Function at 0x410180
Capabilities:
Check mutex on windows
Copy file
Create process on windows
Create thread
Delete directory
Delete file
Print debug messages
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x22ac
call fcn.004284b0
mov eax, dword [0x441044]
xor eax, esp
mov dword [esp + 0x22a8], eax
push ebx
push esi
push edi
push 0x220
push 0
push 0xc26420
call fcn.004238b0
mov eax, dword [ebp + 0x10]
mov edx, 0xc38890
add esp, 0xc
sub edx, eax
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4101c0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push str.C:TempwmcInst.ini
push 0
push str.Time
push 0x43a3b8
call esi
push str.C:TempwmcInst.ini
push 0
push 0x43a3c4
push 0x43a3b8
mov dword [0xc3577c], eax
call esi
mov dword [0xc35780], eax
mov eax, dword [ebp + 8]
mov dword [0xc36be8], eax
mov eax, 0xc38890
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410215
sub eax, edx
sar eax, 1
je 0x410eea
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._ManualUpdate__Elevate_CmdLine_
call edi
mov esi, 0xc38890
call fcn.00409540
push str._unrar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x4102d2
push str.wmcInst.exe_Command_to_Write_Package_File.
call edi
push 0x7270e0
mov edx, str.S.O.C..
mov ecx, 0x43a478
call fcn.00408d90
add esp, 4
push 0xc800
mov edx, str.A.K.S..
mov ecx, str.ManualUpdate.dat
call fcn.00408d90
add esp, 4
push 0x7d000
mov edx, str.X.X.R..
mov ecx, 0x43220c
call fcn.00408d90
add esp, 4
push 0x2800
mov edx, str.B.O.T..
mov ecx, 0x4321e8
call fcn.00408d90
add esp, 4
push 0x2800
mov edx, str.P.T.7..
mov ecx, str.Presto_7.ini
call fcn.00408d90
add esp, 4
jmp 0x410ea6
push str._add
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x410882
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0xe62]
push ecx
mov word [esp + 0xe64], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x1182]
push eax
mov word [esp + 0x1184], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xff2]
push edx
mov word [esp + 0xff4], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1312]
push ecx
mov word [esp + 0x1314], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x84a]
push edx
mov word [esp + 0x84c], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x232]
push edx
mov word [esp + 0x234], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.004238b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x638]
mov word [esp + eax + 0x840], cx
add eax, 2
test cx, cx
jne 0x410460
lea eax, [esp + 0x840]
push 0x5c
push eax
call fcn.0041c291
add esp, 8
test eax, eax
je 0x4104a5
lea ecx, [esp + 0x840]
push 0x5c
push ecx
call fcn.0041c291
add esp, 8
xor edx, edx
mov word [eax], dx
xor eax, eax
jmp 0x4104b0
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x4104b0
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x840]
mov word [esp + eax + 0x430], cx
add eax, 2
test cx, cx
jne 0x4104d0
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041c291
add eax, 2
lea edx, [esp + 0xc58]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x410506
lea ecx, [esp + 0xc50]
push 0x28
push ecx
call fcn.0041c291
add esp, 8
test eax, eax
je 0x410556
push 4
push 0x43a4c0
push eax
call fcn.0041de69
add esp, 0xc
test eax, eax
jne 0x410556
lea edx, [esp + 0xc50]
push 0x28
push edx
call fcn.0041c291
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0x430]
push 0x5c
push edx
call fcn.0041c291
add esp, 8
test eax, eax
je 0x410583
lea eax, [esp + 0x430]
push 0x5c
push eax
call fcn.0041c291
add esp, 8
xor ecx, ecx
mov word [eax], cx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [esp + 0xc50]
push edx
lea eax, [esp + 0x434]
push eax
lea ecx, [esp + 0xa50]
push str._s_s.exe
push ecx
call esi
add esp, 0x10
push 0
lea edx, [esp + 0xa4c]
push edx
lea eax, [esp + 0x640]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea ecx, [esp + 0xa4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [esp + 0x840]
push edx
lea eax, [esp + 0x22c]
push str._sClient.cab
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x228]
push 0
push ecx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x41066c
lea edx, [esp + 0xa48]
push edx
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x41066c
xor eax, eax
jmp 0x410640
movzx ecx, word [eax + 0x43a478]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x410640
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x410660
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410660
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x4106ed
lea eax, [esp + 0xa48]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x4106ed
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x4106c0
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4106e1
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x41076d
lea eax, [esp + 0xa48]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x41076d
xor eax, eax
nop
movzx ecx, word [eax + 0x43220c]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x410740
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410761
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x4107ed
lea eax, [esp + 0xa48]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x4107ed
xor eax, eax
nop
movzx ecx, word [eax + 0x4321e8]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x4107c0
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4107e1
lea eax, [esp + 0x840]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410ea6
lea eax, [esp + 0xa48]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410ea6
xor eax, eax
jmp 0x410850
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x410850
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410871
jmp 0x410ea6
push str._rar
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x410e7d
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x1aba]
push ecx
xor esi, esi
mov word [esp + 0x1abc], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0xe62]
push edx
mov word [esp + 0xe64], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x18e
push eax
lea ecx, [esp + 0x1182]
push ecx
mov word [esp + 0x1184], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x18e
push edx
lea eax, [esp + 0xff2]
push eax
mov word [esp + 0xff4], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x18e
push ecx
lea edx, [esp + 0x1312]
push edx
mov word [esp + 0x1314], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xc5a]
push ecx
mov word [esp + 0xc5c], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa52]
push eax
mov word [esp + 0xa54], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x84a]
push ecx
mov word [esp + 0x84c], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x232]
push eax
mov word [esp + 0x234], dx
call fcn.004238b0
add esp, 0xc
push 0x104
lea ecx, [esp + 0xc54]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0xc50]
mov word [esp + eax + 0xa48], cx
add eax, 2
test cx, cx
jne 0x410a10
lea edx, [esp + 0xa48]
push 0x5c
push edx
call fcn.0041c291
add esp, 8
test eax, eax
je 0x410a55
lea eax, [esp + 0xa48]
push 0x5c
push eax
call fcn.0041c291
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xc50]
push 0x5c
push edx
call fcn.0041c291
add eax, 2
lea edx, [esp + 0x438]
add esp, 8
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x410a73
lea eax, [esp + 0x430]
push 0x2e
push eax
call fcn.0041c291
add esp, 8
test eax, eax
je 0x410aaf
lea ecx, [esp + 0x430]
push 0x2e
push ecx
call fcn.0041c291
add esp, 8
xor edx, edx
mov word [eax], dx
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x430]
push eax
lea ecx, [esp + 0xa4c]
push ecx
lea edx, [esp + 0x848]
push str._s_s_
push edx
call edi
add esp, 0x10
push 0
lea eax, [esp + 0x844]
push eax
lea ecx, [esp + 0xc58]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0x80
lea edx, [esp + 0x844]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sClient.cab
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410ba4
lea eax, [esp + 0x840]
push eax
mov ecx, str.R_N_B__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410ba4
xor eax, eax
jmp 0x410b60
movzx ecx, word [eax + 0x43a478]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x410b60
lea eax, [esp + 0x20]
add eax, 0xfffffffe
jmp 0x410b80
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410b80
mov ecx, dword [0x43a4e8]
mov dx, word [0x43a4ec]
mov dword [eax], ecx
mov word [eax + 4], dx
mov esi, 1
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sManualUpdate.dat
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410c41
lea eax, [esp + 0x840]
push eax
mov ecx, str.__J_R__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410c41
xor eax, eax
jmp 0x410c00
movzx ecx, word [eax + str.ManualUpdate.dat]
mov word [esp + eax + 0xe58], cx
add eax, 2
test cx, cx
jne 0x410c00
lea eax, [esp + 0xe58]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410c21
mov ecx, dword [0x43a4e8]
mov dx, word [0x43a4ec]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPolicyContainer.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410ce1
lea eax, [esp + 0x840]
push eax
mov ecx, str.W_W_Q__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410ce1
xor eax, eax
jmp 0x410ca0
movzx ecx, word [eax + 0x43220c]
mov word [esp + eax + 0x1178], cx
add eax, 2
test cx, cx
jne 0x410ca0
lea eax, [esp + 0x1178]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410cc1
mov ecx, dword [0x43a4e8]
mov dx, word [0x43a4ec]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sRemoteService.opt
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410d81
lea eax, [esp + 0x840]
push eax
mov ecx, str.A_N_S__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410d81
xor eax, eax
jmp 0x410d40
movzx ecx, word [eax + 0x4321e8]
mov word [esp + eax + 0xfe8], cx
add eax, 2
test cx, cx
jne 0x410d40
lea eax, [esp + 0xfe8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410d61
mov ecx, dword [0x43a4e8]
mov dx, word [0x43a4ec]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0xa48]
push eax
lea ecx, [esp + 0x22c]
push str._sPresto_7.ini
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x228]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x410e21
lea eax, [esp + 0x840]
push eax
mov ecx, str.O_S_6__
lea edx, [esp + 0x22c]
call fcn.00409000
add esp, 4
test eax, eax
je 0x410e21
xor eax, eax
jmp 0x410de0
movzx ecx, word [eax + str.Presto_7.ini]
mov word [esp + eax + 0x1308], cx
add eax, 2
test cx, cx
jne 0x410de0
lea eax, [esp + 0x1308]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410e01
mov ecx, dword [0x43a4e8]
mov dx, word [0x43a4ec]
mov dword [eax], ecx
mov word [eax + 4], dx
inc esi
lea eax, [esp + 0x840]
push eax
push esi
lea ecx, [esp + 0x1310]
push ecx
lea edx, [esp + 0xff4]
push edx
lea eax, [esp + 0x1188]
push eax
lea ecx, [esp + 0xe6c]
push ecx
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x1acc]
push str._s_s_s_s_s_r_n
push eax
call edi
add esp, 0x24
push 0x40040
push 0x43a63c
lea ecx, [esp + 0x1ab8]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x410ea6
push str._SmrInstallTerminate_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x410ec2
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst___Install_terminate___Clear_Temp_
call edi
call fcn.0040da50
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041bcde
mov esp, ebp
pop ebp
ret 0x10
push str._SmrInstallSuccess_
call fcn.004016c0
add esp, 4
cmp eax, 1
jne 0x411155
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._wmcInst__Install_Success__Clear_Temp_
jmp 0x410e9f
call fcn.0040f4a0
call fcn.0040dab0
test eax, eax
jne 0x41116e
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.004238b0
add esp, 0xc
xor eax, eax
jmp 0x410f20
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x410f20
lea ecx, [esp + 0x20]
push ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x410f53
lea edx, [esp + 0x20]
push edx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410f60
mov ecx, dword [str.Public]
mov edx, dword [0x439f08]
mov dword [eax], ecx
mov ecx, dword [0x439f0c]
mov dword [eax + 4], edx
mov edx, dword [0x439f10]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x410fae
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x410fb5
mov edx, dword [str.SMR7]
mov ecx, dword [0x435a54]
mov dword [eax], edx
mov edx, dword [0x435a58]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x410ffa
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411001
mov edx, dword [str.Debug]
mov ecx, dword [0x43a724]
mov dword [eax], edx
mov edx, dword [0x43a728]
mov dword [eax + 4], ecx
mov cx, word [0x43a72c]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411051
lea eax, [esp + 0x20]
push eax
call fcn.0041d598
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x411060
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x411060
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411097
lea edx, [esp + 0x20]
push edx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.004238b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x648]
push ecx
lea edx, [esp + 0x444]
push str._c_echo____date_____time_____s___Initial_Path_Fail________sFailLog__04u__02u__02u.log_
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0x438]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x22a8]
xor ecx, esp
call fcn.0041bcde
mov esp, ebp
pop ebp
ret 0x10
call fcn.0040e090
test eax, eax
