Function at 0x41e892
Capabilities:
Persist via run registry key
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42bc60
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x6504
call fcn.00427560
mov eax, dword [0x445028]
xor eax, esp
mov dword [esp + 0x6500], eax
push ebx
push esi
push edi
mov eax, dword [0x445028]
xor eax, esp
push eax
lea eax, [esp + 0x6518]
mov dword fs:[0], eax
mov eax, dword [sym.imp.MSVCR90.dll___wargv]
mov eax, dword [eax]
push dword [eax + 4]
mov ebx, ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x50], ebx
call dword [0x42e8c8]
xor edi, edi
push 0x100
push edi
push 0x447430
mov dword [esp + 0x652c], edi
call sub.MSVCR90.dll_memset
add esp, 0xc
mov esi, 0x42fde8
push esi
push 0x4379c0
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Replace]
push esi
push 0x4379c4
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Replace]
push esi
push 0x4379c8
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Replace]
push 0x4379cc
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41e9b5
mov byte [ebx + 0x1a8], 1
call dword [sym.imp.K9PCUhelper.dll_int___cdecl_STIsCurrentUserLocalAdministrator_void_]
test eax, eax
jne 0x41e9b5
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push str.nowait
call dword [0x42e8c8]
mov ecx, ebx
call dword [sym.imp.K9PCUhelper.dll_public:_bool___thiscall_CSystweakApp::RestartSelfAsAdmin_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____bool_]
xor ebx, ebx
inc ebx
lea ecx, [esp + 0x10]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, ebx
mov ecx, dword [esp + 0x6518]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6500]
xor ecx, esp
call fcn.00426b86
mov esp, ebp
pop ebp
ret
push str.nowait
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41e9e8
mov eax, dword [sym.imp.MSVCR90.dll___argc]
cmp dword [eax], 1
jle 0x41e9df
push 0x800
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41e9ef
mov byte [ebx + 0x1a8], 0
jmp 0x41e9ef
mov byte [ebx + 0x1a8], 1
mov ecx, ebx
call dword [sym.imp.K9PCUhelper.dll_public_virtual:_int___thiscall_CSystweakApp::InitInstance_void_]
cmp eax, edi
jne 0x41eb4c
mov eax, dword [sym.imp.K9PCUhelper.dll_bool_CSystweakApp::m_bRunningInAsMulitpleInstance]
cmp byte [eax], 0
je 0x41eb45
mov eax, dword [sym.imp.K9PCUhelper.dll_bool_CSystweakApp::m_bIsMuliInstncHandlBySysApp]
cmp byte [eax], 0
je 0x41eb45
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
mov byte [esp + 0x6520], 1
push dword [sym.imp.K9PCUhelper.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____CSystweakApp::m_ProgramName]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push dword [esp + 0x18]
push str.32770
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41eb3b
mov ebx, 0x436da4
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ea7c
push str.newinstance
push ebx
jmp 0x41eb2e
mov ebx, str.regopts
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.diskopts
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.winopts
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.secpriv
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.backrecv
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.cmnprbfix
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, str.regmaint
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41ea71
mov ebx, 0x436e2c
push ebx
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
push str.newinstance
test eax, eax
je 0x41ea76
push edi
push dword [0x446f9c]
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
xor ebx, ebx
jmp 0x41e985
push 0x434158
mov ecx, ebx
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CSystweakApp::SetDefaultINISectionName_wchar_t_const__]
lea eax, [esp + 0x6c]
push 1
push eax
mov dword [esp + 0x74], edi
call dword [sym.imp.K9PCUhelper.dll_public:_static_enum_ASO_TRIAL_VERSION_STATUS___cdecl_CSystweakApp::GetASOStatus_unsigned_long_int___bool_]
pop ecx
pop ecx
mov esi, eax
call dword [sym.imp.K9PCUhelper.dll_public:_static_bool___cdecl_CSystweakApp::IsExpiredActually_void_]
test al, al
jne 0x41eb93
cmp esi, 0x278d7
je 0x41eb93
call dword [sym.imp.K9PCUhelper.dll_public:_static_bool___cdecl_CSystweakApp::IsRegisteredVersion_void_]
test al, al
je 0x41eb9a
mov byte [ebx + 0x1c2], 1
jmp 0x41eba1
mov byte [ebx + 0x1c3], 1
mov byte [ebx + 0x1c2], 0
cmp byte [ebx + 0x1c2], 0
mov edi, dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::Open_struct_HKEY_____wchar_t_const___bool_]
mov esi, SysReAllocString
jne 0x41ebbf
call fcn.0041fa53
jmp 0x41ec8f
call dword [sym.imp.K9PCUhelper.dll_unsigned_long_int___cdecl__winmajor_void_]
cmp eax, 6
jb 0x41ebe1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x430a6c
call dword [0x42e8c8]
call fcn.00420253
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x28], esi
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::constructor_struct_HKEY____const_const__]
push str.SoftwareMicrosoftWindowsCurrentVersionRun
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6524], 2
call dword [0x42e8c8]
push 1
mov byte [esp + 0x6524], 3
push dword [esp + 0x1c]
lea ecx, [esp + 0x58]
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x60], 0x2001f
call edi
test eax, eax
je 0x41ec49
push 0x430a6c
lea ecx, [esp + 0x54]
call dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::DeleteValue_wchar_t_const__]
lea ecx, [esp + 0x50]
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::Close_void_]
push 1
push dword [esp + 0x1c]
lea ecx, [esp + 0x58]
push esi
call edi
test eax, eax
je 0x41ec73
push 0x430a6c
lea ecx, [esp + 0x54]
call dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::DeleteValue_wchar_t_const__]
lea ecx, [esp + 0x50]
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::Close_void_]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6520], 0
call dword [sym.imp.K9PCUhelper.dll_public_virtual:_void___thiscall_CRegistry::destructor_void_]
push str.start
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41f004
push str.autorun
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41f004
push 0x436e2c
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ecdc
mov byte [ebx + 0x1ac], 1
jmp 0x41f194
push 0x436da4
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ecfb
mov byte [ebx + 0x1ba], 1
jmp 0x41f194
push str.regopts
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ed1a
mov byte [ebx + 0x1bb], 1
jmp 0x41f194
push str.diskopts
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ed39
mov byte [ebx + 0x1bc], 1
jmp 0x41f194
push str.winopts
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ed58
mov byte [ebx + 0x1bd], 1
jmp 0x41f194
push str.secpriv
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ed77
mov byte [ebx + 0x1be], 1
jmp 0x41f194
push str.backrecv
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ed96
mov byte [ebx + 0x1bf], 1
jmp 0x41f194
push str.cmnprbfix
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41edb5
mov byte [ebx + 0x1c0], 1
jmp 0x41f194
push str.regmaint
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41edd4
mov byte [ebx + 0x1c1], 1
jmp 0x41f194
push str.spcscan
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41edfd
mov byte [ebx + 0x1ac], 1
mov dword [ebx + 0x1ec], 2
jmp 0x41f194
push str.cleaningscan
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ee1c
mov byte [ebx + 0x1ae], 1
jmp 0x41f194
push str.optimizationscan
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ee3b
mov byte [ebx + 0x1af], 1
jmp 0x41f194
push str.securityscan
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ee5a
mov byte [ebx + 0x1b0], 1
jmp 0x41f194
push str.checklastscanstatus
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ef5c
call dword [sym.imp.K9PCUhelper.dll_public:_static_bool___cdecl_CSystweakApp::IsRegisteredVersion_void_]
test al, al
je 0x41ee87
mov byte [ebx + 0x1b2], 0
jmp 0x41eb45
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
mov byte [esp + 0x6520], 9
call sub.mfc90u.dll_AfxGetModuleState
mov eax, dword [eax + 8]
lea ecx, [esp + 0x28]
push ecx
push eax
call dword [sym.imp.K9PCUhelper.dll_wchar_t_const____cdecl_GetAppPath_struct_HINSTANCE_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____]
pop ecx
pop ecx
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov esi, dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x20]
push eax
call esi
pop ecx
pop ecx
push str.K9PCUNewScheduler.exe
lea ecx, [esp + 0x30]
call dword [0x42e8c8]
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x6528], 0xa
call esi
pop ecx
pop ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6520], 9
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
call dword [sym.imp.K9PCUhelper.dll_int___cdecl_STIsCurrentUserLocalAdministrator_void_]
test eax, eax
je 0x41ef34
xor eax, eax
push eax
push eax
push str._k9pcuservice
push dword [esp + 0x28]
push 0x434458
push eax
call dword [sym.imp.K9PCUhelper.dll_public:_static_struct_HINSTANCE______cdecl_CSystweakApp::ShellExecuteW_struct_HWND_____wchar_t_const___wchar_t_const___wchar_t_const___wchar_t_const___int_]
add esp, 0x18
lea ecx, [esp + 0x1c]
mov byte [ebx + 0x1b2], 1
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x28]
mov byte [esp + 0x6520], 0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
jmp 0x41f194
push str.firstinstall
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41ef7b
mov byte [ebx + 0x1aa], 1
jmp 0x41f194
push str.startedafteroptimizationPartial
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
je 0x41efa1
push str.startedafteroptimizationFull
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41efaf
push 0
push 0
call fcn.004205b7
jmp 0x41f194
push str.removejumplist
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CompareNoCase]
test eax, eax
jne 0x41f194
lea eax, [esp + 0x2c]
push eax
push 0x438608
xor ebx, ebx
inc ebx
push ebx
push 0
push 0x42ecec
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x41e985
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41e985
cmp byte [ebx + 0x1c3], 0
mov byte [ebx + 0x1b1], 1
jne 0x41f194
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x28], esi
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::constructor_struct_HKEY____const_const__]
mov byte [esp + 0x6520], 4
call dword [sym.imp.K9PCUhelper.dll_wchar_t_const____cdecl_GetSystweakAppKey_void_]
push eax
lea ecx, [esp + 0x30]
call dword [0x42e8c8]
push 1
mov byte [esp + 0x6524], 5
push dword [esp + 0x30]
lea ecx, [esp + 0x58]
push esi
call edi
test eax, eax
je 0x41f178
mov esi, str.LastShowTime
push esi
lea ecx, [esp + 0x54]
call dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::VerifyValue_wchar_t_const__]
test eax, eax
je 0x41f123
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
lea eax, [esp + 0x28]
push eax
push esi
lea ecx, [esp + 0x58]
mov byte [esp + 0x6528], 6
call dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::ReadString_wchar_t_const___class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____]
lea esi, [esp + 0x108]
call fcn.00416989
lea esi, [esp + 0xec]
call fcn.00416989
mov eax, dword [esp + 0x28]
call fcn.004169b3
test al, al
je 0x41f10f
mov eax, esi
push eax
lea esi, [esp + 0x74]
lea eax, [esp + 0x10c]
call fcn.00416822
mov ecx, esi
call fcn.004167c9
call fcn.00427660
cmp eax, 3
jg 0x41f10f
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6520], 0
call dword [sym.imp.K9PCUhelper.dll_public_virtual:_void___thiscall_CRegistry::destructor_void_]
jmp 0x41eb45
lea ecx, [esp + 0x28]
mov byte [esp + 0x6520], 5
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
jmp 0x41f16e
lea esi, [esp + 0x70]
call fcn.00416989
mov eax, esi
push eax
lea edi, [esp + 0x28]
call fcn.004166b7
mov byte [esp + 0x6520], 7
mov eax, dword [eax]
push 0
push eax
push str.LastShowTime
lea ecx, [esp + 0x5c]
call dword [sym.imp.K9PCUhelper.dll_public:_int___thiscall_CRegistry::WriteString_wchar_t_const___wchar_t_const___bool_]
mov ecx, edi
mov byte [esp + 0x6520], 5
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::Close_void_]
lea ecx, [esp + 0x50]
call dword [sym.imp.K9PCUhelper.dll_public:_void___thiscall_CRegistry::Close_void_]
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6520], 0
call dword [sym.imp.K9PCUhelper.dll_public_virtual:_void___thiscall_CRegistry::destructor_void_]
call fcn.00420849
cmp eax, 1
jne 0x41f1a4
mov byte [ebx + 0x1aa], al
cmp byte [ebx + 0x1aa], 0
je 0x41f28a
call dword [sym.imp.K9PCUhelper.dll_public:_static_bool___cdecl_CSystweakApp::IsRegisteredVersion_void_]
test al, al
jne 0x41f28a
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
mov byte [esp + 0x6520], 0x94
call sub.mfc90u.dll_AfxGetModuleState
mov eax, dword [eax + 8]
lea ecx, [esp + 0x18]
push ecx
push eax
call dword [sym.imp.K9PCUhelper.dll_wchar_t_const____cdecl_GetAppPath_struct_HINSTANCE_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____]
pop ecx
pop ecx
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov edi, dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x20]
push eax
call edi
pop ecx
pop ecx
push str.K9PCUNewScheduler.exe
lea ecx, [esp + 0x34]
call dword [0x42e8c8]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x6528], 0x95
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x6520], 0x94
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
call dword [sym.imp.K9PCUhelper.dll_int___cdecl_STIsCurrentUserLocalAdministrator_void_]
test eax, eax
je 0x41f26c
xor eax, eax
push eax
push eax
push str._k9pcuservice
push dword [esp + 0x28]
push 0x434458
push eax
call dword [sym.imp.K9PCUhelper.dll_public:_static_struct_HINSTANCE______cdecl_CSystweakApp::ShellExecuteW_struct_HWND_____wchar_t_const___wchar_t_const___wchar_t_const___wchar_t_const___int_]
add esp, 0x18
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x18]
mov byte [esp + 0x6520], 0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
jmp 0x41f290
mov edi, dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
call dword [sym.imp.K9PCUhelper.dll_wchar_t_const____cdecl_GetSystweakAppKey_void_]
push eax
lea ecx, [esp + 0x24]
call dword [0x42e8c8]
push str.OneClickCure
lea ecx, [esp + 0x34]
mov byte [esp + 0x6524], 0x96
call dword [0x42e8c8]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x6528], 0x97
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x6520], 0x96
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [0x42e8d8]
push str.SysClean
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6524], 0x98
call dword [0x42e8c8]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0x99
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x6520], 0x98
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x11
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0x9a
mov ecx, esp
mov dword [esp + 0x24], esp
push str.K9PCUSystemCleaner.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0x9b
mov ecx, esp
mov dword [esp + 0x44], esp
push str.System_Cleaner
call dword [0x42e8c8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x6534], 0x98
call fcn.0041e060
lea esi, [ebx + 0x150]
lea ebx, [esp + 0xbc]
mov eax, esi
mov byte [esp + 0x6520], 0x9c
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.DiskDefrag
lea ecx, [esp + 0x20]
call dword [0x42e8c8]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0x9d
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6520], 0x9c
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 7
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0x9e
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.K9PCUDiskOptimizer.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0x9f
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Disk_Optimizer
call dword [0x42e8c8]
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x6534], 0x9c
call fcn.0041e060
lea ebx, [esp + 0x9c]
mov eax, esi
mov byte [esp + 0x6520], 0xa0
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
mov edi, str.System_Protector
push edi
lea ecx, [esp + 0x3c]
call dword [0x42e8c8]
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0xa1
call dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
pop ecx
pop ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x6520], 0xa0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 4
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0xa2
mov ecx, esp
mov dword [esp + 0x44], esp
push str.K9PCUSystemProtector.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xa3
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call dword [0x42e8c8]
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x6534], 0xa0
call fcn.0041e060
lea ebx, [esp + 0x8c]
mov eax, esi
mov byte [esp + 0x6520], 0xa4
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.PrivPro
lea ecx, [esp + 0x48]
call dword [0x42e8c8]
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x18]
mov byte [esp + 0x6524], 0xa5
mov edi, dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
push eax
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x6520], 0xa4
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x18
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0xa6
mov ecx, esp
mov dword [esp + 0x50], esp
push str.K9PCUPrivacyProtector.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xa7
mov ecx, esp
mov dword [esp + 0x48], esp
push str.Privacy_Protector
call dword [0x42e8c8]
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0x6534], 0xa4
call fcn.0041e060
lea ebx, [esp + 0x7c]
mov eax, esi
mov byte [esp + 0x6520], 0xa8
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.DriverOpt
lea ecx, [esp + 0x44]
call dword [0x42e8c8]
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0xa9
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x6520], 0xa8
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 8
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.K9PCUDriverUpdater.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xab
mov ecx, esp
mov dword [esp + 0x54], esp
push str.Driver_Updater
call dword [0x42e8c8]
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x6534], 0xa8
call fcn.0041e060
lea ebx, [esp + 0xcc]
mov eax, esi
mov byte [esp + 0x6520], 0xac
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.RegClean
lea ecx, [esp + 0x40]
call dword [0x42e8c8]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0xad
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6520], 0xac
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 3
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0xae
mov ecx, esp
mov dword [esp + 0x48], esp
push str.K9PCURegClean.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xaf
mov ecx, esp
mov dword [esp + 0x50], esp
push str.Registry_Cleaner
call dword [0x42e8c8]
lea eax, [esp + 0xbc]
push eax
mov byte [esp + 0x6534], 0xac
call fcn.0041e060
lea ebx, [esp + 0xac]
mov eax, esi
mov byte [esp + 0x6520], 0xb0
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.RegOpt
lea ecx, [esp + 0x4c]
call dword [0x42e8c8]
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0xb1
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x48]
mov byte [esp + 0x6520], 0xb0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0xb
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
push ecx
mov byte [esp + 0x652c], 0xb2
mov ecx, esp
mov dword [esp + 0x54], esp
push str.K9PCURegistryOptimizer.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xb3
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.Registry_Optimizer
call dword [0x42e8c8]
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x6534], 0xb0
call fcn.0041e060
lea ebx, [esp + 0xdc]
mov eax, esi
mov byte [esp + 0x6520], 0xb4
call fcn.00420f36
mov esi, dword [esp + 0x4c]
lea eax, [esi + 0x164]
lea ebx, [esp + 0x8c]
call fcn.00420f36
lea ebx, [esp + 0x7c]
lea eax, [esi + 0x164]
call fcn.00420f36
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push str.SysAnalyzer
lea ecx, [esp + 0x28]
call dword [0x42e8c8]
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x6528], 0xb5
call edi
pop ecx
pop ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x6520], 0xb4
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x10
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [0x42e8d8]
mov byte [esp + 0x6528], 0xb6
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push str.K9PCUSystemAnalyzerAndAdvisor.exe
call dword [0x42e8c8]
push ecx
mov byte [esp + 0x6530], 0xb7
mov ecx, esp
mov dword [esp + 0x34], esp
push str.System_and_Security_Advisor
call dword [0x42e8c8]
lea eax, [esp + 0x108]
push eax
mov byte [esp + 0x6534], 0xb4
call fcn.0041e060
lea ebx, [esp + 0xf8]
lea eax, [esi + 0x164]
mov byte [esp + 0x6520], 0xb8
call fcn.00420f36
lea edi, [esi + 0x178]
lea ebx, [esp + 0x9c]
mov eax, edi
call fcn.00420f36
lea ebx, [esp + 0xcc]
mov eax, edi
call fcn.00420f36
lea ebx, [esp + 0xdc]
mov eax, edi
call fcn.00420f36
lea edi, [esi + 0x18c]
lea ebx, [esp + 0xac]
mov eax, edi
call fcn.00420f36
lea ebx, [esp + 0xbc]
mov eax, edi
call fcn.00420f36
xor ebx, ebx
mov byte [esi + 0x1f1], 1
mov byte [esi + 0x1f2], bl
mov byte [esi + 0x1f3], 1
mov byte [esi + 0x1f0], bl
call dword [sym.imp.K9PCUhelper.dll_unsigned_long_int___cdecl__winmajor_void_]
cmp eax, 6
jae 0x41f96c
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [esi + 0x124], eax
jmp 0x41f99b
push 6
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, ebx
mov dword [esi + 0x124], eax
jl 0x41f99b
call fcn.0041e42f
test al, al
jne 0x41f98d
call fcn.0041e3ed
call fcn.0041e42f
test al, al
je 0x41f99b
call fcn.004236b5
lea eax, [esp + 0x114]
push eax
call fcn.00418489
lea eax, [esp + 0x114]
mov byte [esp + 0x6520], 0xb9
mov dword [esi + 0x1a4], eax
mov dword [esi + 0x20], eax
mov esi, eax
call fcn.0041e78c
mov ecx, esi
call sub.mfc90u.dll_CDialog::DoModal
mov ecx, esi
mov byte [esp + 0x6520], 0xb8
call fcn.004189be
lea esi, [esp + 0xf8]
call fcn.00416489
lea esi, [esp + 0xdc]
call fcn.00416489
lea esi, [esp + 0xac]
call fcn.00416489
lea esi, [esp + 0xcc]
call fcn.00416489
lea esi, [esp + 0x7c]
call fcn.00416489
lea esi, [esp + 0x8c]
call fcn.00416489
lea esi, [esp + 0x9c]
call fcn.00416489
lea esi, [esp + 0xbc]
call fcn.00416489
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
jmp 0x41e985