Function at 0x40aeea
Capabilities:
Delete registry value

Disassembly:
push 0x4f0
mov eax, 0x4bd225
call fcn.004991ba
mov eax, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1c8], esi
call fcn.00449808
push esi
push str.Global_s
lea esi, [ebp - 0x9c]
call fcn.0042fa11
pop ecx
pop ecx
xor edi, edi
mov dword [ebp - 4], edi
cmp dword [ebp - 0x84], 0x10
mov eax, dword [ebp - 0x98]
jae 0x40af3c
lea eax, [ebp - 0x98]
push eax
call fcn.00406834
test eax, eax
je 0x40af4e
push edi
push 1
jmp 0x40c382
cmp dword [ebp - 0x84], 0x10
mov eax, dword [ebp - 0x98]
jae 0x40af63
lea eax, [ebp - 0x98]
push eax
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x80]
push eax
call fcn.00407309
pop ecx
pop ecx
push dword [ebp - 0x1c8]
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], bl
call fcn.00403461
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00401215
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x3c8]
call fcn.00403db0
push edi
push edi
lea eax, [ebp - 0x1e0]
call fcn.004377e8
push 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x60]
pop esi
cmp dword [ebp - 0x4c], esi
jae 0x40afdb
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x68], esi
jae 0x40afe6
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x1e0]
call fcn.004077a5
pop ecx
test eax, eax
je 0x40c35d
lea eax, [ebp - 0x25c]
push eax
push ecx
lea eax, [ebp - 0x1e0]
push eax
mov edx, str.time
call fcn.00437ade
pop ecx
push eax
call fcn.00436d1d
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.00401215
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xa
call fcn.00403db0
lea eax, [ebp - 0x278]
push eax
push ecx
lea eax, [ebp - 0x1e0]
push eax
mov edx, str.reason
call fcn.00437ade
pop ecx
push eax
call fcn.00436d1d
push eax
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0xb
call fcn.00401215
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x278]
call fcn.00403db0
xor eax, eax
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], edi
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c0], 0x4c21bc
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1c8], edi
cmp dword [ebp - 0x68], esi
jae 0x40b0bf
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x4c], esi
jae 0x40b0d0
lea eax, [ebp - 0x60]
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x1e0]
push eax
mov edx, str.state
call fcn.00437ade
mov esi, eax
call fcn.00436e1d
mov esi, eax
cmp esi, ebx
jne 0x40c18b
mov dword [ebp - 0x1c4], 0x40819a
cmp dword [ebp - 0x1b8], edi
je 0x40c0dc
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
push str.wfctSecShare
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b241
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.case2ssp__d
lea ecx, [ebp - 0x25c]
call fcn.0042f9b3
pop ecx
pop ecx
push 0xffffffffffffffff
push edi
push 0x4ea28c
mov byte [ebp - 4], 0xf
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x25c]
mov byte [ebp - 4], 0xe
call fcn.00403ead
cmp dword [0x4ea2a4], 8
mov eax, dword [0x4ea290]
jae 0x40b177
mov eax, 0x4ea290
push eax
push str.Softwareprojonepodlp_smpcache_
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 0x1c0], 0x4c21fc
call fcn.00403461
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x3e4]
mov byte [ebp - 4], 0x10
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b1ca
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b1d5
mov eax, dword [eax + 4]
jmp 0x40b1d8
add eax, 4
push ecx
push eax
push 0x4c2208
lea ecx, [ebp - 0x48c]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x12
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x48c]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x4c4]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x3e4]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1bc], 0x408203
mov dword [ebp - 0x1c8], 0x4083b5
jmp 0x40c308
push str.wfctDecrypt
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b2fb
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x1c0], 0x4c2250
call fcn.00403461
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x13
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b298
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b2a3
mov eax, dword [eax + 4]
jmp 0x40b2a6
add eax, 4
push ecx
push eax
push 0x4c2260
lea ecx, [ebp - 0x4fc]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x15
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x4fc]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x4a8]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0xe
call fcn.00403db0
jmp 0x40beee
push str.wfctPersonMode
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b3bf
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x1c0], 0x4c22a8
call fcn.00403461
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x16
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b352
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b35d
mov eax, dword [eax + 4]
jmp 0x40b360
add eax, 4
push ecx
push eax
push 0x4c22b8
lea ecx, [ebp - 0x33c]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x33c]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x320]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1bc], 0x408432
jmp 0x40c308
push str.wfctOffline
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b503
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], ax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x19
call fcn.00407a59
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x2b0]
call fcn.00403461
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x1a
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b43a
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b445
mov eax, dword [eax + 4]
jmp 0x40b448
add eax, 4
push ecx
push eax
push 0x4c2304
lea ecx, [ebp - 0x320]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x1c
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x320]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x33c]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x19
call fcn.00403db0
cmp dword [ebp - 0xa0], 8
mov eax, dword [ebp - 0xb4]
jae 0x40b4ad
lea eax, [ebp - 0xb4]
cmp eax, edi
je 0x40b4d1
push 0x4c2344
lea eax, [ebp - 0x48]
push eax
call fcn.0040c4c2
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0xb8]
push eax
lea esi, [ebp - 0x48]
call fcn.0040c7f8
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40b4dd
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40b4e9
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00407d10
pop ecx
pop ecx
lea esi, [ebp - 0xb8]
jmp 0x40c0cc
push str.wfctNetshare
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b5d1
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x1c0], 0x4c2360
call fcn.00403461
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x1d
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b55a
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b565
mov eax, dword [eax + 4]
jmp 0x40b568
add eax, 4
push ecx
push eax
push 0x4c2370
lea ecx, [ebp - 0x454]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x1f
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x454]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x438]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1bc], 0x408479
mov dword [ebp - 0x1c8], 0x4087c2
jmp 0x40c308
push str.wfctRemoteControlReq
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b668
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x20
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x21
cmp dword [eax + 0x18], 8
jb 0x40b61d
mov eax, dword [eax + 4]
jmp 0x40b620
add eax, 4
push eax
push 0x4c23b8
lea ecx, [ebp - 0x240]
call fcn.0042f9b3
pop ecx
pop ecx
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x22
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
lea ecx, [ebp - 0x1fc]
jmp 0x40c167
push str.wfctUsbStoreUse
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b789
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x130], edi
mov word [ebp - 0x140], ax
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x23
call fcn.0040895b
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x24
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x12c], 8
mov edx, dword [ebp - 0x140]
jae 0x40b6ec
lea edx, [ebp - 0x140]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b6f8
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b703
mov eax, dword [eax + 4]
jmp 0x40b706
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x26
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x23
call fcn.00403db0
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40b763
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40b76f
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00407d10
pop ecx
pop ecx
lea esi, [ebp - 0x144]
jmp 0x40c0cc
push str.wfctInstSoftware
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b895
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0xdc], edi
mov word [ebp - 0xec], ax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x27
call fcn.00408c69
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x28
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0xd8], 8
mov edx, dword [ebp - 0xec]
jae 0x40b80f
lea edx, [ebp - 0xec]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b81b
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b826
mov eax, dword [eax + 4]
jmp 0x40b829
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x2a
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c241c
mov dword [ebp - 0x1bc], 0x408db0
lea esi, [ebp - 0xf0]
jmp 0x40c0cc
push str.wfctPrint
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40b9a1
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x114], edi
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00409187
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x2c
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x110], 8
mov edx, dword [ebp - 0x124]
jae 0x40b91b
lea edx, [ebp - 0x124]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40b927
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40b932
mov eax, dword [eax + 4]
jmp 0x40b935
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x2e
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c2428
mov dword [ebp - 0x1bc], 0x409379
lea esi, [ebp - 0x128]
jmp 0x40c0cc
push str.wfcSendFile
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40baad
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], edi
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x2f
call fcn.004098fa
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x30
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x31
cmp dword [ebp - 0xbc], 8
mov edx, dword [ebp - 0xd0]
jae 0x40ba27
lea edx, [ebp - 0xd0]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40ba33
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40ba3e
mov eax, dword [eax + 4]
jmp 0x40ba41
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x32
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c2428
mov dword [ebp - 0x1bc], 0x409aec
lea esi, [ebp - 0xd4]
jmp 0x40c0cc
push str.wfcUninstall
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40bbb9
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x14c], edi
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x33
call fcn.00409ef1
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x34
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x148], 8
mov edx, dword [ebp - 0x15c]
jae 0x40bb33
lea edx, [ebp - 0x15c]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40bb3f
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40bb4a
mov eax, dword [eax + 4]
jmp 0x40bb4d
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x36
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c2428
mov dword [ebp - 0x1bc], 0x40a038
lea esi, [ebp - 0x160]
jmp 0x40c0cc
push str.wfcChangeFileKey
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40bcc5
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0xf8], edi
mov word [ebp - 0x108], ax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x37
call fcn.0040a2f5
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1fc]
call fcn.00403461
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x38
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x39
cmp dword [ebp - 0xf4], 8
mov edx, dword [ebp - 0x108]
jae 0x40bc3f
lea edx, [ebp - 0x108]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40bc4b
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40bc56
mov eax, dword [eax + 4]
jmp 0x40bc59
add eax, 4
push edx
push ecx
push eax
push 0x4c23ec
lea ecx, [ebp - 0x218]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x3a
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x218]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x240]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x1fc]
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c2428
mov dword [ebp - 0x1bc], 0x40a43c
lea esi, [ebp - 0x10c]
jmp 0x40c0cc
push str.wfctRemoveDocwm
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40bd7f
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x374]
call fcn.00403461
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x3b
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40bd12
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40bd1d
mov eax, dword [eax + 4]
jmp 0x40bd20
add eax, 4
push ecx
push eax
push 0x4c2438
lea ecx, [ebp - 0x400]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x3d
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x400]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x470]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c24b8
jmp 0x40beee
push 0x4c1728
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40be39
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x3ac]
call fcn.00403461
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x3e
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40bdcc
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40bdd7
mov eax, dword [eax + 4]
jmp 0x40bdda
add eax, 4
push ecx
push eax
push 0x4c24c8
lea ecx, [ebp - 0x4e0]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x40
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x4e0]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x41c]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c2514
jmp 0x40beee
push str.wfctBurn
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40befd
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x278]
call fcn.00403461
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x41
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40be86
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40be91
mov eax, dword [eax + 4]
jmp 0x40be94
add eax, 4
push ecx
push eax
push 0x4c2520
lea ecx, [ebp - 0x2cc]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x43
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x2cc]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x294]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1c0], 0x4c256c
mov dword [ebp - 0x1bc], fcn.004081ce
jmp 0x40c308
push str.wfctDecMail
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40bfde
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040ab15
pop ecx
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x44
call fcn.00403461
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x45
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x19c], 8
mov edx, dword [ebp - 0x1b0]
jae 0x40bf6c
lea edx, [ebp - 0x1b0]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40bf78
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40bf83
mov eax, dword [eax + 4]
jmp 0x40bf86
add eax, 4
push edx
push ecx
push eax
push 0x4c2578
lea ecx, [ebp - 0x294]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x47
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x294]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x2cc]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x278]
call fcn.00403db0
lea esi, [ebp - 0x1b4]
jmp 0x40c0b8
push str.wfctSuspendPrintWM
push dword [ebp - 0x1b8]
call esi
test eax, eax
jne 0x40c0dc
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x1e0]
call fcn.0040ac46
pop ecx
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x48
call fcn.00403461
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x49
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x4a
cmp dword [ebp - 0x164], 8
mov edx, dword [ebp - 0x178]
jae 0x40c04b
lea edx, [ebp - 0x178]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40c057
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40c062
mov eax, dword [eax + 4]
jmp 0x40c065
add eax, 4
push edx
push ecx
push eax
push 0x4c25c8
lea ecx, [ebp - 0x294]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x4b
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x294]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x2cc]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x278]
call fcn.00403db0
lea esi, [ebp - 0x17c]
mov dword [ebp - 0x1c4], 0x408184
mov dword [ebp - 0x1bc], 0x40816d
push edi
push ebx
mov byte [ebp - 4], 0xe
call fcn.00403ead
jmp 0x40c308
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x25c]
call fcn.00403461
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x4c
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40c114
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40c11f
mov eax, dword [eax + 4]
jmp 0x40c122
add eax, 4
push ecx
push eax
push 0x4c25f8
lea ecx, [ebp - 0x304]
call fcn.0042f9b3
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x4e
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x304]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x2e8]
call fcn.00403ead
lea ecx, [ebp - 0x25c]
push edi
push ebx
mov byte [ebp - 4], 0xe
call fcn.00403db0
mov dword [ebp - 0x1bc], 0x40816d
mov dword [ebp - 0x1c4], 0x408184
jmp 0x40c308
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x25c]
call fcn.00403461
cmp esi, 2
jne 0x40c22d
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x4f
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x50
cmp dword [ebp - 0x180], 8
mov edx, dword [ebp - 0x194]
jae 0x40c1d5
lea edx, [ebp - 0x194]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40c1e1
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40c1ec
mov eax, dword [eax + 4]
jmp 0x40c1ef
add eax, 4
push edx
push ecx
push eax
push 0x4c2624
lea ecx, [ebp - 0x2e8]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x51
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x2e8]
call fcn.00403ead
lea esi, [ebp - 0x304]
jmp 0x40c2c9
push esi
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x52
call fcn.004072a8
pop ecx
mov esi, eax
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x53
call fcn.00406bb3
pop ecx
mov byte [ebp - 4], 0x54
cmp dword [esi + 0x18], 8
jb 0x40c266
mov esi, dword [esi + 4]
jmp 0x40c269
add esi, 4
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x40c275
lea ecx, [ebp - 0x28]
cmp dword [eax + 0x18], 8
jb 0x40c280
mov eax, dword [eax + 4]
jmp 0x40c283
add eax, 4
push esi
push ecx
push eax
push 0x4c265c
lea ecx, [ebp - 0x2e8]
call fcn.0042f9b3
add esp, 0x10
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0x55
call fcn.00403dfb
push edi
push ebx
lea esi, [ebp - 0x2e8]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x304]
call fcn.00403ead
lea esi, [ebp - 0x294]
push edi
push ebx
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xe
call fcn.00403db0
cmp dword [ebp - 0x4c], 8
mov ecx, dword [ebp - 0x60]
jae 0x40c2ed
lea ecx, [ebp - 0x60]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x40c2f9
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00407d10
pop ecx
pop ecx
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x40c314
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x224]
push ecx
push dword [ebp - 0x1c8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c0]
push eax
call fcn.004076c7
add esp, 0x18
push edi
push ebx
lea esi, [ebp - 0x48]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x198]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x2c]
call fcn.00403ead
lea esi, [ebp - 0x1e0]
mov byte [ebp - 4], 4
call fcn.00436b2e
push edi
push ebx
lea esi, [ebp - 0x64]
call fcn.00403ead
push edi
push ebx
lea esi, [ebp - 0x80]
call fcn.00403ead
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.00403db0
call fcn.0049923d
ret