Function at 0x402650
Capabilities:
Create directory
Get common file path
Inspect load icon resource

Disassembly:
sub esp, 0xac4
push ebx
push ebp
push esi
push edi
push 0x6b
mov ebx, ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov ebp, dword [esp + 0xad8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
push 0x80
push ebp
mov dword [ebx], eax
call esi
mov eax, dword [ebx]
push eax
push 0
push 0x80
push ebp
call esi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push 0xac44
push ebp
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 0
push 0xac45
push ebp
call edi
push eax
call esi
mov ecx, 0xa2
xor eax, eax
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x4c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x402728
mov ecx, 0xa2
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
push 0x41f1b8
call fcn.00407fac
add esp, 4
cmp eax, 0x143
jbe 0x402701
mov eax, 0x143
jmp 0x40270e
push 0x41f1b8
call fcn.00407fac
add esp, 4
lea ecx, [eax + eax]
mov esi, 0x41f1b8
mov edx, ecx
lea edi, [esp + 0x4c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [esp + 0x4c]
push str.SWUpdate_
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [esp + 0x4c]
push 0
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea esi, [ebx + 0x828]
push esi
call edi
push esi
mov dword [ebx + 0x84c], ebp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebx + 0x828]
push eax
call edi
lea eax, [ebx + 0x828]
push eax
call edi
lea edi, [ebx + 0x418]
mov ecx, 0x82
xor eax, eax
push str.www.novoasoft.com
rep stosd dword es:[edi], eax
call fcn.00407fac
add esp, 4
cmp eax, 0x103
jbe 0x40279f
mov eax, 0x103
jmp 0x4027ac
push str.www.novoasoft.com
call fcn.00407fac
add esp, 4
lea ecx, [eax + eax]
mov esi, str.www.novoasoft.com
mov edx, ecx
lea edi, [ebx + 0x418]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebx + 0x828]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebx + 0x828]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edi, [ebx + 0x620]
mov ecx, 0x82
xor eax, eax
push 0x4241b0
rep stosd dword es:[edi], eax
call fcn.00407fac
add esp, 4
cmp eax, 0x103
jbe 0x40280c
mov eax, 0x103
jmp 0x402819
push 0x4241b0
call fcn.00407fac
add esp, 4
lea ecx, [eax + eax]
mov esi, 0x4241b0
mov eax, ecx
lea edi, [ebx + 0x620]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebx + 0x828]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebx + 0x828]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edi, [ebx + 0x210]
mov ecx, 0x82
xor eax, eax
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.00407fac
add esp, 4
cmp eax, 0x103
jbe 0x402879
mov eax, 0x103
jmp 0x402886
lea edx, [esp + 0x4c]
push edx
call fcn.00407fac
add esp, 4
lea ecx, [eax + eax]
lea esi, [esp + 0x4c]
mov eax, ecx
lea edi, [ebx + 0x210]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebx + 0x828]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call esi
lea eax, [ebx + 0x828]
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x1037
push 0xad0c
push ebp
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
or al, 0x20
push eax
push 0
push 0x1036
push 0xad0c
push ebp
call esi
push eax
call edi
mov eax, 0x6e
push 0xad0c
push ebp
mov dword [esp + 0x1c], 0x69
mov dword [esp + 0x20], pe_nt_image_headers32
mov dword [esp + 0x24], 0x6a
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x6b
mov dword [esp + 0x30], eax
call esi
mov dword [esp + 0x10], eax
xor esi, esi
lea edi, [esp + 0x18]
mov edx, dword [edi - 4]
lea ecx, [esp + 0x2d4]
push 0x400
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_LoadStringW]
mov ecx, dword [edi]
lea eax, [esp + 0x2d4]
lea edx, [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x10]
push edx
push esi
push 0x1061
push eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 7
mov dword [esp + 0x44], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
add edi, 8
cmp esi, 3
jb 0x40292d
push ebp
mov ecx, ebx
call fcn.004029a0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xac4
ret 4