Function at 0x403770
Capabilities:
Check if file exists
Check os version
Copy file
Move file
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c6e91
mov eax, dword fs:[0]
push eax
sub esp, 0x56c
mov eax, dword [0x50545c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4ec], ecx
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x506c08
call fcn.00432f50
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00412990
mov byte [ebp - 4], 1
mov edx, str.drivers_64_
test edx, edx
jne 0x4037d8
mov dword [ebp - 0xf0], 0
jmp 0x4037eb
push str.drivers_64_
call fcn.004939fc
add esp, 4
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
push eax
push str.drivers_64_
lea ecx, [ebp - 0x18]
call fcn.00411880
mov ecx, 0x4d2abc
test ecx, ecx
jne 0x403814
mov dword [ebp - 0xf4], 0
jmp 0x403827
push 0x4d2abc
call fcn.004939fc
add esp, 4
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0xf4]
push edx
push 0x4d2abc
lea ecx, [ebp - 0x28]
call fcn.00411880
mov ecx, 0x506c08
call fcn.0043cbb0
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4038eb
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x403886
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0xfc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryEmptyW]
test eax, eax
je 0x4038e6
mov ecx, dword [ebp - 0x18]
push ecx
push str.UpdateDrivers_Is_Empty_Directory__s.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 0xc
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18]
sub eax, 0x10
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x100]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
sub ecx, 0x10
mov dword [ebp - 0x104], ecx
mov ecx, dword [ebp - 0x104]
call fcn.004029d0
mov eax, dword [ebp - 0x58]
jmp 0x405b5f
jmp 0x40397f
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40391f
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryEmptyW]
test eax, eax
je 0x40397f
mov eax, dword [ebp - 0x28]
push eax
push str.UpdateDrivers_Is_Empty_Directory__s.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0xc
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18]
sub edx, 0x10
mov dword [ebp - 0x110], edx
mov ecx, dword [ebp - 0x110]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x28]
sub eax, 0x10
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
call fcn.004029d0
mov eax, dword [ebp - 0x5c]
jmp 0x405b5f
lea ecx, [ebp - 0x40]
push ecx
mov ecx, 0x506c08
call fcn.00433540
mov byte [ebp - 4], 2
mov edx, 0x4d2a5c
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x118], edx
jne 0x4039b4
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x403991
xor ecx, ecx
jne 0x4039b8
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x11c], edx
push 0x4d2a5c
mov eax, dword [ebp - 0x11c]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x403ce0
mov ecx, 0x4d2a4c
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x124], ecx
jne 0x403a0f
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x4039ec
xor eax, eax
jne 0x403a13
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x128], ecx
push 0x4d2a4c
mov edx, dword [ebp - 0x128]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x403ce0
mov eax, 0x4d2a40
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x130], eax
jne 0x403a6a
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x403a47
xor edx, edx
jne 0x403a6e
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x134], eax
push 0x4d2a40
mov ecx, dword [ebp - 0x134]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x403ce0
mov edx, 0x4d2a28
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x13c], edx
jne 0x403ac5
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x403aa2
xor ecx, ecx
jne 0x403ac9
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x140], edx
push 0x4d2a28
mov eax, dword [ebp - 0x140]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
je 0x403ce0
mov ecx, 0x4d2a14
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x148], ecx
jne 0x403b20
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x403afd
xor eax, eax
jne 0x403b24
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x14c], ecx
push 0x4d2a14
mov edx, dword [ebp - 0x14c]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x403ce0
mov eax, 0x4d2a00
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x154], eax
jne 0x403b7b
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x403b58
xor edx, edx
jne 0x403b7f
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x158], eax
push 0x4d2a00
mov ecx, dword [ebp - 0x158]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x403ce0
mov edx, 0x4d29ec
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x160], edx
jne 0x403bd6
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x403bb3
xor ecx, ecx
jne 0x403bda
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x164], edx
push 0x4d29ec
mov eax, dword [ebp - 0x164]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x403ce0
mov ecx, 0x4d29d8
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x16c], ecx
jne 0x403c31
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x403c0e
xor eax, eax
jne 0x403c35
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x170], ecx
push 0x4d29d8
mov edx, dword [ebp - 0x170]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x403ce0
mov eax, dword [ebp - 0x40]
push eax
push str.UpdateDrivers_Driver_Not_Support_System__s.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0xc
mov dword [ebp - 0x60], 3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x40]
sub edx, 0x10
mov dword [ebp - 0x178], edx
mov ecx, dword [ebp - 0x178]
call fcn.004029d0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18]
sub eax, 0x10
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x17c]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
sub ecx, 0x10
mov dword [ebp - 0x180], ecx
mov ecx, dword [ebp - 0x180]
call fcn.004029d0
mov eax, dword [ebp - 0x60]
jmp 0x405b5f
call fcn.0044fb81
push eax
lea ecx, [ebp - 0x44]
call fcn.00412940
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x4ec]
push edx
lea ecx, [ebp - 0x20]
call fcn.00412990
mov byte [ebp - 4], 4
push 1
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040f040
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jne 0x403d5b
push 0
mov ecx, dword [ebp - 0x188]
call fcn.0040fd40
movzx ecx, ax
mov edx, 0x5c
movzx eax, dx
cmp ecx, eax
jne 0x403d5b
mov dword [ebp - 0x4f0], 0
jmp 0x403d65
mov dword [ebp - 0x4f0], 1
mov cl, byte [ebp - 0x4f0]
mov byte [ebp - 0x61], cl
mov edx, dword [ebp - 0x68]
sub edx, 0x10
mov dword [ebp - 0x18c], edx
mov ecx, dword [ebp - 0x18c]
call fcn.004029d0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x403d9d
mov cx, 0x5c
movzx edx, cx
push edx
lea ecx, [ebp - 0x20]
call fcn.00412b80
cmp dword [ebp - 0x34], 0
jne 0x4043d0
mov eax, 0x4d2a5c
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x190], eax
jne 0x403dca
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x403da7
xor edx, edx
jne 0x403dce
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x194], eax
push 0x4d2a5c
mov ecx, dword [ebp - 0x194]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
je 0x403e59
mov edx, 0x4d2a4c
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x19c], edx
jne 0x403e21
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x403dfe
xor ecx, ecx
jne 0x403e25
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x1a0], edx
push 0x4d2a4c
mov eax, dword [ebp - 0x1a0]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jne 0x403f5e
push str.Filelock2k.sys
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x6c]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1a8]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x6c]
sub edx, 0x10
mov dword [ebp - 0x1ac], edx
mov ecx, dword [ebp - 0x1ac]
call fcn.004029d0
mov eax, str.Filelock2k.sys
test eax, eax
jne 0x403ec3
mov dword [ebp - 0x1b0], 0
jmp 0x403ed6
push str.Filelock2k.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
push ecx
push str.Filelock2k.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x1b4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x403f59
push str.Filelock.sys
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x70]
sub edx, 0x10
mov dword [ebp - 0x1bc], edx
mov ecx, dword [ebp - 0x1bc]
call fcn.004029d0
jmp 0x4043cb
mov eax, 0x4d2a40
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1c0], eax
jne 0x403f81
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x403f5e
xor edx, edx
jne 0x403f85
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c4], eax
push 0x4d2a40
mov ecx, dword [ebp - 0x1c4]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x404010
mov edx, 0x4d2a28
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x1cc], edx
jne 0x403fd8
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x403fb5
xor ecx, ecx
jne 0x403fdc
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x1d0], edx
push 0x4d2a28
mov eax, dword [ebp - 0x1d0]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jne 0x4040a6
push str.FilelockXP.sys
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x74]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1d8]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x74]
sub edx, 0x10
mov dword [ebp - 0x1dc], edx
mov ecx, dword [ebp - 0x1dc]
call fcn.004029d0
mov eax, str.FilelockXP.sys
test eax, eax
jne 0x40407a
mov dword [ebp - 0x1e0], 0
jmp 0x40408d
push str.FilelockXP.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x1e0]
push ecx
push str.FilelockXP.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x4043cb
mov edx, 0x4d2a14
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x1e4], edx
jne 0x4040c9
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x4040a6
xor ecx, ecx
jne 0x4040cd
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x1e8], edx
push 0x4d2a14
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jne 0x404197
push str.FilelockLH.sys
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x78]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1f0]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x78]
sub edx, 0x10
mov dword [ebp - 0x1f4], edx
mov ecx, dword [ebp - 0x1f4]
call fcn.004029d0
mov eax, str.FilelockLH.sys
test eax, eax
jne 0x40416b
mov dword [ebp - 0x1f8], 0
jmp 0x40417e
push str.FilelockLH.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x1f8], eax
mov ecx, dword [ebp - 0x1f8]
push ecx
push str.FilelockLH.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x4043cb
mov edx, 0x4d2a00
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x1fc], edx
jne 0x4041ba
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x404197
xor ecx, ecx
jne 0x4041be
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x200], edx
push 0x4d2a00
mov eax, dword [ebp - 0x200]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
je 0x404249
mov ecx, 0x4d29ec
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x208], ecx
jne 0x404211
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x4041ee
xor eax, eax
jne 0x404215
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x20c], ecx
push 0x4d29ec
mov edx, dword [ebp - 0x20c]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x4042df
push str.FilelockW7.sys
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x504], eax
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x214], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x214]
push eax
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x7c]
sub ecx, 0x10
mov dword [ebp - 0x218], ecx
mov ecx, dword [ebp - 0x218]
call fcn.004029d0
mov edx, str.FilelockW7.sys
test edx, edx
jne 0x4042b3
mov dword [ebp - 0x21c], 0
jmp 0x4042c6
push str.FilelockW7.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
push eax
push str.FilelockW7.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x4043cb
mov ecx, 0x4d29d8
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x220], ecx
jne 0x404302
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x4042df
xor eax, eax
jne 0x404306
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x224], ecx
push 0x4d29d8
mov edx, dword [ebp - 0x224]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jne 0x4043cb
push str.FilelockW8.sys
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x508], eax
mov edx, dword [ebp - 0x508]
mov dword [ebp - 0x22c], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x80]
sub ecx, 0x10
mov dword [ebp - 0x230], ecx
mov ecx, dword [ebp - 0x230]
call fcn.004029d0
mov edx, str.FilelockW8.sys
test edx, edx
jne 0x4043a4
mov dword [ebp - 0x234], 0
jmp 0x4043b7
push str.FilelockW8.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
push eax
push str.FilelockW8.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x404855
mov ecx, 0x4d2a40
neg ecx
sbb ecx, ecx
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x238], ecx
jne 0x4043f3
push 0x80004005
call fcn.00405b70
xor edx, edx
jne 0x4043d0
xor eax, eax
jne 0x4043f7
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x23c], ecx
push 0x4d2a40
mov edx, dword [ebp - 0x23c]
push edx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
je 0x404482
mov eax, 0x4d2a28
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x244], eax
jne 0x40444a
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x404427
xor edx, edx
jne 0x40444e
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x248], eax
push 0x4d2a28
mov ecx, dword [ebp - 0x248]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x40451e
push str.FilelockXP64.sys
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x250], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x250]
push edx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x84]
sub eax, 0x10
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x254]
call fcn.004029d0
mov ecx, str.FilelockXP64.sys
test ecx, ecx
jne 0x4044f2
mov dword [ebp - 0x258], 0
jmp 0x404505
push str.FilelockXP64.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x258], eax
mov edx, dword [ebp - 0x258]
push edx
push str.FilelockXP64.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x404855
mov eax, 0x4d2a14
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x25c], eax
jne 0x404541
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x40451e
xor edx, edx
jne 0x404545
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x260], eax
push 0x4d2a14
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x404615
push str.FilelockLH64.sys
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x268], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x268]
push edx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x88]
sub eax, 0x10
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
call fcn.004029d0
mov ecx, str.FilelockLH64.sys
test ecx, ecx
jne 0x4045e9
mov dword [ebp - 0x270], 0
jmp 0x4045fc
push str.FilelockLH64.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x270], eax
mov edx, dword [ebp - 0x270]
push edx
push str.FilelockLH64.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x404855
mov eax, 0x4d2a00
neg eax
sbb eax, eax
neg eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x274], eax
jne 0x404638
push 0x80004005
call fcn.00405b70
xor ecx, ecx
jne 0x404615
xor edx, edx
jne 0x40463c
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x278], eax
push 0x4d2a00
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
je 0x4046c7
mov edx, 0x4d29ec
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x280], edx
jne 0x40468f
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x40466c
xor ecx, ecx
jne 0x404693
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x284], edx
push 0x4d29ec
mov eax, dword [ebp - 0x284]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jne 0x404763
push str.FilelockW764.sys
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x8c]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x28c]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x8c]
sub edx, 0x10
mov dword [ebp - 0x290], edx
mov ecx, dword [ebp - 0x290]
call fcn.004029d0
mov eax, str.FilelockW764.sys
test eax, eax
jne 0x404737
mov dword [ebp - 0x294], 0
jmp 0x40474a
push str.FilelockW764.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
push ecx
push str.FilelockW764.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
jmp 0x404855
mov edx, 0x4d29d8
neg edx
sbb edx, edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x298], edx
jne 0x404786
push 0x80004005
call fcn.00405b70
xor eax, eax
jne 0x404763
xor ecx, ecx
jne 0x40478a
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x29c], edx
push 0x4d29d8
mov eax, dword [ebp - 0x29c]
push eax
call fcn.00493a63
add esp, 8
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jne 0x404855
push str.FilelockW864.sys
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x90]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2a4]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00412a10
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x90]
sub edx, 0x10
mov dword [ebp - 0x2a8], edx
mov ecx, dword [ebp - 0x2a8]
call fcn.004029d0
mov eax, str.FilelockW864.sys
test eax, eax
jne 0x40482e
mov dword [ebp - 0x2ac], 0
jmp 0x404841
push str.FilelockW864.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x2ac]
push ecx
push str.FilelockW864.sys
lea ecx, [ebp - 0x20]
call fcn.00411880
push 0x4d1180
lea ecx, [ebp - 0x3c]
call fcn.00412290
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x94]
push edx
mov ecx, 0x506c08
call fcn.00432f50
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
mov byte [ebp - 4], 0x10
push str.clientEstConfig.ini
mov ecx, dword [ebp - 0x520]
push ecx
lea edx, [ebp - 0x98]
push edx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2b8]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.00412a10
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x98]
sub edx, 0x10
mov dword [ebp - 0x2bc], edx
mov ecx, dword [ebp - 0x2bc]
call fcn.004029d0
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x94]
sub eax, 0x10
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2c0]
call fcn.004029d0
cmp dword [ebp - 0x34], 0
je 0x4049b6
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, 0x506c08
call fcn.00432f50
mov dword [ebp - 0x528], eax
mov edx, dword [ebp - 0x528]
mov dword [ebp - 0x52c], edx
mov byte [ebp - 4], 0x12
push str.client_64EstConfig.ini
mov eax, dword [ebp - 0x52c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0040f270
add esp, 0xc
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x2c4], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00412a10
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xa0]
sub ecx, 0x10
mov dword [ebp - 0x2c8], ecx
mov ecx, dword [ebp - 0x2c8]
call fcn.004029d0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x9c]
sub edx, 0x10
mov dword [ebp - 0x2cc], edx
mov ecx, dword [ebp - 0x2cc]
call fcn.004029d0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
push ecx
push 0
push 0x4d27cc
push str.MAILLOCK
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edx, dword [ebp - 0x4ec]
mov dword [edx + 0xc], eax
push 0x4d1180
lea ecx, [ebp - 0x2c]
call fcn.00412290
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x24]
call fcn.00412990
mov byte [ebp - 4], 0x15
push 1
lea ecx, [ebp - 0xa8]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0040f040
mov dword [ebp - 0x2e0], eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [edx]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 1
jne 0x404a5e
push 0
mov ecx, dword [ebp - 0x2e0]
call fcn.0040fd40
movzx edx, ax
mov eax, 0x5c
movzx ecx, ax
cmp edx, ecx
jne 0x404a5e
mov dword [ebp - 0x534], 0
jmp 0x404a68
mov dword [ebp - 0x534], 1
mov dl, byte [ebp - 0x534]
mov byte [ebp - 0xa1], dl
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2e4]
call fcn.004029d0
movzx ecx, byte [ebp - 0xa1]
test ecx, ecx
je 0x404aa9
mov dx, 0x5c
movzx eax, dx
push eax
lea ecx, [ebp - 0x24]
call fcn.00412b80
push 0x4d1180
lea ecx, [ebp - 0x30]
call fcn.00412290
mov byte [ebp - 4], 0x16
mov ecx, str..sys
test ecx, ecx
jne 0x404acf
mov dword [ebp - 0x2f0], 0
jmp 0x404ae2
push str..sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x2f0], eax
mov edx, dword [ebp - 0x2f0]
push edx
push str..sys
lea ecx, [ebp - 0x30]
call fcn.00412d00
cmp dword [ebp - 0x34], 0
je 0x404b38
mov eax, str.64.sys
test eax, eax
jne 0x404b11
mov dword [ebp - 0x2f4], 0
jmp 0x404b24
push str.64.sys
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x2f4]
push ecx
push str.64.sys
lea ecx, [ebp - 0x30]
call fcn.00412d00
push 0x4d1180
lea ecx, [ebp - 0x10]
call fcn.00412290
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x4ec]
cmp dword [edx + 0xc], 0
je 0x404deb
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx eax, ax
and eax, 0xff
movzx ecx, al
cmp ecx, 6
jg 0x404bb7
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx edx, ax
and edx, 0xff
movzx eax, dl
cmp eax, 6
jl 0x404d45
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx ecx, ax
shr ecx, 8
and ecx, 0xff
movzx edx, cl
cmp edx, 1
jl 0x404d45
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx eax, ax
and eax, 0xff
movzx ecx, al
cmp ecx, 6
jne 0x404c9f
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx edx, ax
shr edx, 8
and edx, 0xff
movzx eax, dl
cmp eax, 1
jne 0x404c9f
push str.maillockwp
lea ecx, [ebp - 0xac]
call fcn.00412290
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], ecx
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x53c]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call fcn.0040f190
add esp, 0xc
mov dword [ebp - 0x540], eax
mov edx, dword [ebp - 0x540]
mov dword [ebp - 0x308], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x308]
push eax
lea ecx, [ebp - 0x10]
call fcn.00412a10
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xb0]
sub ecx, 0x10
mov dword [ebp - 0x30c], ecx
mov ecx, dword [ebp - 0x30c]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0xac]
sub edx, 0x10
mov dword [ebp - 0x310], edx
mov ecx, dword [ebp - 0x310]
call fcn.004029d0
jmp 0x404d40
push str.maillockw8wp
lea ecx, [ebp - 0xb4]
call fcn.00412290
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x548], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x548]
push edx
lea eax, [ebp - 0xb8]
push eax
call fcn.0040f190
add esp, 0xc
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x31c], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x31c]
push edx
lea ecx, [ebp - 0x10]
call fcn.00412a10
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xb8]
sub eax, 0x10
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x320]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xb4]
sub ecx, 0x10
mov dword [ebp - 0x324], ecx
mov ecx, dword [ebp - 0x324]
call fcn.004029d0
jmp 0x404de6
push str.maillock
lea ecx, [ebp - 0xbc]
call fcn.00412290
mov dword [ebp - 0x550], eax
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x554], edx
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x554]
push ecx
lea edx, [ebp - 0xc0]
push edx
call fcn.0040f190
add esp, 0xc
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x330]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00412a10
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xc0]
sub edx, 0x10
mov dword [ebp - 0x334], edx
mov ecx, dword [ebp - 0x334]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0xbc]
sub eax, 0x10
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
call fcn.004029d0
jmp 0x404e8c
push str.maillock
lea ecx, [ebp - 0xc4]
call fcn.00412290
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x560], ecx
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x560]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call fcn.0040f190
add esp, 0xc
mov dword [ebp - 0x564], eax
mov edx, dword [ebp - 0x564]
mov dword [ebp - 0x344], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x344]
push eax
lea ecx, [ebp - 0x10]
call fcn.00412a10
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xc8]
sub ecx, 0x10
mov dword [ebp - 0x348], ecx
mov ecx, dword [ebp - 0x348]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0xc4]
sub edx, 0x10
mov dword [ebp - 0x34c], edx
mov ecx, dword [ebp - 0x34c]
call fcn.004029d0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0xcc]
push edx
call fcn.0040f190
add esp, 0xc
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x350], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x350]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00412a10
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0xcc]
sub edx, 0x10
mov dword [ebp - 0x354], edx
mov ecx, dword [ebp - 0x354]
call fcn.004029d0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x358], ecx
mov edx, dword [ebp - 0x358]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.00411880
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x35c], ecx
mov edx, dword [ebp - 0x35c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x405083
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x405083
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x44]
push eax
push str.UpdateDrivers_File_Not_Exists___s.._s
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0x10
mov dword [ebp - 0xd0], 4
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x10]
sub edx, 0x10
mov dword [ebp - 0x364], edx
mov ecx, dword [ebp - 0x364]
call fcn.004029d0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x30]
sub eax, 0x10
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
call fcn.004029d0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x24]
sub ecx, 0x10
mov dword [ebp - 0x36c], ecx
mov ecx, dword [ebp - 0x36c]
call fcn.004029d0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2c]
sub edx, 0x10
mov dword [ebp - 0x370], edx
mov ecx, dword [ebp - 0x370]
call fcn.004029d0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x3c]
sub eax, 0x10
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
call fcn.004029d0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x20]
sub ecx, 0x10
mov dword [ebp - 0x378], ecx
mov ecx, dword [ebp - 0x378]
call fcn.004029d0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
sub edx, 0x10
mov dword [ebp - 0x37c], edx
mov ecx, dword [ebp - 0x37c]
call fcn.004029d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x40]
sub eax, 0x10
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x380]
call fcn.004029d0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
sub ecx, 0x10
mov dword [ebp - 0x384], ecx
mov ecx, dword [ebp - 0x384]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
sub edx, 0x10
mov dword [ebp - 0x388], edx
mov ecx, dword [ebp - 0x388]
call fcn.004029d0
mov eax, dword [ebp - 0xd0]
jmp 0x405b5f
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x506c08
call fcn.00434880
mov dword [ebp - 0x56c], eax
mov ecx, dword [ebp - 0x56c]
mov dword [ebp - 0x570], ecx
mov byte [ebp - 4], 0x21
push str.FileLock.sys
mov edx, dword [ebp - 0x570]
push edx
lea eax, [ebp - 0x1c]
push eax
call fcn.0040f270
add esp, 0xc
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xd4]
sub ecx, 0x10
mov dword [ebp - 0x38c], ecx
mov ecx, dword [ebp - 0x38c]
call fcn.004029d0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x390], edx
mov eax, dword [ebp - 0x390]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x405109
push 0x80
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [ebp - 0xd8]
push edx
mov ecx, 0x506c08
call fcn.00434880
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x578], eax
mov byte [ebp - 4], 0x24
push str.maillock.sys
mov ecx, dword [ebp - 0x578]
push ecx
lea edx, [ebp - 0x14]
push edx
call fcn.0040f270
add esp, 0xc
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0xd8]
sub eax, 0x10
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
call fcn.004029d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x398]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40518f
push 0x80
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [ebp - 0x34], 0
je 0x4051d2
push 0
call fcn.0043cd80
add esp, 4
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x4051be
push str.DoUpdate_WowFsRedirection__FALSE__Succeed.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 8
jmp 0x4051d2
push str.DoUpdate_WowFsRedirection__FALSE__Fail.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 8
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4056ef
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x3a0], edx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3a4], eax
push 0
mov ecx, dword [ebp - 0x3a0]
push ecx
mov edx, dword [ebp - 0x3a4]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x405241
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
push str.UpdateDrivers_Copy_Driver_File_ToClient_Succeed__s_____s.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 0x10
jmp 0x405264
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_ToClient_Fail___LastError___d___s_____s.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x3ac], ecx
push 0
mov edx, dword [ebp - 0x3a8]
push edx
mov eax, dword [ebp - 0x3ac]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4052b6
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x44]
push edx
push str.UpdateDrivers_Copy_Driver_File_Succeed____s_____s.
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x10
jmp 0x4056ef
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_Fail___LastError___d___s_____s__will_RenameCopy
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x14
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x44]
push edx
mov ecx, dword [ebp - 0x4ec]
call fcn.004035b0
test eax, eax
jne 0x4056e8
push str..tmp
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.0040f270
add esp, 0xc
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x3b0], edx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3b4], eax
push 0
mov ecx, dword [ebp - 0x3b0]
push ecx
mov edx, dword [ebp - 0x3b4]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4054d7
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Client_File_Fail__MoveFileEx___LastError___d___s_____s.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 0x14
mov dword [ebp - 0xdc], 5
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x4c]
sub eax, 0x10
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x3b8]
call fcn.004029d0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x14]
sub ecx, 0x10
mov dword [ebp - 0x3bc], ecx
mov ecx, dword [ebp - 0x3bc]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x1c]
sub edx, 0x10
mov dword [ebp - 0x3c0], edx
mov ecx, dword [ebp - 0x3c0]
call fcn.004029d0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x10]
sub eax, 0x10
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3c4]
call fcn.004029d0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x30]
sub ecx, 0x10
mov dword [ebp - 0x3c8], ecx
mov ecx, dword [ebp - 0x3c8]
call fcn.004029d0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x24]
sub edx, 0x10
mov dword [ebp - 0x3cc], edx
mov ecx, dword [ebp - 0x3cc]
call fcn.004029d0
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x2c]
sub eax, 0x10
mov dword [ebp - 0x3d0], eax
mov ecx, dword [ebp - 0x3d0]
call fcn.004029d0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x10
mov dword [ebp - 0x3d4], ecx
mov ecx, dword [ebp - 0x3d4]
call fcn.004029d0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x20]
sub edx, 0x10
mov dword [ebp - 0x3d8], edx
mov ecx, dword [ebp - 0x3d8]
call fcn.004029d0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x44]
sub eax, 0x10
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x3dc]
call fcn.004029d0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x40]
sub ecx, 0x10
mov dword [ebp - 0x3e0], ecx
mov ecx, dword [ebp - 0x3e0]
call fcn.004029d0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18]
sub edx, 0x10
mov dword [ebp - 0x3e4], edx
mov ecx, dword [ebp - 0x3e4]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x28]
sub eax, 0x10
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
call fcn.004029d0
mov eax, dword [ebp - 0xdc]
jmp 0x405b5f
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_Fail___LastError___d___s_____s__will_RebootCopy
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x14
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x3f0], edx
push 5
mov eax, dword [ebp - 0x3ec]
push eax
mov ecx, dword [ebp - 0x3f0]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4056c4
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Move_Driver_File_Fail__MoveFileEx___LastError___d___s_____s.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0x14
mov dword [ebp - 0xe0], 5
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x4c]
sub edx, 0x10
mov dword [ebp - 0x3f4], edx
mov ecx, dword [ebp - 0x3f4]
call fcn.004029d0
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x14]
sub eax, 0x10
mov dword [ebp - 0x3f8], eax
mov ecx, dword [ebp - 0x3f8]
call fcn.004029d0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x10
mov dword [ebp - 0x3fc], ecx
mov ecx, dword [ebp - 0x3fc]
call fcn.004029d0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x10]
sub edx, 0x10
mov dword [ebp - 0x400], edx
mov ecx, dword [ebp - 0x400]
call fcn.004029d0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x30]
sub eax, 0x10
mov dword [ebp - 0x404], eax
mov ecx, dword [ebp - 0x404]
call fcn.004029d0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x24]
sub ecx, 0x10
mov dword [ebp - 0x408], ecx
mov ecx, dword [ebp - 0x408]
call fcn.004029d0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2c]
sub edx, 0x10
mov dword [ebp - 0x40c], edx
mov ecx, dword [ebp - 0x40c]
call fcn.004029d0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x3c]
sub eax, 0x10
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
call fcn.004029d0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x20]
sub ecx, 0x10
mov dword [ebp - 0x414], ecx
mov ecx, dword [ebp - 0x414]
call fcn.004029d0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
sub edx, 0x10
mov dword [ebp - 0x418], edx
mov ecx, dword [ebp - 0x418]
call fcn.004029d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x40]
sub eax, 0x10
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x41c]
call fcn.004029d0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
sub ecx, 0x10
mov dword [ebp - 0x420], ecx
mov ecx, dword [ebp - 0x420]
call fcn.004029d0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
sub edx, 0x10
mov dword [ebp - 0x424], edx
mov ecx, dword [ebp - 0x424]
call fcn.004029d0
mov eax, dword [ebp - 0xe0]
jmp 0x405b5f
mov dword [ebp - 0x38], 1
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x4c]
sub eax, 0x10
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
call fcn.004029d0
jmp 0x4056ef
mov dword [ebp - 0x38], 1
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x42c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x405a70
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x430], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x434], ecx
push 0
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x405757
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push str.UpdateDrivers_Copy_Driver_File_ToClient_Succeed__s_____s.
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x10
jmp 0x40577a
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_ToClient_Fail___LastError___d___s_____s.
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x14
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x43c], edx
push 0
mov eax, dword [ebp - 0x438]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4057cc
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x2c]
push eax
push str.UpdateDrivers_Copy_Driver_File_Succeed____s_____s.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0x10
jmp 0x405a70
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_Fail___LastError___d___s_____s__will_RenameCopy
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0x14
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x4ec]
call fcn.004035b0
test eax, eax
jne 0x405a69
push str..tmp
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x50]
push edx
call fcn.0040f270
add esp, 0xc
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x444], ecx
push 0
mov edx, dword [ebp - 0x440]
push edx
mov eax, dword [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x40592a
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Client_File_Fail__MoveFileEx___LastError___d___s_____s.
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x14
mov dword [ebp - 0xe4], 5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x50]
call fcn.004129d0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x14]
call fcn.004129d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
call fcn.004129d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x10]
call fcn.004129d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x30]
call fcn.004129d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x24]
call fcn.004129d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2c]
call fcn.004129d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
call fcn.004129d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004129d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.004129d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.004129d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004129d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004129d0
mov eax, dword [ebp - 0xe4]
jmp 0x405b5f
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Copy_Driver_File_Fail___LastError___d___s_____s__will_RebootCopy
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 0x14
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x480], edx
push 5
mov eax, dword [ebp - 0x47c]
push eax
mov ecx, dword [ebp - 0x480]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x405a54
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.UpdateDrivers_Move_Driver_File_Fail__MoveFileEx___LastError___d___s_____s.
mov ecx, dword [ebp - 0x4ec]
push ecx
call fcn.00401a70
add esp, 0x14
mov dword [ebp - 0xe8], 5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x50]
call fcn.004129d0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x14]
call fcn.004129d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
call fcn.004129d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x10]
call fcn.004129d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x30]
call fcn.004129d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x24]
call fcn.004129d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2c]
call fcn.004129d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
call fcn.004129d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004129d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.004129d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.004129d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004129d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004129d0
mov eax, dword [ebp - 0xe8]
jmp 0x405b5f
mov dword [ebp - 0x38], 1
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x50]
call fcn.004129d0
jmp 0x405a70
mov dword [ebp - 0x38], 1
cmp dword [ebp - 0x34], 0
je 0x405ab3
push 1
call fcn.0043cd80
add esp, 4
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x405a9f
push str.DoUpdate_WowFsRedirection__TRUE__Succeed.
mov edx, dword [ebp - 0x4ec]
push edx
call fcn.00401a70
add esp, 8
jmp 0x405ab3
push str.DoUpdate_WowFsRedirection__TRUE__Fail.
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.00401a70
add esp, 8
mov ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffb
add ecx, 5
mov dword [ebp - 0xec], ecx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x14]
call fcn.004129d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
call fcn.004129d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x10]
call fcn.004129d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x30]
call fcn.004129d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x24]
call fcn.004129d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2c]
call fcn.004129d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
call fcn.004129d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004129d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.004129d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.004129d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004129d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004129d0
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret