Function at 0x409480
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x449ca1
mov eax, dword fs:[0]
push eax
mov eax, 0x1888
call fcn.00433930
mov eax, dword [0x45e764]
xor eax, esp
mov dword [esp + 0x1884], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x45e764]
xor eax, esp
push eax
lea eax, [esp + 0x189c]
mov dword fs:[0], eax
xor ebp, ebp
push ebp
mov esi, ecx
mov eax, dword [esi + 0xfc]
push ebp
push 0x1009
push eax
mov dword [esp + 0xdc], esi
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x104
lea ecx, [esp + 0x1381]
push ebp
push ecx
mov byte [esp + 0x1388], 0
call fcn.004338b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x1380]
push edx
mov ecx, esi
call fcn.004041b0
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40952a
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xe0], eax
mov dword [esp + 0x18a4], ebp
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40955e
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xd8], eax
mov byte [esp + 0x18a4], 1
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409593
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x9c], eax
mov byte [esp + 0x18a4], 2
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4095c8
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
mov byte [esp + 0x18a4], 3
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4095fd
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xd0], eax
mov byte [esp + 0x18a4], 4
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409632
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x18a4], 5
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409667
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0x18a4], 6
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40969c
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x7c], eax
mov byte [esp + 0x18a4], 7
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x4096ce
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0x18a4], 8
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409700
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0x18a4], 9
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409732
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x18a4], 0xa
call fcn.00419c94
push 0x44dbd0
push str.RaonSecureTouchEn_nxKey
lea ecx, [esp + 0x1384]
push ecx
lea edx, [esp + 0xec]
push str._s_s_s
push edx
mov byte [esp + 0x18b8], 0xb
call fcn.00405860
push 0x44db9c
push str.RaonSecureTouchEn_nxKey
lea eax, [esp + 0x1398]
push eax
lea ecx, [esp + 0xf0]
push str._s_s_s
push ecx
call fcn.00405860
push 0x44d63c
push str.RaonSecureTouchEn_nxKey
lea edx, [esp + 0x13ac]
push edx
lea eax, [esp + 0x10c]
push str._s_s_s
push eax
call fcn.00405860
add esp, 0x3c
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44db8c
push edx
lea eax, [esp + 0xa4]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0xc
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409823
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44db7c
push edx
lea eax, [esp + 0x94]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0xd
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40987c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df98
push edx
lea eax, [esp + 0x84]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0xe
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4098d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44d1d0
push edx
lea eax, [esp + 0x8c]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0xf
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40992e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44db6c
push edx
lea eax, [esp + 0x9c]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x10
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409987
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44db60
push edx
lea eax, [esp + 0x64]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x11
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4099dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push str.JRSUKD25.sys
push edx
lea eax, [esp + 0x5c]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x12
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409a33
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0xd8]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0xe0]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xd0]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x9c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x94]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x84]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x8c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x7c]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x5c]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x54]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409b20
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x18a4], 0x13
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409b55
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc8], eax
mov byte [esp + 0x18a4], 0x14
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409b8a
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov byte [esp + 0x18a4], 0x15
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409bbf
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
mov byte [esp + 0x18a4], 0x16
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409bf4
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa0], eax
mov byte [esp + 0x18a4], 0x17
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409c29
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x18a4], 0x18
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409c5e
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa8], eax
push 0x103
lea ecx, [esp + 0x1691]
push ebp
push ecx
mov byte [esp + 0x18b0], 0x19
mov byte [esp + 0x1698], 0
call fcn.004338b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x1690]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.00407570
mov ecx, dword [eax]
push 0x44df88
push ecx
lea edx, [esp + 0xa0]
push 0x44cf24
push edx
mov byte [esp + 0x18b4], 0x1a
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409d03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df7c
push edx
lea eax, [esp + 0xb8]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x1b
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409d5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df70
push edx
lea eax, [esp + 0x98]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x1c
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409db5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df60
push edx
lea eax, [esp + 0xa8]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x1d
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409e0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df4c
push edx
lea eax, [esp + 0x90]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x1e
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409e67
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push str.CKCSP.dll
push edx
lea eax, [esp + 0xb0]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x1f
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409ec0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.Downloaded_Program_FilesTouchEnKey.dll
lea ecx, [esp + 0x1690]
push ecx
lea edx, [esp + 0xd0]
push 0x44cf24
push edx
call fcn.00405860
mov ecx, dword [esp + 0x38]
add esp, 0x10
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xc8]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0xb0]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x90]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xa0]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x88]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0xa8]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409f96
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0x18a4], 0x20
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x409fcb
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
mov byte [esp + 0x18a4], 0x21
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a000
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x18a8], 0x22
call fcn.00407570
mov edx, dword [eax]
push 0x44df08
push edx
lea eax, [esp + 0x88]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x23
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x22
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40a074
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44def4
push edx
lea eax, [esp + 0xbc]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x24
call fcn.00405860
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x22
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40a0cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.Downloaded_Program_FilesCKAppObj.dll
lea ecx, [esp + 0x1690]
push ecx
lea edx, [esp + 0xc8]
push 0x44cf24
push edx
call fcn.00405860
mov ecx, dword [esp + 0x38]
add esp, 0x10
lea eax, [esp + 0xc0]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x80]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0xb4]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
push 0x103
lea eax, [esp + 0x1489]
push ebp
push eax
mov byte [esp + 0x1490], 0
call fcn.004338b0
lea ecx, [esp + 0x1490]
push ecx
push str.CrossEX
push 0x44d650
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00411df0
add esp, 0x1c
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a185
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xbc], eax
mov byte [esp + 0x18a4], 0x25
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a1ba
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xf4], eax
mov byte [esp + 0x18a4], 0x26
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a1ef
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x108], eax
mov byte [esp + 0x18a4], 0x27
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a224
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xec], eax
mov byte [esp + 0x18a4], 0x28
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a259
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x100], eax
mov byte [esp + 0x18a4], 0x29
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a28e
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xe4], eax
lea ecx, [esp + 0x1484]
push ecx
lea edx, [esp + 0xc0]
push str._sCrossEXChrome.exe
push edx
mov byte [esp + 0x18b0], 0x2a
call fcn.00405860
lea eax, [esp + 0x1490]
push eax
lea ecx, [esp + 0x104]
push str._sCrossEXFirefox.dll
push ecx
call fcn.00405860
lea edx, [esp + 0x149c]
push edx
lea eax, [esp + 0x124]
push str._sCrossEXProtocol.dll
push eax
call fcn.00405860
lea ecx, [esp + 0x14a8]
push ecx
lea edx, [esp + 0x114]
push str._s_npraontouchenex.dll
push edx
call fcn.00405860
lea eax, [esp + 0x14b4]
push eax
lea ecx, [esp + 0x134]
push str._sCrossEX.sig
push ecx
call fcn.00405860
lea edx, [esp + 0x14c0]
push edx
lea eax, [esp + 0x124]
push str._skr.co.raon.touchenex.json
push eax
call fcn.00405860
mov edx, dword [esp + 0x70]
add esp, 0x48
lea ecx, [esp + 0xbc]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0xf4]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x108]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0xec]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x100]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xe4]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a3e6
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xf8], eax
mov byte [esp + 0x18a4], 0x2b
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a41b
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xdc], eax
mov byte [esp + 0x18a4], 0x2c
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a450
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x104], eax
mov byte [esp + 0x18a4], 0x2d
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a485
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xd4], eax
mov byte [esp + 0x18a4], 0x2e
call fcn.00421c2b
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x40a4ba
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x10c], eax
push 0x44d0e8
push str.iniLINECrossEXcrossex
lea ecx, [esp + 0x1384]
push ecx
lea edx, [esp + 0x104]
push str._s_s_s
push edx
mov byte [esp + 0x18b8], 0x2f
call fcn.00405860
push str.CrossEXService.exe.sig
push str.iniLINECrossEXcrossex
lea eax, [esp + 0x1398]
push eax
lea ecx, [esp + 0xfc]
push str._s_s_s
push ecx
call fcn.00405860
push str.ObCrossEXService.exe
push str.iniLINECrossEXcrossex
lea edx, [esp + 0x13ac]
push edx
lea eax, [esp + 0x138]
push str._s_s_s
push eax
call fcn.00405860
push str.rootCA.crt
push str.iniLINECrossEXcrossex
lea ecx, [esp + 0x13c0]
push ecx
lea edx, [esp + 0x11c]
push str._s_s_s
push edx
call fcn.00405860
add esp, 0x50
push str.UnInstallCrossEXLocal.exe
push str.iniLINECrossEXcrossex
lea eax, [esp + 0x1384]
push eax
lea ecx, [esp + 0x118]
push str._s_s_s
push ecx
call fcn.00405860
mov eax, dword [esp + 0x3c]
add esp, 0x14
lea edx, [esp + 0xf8]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0xdc]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x104]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xd4]
push edx
push eax
lea ecx, [esp + 0x28]
call fcn.0041a0d4
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x10c]
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041a0d4
lea ecx, [esp + 0x12c]
call fcn.00411920
lea ecx, [esp + 0x114]
mov byte [esp + 0x18a4], 0x30
call fcn.004220b8
mov eax, dword [esp + 0x28]
cmp eax, ebp
mov byte [esp + 0x18a4], 0x31
jle 0x40aba5
mov bl, 0x32
test ebp, ebp
jl 0x40abd1
cmp ebp, eax
jge 0x40abd1
mov eax, dword [esp + 0x24]
mov esi, dword [eax + ebp*4]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x40a671
cmp eax, dword [esi]
jne 0x40a671
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x40a6a5
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x40abcc
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004334f0
add esp, 0x10
add edi, 0x10
mov dword [esp + 0x1c], edi
mov esi, dword [esp + 0xcc]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x18ac], bl
call fcn.004075e0
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
push 0
push ecx
push ebp
add esi, 0xdc
push 1
mov ecx, esi
mov byte [esp + 0x18c0], 0x33
call fcn.00417f13
mov ecx, dword [esp + 0x5c]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x409520
push ecx
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a74d
mov eax, dword [esp + 0x54]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a74d
push 0x44da88
push 1
push ebp
mov ecx, esi
call fcn.00417d1c
jmp 0x40a752
call fcn.004017d0
push 0
push edi
lea ecx, [esp + 0x11c]
call fcn.0042214d
test eax, eax
je 0x40aab9
call fcn.004145e0
test eax, eax
je 0x40a92b
mov eax, dword [esp + 0x9c]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a914
mov eax, dword [esp + 0x84]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a914
mov eax, dword [esp + 0x8c]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a914
mov eax, dword [esp + 0x94]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40a914
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea ecx, [esp + 0x98]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea edx, [esp + 0x90]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00404860
add esp, 8
test al, al
jne 0x40a914
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00404860
add esp, 8
test al, al
je 0x40a92b
push str.SysWOW64
push str.system32
lea ecx, [esp + 0x24]
call fcn.004052c0
mov edi, dword [esp + 0x1c]
push edi
lea ecx, [esp + 0x130]
call fcn.00411930
push 0
lea ecx, [esp + 0x130]
call fcn.004118d0
movzx edx, ax
push edx
push 1
lea ecx, [esp + 0x134]
call fcn.004118d0
movzx eax, ax
push eax
push 2
lea ecx, [esp + 0x138]
call fcn.004118d0
movzx ecx, ax
push ecx
push 3
lea ecx, [esp + 0x13c]
call fcn.004118d0
movzx edx, ax
push edx
lea eax, [esp + 0x5c]
push str._d.__d.__d.__d
push eax
call fcn.00405860
mov ecx, dword [esp + 0x64]
add esp, 0x18
push ecx
push 2
push ebp
mov ecx, esi
call fcn.00417d1c
cmp dword [ebp*4 + 0x45ff80], 1
jne 0x40a9b5
push str.Reboot
jmp 0x40aa77
mov edx, dword [esp + 0x14]
push str.CrossEX.sig
push edx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40aa72
mov eax, dword [esp + 0x14]
push str.kr.co.raon.touchenex.json
push eax
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40aa72
mov ecx, dword [esp + 0x14]
push 0x44df98
push ecx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40aa72
mov edx, dword [esp + 0x14]
push str.CKCSP.dll
push edx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40aa72
lea eax, [esp + 0x14]
push str.CrossEXService.exe.sig
push eax
call fcn.00404890
add esp, 8
test al, al
jne 0x40aa72
lea ecx, [esp + 0x14]
push str.rootCA.crt
push ecx
call fcn.00404890
add esp, 8
test al, al
jne 0x40aa72
push edi
call fcn.00401920
add esp, 4
mov ecx, esi
test eax, eax
je 0x40aa6b
push 0x44dda0
jmp 0x40aa79
push 0x44dd98
jmp 0x40aa79
push 0x44dda0
mov ecx, esi
push 3
push ebp
call fcn.00417d1c
push edi
push 4
push ebp
mov ecx, esi
call fcn.00417d1c
push edi
lea ecx, [esp + 0x370]
call fcn.00410b30
mov ecx, esi
test eax, eax
je 0x40aad9
lea edx, [esp + 0x86c]
push edx
push 5
push ebp
call fcn.00417d1c
lea eax, [esp + 0xc6c]
push eax
jmp 0x40aaeb
push 0x44d91a
push 3
push ebp
mov ecx, esi
call fcn.00417d1c
push 0x44db28
push 4
push ebp
mov ecx, esi
call fcn.00417d1c
mov ecx, esi
push 0x44d91a
push 5
push ebp
call fcn.00417d1c
push 0x44d91a
push 6
push ebp
mov ecx, esi
call fcn.00417d1c
mov eax, dword [esp + 0x5c]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40ab41
mov eax, dword [esp + 0x54]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push edi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
je 0x40ab46
call fcn.00401800
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ab6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [esp + 0x18a4], 0x31
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ab91
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
inc ebp
cmp ebp, eax
jl 0x40a633
mov esi, dword [esp + 0xcc]
call fcn.004145e0
test eax, eax
je 0x40bf11
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40abd6
push 0x80004005
call fcn.00401370
call fcn.00403820
call fcn.00419525
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0x18a4], 0x34
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40ac08
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa4], eax
mov byte [esp + 0x18a4], 0x35
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40ac3d
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xac], eax
mov byte [esp + 0x18a4], 0x36
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40ac72
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0x18a4], 0x37
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40aca4
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0x18a4], 0x38
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40acd6
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x18a4], 0x39
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40ad08
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
push 0x104
lea ecx, [esp + 0x1795]
push 0
push ecx
mov byte [esp + 0x18b0], 0x3a
mov byte [esp + 0x179c], 0
call fcn.004338b0
add esp, 0xc
push 0x104
lea edx, [esp + 0x1794]
push edx
mov ecx, esi
call fcn.004041b0
push 0x44dd88
push str.RaonSecureTouchEn_nxKey
lea eax, [esp + 0x1798]
push eax
lea ecx, [esp + 0x84]
push str._s_s_s
push ecx
call fcn.00405860
push 0x44dd78
push str.RaonSecureTouchEn_nxKey
lea edx, [esp + 0x17ac]
push edx
lea eax, [esp + 0xc4]
push str._s_s_s
push eax
call fcn.00405860
push 0x44dd68
push str.RaonSecureTouchEn_nxKey
lea ecx, [esp + 0x17c0]
push ecx
lea edx, [esp + 0xe0]
push str._s_s_s
push edx
call fcn.00405860
add esp, 0x3c
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.00407570
mov ecx, dword [eax]
push 0x44db6c
push ecx
lea edx, [esp + 0x68]
push 0x44cf24
push edx
mov byte [esp + 0x18b4], 0x3b
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x3a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ae18
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44d1d0
push edx
lea eax, [esp + 0x70]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x3c
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x3a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ae6e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44db7c
push edx
lea eax, [esp + 0x50]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x3d
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x3a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aec4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df98
push edx
lea eax, [esp + 0x78]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x3e
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x3a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40af1a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x34]
call fcn.00419c94
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0xac]
push ecx
push edx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18ac], 0x3f
call fcn.0041a0d4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x78]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0xa4]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x60]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x68]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x48]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x70]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40afd0
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0x18a4], 0x40
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b002
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x18a4], 0x41
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b034
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0x18a4], 0x42
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b066
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov byte [esp + 0x18a4], 0x43
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b098
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x18a4], 0x44
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b0ca
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
mov byte [esp + 0x18a8], 0x45
call fcn.00407570
mov edx, dword [eax]
push 0x44dd54
push edx
lea eax, [esp + 0x58]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x46
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b138
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df7c
push edx
lea eax, [esp + 0x7c]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x47
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b18e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df70
push edx
lea eax, [esp + 0x74]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x48
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b1e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push 0x44df4c
push edx
lea eax, [esp + 0x6c]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x49
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b23a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00407570
mov edx, dword [eax]
push str.CKCSP64.dll
push edx
lea eax, [esp + 0x60]
push 0x44cf24
push eax
mov byte [esp + 0x18b4], 0x4a
call fcn.00405860
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b290
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.Downloaded_Program_FilesTouchEnKey64.dll
lea ecx, [esp + 0x1690]
push ecx
lea edx, [esp + 0x20]
push 0x44cf24
push edx
call fcn.00405860
mov ecx, dword [esp + 0x4c]
add esp, 0x10
lea eax, [esp + 0x50]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x74]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x6c]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x64]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x58]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
push 0x103
lea eax, [esp + 0x158d]
push 0
push eax
mov byte [esp + 0x1594], 0
call fcn.004338b0
lea ecx, [esp + 0x1594]
push ecx
push str.CrossEX
push 0x44d650
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004016f0
add esp, 0x1c
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b376
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xfc], eax
mov byte [esp + 0x18a4], 0x4b
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b3ab
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc4], eax
mov byte [esp + 0x18a4], 0x4c
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b3e0
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x110], eax
mov byte [esp + 0x18a4], 0x4d
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b415
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xf0], eax
mov byte [esp + 0x18a4], 0x4e
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b44a
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xe8], eax
mov byte [esp + 0x18a4], 0x4f
call fcn.00421c2b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b47f
push 0x80004005
call fcn.00401370
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb8], eax
lea ecx, [esp + 0x1588]
push ecx
lea edx, [esp + 0x100]
push str._sCrossEXChrome.exe
push edx
mov byte [esp + 0x18b0], 0x50
call fcn.00405860
lea eax, [esp + 0x1594]
push eax
lea ecx, [esp + 0xd4]
push str._sCrossEXFirefox.dll
push ecx
call fcn.00405860
lea edx, [esp + 0x15a0]
push edx
lea eax, [esp + 0x12c]
push str._sCrossEXProtocol.dll
push eax
call fcn.00405860
lea ecx, [esp + 0x15ac]
push ecx
lea edx, [esp + 0x118]
push str._s_npraontouchenex.dll
push edx
call fcn.00405860
lea eax, [esp + 0x15b8]
push eax
lea ecx, [esp + 0x11c]
push str._sCrossEX.sig
push ecx
call fcn.00405860
lea edx, [esp + 0x15c4]
push edx
lea eax, [esp + 0xf8]
push str._skr.co.raon.touchenex.json
push eax
call fcn.00405860
mov edx, dword [esp + 0x84]
add esp, 0x48
lea ecx, [esp + 0xfc]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0xc4]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x110]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0xf0]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0xe8]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0xb8]
push edx
push eax
lea ecx, [esp + 0x3c]
call fcn.0041a0d4
mov eax, dword [esp + 0x3c]
xor ebx, ebx
test eax, eax
jle 0x40bbf0
mov edi, edi
test ebx, ebx
jl 0x40abd1
cmp ebx, eax
jge 0x40abd1
mov ecx, dword [esp + 0x38]
mov esi, dword [ecx + ebx*4]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x40b60e
cmp eax, dword [esi]
jne 0x40b60e
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x40b642
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x40abcc
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004334f0
add esp, 0x10
lea esi, [edi + 0x10]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0xcc]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, edi
mov byte [esp + 0x18ac], 0x51
call fcn.004075e0
mov ecx, dword [esp + 0x1c]
push 0
push 0
push 0
push 0
push ecx
push ebp
add edi, 0xdc
push 1
mov ecx, edi
mov byte [esp + 0x18c0], 0x52
call fcn.00417f13
mov ecx, dword [esp + 0x68]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x409520
push ecx
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x60]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x48]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x70]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x50]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x74]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x6c]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
mov eax, dword [esp + 0x64]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b7e8
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00404860
add esp, 8
test al, al
je 0x40b7ed
call fcn.004017d0
push 0x44db24
push 1
push ebp
mov ecx, edi
call fcn.00417d1c
mov ecx, dword [esp + 0xac]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x409520
push ecx
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b874
mov eax, dword [esp + 0x78]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b874
mov eax, dword [esp + 0xa4]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
je 0x40b88b
push 0x44d700
push 0x44d710
lea ecx, [esp + 0x1c]
call fcn.004052c0
mov esi, dword [esp + 0x14]
push 0
push esi
lea ecx, [esp + 0x11c]
call fcn.0042214d
test eax, eax
je 0x40ba1f
push esi
lea ecx, [esp + 0x130]
call fcn.00411930
push 0
lea ecx, [esp + 0x130]
call fcn.004118d0
movzx ecx, ax
push ecx
push 1
lea ecx, [esp + 0x134]
call fcn.004118d0
movzx edx, ax
push edx
push 2
lea ecx, [esp + 0x138]
call fcn.004118d0
movzx eax, ax
push eax
push 3
lea ecx, [esp + 0x13c]
call fcn.004118d0
movzx ecx, ax
push ecx
lea edx, [esp + 0x5c]
push str._d.__d.__d.__d
push edx
call fcn.00405860
mov eax, dword [esp + 0x64]
add esp, 0x18
push eax
push 2
push ebp
mov ecx, edi
call fcn.00417d1c
cmp dword [ebp*4 + 0x45ff80], 1
jne 0x40b92c
push str.Reboot
jmp 0x40b9ba
mov ecx, dword [esp + 0x1c]
push str.CrossEX.sig
push ecx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b9b5
mov edx, dword [esp + 0x1c]
push str.kr.co.raon.touchenex.json
push edx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b9b5
mov eax, dword [esp + 0x1c]
push 0x44df98
push eax
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b9b5
mov ecx, dword [esp + 0x1c]
push str.CKCSP64.dll
push ecx
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40b9b5
push esi
call fcn.00401920
add esp, 4
mov ecx, edi
test eax, eax
je 0x40b9ae
push 0x44dda0
jmp 0x40b9bc
push 0x44dd98
jmp 0x40b9bc
push 0x44dda0
mov ecx, edi
push 3
push ebp
call fcn.00417d1c
push esi
lea ecx, [esp + 0x370]
call fcn.00410b30
mov ecx, edi
test eax, eax
je 0x40b9fe
lea edx, [esp + 0x86c]
push edx
push 5
push ebp
call fcn.00417d1c
lea eax, [esp + 0xc6c]
push eax
push 6
push ebp
mov ecx, edi
call fcn.00417d1c
push esi
push 4
jmp 0x40ba53
push 0x44d91a
push 5
push ebp
call fcn.00417d1c
push 0x44d91a
push 6
push ebp
mov ecx, edi
call fcn.00417d1c
push esi
push 4
jmp 0x40ba53
push 0x44d91a
push 2
push ebp
mov ecx, edi
call fcn.00417d1c
push 0x44d91a
push 3
push ebp
mov ecx, edi
call fcn.00417d1c
push 0x44db28
push 4
push ebp
mov ecx, edi
call fcn.00417d1c
push 0x44d91a
push 5
push ebp
mov ecx, edi
call fcn.00417d1c
mov eax, dword [esp + 0x68]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
mov eax, dword [esp + 0x60]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
mov eax, dword [esp + 0x48]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
mov eax, dword [esp + 0x70]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
mov eax, dword [esp + 0x50]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
mov eax, dword [esp + 0x74]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409520
push eax
push esi
call fcn.00433180
add esp, 8
test eax, eax
sete al
test al, al
jne 0x40bb91
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.00404860
add esp, 8
test al, al
jne 0x40bb91
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00404860
add esp, 8
test al, al
jne 0x40bb91
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00404860
add esp, 8
test al, al
je 0x40bb96
call fcn.00401800
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x51
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bbbe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
mov byte [esp + 0x18a4], 0x50
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bbe2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
inc ebx
inc ebp
cmp ebx, eax
jl 0x40b5d0
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x4f
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bc1b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xe8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x4e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bc46
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xf0]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x4d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bc71
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x110]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x4c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bc9c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x4b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bcc7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xfc]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x45
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bcf2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x44
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bd1a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x43
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bd42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x42
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bd6a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x41
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bd92
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x40
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bdba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x3f
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bde2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x18a4], 0x3a
call fcn.00419fdb
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x39
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40be1b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x38
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40be43
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x37
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40be6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x36
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40be93
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x35
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bebe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x34
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bee9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x31
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf11
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x18a4], 0x30
call fcn.004220de
lea ecx, [esp + 0x12c]
mov byte [esp + 0x18a4], 0x2f
call fcn.00411690
mov eax, dword [esp + 0x10c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x2e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf64
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x2d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf8f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x104]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x2c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bfba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xdc]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x2b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bfe5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xf8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x2a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c010
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x29
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c03b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x100]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x28
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c066
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xec]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x27
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c091
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x108]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x26
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c0bc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xf4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x25
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c0e7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x22
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c112
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x21
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c13d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x20
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c168
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x19
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c193
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x18
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c1be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x17
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c1e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x16
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c214
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x15
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c23f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c26a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c295
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c2c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x18a4], 0xa
call fcn.00419fdb
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c2f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c321
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c349
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c371
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c39c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c3c7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c3f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c41d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c448
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
mov byte [esp + 0x18a4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c473
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xe0]
add eax, 0xfffffff0
mov dword [esp + 0x18a4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c4a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x189c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1884]
xor ecx, esp
call fcn.00432ccc
add esp, 0x1894
ret