Function at 0x413360
Capabilities:
Delete file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x624
mov eax, dword [0x44a044]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x20e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x210], ax
call fcn.00427f40
add esp, 0xc
cmp dword [0x489a94], 1
jne 0x413532
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push str.Client.cab
push 0x48bf60
push 0x43aff8
push 0x484970
call edi
push 0x48bb50
push 0x48bf60
push str._s_s.dat
push 0x48e1d8
call edi
push ebx
push 0x48e1d8
call fcn.00422010
add esp, 0x28
test eax, eax
je 0x4133f9
push 0x441af8
call fcn.00406870
add esp, 4
mov ebx, 9
mov esi, 0x48e1d8
call fcn.00412ec0
test al, al
jne 0x413411
push 0x441b1c
jmp 0x413872
cmp bx, 9
je 0x41387a
cmp dword [0x487454], 0
jle 0x4134de
cmp dword [0x487868], 0
jbe 0x4134de
mov eax, 0x488870
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413440
sub eax, edx
sar eax, 1
jne 0x41345b
push 0x441b48
jmp 0x4134e3
push 0x488870
push 0x441b94
push 0x48d198
call edi
add esp, 0xc
push 0x48d198
call fcn.00406870
add esp, 4
push 0x437808
push 0x488870
push 0x43aff8
push 0x489a98
call edi
push 0x4377e4
push 0x488870
push 0x43aff8
push 0x48a0b0
call edi
push str.Presto_7.ini
push 0x488870
push 0x43aff8
push 0x48a6c8
call edi
push str.Client.cab
push 0x488870
push 0x43aff8
push 0x484970
call edi
add esp, 0x40
call fcn.00410d10
jmp 0x4134eb
push 0x441bcc
call fcn.00406870
add esp, 4
push 0
push 0x484970
call fcn.00422010
add esp, 8
test eax, eax
je 0x413508
push 0x441bfc
jmp 0x413872
push 0x441c1c
call fcn.00406870
mov ebx, dword [0x48744c]
dec ebx
add esp, 4
neg ebx
sbb ebx, ebx
mov dword [0x487450], 1
add ebx, 4
jmp 0x413915
push 0x206
lea eax, [ebp - 0x416]
xor edx, edx
push ebx
push eax
mov dword [0x48744c], ebx
mov dword [0x487450], ebx
mov word [ebp - 0x418], dx
call fcn.00427f40
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x48bb50
push 0x48bf60
push str._s_s.dat
push 0x48e1d8
call edi
push 0x48bf60
lea ecx, [ebp - 0x418]
push str._sClient.cab
push ecx
call edi
add esp, 0x1c
cmp dword [0x48e6fc], ebx
ja 0x4135a2
cmp dword [0x48e6f8], ebx
jbe 0x413890
push ebx
push 0x48e1d8
call fcn.00422010
add esp, 8
test eax, eax
mov eax, dword [0x48e720]
je 0x413687
cmp eax, ebx
jne 0x413689
cmp dword [0x48e708], ebx
jbe 0x41381f
push 5
push str.setup
push 0x48bb50
call fcn.00423ea6
add esp, 0xc
test eax, eax
je 0x4135f3
push 0x441c64
jmp 0x413872
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x61e]
push eax
mov word [ebp - 0x620], dx
call fcn.00427f40
add esp, 0xc
push str.C:UsersPublicSMR7WM7installTemp
lea ecx, [ebp - 0x620]
push str._sVersion.dat
push ecx
call edi
add esp, 0xc
push str.uP_n_q_
mov dword [0x489a84], 1
call fcn.00406870
mov edx, dword [0x48e6fc]
mov eax, dword [0x48e6f8]
add esp, 4
push edx
push eax
push str.C:UsersPublicSMR7WM7ClientPackage.cab
xor ecx, ecx
call fcn.004024f0
add esp, 0xc
call fcn.00412bb0
lea ecx, [ebp - 0x620]
push ecx
push 0xc
push 0x484954
push 0x43c324
push str.Version
push str.Install
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x413915
cmp eax, ebx
jbe 0x41381f
cmp dword [0x48e708], ebx
jbe 0x41381f
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7ManualUpdate.ini
push edx
mov ebx, 2
call edi
mov eax, dword [0x48e6fc]
mov ecx, dword [0x48e6f8]
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
lea ecx, [ebx - 1]
call fcn.004024f0
add esp, 0x14
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [ebp - 0x210]
call fcn.00412ec0
test al, al
jne 0x4136f1
push 0x441d3c
jmp 0x413872
push 0x441d74
call fcn.00406870
add esp, 4
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x48e780], 0
jbe 0x41374f
mov ecx, dword [str.run1.exe]
push ecx
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push edx
call edi
mov eax, dword [0x48e6fc]
mov ecx, dword [0x48e6f8]
add esp, 0xc
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
mov ecx, 5
call fcn.004024f0
jmp 0x413912
cmp dword [0x48e798], 0
jbe 0x413792
mov eax, dword [str.run2.exe]
push eax
lea ecx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push ecx
call edi
mov edx, dword [0x48e6fc]
mov eax, dword [0x48e6f8]
add esp, 0xc
push edx
push eax
lea ecx, [ebp - 0x210]
push ecx
mov ecx, 6
call fcn.004024f0
jmp 0x413912
cmp dword [0x48e7b0], 0
jbe 0x4137d7
mov edx, dword [str.rms.exe]
push edx
lea eax, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push eax
call edi
mov ecx, dword [0x48e6fc]
mov edx, dword [0x48e6f8]
add esp, 0xc
push ecx
push edx
lea eax, [ebp - 0x210]
push eax
mov ecx, 7
call fcn.004024f0
jmp 0x413912
cmp dword [0x48e7c8], 0
jbe 0x413915
mov ecx, dword [str.run3.exe]
push ecx
lea edx, [ebp - 0x210]
push str.C:UsersPublicSMR7_s
push edx
call edi
mov eax, dword [0x48e6fc]
mov ecx, dword [0x48e6f8]
add esp, 0xc
push eax
push ecx
lea edx, [ebp - 0x210]
push edx
mov ecx, 8
call fcn.004024f0
jmp 0x413912
mov ebx, 0x44c414
mov esi, 0x48e718
lea esp, [esp]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esi - 4]
push eax
mov eax, dword [esi - 8]
push ecx
mov ecx, dword [esi - 0x10]
push edx
mov edx, dword [ebx]
push eax
push ecx
push edx
push str.__s___lu___I64d___lu___lu_
push 0x48d198
call edi
push 0x48d198
call fcn.00406870
add esi, 0x18
add esp, 0x24
add ebx, 4
cmp esi, 0x48e7f0
jl 0x413830
push 0x441e0c
call fcn.00406870
add esp, 4
mov eax, 9
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00421294
mov esp, ebp
pop ebp
ret
push ebx
push 0x48e1d8
call fcn.00422010
add esp, 8
test eax, eax
jne 0x41386d
lea eax, [ebp - 0x418]
push ebx
push eax
call fcn.00422010
add esp, 8
test eax, eax
jne 0x41386d
push eax
push 0x48e1d8
lea ebx, [eax + 1]
call fcn.00422010
add esp, 8
test eax, eax
je 0x4138dd
push 0x441e30
call fcn.00406870
add esp, 4
mov ebx, 9
mov esi, 0x48e1d8
call fcn.00412ec0
test al, al
jne 0x4138f2
push 0x441e58
jmp 0x413872
push str.uP_n_tg_
call fcn.00406870
add esp, 4
lea ecx, [ebp - 0x418]
push ecx
push 0x4413f0
push 0x484970
call edi
add esp, 0xc
mov eax, 0x486c18
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413920
mov ecx, dword [0x487450]
sub eax, edx
mov edx, dword [0x487438]
sar eax, 1
push eax
mov eax, dword [0x487434]
push 0x4861c0
push 0x4861a0
push edx
mov edx, dword [0x48744c]
push eax
mov eax, dword [0x487430]
push ecx
mov ecx, dword [0x48742c]
push edx
mov edx, dword [0x44b62c]
push eax
mov eax, dword [0x487428]
push ecx
mov ecx, dword [0x487424]
push edx
mov edx, dword [0x487420]
push eax
mov eax, dword [0x48741c]
push ecx
mov ecx, dword [0x487418]
push edx
mov edx, dword [0x44b3a4]
push eax
push ecx
push edx
push 0x484954
push 0x485580
push 0x484b78
push str.zfga_R
push 0x48d198
call edi
add esp, 0x54
push 0x48d198
call fcn.00406870
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
pop esi
mov ax, bx
xor ecx, ebp
pop ebx
call fcn.00421294
mov esp, ebp
pop ebp
ret