Function at 0x412fd0
Capabilities:
Create process on windows
Create thread
Delete directory
Delete file
Get session user name
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2704
call fcn.0042c450
mov eax, dword [0x448044]
xor eax, esp
mov dword [esp + 0x2700], eax
push ebx
push esi
push edi
push 0x220
push 0
push 0x477b88
call fcn.004279d0
add esp, 0xc
push 0x4499ec
push 0x48c568
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x48c564], eax
mov eax, dword [ebp + 0x10]
mov edx, 0x48ac08
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x413030
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push str.C:TempwmcInst.ini
push 0
push str.Time
push 0x43ffc0
call esi
push str.C:TempwmcInst.ini
push 0
push 0x43ffcc
push 0x43ffc0
mov dword [0x487af0], eax
call esi
mov dword [0x487af4], eax
mov eax, dword [ebp + 8]
mov dword [0x488f60], eax
mov eax, 0x48ac08
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413085
sub eax, edx
sar eax, 1
je 0x413e93
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._ManualUpdate__Elevate_CmdLine_
call edi
mov esi, 0x48ac08
call fcn.0040b1c0
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x16f2]
push edx
mov dword [esp + 0x18], 0
mov word [esp + 0x16f4], cx
call fcn.004279d0
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [esp + 0x16e8]
push str._C:Program_FilesWW2017CFwmcSystem7.exe___ap
push eax
call ebx
push str._apmode2
call fcn.004016c0
add esp, 0xc
cmp eax, 1
jne 0x413154
lea ecx, [esp + 0x16e8]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403960
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x16f0]
push eax
push 0x440090
push 0x48b210
call ebx
add esp, 0x14
push 0x48b210
call edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2700]
xor ecx, esp
call fcn.0041fb1e
mov esp, ebp
pop ebp
ret 0x10
push str._apmode3
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x41318f
lea ecx, [esp + 0x16e8]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403df0
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x16f0]
push eax
push 0x4400f0
jmp 0x413127
push str._apmode4
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4131cd
lea ecx, [esp + 0x16e8]
push ecx
lea ecx, [esp + 0x10]
call fcn.00403df0
mov edx, dword [esp + 0x10]
add esp, 4
push edx
push eax
lea eax, [esp + 0x16f0]
push eax
push 0x440150
jmp 0x413127
push str._apmode1
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x41327d
push 0x44
lea ecx, [esp + 0x14]
push 0
push ecx
call fcn.004279d0
add esp, 0xc
xor eax, eax
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
lea ecx, [esp + 0x1708]
push ecx
push 0
mov dword [esp + 0x38], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [esp + 0x60]
mov esi, eax
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x41324f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x58]
test eax, eax
je 0x41325e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push esi
lea edx, [esp + 0x16f0]
push edx
push 0x4401b0
push 0x48b210
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x41312e
push str._unrar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4132e6
push str.wmcInst.exe_Command_to_Write_Package_File.
call edi
mov edx, str.S.O.C..
mov ecx, 0x440268
call fcn.0040aa30
mov edx, str.A.K.S..
mov ecx, str.ManualUpdate.dat
call fcn.0040aa30
mov edx, str.X.X.R..
mov ecx, 0x43649c
call fcn.0040aa30
mov edx, str.B.O.T..
mov ecx, 0x436478
call fcn.0040aa30
mov edx, str.P.T.7..
mov ecx, str.Presto_7.ini
call fcn.0040aa30
jmp 0x413138
push str._add
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x413862
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x72]
push ecx
mov word [esp + 0x74], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x11ca]
push eax
mov word [esp + 0x11cc], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xeaa]
push edx
mov word [esp + 0xeac], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x135a]
push ecx
mov word [esp + 0x135c], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x103a]
push eax
mov word [esp + 0x103c], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x892]
push edx
mov word [esp + 0x894], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x482]
push ecx
mov word [esp + 0x484], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xca2]
push eax
mov word [esp + 0xca4], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x68a]
push edx
mov word [esp + 0x68c], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x27a]
push ecx
mov word [esp + 0x27c], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa9a]
push eax
mov word [esp + 0xa9c], dx
call fcn.004279d0
add esp, 0xc
push 0x104
lea ecx, [esp + 0x88c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [esp + eax + 0x888]
mov word [esp + eax + 0x478], cx
add eax, 2
test cx, cx
jne 0x413470
lea edx, [esp + 0x478]
push 0x5c
push edx
call fcn.004200d1
add esp, 8
test eax, eax
je 0x4134b5
lea eax, [esp + 0x478]
push 0x5c
push eax
call fcn.004200d1
add esp, 8
xor ecx, ecx
mov word [eax], cx
xor eax, eax
jmp 0x4134c0
movzx ecx, word [esp + eax + 0x478]
mov word [esp + eax + 0x680], cx
add eax, 2
test cx, cx
jne 0x4134c0
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x478]
mov word [esp + eax + 0xa90], cx
add eax, 2
test cx, cx
jne 0x4134e0
lea edx, [esp + 0x680]
push 0x5c
push edx
call fcn.004200d1
add eax, 2
lea edx, [esp + 0xca0]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x413516
lea eax, [esp + 0xc98]
push 0x28
push eax
call fcn.004200d1
add esp, 8
test eax, eax
je 0x413566
push 4
push 0x4402b0
push eax
call fcn.00421eb6
add esp, 0xc
test eax, eax
jne 0x413566
lea ecx, [esp + 0xc98]
push 0x28
push ecx
call fcn.004200d1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0xa90]
push 0x5c
push eax
call fcn.004200d1
add esp, 8
test eax, eax
je 0x413593
lea ecx, [esp + 0xa90]
push 0x5c
push ecx
call fcn.004200d1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0xc98]
push eax
lea ecx, [esp + 0xa94]
push ecx
lea edx, [esp + 0x688]
push str._s_s.exe
push edx
call ebx
add esp, 0x10
lea esi, [esp + 0x680]
lea eax, [esp + 0x888]
call fcn.0040b140
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x274]
push str._sClient.cab
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x41364c
mov eax, esi
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x41364c
xor eax, eax
movzx ecx, word [eax + 0x440268]
mov word [esp + eax + 0x68], cx
add eax, 2
test cx, cx
jne 0x413620
lea eax, [esp + 0x68]
add eax, 0xfffffffe
jmp 0x413640
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413640
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x274]
push str._sManualUpdate.dat
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x4136cd
lea eax, [esp + 0x680]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x4136cd
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0x11c0], cx
add eax, 2
test cx, cx
jne 0x4136a0
lea eax, [esp + 0x11c0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4136c1
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x274]
push str._sPolicyContainer.opt
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x41374d
lea eax, [esp + 0x680]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x41374d
xor eax, eax
nop
movzx ecx, word [eax + 0x43649c]
mov word [esp + eax + 0xea0], cx
add eax, 2
test cx, cx
jne 0x413720
lea eax, [esp + 0xea0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413741
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x274]
push str._sRemoteService.opt
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x4137cd
lea eax, [esp + 0x680]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x4137cd
xor eax, eax
nop
movzx ecx, word [eax + 0x436478]
mov word [esp + eax + 0x1350], cx
add eax, 2
test cx, cx
jne 0x4137a0
lea eax, [esp + 0x1350]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4137c1
lea eax, [esp + 0x478]
push eax
lea ecx, [esp + 0x274]
push str._sPresto_7.ini
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413138
lea eax, [esp + 0x680]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413138
xor eax, eax
jmp 0x413830
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1030], cx
add eax, 2
test cx, cx
jne 0x413830
lea eax, [esp + 0x1030]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413851
jmp 0x413138
push str._rar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x413e33
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x1f12]
push ecx
xor edi, edi
mov word [esp + 0x1f14], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x72]
push eax
mov word [esp + 0x74], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x11ca]
push edx
mov word [esp + 0x11cc], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xeaa]
push ecx
mov word [esp + 0xeac], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x135a]
push eax
mov word [esp + 0x135c], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x103a]
push edx
mov word [esp + 0x103c], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xca2]
push ecx
mov word [esp + 0xca4], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x68a]
push eax
mov word [esp + 0x68c], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0xa9a]
push edx
mov word [esp + 0xa9c], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x482]
push ecx
mov word [esp + 0x484], ax
call fcn.004279d0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x27a]
push eax
mov word [esp + 0x27c], dx
call fcn.004279d0
add esp, 0xc
push 0x104
lea ecx, [esp + 0xc9c]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0xc98]
mov word [esp + eax + 0x680], cx
add eax, 2
test cx, cx
jne 0x4139f0
lea edx, [esp + 0x680]
push 0x5c
push edx
call fcn.004200d1
add esp, 8
test eax, eax
je 0x413a35
lea eax, [esp + 0x680]
push 0x5c
push eax
call fcn.004200d1
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xc98]
push 0x5c
push edx
call fcn.004200d1
add eax, 2
lea edx, [esp + 0xa98]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x413a53
lea eax, [esp + 0xa90]
push 0x2e
push eax
call fcn.004200d1
add esp, 8
test eax, eax
je 0x413a8f
lea ecx, [esp + 0xa90]
push 0x2e
push ecx
call fcn.004200d1
add esp, 8
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0xa90]
push eax
lea ecx, [esp + 0x684]
push ecx
lea edx, [esp + 0x480]
push str._s_s_
push edx
call ebx
lea esi, [esp + 0x488]
lea eax, [esp + 0xca8]
call fcn.0040b140
lea eax, [esp + 0x690]
push eax
lea ecx, [esp + 0x284]
push str._sClient.cab
push ecx
call ebx
add esp, 0x1c
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413b54
mov eax, esi
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413b54
xor eax, eax
mov edi, edi
movzx ecx, word [eax + 0x440268]
mov word [esp + eax + 0x68], cx
add eax, 2
test cx, cx
jne 0x413b10
lea eax, [esp + 0x68]
add eax, 0xfffffffe
jmp 0x413b30
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413b30
mov ecx, dword [0x4402d8]
mov dx, word [0x4402dc]
mov dword [eax], ecx
mov word [eax + 4], dx
mov edi, 1
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x274]
push str._sManualUpdate.dat
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413bf1
lea eax, [esp + 0x478]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413bf1
xor eax, eax
jmp 0x413bb0
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0x11c0], cx
add eax, 2
test cx, cx
jne 0x413bb0
lea eax, [esp + 0x11c0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413bd1
mov ecx, dword [0x4402d8]
mov dx, word [0x4402dc]
mov dword [eax], ecx
mov word [eax + 4], dx
inc edi
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x274]
push str._sPolicyContainer.opt
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413c91
lea eax, [esp + 0x478]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413c91
xor eax, eax
jmp 0x413c50
movzx ecx, word [eax + 0x43649c]
mov word [esp + eax + 0xea0], cx
add eax, 2
test cx, cx
jne 0x413c50
lea eax, [esp + 0xea0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413c71
mov ecx, dword [0x4402d8]
mov dx, word [0x4402dc]
mov dword [eax], ecx
mov word [eax + 4], dx
inc edi
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x274]
push str._sRemoteService.opt
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413d31
lea eax, [esp + 0x478]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413d31
xor eax, eax
jmp 0x413cf0
movzx ecx, word [eax + 0x436478]
mov word [esp + eax + 0x1350], cx
add eax, 2
test cx, cx
jne 0x413cf0
lea eax, [esp + 0x1350]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413d11
mov ecx, dword [0x4402d8]
mov dx, word [0x4402dc]
mov dword [eax], ecx
mov word [eax + 4], dx
inc edi
lea eax, [esp + 0x680]
push eax
lea ecx, [esp + 0x274]
push str._sPresto_7.ini
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x270]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x413dd1
lea eax, [esp + 0x478]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x274]
call fcn.0040ac80
add esp, 4
test eax, eax
je 0x413dd1
xor eax, eax
jmp 0x413d90
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1030], cx
add eax, 2
test cx, cx
jne 0x413d90
lea eax, [esp + 0x1030]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413db1
mov ecx, dword [0x4402d8]
mov dx, word [0x4402dc]
mov dword [eax], ecx
mov word [eax + 4], dx
inc edi
lea eax, [esp + 0x478]
push eax
push edi
lea ecx, [esp + 0x1038]
push ecx
lea edx, [esp + 0x135c]
push edx
lea eax, [esp + 0xeb0]
push eax
lea ecx, [esp + 0x11d4]
push ecx
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0x1f24]
push str._s_s_s_s_s_r_n
push eax
call ebx
add esp, 0x24
push 0x40040
push 0x44042c
lea ecx, [esp + 0x1f10]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x413138
push str._SmrInstallTerminate_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x413e61
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst___Install_terminate___Clear_Temp_
call edi
call fcn.00410170
jmp 0x413138
push str._SmrInstallSuccess_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4155a2
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst__Install_Success__Clear_Temp_
call edi
call fcn.00410170
jmp 0x413138
call fcn.00411d70
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x14ea]
push eax
mov word [esp + 0x14ec], dx
call fcn.004279d0
add esp, 0xc
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x14e0], cx
add eax, 2
test cx, cx
jne 0x413ec0
lea ecx, [esp + 0x14e0]
push ecx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x413efc
lea edx, [esp + 0x14e0]
push edx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x14e0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413f06
mov ecx, dword [str.Public]
mov edx, dword [0x43f9d8]
mov dword [eax], ecx
mov ecx, dword [0x43f9dc]
mov dword [eax + 4], edx
mov edx, dword [0x43f9e0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x14e0]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x413f5a
lea ecx, [esp + 0x14e0]
push ecx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x14e0]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413f64
mov edx, dword [str.SMR7]
mov ecx, dword [0x43acc4]
mov dword [eax], edx
mov edx, dword [0x43acc8]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x14e0]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x413faf
lea ecx, [esp + 0x14e0]
push ecx
call fcn.00421466
add esp, 4
call fcn.004101a0
test eax, eax
jne 0x41421a
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x72]
push eax
mov word [esp + 0x74], dx
call fcn.004279d0
add esp, 0xc
xor eax, eax
jmp 0x413fe0
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x68], cx
add eax, 2
test cx, cx
jne 0x413fe0
lea ecx, [esp + 0x68]
push ecx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414013
lea edx, [esp + 0x68]
push edx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x414020
mov ecx, dword [str.Public]
mov edx, dword [0x43f9d8]
mov dword [eax], ecx
mov ecx, dword [0x43f9dc]
mov dword [eax + 4], edx
mov edx, dword [0x43f9e0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x68]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x41406e
lea ecx, [esp + 0x68]
push ecx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x414075
mov edx, dword [str.SMR7]
mov ecx, dword [0x43acc4]
mov dword [eax], edx
mov edx, dword [0x43acc8]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x68]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x4140ba
lea ecx, [esp + 0x68]
push ecx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4140c1
mov edx, dword [0x440510]
mov ecx, dword [0x440514]
mov dword [eax], edx
mov edx, dword [0x440518]
mov dword [eax + 4], ecx
mov cx, word [0x44051c]
mov dword [eax + 8], edx
lea edx, [esp + 0x68]
push edx
mov word [eax + 0xc], cx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414111
lea eax, [esp + 0x68]
push eax
call fcn.00421466
add esp, 4
lea edi, [esp + 0x68]
add edi, 0xfffffffe
jmp 0x414120
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x414120
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x68]
push ecx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414157
lea edx, [esp + 0x68]
push edx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x892]
push edx
mov word [esp + 0x894], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xa9a]
push ecx
mov word [esp + 0xa9c], ax
call fcn.004279d0
add esp, 0xc
push 0x104
lea edx, [esp + 0x88c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x5e]
movzx ecx, word [esp + 0x5a]
movzx edx, word [esp + 0x58]
push eax
push ecx
push edx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x898]
push ecx
lea edx, [esp + 0xaa4]
push str._c_echo____date_____time_____s___Initial_Path_Fail________sFailLog__04u__02u__02u.log_
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0xa98]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4155a2
call fcn.00410790
test eax, eax
jne 0x41446d
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x72]
push edx
mov word [esp + 0x74], cx
call fcn.004279d0
add esp, 0xc
xor eax, eax
jmp 0x414250
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x68], cx
add eax, 2
test cx, cx
jne 0x414250
lea eax, [esp + 0x68]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414283
lea ecx, [esp + 0x68]
push ecx
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x414290
mov edx, dword [str.Public]
mov ecx, dword [0x43f9d8]
mov dword [eax], edx
mov edx, dword [0x43f9dc]
mov dword [eax + 4], ecx
mov ecx, dword [0x43f9e0]
mov dword [eax + 8], edx
lea edx, [esp + 0x68]
push edx
mov dword [eax + 0xc], ecx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x4142de
lea eax, [esp + 0x68]
push eax
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4142e5
mov ecx, dword [str.SMR7]
mov edx, dword [0x43acc4]
mov dword [eax], ecx
mov ecx, dword [0x43acc8]
mov dword [eax + 4], edx
lea edx, [esp + 0x68]
push edx
mov dword [eax + 8], ecx
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x41432a
lea eax, [esp + 0x68]
push eax
call fcn.00421466
add esp, 4
lea eax, [esp + 0x68]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x414331
mov ecx, dword [0x440510]
mov edx, dword [0x440514]
mov dword [eax], ecx
mov ecx, dword [0x440518]
mov dword [eax + 4], edx
mov dx, word [0x44051c]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0x68]
push eax
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414381
lea ecx, [esp + 0x68]
push ecx
call fcn.00421466
add esp, 4
lea edi, [esp + 0x68]
add edi, 0xfffffffe
jmp 0x414390
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x414390
lea edx, [esp + 0x68]
mov ecx, 8
mov esi, str.InitialFailLog
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x4143c7
lea eax, [esp + 0x68]
push eax
call fcn.00421466
add esp, 4
lea ecx, [esp + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x892]
push eax
mov word [esp + 0x894], dx
call fcn.004279d0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0xa9a]
push edx
mov word [esp + 0xa9c], cx
call fcn.004279d0
add esp, 0xc
push 0x104
lea eax, [esp + 0x88c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx ecx, word [esp + 0x5e]
movzx edx, word [esp + 0x5a]
movzx eax, word [esp + 0x58]
push ecx
push edx
push eax
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x898]
push edx
lea eax, [esp + 0xaa4]
push str._c_echo____date_____time_____s___Test_Write_Log_Fail________sFailLog__04u__02u__02u.log_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea ecx, [esp + 0xa98]
push ecx
jmp 0x4141f8
push str.GlobalwmcInst.exe
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0x48c76c], eax
test eax, eax
jne 0x415579
push str.GlobalwmcInst.exe
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x48c76c], eax
test eax, eax
jne 0x4144da
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [0x48c564]
push eax
push edx
push 0x48c568
push 0x4406e0
push 0x48b210
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x48b210
call fcn.004042f0
add esp, 4
jmp 0x4155a2
mov eax, dword [0x48c564]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push eax
push 0x48c568
push 0x440740
push 0x48b210
call ebx
push 0x48b210
call fcn.004042f0
add esp, 0x14
call fcn.00412bd0
test eax, eax
je 0x41452f
push eax
push 0x4407b0
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
jmp 0x4155a2
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x1d0a]
push edx
mov word [esp + 0x1d0c], cx
call fcn.004279d0
add esp, 0xc
push 0x489fd8
lea eax, [esp + 0x1d04]
push str._s_run1.exe
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x1d00]
push 0
push ecx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x4145b4
lea edx, [esp + 0x1d00]
push edx
push 0x4407f4
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x1d04]
call fcn.0040b7a0
add esp, 4
push 0x44080c
call fcn.004045a0
add esp, 4
call fcn.00411460
push 0x44081c
mov word [0x4829d4], ax
call fcn.004045a0
add esp, 4
cmp dword [0x487af4], 0
je 0x41466e
mov eax, dword [0x4854a0]
mov ecx, dword [0x48549c]
mov edx, dword [0x4854b4]
push 0x484228
push 0x484208
push eax
mov eax, dword [0x4854b0]
push ecx
mov ecx, dword [0x485498]
push edx
mov edx, dword [0x485494]
push eax
mov eax, dword [0x44963c]
push ecx
mov ecx, dword [0x485490]
push edx
mov edx, dword [0x48548c]
push eax
mov eax, dword [0x485488]
push ecx
mov ecx, dword [0x485484]
push edx
mov edx, dword [0x485480]
push eax
mov eax, dword [0x4493b4]
push ecx
push edx
push eax
push 0x4829bc
push 0x4835e8
push 0x482be0
push str._b_tg_
push 0x48b210
call ebx
push 0x48b210
call fcn.004042f0
add esp, 0x54
push 0x488f68
push 0x20000000
push 0
push 0x412810
push 0
push 0
call fcn.00422019
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
add esp, 0x18
cmp dword [0x487ae0], esi
jne 0x4146b6
jmp 0x4146a0
cmp esi, 0x258
je 0x4146b6
push 0xa
call edi
inc esi
cmp dword [0x487ae0], 0
je 0x4146a0
mov ax, word [0x4829d4]
cmp ax, 9
jne 0x414722
mov ecx, dword [0x488f64]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x440990
call fcn.004042f0
mov esi, 0x40010
mov edi, 0x43fe14
mov ebx, 0x4409a0
add esp, 4
push 0x493e0
call fcn.0040b660
add esp, 4
push 0
call fcn.004155c0
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2700]
xor ecx, esp
call fcn.0041fb1e
mov esp, ebp
pop ebp
ret 0x10
test ax, ax
je 0x41473d
push 0x482be0
push 0x4409c0
push 0x48b210
call ebx
add esp, 0xc
jmp 0x41474c
push 0x4409e0
push 0x48b210
call ebx
add esp, 8
push 0x48b210
call fcn.004042f0
mov edx, dword [0x488f64]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 1
push 0x402
push edx
call esi
push 0x4409fc
call fcn.004042f0
add esp, 4
call fcn.00411750
push 0
test eax, eax
jne 0x4147b6
mov eax, dword [0x488f64]
push 0x64
push 0x402
push eax
call esi
push 0x440a2c
call fcn.004042f0
mov esi, 0x40000
mov edi, str.P_g
mov ebx, str._rN_bT2
jmp 0x4146f1
mov ecx, dword [0x488f64]
push 0x14
push 0x402
push ecx
call esi
push 0x440ac0
call fcn.004045a0
mov ax, word [0x4829d4]
add esp, 4
test ax, ax
jne 0x4147e2
push 1
jmp 0x414804
cmp ax, 1
jne 0x4147ec
push 3
jmp 0x414804
cmp ax, 2
jne 0x4147f6
push 3
jmp 0x414804
cmp ax, 3
je 0x414802
cmp ax, 4
jne 0x41480c
push 2
call fcn.00412e90
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x18fa]
push eax
mov word [esp + 0x18fc], dx
call fcn.004279d0
add esp, 0xc
push 0x489fd8
lea ecx, [esp + 0x18f4]
push str._s_run2.exe
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x18f0]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x414891
lea eax, [esp + 0x18f0]
push eax
push 0x440aec
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x18f4]
call fcn.0040b7a0
add esp, 4
push 0x440b04
call fcn.004045a0
add esp, 4
push 0x489fd8
lea ecx, [esp + 0x18f4]
push 0x440b14
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x18f0]
push 0
push edx
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x414924
lea eax, [esp + 0x18f0]
push eax
push 0x440b2c
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
push 0x1b7740
lea esi, [esp + 0x18f4]
call fcn.0040b7a0
add esp, 4
push 0x440b50
mov dword [0x48c458], 1
mov dword [0x4868d4], 0
call fcn.004042f0
add esp, 4
push 0x440b7c
call fcn.004045a0
add esp, 4
call fcn.00411c50
test eax, eax
jne 0x41497a
mov ecx, dword [0x488f64]
push eax
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x440b90
call fcn.004042f0
add esp, 4
call fcn.00412f90
push 0xdbba0
mov esi, 0x40040
mov edi, 0x440bd4
mov ebx, str.uP_n0R
jmp 0x4146f9
push 0x440c20
call fcn.004045a0
add esp, 4
push 0x440c38
call fcn.004042f0
add esp, 4
cmp word [0x4829d4], 2
jne 0x414a84
mov edx, str.S.O.C..
mov ecx, str.C:UsersPublicSMR7WM7ClientPackage.cab
call fcn.0040aa30
push 0x440d00
call fcn.004045a0
add esp, 4
cmp word [0x4829d4], 0
je 0x4149d4
call fcn.00410c50
push 0x3e8
call edi
push 0x440d0c
call fcn.004045a0
add esp, 4
cmp dword [0x4854ac], 0
jne 0x414a34
mov esi, 0x4399b8
nop
mov edx, dword [esi]
mov ecx, str.C:UsersPublicSMR7WM7installTemp_
call fcn.0040c6b0
test eax, eax
jne 0x414a29
mov eax, dword [esi]
push eax
push 0x440d64
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
mov dword [0x4496bc], 0
add esi, 4
cmp esi, 0x4399d4
jl 0x4149f0
cmp word [0x4829d4], 0
jne 0x414b02
mov eax, 0x4829bc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x414a50
sub eax, edx
sar eax, 1
cmp eax, 9
je 0x414b02
push 0x440d80
call fcn.004042f0
add esp, 4
mov dword [0x4496bc], 0
jmp 0x414b0b
mov esi, str.C:UsersPublicSMR7WM7ClientPackage.cab
mov eax, 0x4829d8
call fcn.0040b140
push 0x3e8
call edi
push 0
push esi
call fcn.0042017e
add esp, 8
test eax, eax
je 0x4149b1
push 0x4829d8
push 0x440c68
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
mov edx, dword [0x488f64]
add esp, 4
push 0
push 0x64
push 0x402
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00412f90
push 0xdbba0
mov esi, 0x40010
mov edi, str.pu8
mov ebx, 0x440ca8
jmp 0x4146f9
cmp dword [0x4496bc], 0
jne 0x414b4c
mov ecx, dword [0x488f64]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x440da8
call fcn.004042f0
add esp, 4
call fcn.00412f90
push 0xdbba0
mov esi, 0x40010
mov edi, str.pu8
mov ebx, 0x440dd8
jmp 0x4146f9
push 0x440e3c
call fcn.004042f0
add esp, 4
push 0x440e4c
call fcn.004045a0
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 1
add esp, 4
cmp dword [0x4854a0], esi
jne 0x414bc7
push 0x440e60
call fcn.004042f0
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x892]
push eax
mov word [esp + 0x894], dx
call fcn.004279d0
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [esp + 0x88c]
push str._sWM7F.cab
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x888]
push edx
call edi
cmp dword [0x488d4c], 0
jbe 0x414c2e
cmp word [0x4829d4], 2
jne 0x414c2e
push 0x487f10
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414bf6
mov ecx, 0x487f10
call fcn.00405b00
mov edx, str.X.X.R..
mov ecx, 0x487d08
call fcn.0040aa30
push 0x487d08
push 0x440ea8
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
mov dword [0x487ae4], esi
jmp 0x414cc8
push 0
push 0x487b00
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x414cb4
push 0x487f10
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414c5d
mov ecx, 0x487f10
call fcn.00405b00
mov esi, 0x487d08
mov eax, 0x487b00
call fcn.0040b140
mov ax, word [0x4829d4]
cmp ax, 1
jne 0x414c84
push 0x487b00
push 0x440ecc
jmp 0x414c94
cmp ax, 2
jbe 0x414c9e
push 0x487b00
push 0x440ef4
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
mov dword [0x487ae4], 1
jmp 0x414cc8
push 0x440f18
call fcn.004042f0
mov dword [0x487ae4], 0
add esp, 4
push 0x440f2c
call fcn.004045a0
add esp, 4
cmp dword [0x488d50], 0
jbe 0x414d34
cmp word [0x4829d4], 2
jne 0x414d34
push 0x488528
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414d07
mov ecx, 0x488528
call fcn.00405b00
mov edx, str.B.O.T..
mov ecx, 0x488320
call fcn.0040aa30
push 0x488320
push 0x440f40
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414dbf
push 0
push 0x488118
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x414dba
push 0x488528
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414d63
mov ecx, 0x488528
call fcn.00405b00
mov esi, 0x488320
mov eax, 0x488118
call fcn.0040b140
mov ax, word [0x4829d4]
cmp ax, 1
jne 0x414d99
push 0x488118
push 0x440f64
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414dbf
cmp ax, 2
jbe 0x414db3
push 0x488118
push 0x440f8c
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414dbf
push 0x440fb0
call fcn.004042f0
add esp, 4
push 0x440fc4
call fcn.004045a0
add esp, 4
cmp dword [0x488d54], 0
jbe 0x414e30
cmp word [0x4829d4], 2
jne 0x414e30
push 0x488b40
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414e03
mov ecx, 0x488b40
call fcn.00405b00
mov edx, str.P.T.7..
mov ecx, 0x488938
call fcn.0040aa30
push 0x488938
push 0x440fdc
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414ebb
push 0
push 0x488730
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x414eb6
push 0x488b40
call fcn.004220b9
add esp, 4
cmp eax, 0xffffffff
jne 0x414e5f
mov ecx, 0x488b40
call fcn.00405b00
mov esi, 0x488938
mov eax, 0x488730
call fcn.0040b140
mov ax, word [0x4829d4]
cmp ax, 1
jne 0x414e95
push 0x488730
push 0x441010
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414ebb
cmp ax, 2
jbe 0x414eaf
push 0x488730
push 0x441048
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
jmp 0x414ebb
push 0x44107c
call fcn.004042f0
add esp, 4
push 0x44109c
call fcn.004045a0
add esp, 4
push 0x4410c0
call fcn.004042f0
add esp, 4
call fcn.00411a70
push 0x4410f4
call fcn.004045a0
mov eax, dword [0x488f64]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 0x19
push 0x402
push eax
call esi
cmp dword [0x4868d0], 1
jne 0x414f33
mov eax, 0x4868d8
call fcn.0040ce60
push 0x441128
call fcn.004042f0
add esp, 4
push 0x441140
call fcn.004045a0
add esp, 4
call fcn.00412a80
cmp dword [0x4868d4], 1
jne 0x414fb7
push 0x441160
call fcn.004042f0
add esp, 4
call fcn.0040a9b0
call fcn.00410950
test al, al
jne 0x414f9d
mov ecx, dword [0x488f64]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x441198
call fcn.004042f0
add esp, 4
call fcn.00412f90
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x4411c8
jmp 0x4146f9
push 0x441224
call fcn.004042f0
add esp, 4
push 0x44123c
call fcn.004045a0
add esp, 4
mov edx, dword [0x488f64]
push 0
push 0x32
push 0x402
push edx
call esi
call fcn.00418880
call fcn.004015d0
test eax, eax
je 0x414fdc
call fcn.00418ee0
push 0x44125c
call fcn.004045a0
add esp, 4
push 0x44126c
call fcn.004042f0
add esp, 4
call fcn.004158e0
push 0x441284
call fcn.004045a0
add esp, 4
push 0x441298
call fcn.004042f0
add esp, 4
call fcn.0040f990
push 0
push 0x4e
mov esi, eax
mov eax, dword [0x488f64]
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SetupClient
call fcn.004045a0
add esp, 4
call fcn.00403820
test eax, eax
jne 0x415064
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.uP_nw
call fcn.004042f0
add esp, 4
call fcn.00409280
push 0
push 0
push str.C:UsersPublicSMR7WM7installTemp
call fcn.00405f40
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push str.C:UsersPublicSMR7WM7ClientPackage.cab
call edi
push 0x441324
call fcn.004042f0
mov ecx, dword [0x488f64]
add esp, 4
push 0
push 0x50
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x441334
call fcn.004045a0
add esp, 4
test esi, esi
jne 0x415164
push 0x441340
call fcn.004042f0
add esp, 4
call fcn.0040a9b0
mov edx, dword [0x488f64]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x5a
push 0x402
push edx
call esi
call fcn.004198b0
mov eax, dword [0x488f64]
push 0
push 0x64
push 0x402
push eax
call esi
mov ecx, dword [0x488f68]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44992c], 1
jne 0x415121
push 0x441384
jmp 0x415126
push 0x4413b8
call fcn.004042f0
add esp, 4
call fcn.00418050
call fcn.00412f90
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x441400
call fcn.0040b660
add esp, 4
push 0
call fcn.004155c0
add esp, 4
push eax
call fcn.00421b81
mov edi, 1
cmp dword [0x4868d4], edi
jne 0x4151a1
push 0x441460
call fcn.004042f0
add esp, 4
call fcn.00417cd0
push 0x441478
call fcn.004042f0
add esp, 4
call fcn.00409d60
push 0x441494
call fcn.004045a0
jmp 0x4151ab
push 0x4414c8
call fcn.004042f0
add esp, 4
push edi
call fcn.004168c0
mov edx, dword [0x488f64]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 0x55
push 0x402
push edx
call esi
push 0x4414d8
call fcn.004045a0
add esp, 4
push 0x4414e8
call fcn.004042f0
add esp, 4
call fcn.004031d0
test eax, eax
jne 0x415334
cmp dword [0x487af8], eax
jle 0x4152a8
push str.uP_n_U
call fcn.004042f0
add esp, 4
lea edi, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00409120
mov edi, dword [esp + 0xc]
push edi
mov esi, eax
mov eax, dword [0x487af8]
push esi
push eax
push 0x441510
push 0x48b210
call ebx
mov ecx, dword [0x488f64]
add esp, 0x14
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x488f68]
push 0
push 0
push 0x12
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x48b210
call fcn.004042f0
mov eax, dword [0x487af8]
add esp, 4
push edi
push esi
push eax
push 0x441570
push 0x48b210
call ebx
add esp, 0x14
call fcn.00412f90
push 0xdbba0
mov esi, 0x40000
mov edi, 0x44159c
mov ebx, 0x48b210
jmp 0x41514c
push 0x4415a4
call fcn.004042f0
add esp, 4
call fcn.0040a9b0
mov ecx, dword [0x488f64]
push 0
push 0x5a
push 0x402
push ecx
call esi
call fcn.004198b0
mov edx, dword [0x488f64]
push 0
push 0x64
push 0x402
push edx
call esi
mov eax, dword [0x488f68]
push 0
push 0
push 0x12
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44992c], edi
jne 0x415304
push 0x441384
jmp 0x415309
push 0x4413b8
call fcn.004042f0
add esp, 4
call fcn.00418050
call fcn.00412f90
push 0xdbba0
mov esi, 0x40010
mov edi, str.P_g
mov ebx, 0x4415c8
jmp 0x41514c
cmp dword [0x487af8], 0
jle 0x415384
push str.uP_n_
call fcn.004042f0
add esp, 4
lea edi, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00409120
mov ecx, dword [esp + 0xc]
mov edx, dword [0x487af8]
push ecx
push eax
push edx
push 0x441620
push 0x48b210
call ebx
add esp, 0x14
push 0x48b210
call fcn.004042f0
add esp, 4
mov eax, dword [0x4854a8]
cmp eax, 1
jne 0x41539f
push 0
call fcn.0040f3e0
add esp, 4
push 0x441660
jmp 0x4153b3
cmp eax, 2
jne 0x4153bb
push 1
call fcn.0040f3e0
add esp, 4
push 0x441674
call fcn.004045a0
add esp, 4
cmp word [0x4829d4], 3
jb 0x4153d7
call fcn.0040f540
push 0x441688
call fcn.004045a0
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x1b02]
push ecx
mov word [esp + 0x1b04], ax
call fcn.004279d0
add esp, 0xc
push 0x489fd8
lea edx, [esp + 0x1afc]
push str._s_run3.exe
push edx
call ebx
add esp, 0xc
lea eax, [esp + 0x1af8]
push 0
push eax
call fcn.0042017e
add esp, 8
test eax, eax
jne 0x41545c
lea ecx, [esp + 0x1af8]
push ecx
push 0x4416b8
push 0x48b210
call ebx
add esp, 0xc
push 0x48b210
call fcn.004042f0
add esp, 4
push 0x927c0
lea esi, [esp + 0x1afc]
call fcn.0040b7a0
add esp, 4
push 0x4416d4
call fcn.004045a0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, 1
add esp, 4
cmp dword [0x4493b4], eax
jne 0x4154e3
cmp dword [0x485480], eax
jne 0x4154e3
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x892]
push eax
mov word [esp + 0x894], dx
call fcn.004279d0
add esp, 0xc
push 0x48b008
lea ecx, [esp + 0x88c]
push str._spcinfo7.exe
push ecx
call ebx
add esp, 0xc
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x48b008
push 0x436474
lea edx, [esp + 0x894]
push edx
push str.open
push 0
call esi
call fcn.00418050
push 0
push 0x436474
push 0x4416e4
push str.C:WindowsSysWOW64wmcUpdater.exe
push str.open
push 0
call esi
push 0
push 0x436474
push 0x4416e4
push str.C:WindowsSystem32wmcUpdater.exe
push str.open
push 0
call esi
mov eax, dword [0x488f64]
push 0
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x488f68]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x441788
call fcn.004042f0
add esp, 4
call fcn.00412f90
push 0xdbba0
mov esi, 0x40000
mov edi, 0x44159c
mov ebx, 0x4417b0
call fcn.0040b660
add esp, 4
push 1
jmp 0x415156
mov edx, dword [0x48c564]
push edx
push 0x48c568
push str.__s___u_
push 0x48b210
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x48b210
call fcn.004042f0
add esp, 0x14
mov ecx, dword [esp + 0x270c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0041fb1e
mov esp, ebp
pop ebp
ret 0x10