Function at 0x432f40
Capabilities:
Check for time delay via gettickcount
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x512405
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x53c1a4]
xor eax, esp
mov dword [esp + 0x300], eax
push ebx
push esi
push edi
mov eax, dword [0x53c1a4]
xor eax, esp
push eax
lea eax, [esp + 0x318]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [edi + 0x28]
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [eax]
mov word [esp + 0x90], cx
mov ecx, eax
mov dword [esp + 0x28], edi
mov dword [esp + 0xa4], 7
mov dword [esp + 0xa0], ebx
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x432fb2
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x90]
call fcn.00408a10
mov dword [esp + 0x320], ebx
push 6
push ebx
mov dword [esp + 0x50], vtable.CInstallShortCut.0
mov dword [esp + 0x54], vtable.CQMTInitializeCOMThread.0
mov dword [esp + 0x58], ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, ebx
jne 0x432ffe
mov dword [esp + 0x50], 1
lea eax, [edi + 0x34]
mov byte [esp + 0x320], 1
mov dword [esp + 0x40], eax
mov eax, dword [eax + 0x24]
cmp eax, ebx
je 0x43301d
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.00415ba0
mov eax, dword [0x548880]
cmp eax, ebx
je 0x43305e
lea ecx, [esp + 0x18]
push ecx
push ebx
push 0x4a
lea edx, [esp + 0x44]
push eax
mov dword [esp + 0x48], 5
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x28], 0x2711
mov dword [esp + 0x30], edx
mov dword [esp + 0x2c], 8
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xa8]
cmp eax, ebx
je 0x433079
mov edx, dword [edi + 0x30]
push edx
push 0x51e178
push ebx
push 5
call eax
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x38], eax
mov eax, dword [esi]
push eax
push 0x51e184
mov ecx, 0x548980
call fcn.004dfa90
mov eax, dword [esi]
push eax
call fcn.004158d0
add esp, 0xc
cmp eax, ebx
jne 0x4330ec
mov dword [0x544984], 0x3f4
mov ecx, dword [esi]
push ecx
push str.CreateDeepDirectory__ws_
mov ecx, 0x548980
call fcn.004dfa90
mov eax, dword [edi + 0xa8]
add esp, 8
cmp eax, ebx
je 0x433ce5
mov edx, dword [edi + 0x30]
push edx
push 0x51e1b4
push 1
push 0xa
call eax
add esp, 0x10
jmp 0x433ce5
push edi
call fcn.00432080
mov eax, dword [0x548880]
cmp eax, ebx
je 0x43312e
lea edx, [esp + 0x2c]
push edx
push ebx
push 0x4a
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x28], 0x2d
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], 0x2711
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], 8
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xa8]
cmp eax, ebx
je 0x433149
mov ecx, dword [edi + 0x30]
push ecx
push str.ck_W_e
push ebx
push 0x2d
call eax
add esp, 0x10
push str.ExtractProductFiles_begin...
mov ecx, 0x548980
call fcn.004dfa90
mov eax, dword [0x548a38]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add esp, 4
cmp eax, ebx
jne 0x433191
push str.Kernel32.dll
call esi
cmp eax, ebx
je 0x433188
push str.Wow64EnableWow64FsRedirection
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x548a38], eax
jmp 0x43318d
mov eax, dword [0x548a38]
cmp eax, ebx
je 0x433194
push ebx
call eax
mov ecx, edi
call fcn.0042fb70
mov dword [esp + 0x14], eax
mov eax, dword [0x548a38]
cmp eax, ebx
jne 0x4331cf
push str.Kernel32.dll
call esi
cmp eax, ebx
je 0x4331c6
push str.Wow64EnableWow64FsRedirection
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x548a38], eax
jmp 0x4331cb
mov eax, dword [0x548a38]
cmp eax, ebx
je 0x4331d3
push 1
call eax
push str.ExtractProductFiles_end...
mov ecx, 0x548980
call fcn.004dfa90
add esp, 4
cmp dword [esp + 0x14], ebx
jne 0x43322b
push 0x51e218
mov ecx, 0x548980
call fcn.004dfa90
mov ecx, dword [edi + 0xa8]
add esp, 4
cmp ecx, ebx
je 0x433ce5
mov eax, dword [edi + 0x64]
mov edx, dword [edi + 0x30]
neg eax
push edx
sbb eax, eax
add eax, 3
push 0x51e22c
push eax
push 0x46
call ecx
add esp, 0x10
jmp 0x433ce5
xor edx, edx
lea ecx, [edx + 0x46]
call fcn.00421b60
mov eax, dword [edi + 0xa8]
cmp eax, ebx
je 0x433250
mov ecx, dword [edi + 0x30]
push ecx
push str.ck_W
push ebx
push 0x46
call eax
add esp, 0x10
lea ecx, [esp + 0xa8]
call fcn.004e3550
mov esi, eax
push 0x51e250
mov ebx, esi
mov byte [esp + 0x324], 2
call fcn.004e3a20
cmp dword [esi + 0x18], 8
jb 0x43327d
mov esi, dword [esi + 4]
jmp 0x433280
add esi, 4
push 0
push esi
call fcn.004efd72
xor edx, edx
add esp, 8
cmp eax, 0xffffffff
setne dl
mov byte [esp + 0x320], 1
mov eax, edx
test eax, eax
sete bl
cmp dword [esp + 0xc0], 8
jb 0x4332bc
mov eax, dword [esp + 0xac]
push eax
call fcn.004ea82f
add esp, 4
test bl, bl
jne 0x433380
lea ecx, [esp + 0x70]
call fcn.004e3550
mov esi, eax
push 0x51e264
mov ebx, esi
mov byte [esp + 0x324], 3
call fcn.004e3a20
xor ecx, ecx
xor ebx, ebx
push 0xffffffffffffffff
mov word [esp + 0xcc], cx
mov edi, 7
push ebx
mov eax, esi
lea ecx, [esp + 0xcc]
mov dword [esp + 0xe4], edi
mov dword [esp + 0xe0], ebx
call fcn.00408f70
mov esi, 8
mov byte [esp + 0x320], 5
cmp dword [esp + 0x88], esi
jb 0x433336
mov edx, dword [esp + 0x74]
push edx
call fcn.004ea82f
add esp, 4
lea ecx, [esp + 0xc4]
xor eax, eax
push ecx
mov dword [esp + 0x8c], edi
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], ax
call fcn.004deb40
add esp, 4
mov byte [esp + 0x320], 1
cmp dword [esp + 0xdc], esi
jb 0x43337c
mov edx, dword [esp + 0xc8]
push edx
call fcn.004ea82f
add esp, 4
mov edi, dword [esp + 0x28]
cmp dword [edi + 0x10], 0
je 0x433399
cmp dword [edi + 0xc], 0
je 0x433399
cmp dword [0x5483d4], 2
je 0x433785
xor eax, eax
push 0x208
push eax
lea ecx, [esp + 0x106]
push ecx
mov word [esp + 0x108], ax
call fcn.004f08c0
add esp, 0xc
lea esi, [esp + 0xfc]
call fcn.004df460
test eax, eax
je 0x4335a7
lea ecx, [esp + 0xa8]
call fcn.004e3550
lea ecx, [esp + 0x54]
mov byte [esp + 0x320], 6
call fcn.004e3470
lea ecx, [esp + 0x70]
mov byte [esp + 0x320], 7
call fcn.004e3710
lea ecx, [esp + 0xc4]
mov byte [esp + 0x320], 8
call fcn.004e3630
mov byte [esp + 0x320], 9
mov ecx, dword [esp + 0xac]
mov esi, 8
cmp dword [esp + 0xc0], esi
jae 0x433433
lea ecx, [esp + 0xac]
lea edx, [esp + 0xfc]
push edx
call fcn.00426be0
mov ecx, dword [esp + 0x5c]
add esp, 4
cmp dword [esp + 0x6c], esi
jae 0x433451
lea ecx, [esp + 0x58]
lea eax, [esp + 0xfc]
push eax
call fcn.00426be0
add esp, 4
lea edi, [esp + 0x70]
call fcn.004e3920
push 0x51e278
mov ebx, edi
call fcn.004e3a20
mov ecx, dword [esp + 0x74]
cmp dword [esp + 0x88], esi
jae 0x433487
lea ecx, [esp + 0x74]
lea edx, [esp + 0xfc]
push edx
call fcn.00426be0
add esp, 4
lea edi, [esp + 0xc4]
call fcn.004e3920
push 0x51e284
mov ebx, edi
call fcn.004e3a20
mov ecx, dword [esp + 0xc8]
cmp dword [esp + 0xdc], esi
jae 0x4334c6
lea ecx, [esp + 0xc8]
lea eax, [esp + 0xfc]
push eax
call fcn.00426be0
add esp, 4
lea ecx, [esp + 0x54]
push ecx
lea esi, [esp + 0xe4]
call fcn.004270c0
push 0x51e290
mov ebx, esi
