Function at 0x40b350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e9770
mov eax, dword fs:[0]
push eax
sub esp, 0x140
mov eax, dword [0x537008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x10], 0
jne 0x40b38f
xor al, al
jmp 0x40ced3
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x58]
push ecx
call fcn.004aa220
mov edi, dword [ebp - 0x58]
xor ecx, ecx
mov dword [ebp - 0x104], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x54]
add esp, 4
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40ceb7
nop dword [eax]
mov eax, dword [ebp - 0x104]
xorps xmm0, xmm0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
lea eax, [eax + eax*2]
mov dword [ebp - 0x30], 0
lea ecx, [edi + eax*8]
mov dword [ebp - 0x2c], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x34]
push eax
mov edx, 0x3d
call fcn.004aa0a0
mov ecx, dword [ebp - 0x30]
add esp, 4
mov edi, dword [ebp - 0x34]
sub ecx, edi
mov dword [ebp - 0xec], edi
lea eax, [ecx - 0x30]
cmp eax, 0x18
jb 0x40b557
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jb 0x40cf0e
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x40b473
mov eax, dword [edi]
cmp dword [edi + 0x10], 0x11
jne 0x40b4ab
mov ecx, 0x5079c8
mov edx, 0x11
sub eax, ecx
mov dword [ebp - 0xf4], eax
nop dword [eax + eax]
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x40b4ab
mov eax, dword [ebp - 0xf4]
add ecx, 2
sub edx, 1
jne 0x40b490
mov al, 1
jmp 0x40b4ad
xor al, al
test al, al
je 0x40cf0e
push edi
lea ecx, [ebp - 0xb8]
call fcn.0040ac00
mov byte [ebp - 4], 2
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0040b100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.0040d0a0
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xb8]
push ecx
cmp dword [ebp - 0x2c], eax
je 0x40b502
mov ecx, eax
call fcn.0040ac00
mov eax, dword [ebp - 0x30]
add eax, 0x18
mov dword [ebp - 0x30], eax
jmp 0x40b50e
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a8d0
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xa0]
push ecx
cmp dword [ebp - 0x2c], eax
je 0x40b527
mov ecx, eax
call fcn.0040ac00
add dword [ebp - 0x30], 0x18
jmp 0x40b530
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a8d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa0]
call fcn.0040a320
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.0040a320
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xec], edi
cmp dword [edi + 0x14], 8
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xfc], eax
jb 0x40b57c
mov edi, dword [edi]
mov dword [ebp - 0xec], edi
cmp eax, 8
jae 0x40b5a1
movups xmm0, xmmword [edi]
mov dword [ebp - 0x3c], eax
mov eax, 7
mov dword [ebp - 0x38], eax
movups xmmword [ebp - 0x4c], xmm0
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xf8], eax
jmp 0x40b649
or eax, 7
mov ecx, 0x7ffffffe
cmp eax, 0x7ffffffe
cmova eax, ecx
xor ecx, ecx
mov dword [ebp - 0xf8], eax
add eax, 1
setb cl
neg ecx
or ecx, eax
lea edx, [ecx + ecx]
cmp ecx, 0x7fffffff
jbe 0x40b5d3
or edx, 0xffffffff
jmp 0x40b5db
cmp edx, 0x1000
jb 0x40b604
lea eax, [edx + 0x23]
mov ecx, 0xffffffff
cmp eax, edx
cmovbe eax, ecx
push eax
call fcn.004e648c
add esp, 4
test eax, eax
je 0x40cef0
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x40b617
test edx, edx
je 0x40b615
push edx
call fcn.004e648c
add esp, 4
mov edi, eax
jmp 0x40b617
xor edi, edi
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x4c], edi
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0xec]
push edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xfc]
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x34]
add eax, 0x18
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xf0], eax
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xec], ecx
jb 0x40b67e
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
cmp ecx, 8
jae 0x40b699
movups xmm0, xmmword [eax]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
jmp 0x40b743
mov eax, ecx
mov ecx, 0x7ffffffe
or eax, 7
cmp eax, 0x7ffffffe
cmova eax, ecx
xor ecx, ecx
mov dword [ebp - 0xf4], eax
add eax, 1
setb cl
neg ecx
or ecx, eax
lea edx, [ecx + ecx]
cmp ecx, 0x7fffffff
jbe 0x40b6cd
or edx, 0xffffffff
jmp 0x40b6d5
cmp edx, 0x1000
jb 0x40b6fe
lea eax, [edx + 0x23]
mov ecx, 0xffffffff
cmp eax, edx
cmovbe eax, ecx
push eax
call fcn.004e648c
add esp, 4
test eax, eax
je 0x40cef0
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x40b711
test edx, edx
je 0x40b70f
push edx
call fcn.004e648c
add esp, 4
mov ecx, eax
jmp 0x40b711
xor ecx, ecx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x28], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0xf0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xec]
add esp, 0xc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0xf8]
cmp edx, 8
mov ecx, dword [ebp - 0xfc]
cmovae eax, edi
mov dword [ebp - 0xec], eax
cmp ecx, 6
jne 0x40bac0
mov eax, str.__type
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], eax
nop dword [eax]
nop word [eax + eax]
mov edx, dword [ebp - 0xec]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xf0]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bac0
mov eax, dword [ebp - 0xf0]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xf0], eax
jne 0x40b790
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 4
jne 0x40b80a
mov ecx, str.scan
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b801
add ecx, 2
sub edx, 1
jne 0x40b7e5
mov dword [esi], 1
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 7
jne 0x40b845
mov ecx, 0x5075e4
sub edi, ecx
nop
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b83c
add ecx, 2
sub edx, 1
jne 0x40b820
mov dword [esi], 2
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40b885
mov ecx, str.uninstall
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b87c
add ecx, 2
sub edx, 1
jne 0x40b860
mov dword [esi], 3
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40b8c5
mov ecx, str.deleteusercfg
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b8bc
add ecx, 2
sub edx, 1
jne 0x40b8a0
mov dword [esi], 4
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40b905
mov ecx, str.installstatic
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b8fc
add ecx, 2
sub edx, 1
jne 0x40b8e0
mov dword [esi], 5
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xf
jne 0x40b945
mov ecx, str.uninstallstatic
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b93c
add ecx, 2
sub edx, 1
jne 0x40b920
mov dword [esi], 6
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xe
jne 0x40b985
mov ecx, str.installservice
sub edi, ecx
nop word [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40b97c
add ecx, 2
sub edx, 1
jne 0x40b960
mov dword [esi], 7
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 6
jne 0x40b9c5
mov ecx, str.repair
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40b9bc
add ecx, 2
sub edx, 1
jne 0x40b9a0
mov dword [esi], 8
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0xd
jne 0x40ba05
mov ecx, str.repairsupport
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40b9fc
add ecx, 2
sub edx, 1
jne 0x40b9e0
mov dword [esi], 0xa
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 4
jne 0x40ba45
mov ecx, str.shre
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ba3c
add ecx, 2
sub edx, 1
jne 0x40ba20
mov dword [esi], 9
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 8
jne 0x40ba85
mov ecx, str.selfinst
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ba7c
add ecx, 2
sub edx, 1
jne 0x40ba60
mov dword [esi], 0xb
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 7
jne 0x40cef6
mov ecx, str.proInst
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40baa0
mov dword [esi], 0xc
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xd
jne 0x40bba1
mov eax, str.__installtype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bba1
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40baf0
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 3
jne 0x40bb67
mov ecx, 0x507b0c
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bb5e
add ecx, 2
sub edx, 1
jne 0x40bb45
mov dword [esi + 4], edx
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40cef6
mov ecx, str.overwrite
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40bb80
mov dword [esi + 4], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40bc51
mov eax, str.__subinstalltype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bc51
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bbd0
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 0x11
jne 0x40ce68
mov ecx, str.increment_upgrade
mov edx, 0x11
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40bc30
mov byte [esi + 0x118], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xf
jne 0x40bd71
mov eax, str.__uninstalltype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bd71
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bc80
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 3
jne 0x40bcf7
mov ecx, 0x507b90
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bcee
add ecx, 2
sub edx, 1
jne 0x40bcd5
mov dword [esi + 8], edx
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 9
jne 0x40bd36
mov ecx, str.overwrite
sub edi, ecx
nop dword [eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bd2d
add ecx, 2
sub edx, 1
jne 0x40bd10
mov dword [esi + 8], 1
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 0x11
jne 0x40cef6
mov ecx, str.increment_upgrade
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40bd50
mov dword [esi + 8], 2
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 5
jne 0x40bdee
mov eax, str.__shm
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40bdee
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bda0
cmp dword [ebp - 0x18], 0
je 0x40cef6
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0xc]
call fcn.0040a020
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 9
jne 0x40be6e
mov eax, str.__channel
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40be6e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40be20
cmp dword [ebp - 0x18], 0
je 0x40cef6
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x24]
call fcn.0040a020
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40c015
mov eax, str.__lockCheckState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c015
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40bea0
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40bf1b
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bf12
add ecx, 2
sub edx, 1
jne 0x40bef5
mov word [esi + 0x70], dx
mov byte [esi + 0x72], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bf59
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bf50
add ecx, 2
sub edx, 1
jne 0x40bf30
mov word [esi + 0x70], 0x101
mov byte [esi + 0x72], 1
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bf97
mov ecx, 0x507be0
sub edi, ecx
nop
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bf8e
add ecx, 2
sub edx, 1
jne 0x40bf70
mov word [esi + 0x70], dx
mov byte [esi + 0x72], 1
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40bfd8
mov ecx, 0x507be4
sub edi, ecx
nop dword [eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40bfcf
add ecx, 2
sub edx, 1
jne 0x40bfb0
mov word [esi + 0x70], 0x101
mov byte [esi + 0x72], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40ce68
mov ecx, 0x507be8
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40bff1
mov word [esi + 0x70], 1
mov byte [esi + 0x72], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0x10
jne 0x40c0ce
mov eax, 0x507bec
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
nop dword [eax + eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c0ce
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c050
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x40ce68
mov ecx, 0x5079c0
mov edx, 1
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40c0b0
mov byte [esi + 0x7a], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c181
mov eax, str.__repairtype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c181
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c100
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40cef6
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp eax, 8
jne 0x40cef6
mov ecx, str.external
mov edx, eax
sub edi, ecx
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40c160
mov dword [esi + 0x3c], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xf
jne 0x40c25e
mov eax, str.__speedupsphere
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c25e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c1b0
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c227
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c21e
add ecx, 2
sub edx, 1
jne 0x40c205
mov byte [esi + 0x7c], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cef6
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40c240
mov byte [esi + 0x7c], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c33e
mov eax, str.__bootassist
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c33e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c290
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c307
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c2fe
add ecx, 2
sub edx, 1
jne 0x40c2e5
mov byte [esi + 0x7b], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40cef6
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40cef6
add ecx, 2
sub edx, 1
jne 0x40c320
mov byte [esi + 0x7b], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c41e
mov eax, str.__desktoplnk
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c41e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c370
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c3e7
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c3de
add ecx, 2
sub edx, 1
jne 0x40c3c5
mov byte [esi + 0x7e], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40ce68
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40c400
mov byte [esi + 0x7e], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 8
jne 0x40c4ce
mov eax, str.__silent
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c4ce
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c450
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x40ce68
mov ecx, 0x5079c0
mov edx, 1
sub edi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40c4b0
mov byte [esi + 0x7d], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xa
jne 0x40c547
mov eax, str.__usertype
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c547
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c500
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0xa0]
call fcn.0040a020
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xc
jne 0x40c5c7
mov eax, str.__preversion
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
nop word [eax + eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c5c7
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c580
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x88]
call fcn.0040a020
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xd
jne 0x40c6ae
mov eax, str.__lockIEState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop word [eax + eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [edx + eax]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c6ae
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c600
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c677
mov ecx, str.0234
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40c66e
add ecx, 2
sub edx, 1
jne 0x40c655
mov byte [esi + 0x70], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40ce68
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40c690
mov byte [esi + 0x70], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
mov dword [ebp - 0xf0], eax
cmp ecx, 0xe
jne 0x40c78e
mov eax, str.__lock3rdState
mov dword [ebp - 0xf4], ecx
sub dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
nop dword [eax]
mov edx, dword [ebp - 0xf0]
mov ax, word [eax + edx]
mov edx, dword [ebp - 0xec]
cmp ax, word [edx]
mov edx, dword [ebp - 0xf8]
jne 0x40c78e
mov eax, dword [ebp - 0xec]
add eax, 2
sub dword [ebp - 0xf4], 1
mov dword [ebp - 0xec], eax
jne 0x40c6e0
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp eax, 8
mov edx, dword [ebp - 0x18]
cmovae edi, ecx
cmp edx, 1
jne 0x40c757
mov ecx, str.0234
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40c74e
add ecx, 2
sub edx, 1
jne 0x40c735
mov byte [esi + 0x71], dl
jmp 0x40ce68
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, 8
lea edi, [ebp - 0x28]
cmovae edi, ecx
cmp edx, 1
jne 0x40ce68
mov ecx, 0x5079c0
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x40ce68
add ecx, 2
sub edx, 1
jne 0x40c770
mov byte [esi + 0x71], 1
jmp 0x40ce68
cmp edx, 8
lea eax, [ebp - 0x4c]
cmovae eax, edi
cmp ecx, 0x12
jne 0x40c827
mov dword [ebp - 0xf4], ecx
mov ecx, str.__lockBrowserState
sub eax, ecx
mov dword [ebp - 0xf0], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x40c827
mov eax, dword [ebp - 0xf0]
add ecx, 2
sub dword [ebp - 0xf4], 1
jne 0x40c7b3
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c7fa
mov byte [esi + 0x72], 0
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov byte [esi + 0x72], 1
jmp 0x40ce68
cmp edx, 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__lockBrowserType
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c904
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c87c
mov dword [esi + 0x74], 0
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c8a8
mov dword [esi + 0x74], 1
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x507be0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c8d4
mov dword [esi + 0x74], 2
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x507be4
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov dword [esi + 0x74], 3
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__lockEngineState
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c983
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c956
mov byte [esi + 0x78], 0
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov byte [esi + 0x78], 1
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0xc
cmovae ecx, edi
push str.__locknewtab
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ca02
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40c9d5
mov byte [esi + 0x79], 0
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov byte [esi + 0x79], 1
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 5
cmovae ecx, edi
push str.__crc
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cb9a
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040ac00
mov byte [ebp - 4], 6
mov edx, 0x507db4
push 0x5079c4
lea ecx, [ebp - 0xe8]
call fcn.004a3e50
add esp, 4
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.0044aac0
mov byte [ebp - 4], 7
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004ab8a0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x134]
call fcn.0040a320
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x11c]
push str.KCFTa_nLpjU8TM3Jdzi
call fcn.0040d1d0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x11c]
cmp dword [ebp - 0x108], 0x10
lea ecx, [ebp - 0x70]
push dword [ebp - 0x10c]
cmovae eax, dword [ebp - 0x11c]
push eax
call fcn.0040d280
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x11c]
call fcn.0040d230
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x70]
call fcn.0044a6d0
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x14c]
call fcn.004ab810
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0xb8]
push eax
call fcn.0040a090
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14c]
call fcn.0040a320
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x70]
call fcn.0040d230
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x88]
call fcn.0040d230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.0040d230
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe8]
call fcn.0040a320
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x13
cmovae ecx, edi
push str.__updateinstallcode
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cbd4
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0xd0]
call fcn.0040a020
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 5
cmovae ecx, edi
push str.__sem
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cc5f
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cc2c
mov dword [esi + 0x80], 1
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov dword [esi + 0x80], 2
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0xe
cmovae ecx, edi
push str.__inschecktype
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ccb9
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
push 1
push 0x507be4
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov dword [esi + 0x84], 3
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 9
cmovae ecx, edi
push str.__inspath
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ccf3
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x100]
call fcn.0040a020
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 6
cmovae ecx, edi
push str.__from
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cd2d
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0xe8]
call fcn.0040a020
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push str.__isInsallSoftMgr
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cd7b
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
push 1
push 0x5079c0
call fcn.0040adc0
add esp, 8
mov byte [esi + 0x119], al
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x10
cmovae ecx, edi
push str.__invokeProcName
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cdb2
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x40]
call fcn.0040a020
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x11
cmovae ecx, edi
push 0x5079c8
call fcn.0040adc0
add esp, 8
test al, al
je 0x40cde9
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x58]
call fcn.0040a020
jmp 0x40ce68
cmp dword [ebp - 0xf8], 8
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xfc]
push 0x16
cmovae ecx, edi
push str.__delUserCfgActionType
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push str.0234
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce3e
mov dword [esi + 0x11c], 0
jmp 0x40ce68
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp edi, 8
push 1
cmovae ecx, dword [ebp - 0x28]
push 0x5079c0
call fcn.0040adc0
add esp, 8
test al, al
je 0x40ce68
mov dword [esi + 0x11c], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0040a320
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.0040a320
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.0040a2a0
mov ecx, dword [ebp - 0x54]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x58]
sub ecx, edi
inc dword [ebp - 0x104]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x104], eax
jb 0x40b3f0
mov byte [ebp - 0xfd], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.0040a2a0
mov al, byte [ebp - 0xfd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e647b
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0040a320
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.0040a320
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.0040a2a0
mov byte [ebp - 0xfd], 0
jmp 0x40cebe