Function at 0x407a69
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Check os version
Copy file
Create process on windows
Delete file
Read .ini file
Terminate process

Disassembly:
mov eax, 0x41a84b
call fcn.00410f20
sub esp, 0xf50
mov eax, dword [0x4240b8]
push ebx
push esi
push edi
xor esi, esi
push esi
push esi
push 0x400
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push esi
push esi
push esi
lea eax, [ebp - 0xf38]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
jae 0x407aec
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
cmp eax, 0x404
push esi
push esi
je 0x407adb
cmp eax, 0x804
je 0x407ad4
push str.You_need_Windows_2000_XP_or_higher_version_to_run_Lava_Lava.
jmp 0x407ae0
push 0x41f640
jmp 0x407ae0
push 0x41f5e0
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x408772
push str.Riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov eax, dword [ebp + 8]
mov dword [0x4258f0], eax
call fcn.00409aa9
mov ebx, dword [ebp + 0x10]
push ebx
push str._n_n_t_tLlsetup_Version2007_10_8_nlpCmdLine_s_n
call fcn.00409adb
push 0x6f
lea ecx, [ebp - 0xf14]
call fcn.00407109
add esp, 0xc
test eax, eax
je 0x407b3c
push dword [ebp - 0xf14]
call fcn.0040a136
test eax, eax
jge 0x407b43
push 0xfffffffffffffffe
call fcn.0040f8d0
push 0
call fcn.0040a4f7
push 0x6d
lea ecx, [ebp - 0xf14]
call fcn.00407109
test eax, eax
pop ecx
je 0x407bf8
mov edi, dword [ebp - 0xf14]
lea eax, [edi + 4]
mov cx, word [eax]
cmp cx, 0x66
je 0x407b7f
cmp cx, 0x46
je 0x407b7f
push eax
call fcn.0040f2fa
pop ecx
mov dword [0x425f10], eax
jmp 0x407b86
or dword [0x425f10], 0xffffffff
mov word [edi + 2], 0x20
cmp dword [0x425f10], 1
jne 0x407bf8
push 0x61
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x407bf8
push 0x104
lea eax, [ebp - 0x420]
push eax
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x420]
push 0x5c
push eax
call fcn.0040f2ff
pop ecx
pop ecx
push dword [0x424de4]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x420]
push eax
push 0x41da78
push dword [0x424dec]
push dword [0x424de8]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x407bfa
xor edi, edi
cmp dword [0x425f10], edi
jne 0x407c40
push edi
push edi
push edi
push str.DownloadNow
push str.FullVersion
call fcn.004079ea
xor ecx, ecx
inc ecx
add esp, 0x14
cmp eax, ecx
jne 0x407c26
mov dword [0x425f10], ecx
jmp 0x407c40
push edi
push edi
push edi
push str.Type
push 0x41f4b4
call fcn.004079ea
add esp, 0x14
mov dword [0x425f10], eax
push 0x66
lea ecx, [ebp - 0xf14]
call fcn.00407109
test eax, eax
pop ecx
je 0x407d39
mov eax, dword [ebp - 0xf14]
add eax, 4
push eax
call fcn.0040f2fa
cmp eax, 1
pop ecx
jne 0x407c8d
xor ecx, ecx
call fcn.0040733a
test eax, eax
lea eax, [ebp - 0x420]
je 0x407c86
push 0x41f4b0
jmp 0x407d0c
push 0x41fb5c
jmp 0x407d0c
cmp eax, 2
jne 0x407d01
push 0
xor ecx, ecx
lea ebx, [ebp + 0x10]
call fcn.004071d9
pop ecx
mov dword [ebp - 4], 3
mov esi, dword [ebp + 0x10]
xor edi, edi
cmp dword [esi - 0xc], edi
jne 0x407cc5
lea eax, [ebp - 0x420]
push 0x41f4ac
push eax
call fcn.0040dc50
pop ecx
pop ecx
jmp 0x407cf3
push 0x4259c0
lea eax, [ebp + 0x10]
push eax
call fcn.004047bc
mov esi, dword [ebp + 0x10]
push edi
push edi
push 0x208
lea eax, [ebp - 0x420]
push eax
push 0xffffffffffffffff
push esi
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
or dword [ebp - 4], 0xffffffff
lea eax, [esi - 0x10]
call fcn.0040252d
jmp 0x407d14
push 0x41f4ac
lea eax, [ebp - 0x420]
push eax
call fcn.0040dc50
pop ecx
pop ecx
lea eax, [ebp - 0x420]
push eax
call fcn.0040f910
lea eax, [ebp - 0x420]
push eax
push str._f_return_S_n
call fcn.00409adb
add esp, 0xc
jmp 0x408772
call fcn.0040b532
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.LVLV_221.EXE
call esi
mov ebx, dword [ebp + 0x10]
push 0x72
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x407d6b
push ebx
call fcn.004074ad
xor eax, eax
pop ecx
inc eax
jmp 0x40887a
push dword [0x424ccc]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x425a88
lea eax, [ebp - 0x218]
push eax
call edi
cmp dword [0x425f10], 0
je 0x407dce
push 0x41f488
lea eax, [ebp - 0x218]
push eax
call edi
push 0xa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp + eax*2 - 0x218]
push eax
push dword [0x425f10]
call fcn.0040f3a3
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x407dfe
test ebx, ebx
je 0x407dfe
mov dword [ebp - 0xf18], 1
jmp 0x407e05
and dword [ebp - 0xf18], 0
push dword [ebp - 0xf18]
push str.bExistMutex_d_n
call fcn.00409adb
cmp dword [ebp - 0xf18], 0
pop ecx
pop ecx
je 0x407e78
call fcn.00407723
test al, al
jne 0x407e78
mov ebx, dword [ebp + 0x10]
push 0x69
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x407e78
test ebx, ebx
je 0x407e6d
cmp word [ebx], ax
je 0x407e6d
push 0x71
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x407e63
push 0x72
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x408772
call fcn.0040b550
jmp 0x408772
push ebx
call fcn.00408a85
jmp 0x408772
mov ebx, dword [ebp + 0x10]
push 0x71
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x407ebd
xor esi, esi
lea eax, [ebp + 0x10]
push esi
push eax
call fcn.00404c6e
mov eax, dword [ebp + 0x10]
cmp dword [eax - 0xc], esi
pop ecx
pop ecx
je 0x407eab
push esi
call fcn.0040bb29
cmp eax, 2
je 0x407eab
inc esi
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
call fcn.0040252d
mov eax, esi
jmp 0x40887a
mov ebx, dword [ebp + 0x10]
push 0x67
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x407f55
push 0x20
push ebx
call fcn.0040f279
pop ecx
pop ecx
mov esi, eax
jmp 0x407ee2
inc esi
inc esi
cmp word [esi], 0x20
je 0x407ee0
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0xf5c]
mov ecx, esi
call fcn.00403313
mov ebx, eax
push esi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..CRC
lea eax, [ebp - 0x218]
push eax
call edi
lea eax, [ebp - 0x218]
push 0x41f454
push eax
call fcn.0040fa0d
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x408772
push dword [ebp - 0xf48]
push ebx
push esi
push str._s_u_u60000000
push edi
call fcn.0040fa20
push edi
call fcn.0040faca
add esp, 0x18
jmp 0x408772
mov ebx, dword [ebp + 0x10]
push 0x6a
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x407f7a
push 0
push dword [ebp + 8]
push 2
pop ecx
call fcn.0040d0b3
pop ecx
pop ecx
jmp 0x40887a
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
push str._______Self_Program_s_n
call fcn.00409adb
pop ecx
pop ecx
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0xd08]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0xd08]
push eax
call edi
lea eax, [ebp - 0xd08]
push eax
call esi
call fcn.0040c7f6
mov ebx, dword [ebp + 0x10]
push 0x69
xor ecx, ecx
call fcn.00407109
xor ebx, ebx
test eax, eax
pop ecx
je 0x408175
push ebx
push ebx
push ebx
push str.ForbidInstallIfFullVerExist
mov esi, 0x41f4b4
push esi
call fcn.004079ea
add esp, 0x14
cmp eax, 1
jne 0x408081
mov edi, 0x104
push edi
lea eax, [ebp - 0x8f8]
push eax
push ebx
call fcn.0040aaa0
test eax, eax
je 0x408081
lea eax, [ebp - 0x8f8]
push eax
call fcn.0040aa1a
test eax, eax
pop ecx
je 0x408081
push edi
lea eax, [ebp - 0xb00]
push eax
push 1
push str.MsgTextForbidInstall
push esi
call fcn.004079ea
push edi
lea eax, [ebp - 0x420]
push eax
push 1
push str.MsgTtitleForbidInstall
push esi
call fcn.004079ea
add esp, 0x28
push 0x10
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0xb00]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 5
push str.uninst.exe__u
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x408772
lea eax, [ebp - 0x218]
push eax
push str.CheckAndRun_SetRegister_:_s_n
call fcn.00409adb
pop ecx
pop ecx
call fcn.0040c9aa
lea eax, [ebp - 0x218]
push 0x5c
push eax
call fcn.0040f2ff
cmp eax, ebx
pop ecx
pop ecx
je 0x4080b1
mov word [eax + 2], bx
lea esi, [ebp - 0x218]
call fcn.0040aefe
lea eax, [ebp - 0xf14]
push 1
push eax
call fcn.00404c6e
pop ecx
pop ecx
mov dword [ebp - 4], 4
push dword [0x424cec]
lea eax, [ebp - 0xf14]
push eax
call fcn.004047bc
push dword [ebp - 0xf14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xf1c]
push ebx
push eax
call fcn.00404c6e
pop ecx
pop ecx
lea edi, [ebp - 0xf14]
mov byte [ebp - 4], 5
call fcn.0040466e
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xf1c]
add eax, 0xfffffff0
call fcn.0040252d
push dword [0x424cec]
mov eax, edi
push eax
call fcn.004047bc
push dword [ebp - 0xf14]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push dword [0x424cd4]
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 0xf18], ebx
je 0x408163
mov eax, dword [ebp - 0xf14]
add eax, 0xfffffff0
call fcn.0040252d
jmp 0x408772
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xf14]
add eax, 0xfffffff0
call fcn.0040252d
mov edi, dword [ebp + 0x10]
cmp edi, ebx
je 0x40818f
cmp word [edi], bx
je 0x40818f
push 0x73
xor ecx, ecx
mov ebx, edi
call fcn.00407109
pop ecx
xor ebx, ebx
push 1
mov esi, 0x425f18
push esi
call fcn.00404126
movzx eax, al
push eax
push str.nExistInstall_d_n
mov dword [ebp - 0xf14], eax
call fcn.00409adb
cmp dword [ebp - 0xf14], ebx
pop ecx
pop ecx
jne 0x4081ca
push ebx
push esi
call fcn.00404126
movzx eax, al
mov dword [ebp - 0xf14], eax
push dword [ebp - 0xf14]
push str.nExistLocalUpdateFile_d_n
call fcn.00409adb
mov eax, dword [0x425f10]
xor esi, esi
inc esi
cmp dword [ebp - 0xf14], esi
pop ecx
pop ecx
jne 0x40829e
cmp eax, 0xffffffff
je 0x408568
cmp eax, esi
je 0x4085c7
call fcn.00407485
call fcn.0040ac5b
test eax, eax
jg 0x40823e
push 0x63
xor ecx, ecx
mov ebx, edi
call fcn.00407109
test eax, eax
pop ecx
jne 0x40823c
call fcn.00407723
test al, al
jne 0x40823c
push 0x61
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x408772
jmp 0x4082b7
xor ebx, ebx
call fcn.0040778b
push 0x104
lea esi, [ebp - 0xb00]
call fcn.0040ac0b
test eax, eax
je 0x4085d8
mov eax, esi
push eax
push dword [ebp + 8]
push 3
pop ecx
call fcn.0040d0b3
test eax, eax
pop ecx
pop ecx
jg 0x408772
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x408772
push 0x61
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x408772
mov edi, ebx
jmp 0x4082b7
cmp eax, ebx
jle 0x4082ac
push 2
pop ebx
call fcn.004078f5
jmp 0x4082b7
cmp eax, 0xffffffff
jne 0x4082b7
mov dword [0x425f10], esi
push 0x63
xor ecx, ecx
mov ebx, edi
call fcn.00407109
test eax, eax
pop ecx
jne 0x4084a4
push 0x61
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x4084a4
push 0x71
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
jne 0x4084a4
push 0x73
xor ecx, ecx
call fcn.00407109
xor esi, esi
test eax, eax
pop ecx
jne 0x408308
cmp word [edi], si
jne 0x4083b9
push esi
call fcn.0040c11e
test eax, eax
jne 0x4083b9
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x8f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x8f8]
push 0x5c
push eax
call fcn.0040f2ff
cmp eax, esi
pop ecx
pop ecx
je 0x4083b9
push str._appdataconfAutoLogin.ini
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x8f8]
push eax
push ebx
lea eax, [ebp - 0x420]
push eax
push esi
push str.AUTO_LOGIN_GIDs
push str.GENERAL
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x420]
push eax
push str.AutoLogin.ini_s_n
call fcn.00409adb
cmp word [ebp - 0x420], si
pop ecx
pop ecx
je 0x4083b9
lea eax, [ebp - 0x420]
cmp word [eax], 0x2c
jne 0x408397
mov word [eax], 0x20
inc eax
inc eax
cmp word [eax], si
jne 0x40838c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x41f1d4
push edi
call esi
lea eax, [ebp - 0x420]
push eax
lea eax, [edi + 6]
push eax
call esi
push 0x4c
xor ecx, ecx
mov ebx, edi
call fcn.00407109
test eax, eax
pop ecx
je 0x408463
mov esi, 0x41f1cc
lea edi, [ebp - 0x4e8]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x30
pop ecx
xor eax, eax
lea edi, [ebp - 0x4e2]
rep stosd dword es:[edi], eax
push 0x20
push dword [ebp + 0x10]
stosw word es:[edi], ax
call fcn.0040f279
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x408485
jmp 0x408404
inc esi
inc esi
cmp word [esi], 0x20
je 0x408402
push 0x20
push esi
call fcn.0040f279
mov edi, eax
mov ax, word [esi]
cmp ax, 0x2f
pop ecx
pop ecx
je 0x40845b
cmp ax, 0x2d
je 0x40845b
test edi, edi
jne 0x408439
push esi
lea eax, [ebp - 0x4e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x40844f
mov eax, edi
sub eax, esi
sar eax, 1
inc eax
push eax
push esi
lea eax, [ebp - 0x4e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x4e8]
push eax
call fcn.00408a85
test edi, edi
mov esi, edi
jne 0x408404
jmp 0x408485
push edi
call fcn.00408a85
test eax, eax
je 0x4085eb
push 0x64
xor ecx, ecx
mov ebx, edi
call fcn.00407109
test eax, eax
pop ecx
jne 0x4085eb
call fcn.0040ac5b
push eax
push str.GetLastCheckDiff_d_n
call fcn.00409adb
pop ecx
pop ecx
call fcn.0040ac5b
test eax, eax
jle 0x408772
cmp dword [ebp - 0xf14], 1
je 0x408772
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x4084d4
push 0x14
pop eax
cmp dword [0x424c70], eax
jle 0x4084d4
mov dword [0x424c70], eax
jmp 0x4084d9
call fcn.00407485
push 0
mov esi, 0x425f18
push esi
call fcn.00404dd2
test eax, eax
jge 0x40852d
push 0x63
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x408503
push 0
push 0x6a
push 0
call fcn.00409edf
push str.Network_is_disconnect._n
call fcn.00409adb
pop ecx
push 0
push 0x425f18
call fcn.00404126
movzx eax, al
test eax, eax
mov dword [ebp - 0xf14], eax
je 0x408772
jmp 0x40855e
je 0x408620
push eax
push str.nUpdateFiles_d_n
call fcn.00409adb
pop ecx
pop ecx
push 0
mov edi, 0x425f18
push edi
call fcn.00404126
movzx eax, al
test eax, eax
mov dword [ebp - 0xf14], eax
je 0x40864a
mov edi, dword [ebp + 0x10]
xor ebx, ebx
jmp 0x4081ca
mov eax, dword [0x425f1c]
mov eax, dword [eax]
push dword [eax + 0x38]
push str.g_nMiniType___1_g_FileList_s_n
call fcn.00409adb
pop ecx
pop ecx
push str.llsetup.ini
push ebx
push str.AskUser
push str.FullVersion
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, esi
push ebx
jne 0x4085ad
mov eax, dword [0x425f1c]
mov eax, dword [eax]
mov ebx, dword [eax + 0x38]
call fcn.0040bf9e
jmp 0x408772
call fcn.0040bb29
cmp eax, esi
jne 0x408772
push 4
pop ebx
call fcn.004078f5
jmp 0x408772
mov ebx, esi
call fcn.004078f5
push 0x41da74
jmp 0x407e6e
push ebx
push dword [ebp + 8]
push 2
pop ecx
call fcn.0040d0b3
pop ecx
pop ecx
jmp 0x408772
cmp dword [ebp - 0xf18], 0
jne 0x408772
push 0x104
lea esi, [ebp - 0xf10]
call fcn.0040ac0b
test eax, eax
je 0x408616
call fcn.0040778b
mov eax, esi
push eax
jmp 0x408618
push 0
push dword [ebp + 8]
xor ecx, ecx
inc ecx
jmp 0x4085df
push 0x63
xor ecx, ecx
call fcn.00407109
test eax, eax
pop ecx
je 0x408639
push 0
push 0x74
push 0
call fcn.00409edf
call fcn.00407485
push str.Need_not_update._n
call fcn.00409adb
jmp 0x4085e5
mov eax, dword [ebp + 8]
call fcn.00408dae
sub esp, 0x21c
mov eax, esi
mov ebx, esp
mov dword [ebp - 0xf1c], esp
call fcn.00408893
mov ebx, dword [ebp + 8]
call fcn.00408b90
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
add esp, 0x21c
xor ebx, ebx
jmp 0x408699
lea eax, [ebp - 0xf38]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xf38]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
lea eax, [ebp - 0xf38]
push ebx
push eax
call esi
test eax, eax
jne 0x40867f
push edi
call fcn.00403968
cmp eax, 0x64
jne 0x408772
push ebx
mov ecx, edi
call fcn.00403fc5
cmp dword [0x425f10], 1
jne 0x4086d0
push 9
jmp 0x4085bc
push 0x104
lea eax, [ebp - 0x6f0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x6f0]
push 0x5c
push eax
call fcn.0040f2ff
mov esi, eax
movzx eax, byte [0x425f28]
push eax
inc esi
push str.g_FileList.m_bExitLava_is__d_._n
inc esi
call fcn.00409adb
add esp, 0x10
cmp byte [0x425f28], bl
jne 0x408779
mov word [esi], bx
xor esi, esi
mov eax, dword [0x425f1c]
cmp eax, ebx
je 0x408769
mov ecx, dword [0x425f20]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x408769
lea eax, [eax + esi*4]
mov eax, dword [eax]
lea ecx, [ebp - 0x6f0]
push ecx
push dword [eax + 0x38]
push str.ExecuteUpdate__RunSfxSetup__s_at__s._n
call fcn.00409adb
mov eax, dword [0x425f1c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov ebx, dword [eax + 0x38]
add esp, 0xc
lea ecx, [ebp - 0x6f0]
push ecx
call fcn.0040bf9e
inc esi
xor ebx, ebx
jmp 0x408717
push 1
mov ecx, edi
call fcn.00403fc5
xor eax, eax
jmp 0x40887a
xor edi, edi
push dword [edi + 0x424cf8]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x6f0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add edi, 4
cmp edi, 0xc
jb 0x40877b
mov word [esi], bx
mov eax, dword [0x425f1c]
cmp eax, ebx
jne 0x4087ad
xor edi, edi
jmp 0x4087b8
mov edi, dword [0x425f20]
sub edi, eax
sar edi, 2
xor esi, esi
cmp edi, ebx
jle 0x40885f
jmp 0x4087c9
mov eax, dword [0x425f1c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
lea ecx, [ebp - 0x6f0]
push ecx
push dword [eax + 0x38]
push str.Find_whatsnew.exe__RunSfxSetup__s_at__s._n
call fcn.00409adb
mov eax, dword [0x425f1c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
push str.whatsnew
push eax
call fcn.0040f48b
add esp, 0x14
test eax, eax
je 0x408856
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.whatsnewtmp.exe
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [0x425f1c]
push ebx
lea eax, [eax + esi*4]
mov eax, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
push dword [eax + 0x38]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x6f0]
push eax
lea ebx, [ebp - 0x218]
call fcn.0040bf9e
xor ebx, ebx
inc esi
cmp esi, edi
jl 0x4087c4
push 0x41efc8
call fcn.00409adb
pop ecx
call fcn.00407485
call fcn.0040778b
mov eax, dword [ebp - 0xf30]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00410727
pop edi
pop esi
pop ebx
leave
ret 0x10