Function at 0x415304
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x454046
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x46ed08]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, 0x473b58
mov edx, str.InstallScanEvent
mov ecx, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00402d39
mov edx, str.InstallScanResultUrl
mov ecx, edi
mov esi, eax
call fcn.00402d39
cmp dword [0x473a30], ebx
mov dword [esp + 0x38], eax
jne 0x415a76
cmp esi, ebx
je 0x415892
cmp eax, ebx
je 0x415892
mov edx, 0x45c744
mov ecx, edi
mov dword [esp + 0x30], 1
call fcn.00402d39
cmp eax, ebx
je 0x415536
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0040154d
mov dword [esp + 0xa4], ebx
or dword [esp + 0xa4], 0xffffffff
lea ebx, [esp + 0x18]
call fcn.00414bd6
pop ecx
mov dword [esp + 0xa0], 1
push 0x5c
mov esi, ebx
call fcn.00409aa4
push eax
lea eax, [esp + 0x1c]
push eax
mov ecx, ebx
call fcn.00409c14
mov byte [esp + 0xa0], 2
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
mov ecx, dword [esp + 0x18]
sub eax, dword [ecx - 0xc]
mov ecx, ebx
dec eax
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00409ac5
mov byte [esp + 0xa0], 3
call fcn.004098e7
push 0x22
mov ecx, ebx
call fcn.004042fe
push str.__installresults
mov ecx, ebx
call fcn.00409e4e
xor ebx, ebx
cmp byte [ebp + 8], bl
jne 0x41543b
push str.__close
mov ecx, esi
call fcn.00409e4e
mov edx, 0x45c770
mov ecx, edi
xor esi, esi
call fcn.00402d39
cmp eax, ebx
je 0x415489
push 0x45c784
push eax
call fcn.00436c2a
test eax, eax
pop ecx
pop ecx
jne 0x415489
push 3
push 5
inc esi
call fcn.00414b63
test al, al
pop ecx
pop ecx
je 0x415489
push dword [esp + 0x14]
push dword [esp + 0x1c]
push dword [esp + 0x30]
call fcn.00415d04
add esp, 0xc
neg eax
sbb eax, eax
inc eax
jne 0x4154eb
push 0x40
lea eax, [esp + 0x54]
push ebx
push eax
mov dword [esp + 0x58], 0x44
call fcn.00436bb0
add esp, 0xc
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
call fcn.00409b1d
push eax
neg esi
push ebx
sbb esi, esi
and esi, 0x1000000
push esi
push ebx
push ebx
push ebx
lea ecx, [esp + 0x34]
call fcn.00409b1d
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, ebx
je 0x4154eb
push dword [esp + 0x40]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x3c]
call esi
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00405628
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00405628
mov byte [esp + 0xa0], 2
lea ecx, [esp + 0x28]
call fcn.00401b5d
mov byte [esp + 0xa0], 1
lea ecx, [esp + 0x18]
call fcn.00401b5d
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00401b5d
xor ebx, ebx
lea ecx, [esp + 0x2c]
call fcn.00406380
mov dword [esp + 0xa0], 4
lea eax, [esp + 0x28]
push eax
push 0x473988
call fcn.0040e602
mov byte [esp + 0xa0], 5
push dword [eax]
lea eax, [esp + 0x30]
push str.SOFTWARESlimWare_Utilities_Inc_s
push eax
call fcn.0040242a
add esp, 0xc
mov byte [esp + 0xa0], 4
lea ecx, [esp + 0x28]
call fcn.00401b5d
mov dword [esp + 0x18], ebx
mov byte [esp + 0xa0], 6
lea eax, [esp + 0x28]
push eax
push 0x20019
push ebx
push dword [esp + 0x38]
mov dword [esp + 0x38], ebx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x41586b
lea ecx, [esp + 0x18]
call fcn.00406962
cmp eax, ebx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
jne 0x41586b
lea ecx, [esp + 0x24]
call fcn.00406380
mov byte [esp + 0xa0], 7
lea ecx, [esp + 0x20]
call fcn.00406380
mov byte [esp + 0xa0], 8
lea ecx, [esp + 0x1c]
call fcn.00406380
mov byte [esp + 0xa0], 9
push str.InstallScanID
lea eax, [esp + 0x1c]
push eax
lea esi, [esp + 0x1c]
xor edi, edi
mov dword [esp + 0x1c], ebx
call fcn.004068fb
test eax, eax
jne 0x415652
push dword [esp + 0x14]
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 1
call fcn.00409e2b
push str.InstallScanID
lea ecx, [esp + 0x1c]
push ecx
mov edi, eax
call fcn.004068fb
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00405628
push str.InstallScanUrlParams
lea eax, [esp + 0x1c]
push eax
lea esi, [esp + 0x1c]
xor edi, edi
mov dword [esp + 0x1c], ebx
call fcn.004068fb
test eax, eax
jne 0x4156a1
push dword [esp + 0x14]
lea ecx, [esp + 0x20]
call fcn.00409e2b
push str.InstallScanUrlParams
lea ecx, [esp + 0x1c]
push ecx
mov edi, eax
call fcn.004068fb
push 0xffffffffffffffff
lea ecx, [esp + 0x20]
call fcn.00405628
lea edi, [esp + 0x1c]
call fcn.00415fb2
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], ebx
je 0x4156ee
lea eax, [esp + 0x14]
push eax
call fcn.004151b9
pop ecx
mov byte [esp + 0xa0], 0xa
push dword [esp + 0x1c]
push dword [eax]
lea eax, [esp + 0x2c]
push dword [esp + 0x28]
push dword [esp + 0x44]
push 0x45f5c4
push eax
call fcn.0040242a
add esp, 0x18
mov byte [esp + 0xa0], 9
lea ecx, [esp + 0x14]
call fcn.00401b5d
lea eax, [esp + 0x28]
push eax
call fcn.00414da0
pop ecx
mov byte [esp + 0xa0], 0xb
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], ebx
mov eax, dword [esp + 0x24]
je 0x415811
cmp dword [eax - 0xc], ebx
je 0x415827
push 0x45d0fc
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.004053d2
add esp, 0xc
mov byte [esp + 0xa0], 0xc
lea ecx, [esp + 0x24]
push ecx
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00416013
add esp, 0xc
mov byte [esp + 0xa0], 0xe
lea ecx, [esp + 0x38]
call fcn.00401b5d
push 0x40
lea eax, [esp + 0x54]
push ebx
push eax
mov dword [esp + 0x58], 0x44
call fcn.00436bb0
add esp, 0xc
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x50]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x34]
mov dword [esp + 0x98], 1
mov word [esp + 0x9c], 3
call fcn.00409b1d
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.00405628
mov ecx, dword [0x4739a8]
push ebx
call fcn.0042668e
push 0xea60
push dword [esp + 0x40]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
test eax, eax
jne 0x4157e8
push ebx
push 0x4152e3
push dword [esp + 0x50]
call dword [sym.imp.USER32.dll_EnumThreadWindows]
cmp esi, ebx
je 0x4157fe
push dword [esp + 0x40]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x3c]
call esi
mov byte [esp + 0xa0], 0xb
lea ecx, [esp + 0x14]
call fcn.00401b5d
jmp 0x415827
cmp dword [eax - 0xc], ebx
je 0x415827
push 3
push ebx
push ebx
push eax
push 0x45e988
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [esp + 0xa0], 9
lea ecx, [esp + 0x28]
call fcn.00401b5d
mov byte [esp + 0xa0], 8
lea ecx, [esp + 0x1c]
call fcn.00401b5d
mov byte [esp + 0xa0], 7
lea ecx, [esp + 0x20]
call fcn.00401b5d
mov byte [esp + 0xa0], 6
lea ecx, [esp + 0x24]
call fcn.00401b5d
mov byte [esp + 0xa0], 4
lea ecx, [esp + 0x18]
call fcn.00406962
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x2c]
call fcn.00401b5d
jmp 0x415a76
cmp byte [ebp + 8], bl
je 0x415a76
mov edx, 0x45c744
mov ecx, edi
call fcn.00402d39
cmp eax, ebx
je 0x415a76
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.0040154d
mov dword [esp + 0xa4], 0xf
or dword [esp + 0xa4], 0xffffffff
lea ebx, [esp + 0x18]
call fcn.00414bd6
pop ecx
mov dword [esp + 0xa0], 0x10
push 0x5c
mov esi, ebx
call fcn.00409aa4
push eax
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00409c14
mov byte [esp + 0xa0], 0x11
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
mov ecx, dword [esp + 0x20]
sub eax, dword [ecx - 0xc]
mov ecx, ebx
dec eax
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00409ac5
mov byte [esp + 0xa0], 0x12
call fcn.004098e7
push 0x22
mov ecx, ebx
call fcn.004042fe
mov edx, 0x45c770
mov ecx, edi
xor ebx, ebx
xor esi, esi
call fcn.00402d39
cmp eax, ebx
je 0x415998
push 0x45c784
push eax
call fcn.00436c2a
test eax, eax
pop ecx
pop ecx
jne 0x415998
push 3
push 5
inc esi
call fcn.00414b63
test al, al
pop ecx
pop ecx
je 0x415998
push dword [esp + 0x14]
push dword [esp + 0x24]
push dword [esp + 0x34]
call fcn.00415d04
mov ecx, dword [0x4739a8]
add esp, 0xc
mov edi, eax
neg edi
sbb edi, edi
push ebx
inc edi
call fcn.0042668e
cmp edi, ebx
jne 0x415a2b
push 0x40
lea eax, [esp + 0x54]
push ebx
push eax
mov dword [esp + 0x58], 0x44
call fcn.00436bb0
add esp, 0xc
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x28]
call fcn.00409b1d
push eax
neg esi
push ebx
sbb esi, esi
and esi, 0x1000000
push esi
push ebx
push ebx
push ebx
lea ecx, [esp + 0x34]
call fcn.00409b1d
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov ecx, dword [0x4739a8]
push ebx
mov esi, eax
call fcn.0042668e
push 0xea60
push dword [esp + 0x40]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
test eax, eax
jne 0x415a15
push ebx
push 0x4152e3
push dword [esp + 0x50]
call dword [sym.imp.USER32.dll_EnumThreadWindows]
cmp esi, ebx
je 0x415a2b
push dword [esp + 0x40]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x3c]
call esi
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00405628
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00405628
mov byte [esp + 0xa0], 0x11
lea ecx, [esp + 0x2c]
call fcn.00401b5d
mov byte [esp + 0xa0], 0x10
lea ecx, [esp + 0x20]
call fcn.00401b5d
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00401b5d
xor ebx, ebx
mov ecx, dword [0x4739a8]
xor eax, eax
cmp dword [0x473a30], ebx
setne al
inc eax
push eax
call fcn.00425b64
cmp dword [0x473a30], ebx
jne 0x415af5
cmp byte [ebp + 0xc], bl
je 0x415af5
cmp dword [esp + 0x30], ebx
je 0x415acd
cmp dword [esp + 0x34], ebx
mov eax, 0x45c060
jne 0x415ab1
mov eax, 0x45ef1c
mov edx, dword [0x473b24]
push ebx
push eax
push str.ScanFinished
push str.InstallFinishedButton
call fcn.00406328
add esp, 0x10
jmp 0x415ae0
mov edx, dword [0x473b24]
push ebx
push str.InstallFinishedButton
call fcn.00406328
pop ecx
pop ecx
mov ecx, dword [0x473b28]
cmp ecx, ebx
je 0x415af5
push ebx
push str.InstallerFinishedButton
call fcn.0041348d
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret