Function at 0x4017e0
Capabilities:
Check mutex on windows
Create thread
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x4c8]
sub esp, 0x4c8
push 0xffffffffffffffff
push 0x41bfbf
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x4242c0]
xor eax, ebp
mov dword [ebp + 0x4c4], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x4d0]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp + 0x4d8]
mov dword [ebp - 0x18], ecx
cmp dword [0x4253dc], 8
mov edi, dword [0x4253c8]
jae 0x401842
mov edi, 0x4253c8
call fcn.00406040
xor ebx, ebx
test al, al
je 0x401862
push ebx
push ebx
push edi
push 0x406680
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x24], eax
jmp 0x401865
mov dword [ebp - 0x24], ebx
lea edx, [ebp - 0x58]
push edx
call fcn.004034c0
mov dword [ebp - 4], 1
mov esi, 0xf
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 0xe
push str.KWApplication.
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 2
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
mov edi, 0x10
cmp dword [ebp + 0xc0], edi
jb 0x4018ee
mov edx, dword [ebp + 0xac]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 7
push str.KWData.
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 3
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], edi
jb 0x40196f
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 0xc
push str.KWExternLib.
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 4
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], edi
jb 0x4019f0
mov edx, dword [ebp + 0xac]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 8
push str.KWDebug.
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 5
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], edi
jb 0x401a71
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 8
push str.KWUtils.
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 6
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], edi
jb 0x401af2
mov edx, dword [ebp + 0xac]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0x11
push str.KWDebugDll_win32.
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 7
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402f60
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], edi
jb 0x401b73
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
sub esp, 0x1c
mov dword [ebp - 0x28], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov byte [ecx + 4], bl
push ebx
push 0x4202e9
call fcn.00405790
mov byte [ebp - 4], 8
sub esp, 0x1c
mov dword [ebp - 0x2c], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov byte [ecx + 4], bl
push 8
push str.Dashlane
call fcn.00405790
mov byte [ebp - 4], 9
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call section..text
add esp, 0x38
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push str.SOFTWAREDashlaneInstallInformation
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x401daa
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 0x1f4
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0x2cc]
push edx
lea eax, [ebp - 0x28]
push eax
push ebx
push str.InstallLocation
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
jne 0x401daa
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
lea eax, [ebp + 0x2cc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401c51
sub eax, edx
push eax
lea eax, [ebp + 0x2cc]
push eax
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 0xa
push 1
push 0x41f7c4
lea eax, [ebp + 0xa8]
call fcn.004054f0
mov edi, 0xf
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 0xb
push ebx
lea ecx, [ebp + 0x8c]
push ecx
or eax, 0xffffffff
lea esi, [ebp + 0xa8]
call fcn.00405600
mov byte [ebp - 4], 0xa
mov esi, 0x10
cmp dword [ebp + 0xa4], esi
jb 0x401ce6
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0x48
push str._binFirefox_Extension442718d9_475e_452a_b3e1_fb1ee16b8e9fcomponents
lea eax, [ebp + 0xa8]
call fcn.004054f0
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x401d1e
lea eax, [ebp + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryA]
cmp eax, ebx
je 0x401d4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 0x1fe
lea ecx, [ebp + 0xc4]
push ecx
push ebx
push eax
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
jmp 0x401d79
cmp dword [0x4253f8], 8
mov edi, dword [0x4253e4]
jae 0x401d60
mov edi, 0x4253e4
call fcn.00406040
test al, al
je 0x401d79
push ebx
push ebx
push edi
push 0x406680
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], esi
jb 0x401d94
mov edx, dword [ebp + 0xac]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], 0xf
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov eax, dword [ebp - 0x14]
call fcn.00402c60
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x14]
push eax
push 0x1f4
push 2
push str.Environment
push ebx
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
mov dword [ebp - 4], 1
jmp 0x401dec
mov esi, 0x10
lea edi, [esi - 1]
call fcn.004016d0
mov dword [ebp - 0x14], eax
push eax
push str.n:__u__n
call fcn.0040a61e
add esp, 8
cmp dword [ebp - 0x14], 3
jle 0x401e67
cmp dword [0x425414], 8
mov edi, dword [0x425400]
jae 0x401e24
mov edi, 0x425400
call fcn.00406040
test al, al
je 0x401e4d
push ebx
push ebx
push edi
push 0x406680
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
je 0x401e4d
push 0x3a98
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402c00
mov eax, 1
jmp 0x402bca
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 0xe
push 0x59
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWDebugDll_win32
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0x8c]
call fcn.004054f0
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x401eeb
lea eax, [ebp + 0x90]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x401f08
lea eax, [ebp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], esi
jb 0x401f2a
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 0xf
push 0x50
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWDebug
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0xa8]
call fcn.004054f0
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x401fc0
lea eax, [ebp + 0xac]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x401fdd
lea eax, [ebp + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], esi
jb 0x401fff
mov eax, dword [ebp + 0xac]
push eax
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 0x10
push 0x50
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWUtils
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0x8c]
call fcn.004054f0
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x402095
lea eax, [ebp + 0x90]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x4020b2
lea eax, [ebp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], esi
jb 0x4020d4
mov ecx, dword [ebp + 0x90]
push ecx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 0x11
push 0x54
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWExternLib
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0xa8]
call fcn.004054f0
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x40216a
lea eax, [ebp + 0xac]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x402187
lea eax, [ebp + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], esi
jb 0x4021a9
mov edx, dword [ebp + 0xac]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0x8c]
call fcn.00405790
mov byte [ebp - 4], 0x12
push 0x56
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWMainLib_win
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x8c]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0x8c]
call fcn.004054f0
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x40223f
lea eax, [ebp + 0x90]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xa4], esi
mov eax, dword [ebp + 0x90]
jae 0x40225c
lea eax, [ebp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xa4], esi
jb 0x40227e
mov eax, dword [ebp + 0x90]
push eax
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0xa8]
call fcn.00405790
mov byte [ebp - 4], 0x13
push 0x4f
push str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWData
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 1
push 0x41f9ac
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0xa8]
call fcn.004054f0
push 4
push str..dll
lea eax, [ebp + 0xa8]
call fcn.004054f0
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x402314
lea eax, [ebp + 0xac]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0xc0], esi
mov eax, dword [ebp + 0xac]
jae 0x402331
lea eax, [ebp + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 4], 1
cmp dword [ebp + 0xc0], esi
jb 0x402353
mov ecx, dword [ebp + 0xac]
push ecx
call fcn.0040a02e
add esp, 4
mov edi, 0xf
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
mov dword [ebp + 0x88], edi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
push 0xb
push str.2.1.2.39075
lea ecx, [ebp + 0x70]
call fcn.00405790
mov byte [ebp - 4], 0x14
push 0x56
push 0x41fb60
lea eax, [ebp + 0x70]
call fcn.004054f0
mov dword [ebp + 0x50], 7
mov dword [ebp + 0x4c], ebx
xor edx, edx
mov word [ebp + 0x3c], dx
push 0xd
mov eax, str.BUILD_VERSION
lea esi, [ebp + 0x38]
call fcn.004038b0
mov byte [ebp - 4], 0x15
push 0x56
mov eax, str._bin_Firefox_Extension_442718d9_475e_452a_b3e1_fb1ee16b8e9f_components_KWApplication
mov ecx, esi
call fcn.004033b0
push 1
push 0x41f9ac
lea eax, [ebp + 0x70]
call fcn.004054f0
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x70]
call fcn.004054f0
push 1
mov eax, 0x41fc88
mov ecx, esi
call fcn.004033b0
push 0xd
mov eax, str.BUILD_VERSION
mov ecx, esi
call fcn.004033b0
push 4
push str..dll
lea eax, [ebp + 0x70]
call fcn.004054f0
push 4
mov eax, 0x41fc8c
mov ecx, esi
call fcn.004033b0
mov esi, 0x10
cmp dword [ebp + 0x88], esi
mov eax, dword [ebp + 0x74]
jae 0x402436
lea eax, [ebp + 0x74]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp dword [ebp + 0x88], esi
mov eax, dword [ebp + 0x74]
jae 0x40244d
lea eax, [ebp + 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp + 0x6c], edi
mov dword [ebp + 0x68], ebx
mov byte [ebp + 0x58], bl
push 0xe
push str.KWApplication.
lea ecx, [ebp + 0x54]
call fcn.00405790
mov byte [ebp - 4], 0x16
push 0xb
push str.2.1.2.39075
lea eax, [ebp + 0x54]
call fcn.004054f0
push 4
push str..dll
call fcn.004054f0
cmp dword [ebp + 0x6c], esi
mov eax, dword [ebp + 0x58]
jae 0x402496
lea eax, [ebp + 0x58]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp eax, ebx
jne 0x4026cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 0x1fe
lea ecx, [ebp + 0x2c4]
push ecx
push ebx
push eax
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov dword [ebp + 0xa4], 7
mov dword [ebp + 0xa0], ebx
xor edx, edx
mov word [ebp + 0x90], dx
lea eax, [ebp + 0x2c4]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4024f0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp + 0x2c4]
lea esi, [ebp + 0x8c]
call fcn.004038b0
mov byte [ebp - 4], 0x17
cmp dword [0x425430], 8
mov edi, dword [0x42541c]
jae 0x402529
mov edi, 0x42541c
call fcn.00406040
test al, al
je 0x402546
push ebx
push ebx
push edi
push 0x406680
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x402548
xor edi, edi
mov dword [ebp + 0xc0], 7
mov dword [ebp + 0xbc], ebx
xor eax, eax
mov word [ebp + 0xac], ax
push 0xa8
mov eax, 0x41fca8
lea esi, [ebp + 0xa8]
call fcn.004038b0
mov byte [ebp - 4], 0x18
push ebx
lea ecx, [ebp + 0x8c]
push ecx
or eax, 0xffffffff
call fcn.004032f0
mov ecx, eax
push 4
mov eax, 0x41fdfc
call fcn.004033b0
mov esi, eax
push ebx
lea edx, [ebp + 0x38]
push edx
or eax, 0xffffffff
call fcn.004032f0
mov esi, 8
cmp dword [eax + 0x18], esi
jb 0x4025b6
mov eax, dword [eax + 4]
jmp 0x4025b9
add eax, 4
push ebx
push str.Alerte
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x17
cmp dword [ebp + 0xc0], esi
jb 0x4025e2
mov eax, dword [ebp + 0xac]
push eax
call fcn.0040a02e
add esp, 4
mov esi, 7
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
xor ecx, ecx
mov word [ebp + 0xac], cx
cmp edi, ebx
je 0x40260c
push 0x3a98
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0x16
cmp dword [ebp + 0xa4], 8
jb 0x402628
mov edx, dword [ebp + 0x90]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
xor eax, eax
mov word [ebp + 0x90], ax
mov byte [ebp - 4], 0x15
mov edi, 0x10
cmp dword [ebp + 0x6c], edi
jb 0x402657
mov ecx, dword [ebp + 0x58]
push ecx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0x6c], 0xf
mov dword [ebp + 0x68], ebx
mov byte [ebp + 0x58], bl
mov byte [ebp - 4], 0x14
cmp dword [ebp + 0x50], 8
jb 0x40267a
mov edx, dword [ebp + 0x3c]
push edx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0x50], esi
mov dword [ebp + 0x4c], ebx
xor eax, eax
mov word [ebp + 0x3c], ax
mov byte [ebp - 4], 1
cmp dword [ebp + 0x88], edi
jb 0x40269e
mov ecx, dword [ebp + 0x74]
push ecx
call fcn.0040a02e
add esp, 4
mov dword [ebp + 0x88], 0xf
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
mov dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x58]
push edx
call fcn.00402c00
mov eax, 1
jmp 0x402bca
cmp dword [ebp + 0x6c], esi
mov eax, dword [ebp + 0x58]
jae 0x4026d6
lea eax, [ebp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp eax, ebx
jne 0x4027e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 0x1fe
lea ecx, [ebp + 0x2c4]
push ecx
push ebx
push eax
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp + 0x2c4]
lea ecx, [ebp + 0xa8]
call fcn.00402e50
mov byte [ebp - 4], 0x19
cmp dword [0x42544c], 8
mov eax, dword [0x425438]
jae 0x40272e
mov eax, 0x425438
call fcn.00406bd0
mov edi, eax
mov eax, 0x41fe08
lea ecx, [ebp + 0x8c]
call fcn.00402e50
mov esi, eax
mov byte [ebp - 4], 0x1a
push ebx
lea edx, [ebp + 0xa8]
push edx
or eax, 0xffffffff
call fcn.004032f0
push eax
mov eax, 0x41fdfc
call fcn.00402ec0
mov esi, eax
push ebx
lea eax, [ebp + 0x38]
push eax
or eax, 0xffffffff
call fcn.004032f0
cmp dword [eax + 0x18], 8
jb 0x402780
mov eax, dword [eax + 4]
jmp 0x402783
add eax, 4
push ebx
push str.Alerte
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x19
lea esi, [ebp + 0x8c]
call fcn.00402e90
cmp edi, ebx
je 0x4027b0
push 0x3a98
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0x16
lea esi, [ebp + 0xa8]
call fcn.00402e90
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0x54]
call fcn.00405e50
mov byte [ebp - 4], 0x14
lea esi, [ebp + 0x38]
call fcn.00402e90
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x70]
call fcn.00405e50
jmp 0x401e4d
mov eax, 0x41ff5c
lea ecx, [ebp + 0x1c]
call fcn.00402e50
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x402829
lea ecx, [ebp + 0xa8]
call fcn.00402e50
mov byte [ebp - 4], 0x1c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp + 0x1c]
call fcn.00403800
mov byte [ebp - 4], 0x1b
lea esi, [ebp + 0xa8]
call fcn.00402e90
cmp dword [ebp + 0x30], ebx
je 0x4028a1
mov esi, str.installIE
lea ecx, [ebp + 0x1c]
call fcn.004047f0
test al, al
je 0x40284a
call dword [sym.imp.KWDebugDll_win32.2.1.2.39075.dll_public:_static_void___cdecl_KWDEBUGDLL_WIN32::KWUtil_win::installDashlaneOnIE_admin_void_]
jmp 0x402b88
mov esi, str.uninstallIE
lea ecx, [ebp + 0x1c]
call fcn.004047f0
test al, al
je 0x4028a1
call dword [sym.imp.KWDebugDll_win32.2.1.2.39075.dll_public:_static_void___cdecl_KWDEBUGDLL_WIN32::KWUtil_win::uninstallDashlaneOnIE_admin_void_]
mov byte [ebp - 4], 0x16
lea esi, [ebp + 0x1c]
call fcn.00402e90
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0x54]
call fcn.00405e50
mov byte [ebp - 4], 0x14
lea esi, [ebp + 0x38]
call fcn.00402e90
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x70]
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x58]
push eax
jmp 0x402bc3
mov dword [ebp - 0x1c], ebx
mov dword [ebp + 0x18], 7
mov dword [ebp + 0x14], ebx
xor ecx, ecx
mov word [ebp + 4], cx
mov byte [ebp - 4], 0x1d
push str.USERNAME
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a768
add esp, 0xc
cmp eax, 0xffffffff
je 0x40290e
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x40290e
lea ecx, [ebp + 0xa8]
call fcn.00402e50
mov byte [ebp - 4], 0x1e
push 0xffffffffffffffff
push ebx
lea ecx, [ebp]
call fcn.00403800
mov byte [ebp - 4], 0x1d
lea esi, [ebp + 0xa8]
call fcn.00402e90
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0040a84e
add esp, 4
mov eax, str.DashlaneMutex
lea ecx, [ebp + 0x8c]
call fcn.00402e50
mov esi, eax
mov byte [ebp - 4], 0x1f
push ebx
lea edx, [ebp]
push edx
or eax, 0xffffffff
call fcn.004032f0
cmp dword [eax + 0x18], 8