mov byte [esp + 0x324], 0xa
call fcn.004e3a20
cmp dword [esp + 0xf8], 8
mov eax, dword [esp + 0xe4]
jae 0x433513
lea eax, [esp + 0xe4]
push 0
push eax
call fcn.004deda0
add esp, 8
push 0xffffffffffffffff
push 0
lea eax, [esp + 0xcc]
lea ecx, [esp + 0xe8]
call fcn.00408f70
push 0x51e2a4
lea ebx, [esp + 0xe4]
call fcn.004e3a20
cmp dword [esp + 0xf8], 8
mov eax, dword [esp + 0xe4]
jae 0x43355e
lea eax, [esp + 0xe4]
push 0
push eax
call fcn.004deda0
add esp, 8
lea esi, [esp + 0xe0]
call fcn.0040efa0
lea esi, [esp + 0xc4]
call fcn.0040efa0
lea esi, [esp + 0x70]
call fcn.0040efa0
lea esi, [esp + 0x54]
call fcn.0040efa0
lea esi, [esp + 0xa8]
mov byte [esp + 0x320], 1
call fcn.0040efa0
mov edi, dword [esp + 0x24]
lea edx, [esp + 0x14]
push edi
push edx
mov ebx, 0x51e2b8
call fcn.00418040
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4335e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, esi
je 0x433698
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, 0x51e2ec
call fcn.00418040
add esp, 8
mov esi, eax
lea ecx, [esp + 0xa8]
mov byte [esp + 0x320], 0xb
call fcn.004e3550
mov ebx, eax
mov byte [esp + 0x320], 0xc
cmp dword [esp + 0xa4], 8
jb 0x43363b
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
jmp 0x433646
lea eax, [esp + 0x90]
mov dword [esp + 0x14], eax
mov esi, dword [esi]
push 0x51e304
call fcn.004e3a20
cmp dword [ebx + 0x18], 8
jb 0x43365d
mov edx, dword [ebx + 4]
jmp 0x433660
lea edx, [ebx + 4]
mov ecx, dword [esp + 0x14]
push 0x51e2e4
push 0x51e2e8
push ecx
mov ecx, 0x51e2d0
mov ebx, esi
call fcn.00414710
lea esi, [esp + 0xa8]
call fcn.0040efa0
lea ecx, [esp + 0x18]
mov byte [esp + 0x320], 1
call fcn.00406e40
lea edx, [esp + 0x14]
push edx
mov ecx, 0x51e318
call fcn.00406d70
lea eax, [esp + 0x14]
mov byte [esp + 0x320], 0xd
call fcn.00435a30
test eax, eax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x14]
sete bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4336e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x433785
lea ecx, [esp + 0x14]
push 0x548884
push ecx
mov ebx, edi
call fcn.00435bd0
push eax
lea edx, [esp + 0x24]
push edx
mov ebx, 0x51e32c
mov byte [esp + 0x330], 0xe
call fcn.00418040
add esp, 0x10
mov esi, eax
lea ecx, [esp + 0xa8]
mov byte [esp + 0x320], 0xf
call fcn.004e3470
mov ebx, eax
mov byte [esp + 0x320], 0x10
mov esi, dword [esi]
push 0x51e34c
call fcn.004e3a20
cmp dword [ebx + 0x18], 8
jb 0x433750
mov ebx, dword [ebx + 4]
jmp 0x433753
add ebx, 4
push esi
push ebx
push str.http:__www.romzj.com__refdesktop
call fcn.00432e70
lea esi, [esp + 0xa8]
call fcn.0040efa0
lea ecx, [esp + 0x18]
call fcn.00406e40
lea ecx, [esp + 0x14]
mov byte [esp + 0x320], 1
call fcn.00406e40
lea ecx, [esp + 0xa8]
call fcn.004e3630
mov ebx, eax
push 0x51e3a4
mov byte [esp + 0x324], 0x11
call fcn.004e3a20
mov esi, 8
cmp dword [ebx + 0x18], esi
jb 0x4337b4
mov ebx, dword [ebx + 4]
jmp 0x4337b7
add ebx, 4
push ebx
call fcn.004dec60
add esp, 4
mov byte [esp + 0x320], 1
cmp dword [esp + 0xc0], esi
jb 0x4337e1
mov eax, dword [esp + 0xac]
push eax
call fcn.004ea82f
add esp, 4
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, 0x51e3b0
call fcn.00418040
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433823
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, esi
je 0x43390f
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, 0x51e3e4
call fcn.00418040
add esp, 8
mov esi, eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x320], 0x12
call fcn.004e3630
mov ebx, eax
mov byte [esp + 0x320], 0x13
cmp dword [esp + 0xa4], 8
jb 0x433872
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
jmp 0x43387d
lea eax, [esp + 0x90]
mov dword [esp + 0x14], eax
mov esi, dword [esi]
push 0x51e3fc
call fcn.004e3a20
push 0x51e408
call fcn.004e3a20
cmp dword [ebx + 0x18], 8
jb 0x43389e
mov edx, dword [ebx + 4]
jmp 0x4338a1
lea edx, [ebx + 4]
mov ecx, dword [esp + 0x14]
push 0x51e3dc
push 0x51e3e0
push ecx
mov ecx, 0x51e3c8
mov ebx, esi
call fcn.00414710
cmp dword [esp + 0x6c], 8
jb 0x4338d0
mov edx, dword [esp + 0x58]
push edx
call fcn.004ea82f
add esp, 4
xor eax, eax
mov word [esp + 0x58], ax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43390f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, 0x51e41c
call fcn.00418040
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43394d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, esi
je 0x433a2b
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, str.Uninst.exe
call fcn.00418040
add esp, 8
mov esi, eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x320], 0x14
call fcn.004e3630
mov ebx, eax
mov byte [esp + 0x320], 0x15
cmp dword [esp + 0xa4], 8
mov edi, dword [esp + 0x90]
jae 0x43399d
lea edi, [esp + 0x90]
mov esi, dword [esi]
push 0x51e468
call fcn.004e3a20
push 0x51e474
call fcn.004e3a20
cmp dword [ebx + 0x18], 8
jb 0x4339be
mov edx, dword [ebx + 4]
jmp 0x4339c1
lea edx, [ebx + 4]
push 0x51e448
push 0x51e44c
push edi
mov ecx, 0x51e434
mov ebx, esi
call fcn.00414710
cmp dword [esp + 0x6c], 8
jb 0x4339ec
mov edx, dword [esp + 0x58]
push edx
call fcn.004ea82f
add esp, 4
xor eax, eax
mov word [esp + 0x58], ax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433a2b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, str.lianwifi2
call fcn.00406d70
lea eax, [esp + 0x14]
mov byte [esp + 0x320], 0x16
call fcn.00435a30
test eax, eax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x14]
sete bl
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433a78
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x433b79
mov ebx, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push 0x548884
push ecx
call fcn.00435bd0
push eax
lea edx, [esp + 0x24]
push edx
mov ebx, str.data_romzj.ico
mov byte [esp + 0x330], 0x17
call fcn.00418040
add esp, 0x10
mov esi, eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x320], 0x18
call fcn.004e3630
mov ebx, eax
mov byte [esp + 0x320], 0x19
mov esi, dword [esi]
push 0x51e4c0
call fcn.004e3a20
push 0x51e4cc
call fcn.004e3a20
mov edi, 8
cmp dword [ebx + 0x18], edi
jb 0x433af0
mov ebx, dword [ebx + 4]
jmp 0x433af3
add ebx, 4
push esi
push ebx
push str.http:__www.romzj.com__refstartmenu
call fcn.00432e70
cmp dword [esp + 0x6c], edi
jb 0x433b12
mov eax, dword [esp + 0x58]
push eax
call fcn.004ea82f
add esp, 4
mov byte [esp + 0x320], 0x17
mov eax, dword [esp + 0x18]
xor ecx, ecx
add eax, 0xfffffff0
mov word [esp + 0x58], cx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433b51
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433b79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x28]
push esi
call fcn.00432230
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x18]
push edi
push ecx
mov ebx, 0x51e528
call fcn.00418040
add esp, 8
mov byte [esp + 0x320], 0x1a
mov eax, dword [eax]
lea ecx, [esp + 0x54]
call fcn.00408b00
mov ecx, eax
mov byte [esp + 0x320], 0x1b
call fcn.004081d0
cmp dword [esp + 0x6c], 8
jb 0x433bd0
mov edx, dword [esp + 0x58]
push edx
call fcn.004ea82f
add esp, 4
xor eax, eax
mov word [esp + 0x58], ax
mov byte [esp + 0x320], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433c0f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push 0x548884
push ecx
mov ebx, edi
call fcn.00435bd0
push eax
lea edx, [esp + 0x24]
push edx
mov ebx, str.Shuame.exe
mov byte [esp + 0x330], 0x1c
call fcn.00418040
add esp, 0x10
mov byte [esp + 0x320], 0x1d
mov eax, dword [eax]
lea ecx, [esp + 0x54]
call fcn.00408b00
mov ecx, eax
mov byte [esp + 0x320], 0x1e
call fcn.004081d0
cmp dword [esp + 0x6c], 8
jb 0x433c71
mov eax, dword [esp + 0x58]
push eax
call fcn.004ea82f
add esp, 4
mov byte [esp + 0x320], 0x1c
mov eax, dword [esp + 0x18]
xor ecx, ecx
add eax, 0xfffffff0
mov word [esp + 0x58], cx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433cb0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, 1
mov byte [esp + 0x320], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433cdc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x28]
mov dword [esi + 0x14], ebx
xor ebx, ebx
mov esi, dword [esp + 0x40]
call fcn.00419320
cmp dword [edi + 0x14], ebx
je 0x433d90
mov eax, dword [0x548880]
cmp eax, ebx
je 0x433d38
lea edx, [esp + 0x2c]
push edx
push ebx
push 0x4a
lea ecx, [esp + 0x4c]
push eax
mov dword [esp + 0x50], 0x64
mov dword [esp + 0x54], ebx
mov dword [esp + 0x3c], 0x2711
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], 8
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x548880]
mov ecx, dword [edi + 0xa8]
cmp ecx, ebx
je 0x433d58
mov eax, dword [edi + 0x30]
push eax
push 0x51e558
push ebx
push 0x64
call ecx
mov eax, dword [0x548880]
add esp, 0x10
cmp eax, ebx
je 0x433d6a
push ebx
push ebx
push 0x535
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x38]
mov ecx, dword [edi + 0x14]
push eax
push ecx
push str.install_end__return:_d__install_cost_time:_dms
mov ecx, 0x548980
call fcn.004dfa90
add esp, 0xc
jmp 0x433e37
push 0x51e594
mov ecx, 0x548980
call fcn.004dfa90
add esp, 4
push ebx
push 0x517217
lea ecx, [esp + 0x78]
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
call fcn.00401820
push ebx
push ebx
push 9
push edi
lea ecx, [esp + 0x80]
mov byte [esp + 0x330], 0x1f
call fcn.004310c0
cmp dword [esp + 0x88], 0x10
jb 0x433df7
mov edx, dword [esp + 0x74]
push edx
call fcn.004ea82f
add esp, 4
mov eax, dword [0x548880]
cmp eax, ebx
je 0x433e37
lea edx, [esp + 0x2c]
push edx
push ebx
push 0x4a
lea ecx, [esp + 0x44]
push eax
mov dword [esp + 0x48], 0x64
mov dword [esp + 0x4c], 9
mov dword [esp + 0x3c], 0x2711
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], 8
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [esp + 0x50], ebx
je 0x433e43
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [esp + 0xa4], 8
jb 0x433e5d
mov eax, dword [esp + 0x90]
push eax
call fcn.004ea82f
add esp, 4
mov ecx, dword [esp + 0x318]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x300]
xor ecx, esp
call fcn.004ea83a
mov esp, ebp
pop ebp
ret