Function at 0x4041b6
Capabilities:
Delete file
Read .ini file

Disassembly:
mov eax, 0x41a4bc
call fcn.00410e40
sub esp, 0x290
mov eax, dword [0x4240b8]
push ebx
mov dword [ebp - 0x10], eax
xor ebx, ebx
push esi
mov dword [ebp - 0x25c], ebx
movzx eax, byte [ebp + 0xc]
push edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00404c9f
pop ecx
pop ecx
mov dword [ebp - 4], ebx
push dword [0x424cec]
lea eax, [ebp + 0xc]
push eax
call fcn.004047d6
push dword [ebp + 0xc]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push ebx
push str.ReadyStatus
mov esi, str.Install
push esi
call edi
cmp eax, 1
je 0x40421e
xor bl, bl
jmp 0x4043ee
push dword [ebp + 0xc]
push ebx
push str.FilesNumber
push esi
call edi
cmp eax, ebx
mov dword [ebp - 0x274], eax
jbe 0x404217
mov dword [ebp - 0x260], ebx
mov ebx, 0x41da74
push dword [ebp - 0x260]
lea eax, [ebp - 0x50]
push str.File_d
push eax
call fcn.0040f27f
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x258]
push 0x104
push eax
push ebx
lea eax, [ebp - 0x50]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push dword [ebp - 0x260]
lea eax, [ebp - 0x50]
push str.File_dCRC
push eax
call fcn.0040f27f
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x50]
push 0xffffffffffffffff
push eax
push esi
call edi
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 0x258]
call fcn.00403372
cmp dword [ebp - 0x264], eax
jne 0x404414
push 0x54
call fcn.0040d863
pop ecx
mov dword [ebp - 0x270], eax
test eax, eax
mov byte [ebp - 4], 1
je 0x404343
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.00404444
push ebx
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
or dword [ebp - 0x25c], 1
push eax
call fcn.00404444
mov eax, dword [ebp + 8]
add eax, 0x12
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x268]
push eax
mov dword [ebp - 4], 3
push dword [ebp - 0x288]
or dword [ebp - 0x25c], 2
push dword [ebp - 0x264]
push 1
push dword [ebp - 0x270]
call fcn.00403449
mov dword [ebp - 0x264], eax
jmp 0x40434a
and dword [ebp - 0x264], 0
test byte [ebp - 0x25c], 2
je 0x404368
mov eax, dword [ebp - 0x268]
and dword [ebp - 0x25c], 0xfffffffd
add eax, 0xfffffff0
call fcn.0040252d
and dword [ebp - 4], 0
test byte [ebp - 0x25c], 1
je 0x40438a
mov eax, dword [ebp - 0x26c]
and dword [ebp - 0x25c], 0xfffffffe
add eax, 0xfffffff0
call fcn.0040252d
push dword [ebp - 0x260]
lea eax, [ebp - 0x50]
push str.File_dUnzipSize
push eax
call fcn.0040f27f
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x50]
push 0
push eax
push esi
call edi
test eax, eax
mov ecx, dword [ebp - 0x264]
mov dword [ecx + 0x50], eax
je 0x404421
push dword [ebp + 8]
mov eax, ecx
call fcn.00403431
inc dword [ebp - 0x260]
mov eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x274]
jb 0x40423f
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
add eax, 0x12
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov bl, 1
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.0040252d
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
mov al, bl
pop ebx
call fcn.00410647
leave
ret 8
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, dword [ebp + 8]
xor eax, eax
push eax
push 0xffffffffffffffff
push eax
push eax
call fcn.004034fc
push dword [ebp + 0xc]
xor eax, eax
push eax
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
jmp 0x404217