Function at 0x40a3f0
Capabilities:
Reference sql statements

Disassembly:
push 0xffffffffffffffff
push 0x5375d5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x788
mov eax, dword [0x5ab980]
push ebx
push ebp
push esi
push edi
xor edi, edi
mov ebp, ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x40], eax
mov dword [esp + 0x7a0], edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x19c]
push edi
mov byte [esp + 0x7a4], 3
mov dword [esp + 0x64], edi
mov ebx, dword [eax]
mov dword [esp + 0x60], ebx
mov esi, dword [ebx + 0x83c]
shr esi, 0x10
mov dword [esp + 0x68], esi
call fcn.00406a10
add esp, 4
cmp eax, edi
je 0x40a4ba
lea ecx, [esp + 0x18]
mov byte [esp + 0x7a0], 2
call fcn.005128e4
lea ecx, [esp + 0x48]
mov byte [esp + 0x7a0], 1
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x7a0], 0
call fcn.005128e4
lea ecx, [esp + 0x40]
mov dword [esp + 0x7a0], 0xffffffff
call fcn.005128e4
mov eax, 0xffffffa5
jmp 0x40bc92
push 0
push 2
call dword [0x5b0794]
mov eax, dword [ebp + 0x170]
lea edi, [ebp + 0x170]
lea ecx, [esp + 0x38]
push ecx
push eax
call dword [0x5b078c]
test eax, eax
je 0x40a531
lea ecx, [esp + 0x18]
mov byte [esp + 0x7a0], 2
call fcn.005128e4
lea ecx, [esp + 0x48]
mov byte [esp + 0x7a0], 1
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x7a0], 0
call fcn.005128e4
lea ecx, [esp + 0x40]
mov dword [esp + 0x7a0], 0xffffffff
call fcn.005128e4
mov eax, 0xffffffcc
jmp 0x40bc92
mov edx, dword [esp + 0x38]
push str.SymRoam
push edx
call dword [0x5b0764]
mov eax, dword [esp + 0x38]
push str.CostInitialize
push eax
call dword [0x5b0764]
mov ecx, dword [esp + 0x38]
push str.FileCost
push ecx
call dword [0x5b0764]
mov edx, dword [esp + 0x38]
push str.CostFinalize
push edx
call dword [0x5b0764]
mov eax, dword [esp + 0x38]
push eax
call dword [0x5b077c]
test eax, eax
mov dword [esp + 0x58], eax
jne 0x40a591
mov dword [esp + 0x14], 0xfffffe0a
jmp 0x40bbf7
mov ecx, dword [0x5ab980]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x16c]
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x7a8], 4
call fcn.00424890
add esp, 8
lea eax, [esp + 0x1c]
mov ecx, ebp
push eax
mov byte [esp + 0x7a4], 5
call fcn.0040a040
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerFeatures_s_
push edx
call fcn.0050e6c7
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerProducts_s_
push edx
call fcn.0050e6c7
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerComponents_
lea ecx, [esp + 0x18]
call fcn.00512a6d
push 0
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
cmp esi, 2
jb 0x40a67e
mov eax, dword [ebx + 0x38]
cmp eax, 1
je 0x40a67e
cmp eax, 2
jne 0x40a695
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products_s_
push ecx
jmp 0x40a68d
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x14]
push edx
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerProducts_s_
push eax
call fcn.0050e6c7
add esp, 0xc
push 0
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
cmp esi, 2
jb 0x40a6d4
mov eax, dword [ebx + 0x38]
cmp eax, 1
je 0x40a6d4
cmp eax, 2
jne 0x40a6eb
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products_sFeatures
push ecx
jmp 0x40a6e3
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x14]
push edx
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFeatures_s_
push eax
call fcn.0050e6c7
add esp, 0xc
push 0
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
cmp esi, 2
jb 0x40a712
cmp dword [ebx + 0x38], 1
jne 0x40a745
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerLocalPackages_s_
push ecx
call fcn.0050e6c7
add esp, 0xc
lea edx, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
push str.HKUSoftwareMicrosoftInstallerComponents
lea ecx, [esp + 0x18]
call fcn.00512a6d
push 0
push 1
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
push str.HKUSOFTWAREMicrosoftInstallerProducts_s_
push edx
call fcn.0050e6c7
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
push str.HKUSOFTWAREMicrosoftInstallerFeatures_s_
push edx
call fcn.0050e6c7
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFolders_
lea ecx, [esp + 0x18]
call fcn.00512a6d
push 0
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov eax, dword [ebp + 0x16c]
lea ecx, [esp + 0x14]
push eax
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_ManagementARPCache_s_
push ecx
call fcn.0050e6c7
add esp, 0xc
lea edx, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov eax, dword [0x5ab980]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x16c]
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x170]
lea ecx, [esp + 0x37c]
push edx
push ecx
mov bl, 7
push 0
push eax
mov byte [esp + 0x7b4], bl
mov dword [esp + 0x48], 0x104
mov esi, 1
call dword [0x5b0754]
test eax, eax
jne 0x40aa45
lea edx, [esp + 0x378]
lea eax, [esp + 0x4c]
push edx
push eax
call fcn.00424890
add esp, 8
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x7a4], 8
call fcn.00512a1d
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x40aa17
push eax
lea ecx, [esp + 0x18]
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerPatches_s_
push ecx
call fcn.0050e6c7
add esp, 0xc
lea edx, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push 1
push eax
push str.LocalPackage
push ecx
call fcn.0041efa0
mov edx, dword [esp + 0x20]
add esp, 0x10
mov eax, dword [edx - 8]
test eax, eax
je 0x40a928
lea eax, [esp + 0x10]
mov ecx, ebp
push eax
call fcn.00407e10
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x14]
push ecx
push str.HKUSOFTWAREMicrosoftInstallerPatches_s_
push edx
call fcn.0050e6c7
add esp, 0xc
lea eax, [esp + 0x14]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 1
push ecx
push str.LocalPackage
push edx
call fcn.0041efa0
mov eax, dword [esp + 0x20]
add esp, 0x10
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x40a98b
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.00407e10
cmp dword [esp + 0x64], 2
jb 0x40a9b4
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + 0x38]
cmp eax, 1
je 0x40a9b4
cmp eax, 2
jne 0x40a9cb
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x14]
push eax
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Patches_s_
push ecx
jmp 0x40a9c3
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x14]
push edx
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerPatches_s_
push eax
call fcn.0050e6c7
add esp, 0xc
push 0
push 1
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push 1
push eax
push str.LocalPackage
push ecx
call fcn.0041efa0
mov edx, dword [esp + 0x20]
add esp, 0x10
mov eax, dword [edx - 8]
test eax, eax
je 0x40aa17
lea eax, [esp + 0x10]
mov ecx, ebp
push eax
call fcn.00407e10
mov ecx, dword [ebp + 0x16c]
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x170]
push edx
lea edx, [esp + 0x380]
mov eax, esi
push edx
push eax
push ecx
inc esi
call dword [0x5b0754]
test eax, eax
je 0x40a883
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7a0], 5
call fcn.005128e4
push edi
mov ecx, ebp
call fcn.00407e10
push ecx
lea eax, [ebp + 0xc0]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00408560
push 0
push ecx
lea edx, [ebp + 0xb8]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00408690
mov eax, dword [esp + 0x5c]
cmp dword [eax + 0x38], 1
jne 0x40aac9
push ecx
lea edx, [ebp + 0xc4]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00408560
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 4
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x7a0], 3
call fcn.005128e4
mov eax, dword [0x5ab980]
mov dword [esp + 0x34], eax
push str.SELECT__FROM_Directory_WHERE_DirectoryINSTALLDIR_OR_DirectoryINSTALLLOCATION
lea ecx, [esp + 0x38]
mov byte [esp + 0x7a4], 9
call fcn.00512a6d
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x58]
lea ecx, [esp + 0x20]
push ecx
push edx
push esi
call dword [0x5b0768]
mov eax, dword [esp + 0x20]
push 0
push eax
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 0xa
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
mov ecx, dword [0x5ab980]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x2c], ecx
mov bl, 0xd
test eax, eax
mov byte [esp + 0x7a0], bl
jne 0x40adf4
mov edi, 0x104
lea edx, [esp + 0x4c]
lea eax, [esp + 0x68]
push edx
push eax
push 2
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], edi
mov dword [esp + 0x58], edi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x20]
call fcn.00512a6d
mov edx, dword [esp + 0x1c]
push str.ProgramFilesFolder
push edx
call fcn.004f9670
add esp, 8
test eax, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 8]
je 0x40ad4a
test ecx, ecx
je 0x40adeb
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x50]
push eax
push str.SELECT__FROM_Directory_WHERE_Directory
push ecx
call fcn.00512bed
push 0x59785c
lea edx, [esp + 0x58]
push eax
push edx
mov byte [esp + 0x7ac], 0xe
call fcn.00512b79
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x7a4], 0xf
call fcn.00512a1d
lea ecx, [esp + 0x54]
mov byte [esp + 0x7a0], 0xe
call fcn.005128e4
lea ecx, [esp + 0x50]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
lea ecx, [esp + 0x10]
call fcn.004069a0
lea eax, [esp + 0x1c]
push 0x597858
lea ecx, [esp + 0x40]
push eax
push ecx
call fcn.00512b79
lea edx, [esp + 0x2c]
mov byte [esp + 0x7a0], 0x10
push edx
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00512b13
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x7a4], 0x11
call fcn.00512a1d
lea ecx, [esp + 0x44]
mov byte [esp + 0x7a0], 0x10
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7a0], 0xc
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 0xb
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x7a0], 0xa
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 9
call fcn.004069e0
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x20]
push ecx
push edx
push esi
call dword [0x5b0768]
mov eax, dword [esp + 0x20]
push 0
push eax
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 0xa
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
mov ecx, dword [0x5ab980]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x2c], ecx
test eax, eax
mov byte [esp + 0x7a0], bl
je 0x40ab7a
jmp 0x40adf4
test ecx, ecx
je 0x40adeb
lea edx, [esp + 0x24]
lea eax, [esp + 0x274]
push edx
push eax
push 3
lea ecx, [esp + 0x1c]
call fcn.004069f0
push eax
call dword [0x5b0774]
mov al, byte [esp + 0x274]
test al, al
je 0x40adeb
lea ecx, [esp + 0x274]
lea edx, [esp + 0x2c]
push ecx
lea eax, [esp + 0x40]
push edx
push eax
call fcn.00512b79
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x7a4], 0x12
call fcn.00512a1d
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
push 0x5b0738
push 0x597854
lea ecx, [esp + 0x1c]
call fcn.0050e00f
push 0x5b0738
push 0x597850
lea ecx, [esp + 0x1c]
call fcn.0050e00f
lea ecx, [esp + 0x14]
push ecx
lea ecx, [ebp + 0x174]
call fcn.00512a1d
lea ecx, [esp + 0x10]
call fcn.004069a0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7a0], 0xc
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 0xb
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x7a0], 0xa
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 9
call fcn.004069e0
lea ecx, [esp + 0x34]
mov byte [esp + 0x7a0], 3
call fcn.005128e4
lea edx, [esp + 0x20]
push edx
push str.SELECT_Component.Directory__File.FileName_FROM_Component_File_WHERE_Component.ComponentFile.Component_
push esi
call dword [0x5b0768]
mov eax, dword [esp + 0x20]
push 0
push eax
call dword [0x5b075c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], 1
call fcn.004069d0
mov bl, 0x13
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
test eax, eax
jne 0x40aff3
mov esi, 0x105
lea edx, [esp + 0x24]
lea eax, [esp + 0x480]
push edx
push eax
push 1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x50], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x48], esi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x588]
push ecx
push edx
push 2
lea ecx, [esp + 0x1c]
call fcn.004069f0
push eax
call dword [0x5b0774]
lea eax, [esp + 0x588]
lea ecx, [esp + 0x30]
push eax
call fcn.00512a6d
lea ecx, [esp + 0x44]
lea edx, [esp + 0x690]
push ecx
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x484]
push edx
push eax
push ecx
call dword [0x5b074c]
test eax, eax
jne 0x40afb5
lea edx, [esp + 0x690]
lea ecx, [esp + 0x48]
push edx
call fcn.00512a6d
push 0
push 0x7c
lea ecx, [esp + 0x38]
call fcn.00512db9
cmp eax, 0xffffffff
je 0x40af7d
inc eax
lea ecx, [esp + 0x30]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0050e172
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x7a4], 0x14
call fcn.00512a1d
lea ecx, [esp + 0x50]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
jmp 0x40af8b
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x44]
call fcn.00512a1d
lea edx, [esp + 0x48]
push edx
call fcn.0041f9c0
add esp, 4
lea eax, [esp + 0x40]
lea edx, [esp + 0x48]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407eb0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
je 0x40aea3
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x20]
push ecx
push 0x5977d0
push edx
xor ebx, ebx
call dword [0x5b0768]
mov eax, dword [esp + 0x20]
push ebx
push eax
call dword [0x5b075c]
lea ecx, [esp + 0x1c]
call fcn.004069d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 0x15
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
test eax, eax
jne 0x40b5b2
mov eax, 0x104
lea edx, [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x16c]
push edx
push eax
push 2
lea ecx, [esp + 0x28]
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x16c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00512a6d
mov edi, dword [esp + 0x18]
mov esi, 0x5977cc
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40b0c9
test cl, cl
je 0x40b0c5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40b0c9
add eax, 2
add esi, 2
test cl, cl
jne 0x40b0a5
xor eax, eax
jmp 0x40b0ce
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40b0e5
push str.HKEY_CLASSES_ROOT_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
jmp 0x40b1f3
mov esi, 0x5977c8
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40b110
test cl, cl
je 0x40b10c
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40b110
add eax, 2
add esi, 2
test cl, cl
jne 0x40b0ec
xor eax, eax
jmp 0x40b115
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40b12c
push str.HKEY_CURRENT_USER_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
jmp 0x40b1f3
mov esi, 0x5977c4
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40b157
test cl, cl
je 0x40b153
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40b157
add eax, 2
add esi, 2
test cl, cl
jne 0x40b133
xor eax, eax
jmp 0x40b15c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40b173
push str.HKEY_LOCAL_MACHINE_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
jmp 0x40b1f3
mov esi, str.3210
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40b19e
test cl, cl
je 0x40b19a
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40b19e
add eax, 2
add esi, 2
test cl, cl
jne 0x40b17a
xor eax, eax
jmp 0x40b1a3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40b1b7
push str.HKEY_USERS_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
jmp 0x40b1f3
mov esi, 0x5977bc
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40b1e2
test cl, cl
je 0x40b1de
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40b1e2
add eax, 2
add esi, 2
test cl, cl
jne 0x40b1be
xor eax, eax
jmp 0x40b1e7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40b1f3
mov dword [esp + 0x60], 1
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x274]
push eax
push ecx
push 3
lea ecx, [esp + 0x28]
call fcn.004069f0
push eax
call dword [0x5b0774]
lea edx, [esp + 0x44]
lea eax, [esp + 0x68]
push edx
push eax
push 4
lea ecx, [esp + 0x28]
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x50]
lea edx, [esp + 0x378]
push ecx
push edx
push 5
lea ecx, [esp + 0x28]
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x1c]
call fcn.004069a0
lea eax, [esp + 0x274]
push 0x5b
push eax
call fcn.004f9be0
add esp, 8
test eax, eax
je 0x40b2b7
lea ecx, [esp + 0x274]
lea edx, [esp + 0x38]
push ecx
lea eax, [esp + 0x58]
push edx
push eax
call fcn.0040a270
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
add esp, 0xc
lea edx, [esp + 0x274]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x54]
call fcn.005128e4
lea ecx, [esp + 0x68]
push 0x5b
push ecx
call fcn.004f9be0
add esp, 8
test eax, eax
je 0x40b30f
lea edx, [esp + 0x68]
lea eax, [esp + 0x38]
push edx
lea ecx, [esp + 0x50]
push eax
push ecx
call fcn.0040a270
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
add esp, 0xc
lea edx, [esp + 0x68]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x4c]
call fcn.005128e4
lea ecx, [esp + 0x274]
push str.SOFTWAREMICROSOFTOFFICE
push ecx
call fcn.00422ad0
add esp, 8
test eax, eax
je 0x40b3c5
test ebx, ebx
jne 0x40b573
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKLMSOFTWAREMICROSOFTOFFICE_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKUSOFTWAREMICROSOFTOFFICE_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKLMSOFTWAREMicrosoftClipArt_Gallery_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKLMSOFTWARECLASSESMSPROJECT.9.SERIALIZERS
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKLMSOFTWARECLASSESMSPROJECT.10.SERIALIZERS
call fcn.00512952
mov ecx, ebp
call fcn.00407760
mov ebx, 1
jmp 0x40b573
mov eax, dword [esp + 0x60]
test eax, eax
je 0x40b4f8
push str.HKEY_LOCAL_MACHINE_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
lea edx, [esp + 0x274]
lea ecx, [esp + 0x18]
push edx
call fcn.00512cc0
mov al, byte [esp + 0x68]
test al, al
je 0x40b43e
lea eax, [esp + 0x68]
lea ecx, [esp + 0x34]
push eax
call fcn.00512952
lea ecx, [esp + 0x34]
lea edx, [esp + 0x18]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x7ac], 0x16
call fcn.00512659
mov ecx, ebp
call fcn.00407cf0
lea ecx, [esp + 0x34]
mov byte [esp + 0x7a0], 0x15
call fcn.005128e4
jmp 0x40b45a
push 0
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
push str.HKEY_CURRENT_USER_
lea ecx, [esp + 0x1c]
call fcn.00512a6d
lea ecx, [esp + 0x274]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00512cc0
mov al, byte [esp + 0x68]
test al, al
je 0x40b4d2
lea edx, [esp + 0x68]
lea ecx, [esp + 0x2c]
push edx
call fcn.00512952
lea eax, [esp + 0x2c]
lea edx, [esp + 0x18]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x7ac], 0x17
call fcn.00512659
mov ecx, ebp
call fcn.00407cf0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7a0], 0x15
call fcn.005128e4
mov dword [esp + 0x60], 0
jmp 0x40b573
push 0
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
mov dword [esp + 0x60], 0
jmp 0x40b573
lea ecx, [esp + 0x274]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00512cc0
mov al, byte [esp + 0x68]
test al, al
je 0x40b557
lea edx, [esp + 0x68]
lea ecx, [esp + 0x10]
push edx
call fcn.00512952
lea eax, [esp + 0x10]
lea edx, [esp + 0x18]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x7ac], 0x18
call fcn.00512659
mov ecx, ebp
call fcn.00407cf0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 0x15
call fcn.005128e4
jmp 0x40b573
push 0
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x1c]
call fcn.004069d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 0x15
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
test eax, eax
je 0x40b055
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
mov edi, dword [esp + 0x58]
lea edx, [esp + 0x20]
push edx
push str.SELECT_CLSID_FROM_Class
push edi
call dword [0x5b0768]
mov eax, dword [esp + 0x20]
push 0
push eax
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
mov bl, 0x19
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
test eax, eax
mov esi, 0x104
jne 0x40b6c0
lea edx, [esp + 0x24]
lea eax, [esp + 0x16c]
push edx
push eax
push 1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], esi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea ecx, [esp + 0x16c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00512a6d
push str.HKEY_LOCAL_MACHINESOFTWARECLASSESCLSID_
push 0
lea ecx, [esp + 0x20]
call fcn.0050df1d
push 0
push 0
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
lea ecx, [esp + 0x10]
call fcn.004069a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
je 0x40b619
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x20]
push ecx
push str.SELECT_LibID_FROM_TypeLib
push edi
call dword [0x5b0768]
mov edx, dword [esp + 0x20]
push 0
push edx
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
mov bl, 0x1a
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
jne 0x40b7c5
lea ecx, [esp + 0x24]
lea edx, [esp + 0x16c]
push ecx
push edx
push 1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], esi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea eax, [esp + 0x16c]
lea ecx, [esp + 0x18]
push eax
call fcn.00512a6d
push str.HKEY_LOCAL_MACHINESOFTWARECLASSESTypeLib_
push 0
lea ecx, [esp + 0x20]
call fcn.0050df1d
push 0
push 0
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
lea ecx, [esp + 0x10]
call fcn.004069a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
je 0x40b71e
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x20]
push ecx
push str.SELECT_ProgId_FROM_ProgId
push edi
call dword [0x5b0768]
mov edx, dword [esp + 0x20]
push 0
push edx
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
mov bl, 0x1b
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
jne 0x40b8ca
lea ecx, [esp + 0x24]
lea edx, [esp + 0x16c]
push ecx
push edx
push 1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], esi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea eax, [esp + 0x16c]
lea ecx, [esp + 0x18]
push eax
call fcn.00512a6d
push str.HKEY_LOCAL_MACHINESOFTWARECLASSES_
push 0
lea ecx, [esp + 0x20]
call fcn.0050df1d
push 0
push 0
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00512659
mov ecx, ebp
call fcn.00407760
lea ecx, [esp + 0x10]
call fcn.004069a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
je 0x40b823
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x20]
push ecx
push str.SELECT_ComponentId_FROM_Component
push edi
call dword [0x5b0768]
mov edx, dword [esp + 0x20]
push 0
push edx
call dword [0x5b075c]
lea ecx, [esp + 0x10]
call fcn.004069d0
mov bl, 0x1c
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [0x5b0790]
test eax, eax
jne 0x40ba1f
mov edi, dword [esp + 0x5c]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x16c]
push ecx
push edx
push 1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], esi
call fcn.004069f0
push eax
call dword [0x5b0774]
lea eax, [esp + 0x16c]
lea ecx, [esp + 0x3c]
push eax
push ecx
call fcn.00424890
add esp, 8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7a4], 0x1d
call fcn.00512a1d
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7a0], bl
call fcn.005128e4
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 8]
test eax, eax
je 0x40b9d8
cmp dword [esp + 0x64], 2
jb 0x40b9ac
mov eax, dword [edi + 0x38]
cmp eax, 1
je 0x40b9ac
cmp eax, 2
jne 0x40b9bc
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components_
jmp 0x40b9b1
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerComponents_
push 0
lea ecx, [esp + 0x20]
call fcn.0050df1d
push 0
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, ebp
call fcn.00407760
lea ecx, [esp + 0x10]
call fcn.004069a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
lea ecx, [esp + 0x10]
call fcn.004069d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], bl
call fcn.00406a00
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [0x5b0790]
test eax, eax
je 0x40b92c
lea ecx, [esp + 0x10]
mov byte [esp + 0x7a0], 3
call fcn.004069e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.Microsoft_Money
call fcn.00512952
push ecx
lea esi, [ebp + 0xc]
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
mov byte [esp + 0x7ac], 0x1e
call fcn.00512659
mov byte [esp + 0x7a8], 3
call fcn.00422b30
add esp, 8
test eax, eax
jl 0x40bafd
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerProducts66E7AC201DA19ED4ABE9680AEE0B917C_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKEY_LOCAL_MACHINESOFTWAREClassesInstallerUpgradeCodes3D4F9899BD1F4D11C8FF0005AD3DD259_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftMoney_System_Pack_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUpgradeCodes3D4F9899BD1F4D11C8FF0005AD3DD259_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall02CA7E66_1AD1_4DE9_BA9E_86A0EEB019C7_
call fcn.00512952
mov ecx, ebp
call fcn.00407760
mov edx, dword [ebp + 0xb0]
mov eax, dword [edx - 8]
test eax, eax
jne 0x40bbaf
mov eax, dword [ebp + 0x174]
lea ebx, [ebp + 0x174]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x40bbaf
push esi
lea ecx, [esp + 0x34]
call fcn.00512a1d
mov ecx, dword [esp + 0x30]
push str.Visio
push ecx
call fcn.004f9670
add esp, 8
test eax, eax
je 0x40bba3
push 0x597348
lea ecx, [esp + 0x34]
call fcn.0050e341
test eax, eax
jge 0x40bba3
lea edx, [ebp + 0xac]
lea ecx, [esp + 0x30]
push edx
call fcn.00512a1d
mov eax, dword [esp + 0x30]
push str.Visio
push eax
call fcn.004f9670
add esp, 8
test eax, eax
je 0x40bba3
push 0x597348
lea ecx, [esp + 0x34]
call fcn.0050e341
test eax, eax
jge 0x40bba3
mov ecx, dword [esi]
push str.LDAP_Driver
push ecx
call fcn.004f9670
add esp, 8
test eax, eax
jne 0x40bbaf
push str.Visio
mov ecx, ebx
call fcn.00512a6d
push esi
lea ecx, [esp + 0x34]
call fcn.00512a1d
lea ecx, [esp + 0x30]
call fcn.00512e06
push str.WORDPERFECT_OFFICE_200
lea ecx, [esp + 0x34]
call fcn.0050e341
test eax, eax
jl 0x40bbf7
mov eax, dword [esp + 0x5c]
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
add eax, 0xdc
push str.Vbox_
push eax
push edx
call fcn.00512b79
mov ecx, ebp
call fcn.00408560
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40bc06
push eax
call dword [0x5b0784]
mov eax, dword [esp + 0x58]
test eax, eax
je 0x40bc15
push eax
call dword [0x5b0784]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x40bc24
push eax
call dword [0x5b0784]
mov eax, dword [ebp + 0xc]
push str.WebFldrs
push eax
call fcn.00422ad0
add esp, 8
test eax, eax
je 0x40bc47
mov eax, dword [ebp + 0x178]
or al, 2
mov dword [ebp + 0x178], eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x7a0], 2
call fcn.005128e4
lea ecx, [esp + 0x48]
mov byte [esp + 0x7a0], 1
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x7a0], 0
call fcn.005128e4
lea ecx, [esp + 0x40]
mov dword [esp + 0x7a0], 0xffffffff
call fcn.005128e4
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x798]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x794
ret