Function at 0x40b300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e9590
mov eax, dword fs:[0]
push eax
sub esp, 0x140
mov eax, dword [0x536008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x10], 0
jne 0x40b33f
xor al, al
jmp 0x40cdbb
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x58]
push ecx
call fcn.004aa040
mov edi, dword [ebp - 0x58]
xor ecx, ecx
mov dword [ebp - 0x104], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x54]
add esp, 4
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40cd9f
nop dword [eax]
mov eax, dword [ebp - 0x104]
xorps xmm0, xmm0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
lea eax, [eax + eax*2]
mov dword [ebp - 0x30], 0
lea ecx, [edi + eax*8]
mov dword [ebp - 0x2c], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x34]
push eax
mov edx, 0x3d
call fcn.004a9ec0
mov ecx, dword [ebp - 0x30]
add esp, 4
mov edi, dword [ebp - 0x34]
sub ecx, edi
mov dword [ebp - 0xec], edi
lea eax, [ecx - 0x30]
cmp eax, 0x18
jb 0x40b507
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jb 0x40cdf6
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x40b423
mov eax, dword [edi]
cmp dword [edi + 0x10], 0x11
jne 0x40b45b
mov ecx, 0x5069c8
mov edx, 0x11
sub eax, ecx
mov dword [ebp - 0xf4], eax
nop dword [eax + eax]
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x40b45b
mov eax, dword [ebp - 0xf4]
add ecx, 2
sub edx, 1
jne 0x40b440
mov al, 1
jmp 0x40b45d
xor al, al
test al, al
je 0x40cdf6
push edi
lea ecx, [ebp - 0xb8]
call fcn.0040abc0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0040b0b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.0040cf80
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xb8]
push ecx
cmp dword [ebp - 0x2c], eax
je 0x40b4b2
mov ecx, eax
call fcn.0040abc0
mov eax, dword [ebp - 0x30]
add eax, 0x18
mov dword [ebp - 0x30], eax
jmp 0x40b4be
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a890
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xa0]
push ecx
cmp dword [ebp - 0x2c], eax
je 0x40b4d7
mov ecx, eax
call fcn.0040abc0
add dword [ebp - 0x30], 0x18
jmp 0x40b4e0
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a890
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa0]
call fcn.0040a2e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.0040a2e0
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xec], edi
cmp dword [edi + 0x14], 8
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xfc], eax
jb 0x40b52c
mov edi, dword [edi]
mov dword [ebp - 0xec], edi
cmp eax, 8
jae 0x40b551
movups xmm0, xmmword [edi]
mov dword [ebp - 0x3c], eax
mov eax, 7
mov dword [ebp - 0x38], eax
movups xmmword [ebp - 0x4c], xmm0
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xf8], eax
jmp 0x40b5f9
or eax, 7
mov ecx, 0x7ffffffe
cmp eax, 0x7ffffffe
cmova eax, ecx
xor ecx, ecx
mov dword [ebp - 0xf8], eax
add eax, 1
setb cl
neg ecx
or ecx, eax
lea edx, [ecx + ecx]
cmp ecx, 0x7fffffff
jbe 0x40b583
or edx, 0xffffffff
jmp 0x40b58b
cmp edx, 0x1000
jb 0x40b5b4
lea eax, [edx + 0x23]
mov ecx, 0xffffffff
cmp eax, edx
cmovbe eax, ecx
push eax
call fcn.004e62bc
add esp, 4
test eax, eax
je 0x40cdd8
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x40b5c7
test edx, edx
je 0x40b5c5
push edx
call fcn.004e62bc
add esp, 4
mov edi, eax
jmp 0x40b5c7
xor edi, edi
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x4c], edi
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0xec]
push edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xfc]
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x34]
add eax, 0x18
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xf0], eax
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xec], ecx
jb 0x40b62e
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
cmp ecx, 8
jae 0x40b649
movups xmm0, xmmword [eax]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
jmp 0x40b6f3
mov eax, ecx
mov ecx, 0x7ffffffe
or eax, 7
cmp eax, 0x7ffffffe
cmova eax, ecx
xor ecx, ecx
mov dword [ebp - 0xf4], eax
add eax, 1
setb cl
neg ecx
or ecx, eax
lea edx, [ecx + ecx]
cmp ecx, 0x7fffffff
jbe 0x40b67d
or edx, 0xffffffff
jmp 0x40b685
cmp edx, 0x1000
jb 0x40b6ae
lea eax, [edx + 0x23]
mov ecx, 0xffffffff
cmp eax, edx
cmovbe eax, ecx
push eax
call fcn.004e62bc
add esp, 4
test eax, eax
je 0x40cdd8
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x40b6c1
test edx, edx
je 0x40b6bf
push edx
call fcn.004e62bc
add esp, 4
mov ecx, eax
jmp 0x40b6c1
xor ecx, ecx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x28], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0xf0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xec]
add esp, 0xc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0xf8]
cmp edx, 8
mov ecx, dword [ebp - 0xfc]
cmovae eax, edi
mov dword [ebp - 0xec], eax
cmp ecx, 6
jne 0x40ba70
mov eax, str.__type
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], eax
nop dword [eax]
nop word [eax + eax]
mov edx, dword [ebp - 0xec]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xf0]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40ba70
mov eax, dword [ebp - 0xf0]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xf0], eax
jne 0x40b740
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 4
jne 0x40b7ba
mov ecx, str.scan
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b7b1
add ecx, 2
sub edx, 1
jne 0x40b795
mov dword [esi], 1
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 7
jne 0x40b7f5
mov ecx, 0x5065e4
sub edi, ecx
nop
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b7ec
add ecx, 2
sub edx, 1
jne 0x40b7d0
mov dword [esi], 2
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40b835
mov ecx, str.uninstall
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b82c
add ecx, 2
sub edx, 1
jne 0x40b810
mov dword [esi], 3
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40b875
mov ecx, str.deleteusercfg
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b86c
add ecx, 2
sub edx, 1
jne 0x40b850
mov dword [esi], 4
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40b8b5
mov ecx, str.installstatic
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b8ac
add ecx, 2
sub edx, 1
jne 0x40b890
mov dword [esi], 5
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xf
jne 0x40b8f5
mov ecx, str.uninstallstatic
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b8ec
add ecx, 2
sub edx, 1
jne 0x40b8d0
mov dword [esi], 6
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xe
jne 0x40b935
mov ecx, str.installservice
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b92c
add ecx, 2
sub edx, 1
jne 0x40b910
mov dword [esi], 7
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 6
jne 0x40b975
mov ecx, str.repair
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40b96c
add ecx, 2
sub edx, 1
jne 0x40b950
mov dword [esi], 8
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40b9b5
mov ecx, str.repairsupport
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40b9ac
add ecx, 2
sub edx, 1
jne 0x40b990
mov dword [esi], 0xa
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 4
jne 0x40b9f5
mov ecx, str.shre
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40b9ec
add ecx, 2
sub edx, 1
jne 0x40b9d0
mov dword [esi], 9
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 8
jne 0x40ba35
mov ecx, str.selfinst
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ba2c
add ecx, 2
sub edx, 1
jne 0x40ba10
mov dword [esi], 0xb
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 7
jne 0x40cdde
mov ecx, str.proInst
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40ba50
mov dword [esi], 0xc
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xd
jne 0x40bb51
mov eax, str.__installtype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bb51
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40baa0
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 3
jne 0x40bb17
mov ecx, 0x506b0c
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bb0e
add ecx, 2
sub edx, 1
jne 0x40baf5
mov dword [esi + 4], edx
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40cdde
mov ecx, str.overwrite
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40bb30
mov dword [esi + 4], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40bc01
mov eax, str.__subinstalltype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bc01
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bb80
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 0x11
jne 0x40cd50
mov ecx, str.increment_upgrade
mov edx, 0x11
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40bbe0
mov byte [esi + 0x118], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xf
jne 0x40bd21
mov eax, str.__uninstalltype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bd21
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bc30
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 3
jne 0x40bca7
mov ecx, 0x506b90
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bc9e
add ecx, 2
sub edx, 1
jne 0x40bc85
mov dword [esi + 8], edx
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40bce6
mov ecx, str.overwrite
sub edi, ecx
nop dword [eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bcdd
add ecx, 2
sub edx, 1
jne 0x40bcc0
mov dword [esi + 8], 1
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0x11
jne 0x40cdde
mov ecx, str.increment_upgrade
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40bd00
mov dword [esi + 8], 2
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 5
jne 0x40bd95
mov eax, str.__shm
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bd95
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bd50
cmp dword [ebp - 0x18], 0
je 0x40cdde
lea ecx, [esi + 0xc]
jmp 0x40cd47
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 9
jne 0x40be05
mov eax, str.__channel
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40be05
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bdc0
cmp dword [ebp - 0x18], 0
je 0x40cdde
lea ecx, [esi + 0x24]
jmp 0x40cd47
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40bfb5
mov eax, str.__lockCheckState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
nop dword [eax + eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bfb5
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40be40
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40bebb
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40beb2
add ecx, 2
sub edx, 1
jne 0x40be95
mov word [esi + 0x70], dx
mov byte [esi + 0x72], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bef9
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bef0
add ecx, 2
sub edx, 1
jne 0x40bed0
mov word [esi + 0x70], 0x101
mov byte [esi + 0x72], 1
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bf37
mov ecx, 0x506be0
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bf2e
add ecx, 2
sub edx, 1
jne 0x40bf10
mov word [esi + 0x70], dx
mov byte [esi + 0x72], 1
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bf78
mov ecx, 0x506be4
sub edi, ecx
nop dword [eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bf6f
add ecx, 2
sub edx, 1
jne 0x40bf50
mov word [esi + 0x70], 0x101
mov byte [esi + 0x72], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cd50
mov ecx, 0x506be8
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40bf91
mov word [esi + 0x70], 1
mov byte [esi + 0x72], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40c06e
mov eax, 0x506bec
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
nop dword [eax + eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c06e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bff0
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x40cd50
mov ecx, 0x5069c0
mov edx, 1
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40c050
mov byte [esi + 0x7a], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c121
mov eax, str.__repairtype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c121
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c0a0
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40cdde
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp eax, 8
jne 0x40cdde
mov ecx, str.external
mov edx, eax
sub edi, ecx
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40c100
mov dword [esi + 0x3c], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xf
jne 0x40c1fe
mov eax, str.__speedupsphere
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c1fe
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c150
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c1c7
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c1be
add ecx, 2
sub edx, 1
jne 0x40c1a5
mov byte [esi + 0x7c], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cdde
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40c1e0
mov byte [esi + 0x7c], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c2de
mov eax, str.__bootassist
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c2de
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c230
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c2a7
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c29e
add ecx, 2
sub edx, 1
jne 0x40c285
mov byte [esi + 0x7b], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cdde
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40cdde
add ecx, 2
sub edx, 1
jne 0x40c2c0
mov byte [esi + 0x7b], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c3be
mov eax, str.__desktoplnk
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c3be
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c310
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c387
mov ecx, str.0234
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40c37e
add ecx, 2
sub edx, 1
jne 0x40c365
mov byte [esi + 0x7e], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cd50
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40c3a0
mov byte [esi + 0x7e], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 8
jne 0x40c46e
mov eax, str.__silent
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c46e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c3f0
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x40cd50
mov ecx, 0x5069c0
mov edx, 1
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40c450
mov byte [esi + 0x7d], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xa
jne 0x40c4de
mov eax, str.__usertype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c4de
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c4a0
lea ecx, [esi + 0xa0]
jmp 0x40cd47
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c54e
mov eax, str.__preversion
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c54e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c510
lea ecx, [esi + 0x88]
jmp 0x40cd47
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xd
jne 0x40c62e
mov eax, str.__lockIEState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c62e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c580
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c5f7
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c5ee
add ecx, 2
sub edx, 1
jne 0x40c5d5
mov byte [esi + 0x70], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cd50
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40c610
mov byte [esi + 0x70], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xe
jne 0x40c70e
mov eax, str.__lock3rdState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c70e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c660
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c6d7
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c6ce
add ecx, 2
sub edx, 1
jne 0x40c6b5
mov byte [esi + 0x71], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cd50
mov ecx, 0x5069c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cd50
add ecx, 2
sub edx, 1
jne 0x40c6f0
mov byte [esi + 0x71], 1
jmp 0x40cd50
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
cmp ecx, 0x12
jne 0x40c7ba
mov dword [ebp - 0xf4], ecx
mov ecx, str.__lockBrowserState
sub eax, ecx
mov dword [ebp - 0xf0], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x40c7ba
mov eax, dword [ebp - 0xf0]
add ecx, 2
sub dword [ebp - 0xf4], 1
jne 0x40c733
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
cmp eax, 8
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x40c78d
mov ecx, str.0234
mov edx, 1
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40c78a
add ecx, 2
sub edx, 1
jne 0x40c771
mov byte [esi + 0x72], dl
jmp 0x40cd50
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp eax, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5069c0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov byte [esi + 0x72], 1
jmp 0x40cd50
cmp edx, 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__lockBrowserType
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c897
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c80f
mov dword [esi + 0x74], 0
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5069c0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c83b
mov dword [esi + 0x74], 1
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x506be0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c867
mov dword [esi + 0x74], 2
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x506be4
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov dword [esi + 0x74], 3
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__lockEngineState
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c916
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c8e9
mov byte [esi + 0x78], 0
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5069c0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov byte [esi + 0x78], 1
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0xc
cmovae ecx, edi
push str.__locknewtab
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c995
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040ad80
add esp, 8
test al, al
je 0x40c968
mov byte [esi + 0x79], 0
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5069c0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov byte [esi + 0x79], 1
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 5
cmovae ecx, edi
push str.__crc
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cb2d
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040abc0
mov byte [ebp - 4], 6
mov edx, 0x506db4
push 0x5069c4
lea ecx, [ebp - 0xe8]
call fcn.004a3c60
add esp, 4
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.0044a900
mov byte [ebp - 4], 7
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004ab6c0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x134]
call fcn.0040a2e0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x11c]
push str.KCFTa_nLpjU8TM3Jdzi
call fcn.0040d0b0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x11c]
cmp dword [ebp - 0x108], 0x10
lea ecx, [ebp - 0x70]
push dword [ebp - 0x10c]
cmovae eax, dword [ebp - 0x11c]
push eax
call fcn.0040d160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x11c]
call fcn.0040d110
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x70]
call fcn.0044a510
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x14c]
call fcn.004ab630
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0xb8]
push eax
call fcn.0040a050
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14c]
call fcn.0040a2e0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x70]
call fcn.0040d110
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x88]
call fcn.0040d110
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.0040d110
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe8]
call fcn.0040a2e0
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x13
cmovae ecx, edi
push str.__updateinstallcode
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cb5e
lea ecx, [esi + 0xd0]
jmp 0x40cd47
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 5
cmovae ecx, edi
push str.__sem
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cbe9
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5069c0
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cbb6
mov dword [esi + 0x80], 1
jmp 0x40cd50
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov dword [esi + 0x80], 2
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0xe
cmovae ecx, edi
push str.__inschecktype
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cc43
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
push 1
push 0x506be4
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
mov dword [esi + 0x84], 3
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 9
cmovae ecx, edi
push str.__inspath
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cc74
lea ecx, [esi + 0x100]
jmp 0x40cd47
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 6
cmovae ecx, edi
push str.__from
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cca5
lea ecx, [esi + 0xe8]
jmp 0x40cd47
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__isInsallSoftMgr
call fcn.0040ad80
add esp, 8
test al, al
je 0x40ccf3
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
push 1
push 0x5069c0
call fcn.0040ad80
add esp, 8
mov byte [esi + 0x119], al
jmp 0x40cd50
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x10
cmovae ecx, edi
push str.__invokeProcName
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd1e
lea ecx, [esi + 0x40]
jmp 0x40cd47
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push 0x5069c8
call fcn.0040ad80
add esp, 8
test al, al
je 0x40cd50
lea ecx, [esi + 0x58]
lea eax, [ebp - 0x28]
push eax
call fcn.00409fe0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0040a2e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.0040a2e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.0040a260
mov ecx, dword [ebp - 0x54]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x58]
sub ecx, edi
inc dword [ebp - 0x104]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x104], eax
jb 0x40b3a0
mov byte [ebp - 0xfd], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0040a260
mov al, byte [ebp - 0xfd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e62ab
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0040a2e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.0040a2e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.0040a260
mov byte [ebp - 0xfd], 0
jmp 0x40cda6