jb 0x40293c
mov eax, dword [eax + 4]
jmp 0x40293f
add eax, 4
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x1d
lea esi, [ebp + 0x8c]
call fcn.00402e90
cmp edi, ebx
jne 0x402a2a
cmp dword [0x425468], 8
mov eax, dword [0x425454]
jae 0x402978
mov eax, 0x425454
call fcn.00406c00
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push ebx
push 0x1fe
lea eax, [ebp + 0x2c4]
push eax
push ebx
push esi
push ebx
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp esi, 5
je 0x4029ff
mov eax, 0x425450
call fcn.00402ef0
mov edi, eax
call fcn.00406040
test al, al
je 0x4029ff
mov eax, str.Dashlane_cant_be_launched__please_reboot_your_computer_and_try_again._If_the_problem_persists__try_to_re_install_Dashlane__or_contact_support_dashlane.com.__n
lea ecx, [ebp + 0xa8]
call fcn.00402e50
mov byte [ebp - 4], 0x20
push ebx
push str.Alerte
push eax
lea eax, [ebp + 0x2c4]
call fcn.00402ec0
call fcn.00402ef0
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x1d
lea esi, [ebp + 0xa8]
call fcn.00402e90
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x402a12
push 0x3a98
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0x1b
lea esi, [ebp]
call fcn.00402e90
mov byte [ebp - 4], 0x16
lea esi, [ebp + 0x1c]
jmp 0x4027ba
push 0xc8
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, eax
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x21
push str.server_win
lea ecx, [ebp + 0xa8]
call fcn.004058a0
cmp esi, ebx
je 0x402a66
mov byte [ebp - 4], 0x22
push 1
lea edx, [ebp + 0x1c]
push edx
lea eax, [ebp + 0xa8]
push eax
jmp 0x402a76
mov byte [ebp - 4], 0x23
push ebx
lea ecx, [ebp + 0x1c]
push ecx
lea edx, [ebp + 0xa8]
push edx
call dword [sym.imp.KWApplication.2.1.2.39075.dll_public:_static_void___cdecl_KW_APPLICATION::KWInit::init_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___bool_]
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp + 0xa8]
call fcn.00405e50
call dword [sym.imp.KWApplication.2.1.2.39075.dll_public:_static_bool___cdecl_KW_APPLICATION::KWInit::get_m_onlySignal_final_soNoInitDone_void_]
test al, al
jne 0x402acb
push str.kwift2.cpp
lea ecx, [ebp + 0xa8]
call fcn.004058a0
mov byte [ebp - 4], 0x24
lea eax, [ebp + 0xa8]
push eax
call dword [sym.imp.KWApplication.2.1.2.39075.dll_public:_static_void___cdecl_KW_APPLICATION::KWInit::clean_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp + 0xa8]
call fcn.00405e50
cmp esi, ebx
jne 0x402ad6
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 4], 0x1d
jmp 0x402b69
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x402b7c
push 0x1388
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0x1b
lea esi, [ebp]
call fcn.00402e90
mov byte [ebp - 4], 0x16
lea esi, [ebp + 0x1c]
call fcn.00402e90
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0x54]
call fcn.00405e50
mov byte [ebp - 4], 0x14
lea esi, [ebp + 0x38]
call fcn.00402e90
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x70]
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x58]
push edx
call fcn.00402c00
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4c4]
xor ecx, ebp
call fcn.0040a01f
add ebp, 0x4c8
mov esp, ebp
pop ebp
ret 0x10