Function at 0x425245
Capabilities:
Copy file
Get common file path
Get graphical window text
Persist via lnk shortcut
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf24
push ebx
push esi
push edi
xor esi, esi
push 0x4a7050
lea ecx, [ebp - 0x20]
mov dword [0x443dc8], esi
call fcn.004017a8
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push esi
push 0xf0
push 0x3ec
push dword [ebp + 8]
call ebx
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
push esi
push esi
push 0xf0
push 0x3f7
push dword [ebp + 8]
mov dword [ebp - 0x60], eax
call ebx
push eax
call edi
push esi
push esi
push 0xf0
push 0x3f8
push dword [ebp + 8]
mov dword [ebp - 0x68], eax
call ebx
push eax
call edi
push esi
push esi
push 0xf0
push 0x3f9
push dword [ebp + 8]
mov dword [ebp - 0x5c], eax
call ebx
push eax
call edi
push esi
push esi
push 0xf0
push 0x3fb
push dword [ebp + 8]
mov dword [ebp - 0x3c], eax
call ebx
push eax
call edi
mov dword [ebp - 0x2c], eax
mov eax, dword [0x47ec20]
mov dword [ebp - 0xf24], eax
mov ecx, 0x213
xor eax, eax
lea edi, [ebp - 0xf20]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xf24]
push 0x400
mov edi, 0x3fa
push eax
push edi
push dword [ebp + 8]
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0xf24]
lea ecx, [ebp - 0x10]
push eax
call fcn.00407038
lea eax, [ebp - 0x10]
push eax
call fcn.004276f2
pop ecx
push dword [ebp - 0x10]
push edi
push dword [ebp + 8]
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push dword [ebp - 0x10]
call fcn.004263d2
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.00427cbd
cmp eax, 2
pop ecx
je 0x4253d6
cmp dword [0x47eccc], esi
jne 0x42603e
lea eax, [ebp - 0xf24]
lea ecx, [ebp - 0x14]
push eax
push 0x446020
call fcn.00407038
push eax
lea eax, [ebp - 0x28]
push 0x18775
push eax
call fcn.00428fb5
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 8]
push eax
call fcn.00401a81
push esi
push esi
push dword [eax]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea ecx, [ebp - 0x28]
call fcn.004017ee
lea ecx, [ebp - 0x14]
jmp 0x426039
lea eax, [ebp - 0x20]
push str..exe
push eax
mov edi, 0x444d68
lea eax, [ebp - 0x10]
push edi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401a81
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 4]
push eax
call fcn.00401a81
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea eax, [ebp - 0x20]
push str._Uninstall.ini
push eax
lea eax, [ebp - 0x10]
push edi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401a81
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00401a81
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea eax, [ebp - 0x20]
push str..ini
push eax
lea eax, [ebp - 0x10]
push edi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401a81
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00401a81
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
mov eax, dword [0x4421a0]
push esi
push 0x1a
push 0x400
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x64], eax
call fcn.00401b61
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.00401bc9
mov edi, 0x442748
lea ecx, [ebp - 0xc]
push edi
call fcn.0040181a
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004019df
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
cmp dword [ebp - 0x2c], esi
je 0x425507
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x34]
push eax
call fcn.00407091
push 0x444d90
lea ecx, [ebp - 0x14]
call fcn.0040181a
push edi
lea ecx, [ebp - 0xc]
call fcn.0040181a
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004019df
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp - 0x14]
call fcn.004017ee
mov eax, dword [0x47ec20]
mov ecx, 0x81
mov dword [ebp - 0x2ec], eax
xor eax, eax
lea edi, [ebp - 0x2e8]
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x2ec]
push eax
push dword [0x47ecdc]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 4]
push ecx
mov ecx, esp
cmp dword [eax - 0xc], esi
jl 0x4255ba
mov dword [ecx], eax
mov eax, dword [ebp - 4]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4255c9
mov eax, dword [0x4421a0]
mov dword [ecx], eax
push dword [ebp - 4]
call fcn.00401974
call fcn.00427cbd
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
pop ecx
jne 0x4256a6
cmp dword [0x47eccc], esi
jne 0x4256a6
lea eax, [ebp - 0xc]
push 0x18779
push eax
call fcn.00428fb5
pop ecx
pop ecx
push dword [ebp - 4]
lea ecx, [ebp - 0xc]
push 0x445fec
call fcn.00401c27
push 0x4459d8
push 0x4459d0
lea ecx, [ebp - 0xc]
call fcn.00401c27
mov edi, 0x4422a8
lea ecx, [ebp - 0x14]
push edi
call fcn.0040181a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x14]
call fcn.004017ee
push edi
lea ecx, [ebp - 0x14]
call fcn.0040181a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea eax, [ebp - 8]
push 0x1877b
push eax
call fcn.00428fb5
mov eax, dword [eax]
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xc]
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 8]
call fcn.004017ee
push 1
push esi
push dword [ebp - 0xc]
push dword [0x4a7a7c]
call ebx
cmp eax, 1
lea ecx, [ebp - 0xc]
jne 0x4257ca
call fcn.004017ee
mov eax, dword [ebp - 4]
push ecx
mov ecx, esp
cmp dword [eax - 0xc], esi
jl 0x4256c2
mov dword [ecx], eax
mov eax, dword [ebp - 4]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4256d1
mov eax, dword [0x4421a0]
mov dword [ecx], eax
push dword [ebp - 4]
call fcn.00401974
call fcn.00427cbd
cmp eax, 1
pop ecx
jne 0x42570c
mov edi, 0x80
push edi
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
push edi
push 4
push esi
push 1
push 0x40000000
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x425740
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
lea eax, [ebp - 0x2ec]
push dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [ebp - 4]
push ecx
mov ecx, esp
cmp dword [eax - 0xc], esi
jl 0x42581e
mov dword [ecx], eax
mov eax, dword [ebp - 4]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x42582d
lea eax, [ebp + 8]
push 0x1877e
push eax
call fcn.00428fb5
pop ecx
lea eax, [ebp - 4]
pop ecx
push eax
lea eax, [ebp - 8]
push 0x446020
push eax
call fcn.00408d6d
mov eax, dword [eax]
lea ecx, [ebp + 8]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 8]
call fcn.004017ee
mov edi, str._r_n_____r_n
mov eax, edi
test eax, eax
je 0x42578a
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.00401acd
lea eax, [ebp - 8]
push 0x1877d
push eax
call fcn.00428fb5
mov eax, dword [eax]
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 8]
call fcn.004017ee
push esi
push esi
push dword [ebp + 8]
push esi
call ebx
call fcn.004088cb
lea ecx, [ebp + 8]
call fcn.004017ee
lea ecx, [ebp - 0x40]
call fcn.004017ee
lea ecx, [ebp - 0x34]
call fcn.004017ee
lea ecx, [ebp - 0x64]
call fcn.004017ee
lea ecx, [ebp - 0x24]
call fcn.004017ee
lea ecx, [ebp - 0x50]
call fcn.004017ee
lea ecx, [ebp - 0x48]
call fcn.004017ee
lea ecx, [ebp - 4]
call fcn.004017ee
lea ecx, [ebp - 0x10]
call fcn.004017ee
lea ecx, [ebp - 0x20]
call fcn.004017ee
xor eax, eax
jmp 0x426050
mov eax, dword [0x4421a0]
mov dword [ecx], eax
push dword [ebp - 4]
call fcn.00401974
call fcn.00427cbd
cmp eax, 1
pop ecx
je 0x42589c
lea eax, [ebp - 4]
lea ecx, [ebp - 0x14]
push eax
push 0x446020
call fcn.00407038
push eax
lea eax, [ebp - 0x28]
push 0x18777
push eax
call fcn.00428fb5
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019df
push esi
push esi
push dword [eax]
push dword [ebp + 8]
call ebx
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea ecx, [ebp - 0x28]
call fcn.004017ee
lea ecx, [ebp - 0x14]
call fcn.004017ee
jmp 0x426006
push dword [ebp - 0x24]
call fcn.004263d2
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.00427cbd
mov eax, dword [0x4421a0]
pop ecx
push 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], eax
pop ecx
xor eax, eax
cmp dword [ebp - 0x3c], esi
lea edi, [ebp - 0x9c]
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], 2
mov dword [ebp - 0xa0], 0xb
rep stosd dword es:[edi], eax
push 7
lea edi, [ebp - 0xd4]
pop ecx
mov dword [ebp - 0xe0], 0x19
mov dword [ebp - 0xdc], 0x17
mov dword [ebp - 0xd8], 0x16
rep stosd dword es:[edi], eax
lea edi, [ebp - 0xa8]
je 0x425927
lea edi, [ebp - 0xe0]
push esi
mov ebx, 0x400
push dword [edi]
lea ecx, [ebp - 0x44]
push ebx
call fcn.00401b61
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x44]
call fcn.00401bc9
push esi
lea ecx, [ebp - 0x54]
push dword [edi + 4]
push ebx
call fcn.00401b61
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x54]
call fcn.00401bc9
push esi
lea ecx, [ebp - 0x4c]
push dword [edi + 8]
push ebx
call fcn.00401b61
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x4c]
call fcn.00401bc9
mov ebx, str._s_s.lnk
lea ecx, [ebp - 0x30]
push ebx
call fcn.00407038
mov edi, 0x4a704c
lea ecx, [ebp - 0x80]
push edi
call fcn.004017a8
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
call fcn.00407091
push 0x4427ec
push str.desktop_shortcut
call fcn.00427c95
mov eax, dword [0x4421a0]
pop ecx
mov dword [ebp + 8], eax
pop ecx
lea eax, [ebp + 8]
push eax
push ecx
mov ecx, esp
push edi
call fcn.004017a8
call fcn.00432d0d
pop ecx
lea eax, [ebp + 8]
pop ecx
push eax
push ecx
mov ecx, esp
push edi
call fcn.004017a8
call fcn.00432e11
pop ecx
pop ecx
lea ecx, [ebp + 8]
call fcn.004017ee
push 0x47eaf4
lea ecx, [ebp - 0x38]
call fcn.0040181a
mov eax, dword [0x4421a0]
push 0x105
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.00401b61
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0xffffffffffffffff
lea ecx, [ebp + 8]
call fcn.00401bc9
push str._tmp_folder_2019
lea ecx, [ebp - 0x28]
call fcn.0040181a
push 0x47eaf4
lea ecx, [ebp - 0x14]
call fcn.0040181a
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push 0x4a7050
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004019df
push eax
lea ecx, [ebp + 8]
call fcn.00401b49
lea ecx, [ebp - 0x7c]
call fcn.004017ee
lea ecx, [ebp - 0x78]
call fcn.004017ee
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0x28]
call fcn.004017ee
push dword [ebp + 8]
call fcn.004263d2
mov eax, dword [0x4421a0]
pop ecx
push ebx
lea ecx, [ebp - 8]
mov dword [ebp - 0xc], eax
call fcn.00407038
push dword [0x4a7050]
lea eax, [ebp - 0xc]
push dword [ebp + 8]
push dword [ebp - 8]
push eax
call fcn.00408deb
add esp, 0x10
lea eax, [ebp - 0xc]
lea ecx, [ebp - 0x38]
push eax
call fcn.00407091
lea eax, [ebp - 4]
lea ecx, [ebp - 0x18]
push eax
call fcn.004017a8
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
push esi
push ecx
mov ebx, 0x47ec04
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
lea eax, [ebp - 0xc]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.004264aa
add esp, 0x1c
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea ecx, [ebp - 8]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp + 8]
call fcn.004017ee
cmp dword [ebp - 0x60], esi
je 0x425bcd
push dword [0x4a7050]
lea eax, [ebp - 0x1c]
push dword [ebp - 0x44]
push dword [ebp - 0x30]
push eax
call fcn.00408deb
add esp, 0x10
push esi
push dword [ebp - 0x1c]
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x425bb7
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004280c1
push dword [ebp - 4]
push dword [ebp + 8]
call sub.MSVCRT.dll__wcsicmp
add esp, 0x10
test eax, eax
je 0x425baf
push ecx
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.00424830
pop ecx
call fcn.004248bf
lea ecx, [ebp + 8]
call fcn.004017ee
push esi
lea ecx, [ebp - 0x1c]
call fcn.00401b61
push eax
push str.desktop_shortcut
call fcn.00427c95
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
push 0x445f74
mov dword [ebp + 8], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00401a81
push dword [eax]
lea eax, [ebp - 0x1c]
push dword [ebp - 0x10]
push dword [ebp + 8]
push eax
call fcn.00408deb
add esp, 0x10
lea ecx, [ebp - 0x60]
call fcn.004017ee
push esi
lea ecx, [ebp - 0x1c]
call fcn.00401b61
push eax
push str.uninstall_shortcut
call fcn.00427c95
pop ecx
pop ecx
push esi
push esi
push ecx
mov ecx, esp
push str.__uninstall
call fcn.00407038
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.004264aa
add esp, 0x1c
cmp dword [ebp - 0x68], esi
je 0x425c6f
push esi
push dword [ebp - 4]
push dword [ebp - 0x20]
call fcn.0043bdee
add esp, 0xc
cmp dword [ebp - 0x2c], esi
jne 0x425d09
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x54]
push 0x444d68
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00401a81
push eax
lea eax, [ebp + 8]
push eax
call fcn.004019df
lea ecx, [ebp - 0x68]
call fcn.004017ee
push dword [ebp + 8]
call fcn.004263d2
pop ecx
lea eax, [ebp - 0x1c]
push dword [0x4a7050]
push dword [ebp + 8]
push dword [ebp - 0x30]
push eax
call fcn.00408deb
add esp, 0x10
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.004264aa
add esp, 0x1c
lea ecx, [ebp + 8]
call fcn.004017ee
cmp dword [ebp - 0x5c], esi
je 0x425d7c
push dword [0x4a7050]
lea eax, [ebp - 0x1c]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
push eax
call fcn.00408deb
add esp, 0x10
lea ecx, [ebp - 0x1c]
push esi
call fcn.00401b61
push eax
push str.start_shortcut
call fcn.00427c95
pop ecx
pop ecx
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.004017a8
push ecx
mov ecx, esp
push ebx
call fcn.00407038
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004017a8
call fcn.004264aa
add esp, 0x1c
cmp dword [ebp - 0x2c], esi
jne 0x425db0
push dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 4]
mov eax, esp
push 0x445f0c
push ecx
push eax
call fcn.00401a81
push ecx
lea ecx, [ebp - 4]
mov eax, esp
push str.___uninstall
push ecx
push eax
call fcn.00401a81
call fcn.0042692e
add esp, 0xc
call fcn.00424a0a
push eax
push str.admin_install
call fcn.00427c85
push dword [ebp - 0x3c]
push str.for_all_install
call fcn.00427c85
add esp, 0x10
lea ecx, [ebp - 0x10]
push esi
call fcn.00401b61
push eax
push str.install_dir
call fcn.00427c95
push dword [ebp - 0x2c]
push str.portable_install
call fcn.00427c85
push dword [0x443de8]
mov ebx, 0x445e70
push ebx
call fcn.00427c85
add esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.00407091
call fcn.00424a0a
push eax
push str.admin_install
call fcn.00427c85
mov eax, dword [0x4421a0]
pop ecx
mov dword [ebp + 8], eax
pop ecx
lea eax, [ebp + 8]
push eax
push ecx
mov ecx, esp
push edi
call fcn.004017a8
call fcn.00432d0d
pop ecx
lea eax, [ebp + 8]
pop ecx
push eax
push ecx
mov ecx, esp
push edi
call fcn.004017a8
call fcn.00432e11
pop ecx
pop ecx
lea ecx, [ebp + 8]
call fcn.004017ee
push dword [ebp - 0x3c]
push str.for_all_install
call fcn.00427c85
pop ecx
pop ecx
push esi
lea ecx, [ebp - 0x10]
call fcn.00401b61
push eax
push str.install_dir
call fcn.00427c95
push dword [ebp - 0x2c]
push str.portable_install
call fcn.00427c85
add esp, 0x10
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0xb8]
push eax
call fcn.0040f846
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
call sub.MSVCRT.dll_localtime
mov dword [ebp + 8], eax
mov word [ebp - 0x6d4], si
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0x6d2]
push dword [ebp + 8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0x1f3
push 0x443d0c
lea eax, [ebp - 0x6d4]
push edi
push eax
call sub.MSVCRT.dll_wcsftime
add esp, 0x18
lea eax, [ebp - 0x6d4]
lea ecx, [ebp - 0x58]
push eax
call fcn.00407038
push dword [ebp + 8]
lea eax, [ebp - 0x6d4]
push 0x443d04
push edi
push eax
call sub.MSVCRT.dll_wcsftime
add esp, 0x10
lea eax, [ebp - 0x6d4]
lea ecx, [ebp - 0x70]
push eax
call fcn.00407038
push 0x442340
lea ecx, [ebp + 8]
call fcn.0040181a
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004019df
push eax
lea ecx, [ebp - 0x58]
call fcn.00401b49
lea ecx, [ebp - 0x5c]
call fcn.004017ee
lea ecx, [ebp + 8]
call fcn.004017ee
push esi
lea ecx, [ebp - 0x58]
call fcn.00401b61
push eax
push str.Install_Time
call fcn.00427c95
push dword [0x443de8]
push ebx
call fcn.00427c85
add esp, 0x10
lea ecx, [ebp - 0x6c]
push str._bg__startup
call fcn.0040181a
cmp dword [0x47eccc], esi
jne 0x425f9c
push 0x47eaf4
lea ecx, [ebp - 0x6c]
call fcn.0040199b
push 5
push esi
push dword [ebp - 0x6c]
push dword [ebp - 4]
push str.open
push esi
call fcn.00433078
add esp, 0x18
lea ecx, [ebp - 0x6c]
call fcn.004017ee
lea ecx, [ebp - 0x70]
call fcn.004017ee
lea ecx, [ebp - 0x58]
call fcn.004017ee
lea ecx, [ebp - 0x38]
call fcn.004017ee
lea ecx, [ebp - 0x80]
call fcn.004017ee
lea ecx, [ebp - 0x30]
call fcn.004017ee
lea ecx, [ebp - 0x44]
call fcn.004017ee
lea ecx, [ebp - 0x4c]
call fcn.004017ee
lea ecx, [ebp - 0x54]
call fcn.004017ee
lea ecx, [ebp - 0x1c]
call fcn.004017ee
push 1
pop esi
lea ecx, [ebp - 0x40]
call fcn.004017ee
lea ecx, [ebp - 0x34]
call fcn.004017ee
lea ecx, [ebp - 0x64]
call fcn.004017ee
lea ecx, [ebp - 0x24]
call fcn.004017ee
lea ecx, [ebp - 0x50]
call fcn.004017ee
lea ecx, [ebp - 0x48]
call fcn.004017ee
lea ecx, [ebp - 4]
call fcn.004017ee
lea ecx, [ebp - 0x10]
call fcn.004017ee
lea ecx, [ebp - 0x20]
call fcn.004017ee
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret