Function at 0x4276b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fa9ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb88
push ebx
push esi
push edi
lea eax, [ebp - 0x314]
mov dword [ebp - 0x10], esp
xor ebx, ebx
push eax
mov dword [ebp - 4], ebx
call fcn.004ab6e0
add esp, 4
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00401350
add esp, 4
lea edx, [ebp - 0x794]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x24], ebx
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edi, [ebp - 0x794]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x714]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x712], bl
push ecx
push 0xcee8f0
call fcn.004b2fc0
add esp, 8
lea ecx, [ebp - 0x194]
push 1
call fcn.004f0653
mov edx, dword [0x4fe4e8]
lea ecx, [ebp - 0x194]
push edx
push 8
push str.c:endpcacheprocess_log.txt
mov byte [ebp - 4], 1
call fcn.004f0727
lea eax, [ebp - 0x794]
lea ecx, [ebp - 0xb94]
push eax
push str._s_svchost.exe
push ecx
mov dword [ebp - 0x20], ebx
call fcn.004f175f
add esp, 0xc
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp ecx, eax
jge 0x427fc9
mov eax, ecx
xor ebx, ebx
lea eax, [eax + eax*2]
shl eax, 7
mov dword [ebp - 0x1c], eax
lea edx, [eax + 0xcee970]
push edx
call fcn.004fa6c0
mov esi, eax
push str.:endp
push esi
call fcn.004f2d80
add esp, 0xc
test eax, eax
jne 0x427fbb
push 0x515e8c
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x42783c
push 0x515e88
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x42783c
push str.svchost__k_rpcss
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
push str.svchost__k_DComLaunch
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
push str.msiexec
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
push str._anotherlockfile.exe
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
cmp dword [0xe56da0], 1
jne 0x427871
push str.dllhost.exe__Processid
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
push str.NULL
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
lea eax, [ebp - 0x714]
push str.Program_FilesCommon_FilesAdobe_Systems_SharedServiceAdobelmsvc.exe
push eax
lea ecx, [ebp - 0x994]
push str._s_s
push ecx
xor edi, edi
call fcn.004f175f
lea edx, [ebp - 0x994]
push edx
push esi
call fcn.004f61e0
add esp, 0x18
test eax, eax
jne 0x4278ce
push 0x517764
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
push str.Common_FilesAdobe_Systems_SharedServiceAdobelmsvc.exe
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x4278f4
push 0x517764
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x714]
push str.Program_FilesCommon_FilesMacromedia_SharedServiceMacromedia_Licensing.exe
push eax
lea ecx, [ebp - 0x994]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0x994]
push edx
push esi
call fcn.004f61e0
add esp, 0x18
test eax, eax
jne 0x427939
push 0x5176b0
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
push str.Common_FilesMacromedia_SharedServiceMacromedia_Licensing.exe
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x42795f
push 0x5176b0
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
push str.Program_FilesMySQLMySQL_Server
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427985
push 0x517628
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
push str.BINTNSLSNR
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x4279ab
push 0x5175f8
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
push str.mysqld_nt
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x4279e3
push 0x5175f4
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x4279e3
push 0x51644c
mov edi, 1
call fcn.004fa6c0
add esp, 4
mov ebx, eax
lea eax, [ebp - 0xb94]
push eax
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427a0b
push 0x5175e0
call fcn.004fa6c0
add esp, 4
mov ebx, eax
mov edi, 1
test edi, edi
mov byte [ebp - 0x694], 0
jne 0x427a21
push esi
call fcn.00415640
add esp, 4
mov ebx, eax
push 0x5147b4
push ebx
call fcn.004f2d80
push 0x5144fc
push ebx
mov edi, eax
call fcn.004f2d80
push 0x5175d4
push ebx
mov dword [ebp - 0x28], eax
call fcn.004f2d80
push 0x516efc
push ebx
mov dword [ebp - 0x2c], eax
call fcn.004f2d80
add esp, 0x20
test edi, edi
jne 0x427dd4
mov ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x427dd4
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x427dd4
test eax, eax
jne 0x427dd4
push 0x516f08
push ebx
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427aa6
push str.snmptrap.exe
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
push 0x516f08
push ebx
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427ace
push str.WinPcap_rpcapd.ini
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x427fbb
mov ecx, dword [ebp - 0x1c]
push ebx
lea edi, [ecx + 0xcee8f0]
mov dword [ebp - 0x28], edi
call fcn.004fa6c0
mov edx, dword [ebp - 0x14]
add esp, 4
push eax
push esi
push edi
lea eax, [ebp - 0x4c]
push edx
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x314]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x694]
push eax
push 0x51756c
push edx
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x20
test eax, eax
jne 0x427b78
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x694]
push eax
push ecx
push edx
jne 0x427b5b
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x427b72
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
mov esi, dword [0xe56d34]
mov edx, dword [0xe56d24]
inc esi
lea eax, [ebp - 0x694]
inc edx
push eax
lea ecx, [ebp - 0x188]
mov dword [0xe56d34], esi
mov dword [0xe56d24], edx
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
push 0x517564
push ebx
call fcn.004f2d80
push 0x51755c
push ebx
mov esi, eax
call fcn.004f2d80
push 0x516f08
push ebx
mov edi, eax
call fcn.004f2d80
push 0x517554
push ebx
mov dword [ebp - 0x1c], eax
call fcn.004f2d80
add esp, 0x20
test esi, esi
jne 0x427c06
test edi, edi
jne 0x427c06
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
jne 0x427c06
test eax, eax
je 0x427dbf
mov esi, dword [ebp - 0x28]
lea ecx, [ebp - 0x14c]
push esi
push str._sImagePath
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sDescription
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sDisplayName
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sErrorControl
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sObjectName
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sStart
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sType
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sEnum0
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sEnumCount
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sEnumNextInstance
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sSecuritySecurity
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sEnum
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004b3be0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sSecurity
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004b3be0
add esp, 0x10
push esi
call fcn.004c0ed0
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 1
inc eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
jmp 0x427797
cmp dword [0xe56d94], 1
jne 0x427ea1
lea eax, [ebp - 0x894]
push eax
push esi
call fcn.004c2af0
movsx eax, ax
add esp, 8
cmp eax, 7
jle 0x427e64
lea ecx, [ebp - 0x894]
push 0x516138
push ecx
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427e64
lea edx, [ebp - 0x894]
push str.Microsoft
push edx
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x427e64
mov eax, dword [ebp - 0x14]
push esi
lea ecx, [ebp - 0x4c]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x314]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x694]
push 0x51745c
push eax
call fcn.004f175f
add esp, 0x18
jmp 0x427f94
push ebx
call fcn.004fa6c0
mov ecx, dword [ebp - 0x14]
add esp, 4
lea edx, [ebp - 0x4c]
push eax
push esi
push ecx
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x694]
push eax
push 0x51742c
push ecx
jmp 0x427f8c
mov eax, dword [ebp - 0x2c]
push ebx
test eax, eax
je 0x427f55
call fcn.004fa6c0
mov edx, dword [ebp - 0x14]
add esp, 4
push eax
push esi
lea eax, [ebp - 0x4c]
push edx
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x314]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x694]
push eax
push 0x5173fc
push edx
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x1c
test eax, eax
jne 0x427f94
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x694]
push eax
push ecx
push edx
jne 0x427f36
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
add esp, 0x1b4
jmp 0x427f94
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
jmp 0x427f94
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x14]
push esi
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x314]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x694]
push 0x51742c
push eax
call fcn.004f175f
add esp, 0x1c
lea ecx, [ebp - 0x694]
push ecx
lea ecx, [ebp - 0x188]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [ebp - 0x18]
inc eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
jmp 0x427797
cmp dword [ebp - 0x20], ebx
jne 0x42808f
lea edx, [ebp - 0x4c]
push eax
push edx
mov byte [ebp - 0x694], 0
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x694]
push eax
push 0x5173bc
push ecx
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x14
cmp eax, ebx
jne 0x428068
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b0]
cmp eax, ebx
mov eax, dword [ebp + 0x1b4]
lea edx, [ebp - 0x694]
push edx
push eax
push ecx
jne 0x42804b
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x428062
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea edx, [ebp - 0x694]
lea ecx, [ebp - 0x188]
push edx
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], ebx
push eax
push 0xddc318
push 0xd5902c
call fcn.004b3460
add esp, 0xc
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
cmp ecx, eax
jge 0x4289d6
mov ebx, ecx
mov byte [ebp - 0x414], 0
shl ebx, 8
mov dword [ebp - 0x28], ebx
lea ecx, [ebx + 0xd5902c]
push ecx
call fcn.004fa6c0
mov edi, eax
push str.:endp
push edi
mov dword [ebp - 0x1c], edi
call fcn.004f2d80
add esp, 0xc
test eax, eax
jne 0x4289c8
push str.NULL
push edi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x4289c8
push 0x5147e0
push edi
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x428135
lea edx, [ebp - 0x794]
push edi
push edx
lea eax, [ebp - 0x414]
push str._s_s
push eax
call fcn.004f175f
add esp, 0x10
jmp 0x428158
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x414]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x414]
push ecx
call fcn.004abec0
add esp, 4
cmp eax, 1
je 0x4284e8
lea edx, [ebp - 0x414]
push edx
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x24]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x314]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x894]
push 0x517364
push eax
call fcn.004f175f
lea ecx, [ebp - 0x414]
push str.hidserv.dll
push ecx
call fcn.004f2d80
add esp, 0x20
test eax, eax
jne 0x4289c8
mov eax, dword [0xe56db0]
test eax, eax
jne 0x42822b
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b0]
test eax, eax
mov eax, dword [ebp + 0x1b4]
lea edx, [ebp - 0x894]
push edx
push eax
push ecx
jne 0x42820e
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x428225
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea edx, [ebp - 0x894]
lea ecx, [ebp - 0x188]
push edx
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x414]
push eax
call fcn.004bd090
add esp, 4
lea ecx, [ebp - 0x414]
push ecx
call fcn.004bd100
add esp, 4
lea edx, [ebp - 0x414]
push edx
call fcn.004abec0
add esp, 4
cmp eax, 1
jne 0x428293
lea eax, [ebp - 0x414]
push eax
call fcn.0041af60
add esp, 4
lea esi, [ebx + 0xddc318]
lea ecx, [ebp - 0x294]
push esi
push str._sImagePath
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x294]
push esi
push str._sDescription
push eax
call fcn.004f175f
lea ecx, [ebp - 0x294]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x294]
push esi
push str._sDisplayName
push edx
call fcn.004f175f
lea eax, [ebp - 0x294]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x294]
push esi
push str._sErrorControl
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x294]
push esi
push str._sObjectName
push eax
call fcn.004f175f
lea ecx, [ebp - 0x294]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x294]
push esi
push str._sStart
push edx
call fcn.004f175f
lea eax, [ebp - 0x294]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x294]
push esi
push str._sType
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x294]
push esi
push str._sParametersServiceDll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x294]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x294]
push esi
push str._sParametersServiceMain
push edx
call fcn.004f175f
lea eax, [ebp - 0x294]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x294]
push esi
push str._sEnum0
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x294]
push esi
push str._sEnumCount
push eax
call fcn.004f175f
lea ecx, [ebp - 0x294]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x294]
push esi
push str._sEnumNextInstance
push edx
call fcn.004f175f
lea eax, [ebp - 0x294]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x294]
push esi
push str._sSecuritySecurity
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x294]
push esi
push str._sEnum
push eax
call fcn.004f175f
lea ecx, [ebp - 0x294]
push ecx
call fcn.004b3be0
add esp, 0x10
lea edx, [ebp - 0x294]
push esi
push str._sSecurity
push edx
call fcn.004f175f
lea eax, [ebp - 0x294]
push eax
call fcn.004b3be0
add esp, 0x10
lea ecx, [ebp - 0x294]
push esi
push str._sParameters
push ecx
call fcn.004f175f
lea edx, [ebp - 0x294]
push edx
call fcn.004b3be0
add esp, 0x10
push esi
call fcn.004c0ed0
add esp, 4
push esi
lea ecx, [ebp - 0x188]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 1
inc eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
jmp 0x4280ab
lea eax, [ebp - 0x414]
push eax
call fcn.0041af60
add esp, 4
mov ebx, eax
push 0x5147b4
push ebx
call fcn.004f2d80
push 0x5144fc
push ebx
mov esi, eax
call fcn.004f2d80
push 0x517300
push ebx
mov edi, eax
call fcn.004f2d80
add esp, 0x18
test esi, esi
jne 0x42888e
test edi, edi
jne 0x42888e
test eax, eax
jne 0x42888e
push ebx
mov byte [ebp - 0x694], al
call fcn.004fa6c0
mov edx, dword [ebp - 0x24]
add esp, 4
lea ecx, [ebp - 0x414]
push eax
push ecx
lea eax, [ebp - 0x4c]
push edx
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x314]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x694]
push eax
push 0x5172c0
push edx
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x1c
test eax, eax
jne 0x4285e2
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x694]
push eax
push ecx
push edx
jne 0x4285c5
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x4285dc
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
mov esi, dword [0xe56d30]
mov edx, dword [0xe56d24]
inc esi
lea eax, [ebp - 0x694]
inc edx
push eax
lea ecx, [ebp - 0x188]
mov dword [0xe56d30], esi
mov dword [0xe56d24], edx
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
push 0x517564
push ebx
call fcn.004f2d80
push 0x51755c
push ebx
mov esi, eax
call fcn.004f2d80
push 0x516f08
push ebx
mov edi, eax
call fcn.004f2d80
push 0x517554
push ebx
mov dword [ebp - 0x1c], eax
call fcn.004f2d80
add esp, 0x20
test esi, esi
jne 0x428670
test edi, edi
jne 0x428670
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
jne 0x428670
test eax, eax
je 0x4284d3
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x14c]
lea esi, [ecx + 0xddc318]
push esi
push str._sImagePath
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sDescription
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sDisplayName
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sErrorControl
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sObjectName
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sStart
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sType
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sParametersServiceDll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sParametersServiceMain
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sEnum0
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sEnumCount
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004bc2e0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sEnumNextInstance
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bc2e0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sSecuritySecurity
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004bc2e0
add esp, 0x10
lea ecx, [ebp - 0x14c]
push esi
push str._sEnum
push ecx
call fcn.004f175f
lea edx, [ebp - 0x14c]
push edx
call fcn.004b3be0
add esp, 0x10
lea eax, [ebp - 0x14c]
push esi
push str._sSecurity
push eax
call fcn.004f175f
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004b3be0
add esp, 0x10
lea edx, [ebp - 0x14c]
push esi
push str._sParameters
push edx
call fcn.004f175f
lea eax, [ebp - 0x14c]
push eax
call fcn.004b3be0
add esp, 0x10
jmp 0x4284b2
cmp dword [0xe56d94], 1
jne 0x42895b
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0xa94]
push ecx
push esi
call fcn.004c23b0
movsx eax, ax
add esp, 8
cmp eax, 7
jle 0x428921
lea edx, [ebp - 0xa94]
push 0x516138
push edx
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x428921
lea eax, [ebp - 0xa94]
push str.Microsoft
push eax
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x428921
mov ecx, dword [ebp - 0x14]
push esi
lea edx, [ebp - 0x4c]
push ecx
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x694]
push eax
push 0x51728c
push ecx
call fcn.004f175f
add esp, 0x18
jmp 0x4289a1
push ebx
call fcn.004fa6c0
mov edx, dword [ebp - 0x14]
add esp, 4
push eax
push esi
lea eax, [ebp - 0x4c]
push edx
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x314]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x694]
push eax
push 0x51725c
push edx
jmp 0x428999
push ebx
call fcn.004fa6c0
mov ecx, dword [ebp - 0x24]
add esp, 4
lea edx, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x414]
push eax
push ecx
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x694]
push eax
push 0x51725c
push ecx
call fcn.004f175f
add esp, 0x1c
lea edx, [ebp - 0x694]
lea ecx, [ebp - 0x188]
push edx
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [ebp - 0x18]
inc eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
jmp 0x4280ab
cmp dword [ebp - 0x20], ebx
jne 0x428a9f
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 0x694], 0
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x314]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x694]
push eax
push 0x51721c
push edx
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x14
cmp eax, ebx
jne 0x428a75
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
cmp eax, ebx
lea eax, [ebp - 0x694]
push eax
push ecx
push edx
jne 0x428a58
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x428a6f
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x188]
push eax
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
add eax, ecx
lea ecx, [ebp - 0x194]
mov dword [0xe56c58], eax
call fcn.004f076e
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0
call fcn.004f0714
lea ecx, [ebp - 0x180]
call fcn.004f05fb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret