Function at 0x41ae5a
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x424
mov ecx, dword [ebp + 8]
xor eax, eax
push ebx
push esi
push edi
push eax
push eax
push eax
push 3
mov edx, 0x80000000
mov dword [esp + 0x34], eax
call fcn.00417b10
add esp, 0x10
mov dword [esp + 0x28], eax
test eax, eax
jne 0x41ae96
call fcn.0044cc8a
jmp 0x41bbf0
call fcn.0043d5bb
push eax
lea ecx, [esp + 0x1c]
call fcn.0043bbe8
lea ecx, [esp + 0x18]
call dword [sym.imp.CBSHost.dll_CbsCreateTempDirectory2]
mov ebx, eax
test ebx, ebx
jne 0x41bbe2
lea eax, [ebp + 0x14]
mov dword [esp + 0x78], 0x49512c
mov dword [esp + 0x50], eax
lea esi, [esp + 0x50]
lea eax, [esp + 0x28]
mov dword [esp + 0x54], eax
lea edi, [esp + 0x7c]
lea eax, [esp + 0x18]
mov dword [esp + 0x58], eax
lea ecx, [esp + 0x1d8]
movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x78]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xa0], eax
call fcn.0043ba54
lea ecx, [esp + 0x78]
call fcn.0043ba36
push 0x230
lea eax, [esp + 0x204]
push eax
push dword [esp + 0x30]
call dword [sym.imp.WIMGAPI.DLL_WIMGetAttributes]
test eax, eax
jne 0x41af2b
call fcn.0044cc8a
mov ebx, eax
jmp 0x41bbd6
push 3
pop edi
cmp dword [esp + 0x418], edi
jae 0x41af41
mov ebx, 0xa0020001
jmp 0x41bbd6
lea ecx, [esp + 0xc0]
call fcn.00431b45
lea eax, [esp + 0x74]
xor ebx, ebx
push eax
lea eax, [esp + 0x50]
mov dword [esp + 0x50], ebx
push eax
push dword [esp + 0x30]
call dword [sym.imp.WIMGAPI.DLL_WIMGetImageInformation]
test eax, eax
jne 0x41af77
call fcn.0044cc8a
mov ebx, eax
jmp 0x41bbaa
push dword [esp + 0x4c]
lea ecx, [esp + 0xc4]
call fcn.0043a6ec
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
call fcn.00435aa2
lea eax, [esp + 0x2c]
mov edx, str.WIM_IMAGE
push eax
lea ecx, [esp + 0xc4]
call fcn.00435de6
pop ecx
mov ecx, dword [esp + 0x2c]
push 1
push 5
push 0x495184
mov ecx, dword [ecx]
call fcn.0043b7cc
mov esi, 0x4934ec
test eax, eax
je 0x41afe3
mov eax, dword [eax + 4]
test eax, eax
jne 0x41afda
mov eax, esi
cmp word [eax], bx
jne 0x41bb9c
mov ecx, dword [esp + 0x2c]
push 1
push 4
push str.NAME
mov ecx, dword [ecx]
call fcn.0043b7cc
test eax, eax
je 0x41bb9c
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b008
mov eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push str.Windows_Setup_Media
push eax
call esi
test eax, eax
jne 0x41bb9c
mov ecx, dword [esp + 0x2c]
push 1
push 5
push 0x495184
mov ecx, dword [ecx + 4]
mov dword [esp + 0x1c], 4
call fcn.0043b7cc
test eax, eax
jne 0x41b045
mov dword [esp + 0x10], edi
jmp 0x41b09a
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b051
mov eax, 0x4934ec
push 0x48f3bc
push eax
call esi
test eax, eax
jne 0x41bb9c
mov ecx, dword [esp + 0x2c]
push 1
push 5
push 0x495184
mov ecx, dword [ecx + 8]
call fcn.0043b7cc
test eax, eax
je 0x41bb9c
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b08a
mov eax, 0x4934ec
push 0x495ab8
push eax
call esi
test eax, eax
jne 0x41bb9c
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
mov ecx, dword [ebp + 0x14]
mov edi, dword [sym.imp.WIMGAPI.DLL_WIMRegisterMessageCallback]
sar eax, 2
inc eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
test ecx, ecx
je 0x41b0d6
lea eax, [esp + 0x60]
push eax
push fcn.0041a9b2
push dword [esp + 0x30]
call edi
push 1
push dword [esp + 0x2c]
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
push ebx
push dword [esp + 0x1c]
mov esi, eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMApplyImage]
test eax, eax
je 0x41b0fa
mov dword [esp + 0xc], ebx
jmp 0x41b105
call fcn.0044cc8a
mov ebx, eax
mov dword [esp + 0xc], eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
je 0x41b119
mov dword [esp + 0xc], ebx
jmp 0x41bba1
push 0x495abc
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043baed
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.0043d912
push str.sources_boot.wim
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043baed
pop ecx
xor ecx, ecx
push ecx
push 2
push ecx
push 2
push 0xc0000000
push dword [eax]
call dword [sym.imp.WIMGAPI.DLL_WIMCreateFile]
mov ecx, dword [esp + 0x14]
mov esi, eax
mov dword [esp + 0x40], esi
lea ecx, [ecx - 0x10]
call fcn.0043d912
test esi, esi
je 0x41b20c
call dword [sym.imp.CBSHost.dll_DismGetScratchDir]
push eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetTemporaryPath]
cmp dword [ebp + 0x14], 0
je 0x41b1a3
lea eax, [esp + 0x60]
push eax
push fcn.0041a9b2
push esi
call edi
cmp dword [esp + 0x10], 4
push 2
jne 0x41b1f4
pop edi
push edi
push dword [esp + 0x2c]
lea eax, [edi - 1]
mov dword [esp + 0x68], eax
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
push 0
push esi
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41b1dc
call fcn.0044cc8a
mov ebx, eax
mov dword [esp + 0xc], ebx
push dword [esp + 0x14]
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
jne 0x41b23d
inc edi
cmp edi, 4
jne 0x41b1ad
push 2
jmp 0x41b251
push dword [esp + 0x2c]
mov dword [esp + 0x68], 1
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov edi, eax
test edi, edi
jne 0x41b215
call fcn.0044cc8a
mov ebx, eax
jmp 0x41b241
push 0
push esi
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41b22e
call fcn.0044cc8a
mov ebx, eax
mov dword [esp + 0xc], ebx
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
je 0x41b24f
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0xc]
lea ecx, [esp + 0x40]
call fcn.004397f4
jmp 0x41bba1
push 1
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetBootImage]
lea ecx, [esp + 0x40]
call fcn.004397f4
push 0x495ad8
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x4c]
call fcn.0043baed
mov esi, dword [esp + 0x4c]
xor eax, eax
pop ecx
push eax
push dword [ebp + 0x10]
mov edx, 0xc0000000
mov ecx, esi
push eax
push 2
call fcn.00417b10
mov edi, eax
add esp, 0x10
mov dword [esp + 0x40], edi
test edi, edi
je 0x41bb7e
call dword [sym.imp.CBSHost.dll_DismGetScratchDir]
push eax
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMSetTemporaryPath]
cmp dword [ebp + 0x14], 0
je 0x41b2c3
lea eax, [esp + 0x60]
push eax
push fcn.0041a9b2
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMRegisterMessageCallback]
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov ecx, edx
sar eax, 2
mov dword [esp + 0x20], edx
cmp edx, eax
ja 0x41b3fc
push ecx
push dword [esp + 0x2c]
lea eax, [ecx - 1]
mov dword [esp + 0x68], eax
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov esi, eax
test esi, esi
je 0x41bb7e
push 0
push edi
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41b315
call fcn.0044cc8a
mov ebx, eax
mov dword [esp + 0xc], ebx
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
jne 0x41b464
cmp dword [esp + 0x10], 3
jne 0x41b3dc
mov eax, dword [esp + 0x20]
add eax, 0xfffffffe
push eax
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov esi, eax
mov dword [esp + 0x38], esi
test esi, esi
je 0x41b44f
push str.sources_boot.wim
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043baed
pop ecx
push ebx
push str.WindowsSystem32Recoverywinre.wim
push dword [eax]
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMAddImagePath]
mov ecx, dword [esp + 0x14]
mov ebx, eax
add ecx, 0xfffffff0
call fcn.0043d912
test ebx, ebx
jne 0x41b3a5
call fcn.0044cc8a
mov ebx, eax
mov dword [esp + 0xc], ebx
cmp ebx, 0x800700b7
jne 0x41b449
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
and dword [eax + ecx*4], 0
jmp 0x41b3a9
mov ebx, dword [esp + 0xc]
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x40]
push eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMGetImageInformation]
push dword [esp + 0x44]
push dword [esp + 0x40]
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetImageInformation]
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [esp + 0x38]
call fcn.004397f4
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
sub eax, dword [esp + 0x2c]
inc ecx
sar eax, 2
mov dword [esp + 0x20], ecx
cmp ecx, eax
jbe 0x41b2e0
mov esi, dword [esp + 0x48]
lea ecx, [esp + 0x40]
call fcn.004397f4
mov edi, dword [esp + 0x10]
cmp edi, 3
jne 0x41b778
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.0043cad2
add eax, 0x10
mov dword [edi], eax
call fcn.0041a9e2
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41b46d
push 0x495b4c
push str.wimgapi
push 1
call dword [sym.imp.CBSHost.dll_DismWriteLog]
jmp 0x41bb85
mov dword [esp + 0xc], ebx
jmp 0x41b456
call fcn.0044cc8a
mov ebx, eax
lea ecx, [esp + 0x38]
call fcn.004397f4
jmp 0x41bb85
mov dword [esp + 0xc], ebx
jmp 0x41bb85
push ecx
push 3
push 5
mov edx, 0xc0000000
mov ecx, esi
call fcn.0044ef3f
mov esi, eax
add esp, 0xc
mov dword [esp + 0x70], esi
test esi, esi
jne 0x41b496
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x41bb83
call fcn.0043d5bb
push eax
lea ecx, [esp + 0x24]
call fcn.0043bbe8
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea edx, [esp + 0x10c]
call fcn.004199d3
mov ebx, eax
mov dword [esp + 0x10], ebx
pop ecx
test ebx, ebx
je 0x41b508
push ebx
lea eax, [esp + 0x48]
push 0x495b68
push eax
call fcn.0044af44
add esp, 0xc
push dword [eax]
push 0x495b88
push 1
call dword [sym.imp.CBSHost.dll_DismWriteLog]
mov ecx, dword [esp + 0x44]
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov edi, dword [esp + 0x20]
lea ecx, [edi - 0x10]
call fcn.0043d912
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x41bb85
lea ecx, [esp + 0x78]
call fcn.00431b45
push ecx
mov ecx, dword [esp + 0x24]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.0043cad2
add eax, 0x10
lea ecx, [esp + 0x7c]
mov dword [edi], eax
call fcn.0043a77a
mov edx, str.WIM_IMAGE
lea ecx, [esp + 0x78]
call fcn.0043b82e
mov edi, eax
test edi, edi
je 0x41b65e
push 8
pop esi
mov eax, dword [esp + 0x2c]
mov eax, dword [esi + eax]
lea esi, [esi + 4]
mov dword [esp + 0x14], eax
test eax, eax
je 0x41b641
push 1
push 0xa
xor ebx, ebx
mov ecx, edi
push 0x495224
mov dword [esp + 0x18], ebx
mov dword [esp + 0x44], ebx
call fcn.0043b7cc
test eax, eax
je 0x41b59e
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b589
mov eax, 0x4934ec
push 0xa
push ebx
push eax
call dword [sym.imp.msvcrt.dll__wcstoui64]
add esp, 0xc
mov dword [esp + 0xc], eax
mov dword [esp + 0x38], edx
mov ecx, dword [esp + 0x14]
push 1
push 0xa
push 0x495224
call fcn.0043b7cc
test eax, eax
je 0x41b5db
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b5c0
mov eax, 0x4934ec
push 0xa
push ebx
push eax
call dword [sym.imp.msvcrt.dll__wcstoui64]
mov ecx, dword [esp + 0x18]
add esp, 0xc
add ecx, eax
mov eax, dword [esp + 0x38]
adc eax, edx
jmp 0x41b5e3
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
push eax
push ecx
lea eax, [esp + 0x4c]
push str._I64u
push eax
call fcn.0044af44
mov edx, 0x495224
mov ecx, edi
push dword [eax]
call fcn.0043978b
mov ecx, dword [esp + 0x58]
add esp, 0x14
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov ecx, dword [esp + 0x14]
push 1
push 0xd
push 0x495254
call fcn.0043b7cc
test eax, eax
je 0x41b641
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b633
mov eax, 0x4934ec
push eax
mov edx, 0x495254
mov ecx, edi
call fcn.0043978b
pop ecx
push ecx
push 5
push str.IMAGE
mov ecx, edi
call fcn.0043b741
mov edi, eax
test edi, edi
jne 0x41b549
mov esi, dword [esp + 0x70]
push ecx
push ecx
lea ecx, [esp + 0x44]
call fcn.004321ef
xor ebx, ebx
lea edx, [esp + 0x78]
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.0043b2d1
pop ecx
pop ecx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x24]
call fcn.0043c5cb
mov ecx, dword [esp + 0x3c]
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov ecx, dword [esp + 0xb8]
lea ecx, [ecx - 0x10]
call fcn.0043d912
lea ecx, [esp + 0xac]
call fcn.0043295e
mov edi, dword [esp + 0x20]
push 0x18
push ebx
mov eax, dword [edi - 0xc]
add eax, eax
cdq
mov dword [esp + 0x168], eax
mov dword [esp + 0x158], eax
lea eax, [esp + 0x18c]
push eax
mov dword [esp + 0x170], edx
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
mov dword [esp + 0x50], ebx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], ebx
mov eax, dword [esi]
push ecx
lea ecx, [esp + 0x20]
push ecx
push 0xd0
lea ecx, [esp + 0x114]
push ecx
push esi
call dword [eax + 0x18]
mov ebx, eax
test ebx, ebx
jne 0x41b4f5
mov eax, dword [edi - 0xc]
lea edx, [esp + 0x158]
mov ecx, dword [esi]
add eax, eax
push edx
lea edx, [esp + 0x20]
push edx
push eax
push edi
push esi
call dword [ecx + 0x18]
mov ebx, eax
test ebx, ebx
jne 0x41b4f5
mov ecx, dword [esp + 0x158]
add ecx, dword [esp + 0x160]
mov eax, dword [esp + 0x15c]
adc eax, dword [esp + 0x164]
mov edx, dword [esi]
push eax
push ecx
push esi
call dword [edx + 0x1c]
mov ebx, eax
test ebx, ebx
jne 0x41b4f5
lea ecx, [edi - 0x10]
call fcn.0043d912
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x40]
call fcn.004397f4
mov ecx, dword [esp + 0x48]
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
sar eax, 2
mov dword [esp + 0x60], eax
call fcn.0043d5bb
push eax
lea ecx, [esp + 0x10]
call fcn.0043bbe8
call fcn.0043d5bb
push eax
lea ecx, [esp + 0x14]
call fcn.0043bbe8
push str.setup.exe
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.0043baed
pop ecx
xor ebx, ebx
lea edx, [esp + 0x50]
push ebx
mov ecx, dword [eax]
call fcn.0044d9a9
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043d912
test esi, esi
jne 0x41bb3b
mov ecx, dword [esp + 0x54]
cmp ecx, 0xa0000
ja 0x41b828
jb 0x41b80a
cmp dword [esp + 0x50], 0x37fc03e9
jae 0x41b828
mov eax, dword [esp + 0x56]
add ecx, 0x40
add eax, ecx
lea ecx, [esp + 0xc]
push eax
call fcn.0043c971
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043c971
mov esi, ebx
lea ecx, [edi - 1]
jmp 0x41b88d
mov ecx, dword [edx + ecx*4]
push 1
push 5
push 0x495184
call fcn.0043b7cc
mov dword [esp + 0x1c], eax
test eax, eax
je 0x41bb3b
mov edi, ebx
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x41b85a
mov ecx, 0x4934ec
push ecx
push dword [edi*4 + 0x4883fc]
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x41b87c
inc edi
cmp edi, 0xd
je 0x41bb3b
mov eax, dword [esp + 0x1c]
jmp 0x41b84e
bts esi, edi
cmp edi, 0xd
je 0x41bb3b
mov ecx, dword [esp + 0x14]
inc ecx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
sub eax, edx
sar eax, 2
mov dword [esp + 0x14], ecx
cmp ecx, eax
jne 0x41b82f
push 0x43
lea ecx, [esp + 0x10]
call fcn.0043c971
cmp esi, 0x20
ja 0x41b92d
je 0x41b926
sub esi, 1
je 0x41b91f
sub esi, 1
je 0x41b915
sub esi, 1
je 0x41b90b
sub esi, 1
je 0x41b904
sub esi, 4
je 0x41b8fd
sub esi, 4
je 0x41b8e5
sub esi, 4
jne 0x41bb3b
mov esi, 0x495c20
jmp 0x41b9a1
mov esi, str.CSNA
mov ebx, dword [sym.imp.msvcrt.dll_wcslen]
push esi
call ebx
mov byte [esp + 0x28], 1
jmp 0x41b9aa
mov esi, str.CRNA
jmp 0x41b8ea
mov esi, str.PRNA
jmp 0x41b8ea
mov esi, 0x495ba4
jmp 0x41b9a1
mov esi, 0x495c0c
jmp 0x41b9a1
mov esi, 0x495b9c
jmp 0x41b9a1
mov esi, 0x495c28
jmp 0x41b9a1
sub esi, 0x40
je 0x41b99c
sub esi, 0x40
je 0x41b992
sub esi, 0x80
je 0x41b988
sub esi, 0x100
je 0x41b97e
sub esi, 0x200
je 0x41b974
sub esi, 0x400
je 0x41b96a
sub esi, 0x800
jne 0x41bb3b
mov esi, str.PRWMC
jmp 0x41b9a1
mov esi, str.ESNN
jmp 0x41b8ea
mov esi, 0x495bf8
jmp 0x41b8ea
mov esi, str.ENNA
jmp 0x41b8ea
mov esi, 0x495be4
jmp 0x41b8ea
mov esi, str.EDNA
jmp 0x41b8ea
mov esi, 0x495bd0
mov ebx, dword [sym.imp.msvcrt.dll_wcslen]
push esi
call ebx
pop ecx
push eax
push esi
lea ecx, [esp + 0x14]
call fcn.0043c99e
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043c971
mov edi, str.sourcesidwbinfo.txt
lea edx, [esp + 0x18]
push edi
lea ecx, [esp + 0x20]
call fcn.0043baed
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.BUILDINFO
push ecx
mov ecx, dword [eax]
push str.BuildArch
call fcn.0044e2fd
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043d912
test esi, esi
je 0x41bb3b
push str.amd64
push dword [esp + 0x14]
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x41ba23
mov esi, 0x495c90
push esi
call ebx
pop ecx
push eax
push esi
jmp 0x41ba34
lea ecx, [esp + 0x10]
call fcn.00431e4c
mov eax, dword [esp + 0x10]
push dword [eax - 0xc]
push eax
lea ecx, [esp + 0x14]
call fcn.0043c99e
push edi
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.0043baed
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.BUILDINFO
push ecx
mov ecx, dword [eax]
push str.BuildType
call fcn.0044e2fd
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043d912
test esi, esi
je 0x41bb3b
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xc]
push dword [eax - 0xc]
push eax
call fcn.0043c99e
cmp byte [esp + 0x24], 0
je 0x41ba9d
push 0x56
lea ecx, [esp + 0x10]
call fcn.0043c971
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043c971
push str.sourceslang.ini
lea ecx, [esp + 0x18]
call fcn.004322c9
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.00431d91
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.Available_UI_Languages
push ecx
mov ecx, dword [eax]
call fcn.0044e38e
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043d912
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0043d912
test esi, esi
je 0x41bb3b
mov edi, dword [esp + 0x10]
push 0x3d
push edi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
je 0x41bb3f
xor ecx, ecx
mov word [eax], cx
lea ecx, [esp + 0xc]
push dword [edi - 0xc]
push edi
call fcn.0043c99e
lea ecx, [esp + 0xc]
call fcn.00431e4c
mov esi, str._DV5
push esi
call ebx
pop ecx
push eax
push esi
lea ecx, [esp + 0x14]
call fcn.0043c99e
jmp 0x41bb48
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0xc]
call fcn.0043c7e8
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x60]
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi - 0xc]
neg eax
push fcn.0041a9b2
sbb eax, eax
and eax, esi
push eax
call 0x44bb26
add esp, 0xc
lea ecx, [edi - 0x10]
mov ebx, eax
call fcn.0043d912
lea ecx, [esi - 0x10]
jmp 0x41bb95
call fcn.0044cc8a
mov ebx, eax
lea ecx, [esp + 0x40]
call fcn.004397f4
mov ecx, dword [esp + 0x48]
lea ecx, [ecx - 0x10]
call fcn.0043d912
jmp 0x41bba1
mov ebx, 0xa0020001
lea ecx, [esp + 0x2c]
call fcn.004303a3
cmp dword [esp + 0x4c], 0
je 0x41bbbb
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [esp + 0x100]
lea ecx, [ecx - 0x10]
call fcn.0043d912
lea ecx, [esp + 0xf4]
call fcn.0043295e
lea ecx, [esp + 0x1d8]
call fcn.0043ba19
mov ecx, dword [esp + 0x18]
lea ecx, [ecx - 0x10]
call fcn.0043d912
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14