Function at 0x412e10
Capabilities:
Create directory
Create process on windows
Create thread
Delete directory
Delete file
Get session user name
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x268c
call fcn.0042bca0
mov eax, dword [0x447044]
xor eax, esp
mov dword [esp + 0x2688], eax
push ebx
push esi
push edi
push 0x220
push 0
push 0x1076e88
call fcn.004272d0
add esp, 0xc
push 0x448974
push 0x108b868
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x108b864], eax
mov eax, dword [ebp + 0x10]
mov edx, 0x1089f08
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x412e70
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push str.C:TempwmcInst.ini
push 0
push str.Time
push 0x43f010
call esi
push str.C:TempwmcInst.ini
push 0
push 0x43f01c
push 0x43f010
mov dword [0x1086df0], eax
call esi
mov dword [0x1086df4], eax
mov eax, dword [ebp + 8]
mov dword [0x1088260], eax
mov eax, 0x1089f08
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x412ec5
sub eax, edx
sar eax, 1
je 0x413cb3
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._ManualUpdate__Elevate_CmdLine_
call ebx
mov esi, 0x1089f08
call fcn.0040b260
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x1472]
push edx
mov dword [esp + 0x18], 0
mov word [esp + 0x1474], cx
call fcn.004272d0
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [esp + 0x1468]
push str._C:Program_FilesWW2017CFwmcSystem7.exe___ap
push eax
call edi
push str._apmode2
call fcn.004016c0
add esp, 0xc
cmp eax, 1
jne 0x412f94
lea ecx, [esp + 0x1468]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403960
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x1470]
push eax
push 0x43f0e0
push 0x108a510
call edi
add esp, 0x14
push 0x108a510
call ebx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2688]
xor ecx, esp
call fcn.0041f53e
mov esp, ebp
pop ebp
ret 0x10
push str._apmode3
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x412fcf
lea ecx, [esp + 0x1468]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403df0
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x1470]
push eax
push 0x43f140
jmp 0x412f67
push str._apmode4
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x41300d
lea ecx, [esp + 0x1468]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403df0
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x1470]
push eax
push 0x43f1a0
jmp 0x412f67
push str._apmode1
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4130bd
push 0x44
lea ecx, [esp + 0x14]
push 0
push ecx
call fcn.004272d0
add esp, 0xc
xor eax, eax
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
lea ecx, [esp + 0x1488]
push ecx
push 0
mov dword [esp + 0x38], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [esp + 0x60]
mov esi, eax
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x41308f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x58]
test eax, eax
je 0x41309e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
push esi
lea edx, [esp + 0x1470]
push edx
push 0x43f200
push 0x108a510
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x412f6e
push str._unrar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x41314e
push str.wmcInst.exe_Command_to_Write_Package_File.
call ebx
push 0xb71b00
mov edx, 0x448978
mov ecx, str.Client.cab
call fcn.0040aab0
add esp, 4
push 0xc800
mov edx, 0xfba490
mov ecx, str.ManualUpdate.dat
call fcn.0040aab0
add esp, 4
push 0x7d000
mov edx, 0xfc6ca8
mov ecx, 0x43549c
call fcn.0040aab0
add esp, 4
push 0x2800
mov edx, 0x1043cc0
mov ecx, 0x435478
call fcn.0040aab0
add esp, 4
push 0x2800
mov edx, 0x10464d8
mov ecx, str.Presto_7.ini
call fcn.0040aab0
add esp, 4
jmp 0x412f78
push str._add
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4136c2
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x12e2]
push ecx
mov word [esp + 0x12e4], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xfc2]
push eax
mov word [esp + 0xfc4], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x1152]
push edx
mov word [esp + 0x1154], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xca2]
push ecx
mov word [esp + 0xca4], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xe32]
push eax
mov word [esp + 0xe34], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x27a]
push edx
mov word [esp + 0x27c], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x482]
push ecx
mov word [esp + 0x484], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa9a]
push eax
mov word [esp + 0xa9c], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x68a]
push edx
mov word [esp + 0x68c], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x72]
push ecx
mov word [esp + 0x74], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x892]
push eax
mov word [esp + 0x894], dx
call fcn.004272d0
add esp, 0xc
push 0x104
lea ecx, [esp + 0x274]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
jmp 0x4132e0
movzx ecx, word [esp + eax + 0x270]
mov word [esp + eax + 0x478], cx
add eax, 2
test cx, cx
jne 0x4132e0
lea edx, [esp + 0x478]
push 0x5c
push edx
call fcn.0041faf1
add esp, 8
test eax, eax
je 0x413325
lea eax, [esp + 0x478]
push 0x5c
push eax
call fcn.0041faf1
add esp, 8
xor ecx, ecx
mov word [eax], cx
xor eax, eax
jmp 0x413330
movzx ecx, word [esp + eax + 0x478]
mov word [esp + eax + 0x680], cx
add eax, 2
test cx, cx
jne 0x413330
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x478]
mov word [esp + eax + 0x888], cx
add eax, 2
test cx, cx
jne 0x413350
lea edx, [esp + 0x680]
push 0x5c
push edx
call fcn.0041faf1
add eax, 2
lea edx, [esp + 0xa98]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x413386
lea eax, [esp + 0xa90]
push 0x28
push eax
call fcn.0041faf1
add esp, 8
test eax, eax
je 0x4133d6
push 4
push 0x43f300
push eax
call fcn.004218d6
add esp, 0xc
test eax, eax
jne 0x4133d6
lea ecx, [esp + 0xa90]
push 0x28
push ecx
call fcn.0041faf1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x888]
push 0x5c
push eax
call fcn.0041faf1
add esp, 8
test eax, eax
je 0x413403
lea ecx, [esp + 0x888]
push 0x5c
push ecx
call fcn.0041faf1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0xa90]
push eax
lea ecx, [esp + 0x88c]
push ecx
lea edx, [esp + 0x688]
push str._s_s.exe
push edx
call edi
add esp, 0x10
lea esi, [esp + 0x680]
lea eax, [esp + 0x270]
call fcn.0040b1e0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x6c]
push str._sClient.cab
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x4134bd
mov eax, esi
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x4134bd
xor eax, eax
jmp 0x413490
movzx ecx, word [eax + str.Client.cab]
mov word [esp + eax + 0x12d8], cx
add eax, 2
test cx, cx
jne 0x413490
lea eax, [esp + 0x12d8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4134b1
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x6c]
push str._sManualUpdate.dat
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x41353d
lea eax, [esp + 0x680]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x41353d
xor eax, eax
jmp 0x413510
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xfb8], cx
add eax, 2
test cx, cx
jne 0x413510
lea eax, [esp + 0xfb8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413531
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x6c]
push str._sPolicyContainer.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x4135bd
lea eax, [esp + 0x680]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x4135bd
xor eax, eax
jmp 0x413590
movzx ecx, word [eax + 0x43549c]
mov word [esp + eax + 0x1148], cx
add eax, 2
test cx, cx
jne 0x413590
lea eax, [esp + 0x1148]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4135b1
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x6c]
push str._sRemoteService.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x41363d
lea eax, [esp + 0x680]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x41363d
xor eax, eax
jmp 0x413610
movzx ecx, word [eax + 0x435478]
mov word [esp + eax + 0xc98], cx
add eax, 2
test cx, cx
jne 0x413610
lea eax, [esp + 0xc98]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413631
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x6c]
push str._sPresto_7.ini
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x412f78
lea eax, [esp + 0x680]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x412f78
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0xe28], cx
add eax, 2
test cx, cx
jne 0x413690
lea eax, [esp + 0xe28]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4136b1
jmp 0x412f78
push str._rar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x413c53
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x1e9a]
push ecx
xor ebx, ebx
mov word [esp + 0x1e9c], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x12e2]
push eax
mov word [esp + 0x12e4], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xfc2]
push edx
mov word [esp + 0xfc4], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1152]
push ecx
mov word [esp + 0x1154], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xca2]
push eax
mov word [esp + 0xca4], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xe32]
push edx
mov word [esp + 0xe34], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xa9a]
push ecx
mov word [esp + 0xa9c], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x68a]
push eax
mov word [esp + 0x68c], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x892]
push edx
mov word [esp + 0x894], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x482]
push ecx
mov word [esp + 0x484], ax
call fcn.004272d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x72]
push eax
mov word [esp + 0x74], dx
call fcn.004272d0
add esp, 0xc
push 0x104
lea ecx, [esp + 0xa94]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0xa90]
mov word [esp + eax + 0x680], cx
add eax, 2
test cx, cx
jne 0x413850
lea edx, [esp + 0x680]
push 0x5c
push edx
call fcn.0041faf1
add esp, 8
test eax, eax
je 0x413895
lea eax, [esp + 0x680]
push 0x5c
push eax
call fcn.0041faf1
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xa90]
push 0x5c
push edx
call fcn.0041faf1
add eax, 2
lea edx, [esp + 0x890]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4138b3
lea eax, [esp + 0x888]
push 0x2e
push eax
call fcn.0041faf1
add esp, 8
test eax, eax
je 0x4138ef
lea ecx, [esp + 0x888]
push 0x2e
push ecx
call fcn.0041faf1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x888]
push eax
lea ecx, [esp + 0x684]
push ecx
lea edx, [esp + 0x480]
push str._s_s_
push edx
call edi
lea esi, [esp + 0x488]
lea eax, [esp + 0xaa0]
call fcn.0040b1e0
lea eax, [esp + 0x690]
push eax
lea ecx, [esp + 0x7c]
push str._sClient.cab
push ecx
call edi
add esp, 0x1c
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x4139b5
mov eax, esi
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x4139b5
xor eax, eax
jmp 0x413970
movzx ecx, word [eax + str.Client.cab]
mov word [esp + eax + 0x12d8], cx
add eax, 2
test cx, cx
jne 0x413970
lea eax, [esp + 0x12d8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413991
mov ecx, dword [0x43f328]
mov dx, word [0x43f32c]
mov dword [eax], ecx
mov word [eax + 4], dx
mov ebx, 1
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x6c]
push str._sManualUpdate.dat
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x413a41
lea eax, [esp + 0x478]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x413a41
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xfb8], cx
add eax, 2
test cx, cx
jne 0x413a00
lea eax, [esp + 0xfb8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413a21
mov ecx, dword [0x43f328]
mov dx, word [0x43f32c]
mov dword [eax], ecx
mov word [eax + 4], dx
inc ebx
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x6c]
push str._sPolicyContainer.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x413ad1
lea eax, [esp + 0x478]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x413ad1
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + 0x43549c]
mov word [esp + eax + 0x1148], cx
add eax, 2
test cx, cx
jne 0x413a90
lea eax, [esp + 0x1148]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413ab1
mov ecx, dword [0x43f328]
mov dx, word [0x43f32c]
mov dword [eax], ecx
mov word [eax + 4], dx
inc ebx
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x6c]
push str._sRemoteService.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x413b61
lea eax, [esp + 0x478]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x413b61
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + 0x435478]
mov word [esp + eax + 0xc98], cx
add eax, 2
test cx, cx
jne 0x413b20
lea eax, [esp + 0xc98]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413b41
mov ecx, dword [0x43f328]
mov dx, word [0x43f32c]
mov dword [eax], ecx
mov word [eax + 4], dx
inc ebx
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x6c]
push str._sPresto_7.ini
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x68]
push 0
push edx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x413bf1
lea eax, [esp + 0x478]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x6c]
call fcn.0040ad20
add esp, 4
test eax, eax
je 0x413bf1
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0xe28], cx
add eax, 2
test cx, cx
jne 0x413bb0
lea eax, [esp + 0xe28]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413bd1
mov ecx, dword [0x43f328]
mov dx, word [0x43f32c]
mov dword [eax], ecx
mov word [eax + 4], dx
inc ebx
lea eax, [esp + 0x478]
push eax
push ebx
lea ecx, [esp + 0xe30]
push ecx
lea edx, [esp + 0xca4]
push edx
lea eax, [esp + 0x1158]
push eax
lea ecx, [esp + 0xfcc]
push ecx
lea edx, [esp + 0x12f0]
push edx
lea eax, [esp + 0x1eac]
push str._s_s_s_s_s_r_n
push eax
call edi
add esp, 0x24
push 0x40040
push 0x43f47c
lea ecx, [esp + 0x1e98]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x412f78
push str._SmrInstallTerminate_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x413c81
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst___Install_terminate___Clear_Temp_
call ebx
call fcn.00410020
jmp 0x412f78
push str._SmrInstallSuccess_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x415077
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst__Install_Success__Clear_Temp_
call ebx
call fcn.00410020
jmp 0x412f78
call fcn.00411c80
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x1c92]
push eax
mov word [esp + 0x1c94], dx
call fcn.004272d0
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [esp + 0x1c88]
push str.C:UsersPublicSMR7
push ecx
call ebx
mov esi, dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
add esp, 8
push 0
lea edx, [esp + 0x1c8c]
push edx
push 0
call esi
call fcn.00410050
test eax, eax
jne 0x413e11
push 0x206
push eax
lea ecx, [esp + 0x27a]
push ecx
mov word [esp + 0x27c], ax
call fcn.004272d0
add esp, 0xc
lea edx, [esp + 0x270]
push str.C:UsersPublicSMR7DebugInitialFailLog
push edx
call ebx
add esp, 8
push 0
lea eax, [esp + 0x274]
push eax
push 0
call esi
lea ecx, [esp + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x892]
push eax
mov word [esp + 0x894], dx
call fcn.004272d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0xa9a]
push edx
mov word [esp + 0xa9c], cx
call fcn.004272d0
add esp, 0xc
push 0x104
lea eax, [esp + 0x88c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx ecx, word [esp + 0x5e]
movzx edx, word [esp + 0x5a]
movzx eax, word [esp + 0x58]
push ecx
push edx
push eax
lea ecx, [esp + 0x27c]
push ecx
lea edx, [esp + 0x898]
push edx
lea eax, [esp + 0xaa4]
push str._c_echo____date_____time_____s___Initial_Path_Fail________sFailLog__04u__02u__02u.log_
push eax
call ebx
add esp, 0x1c
push 5
push 0
lea ecx, [esp + 0xa98]
push ecx
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x415077
call fcn.00410640
test eax, eax
jne 0x413f03
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x27a]
push eax
mov word [esp + 0x27c], dx
call fcn.004272d0
add esp, 0xc
lea ecx, [esp + 0x270]
push str.C:UsersPublicSMR7DebugInitialFailLog
push ecx
call ebx
add esp, 8
push 0
lea edx, [esp + 0x274]
push edx
push 0
call esi
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x892]
push edx
mov word [esp + 0x894], cx
call fcn.004272d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xa9a]
push ecx
mov word [esp + 0xa9c], ax
call fcn.004272d0
add esp, 0xc
push 0x104
lea edx, [esp + 0x88c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x5e]
movzx ecx, word [esp + 0x5a]
movzx edx, word [esp + 0x58]
push eax
push ecx
push edx
lea eax, [esp + 0x27c]
push eax
lea ecx, [esp + 0x898]
push ecx
lea edx, [esp + 0xaa4]
push str._c_echo____date_____time_____s___Test_Write_Log_Fail________sFailLog__04u__02u__02u.log_
push edx
call ebx
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0xa98]
push eax
jmp 0x413def
push str.GlobalwmcInst.exe
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x108ba6c], eax
test eax, eax
jne 0x415052
push str.GlobalwmcInst.exe
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x108ba6c], eax
test eax, eax
jne 0x413f6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x108b864]
push eax
push ecx
push 0x108b868
push 0x43f758
push 0x108a510
call ebx
add esp, 0x14
push 0x108a510
call fcn.004042f0
add esp, 4
jmp 0x415077
mov edx, dword [0x108b864]
push edx
push 0x108b868
push 0x43f7b8
push 0x108a510
call ebx
push 0x108a510
call fcn.004042f0
add esp, 0x14
call fcn.00412a10
test eax, eax
je 0x413fbc
push eax
push 0x43f828
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
jmp 0x415077
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x1882]
push ecx
mov word [esp + 0x1884], ax
call fcn.004272d0
add esp, 0xc
push 0x10892d8
lea edx, [esp + 0x187c]
push str._s_run1.exe
push edx
call ebx
add esp, 0xc
lea eax, [esp + 0x1878]
push 0
push eax
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x414041
lea ecx, [esp + 0x1878]
push ecx
push 0x43f86c
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x187c]
call fcn.0040b840
add esp, 4
push 0x43f884
call fcn.004045a0
add esp, 4
call fcn.004112b0
push 0x43f894
mov word [0x1081cd4], ax
call fcn.004045a0
add esp, 4
cmp dword [0x1086df4], 0
je 0x4140fc
mov edx, dword [0x10847a0]
mov eax, dword [0x108479c]
mov ecx, dword [0x10847b4]
push 0x1083528
push 0x1083508
push edx
mov edx, dword [0x10847b0]
push eax
mov eax, dword [0x1084798]
push ecx
mov ecx, dword [0x1084794]
push edx
mov edx, dword [0x44863c]
push eax
mov eax, dword [0x1084790]
push ecx
mov ecx, dword [0x108478c]
push edx
mov edx, dword [0x1084788]
push eax
mov eax, dword [0x1084784]
push ecx
mov ecx, dword [0x1084780]
push edx
mov edx, dword [0x4483b4]
push eax
push ecx
push edx
push 0x1081cbc
push 0x10828e8
push 0x1081ee0
push str._b_tg_
push 0x108a510
call ebx
push 0x108a510
call fcn.004042f0
add esp, 0x54
push 0x1088268
push 0x20000000
push 0
push 0x412650
push 0
push 0
call fcn.00421a39
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
add esp, 0x18
cmp dword [0x1086de0], esi
jne 0x414146
lea esp, [esp]
cmp esi, 0x258
je 0x414146
push 0xa
call edi
inc esi
cmp dword [0x1086de0], 0
je 0x414130
mov ax, word [0x1081cd4]
cmp ax, 9
jne 0x4141b1
mov eax, dword [0x1088264]
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x43fa08
call fcn.004042f0
mov esi, 0x40010
mov edi, 0x43ee84
mov ebx, 0x43fa18
add esp, 4
push 0x493e0
call fcn.0040b700
add esp, 4
push 0
call fcn.00415090
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2688]
xor ecx, esp
call fcn.0041f53e
mov esp, ebp
pop ebp
ret 0x10
test ax, ax
je 0x4141cc
push 0x1081ee0
push 0x43fa38
push 0x108a510
call ebx
add esp, 0xc
jmp 0x4141db
push 0x43fa58
push 0x108a510
call ebx
add esp, 8
push 0x108a510
call fcn.004042f0
mov ecx, dword [0x1088264]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 1
push 0x402
push ecx
call esi
push 0x43fa74
call fcn.004042f0
add esp, 4
call fcn.00411650
push 0
test eax, eax
jne 0x414246
mov edx, dword [0x1088264]
push 0x64
push 0x402
push edx
call esi
push 0x43faa4
call fcn.004042f0
mov esi, 0x40000
mov edi, str.P_g
mov ebx, str._rN_bT2
jmp 0x414180
mov eax, dword [0x1088264]
push 0x14
push 0x402
push eax
call esi
push 0x43fb38
call fcn.004045a0
mov ax, word [0x1081cd4]
add esp, 4
test ax, ax
jne 0x414271
push 1
jmp 0x414293
cmp ax, 1
jne 0x41427b
push 3
jmp 0x414293
cmp ax, 2
jne 0x414285
push 3
jmp 0x414293
cmp ax, 3
je 0x414291
cmp ax, 4
jne 0x41429b
push 2
call fcn.00412cd0
add esp, 4
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x167a]
push edx
mov word [esp + 0x167c], cx
call fcn.004272d0
add esp, 0xc
push 0x10892d8
lea eax, [esp + 0x1674]
push str._s_run2.exe
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x1670]
push 0
push ecx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x414320
lea edx, [esp + 0x1670]
push edx
push 0x43fb64
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x1674]
call fcn.0040b840
add esp, 4
push 0x43fb7c
call fcn.004045a0
add esp, 4
push 0x10892d8
lea eax, [esp + 0x1674]
push 0x43fb8c
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x1670]
push 0
push ecx
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x4143b3
lea edx, [esp + 0x1670]
push edx
push 0x43fba4
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
push 0x1b7740
lea esi, [esp + 0x1674]
call fcn.0040b840
add esp, 4
push 0x43fbc8
mov dword [0x108b758], 1
mov dword [0x1085bd4], 0
call fcn.004042f0
add esp, 4
push 0x43fbf4
call fcn.004045a0
add esp, 4
call fcn.00411b50
test eax, eax
jne 0x414408
push eax
mov eax, dword [0x1088264]
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x43fc08
call fcn.004042f0
add esp, 4
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40040
mov edi, 0x43fc4c
mov ebx, str.uP_n0R
jmp 0x414188
push 0x43fc98
call fcn.004045a0
add esp, 4
push 0x43fcb0
call fcn.004042f0
add esp, 4
cmp word [0x1081cd4], 2
jne 0x414524
push 0xb71b00
mov edx, 0x448978
mov ecx, 0x4488d8
call fcn.0040aab0
add esp, 4
push 0x43fd78
call fcn.004045a0
add esp, 4
cmp word [0x1081cd4], 0
je 0x41446a
call fcn.00410b20
push 0x3e8
call edi
push 0x43fd84
call fcn.004045a0
add esp, 4
cmp dword [0x10847ac], 0
jne 0x4144d4
mov esi, 0x4389b8
jmp 0x414490
mov edx, dword [esi]
mov ecx, str.C:UsersPublicSMR7WM7installTemp_
call fcn.0040c750
test eax, eax
jne 0x4144c9
mov edx, dword [esi]
push edx
push 0x43fddc
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
mov dword [0x4486bc], 0
add esi, 4
cmp esi, 0x4389d4
jl 0x414490
cmp word [0x1081cd4], 0
jne 0x4145a2
mov eax, 0x1081cbc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4144f0
sub eax, edx
sar eax, 1
cmp eax, 9
je 0x4145a2
push 0x43fdf8
call fcn.004042f0
add esp, 4
mov dword [0x4486bc], 0
jmp 0x4145ab
mov esi, 0x4488d8
mov eax, 0x1081cd8
call fcn.0040b1e0
push 0x3e8
call edi
push 0
push esi
call fcn.0041fb9e
add esp, 8
test eax, eax
je 0x414447
push 0x1081cd8
push 0x43fce0
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
mov ecx, dword [0x1088264]
add esp, 4
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40010
mov edi, str.pu8
mov ebx, 0x43fd20
jmp 0x414188
cmp dword [0x4486bc], 0
jne 0x4145eb
mov eax, dword [0x1088264]
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x43fe20
call fcn.004042f0
add esp, 4
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40010
mov edi, str.pu8
mov ebx, 0x43fe50
jmp 0x414188
push 0x43feb4
call fcn.004042f0
add esp, 4
push 0x43fec4
call fcn.004045a0
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 1
add esp, 4
cmp dword [0x10847a0], esi
jne 0x414666
push 0x43fed8
call fcn.004042f0
add esp, 4
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x27a]
push edx
mov word [esp + 0x27c], cx
call fcn.004272d0
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea eax, [esp + 0x274]
push str._sWM7F.cab
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x270]
push ecx
call edi
cmp dword [0x108804c], 0
jbe 0x4146db
cmp word [0x1081cd4], 2
jne 0x4146db
push 0
push 0x1087210
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x41469b
push 0
push 0x1087210
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push 0x7d000
mov edx, 0xfc6ca8
mov ecx, 0x1087008
call fcn.0040aab0
add esp, 4
push 0x1087008
push 0x43ff20
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
mov dword [0x1086de4], esi
jmp 0x41477a
push 0
push 0x1086e00
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x414766
push eax
push 0x1087210
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x41470f
push 0
push 0x1087210
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, 0x1087008
mov eax, 0x1086e00
call fcn.0040b1e0
mov ax, word [0x1081cd4]
cmp ax, 1
jne 0x414736
push 0x1086e00
push 0x43ff44
jmp 0x414746
cmp ax, 2
jbe 0x414750
push 0x1086e00
push 0x43ff6c
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
mov dword [0x1086de4], 1
jmp 0x41477a
push 0x43ff90
call fcn.004042f0
mov dword [0x1086de4], 0
add esp, 4
push 0x43ffa4
call fcn.004045a0
add esp, 4
cmp dword [0x1088050], 0
jbe 0x4147f4
cmp word [0x1081cd4], 2
jne 0x4147f4
push 0
push 0x1087828
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x4147bf
push 0
push 0x1087828
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push 0x2800
mov edx, 0x1043cc0
mov ecx, 0x1087620
call fcn.0040aab0
add esp, 4
push 0x1087620
push 0x43ffb8
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414884
push 0
push 0x1087418
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x41487f
push eax
push 0x1087828
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x414828
push 0
push 0x1087828
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, 0x1087620
mov eax, 0x1087418
call fcn.0040b1e0
mov ax, word [0x1081cd4]
cmp ax, 1
jne 0x41485e
push 0x1087418
push 0x43ffdc
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414884
cmp ax, 2
jbe 0x414878
push 0x1087418
push 0x440004
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414884
push 0x440028
call fcn.004042f0
add esp, 4
push 0x44003c
call fcn.004045a0
add esp, 4
cmp dword [0x1088054], 0
jbe 0x414903
cmp word [0x1081cd4], 2
jne 0x414903
push 0
push 0x1087e40
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x4148ce
push 0
push 0x1087e40
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push 0x2800
mov edx, 0x10464d8
mov ecx, 0x1087c38
call fcn.0040aab0
add esp, 4
push 0x1087c38
push 0x440054
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414993
push 0
push 0x1087a30
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x41498e
push eax
push 0x1087e40
call fcn.0041fb1f
add esp, 8
test eax, eax
je 0x414937
push 0
push 0x1087e40
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, 0x1087c38
mov eax, 0x1087a30
call fcn.0040b1e0
mov ax, word [0x1081cd4]
cmp ax, 1
jne 0x41496d
push 0x1087a30
push 0x440088
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414993
cmp ax, 2
jbe 0x414987
push 0x1087a30
push 0x4400c0
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
jmp 0x414993
push 0x4400f4
call fcn.004042f0
add esp, 4
push 0x440114
call fcn.004045a0
add esp, 4
push 0x440138
call fcn.004042f0
add esp, 4
call fcn.00411970
push 0x44016c
call fcn.004045a0
mov edx, dword [0x1088264]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 0x19
push 0x402
push edx
call esi
cmp dword [0x1085bd0], 1
jne 0x414a0c
mov eax, 0x1085bd8
call fcn.0040cf00
push 0x4401a0
call fcn.004042f0
add esp, 4
push 0x4401b8
call fcn.004045a0
add esp, 4
call fcn.004128c0
cmp dword [0x1085bd4], 1
jne 0x414a8f
push 0x4401d8
call fcn.004042f0
add esp, 4
call fcn.0040aa30
call fcn.00410820
test al, al
jne 0x414a75
mov eax, dword [0x1088264]
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x440210
call fcn.004042f0
add esp, 4
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x440240
jmp 0x414188
push 0x44029c
call fcn.004042f0
add esp, 4
push 0x4402b4
call fcn.004045a0
add esp, 4
mov ecx, dword [0x1088264]
push 0
push 0x32
push 0x402
push ecx
call esi
call fcn.004182a0
call fcn.004015d0
test eax, eax
je 0x414ab4
call fcn.00418900
push 0x4402d4
call fcn.004045a0
add esp, 4
push 0x4402e4
call fcn.004042f0
add esp, 4
call fcn.00415300
push 0x4402fc
call fcn.004045a0
add esp, 4
push str.
call fcn.004042f0
add esp, 4
call fcn.0040f780
mov edx, dword [0x1088264]
push 0
push 0x4e
push 0x402
push edx
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SetupClient
call fcn.004045a0
add esp, 4
call fcn.00403820
test eax, eax
jne 0x414b3d
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.uP_nw
call fcn.004042f0
add esp, 4
call fcn.00409300
push 0
push 0
push str.C:UsersPublicSMR7WM7installTemp
call fcn.00405f40
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0x4488d8
call edi
push 0x44039c
call fcn.004042f0
mov eax, dword [0x1088264]
add esp, 4
push 0
push 0x50
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x4403ac
call fcn.004045a0
add esp, 4
test esi, esi
jne 0x414c3c
push 0x4403b8
call fcn.004042f0
add esp, 4
call fcn.0040aa30
mov ecx, dword [0x1088264]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x5a
push 0x402
push ecx
call esi
call fcn.004192d0
mov edx, dword [0x1088264]
push 0
push 0x64
push 0x402
push edx
call esi
mov eax, dword [0x1088268]
push 0
push 0
push 0x12
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44892c], 1
jne 0x414bf9
push 0x4403fc
jmp 0x414bfe
push 0x440430
call fcn.004042f0
add esp, 4
call fcn.00417a70
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x440478
call fcn.0040b700
add esp, 4
push 0
call fcn.00415090
add esp, 4
push eax
call fcn.004215a1
mov edi, 1
cmp dword [0x1085bd4], edi
jne 0x414c79
push 0x4404d8
call fcn.004042f0
add esp, 4
call fcn.004176f0
push 0x4404f0
call fcn.004042f0
add esp, 4
call fcn.00409de0
push 0x44050c
call fcn.004045a0
jmp 0x414c83
push 0x440540
call fcn.004042f0
add esp, 4
push edi
call fcn.004162e0
mov ecx, dword [0x1088264]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 0x55
push 0x402
push ecx
call esi
push 0x440550
call fcn.004045a0
add esp, 4
push 0x440560
call fcn.004042f0
add esp, 4
call fcn.004031d0
test eax, eax
jne 0x414e0d
cmp dword [0x1086df8], eax
jle 0x414d81
push str.uP_n_U
call fcn.004042f0
add esp, 4
lea edi, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.004091a0
mov edi, dword [esp + 0xc]
mov edx, dword [0x1086df8]
push edi
mov esi, eax
push esi
push edx
push 0x440588
push 0x108a510
call ebx
mov eax, dword [0x1088264]
add esp, 0x14
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1088268]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x108a510
call fcn.004042f0
mov edx, dword [0x1086df8]
add esp, 4
push edi
push esi
push edx
push 0x4405e8
push 0x108a510
call ebx
add esp, 0x14
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40000
mov edi, 0x440614
mov ebx, 0x108a510
jmp 0x414c24
push 0x44061c
call fcn.004042f0
add esp, 4
call fcn.0040aa30
mov eax, dword [0x1088264]
push 0
push 0x5a
push 0x402
push eax
call esi
call fcn.004192d0
mov ecx, dword [0x1088264]
push 0
push 0x64
push 0x402
push ecx
call esi
mov edx, dword [0x1088268]
push 0
push 0
push 0x12
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44892c], edi
jne 0x414ddd
push 0x4403fc
jmp 0x414de2
push 0x440430
call fcn.004042f0
add esp, 4
call fcn.00417a70
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x440640
jmp 0x414c24
cmp dword [0x1086df8], 0
jle 0x414e5d
push str.uP_n_
call fcn.004042f0
add esp, 4
lea edi, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.004091a0
mov ecx, dword [esp + 0xc]
mov edx, dword [0x1086df8]
push ecx
push eax
push edx
push 0x440698
push 0x108a510
call ebx
add esp, 0x14
push 0x108a510
call fcn.004042f0
add esp, 4
mov eax, dword [0x10847a8]
cmp eax, 1
jne 0x414e78
push 0
call fcn.0040f1d0
add esp, 4
push 0x4406d8
jmp 0x414e8c
cmp eax, 2
jne 0x414e94
push 1
call fcn.0040f1d0
add esp, 4
push 0x4406ec
call fcn.004045a0
add esp, 4
cmp word [0x1081cd4], 3
jb 0x414eb0
call fcn.0040f330
push 0x440700
call fcn.004045a0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x1a8a]
push ecx
mov word [esp + 0x1a8c], ax
call fcn.004272d0
add esp, 0xc
push 0x10892d8
lea edx, [esp + 0x1a84]
push str._s_run3.exe
push edx
call ebx
add esp, 0xc
lea eax, [esp + 0x1a80]
push 0
push eax
call fcn.0041fb9e
add esp, 8
test eax, eax
jne 0x414f35
lea ecx, [esp + 0x1a80]
push ecx
push 0x440730
push 0x108a510
call ebx
add esp, 0xc
push 0x108a510
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x1a84]
call fcn.0040b840
add esp, 4
push 0x44074c
call fcn.004045a0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, 1
add esp, 4
cmp dword [0x4483b4], eax
jne 0x414fbc
cmp dword [0x1084780], eax
jne 0x414fbc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x27a]
push eax
mov word [esp + 0x27c], dx
call fcn.004272d0
add esp, 0xc
push 0x108a308
lea ecx, [esp + 0x274]
push str._spcinfo7.exe
push ecx
call ebx
add esp, 0xc
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x108a308
push 0x435474
lea edx, [esp + 0x27c]
push edx
push str.open
push 0
call esi
call fcn.00417a70
push 0
push 0x435474
push 0x44075c
push str.C:WindowsSysWOW64wmcUpdater.exe
push str.open
push 0
call esi
push 0
push 0x435474
push 0x44075c
push str.C:WindowsSystem32wmcUpdater.exe
push str.open
push 0
call esi
mov eax, dword [0x1088264]
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1088268]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x440800
call fcn.004042f0
add esp, 4
call fcn.00412dd0
push 0xdbba0
mov esi, 0x40000
mov edi, 0x440614
mov ebx, 0x440828
call fcn.0040b700
add esp, 4
push 1
jmp 0x414c2e
mov edx, dword [0x108b864]
push edx
push 0x108b868
push str.__s___u_
push 0x108a510
call ebx
push 0x108a510
call fcn.004042f0
add esp, 0x14
mov ecx, dword [esp + 0x2694]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0041f53e
mov esp, ebp
pop ebp
ret 0x10