Function at 0x471ea0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5104c0
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
lea ecx, [ebp - 0x38]
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
push eax
push edi
push esi
call fcn.004239c0
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], 0x524e80
call fcn.00424170
push fcn.00472ba0
mov dword [ebp - 4], 1
call fcn.004e2927
add esp, 4
call fcn.0046d5d0
mov dword [0x568604], 0x524e90
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push edi
push esi
call fcn.004212e0
push 0x51a194
push edi
call fcn.0042c560
add esp, 0x10
test eax, eax
jne 0x471f59
call sub.SHELL32.dll_IsUserAnAdmin
test eax, eax
jne 0x471f59
push eax
push str.SETUP_ADMIN
call fcn.00419880
add esp, 8
cmp eax, 6
je 0x471f59
push 1
call fcn.004f7120
push 0x524d48
push edi
call fcn.0042c560
mov ecx, dword [0x5714e0]
test eax, eax
mov esi, 1
cmovne ecx, esi
push 0x5201a4
push edi
mov dword [0x5714e0], ecx
call fcn.0042c560
mov ecx, dword [0x5714f4]
test eax, eax
push 0x51a194
cmovne ecx, esi
push edi
mov dword [0x5714f4], ecx
call fcn.0042c560
mov ecx, dword [0x5714e4]
add esp, 0x18
test eax, eax
cmovne ecx, esi
push 0x401
push 0x572530
push 0
mov dword [0x5714e4], ecx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
push 0x571d28
push 0x572530
call fcn.0041ed20
add esp, 8
cmp dword [0x5714e4], 0
je 0x471ffb
push 0x571d28
push 0x572530
push 0
call fcn.0046cc90
add esp, 0xc
jmp 0x47213e
call fcn.00419dd0
test eax, eax
jne 0x472011
push str.CC_INSTALLER_IS_RUNNING
call fcn.00417300
add esp, 4
push 0x571520
push 0
call fcn.00471aa0
add esp, 8
cmp dword [0x5714e0], 0
jne 0x4720d5
push 0x572530
call fcn.0046c9b0
add esp, 4
test eax, eax
jne 0x47205b
push 0x50010
push 0x51a1d0
push str.Error:_This_installer_file_does_not_contain_any_compressed_files._n_nTo_create_a_self_extracting_installation_package__with_embedded_compressed_files___run:_n_CnCrypt_Setup.exe___p
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call fcn.004f7120
push 0x572530
call fcn.0046d5e0
add esp, 4
test eax, eax
jne 0x472073
push 1
call fcn.004f7120
cmp dword [0x5714f4], 0
je 0x4720d5
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0
push eax
push 0
mov dword [ebp - 0x24], str.SELECT_AN_ACTION
mov dword [ebp - 0x20], str.REPAIR_REINSTALL
mov dword [ebp - 0x1c], str.UNINSTALL
mov dword [ebp - 0x18], str.EXIT
mov dword [ebp - 0x14], 0
call fcn.0040d490
add esp, 0xc
sub eax, 1
je 0x4720cf
sub eax, 1
je 0x4720c7
push 1
call fcn.004f7120
mov dword [0x5714e0], esi
jmp 0x4720d5
mov dword [0x57150c], esi
push 1
push 0
push str.srclient.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryExW]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
test esi, esi
je 0x472104
call fcn.00471910
mov dword [0x55ba98], 1
test eax, eax
jne 0x47210e
mov dword [0x55ba98], 0
cmp dword [0x5714e0], 0
push 0
jne 0x472120
call fcn.00472be0
jmp 0x47213b
call fcn.0046d8a0
add esp, 4
cmp dword [0x5714e8], 0
je 0x47213e
push 0x573798
call fcn.00470150
add esp, 4
lea ecx, [ebp - 0x38]
call fcn.00423aa0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret 0x10