Function at 0x40dabc
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x58645e
mov eax, dword fs:[0]
push eax
sub esp, 0x33c
mov eax, dword [0x5fe480]
xor eax, esp
mov dword [esp + 0x334], eax
push esi
push edi
mov eax, dword [0x5fe480]
xor eax, esp
push eax
lea eax, [esp + 0x348]
mov dword fs:[0], eax
xor edi, edi
mov esi, ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x350], edi
push 7
pop eax
mov dword [esp + 0xec], eax
mov dword [esp + 0x108], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], cx
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], ax
push str.AutoApply
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x358], 1
call fcn.00404c23
mov eax, dword [esi + 0xa8]
push 0xa
pop ecx
call fcn.0042cac9
xor ecx, ecx
test al, al
setne cl
lea esi, [esp + 0xf4]
add ecx, 0x30
movzx eax, cx
push eax
xor eax, eax
inc eax
call fcn.0041c257
lea ecx, [esp + 0xd8]
lea edx, [esp + 0xc]
call fcn.0041bfa7
xor eax, eax
push 0x208
mov word [esp + 0x130], ax
lea eax, [esp + 0x132]
push edi
push eax
call fcn.00543fe0
add esp, 0xc
lea eax, [esp + 0x12c]
push eax
push edi
push edi
push 0x28
push edi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
cmp esi, edi
jge 0x40dca1
lea eax, [esp + 0x24]
push eax
call fcn.004044d0
mov edi, eax
push str.updtAppManager::GetSettingsForSHIM:_SHGetFolderPath_failed_with
push edi
mov byte [esp + 0x358], 2
call fcn.0040511f
pop ecx
pop ecx
push esi
push edi
call fcn.0041f394
lea eax, [esp + 0xbc]
push eax
mov eax, edi
call fcn.0040453a
mov byte [esp + 0x350], 3
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x40dc36
lea eax, [esp + 0xbc]
push eax
push 2
pop ecx
call fcn.00463ba1
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xc0]
call fcn.00401d98
lea eax, [esp + 0x24]
mov byte [esp + 0x350], 1
call fcn.00403cb2
lea eax, [esp + 0xc]
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
cmp ebx, eax
je 0x40ddb8
mov esi, ebx
call fcn.0041ca7c
mov eax, dword [esp + 0xc]
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
jmp 0x40ddb8
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0xbc]
push eax
call fcn.004158f7
mov byte [esp + 0x350], 6
mov eax, dword [esp + 0xc0]
mov esi, dword [esp + 0xbc]
sub eax, esi
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x40dd12
mov edi, eax
lea eax, [esp + 0x12c]
push eax
mov ecx, esi
call fcn.0041ee2e
pop ecx
test al, al
je 0x40dd0c
lea eax, [esp + 0x12c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40dcf4
sub eax, edx
sar eax, 1
push 0xd
mov ecx, esi
call fcn.0041c2a2
add esi, 0x1c
dec edi
jne 0x40dcd6
push str.SearchPaths
lea eax, [esp + 0xdc]
push eax
call fcn.00404c23
push 0x5a4bb8
lea esi, [esp + 0x114]
call fcn.004041a9
mov eax, esi
push eax
lea eax, [esp + 0xf8]
lea ecx, [esp + 0xc0]
mov byte [esp + 0x354], 7
call fcn.0041ee72
pop ecx
push 1
xor edi, edi
mov byte [esp + 0x354], 6
call fcn.00401d98
lea ecx, [esp + 0xd8]
lea edx, [esp + 0xc]
call fcn.0041bfa7
lea eax, [esp + 0xc]
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
cmp ebx, eax
je 0x40ddac
mov esi, ebx
call fcn.0041ca7c
mov eax, dword [esp + 0xc]
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
lea esi, [esp + 0xbc]
call fcn.00401e83
push 1
xor edi, edi
lea esi, [esp + 0xf8]
call fcn.00401d98
push 1
lea esi, [esp + 0xdc]
call fcn.00401d98
lea esi, [esp + 0xc]
call fcn.0041ca7c
mov eax, ebx
mov ecx, dword [esp + 0x348]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x334]
xor ecx, esp
call fcn.005413de
mov esp, ebp
pop ebp
ret