Function at 0x4046f0
Capabilities:
Check if file exists
Create process on windows
Extract resource via kernel32 functions
Parse pe header
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57e1e0
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push ebx
push esi
push edi
mov eax, dword [0x5e6000]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x3c], ebx
push 0x5c0fc4
lea esi, [ebx + 0xbac]
push 0x5c0fe8
mov dword [ebp - 0x50], esi
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call fcn.004254be
test eax, eax
je 0x404798
push 0x15
push 0x5c1004
mov ecx, esi
call fcn.00402c30
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x17
push 0x5c1030
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
mov eax, 0x12
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
sub esp, 0xc
mov dword [ebp - 0xcc], 0x406f50
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xc8], 0x406fd0
push eax
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0040fb80
push 0x1b
mov dword [ebp - 4], 0
mov ecx, esi
push 0x5c10a8
mov dword [ebp - 0x28], 1
call fcn.00402c30
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x22
push 0x5c10e0
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
call fcn.0041f881
mov ecx, eax
test ecx, ecx
je 0x4068a8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, str.http:__dl.1000gbps.net
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
test eax, 0xffff0000
jne 0x404846
movzx eax, ax
push eax
call fcn.00407a20
jmp 0x404852
push 0x16
push str.http:__dl.1000gbps.net
call fcn.00402c30
push str..loadurl.ini
mov byte [ebp - 4], 2
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or edi, 0xffffffff
test eax, eax
je 0x404909
push str.Address
push str.ServerConfig
mov edx, str..loadurl.ini
lea ecx, [ebp - 0x2c]
call fcn.0040f2e0
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2c]
cmp dword [eax - 0xc], 0
je 0x4048ee
mov esi, dword [ebp - 0x54]
lea edx, [eax - 0x10]
add esi, 0xfffffff0
cmp edx, esi
je 0x4048e8
cmp dword [esi + 0xc], 0
jl 0x4048d9
mov ecx, dword [edx]
cmp ecx, dword [esi]
jne 0x4048d9
push edx
call fcn.00402880
add esp, 4
mov dword [ebp - 0x1c], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4048d1
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x54], eax
jmp 0x4048e5
push dword [eax - 0xc]
lea ecx, [ebp - 0x54]
push eax
call fcn.00402c30
mov eax, dword [ebp - 0x2c]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
lea edx, [eax - 0x10]
mov byte [ebp - 4], 2
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404909
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x54]
lea ecx, [ebp - 0xc4]
call fcn.00410120
test eax, eax
jne 0x404ab5
push str.http:__dl.2000gbps.net
lea ecx, [ebp - 0xc4]
call fcn.00410120
test eax, eax
jne 0x404ab5
push 0x1f
push 0x5c1168
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x23
push 0x5c11a8
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
mov eax, dword [ebp - 0x80]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x50]
push str.Connect_to_update_server__
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 5
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 6
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x4049cb
test eax, eax
je 0x4049cb
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4049e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404a07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x404a22
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x50]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 8
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 9
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x404a6d
test eax, eax
je 0x404a6d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404a8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404aa9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x50]
jmp 0x404dca
mov eax, dword [ebp - 0x80]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x20]
push str.Connect_to_update_server__
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xb
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x404b0d
test eax, eax
je 0x404b0d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0xb
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404b2b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404b49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x404b64
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xc4]
call fcn.00410220
test eax, eax
jne 0x404c3f
push 0x20
push 0x5c1270
lea ecx, [ebx + 0xbac]
call fcn.00402c30
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x27
push 0x5c12b8
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
cmp dword [ebp - 0x68], 0
je 0x404bcd
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push 0x5c1308
call dword [eax + 0x58]
lea ecx, [ebp - 0x1c]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xd
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xe
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x404c18
test eax, eax
je 0x404c18
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0xe
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404c36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
jmp 0x404da9
cmp dword [ebp - 0x68], 0
je 0x404c53
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push str.Get_update_information___OK_n
call dword [eax + 0x58]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call esi
push 0x16
push 0x5c1388
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x22
push 0x5c10e0
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x640000
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 0
push 0x402
push dword [ebx + 0x1f0]
call esi
lea ecx, [ebp - 0xc4]
call fcn.004105f0
test eax, eax
jne 0x404de5
push 0x23
push 0x5c13b8
lea ecx, [ebx + 0xbac]
call fcn.00402c30
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x24
push 0x5c1400
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
cmp dword [ebp - 0x68], 0
je 0x404d3c
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push str.Check_update_information___FAILED_n
call dword [eax + 0x58]
lea ecx, [ebp - 0x1c]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x11
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x404d87
test eax, eax
je 0x404d87
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x11
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404da5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x40]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404dc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406868
mov ecx, dword [edx]
push edx
jmp 0x406863
cmp dword [ebp - 0x68], 0
je 0x404df9
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push str.Check_update_information___OK_n
call dword [eax + 0x58]
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call esi
cmp dword [ebp - 0xb4], 0
jne 0x404ff8
cmp dword [ebp - 0xa0], 0
jne 0x404ff8
cmp dword [ebp - 0x8c], 0
jne 0x404ff8
push 0x10000
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 1
push 0x402
push dword [ebx + 0x1f0]
call esi
push 0x10000
push 0
push 0x401
push dword [ebx + 0x148]
call esi
push 0
push 1
push 0x402
push dword [ebx + 0x148]
call esi
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x2c]
push 0x5c14f4
push eax
call fcn.00407120
push 0x5c14d8
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x15
mov edx, dword [eax]
test edx, edx
jne 0x404ec7
xor ecx, ecx
jmp 0x404ee0
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x40], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404ed0
sub ecx, dword [ebp - 0x40]
sar ecx, 1
push ecx
push edx
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x14
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404f1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404f39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x404f54
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x24
push str.Vui_l
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x1c]
push str.The_game_is_already_update_to_version
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x17
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x404fce
test eax, eax
je 0x404fce
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x17
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404fec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x1c]
jmp 0x406683
push 0x640000
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 0
push 0x402
push dword [ebx + 0x1f0]
call esi
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x18], eax
test eax, eax
jle 0x40578e
call fcn.0041f881
mov ecx, eax
test ecx, ecx
je 0x4068b2
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x19
xor esi, esi
jmp 0x405053
mov ebx, dword [ebp - 0x3c]
cmp dword [ebx + 0xd9c], 0
jne 0x4053a1
test esi, esi
js 0x4068bc
cmp esi, dword [ebp - 0xb4]
jge 0x4068bc
mov eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0xc4]
mov ebx, dword [eax + esi*4]
push ebx
lea eax, [ebx + 4]
mov dword [ebp - 0x10], eax
call fcn.004124b0
test eax, eax
je 0x4055dc
push 1
push 0x5c1630
lea ecx, [ebp - 0x28]
call fcn.00407440
mov eax, dword [ebx + 4]
lea ecx, [ebp - 0x28]
push dword [eax - 0xc]
push eax
call fcn.00407440
push 1
push 0x5c1634
lea ecx, [ebp - 0x28]
call fcn.00407440
mov eax, dword [ebx + 0xc]
lea ecx, [ebp - 0x28]
push dword [eax - 0xc]
push eax
call fcn.00407440
mov eax, dword [ebp - 0x3c]
push 0
push 0
push 0x405
push dword [eax + 0x148]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebx + 4]
push eax
lea eax, [ebp - 0x48]
push str.Download_self_file__
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40512d
test eax, eax
je 0x40512d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x21
mov eax, edi
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40514b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405169
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
inc esi
cmp esi, dword [ebp - 0x18]
jl 0x405050
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x4c], esi
push 0x5c1638
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004072b0
add esp, 0x10
mov eax, dword [eax]
push 0x5c1650
push 0xb9
push 0
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4051d3
call ebx
mov dword [0x5ef70c], eax
mov ebx, 1
jmp 0x405269
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
jne 0x4051f1
call ebx
mov dword [0x5ef70c], eax
mov ebx, 1
jmp 0x405269
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x40523d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5ef70c], eax
mov ebx, 1
jmp 0x405269
push 0
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x24]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
xor ebx, ebx
cmp dword [ebp - 0x14], eax
setne bl
mov edx, dword [ebp - 0x10]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405283
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40529e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x4053cd
mov ecx, dword [ebp - 0x50]
push 0x22
push 0x5c1660
call fcn.00402c30
mov ebx, dword [ebp - 0x3c]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x24
push 0x5c1400
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
cmp dword [ebp - 0x68], 0
je 0x4052fc
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push str.Extract_self_file__engine.dat____FAILED_n
call dword [eax + 0x58]
lea ecx, [ebp - 0x24]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x24
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x25
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405347
test eax, eax
je 0x405347
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x25
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405365
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405383
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4053a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 0x11
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40686d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40686d
push 0x5c1638
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004072b0
mov byte [ebp - 4], 0x27
push dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x29
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405411
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0x44
lea eax, [ebp - 0x120]
nop dword [eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x405420
mov dword [ebp - 0x120], 0x44
lea eax, [ebp - 0xdc]
mov ecx, 0x10
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x405440
mov eax, dword [ebp - 0x18]
cmp dword [eax - 4], 1
jle 0x405462
push dword [eax - 0xc]
lea ecx, [ebp - 0x18]
call fcn.004029d0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xdc]
push ecx
lea ecx, [ebp - 0x120]
push ecx
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4054ca
push dword [ebp - 0xdc]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push dword [ebp - 0xd8]
call ebx
mov byte [ebp - 4], 0x19
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4054c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 0x10
jmp 0x4053a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x18]
mov dword [0x5ef70c], eax
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4054f3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x50]
push 0x27
push 0x5c1700
call fcn.00402c30
mov ebx, dword [ebp - 0x3c]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push 0
push dword [ebx + 0xb38]
call esi
push 0x24
push 0x5c1400
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call esi
cmp dword [ebp - 0x68], 0
je 0x405549
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
push 0x5c1750
call dword [eax + 0x58]
lea ecx, [ebp - 0x34]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x2a
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x2b
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405594
test eax, eax
je 0x405594
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x2b
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4055b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2a
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4055d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x34]
jmp 0x40538a
mov ebx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push ebx
push 0x5c15e8
push eax
call fcn.00407120
push str.__th
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, dword [eax]
test edx, edx
jne 0x405612
xor ecx, ecx
jmp 0x405626
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x405617
sub ecx, esi
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x50]
push edx
call fcn.00402c30
mov esi, dword [ebp - 0x3c]
push 1
push 0
push dword [esi + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x1a
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405661
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40567f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x24
push 0x5c1400
lea ecx, [esi + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [esi + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
push ebx
lea eax, [ebp - 0x14]
push str.Download_self_file__
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x4056e0
test eax, eax
je 0x4056e0
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x1c
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4056fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40571c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x24]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1e
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1f
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405767
test eax, eax
je 0x405767
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x1f
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405785
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1e
jmp 0x405369
mov eax, dword [ebp - 0x8c]
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x18], eax
movzx eax, ax
mov ecx, eax
mov dword [ebp - 0x2c], edx
add eax, edx
mov dword [ebp - 0x20], ecx
movzx ecx, ax
add eax, 4
movzx eax, ax
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x148]
mov dword [ebp - 0x30], ecx
call esi
push 0
push 1
push 0x404
push dword [ebx + 0x148]
call esi
xor esi, esi
cmp dword [ebp - 0x2c], esi
jle 0x4059d9
nop word [eax + eax]
cmp dword [ebx + 0xd9c], 0
jne 0x406868
test esi, esi
js 0x4068bc
cmp esi, dword [ebp - 0xa0]
jge 0x4068bc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0xc4]
mov eax, dword [eax + esi*4]
push eax
lea ebx, [eax + 4]
call fcn.004124b0
push ebx
push str.Download_update_file__
test eax, eax
je 0x405896
lea eax, [ebp - 0x14]
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x2d
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40586c
test eax, eax
je 0x40586c
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x2d
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40588a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
jmp 0x4059a0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x28], 0
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x2f
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x4058d6
test eax, eax
je 0x4058d6
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x2f
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4058f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405912
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x44]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x31
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x32
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x33
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40595d
test eax, eax
je 0x40595d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x32
mov eax, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40597b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x31
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405999
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4059b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x3c]
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [ebp - 0x2c]
jl 0x4057f0
xor esi, esi
cmp dword [ebp - 0x18], esi
jle 0x405bd9
nop dword [eax]
nop dword [eax + eax]
cmp dword [ebx + 0xd9c], 0
jne 0x406868
test esi, esi
js 0x4068bc
cmp esi, dword [ebp - 0x8c]
jge 0x4068bc
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
mov eax, dword [eax + esi*4]
push eax
lea ebx, [eax + 4]
call fcn.004124b0
push ebx
push str.Download_patch_file__
test eax, eax
je 0x405a96
lea eax, [ebp - 0x14]
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x34
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405a6c
test eax, eax
je 0x405a6c
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x34
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405a8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
jmp 0x405ba0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x28], 0
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x36
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405ad6
test eax, eax
je 0x405ad6
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x36
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405af4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405b12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x44]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x38
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x39
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405b5d
test eax, eax
je 0x405b5d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x39
mov eax, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405b7b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x38
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405b99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405bb7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x3c]
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [ebp - 0x18]
jl 0x4059f0
push 0x22
push 0x5c10e0
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [ebp - 0x18], 0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jle 0x405f05
mov eax, dword [ebp - 0x20]
movzx eax, ax
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 0
push 0x402
push dword [ebx + 0x1f0]
call esi
push 0
push 1
push 0x404
push dword [ebx + 0x1f0]
call esi
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
nop dword [eax + eax]
cmp dword [ebx + 0xd9c], 0
jne 0x406868
test ecx, ecx
js 0x4068bc
cmp ecx, dword [ebp - 0x8c]
jge 0x4068bc
mov eax, dword [ebp - 0x90]
mov esi, dword [eax + ecx*4]
cmp dword [esi], 0
je 0x405ec7
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x24]
push 0x5c1818
push eax
call fcn.00407120
push str._..._n
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3b
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x3c
mov edx, dword [eax]
test edx, edx
jne 0x405cb9
xor ecx, ecx
jmp 0x405cd1
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x10], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x405cc1
sub ecx, dword [ebp - 0x10]
sar ecx, 1
push ecx
push edx
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x3b
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405d0c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405d2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
lea ecx, [ebp - 0xc4]
call fcn.004122c0
test eax, eax
lea eax, [esi + 4]
push eax
push str.Rebuild_patch_file__
je 0x405da6
lea eax, [ebp - 0x4c]
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x3d
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405d7c
test eax, eax
je 0x405d7c
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x3d
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405d9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x4c]
jmp 0x405eb0
lea eax, [ebp - 0x44]
mov dword [ebp - 0x28], 0
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x3f
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x40
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405de6
test eax, eax
je 0x405de6
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x3f
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405e04
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405e22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x38]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x41
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x42
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x43
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x405e6d
test eax, eax
je 0x405e6d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x42
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405e8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x41
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405ea9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x38]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x405ec7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x405
push dword [ebx + 0x1f0]
call esi
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [ebp - 0x18]
jl 0x405c50
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call esi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
movzx eax, ax
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 0
push 0x402
push dword [ebx + 0x1f0]
call esi
push 0
push 1
push 0x404
push dword [ebx + 0x1f0]
call esi
xor esi, esi
cmp dword [ebp - 0x2c], esi
jle 0x4061e9
nop dword [eax + eax]
cmp dword [ebx + 0xd9c], 0
jne 0x406868
test esi, esi
js 0x4068bc
cmp esi, dword [ebp - 0xa0]
jge 0x4068bc
mov eax, dword [ebp - 0xa4]
mov ebx, dword [eax + esi*4]
cmp dword [ebx], 0
je 0x4061c7
lea eax, [ebx + 4]
push eax
lea eax, [ebp - 0x10]
push 0x5c1880
push eax
call fcn.00407120
push str._...
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x44
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x45
mov edx, dword [eax]
test edx, edx
jne 0x405fb9
xor ecx, ecx
jmp 0x405fd1
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x30], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x405fc1
sub ecx, dword [ebp - 0x30]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x50]
push edx
call fcn.00402c30
mov eax, dword [ebp - 0x3c]
push 1
push 0
push dword [eax + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x44
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40600c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40602a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ebx
lea ecx, [ebp - 0xc4]
call fcn.004121a0
test eax, eax
lea eax, [ebx + 4]
push eax
push str.Apply_update_file__
je 0x4060a6
lea eax, [ebp - 0x24]
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x46
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x47
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40607c
test eax, eax
je 0x40607c
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x46
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40609a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
jmp 0x4061b0
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x28], 0
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x48
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x49
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x4060e6
test eax, eax
je 0x4060e6
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x48
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406104
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406122
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x20]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x4a
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x4b
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x4c
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40616d
test eax, eax
je 0x40616d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x4b
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40618b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov eax, edi
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4061a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4061c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x3c]
push 0
push 0
push 0x405
push dword [ebx + 0x1f0]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [ebp - 0x2c]
jl 0x405f50
xor esi, esi
cmp dword [ebp - 0x18], esi
jle 0x406499
nop dword [eax]
nop dword [eax + eax]
cmp dword [ebx + 0xd9c], 0
jne 0x406868
test esi, esi
js 0x4068bc
cmp esi, dword [ebp - 0x8c]
jge 0x4068bc
mov eax, dword [ebp - 0x90]
mov ebx, dword [eax + esi*4]
cmp dword [ebx], 0
je 0x406477
lea eax, [ebx + 4]
push eax
lea eax, [ebp - 0x10]
push 0x5c1880
push eax
call fcn.00407120
push str._...
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x4d
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x4e
mov edx, dword [eax]
test edx, edx
jne 0x406269
xor ecx, ecx
jmp 0x406281
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x30], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406271
sub ecx, dword [ebp - 0x30]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x50]
push edx
call fcn.00402c30
mov eax, dword [ebp - 0x3c]
push 1
push 0
push dword [eax + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x4d
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4062bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4062da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ebx
lea ecx, [ebp - 0xc4]
call fcn.004121a0
test eax, eax
lea eax, [ebx + 4]
push eax
push str.Apply_patch_file__
je 0x406356
lea eax, [ebp - 0x24]
push eax
call fcn.00407120
push str.____OK_n
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4f
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x50
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40632c
test eax, eax
je 0x40632c
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x4f
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40634a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
jmp 0x406460
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x28], 0
push eax
call fcn.00407120
push 0x5c11f0
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x51
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x52
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x406396
test eax, eax
je 0x406396
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x51
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4063b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4063d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x20]
call fcn.0040fa80
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x53
push 0x5c1248
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x54
push eax
call fcn.004072b0
add esp, 0x18
mov byte [ebp - 4], 0x55
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40641d
test eax, eax
je 0x40641d
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x54
mov eax, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40643b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov eax, edi
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406459
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406477
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x3c]
push 0
push 0
push 0x405
push dword [ebx + 0x1f0]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [ebp - 0x18]
jl 0x406200
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x405
push dword [ebx + 0x148]
call esi
cmp dword [ebp - 0x28], 0
je 0x4066bf
push 0x10000
push 0
push 0x401
push dword [ebx + 0x1f0]
call esi
push 0
push 1
push 0x402
push dword [ebx + 0x1f0]
call esi
push 0x10000
push 0
push 0x401
push dword [ebx + 0x148]
call esi
push 0
push 1
push 0x402
push dword [ebx + 0x148]
call esi
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x14]
push 0x5c14f4
push eax
call fcn.00407120
push 0x5c14d8
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x57
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x58
mov edx, dword [eax]
test edx, edx
jne 0x406550
xor ecx, ecx
jmp 0x406570
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x38], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406560
sub ecx, dword [ebp - 0x38]
sar ecx, 1
push ecx
push edx
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x57
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4065ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x56
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4065c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4065e4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x24
push str.Vui_l
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x10]
push str.Finished_update_to_the_version
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x5a
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x5b
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x40665e
test eax, eax
je 0x40665e
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x5a
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40667c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x59
mov edx, dword [ebp - 0x10]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40669a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4066b5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 0x12
jmp 0x40686d
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x5c
push eax
lea eax, [ebp - 0x14]
push 0x5c1940
push eax
call fcn.00407120
push str.__th
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x5e
mov edx, dword [eax]
test edx, edx
jne 0x40670b
xor ecx, ecx
jmp 0x406723
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x38], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406713
sub ecx, dword [ebp - 0x38]
sar ecx, 1
push ecx
push edx
lea ecx, [ebx + 0xbac]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xb38]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 4], 0x5d
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40675e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5c
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40677c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x406797
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x27
push 0x5c1978
lea ecx, [ebx + 0xc4c]
call fcn.00402c30
push 1
push 0
push dword [ebx + 0xbd8]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
push eax
call fcn.00402880
lea esi, [eax + 0x10]
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x5f
push eax
lea eax, [ebp - 0x10]
push 0x5c19c8
push eax
call fcn.00407120
push 0x5c1244
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x60
push eax
call fcn.004072b0
add esp, 0x1c
mov byte [ebp - 4], 0x61
cmp dword [ebp - 0x68], 0
mov eax, dword [eax]
je 0x406811
test eax, eax
je 0x406811
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x60
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40682f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5f
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40684d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x406868
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 0x11
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x406889
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0xc4]
call fcn.0040fda0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00402be0
push 0x80004005
call fcn.00402be0
call fcn.0041f3cd
int3