Function at 0x4f1030
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59d4ce
mov eax, dword fs:[0]
push eax
sub esp, 0x340
mov eax, dword [0x62d12c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x34c], eax
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 4], ebx
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x158], ebx
mov byte [ebp - 0x168], bl
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 2
lea esi, [ebx + 0x10]
cmp eax, 0xd
ja case.default.0x4f10a8
jmp dword [eax*4 + 0x4f2340]
push 0x20019
push ebx
push str.CLSID1434DD3D_0AF6_41E0_BB71_8C86010D9AF5LocalServer32
push SysReAllocStringLen
lea ecx, [ebp - 0x340]
call fcn.004e4a10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x168]
push ecx
push ebx
lea ecx, [ebp - 0x340]
call fcn.004e4c30
cmp dword [ebp - 0x158], ebx
je 0x4f1c2b
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
cmp al, bl
je 0x4f1c2b
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 2
call fcn.004e4860
call fcn.004e5dd0
test eax, eax
je 0x4f2201
lea edx, [ebp - 0x344]
push edx
call fcn.004e5e10
mov eax, dword [ebp - 0x14c]
add esp, 4
cmp dword [ebp - 0x138], esi
jae 0x4f115a
lea eax, [ebp - 0x14c]
mov ecx, dword [ebp - 0x34c]
push ecx
push eax
call fcn.004ea9a0
mov edx, dword [ebp - 0x344]
push edx
mov byte [ebp - 0x32d], al
call fcn.004e5e40
add esp, 0xc
jmp 0x4f222b
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 5
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionAppLoader
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 6
call fcn.004e4ac0
test al, al
je 0x4f129c
lea ecx, [ebp - 0x130]
push ecx
push str.Path
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f129c
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x11c], esi
jae 0x4f120f
lea eax, [ebp - 0x130]
push ebx
push str.rimprogram.dll
push eax
lea edx, [ebp - 0x214]
push edx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 7
call fcn.0041fd30
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 6
call fcn.00421b10
lea eax, [ebp - 0x14c]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x344], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x340]
cmp al, bl
je 0x4f12a6
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 2
call fcn.00421b10
jmp case.default.0x4f10a8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x340]
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x184]
call fcn.00421b10
jmp 0x4f1c3a
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 9
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionAppLoader
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0xa
call fcn.004e4ac0
test al, al
je 0x4f13c6
lea eax, [ebp - 0x130]
push eax
push str.Path
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f13c6
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x11c], esi
jae 0x4f1354
lea eax, [ebp - 0x130]
push ebx
push str.Loader.exe
push eax
lea ecx, [ebp - 0x2bc]
push ecx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xb
call fcn.0041fd30
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0xa
call fcn.00421b10
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x340]
cmp al, bl
jne 0x4f1278
jmp 0x4f12a6
mov byte [ebp - 4], 9
jmp 0x4f12a0
push 0x20019
push ebx
push str.CLSIDBA3D0120_E617_4F66_ADCA_585CC2FB86DBLocalServer32
push SysReAllocStringLen
lea ecx, [ebp - 0x340]
call fcn.004e4a10
mov byte [ebp - 4], 0xc
jmp 0x4f10ce
mov dword [ebp - 0x1e4], edi
mov dword [ebp - 0x1e8], ebx
mov byte [ebp - 0x1f8], bl
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1cc], ebx
mov byte [ebp - 0x1dc], bl
mov byte [ebp - 0x1c0], bl
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x344], esp
push 0x5e8923
mov byte [ebp - 4], 0xd
call fcn.00422280
lea ecx, [ebp - 0x1f8]
push ecx
push 3
call fcn.004f1030
add esp, 0x24
cmp al, bl
je 0x4f152e
lea edx, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x1a0]
call fcn.0040f1c0
push 1
push 1
push 0xffffffffffffffff
push 0x5c0144
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0xe
call fcn.004e69e0
dec eax
push eax
push 0x5c0144
lea ecx, [ebp - 0x1a0]
call fcn.004e69e0
push eax
push ebx
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00433ad0
push eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0xf
call fcn.0041fd30
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0xe
call fcn.00421b10
push 0x18
push str.BBBI_Drivers_tablet.dll
lea ecx, [ebp - 0x168]
call fcn.00416b30
cmp dword [ebp - 0x158], ebx
je 0x4f1523
lea ecx, [ebp - 0x14c]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x344], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
cmp al, bl
je 0x4f1523
lea ecx, [ebp - 0x1a0]
call fcn.00421b10
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
call fcn.0044bd50
jmp case.default.0x4f10a8
lea ecx, [ebp - 0x1a0]
call fcn.00421b10
lea ecx, [ebp - 0x1f8]
call fcn.0044bd50
jmp 0x4f1c3a
push 0x104
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x4f1c3a
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x1a0]
call fcn.00422280
mov byte [ebp - 4], 0x10
call fcn.004e5dd0
test eax, eax
je 0x4f15d2
lea edx, [ebp - 0x344]
push edx
call fcn.004e5e10
add esp, 4
push 0x25
push str._system32driversRimSerial_AMD64.sys
lea ecx, [ebp - 0x1a0]
call fcn.00416b30
lea eax, [ebp - 0x14c]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x1a0]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
mov byte [ebp - 0x32d], al
mov eax, dword [ebp - 0x344]
push eax
call fcn.004e5e40
add esp, 0x24
jmp 0x4f1610
push 0x1f
push str._system32driversRimSerial.sys
lea ecx, [ebp - 0x1a0]
call fcn.00416b30
lea ecx, [ebp - 0x14c]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x1a0]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
mov byte [ebp - 0x32d], al
lea ecx, [ebp - 0x1a0]
cmp byte [ebp - 0x32d], bl
je 0x4f12bc
mov byte [ebp - 4], 2
call fcn.00421b10
jmp case.default.0x4f10a8
push 0x104
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x4f1c3a
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x184]
call fcn.00422280
mov byte [ebp - 4], 0x11
call fcn.004e5dd0
test eax, eax
je 0x4f16c4
lea edx, [ebp - 0x344]
push edx
call fcn.004e5e10
add esp, 4
push 0x22
push str._system32driversRimUsb_AMD64.sys
lea ecx, [ebp - 0x184]
call fcn.00416b30
lea eax, [ebp - 0x14c]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
mov byte [ebp - 0x32d], al
mov eax, dword [ebp - 0x344]
push eax
call fcn.004e5e40
add esp, 0x24
jmp 0x4f1702
push 0x1c
push str._system32driversRimUsb.sys
lea ecx, [ebp - 0x184]
call fcn.00416b30
lea ecx, [ebp - 0x14c]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
mov byte [ebp - 0x32d], al
cmp byte [ebp - 0x32d], bl
jne 0x4f18ab
push 0x20019
push ebx
push str.CLSIDBA3D0120_E617_4F66_ADCA_585CC2FB86DBLocalServer32
push SysReAllocStringLen
lea ecx, [ebp - 0x340]
call fcn.004e4a10
lea eax, [ebp - 0x168]
push eax
push ebx
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x12
call fcn.004e4c30
cmp dword [ebp - 0x158], ebx
je 0x4f186d
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x190], ebx
mov byte [ebp - 0x1a0], bl
mov eax, dword [ebp - 0x168]
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x154], esi
jae 0x4f1788
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0x1a0]
push ecx
lea edx, [ebp - 0x130]
push edx
push eax
call fcn.004eee50
add esp, 0xc
call fcn.004e5dd0
test eax, eax
mov eax, dword [ebp - 0x130]
je 0x4f17ea
cmp dword [ebp - 0x11c], esi
jae 0x4f17bc
lea eax, [ebp - 0x130]
push ebx
push str.RimUsb_AMD64.sys
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x15
call fcn.0041fd30
lea ecx, [ebp - 0x2d8]
jmp 0x4f1824
cmp dword [ebp - 0x11c], esi
jae 0x4f17f8
lea eax, [ebp - 0x130]
push ebx
push str.RimUsb.sys
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x16
call fcn.0041fd30
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x14
call fcn.00421b10
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x348], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
lea ecx, [ebp - 0x1a0]
cmp al, bl
jne 0x4f188c
call fcn.00421b10
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x11
call fcn.004e4860
lea ecx, [ebp - 0x184]
call fcn.00421b10
jmp 0x4f1c3a
call fcn.00421b10
lea ecx, [ebp - 0x130]
call fcn.00421b10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x340]
call fcn.004e4860
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 2
call fcn.00421b10
jmp case.default.0x4f10a8
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x17
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionBlackBerryManager
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x18
call fcn.004e4ac0
test al, al
je 0x4f196c
lea ecx, [ebp - 0x184]
push ecx
push str.ImagePath
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f196c
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x348], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
mov byte [ebp - 4], 0x17
add esp, 0x20
lea ecx, [ebp - 0x340]
cmp al, bl
jne 0x4f18a6
call fcn.004e4860
lea ecx, [ebp - 0x184]
call fcn.00421b10
jmp 0x4f1c3a
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x17
call fcn.004e4860
lea ecx, [ebp - 0x184]
call fcn.00421b10
jmp 0x4f1c3a
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x19
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionBlackBerryManager
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x1a
call fcn.004e4ac0
test al, al
je 0x4f1af2
lea ecx, [ebp - 0x130]
push ecx
push str.ImagePath
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f1af2
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x130]
mov ecx, esp
mov dword [ebp - 0x348], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
cmp al, bl
je 0x4f1af2
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1ac], ebx
mov byte [ebp - 0x1bc], bl
mov eax, dword [ebp - 0x14c]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x138], esi
jae 0x4f1a5d
lea eax, [ebp - 0x14c]
lea ecx, [ebp - 0x1bc]
push ecx
lea edx, [ebp - 0x184]
push edx
push eax
call fcn.004eee50
mov eax, dword [ebp - 0x184]
add esp, 0xc
cmp dword [ebp - 0x170], esi
jae 0x4f1a88
lea eax, [ebp - 0x184]
push ebx
push str.MailServer.dll
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x1d
call fcn.0041fd30
lea ecx, [ebp - 0x230]
call fcn.00421b10
lea ecx, [ebp - 0x1bc]
call fcn.00421b10
lea ecx, [ebp - 0x184]
call fcn.00421b10
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x19
call fcn.004e4860
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.00421b10
jmp case.default.0x4f10a8
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x19
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
jmp 0x4f1c3a
push 0x20019
push ebx
push str.CLSID1434DD3D_0AF6_41E0_BB71_8C86010D9AF5LocalServer32
push SysReAllocStringLen
lea ecx, [ebp - 0x340]
call fcn.004e4a10
lea ecx, [ebp - 0x168]
push ecx
push ebx
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x1e
call fcn.004e4c30
cmp dword [ebp - 0x158], ebx
je 0x4f1c2b
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x190], ebx
mov byte [ebp - 0x1a0], bl
mov eax, dword [ebp - 0x168]
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x154], esi
jae 0x4f1b8b
lea eax, [ebp - 0x168]
lea edx, [ebp - 0x1a0]
push edx
lea ecx, [ebp - 0x130]
push ecx
push eax
call fcn.004eee50
mov eax, dword [ebp - 0x130]
add esp, 0xc
cmp dword [ebp - 0x11c], esi
jae 0x4f1bb6
lea eax, [ebp - 0x130]
push ebx
push str.rim_serial.dll
push eax
lea edx, [ebp - 0x2f4]
push edx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x21
call fcn.0041fd30
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 0x20
call fcn.00421b10
lea eax, [ebp - 0x14c]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x168]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
lea ecx, [ebp - 0x1a0]
cmp al, bl
jne 0x4f1c5f
call fcn.00421b10
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 2
call fcn.004e4860
lea ecx, [ebp - 0x14c]
call fcn.00421b10
lea ecx, [ebp - 0x168]
call fcn.00421b10
lea ecx, [ebp + 0x10]
call fcn.00421b10
xor al, al
jmp 0x4f2322
call fcn.00421b10
lea ecx, [ebp - 0x130]
call fcn.00421b10
jmp 0x4f111b
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x22
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionBlackBerryRedirector
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x23
call fcn.004e4ac0
test al, al
je 0x4f1d00
lea eax, [ebp - 0x184]
push eax
push str.ImagePath
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f1d00
lea ecx, [ebp - 0x14c]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
mov byte [ebp - 4], 0x22
jmp 0x4f1946
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x22
call fcn.004e4860
lea ecx, [ebp - 0x184]
call fcn.00421b10
jmp 0x4f1c3a
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x190], ebx
mov byte [ebp - 0x1a0], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x25
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionAppLoader
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x26
call fcn.004e4ac0
test al, al
je 0x4f1ed6
lea eax, [ebp - 0x1a0]
push eax
push str.Path
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f1ed6
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00421c90
mov esi, dword [ebp - 0x120]
dec esi
push esi
lea ecx, [ebp - 0x130]
call fcn.004d3cd0
cmp byte [eax], 0x5c
jne 0x4f1df5
push esi
push ebx
lea edx, [ebp - 0x32c]
push edx
lea ecx, [ebp - 0x130]
call fcn.00433ad0
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x27
call fcn.0041fd30
lea ecx, [ebp - 0x32c]
call fcn.00421b10
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1ac], ebx
mov byte [ebp - 0x1bc], bl
mov eax, dword [ebp - 0x130]
mov esi, 0x10
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x11c], esi
jae 0x4f1e36
lea eax, [ebp - 0x130]
lea ecx, [ebp - 0x1bc]
push ecx
lea edx, [ebp - 0x184]
push edx
push eax
call fcn.004eee50
mov eax, dword [ebp - 0x184]
add esp, 0xc
cmp dword [ebp - 0x170], esi
jae 0x4f1e61
lea eax, [ebp - 0x184]
push ebx
push str.BBBI_DriversVBBVBBClientCommForWM.dll
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x2a
call fcn.0041fd30
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x29
call fcn.00421b10
lea ecx, [ebp - 0x14c]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x130]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
lea ecx, [ebp - 0x1bc]
cmp al, bl
jne 0x4f1f00
call fcn.00421b10
lea ecx, [ebp - 0x184]
call fcn.00421b10
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x25
call fcn.004e4860
lea ecx, [ebp - 0x1a0]
call fcn.00421b10
lea ecx, [ebp - 0x130]
call fcn.00421b10
jmp 0x4f1c3a
call fcn.00421b10
lea ecx, [ebp - 0x184]
call fcn.00421b10
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x25
call fcn.004e4860
lea ecx, [ebp - 0x1a0]
call fcn.00421b10
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.00421b10
mov esi, 0x10
jmp case.default.0x4f10a8
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x190], ebx
mov byte [ebp - 0x1a0], bl
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x2c
call fcn.004e4830
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsMediaManager9.exe
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x2d
call fcn.004e4ac0
test al, al
je 0x4f205e
lea eax, [ebp - 0x130]
push eax
push str.EXEPath
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f205e
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x11c], esi
jae 0x4f1fd1
lea eax, [ebp - 0x130]
push ebx
push str.MediaManager9.exe
push eax
lea ecx, [ebp - 0x284]
push ecx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x2e
call fcn.0041fd30
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], 0x2d
call fcn.00421b10
lea edx, [ebp - 0x14c]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x1a0]
mov ecx, esp
mov dword [ebp - 0x348], esp
push eax
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x340]
cmp al, bl
je 0x4f2068
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 2
call fcn.00421b10
jmp case.default.0x4f10a8
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x340]
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x1a0]
call fcn.00421b10
jmp 0x4f1c3a
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x30
call fcn.004e4830
push 0x20019
push ebx
push str.SoftwareResearch_In_MotionAppLoader
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x31
call fcn.004e4ac0
test al, al
je 0x4f21f8
lea ecx, [ebp - 0x130]
push ecx
push str.Path
lea ecx, [ebp - 0x340]
call fcn.004e4c30
test al, al
je 0x4f21f8
mov eax, dword [ebp - 0x130]
mov esi, 0x10
cmp dword [ebp - 0x11c], esi
jae 0x4f211b
lea eax, [ebp - 0x130]
push ebx
push str.Vendor.xml
push eax
lea edx, [ebp - 0x268]
push edx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x32
call fcn.0041fd30
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x31
call fcn.00421b10
lea eax, [ebp - 0x14c]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x184]
mov ecx, esp
mov dword [ebp - 0x348], esp
push edx
call fcn.0040f1c0
call fcn.004f0400
add esp, 0x20
cmp al, bl
je 0x4f21f8
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x138], esi
jae 0x4f218e
lea eax, [ebp - 0x14c]
mov ecx, dword [ebp - 0x34c]
push ecx
push 0x5d7764
push str.vendorsrc
push eax
call fcn.004ecc60
add esp, 0x10
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x340]
test al, al
je 0x4f12a6
call fcn.004e4860
lea ecx, [ebp - 0x130]
call fcn.00421b10
lea ecx, [ebp - 0x184]
call fcn.00421b10
lea ecx, [ebp - 0x14c]
call fcn.00421b10
lea ecx, [ebp - 0x168]
call fcn.00421b10
lea ecx, [ebp + 0x10]
call fcn.00421b10
jmp 0x4f2320
mov byte [ebp - 4], 0x30
jmp 0x4f12a0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x138], esi
jae 0x4f2215
lea eax, [ebp - 0x14c]
mov ecx, dword [ebp - 0x34c]
push ecx
push eax
call fcn.004ea9a0
add esp, 8
mov byte [ebp - 0x32d], al
cmp byte [ebp - 0x32d], bl
jne 0x4f22bd
mov ecx, dword [ebp - 0x34c]
push 0xffffffffffffffff
push ebx
lea edx, [ebp + 0x10]
push edx
call fcn.00421c90
mov eax, dword [ebp - 0x34c]
mov byte [eax + 0x38], bl
cmp dword [ebp - 0x138], esi
jb 0x4f2269
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
cmp dword [ebp - 0x154], esi
jb 0x4f2292
mov edx, dword [ebp - 0x168]
push edx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x158], ebx
mov byte [ebp - 0x168], bl
cmp dword [ebp + 0x24], esi
jb 0x4f1c58
mov eax, dword [ebp + 0x10]
push eax
call fcn.00558723
add esp, 4
xor al, al
jmp 0x4f2322
cmp dword [ebp - 0x138], esi
jb 0x4f22d4
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
cmp dword [ebp - 0x154], esi
jb 0x4f22fd
mov edx, dword [ebp - 0x168]
push edx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x158], ebx
mov byte [ebp - 0x168], bl
cmp dword [ebp + 0x24], esi
jb 0x4f2320
mov eax, dword [ebp + 0x10]
push eax
call fcn.00558723
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00558b78
mov esp, ebp
pop ebp
ret