Function at 0x4086b2
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Check os version
Copy file
Create directory
Create process on windows
Delete file
Read .ini file
Terminate process

Disassembly:
mov eax, 0x41e439
call fcn.004132a4
sub esp, 0xd68
mov eax, dword [0x4290c8]
push esi
mov dword [ebp - 0x10], eax
call fcn.0040b95b
xor esi, esi
push esi
push esi
push esi
push str.priority
push str.channel
call fcn.004085ed
add esp, 0x14
push esi
push esi
push 0x400
mov dword [0x42ae40], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push esi
push esi
push esi
lea eax, [ebp - 0xd50]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
jae 0x408754
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
cmp eax, 0x404
push esi
push esi
je 0x408741
cmp eax, 0x804
je 0x40873a
push str.You_need_Windows_2000_XP_or_higher_version_to_run_Lava_Lava.
jmp 0x408746
push 0x424078
jmp 0x408746
push 0x424018
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x408bff
push ebx
push str.Riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
push ebx
push str._n_n_t_tLlsetup_Version2009_3_16_nlpCmdLine_s_n
mov dword [0x42ae44], eax
call fcn.0040b9f0
push 0x6f
lea ecx, [ebp - 0xd2c]
call fcn.00407d34
add esp, 0xc
test eax, eax
je 0x4087a7
push dword [ebp - 0xd2c]
call fcn.0040c145
test eax, eax
jge 0x4087ad
push 0xfffffffffffffffe
call fcn.00411a1d
push esi
call fcn.0040c506
push edi
push 0x69
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408944
mov ebx, dword [ebp + 0x10]
push 0xa
pop edi
push 0x73
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x4087d7
push 0x78
pop edi
call fcn.0040a431
test al, al
jne 0x4087f0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
dec edi
cmp edi, esi
jg 0x4087d7
push str._rpt:
push dword [ebp + 0x10]
call fcn.0041160a
mov ebx, eax
cmp ebx, esi
pop ecx
pop ecx
je 0x408829
push esi
push esi
push esi
push 0x424108
push str.channel
call fcn.004085ed
push eax
add ebx, 0xa
push ebx
call fcn.0040b633
add esp, 0x1c
jmp 0x408bfd
cmp edi, esi
jne 0x408944
push esi
push esi
push esi
push str.AlwaysStartup
mov ebx, str.MissDNA
push ebx
call fcn.004085ed
add esp, 0x14
test eax, eax
jne 0x408944
mov word [ebp - 0x218], si
mov ecx, 0x81
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
push 0x104
stosw word es:[edi], ax
lea eax, [ebp - 0x218]
push eax
push 1
push 0x423edc
push ebx
call fcn.004085ed
add esp, 0x14
cmp word [ebp - 0x218], si
jne 0x40889c
push 0x423ea0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x10
call fcn.0040bce7
lea eax, [eax*2 + 0x42b0a0]
push eax
lea eax, [ebp - 0x218]
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x104
lea eax, [ebp - 0x218]
push eax
push 1
push str.Exec
push ebx
call fcn.004085ed
add esp, 0x14
cmp word [ebp - 0x218], si
je 0x40892b
xor eax, eax
mov word [ebp - 0x918], si
mov ecx, 0x81
lea edi, [ebp - 0x916]
rep stosd dword es:[edi], eax
push 0x104
stosw word es:[edi], ax
lea eax, [ebp - 0x918]
push eax
push 1
push str.ExecParam
push ebx
call fcn.004085ed
add esp, 0x14
push 5
push esi
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0x218]
push eax
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x423e78
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.____lpCmdLine_to__a_n
call fcn.0040b9f0
pop ecx
call fcn.0040ac3c
test eax, eax
je 0x408a09
push str.DianjiPPDownload
lea eax, [ebp - 0x710]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x104
lea eax, [ebp - 0x6f0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ebx, [ebp - 0x6f0]
mov eax, ebx
push eax
call fcn.00411a5d
cmp word [ebp - 0x6f0], si
pop ecx
je 0x4089a0
cmp word [ebx], 0x5c
jne 0x408999
mov word [ebx], 0x2d
inc ebx
inc ebx
cmp word [ebx], si
jne 0x40898e
lea eax, [ebp - 0x710]
push eax
xor edi, edi
inc edi
push edi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4089c5
cmp ebx, esi
jne 0x4089c7
xor edi, edi
lea eax, [ebp - 0x710]
push eax
push ebx
push edi
push str.CPPDownloadTask__bExistMutex_d_hMutex_x___sz_s_n
call fcn.0040b9f0
add esp, 0x10
cmp edi, esi
jne 0x408bfb
call fcn.0040adff
push esi
mov esi, 0x42b688
push esi
call fcn.00405a00
test eax, eax
je 0x408bfb
push esi
call fcn.0040adae
jmp 0x4095be
mov ebx, dword [ebp + 0x10]
push 0x6d
lea ecx, [ebp - 0xd2c]
call fcn.00407d34
test eax, eax
pop ecx
je 0x408ac0
mov ebx, dword [ebp - 0xd2c]
lea eax, [ebx + 4]
mov cx, word [eax]
cmp cx, 0x66
je 0x408a48
cmp cx, 0x46
je 0x408a48
push eax
call fcn.004114ae
pop ecx
mov dword [0x42b460], eax
jmp 0x408a4f
or dword [0x42b460], 0xffffffff
mov word [ebx + 2], 0x20
cmp dword [0x42b460], 1
jne 0x408ac0
mov ebx, dword [ebp + 0x10]
push 0x61
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408ac0
push 0x104
lea eax, [ebp - 0x918]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x918]
push 0x5c
push eax
call fcn.00410e35
pop ecx
pop ecx
push dword [0x42a11c]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x918]
push eax
push 0x421df8
push dword [0x42a124]
push dword [0x42a120]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [0x42b460], esi
mov edi, 0x423d90
jne 0x408b07
push esi
push esi
push esi
push str.DownloadNow
push str.FullVersion
call fcn.004085ed
xor ecx, ecx
inc ecx
add esp, 0x14
cmp eax, ecx
jne 0x408af1
mov dword [0x42b460], ecx
jmp 0x408b07
push esi
push esi
push esi
push str.Type
push edi
call fcn.004085ed
add esp, 0x14
mov dword [0x42b460], eax
mov ebx, dword [ebp + 0x10]
push 0x66
lea ecx, [ebp - 0xd2c]
call fcn.00407d34
test eax, eax
pop ecx
je 0x408c16
mov eax, dword [ebp - 0xd2c]
add eax, 4
push eax
call fcn.004114ae
cmp eax, 1
pop ecx
jne 0x408b57
xor ecx, ecx
call fcn.00407f65
test eax, eax
lea eax, [ebp - 0x218]
je 0x408b50
push 0x423d8c
jmp 0x408bd3
push 0x423d88
jmp 0x408bd3
cmp eax, 2
jne 0x408bc8
push esi
xor ecx, ecx
lea ebx, [ebp + 0x10]
call fcn.00407e04
pop ecx
mov dword [ebp - 4], 3
mov edi, dword [ebp + 0x10]
cmp dword [edi - 0xc], esi
jne 0x408b8c
lea eax, [ebp - 0x218]
push 0x423d84
push eax
call fcn.0040fd10
pop ecx
pop ecx
jmp 0x408bba
push 0x42af10
lea eax, [ebp + 0x10]
push eax
call fcn.00404c65
mov edi, dword [ebp + 0x10]
push esi
push esi
push 0x208
lea eax, [ebp - 0x218]
push eax
push 0xffffffffffffffff
push edi
push esi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.00402528
jmp 0x408bdb
push 0x423d84
lea eax, [ebp - 0x218]
push eax
call fcn.0040fd10
pop ecx
pop ecx
lea eax, [ebp - 0x218]
push eax
call fcn.00411b7c
lea eax, [ebp - 0x218]
push eax
push str._f_return_S_n
call fcn.0040b9f0
add esp, 0xc
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
call fcn.00412aab
leave
ret 0x10
call fcn.0040d465
push str.LVLV_221.EXE
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, dword [ebp + 0x10]
push 0x72
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408c43
push ebx
call fcn.004080b0
xor eax, eax
pop ecx
inc eax
jmp 0x408bfd
push dword [0x429ffc]
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x42afd8
lea eax, [ebp - 0x420]
push eax
call ebx
cmp dword [0x42b460], esi
je 0x408ca5
push 0x423d60
lea eax, [ebp - 0x420]
push eax
call ebx
push 0xa
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp + eax*2 - 0x420]
push eax
push dword [0x42b460]
call fcn.00411522
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x408cd2
cmp ebx, esi
mov dword [ebp - 0xd30], 1
jne 0x408cd8
mov dword [ebp - 0xd30], esi
push dword [ebp - 0xd30]
push str.bExistMutex_d_n
call fcn.0040b9f0
cmp dword [ebp - 0xd30], esi
pop ecx
pop ecx
je 0x408d58
call fcn.00408326
test al, al
jne 0x408d58
mov ebx, dword [ebp + 0x10]
push 0x69
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408d58
mov eax, ebx
cmp eax, esi
je 0x408d3a
cmp word [eax], si
je 0x408d3a
push 0x71
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408d33
push 0x72
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408d40
call fcn.0040d483
jmp 0x408d40
push eax
call fcn.00409aca
push dword [0x429ff8]
push dword [ebp + 0x10]
call fcn.0041160a
test eax, eax
pop ecx
pop ecx
je 0x408bfb
mov ebx, dword [ebp + 0x10]
push 0x71
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408d9d
lea eax, [ebp + 0x10]
push esi
push eax
call fcn.00405485
mov eax, dword [ebp + 0x10]
cmp dword [eax - 0xc], esi
pop ecx
pop ecx
je 0x408d8b
push esi
call fcn.0040daae
cmp eax, 2
je 0x408d8b
xor esi, esi
inc esi
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
call fcn.00402528
mov eax, esi
jmp 0x408bfd
mov ebx, dword [ebp + 0x10]
push 0x67
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408e3c
push 0x20
push ebx
call fcn.0041142d
pop ecx
pop ecx
mov ebx, eax
jmp 0x408dc2
inc ebx
inc ebx
cmp word [ebx], 0x20
je 0x408dc0
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0xd74]
mov ecx, ebx
call fcn.00403411
mov dword [ebp + 0x10], eax
push ebx
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..CRC
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x420]
push 0x423d2c
push eax
call fcn.00411c79
mov edi, eax
cmp edi, esi
pop ecx
pop ecx
je 0x408bfb
push dword [ebp - 0xd60]
push dword [ebp + 0x10]
push ebx
push str._s_u_u60000000
push edi
call fcn.00411c8c
push edi
call fcn.00411d36
add esp, 0x18
jmp 0x408bfb
mov ebx, dword [ebp + 0x10]
push 0x6a
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x408e60
push esi
push dword [ebp + 8]
push 2
pop ecx
call fcn.0040f17c
pop ecx
pop ecx
jmp 0x408bfd
push 0x104
lea eax, [ebp - 0x420]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x420]
push eax
push str._______Self_Program_s_n
call fcn.0040b9f0
pop ecx
pop ecx
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..DEL
lea eax, [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.0040e8ba
mov ebx, dword [ebp + 0x10]
push 0x69
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x409070
push esi
push str.C:TEMP
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push esi
push esi
push esi
push str.ForbidInstallIfFullVerExist
push edi
call fcn.004085ed
add esp, 0x14
cmp eax, 1
jne 0x408f73
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x918]
push eax
push esi
call fcn.0040caf3
test eax, eax
je 0x408f73
lea eax, [ebp - 0x918]
push eax
call fcn.0040ca6d
test eax, eax
pop ecx
je 0x408f73
push ebx
lea eax, [ebp - 0x6f0]
push eax
push 1
push str.MsgTextForbidInstall
push edi
call fcn.004085ed
push ebx
lea eax, [ebp - 0x218]
push eax
push 1
push str.MsgTtitleForbidInstall
push edi
call fcn.004085ed
add esp, 0x28
push 0x10
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x6f0]
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push 5
push str.uninst.exe__u
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x408bfb
lea eax, [ebp - 0x420]
push eax
push str.CheckAndRun_SetRegister_:_s_n
call fcn.0040b9f0
pop ecx
pop ecx
call fcn.0040ea6e
lea eax, [ebp - 0x420]
push 0x5c
push eax
call fcn.00410e35
cmp eax, esi
pop ecx
pop ecx
je 0x408fa3
mov word [eax + 2], si
lea esi, [ebp - 0x420]
call fcn.0040cf51
lea eax, [ebp - 0xd2c]
push 1
push eax
call fcn.00405485
pop ecx
pop ecx
mov dword [ebp - 4], 4
push dword [0x42a024]
lea eax, [ebp - 0xd2c]
push eax
call fcn.00404c65
push dword [ebp - 0xd2c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor esi, esi
lea eax, [ebp - 0xd34]
push esi
push eax
call fcn.00405485
pop ecx
pop ecx
lea edi, [ebp - 0xd2c]
mov byte [ebp - 4], 5
call fcn.00404b4e
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xd34]
add eax, 0xfffffff0
call fcn.00402528
push dword [0x42a024]
mov eax, edi
push eax
call fcn.00404c65
push dword [ebp - 0xd2c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
push dword [0x42a004]
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 0xd30], esi
je 0x40905c
call fcn.0040866c
mov eax, dword [ebp - 0xd2c]
add eax, 0xfffffff0
call fcn.00402528
jmp 0x408bfb
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xd2c]
add eax, 0xfffffff0
call fcn.00402528
xor esi, esi
mov ebx, dword [ebp + 0x10]
cmp ebx, esi
je 0x409086
cmp word [ebx], si
je 0x409086
push 0x73
xor ecx, ecx
call fcn.00407d34
pop ecx
push 1
mov edi, 0x42b688
push edi
call fcn.00404569
movzx ebx, al
push ebx
push str.nExistInstall_d_n
mov dword [ebp - 0xd2c], ebx
call fcn.0040b9f0
cmp ebx, esi
pop ecx
pop ecx
jne 0x4090bd
push esi
push edi
call fcn.00404569
movzx eax, al
mov dword [ebp - 0xd2c], eax
push dword [ebp - 0xd2c]
push str.nExistLocalUpdateFile_d_n
call fcn.0040b9f0
mov eax, dword [0x42b460]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0xd2c], ebx
pop ecx
pop ecx
jne 0x4091e8
cmp eax, 0xffffffff
je 0x40950e
cmp eax, ebx
je 0x409569
call fcn.0040ccae
test eax, eax
jg 0x409140
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x409140
call fcn.00408326
test al, al
jne 0x409140
push dword [0x429ff8]
push ebx
call fcn.0041160a
test eax, eax
pop ecx
pop ecx
jne 0x409140
push 0x61
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408bfb
jmp 0x409201
push dword [ebp + 0x10]
lea eax, [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x4225f0
lea eax, [ebp - 0xb20]
push eax
call esi
push dword [0x429ff8]
lea eax, [ebp - 0xb20]
push eax
call esi
lea eax, [ebp - 0xb20]
push eax
call fcn.0040bbed
cmp eax, 1
jne 0x408bfb
call fcn.0040838e
push 0x104
lea esi, [ebp - 0x6f0]
call fcn.0040cc5e
test eax, eax
je 0x409580
mov eax, esi
push eax
push dword [ebp + 8]
push 3
pop ecx
call fcn.0040f17c
test eax, eax
pop ecx
pop ecx
jg 0x408bfb
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408bfb
push 0x61
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x408bfb
xor esi, esi
jmp 0x409201
cmp eax, esi
jle 0x4091f6
push 2
pop ebx
call fcn.004084f8
jmp 0x409201
cmp eax, 0xffffffff
jne 0x409201
mov dword [0x42b460], ebx
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x409379
push 0x61
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x409379
push 0x71
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x409379
push 0x73
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
jne 0x409253
mov eax, ebx
cmp word [eax], si
jne 0x40930d
push esi
call fcn.0040e1da
test eax, eax
jne 0x40930d
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x918]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x918]
push 0x5c
push eax
call fcn.00410e35
cmp eax, esi
pop ecx
pop ecx
je 0x40930d
push str._appdataconfAutoLogin.ini
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x918]
push eax
push ebx
lea eax, [ebp - 0x218]
push eax
push esi
push str.AUTO_LOGIN_GIDs
push str.GENERAL
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push eax
push str.AutoLogin.ini_s_n
call fcn.0040b9f0
cmp word [ebp - 0x218], si
pop ecx
pop ecx
je 0x40930d
lea eax, [ebp - 0x218]
cmp word [eax], 0x2c
jne 0x4092e6
mov word [eax], 0x20
inc eax
inc eax
cmp word [eax], si
jne 0x4092db
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x423a98
push dword [ebp + 0x10]
call ebx
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp + 0x10]
add eax, 6
push eax
call ebx
mov ebx, dword [ebp + 0x10]
push 0x4c
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x409476
mov esi, 0x423a90
lea edi, [ebp - 0x4e8]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x30
pop ecx
xor eax, eax
lea edi, [ebp - 0x4e2]
rep stosd dword es:[edi], eax
push 0x20
push ebx
stosw word es:[edi], ax
call fcn.0041142d
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x409414
mov edi, 0x42b688
xor esi, esi
call fcn.0040ccae
push eax
push str.GetLastCheckDiff_d_n
call fcn.0040b9f0
pop ecx
pop ecx
call fcn.0040ccae
test eax, eax
jle 0x408bfb
mov ebx, dword [ebp + 0x10]
push 0x69
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x40938f
call fcn.0040866c
cmp dword [ebp - 0xd2c], 1
je 0x408bfb
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x4093bd
push 0x14
pop eax
cmp dword [0x429f9c], eax
jle 0x4093bd
mov dword [0x429f9c], eax
push esi
push 0x42b688
call fcn.00405a00
cmp eax, esi
jge 0x4094c8
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x4093ea
push esi
push 0x6a
push esi
call fcn.0040beee
push str.Network_is_disconnect._n
call fcn.0040b9f0
pop ecx
push esi
push edi
call fcn.00404569
movzx eax, al
cmp eax, esi
mov dword [ebp - 0xd2c], eax
jne 0x4090bd
jmp 0x408bfb
inc esi
inc esi
cmp word [esi], 0x20
je 0x409412
push 0x20
push esi
call fcn.0041142d
mov edi, eax
mov ax, word [esi]
cmp ax, 0x2f
pop ecx
pop ecx
je 0x40946b
cmp ax, 0x2d
je 0x40946b
test edi, edi
jne 0x409449
push esi
lea eax, [ebp - 0x4e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x40945f
mov eax, edi
sub eax, esi
sar eax, 1
inc eax
push eax
push esi
lea eax, [ebp - 0x4e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x4e8]
push eax
call fcn.00409aca
test edi, edi
mov esi, edi
jne 0x409414
jmp 0x409353
push dword [ebp + 0x10]
call fcn.00409aca
test eax, eax
je 0x409497
mov ebx, dword [ebp + 0x10]
push 0x64
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x40935a
cmp dword [ebp - 0xd30], esi
jne 0x408bfb
push 0x104
lea esi, [ebp - 0x6f0]
call fcn.0040cc5e
test eax, eax
je 0x409590
call fcn.0040838e
mov eax, esi
push eax
jmp 0x409592
je 0x40959a
push eax
push str.nUpdateFiles_d_n
call fcn.0040b9f0
pop ecx
pop ecx
push esi
push edi
call fcn.00404569
movzx eax, al
cmp eax, esi
mov dword [ebp - 0xd2c], eax
jne 0x4090bd
mov eax, dword [ebp + 8]
call fcn.00409dec
mov ecx, dword [ebp + 8]
call fcn.00409bd5
mov ebx, dword [sym.imp.USER32.dll_GetMessageW]
jmp 0x4095de
mov eax, dword [0x42b68c]
mov eax, dword [eax]
push dword [eax + 0x38]
push str.g_nMiniType___1_g_FileList_s_n
call fcn.0040b9f0
pop ecx
pop ecx
push str.llsetup.ini
push esi
push str.AskUser
push str.FullVersion
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, ebx
jne 0x409554
mov eax, dword [0x42b68c]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
xor edi, edi
call fcn.0040e0d3
jmp 0x408bfb
push esi
call fcn.0040daae
cmp eax, ebx
jne 0x408bfb
push 4
jmp 0x409624
xor ebx, ebx
inc ebx
call fcn.004084f8
push 0x424d50
call fcn.00409aca
jmp 0x408bfb
push 0
push dword [ebp + 8]
push 2
pop ecx
call fcn.0040f17c
pop ecx
jmp 0x4095be
push 0
push dword [ebp + 8]
xor ecx, ecx
inc ecx
jmp 0x409588
mov ebx, dword [ebp + 0x10]
push 0x63
xor ecx, ecx
call fcn.00407d34
test eax, eax
pop ecx
je 0x4095b4
push esi
push 0x74
push esi
call fcn.0040beee
push str.Need_not_update._n
call fcn.0040b9f0
pop ecx
jmp 0x408bfb
lea eax, [ebp - 0xd50]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xd50]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push esi
push esi
lea eax, [ebp - 0xd50]
push esi
push eax
call ebx
test eax, eax
jne 0x4095c4
movzx eax, byte [0x42b698]
push eax
push str.After_Main_message_loop._n
call fcn.0040b9f0
pop ecx
pop ecx
push edi
call fcn.00403c8d
cmp eax, 0x64
jne 0x408bfb
push esi
mov ecx, edi
call fcn.004043c2
cmp dword [0x42b460], 1
jne 0x40962f
push 9
pop ebx
call fcn.004084f8
jmp 0x408bfb
push dword [ebp + 0x10]
lea eax, [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x4225f0
lea eax, [ebp - 0xb20]
push eax
call edi
push dword [0x429ff8]
lea eax, [ebp - 0xb20]
push eax
call edi
lea eax, [ebp - 0xb20]
push eax
call fcn.0040bbed
sub eax, esi
je 0x408bfb
dec eax
jne 0x408bfb
push 0x104
lea eax, [ebp - 0xd28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xd28]
push 0x5c
push eax
call fcn.00410e35
mov ebx, eax
inc ebx
inc ebx
pop ecx
pop ecx
mov word [ebx], si
xor edi, edi
push dword [edi + 0x42a030]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xd28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add edi, 4
cmp edi, 0xc
jb 0x4096a9
mov word [ebx], si
mov eax, dword [0x42b68c]
cmp eax, esi
jne 0x4096db
xor ecx, ecx
jmp 0x4096e6
mov ecx, dword [0x42b690]
sub ecx, eax
sar ecx, 2
cmp ecx, esi
mov dword [ebp + 8], ecx
mov dword [ebp + 0x10], esi
jle 0x4097c2
jmp 0x4096fb
mov eax, dword [0x42b68c]
mov ebx, dword [ebp + 0x10]
shl ebx, 2
add eax, ebx
mov eax, dword [eax]
lea ecx, [ebp - 0xd28]
push ecx
push dword [eax + 0x38]
push str.Find_whatsnew.exe__RunSfxSetup__s_at__s._n
call fcn.0040b9f0
mov eax, dword [0x42b68c]
add eax, ebx
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
push str.whatsnew
push eax
call fcn.0041160a
add esp, 0x14
test eax, eax
je 0x4097b3
mov eax, dword [0x42b68c]
add eax, ebx
mov eax, dword [eax]
push dword [eax + 0x38]
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [0x42b68c]
lea ecx, [ebp - 0xd34]
add eax, ebx
mov eax, dword [eax]
push ecx
push 4
add eax, 0x38
pop ecx
call fcn.00404a7c
push dword [eax]
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [ebp - 0xd34]
add eax, 0xfffffff0
call fcn.00402528
mov eax, dword [0x42b68c]
add ebx, eax
push esi
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebx]
push dword [eax + 0x38]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea edi, [ebp - 0xd28]
lea eax, [ebp - 0x420]
call fcn.0040e0d3
inc dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp + 8]
jl 0x4096f6
push str._tWinMain_will_RunCloneUpdate._n
call fcn.0040b9f0
pop ecx
call fcn.0040838e
mov eax, dword [ebp - 0xd48]
jmp 0x408bfd