Function at 0x401b70
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x443c6d
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
push ebx
push edi
mov eax, dword [0x4563e4]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, SysReAllocString
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x14], 0x69
mov byte [esp + 0x18], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0xc], vtable.CWizard.0
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x240], ebx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xc4], 0x6e
mov byte [esp + 0xc8], bl
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd8], edi
mov dword [esp + 0xbc], 0x4494f4
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov dword [esp + 0xf8], 0x500
mov byte [esp + 0xfc], bl
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], edi
mov dword [esp + 0x10c], edi
mov dword [esp + 0xf0], 0x44961c
mov eax, dword [0x458dc8]
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x1d0], 0x78
mov byte [esp + 0x1d4], bl
mov dword [esp + 0x1d8], ebx
mov dword [esp + 0x1dc], edi
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1c8], 0x449514
call fcn.00409ee0
mov byte [esp + 0x1fc], al
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x168], 0x7d
mov byte [esp + 0x16c], bl
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], edi
mov dword [esp + 0x17c], edi
mov dword [esp + 0x160], 0x449534
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x208], 0x82
mov byte [esp + 0x20c], bl
mov dword [esp + 0x210], ebx
mov dword [esp + 0x214], edi
mov dword [esp + 0x21c], edi
mov dword [esp + 0x200], 0x449554
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x19c], 0x8c
mov byte [esp + 0x1a0], bl
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], edi
mov dword [esp + 0x1b0], edi
mov dword [esp + 0x194], 0x449574
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
mov dword [esp + 0x12c], 0x91
mov byte [esp + 0x130], bl
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], edi
mov dword [esp + 0x140], edi
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x124], 0x449638
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x90], 0x96
mov byte [esp + 0x94], bl
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0x88], 0x449594
lea edi, [esi + 4]
push str.IIF_EXITCODE
mov byte [esp + 0x244], 8
call fcn.00416580
push eax
call fcn.0042ffad
add esp, 4
test eax, eax
je 0x401e88
push str.IIF_EXITCODE
call fcn.00416580
push eax
call fcn.0042ffad
add esp, 4
cmp eax, 0xbc2
je 0x401e88
lea eax, [esp + 0x88]
push eax
jmp 0x402025
push esi
call fcn.00409db0
add eax, 0xfffffff7
cmp eax, 4
ja case.default.0x401e9a
jmp dword [eax*4 + 0x4021c4]
lea ecx, [esp + 0xbc]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
mov edx, str.RAID32
lea ecx, [esi + 0x14c]
call fcn.0041afa0
test al, al
jne 0x401ee5
mov edx, str.RAID64
lea ecx, [esi + 0x14c]
call fcn.0041afa0
test al, al
jne 0x401ee5
mov eax, esi
call fcn.00409ee0
test al, al
je 0x401ef6
lea edx, [esp + 0xf0]
push edx
lea eax, [esp + 0x10]
call fcn.00404650
lea eax, [esp + 0x1c8]
push eax
lea eax, [esp + 0x10]
call fcn.00404650
lea ecx, [esp + 0x160]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
lea edx, [esp + 0x200]
push edx
lea eax, [esp + 0x10]
call fcn.00404650
lea eax, [esp + 0x194]
push eax
lea eax, [esp + 0x10]
call fcn.00404650
lea ecx, [esp + 0x124]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
lea edx, [esp + 0x88]
push edx
jmp 0x402025
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x10]
call fcn.00404650
lea ecx, [esp + 0x1c8]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
lea edx, [esp + 0x160]
jmp 0x401f1f
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x10]
call fcn.00404650
push esi
call fcn.00402820
test al, al
jne 0x401fa9
mov eax, esi
call fcn.00409ee0
test al, al
je 0x401fba
lea ecx, [esp + 0xf0]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0x10]
call fcn.00404650
lea eax, [esp + 0x88]
push eax
jmp 0x402025
lea ecx, [esp + 0xbc]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
push esi
call fcn.00402820
test al, al
jne 0x401ffb
mov eax, esi
call fcn.00409ee0
test al, al
je 0x40200c
lea edx, [esp + 0xf0]
push edx
lea eax, [esp + 0x10]
call fcn.00404650
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x10]
call fcn.00404650
lea ecx, [esp + 0x88]
push ecx
lea eax, [esp + 0x10]
call fcn.00404650
lea eax, [esp + 0xc]
call fcn.004041e0
mov eax, dword [esp + 0xac]
cmp eax, ebx
je 0x40204b
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x148]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
cmp eax, ebx
je 0x402074
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
cmp eax, ebx
je 0x40209d
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x224]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
cmp eax, ebx
je 0x4020c6
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x184]
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
cmp eax, ebx
je 0x4020ef
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x1ec]
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
cmp eax, ebx
je 0x402118
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x114]
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], ebx
cmp eax, ebx
je 0x402141
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
cmp eax, ebx
je 0x40216a
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
cmp eax, ebx
je 0x402190
push eax
call fcn.0042ee58
add esp, 4
mov eax, dword [esp + 0x30]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
cmp eax, ebx
je 0x4021ad
push eax
call fcn.0042ee58
add esp, 4
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret