Function at 0x40ace0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x429798
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x30]
call fcn.004162e0
mov eax, dword [0x435644]
mov ecx, 0x435644
mov dword [esp + 0x8c], 0
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
mov edx, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 1
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov eax, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 2
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x20], ebx
mov edx, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 3
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
mov edx, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 5
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x14], esi
mov eax, dword [0x435644]
mov ecx, 0x435644
mov byte [esp + 0x8c], 6
call dword [eax + 0xc]
lea ebp, [eax + 0x10]
mov dword [esp + 0x1c], ebp
mov eax, dword [edi + 0x3c]
push 0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x94], 7
call fcn.00416380
test al, al
jne 0x40adf1
lea eax, [ebp - 0x10]
jmp 0x40ae23
push str.PRODUCTS
push str.WNWB_CONF
lea ecx, [esp + 0x38]
call fcn.00415450
mov ecx, eax
call fcn.00415450
mov ecx, eax
call fcn.004154d0
mov ebp, eax
test ebp, ebp
jne 0x40af5e
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ae42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esi - 0x10]
mov byte [esp + 0x8c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ae64
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ae8a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aeb0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0x8c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aed2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aef8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40af1e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x6c]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x8c], 0xffffffff
mov dword [esp + 0x30], 0x42b6a8
je 0x40af44
push eax
call fcn.0041df9e
add esp, 4
lea ecx, [esp + 0x30]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
call fcn.00415d70
jmp 0x40b3ba
cmp dword [esp + 0x98], 1
lea ecx, [esp + 0x14]
jne 0x40af73
push str.MESSAGE
jmp 0x40af78
push str.UPDATE
call fcn.004062b0
lea ecx, [ecx]
push 0x42b69c
mov ecx, ebp
call fcn.00415e70
test eax, eax
jne 0x40af94
xor ecx, ecx
jmp 0x40afa9
mov ecx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x40afa0
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.00405d40
mov ebx, dword [esp + 0x20]
push ebx
call fcn.0041e487
mov ecx, dword [esp + 0x98]
add esp, 4
cmp eax, ecx
mov ecx, ebp
je 0x40afdb
call fcn.00415560
mov ebp, eax
test ebp, ebp
jne 0x40af80
jmp 0x40affb
mov eax, dword [esp + 0x14]
push eax
call fcn.00415500
push str.version
mov ecx, eax
call fcn.00415e70
push eax
lea ecx, [esp + 0x1c]
call fcn.004062b0
cmp dword [esp + 0x98], 2
jne 0x40b012
lea edx, [esp + 0x18]
lea ecx, [edi + 0x2c]
push edx
call fcn.004060a0
lea ecx, [esp + 0x30]
call fcn.004153f0
mov eax, dword [0x435644]
mov ecx, 0x435644
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x2c], eax
mov ecx, dword [edi + 0x34]
push 0x42bbac
push ecx
lea edx, [esp + 0x34]
push 0x42bba4
push edx
mov byte [esp + 0x9c], 8
call fcn.00401cf0
mov ebp, dword [esp + 0x3c]
add esp, 0x10
push 0
push ebp
lea ecx, [esp + 0x38]
call fcn.00416380
test al, al
je 0x40b086
push str.WNWB_CONF
lea ecx, [esp + 0x34]
call fcn.00415450
mov ecx, dword [eax + 0x18]
call fcn.004154d0
mov esi, eax
test esi, esi
jne 0x40b1b7
lea eax, [ebp - 0x10]
mov byte [esp + 0x8c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b0a8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b0ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b0f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b11a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b140
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0x8c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b162
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b188
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x8c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b3a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x40b3a6
mov ebx, dword [esp + 0x94]
mov edi, edi
push 0x42b69c
mov ecx, esi
call fcn.00415e70
test eax, eax
jne 0x40b1d4
xor ecx, ecx
jmp 0x40b1e9
mov ecx, eax
lea ebp, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x40b1e0
sub ecx, ebp
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.00405d40
mov eax, dword [esp + 0x20]
push eax
call fcn.0041e487
add esp, 4
cmp eax, ebx
mov ecx, esi
je 0x40b218
call fcn.00415560
mov esi, eax
test esi, esi
jne 0x40b1c0
mov ebx, dword [esp + 0x14]
jmp 0x40b250
mov ebx, dword [esp + 0x14]
push ebx
call fcn.00415500
mov esi, eax
push str.version
mov ecx, esi
call fcn.00415e70
push eax
lea ecx, [esp + 0x14]
call fcn.004062b0
push str.file_name
mov ecx, esi
call fcn.00415e70
push eax
lea ecx, [esp + 0x20]
call fcn.004062b0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
push ecx
push edx
call fcn.0041e2b7
add esp, 8
test eax, eax
je 0x40b32e
cmp dword [esp + 0x98], 2
lea eax, [esp + 0x10]
push eax
jne 0x40b286
lea ecx, [edi + 0x24]
call fcn.004060a0
lea ecx, [edi + 0x1c]
jmp 0x40b291
lea ecx, [edi + 0x28]
call fcn.004060a0
lea ecx, [edi + 0x20]
lea edx, [esp + 0x1c]
push edx
call fcn.004060a0
lea ecx, [esp + 0x30]
call fcn.004153f0
push 0x42bb8c
push ebx
lea esi, [edi + 0x4c]
push 0x42bba4
push esi
call fcn.00401cf0
add esp, 0x10
mov ecx, esi
call fcn.00401840
push eax
call fcn.004011c0
add esp, 4
lea ecx, [esp + 0x2c]
call fcn.004014e0
lea ecx, [esp + 0x1c]
call fcn.004014e0
lea ecx, [esp + 0x14]
call fcn.004014e0
lea ecx, [esp + 0x10]
call fcn.004014e0
lea ecx, [esp + 0x18]
call fcn.004014e0
lea ecx, [esp + 0x20]
call fcn.004014e0
lea ecx, [esp + 0x24]
call fcn.004014e0
lea ecx, [esp + 0x28]
call fcn.004014e0
lea ecx, [esp + 0x30]
mov dword [esp + 0x8c], 0xffffffff
call fcn.00405c30
mov al, 1
jmp 0x40b3bc
push 0x42bb80
push ebx
lea esi, [edi + 0x4c]
push 0x42bba4
push esi
call fcn.00401cf0
add esp, 0x10
mov ecx, esi
call fcn.00401840
push eax
call fcn.004011c0
add esp, 4
lea ecx, [esp + 0x30]
call fcn.004153f0
lea ecx, [esp + 0x2c]
call fcn.004014e0
lea ecx, [esp + 0x1c]
call fcn.004014e0
lea ecx, [esp + 0x14]
call fcn.004014e0
lea ecx, [esp + 0x10]
call fcn.004014e0
lea ecx, [esp + 0x18]
call fcn.004014e0
lea ecx, [esp + 0x20]
call fcn.004014e0
lea ecx, [esp + 0x24]
call fcn.004014e0
lea ecx, [esp + 0x28]
call fcn.004014e0
lea ecx, [esp + 0x30]
mov dword [esp + 0x8c], 0xffffffff
call fcn.00405c30
xor al, al
mov ecx, dword [esp + 0x84]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x80
ret 8