Function at 0x402090
Capabilities:
Accept command line arguments
Create thread
Delete service
Query or enumerate registry value
Read file on windows
Terminate process
Write file on windows

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x64]
push ebx
lea ebx, [ebp - 0x60]
sub esp, 0xe8
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
call dword [sym.imp.comctl32.dll_InitCommonControls]
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov ecx, ebx
mov edx, esi
call fcn.004011c0
mov eax, dword [ebp - 0x64]
cmp eax, 1
mov dword [ebp - 0x74], eax
jg 0x402108
mov dword [esp + 4], 0
mov dword [esp], 5
call sub.msi.dll_MsiSetInternalUI
sub esp, 8
mov eax, 1
call fcn.004018f0
lea esi, [esi]
mov edi, dword [ebp - 0x60]
mov edx, dword [edi + 4]
mov dword [ebp - 0x70], edi
movzx eax, word [edx]
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x40222f
lea eax, [edx + 2]
mov edx, 0x40815f
call fcn.00401340
test eax, eax
je 0x402b91
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionInstallerRunOnceEntries
mov dword [esp], 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyW]
sub esp, 0xc
test eax, eax
jne 0x4021cc
lea ecx, [ebp - 0x40]
mov dword [esp + 0x10], 0
lea edi, [ebp - 0x50]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
mov eax, dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov dword [ebp - 0x80], eax
call eax
mov ecx, dword [ebp - 0x58]
sub esp, 0x18
mov dword [ebp - 0x74], ecx
test eax, eax
jne 0x402e1c
cmp dword [ebp - 0x40], 1
je 0x4036db
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
mov dword [ebp - 0x88], 1
mov eax, dword [ebp - 0x88]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret 0x10
mov edx, esi
mov esi, dword [ebp - 0x70]
mov ecx, ebx
mov eax, esi
call fcn.004011c0
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_free]
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [ebp - 0x74], eax
cmp eax, 3
je 0x402b9b
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x74], 1
mov dword [ebp - 0x70], eax
jle 0x4020e1
xor ebx, ebx
mov edi, 1
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x98], 5
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov word [ebp - 0xce], bx
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
nop
mov eax, dword [ebp - 0x70]
lea esi, [edi*4]
lea ebx, [eax + esi]
test byte [section..data], 8
jne 0x4023b8
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
je 0x402380
mov edx, str.umtgl
call fcn.00401340
mov edx, eax
test eax, eax
je 0x403b91
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403be0
mov eax, dword [ebx]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x84], eax
jmp 0x402398
add eax, 2
mov edx, str.regserver
call fcn.00401340
test eax, eax
je 0x402430
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x402468
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
jmp 0x402300
mov edx, dword [ebx]
test edx, edx
je 0x402750
mov eax, edx
shr eax, 0x10
test eax, eax
je 0x402738
mov dword [esp + 4], 0xffffffff
mov dword [esp], edx
mov dword [ebp - 0x7c], edx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x4023f9
mov eax, dword [ebp - 0x7c]
call fcn.00401650
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x40231a
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, str.unregserver
call fcn.00401340
test eax, eax
je 0x402760
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jl 0x4023a6
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call sub.msi.dll_MsiSetInternalUI
mov esi, dword [ebp - 0x6c]
sub esp, 8
test esi, esi
je 0x402d8d
mov edx, esi
mov ebx, 1
lea esi, cs:[esi]
cmp word [edx + 4], 0
lea ecx, [edx + 4]
je 0x402840
mov eax, ecx
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x4024b0
sub eax, ecx
sar eax, 1
add eax, 3
mov edx, dword [edx]
add ebx, eax
test edx, edx
jne 0x402498
add ebx, ebx
mov dword [esp], ebx
mov ebx, esi
call dword [sym.imp.ucrtbase.dll_malloc]
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x70], eax
jmp 0x4024f2
mov ebx, dword [ebx]
test ebx, ebx
je 0x4025e0
lea esi, [ebx + 4]
mov dword [esp + 4], 0x3d
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_wcschr]
mov edi, eax
test eax, eax
je 0x4024e8
mov eax, dword [ebp - 0x70]
mov edx, 0x20
mov word [eax], dx
lea ecx, [eax + 2]
mov edx, edi
sub edx, esi
mov dword [esp + 8], edx
mov dword [ebp - 0x74], edx
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [ebp - 0x70], ecx
call sub.ucrtbase.dll_memcpy
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
lea esi, [ecx + edx]
mov ecx, 0x3d
mov word [esi], cx
cmp word [edi + 2], 0x22
lea edx, [edi + 2]
je 0x402830
mov dword [esp], edx
mov dword [esp + 4], 0x20
mov dword [ebp - 0x70], edx
call dword [sym.imp.ucrtbase.dll_wcschr]
mov edx, dword [ebp - 0x70]
test eax, eax
je 0x40284a
lea eax, [esi + 4]
mov ecx, 0x22
mov word [esi + 2], cx
cmp word [edi + 2], 0
mov dword [ebp - 0x70], eax
je 0x4025c5
mov esi, 1
mov eax, edx
nop
mov ecx, eax
add eax, 2
cmp word [eax], 0
jne 0x402590
sub ecx, edi
mov dword [esp + 8], ecx
mov dword [ebp - 0x74], ecx
mov dword [esp + 4], edx
mov edi, dword [ebp - 0x70]
mov dword [esp], edi
call sub.ucrtbase.dll_memcpy
mov ecx, dword [ebp - 0x74]
mov eax, edi
add eax, ecx
mov dword [ebp - 0x70], eax
test esi, esi
je 0x4024e8
mov eax, dword [ebp - 0x70]
mov edx, 0x22
mov word [eax], dx
mov ebx, dword [ebx]
add eax, 2
mov dword [ebp - 0x70], eax
test ebx, ebx
jne 0x4024f2
mov edi, dword [ebp - 0x70]
xor eax, eax
mov esi, dword [ebp - 0x98]
mov word [edi], ax
test byte [section..data], 8
jne 0x402875
mov ecx, dword [ebp - 0x9c]
test dword [ebp - 0xa0], ecx
je 0x402862
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x402970
mov eax, dword [ebp - 0x84]
call fcn.004015c0
mov dword [ebp - 0x84], eax
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x40265b
call fcn.004015c0
mov dword [ebp - 0x94], eax
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x402678
call fcn.004015c0
mov dword [ebp - 0x8c], eax
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x4028e1
mov eax, dword [ebp - 0xa8]
test eax, eax
jne 0x402b18
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x402bf9
mov eax, dword [ebp - 0x9c]
test eax, eax
jne 0x403b34
mov edi, dword [ebp - 0x88]
test edi, edi
jne 0x402f03
mov esi, dword [ebp - 0xc0]
test esi, esi
jne 0x403185
mov ebx, dword [ebp - 0x78]
test ebx, ebx
jne 0x402e2d
mov ecx, dword [ebp - 0x80]
test ecx, ecx
jne 0x4037da
mov edx, dword [ebp - 0xcc]
test edx, edx
jne 0x40391a
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4020f8
test byte [section..data], 1
je 0x4021cc
mov dword [esp + 0xc], str.Unknown_function__ignoring_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 0
call fcn.00401890
jmp 0x4021cc
mov dword [esp + 4], edx
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x4023f9
mov eax, str._null_
jmp 0x4023f9
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, str.unregister
call fcn.00401340
test eax, eax
jne 0x402457
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, str.unreg
call fcn.00401340
test eax, eax
jne 0x402457
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, 0x40830f
call fcn.00401490
test eax, eax
je 0x4029ff
mov ecx, dword [ebx]
movzx eax, word [ecx]
mov edx, eax
and edx, 0xfffffffd
cmp dx, 0x2d
je 0x4029d5
mov ebx, ecx
mov edx, 8
test ax, ax
je 0x402cfa
mov eax, ebx
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x402800
sub eax, ebx
sar eax, 1
cmp edx, eax
jge 0x402cfa
mov dword [ebp - 0x90], 1
lea eax, [ecx + edx*2]
mov dword [ebp - 0x84], eax
jmp 0x402398
lea eax, [esi + 2]
xor esi, esi
mov dword [ebp - 0x70], eax
jmp 0x40258d
mov eax, 3
jmp 0x4024c0
lea eax, [esi + 2]
xor esi, esi
cmp word [edi + 2], 0
mov dword [ebp - 0x70], eax
jne 0x40258d
jmp 0x4024e8
mov eax, dword [ebp - 0x84]
test eax, eax
jne 0x402625
jmp 0x40263e
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x402d99
shr eax, 0x10
test eax, eax
je 0x402b79
mov dword [esp + 4], 0xffffffff
mov edi, dword [ebp - 0x7c]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4028b4
mov eax, edi
call fcn.00401650
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.properties_____s_n
mov dword [esp + 8], str.build_properties
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x4025fb
mov eax, dword [ebp - 0x84]
cmp word [eax], 0
je 0x40290a
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x4028f0
mov ecx, dword [ebp - 0x84]
sub eax, ecx
cmp eax, 0x4c
je 0x402d44
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call sub.msi.dll_MsiInstallProductW
sub esp, 8
mov dword [ebp - 0x88], eax
cmp eax, 2
jne 0x4021d6
mov eax, dword [ebp - 0x84]
call fcn.00401b30
mov ebx, eax
test eax, eax
je 0x4036cc
mov eax, dword [ebp - 0x7c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msi.dll_MsiInstallProductW
sub esp, 8
mov esi, eax
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_free]
mov dword [ebp - 0x88], esi
jmp 0x4021d6
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x402aa5
call fcn.004015c0
mov ebx, eax
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x4029a4
call fcn.004015c0
test eax, eax
je 0x4021cc
mov edx, dword [ebp - 0xa8]
test edx, edx
jne 0x402b18
mov ecx, dword [ebp - 0xa4]
test ecx, ecx
jne 0x402bf9
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x94], 0
jmp 0x402ae2
lea eax, [ecx + 2]
mov edx, 0x40830f
mov dword [ebp - 0x7c], ecx
call fcn.00401490
mov ebx, dword [ebx]
mov edx, eax
mov ecx, dword [ebp - 0x7c]
cmp edx, 1
sbb edx, edx
and edx, 6
movzx eax, word [ebx]
add edx, 2
jmp 0x4027f0
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, str.package
call fcn.00401490
test eax, eax
jne 0x4027d5
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, 0x408319
call fcn.00401340
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x402f9e
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x402e44
mov eax, dword [ebx]
mov edx, str.ACTIONADMIN
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x6c]
call fcn.00401c50
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x90], eax
jmp 0x402398
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x402bdd
call fcn.004015c0
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0xa8]
test eax, eax
jne 0x402b18
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x402bf9
mov dword [ebp - 0x8c], 0
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0xb4]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x94]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [eax], ecx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x404928
mov eax, dword [ebp - 0x84]
cmp word [eax], 0
je 0x402b4a
lea esi, cs:[esi]
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x402b30
mov ecx, dword [ebp - 0x84]
sub eax, ecx
cmp eax, 0x4c
je 0x402eb2
mov eax, dword [ebp - 0xac]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call sub.msi.dll_MsiReinstallProductW
sub esp, 8
cmp eax, 2
je 0x403862
mov dword [ebp - 0x88], eax
jmp 0x4021d6
mov eax, dword [ebp - 0x7c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x4028b4
cmp dword [ebp - 0x74], 3
jne 0x402e11
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov eax, dword [eax + 4]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402bd1
add eax, 2
mov edx, str.Embedding
call fcn.00401340
mov dword [ebp - 0x88], eax
test eax, eax
jne 0x40308a
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 3
jmp 0x40222f
mov edi, dword [ebp - 0xa8]
test edi, edi
jne 0x402b18
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x402ae2
test esi, esi
je 0x40388e
mov edx, esi
mov ebx, 1
lea esi, cs:[esi]
cmp word [edx + 4], 0
lea ecx, [edx + 4]
je 0x402d3a
mov eax, ecx
add eax, 2
cmp word [eax], 0
jne 0x402c20
sub eax, ecx
sar eax, 1
add eax, 1
mov edx, dword [edx]
add ebx, eax
test edx, edx
jne 0x402c10
add ebx, ebx
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_malloc]
mov ecx, eax
mov dword [ebp - 0x70], eax
lea esi, cs:[esi]
cmp word [esi + 4], 0
lea edx, [esi + 4]
je 0x402d33
mov eax, edx
add eax, 2
cmp word [eax], 0
jne 0x402c60
sub eax, edx
lea edi, [ecx + eax]
mov ebx, eax
sar ebx, 1
cmp eax, 2
ja 0x402c92
jmp 0x402c9a
sub ebx, 1
add ecx, 2
add edx, 2
mov word [ecx - 2], ax
cmp ebx, 1
je 0x402cb1
movzx eax, word [edx]
test ax, ax
jne 0x402c80
test ebx, ebx
jne 0x402cb1
mov esi, dword [esi]
test esi, esi
je 0x402cbc
lea ecx, [edi + 2]
mov ebx, 0x3b
mov word [edi], bx
jmp 0x402c50
xor eax, eax
mov word [ecx], ax
mov esi, dword [esi]
test esi, esi
jne 0x402ca4
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, dword [ebp - 0xb4]
mov word [edi], dx
movzx edx, word [ebp - 0xce]
mov dword [ecx + 8], eax
mov eax, ecx
mov dword [ecx + 0xc], edx
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x404900
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x402da3
mov dword [ebp - 0x90], 1
mov eax, dword [ebx]
mov dword [ebp - 0x84], eax
jmp 0x402398
mov edi, ecx
jmp 0x402c9e
mov eax, 1
jmp 0x402c30
lea eax, [ebp - 0x40]
mov esi, ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 8
test eax, eax
jne 0x40290a
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], 5
mov dword [eax + 0xc], ecx
mov dword [eax + 4], 0
mov dword [eax], esi
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp 0x404930
mov dword [ebp - 0x7c], 0
jmp 0x4025fb
mov eax, str._null_
jmp 0x4028b4
mov esi, dword [ebx]
test esi, esi
je 0x402e3d
mov eax, esi
shr eax, 0x10
test eax, eax
je 0x4037b0
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402de0
mov eax, esi
call fcn.00401650
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x402d1c
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
jmp 0x40222f
mov dword [esp], ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x4021cc
call fcn.00401e70
mov dword [ebp - 0x88], eax
jmp 0x4021d6
mov eax, str._null_
jmp 0x402de0
mov esi, dword [ebx]
test esi, esi
je 0x403910
mov eax, esi
shr eax, 0x10
test eax, eax
je 0x4037c5
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402e81
mov eax, esi
call fcn.00401650
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x402a72
lea eax, [ebp - 0x40]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 8
test eax, eax
jne 0x402b4a
test byte [section..data], 1
je 0x4021cc
mov dword [esp + 0xc], str.Product_code_treatment_not_implemented_yet_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 0
call fcn.00401890
jmp 0x4021cc
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x40]
mov edx, str.DllRegisterServer
mov dword [ebp - 0x40], 0
call fcn.00401fe0
call eax
test eax, eax
mov eax, dword [ebp - 0x8c]
js 0x403678
test eax, eax
je 0x4039f4
shr eax, 0x10
test eax, eax
je 0x4039a3
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x8c]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x402f6c
mov eax, esi
call fcn.00401650
mov dword [esp + 4], eax
mov dword [esp], str.Successfully_registered_dll__s_n
call fcn.00401870
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x402f8f
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
mov dword [ebp - 0x88], 0
jmp 0x4021d6
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
mov edx, 0x408336
add eax, 2
call fcn.00401490
mov ecx, eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx]
movzx edx, word [eax]
test ecx, ecx
je 0x40321a
test dx, dx
je 0x40314a
mov edx, eax
add edx, 2
cmp word [edx], 0
jne 0x402fdd
sub edx, eax
mov ecx, edx
sar ecx, 1
cmp edx, 4
mov dword [ebp - 0x7c], ecx
jle 0x403661
mov dword [ebp - 0x84], esi
mov esi, dword [ebp - 0xac]
mov ecx, 2
mov dword [ebp - 0xa8], edi
mov edi, ebx
mov ebx, ecx
movzx edx, word [eax + ebx*2]
lea eax, [edx - 0x41]
cmp ax, 0x35
ja case.0x403023.1
movzx eax, ax
jmp dword [eax*4 + 0x408614]
mov dword [esp + 4], edx
mov dword [esp], str.Unknown_option___c__in_Repair_mode_n
call fcn.00401dc0
mov eax, dword [ebp - 0x7c]
add ebx, 1
cmp ebx, eax
jge 0x403138
mov eax, dword [edi]
jmp 0x403013
or esi, 0x400
jmp 0x40303a
or esi, 0x100
jmp 0x40303a
or esi, 0x200
jmp 0x40303a
or esi, 2
jmp 0x40303a
or esi, 4
jmp 0x40303a
or esi, 0x80
jmp 0x40303a
or esi, 8
jmp 0x40303a
or esi, 0x10
jmp 0x40303a
or esi, 0x20
jmp 0x40303a
or esi, 0x40
jmp 0x40303a
mov eax, dword [ebp - 0x70]
mov ebx, dword [eax + 8]
test byte [section..data], 8
jne 0x4035f9
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_wcstol]
mov dword [section..bss], eax
test eax, eax
jne 0x4032a7
test byte [section..data], 2
je 0x4021d6
test ebx, ebx
je 0x403cca
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x403cb5
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x40310b
mov eax, ebx
call fcn.00401650
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Invalid_parameter__s_n
mov dword [esp + 8], 0x4088b0
mov dword [esp + 4], 0x406000
mov dword [esp], 1
call fcn.00401890
jmp 0x4021d6
mov dword [ebp - 0xac], esi
mov edi, dword [ebp - 0xa8]
mov esi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea esi, [eax + esi + 4]
test byte [section..data], 8
jne 0x4038a2
mov eax, dword [esi]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xa8], eax
jmp 0x402398
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x40]
mov edx, str.DllUnregisterServer
mov dword [ebp - 0x40], 0
call fcn.00401fe0
call eax
test eax, eax
mov eax, dword [ebp - 0x8c]
js 0x403943
test eax, eax
je 0x403939
shr eax, 0x10
test eax, eax
je 0x4039d9
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x8c]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4031ee
mov eax, esi
call fcn.00401650
mov dword [esp + 4], eax
mov dword [esp], str.Successfully_unregistered_dll__s_n
call fcn.00401870
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4021d6
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
jmp 0x4021d6
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, 0x40835c
call fcn.00401490
test eax, eax
je 0x40350d
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x40345e
add eax, 2
mov edx, 0x40835c
call fcn.00401490
test eax, eax
je 0x40345e
mov eax, dword [ebx]
add eax, 4
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp word [eax], 0
je 0x40346c
test byte [section..data], 8
jne 0x4034a3
mov edx, str.REMOVEALL
lea eax, [ebp - 0x6c]
call fcn.00401c50
mov dword [ebp - 0x90], 1
jmp 0x402398
lea ebx, [ebp - 0x40]
mov dword [esp + 0x10], 0x20
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str..pipemsica__x__d
mov dword [esp + 4], 0x18
call fcn.004012f0
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
call dword [sym.imp.kernel32.dll_CreateFileW]
sub esp, 0x1c
mov ebx, eax
cmp eax, 0xffffffff
je 0x403a5c
mov dword [esp + 4], 0
lea edi, [ebp - 0x50]
mov dword [esp], 0
lea esi, [ebp - 0x5c]
call dword [sym.imp.ole32.dll_CoInitializeEx]
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x10
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x4039fe
cmp dword [ebp - 0x5c], 0x10
jne 0x4039fe
mov eax, dword [edi]
test eax, eax
jne 0x4033a0
mov eax, dword [edi + 4]
test eax, eax
jne 0x4033a0
mov eax, dword [edi + 8]
test eax, eax
jne 0x4033a0
mov eax, dword [edi + 0xc]
test eax, eax
jne 0x4033a0
mov dword [ebp - 0x88], 0
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4021d6
mov dword [esp], 0x10
call dword [sym.imp.ucrtbase.dll_malloc]
mov edx, dword [ebp - 0x50]
mov dword [eax], edx
mov edx, dword [ebp - 0x4c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x48]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 0xc], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4012a0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateThread]
sub esp, 0x18
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x403437
cmp dword [ebp - 0x5c], 8
je 0x403333
test byte [section..data], 2
jne 0x403afe
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x88], eax
jmp 0x4021d6
mov ecx, dword [ebp - 0x84]
test ecx, ecx
jne 0x40326e
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + esi + 4]
mov dword [ebp - 0x84], eax
test byte [section..data], 8
je 0x40328b
mov edx, dword [ebp - 0x84]
mov eax, str._null_
test edx, edx
je 0x4034e0
mov eax, dword [ebp - 0x84]
shr eax, 0x10
test eax, eax
je 0x403a41
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x84]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4034e0
mov eax, esi
call fcn.00401650
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.PackageName___s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x40328b
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, str.uninstall
call fcn.00401340
test eax, eax
jne 0x40323c
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x402328
add eax, 2
mov edx, 0x408390
call fcn.00401490
mov ecx, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebx]
test ecx, ecx
je 0x402328
cmp word [eax], 0
je 0x403ced
mov edx, eax
add edx, 2
cmp word [edx], 0
jne 0x40356e
sub edx, eax
mov ecx, edx
sar ecx, 1
cmp edx, 4
mov dword [ebp - 0x84], ecx
jle 0x403ced
mov edx, 2
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xd4], edi
mov esi, edx
mov edi, ebx
mov ebx, dword [ebp - 0xb0]
jmp 0x4035dc
cmp ax, 0x4d
je 0x403cd4
cmp ax, 0x55
je 0x4035f2
mov dword [esp + 4], eax
mov dword [esp], str.Unknown_option___c__in_Advertise_mode_n
call fcn.00401dc0
mov eax, dword [ebp - 0x84]
add esi, 1
cmp esi, eax
jge 0x403cdb
mov eax, dword [edi]
movzx eax, word [eax + esi*2]
cmp ax, 0x6d
je 0x403cd4
jbe 0x4035a9
cmp ax, 0x75
jne 0x4035b9
mov ebx, 1
jmp 0x4035c9
test ebx, ebx
je 0x403cab
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x403924
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x403634
mov eax, ebx
call fcn.00401650
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4081f4
mov dword [esp + 8], 0x4088b0
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x40309d
mov eax, 0x2aa
cmovne eax, dword [ebp - 0xac]
mov dword [ebp - 0xac], eax
jmp 0x40314a
test eax, eax
je 0x403af4
shr eax, 0x10
test eax, eax
je 0x4039be
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x8c]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4036b7
mov eax, esi
call fcn.00401650
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_register_dll__s_n
call fcn.00401dc0
jmp 0x4021d6
mov dword [ebp - 0x88], 2
jmp 0x4021d6
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp word [edx], 0
je 0x403b83
mov ecx, edx
add ecx, 2
cmp word [ecx], 0
jne 0x4036ec
sub ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x84], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov ecx, dword [ebp - 0x84]
test eax, eax
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x70], eax
je 0x4021bd
mov dword [esp + 8], ecx
mov dword [ebp - 0x84], ecx
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x70]
mov dword [esp], edx
call sub.ucrtbase.dll_memcpy
mov edx, dword [ebp - 0x70]
mov eax, 0x20
mov ecx, dword [ebp - 0x84]
mov word [edx + ecx], ax
mov dword [esp + 0x14], edi
mov eax, dword [ebp - 0x7c]
mov dword [esp + 8], 0
add eax, edx
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
mov eax, dword [ebp - 0x80]
call eax
sub esp, 0x18
test eax, eax
je 0x4021ea
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x4021cc
mov dword [esp + 4], esi
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x402de0
mov dword [esp + 4], esi
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x402e81
mov dword [esp + 8], 1
mov dword [esp + 4], str.ServicesActive
mov dword [esp], 0
call dword [sym.imp.advapi32.dll_OpenSCManagerW]
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x403ace
mov dword [esp + 8], 0x10000
mov dword [esp + 4], 0x4080ee
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_OpenServiceW]
sub esp, 0xc
mov esi, eax
test eax, eax
je 0x403a9f
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_DeleteService]
sub esp, 4
test eax, eax
je 0x403b51
mov dword [esp], esi
mov esi, dword [sym.imp.advapi32.dll_CloseServiceHandle]
call esi
mov eax, dword [ebp - 0x78]
sub esp, 4
mov dword [ebp - 0x88], eax
mov dword [esp], ebx
call esi
sub esp, 4
jmp 0x4021d6
mov eax, dword [ebp - 0x84]
call fcn.00401b30
mov ebx, eax
test eax, eax
je 0x4036cc
mov eax, dword [ebp - 0xac]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msi.dll_MsiReinstallProductW
jmp 0x402955
mov dword [esp], 2
call dword [sym.imp.ucrtbase.dll_malloc]
mov edi, eax
jmp 0x402cbf
mov ebx, dword [esi]
test ebx, ebx
je 0x403e00
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x403d25
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4038df
mov eax, ebx
call fcn.00401650
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x40316c
mov eax, str._null_
jmp 0x402e81
call fcn.00404860
jmp 0x402b6e
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x403634
mov eax, str._null_
jmp 0x4031ee
test eax, eax
je 0x403ca1
shr eax, 0x10
test eax, eax
je 0x403b68
mov dword [esp + 4], 0xffffffff
mov esi, dword [ebp - 0x8c]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x403982
mov eax, esi
call fcn.00401650
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_unregister_dll__s_n
call fcn.00401dc0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x88], eax
jmp 0x4021d6
mov eax, dword [ebp - 0x8c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x402f6c
mov eax, dword [ebp - 0x8c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x4036b7
mov eax, dword [ebp - 0x8c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x4031ee
mov eax, str._null_
jmp 0x402f6c
test byte [section..data], 2
je 0x403444
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_read_from_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4088b0
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401890
jmp 0x403444
mov eax, dword [ebp - 0x84]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x4034e0
test byte [section..data], 2
je 0x40344a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_create_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4088b0
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401890
jmp 0x40344a
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 0x424
je 0x403adf
mov dword [esp], str.Failed_to_open_MSI_service_n
call fcn.00401dc0
mov eax, dword [ebp - 0x80]
mov esi, dword [sym.imp.advapi32.dll_CloseServiceHandle]
mov dword [ebp - 0x88], eax
jmp 0x403855
mov dword [esp], str.Failed_to_open_service_control_manager_n
call fcn.00401dc0
jmp 0x4021cc
mov esi, dword [sym.imp.advapi32.dll_CloseServiceHandle]
mov dword [ebp - 0x88], 0
jmp 0x403855
mov eax, str._null_
jmp 0x4036b7
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.Failed_to_write_to_custom_action_server_pipe:__lu_n
mov dword [esp + 8], 0x4088b0
mov dword [esp + 4], 0x406000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401890
jmp 0x403444
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x94], eax
jmp 0x402ae2
mov dword [esp], str.Failed_to_delete_MSI_service_n
call fcn.00401dc0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x78], eax
jmp 0x40383e
mov eax, dword [ebp - 0x8c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401cf0
jmp 0x403982
mov dword [ebp - 0x7c], 2
xor ecx, ecx
jmp 0x4036fd
mov eax, dword [ebx]
mov edx, 0x4083bd
call fcn.00401340
mov edx, eax
test eax, eax
je 0x403c5c
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403c1e
mov eax, dword [ebx]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0xb0], eax
jmp 0x402398
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
mov edx, dword [ebp - 0x70]
jmp 0x40235e
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
mov edx, dword [ebp - 0x70]
jmp 0x403bc5
mov eax, dword [ebx]
mov edx, 0x4083bf
call fcn.00401630
test eax, eax
je 0x403d72
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403d3a
mov edx, dword [ebx]
lea eax, [ebp - 0x68]
call fcn.00401c50
jmp 0x402398
mov eax, str._null_
jmp 0x403982
mov eax, str._null_
jmp 0x403634
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x40310b
mov eax, str._null_
jmp 0x40310b
xor ebx, ebx
jmp 0x4035c9
mov esi, dword [ebp - 0xa4]
mov dword [ebp - 0xb0], ebx
mov edi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403e0a
mov eax, dword [ebx]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa4], eax
jmp 0x402398
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.00401cf0
jmp 0x4038df
mov eax, dword [ebx]
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x403c92
mov eax, dword [ebx]
mov edx, 0x4083c1
call fcn.00401630
test eax, eax
jne 0x403e8b
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x403e42
mov edx, 0x4083c3
add eax, 2
call fcn.00401490
mov ecx, dword [ebx]
mov edx, eax
mov eax, ecx
test edx, edx
jne 0x403dc3
jmp 0x403e42
add eax, 2
cmp word [eax], 0
jne 0x403dc0
sub eax, ecx
mov edx, 2
mov dword [ebp - 0x7c], esi
sar eax, 1
mov ebx, eax
mov eax, dword [ebp - 0xb8]
cmp edx, ebx
jge 0x404327
movzx esi, word [ecx + edx*2]
sub esi, 0x21
cmp si, 0x56
ja case.0x403df9.1
movzx esi, si
jmp dword [esi*4 + 0x4086ec]
mov eax, str._null_
jmp 0x4038df
mov eax, dword [ebx]
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x403d0f
mov eax, dword [ebx]
mov edx, 0x4083ed
call fcn.00401630
test eax, eax
je 0x403f0d
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403ed5
mov dword [ebp - 0x9c], 1
mov eax, dword [ebx]
mov dword [ebp - 0x94], eax
jmp 0x402398
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x403f8a
mov ecx, dword [ebx]
xor ebx, ebx
jmp 0x403ebd
imul ebx, ebx, 0xa
add ecx, 2
lea ebx, [ebx + eax - 0x30]
movzx eax, word [ecx]
lea edx, [eax - 0x30]
cmp dx, 9
jbe 0x403eb3
mov word [ebp - 0xce], bx
jmp 0x402398
mov eax, dword [ebx]
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x403e74
mov eax, dword [ebx]
mov edx, str.update
call fcn.00401630
test eax, eax
jne 0x403e56
mov eax, dword [ebx]
movzx edx, word [eax]
and edx, 0xfffffffd
cmp dx, 0x2d
jne 0x403fc2
mov edx, 0x4083f6
add eax, 2
call fcn.00401490
mov ecx, dword [ebx]
mov edx, eax
mov eax, ecx
test edx, edx
jne 0x403f53
jmp 0x403fc2
add eax, 2
cmp word [eax], 0
jne 0x403f50
sub eax, ecx
cmp eax, 4
je 0x403f71
lea eax, [ecx + 4]
mov edx, 0x4083f8
call fcn.00401340
test eax, eax
je 0x403fee
mov dword [0x409004], 1
mov dword [ebp - 0x98], 2
jmp 0x402398
mov eax, dword [ebx]
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x403ead
mov eax, dword [ebx]
mov edx, str.passive
call fcn.00401630
test eax, eax
je 0x404027
lea eax, [ebp - 0x6c]
mov edx, str.REBOOTPROMPT_S_
call fcn.00401c50
mov dword [ebp - 0x98], 0x63
jmp 0x402398
mov eax, dword [ebx]
mov edx, str.uiet
add eax, 4
call fcn.00401340
test eax, eax
jne 0x403f71
mov eax, dword [ebx]
mov edx, 0x4083ff
add eax, 4
call fcn.00401340
test eax, eax
je 0x40406e
mov dword [ebp - 0x98], 4
jmp 0x402398
mov eax, dword [ebx]
mov edx, 0x408472
call fcn.00401630
mov edx, eax
test eax, eax
je 0x4040cf
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x404094
mov eax, dword [ebx]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x8c], eax
jmp 0x402398
mov eax, dword [ebx]
mov edx, 0x408336
add eax, 4
call fcn.00401340
test eax, eax
je 0x404116
mov dword [ebp - 0x98], 0x85
jmp 0x402398
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
mov edx, dword [ebp - 0x70]
jmp 0x40405b
mov eax, dword [ebx]
mov edx, 0x408474
call fcn.00401630
mov edx, eax
test eax, eax
je 0x404177
mov eax, dword [ebp - 0x74]
add edi, 1
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x40413c
mov eax, dword [ebx]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0x8c], eax
jmp 0x402398
mov eax, dword [ebx]
mov edx, 0x408401
add eax, 4
call fcn.00401340
test eax, eax
je 0x4041cd
mov dword [ebp - 0x98], 0x82
jmp 0x402398
mov eax, dword [ebx]
mov dword [ebp - 0x70], edx
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
mov edx, dword [ebp - 0x70]
jmp 0x404103
mov eax, dword [ebx]
mov edx, str.help
call fcn.00401630
test eax, eax
jne 0x4042f6
mov eax, dword [ebx]
mov edx, 0x40847b
call fcn.00401630
test eax, eax
jne 0x4042f6
mov eax, dword [ebx]
mov edx, 0x4083bd
call fcn.00401630
mov esi, eax
test eax, eax
je 0x4042b2
test byte [section..data], 1
jne 0x4041ff
mov dword [ebp - 0xc4], 1
jmp 0x402398
mov eax, dword [ebx]
mov edx, 0x408404
add eax, 4
call fcn.00401490
mov esi, dword [ebx]
test eax, eax
jne 0x40422c
lea eax, [esi + 4]
call fcn.00401d50
mov dword [esp], str.Unknown_option___s__for_UI_level_n
mov dword [esp + 4], eax
call fcn.00401dc0
jmp 0x402398
xor eax, eax
mov dword [esp + 0xc], str.Unknown_parameter__m_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], eax
call fcn.00401890
mov dword [ebp - 0xc4], esi
jmp 0x402398
mov dword [ebp - 0x98], 3
add esi, 6
cmp word [esi], 0
je 0x402398
mov edx, 0x408406
mov eax, esi
call fcn.00401490
mov edx, 0x408408
mov ebx, eax
mov eax, esi
call fcn.00401490
shl ebx, 7
mov edx, 0x40840a
shl eax, 6
or eax, ebx
or dword [ebp - 0x98], eax
mov eax, esi
call fcn.00401490
test eax, eax
je 0x4042ad
test byte [section..data], 1
je 0x4042a6
xor eax, eax
mov dword [esp + 0xc], 0x40840c
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], eax
call fcn.00401890
or dword [ebp - 0x98], 0x20
add esi, 2
jmp 0x404239
mov eax, dword [ebx]
mov edx, 0x408493
call fcn.00401630
test eax, eax
je 0x4042fd
test byte [section..data], 1
je 0x4041be
xor ebx, ebx
mov dword [esp + 0xc], str.Unknown_parameter__D_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], ebx
call fcn.00401890
jmp 0x4041be
xor eax, eax
call fcn.004018f0
mov eax, dword [ebx]
mov edx, 0x4084ab
call fcn.00401630
test eax, eax
je 0x40446b
mov dword [ebp - 0xcc], eax
jmp 0x402398
or eax, 4
add edx, 1
jmp 0x403ddd
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x74]
add edi, 1
mov esi, dword [ebp - 0x7c]
cmp edi, eax
jge 0x4020f8
mov eax, dword [ebp - 0x70]
lea ebx, [eax + esi + 4]
test byte [section..data], 8
jne 0x4043fc
mov eax, dword [ebx]
call fcn.004015c0
mov ebx, eax
test eax, eax
je 0x4021cc
mov eax, dword [ebp - 0xbc]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call sub.msi.dll_MsiEnableLogW
sub esp, 0xc
test eax, eax
je 0x402398
mov eax, ebx
call fcn.00401d50
mov ecx, dword [ebp - 0xbc]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [esp + 4], eax
mov dword [esp], str.Logging_in__s__0x_08lx___lu__failed_n
mov dword [esp + 8], ecx
call fcn.00401dc0
mov dword [esp], 1
call dword [sym.imp.kernel32.dll_ExitProcess]
or eax, 2
jmp case.0x403df9.1
mov eax, 0x7fdf
jmp case.0x403df9.1
or dword [ebp - 0xbc], 2
jmp case.0x403df9.1
or ah, 1
jmp case.0x403df9.1
or dword [ebp - 0xbc], 1
jmp case.0x403df9.1
or ah, 8
jmp case.0x403df9.1
mov eax, dword [ebx]
call fcn.00401d50
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.argvW__d____s_n
mov dword [esp + 8], str.WinMain
mov dword [esp + 4], 0x406000
mov dword [esp], 3
call fcn.00401890
jmp 0x404352
or ah, 4
jmp case.0x403df9.1
or al, 0x80
jmp case.0x403df9.1
or eax, 1
jmp case.0x403df9.1
or eax, 0x10
jmp case.0x403df9.1
or eax, 8
jmp case.0x403df9.1
or ah, 2
jmp case.0x403df9.1
or ah, 0x10
jmp case.0x403df9.1
mov edx, dword [ebx]
lea eax, [ebp - 0x6c]
call fcn.00401c50
jmp 0x402398
jmp dword [sym.imp.msi.dll_MsiAdvertiseProductW]
jmp dword [sym.imp.msi.dll_MsiApplyPatchW]
jmp dword [sym.imp.msi.dll_MsiConfigureProductExW]