Function at 0x404c40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe8
push ebx
push ebp
push esi
mov esi, eax
mov eax, 0xcd44
push edi
mov word [esp + 0x20], ax
mov al, 0xc2
xor ebx, ebx
push 0x30
mov byte [esp + 0x29], al
mov byte [esp + 0x2d], al
xor eax, eax
lea edx, [esp + 0x50]
mov ecx, 0x11d0
push ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov edi, 0x10
push edx
mov ebp, 2
mov dword [esp + 0x28], 0xaac56b
mov word [esp + 0x2e], cx
mov byte [esp + 0x30], 0x8c
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], 0xc0
mov byte [esp + 0x34], 0x4f
mov byte [esp + 0x36], 0x95
mov byte [esp + 0x37], 0xee
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
call fcn.00418830
add esp, 0xc
lea ecx, [esp + 0x4c]
mov eax, 1
push ecx
lea edx, [esp + 0x20]
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], eax
push edx
lea eax, [esp + 0x40]
push 0xffffffffffffffff
mov dword [esp + 0x58], 0x30
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x70], eax
mov dword [esp + 0x80], edi
call sub.WINTRUST.dll_WinVerifyTrust
test eax, eax
jne 0x407f44
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x98]
push edx
push ebx
push 0xe
push 0x3ffe
mov ebp, 1
push esi
push ebp
mov dword [esp + 0x60], ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x74], ebx
call dword [sym.imp.CRYPT32.dll_CryptQueryObject]
test eax, eax
je 0x407f44
mov ecx, dword [esp + 0x10]
mov esi, dword [sym.imp.CRYPT32.dll_CryptMsgGetParam]
lea eax, [esp + 0x14]
push eax
push ebx
push ebx
push 6
push ecx
mov dword [esp + 0x28], ebx
call esi
test eax, eax
je 0x407f2c
mov edx, dword [esp + 0x14]
push edx
call fcn.0041712b
mov ecx, dword [esp + 0x14]
add esp, 4
mov ebp, eax
lea eax, [esp + 0x14]
push eax
push ebp
push ebx
push 6
push ecx
mov dword [esp + 0x44], ebp
call esi
test eax, eax
je 0x407f1f
push 0x6c
lea edx, [esp + 0x90]
push ebx
push edx
mov dword [esp + 0x94], ebx
call fcn.00418830
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 4]
add esp, 0xc
push ebx
mov dword [esp + 0xa8], ecx
lea ecx, [esp + 0x8c]
push ecx
push 0xb0000
push ebx
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x10]
push 0x10001
push edx
mov dword [esp + 0xa8], eax
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov edi, eax
cmp edi, ebx
je 0x407f1f
mov ebp, dword [sym.imp.CRYPT32.dll_CertGetNameStringW]
push ebx
push ebx
push ebx
push ebx
push 3
push edi
call ebp
mov esi, eax
cmp esi, ebx
je 0x407f1b
lea eax, [esi + esi]
push eax
call fcn.0041712b
add esp, 4
push esi
push eax
push ebx
push ebx
push 3
push edi
mov dword [esp + 0x44], eax
call ebp
mov esi, dword [esp + 0x2c]
test eax, eax
je 0x407f12
mov ecx, dword [esp + 0xfc]
push ecx
mov eax, esi
call fcn.00412f90
mov ecx, str.NVIDIA_Corporation
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404eb6
cmp dx, bx
je 0x404eb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404eb6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404e90
xor eax, eax
jmp 0x404ebb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Mozilla_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404ef6
cmp dx, bx
je 0x404ef2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404ef6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404ed0
xor eax, eax
jmp 0x404efb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Oracle_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404f36
cmp dx, bx
je 0x404f32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404f36
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404f10
xor eax, eax
jmp 0x404f3b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Microsoft_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404f76
cmp dx, bx
je 0x404f72
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404f76
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404f50
xor eax, eax
jmp 0x404f7b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.YANDEX_LLC
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404fb6
cmp dx, bx
je 0x404fb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404fb6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404f90
xor eax, eax
jmp 0x404fbb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Nvidia_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404ff6
cmp dx, bx
je 0x404ff2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404ff6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404fd0
xor eax, eax
jmp 0x404ffb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Apple_Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405036
cmp dx, bx
je 0x405032
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405036
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405010
xor eax, eax
jmp 0x40503b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Hewlett_Packard_Company
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405076
cmp dx, bx
je 0x405072
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405076
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405050
xor eax, eax
jmp 0x40507b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Oracle_America__Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4050b6
cmp dx, bx
je 0x4050b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4050b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405090
xor eax, eax
jmp 0x4050bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Tencent_Technology_Shenzhen__Company_Limited
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4050f6
cmp dx, bx
je 0x4050f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4050f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4050d0
xor eax, eax
jmp 0x4050fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Micro_Focus_International_plc
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405136
cmp dx, bx
je 0x405132
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405136
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405110
xor eax, eax
jmp 0x40513b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.LLC_Mail.Ru
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405176
cmp dx, bx
je 0x405172
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405176
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405150
xor eax, eax
jmp 0x40517b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Mail.Ru_Games_LLC
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4051b6
cmp dx, bx
je 0x4051b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4051b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405190
xor eax, eax
jmp 0x4051bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.VMware__Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4051f6
cmp dx, bx
je 0x4051f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4051f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4051d0
xor eax, eax
jmp 0x4051fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.KMP_Media_co.__Ltd
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405236
cmp dx, bx
je 0x405232
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405236
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405210
xor eax, eax
jmp 0x40523b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Bluestack_Systems__Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405276
cmp dx, bx
je 0x405272
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405276
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405250
xor eax, eax
jmp 0x40527b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.PROMT
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4052b6
cmp dx, bx
je 0x4052b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4052b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405290
xor eax, eax
jmp 0x4052bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.ABBYY_SOLUTIONS_LIMITED
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4052f6
cmp dx, bx
je 0x4052f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4052f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4052d0
xor eax, eax
jmp 0x4052fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Microsoft_Windows_XP_Publisher
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405336
cmp dx, bx
je 0x405332
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405336
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405310
xor eax, eax
jmp 0x40533b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Corel_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405376
cmp dx, bx
je 0x405372
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405376
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405350
xor eax, eax
jmp 0x40537b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Canon_Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4053b6
cmp dx, bx
je 0x4053b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4053b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405390
xor eax, eax
jmp 0x4053bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Conexant_Systems__Inc.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4053f6
cmp dx, bx
je 0x4053f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4053f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4053d0
xor eax, eax
jmp 0x4053fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.SEIKO_EPSON_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405436
cmp dx, bx
je 0x405432
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405436
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405410
xor eax, eax
jmp 0x40543b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Huawei_Technologies_Co.__Ltd.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405476
cmp dx, bx
je 0x405472
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405476
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405450
xor eax, eax
jmp 0x40547b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.LSI_Corporation
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4054b6
cmp dx, bx
je 0x4054b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4054b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405490
xor eax, eax
jmp 0x4054bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Crystal_Rich_Ltd
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4054f6
cmp dx, bx
je 0x4054f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4054f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4054d0
xor eax, eax
jmp 0x4054fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Lanzhou_Itanium_Software_Technology_Co.__Ltd.
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405536
cmp dx, bx
je 0x405532
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405536
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405510
xor eax, eax
jmp 0x40553b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Aleksoid1978_mail.ru
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405576
cmp dx, bx
je 0x405572
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405576
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405550
xor eax, eax
jmp 0x40557b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, 0x488d98
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4055b6
cmp dx, bx
je 0x4055b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4055b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405590
xor eax, eax
jmp 0x4055bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.IVT_CORPORATION
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4055f6
cmp dx, bx
je 0x4055f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4055f6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4055d0
xor eax, eax
jmp 0x4055fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, 0x488df8
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405636
cmp dx, bx
je 0x405632
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405636
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405610
xor eax, eax
jmp 0x40563b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.ABBYY_PRODUCTION_LLC
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405676
cmp dx, bx
je 0x405672
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405676
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405650
xor eax, eax
jmp 0x40567b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.help_winzip.com
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4056b6
cmp dx, bx
je 0x4056b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4056b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405690
xor eax, eax
jmp 0x4056bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.TeamSpeak_Systems_GmbH
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4056f9
cmp dx, bx
je 0x4056f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4056f9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4056d0
xor eax, eax
jmp 0x4056fe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, 0x488eb8
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405739
cmp dx, bx
je 0x405732
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405739
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405710
xor eax, eax
jmp 0x40573e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.EGIS_TECHNOLOGY_INC.
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405779
cmp dx, bx
je 0x405772
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405779
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405750
xor eax, eax
jmp 0x40577e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Acer_Incorporated
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4057b9
cmp dx, bx
je 0x4057b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4057b9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405790
xor eax, eax
jmp 0x4057be
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.NewTech_Infosystems__Inc
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4057f9
cmp dx, bx
je 0x4057f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4057f9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4057d0
xor eax, eax
jmp 0x4057fe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, 0x488f5c
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405839
cmp dx, bx
je 0x405832
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405839
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405810
xor eax, eax
jmp 0x40583e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Lexmark_International__Inc.
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40587d
cmp dx, bx
je 0x405876
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40587d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405850
xor eax, eax
jmp 0x405882
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Microsoft_Windows_Hardware_Compatibility_Publisher
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4058ba
cmp dx, bx
je 0x4058b3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4058ba
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405891
xor eax, eax
jmp 0x4058bf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.University_of_California__Berkeley
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4058f9
cmp dx, bx
je 0x4058f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4058f9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4058d0
xor eax, eax
jmp 0x4058fe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.ssladmin_gridrepublic.org
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405939
cmp dx, bx
je 0x405932
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405939
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405910
xor eax, eax
jmp 0x40593e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Windows_Phone
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40597d
cmp dx, bx
je 0x405976
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40597d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405950
xor eax, eax
jmp 0x405982
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.cert_ezbsystems.com
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4059ba
cmp dx, bx
je 0x4059b3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4059ba
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405991
xor eax, eax
jmp 0x4059bf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Crypto_Pro
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4059f9
cmp dx, bx
je 0x4059f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4059f9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4059d0
xor eax, eax
jmp 0x4059fe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.TOSHIBA_CORPORATION
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405a39
cmp dx, bx
je 0x405a32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405a39
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405a10
xor eax, eax
jmp 0x405a3e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.AnchorFree_Inc
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405a7d
cmp dx, bx
je 0x405a76
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405a7d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405a50
xor eax, eax
jmp 0x405a82
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Electronic_Arts__Inc.
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405aba
cmp dx, bx
je 0x405ab3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405aba
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405a91
xor eax, eax
jmp 0x405abf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.NVIDIA_Corporation_PE_Sign_v2014
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405af9
cmp dx, bx
je 0x405af2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405af9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405ad0
xor eax, eax
jmp 0x405afe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Intel_Corporation_Mobile_Wireless_Group
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405b39
cmp dx, bx
je 0x405b32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405b39
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405b10
xor eax, eax
jmp 0x405b3e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Pandora_TV_Co.__Ltd.
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405b7d
cmp dx, bx
je 0x405b76
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405b7d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405b50
xor eax, eax
jmp 0x405b82
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.HUAWEI_Technologies_Co.__Ltd.
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405bba
cmp dx, bx
je 0x405bb3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405bba
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405b91
xor eax, eax
jmp 0x405bbf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Sony_Corporation_of_America
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405bf9
cmp dx, bx
je 0x405bf2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405bf9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405bd0
xor eax, eax
jmp 0x405bfe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Motorola_Mobility_Inc.
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405c39
cmp dx, bx
je 0x405c32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405c39
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405c10
xor eax, eax
jmp 0x405c3e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Raptr__Inc
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405c7d
cmp dx, bx
je 0x405c76
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405c7d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405c50
xor eax, eax
jmp 0x405c82
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Plays.tv__LLC
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405cba
cmp dx, bx
je 0x405cb3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405cba
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405c91
xor eax, eax
jmp 0x405cbf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Samsung_Electronics_CO.__LTD.
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405cf9
cmp dx, bx
je 0x405cf2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405cf9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405cd0
xor eax, eax
jmp 0x405cfe
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.SweetIM_Technologies_Ltd
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405d39
cmp dx, bx
je 0x405d32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405d39
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405d10
xor eax, eax
jmp 0x405d3e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.Intel_Corporation___Rapid_Storage_Technology
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405d7d
cmp dx, bx
je 0x405d76
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405d7d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405d50
xor eax, eax
jmp 0x405d82
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov ecx, str.CyberLink_Corp.
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405dba
cmp dx, bx
je 0x405db3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x407f0e
mov dword [esp + 0x34], ebx
push esi
call fcn.00417667
add esp, 4
mov ebp, dword [esp + 0x30]
push ebp
call fcn.00417667
mov ebp, dword [esp + 0x38]
add esp, 4
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.CRYPT32.dll_CryptMsgClose]
mov eax, dword [esp + 0x18]
push 1
push eax
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x20]
push edx
push ebx
mov dword [esp + 0x74], 2
call sub.WINTRUST.dll_WinVerifyTrust
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0xe8
ret