Function at 0x416ee0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ed75
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x27c
mov eax, dword [0x4c5484]
xor eax, ebp
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x220], ecx
push 0x4ab944
lea ecx, [ebp - 0x64]
call fcn.00403f8a
mov dword [ebp - 4], 0
push str.Starting...
push 0x46
lea eax, [ebp - 0x64]
push eax
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0040206d
push 0
mov ecx, dword [ebp - 0x220]
add ecx, 4
call fcn.00401f5a
push 0
push 0xc
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0xb
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 1
push 0x80
mov ecx, 0x4c7388
call fcn.00402185
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x14], eax
push 1
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x220]
add ecx, 4
call fcn.00401df2
push 0
push 0x32
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0x31
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 1
push 0x80
mov ecx, 0x4c7388
call fcn.00402185
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x18], eax
push 0
mov edx, dword [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x220]
add ecx, 4
call fcn.00401df2
push 0x4ab97c
lea ecx, [ebp - 0x80]
call fcn.00403f8a
mov dword [ebp - 4], 1
push str.SetIcon_passed
push 0x52
lea eax, [ebp - 0x80]
push eax
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0040206d
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov ecx, 0x4c7388
call fcn.00401cda
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x220], 0
je 0x41705e
mov ecx, dword [ebp - 0x220]
add ecx, 0x20
mov dword [ebp - 0x224], ecx
jmp 0x417068
mov dword [ebp - 0x224], 0
mov edx, dword [ebp - 0x224]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.00403062
cmp dword [ebp - 0x220], 0
je 0x417091
mov eax, dword [ebp - 0x220]
add eax, 0x24
mov dword [ebp - 0x228], eax
jmp 0x41709b
mov dword [ebp - 0x228], 0
mov ecx, dword [ebp - 0x228]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.004022bb
mov edx, dword [ebp - 0x220]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x220]
add ecx, 0xb4
call fcn.004037d8
call fcn.004024cd
movzx ecx, al
test ecx, ecx
je 0x417110
push 0xffffffffffffffec
mov ecx, dword [ebp - 0x220]
add ecx, 4
call fcn.00403a7b
or eax, 0x80000
push eax
push 0xffffffffffffffec
mov ecx, dword [ebp - 0x220]
add ecx, 4
call fcn.00401965
push 2
push 0xe5
push 0
mov edx, dword [ebp - 0x220]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 4
call fcn.00462130
add esp, 4
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x88], 0
je 0x417159
push 0x3e8
mov ecx, dword [ebp - 0x220]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, dword [ebp - 0x88]
call fcn.00401b9f
mov dword [ebp - 0x22c], eax
jmp 0x417163
mov dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 0x84]
mov dword [ecx + 0xcc], edx
push 0x64
push 0
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 0xcc]
call fcn.00403e2c
push 1
mov ecx, dword [ebp - 0x220]
mov ecx, dword [ecx + 0xcc]
call fcn.004016ef
push 0x4ab9c0
lea ecx, [ebp - 0xa4]
call fcn.00403f8a
mov dword [ebp - 4], 3
push str.Progress_bar_created
push 0x67
lea edx, [ebp - 0xa4]
push edx
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.0040206d
push 4
call fcn.00462130
add esp, 4
mov dword [ebp - 0xac], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0xac], 0
je 0x417243
push 0x3e9
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, dword [ebp - 0xac]
call fcn.004022c0
mov dword [ebp - 0x230], eax
jmp 0x41724d
mov dword [ebp - 0x230], 0
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 0xd0], ecx
call fcn.004024cd
movzx edx, al
test edx, edx
je 0x417344
push 4
call fcn.00462130
add esp, 4
mov dword [ebp - 0xb4], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0xb4], 0
je 0x4172cb
push 0x3ea
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, dword [ebp - 0xb4]
call fcn.004036e3
mov dword [ebp - 0x234], eax
jmp 0x4172d5
mov dword [ebp - 0x234], 0
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 0xf0], ecx
push 0x4aba04
lea ecx, [ebp - 0xd0]
call fcn.00403f8a
mov dword [ebp - 4], 6
push str.Link_control_created
push 0x70
lea edx, [ebp - 0xd0]
push edx
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.0040206d
push 0x14
call fcn.00462130
add esp, 4
mov dword [ebp - 0xd8], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0xd8], 0
je 0x417384
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 0xcc]
push ecx
mov ecx, dword [ebp - 0xd8]
call fcn.004016e5
mov dword [ebp - 0x238], eax
jmp 0x41738e
mov dword [ebp - 0x238], 0
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0xd4]
mov dword [eax + 0xf4], ecx
cmp dword [ebp - 0x220], 0
je 0x4173cd
mov edx, dword [ebp - 0x220]
add edx, 0x28
mov dword [ebp - 0x23c], edx
jmp 0x4173d7
mov dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
push eax
call fcn.00401181
mov ecx, eax
call fcn.00403d87
mov ecx, dword [ebp - 0x220]
call fcn.004034cc
push 0x4aba48
lea ecx, [ebp - 0xf4]
call fcn.00403f8a
mov dword [ebp - 4], 8
push str.Window_title_changed
push 0x7b
lea ecx, [ebp - 0xf4]
push ecx
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.0040206d
mov dword [ebp - 4], 9
call fcn.004012bc
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x240]
call fcn.00402612
push 0x4aba8c
lea ecx, [ebp - 0x110]
call fcn.00403f8a
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0xa
call fcn.004021a8
mov dword [ebp - 0x248], eax
push str.Setup_manager_inited
push 0x80
lea edx, [ebp - 0x110]
push edx
push 0x4c719c
mov eax, dword [ebp - 0x248]
push eax
call fcn.00403e63
add esp, 0x14
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x110]
call fcn.0040206d
lea ecx, [ebp - 0x12c]
push ecx
call fcn.00402eeb
add esp, 4
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x250], edx
mov byte [ebp - 4], 0xb
push str.inConcertSharedinConcertUpdateService.exe
mov eax, dword [ebp - 0x250]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.004010e6
add esp, 0xc
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x12c]
call fcn.00403364
lea edx, [ebp - 0x3c]
push edx
call fcn.00401389
add esp, 4
mov byte [ebp - 0x255], al
movzx eax, byte [ebp - 0x255]
test eax, eax
je 0x417597
push SysReAllocString
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x417597
push SysReAllocString
push 0x4abb04
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x417565
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41758d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x424
jne 0x41758d
lea ecx, [ebp - 0x3c]
call fcn.00403841
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call fcn.004012bc
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
call fcn.0040106e
mov byte [ebp - 0x261], al
movzx edx, byte [ebp - 0x261]
test edx, edx
je 0x4176f9
call fcn.00402022
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jne 0x4176f9
push 0x4abb60
lea ecx, [ebp - 0x148]
call fcn.00403f8a
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 0xe
call fcn.004021a8
mov dword [ebp - 0x270], eax
push str.Installation_required
push 0x95
lea eax, [ebp - 0x148]
push eax
push 0x4c719c
mov ecx, dword [ebp - 0x270]
push ecx
call fcn.00403e63
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x148]
call fcn.0040206d
push 0x4abb78
lea ecx, [ebp - 0x164]
call fcn.00402e50
mov dword [ebp - 0x274], eax
mov byte [ebp - 4], 0xf
push str.You_need_to_have_administrative_rigths_to_execute_this_application.
lea ecx, [ebp - 0x180]
call fcn.00402e50
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x220]
mov edx, dword [ecx + 4]
push edx
call fcn.00401a0f
add esp, 0xc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x180]
call fcn.00403364
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x164]
call fcn.00403364
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x184], esp
push 0x4abc38
call fcn.00403f8a
mov dword [ebp - 0x27c], eax
call fcn.00419160
add esp, 0x1c
push 0x23589600
mov ecx, dword [ebp - 0x220]
call fcn.004035da
mov dword [ebp - 0x188], 1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3c]
call fcn.00403364
mov eax, dword [ebp - 0x188]
jmp 0x417936
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3c]
call fcn.00403364
jmp 0x4177d6
mov dword [ebp - 4], 0xffffffff
jmp 0x4177ea
push 0x4abcd0
lea ecx, [ebp - 0x1e4]
call fcn.00403f8a
mov dword [ebp - 4], 0x14
push str.Starting_progress_bar_fake_control
push 0xa4
lea eax, [ebp - 0x1e4]
push eax
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.0040206d
push 1
push 0x28
mov ecx, dword [ebp - 0x220]
mov ecx, dword [ecx + 0xf4]
call fcn.00401b27
push 0x4abd2c
lea ecx, [ebp - 0x200]
call fcn.00403f8a
mov dword [ebp - 4], 0x15
push str.Progress_bar_fake_control_started
push 0xa6
lea edx, [ebp - 0x200]
push edx
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.0040206d
cmp dword [ebp - 0x220], 0
je 0x4178b5
mov eax, dword [ebp - 0x220]
add eax, 0x90
mov dword [ebp - 0x28c], eax
jmp 0x4178bf
mov dword [ebp - 0x28c], 0
mov ecx, dword [ebp - 0x28c]
push ecx
mov ecx, dword [ebp - 0x220]
add ecx, 0x4c
call fcn.00402176
push 0
mov ecx, dword [ebp - 0x220]
add ecx, 0x4c
call fcn.0040388c
push str.CMainDlg::OnInitDialog
lea ecx, [ebp - 0x21c]
call fcn.00403f8a
mov dword [ebp - 4], 0x16
push str.Main_worker_thread_started
push 0xac
lea edx, [ebp - 0x21c]
push edx
push 0x4c719c
call fcn.004021a8
push eax
call fcn.00403e63
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.0040206d
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.00462614
mov esp, ebp
pop ebp
ret 0x10