Function at 0x41a9d5
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x424
mov ecx, dword [ebp + 8]
xor eax, eax
push ebx
push esi
push edi
push eax
push eax
push eax
push 3
mov edx, 0x80000000
mov dword [esp + 0x34], eax
call fcn.0041769b
add esp, 0x10
mov dword [esp + 0x28], eax
test eax, eax
jne 0x41aa11
call fcn.0044bc4b
jmp 0x41b77a
call fcn.0043c5cd
push eax
lea ecx, [esp + 0x1c]
call fcn.0043ac50
lea ecx, [esp + 0x18]
call dword [sym.imp.CBSHost.dll_CbsCreateTempDirectory2]
mov ebx, eax
test ebx, ebx
jne 0x41b76c
lea eax, [ebp + 0x14]
mov dword [esp + 0x78], 0x4915a4
mov dword [esp + 0x50], eax
lea esi, [esp + 0x50]
lea eax, [esp + 0x28]
mov dword [esp + 0x54], eax
lea edi, [esp + 0x7c]
lea eax, [esp + 0x18]
mov dword [esp + 0x58], eax
lea ecx, [esp + 0x1d8]
movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x78]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xa0], eax
call fcn.0043aa99
lea ecx, [esp + 0x78]
call fcn.0043aa7b
push 0x230
lea eax, [esp + 0x204]
push eax
push dword [esp + 0x30]
call dword [sym.imp.WIMGAPI.DLL_WIMGetAttributes]
test eax, eax
jne 0x41aaa6
call fcn.0044bc4b
mov ebx, eax
jmp 0x41b760
push 3
pop edi
cmp dword [esp + 0x418], edi
jae 0x41aabc
mov ebx, 0xa0020001
jmp 0x41b760
lea ecx, [esp + 0xc0]
call fcn.00430db9
lea eax, [esp + 0x74]
xor ebx, ebx
push eax
lea eax, [esp + 0x50]
mov dword [esp + 0x50], ebx
push eax
push dword [esp + 0x30]
call dword [sym.imp.WIMGAPI.DLL_WIMGetImageInformation]
test eax, eax
jne 0x41aaf2
call fcn.0044bc4b
mov ebx, eax
jmp 0x41b734
push dword [esp + 0x4c]
lea ecx, [esp + 0xc4]
call fcn.00439676
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
call fcn.00434b6b
lea eax, [esp + 0x2c]
mov edx, str.WIM_IMAGE
push eax
lea ecx, [esp + 0xc4]
call fcn.00434e94
pop ecx
mov ecx, dword [esp + 0x2c]
push 1
push 5
push str.FLAGS
mov ecx, dword [ecx]
call fcn.0043a80d
mov esi, 0x491414
test eax, eax
je 0x41ab6a
mov eax, dword [eax + 4]
mov ecx, eax
test eax, eax
jne 0x41ab57
mov ecx, esi
test ecx, ecx
je 0x41ab6a
test eax, eax
jne 0x41ab61
mov eax, esi
cmp word [eax], bx
jne 0x41b726
mov ecx, dword [esp + 0x2c]
push 1
push 4
push str.NAME
mov ecx, dword [ecx]
call fcn.0043a80d
test eax, eax
je 0x41b726
mov eax, dword [eax + 4]
test eax, eax
jne 0x41ab8f
mov eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push str.Windows_Setup_Media
push eax
call esi
test eax, eax
jne 0x41b726
mov ecx, dword [esp + 0x2c]
push 1
push 5
push str.FLAGS
mov ecx, dword [ecx + 4]
mov dword [esp + 0x1c], 4
call fcn.0043a80d
test eax, eax
jne 0x41abcc
mov dword [esp + 0x10], edi
jmp 0x41ac21
mov eax, dword [eax + 4]
test eax, eax
jne 0x41abd8
mov eax, 0x491414
push 0x48d2dc
push eax
call esi
test eax, eax
jne 0x41b726
mov ecx, dword [esp + 0x2c]
push 1
push 5
push str.FLAGS
mov ecx, dword [ecx + 8]
call fcn.0043a80d
test eax, eax
je 0x41b726
mov eax, dword [eax + 4]
test eax, eax
jne 0x41ac11
mov eax, 0x491414
push 0x493978
push eax
call esi
test eax, eax
jne 0x41b726
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
mov ecx, dword [ebp + 0x14]
mov edi, dword [sym.imp.WIMGAPI.DLL_WIMRegisterMessageCallback]
sar eax, 2
inc eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
test ecx, ecx
je 0x41ac5d
lea eax, [esp + 0x60]
push eax
push fcn.0041a52d
push dword [esp + 0x30]
call edi
push 1
push dword [esp + 0x2c]
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
push ebx
push dword [esp + 0x1c]
mov esi, eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMApplyImage]
test eax, eax
je 0x41ac81
mov dword [esp + 0xc], ebx
jmp 0x41ac8c
call fcn.0044bc4b
mov ebx, eax
mov dword [esp + 0xc], eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
je 0x41aca0
mov dword [esp + 0xc], ebx
jmp 0x41b72b
push 0x49397c
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043ab55
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.0043c924
push str.sources_boot.wim
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043ab55
pop ecx
xor ecx, ecx
push ecx
push 2
push ecx
push 2
push 0xc0000000
push dword [eax]
call dword [sym.imp.WIMGAPI.DLL_WIMCreateFile]
mov ecx, dword [esp + 0x14]
mov esi, eax
mov dword [esp + 0x40], esi
lea ecx, [ecx - 0x10]
call fcn.0043c924
test esi, esi
je 0x41ad93
call dword [sym.imp.CBSHost.dll_DismGetScratchDir]
push eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetTemporaryPath]
cmp dword [ebp + 0x14], 0
je 0x41ad2a
lea eax, [esp + 0x60]
push eax
push fcn.0041a52d
push esi
call edi
cmp dword [esp + 0x10], 4
push 2
jne 0x41ad7b
pop edi
push edi
push dword [esp + 0x2c]
lea eax, [edi - 1]
mov dword [esp + 0x68], eax
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
push 0
push esi
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41ad63
call fcn.0044bc4b
mov ebx, eax
mov dword [esp + 0xc], ebx
push dword [esp + 0x14]
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
jne 0x41adc4
inc edi
cmp edi, 4
jne 0x41ad34
push 2
jmp 0x41add8
push dword [esp + 0x2c]
mov dword [esp + 0x68], 1
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov edi, eax
test edi, edi
jne 0x41ad9c
call fcn.0044bc4b
mov ebx, eax
jmp 0x41adc8
push 0
push esi
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41adb5
call fcn.0044bc4b
mov ebx, eax
mov dword [esp + 0xc], ebx
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
je 0x41add6
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0xc]
lea ecx, [esp + 0x40]
call fcn.00438772
jmp 0x41b72b
push 1
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetBootImage]
lea ecx, [esp + 0x40]
call fcn.00438772
push 0x493998
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x4c]
call fcn.0043ab55
mov esi, dword [esp + 0x4c]
xor eax, eax
pop ecx
push eax
push dword [ebp + 0x10]
mov edx, 0xc0000000
mov ecx, esi
push eax
push 2
call fcn.0041769b
mov edi, eax
add esp, 0x10
mov dword [esp + 0x40], edi
test edi, edi
je 0x41aff4
call dword [sym.imp.CBSHost.dll_DismGetScratchDir]
push eax
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMSetTemporaryPath]
cmp dword [ebp + 0x14], 0
je 0x41ae4a
lea eax, [esp + 0x60]
push eax
push fcn.0041a52d
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMRegisterMessageCallback]
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov ecx, edx
sar eax, 2
mov dword [esp + 0x20], edx
cmp edx, eax
ja 0x41af83
push ecx
push dword [esp + 0x2c]
lea eax, [ecx - 1]
mov dword [esp + 0x68], eax
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov esi, eax
test esi, esi
je 0x41aff4
push 0
push edi
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMExportImage]
test eax, eax
jne 0x41ae9c
call fcn.0044bc4b
mov ebx, eax
mov dword [esp + 0xc], ebx
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMCloseHandle]
test ebx, ebx
jne 0x41afeb
cmp dword [esp + 0x10], 3
jne 0x41af63
mov eax, dword [esp + 0x20]
add eax, 0xfffffffe
push eax
push edi
call dword [sym.imp.WIMGAPI.DLL_WIMLoadImage]
mov esi, eax
mov dword [esp + 0x38], esi
test esi, esi
je 0x41afd6
push str.sources_boot.wim
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0043ab55
pop ecx
push ebx
push str.WindowsSystem32Recoverywinre.wim
push dword [eax]
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMAddImagePath]
mov ecx, dword [esp + 0x14]
mov ebx, eax
add ecx, 0xfffffff0
call fcn.0043c924
test ebx, ebx
jne 0x41af2c
call fcn.0044bc4b
mov ebx, eax
mov dword [esp + 0xc], ebx
cmp ebx, 0x800700b7
jne 0x41afd0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
and dword [eax + ecx*4], 0
jmp 0x41af30
mov ebx, dword [esp + 0xc]
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x40]
push eax
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMGetImageInformation]
push dword [esp + 0x44]
push dword [esp + 0x40]
push esi
call dword [sym.imp.WIMGAPI.DLL_WIMSetImageInformation]
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [esp + 0x38]
call fcn.00438772
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
sub eax, dword [esp + 0x2c]
inc ecx
sar eax, 2
mov dword [esp + 0x20], ecx
cmp ecx, eax
jbe 0x41ae67
mov esi, dword [esp + 0x48]
lea ecx, [esp + 0x40]
call fcn.00438772
mov edi, dword [esp + 0x10]
cmp edi, 3
jne 0x41b31d
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.0043baa0
add eax, 0x10
mov dword [edi], eax
call fcn.0041a55d
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41b000
push 0x493a0c
push str.wimgapi
push 1
call dword [sym.imp.CBSHost.dll_DismWriteLog]
jmp 0x41b093
mov dword [esp + 0xc], ebx
jmp 0x41afdd
call fcn.0044bc4b
mov ebx, eax
lea ecx, [esp + 0x38]
call fcn.00438772
jmp 0x41b093
mov dword [esp + 0xc], ebx
jmp 0x41b093
call fcn.0044bc4b
mov ebx, eax
jmp 0x41b093
push ecx
push 3
push 5
mov edx, 0xc0000000
mov ecx, esi
call fcn.0044ded0
mov esi, eax
add esp, 0xc
mov dword [esp + 0x70], esi
test esi, esi
jne 0x41b026
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x41aff9
call fcn.0043c5cd
push eax
lea ecx, [esp + 0x24]
call fcn.0043ac50
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea edx, [esp + 0x10c]
call fcn.0041954a
mov ebx, eax
mov dword [esp + 0x10], ebx
pop ecx
test ebx, ebx
je 0x41b0ad
push ebx
lea eax, [esp + 0x48]
push 0x493a28
push eax
call fcn.00449eea
add esp, 0xc
push dword [eax]
push 0x493a48
push 1
call dword [sym.imp.CBSHost.dll_DismWriteLog]
mov ecx, dword [esp + 0x44]
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov edi, dword [esp + 0x20]
lea ecx, [edi - 0x10]
call fcn.0043c924
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [esp + 0x40]
call fcn.00438772
mov ecx, dword [esp + 0x48]
lea ecx, [ecx - 0x10]
call fcn.0043c924
jmp 0x41b72b
lea ecx, [esp + 0x78]
call fcn.00430db9
push ecx
mov ecx, dword [esp + 0x24]
mov edi, esp
lea ecx, [ecx - 0x10]
call fcn.0043baa0
add eax, 0x10
lea ecx, [esp + 0x7c]
mov dword [edi], eax
call fcn.00439704
mov edx, str.WIM_IMAGE
lea ecx, [esp + 0x78]
call fcn.0043a873
mov edi, eax
test edi, edi
je 0x41b203
push 8
pop esi
mov eax, dword [esp + 0x2c]
mov eax, dword [esi + eax]
lea esi, [esi + 4]
mov dword [esp + 0x14], eax
test eax, eax
je 0x41b1e6
push 1
push 0xa
xor ebx, ebx
mov ecx, edi
push str.TOTALBYTES
mov dword [esp + 0x18], ebx
mov dword [esp + 0x44], ebx
call fcn.0043a80d
test eax, eax
je 0x41b143
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b12e
mov eax, 0x491414
push 0xa
push ebx
push eax
call dword [sym.imp.msvcrt.dll__wcstoui64]
add esp, 0xc
mov dword [esp + 0xc], eax
mov dword [esp + 0x38], edx
mov ecx, dword [esp + 0x14]
push 1
push 0xa
push str.TOTALBYTES
call fcn.0043a80d
test eax, eax
je 0x41b180
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b165
mov eax, 0x491414
push 0xa
push ebx
push eax
call dword [sym.imp.msvcrt.dll__wcstoui64]
mov ecx, dword [esp + 0x18]
add esp, 0xc
add ecx, eax
mov eax, dword [esp + 0x38]
adc eax, edx
jmp 0x41b188
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
push eax
push ecx
lea eax, [esp + 0x4c]
push str._I64u
push eax
call fcn.00449eea
mov edx, str.TOTALBYTES
mov ecx, edi
push dword [eax]
call fcn.00438709
mov ecx, dword [esp + 0x58]
add esp, 0x14
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov ecx, dword [esp + 0x14]
push 1
push 0xd
push str.HARDLINKBYTES
call fcn.0043a80d
test eax, eax
je 0x41b1e6
mov eax, dword [eax + 4]
test eax, eax
jne 0x41b1d8
mov eax, 0x491414
push eax
mov edx, str.HARDLINKBYTES
mov ecx, edi
call fcn.00438709
pop ecx
push ecx
push 5
push str.IMAGE
mov ecx, edi
call fcn.0043a77e
mov edi, eax
test edi, edi
jne 0x41b0ee
mov esi, dword [esp + 0x70]
push ecx
push ecx
lea ecx, [esp + 0x44]
call fcn.00431469
xor ebx, ebx
lea edx, [esp + 0x78]
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.0043a34a
pop ecx
pop ecx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x24]
call fcn.0043b599
mov ecx, dword [esp + 0x3c]
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov ecx, dword [esp + 0xb8]
lea ecx, [ecx - 0x10]
call fcn.0043c924
lea ecx, [esp + 0xac]
call fcn.00431d5a
mov edi, dword [esp + 0x20]
push 0x18
push ebx
mov eax, dword [edi - 0xc]
add eax, eax
cdq
mov dword [esp + 0x168], eax
mov dword [esp + 0x158], eax
lea eax, [esp + 0x18c]
push eax
mov dword [esp + 0x170], edx
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
mov dword [esp + 0x50], ebx
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], ebx
mov eax, dword [esi]
push ecx
lea ecx, [esp + 0x20]
push ecx
push 0xd0
lea ecx, [esp + 0x114]
push ecx
push esi
call dword [eax + 0x18]
mov ebx, eax
test ebx, ebx
jne 0x41b085
mov eax, dword [edi - 0xc]
lea edx, [esp + 0x158]
mov ecx, dword [esi]
add eax, eax
push edx
lea edx, [esp + 0x20]
push edx
push eax
push edi
push esi
call dword [ecx + 0x18]
mov ebx, eax
test ebx, ebx
jne 0x41b085
mov ecx, dword [esp + 0x158]
add ecx, dword [esp + 0x160]
mov eax, dword [esp + 0x15c]
adc eax, dword [esp + 0x164]
mov edx, dword [esi]
push eax
push ecx
push esi
call dword [edx + 0x1c]
mov ebx, eax
test ebx, ebx
jne 0x41b085
lea ecx, [edi - 0x10]
call fcn.0043c924
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x40]
call fcn.00438772
mov ecx, dword [esp + 0x48]
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x2c]
sar eax, 2
mov dword [esp + 0x60], eax
call fcn.0043c5cd
push eax
lea ecx, [esp + 0x10]
call fcn.0043ac50
call fcn.0043c5cd
push eax
lea ecx, [esp + 0x14]
call fcn.0043ac50
push str.setup.exe
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.0043ab55
pop ecx
xor ebx, ebx
lea edx, [esp + 0x50]
push ebx
mov ecx, dword [eax]
call fcn.0044c96a
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043c924
test esi, esi
jne 0x41b6e0
mov ecx, dword [esp + 0x54]
cmp ecx, 0xa0000
ja 0x41b3cd
jb 0x41b3af
cmp dword [esp + 0x50], 0x37fc03e9
jae 0x41b3cd
mov eax, dword [esp + 0x56]
add ecx, 0x40
add eax, ecx
lea ecx, [esp + 0xc]
push eax
call fcn.0043b93f
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043b93f
mov esi, ebx
lea ecx, [edi - 1]
jmp 0x41b432
mov ecx, dword [edx + ecx*4]
push 1
push 5
push str.FLAGS
call fcn.0043a80d
mov dword [esp + 0x1c], eax
test eax, eax
je 0x41b6e0
mov edi, ebx
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x41b3ff
mov ecx, 0x491414
push ecx
push dword [edi*4 + 0x4863e4]
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x41b421
inc edi
cmp edi, 0xd
je 0x41b6e0
mov eax, dword [esp + 0x1c]
jmp 0x41b3f3
bts esi, edi
cmp edi, 0xd
je 0x41b6e0
mov ecx, dword [esp + 0x14]
inc ecx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
sub eax, edx
sar eax, 2
mov dword [esp + 0x14], ecx
cmp ecx, eax
jne 0x41b3d4
push 0x43
lea ecx, [esp + 0x10]
call fcn.0043b93f
cmp esi, 0x20
ja 0x41b4d2
je 0x41b4cb
sub esi, 1
je 0x41b4c4
sub esi, 1
je 0x41b4ba
sub esi, 1
je 0x41b4b0
sub esi, 1
je 0x41b4a9
sub esi, 4
je 0x41b4a2
sub esi, 4
je 0x41b48a
sub esi, 4
jne 0x41b6e0
mov esi, 0x493ae0
jmp 0x41b546
mov esi, str.CSNA
mov ebx, dword [sym.imp.msvcrt.dll_wcslen]
push esi
call ebx
mov byte [esp + 0x28], 1
jmp 0x41b54f
mov esi, str.CRNA
jmp 0x41b48f
mov esi, str.PRNA
jmp 0x41b48f
mov esi, 0x493a64
jmp 0x41b546
mov esi, 0x493acc
jmp 0x41b546
mov esi, 0x493a5c
jmp 0x41b546
mov esi, 0x493ae8
jmp 0x41b546
sub esi, 0x40
je 0x41b541
sub esi, 0x40
je 0x41b537
sub esi, 0x80
je 0x41b52d
sub esi, 0x100
je 0x41b523
sub esi, 0x200
je 0x41b519
sub esi, 0x400
je 0x41b50f
sub esi, 0x800
jne 0x41b6e0
mov esi, str.PRWMC
jmp 0x41b546
mov esi, str.ESNN
jmp 0x41b48f
mov esi, 0x493ab8
jmp 0x41b48f
mov esi, str.ENNA
jmp 0x41b48f
mov esi, 0x493aa4
jmp 0x41b48f
mov esi, str.EDNA
jmp 0x41b48f
mov esi, 0x493a90
mov ebx, dword [sym.imp.msvcrt.dll_wcslen]
push esi
call ebx
pop ecx
push eax
push esi
lea ecx, [esp + 0x14]
call fcn.0043b96c
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043b93f
mov edi, str.sourcesidwbinfo.txt
lea edx, [esp + 0x18]
push edi
lea ecx, [esp + 0x20]
call fcn.0043ab55
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.BUILDINFO
push ecx
mov ecx, dword [eax]
push str.BuildArch
call fcn.0044d2be
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043c924
test esi, esi
je 0x41b6e0
push str.amd64
push dword [esp + 0x14]
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x41b5c8
mov esi, 0x493b50
push esi
call ebx
pop ecx
push eax
push esi
jmp 0x41b5d9
lea ecx, [esp + 0x10]
call fcn.004310c2
mov eax, dword [esp + 0x10]
push dword [eax - 0xc]
push eax
lea ecx, [esp + 0x14]
call fcn.0043b96c
push edi
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.0043ab55
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.BUILDINFO
push ecx
mov ecx, dword [eax]
push str.BuildType
call fcn.0044d2be
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043c924
test esi, esi
je 0x41b6e0
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xc]
push dword [eax - 0xc]
push eax
call fcn.0043b96c
cmp byte [esp + 0x24], 0
je 0x41b642
push 0x56
lea ecx, [esp + 0x10]
call fcn.0043b93f
push 0x5f
lea ecx, [esp + 0x10]
call fcn.0043b93f
push str.sourceslang.ini
lea ecx, [esp + 0x18]
call fcn.00431543
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
call fcn.00431007
pop ecx
lea ecx, [esp + 0x10]
mov edx, str.Available_UI_Languages
push ecx
mov ecx, dword [eax]
call fcn.0044d34f
pop ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0043c924
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0043c924
test esi, esi
je 0x41b6e0
mov edi, dword [esp + 0x10]
push 0x3d
push edi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
je 0x41b6e4
xor ecx, ecx
mov word [eax], cx
lea ecx, [esp + 0xc]
push dword [edi - 0xc]
push edi
call fcn.0043b96c
lea ecx, [esp + 0xc]
call fcn.004310c2
mov esi, str._DV5
push esi
call ebx
pop ecx
push eax
push esi
lea ecx, [esp + 0x14]
call fcn.0043b96c
jmp 0x41b6ed
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0xc]
call fcn.0043b7b6
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x60]
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi - 0xc]
neg eax
push fcn.0041a52d
sbb eax, eax
and eax, esi
push eax
call fcn.0044aad0
add esp, 0xc
lea ecx, [edi - 0x10]
mov ebx, eax
call fcn.0043c924
lea ecx, [esi - 0x10]
jmp 0x41b0a3
mov ebx, 0xa0020001
lea ecx, [esp + 0x2c]
call fcn.00430403
cmp dword [esp + 0x4c], 0
je 0x41b745
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [esp + 0x100]
lea ecx, [ecx - 0x10]
call fcn.0043c924
lea ecx, [esp + 0xf4]
call fcn.00431d5a
lea ecx, [esp + 0x1d8]
call fcn.0043aa5e
mov ecx, dword [esp + 0x18]
lea ecx, [ecx - 0x10]
call fcn.0043c924
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14