0x482724], eax
call fcn.004521b7
add esp, 4
sub esp, 8
call fcn.00442f40
mov eax, dword [0x48277c]
test eax, eax
jne 0x4128ef
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x4128e4
mov ecx, eax
call fcn.004122b0
jmp 0x4128e6
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
lea ecx, [eax + 0x90]
call fcn.0040eae0
push str.CInstaller::SilentInstall__KillProcessByPath:_end_
call edi
add esp, 4
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x830], ax
lea eax, [ebp - 0x82e]
push eax
call sub.MSVCR110.dll_memset
mov eax, dword [0x48277c]
add esp, 0xc
test eax, eax
jne 0x412962
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x412957
mov ecx, eax
call fcn.004122b0
jmp 0x412959
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x41296f
mov eax, dword [eax]
push str.iSafeSvc2.exe
push eax
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0xe60]
call fcn.00406d00
lea ecx, [ebp - 0xe60]
mov byte [ebp - 4], 0xa
call fcn.0042a1b0
test al, al
je 0x412b31
lea eax, [ebp - 0xe48]
push eax
lea ecx, [ebp - 0x14a0]
call fcn.00406d00
xor eax, eax
mov dword [ebp - 0xe7c], 7
mov dword [ebp - 0xe80], 0
mov word [ebp - 0xe90], ax
push 8
push str.install_
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xc
call fcn.00405270
lea eax, [ebp - 0x14a0]
push eax
lea edx, [ebp - 0xe90]
lea ecx, [ebp - 0x14b8]
call fcn.004116b0
add esp, 4
mov dword [ebp - 0x147c], eax
lea ecx, [ebp - 0xe90]
cmp ecx, eax
je 0x412a5e
cmp dword [ebp - 0xe7c], 8
jb 0x412a35
push dword [ebp - 0xe90]
call ebx
mov eax, dword [ebp - 0x147c]
add esp, 4
xor ecx, ecx
mov word [ebp - 0xe90], cx
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 0xe7c], 7
mov dword [ebp - 0xe80], 0
call fcn.004066d0
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x14a4], 8
jb 0x412a76
push dword [ebp - 0x14b8]
call ebx
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1480], esp
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0xe90]
push eax
call fcn.00406870
sub esp, 0x18
mov ecx, esp
mov byte [ebp - 4], 0xe
push 0x12
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push str.uninst.svc2.failed
mov word [ecx], ax
call fcn.00406c00
mov byte [ebp - 4], 0xc
call fcn.0040ced0
add esp, 0x30
cmp dword [ebp - 0xe7c], 8
jb 0x412aeb
push dword [ebp - 0xe90]
call ebx
add esp, 4
xor eax, eax
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x148c], 8
mov dword [ebp - 0xe7c], 7
mov dword [ebp - 0xe80], 0
mov word [ebp - 0xe90], ax
jb 0x412b20
push dword [ebp - 0x14a0]
call ebx
add esp, 4
lea eax, [ebp - 0xe48]
push eax
push str.CInstaller::SilentInstall__SendSvc2FailedEvent:_uid___s_
call edi
add esp, 8
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call sub.MSVCR110.dll_memset
mov eax, dword [0x48277c]
add esp, 0xc
test eax, eax
jne 0x412b84
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0xf
test eax, eax
je 0x412b79
mov ecx, eax
call fcn.004122b0
jmp 0x412b7b
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [0x48277c], eax
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x412b91
mov eax, dword [eax]
push 0x45f1b8
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xe78]
call fcn.00406d00
lea ecx, [ebp - 0xe78]
mov byte [ebp - 4], 0x10
call fcn.0042a1b0
test al, al
je 0x412d4f
lea eax, [ebp - 0xe48]
push eax
lea ecx, [ebp - 0x14a0]
call fcn.00406d00
xor eax, eax
mov dword [ebp - 0xe94], 7
mov dword [ebp - 0xe98], 0
mov word [ebp - 0xea8], ax
push 8
push str.install_
lea ecx, [ebp - 0xea8]
mov byte [ebp - 4], 0x12
call fcn.00405270
lea eax, [ebp - 0x14a0]
push eax
lea edx, [ebp - 0xea8]
lea ecx, [ebp - 0x14b8]
call fcn.004116b0
add esp, 4
mov dword [ebp - 0x147c], eax
lea ecx, [ebp - 0xea8]
cmp ecx, eax
je 0x412c80
cmp dword [ebp - 0xe94], 8
jb 0x412c57
push dword [ebp - 0xea8]
call ebx
mov eax, dword [ebp - 0x147c]
add esp, 4
xor ecx, ecx
mov word [ebp - 0xea8], cx
push eax
lea ecx, [ebp - 0xea8]
mov dword [ebp - 0xe94], 7
mov dword [ebp - 0xe98], 0
call fcn.004066d0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x14a4], 8
jb 0x412c98
push dword [ebp - 0x14b8]
call ebx
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1480], esp
xor eax, eax
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0xea8]
push eax
call fcn.00406870
sub esp, 0x18
mov ecx, esp
mov byte [ebp - 4], 0x14
push 0x11
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push str.uninst.svc.failed
mov word [ecx], ax
call fcn.00406c00
mov byte [ebp - 4], 0x12
call fcn.0040ced0
add esp, 0x30
cmp dword [ebp - 0xe94], 8
jb 0x412d0d
push dword [ebp - 0xea8]
call ebx
add esp, 4
xor eax, eax
cmp dword [ebp - 0x148c], 8
mov dword [ebp - 0xe94], 7
mov dword [ebp - 0xe98], 0
mov word [ebp - 0xea8], ax
jb 0x412d3e
push dword [ebp - 0x14a0]
call ebx
add esp, 4
lea eax, [ebp - 0xe48]
push eax
push str.CUpgradeDlg::Upgrade__SendSvcFailedEvent:_uid___s_
call edi
add esp, 8
cmp dword [ebp - 0xe64], 8
jb 0x412d63
push dword [ebp - 0xe78]
call ebx
add esp, 4
xor eax, eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0xe4c], 8
mov dword [ebp - 0xe64], 7
mov dword [ebp - 0xe68], 0
mov word [ebp - 0xe78], ax
jb 0x412d98
push dword [ebp - 0xe60]
call ebx
add esp, 4
xor eax, eax
mov dword [ebp - 0xe4c], 7
mov dword [ebp - 0xe50], 0
mov word [ebp - 0xe60], ax
jmp 0x412df6
push str.CInstaller::SilentInstall__RemoveService:_begin_
call edi
add esp, 4
lea ecx, [ebp - 0x1270]
call fcn.00419530
cmp dword [ebp - 0xf18], 8
lea eax, [ebp - 0xf2c]
cmovae eax, dword [ebp - 0xf2c]
push eax
lea ecx, [ebp - 0x1270]
call fcn.004198a0
push str.CInstaller::SilentInstall__RemoveService:_end_
call edi
add esp, 4
mov eax, dword [0x48277c]
test eax, eax
jne 0x412e2b
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x15
test eax, eax
je 0x412e20
mov ecx, eax
call fcn.004122b0
jmp 0x412e22
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
cmp byte [eax + 0xe1], 0
je 0x412ee7
cmp dword [eax + 0xa4], 8
lea ecx, [eax + 0x90]
jb 0x412e49
mov ecx, dword [ecx]
call fcn.0040bca0
push str.CInstaller::SilentInstall__BackupLog:_end_
call edi
add esp, 4
push str.CInstaller::SilentInstall__BackUpIgnoreFiles:_begin_
call edi
mov eax, dword [0x48277c]
add esp, 4
test eax, eax
jne 0x412e97
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x412e8c
mov ecx, eax
call fcn.004122b0
jmp 0x412e8e
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x412ea4
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x14a0]
call fcn.00406d00
lea eax, [ebp - 0x14a0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00413c00
mov byte [ebp - 4], 6
cmp dword [ebp - 0x148c], 8
jb 0x412ed8
push dword [ebp - 0x14a0]
call ebx
add esp, 4
push str.CInstaller::SilentInstall__BackUpIgnoreFiles:_end_
call edi
mov eax, dword [0x48277c]
add esp, 4
test eax, eax
jne 0x412f17
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x19
test eax, eax
je 0x412f0c
mov ecx, eax
call fcn.004122b0
jmp 0x412f0e
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
cmp dword [eax + 0xa4], 8
lea ecx, [eax + 0x90]
jb 0x412f28
mov ecx, dword [ecx]
call fcn.0040bb80
push str.CInstaller::SilentInstall__ClearLog:_end_
call edi
add esp, 4
xor eax, eax
push 3
push 0x460874
lea ecx, [ebp - 0xe78]
mov dword [ebp - 0xe64], 7
mov dword [ebp - 0xe68], 0
mov word [ebp - 0xe78], ax
call fcn.00406c00
lea edx, [ebp - 0xe78]
lea ecx, [ebp - 0xe60]
mov byte [ebp - 4], 0x1a
call fcn.004102c0
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0xe64], 8
jb 0x412f93
push dword [ebp - 0xe78]
call ebx
add esp, 4
push 4
xor eax, eax
push str..lnk
lea ecx, [ebp - 0xe60]
mov dword [ebp - 0xe64], 7
mov dword [ebp - 0xe68], 0
mov word [ebp - 0xe78], ax
call fcn.00405270
lea ecx, [ebp - 0xe60]
call fcn.00407fe0
call fcn.004103a0
call fcn.00410770
mov byte [ebp - 4], 6
cmp dword [ebp - 0xe4c], 8
jb 0x412fef
push dword [ebp - 0xe60]
call ebx
add esp, 4
call fcn.00408230
push str.CInstaller::SilentInstall__deleteShortCut:_end_
call edi
mov eax, dword [0x48277c]
add esp, 4
test eax, eax
jne 0x413033
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x413028
mov ecx, eax
call fcn.004122b0
jmp 0x41302a
xor eax, eax
mov byte [ebp - 4], 6
mov dword [0x48277c], eax
cmp byte [eax + 0xe1], 0
je 0x413052
cmp dword [eax + 0xa4], 8
lea ecx, [eax + 0x90]
jb 0x41304d
mov ecx, dword [ecx]
call fcn.0040f090
push ecx
lea ecx, [ebp - 0x1068]
call fcn.004139f0
lea ecx, [ebp - 0x1068]
call fcn.00414be0
mov byte [ebp - 4], 0x1f
call fcn.00416a70
mov eax, dword [0x48277c]
test eax, eax
jne 0x4130a7
push 0xe4
call esi
add esp, 4
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x20
test eax, eax
je 0x41309c
mov ecx, eax
call fcn.004122b0
jmp 0x41309e
xor eax, eax
mov byte [ebp - 4], 0x1f
mov dword [0x48277c], eax
cmp byte [eax + 0xe1], 0
jne 0x41314c
cmp dword [eax + 0xb8], 0
je 0x41314c
call fcn.00412430
lea esi, [eax + 0xa8]
call fcn.00412430
add eax, 0x90
cmp eax, esi
je 0x4130e6
push 0xffffffffffffffff
push 0
push esi
mov ecx, eax
call fcn.00406870
call fcn.00412430
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x4130f8
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x41314c
call fcn.004050a0
call fcn.00412430
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x41311a
mov eax, dword [eax]
mov ecx, eax
call fcn.004442d0
test al, al
jne 0x41314c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call fcn.00412430
sub esp, 0x18
add eax, 0x90
mov ecx, esp
push eax
call fcn.00404f20
mov ecx, esi
call fcn.0040d460
add esp, 0x18
mov al, byte [0x482753]
mov dword [ebp - 0x147c], eax
call fcn.00412430
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x413169
mov eax, dword [eax]
mov ecx, eax
call fcn.0040cb40
test eax, eax
setne byte [ebp - 0x1481]
call fcn.00412430
cmp byte [eax + 0xe1], 0
je 0x4131a1
mov eax, dword [ebp - 0x147c]
xor ecx, ecx
cmp byte [ebp - 0x1481], cl
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x147c], eax
push str.CInstaller::SilentInstall__CopyiSafeFoder:_begin_
call edi
add esp, 4
call fcn.004166d0
push str.CInstaller::SilentInstall__CopyiSafeFoder:_end_
call edi
add esp, 4
cmp byte [ebp - 0x147c], 0
jne 0x4131c8
call fcn.0040f710
movzx eax, byte [0x482754]
xor ecx, ecx
cmp byte [0x482753], cl
mov dword [ebp - 0xecc], ecx
cmovne eax, ecx
lea ecx, [ebp - 0xec8]
mov byte [0x482754], al
call dword [sym.imp.ouilibx.dll_public:_void___thiscall_OUI::COString::constructor_void_]
mov dword [ebp - 0xec4], 3
mov byte [ebp - 4], 0x22
cmp byte [0x482754], 0
je 0x41321d
push str.CInstaller::SilentInstall__ReportLogThread_
call edi
add esp, 4
lea ecx, [ebp - 0xecc]
call fcn.00418c70
cmp dword [0x47f7a0], 0
je 0x41326e
sub esp, 0x18
mov ecx, esp
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x47f790
mov word [ecx], ax
call fcn.00406870
call fcn.0040c710
cmp dword [0x47f7a4], 8
mov eax, 0x47f790
cmovae eax, dword [0x47f790]
push eax
push str.CInstaller::SilentInstall__WritePromoteVersion:__s_
call edi
add esp, 0x20
cmp byte [0x48275b], 0
je 0x413295
sub esp, 0x18
mov ecx, esp
push 0x45d064
call fcn.00406d00
call fcn.0040c710
push str.CInstaller::SilentInstall__WritePromoteVersion:_nvd_
call edi
add esp, 0x1c
cmp byte [0x48275a], 0
je 0x413314
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
call fcn.00412430
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x4132ce
mov eax, dword [eax]
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x460ad4
push eax
lea eax, [ebp - 0x218]
push eax
call esi
push 0
push 0
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x413308
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.CInstaller::SilentInstall__CreateFile:_SVF_
call edi
add esp, 4
jmp 0x41331a
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x47f788], 0
je 0x41336b
sub esp, 0x18
mov ecx, esp
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x47f778
mov word [ecx], ax
call fcn.00406870
call fcn.0040c590
cmp dword [0x47f78c], 8
mov eax, 0x47f778
cmovae eax, dword [0x47f778]
push eax
push str.CInstaller::SilentInstall__WritePartnerProductId:__s_
call edi
add esp, 0x20
call fcn.0040c890
xor eax, eax
cmp byte [0x47f2aa], al
setne al
push eax
push str.CInstaller::SilentInstall__WriteVirusFlag:__d_
call edi
call fcn.0040cd70
xor eax, eax
cmp byte [0x47f2a8], al
setne al
push eax
push str.CInstaller::SilentInstall__WriteAppStoreFlag:__d_
call edi
mov cl, byte [ebp - 0x147c]
call fcn.0040c9f0
xor eax, eax
cmp byte [ebp - 0x147c], al
setne al
push eax
push str.CInstaller::SilentInstall__WriteSModFlag:__d_
call edi
call fcn.0040b390
push str.CInstaller::SilentInstall__InstallFont:_end_
call edi
add esp, 0x1c
cmp byte [ebp - 0x147c], 0
jne 0x4135f1
push str.YAC.lnk
lea ecx, [ebp - 0x14a0]
call fcn.00406d00
mov byte [ebp - 4], 0x23
call fcn.00412430
lea ecx, [eax + 0x90]
lea edx, [ebp - 0x14a0]
call fcn.00407300
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x148c], 8
jb 0x413417
push dword [ebp - 0x14a0]
call ebx
add esp, 4
lea eax, [ebp - 0x147c]
push str.IDS_SHORTCUT_DEEPCLEAN
push eax
call dword [sym.imp.ouilibx.dll_public:_static_class_OUI::OSTRING_TABLE____cdecl_OUI::OSTRING_TABLE::GetStringTable_void_]
mov ecx, eax
call dword [sym.imp.ouilibx.dll_public:_class_OUI::COString___thiscall_OUI::OSTRING_TABLE::LoadStringW_wchar_t_const__]
mov ecx, eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.ouilibx.dll_public:_wchar_t_const____thiscall_OUI::COString::operator_wchar_t_const__void_const]
push eax
lea ecx, [ebp - 0xefc]
call fcn.00406d00
lea ecx, [ebp - 0x147c]
mov byte [ebp - 4], 0x26
call dword [sym.imp.ouilibx.dll_public:_void___thiscall_OUI::COString::destructor_void_]
push 0x460874
lea ecx, [ebp - 0x14a0]
call fcn.00406d00
lea edx, [ebp - 0xefc]
lea ecx, [ebp - 0x14a0]
call fcn.004101f0
cmp dword [ebp - 0x148c], 8
jb 0x41348e
push dword [ebp - 0x14a0]
call ebx
add esp, 4
push 4
push str..lnk
lea ecx, [ebp - 0xefc]
call fcn.00405270
push str.iStart.exe
call fcn.00412430
lea edx, [eax + 0x90]
lea ecx, [ebp - 0xec0]
call fcn.00411480
add esp, 4
push str._divertop__param09__param10__param21
lea ecx, [ebp - 0xe78]
mov byte [ebp - 4], 0x27
call fcn.00406d00
mov byte [ebp - 4], 0x28
call fcn.00412430
lea edx, [eax + 0x90]
lea ecx, [ebp - 0xe60]
call fcn.0040fa30
lea eax, [ebp - 0xe60]
push eax
lea eax, [ebp - 0xe78]
push eax
lea edx, [ebp - 0xec0]
lea ecx, [ebp - 0xefc]
mov byte [ebp - 4], 0x29
call fcn.00407b10
push str.CInstaller::SilentInstall__CreateDeepCleanShortCut:_end_
call edi
add esp, 0xc
cmp dword [ebp - 0xe4c], 8
jb 0x41352d
push dword [ebp - 0xe60]
call ebx
add esp, 4
xor eax, eax
cmp dword [ebp - 0xe64], 8
mov dword [ebp - 0xe4c], 7
mov dword [ebp - 0xe50], 0
mov word [ebp - 0xe60], ax
jb 0x41355e
push dword [ebp - 0xe78]
call ebx
add esp, 4
xor eax, eax
cmp dword [ebp - 0xeac], 8
mov dword [ebp - 0xe64], 7
mov dword [ebp - 0xe68], 0
mov word [ebp - 0xe78], ax
jb 0x41358f
push dword [ebp - 0xec0]
call ebx
add esp, 4
xor eax, eax
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0xee8], 8
mov dword [ebp - 0xeac], 7
mov dword [ebp - 0xeb0], 0
mov word [ebp - 0xec0], ax
jb 0x4135c4
push dword [ebp - 0xefc]
call ebx
add esp, 4
push str.CInstaller::SilentInstall__RegisterRKScanShellDLL:_begin_
call edi
add esp, 4
call fcn.00412430
add eax, 0x90
cmp dword [eax + 0x14], 8
jb 0x4135e0
mov eax, dword [eax]
mov ecx, eax
call fcn.0040ee60
push str.CInstaller::SilentInstall__RegisterRKScanShellDLL:_end_
call edi
add esp, 4
call fcn.00412430
xor ecx, ecx
push 0xffffffffffffffff
push ecx
add eax, 0x90
mov word [ebp - 0xee4], cx
push eax
lea ecx, [ebp - 0xee4]
mov dword [ebp - 0xed0], 7
mov dword [ebp - 0xed4], 0
call fcn.00406870
lea ecx, [ebp - 0xfd8]
mov byte [ebp - 4], 0x2a
call fcn.004124b0
lea edx, [ebp - 0xee4]
lea ecx, [ebp - 0xfd8]
mov byte [ebp - 4], 0x2b
call fcn.00408b30
push str.CInstaller::SilentInstall__writeUninstallInfo:_end_
call edi
add esp, 4
call fcn.0040cc10
push str.CInstaller::SilentInstall__WriteInstallDate_
call edi
add esp, 4
lea edx, [ebp - 0xee4]
lea ecx, [ebp - 0xfd8]
call fcn.004099f0
push str.CInstaller::SilentInstall__writeiSafeInfo:_end_
call edi
add esp, 4
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
cmp dword [ebp - 0xed0], 8
lea eax, [ebp - 0xee4]
cmovae eax, dword [ebp - 0xee4]
push str.iSafeKrnlCall.dll
push eax
lea eax, [ebp - 0x628]
push eax
call esi
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x413701
push str.CInstaller::SilentInstall__Install_driver:_begin_
call edi
add esp, 4
push str.Install
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
push 0
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.CInstaller::SilentInstall__Install_driver:_end_
jmp 0x413706
push str.CInstaller::SilentInstall__Load_iSafeKrnlCall.dll:_failed_
call edi
