Function at 0x409ef0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x494
mov eax, dword [0x4d9018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
test edi, edi
jne 0x409f27
cmp dword [0x4dd118], edi
je 0x409f27
lea eax, [edi + 1]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044518e
mov esp, ebp
pop ebp
ret
push ebx
push 2
push 0
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x494], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
lea eax, [ebp - 0x478]
push eax
push 0x4b9f80
push 1
push 0
push 0x4b9f70
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
test eax, eax
jns 0x40a106
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push 0x50
mov dword [ebp - 0x470], eax
call fcn.00445142
movups xmm0, xmmword [str.defender_RegestToDefender:_CoCreateInstance_WSCProductList_error__ret:]
mov ecx, eax
mov dword [ebp - 0x41c], 0x46
mov dword [ebp - 0x418], 0x4f
add esp, 4
movups xmmword [ecx], xmm0
push 1
movups xmm0, xmmword [0x4b9fa0]
push 0x4b941c
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x4b9fb0]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x4b9fc0]
movups xmmword [ecx + 0x30], xmm0
mov eax, dword [0x4b9fd0]
mov dword [ecx + 0x40], eax
mov ax, word [0x4b9fd4]
mov word [ecx + 0x44], ax
mov byte [ecx + 0x46], 0
mov dword [ebp - 0x42c], ecx
lea ecx, [ebp - 0x42c]
call fcn.00405d50
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00406ec0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40a02b
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00405d50
mov edx, dword [ebp - 0x430]
cmp edx, 0x10
jb 0x40a072
mov ecx, dword [ebp - 0x444]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a068
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af48
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x418], 0x10
lea esi, [ebp - 0x42c]
mov edi, dword [ebp - 0x41c]
cmovae esi, dword [ebp - 0x42c]
push 0x4b93f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x40a0c3
push str.writeLog
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40a0c3
push edi
push esi
push str.RegestToDefender
push 0x119
push str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
push 2
call eax
add esp, 0x18
mov edx, dword [ebp - 0x418]
cmp edx, 0x10
jb 0x40a6ba
mov ecx, dword [ebp - 0x42c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a0f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
jmp 0x40a6ba
mov eax, dword [ebp - 0x478]
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x40a279
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push 0x50
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.00405c90
movups xmm0, xmmword [str.defender_RegestToDefender:_spAvProductList__Initialize_0__error__ret:]
mov ecx, eax
mov dword [ebp - 0x41c], 0x45
mov dword [ebp - 0x418], 0x4f
push 1
push 0x4b941c
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x4ba000]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x4ba010]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x4ba020]
movups xmmword [ecx + 0x30], xmm0
mov eax, dword [0x4ba030]
mov dword [ecx + 0x40], eax
mov al, byte [0x4ba034]
mov byte [ecx + 0x44], al
mov byte [ecx + 0x45], 0
mov dword [ebp - 0x42c], ecx
lea ecx, [ebp - 0x42c]
call fcn.00405d50
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00406ec0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40a1e0
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00405d50
mov edx, dword [ebp - 0x430]
cmp edx, 0x10
jb 0x40a227
mov ecx, dword [ebp - 0x444]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a21d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af52
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x418], 0x10
lea esi, [ebp - 0x42c]
mov edi, dword [ebp - 0x41c]
cmovae esi, dword [ebp - 0x42c]
push 0x4b93f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x40a0c3
push str.writeLog
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40a0c3
push edi
push esi
push str.RegestToDefender
push 0x11e
jmp 0x40a0b7
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x464]
mov dword [ebp - 0x464], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
jns 0x40a3f3
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push 0x50
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.00405c90
movups xmm0, xmmword [str.defender_RegestToDefender:_spAvProductList__get_Count_error__ret:]
mov ecx, eax
mov dword [ebp - 0x41c], 0x41
mov dword [ebp - 0x418], 0x4f
push 1
push 0x4b941c
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x4ba048]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x4ba058]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x4ba068]
movups xmmword [ecx + 0x30], xmm0
mov al, byte [0x4ba078]
mov byte [ecx + 0x40], al
mov byte [ecx + 0x41], 0
mov dword [ebp - 0x42c], ecx
lea ecx, [ebp - 0x42c]
call fcn.00405d50
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00406ec0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40a35a
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00405d50
mov edx, dword [ebp - 0x430]
cmp edx, 0x10
jb 0x40a3a1
mov ecx, dword [ebp - 0x444]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a397
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x418], 0x10
lea esi, [ebp - 0x42c]
mov edi, dword [ebp - 0x41c]
cmovae esi, dword [ebp - 0x42c]
push 0x4b93f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x40a0c3
push str.writeLog
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40a0c3
push edi
push esi
push str.RegestToDefender
push 0x124
jmp 0x40a0b7
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00467c70
add esp, 0xc
lea eax, [ebp - 0x414]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor esi, esi
cmp dword [ebp - 0x464], esi
jle 0x40a6b4
nop dword [eax + eax]
mov eax, dword [ebp - 0x478]
lea edx, [ebp - 0x494]
push edx
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x40a808
mov ecx, dword [ebp - 0x494]
lea edx, [ebp - 0x470]
mov dword [ebp - 0x470], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
test eax, eax
js 0x40a730
push 0x34
push str.defender_RegestToDefender:_get_RemediationPath__ret:
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x484], str.RegestToDefender
mov dword [ebp - 0x488], 0x135
mov dword [ebp - 0x468], str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
mov dword [ebp - 0x460], 2
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.0040cae0
push 1
push 0x4b941c
lea ecx, [ebp - 0x42c]
call fcn.00405d50
push dword [ebp - 0x470]
lea eax, [ebp - 0x444]
push eax
call fcn.00407420
add esp, 8
lea ecx, [ebp - 0x444]
push 1
push 0x4b941c
call fcn.00405d50
push 1
push 0x4b93f4
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
call fcn.0040cae0
cmp dword [ebp - 0x448], 0x10
lea eax, [ebp - 0x45c]
push dword [ebp - 0x44c]
cmovae eax, dword [ebp - 0x45c]
lea ecx, [ebp - 0x444]
push eax
call fcn.00405d50
mov edx, dword [ebp - 0x448]
cmp edx, 0x10
jb 0x40a58c
mov ecx, dword [ebp - 0x45c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a582
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af48
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x430], 0x10
lea eax, [ebp - 0x444]
push dword [ebp - 0x434]
cmovae eax, dword [ebp - 0x444]
lea ecx, [ebp - 0x42c]
push eax
call fcn.00405d50
lea ecx, [ebp - 0x444]
call fcn.00409690
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x418], 0x10
mov dword [ebp - 0x47c], eax
lea eax, [ebp - 0x42c]
cmovae eax, dword [ebp - 0x42c]
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x460]
push eax
call fcn.00406580
mov edx, dword [ebp - 0x418]
add esp, 0x18
cmp edx, 0x10
jb 0x40a64f
mov ecx, dword [ebp - 0x42c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a645
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af48
push edx
push ecx
call fcn.00445172
add esp, 8
push dword [ebp - 0x470]
lea eax, [ebp - 0x414]
push eax
call fcn.004973bc
mov ecx, dword [0x4dd118]
add esp, 8
test eax, eax
mov eax, 1
cmove ecx, eax
push dword [ebp - 0x470]
mov dword [0x4dd118], ecx
call ebx
cmp dword [0x4dd118], 0
mov dword [ebp - 0x470], 0
je 0x40a6a7
call fcn.0040bec0
call fcn.0040c1a0
test edi, edi
je 0x40af00
inc esi
cmp esi, dword [ebp - 0x464]
jl 0x40a430
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 0x490]
push eax
push 0x4bc078
push 1
push 0
push 0x4c04e0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
jns 0x40a953
call ebx
mov dword [ebp - 0x460], eax
mov eax, esi
cdq
mov ebx, eax
mov esi, edx
lea eax, [ebp - 0x460]
mov dword [ebp - 0x46c], ebx
push eax
push str._err:
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x468], esi
push eax
push str.defender_RegestToDefender:_CoCreateInstance__ret__
push str.RegestToDefender
push 0x14c
push str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
push 2
call fcn.00408070
add esp, 0x20
jmp 0x40ac98
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push 0x4b
push str.defender_RegestToDefender:_spAvProductList__get_RemediationPath_error__ret:
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.0040cae0
push 1
push 0x4b941c
lea ecx, [ebp - 0x42c]
call fcn.00405d50
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00406ec0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40a79e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00405d50
lea ecx, [ebp - 0x444]
call fcn.00409690
cmp dword [ebp - 0x418], 0x10
lea esi, [ebp - 0x42c]
mov edi, dword [ebp - 0x41c]
cmovae esi, dword [ebp - 0x42c]
push 0x4b93f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x40a0c3
push str.writeLog
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40a0c3
push edi
push esi
push str.RegestToDefender
push 0x132
jmp 0x40a0b7
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push 0x50
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.00405c90
movups xmm0, xmmword [str.defender_RegestToDefender:_spAvProductList__get_Item_error__ret:]
mov dword [ebp - 0x41c], 0x40
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x418], 0x4f
movups xmmword [eax], xmm0
push 1
movups xmm0, xmmword [0x4ba090]
push 0x4b941c
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x4ba0a0]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x4ba0b0]
movups xmmword [eax + 0x30], xmm0
mov byte [eax + 0x40], 0
mov dword [ebp - 0x42c], eax
call fcn.00405d50
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00406ec0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40a8ba
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00405d50
mov edx, dword [ebp - 0x430]
cmp edx, 0x10
jb 0x40a901
mov ecx, dword [ebp - 0x444]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a8f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x418], 0x10
lea esi, [ebp - 0x42c]
mov edi, dword [ebp - 0x41c]
cmovae esi, dword [ebp - 0x42c]
push 0x4b93f8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x40a0c3
push str.writeLog
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40a0c3
push edi
push esi
push str.RegestToDefender
push 0x12c
jmp 0x40a0b7
mov eax, dword [ebp - 0x490]
lea edx, [ebp - 0x48c]
push edx
push 0x4c0460
push eax
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
test esi, esi
jns 0x40a9c1
call ebx
mov dword [ebp - 0x460], eax
mov eax, esi
cdq
mov ebx, eax
mov esi, edx
lea eax, [ebp - 0x460]
mov dword [ebp - 0x46c], ebx
push eax
push str._err:
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x468], esi
push eax
push str.defender_RegestToDefender:_QueryInterface__ret__
push str.RegestToDefender
push 0x154
push str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
push 2
call fcn.00407dd0
add esp, 0x20
jmp 0x40ac98
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.00467c70
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
test edi, edi
je 0x40af60
push 0
push 0x4b93f0
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 0xf
mov byte [ebp - 0x444], 0
call fcn.0040cae0
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x42c]
push eax
push str.DefenderServiceCenterName
call fcn.0040d100
mov edx, dword [ebp - 0x430]
add esp, 0xc
cmp edx, 0x10
jb 0x40aa9f
mov ecx, dword [ebp - 0x444]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp - 0x418], 0x10
lea ebx, [ebp - 0x42c]
jb 0x40aabc
mov ebx, dword [ebp - 0x42c]
test ebx, ebx
jne 0x40aabc
xor esi, esi
jmp 0x40ab11
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x464], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov esi, eax
test esi, esi
je 0x40af60
push dword [ebp - 0x464]
push esi
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x464]
jne 0x40af57
test esi, esi
je 0x40af60
mov eax, dword [ebp - 0x48c]
push 0
push 0
push esi
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xc]
mov ebx, eax
test ebx, ebx
jns 0x40acfc
cmp dword [ebp - 0x418], 0x10
lea ecx, [ebp - 0x42c]
cmovae ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x460], ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x468], eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [ebp - 0x464], edx
lea eax, [ebp - 0x460]
mov dword [ebp - 0x474], ebx
push eax
push str._name:
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x470], edx
push eax
push str._path:
lea eax, [ebp - 0x468]
mov dword [ebp - 0x488], str.RegestToDefender
push eax
push str._err:
lea eax, [ebp - 0x474]
mov dword [ebp - 0x484], 0x167
push eax
lea eax, [ebp - 0x444]
mov dword [ebp - 0x480], str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
push str.defender_RegestToDefender:_Register__ret__
push eax
mov dword [ebp - 0x47c], 2
call fcn.00406d50
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0x430], 0x10
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x444]
cmovae eax, dword [ebp - 0x444]
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.00406580
add esp, 0x3c
lea ecx, [ebp - 0x444]
call fcn.00409690
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov edx, dword [ebp - 0x418]
cmp edx, 0x10
jb 0x40ac74
mov ecx, dword [ebp - 0x42c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac6a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
push edi
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call esi
mov esi, dword [ebp - 0x464]
mov dword [0x4dd118], 0
call fcn.0040bec0
call fcn.0040c1a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x460]
push eax
push str._err:
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x46c], ebx
push eax
push str.defender_RegestToDefender:_ret__
push str.RegestToDefender
push 0x17b
push str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
push 2
mov dword [ebp - 0x468], esi
call fcn.004075f0
add esp, 0x20
xor esi, esi
jmp 0x40af05
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov edx, dword [ebp - 0x418]
cmp edx, 0x10
jb 0x40ad3f
mov ecx, dword [ebp - 0x42c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
push edi
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call esi
push 0x22
push str.defender_RegestToDefender:_ret__ok
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x488], str.RegestToDefender
mov dword [ebp - 0x484], 0x16c
mov dword [ebp - 0x480], str.c:jks_qsafeworkspacexwolfqaxdefenderHelper_traydefenderdefender.cpp
mov dword [ebp - 0x47c], 2
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
call fcn.0040cae0
push 1
push 0x4b941c
lea ecx, [ebp - 0x42c]
call fcn.00405d50
push 1
push 0x4b93f4
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
call fcn.0040cae0
cmp dword [ebp - 0x448], 0x10
lea eax, [ebp - 0x45c]
push dword [ebp - 0x44c]
cmovae eax, dword [ebp - 0x45c]
lea ecx, [ebp - 0x42c]
push eax
call fcn.00405d50
mov edx, dword [ebp - 0x448]
cmp edx, 0x10
jb 0x40ae51
mov ecx, dword [ebp - 0x45c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x418], 0x10
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x42c]
cmovae eax, dword [ebp - 0x42c]
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.00406580
mov edx, dword [ebp - 0x418]
add esp, 0x18
cmp edx, 0x10
jb 0x40aedf
mov ecx, dword [ebp - 0x42c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aed5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af4d
push edx
push ecx
call fcn.00445172
add esp, 8
cmp dword [ebp + 8], 0
jne 0x40aef1
call fcn.0040bec0
call fcn.0040c1a0
jmp 0x40aef6
call fcn.0040bbc0
mov dword [0x4dd118], 1
mov esi, 1
mov eax, dword [ebp - 0x478]
pop ebx
test eax, eax
je 0x40af16
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48c]
test eax, eax
je 0x40af26
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x490]
test ecx, ecx
je 0x40af36
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
xor ecx, ebp
pop esi
call fcn.0044518e
mov esp, ebp
pop ebp
ret
call fcn.0047357c
call fcn.0047357c
call fcn.0047357c
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push 0x8007000e
call fcn.00409ed0
int3