Function at 0x554942
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x140
mov esi, esp
mov dword [esi + 0x128], ebp
lea eax, [esi + 0x130]
mov dword [esi + 0x24], ecx
mov ebx, edx
lea edi, [esi + 0xf8]
mov edx, 0x80000002
mov dword [eax - 4], esp
or dword [eax + 8], 0xffffffff
mov dword [eax + 4], 0x5870f0
mov ecx, dword fs:[0]
mov dword [eax], ecx
mov dword fs:[0], eax
mov ecx, edi
push ebx
push 0x33
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallDisplayIconDisplayNameDisplayVersionInstallDateInstallLocationPublisherQuietUninstallStringUninstallStringEstimatedSizeNoModifyNoRepairLanguageidversiontitleauthorsdescriptionmachineArchitectureruntimeDependenciesmainExeososMinVersionchannelError:
call fcn.00549374
add esp, 0xc
cmp dword [edi], 0
jne 0x554f3e
mov eax, dword [esi + 0xfc]
lea edi, [esi + 0x64]
lea edx, [esi + 0x78]
lea ecx, [esi + 0xa8]
and dword [esi + 0x138], 0
mov dword [esi + 0x60], ebx
and dword [edi], 0
and dword [edx], 0
and dword [ecx], 0
mov dword [esi + 0x34], eax
push 0
push 0
push 0
push 0
push 0
push 0
push edx
push edi
push 0
push ecx
push 0
push eax
call dword [sym.imp.advapi32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x554f2f
mov edx, dword [esi + 0x78]
mov eax, dword [esi + 0x64]
lea ecx, [esi + 0xa8]
inc edx
mov dword [esi + 0x2c], eax
call fcn.00576a4c
movsd xmm1, qword [esi + 0xbc]
movzx ecx, word [esi + 0xa8]
movq xmm0, qword [esi + 0xb4]
movsd xmm2, qword [esi + 0xc4]
movzx edx, word [esi + 0xaa]
mov edi, dword [esi + 0xac]
mov eax, dword [esi + 0xb0]
movsd qword [esi + 0x90], xmm1
movq xmm1, qword [esi + 0xcc]
cmp cx, 3
movq qword [esi + 0x88], xmm0
movsd qword [esi + 0x98], xmm2
movq qword [esi + 0xa0], xmm1
je 0x554f2f
movsd xmm1, qword [esi + 0x98]
movq xmm0, qword [esi + 0xa0]
movsd xmm2, qword [esi + 0x88]
mov dword [esi + 0x18], edi
mov word [esi + 0x30], dx
mov dword [esi + 0xc], ecx
mov dword [esi + 0x1c], eax
mov dword [esi + 0x138], 1
movsd qword [esi + 0xe8], xmm1
movq xmm1, qword [esi + 0x90]
movq qword [esi + 0xf0], xmm0
movsd qword [esi + 0xd8], xmm2
movq qword [esi + 0xe0], xmm1
push 0x38
pop ecx
push 4
pop edx
call fcn.0042029e
mov ecx, eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0x28], ecx
mov word [ecx], ax
movzx eax, word [esi + 0x30]
mov word [ecx + 2], ax
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
lea eax, [esi + 0xd8]
movsd xmm0, qword [eax]
movq xmm1, qword [eax + 8]
movsd qword [ecx + 0xc], xmm0
movq qword [ecx + 0x14], xmm1
movsd xmm0, qword [eax + 0x10]
movsd qword [ecx + 0x1c], xmm0
movq xmm0, qword [eax + 0x18]
lea eax, [esi + 0x34]
movq qword [ecx + 0x24], xmm0
mov dword [ecx + 0x2c], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x30], eax
mov eax, dword [esi + 0x24]
and dword [ecx + 0x34], 0
add eax, 0x10
mov dword [esi + 0x5c], eax
mov dword [esi + 0x138], 2
mov dword [esi + 0x138], 2
