Function at 0x401ff0
Capabilities:
Accept command line arguments
Create thread
Delete service
Query or enumerate registry value
Read file on windows
Terminate process
Write file on windows

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x64]
push ebx
lea ebx, [ebp - 0x60]
sub esp, 0xe8
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
call dword [sym.imp.comctl32.dll_InitCommonControls]
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov ecx, ebx
mov edx, esi
call fcn.004011b0
mov eax, dword [ebp - 0x64]
cmp eax, 1
mov dword [ebp - 0x74], eax
jg 0x402068
mov dword [esp + 4], 0
mov dword [esp], 5
call sub.msi.dll_MsiSetInternalUI
sub esp, 8
mov eax, 1
call fcn.00401870
lea esi, [esi]
mov edi, dword [ebp - 0x60]
mov edx, dword [edi + 4]
mov dword [ebp - 0x70], edi
movzx eax, word [edx]
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x402180
lea eax, [edx + 2]
mov edx, 0x40715f
call fcn.00401330
mov dword [ebp - 0x84], eax
test eax, eax
je 0x402aa9
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionInstallerRunOnceEntries
mov dword [esp], 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyW]
sub esp, 0xc
test eax, eax
jne 0x402784
lea ecx, [ebp - 0x40]
mov dword [esp + 0x10], 0
lea edi, [ebp - 0x50]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
mov eax, dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov dword [ebp - 0x80], eax
call eax
mov ecx, dword [ebp - 0x58]
sub esp, 0x18
mov dword [ebp - 0x74], ecx
test eax, eax
jne 0x402ea2
cmp dword [ebp - 0x40], 1
je 0x403718
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x402784
mov edx, esi
mov esi, dword [ebp - 0x70]
mov ecx, ebx
mov eax, esi
call fcn.004011b0
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_free]
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [ebp - 0x74], eax
cmp eax, 3
je 0x402ab3
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x74], 1
mov dword [ebp - 0x70], eax
jle 0x402041
xor ebx, ebx
mov edi, 1
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 5
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xc2], bx
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x70]
lea esi, [edi*4]
lea ebx, [eax + esi]
test byte [section..data], 8
jne 0x402308
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
je 0x4022d0
mov edx, str.umtgl
call fcn.00401330
mov edx, eax
test eax, eax
je 0x403b06
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403b55
mov eax, dword [ebx]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x88], eax
jmp 0x4022e8
add eax, 2
mov edx, str.regserver
call fcn.00401330
test eax, eax
je 0x402380
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4023b8
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
jmp 0x402250
mov edx, dword [ebx]
test edx, edx
je 0x402638
mov eax, edx
shr eax, 0x10
test eax, eax
je 0x402620
mov dword [esp + 4], 0xffffffff
mov dword [esp], edx
mov dword [ebp - 0x7c], edx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x402349
mov eax, dword [ebp - 0x7c]
call fcn.004015d0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x40226a
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, str.unregserver
call fcn.00401330
test eax, eax
je 0x402648
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jl 0x4022f6
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov ebx, 1
mov dword [esp], eax
call sub.msi.dll_MsiSetInternalUI
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x84]
sub esp, 8
mov esi, dword [ebp - 0x6c]
and eax, ecx
mov dword [ebp - 0x8c], eax
mov edx, esi
test esi, esi
je 0x402be6
lea esi, cs:[esi]
nop
cmp word [edx + 4], 0
lea ecx, [edx + 4]
je 0x4027a0
mov eax, ecx
add eax, 2
cmp word [eax], 0
jne 0x402410
sub eax, ecx
sar eax, 1
add eax, 3
mov edx, dword [edx]
add ebx, eax
test edx, edx
jne 0x402400
mov eax, dword [sym.imp.ucrtbase.dll_malloc]
add ebx, ebx
mov dword [esp], ebx
mov ebx, esi
mov dword [ebp - 0xbc], eax
call eax
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x94], eax
mov edi, eax
jmp 0x40245a
mov ebx, dword [ebx]
test ebx, ebx
je 0x402535
lea edx, [ebx + 4]
mov dword [esp + 4], 0x3d
mov dword [esp], edx
mov dword [ebp - 0x70], edx
call dword [sym.imp.ucrtbase.dll_wcschr]
mov esi, eax
test eax, eax
je 0x402450
mov edx, dword [ebp - 0x70]
lea ecx, [edi + 2]
mov eax, 0x20
mov word [edi], ax
mov edi, esi
mov dword [esp], ecx
sub edi, edx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [ebp - 0x70], ecx
call sub.ucrtbase.dll_memcpy
mov ecx, dword [ebp - 0x70]
mov eax, 0x3d
add ecx, edi
lea edi, [esi + 2]
mov word [ecx], ax
mov dword [ebp - 0x70], ecx
mov dword [esp + 4], 0x20
mov dword [esp], edi
call dword [sym.imp.ucrtbase.dll_wcschr]
mov ecx, dword [ebp - 0x70]
test eax, eax
mov dword [ebp - 0x74], eax
je 0x402718
lea edx, [ecx + 4]
mov eax, 0x22
mov word [ecx + 2], ax
cmp word [esi + 2], 0
je 0x402520
mov eax, edi
lea esi, cs:[esi]
mov ecx, eax
add eax, 2
cmp word [eax], 0
jne 0x4024e8
sub ecx, esi
mov dword [esp + 8], ecx
mov dword [ebp - 0x7c], ecx
mov dword [esp + 4], edi
mov dword [esp], edx
mov dword [ebp - 0x70], edx
call sub.ucrtbase.dll_memcpy
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, ecx
mov edi, edx
test eax, eax
je 0x402450
lea edi, [edx + 2]
mov esi, 0x22
mov word [edx], si
mov ebx, dword [ebx]
test ebx, ebx
jne 0x40245a
xor ebx, ebx
mov esi, dword [ebp - 0xa0]
mov word [edi], bx
test byte [section..data], 8
jne 0x4027ff
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
jne 0x4027aa
mov edx, dword [ebp - 0x98]
test edx, edx
jne 0x402b45
mov eax, dword [ebp - 0x9c]
test eax, eax
jne 0x40272d
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x40294e
mov eax, dword [ebp - 0x84]
test eax, eax
jne 0x4027c6
mov edi, dword [ebp - 0xb4]
test edi, edi
jne 0x402c19
mov esi, dword [ebp - 0xb8]
test esi, esi
jne 0x402d4f
mov ebx, dword [ebp - 0x78]
test ebx, ebx
jne 0x4030ff
mov ecx, dword [ebp - 0x80]
test ecx, ecx
jne 0x402e23
mov edx, dword [ebp - 0xc8]
test edx, edx
jne 0x4038b7
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x402058
test byte [section..data], 1
je 0x402a7f
mov dword [esp + 0xc], str.Unknown_function__ignoring_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 0
call fcn.00401810
jmp 0x402a7f
mov dword [esp + 4], edx
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x402349
mov eax, str._null_
jmp 0x402349
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, str.unregister
call fcn.00401330
test eax, eax
jne 0x4023a7
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, str.unreg
call fcn.00401330
test eax, eax
jne 0x4023a7
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, 0x40730f
call fcn.00401480
test eax, eax
je 0x40289b
mov ecx, dword [ebx]
movzx eax, word [ecx]
mov edx, eax
and edx, 0xfffffffd
cmp dx, 0x2d
je 0x402871
mov ebx, ecx
mov edx, 8
test ax, ax
je 0x402b02
mov eax, ebx
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x4026e8
sub eax, ebx
sar eax, 1
cmp edx, eax
jge 0x402b02
mov dword [ebp - 0x98], 1
lea eax, [ecx + edx*2]
mov dword [ebp - 0x88], eax
jmp 0x4022e8
cmp word [esi + 2], 0
lea edx, [ecx + 2]
jne 0x4024e1
mov edi, edx
jmp 0x402450
mov esi, dword [ebp - 0x88]
cmp word [esi], 0
mov eax, esi
je 0x40275a
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x402740
mov esi, dword [ebp - 0x88]
sub eax, esi
cmp eax, 0x4c
je 0x402a57
mov eax, dword [ebp - 0xa8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call sub.msi.dll_MsiReinstallProductW
sub esp, 8
cmp eax, 2
je 0x403579
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret 0x10
mov eax, 3
jmp 0x402420
mov eax, dword [ebp - 0x9c]
test eax, eax
jne 0x40272d
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x40294e
mov esi, dword [ebp - 0x94]
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0xd0]
mov dword [eax + 8], esi
mov ecx, dword [ebp - 0x88]
mov dword [eax + 4], ecx
mov esi, dword [ebp - 0xcc]
mov dword [eax], esi
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x4047d8
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x402cd7
shr eax, 0x10
test eax, eax
je 0x402a8e
mov dword [esp + 4], 0xffffffff
mov edi, dword [ebp - 0x94]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402844
mov eax, edi
call fcn.004015d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.properties_____s_n
mov dword [esp + 8], str.build_properties
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x40254d
lea eax, [ecx + 2]
mov edx, 0x40730f
mov dword [ebp - 0x7c], ecx
call fcn.00401480
mov ebx, dword [ebx]
mov edx, eax
mov ecx, dword [ebp - 0x7c]
cmp edx, 1
sbb edx, edx
and edx, 6
movzx eax, word [ebx]
add edx, 2
jmp 0x4026d8
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, str.package
call fcn.00401480
test eax, eax
jne 0x4026bd
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, 0x407319
call fcn.00401330
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x403013
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x402f7c
mov eax, dword [ebx]
mov edx, str.ACTIONADMIN
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x6c]
call fcn.00401bc0
test byte [section..data], 1
jne 0x402fea
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], eax
jmp 0x4022e8
mov edx, esi
mov ebx, 1
lea esi, [esi]
cmp word [edx + 4], 0
lea ecx, [edx + 4]
je 0x402bdc
mov eax, ecx
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x402970
sub eax, ecx
sar eax, 1
add eax, 1
mov edx, dword [edx]
add ebx, eax
test edx, edx
jne 0x402958
add ebx, ebx
mov dword [esp], ebx
mov eax, dword [ebp - 0xbc]
call eax
cmp word [esi + 4], 0
lea edx, [esi + 4]
mov ecx, eax
mov dword [ebp - 0x70], eax
je 0x402a11
lea esi, [esi]
mov eax, edx
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x4029b0
sub eax, edx
lea edi, [ecx + eax]
mov ebx, eax
sar ebx, 1
cmp eax, 2
ja 0x4029e6
jmp 0x4029ee
sub ebx, 1
add ecx, 2
add edx, 2
mov word [ecx - 2], ax
cmp ebx, 1
je 0x402af8
movzx eax, word [edx]
test ax, ax
jne 0x4029d0
test ebx, ebx
jne 0x402af8
mov esi, dword [esi]
test esi, esi
je 0x402a19
lea ecx, [edi + 2]
mov ebx, 0x3b
mov word [edi], bx
cmp word [esi + 4], 0
lea edx, [esi + 4]
jne 0x4029a8
mov esi, dword [esi]
mov edi, ecx
test esi, esi
jne 0x4029fc
mov eax, dword [ebp - 0x70]
xor edx, edx
mov esi, dword [ebp - 0xb0]
mov word [edi], dx
movzx edx, word [ebp - 0xc2]
mov dword [esi + 8], eax
mov eax, esi
mov dword [esi + 0xc], edx
mov esi, dword [ebp - 0xac]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x88]
mov dword [eax], esi
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x4047b0
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 8
test eax, eax
jne 0x40275a
test byte [section..data], 1
jne 0x402cae
mov dword [ebp - 0x84], 1
jmp 0x402784
mov eax, dword [ebp - 0x94]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x402844
cmp dword [ebp - 0x74], 3
jne 0x402eb3
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov eax, dword [eax + 4]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402ae9
add eax, 2
mov edx, str.Embedding
call fcn.00401330
mov dword [ebp - 0x84], eax
test eax, eax
jne 0x40310f
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 3
jmp 0x402180
xor eax, eax
mov word [ecx], ax
jmp 0x4029f6
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x402ce1
mov dword [ebp - 0x98], 1
mov eax, dword [ebx]
mov dword [ebp - 0x88], eax
jmp 0x4022e8
mov dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x88]
cmp word [eax], 0
je 0x402b72
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x402b58
mov esi, dword [ebp - 0x88]
sub eax, esi
cmp eax, 0x4c
je 0x402f32
mov eax, dword [ebp - 0x94]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call sub.msi.dll_MsiInstallProductW
sub esp, 8
mov dword [ebp - 0x84], eax
cmp eax, 2
jne 0x402784
mov eax, dword [ebp - 0x88]
call fcn.00401ab0
mov ebx, eax
test eax, eax
je 0x4035b5
mov eax, dword [ebp - 0x94]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msi.dll_MsiInstallProductW
sub esp, 8
mov esi, eax
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_free]
mov dword [ebp - 0x84], esi
jmp 0x402784
mov eax, 1
jmp 0x402980
test eax, eax
je 0x402dea
mov edx, dword [ebp - 0x9c]
test edx, edx
jne 0x40272d
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x4035a1
mov dword [ebp - 0x94], 0
jmp 0x4027c6
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x40]
mov edx, str.DllRegisterServer
mov dword [ebp - 0x40], 0
call fcn.00401f40
call eax
test eax, eax
mov eax, dword [ebp - 0x90]
js 0x403297
test eax, eax
je 0x402ebe
shr eax, 0x10
test eax, eax
je 0x40355e
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x90]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402c82
mov eax, esi
call fcn.004015d0
mov dword [esp + 4], eax
mov dword [esp], str.Successfully_registered_dll__s_n
call fcn.004017f0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x402784
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
jmp 0x402784
mov dword [esp + 0xc], str.Product_code_treatment_not_implemented_yet_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 0
call fcn.00401810
jmp 0x402a7f
mov eax, str._null_
jmp 0x402844
mov esi, dword [ebx]
test esi, esi
je 0x402f28
mov eax, esi
shr eax, 0x10
test eax, eax
je 0x403887
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402d1e
mov eax, esi
call fcn.004015d0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x402b24
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x40]
mov edx, str.DllUnregisterServer
mov dword [ebp - 0x40], 0
call fcn.00401f40
call eax
test eax, eax
mov eax, dword [ebp - 0x90]
js 0x402ec8
test eax, eax
je 0x40391f
shr eax, 0x10
test eax, eax
je 0x40389c
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x90]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402db8
mov eax, esi
call fcn.004015d0
mov dword [esp + 4], eax
mov dword [esp], str.Successfully_unregistered_dll__s_n
call fcn.004017f0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x402ddb
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
mov dword [ebp - 0x84], 0
jmp 0x402784
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x402b3b
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
jne 0x40272d
mov ecx, dword [ebp - 0xa4]
test ecx, ecx
jne 0x4035a1
mov dword [ebp - 0x94], 0
jmp 0x402585
mov dword [esp + 8], 1
mov dword [esp + 4], str.ServicesActive
mov dword [esp], 0
call dword [sym.imp.advapi32.dll_OpenSCManagerW]
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x4038f4
mov dword [esp + 8], 0x10000
mov dword [esp + 4], 0x4070ee
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_OpenServiceW]
sub esp, 0xc
mov esi, eax
test eax, eax
je 0x4038c1
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_DeleteService]
sub esp, 4
test eax, eax
je 0x403905
mov dword [esp], esi
mov esi, dword [sym.imp.advapi32.dll_CloseServiceHandle]
call esi
sub esp, 4
mov dword [esp], ebx
call esi
sub esp, 4
jmp 0x402784
mov dword [esp], ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x402784
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
jmp 0x402180
mov eax, str._null_
jmp 0x402c82
test eax, eax
je 0x403c12
shr eax, 0x10
test eax, eax
je 0x403933
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x90]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402f07
mov eax, esi
call fcn.004015d0
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_unregister_dll__s_n
call fcn.00401d30
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x84], eax
jmp 0x402784
mov eax, str._null_
jmp 0x402d1e
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 8
test eax, eax
jne 0x402b72
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x94]
mov dword [eax + 8], 5
mov dword [eax + 0xc], ecx
mov dword [eax + 4], 0
mov dword [eax], esi
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x4047e0
mov esi, dword [ebx]
test esi, esi
je 0x403929
mov eax, esi
shr eax, 0x10
test eax, eax
je 0x403872
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402fb9
mov eax, esi
call fcn.004015d0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x40290e
mov dword [esp + 0xc], str.Administrative_installs_are_not_currently_supported_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 0
call fcn.00401810
jmp 0x402930
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
mov edx, 0x40736d
add eax, 2
call fcn.00401480
mov ecx, eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx]
movzx edx, word [eax]
test ecx, ecx
je 0x40320a
test dx, dx
je 0x4031cf
mov edx, eax
add edx, 2
cmp word [edx], 0
jne 0x403052
sub edx, eax
mov ecx, edx
sar ecx, 1
cmp edx, 4
mov dword [ebp - 0x7c], ecx
jle 0x4037ed
mov dword [ebp - 0x88], edi
mov edi, dword [ebp - 0xa8]
mov ecx, 2
mov dword [ebp - 0x9c], esi
mov esi, ebx
mov ebx, ecx
movzx edx, word [eax + ebx*2]
lea eax, [edx - 0x41]
cmp ax, 0x35
ja case.0x403098.1
movzx eax, ax
jmp dword [eax*4 + 0x40764c]
mov dword [esp + 4], edx
mov dword [esp], str.Unknown_option___c__in_Repair_mode_n
call fcn.00401d30
mov eax, dword [ebp - 0x7c]
add ebx, 1
cmp ebx, eax
jge 0x4031bd
mov eax, dword [esi]
jmp 0x403088
or edi, 0x400
jmp 0x4030af
or edi, 0x100
jmp 0x4030af
or edi, 0x200
jmp 0x4030af
or edi, 2
jmp 0x4030af
or edi, 4
jmp 0x4030af
or edi, 0x80
jmp 0x4030af
or edi, 8
jmp 0x4030af
or edi, 0x10
jmp 0x4030af
or edi, 0x20
jmp 0x4030af
or edi, 0x40
jmp 0x4030af
call fcn.00401de0
mov dword [ebp - 0x84], eax
jmp 0x402784
mov eax, dword [ebp - 0x70]
mov ebx, dword [eax + 8]
test byte [section..data], 8
jne 0x4036b0
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_wcstol]
mov dword [section..bss], eax
test eax, eax
jne 0x4033a6
test byte [section..data], 2
je 0x402784
test ebx, ebx
je 0x403a75
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x403a60
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x403190
mov eax, ebx
call fcn.004015d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Invalid_parameter__s_n
mov dword [esp + 8], 0x4078e8
mov dword [esp + 4], 0x406000
mov dword [esp], 1
call fcn.00401810
jmp 0x402784
mov dword [ebp - 0xa8], edi
mov esi, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea esi, [eax + esi + 4]
test byte [section..data], 8
jne 0x403804
mov eax, dword [esi]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x9c], eax
jmp 0x4022e8
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, 0x407394
call fcn.00401480
test eax, eax
je 0x4035c4
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x4032f7
add eax, 2
mov edx, 0x407394
call fcn.00401480
test eax, eax
je 0x4032f7
mov eax, dword [ebx]
add eax, 4
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp word [eax], 0
je 0x403305
test byte [section..data], 8
jne 0x40333c
mov edx, str.REMOVEALL
lea eax, [ebp - 0x6c]
call fcn.00401bc0
mov dword [ebp - 0x98], 1
jmp 0x4022e8
test eax, eax
je 0x4039e9
shr eax, 0x10
test eax, eax
je 0x4039f3
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x90]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4032d6
mov eax, esi
call fcn.004015d0
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_register_dll__s_n
call fcn.00401d30
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x84], eax
jmp 0x402784
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jne 0x40325e
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + esi + 4]
mov dword [ebp - 0x88], eax
test byte [section..data], 8
je 0x40327b
mov edx, dword [ebp - 0x88]
mov eax, str._null_
test edx, edx
je 0x403379
mov eax, dword [ebp - 0x88]
shr eax, 0x10
test eax, eax
je 0x403a0e
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x88]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x403379
mov eax, esi
call fcn.004015d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.PackageName___s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x40327b
lea ebx, [ebp - 0x40]
mov dword [esp + 0x10], 0x20
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str..pipemsica__x__d
mov dword [esp + 4], 0x18
call fcn.004012e0
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
call dword [sym.imp.kernel32.dll_CreateFileW]
sub esp, 0x1c
mov ebx, eax
cmp eax, 0xffffffff
je 0x403991
mov dword [esp + 4], 0
lea edi, [ebp - 0x50]
mov dword [esp], 0
lea esi, [ebp - 0x5c]
call dword [sym.imp.ole32.dll_CoInitializeEx]
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x10
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x40394e
cmp dword [ebp - 0x5c], 0x10
jne 0x40394e
mov eax, dword [edi]
test eax, eax
jne 0x4034a0
mov eax, dword [edi + 4]
test eax, eax
jne 0x4034a0
mov eax, dword [edi + 8]
test eax, eax
jne 0x4034a0
mov eax, dword [edi + 0xc]
test eax, eax
jne 0x4034a0
mov dword [ebp - 0x84], 0
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x402784
mov dword [esp], 0x10
call dword [sym.imp.ucrtbase.dll_malloc]
mov edx, dword [ebp - 0x50]
mov dword [eax], edx
mov edx, dword [ebp - 0x4c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x48]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 0xc], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x401290
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateThread]
sub esp, 0x18
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x403537
cmp dword [ebp - 0x5c], 8
je 0x403432
test byte [section..data], 2
jne 0x403ad0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x84], eax
jmp 0x402784
mov eax, dword [ebp - 0x90]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x402c82
mov eax, dword [ebp - 0x88]
call fcn.00401ab0
mov ebx, eax
test eax, eax
je 0x4035b5
mov eax, dword [ebp - 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msi.dll_MsiReinstallProductW
jmp 0x402bc3
mov dword [esp], 2
call dword [sym.imp.ucrtbase.dll_malloc]
mov edi, eax
jmp 0x402a1c
mov dword [ebp - 0x84], 2
jmp 0x402784
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, str.uninstall
call fcn.00401330
test eax, eax
jne 0x40322c
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402278
add eax, 2
mov edx, 0x4073c8
call fcn.00401480
mov ecx, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebx]
test ecx, ecx
je 0x402278
cmp word [eax], 0
je 0x403a98
mov edx, eax
add edx, 2
cmp word [edx], 0
jne 0x403625
sub edx, eax
mov ecx, edx
sar ecx, 1
cmp edx, 4
mov dword [ebp - 0x88], ecx
jle 0x403a98
mov edx, 2
mov dword [ebp - 0xa4], edi
mov edi, ebx
mov dword [ebp - 0xd4], esi
mov ebx, edx
mov esi, dword [ebp - 0xac]
jmp 0x403693
cmp ax, 0x4d
je 0x403a7f
cmp ax, 0x55
je 0x4036a9
mov dword [esp + 4], eax
mov dword [esp], str.Unknown_option___c__in_Advertise_mode_n
call fcn.00401d30
mov eax, dword [ebp - 0x88]
add ebx, 1
cmp ebx, eax
jge 0x403a86
mov eax, dword [edi]
movzx eax, word [eax + ebx*2]
cmp ax, 0x6d
je 0x403a7f
jbe 0x403660
cmp ax, 0x75
jne 0x403670
mov esi, 1
jmp 0x403680
test ebx, ebx
je 0x403a56
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x4039d4
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4036eb
mov eax, ebx
call fcn.004015d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4071f4
mov dword [esp + 8], 0x4078e8
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403122
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp word [edx], 0
je 0x403a48
mov ecx, edx
add ecx, 2
cmp word [ecx], 0
jne 0x403729
sub ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x88], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov ecx, dword [ebp - 0x88]
test eax, eax
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x70], eax
je 0x402127
mov dword [esp + 8], ecx
mov dword [ebp - 0x88], ecx
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x70]
mov dword [esp], edx
call sub.ucrtbase.dll_memcpy
mov edx, dword [ebp - 0x70]
mov eax, 0x20
mov ecx, dword [ebp - 0x88]
mov word [edx + ecx], ax
mov dword [esp + 0x14], edi
mov eax, dword [ebp - 0x7c]
mov dword [esp + 8], 0
add eax, edx
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
mov eax, dword [ebp - 0x80]
call eax
sub esp, 0x18
test eax, eax
je 0x40213b
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x402784
mov eax, 0x2aa
cmovne eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
jmp 0x4031cf
mov ebx, dword [esi]
test ebx, ebx
je 0x403a3e
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x403a29
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x403841
mov eax, ebx
call fcn.004015d0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x4031f1
mov dword [esp + 4], esi
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x402fb9
mov dword [esp + 4], esi
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x402d1e
mov eax, dword [ebp - 0x90]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x402db8
call fcn.00404710
jmp 0x40277e
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 0x424
mov esi, dword [sym.imp.advapi32.dll_CloseServiceHandle]
je 0x402e95
mov dword [esp], str.Failed_to_open_MSI_service_n
call fcn.00401d30
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
jmp 0x402e95
mov dword [esp], str.Failed_to_open_service_control_manager_n
call fcn.00401d30
jmp 0x402a7f
mov dword [esp], str.Failed_to_delete_MSI_service_n
call fcn.00401d30
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
jmp 0x402e87
mov eax, str._null_
jmp 0x402db8
mov eax, str._null_
jmp 0x402fb9
mov eax, dword [ebp - 0x90]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x402f07
test byte [section..data], 2
je 0x403544
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_read_from_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4078e8
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401810
jmp 0x403544
test byte [section..data], 2
je 0x40354a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_create_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4078e8
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401810
jmp 0x40354a
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x4036eb
mov eax, str._null_
jmp 0x4032d6
mov eax, dword [ebp - 0x90]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x4032d6
mov eax, dword [ebp - 0x88]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401c60
jmp 0x403379
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x403841
mov eax, str._null_
jmp 0x403841
mov dword [ebp - 0x7c], 2
xor ecx, ecx
jmp 0x40373a
mov eax, str._null_
jmp 0x4036eb
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401c60
jmp 0x403190
mov eax, str._null_
jmp 0x403190
xor esi, esi
jmp 0x403680
mov dword [ebp - 0xac], esi
mov edi, dword [ebp - 0xa4]
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403c1c
mov eax, dword [ebx]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa4], eax
jmp 0x4022e8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_write_to_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4078e8
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401810
jmp 0x403544
mov eax, dword [ebx]
mov edx, 0x4073f5
call fcn.00401330
mov edx, eax
test eax, eax
je 0x403bd1
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403b93
mov eax, dword [ebx]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x88], eax
xor eax, eax
mov dword [ebp - 0xac], eax
jmp 0x4022e8
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
mov edx, dword [ebp - 0x70]
jmp 0x4022ae
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
mov edx, dword [ebp - 0x70]
jmp 0x403b3a
mov eax, dword [ebx]
mov edx, 0x4073f7
call fcn.004015b0
test eax, eax
je 0x403c8c
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403c54
mov edx, dword [ebx]
lea eax, [ebp - 0x68]
call fcn.00401bc0
jmp 0x4022e8
mov eax, str._null_
jmp 0x402f07
mov eax, dword [ebx]
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403aba
mov eax, dword [ebx]
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403c03
mov eax, dword [ebx]
mov edx, 0x4073f9
call fcn.004015b0
test eax, eax
jne 0x403d0a
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x403d54
mov edx, 0x4073fb
add eax, 2
call fcn.00401480
mov ecx, dword [ebx]
mov edx, eax
mov eax, ecx
test edx, edx
jne 0x403ccd
jmp 0x403d54
add eax, 2
cmp word [eax], 0
jne 0x403cca
sub eax, ecx
mov edx, 2
mov dword [ebp - 0x7c], edi
sar eax, 1
mov ebx, eax
mov eax, dword [ebp - 0xa0]
cmp edx, ebx
jge 0x403e61
movzx edi, word [ecx + edx*2]
sub edi, 0x21
cmp di, 0x56
ja case.0x403d03.1
movzx edi, di
jmp dword [edi*4 + 0x407724]
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403eed
mov ecx, dword [ebx]
xor ebx, ebx
jmp 0x403d3c
imul ebx, ebx, 0xa
add ecx, 2
lea ebx, [ebx + eax - 0x30]
movzx eax, word [ecx]
lea edx, [eax - 0x30]
cmp dx, 9
jbe 0x403d32
mov word [ebp - 0xc2], bx
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x407425
call fcn.004015b0
test eax, eax
je 0x403dd9
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403da4
mov dword [ebp - 0x84], 1
mov eax, dword [ebx]
mov dword [ebp - 0xcc], eax
jmp 0x4022e8
or eax, 4
add edx, 1
jmp 0x403ce7
mov eax, dword [ebx]
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403d82
mov eax, dword [ebx]
mov edx, str.update
call fcn.004015b0
test eax, eax
jne 0x403d64
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x403f5d
mov edx, 0x40742e
add eax, 2
call fcn.00401480
mov ecx, dword [ebx]
mov edx, eax
mov eax, ecx
test edx, edx
jne 0x403e1e
jmp 0x403f5d
add eax, 2
cmp word [eax], 0
jne 0x403e1b
sub eax, ecx
cmp eax, 4
je 0x403e40
lea eax, [ecx + 4]
mov edx, 0x407430
call fcn.00401330
test eax, eax
je 0x403f89
mov dword [0x408004], 1
mov dword [ebp - 0x8c], 2
jmp 0x4022e8
or ah, 0x10
jmp case.0x403d03.1
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403f25
mov eax, dword [ebp - 0xbc]
mov ebx, dword [ebx]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call sub.msi.dll_MsiEnableLogW
sub esp, 0xc
test eax, eax
je 0x4022e8
mov eax, ebx
call fcn.00401cc0
mov ecx, dword [ebp - 0xbc]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0xa0]
mov dword [esp + 4], eax
mov dword [esp], str.Logging_in__s__0x_08lx___lu__failed_n
mov dword [esp + 8], ecx
call fcn.00401d30
mov dword [esp], 1
call dword [sym.imp.kernel32.dll_ExitProcess]
mov eax, dword [ebx]
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403d2c
mov eax, dword [ebx]
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
jmp 0x403e8c
mov eax, dword [ebx]
mov edx, str.passive
call fcn.004015b0
test eax, eax
je 0x403fc2
lea eax, [ebp - 0x6c]
mov edx, str.REBOOTPROMPT_S_
call fcn.00401bc0
mov dword [ebp - 0x8c], 0x63
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, str.uiet
add eax, 4
call fcn.00401330
test eax, eax
jne 0x403e40
mov eax, dword [ebx]
mov edx, 0x407437
add eax, 4
call fcn.00401330
test eax, eax
je 0x404009
mov dword [ebp - 0x8c], 4
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x4074aa
call fcn.004015b0
mov edx, eax
test eax, eax
je 0x40406a
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x40402f
mov eax, dword [ebx]
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0x90], eax
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x40736d
add eax, 4
call fcn.00401330
test eax, eax
je 0x4040b1
mov dword [ebp - 0x8c], 0x85
jmp 0x4022e8
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
mov edx, dword [ebp - 0x70]
jmp 0x403ff6
mov eax, dword [ebx]
mov edx, 0x4074ac
call fcn.004015b0
mov edx, eax
test eax, eax
je 0x404112
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402058
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x4040d7
mov eax, dword [ebx]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x90], eax
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x407439
add eax, 4
call fcn.00401330
test eax, eax
je 0x404184
mov dword [ebp - 0x8c], 0x82
jmp 0x4022e8
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401cc0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401810
mov edx, dword [ebp - 0x70]
jmp 0x40409e
mov eax, dword [ebx]
mov edx, str.help
call fcn.004015b0
test eax, eax
jne 0x4041e4
mov eax, dword [ebx]
mov edx, 0x4074b3
call fcn.004015b0
test eax, eax
jne 0x4041e4
mov eax, dword [ebx]
mov edx, 0x4073f5
call fcn.004015b0
test eax, eax
je 0x4041b6
mov dword [ebp - 0xc0], eax
test byte [section..data], 1
je 0x4022e8
xor eax, eax
mov dword [esp + 0xc], str.Unknown_parameter__m_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], eax
call fcn.00401810
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x40743c
add eax, 4
call fcn.00401480
mov esi, dword [ebx]
test eax, eax
jne 0x4041eb
lea eax, [esi + 4]
call fcn.00401cc0
mov dword [esp], str.Unknown_option___s__for_UI_level_n
mov dword [esp + 4], eax
call fcn.00401d30
jmp 0x4022e8
mov eax, dword [ebx]
mov edx, 0x4074cb
call fcn.004015b0
mov esi, eax
test eax, eax
je 0x404298
test byte [section..data], 1
jne 0x404271
mov dword [ebp - 0xc0], esi
jmp 0x4022e8
xor eax, eax
call fcn.00401870
mov dword [ebp - 0x8c], 3
add esi, 6
cmp word [esi], 0
je 0x4022e8
mov edx, 0x40743e
mov eax, esi
call fcn.00401480
mov edx, 0x407440
mov ebx, eax
mov eax, esi
call fcn.00401480
shl ebx, 7
mov edx, 0x407442
shl eax, 6
or eax, ebx
or dword [ebp - 0x8c], eax
mov eax, esi
call fcn.00401480
test eax, eax
je 0x40426c
test byte [section..data], 1
je 0x404265
xor eax, eax
mov dword [esp + 0xc], 0x407444
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], eax
call fcn.00401810
or dword [ebp - 0x8c], 0x20
add esi, 2
jmp 0x4041f8
xor eax, eax
mov dword [esp + 0xc], str.Unknown_parameter__D_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], eax
call fcn.00401810
jmp 0x4041d9
mov eax, dword [ebx]
mov edx, 0x4074e3
call fcn.004015b0
test eax, eax
je 0x40431c
mov dword [ebp - 0xc8], eax
jmp 0x4022e8
or eax, 8
jmp case.0x403d03.1
or ah, 1
jmp case.0x403d03.1
or dword [ebp - 0xbc], 1
jmp case.0x403d03.1
mov eax, 0x7fdf
jmp case.0x403d03.1
or dword [ebp - 0xbc], 2
jmp case.0x403d03.1
or eax, 1
jmp case.0x403d03.1
or eax, 0x10
jmp case.0x403d03.1
or eax, 2
jmp case.0x403d03.1
or ah, 8
jmp case.0x403d03.1
or ah, 4
jmp case.0x403d03.1
or al, 0x80
jmp case.0x403d03.1
or ah, 2
jmp case.0x403d03.1
mov edx, dword [ebx]
lea eax, [ebp - 0x6c]
call fcn.00401bc0
jmp 0x4022e8
jmp dword [sym.imp.msi.dll_MsiAdvertiseProductW]
jmp dword [sym.imp.msi.dll_MsiApplyPatchW]
jmp dword [sym.imp.msi.dll_MsiConfigureProductExW]