mov eax, dword [0x482720]
add esp, 4
test al, 1
jne 0x413729
or eax, 1
push 0x45aeb0
mov dword [0x482720], eax
call fcn.004521b7
add esp, 4
push ecx
call fcn.00443d20
test al, al
je 0x413757
call fcn.00412430
cmp byte [eax + 0xe1], 0
je 0x413757
push str.CInstaller::SilentInstall__StartiSafeService:_begin_
call edi
add esp, 4
call fcn.0040be50
push str.CInstaller::SilentInstall__StartiSafeService:_end_
jmp 0x41376b
push str.CInstaller::SilentInstall__InstallService:_begin_
call edi
add esp, 4
call fcn.004145b0
push str.CInstaller::SilentInstall__InstallService:_end_
call edi
add esp, 4
call fcn.00412430
sub esp, 0x18
mov ecx, esp
xor edx, edx
push 0xffffffffffffffff
add eax, 0x90
push edx
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], dx
call fcn.00406870
call fcn.0040d6d0
add esp, 0x18
cmp byte [0x482754], 0
je 0x4137e7
push str.CInstaller::SilentInstall__WaitReportComplete:_begin_
call edi
add esp, 4
push 0xea60
push dword [ebp - 0xecc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0xecc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.CInstaller::SilentInstall__WaitReportComplete:_end_
mov dword [ebp - 0xecc], 0
call edi
add esp, 4
lea ecx, [ebp - 0xf14]
call fcn.0042cdc0
xor eax, eax
push 0x206
mov byte [ebp - 4], 0x2c
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
cmp dword [ebp - 0xf00], 8
lea eax, [ebp - 0xf14]
cmovae eax, dword [ebp - 0xf14]
push eax
lea eax, [ebp - 0x420]
push 0x461430
push eax
call fcn.00405ac0
add esp, 0xc
lea ecx, [ebp - 0x1478]
call fcn.00419530
lea eax, [ebp - 0x420]
push eax
call fcn.00419ba0
lea eax, [ebp - 0x420]
push eax
push str.CInstaller::SilentInstall__RemoveiSafeFolder:_path___s_
call edi
add esp, 8
cmp byte [0x482750], 0
je 0x413908
push 0x45d39c
call fcn.00412430
lea edx, [eax + 0x90]
lea ecx, [ebp - 0xe60]
call fcn.0042d4a0
add esp, 4
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0xe4c], 8
lea eax, [ebp - 0xe60]
cmovae eax, dword [ebp - 0xe60]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4138f0
push 0x45ec1c
lea ecx, [ebp - 0x14b8]
call fcn.00406d00
push 0
push 1
lea edx, [ebp - 0x14b8]
lea ecx, [ebp - 0xe60]
call fcn.00408a90
add esp, 8
lea ecx, [ebp - 0x14b8]
call fcn.00401100
push str.CInstaller::SilentInstall__run_iStart.exe_
call edi
add esp, 4
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0xe4c], 8
jb 0x413908
push dword [ebp - 0xe60]
call ebx
add esp, 4
call fcn.00412430
lea ecx, [eax + 0x90]
call fcn.0040f8c0
call fcn.00412430
lea ecx, [eax + 0x90]
call fcn.00411260
push str.CInstaller::SilentInstall__End_
call edi
add esp, 4
cmp dword [ebp - 0xf00], 8
jb 0x413946
push dword [ebp - 0xf14]
call ebx
add esp, 4
xor eax, eax
lea ecx, [ebp - 0xfd8]
mov dword [ebp - 0xf00], 7
mov dword [ebp - 0xf04], 0
mov word [ebp - 0xf14], ax
call fcn.00413ae0
cmp dword [ebp - 0xed0], 8
jb 0x413982
push dword [ebp - 0xee4]
call ebx
add esp, 4
xor eax, eax
lea ecx, [ebp - 0xec8]
mov dword [ebp - 0xed0], 7
mov dword [ebp - 0xed4], 0
mov word [ebp - 0xee4], ax
mov byte [ebp - 4], 0x1f
call dword [sym.imp.ouilibx.dll_public:_void___thiscall_OUI::COString::destructor_void_]
lea ecx, [ebp - 0x1068]
call fcn.00414c60
cmp dword [ebp - 0xf18], 8
jb 0x4139ce
push dword [ebp - 0xf2c]
call ebx
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00452076
mov esp, ebp
pop ebp
ret