Function at 0x40e810
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bbbb5
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x50c080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
movzx eax, word [ebp + 0xc]
cmp eax, 0x4b3
ja 0x40e9e9
je case.0x40e864.1108
sub eax, 0x3eb
cmp eax, 0x6a
ja case.0x40e9fe.1205
movzx eax, byte [eax + 0x40ec74]
jmp dword [eax*4 + 0x40ec64]
cmp byte [0x51093e], 0
je 0x40e8ad
push 0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov esi, eax
test esi, esi
je 0x40e89a
push 1
push 0xf060
push esi
call dword [sym.imp.USER32.dll_EnableMenuItem]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
call fcn.0044d730
mov ecx, edi
call fcn.0040f110
push 5
jmp 0x40e97b
mov al, byte [0x50cb51]
test al, al
je 0x40e8c2
call fcn.0040f110
push 2
jmp 0x40e97b
cmp byte [0x510927], 0
je 0x40ec34
lea ecx, [ebp - 0x28]
call fcn.00467cf0
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x40e8e9
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec570
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x79
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_showing_BrowserGuard_screen
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0x14]
add esp, 4
cmp ecx, 7
jbe 0x40e969
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e95f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ec4f
push ecx
push edx
call fcn.00490f7d
add esp, 8
mov ecx, edi
call fcn.0040f110
push 3
jmp 0x40e97b
call fcn.0040f110
push 1
mov esi, eax
mov dword [ebp - 0x10], esi
call fcn.0040f1c0
mov ebx, eax
test esi, esi
je case.0x40e9fe.1205
test ebx, ebx
je case.0x40e9fe.1205
cmp esi, ebx
je case.0x40e9fe.1205
push 0
push dword [esi]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
call esi
push 5
push dword [ebx]
call esi
mov eax, dword [ebp - 0x10]
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0xfffffffffffffff4
push dword [eax]
call esi
push 0xe900
push 0xfffffffffffffff4
push dword [ebx]
call esi
push 1
mov ecx, edi
call fcn.0040fa50
jmp case.0x40e9fe.1205
call fcn.0040f110
mov esi, eax
mov dword [ebp - 0x10], esi
push 0
jmp 0x40e980
sub eax, 0x4b4
cmp eax, 0x6b
ja case.0x40e9fe.1205
movzx eax, byte [eax + 0x40ecf4]
jmp dword [eax*4 + 0x40ece0]
cmp byte [0x510927], 0
je 0x40ec34
lea ecx, [ebp - 0x28]
call fcn.00467cf0
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x40ea2c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec570
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0x8e
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_showing_BrowserGuard_screen
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov ecx, dword [ebp - 0x14]
add esp, 4
cmp ecx, 7
jbe 0x40e969
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e95f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ec54
jmp 0x40e95f
mov bl, byte [0x50cb51]
call fcn.0040f110
mov esi, eax
mov dword [ebp - 0x10], esi
test bl, bl
je 0x40e9e5
push 2
jmp 0x40e980
lea ecx, [ebp - 0x28]
call fcn.00467cf0
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x40eaeb
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec570
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xa1
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_User_chose_to_install_BrowserGuard
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x40ec32
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eb6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ec59
push ecx
push edx
call fcn.00490f7d
add esp, 8
jmp 0x40ec32
lea ecx, [ebp - 0x40]
call fcn.00467cf0
mov dword [ebp - 4], 3
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x40eb98
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x50f6d0
call fcn.00412550
add esp, 4
mov edx, 0x4ec570
mov ecx, eax
call fcn.00411050
mov edx, 0x4ec568
mov ecx, eax
call fcn.00411050
push 0xa5
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_User_chose_NOT_to_install_BrowserGuard
mov ecx, eax
call fcn.00411050
push eax
call fcn.004113d0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x2c]
cmp ecx, 7
jbe 0x40ec1e
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ec14
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ec5e
push ecx
push edx
call fcn.00490f7d
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov ecx, edi
call fcn.0040f6a0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.004961af
call fcn.004961af
call fcn.004961af
call fcn.004961af
nop
imul ebp, eax, 0x40
add byte [ecx + ebp*8 + 64], dh
add bl, bl
jmp 0xec79ecb2