Function at 0x40ece0
Capabilities:
Check mutex on windows
Copy file
Create process on windows
Create thread
Delete directory
Delete file
Print debug messages
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x22ac
call fcn.00426160
mov eax, dword [0x43e044]
xor eax, esp
mov dword [esp + 0x22a8], eax
push ebx
push esi
push edi
push 0x220
push 0
push 0xb49da0
call fcn.00422210
mov eax, dword [ebp + 0x10]
mov edx, 0xb5adf0
add esp, 0xc
sub edx, eax
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40ed20
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push str.C:TempwmcInst.ini
push 0
push str.Time
push 0x437c78
call esi
push str.C:TempwmcInst.ini
push 0
push 0x437c84
push 0x437c78
mov dword [0xb57ce0], eax
call esi
mov dword [0xb57ce4], eax
mov eax, dword [ebp + 8]
mov dword [0xb58f44], eax
mov eax, 0xb5adf0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40ed75
sub eax, edx
sar eax, 1
je 0x40fa4a
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._ManualUpdate__Elevate_CmdLine_
call edi
mov esi, 0xb5adf0
call fcn.00409480
push str._unrar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x40ee32
push str.wmcInst.exe_Command_to_Write_Package_File.
call edi
push 0x6acfc0
mov edx, str.S.O.C.._Bg
mov ecx, 0x437d38
call fcn.00408d10
add esp, 4
push 0xc800
mov edx, str.A.K.S..
mov ecx, str.ManualUpdate.dat
call fcn.00408d10
add esp, 4
push 0x7d000
mov edx, str.X.X.R..
mov ecx, str.PolicyContainer.opt
call fcn.00408d10
add esp, 4
push 0x2800
mov edx, str.B.O.T..
mov ecx, str.RemoteService.opt
call fcn.00408d10
add esp, 4
push 0x2800
mov edx, str.P.T.7..
mov ecx, str.Presto_7.ini
call fcn.00408d10
add esp, 4
jmp 0x40fa06
push str._add
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x40f3e2
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xe62]
push ecx
mov word [esp + 0xe64], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x1312]
push eax
mov word [esp + 0x1314], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xff2]
push edx
mov word [esp + 0xff4], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1182]
push ecx
mov word [esp + 0x1184], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x84a]
push edx
mov word [esp + 0x84c], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x232]
push edx
mov word [esp + 0x234], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.00422210
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x638]
mov word [esp + eax + 0x840], cx
add eax, 2
test cx, cx
jne 0x40efc0
lea eax, [esp + 0x840]
push 0x5c
push eax
call fcn.0041acc1
add esp, 8
test eax, eax
je 0x40f005
lea ecx, [esp + 0x840]
push 0x5c
push ecx
call fcn.0041acc1
add esp, 8
xor edx, edx
mov word [eax], dx
xor eax, eax
jmp 0x40f010
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x40f010
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0x430], cx
add eax, 2
test cx, cx
jne 0x40f030
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041acc1
add eax, 2
lea edx, [esp + 0xc58]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40f066
lea ecx, [esp + 0xc50]
push 0x28
push ecx
call fcn.0041acc1
add esp, 8
test eax, eax
je 0x40f0b6
push 4
push 0x437d80
push eax
call fcn.0041c79c
add esp, 0xc
test eax, eax
jne 0x40f0b6
lea edx, [esp + 0xc50]
push 0x28
push edx
call fcn.0041acc1
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0x430]
push 0x5c
push edx
call fcn.0041acc1
add esp, 8
test eax, eax
je 0x40f0e3
lea eax, [esp + 0x430]
push 0x5c
push eax
call fcn.0041acc1
add esp, 8
xor ecx, ecx
mov word [eax], cx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [esp + 0xc50]
push edx
lea eax, [esp + 0x434]
push eax
lea ecx, [esp + 0xa50]
push str._s_s.exe
push ecx
call esi
add esp, 0x10
push 0
lea edx, [esp + 0xa4c]
push edx
lea eax, [esp + 0x640]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea ecx, [esp + 0xa4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [esp + 0x840]
push edx
lea eax, [esp + 0x22c]
push str._sClient.cab
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x228]
push 0
push ecx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f1cc
lea edx, [esp + 0xa48]
push edx
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f1cc
xor eax, eax
jmp 0x40f1a0
movzx ecx, word [eax + 0x437d38]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x40f1a0
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x40f1c0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f1c0
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f24d
lea eax, [esp + 0xa48]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f24d
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x40f220
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f241
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f2cd
lea eax, [esp + 0xa48]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f2cd
xor eax, eax
nop
movzx ecx, word [eax + str.PolicyContainer.opt]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x40f2a0
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f2c1
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f34d
lea eax, [esp + 0xa48]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f34d
xor eax, eax
nop
movzx ecx, word [eax + str.RemoteService.opt]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x40f320
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f341
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40fa06
lea eax, [esp + 0xa48]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40fa06
xor eax, eax
jmp 0x40f3b0
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x40f3b0
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f3d1
jmp 0x40fa06
push str._rar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x40f9dd
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x1aba]
push ecx
xor esi, esi
mov word [esp + 0x1abc], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xe62]
push edx
mov word [esp + 0xe64], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1312]
push ecx
mov word [esp + 0x1314], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xff2]
push eax
mov word [esp + 0xff4], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x1182]
push edx
mov word [esp + 0x1184], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x84a]
push ecx
mov word [esp + 0x84c], ax
call fcn.00422210
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x232]
push eax
mov word [esp + 0x234], dx
call fcn.00422210
add esp, 0xc
push 0x104
lea ecx, [esp + 0xc54]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0xc50]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x40f570
lea edx, [esp + 0xa48]
push 0x5c
push edx
call fcn.0041acc1
add esp, 8
test eax, eax
je 0x40f5b5
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041acc1
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xc50]
push 0x5c
push edx
call fcn.0041acc1
add eax, 2
lea edx, [esp + 0x438]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40f5d3
lea eax, [esp + 0x430]
push 0x2e
push eax
call fcn.0041acc1
add esp, 8
test eax, eax
je 0x40f60f
lea ecx, [esp + 0x430]
push 0x2e
push ecx
call fcn.0041acc1
add esp, 8
xor edx, edx
mov word [eax], dx
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x430]
push eax
lea ecx, [esp + 0xa4c]
push ecx
lea edx, [esp + 0x848]
push str._s_s_
push edx
call edi
add esp, 0x10
push 0
lea eax, [esp + 0x844]
push eax
lea ecx, [esp + 0xc58]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea edx, [esp + 0x844]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sClient.cab
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f704
lea eax, [esp + 0x840]
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f704
xor eax, eax
jmp 0x40f6c0
movzx ecx, word [eax + 0x437d38]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x40f6c0
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x40f6e0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f6e0
mov ecx, dword [0x437da8]
mov dx, word [0x437dac]
mov dword [eax], ecx
mov word [eax + 4], dx
mov esi, 1
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f7a1
lea eax, [esp + 0x840]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f7a1
xor eax, eax
jmp 0x40f760
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x40f760
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f781
mov ecx, dword [0x437da8]
mov dx, word [0x437dac]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f841
lea eax, [esp + 0x840]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f841
xor eax, eax
jmp 0x40f800
movzx ecx, word [eax + str.PolicyContainer.opt]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x40f800
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f821
mov ecx, dword [0x437da8]
mov dx, word [0x437dac]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f8e1
lea eax, [esp + 0x840]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f8e1
xor eax, eax
jmp 0x40f8a0
movzx ecx, word [eax + str.RemoteService.opt]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x40f8a0
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f8c1
mov ecx, dword [0x437da8]
mov dx, word [0x437dac]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x40f981
lea eax, [esp + 0x840]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.00408fa0
add esp, 4
test eax, eax
je 0x40f981
xor eax, eax
jmp 0x40f940
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x40f940
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40f961
mov ecx, dword [0x437da8]
mov dx, word [0x437dac]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0x840]
push eax
push esi
lea ecx, [esp + 0x1180]
push ecx
lea edx, [esp + 0xff4]
push edx
lea eax, [esp + 0x1318]
push eax
lea ecx, [esp + 0xe6c]
push ecx
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x1acc]
push str._s_s_s_s_s_r_n
push eax
call edi
add esp, 0x24
push 0x40040
push 0x437efc
lea ecx, [esp + 0x1ab8]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x40fa06
push str._SmrInstallTerminate_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x40fa22
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst___Install_terminate___Clear_Temp_
call edi
call fcn.0040c740
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
push str._SmrInstallSuccess_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x40fcb5
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst__Install_Success__Clear_Temp_
jmp 0x40f9ff
call fcn.0040e020
call fcn.0040c770
test eax, eax
jne 0x40fcce
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00422210
add esp, 0xc
xor eax, eax
jmp 0x40fa80
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x40fa80
lea ecx, [esp + 0x20]
push ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fab3
lea edx, [esp + 0x20]
push edx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fac0
mov ecx, dword [str.Public]
mov edx, dword [0x4377c8]
mov dword [eax], ecx
mov ecx, dword [0x4377cc]
mov dword [eax + 4], edx
mov edx, dword [0x4377d0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fb0e
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fb15
mov edx, dword [str.SMR7]
mov ecx, dword [0x43398c]
mov dword [eax], edx
mov edx, dword [0x433990]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fb5a
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fb61
mov edx, dword [str.Debug]
mov ecx, dword [0x437fe4]
mov dword [eax], edx
mov edx, dword [0x437fe8]
mov dword [eax + 4], ecx
mov cx, word [0x437fec]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fbb1
lea eax, [esp + 0x20]
push eax
call fcn.0041bfc8
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x40fbc0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40fbc0
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fbf7
lea edx, [esp + 0x20]
push edx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.00422210
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x648]
push ecx
push str._c_echo____date_____time_____s___Initial_Path_Fail________sFailLog__04u__02u__02u.log_
lea edx, [esp + 0x448]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0x438]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
call fcn.0040cd50
test eax, eax
jne 0x40ff1d
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
jmp 0x40fd00
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x40fd00
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fd33
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fd40
mov edx, dword [str.Public]
mov ecx, dword [0x4377c8]
mov dword [eax], edx
mov edx, dword [0x4377cc]
mov dword [eax + 4], ecx
mov ecx, dword [0x4377d0]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 0xc], ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fd8e
lea eax, [esp + 0x20]
push eax
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fd95
mov ecx, dword [str.SMR7]
mov edx, dword [0x43398c]
mov dword [eax], ecx
mov ecx, dword [0x433990]
mov dword [eax + 4], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 8], ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fdda
lea eax, [esp + 0x20]
push eax
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40fde1
mov ecx, dword [str.Debug]
mov edx, dword [0x437fe4]
mov dword [eax], ecx
mov ecx, dword [0x437fe8]
mov dword [eax + 4], edx
mov dx, word [0x437fec]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fe31
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x40fe40
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40fe40
lea edx, [esp + 0x20]
mov ecx, 8
mov esi, str.InitialFailLog
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fe77
lea eax, [esp + 0x20]
push eax
call fcn.0041bfc8
add esp, 4
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.00422210
add esp, 0xc
push 0x104
lea eax, [esp + 0x63c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx ecx, word [esp + 0x16]
movzx edx, word [esp + 0x12]
movzx eax, word [esp + 0x10]
push ecx
push edx
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x648]
push edx
lea eax, [esp + 0x444]
push str._c_echo____date_____time_____s___Test_Write_Log_Fail________sFailLog__04u__02u__02u.log_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea ecx, [esp + 0x438]
push ecx
jmp 0x40fc98
push str.wmcInst.exe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x410170
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00422210
add esp, 0xc
xor eax, eax
jmp 0x40ff70
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x40ff70
lea ecx, [esp + 0x20]
push ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40ffa3
lea edx, [esp + 0x20]
push edx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40ffb0
mov ecx, dword [str.Public]
mov edx, dword [0x4377c8]
mov dword [eax], ecx
mov ecx, dword [0x4377cc]
mov dword [eax + 4], edx
mov edx, dword [0x4377d0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x40fffe
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410005
mov edx, dword [str.SMR7]
mov ecx, dword [0x43398c]
mov dword [eax], edx
mov edx, dword [0x433990]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x41004a
lea ecx, [esp + 0x20]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410051
mov edx, dword [str.Debug]
mov ecx, dword [0x437fe4]
mov dword [eax], edx
mov edx, dword [0x437fe8]
mov dword [eax + 4], ecx
mov cx, word [0x437fec]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x4100a1
lea eax, [esp + 0x20]
push eax
call fcn.0041bfc8
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x4100b0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4100b0
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x4100e7
lea edx, [esp + 0x20]
push edx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.00422210
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x648]
push ecx
push str._c_echo____date_____time_____s___Running_Exist________sFailLog__04u__02u__02u.log_
jmp 0x40fc7b
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x16aa]
push edx
mov word [esp + 0x16ac], cx
call fcn.00422210
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0xb5a1c0
lea eax, [esp + 0x16a4]
push str._s_run1.exe
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x16a0]
push 0
push ecx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x4101f3
lea edx, [esp + 0x16a0]
push edx
push 0x438260
push 0xb5b3f8
call ebx
add esp, 0xc
push 0xb5b3f8
call fcn.00403790
add esp, 4
lea esi, [esp + 0x16a0]
call fcn.00409a00
push 0x438278
call fcn.004039f0
add esp, 4
call fcn.0040d630
push 0x438288
mov word [0xb54be8], ax
call fcn.004039f0
add esp, 4
cmp dword [0xb57ce4], 0
je 0x4102ad
mov eax, dword [0xb568b0]
mov ecx, dword [0xb568ac]
mov edx, dword [0xb568b8]
push 0xb55e38
push 0xb55e18
push eax
mov eax, dword [0xb568b4]
push ecx
mov ecx, dword [0xb568a8]
push edx
mov edx, dword [0xb568a4]
push eax
mov eax, dword [0x43f6b4]
push ecx
mov ecx, dword [0xb568a0]
push edx
mov edx, dword [0xb5689c]
push eax
mov eax, dword [0xb56898]
push ecx
mov ecx, dword [0xb56894]
push edx
mov edx, dword [0xb56890]
push eax
mov eax, dword [0x43f3c4]
push ecx
push edx
push eax
push 0xb54bd0
push 0xb555f8
push 0xb54bf0
push str._b_tg_
push 0xb5b3f8
call ebx
push 0xb5b3f8
call fcn.00403790
add esp, 0x54
push 0xb59154
push 0x20000000
push 0
push 0x40eac0
push 0
push 0
call fcn.0041c8ff
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
add esp, 0x18
cmp dword [0xb57cd0], esi
jne 0x4102f6
lea ebx, [ebx]
cmp esi, 0x258
je 0x4102f6
push 0xa
call edi
inc esi
cmp dword [0xb57cd0], 0
je 0x4102e0
mov ax, word [0xb54be8]
cmp ax, 9
jne 0x410361
mov ecx, dword [0xb59150]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x4383f8
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410345
push 0x40010
push 0x437c04
push 0x438408
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00411000
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
test ax, ax
je 0x41037c
push 0xb54bf0
push 0x438428
push 0xb5b3f8
call ebx
add esp, 0xc
jmp 0x41038b
push 0x438448
push 0xb5b3f8
call ebx
add esp, 8
push 0xb5b3f8
call fcn.00403790
mov edx, dword [0xb59150]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 1
push 0x402
push edx
call edi
push 0x438464
call fcn.00403790
add esp, 4
call fcn.0040d9f0
push 0
test eax, eax
jne 0x410420
mov eax, dword [0xb59150]
push 0x64
push 0x402
push eax
call edi
push 0x438494
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410404
push 0x40000
push 0x4384bc
push str._rN_bT2
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00411000
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0xb59150]
push 0x14
push 0x402
push ecx
call edi
push 0x438528
call fcn.004039f0
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x14a2]
push eax
mov word [esp + 0x14a4], dx
call fcn.00422210
add esp, 0xc
push 0xb5a1c0
lea ecx, [esp + 0x149c]
push str._s_run2.exe
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x1498]
push 0
push edx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x4104ba
lea eax, [esp + 0x1498]
push eax
push 0x438554
push 0xb5b3f8
call ebx
add esp, 0xc
push 0xb5b3f8
call fcn.00403790
add esp, 4
lea esi, [esp + 0x1498]
call fcn.00409a00
push 0x43856c
call fcn.004039f0
add esp, 4
call fcn.0040df00
test eax, eax
jne 0x41052a
mov ecx, dword [0xb59150]
push eax
push 0x64
push 0x402
push ecx
call edi
push 0x438580
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x41050e
push 0x40040
push 0x4385c4
push str.uP_n0R
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00411000
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
push 0x438610
call fcn.004039f0
add esp, 4
push 0x438628
call fcn.00403790
add esp, 4
cmp word [0xb54be8], 2
jne 0x410567
push 0x6acfc0
mov edx, str.S.O.C.._Bg
mov ecx, str.C:UsersPublicSMR7WM7ClientPackage.cab
call fcn.00408d10
add esp, 4
jmp 0x4105b4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.00422210
add esp, 0xc
push str.Client.cab
push 0xb5a1c0
lea ecx, [esp + 0x640]
push str._s_s
push ecx
call ebx
add esp, 0x10
mov esi, str.C:UsersPublicSMR7WM7ClientPackage.cab
lea eax, [esp + 0x638]
call fcn.00409460
push 0x438658
call fcn.004039f0
add esp, 4
cmp word [0xb54be8], 0
je 0x4105db
call fcn.0040d090
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x438664
call fcn.004039f0
add esp, 4
mov esi, 0x4336f8
lea ecx, [ecx]
mov edx, dword [esi]
mov ecx, str.C:UsersPublicSMR7WM7installTemp_
call fcn.00409c50
test eax, eax
jne 0x410629
mov edx, dword [esi]
push edx
push 0x4386bc
push 0xb5b3f8
call ebx
add esp, 0xc
push 0xb5b3f8
call fcn.00403790
add esp, 4
mov dword [0x43f924], 0
add esi, 4
cmp esi, 0x433714
jl 0x4105f0
cmp word [0xb54be8], 0
jne 0x410673
mov eax, 0xb54bd0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410646
sub eax, edx
sar eax, 1
cmp eax, 9
je 0x410673
push 0x4386d8
call fcn.00403790
add esp, 4
mov dword [0x43f924], 0
jmp 0x41067c
cmp dword [0x43f924], 0
jne 0x4106d6
mov eax, dword [0xb59150]
push 0
push 0x64
push 0x402
push eax
call edi
push 0x438700
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x4106ba
push 0x40010
push str.pu8
push 0x438738
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00411000
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
push 0x43879c
call fcn.00403790
add esp, 4
push 0x4387ac
call fcn.004039f0
mov esi, 1
add esp, 4
cmp dword [0xb568b0], esi
jne 0x41074f
push 0x4387c0
call fcn.00403790
add esp, 4
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.00422210
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea eax, [esp + 0x63c]
push str._sWM7F.cab
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x638]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0xb57ce8
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x4107a9
push 0xb580f8
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x41077e
mov ecx, 0xb580f8
call fcn.004042f0
mov esi, 0xb57ef0
mov eax, 0xb57ce8
call fcn.00409460
push 0x438808
call fcn.00403790
add esp, 4
mov dword [0xb57cd4], 1
jmp 0x4109bd
cmp dword [0xb58f38], 0
jbe 0x4107fd
push 0xb580f8
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x4107ce
mov ecx, 0xb580f8
call fcn.004042f0
push 0x7d000
mov edx, str.X.X.R..
mov ecx, 0xb57ef0
call fcn.00408d10
add esp, 4
push 0x438808
call fcn.00403790
add esp, 4
mov dword [0xb57cd4], esi
jmp 0x4109bd
push 0x43881c
call fcn.00403790
add esp, 4
call fcn.004015d0
test eax, eax
jne 0x4109bd
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x43a]
push eax
mov word [esp + 0x43c], dx
call fcn.00422210
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x232]
push edx
mov word [esp + 0x234], cx
call fcn.00422210
add esp, 0xc
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.C:UsersPublicSMR7WM7installTemp]
mov word [esp + eax + 0x228], cx
add eax, 2
test cx, cx
jne 0x410860
lea eax, [esp + 0x228]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x41089c
lea ecx, [esp + 0x228]
push ecx
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x228]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4108a6
mov edx, dword [str.Policy]
mov ecx, dword [0x438834]
mov dword [eax], edx
mov edx, dword [0x438838]
mov dword [eax + 4], ecx
mov ecx, dword [0x43883c]
mov dword [eax + 8], edx
lea edx, [esp + 0x228]
push edx
mov dword [eax + 0xc], ecx
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x4108fa
lea eax, [esp + 0x228]
push eax
call fcn.0041bfc8
add esp, 4
lea eax, [esp + 0x228]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410904
mov ecx, dword [str.System]
mov edx, dword [0x438844]
mov dword [eax], ecx
mov ecx, dword [0x438848]
mov dword [eax + 4], edx
mov edx, dword [0x43884c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x228]
push eax
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x410958
lea ecx, [esp + 0x228]
push ecx
call fcn.0041bfc8
add esp, 4
push str.C:UsersPublicSMR7WM7installTemp
lea edx, [esp + 0x434]
push str._sPolicyContainer.opt
push edx
call ebx
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea eax, [esp + 0x22c]
push str._sPolicySystemPolicyContainer.opt
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x430]
push 0
push ecx
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x4109bd
lea esi, [esp + 0x228]
lea eax, [esp + 0x430]
call fcn.00409460
lea edx, [esp + 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x438850
call fcn.004039f0
add esp, 4
push 0
push 0xb58300
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x410a0f
push 0xb58710
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x4109f9
mov ecx, 0xb58710
call fcn.004042f0
mov esi, 0xb58508
mov eax, 0xb58300
call fcn.00409460
push 0x438864
jmp 0x410a57
cmp dword [0xb58f3c], 0
jbe 0x410a52
push 0xb58710
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x410a34
mov ecx, 0xb58710
call fcn.004042f0
push 0x2800
mov edx, str.B.O.T..
mov ecx, 0xb58508
call fcn.00408d10
add esp, 4
push 0x438864
jmp 0x410a57
push 0x438878
call fcn.00403790
add esp, 4
push 0x43888c
call fcn.004039f0
add esp, 4
push 0
push 0xb58918
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x410ab1
push 0xb58d28
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x410a9b
mov ecx, 0xb58d28
call fcn.004042f0
mov esi, 0xb58b20
mov eax, 0xb58918
call fcn.00409460
push 0x4388a4
jmp 0x410af9
cmp dword [0xb58f40], 0
jbe 0x410af4
push 0xb58d28
call fcn.0041c99f
add esp, 4
cmp eax, 0xffffffff
jne 0x410ad6
mov ecx, 0xb58d28
call fcn.004042f0
push 0x2800
mov edx, str.P.T.7..
mov ecx, 0xb58b20
call fcn.00408d10
add esp, 4
push 0x4388a4
jmp 0x410af9
push 0x4388c4
call fcn.00403790
add esp, 4
push 0x4388e4
call fcn.004039f0
mov eax, 0xb559f8
add esp, 4
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410b16
sub eax, edx
sar eax, 1
je 0x410b3b
push 0x438908
call fcn.00403790
add esp, 4
call fcn.0040dd10
jmp 0x410b48
push 0x43893c
call fcn.00403790
add esp, 4
push 0x438954
call fcn.004039f0
mov eax, dword [0xb59150]
add esp, 4
push 0
push 0x19
push 0x402
push eax
call edi
cmp dword [0xb568bc], 1
jne 0x410c03
push 0x438988
call fcn.00403790
add esp, 4
call fcn.00408c90
call fcn.0040cf20
test al, al
jne 0x410be9
mov ecx, dword [0xb59150]
push 0
push 0x64
push 0x402
push ecx
call edi
push 0x4389c0
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410bcd
push 0x40010
push 0x4384bc
push 0x4389f0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00411000
mov ecx, dword [esp + 0x22b4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041a70e
mov esp, ebp
pop ebp
ret 0x10
push 0x438a4c
call fcn.00403790
add esp, 4
push 0x438a64
call fcn.004039f0
add esp, 4
mov edx, dword [0xb59150]
push 0
push 0x32
push 0x402
push edx
call edi
call fcn.00413ff0
push 0x438a84
call fcn.004039f0
add esp, 4
push 0x438a94
call fcn.00403790
add esp, 4
call fcn.004112f0
push 0x438aac
call fcn.004039f0
add esp, 4
push 0x438ac0
call fcn.00403790
add esp, 4
call fcn.0040bf60
push 0
push 0x4e
mov esi, eax
mov eax, dword [0xb59150]
push 0x402
push eax
call edi
push str.SetupClient
call fcn.004039f0
add esp, 4
push 0
push 0
push str.C:UsersPublicSMR7WM7installTemp
call fcn.00404730
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push str.C:UsersPublicSMR7WM7ClientPackage.cab
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x438b18
call fcn.00403790
mov ecx, dword [0xb59150]
add esp, 4
push 0
push 0x50
push 0x402
push ecx
call edi
push 0x438b28
call fcn.004039f0
add esp, 4
test esi, esi
jne 0x410d60
push 0x438b38
call fcn.00403790
add esp, 4
call fcn.00408c90
mov edx, dword [0xb59150]
push esi
push 0x5a
push 0x402
push edx
call edi
call fcn.00414c10
mov eax, dword [0xb59150]
push esi
push 0x64
push 0x402
push eax
call edi
mov ecx, dword [0xb59154]
push esi
push esi
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x43f96c], 1
jne 0x410d2c
push 0x438b7c
jmp 0x410d31
push 0x438bb0
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410d59
push 0x40010
push 0x4384bc
push 0x438bf8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0041c62e
mov esi, 1
cmp dword [0xb568bc], esi
jne 0x410d9d
push 0x438c58
call fcn.00403790
add esp, 4
call fcn.00413250
push 0x438c70
call fcn.00403790
add esp, 4
call fcn.00408040
push 0x438c8c
call fcn.004039f0
jmp 0x410da7
push 0x438cc0
call fcn.00403790
add esp, 4
push esi
call fcn.004122d0
mov edx, dword [0xb59150]
add esp, 4
push 0
push 0x55
push 0x402
push edx
call edi
push 0x438cd0
call fcn.004039f0
add esp, 4
push 0x438ce0
call fcn.00403790
add esp, 4
call fcn.004031a0
test eax, eax
jne 0x410e7c
push 0x438cf4
call fcn.00403790
add esp, 4
call fcn.00408c90
mov eax, dword [0xb59150]
push 0
push 0x5a
push 0x402
push eax
call edi
call fcn.00414c10
mov ecx, dword [0xb59150]
push 0
push 0x64
push 0x402
push ecx
call edi
mov edx, dword [0xb59154]
push 0
push 0
push 0x12
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x43f96c], esi
jne 0x410e48
push 0x438b7c
jmp 0x410e4d
push 0x438bb0
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410e75
push 0x40010
push 0x4384bc
push 0x438d18
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0041c62e
cmp word [0xb54be8], 3
jb 0x410e98
call fcn.0040bb10
push 0x438d58
call fcn.004039f0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x18b2]
push ecx
mov word [esp + 0x18b4], ax
call fcn.00422210
add esp, 0xc
push 0xb5a1c0
lea edx, [esp + 0x18ac]
push str._s_run3.exe
push edx
call ebx
add esp, 0xc
lea eax, [esp + 0x18a8]
push 0
push eax
call fcn.0041ad6e
add esp, 8
test eax, eax
jne 0x410f1a
lea ecx, [esp + 0x18a8]
push ecx
push 0x438d88
push 0xb5b3f8
call ebx
add esp, 0xc
push 0xb5b3f8
call fcn.00403790
add esp, 4
lea esi, [esp + 0x18a8]
call fcn.00409a00
mov esi, 1
push 0x438da4
call fcn.004039f0
add esp, 4
cmp dword [0x43f3c4], esi
jne 0x410f9a
cmp dword [0xb56890], esi
jne 0x410f9a
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.00422210
add esp, 0xc
push 0xb5b1f0
lea ecx, [esp + 0x63c]
push str._spcinfo7.exe
push ecx
call ebx
add esp, 0xc
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0xb5b1f0
push 0x4301b4
lea edx, [esp + 0x644]
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [0xb59150]
push 0
push 0x64
push 0x402
push eax
call edi
mov ecx, dword [0xb59154]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x438db4
call fcn.00403790
add esp, 4
cmp dword [0x43f3c4], 0
je 0x410feb
push 0x40000
push 0x438ddc
push 0x438de4
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0041c62e
int3