Function at 0x406cae
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x90
mov eax, dword [0x6f4e3c]
xor eax, ebp
mov dword [esp + 0x88], eax
cmp byte [0x770939], 0
je 0x406cdf
mov bl, byte [0x770938]
jmp 0x406e0c
mov byte [0x770939], 1
xor eax, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], eax
call fcn.004175be
lea edi, [esp + 0x58]
mov ecx, eax
push edi
call fcn.004181aa
movzx eax, byte [edi + 0xb]
mov edx, eax
test al, al
jns 0x406d22
mov edx, dword [esp + 0x5c]
test edx, edx
je 0x406dd1
test al, al
jns 0x406d32
mov edi, dword [esp + 0x58]
lea esi, [esp + 0x48]
mov ecx, esi
push edx
push edi
call fcn.0046ed80
push esi
call fcn.00482720
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.0046ee40
test bl, bl
je 0x406dcd
lea eax, [esp + 0x58]
lea esi, [esp + 0x48]
mov ecx, esi
mov dword [esp + 0xc], eax
push eax
call fcn.00468aa8
movzx ecx, byte [esi + 0xb]
mov eax, ecx
test cl, cl
jns 0x406d77
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x406db5
mov eax, esi
test cl, cl
jns 0x406d85
mov eax, dword [esp + 0x48]
movzx ecx, word [eax]
lea edx, [ecx - 0x41]
lea edi, [ecx + 0x20]
cmp dx, 0x1a
cmovae edi, ecx
mov word [eax], di
add eax, 2
movzx ecx, byte [esp + 0x53]
mov edx, esi
test cl, cl
jns 0x406dae
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
lea ecx, [edx + ecx*2]
cmp eax, ecx
jne 0x406d85
cmp byte [esp + 0x63], 0
js 0x406e27
mov word [esp + 0x58], 0
mov byte [esp + 0x63], 0
jmp 0x406e53
mov al, byte [esp + 0x63]
test al, al
jns 0x406de1
push dword [esp + 0x58]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x406df4
push dword [esp + 0x68]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x83], 0
jns 0x406e0a
push dword [esp + 0x78]
call fcn.00517bd6
add esp, 4
xor ebx, ebx
and bl, 1
mov ecx, dword [esp + 0x88]
xor ecx, ebp
call fcn.00517c1a
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x58]
mov word [eax], 0
mov dword [esp + 0x5c], 0
cmp byte [esp + 0x63], 0
jns 0x406e53
push dword [esp + 0x58]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], eax
movsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x58], xmm0
xor ebx, ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], ebx
lea esi, [esp + 0x3c]
mov ecx, esi
push str.360ChromeURL_shellopencommand
call fcn.00401a6c
cmp byte [esi + 0xb], 0
jns 0x406e8f
mov esi, dword [esp + 0x3c]
lea edi, [esp + 0x30]
mov ecx, edi
push 0x20019
push esi
push SysReAllocStringLen
call fcn.00485170
cmp dword [edi], ebx
je 0x407476
lea esi, [esp + 0x48]
lea ecx, [esp + 0x30]
push esi
push 0x6390a0
call fcn.00485a20
mov dword [esp + 8], esi
movzx eax, byte [esi + 0xb]
test al, al
jns 0x406ed0
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x406f37
lea ecx, [esp + 0x24]
lea esi, [esp + 0x48]
mov edx, esi
call fcn.004074ea
cmp byte [esi + 0xb], 0
js 0x406ef7
mov word [esp + 0x48], 0
mov byte [esp + 0x53], 0
jmp 0x406f23
mov eax, dword [esp + 0x48]
mov word [eax], 0
mov dword [esp + 0x4c], 0
cmp byte [esp + 0x53], 0
jns 0x406f23
push dword [esp + 0x48]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x50], eax
movsd xmm0, qword [esp + 0x24]
movsd qword [esp + 0x48], xmm0
lea esi, [esp + 0x24]
mov ecx, esi
lea eax, [esp + 0x48]
push eax
call fcn.00468aa8
movzx ecx, byte [esi + 0xb]
mov eax, ecx
test cl, cl
jns 0x406f55
mov eax, dword [esp + 0x28]
test eax, eax
je 0x406f93
mov eax, esi
test cl, cl
jns 0x406f63
mov eax, dword [esp + 0x24]
movzx ecx, word [eax]
lea edx, [ecx - 0x41]
lea ebx, [ecx + 0x20]
cmp dx, 0x1a
cmovae ebx, ecx
mov word [eax], bx
add eax, 2
movzx ecx, byte [esp + 0x2f]
mov edx, esi
test cl, cl
jns 0x406f8c
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea ecx, [edx + ecx*2]
cmp eax, ecx
jne 0x406f63
cmp byte [esp + 0x53], 0
js 0x406fa8
mov word [esp + 0x48], 0
mov byte [esp + 0x53], 0
jmp 0x406fd4
mov eax, dword [esp + 0x48]
mov word [eax], 0
mov dword [esp + 0x4c], 0
cmp byte [esp + 0x53], 0
jns 0x406fd4
push dword [esp + 0x48]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x50], eax
movsd xmm0, qword [esp + 0x24]
movsd qword [esp + 0x48], xmm0
movzx eax, byte [esp + 0x63]
movzx ecx, byte [esp + 0x53]
test al, al
cmovs eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
lea edx, [esp + 0x58]
cmovns esi, edx
mov dword [esp + 4], esi
test cl, cl
jns 0x407014
mov edx, dword [esp + 0x48]
mov dword [esp + 8], edx
test eax, eax
je 0x4070ab
test cl, cl
jns 0x407024
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
jl 0x407476
mov esi, dword [esp + 8]
lea edx, [esi + ecx*2]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 4]
movzx edi, word [edx]
mov ebx, dword [esp + 4]
mov edx, ecx
sub edx, eax
inc edx
je 0x407476
inc ecx
cmp word [esi], di
je 0x407060
add esi, 2
dec ecx
cmp eax, ecx
jne 0x40704e
jmp 0x407476
mov word [esp + 0x16], di
xor edx, edx
inc edx
cmp eax, edx
je 0x407094
movzx ecx, word [esi + edx*2]
lea edi, [edx + 1]
cmp cx, word [ebx + edx*2]
mov edx, edi
je 0x407068
add esi, 2
mov ecx, dword [esp + 0x10]
sub ecx, esi
sar ecx, 1
cmp ecx, eax
movzx edi, word [esp + 0x16]
jge 0x407042
jmp 0x407476
cmp dword [esp + 0x10], esi
je 0x407476
sub esi, dword [esp + 8]
cmp esi, 0xfffffffe
je 0x407476
lea ecx, [esp + 0x24]
call fcn.00485150
call fcn.00488190
lea ecx, [esp + 0x24]
cmp eax, 3
jl 0x407169
push 0x20019
push str.SoftwareMicrosoftWindowsShellAssociationsUrlAssociationshttpUserChoice
push SysReAllocStringLen
call fcn.004852c0
test eax, eax
jne 0x40746d
lea edi, [esp + 0x68]
lea ecx, [esp + 0x24]
push edi
push str.Progid
call fcn.00485a20
lea esi, [esp + 0x18]
mov ecx, esi
push edi
call fcn.00468aa8
movzx ecx, byte [esi + 0xb]
mov eax, ecx
test cl, cl
jns 0x40710f
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x40714d
mov eax, esi
test cl, cl
jns 0x40711d
mov eax, dword [esp + 0x18]
movzx ecx, word [eax]
lea edx, [ecx - 0x41]
lea ebx, [ecx + 0x20]
cmp dx, 0x1a
cmovae ebx, ecx
mov word [eax], bx
add eax, 2
movzx ecx, byte [esp + 0x23]
mov edx, esi
test cl, cl
jns 0x407146
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea ecx, [edx + ecx*2]
cmp eax, ecx
jne 0x40711d
cmp byte [esp + 0x73], 0
js 0x4071d9
mov word [esp + 0x68], 0
mov byte [esp + 0x73], 0
jmp 0x407205
push 0x20019
push str.SoftwareClasseshttp_shellopencommand
push SysReAllocStringLen
call fcn.004852c0
test eax, eax
jne 0x40746d
lea edi, [esp + 0x78]
lea ecx, [esp + 0x24]
push edi
push 0x6390a0
call fcn.00485a20
movzx eax, byte [edi + 0xb]
test al, al
jns 0x4071a4
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4072e8
lea ecx, [esp + 0x18]
lea esi, [esp + 0x78]
mov edx, esi
call fcn.004074ea
cmp byte [esi + 0xb], 0
js 0x40729f
mov word [esp + 0x78], 0
mov byte [esp + 0x83], 0
jmp 0x4072d1
mov eax, dword [esp + 0x68]
mov word [eax], 0
mov dword [esp + 0x6c], 0
cmp byte [esp + 0x73], 0
jns 0x407205
push dword [esp + 0x68]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x70], eax
movsd xmm0, qword [esp + 0x18]
movsd qword [esp + 0x68], xmm0
movzx eax, byte [esp + 0x73]
test al, al
jns 0x40722a
mov edi, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
cmp eax, 0xc
jl 0x40746d
lea ecx, [edi + eax*2]
mov dword [esp + 4], ecx
mov ebx, eax
mov edx, edi
add ebx, 0xfffffff5
je 0x40746d
mov esi, edi
sub esi, edx
add edx, 2
cmp word [edx - 2], 0x33
je 0x407263
add edx, 2
add esi, 0xfffffffe
dec ebx
jne 0x40724e
jmp 0x40746d
mov dword [esp + 0xc], edi
mov ebx, 0xffffffea
test ebx, ebx
je 0x40744b
movzx ecx, word [edx + ebx + 0x16]
lea edi, [ebx + 2]
cmp cx, word [ebx + 0x639ec6]
mov ebx, edi
je 0x40726c
mov ecx, dword [esp + 4]
sub ecx, edx
mov ebx, ecx
sar ebx, 1
cmp ecx, 0x18
mov edi, dword [esp + 0xc]
jge 0x40723e
jmp 0x40746d
mov eax, dword [esp + 0x78]
mov word [eax], 0
mov dword [esp + 0x7c], 0
cmp byte [esp + 0x83], 0
jns 0x4072d1
push dword [esp + 0x78]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x80], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x80], eax
movsd xmm0, qword [esp + 0x18]
movsd qword [esp + 0x78], xmm0
lea esi, [esp + 0x18]
mov ecx, esi
mov dword [esp + 4], edi
push edi
call fcn.00468aa8
movzx ecx, byte [esi + 0xb]
mov eax, ecx
test cl, cl
jns 0x407306
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x407344
mov eax, esi
test cl, cl
jns 0x407314
mov eax, dword [esp + 0x18]
movzx ecx, word [eax]
lea edx, [ecx - 0x41]
lea ebx, [ecx + 0x20]
cmp dx, 0x1a
cmovae ebx, ecx
mov word [eax], bx
add eax, 2
movzx ecx, byte [esp + 0x23]
mov edx, esi
test cl, cl
jns 0x40733d
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea ecx, [edx + ecx*2]
cmp eax, ecx
jne 0x407314
cmp byte [esp + 0x83], 0
js 0x40735f
mov word [esp + 0x78], 0
mov byte [esp + 0x83], 0
jmp 0x407391
mov eax, dword [esp + 0x78]
mov word [eax], 0
mov dword [esp + 0x7c], 0
cmp byte [esp + 0x83], 0
jns 0x407391
push dword [esp + 0x78]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x80], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x80], eax
movsd xmm0, qword [esp + 0x18]
movsd qword [esp + 0x78], xmm0
movzx eax, byte [esp + 0x63]
movzx ebx, byte [esp + 0x83]
test al, al
cmovs eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xc]
cmovs ecx, dword [esp + 0x58]
mov dword [esp + 0xc], ecx
test bl, bl
jns 0x4073d5
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
test eax, eax
je 0x407466
test bl, bl
jns 0x4073e5
mov ebx, dword [esp + 0x7c]
cmp ebx, eax
jl 0x40746d
mov edx, dword [esp + 4]
lea ecx, [edx + ebx*2]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xc]
movzx esi, word [ecx]
mov ecx, ebx
sub ecx, eax
inc ecx
je 0x40746d
inc ebx
cmp word [edx], si
je 0x407416
add edx, 2
dec ebx
cmp eax, ebx
jne 0x407407
jmp 0x40746d
mov word [esp + 0x10], si
xor ecx, ecx
inc ecx
cmp eax, ecx
je 0x407457
movzx ebx, word [edx + ecx*2]
lea edi, [ecx + 1]
mov esi, dword [esp + 0xc]
cmp bx, word [esi + ecx*2]
mov ecx, edi
je 0x40741e
add edx, 2
mov ebx, dword [esp + 8]
sub ebx, edx
sar ebx, 1
cmp ebx, eax
movzx esi, word [esp + 0x10]
jge 0x4073ff
jmp 0x40746d
add eax, eax
add eax, esi
je 0x40746d
test esi, esi
je 0x407466
jmp 0x40746d
cmp dword [esp + 8], edx
je 0x40746d
sub edx, dword [esp + 4]
cmp edx, 0xfffffffe
je 0x40746d
mov byte [0x770938], 1
lea ecx, [esp + 0x24]
call fcn.00485370
lea ecx, [esp + 0x30]
call fcn.00485370
cmp byte [esp + 0x47], 0
jns 0x407492
push dword [esp + 0x3c]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x53], 0
jns 0x4074a5
push dword [esp + 0x48]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4074b8
push dword [esp + 0x58]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x4074cb
push dword [esp + 0x68]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x83], 0
jns 0x406cd4
push dword [esp + 0x78]
call fcn.00517bd6
add esp, 4
jmp 0x406cd4