Function at 0x410b30
Capabilities:
Create directory
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x481330
mov eax, dword fs:[0]
push eax
sub esp, 0x380
mov eax, dword [0x4a2e7c]
xor eax, esp
mov dword [esp + 0x37c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a2e7c]
xor eax, esp
push eax
lea eax, [esp + 0x394]
mov dword fs:[0], eax
push str.NInstall::install____0__n
xor esi, esi
push 1
mov ebp, ecx
mov dword [esp + 0x1c], esi
call fcn.00415d30
add esp, 8
lea ecx, [esp + 0xc8]
call fcn.00413b20
lea ecx, [esp + 0xb0]
mov dword [esp + 0x39c], esi
call fcn.004162d0
lea ecx, [esp + 0x98]
mov byte [esp + 0x39c], 1
call fcn.004162d0
lea ecx, [esp + 0x64]
mov byte [esp + 0x39c], 2
call fcn.004162d0
cmp dword [ebp + 0x12c], esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov byte [esp + 0x39c], 3
je 0x410f25
cmp dword [0x4a47a4], esi
je 0x410bf9
mov eax, dword [ebp + 4]
push 0x48b228
push esi
push 0x473
push eax
jmp 0x410c08
mov ecx, dword [ebp + 4]
push str.Registration_confirmation_of_the_installation_files...
push esi
push 0x473
push ecx
call ebx
mov edx, dword [0x4a47a0]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.0041c990
add esp, 8
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x39c], 4
call fcn.0042bdf0
push 0x100
lea ecx, [esp + 0x80]
mov byte [esp + 0x3a0], 5
call fcn.00416560
push eax
push 2
push 5
lea ecx, [esp + 0x1b0]
call fcn.0042cbe0
push eax
lea ecx, [esp + 0x114]
call fcn.00416390
lea ecx, [esp + 0x158]
mov byte [esp + 0x39c], 6
call fcn.004480f0
lea esi, [ebp + 8]
push 0x1c35
mov ecx, esi
mov byte [esp + 0x3a0], 7
call fcn.00416560
push eax
lea ecx, [esp + 0x160]
call fcn.00448130
lea ecx, [esp + 0x4c]
call fcn.004162d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 8
call fcn.004162d0
lea ecx, [esp + 0x34]
mov byte [esp + 0x39c], 9
call fcn.00419090
push 0x104
lea ecx, [esp + 0x290]
push 0
push ecx
mov byte [esp + 0x3a8], 0xa
call fcn.0044c830
add esp, 0xc
push str.SERVER_IPS
lea ecx, [esp + 0x50]
call fcn.00416860
push esi
lea edx, [esp + 0xe4]
push edx
lea ecx, [esp + 0x54]
call fcn.00417030
mov ecx, eax
mov byte [esp + 0x39c], 0xb
call fcn.00416550
push eax
lea ecx, [esp + 0x50]
call fcn.00416860
lea ecx, [esp + 0xe0]
mov byte [esp + 0x39c], 0xa
call fcn.00416420
push 0x488968
lea ecx, [esp + 0x50]
call fcn.00417190
push str.HASHS
lea ecx, [esp + 0x50]
call fcn.00417190
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0x50]
call fcn.00417150
push 0x104
lea ecx, [esp + 0x290]
push ecx
lea ecx, [esp + 0x54]
call fcn.00416560
push eax
push 2
push str.SP_SV_AGENT_INSTALL_HASH_S
lea ecx, [esp + 0x16c]
call fcn.00448500
mov edi, 0x48b1b4
lea esi, [esp + 0x28c]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x410ea5
mov eax, dword [ebp + 4]
push edx
push edx
push 0x471
push eax
call ebx
push 1
mov dword [0x4a2088], 0
call fcn.0040ad30
add esp, 4
lea ecx, [esp + 0x34]
mov byte [esp + 0x39c], 9
call fcn.004190b0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 8
call fcn.00416420
lea ecx, [esp + 0x4c]
mov byte [esp + 0x39c], 7
call fcn.00416420
lea ecx, [esp + 0x158]
mov byte [esp + 0x39c], 6
call fcn.00448120
lea ecx, [esp + 0x110]
mov byte [esp + 0x39c], 5
call fcn.00416420
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x39c], 4
call fcn.0042be40
lea ecx, [esp + 0x7c]
mov byte [esp + 0x39c], 3
call fcn.00416420
lea ecx, [esp + 0x64]
mov byte [esp + 0x39c], 2
call fcn.00416420
lea ecx, [esp + 0x98]
mov byte [esp + 0x39c], 1
call fcn.00416420
lea ecx, [esp + 0xb0]
mov byte [esp + 0x39c], 0
call fcn.00416420
lea ecx, [esp + 0xc8]
mov dword [esp + 0x39c], 0xffffffff
call fcn.00413b30
xor eax, eax
jmp 0x411c1b
lea ecx, [esp + 0x34]
mov byte [esp + 0x39c], 9
call fcn.004190b0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 8
call fcn.00416420
lea ecx, [esp + 0x4c]
mov byte [esp + 0x39c], 7
call fcn.00416420
lea ecx, [esp + 0x158]
mov byte [esp + 0x39c], 6
call fcn.00448120
lea ecx, [esp + 0x110]
mov byte [esp + 0x39c], 5
call fcn.00416420
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x39c], 4
call fcn.0042be40
lea ecx, [esp + 0x7c]
mov byte [esp + 0x39c], 3
call fcn.00416420
cmp dword [ebp + 0xc0], 0
je 0x410ff4
mov eax, dword [ebp + 4]
test eax, eax
je 0x410f58
cmp dword [0x4a47a4], 0
je 0x410f49
push str.4.x_Agent
jmp 0x410f4e
push str.4.x_version_Agent_is_removing_now..
push 0
push 0x473
push eax
call ebx
mov ecx, ebp
call fcn.0040ba40
mov eax, dword [ebp + 4]
test eax, eax
je 0x410f85
cmp dword [0x4a47a4], 0
je 0x410f76
push 0x48b160
jmp 0x410f7b
push str.4.x_version_Agent_is_removing_now..
push 0
push 0x473
push eax
call ebx
push str.NcdInstall2.exe
lea ecx, [esp + 0x80]
lea esi, [ebp + 0x18c]
push ecx
mov ecx, esi
call fcn.00416f80
push 0x48b15c
lea edx, [esp + 0x20]
push edx
mov ecx, eax
mov byte [esp + 0x3a4], 0xc
call fcn.00416f80
lea ecx, [esp + 0x7c]
mov byte [esp + 0x39c], 0xe
call fcn.00416420
mov ecx, esi
call fcn.00416560
push eax
lea ecx, [esp + 0x20]
call fcn.00416560
push eax
call fcn.0041d1a0
add esp, 8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 3
call fcn.00416420
mov ecx, ebp
call fcn.0040b910
test eax, eax
jne 0x41101a
push str.NInstall::install____1__writeCabFile___Fail_n
push 1
call fcn.00415d30
push 2
call fcn.0040ad30
add esp, 0xc
jmp 0x410e4e
mov eax, dword [ebp + 4]
test eax, eax
je 0x41105a
push 5
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x411048
mov eax, dword [ebp + 4]
push 0x48b110
push 0
push 0x473
push eax
jmp 0x411058
mov ecx, dword [ebp + 4]
push str.extract_files_from_compressed_file..
push 0
push 0x473
push ecx
call ebx
push str.NInstall::install____2__n
push 1
call fcn.00415d30
add esp, 8
mov ecx, ebp
call fcn.0040bb70
mov ecx, ebp
call fcn.0040bcc0
mov ecx, ebp
call fcn.0040fc00
mov ecx, ebp
call fcn.0040fd90
push str.NInstall::install____3__n
push 1
call fcn.00415d30
mov eax, dword [ebp + 4]
add esp, 8
test eax, eax
je 0x4110d4
push 0xa
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x4110c2
mov edx, dword [ebp + 4]
push 0x48b098
push 0
push 0x473
push edx
jmp 0x4110d2
mov eax, dword [ebp + 4]
push str.check_up_installation_status..
push 0
push 0x473
push eax
call ebx
push str.nckill.exe
lea ecx, [esp + 0x20]
lea edi, [ebp + 0x18c]
push ecx
mov ecx, edi
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0xf
call fcn.00416550
push eax
lea ecx, [esp + 0xb4]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 3
call fcn.00416420
mov ecx, edi
call fcn.00416560
push eax
lea ecx, [esp + 0xb4]
call fcn.00416560
push eax
call fcn.0041d1a0
mov eax, dword [ebp + 4]
add esp, 8
test eax, eax
je 0x411148
push 0x14
push 0
push 0x46f
push eax
call ebx
mov ecx, ebp
call fcn.0040fb90
push str.NInstall::install____4__n
push 1
call fcn.00415d30
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 8
cmp dword [ebp + 0x144], 0
je 0x411265
push 0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x34], esp
push str._CSIDL_SYSTEM_
call fcn.00416300
lea edx, [esp + 0x68]
push edx
call fcn.0040d4f0
add esp, 0x20
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x3a0], 0x10
call fcn.00416dd0
push str._nc5.2.bin
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x54]
mov byte [esp + 0x3a4], 0x11
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x12
call fcn.00416550
push eax
lea ecx, [esp + 0x50]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x11
call fcn.00416420
push str._nc5.3.bin
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x3c]
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x13
call fcn.00416550
push eax
lea ecx, [esp + 0x38]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x11
call fcn.00416420
lea ecx, [esp + 0x4c]
call fcn.00416560
push eax
call esi
lea ecx, [esp + 0x34]
call fcn.00416560
push eax
call esi
lea ecx, [esp + 0x34]
mov byte [esp + 0x39c], 0x10
call fcn.00416420
lea ecx, [esp + 0x4c]
mov byte [esp + 0x39c], 3
call fcn.00416420
mov ecx, ebp
call fcn.00410290
mov eax, dword [ebp + 4]
test eax, eax
je 0x4112ac
push 0x19
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x41129a
mov eax, dword [ebp + 4]
push 0x48b024
push 0
push 0x473
push eax
jmp 0x4112aa
mov ecx, dword [ebp + 4]
push str.copy_program_files..
push 0
push 0x473
push ecx
call ebx
mov eax, dword [ebp + 0xa0]
sub esp, 0x18
sub eax, 2
lea esi, [ebp + 0x15c]
mov ecx, esp
mov dword [esp + 0x30], esp
push esi
je 0x4112d3
call fcn.00416dd0
call fcn.004282d0
jmp 0x4112dd
call fcn.00416dd0
call fcn.0040da40
add esp, 0x18
mov ecx, esi
call fcn.00416560
push eax
push str.NInstall::install____5__path:_s_n
push 1
call fcn.00415d30
add esp, 0xc
push str.nc5.cab
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x14
call fcn.00416550
push eax
lea ecx, [esp + 0x9c]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 3
call fcn.00416420
mov ecx, ebp
call fcn.00410860
cmp dword [ebp + 0x124], 0
push 0x497748
mov ecx, esi
je 0x411450
lea eax, [esp + 0x80]
push eax
call fcn.00416f80
push str.Install
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
mov byte [esp + 0x3a4], 0x15
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x16
call fcn.00416550
push eax
lea ecx, [esp + 0x68]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x15
call fcn.00416420
lea ecx, [esp + 0x7c]
mov byte [esp + 0x39c], 3
call fcn.00416420
push 0
lea ecx, [esp + 0x68]
call fcn.00416560
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x497748
lea edx, [esp + 0x114]
push edx
mov ecx, esi
call fcn.00416f80
push str.Install
lea ecx, [esp + 0x80]
push ecx
mov ecx, eax
mov byte [esp + 0x3a4], 0x17
call fcn.00416f80
push 0x497748
lea edx, [esp + 0x20]
push edx
mov ecx, eax
mov byte [esp + 0x3a4], 0x18
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x19
call fcn.00416550
push eax
lea ecx, [esp + 0x68]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x18
call fcn.00416420
lea ecx, [esp + 0x7c]
mov byte [esp + 0x39c], 0x17
call fcn.00416420
lea ecx, [esp + 0x110]
jmp 0x411477
lea eax, [esp + 0x20]
push eax
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x1a
call fcn.00416550
push eax
lea ecx, [esp + 0x68]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 3
call fcn.00416420
lea ecx, [esp + 0x64]
call fcn.00416560
push eax
lea ecx, [esp + 0xcc]
call fcn.00413fd0
mov edx, dword [ebp + 0xfc]
lea ecx, [ebp + 0x134]
push ecx
push edx
lea ecx, [esp + 0xa0]
call fcn.00416560
push eax
lea ecx, [esp + 0xd4]
call fcn.00414200
test eax, eax
jne 0x411700
lea ecx, [esp + 0x64]
call fcn.00416560
push eax
lea ecx, [esp + 0x9c]
call fcn.00416560
push eax
push str.NInstall::install____6__extractCabFile___Fail_src:_s_dst:_s__n
push 1
call fcn.00415d30
add esp, 0x10
cmp dword [ebp + 0xfc], 0
mov dword [esp + 0x18], 0
je 0x4116b8
lea ecx, [esp + 0x34]
call fcn.004162d0
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x3a0], 0x1b
call fcn.00416820
push 0x497748
lea ecx, [esp + 0x38]
call fcn.00417190
call fcn.00421560
test eax, eax
push str.n5agent.exe
je 0x41155d
lea eax, [esp + 0x80]
push eax
call fcn.00404df0
add esp, 8
mov byte [esp + 0x39c], 0x1c
mov dword [esp + 0x14], 1
jmp 0x411579
lea ecx, [esp + 0x20]
call fcn.00416300
mov dword [esp + 0x39c], 0x1d
mov dword [esp + 0x14], 2
push eax
lea ecx, [esp + 0x38]
call fcn.00417150
test byte [esp + 0x14], 2
mov dword [esp + 0x39c], 0x1c
je 0x4115a3
and dword [esp + 0x14], 0xfffffffd
lea ecx, [esp + 0x1c]
call fcn.00416420
test byte [esp + 0x14], 1
mov dword [esp + 0x39c], 0x1b
je 0x4115be
lea ecx, [esp + 0x7c]
call fcn.00416420
push 0
sub esp, 0x18
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00416dd0
call fcn.00428050
add esp, 0x1c
push esi
lea ecx, [esp + 0x38]
mov edi, eax
call fcn.00416820
push 0x497748
lea ecx, [esp + 0x38]
call fcn.00417190
push str.n5start.exe
lea ecx, [esp + 0x38]
call fcn.00417190
push 0
sub esp, 0x18
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00416dd0
call fcn.00428050
add esp, 0x1c
push esi
lea ecx, [esp + 0x38]
mov dword [esp + 0x18], eax
call fcn.00416820
push 0x497748
lea ecx, [esp + 0x38]
call fcn.00417190
push str.n5client.exe
lea ecx, [esp + 0x38]
call fcn.00417190
push 0
sub esp, 0x18
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0xb0], esp
push edx
call fcn.00416dd0
call fcn.00428050
add esp, 0x1c
cmp edi, 1
jne 0x411689
cmp dword [esp + 0x14], edi
jne 0x411689
cmp eax, edi
jne 0x411689
push str.NInstall::install____7__exist_important_modules_n
push edi
call fcn.00415d30
add esp, 8
jmp 0x4116a3
push eax
mov eax, dword [esp + 0x18]
push eax
push edi
push str.NInstall::install____8__ret_FALSE_n5agent.exe:_d__n5start.exe:_d__n5client.exe:_d_n
push 1
call fcn.00415d30
mov edi, dword [esp + 0x2c]
add esp, 0x14
lea ecx, [esp + 0x34]
mov byte [esp + 0x39c], 3
call fcn.00416420
test edi, edi
jne 0x411700
mov eax, dword [ebp + 4]
test eax, eax
je 0x4116f1
cmp dword [0x4a47a4], 0
push 0
push 0x488abc
je 0x4116d6
push 0x48aeec
jmp 0x4116db
push str.decompression_error_has_occurred..
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp + 4]
push 0x28
push 0
push 0x472
push ecx
call ebx
push 3
call fcn.0040ad30
add esp, 4
jmp 0x410e4e
cmp dword [ebp + 0x124], 0
je 0x411791
lea ecx, [esp + 0x4c]
call fcn.004162d0
push esi
lea ecx, [esp + 0x50]
mov byte [esp + 0x3a0], 0x1e
call fcn.00416820
push 0x497748
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x54]
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x1f
call fcn.00416550
push eax
lea ecx, [esp + 0x50]
call fcn.00416860
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x1e
call fcn.00416420
lea ecx, [esp + 0x4c]
call fcn.00416560
push eax
lea ecx, [esp + 0x68]
call fcn.00416560
push eax
mov ecx, ebp
call fcn.0040b5e0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x39c], 3
call fcn.00416420
push str.n5addon.exe
lea eax, [esp + 0x12c]
push eax
lea ecx, [ebp + 0x18c]
call fcn.00416f80
push 0x497748
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
mov byte [esp + 0x3a4], 0x20
call fcn.00416f80
push str.n5addon.exe
lea edx, [esp + 0xfc]
push edx
mov ecx, eax
mov byte [esp + 0x3a4], 0x21
call fcn.00416f80
lea ecx, [esp + 0x1c]
mov byte [esp + 0x39c], 0x23
call fcn.00416420
sub esp, 0x18
lea eax, [esp + 0x110]
mov ecx, esp
mov dword [esp + 0xac], esp
push eax
call fcn.00416dd0
sub esp, 0x18
lea edx, [esp + 0x158]
mov ecx, esp
mov dword [esp + 0x48], esp
push edx
mov byte [esp + 0x3d0], 0x24
call fcn.00416dd0
mov byte [esp + 0x3cc], 0x23
call fcn.0041e480
mov eax, dword [ebp + 4]
add esp, 0x30
test eax, eax
je 0x411849
push 0x28
push 0
push 0x46f
push eax
call ebx
mov ecx, ebp
call fcn.0040f9c0
lea ecx, [esp + 0x98]
call fcn.00416560
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push eax
call edi
lea ecx, [esp + 0xb0]
call fcn.00416560
push eax
call edi
mov eax, dword [ebp + 0x11c]
push eax
mov ecx, ebp
call fcn.0040ad40
test eax, eax
mov eax, dword [ebp + 4]
jne 0x4118df
test eax, eax
je 0x4118bf
cmp dword [0x4a47a4], 0
push 0
push 0x488abc
je 0x4118a4
push 0x48aea4
jmp 0x4118a9
push str.Set_automatic_removal_has_failed.
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp + 4]
push 0x28
push 0
push 0x472
push ecx
call ebx
lea ecx, [esp + 0xf8]
mov byte [esp + 0x39c], 0x20
call fcn.00416420
lea ecx, [esp + 0x128]
jmp 0x410e41
test eax, eax
je 0x41191c
push 0x37
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x41190a
mov edx, dword [ebp + 4]
push 0x48ae68
push 0
push 0x473
push edx
jmp 0x41191a
mov eax, dword [ebp + 4]
push str.create_shortcut_icon..
push 0
push 0x473
push eax
call ebx
mov ecx, ebp
call fcn.0040c360
mov eax, dword [ebp + 4]
test eax, eax
je 0x411963
push 0x3c
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x411951
mov ecx, dword [ebp + 4]
push str.Agent
push 0
push 0x473
push ecx
jmp 0x411961
mov edx, dword [ebp + 4]
push str.make_initialization_Agent_program..
push 0
push 0x473
push edx
call ebx
push str.NInstall::install___Step1__0__n
push 1
call fcn.00415d30
add esp, 8
cmp dword [ebp + 0xc0], 0
je 0x4119f3
cmp dword [ebp + 0xc4], 0
je 0x4119f3
mov eax, dword [ebp + 4]
test eax, eax
je 0x4119a9
push 0x63
push 0
push 0x46f
push eax
call ebx
mov eax, dword [ebp + 4]
push 0x49789d
push 0
push 0x473
push eax
call ebx
cmp dword [0x4a47a4], 0
push 0x1000
push 0x488abc
je 0x4119c3
push 0x48adc0
jmp 0x4119c8
push str.PC_Rebooting_is_required_after_uninstalling_4.x_Agent.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, ebp
call fcn.0040b8a0
mov ebp, dword [ebp + 4]
test ebp, ebp
je 0x411b9e
push 0
push 0
push 0x471
push ebp
call ebx
jmp 0x411b9e
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp + 0x9c], 0
jne 0x411a10
cmp dword [ebp + 0xc8], 0
je 0x411a6c
mov ecx, dword [ebp + 4]
push ecx
call fcn.004156f0
add esp, 4
cmp dword [ebp + 0xc8], 0
je 0x411a6c
mov eax, dword [ebp + 4]
test eax, eax
je 0x411a65
push 0x5a
push 0
push 0x46f
push eax
call ebx
cmp dword [0x4a47a4], 0
je 0x411a53
mov edx, dword [ebp + 4]
push 0x48ad68
push 0
push 0x473
push edx
jmp 0x411a63
mov eax, dword [ebp + 4]
push str.install_remote_control_program..
push 0
push 0x473
push eax
call ebx
mov ecx, ebp
call fcn.004104e0
mov eax, dword [ebp + 4]
test eax, eax
je 0x411a91
push 0x63
push 0
push 0x46f
push eax
call ebx
mov ecx, dword [ebp + 4]
push 0x49789d
push 0
push 0x473
push ecx
call ebx
mov ecx, esi
call fcn.00416560
push eax
lea ecx, [esp + 0xfc]
call fcn.00416560
push eax
call fcn.0041d530
add esp, 8
cmp dword [ebp + 0x9c], 0
je 0x411b81
lea ecx, [esp + 0xe0]
call fcn.004162d0
mov byte [esp + 0x39c], 0x25
call fcn.00420d30
test eax, eax
mov ecx, esi
jne 0x411b0e
push str._n5uinfo9x.exe
lea edx, [esp + 0x80]
push edx
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x26
call fcn.00416550
push eax
lea ecx, [esp + 0xe4]
call fcn.00416860
lea ecx, [esp + 0x7c]
jmp 0x411b43
push str._n5uinfo.exe
lea eax, [esp + 0x144]
push eax
call fcn.00416f80
mov ecx, eax
mov byte [esp + 0x39c], 0x27
call fcn.00416550
push eax
lea ecx, [esp + 0xe4]
call fcn.00416860
lea ecx, [esp + 0x140]
mov byte [esp + 0x39c], 0x25
call fcn.00416420
mov ecx, esi
call fcn.00416560
push eax
lea ecx, [esp + 0xe4]
call fcn.00416560
push eax
call fcn.0041d530
add esp, 8
lea ecx, [esp + 0xe0]
mov byte [esp + 0x39c], 0x23
call fcn.00416420
mov ebp, dword [ebp + 4]
test ebp, ebp
je 0x411b94
push 0
push 0
push 0x471
push ebp
call ebx
push 0
call fcn.0040ad30
add esp, 4
lea ecx, [esp + 0xf8]
mov byte [esp + 0x39c], 0x20
call fcn.00416420
lea ecx, [esp + 0x128]
mov byte [esp + 0x39c], 3
call fcn.00416420
lea ecx, [esp + 0x64]
mov byte [esp + 0x39c], 2
call fcn.00416420
lea ecx, [esp + 0x98]
mov byte [esp + 0x39c], 1
call fcn.00416420
lea ecx, [esp + 0xb0]
mov byte [esp + 0x39c], 0
call fcn.00416420
lea ecx, [esp + 0xc8]
mov dword [esp + 0x39c], 0xffffffff
call fcn.00413b30
mov eax, 1
mov ecx, dword [esp + 0x394]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x37c]
xor ecx, esp
call fcn.0044b607
add esp, 0x38c
ret