Function at 0x4121d0
Capabilities:
Check mutex on windows
Copy file
Create process on windows
Create thread
Delete directory
Delete file
Print debug messages
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x24b4
call fcn.0042b0f0
mov eax, dword [0x446044]
xor eax, esp
mov dword [esp + 0x24b0], eax
push ebx
push esi
push edi
push 0x220
push 0
push 0xc8cee8
call fcn.00426670
mov eax, dword [ebp + 0x10]
mov edx, 0xc9ff80
add esp, 0xc
sub edx, eax
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x412210
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push str.C:TempwmcInst.ini
push 0
push str.Time
push 0x43e474
call esi
push str.C:TempwmcInst.ini
push 0
push 0x43e480
push 0x43e474
mov dword [0xc9ce68], eax
call esi
mov dword [0xc9ce6c], eax
mov eax, dword [ebp + 8]
mov dword [0xc9e2d8], eax
mov eax, 0xc9ff80
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x412265
sub eax, edx
sar eax, 1
je 0x412f3a
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._ManualUpdate__Elevate_CmdLine_
call edi
mov esi, 0xc9ff80
call fcn.0040aac0
push str._unrar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x412322
push str.wmcInst.exe_Command_to_Write_Package_File.
call edi
push 0x788b60
mov edx, str.S.O.C..
mov ecx, 0x43e530
call fcn.0040a310
add esp, 4
push 0xc800
mov edx, str.A.K.S..
mov ecx, str.ManualUpdate.dat
call fcn.0040a310
add esp, 4
push 0x7d000
mov edx, str.X.X.R..
mov ecx, 0x43543c
call fcn.0040a310
add esp, 4
push 0x2800
mov edx, str.B.O.T..
mov ecx, 0x435418
call fcn.0040a310
add esp, 4
push 0x2800
mov edx, str.P.T.7..
mov ecx, str.Presto_7.ini
call fcn.0040a310
add esp, 4
jmp 0x412ef6
push str._add
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4128d2
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xe62]
push ecx
mov word [esp + 0xe64], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xff2]
push eax
mov word [esp + 0xff4], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x1182]
push edx
mov word [esp + 0x1184], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1312]
push ecx
mov word [esp + 0x1314], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x43a]
push eax
mov word [esp + 0x43c], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x84a]
push edx
mov word [esp + 0x84c], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x232]
push edx
mov word [esp + 0x234], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x642]
push ecx
mov word [esp + 0x644], ax
call fcn.00426670
add esp, 0xc
push 0x104
lea edx, [esp + 0x434]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x430]
mov word [esp + eax + 0x840], cx
add eax, 2
test cx, cx
jne 0x4124b0
lea eax, [esp + 0x840]
push 0x5c
push eax
call fcn.0041ed71
add esp, 8
test eax, eax
je 0x4124f5
lea ecx, [esp + 0x840]
push 0x5c
push ecx
call fcn.0041ed71
add esp, 8
xor edx, edx
mov word [eax], dx
xor eax, eax
jmp 0x412500
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x412500
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0x638], cx
add eax, 2
test cx, cx
jne 0x412520
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041ed71
add eax, 2
lea edx, [esp + 0xc58]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x412556
lea ecx, [esp + 0xc50]
push 0x28
push ecx
call fcn.0041ed71
add esp, 8
test eax, eax
je 0x4125a6
push 4
push 0x43e578
push eax
call fcn.00420b56
add esp, 0xc
test eax, eax
jne 0x4125a6
lea edx, [esp + 0xc50]
push 0x28
push edx
call fcn.0041ed71
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0x638]
push 0x5c
push edx
call fcn.0041ed71
add esp, 8
test eax, eax
je 0x4125d3
lea eax, [esp + 0x638]
push 0x5c
push eax
call fcn.0041ed71
add esp, 8
xor ecx, ecx
mov word [eax], cx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [esp + 0xc50]
push edx
lea eax, [esp + 0x63c]
push eax
lea ecx, [esp + 0xa50]
push str._s_s.exe
push ecx
call esi
add esp, 0x10
push 0
lea edx, [esp + 0xa4c]
push edx
lea eax, [esp + 0x438]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea ecx, [esp + 0xa4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [esp + 0x840]
push edx
lea eax, [esp + 0x22c]
push str._sClient.cab
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x228]
push 0
push ecx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x4126bc
lea edx, [esp + 0xa48]
push edx
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x4126bc
xor eax, eax
jmp 0x412690
movzx ecx, word [eax + 0x43e530]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x412690
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x4126b0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4126b0
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x41273d
lea eax, [esp + 0xa48]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x41273d
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x412710
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412731
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x4127bd
lea eax, [esp + 0xa48]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x4127bd
xor eax, eax
nop
movzx ecx, word [eax + 0x43543c]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x412790
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4127b1
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x41283d
lea eax, [esp + 0xa48]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x41283d
xor eax, eax
nop
movzx ecx, word [eax + 0x435418]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x412810
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412831
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412ef6
lea eax, [esp + 0xa48]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412ef6
xor eax, eax
jmp 0x4128a0
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x4128a0
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4128c1
jmp 0x412ef6
push str._rar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x412ecd
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x1cc2]
push ecx
xor esi, esi
mov word [esp + 0x1cc4], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xe62]
push edx
mov word [esp + 0xe64], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xff2]
push ecx
mov word [esp + 0xff4], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x1182]
push eax
mov word [esp + 0x1184], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x1312]
push edx
mov word [esp + 0x1314], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x84a]
push ecx
mov word [esp + 0x84c], ax
call fcn.00426670
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x232]
push eax
mov word [esp + 0x234], dx
call fcn.00426670
add esp, 0xc
push 0x104
lea ecx, [esp + 0xc54]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0xc50]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x412a60
lea edx, [esp + 0xa48]
push 0x5c
push edx
call fcn.0041ed71
add esp, 8
test eax, eax
je 0x412aa5
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041ed71
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xc50]
push 0x5c
push edx
call fcn.0041ed71
add eax, 2
lea edx, [esp + 0x640]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x412ac3
lea eax, [esp + 0x638]
push 0x2e
push eax
call fcn.0041ed71
add esp, 8
test eax, eax
je 0x412aff
lea ecx, [esp + 0x638]
push 0x2e
push ecx
call fcn.0041ed71
add esp, 8
xor edx, edx
mov word [eax], dx
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x638]
push eax
lea ecx, [esp + 0xa4c]
push ecx
lea edx, [esp + 0x848]
push str._s_s_
push edx
call edi
add esp, 0x10
push 0
lea eax, [esp + 0x844]
push eax
lea ecx, [esp + 0xc58]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea edx, [esp + 0x844]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sClient.cab
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412bf4
lea eax, [esp + 0x840]
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412bf4
xor eax, eax
jmp 0x412bb0
movzx ecx, word [eax + 0x43e530]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x412bb0
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x412bd0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412bd0
mov ecx, dword [0x43e5a0]
mov dx, word [0x43e5a4]
mov dword [eax], ecx
mov word [eax + 4], dx
mov esi, 1
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412c91
lea eax, [esp + 0x840]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412c91
xor eax, eax
jmp 0x412c50
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x412c50
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412c71
mov ecx, dword [0x43e5a0]
mov dx, word [0x43e5a4]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412d31
lea eax, [esp + 0x840]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412d31
xor eax, eax
jmp 0x412cf0
movzx ecx, word [eax + 0x43543c]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x412cf0
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412d11
mov ecx, dword [0x43e5a0]
mov dx, word [0x43e5a4]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412dd1
lea eax, [esp + 0x840]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412dd1
xor eax, eax
jmp 0x412d90
movzx ecx, word [eax + 0x435418]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x412d90
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412db1
mov ecx, dword [0x43e5a0]
mov dx, word [0x43e5a4]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x412e71
lea eax, [esp + 0x840]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.0040a580
add esp, 4
test eax, eax
je 0x412e71
xor eax, eax
jmp 0x412e30
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x412e30
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412e51
mov ecx, dword [0x43e5a0]
mov dx, word [0x43e5a4]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0x840]
push eax
push esi
lea ecx, [esp + 0x1310]
push ecx
lea edx, [esp + 0x1184]
push edx
lea eax, [esp + 0xff8]
push eax
lea ecx, [esp + 0xe6c]
push ecx
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x1cd4]
push str._s_s_s_s_s_r_n
push eax
call edi
add esp, 0x24
push 0x40040
push 0x43e6f4
lea ecx, [esp + 0x1cc0]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x412ef6
push str._SmrInstallTerminate_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x412f12
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst___Install_terminate___Clear_Temp_
call edi
call fcn.0040f770
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x24b0]
xor ecx, esp
call fcn.0041e7be
mov esp, ebp
pop ebp
ret 0x10
push str._SmrInstallSuccess_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4132c5
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst__Install_Success__Clear_Temp_
jmp 0x412eef
call fcn.004113c0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x14a2]
push eax
mov word [esp + 0x14a4], dx
call fcn.00426670
add esp, 0xc
xor eax, eax
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x1498], cx
add eax, 2
test cx, cx
jne 0x412f61
lea ecx, [esp + 0x1498]
push ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x412f9d
lea edx, [esp + 0x1498]
push edx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x1498]
add eax, 0xfffffffe
jmp 0x412fb0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412fb0
mov ecx, dword [str.Public]
mov edx, dword [0x43df70]
mov dword [eax], ecx
mov ecx, dword [0x43df74]
mov dword [eax + 4], edx
mov edx, dword [0x43df78]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x1498]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413004
lea ecx, [esp + 0x1498]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x1498]
add eax, 0xfffffffe
mov edi, edi
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413010
mov edx, dword [str.SMR7]
mov ecx, dword [0x43925c]
mov dword [eax], edx
mov edx, dword [0x439260]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x1498]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41305b
lea ecx, [esp + 0x1498]
push ecx
call fcn.00420106
add esp, 4
call fcn.0040f7a0
test eax, eax
jne 0x4132de
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00426670
add esp, 0xc
xor eax, eax
jmp 0x413090
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x413090
lea ecx, [esp + 0x20]
push ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4130c3
lea edx, [esp + 0x20]
push edx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4130d0
mov ecx, dword [str.Public]
mov edx, dword [0x43df70]
mov dword [eax], ecx
mov ecx, dword [0x43df74]
mov dword [eax + 4], edx
mov edx, dword [0x43df78]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41311e
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413125
mov edx, dword [str.SMR7]
mov ecx, dword [0x43925c]
mov dword [eax], edx
mov edx, dword [0x439260]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41316a
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413171
mov edx, dword [0x43e7d8]
mov ecx, dword [0x43e7dc]
mov dword [eax], edx
mov edx, dword [0x43e7e0]
mov dword [eax + 4], ecx
mov cx, word [0x43e7e4]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4131c1
lea eax, [esp + 0x20]
push eax
call fcn.00420106
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x4131d0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4131d0
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413207
lea edx, [esp + 0x20]
push edx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x642]
push ecx
mov word [esp + 0x644], ax
call fcn.00426670
add esp, 0xc
push 0x104
lea edx, [esp + 0x434]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x440]
push ecx
lea edx, [esp + 0x64c]
push str._c_echo____date_____time_____s___Initial_Path_Fail________sFailLog__04u__02u__02u.log_
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0x640]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x24b0]
xor ecx, esp
call fcn.0041e7be
mov esp, ebp
pop ebp
ret 0x10
call fcn.0040fd90
test eax, eax
jne 0x41352d
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
jmp 0x413310
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x413310
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413343
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413350
mov edx, dword [str.Public]
mov ecx, dword [0x43df70]
mov dword [eax], edx
mov edx, dword [0x43df74]
mov dword [eax + 4], ecx
mov ecx, dword [0x43df78]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 0xc], ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41339e
lea eax, [esp + 0x20]
push eax
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4133a5
mov ecx, dword [str.SMR7]
mov edx, dword [0x43925c]
mov dword [eax], ecx
mov ecx, dword [0x439260]
mov dword [eax + 4], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 8], ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4133ea
lea eax, [esp + 0x20]
push eax
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4133f1
mov ecx, dword [0x43e7d8]
mov edx, dword [0x43e7dc]
mov dword [eax], ecx
mov ecx, dword [0x43e7e0]
mov dword [eax + 4], edx
mov dx, word [0x43e7e4]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413441
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x413450
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x413450
lea edx, [esp + 0x20]
mov ecx, 8
mov esi, str.InitialFailLog
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413487
lea eax, [esp + 0x20]
push eax
call fcn.00420106
add esp, 4
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x43a]
push eax
mov word [esp + 0x43c], dx
call fcn.00426670
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.00426670
add esp, 0xc
push 0x104
lea eax, [esp + 0x434]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx ecx, word [esp + 0x16]
movzx edx, word [esp + 0x12]
movzx eax, word [esp + 0x10]
push ecx
push edx
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x440]
push edx
lea eax, [esp + 0x64c]
push str._c_echo____date_____time_____s___Test_Write_Log_Fail________sFailLog__04u__02u__02u.log_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea ecx, [esp + 0x640]
push ecx
jmp 0x4132a8
push str.wmcInst.exe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4137c7
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.00426670
add esp, 0xc
xor eax, eax
jmp 0x413580
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x413580
lea ecx, [esp + 0x20]
push ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4135b3
lea edx, [esp + 0x20]
push edx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4135c0
mov ecx, dword [str.Public]
mov edx, dword [0x43df70]
mov dword [eax], ecx
mov ecx, dword [0x43df74]
mov dword [eax + 4], edx
mov edx, dword [0x43df78]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41360e
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413615
mov edx, dword [str.SMR7]
mov ecx, dword [0x43925c]
mov dword [eax], edx
mov edx, dword [0x439260]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x41365a
lea ecx, [esp + 0x20]
push ecx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413661
mov edx, dword [0x43e7d8]
mov ecx, dword [0x43e7dc]
mov dword [eax], edx
mov edx, dword [0x43e7e0]
mov dword [eax + 4], ecx
mov cx, word [0x43e7e4]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4136b1
lea eax, [esp + 0x20]
push eax
call fcn.00420106
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x4136c0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4136c0
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4136f7
lea edx, [esp + 0x20]
push edx
call fcn.00420106
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.00426670
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x642]
push ecx
mov word [esp + 0x644], ax
call fcn.00426670
add esp, 0xc
push 0x104
lea edx, [esp + 0x434]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x440]
push ecx
lea edx, [esp + 0x64c]
push str._c_echo____date_____time_____s___Running_Exist________sFailLog__04u__02u__02u.log_
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0x640]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43ea40
call fcn.00403960
add esp, 4
jmp 0x4132c5
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x18b2]
push edx
mov word [esp + 0x18b4], cx
call fcn.00426670
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0xc9f350
lea eax, [esp + 0x18ac]
push str._s_run1.exe
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x18a8]
push 0
push ecx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x413852
lea edx, [esp + 0x18a8]
push edx
push 0x43ea7c
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
add esp, 4
push 0x927c0
lea esi, [esp + 0x18ac]
call fcn.0040b040
add esp, 4
push 0x43ea94
call fcn.00403c10
add esp, 4
call fcn.00410a00
push 0x43eaa4
mov word [0xc97d4c], ax
call fcn.00403c10
add esp, 4
cmp dword [0xc9ce6c], 0
je 0x41390c
mov eax, dword [0xc9a818]
mov ecx, dword [0xc9a814]
mov edx, dword [0xc9a82c]
push 0xc995a0
push 0xc99580
push eax
mov eax, dword [0xc9a828]
push ecx
mov ecx, dword [0xc9a810]
push edx
mov edx, dword [0xc9a80c]
push eax
mov eax, dword [0x447634]
push ecx
mov ecx, dword [0xc9a808]
push edx
mov edx, dword [0xc9a804]
push eax
mov eax, dword [0xc9a800]
push ecx
mov ecx, dword [0xc9a7fc]
push edx
mov edx, dword [0xc9a7f8]
push eax
mov eax, dword [0x4473b4]
push ecx
push edx
push eax
push 0xc97d34
push 0xc98960
push 0xc97f58
push str._b_tg_
push 0xca0588
call edi
push 0xca0588
call fcn.00403960
add esp, 0x54
push 0xc9e2e0
push 0x20000000
push 0
push 0x411e60
push 0
push 0
call fcn.00420cb9
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
add esp, 0x18
cmp dword [0xc9ce58], esi
jne 0x413956
lea esp, [esp]
cmp esi, 0x258
je 0x413956
push 0xa
call ebx
inc esi
cmp dword [0xc9ce58], 0
je 0x413940
mov ax, word [0xc97d4c]
cmp ax, 9
jne 0x4139c6
mov ecx, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x43ec18
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40010
push 0x43e3ac
push 0x43ec28
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00414760
mov ecx, dword [esp + 0x24c0]
add esp, 4
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041e7be
mov esp, ebp
pop ebp
ret 0x10
test ax, ax
je 0x4139e1
push 0xc97f58
push 0x43ec48
push 0xca0588
call edi
add esp, 0xc
jmp 0x4139f0
push 0x43ec68
push 0xca0588
call edi
add esp, 8
push 0xca0588
call fcn.00403960
mov edx, dword [0xc9e2dc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 1
push 0x402
push edx
call ebx
push 0x43ec84
call fcn.00403960
add esp, 4
call fcn.00410da0
push 0
test eax, eax
jne 0x413a6a
mov eax, dword [0xc9e2dc]
push 0x64
push 0x402
push eax
call ebx
push 0x43ecb4
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40000
push 0x43ecdc
push str._rN_bT2
jmp 0x41399d
mov ecx, dword [0xc9e2dc]
push 0x14
push 0x402
push ecx
call ebx
push 0x43ed48
call fcn.00403c10
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x16aa]
push eax
mov word [esp + 0x16ac], dx
call fcn.00426670
add esp, 0xc
push 0xc9f350
lea ecx, [esp + 0x16a4]
push str._s_run2.exe
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x16a0]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x413b0c
lea eax, [esp + 0x16a0]
push eax
push 0x43ed74
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
add esp, 4
push 0x927c0
lea esi, [esp + 0x16a4]
call fcn.0040b040
add esp, 4
push 0x43ed8c
call fcn.00403c10
add esp, 4
push 0xc9f350
lea ecx, [esp + 0x16a4]
push 0x43ed9c
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x16a0]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x413b9f
lea eax, [esp + 0x16a0]
push eax
push 0x43edb4
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
add esp, 4
push 0x1b7740
lea esi, [esp + 0x16a4]
call fcn.0040b040
add esp, 4
push 0x43edd8
mov dword [0xca17d0], 1
mov dword [0xc9bc4c], 0
call fcn.00403960
add esp, 4
push 0x43ee04
call fcn.00403c10
add esp, 4
call fcn.004112a0
test eax, eax
jne 0x413bf4
mov ecx, dword [0xc9e2dc]
push eax
push 0x64
push 0x402
push ecx
call ebx
push 0x43ee18
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40040
push 0x43ee5c
push str.uP_n0R
jmp 0x41399d
push 0x43eea8
call fcn.00403c10
add esp, 4
push 0x43eec0
call fcn.00403960
add esp, 4
cmp word [0xc97d4c], 2
jne 0x413d14
push 0x788b60
mov edx, str.S.O.C..
mov ecx, str.C:UsersPublicSMR7WM7ClientPackage.cab
call fcn.0040a310
add esp, 4
push 0x43ef88
call fcn.00403c10
add esp, 4
cmp word [0xc97d4c], 0
je 0x413c5a
call fcn.00410270
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43ef94
call fcn.00403c10
add esp, 4
cmp dword [0xc9a824], 0
jne 0x413cc4
mov esi, 0x438958
jmp 0x413c80
mov edx, dword [esi]
mov ecx, str.C:UsersPublicSMR7WM7installTemp_
call fcn.0040bf50
test eax, eax
jne 0x413cb9
mov eax, dword [esi]
push eax
push 0x43efec
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
add esp, 4
mov dword [0x4476b4], 0
add esi, 4
cmp esi, 0x438974
jl 0x413c80
cmp word [0xc97d4c], 0
jne 0x413d95
mov eax, 0xc97d34
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413ce0
sub eax, edx
sar eax, 1
cmp eax, 9
je 0x413d95
push 0x43f008
call fcn.00403960
add esp, 4
mov dword [0x4476b4], 0
jmp 0x413d9e
mov esi, str.C:UsersPublicSMR7WM7ClientPackage.cab
mov eax, 0xc97d50
call fcn.0040aa40
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call fcn.0041ee1e
add esp, 8
test eax, eax
je 0x413c33
push 0xc97d50
push 0x43eef0
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
mov edx, dword [0xc9e2dc]
add esp, 4
push 0
push 0x64
push 0x402
push edx
call ebx
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40010
push 0x43ef24
push 0x43ef30
jmp 0x41399d
cmp dword [0x4476b4], 0
jne 0x413dde
mov ecx, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push ecx
call ebx
push 0x43f030
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40010
push 0x43ef24
push 0x43f060
jmp 0x41399d
push 0x43f0c4
call fcn.00403960
add esp, 4
push 0x43f0d4
call fcn.00403c10
mov esi, 1
add esp, 4
cmp dword [0xc9a818], esi
jne 0x413e57
push 0x43f0e8
call fcn.00403960
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x43a]
push eax
mov word [esp + 0x43c], dx
call fcn.00426670
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [esp + 0x434]
push str._sWM7F.cab
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0xc9e0c4], 0
jbe 0x413ec6
cmp word [0xc97d4c], 2
jne 0x413ec6
push 0xc9d288
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413e86
mov ecx, 0xc9d288
call fcn.00405200
push 0x7d000
mov edx, str.X.X.R..
mov ecx, 0xc9d080
call fcn.0040a310
add esp, 4
push 0xc9d080
push 0x43f130
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
mov dword [0xc9ce5c], esi
jmp 0x413f60
push 0
push 0xc9ce78
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x413f4c
push 0xc9d288
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413ef5
mov ecx, 0xc9d288
call fcn.00405200
mov esi, 0xc9d080
mov eax, 0xc9ce78
call fcn.0040aa40
mov ax, word [0xc97d4c]
cmp ax, 1
jne 0x413f1c
push 0xc9ce78
push 0x43f154
jmp 0x413f2c
cmp ax, 2
jbe 0x413f36
push 0xc9ce78
push 0x43f17c
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
mov dword [0xc9ce5c], 1
jmp 0x413f60
push 0x43f1a0
call fcn.00403960
mov dword [0xc9ce5c], 0
add esp, 4
push 0x43f1b4
call fcn.00403c10
add esp, 4
cmp dword [0xc9e0c8], 0
jbe 0x413fd4
cmp word [0xc97d4c], 2
jne 0x413fd4
push 0xc9d8a0
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x413f9f
mov ecx, 0xc9d8a0
call fcn.00405200
push 0x2800
mov edx, str.B.O.T..
mov ecx, 0xc9d698
call fcn.0040a310
add esp, 4
push 0xc9d698
push 0x43f1c8
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x41405f
push 0
push 0xc9d490
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x41405a
push 0xc9d8a0
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x414003
mov ecx, 0xc9d8a0
call fcn.00405200
mov esi, 0xc9d698
mov eax, 0xc9d490
call fcn.0040aa40
mov ax, word [0xc97d4c]
cmp ax, 1
jne 0x414039
push 0xc9d490
push 0x43f1ec
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x41405f
cmp ax, 2
jbe 0x414053
push 0xc9d490
push 0x43f214
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x41405f
push 0x43f238
call fcn.00403960
add esp, 4
push 0x43f24c
call fcn.00403c10
add esp, 4
cmp dword [0xc9e0cc], 0
jbe 0x4140d8
cmp word [0xc97d4c], 2
jne 0x4140d8
push 0xc9deb8
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x4140a3
mov ecx, 0xc9deb8
call fcn.00405200
push 0x2800
mov edx, str.P.T.7..
mov ecx, 0xc9dcb0
call fcn.0040a310
add esp, 4
push 0xc9dcb0
push 0x43f264
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x414163
push 0
push 0xc9daa8
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x41415e
push 0xc9deb8
call fcn.00420d59
add esp, 4
cmp eax, 0xffffffff
jne 0x414107
mov ecx, 0xc9deb8
call fcn.00405200
mov esi, 0xc9dcb0
mov eax, 0xc9daa8
call fcn.0040aa40
mov ax, word [0xc97d4c]
cmp ax, 1
jne 0x41413d
push 0xc9daa8
push 0x43f298
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x414163
cmp ax, 2
jbe 0x414157
push 0xc9daa8
push 0x43f2d0
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
jmp 0x414163
push 0x43f304
call fcn.00403960
add esp, 4
push 0x43f324
call fcn.00403c10
add esp, 4
push 0x43f348
call fcn.00403960
add esp, 4
call fcn.004110c0
push 0x43f37c
call fcn.00403c10
mov eax, dword [0xc9e2dc]
add esp, 4
push 0
push 0x19
push 0x402
push eax
call ebx
mov esi, 1
cmp dword [0xc9bc48], esi
jne 0x4141d9
mov eax, 0xc9bc50
call fcn.0040c700
push 0x43f3b0
call fcn.00403960
add esp, 4
push 0x43f3c8
call fcn.00403c10
add esp, 4
call fcn.00412080
cmp dword [0xc9bc4c], esi
jne 0x41425b
push 0x43f3e8
call fcn.00403960
add esp, 4
call fcn.0040a290
call fcn.0040ff70
test al, al
jne 0x414241
mov ecx, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push ecx
call ebx
push 0x43f420
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4139a5
push 0x40010
push 0x43ecdc
push 0x43f450
jmp 0x41399d
push 0x43f4ac
call fcn.00403960
add esp, 4
push 0x43f4c4
call fcn.00403c10
add esp, 4
mov edx, dword [0xc9e2dc]
push 0
push 0x32
push 0x402
push edx
call ebx
call fcn.00417510
call fcn.004015d0
test eax, eax
je 0x414280
call fcn.00417b70
push 0x43f4e4
call fcn.00403c10
add esp, 4
push 0x43f4f4
call fcn.00403960
add esp, 4
call fcn.00414a60
push 0x43f50c
call fcn.00403c10
add esp, 4
push 0x43f520
call fcn.00403960
add esp, 4
call fcn.0040ef90
push 0
push 0x4e
mov esi, eax
mov eax, dword [0xc9e2dc]
push 0x402
push eax
call ebx
push str.SetupClient
call fcn.00403c10
add esp, 4
call fcn.00403820
test eax, eax
jne 0x414304
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.uP_nw
call fcn.00403960
add esp, 4
call fcn.00408900
push 0
push 0
push str.C:UsersPublicSMR7WM7installTemp
call fcn.00405640
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push str.C:UsersPublicSMR7WM7ClientPackage.cab
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x43f5ac
call fcn.00403960
mov ecx, dword [0xc9e2dc]
add esp, 4
push 0
push 0x50
push 0x402
push ecx
call ebx
push 0x43f5bc
call fcn.00403c10
add esp, 4
test esi, esi
jne 0x4143fa
push 0x43f5c8
call fcn.00403960
add esp, 4
call fcn.0040a290
mov edx, dword [0xc9e2dc]
push esi
push 0x5a
push 0x402
push edx
call ebx
call fcn.00418550
mov eax, dword [0xc9e2dc]
push esi
push 0x64
push 0x402
push eax
call ebx
mov ecx, dword [0xc9e2e0]
push esi
push esi
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x447924], 1
jne 0x4143b8
push 0x43f60c
jmp 0x4143bd
push 0x43f640
call fcn.00403960
add esp, 4
call fcn.00416d40
cmp dword [0x4473b4], 0
je 0x4143ea
push 0x40010
push 0x43ecdc
push 0x43f688
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00414760
add esp, 4
push eax
call fcn.00420821
mov esi, 1
cmp dword [0xc9bc4c], esi
jne 0x414437
push 0x43f6e8
call fcn.00403960
add esp, 4
call fcn.004169c0
push 0x43f700
call fcn.00403960
add esp, 4
call fcn.00409630
push 0x43f71c
call fcn.00403c10
jmp 0x414441
push 0x43f750
call fcn.00403960
add esp, 4
push esi
call fcn.00415a40
mov edx, dword [0xc9e2dc]
add esp, 4
push 0
push 0x55
push 0x402
push edx
call ebx
push 0x43f760
call fcn.00403c10
add esp, 4
push 0x43f770
call fcn.00403960
add esp, 4
call fcn.004031d0
test eax, eax
jne 0x414581
cmp dword [0xc9ce70], esi
jne 0x4144f2
push str.uP_n_U
call fcn.00403960
add esp, 4
call fcn.00408830
mov eax, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push eax
call ebx
mov ecx, dword [0xc9e2e0]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x43f798
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x4143ea
push 0x40000
push 0x43f7c8
push 0x43f7d0
jmp 0x4143e2
push 0x43f7e4
call fcn.00403960
add esp, 4
call fcn.0040a290
mov edx, dword [0xc9e2dc]
push 0
push 0x5a
push 0x402
push edx
call ebx
call fcn.00418550
mov eax, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push eax
call ebx
mov ecx, dword [0xc9e2e0]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x447924], esi
jne 0x41454e
push 0x43f60c
jmp 0x414553
push 0x43f640
call fcn.00403960
add esp, 4
call fcn.00416d40
cmp dword [0x4473b4], 0
je 0x4143ea
push 0x40010
push 0x43ecdc
push 0x43f808
jmp 0x4143e2
cmp dword [0xc9ce70], esi
jne 0x41459b
push str.uP_n_
call fcn.00403960
add esp, 4
call fcn.00408830
mov eax, dword [0xc9a820]
cmp eax, esi
jne 0x4145b5
push 0
call fcn.0040e9d0
add esp, 4
push 0x43f860
jmp 0x4145c8
cmp eax, 2
jne 0x4145d0
push esi
call fcn.0040e9d0
add esp, 4
push 0x43f874
call fcn.00403c10
add esp, 4
cmp word [0xc97d4c], 3
jb 0x4145ec
call fcn.0040eb30
push 0x43f888
call fcn.00403c10
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x1aba]
push eax
mov word [esp + 0x1abc], dx
call fcn.00426670
add esp, 0xc
push 0xc9f350
lea ecx, [esp + 0x1ab4]
push str._s_run3.exe
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x1ab0]
push 0
push edx
call fcn.0041ee1e
add esp, 8
test eax, eax
jne 0x414676
lea eax, [esp + 0x1ab0]
push eax
push 0x43f8b8
push 0xca0588
call edi
add esp, 0xc
push 0xca0588
call fcn.00403960
add esp, 4
push 0x927c0
lea esi, [esp + 0x1ab4]
call fcn.0040b040
add esp, 4
mov esi, 1
push 0x43f8d4
call fcn.00403c10
add esp, 4
cmp dword [0x4473b4], esi
jne 0x4146f6
cmp dword [0xc9a7f8], esi
jne 0x4146f6
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.00426670
add esp, 0xc
push 0xca0380
lea eax, [esp + 0x434]
push str._spcinfo7.exe
push eax
call edi
add esp, 0xc
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0xca0380
push 0x435414
lea ecx, [esp + 0x43c]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.00416d40
mov edx, dword [0xc9e2dc]
push 0
push 0x64
push 0x402
push edx
call ebx
mov eax, dword [0xc9e2e0]
push 0
push 0
push 0x12
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x43f8e4
call fcn.00403960
add esp, 4
cmp dword [0x4473b4], 0
je 0x41474c
push 0x40000
push 0x43f7c8
push 0x43f90c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
jmp 0x4143ec