Function at 0x401b70
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44322d
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
push ebx
push edi
mov eax, dword [0x4543e4]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, SysReAllocString
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x14], 0x69
mov byte [esp + 0x18], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0xc], vtable.CWizard.0
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x240], ebx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xc4], 0x6e
mov byte [esp + 0xc8], bl
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd8], edi
mov dword [esp + 0xbc], 0x4484f0
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov dword [esp + 0xf8], 0x500
mov byte [esp + 0xfc], bl
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], edi
mov dword [esp + 0x10c], edi
mov dword [esp + 0xf0], 0x448618
mov eax, dword [0x456d48]
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x1d0], 0x78
mov byte [esp + 0x1d4], bl
mov dword [esp + 0x1d8], ebx
mov dword [esp + 0x1dc], edi
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1c8], 0x448510
call fcn.0040a020
mov byte [esp + 0x1fc], al
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x168], 0x7d
mov byte [esp + 0x16c], bl
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], edi
mov dword [esp + 0x17c], edi
mov dword [esp + 0x160], 0x448530
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x208], 0x82
mov byte [esp + 0x20c], bl
mov dword [esp + 0x210], ebx
mov dword [esp + 0x214], edi
mov dword [esp + 0x21c], edi
mov dword [esp + 0x200], 0x448550
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x19c], 0x8c
mov byte [esp + 0x1a0], bl
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], edi
mov dword [esp + 0x1b0], edi
mov dword [esp + 0x194], 0x448570
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
mov dword [esp + 0x12c], 0x91
mov byte [esp + 0x130], bl
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], edi
mov dword [esp + 0x140], edi
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x124], 0x448634
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x90], 0x96
mov byte [esp + 0x94], bl
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0x88], 0x448590
lea edi, [esi + 8]
push str.IIF_EXITCODE
mov byte [esp + 0x244], 8
call fcn.00415ca0
push eax
call fcn.0042f82d
add esp, 4
test eax, eax
je 0x401e88
push str.IIF_EXITCODE
call fcn.00415ca0
push eax
call fcn.0042f82d
add esp, 4
cmp eax, 0xbc2
je 0x401e88
lea eax, [esp + 0x88]
push eax
jmp 0x402022
mov eax, dword [esi + 4]
add eax, 0xfffffff7
cmp eax, 4
ja case.default.0x401e97
jmp dword [eax*4 + 0x4021c0]
lea ecx, [esp + 0xbc]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
mov edx, str.RAID32
lea ecx, [esi + 0x14c]
call fcn.0041a5f0
test al, al
jne 0x401ee2
mov edx, str.RAID64
lea ecx, [esi + 0x14c]
call fcn.0041a5f0
test al, al
jne 0x401ee2
mov eax, esi
call fcn.0040a020
test al, al
je 0x401ef3
lea edx, [esp + 0xf0]
push edx
lea eax, [esp + 0x10]
call fcn.004045f0
lea eax, [esp + 0x1c8]
push eax
lea eax, [esp + 0x10]
call fcn.004045f0
lea ecx, [esp + 0x160]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
lea edx, [esp + 0x200]
push edx
lea eax, [esp + 0x10]
call fcn.004045f0
lea eax, [esp + 0x194]
push eax
lea eax, [esp + 0x10]
call fcn.004045f0
lea ecx, [esp + 0x124]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
lea edx, [esp + 0x88]
push edx
jmp 0x402022
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x10]
call fcn.004045f0
lea ecx, [esp + 0x1c8]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
lea edx, [esp + 0x160]
jmp 0x401f1c
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x10]
call fcn.004045f0
push esi
call fcn.004027b0
test al, al
jne 0x401fa6
mov eax, esi
call fcn.0040a020
test al, al
je 0x401fb7
lea ecx, [esp + 0xf0]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0x10]
call fcn.004045f0
lea eax, [esp + 0x88]
push eax
jmp 0x402022
lea ecx, [esp + 0xbc]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
push esi
call fcn.004027b0
test al, al
jne 0x401ff8
mov eax, esi
call fcn.0040a020
test al, al
je 0x402009
lea edx, [esp + 0xf0]
push edx
lea eax, [esp + 0x10]
call fcn.004045f0
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x10]
call fcn.004045f0
lea ecx, [esp + 0x88]
push ecx
lea eax, [esp + 0x10]
call fcn.004045f0
lea eax, [esp + 0xc]
call fcn.00404180
mov eax, dword [esp + 0xac]
cmp eax, ebx
je 0x402048
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x148]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
cmp eax, ebx
je 0x402071
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
cmp eax, ebx
je 0x40209a
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x224]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
cmp eax, ebx
je 0x4020c3
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x184]
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
cmp eax, ebx
je 0x4020ec
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x1ec]
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
cmp eax, ebx
je 0x402115
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x114]
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], ebx
cmp eax, ebx
je 0x40213e
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
cmp eax, ebx
je 0x402167
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
cmp eax, ebx
je 0x40218d
push eax
call fcn.0042e4d8
add esp, 4
mov eax, dword [esp + 0x30]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
cmp eax, ebx
je 0x4021aa
push eax
call fcn.0042e4d8
add esp, 4
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret