Function at 0x10040020
Capabilities:
Create service
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1010d7df
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x1015746c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
call fcn.1001a3c0
mov ecx, eax
test ecx, ecx
je 0x10040d0e
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x244], edi
sub esp, 0x28
mov dword [ebp - 4], 0
mov eax, esp
mov dword [ebp - 0x224], esp
mov dword [eax + 0x24], 0
push 0
push 0
push str.call_start
mov byte [ebp - 4], 1
call fcn.100111f0
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.1000db70
mov dword [ebp - method.mf_bind_t_class_CInstaller__class_CInstaller___void_.virtual_0], vtable.mf_bind_t_class_CInstaller__class_CInstaller___void_.0
mov dword [ebp - 0x228], 0x1003e570
mov dword [ebp - 0x224], ebx
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 2
push eax
call fcn.10049490
add esp, 4
mov byte [ebp - 4], 0
call fcn.10036290
mov esi, eax
call fcn.10036310
mov ecx, eax
call fcn.10036490
mov ecx, dword [esi]
push dword [eax]
push esi
call dword [ecx + 0x24]
push eax
push str.install_type:_d__install_version:_s
call fcn.100384f0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 3
push eax
call fcn.10049490
add esp, 0x10
mov byte [ebp - 4], 0
lea esi, [ebx + 4]
push esi
call fcn.10036310
mov ecx, eax
call fcn.100364a0
push eax
call fcn.1004a950
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 2
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 4
push eax
call fcn.10049490
mov esi, dword [esi]
lea ecx, [ebp - 0x230]
add esp, 0xc
mov byte [ebp - 4], 0
call fcn.1004b0c0
push esi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.1004b6a0
lea ecx, [ebp - 0x230]
call fcn.1004b9b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x230]
call fcn.1004b1d0
push str.remove_all_pending_files
call fcn.100384f0
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 3
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 6
push eax
call fcn.10049490
push str..tmp
push dword [ebx + 4]
lea esi, [ebx + 4]
mov byte [ebp - 4], 0
call fcn.10005290
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 4
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 7
push eax
call fcn.10049490
push dword [esi]
mov byte [ebp - 4], 0
push str.remove_all_.tmp_files_in__s
call fcn.100384f0
push str.update
lea eax, [ebp - 0x238]
push esi
push eax
call fcn.10024b80
push dword [eax]
mov byte [ebp - 4], 8
call fcn.10004940
mov edx, dword [ebp - 0x238]
add esp, 0x2c
mov byte [ebp - 4], 0
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10040296
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.update
lea eax, [ebp - 0x238]
push esi
push eax
call fcn.10024b80
push dword [eax]
mov byte [ebp - 4], 9
push str.Delete_directory_recursively:__s
call fcn.100384f0
mov edx, dword [ebp - 0x238]
add esp, 0x14
mov byte [ebp - 4], 0
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100402dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 5
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xa
push eax
call fcn.10049490
add esp, 4
mov byte [ebp - 4], 0
mov ecx, ebx
call fcn.1003bb30
and eax, 1
mov dword [ebp - 0x238], eax
jne 0x10040342
push 0xf
push str.copy_file_fail
lea ecx, [ebp - 0x244]
call fcn.100184d0
mov edi, dword [ebp - 0x244]
push ecx
mov esi, esp
mov dword [ebp - 0x224], esp
mov dword [ebp - 0x25c], esi
mov eax, dword [ebx + 4]
sub eax, 0x10
push eax
call fcn.100042d0
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov byte [ebp - 4], 0xb
call fcn.10036310
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.10036810
push 4
call fcn.10032a80
mov esi, eax
add esp, 4
test esi, esi
je 0x10040391
mov dword [esi], 0x1003ed00
jmp 0x10040393
xor esi, esi
mov dword [ebp - 0x234], esi
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xc
push eax
call fcn.10052fb4
add esp, 4
test eax, eax
je 0x100403b9
push eax
call fcn.100538e2
add esp, 4
mov eax, dword [ebp - 0x254]
mov byte [ebp - 0x260], 1
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xd
push 1
push eax
call fcn.10052ba0
add esp, 8
test eax, eax
je 0x100403ee
push eax
call fcn.100538e2
add esp, 4
mov eax, dword [ebp - 0x250]
mov byte [ebp - 0x240], 1
mov dword [ebp - 0x23c], eax
push eax
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x24c], 0
call fcn.10052bf3
add esp, 4
test eax, eax
je 0x10040422
push eax
call fcn.100538e2
add esp, 4
mov dword [ebp - 0x258], 0x1012494c
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x248], esi
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x228]
push 0x100413d0
push eax
call fcn.100526e4
add esp, 0xc
mov ecx, 1
cmp eax, 4
cmovne ecx, eax
test ecx, ecx
je 0x10040473
push ecx
call fcn.100538e2
add esp, 4
cmp byte [ebp - 0x24c], 0
jne 0x100404aa
nop dword [eax]
push dword [ebp - 0x250]
push dword [ebp - 0x254]
call fcn.1005300f
add esp, 8
test eax, eax
je 0x100404a1
push eax
call fcn.100538e2
add esp, 4
cmp byte [ebp - 0x24c], 0
je 0x10040480
mov eax, dword [ebp - 0x248]
test eax, eax
je 0x100404bf
push 4
push eax
call fcn.10068449
add esp, 8
mov esi, dword [ebp - 0x250]
mov eax, dword [ebp - 0x254]
push esi
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x23c], eax
call fcn.10052c68
add esp, 4
test eax, eax
je 0x100404eb
push eax
call fcn.100538e2
add esp, 4
push esi
call fcn.10052b5c
push dword [ebp - 0x23c]
call fcn.10052f7d
add esp, 8
mov byte [ebp - 4], 0
cmp dword [ebx + 0x98], 0
jne 0x10040d18
mov eax, dword [ebp - 0x228]
mov dword [ebx + 0x94], eax
mov eax, dword [ebp - 0x224]
mov dword [ebx + 0x98], eax
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0x5d
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x11
push eax
call fcn.10049490
push str.start_call_program
mov byte [ebp - 4], 0
call fcn.100384f0
mov eax, dword [ebx + 4]
add esp, 8
push dword [eax - 0xc]
push eax
call fcn.10036310
mov ecx, eax
call fcn.100364a0
mov ecx, eax
call fcn.10042460
mov eax, dword [ebx + 4]
push dword [eax - 0xc]
push eax
call fcn.10036310
mov ecx, eax
call fcn.100364a0
mov ecx, eax
call fcn.10042c30
push dword [ebx + 4]
call fcn.1004cff0
add esp, 4
mov ecx, ebx
call fcn.10040fd0
test eax, eax
jne 0x100405d5
push 0x14
push str.write_path_reg_fail
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x238], eax
call fcn.100184d0
mov edi, dword [ebp - 0x244]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0x60
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x12
push eax
call fcn.10049490
add esp, 4
mov byte [ebp - 4], 0
call fcn.10025e70
mov ecx, eax
call fcn.1001ca20
neg eax
sbb eax, eax
inc eax
push eax
call fcn.10025e70
mov ecx, eax
call fcn.1001cde0
neg eax
sbb eax, eax
inc eax
push eax
call fcn.10025e70
mov ecx, eax
call fcn.1001cc00
neg eax
sbb eax, eax
inc eax
push eax
call fcn.10025e70
mov ecx, eax
call fcn.1001cb00
neg eax
sbb eax, eax
inc eax
push eax
call fcn.10025e70
mov ecx, eax
call fcn.1001c920
neg eax
sbb eax, eax
inc eax
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x224], esi
mov eax, dword [ebx + 4]
sub eax, 0x10
push eax
call fcn.100042d0
add esp, 4
lea ecx, [ebp - 0x278]
add eax, 0x10
mov dword [esi], eax
call fcn.1004d350
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x13
call fcn.1004de40
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0x61
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x14
push eax
call fcn.10049490
add esp, 4
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.1004d7f0
call fcn.10025e70
mov eax, dword [eax + 0x40]
sub eax, 0x10
push eax
call fcn.100042d0
add esp, 4
add eax, 0x10
mov dword [ebp - 0x234], eax
mov ecx, str.__fromnewinstall
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10040736
test dx, dx
je 0x10040732
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10040736
add eax, 4
add ecx, 4
test dx, dx
jne 0x10040710
xor esi, esi
jmp 0x1004073b
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x234]
or eax, 0xffffffff
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1004075d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x100407c0
push str.Call_SetArParm
call fcn.100384f0
push 0x210
lea eax, [ebp - 0x220]
push esi
push eax
call fcn.10094f30
add esp, 0x10
lea esi, [ebx + 4]
lea eax, [ebp - 0x220]
push str..UtilsArCtrl.dll
push dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x100407c3
push str.SetArParm
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100407c3
push 0
push 1
call eax
jmp 0x100407c3
lea esi, [ebx + 4]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0x62
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x16
push eax
call fcn.10049490
push str.Create_Drivers
mov byte [ebp - 4], 0x13
call fcn.100384f0
push 0x210
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.10094f30
add esp, 0x14
call fcn.1001a3c0
mov ecx, eax
test ecx, ecx
je 0x10040d1d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0x17
call fcn.1001a3c0
mov ecx, eax
test ecx, ecx
je 0x10040d27
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x23c], eax
mov byte [ebp - 4], 0x18
call fcn.1003dd90
test eax, eax
je 0x100408c7
call fcn.1003dc60
test eax, eax
lea eax, [ebp - 0x220]
je 0x1004089e
push str.UtilsHLPrettyDesk64.sys
push dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 8
push str.Pdrv_x64
lea ecx, [ebp - 0x234]
call fcn.10005580
push 0xc
push str.HLPrettyDesk
jmp 0x10040914
push str.UtilsHLPrettyDesk.sys
push dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 8
push str.Pdrv_x86
lea ecx, [ebp - 0x234]
call fcn.10005580
push 0xc
push str.HLPrettyDesk
jmp 0x10040914
call fcn.1003dc60
test eax, eax
lea eax, [ebp - 0x220]
je 0x100408ed
push str.UtilsHdDrv_x64.sys
push dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 8
push str.Pdrv_x64
jmp 0x10040902
push str.UtilsHdDrv.sys
push dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 8
push str.Pdrv_x86
lea ecx, [ebp - 0x234]
call fcn.10005580
push 5
push str.HdDrv
lea ecx, [ebp - 0x23c]
call fcn.10005580
push 2
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov esi, dword [ebp - 0x23c]
mov ecx, eax
mov dword [ebp - 0x25c], ecx
test ecx, ecx
jne 0x10040945
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10040989
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x220]
push eax
push 0
push 1
push 1
push 0xf01ff
push esi
push esi
push ecx
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
test eax, eax
jne 0x10040976
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1004097d
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x25c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x224], eax
test eax, eax
jne 0x100409a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x100409f0
push 0x10
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x25c], eax
test eax, eax
jne 0x100409c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x100409e4
push 0
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x100409d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x25c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x224]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - method.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.virtual_0], vtable.mf_bind_t_1_class_CInstaller__class_CInstaller___void__int_.0
mov dword [ebp - 0x22c], 0x1003e580
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0x63
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x19
push eax
call fcn.10049490
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0x17
or esi, 0xffffffff
add esp, 4
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10040a45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x234]
mov eax, esi
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10040a66
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.10094f30
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
add esp, 0xc
push str.UtilsHaloHelper.exe
push dword [ebx + 4]
push eax
call esi
push str.run_helper
call fcn.100384f0
add esp, 4
lea eax, [ebp - 0x218]
push 0xffffffffffffffff
push 0
push 0
push 1
push 1
push 0x10118b70
push eax
call fcn.10035580
push str.install_end.
call fcn.100384f0
mov eax, dword [ebp - 0x238]
mov dword [ebp - method.mf_bind_t_2_class_CInstaller__class_CInstaller___void__int__wchar_t_const__.virtual_0], vtable.mf_bind_t_2_class_CInstaller__class_CInstaller___void__int__wchar_t_const__.0
mov dword [ebp - 0x254], 0x1003e550
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], edi
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 0x1a
push eax
call fcn.10049490
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, ebx
push str.kismain.exe
push 0
push 0x10124650
push str.SOFTWAREkingsoftkwspriEx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push eax
push 1
push str.UninstallString
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallHuorongSysdiag
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push str.LenovoPcManager.exe
push eax
push str.LenovoInstallPath
push str.SoftwareLenovoPcManager
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push str.QQPCMgr.exe
push eax
push str.InstallDir
push str.SoftwareTencentQQPCMgr
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push eax
push eax
push str.DisplayIcon
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push eax
push eax
push str.DisplayIcon
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360SD
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push eax
push eax
push str.UninstallString
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall2345PCSafe
push reloc.OLEAUT32.dll_SysReAllocString
mov ecx, ebx
call fcn.1003c920
test eax, eax
jne 0x10040c4d
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.10094f30
add esp, 0xc
lea eax, [ebp - 0x218]
push str.lpiHaloSvc.dll
push dword [ebx + 4]
push eax
call esi
push 0
push 0x10118b70
lea eax, [ebp - 0x218]
push 0x10124634
push eax
call fcn.10013a20
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x224], esp
mov dword [eax + 0x24], 0
push 0
push 0
mov byte [ebp - 4], 0x1b
push 0x101240dc
jmp 0x10040c6c
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x224], esp
mov dword [eax + 0x24], 0
push 0
push 0
mov byte [ebp - 4], 0x1c
push str.nosvc
call fcn.100111f0
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.1000db70
push str.real_install_end.
call fcn.100384f0
lea esi, [ebx + 0x78]
mov dword [ebp - method._BaseModule::CAutoLocker.virtual_0], vtable._BaseModule::CAutoLocker.0
add esp, 4
mov dword [ebp - 0x224], esi
test esi, esi
je 0x10040ca5
mov eax, dword [esi]
push esi
call dword [eax]
mov ecx, dword [ebx + 0x68]
mov byte [ebp - 4], 0x1d
test ecx, ecx
je 0x10040cb6
mov eax, dword [ecx]
push ecx
call dword [eax + 0x14]
mov byte [ebp - 4], 0x1e
test esi, esi
je 0x10040cc4
mov eax, dword [esi]
push esi
call dword [eax + 4]
lea ecx, [ebp - 0x278]
call fcn.1004d530
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x10040cee
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10068438
mov esp, ebp
pop ebp
ret 8
push 0x80004005
call fcn.10004170
call fcn.100c3213
push 0x80004005
call fcn.10004170
push 0x80004005
call fcn.10004170
int3