Function at 0x40a900
Capabilities:
Delete registry value

Disassembly:
push 0x410
mov eax, 0x4b4672
call fcn.0049174a
mov eax, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x18c], esi
call fcn.00443fbb
push esi
push str.Global_s
lea esi, [ebp - 0x9c]
call fcn.00427967
pop ecx
pop ecx
xor edi, edi
mov dword [ebp - 4], edi
cmp dword [ebp - 0x84], 0x10
mov eax, dword [ebp - 0x98]
jae 0x40a952
lea eax, [ebp - 0x98]
push eax
call fcn.004069e8
test eax, eax
je 0x40a964
push edi
push 1
jmp 0x40ba32
cmp dword [ebp - 0x84], 0x10
mov eax, dword [ebp - 0x98]
jae 0x40a979
lea eax, [ebp - 0x98]
push eax
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp - 0x180]
lea eax, [ebp - 0x80]
push eax
call fcn.00407193
pop ecx
pop ecx
push dword [ebp - 0x18c]
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], bl
call fcn.004026bb
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.004011eb
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x304]
call fcn.00402abb
push edi
push edi
lea eax, [ebp - 0x1a8]
call fcn.00431ce9
push 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x60]
pop esi
cmp dword [ebp - 0x4c], esi
jae 0x40a9f1
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x68], esi
jae 0x40a9fc
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x1a8]
call fcn.004075f4
pop ecx
test eax, eax
je 0x40ba0d
lea eax, [ebp - 0x224]
push eax
push ecx
lea eax, [ebp - 0x1a8]
push eax
mov edx, str.time
call fcn.00431fdf
pop ecx
push eax
call fcn.0043121e
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.004011eb
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xa
call fcn.00402abb
lea eax, [ebp - 0x294]
push eax
push ecx
lea eax, [ebp - 0x1a8]
push eax
mov edx, str.reason
call fcn.00431fdf
pop ecx
push eax
call fcn.0043121e
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0xb
call fcn.004011eb
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x294]
call fcn.00402abb
xor eax, eax
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], edi
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x188], 0x4b9310
mov dword [ebp - 0x190], edi
mov dword [ebp - 0x184], edi
mov dword [ebp - 0x18c], edi
cmp dword [ebp - 0x68], esi
jae 0x40aad5
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x4c], esi
jae 0x40aae6
lea eax, [ebp - 0x60]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x1a8]
push eax
mov edx, str.state
call fcn.00431fdf
mov esi, eax
call fcn.0043131e
mov esi, eax
cmp esi, ebx
jne 0x40b83b
mov dword [ebp - 0x190], 0x407f71
cmp dword [ebp - 0x180], edi
je 0x40b78c
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
push str.wfctSecShare
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40ac57
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.case2ssp__d
lea ecx, [ebp - 0x224]
call fcn.00427909
pop ecx
pop ecx
push 0xffffffffffffffff
push edi
push 0x4df274
mov byte [ebp - 4], 0xf
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x224]
mov byte [ebp - 4], 0xe
call fcn.00402bb8
cmp dword [0x4df28c], 8
mov eax, dword [0x4df278]
jae 0x40ab8d
mov eax, 0x4df278
push eax
push str.Softwareprojonepodlp_smpcache_
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push dword [ebp - 0x180]
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0x188], 0x4b9350
call fcn.004026bb
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x10
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40abe0
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40abeb
mov eax, dword [eax + 4]
jmp 0x40abee
add eax, 4
push ecx
push eax
push 0x4b9360
lea ecx, [ebp - 0x374]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x12
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x374]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x3ac]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0xe
call fcn.00402abb
mov dword [ebp - 0x184], 0x407fda
mov dword [ebp - 0x18c], 0x4081b1
jmp 0x40b9b8
push str.wfctDecrypt
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40ad11
push dword [ebp - 0x180]
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x188], 0x4b93a8
call fcn.004026bb
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x13
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40acae
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40acb9
mov eax, dword [eax + 4]
jmp 0x40acbc
add eax, 4
push ecx
push eax
push 0x4b93b8
lea ecx, [ebp - 0x3e4]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x15
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x3e4]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x41c]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0xe
call fcn.00402abb
jmp 0x40b77d
push str.wfctPersonMode
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40add5
push dword [ebp - 0x180]
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x188], 0x4b9400
call fcn.004026bb
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x16
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40ad68
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40ad73
mov eax, dword [eax + 4]
jmp 0x40ad76
add eax, 4
push ecx
push eax
push 0x4b9410
lea ecx, [ebp - 0x2e8]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x2e8]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x2cc]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0xe
call fcn.00402abb
mov dword [ebp - 0x184], 0x408255
jmp 0x40b9b8
push str.wfctOffline
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40af19
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], ax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x19
call fcn.004078a8
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x240]
call fcn.004026bb
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x1a
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40ae50
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40ae5b
mov eax, dword [eax + 4]
jmp 0x40ae5e
add eax, 4
push ecx
push eax
push 0x4b945c
lea ecx, [ebp - 0x2cc]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x1c
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x2cc]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x2e8]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x19
call fcn.00402abb
cmp dword [ebp - 0xa0], 8
mov eax, dword [ebp - 0xb4]
jae 0x40aec3
lea eax, [ebp - 0xb4]
cmp eax, edi
je 0x40aee7
push 0x4b949c
lea eax, [ebp - 0x48]
push eax
call fcn.0040ba92
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0xb8]
push eax
lea esi, [ebp - 0x48]
call fcn.0040bce9
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40aef3
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40aeff
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00407b5f
pop ecx
pop ecx
lea esi, [ebp - 0xb8]
jmp 0x40b6b8
push str.wfctNetshare
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40afe7
push dword [ebp - 0x180]
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x188], 0x4b94b8
call fcn.004026bb
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x1d
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40af70
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40af7b
mov eax, dword [eax + 4]
jmp 0x40af7e
add eax, 4
push ecx
push eax
push 0x4b94c8
lea ecx, [ebp - 0x400]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x1f
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x400]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x3c8]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0xe
call fcn.00402abb
mov dword [ebp - 0x184], 0x40829c
mov dword [ebp - 0x18c], 0x408610
jmp 0x40b9b8
push str.wfctRemoteControlReq
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b07e
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x20
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x21
cmp dword [eax + 0x18], 8
jb 0x40b033
mov eax, dword [eax + 4]
jmp 0x40b036
add eax, 4
push eax
push 0x4b9510
lea ecx, [ebp - 0x1ec]
call fcn.00427909
pop ecx
pop ecx
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x22
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
lea ecx, [ebp - 0x1c4]
jmp 0x40b817
push str.wfctUsbStoreUse
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b19f
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0xf8], edi
mov word [ebp - 0x108], ax
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x23
call fcn.004087d5
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x24
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0xf4], 8
mov edx, dword [ebp - 0x108]
jae 0x40b102
lea edx, [ebp - 0x108]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b10e
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b119
mov eax, dword [eax + 4]
jmp 0x40b11c
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x26
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x23
call fcn.00402abb
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40b179
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40b185
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00407b5f
pop ecx
pop ecx
lea esi, [ebp - 0x10c]
jmp 0x40b6b8
push str.wfctInstSoftware
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b2ab
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x114], edi
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x27
call fcn.00408ae1
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x28
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x110], 8
mov edx, dword [ebp - 0x124]
jae 0x40b225
lea edx, [ebp - 0x124]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b231
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b23c
mov eax, dword [eax + 4]
jmp 0x40b23f
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x2a
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.00402abb
mov dword [ebp - 0x188], 0x4b9574
mov dword [ebp - 0x184], 0x408c28
lea esi, [ebp - 0x128]
jmp 0x40b6b8
push str.wfctPrint
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b3ad
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], edi
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00408fff
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x2c
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0xbc], 8
mov edx, dword [ebp - 0xd0]
jae 0x40b331
lea edx, [ebp - 0xd0]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b33d
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b348
mov eax, dword [eax + 4]
jmp 0x40b34b
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x2e
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.00402abb
mov dword [ebp - 0x184], 0x4091f1
lea esi, [ebp - 0xd4]
jmp 0x40b6ae
push str.wfcSendFile
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b4af
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x14c], edi
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0040973e
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x30
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x31
cmp dword [ebp - 0x148], 8
mov edx, dword [ebp - 0x15c]
jae 0x40b433
lea edx, [ebp - 0x15c]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b43f
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b44a
mov eax, dword [eax + 4]
jmp 0x40b44d
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x32
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.00402abb
mov dword [ebp - 0x184], 0x409930
lea esi, [ebp - 0x160]
jmp 0x40b6ae
push str.wfcUninstall
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b5b1
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x130], edi
mov word [ebp - 0x140], ax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x33
call fcn.00409d08
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x34
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x12c], 8
mov edx, dword [ebp - 0x140]
jae 0x40b535
lea edx, [ebp - 0x140]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b541
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b54c
mov eax, dword [eax + 4]
jmp 0x40b54f
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x36
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.00402abb
mov dword [ebp - 0x184], 0x409e4f
lea esi, [ebp - 0x144]
jmp 0x40b6ae
push str.wfcChangeFileKey
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b6c8
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0xdc], edi
mov word [ebp - 0xec], ax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 0x37
call fcn.0040a0e0
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1c4]
call fcn.004026bb
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x38
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x39
cmp dword [ebp - 0xd8], 8
mov edx, dword [ebp - 0xec]
jae 0x40b637
lea edx, [ebp - 0xec]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b643
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b64e
mov eax, dword [eax + 4]
jmp 0x40b651
add eax, 4
push edx
push ecx
push eax
push 0x4b9544
lea ecx, [ebp - 0x208]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x3a
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x208]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x1ec]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.00402abb
mov dword [ebp - 0x184], 0x40a227
lea esi, [ebp - 0xf0]
mov dword [ebp - 0x188], 0x4b9580
push edi
push ebx
mov byte [ebp - 4], 0xe
call fcn.00402bb8
jmp 0x40b9b8
push str.wfctRemoveDocwm
push dword [ebp - 0x180]
call esi
test eax, eax
jne 0x40b78c
push dword [ebp - 0x180]
lea ecx, [ebp - 0x294]
call fcn.004026bb
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x3b
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b715
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b720
mov eax, dword [eax + 4]
jmp 0x40b723
add eax, 4
push ecx
push eax
push 0x4b9590
lea ecx, [ebp - 0x390]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x3d
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x390]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x2b0]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0xe
call fcn.00402abb
mov dword [ebp - 0x188], 0x4b9610
mov dword [ebp - 0x184], 0x407fa5
jmp 0x40b9b8
push dword [ebp - 0x180]
lea ecx, [ebp - 0x224]
call fcn.004026bb
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3e
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b7c4
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b7cf
mov eax, dword [eax + 4]
jmp 0x40b7d2
add eax, 4
push ecx
push eax
push 0x4b961c
lea ecx, [ebp - 0x25c]
call fcn.00427909
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x40
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x25c]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x278]
call fcn.00402bb8
lea ecx, [ebp - 0x224]
push edi
push ebx
mov byte [ebp - 4], 0xe
call fcn.00402abb
mov dword [ebp - 0x184], 0x407f44
mov dword [ebp - 0x190], 0x407f5b
jmp 0x40b9b8
push dword [ebp - 0x180]
lea ecx, [ebp - 0x224]
call fcn.004026bb
cmp esi, 2
jne 0x40b8dd
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x41
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x164], 8
mov edx, dword [ebp - 0x178]
jae 0x40b885
lea edx, [ebp - 0x178]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b891
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b89c
mov eax, dword [eax + 4]
jmp 0x40b89f
add eax, 4
push edx
push ecx
push eax
push 0x4b9648
lea ecx, [ebp - 0x278]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x43
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x278]
call fcn.00402bb8
lea esi, [ebp - 0x25c]
jmp 0x40b979
push esi
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 0x44
call fcn.00407132
pop ecx
mov esi, eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x45
call fcn.00406cd9
pop ecx
mov byte [ebp - 4], 0x46
cmp dword [esi + 0x18], 8
jb 0x40b916
mov esi, dword [esi + 4]
jmp 0x40b919
add esi, 4
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b925
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b930
mov eax, dword [eax + 4]
jmp 0x40b933
add eax, 4
push esi
push ecx
push eax
push 0x4b9680
lea ecx, [ebp - 0x278]
call fcn.00427909
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x47
call fcn.00402b06
push edi
push ebx
lea esi, [ebp - 0x278]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x25c]
call fcn.00402bb8
lea esi, [ebp - 0x2b0]
push edi
push ebx
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xe
call fcn.00402abb
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40b99d
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40b9a9
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00407b5f
pop ecx
pop ecx
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x40b9c4
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x1d0]
push ecx
push dword [ebp - 0x18c]
push dword [ebp - 0x184]
push dword [ebp - 0x190]
push dword [ebp - 0x188]
push eax
call fcn.00407516
add esp, 0x18
push edi
push ebx
lea esi, [ebp - 0x48]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x17c]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x2c]
call fcn.00402bb8
lea esi, [ebp - 0x1a8]
mov byte [ebp - 4], 4
call fcn.0043102f
push edi
push ebx
lea esi, [ebp - 0x64]
call fcn.00402bb8
push edi
push ebx
lea esi, [ebp - 0x80]
call fcn.00402bb8
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.00402abb
call fcn.004917cd
ret