push ecx
lea eax, [esi + 0x64]
push eax
call fcn.0051ef09
pop eax
pop ecx
mov eax, dword [esi + 0x64]
mov edi, dword [esi + 0x60]
cmp eax, 0x80000000
je 0x554e9c
cmp eax, 0x80000001
je 0x554f1b
mov dword [esi + 0x2c], eax
mov ebx, dword [esi + 0x68]
mov eax, dword [esi + 0x6c]
mov edx, dword [esi + 0x34]
mov dword [esi + 0x138], 3
lea ecx, [esi + 0x70]
push edi
push eax
mov dword [esi + 0x1c], ebx
push ebx
call fcn.00549374
add esp, 0xc
mov ecx, dword [esi + 0x70]
test ecx, ecx
je 0x554bb3
mov edx, dword [esi + 0x74]
call fcn.0055515a
mov ecx, dword [esi + 0x2c]
mov edx, dword [esi + 0x1c]
call fcn.0041b0e1
mov ecx, dword [esi + 0x28]
jmp 0x554b3b
movq xmm0, qword [esi + 0x70]
lea ecx, [esi + 0xa8]
mov edx, 0x64ef10
movq qword [esi + 0xa8], xmm0
call fcn.00555132
mov dword [esi + 0x138], 4
lea ecx, [esi + 0x78]
mov edx, eax
push 0xb
push 0x64de7a
mov dword [esi + 0x10], eax
call fcn.0054998c
pop eax
pop ecx
mov edx, dword [esi + 0x10]
mov byte [esi + 9], 0
mov dword [esi + 0x138], 5
lea ecx, [esi + 0x88]
push 0xe
push 0x64de85
call fcn.0054998c
pop eax
pop ecx
cmp dword [esi + 0x78], 7
je 0x554dfa
cmp dword [esi + 0x88], 7
je 0x554dfa
mov byte [esi + 0xa], 0
mov dword [esi + 0x138], 6
lea ecx, [esi + 0xd8]
lea edx, [esi + 0x78]
push 0x64ef20
call fcn.00555166
pop eax
cmp dword [esi + 0xd8], 3
jne 0x554e0a
mov eax, dword [esi + 0xdc]
mov edx, dword [esi + 0xe0]
mov ecx, dword [esi + 0xe4]
mov byte [esi + 0xb], 0
mov dword [esi + 0x138], 7
mov dword [esi + 0x14], edx
mov dword [esi + 0xc], ecx
mov dword [esi + 0x20], eax
lea ecx, [esi + 0xa8]
lea edx, [esi + 0x88]
push 0x64ef30
call fcn.00555166
pop eax
cmp dword [esi + 0xa8], 3
jne 0x554e25
mov eax, dword [esi + 0xac]
mov edi, dword [esi + 0x24]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0xb0]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x48], eax
push dword [esi + 0xc]
push dword [esi + 0x14]
push dword [edi + 0x1c]
push dword [edi + 0x18]
call fcn.00574920
add esp, 0x10
cmp dword [edi + 8], 0
jne 0x554d03
mov edx, dword [esi + 0x5c]
mov ecx, edi
mov dword [esi + 0x138], 8
mov dword [esi + 0x38], eax
call fcn.0059faae
mov eax, dword [esi + 0x38]
mov edi, dword [esi + 0x24]
mov ebx, dword [edi + 4]
mov ecx, dword [edi]
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x18], ebx
and ebx, eax
shr eax, 0x19
movd xmm0, eax
mov dword [esi + 0x38], eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
movdqa xmmword [esi + 0x110], xmm0
movdqu xmm1, xmmword [ecx + ebx]
mov dword [esi + 0x30], ebx
pcmpeqb xmm0, xmm1
movdqa xmmword [esi + 0x100], xmm1
pmovmskb eax, xmm0
mov word [esi + 0x46], ax
mov edi, ecx
lea ecx, [esi + 0x46]
call fcn.0047bded
test eax, eax
je 0x554d99
add edx, dword [esi + 0x30]
mov eax, dword [esi + 0xc]
mov ecx, edi
and edx, dword [esi + 0x18]
neg edx
imul ebx, edx, 0x18
cmp eax, dword [edi + ebx - 0x10]
jne 0x554d57
add ebx, ecx
push dword [esi + 0xc]
push dword [ebx - 0x14]
push dword [esi + 0x14]
call fcn.0058a7ea
mov ecx, edi
add esp, 0xc
test eax, eax
jne 0x554d57
jmp 0x554e40
cmp dword [esi + 0x50], 1
mov ebx, dword [esi + 0x30]
mov eax, 1
je 0x554dbc
mov ecx, dword [esi + 0x18]
movdqa xmm0, xmmword [esi + 0x100]
mov edx, ebx
call fcn.00484bc2
mov dword [esi + 0x54], edx
movdqa xmm1, xmmword [esi + 0x100]
pcmpeqd xmm0, xmm0
mov dword [esi + 0x50], eax
mov ecx, edi
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x554ea4
mov eax, dword [esi + 0x4c]
movdqa xmm0, xmmword [esi + 0x110]
lea ebx, [eax + ebx + 0x10]
add eax, 0x10
and ebx, dword [esi + 0x18]
mov dword [esi + 0x4c], eax
jmp 0x554d3b
lea ecx, [esi + 0x88]
call fcn.0055519f
lea ecx, [esi + 0x78]
jmp 0x554e1b
lea ecx, [esi + 0xd8]
call fcn.00549948
lea ecx, [esi + 0x88]
call fcn.0055519f
mov edi, dword [esi + 0x10]
jmp 0x554e80
lea ecx, [esi + 0xa8]
call fcn.00549948
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x14]
call fcn.0041b0e1
mov edi, dword [esi + 0x10]
jmp 0x554e76
mov ecx, dword [esi + 0x3c]
mov eax, dword [ebx - 0xc]
mov edi, dword [ebx - 8]
mov edx, dword [esi + 0x40]
mov dword [ebx - 0xc], ecx
mov ecx, dword [esi + 0x48]
mov dword [ebx - 8], edx
mov edx, dword [esi + 0x14]
mov dword [esi + 0xc], eax
mov dword [ebx - 4], ecx
mov ecx, dword [esi + 0x20]
call fcn.0041b0e1
mov ecx, dword [esi + 0xc]
mov edx, edi
mov edi, dword [esi + 0x10]
mov dword [esi + 0x58], edx
call fcn.0041e52f
mov dword [esi + 0x138], 3
mov ecx, edi
mov dword [esi + 0x138], 3
call fcn.00576fd5
mov ecx, dword [esi + 0x2c]
mov edx, dword [esi + 0x1c]
call fcn.0041b0e1
mov ecx, dword [esi + 0x28]
jmp 0x554b31
mov ebx, dword [esi + 0x54]
mov edx, dword [esi + 0x58]
mov al, byte [ecx + ebx]
test al, al
js 0x554ebf
movdqa xmm0, xmmword [ecx]
pmovmskb eax, xmm0
bsf ebx, eax
mov al, byte [ecx + ebx]
mov edi, ecx
mov ecx, dword [esi + 0x24]
and al, 1
movzx eax, al
sub dword [ecx + 8], eax
lea eax, [ebx - 0x10]
mov ecx, dword [esi + 0x38]
and eax, dword [esi + 0x18]
mov byte [edi + ebx], cl
neg ebx
mov byte [eax + edi + 0x10], cl
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x20]
inc dword [eax + 0xc]
imul eax, ebx, 0x18
mov dword [edi + eax - 0x18], ecx
mov ecx, dword [esi + 0x14]
mov dword [edi + eax - 0x14], ecx
mov ecx, dword [esi + 0xc]
mov dword [edi + eax - 0x10], ecx
mov ecx, dword [esi + 0x3c]
mov dword [edi + eax - 0xc], ecx
mov ecx, dword [esi + 0x40]
mov dword [edi + eax - 8], ecx
mov ecx, dword [esi + 0x48]
mov dword [edi + eax - 4], ecx
mov ecx, 0x80000000
jmp 0x554e6b
mov ecx, dword [esi + 0x28]
and dword [esi + 0x138], 0
mov edx, 0x64ca38
call fcn.004218ac
mov ecx, dword [esi + 0x34]
or dword [esi + 0x138], 0xffffffff
call fcn.00576fd5
mov eax, dword [esi + 0x130]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret