Function at 0x4113d0
Capabilities:
Check if file exists
Create process on windows
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x583a08
mov eax, dword fs:[0]
push eax
sub esp, 0x4b8
mov eax, dword [0x60b9b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x460], edx
mov eax, ecx
mov dword [ebp - 0x420], eax
push ecx
push eax
lea ecx, [ebp - 0x44c]
call fcn.00419e60
mov dword [ebp - 4], 0
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0
call fcn.00412850
mov dword [ebp - 0x458], eax
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 1
call fcn.00420420
lea edx, [ebp - 0x458]
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.00441510
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov edx, dword [ebp - 0x418]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41148d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5e82b8
push str.mpSetup_Cls
call dword [sym.imp.USER32.dll_FindWindowW]
push str._updump
lea ecx, [ebp - 0x41c]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 3
mov esi, esp
mov dword [ebp - 0x418], esi
mov ecx, dword [ebp - 0x41c]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ebx, ebx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x41c]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411501
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4115ae
push 0x5e70d4
push str.none
push str.crash
call fcn.004373d0
add esp, 8
mov ecx, esp
push str._updump
call fcn.004078b0
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041ab60
push ecx
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x418], esp
push 0x5e70d4
call fcn.004078b0
mov byte [ebp - 4], 5
cmp dword [0x614f40], 0
jne 0x41157d
push 4
call fcn.0055417e
mov dword [ebp - 0x418], eax
add esp, 4
mov dword [0x614f40], eax
mov dword [eax], vtable.CUploadDumpMgr.0
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 4
push eax
call fcn.00412fe0
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4115ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._updump_cv
lea ecx, [ebp - 0x41c]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 6
mov esi, esp
mov dword [ebp - 0x418], esi
mov ecx, dword [ebp - 0x41c]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ebx, ebx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x41c]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411612
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4116fc
push ecx
mov ecx, esp
push str._updump_cv
call fcn.004078b0
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041ab60
push ecx
mov ecx, esp
mov byte [ebp - 4], 7
push str._updump_ver
call fcn.004078b0
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041ab60
push ecx
mov byte [ebp - 4], 8
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x41c]
mov dword [ebp - 0x464], esp
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 9
cmp dword [0x614f40], 0
jne 0x4116aa
push 4
call fcn.0055417e
mov dword [ebp - 0x424], eax
add esp, 4
mov dword [0x614f40], eax
mov dword [eax], vtable.CUploadDumpMgr.0
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 8
push eax
call fcn.00412fe0
mov byte [ebp - 4], 7
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4116db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4116fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x420]
lea ecx, [ebp - 0x450]
call fcn.004078b0
mov byte [ebp - 4], 0xa
push str._cpCallApp
push dword [ebp - 0x450]
call fcn.00560b3e
add esp, 8
test eax, eax
je 0x41173f
push str._rgCallApp
push dword [ebp - 0x450]
call fcn.00560b3e
add esp, 8
test eax, eax
jne 0x4117aa
push str._cpCallApp
push dword [ebp - 0x450]
call fcn.00560b3e
add esp, 8
mov edx, str.rg_callapp
test eax, eax
mov ecx, str.cp_callapp
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0x418]
call fcn.004078b0
push 0x5e70d4
mov byte [ebp - 4], 0xb
push str.none
push dword [ebp - 0x418]
call fcn.004373d0
mov byte [ebp - 4], 0xa
add esp, 0xc
mov edx, dword [ebp - 0x418]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4117aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._check_update
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0xc
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ebx, ebx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41180e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4118a5
cmp dword [ebp - 0x454], 0
jne 0x4118a5
push ecx
mov ecx, esp
mov dword [ebp - 0x434], 0
push str._check_update
call fcn.004078b0
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041ab60
mov byte [ebp - 4], 0xd
mov eax, dword [0x614f3c]
test eax, eax
jne 0x41187d
push 0xc
call fcn.0055417e
add esp, 4
mov dword [ebp - 0x424], eax
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00401630
mov byte [ebp - 4], 0xd
mov dword [0x614f3c], eax
mov ecx, eax
call fcn.004017c0
mov byte [ebp - 4], 0xa
mov eax, edi
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4118a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, esp
push str._check_enable_pdf_protect
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test eax, eax
je 0x411922
push 0x400
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00557410
add esp, 0xc
call fcn.00408c20
push eax
call fcn.00408890
push eax
push str.___Check_enable_pdf_protect__d__d___
lea eax, [ebp - 0x414]
push 0x200
push eax
call fcn.0040b740
add esp, 0x14
lea eax, [ebp - 0x414]
push eax
call ebx
call fcn.00408890
test eax, eax
je 0x411922
call fcn.00408c20
test eax, eax
je 0x411922
call fcn.00411320
push str._enable_pdf_protect
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0xf
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411992
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x41199d
call fcn.00411320
jmp 0x4119f0
push ecx
mov ecx, esp
push str._disable_pdf_protect
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041a9d0
test eax, eax
jne 0x4119d5
push ecx
mov ecx, esp
push str._sp_dpp
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041a9d0
test eax, eax
je 0x4119f0
call fcn.004056a0
call fcn.00438920
cmp dword [0x612e38], 0x800
jl 0x4119f0
call fcn.0045a5a0
push str._install
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x10
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411a60
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
jne 0x411a7c
push ecx
mov ecx, esp
push str._install
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
push ecx
mov ecx, esp
push str._update
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
push ecx
mov ecx, esp
push str._uninstall
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
push 0x5e847c
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x11
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411b1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x411b37
push 0x5e70d4
push str.none
push str.server_run
call fcn.004373d0
add esp, 0xc
push str._DREP
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x12
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411ba7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x411bd4
cmp dword [0x614f44], 0
jne 0x411bcf
push 4
call fcn.0055417e
mov dword [ebp - 0x424], eax
add esp, 4
mov dword [0x614f44], eax
mov dword [eax], vtable.CDeviceEnvMgr.0
call fcn.00409f20
push str._SCS
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x13
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411c44
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x411d01
call fcn.00402a90
mov ecx, eax
test ecx, ecx
jne 0x411c61
push 0x80004005
call fcn.00402b10
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x14
push eax
push ecx
mov ecx, esp
push str._SCS
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041ac50
mov esi, dword [ebp - 0x418]
push 0x5e849c
push esi
call fcn.00560b3e
add esp, 8
test eax, eax
jne 0x411cb6
push 0x5e70d4
push 0x5de998
jmp 0x411cd9
push 0x5e84a0
push esi
call fcn.00560b3e
add esp, 8
push 0x5e70d4
test eax, eax
jne 0x411cd4
push str.cancel
jmp 0x411cd9
push 0x5de958
push str.server_call_speedup
call fcn.004373d0
add esp, 0xc
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x411d01
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - method.CCheckCloudConfigMgr.virtual_0], vtable.CCheckCloudConfigMgr.0
push 0x5e84a4
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x15
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x16
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411d7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x411dc8
mov eax, dword [0x612710]
mov dword [ebp - 0x434], 0
test eax, eax
jne 0x411dba
push 0x48
call fcn.0055417e
add esp, 4
mov dword [ebp - 0x424], eax
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.00408dc0
mov byte [ebp - 4], 0x15
mov dword [0x612710], eax
lea ecx, [ebp - 0x45c]
push ecx
mov ecx, eax
call fcn.00409440
push str._ChckePDF
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x18
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ecx, ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411e38
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x411e99
push str.___RunningHelper_check_pdf_Assoc___
call ebx
call fcn.00408890
test eax, eax
je 0x411e92
push str.___RunningHelper_check_pdf_Assoc_False___
call ebx
push ecx
mov ecx, esp
mov byte [ebp - 0x42d], 0
push 0x5e70d4
call fcn.004078b0
mov dl, byte [ebp - 0x42d]
call fcn.0042b810
add esp, 4
test eax, eax
je 0x411e99
push 0x5e70d4
push str.none
push str.revise_assoc
call fcn.004373d0
add esp, 0xc
jmp 0x411e99
push str.___RunningHelper_check_pdf_Assoc_True___
call ebx
push ecx
mov ecx, esp
push str._shellextshow
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x411f58
push str.PDEngine
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x411f02
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x42c], 0x3e8
push ecx
push 0
push 0x4a
push eax
mov dword [ebp - 0x428], 4
mov dword [ebp - 0x424], str.test
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x411f58
push ecx
mov edx, str.CAJEngine.exe
lea ecx, [ebp - 0x41c]
call fcn.004202d0
add esp, 4
push dword [ebp - 0x41c]
call esi
test eax, eax
je 0x411f3b
push 1
push 0
push str._shellextshow
push dword [ebp - 0x41c]
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x41c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411f58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], eax
mov dword [ebp - method.CEndSessionMgr.1.virtual_0], vtable.CEndSessionMgr.1.0
mov dword [ebp - method.CEndSessionMgr.virtual_0], vtable.CEndSessionMgr.0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x19
push str._enableServer
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
je 0x411fd4
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x434], 0
call fcn.0040a9c0
push ecx
mov ecx, esp
push str._enableServerNow
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
je 0x412006
mov dword [ebp - 0x434], 1
call fcn.0040ac10
push str.enableServerNow_run_finished
call ebx
lea ecx, [ebp - 0x4c4]
call fcn.00404120
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x1a
push str._forceActive
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
je 0x41206b
push dword [ebp - 0x494]
call esi
test eax, eax
je 0x41206b
push dword [ebp - 0x494]
push 1
push str.Activate
push str.masterpdf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41206b
lea ecx, [ebp - 0x4c4]
call fcn.00404d70
push str._checkActive
lea ecx, [ebp - 0x418]
call fcn.004078b0
push ecx
mov byte [ebp - 4], 0x1b
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407be0
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041a8a0
xor ebx, ebx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4120cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4120e8
lea ecx, [ebp - 0x4c4]
mov dword [ebp - 0x434], 0
call fcn.00404640
push ecx
mov ecx, esp
push str._launchMainProg
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
jne 0x412140
push ecx
mov ecx, esp
push str._startmenu
call fcn.004078b0
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
jne 0x412140
push ecx
mov ecx, esp
push str._taskbar
call fcn.00412380
lea ecx, [ebp - 0x44c]
call fcn.0041aa60
test eax, eax
je 0x412228
lea ecx, [ebp - 0x41c]
call fcn.00420420
push dword [ebp - 0x41c]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412207
push str.Globalmasterpdf_server_event_C33B7EE9753C
push 0
push 2
mov byte [ebp - 4], 0x1d
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push str.Globalmasterpdf_server_mapping_C33B7EE9753C
push 0
mov esi, eax
push 2
mov dword [ebp - 0x424], esi
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov ebx, eax
mov dword [ebp - 0x428], ebx
test ebx, ebx
je 0x4121bd
test esi, esi
je 0x4121bd
sub esp, 8
lea ecx, [ebp - 0x428]
push dword [ebp - 0x41c]
call fcn.00441970
mov esi, dword [ebp - 0x424]
mov ebx, dword [ebp - 0x428]
test eax, eax
jns 0x4121ef
sub esp, 0x10
mov dword [ebp - 0x424], 0xffffffff
push dword [ebp - 0x41c]
call fcn.0041b210
test eax, eax
jne 0x4121ef
push 1
push eax
push eax
push dword [ebp - 0x41c]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x412200
push esi
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x412207
push ebx
call eax
mov byte [ebp - 4], 0x1a
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412228
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x434], 0
je 0x412235
xor esi, esi
jmp 0x412242
mov ecx, dword [ebp - 0x460]
call fcn.004128c0
mov esi, eax
lea ecx, [ebp - 0x4c4]
call fcn.00404290
push dword [ebp - 0x48c]
mov dword [ebp - method.CEndSessionMgr.1.virtual_0], vtable.CEndSessionMgr.1.0
mov dword [ebp - method.CEndSessionMgr.virtual_0], vtable.CEndSessionMgr.0
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41227d
push dword [ebp - 0x48c]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x47c]
mov dword [ebp - method.CSingletonBase_class_CEndSessionMgr_.virtual_0], vtable.CSingletonBase_class_CEndSessionMgr_.0
test eax, eax
je 0x412297
push eax
call fcn.005517a2
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x450]
mov dword [ebp - method.CCheckCloudConfigMgr.virtual_0], vtable.CCheckCloudConfigMgr.0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4122c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x458]
lea ecx, [ebp - 0x458]
push eax
push dword [eax]
lea eax, [ebp - 0x424]
push eax
call fcn.004124b0
push dword [ebp - 0x458]
call fcn.00553c88
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x448]
test ecx, ecx
je 0x412315
mov edx, dword [ebp - 0x444]
call fcn.0040df30
push dword [ebp - 0x448]
call fcn.0055a3b7
add esp, 4
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x412330
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00553c8d
mov esp, ebp
pop ebp
ret