jne 0x4113bd
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x2a]
push edx
mov word [esp + 0x2c], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
jmp 0x4111a0
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x4111a0
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x4111d3
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4111e0
mov edx, dword [str.Public]
mov ecx, dword [0x439f08]
mov dword [eax], edx
mov edx, dword [0x439f0c]
mov dword [eax + 4], ecx
mov ecx, dword [0x439f10]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 0xc], ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x41122e
lea eax, [esp + 0x20]
push eax
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411235
mov ecx, dword [str.SMR7]
mov edx, dword [0x435a54]
mov dword [eax], ecx
mov ecx, dword [0x435a58]
mov dword [eax + 4], edx
lea edx, [esp + 0x20]
push edx
mov dword [eax + 8], ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x41127a
lea eax, [esp + 0x20]
push eax
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411281
mov ecx, dword [str.Debug]
mov edx, dword [0x43a724]
mov dword [eax], ecx
mov ecx, dword [0x43a728]
mov dword [eax + 4], edx
mov dx, word [0x43a72c]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x4112d1
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x4112e0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4112e0
lea edx, [esp + 0x20]
mov ecx, 8
mov esi, str.InitialFailLog
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411317
lea eax, [esp + 0x20]
push eax
call fcn.0041d598
add esp, 4
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.004238b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x43a]
push edx
mov word [esp + 0x43c], cx
call fcn.004238b0
add esp, 0xc
push 0x104
lea eax, [esp + 0x63c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx ecx, word [esp + 0x16]
movzx edx, word [esp + 0x12]
movzx eax, word [esp + 0x10]
push ecx
push edx
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x648]
push edx
lea eax, [esp + 0x444]
push str._c_echo____date_____time_____s___Test_Write_Log_Fail________sFailLog__04u__02u__02u.log_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea ecx, [esp + 0x438]
push ecx
jmp 0x411138
push str.wmcInst.exe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x411657
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x2a]
push eax
mov word [esp + 0x2c], dx
call fcn.004238b0
add esp, 0xc
xor eax, eax
jmp 0x411410
movzx ecx, word [eax + str.C:Users]
mov word [esp + eax + 0x20], cx
add eax, 2
test cx, cx
jne 0x411410
lea ecx, [esp + 0x20]
push ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411443
lea edx, [esp + 0x20]
push edx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
lea ebx, [ebx]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411450
mov ecx, dword [str.Public]
mov edx, dword [0x439f08]
mov dword [eax], ecx
mov ecx, dword [0x439f0c]
mov dword [eax + 4], edx
mov edx, dword [0x439f10]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x41149e
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4114a5
mov edx, dword [str.SMR7]
mov ecx, dword [0x435a54]
mov dword [eax], edx
mov edx, dword [0x435a58]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0x20]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x4114ea
lea ecx, [esp + 0x20]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4114f1
mov edx, dword [str.Debug]
mov ecx, dword [0x43a724]
mov dword [eax], edx
mov edx, dword [0x43a728]
mov dword [eax + 4], ecx
mov cx, word [0x43a72c]
mov dword [eax + 8], edx
lea edx, [esp + 0x20]
push edx
mov word [eax + 0xc], cx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411541
lea eax, [esp + 0x20]
push eax
call fcn.0041d598
add esp, 4
lea edi, [esp + 0x20]
add edi, 0xfffffffe
jmp 0x411550
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x411550
mov ecx, 8
mov esi, str.InitialFailLog
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411587
lea edx, [esp + 0x20]
push edx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.004238b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.004238b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x63c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esp + 0x16]
movzx ecx, word [esp + 0x12]
movzx edx, word [esp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x648]
push ecx
lea edx, [esp + 0x444]
push str._c_echo____date_____time_____s___Running_Exist________sFailLog__04u__02u__02u.log_
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 5
push 0
lea eax, [esp + 0x438]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43a988
call fcn.00403790
add esp, 4
jmp 0x411155
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x16aa]
push edx
mov word [esp + 0x16ac], cx
call fcn.004238b0
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0xc37c60
lea eax, [esp + 0x16a4]
push str._s_run1.exe
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x16a0]
push 0
push ecx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x4116e2
lea edx, [esp + 0x16a0]
push edx
push 0x43a9c4
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
add esp, 4
push 0x927c0
lea esi, [esp + 0x16a4]
call fcn.00409ac0
add esp, 4
push 0x43a9dc
call fcn.004039f0
add esp, 4
call fcn.0040eac0
push 0x43a9ec
mov word [0xc3126c], ax
call fcn.004039f0
add esp, 4
cmp dword [0xc35780], 0
je 0x41179c
mov eax, dword [0xc33138]
mov ecx, dword [0xc33134]
mov edx, dword [0xc33140]
push 0xc326c0
push 0xc326a0
push eax
mov eax, dword [0xc3313c]
push ecx
mov ecx, dword [0xc33130]
push edx
mov edx, dword [0xc3312c]
push eax
mov eax, dword [0x4426a4]
push ecx
mov ecx, dword [0xc33128]
push edx
mov edx, dword [0xc33124]
push eax
mov eax, dword [0xc33120]
push ecx
mov ecx, dword [0xc3311c]
push edx
mov edx, dword [0xc33118]
push eax
mov eax, dword [0x4423b4]
push ecx
push edx
push eax
push 0xc31254
push 0xc31e80
push 0xc31478
push str._b_tg_
push 0xc38e98
call ebx
push 0xc38e98
call fcn.00403790
add esp, 0x54
push 0xc36bf0
push 0x20000000
push 0
push 0x40ff40
push 0
push 0
call fcn.0041dfcc
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
add esp, 0x18
cmp dword [0xc3576c], esi
jne 0x4117e6
lea esp, [esp]
cmp esi, 0x258
je 0x4117e6
push 0xa
call edi
inc esi
cmp dword [0xc3576c], 0
je 0x4117d0
mov ax, word [0xc3126c]
cmp ax, 9
jne 0x411856
mov ecx, dword [0xc36bec]
push 0
push 0x64
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x43ab60
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x411835
push 0x40010
push 0x43a344
push 0x43ab70
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00412590
mov ecx, dword [esp + 0x22b8]
add esp, 4
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041bcde
mov esp, ebp
pop ebp
ret 0x10
test ax, ax
je 0x411871
push 0xc31478
push 0x43ab90
push 0xc38e98
call ebx
add esp, 0xc
jmp 0x411880
push 0x43abb0
push 0xc38e98
call ebx
add esp, 8
push 0xc38e98
call fcn.00403790
mov edx, dword [0xc36bec]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push 0
push 1
push 0x402
push edx
call edi
push 0x43abcc
call fcn.00403790
add esp, 4
call fcn.0040ee70
push 0
test eax, eax
jne 0x4118fa
mov eax, dword [0xc36bec]
push 0x64
push 0x402
push eax
call edi
push 0x43abfc
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x411835
push 0x40000
push str.P_g
push str._rN_bT2
jmp 0x41182d
mov ecx, dword [0xc36bec]
push 0x14
push 0x402
push ecx
call edi
push 0x43ac90
call fcn.004039f0
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x14a2]
push eax
mov word [esp + 0x14a4], dx
call fcn.004238b0
add esp, 0xc
push 0xc37c60
lea ecx, [esp + 0x149c]
push str._s_run2.exe
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x1498]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x41199c
lea eax, [esp + 0x1498]
push eax
push 0x43acbc
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
add esp, 4
push 0x927c0
lea esi, [esp + 0x149c]
call fcn.00409ac0
add esp, 4
push 0x43acd4
call fcn.004039f0
add esp, 4
push 0xc37c60
lea ecx, [esp + 0x149c]
push 0x43ace4
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x1498]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x411a2f
lea eax, [esp + 0x1498]
push eax
push 0x43acfc
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
add esp, 4
push 0x1b7740
lea esi, [esp + 0x149c]
call fcn.00409ac0
add esp, 4
push 0x43ad20
mov dword [0xc36c1c], 1
mov dword [0xc35768], 0
call fcn.00403790
add esp, 4
push 0x43ad4c
call fcn.004039f0
add esp, 4
call fcn.0040f380
test eax, eax
jne 0x411a84
mov ecx, dword [0xc36bec]
push eax
push 0x64
push 0x402
push ecx
call edi
push 0x43ad60
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x411835
push 0x40040
push 0x43ada4
push str.uP_n0R
jmp 0x41182d
push 0x43adf0
call fcn.004039f0
add esp, 4
push 0x43ae08
call fcn.00403790
add esp, 4
cmp word [0xc3126c], 2
jne 0x411b94
push 0x7270e0
mov edx, str.S.O.C..
mov ecx, str.C:UsersPublicSMR7WM7ClientPackage.cab
call fcn.00408d90
add esp, 4
push 0x43aed0
call fcn.004039f0
add esp, 4
cmp word [0xc3126c], 0
je 0x411aea
call fcn.0040e3d0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43aedc
call fcn.004039f0
add esp, 4
mov esi, 0x435728
lea esp, [esp]
mov edx, dword [esi]
mov ecx, str.C:UsersPublicSMR7WM7installTemp_
call fcn.0040a470
test eax, eax
jne 0x411b39
mov eax, dword [esi]
push eax
push 0x43af34
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
add esp, 4
mov dword [0x442914], 0
add esi, 4
cmp esi, 0x435744
jl 0x411b00
cmp word [0xc3126c], 0
jne 0x411c15
mov eax, 0xc31254
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x411b60
sub eax, edx
sar eax, 1
cmp eax, 9
je 0x411c15
push 0x43af50
call fcn.00403790
add esp, 4
mov dword [0x442914], 0
jmp 0x411c1e
mov esi, str.C:UsersPublicSMR7WM7ClientPackage.cab
mov eax, 0xc31270
call fcn.004094c0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call fcn.0041c33e
add esp, 8
test eax, eax
je 0x411ac3
push 0xc31270
push 0x43ae38
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
mov edx, dword [0xc36bec]
add esp, 4
push 0
push 0x64
push 0x402
push edx
call edi
cmp dword [0x4423b4], 0
je 0x411835
push 0x40010
push str.pu8
push 0x43ae78
jmp 0x41182d
cmp dword [0x442914], 0
jne 0x411c5e
mov ecx, dword [0xc36bec]
push 0
push 0x64
push 0x402
push ecx
call edi
push 0x43af78
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x411835
push 0x40010
push str.pu8
push 0x43afa8
jmp 0x41182d
push 0x43b00c
call fcn.00403790
add esp, 4
push 0x43b01c
call fcn.004039f0
mov esi, 1
add esp, 4
cmp dword [0xc33138], esi
jne 0x411cd7
push 0x43b030
call fcn.00403790
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x642]
push eax
mov word [esp + 0x644], dx
call fcn.004238b0
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [esp + 0x63c]
push str._sWM7F.cab
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x638]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0xc35788
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x411d31
push 0xc35b98
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411d06
mov ecx, 0xc35b98
call fcn.004042f0
mov esi, 0xc35990
mov eax, 0xc35788
call fcn.004094c0
push 0x43b078
call fcn.00403790
add esp, 4
mov dword [0xc35770], 1
jmp 0x411f3d
cmp dword [0xc369d4], 0
jbe 0x411d85
push 0xc35b98
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411d56
mov ecx, 0xc35b98
call fcn.004042f0
push 0x7d000
mov edx, str.X.X.R..
mov ecx, 0xc35990
call fcn.00408d90
add esp, 4
push 0x43b078
call fcn.00403790
add esp, 4
mov dword [0xc35770], esi
jmp 0x411f3d
push 0x43b08c
call fcn.00403790
add esp, 4
call fcn.004015d0
test eax, eax
jne 0x411f3d
push 0x206
push eax
lea ecx, [esp + 0x43a]
push ecx
mov word [esp + 0x43c], ax
call fcn.004238b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x232]
push eax
mov word [esp + 0x234], dx
call fcn.004238b0
add esp, 0xc
xor eax, eax
nop
movzx ecx, word [eax + str.C:UsersPublicSMR7WM7installTemp]
mov word [esp + eax + 0x228], cx
add eax, 2
test cx, cx
jne 0x411de0
lea ecx, [esp + 0x228]
push ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411e1c
lea edx, [esp + 0x228]
push edx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x228]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411e26
mov ecx, dword [str.Policy]
mov edx, dword [0x43b0a4]
mov dword [eax], ecx
mov ecx, dword [0x43b0a8]
mov dword [eax + 4], edx
mov edx, dword [0x43b0ac]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x228]
push eax
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411e7a
lea ecx, [esp + 0x228]
push ecx
call fcn.0041d598
add esp, 4
lea eax, [esp + 0x228]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411e84
mov edx, dword [str.System]
mov ecx, dword [0x43b0b4]
mov dword [eax], edx
mov edx, dword [0x43b0b8]
mov dword [eax + 4], ecx
mov ecx, dword [0x43b0bc]
mov dword [eax + 8], edx
lea edx, [esp + 0x228]
push edx
mov dword [eax + 0xc], ecx
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411ed8
lea eax, [esp + 0x228]
push eax
call fcn.0041d598
add esp, 4
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [esp + 0x434]
push str._sPolicyContainer.opt
push ecx
call ebx
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea edx, [esp + 0x22c]
push str._sPolicySystemPolicyContainer.opt
push edx
call ebx
add esp, 0xc
lea eax, [esp + 0x430]
push 0
push eax
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x411f3d
lea esi, [esp + 0x228]
lea eax, [esp + 0x430]
call fcn.004094c0
lea ecx, [esp + 0x430]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x43b0c0
call fcn.004039f0
add esp, 4
push 0
push 0xc35da0
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x411f8f
push 0xc361b0
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411f79
mov ecx, 0xc361b0
call fcn.004042f0
mov esi, 0xc35fa8
mov eax, 0xc35da0
call fcn.004094c0
push 0x43b0d4
jmp 0x411fd7
cmp dword [0xc369d8], 0
jbe 0x411fd2
push 0xc361b0
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x411fb4
mov ecx, 0xc361b0
call fcn.004042f0
push 0x2800
mov edx, str.B.O.T..
mov ecx, 0xc35fa8
call fcn.00408d90
add esp, 4
push 0x43b0d4
jmp 0x411fd7
push 0x43b0e8
call fcn.00403790
add esp, 4
push 0x43b0fc
call fcn.004039f0
add esp, 4
push 0
push 0xc363b8
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x412031
push 0xc367c8
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x41201b
mov ecx, 0xc367c8
call fcn.004042f0
mov esi, 0xc365c0
mov eax, 0xc363b8
call fcn.004094c0
push 0x43b114
jmp 0x412079
cmp dword [0xc369dc], 0
jbe 0x412074
push 0xc367c8
call fcn.0041e06c
add esp, 4
cmp eax, 0xffffffff
jne 0x412056
mov ecx, 0xc367c8
call fcn.004042f0
push 0x2800
mov edx, str.P.T.7..
mov ecx, 0xc365c0
call fcn.00408d90
add esp, 4
push 0x43b114
jmp 0x412079
push 0x43b134
call fcn.00403790
add esp, 4
push 0x43b154
call fcn.004039f0
mov eax, 0xc32280
add esp, 4
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x412096
sub eax, edx
sar eax, 1
je 0x4120bb
push 0x43b178
call fcn.00403790
add esp, 4
call fcn.0040f190
jmp 0x4120c8
push 0x43b1ac
call fcn.00403790
add esp, 4
push 0x43b1c4
call fcn.004039f0
mov edx, dword [0xc36bec]
add esp, 4
push 0
push 0x19
push 0x402
push edx
call edi
mov esi, 1
cmp dword [0xc3355c], esi
jne 0x412118
mov eax, 0xc34560
call fcn.0040ab50
push 0x43b1f8
call fcn.00403790
add esp, 4
push 0x43b210
call fcn.004039f0
add esp, 4
cmp dword [0xc35768], esi
jne 0x412194
push 0x43b230
call fcn.00403790
add esp, 4
call fcn.00408d10
call fcn.0040e260
test al, al
jne 0x41217a
mov eax, dword [0xc36bec]
push 0
push 0x64
push 0x402
push eax
call edi
push 0x43b268
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x411835
push 0x40010
push str.P_g
push 0x43b298
jmp 0x41182d
push 0x43b2f4
call fcn.00403790
add esp, 4
push 0x43b30c
call fcn.004039f0
add esp, 4
mov ecx, dword [0xc36bec]
push 0
push 0x32
push 0x402
push ecx
call edi
call fcn.00415590
push 0x43b32c
call fcn.004039f0
add esp, 4
push 0x43b33c
call fcn.00403790
add esp, 4
call fcn.00412890
push 0x43b354
call fcn.004039f0
add esp, 4
push 0x43b368
call fcn.00403790
add esp, 4
call fcn.0040d270
mov edx, dword [0xc36bec]
push 0
push 0x4e
push 0x402
push edx
mov esi, eax
call edi
push str.SetupClient
call fcn.004039f0
add esp, 4
push 0
push 0
push str.C:UsersPublicSMR7WM7installTemp
call fcn.00404730
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push str.C:UsersPublicSMR7WM7ClientPackage.cab
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x43b3c0
call fcn.00403790
mov eax, dword [0xc36bec]
add esp, 4
push 0
push 0x50
push 0x402
push eax
call edi
push 0x43b3d0
call fcn.004039f0
add esp, 4
test esi, esi
jne 0x4122fa
push 0x43b3e0
call fcn.00403790
add esp, 4
call fcn.00408d10
mov ecx, dword [0xc36bec]
push esi
push 0x5a
push 0x402
push ecx
call edi
call fcn.004161b0
mov edx, dword [0xc36bec]
push esi
push 0x64
push 0x402
push edx
call edi
mov eax, dword [0xc36bf0]
push esi
push esi
push 0x12
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44295c], 1
jne 0x4122bd
push 0x43b424
jmp 0x4122c2
push 0x43b458
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x4122ea
push 0x40010
push str.P_g
push 0x43b4a0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00412590
add esp, 4
push eax
call fcn.0041dbfe
mov esi, 1
cmp dword [0xc35768], esi
jne 0x412337
push 0x43b500
call fcn.00403790
add esp, 4
call fcn.004147f0
push 0x43b518
call fcn.00403790
add esp, 4
call fcn.004080c0
push 0x43b534
call fcn.004039f0
jmp 0x412341
push 0x43b568
call fcn.00403790
add esp, 4
push esi
call fcn.00413870
mov ecx, dword [0xc36bec]
add esp, 4
push 0
push 0x55
push 0x402
push ecx
call edi
push 0x43b578
call fcn.004039f0
add esp, 4
push 0x43b588
call fcn.00403790
add esp, 4
call fcn.004031a0
test eax, eax
jne 0x412410
push 0x43b59c
call fcn.00403790
add esp, 4
call fcn.00408d10
mov edx, dword [0xc36bec]
push 0
push 0x5a
push 0x402
push edx
call edi
call fcn.004161b0
mov eax, dword [0xc36bec]
push 0
push 0x64
push 0x402
push eax
call edi
mov ecx, dword [0xc36bf0]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
cmp dword [0x44295c], esi
jne 0x4123e2
push 0x43b424
jmp 0x4123e7
push 0x43b458
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x4122ea
push 0x40010
push str.P_g
push 0x43b5c0
jmp 0x4122e2
cmp word [0xc3126c], 3
jb 0x41242c
call fcn.0040ce20
push 0x43b600
call fcn.004039f0
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x18b2]
push eax
mov word [esp + 0x18b4], dx
call fcn.004238b0
add esp, 0xc
push 0xc37c60
lea ecx, [esp + 0x18ac]
push str._s_run3.exe
push ecx
call ebx
add esp, 0xc
lea edx, [esp + 0x18a8]
push 0
push edx
call fcn.0041c33e
add esp, 8
test eax, eax
jne 0x4124b6
lea eax, [esp + 0x18a8]
push eax
push 0x43b630
push 0xc38e98
call ebx
add esp, 0xc
push 0xc38e98
call fcn.00403790
add esp, 4
push 0x927c0
lea esi, [esp + 0x18ac]
call fcn.00409ac0
add esp, 4
mov esi, 1
push 0x43b64c
call fcn.004039f0
add esp, 4
cmp dword [0x4423b4], esi
jne 0x412536
cmp dword [0xc33118], esi
jne 0x412536
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x642]
push edx
mov word [esp + 0x644], cx
call fcn.004238b0
add esp, 0xc
push 0xc38c90
lea eax, [esp + 0x63c]
push str._spcinfo7.exe
push eax
call ebx
add esp, 0xc
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0xc38c90
push 0x4321e4
lea ecx, [esp + 0x644]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [0xc36bec]
push 0
push 0x64
push 0x402
push edx
call edi
mov eax, dword [0xc36bf0]
push 0
push 0
push 0x12
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x43b65c
call fcn.00403790
add esp, 4
cmp dword [0x4423b4], 0
je 0x412587
push 0x40000
push 0x43b684
push 0x43b68c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
jmp 0x4122ec