Function at 0x41a420
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x599716
mov eax, dword fs:[0]
push eax
sub esp, 0x21c
mov eax, dword [0x60cff4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x228]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d8], edi
call fcn.00410920
push ebx
mov ecx, 0x616450
mov dword [ebp - 4], 0
call fcn.00406840
mov ebx, dword [sym.imp.WS2_32.dll_shutdown]
test eax, eax
jns 0x41a5f8
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 1
call fcn.004059a0
test al, al
jne 0x41a4d2
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
mov byte [ebp - 4], 2
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca1c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 3
call fcn.004059a0
test al, al
jne 0x41a51d
push 3
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 4
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca26
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push str.03001
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 5
call fcn.004059a0
test al, al
jne 0x41a568
push 5
push str.03001
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.0040c290
mov byte [ebp - 4], 4
or edi, 0xffffffff
mov edx, dword [ebp - 0x1dc]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a5af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a5d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x41a89d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41a89d
cmp byte [0x61645c], 0
je 0x41c8c4
push 0
push 0xa
push 0xd
push str._PJL_INFO_BRFIRMWARE
push 0x1b
lea eax, [ebp - 0x90]
push str._c___12345X_s_c_c_c
push eax
call fcn.00406f30
lea ecx, [ebp - 0x90]
add esp, 0x1c
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a630
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push ecx
push eax
mov ecx, 0x616450
call fcn.00406af0
cmp eax, 1
jne 0x41c8c4
push ecx
mov ecx, 0x616450
call fcn.00406c20
cmp eax, 1
jne 0x41c8c4
lea ecx, [ebp - 0x228]
call fcn.00405e50
lea ecx, [ebp - 0x224]
call fcn.00405e50
lea ecx, [ebp - 0x220]
call fcn.00405e50
lea ecx, [ebp - 0x21c]
call fcn.00405e50
lea ecx, [ebp - 0x218]
call fcn.00405e50
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x214]
call fcn.004370aa
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x200]
call fcn.004370aa
lea ecx, [ebp - 0x1ec]
call fcn.00405e50
lea ecx, [ebp - 0x1e8]
call fcn.00405e50
lea ecx, [ebp - 0x1e4]
call fcn.00405e50
lea ecx, [ebp - 0x228]
call fcn.00408020
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x41cbc5
mov eax, dword [ebp - 0x220]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41a726
test dx, dx
je 0x41a722
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41a726
add eax, 4
add ecx, 4
test dx, dx
jne 0x41a700
xor eax, eax
jmp 0x41a72b
sbb eax, eax
or eax, 1
test eax, eax
je 0x41a8fe
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0xd
call fcn.004059a0
test al, al
jne 0x41a77a
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0xe
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca30
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e71f0
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0xf
call fcn.004059a0
test al, al
jne 0x41a7c5
push 3
push 0x5e71f0
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x10
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca3a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03005
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x11
call fcn.004059a0
test al, al
jne 0x41a810
push 5
push str.03005
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x10
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a857
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x1d8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a878
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x41a897
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [sym.imp.WS2_32.dll_shutdown]
cmp byte [0x61645c], 0
je 0x41a8b0
push 1
push dword [0x616454]
call ebx
mov ecx, 0x616450
call fcn.0043675a
mov byte [0x61645c], 0
mov eax, dword [0x616510]
lea ecx, [ebp - 0x228]
mov esi, dword [eax - 0xc]
call fcn.0040fe30
neg esi
sbb esi, esi
mov eax, esi
lea esp, [ebp - 0x238]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056e21e
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebp - 0x1f8]
xor esi, esi
test eax, eax
jle 0x41a946
nop word [eax + eax]
test esi, esi
js 0x41ca62
cmp esi, eax
jge 0x41ca62
mov eax, dword [ebp - 0x1fc]
mov edx, str.CANNOT_FIND_ROCKET
lea ecx, [eax + esi*4]
call fcn.0040a050
test al, al
jne 0x41a9f7
mov eax, dword [ebp - 0x1f8]
inc esi
cmp esi, eax
jl 0x41a910
mov eax, dword [edi + 4]
or edi, 0xffffffff
cmp dword [eax - 0xc], 0
je 0x41bf51
cmp byte [0x61645c], 0
mov ebx, dword [sym.imp.WS2_32.dll_shutdown]
je 0x41a96f
push 1
push dword [0x616454]
call ebx
mov ecx, 0x616450
call fcn.0043675a
push dword [ebp - 0x1d4]
mov ecx, 0x616450
mov byte [0x61645c], 0
call fcn.00406840
test eax, eax
jns 0x41ac1e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x1f
call fcn.004059a0
test al, al
jne 0x41a9df
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x20
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca44
jmp 0x41ab24
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x13
call fcn.004059a0
test al, al
jne 0x41aa3e
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x14
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca4e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7160
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x15
call fcn.004059a0
test al, al
jne 0x41aa89
push 3
push 0x5e7160
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x16
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca58
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03007
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x17
call fcn.004059a0
test al, al
jne 0x41aad4
push 5
push str.03007
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x16
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ab1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
jmp 0x41a85b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x21
call fcn.004059a0
test al, al
jne 0x41ab5c
push 3
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x22
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca67
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03102
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x23
call fcn.004059a0
test al, al
jne 0x41aba7
push 5
push str.03102
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x22
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41abee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
mov ebx, dword [ebp - 0x1d8]
mov ebx, dword [ebx + 4]
test ebx, ebx
je 0x41ac80
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ac30
sub ecx, edx
sar ecx, 1
inc ecx
cmp ecx, 0x3fffffff
jg 0x41ac80
lea eax, [ecx + ecx]
mov dword [ebp - 0x1d4], eax
call fcn.0056e950
mov esi, esp
test esi, esi
je 0x41ac80
push 0
push 0
push dword [ebp - 0x1d4]
mov byte [esi], 0
push esi
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x41ac82
xor esi, esi
push esi
push str._PJL_SET_BRFIRMMEMVER__s_
lea eax, [ebp - 0x1d0]
push 0x100
push eax
call fcn.00422e40
add esp, 0x10
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.data2.dat
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x25
call fcn.004059a0
test al, al
jne 0x41ace3
push 9
push str.data2.dat
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x1d4]
push eax
push ecx
mov ecx, 0x616450
call fcn.004069d0
mov byte [ebp - 4], 0
mov esi, eax
mov edx, dword [ebp - 0x1d4]
mov ecx, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x41ad23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp esi, 0xffffffef
jne 0x41ae56
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x27
call fcn.004059a0
test al, al
jne 0x41ad73
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x28
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca71
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x29
call fcn.004059a0
test al, al
jne 0x41adbe
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x2a
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca7b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03106
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x2b
call fcn.004059a0
test al, al
jne 0x41ae09
push 5
push str.03106
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x2a
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ae4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
jmp 0x41a85b
test esi, esi
jns 0x41af88
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2d
call fcn.004059a0
test al, al
jne 0x41aea5
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x2e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca85
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x2f
call fcn.004059a0
test al, al
jne 0x41aef0
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x30
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca8f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03107
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x31
call fcn.004059a0
test al, al
jne 0x41af3b
push 5
push str.03107
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x30
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41af7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
jmp 0x41a85b
cmp byte [0x61645c], 0
je 0x41be27
push 0
push 0xa
push 0xd
push str._PJL_INFO_BRFIRMREADY
push 0x1b
lea eax, [ebp - 0x90]
push str._c___12345X_s_c_c_c
push eax
call fcn.00406f30
lea ecx, [ebp - 0x90]
add esp, 0x1c
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41afc0
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push ecx
push eax
mov ecx, 0x616450
call fcn.00406af0
cmp eax, 1
jne 0x41bcf2
push ecx
mov ecx, 0x616450
call fcn.00406c20
cmp eax, 1
jne 0x41bcf2
lea ecx, [ebp - 0x228]
call fcn.00405e50
lea ecx, [ebp - 0x224]
call fcn.00405e50
lea ecx, [ebp - 0x220]
call fcn.00405e50
lea ecx, [ebp - 0x21c]
call fcn.00405e50
lea ecx, [ebp - 0x218]
call fcn.00405e50
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x214]
call fcn.004370aa
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x200]
call fcn.004370aa
lea ecx, [ebp - 0x1ec]
call fcn.00405e50
lea ecx, [ebp - 0x1e8]
call fcn.00405e50
lea ecx, [ebp - 0x1e4]
call fcn.00405e50
lea ecx, [ebp - 0x228]
call fcn.00408020
mov edx, str._PJL_INFO_BRFIRMREADY
lea ecx, [ebp - 0x228]
call fcn.00422890
test al, al
je 0x41b1bc
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x3f
call fcn.004059a0
test al, al
jne 0x41b0d9
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x40
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41ca99
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x41
call fcn.004059a0
test al, al
jne 0x41b124
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x42
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41caa3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03110
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x43
call fcn.004059a0
test al, al
jne 0x41b16f
push 5
push str.03110
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x42
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41b1b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
jmp 0x41a85b
mov eax, dword [ebp - 0x224]
mov ecx, 0x5e72ac
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41b1ed
test dx, dx
je 0x41b1e9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41b1ed
add eax, 4
add ecx, 4
test dx, dx
jne 0x41b1c7
xor eax, eax
jmp 0x41b1f2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41ba58
mov eax, dword [ebp - 0x1d8]
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x41b260
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41b210
sub ecx, edx
sar ecx, 1
inc ecx
cmp ecx, 0x3fffffff
jg 0x41b260
lea eax, [ecx + ecx]
mov dword [ebp - 0x1d4], eax
call fcn.0056e950
mov esi, esp
test esi, esi
je 0x41b260
push 0
push 0
push dword [ebp - 0x1d4]
mov byte [esi], 0
push esi
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x41b262
xor esi, esi
push esi
push str.MEMVER__s_
lea eax, [ebp - 0xd0]
push 0x40
push eax
call fcn.00422e40
lea eax, [ebp - 0xd0]
push eax
push str._PJL_INFO_BRFIRMCHECK
push str._s_r_n_s
lea eax, [ebp - 0x1d0]
push 0x100
push eax
call fcn.00422e40
add esp, 0x24
cmp byte [0x61645c], 0
je 0x41b92e
push 0xc
push 0xa
push 0xd
lea eax, [ebp - 0x1d0]
push eax
push 0x1b
lea eax, [ebp - 0x90]
push str._c___12345X_s_c_c_c
push eax
call fcn.00406f30
lea ecx, [ebp - 0x90]
add esp, 0x1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b2d4
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push ecx
push eax
mov ecx, 0x616450
call fcn.00406af0
cmp eax, 1
jne 0x41b7f9
push ecx
mov ecx, 0x616450
call fcn.00406c20
cmp eax, 1
jne 0x41b7f9
lea ecx, [ebp - 0x228]
call fcn.00405e50
lea ecx, [ebp - 0x224]
call fcn.00405e50
lea ecx, [ebp - 0x220]
call fcn.00405e50
lea ecx, [ebp - 0x21c]
call fcn.00405e50
lea ecx, [ebp - 0x218]
call fcn.00405e50
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x214]
call fcn.004370aa
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x200]
call fcn.004370aa
lea ecx, [ebp - 0x1ec]
call fcn.00405e50
lea ecx, [ebp - 0x1e8]
call fcn.00405e50
lea ecx, [ebp - 0x1e4]
call fcn.00405e50
lea ecx, [ebp - 0x228]
call fcn.00408020
mov edx, str._PJL_INFO_BRFIRMCHECK
lea ecx, [ebp - 0x228]
call fcn.00422890
test al, al
je 0x41b4d0
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x51
call fcn.004059a0
test al, al
jne 0x41b3ed
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x52
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41caad
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x53
call fcn.004059a0
test al, al
jne 0x41b438
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x54
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cab7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03113
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x55
call fcn.004059a0
test al, al
jne 0x41b483
push 5
push str.03113
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x54
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41b4c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x52
jmp 0x41a85b
mov eax, dword [ebp - 0x224]
mov ecx, 0x5e72ac
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41b506
test dx, dx
je 0x41b502
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41b506
add eax, 4
add ecx, 4
test dx, dx
jne 0x41b4e0
xor eax, eax
jmp 0x41b50b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b63d
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x57
call fcn.004059a0
test al, al
jne 0x41b55a
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x58
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cac1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7304
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x59
call fcn.004059a0
test al, al
jne 0x41b5a5
push 3
push 0x5e7304
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x5a
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cacb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03114
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x5b
call fcn.004059a0
test al, al
jne 0x41b5f0
push 5
push str.03114
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x5c
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x5a
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41b634
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x58
jmp 0x41a85b
mov edx, dword [ebp - 0x1e4]
mov esi, dword [edx - 0xc]
test esi, esi
js 0x41cb89
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x41b671
push esi
lea ecx, [ebp - 0x1e4]
call fcn.00405f70
mov edx, dword [ebp - 0x1e4]
lea eax, [esi + 1]
push eax
push edx
call fcn.005792eb
mov eax, dword [ebp - 0x1e4]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x41cb89
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1e4]
mov word [eax + esi*2], cx
mov eax, dword [ebp - 0x1e4]
cmp dword [eax - 0xc], ecx
jl 0x41c832
push str.FALSE
push eax
call fcn.005709eb
add esp, 8
test eax, eax
je 0x41c832
sub eax, dword [ebp - 0x1e4]
sar eax, 1
js 0x41c832
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x5d
call fcn.004059a0
test al, al
jne 0x41b716
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x5e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cad5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x5f
call fcn.004059a0
test al, al
jne 0x41b761
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x60
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cadf
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03115
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x61
call fcn.004059a0
test al, al
jne 0x41b7ac
push 5
push str.03115
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x62
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x60
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41b7f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5e
jmp 0x41a85b
cmp eax, 0x102
jne 0x41b92e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x45
call fcn.004059a0
test al, al
jne 0x41b84b
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x46
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cae9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x47
call fcn.004059a0
test al, al
jne 0x41b896
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x48
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41caf3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03111
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x49
call fcn.004059a0
test al, al
jne 0x41b8e1
push 5
push str.03111
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x48
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41b925
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x46
jmp 0x41a85b
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4b
call fcn.004059a0
test al, al
jne 0x41b975
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x4c
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cafd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x4d
call fcn.004059a0
test al, al
jne 0x41b9c0
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x4e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb07
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03112
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x4f
call fcn.004059a0
test al, al
jne 0x41ba0b
push 5
push str.03112
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x4e
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ba4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4c
jmp 0x41a85b
mov edx, dword [ebp - 0x1e4]
mov esi, dword [edx - 0xc]
test esi, esi
js 0x41cb89
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x41ba8c
push esi
lea ecx, [ebp - 0x1e4]
call fcn.00405f70
mov edx, dword [ebp - 0x1e4]
lea eax, [esi + 1]
push eax
push edx
call fcn.005792eb
mov eax, dword [ebp - 0x1e4]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x41cb89
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1e4]
mov word [eax + esi*2], cx
mov eax, dword [ebp - 0x1e4]
cmp dword [eax - 0xc], ecx
jl 0x41c832
push str.FALSE
push eax
call fcn.005709eb
add esp, 8
test eax, eax
je 0x41c832
sub eax, dword [ebp - 0x1e4]
sar eax, 1
js 0x41c832
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1d4], esi
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x1e4]
cmp dword [ecx - 0xc], 0xf
jl 0x41bbde
mov ecx, dword [ecx - 0x10]
test ecx, ecx
je 0x41bb2b
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x41bb37
call fcn.00433b0d
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
push eax
mov eax, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x1d8]
push 8
add eax, 0xc
push eax
call fcn.00409900
mov byte [ebp - 4], 0x64
lea edx, [esi - 0x10]
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], edx
lea ebx, [eax - 0x10]
cmp ebx, edx
je 0x41bbc6
cmp dword [edx + 0xc], 0
lea esi, [edx + 0xc]
jl 0x41bbb1
mov ecx, dword [ebx]
cmp ecx, dword [edx]
jne 0x41bbb1
push ebx
call fcn.00406350
add esp, 4
mov dword [ebp - 0x1e0], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x41bba6
mov esi, dword [ebp - 0x1dc]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1e0]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1d4], esi
jmp 0x41bbc6
push dword [eax - 0xc]
lea ecx, [ebp - 0x1d4]
push eax
call fcn.004060b0
mov esi, dword [ebp - 0x1d4]
mov byte [ebp - 4], 0x63
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x41bbde
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb11
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e7330
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x65
call fcn.004059a0
test al, al
jne 0x41bc25
push 3
push 0x5e7330
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x66
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb1b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push str.03116
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x67
call fcn.004059a0
test al, al
jne 0x41bc70
push 5
push str.03116
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x68
push eax
lea eax, [ebp - 0x1dc]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x66
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41bcb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x63
mov eax, edi
mov edx, dword [ebp - 0x1dc]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41bcd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x41a897
mov ecx, dword [esi]
push esi
jmp 0x41a892
cmp eax, 0x102
jne 0x41be27
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x33
call fcn.004059a0
test al, al
jne 0x41bd44
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x34
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb25
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x35
call fcn.004059a0
test al, al
jne 0x41bd8f
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x36
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb2f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03108
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x37
call fcn.004059a0
test al, al
jne 0x41bdda
push 5
push str.03108
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x36
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41be1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x34
jmp 0x41a85b
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x39
call fcn.004059a0
test al, al
jne 0x41be6e
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x3a
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb39
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x3b
call fcn.004059a0
test al, al
jne 0x41beb9
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x3c
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb43
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03109
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x3d
call fcn.004059a0
test al, al
jne 0x41bf04
push 5
push str.03109
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x3c
mov eax, edi
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41bf48
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3a
jmp 0x41a85b
mov eax, dword [ebx + 0x40]
mov ecx, 0x5e7344
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41bf86
test dx, dx
je 0x41bf82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41bf86
add eax, 4
add ecx, 4
test dx, dx
jne 0x41bf60
xor eax, eax
jmp 0x41bf8b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41c832
mov ebx, dword [sym.imp.WS2_32.dll_shutdown]
cmp byte [0x61645c], al
je 0x41bfab
push 1
push dword [0x616454]
call ebx
mov ecx, 0x616450
call fcn.0043675a
push dword [ebp - 0x1d4]
mov ecx, 0x616450
mov byte [0x61645c], 0
call fcn.00406840
test eax, eax
jns 0x41c12c
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x6f
call fcn.004059a0
test al, al
jne 0x41c01b
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x70
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb4d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x71
call fcn.004059a0
test al, al
jne 0x41c066
push 3
push 0x5e3a30
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x72
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb57
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03202
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x73
call fcn.004059a0
test al, al
jne 0x41c0b1
push 5
push str.03202
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x74
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x72
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c0f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x70
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
cmp byte [0x61645c], 0
je 0x41c6da
push 0
push 0xa
push 0xd
push str._PJL_INFO_BRFIRMSTART
push 0x1b
lea eax, [ebp - 0x90]
push str._c___12345X_s_c_c_c
push eax
call fcn.00406f30
lea ecx, [ebp - 0x90]
add esp, 0x1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c163
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push ecx
push eax
mov ecx, 0x616450
call fcn.00406af0
cmp eax, 1
jne 0x41c577
push ecx
mov ecx, 0x616450
call fcn.00406c20
cmp eax, 1
jne 0x41c577
lea ecx, [ebp - 0x228]
call fcn.00405e50
lea ecx, [ebp - 0x224]
call fcn.00405e50
lea ecx, [ebp - 0x220]
call fcn.00405e50
lea ecx, [ebp - 0x21c]
call fcn.00405e50
lea ecx, [ebp - 0x218]
call fcn.00405e50
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x214]
call fcn.004370aa
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x200]
call fcn.004370aa
lea ecx, [ebp - 0x1ec]
call fcn.00405e50
lea ecx, [ebp - 0x1e8]
call fcn.00405e50
lea ecx, [ebp - 0x1e4]
call fcn.00405e50
lea ecx, [ebp - 0x228]
call fcn.00408020
mov edx, str._PJL_INFO_BRFIRMSTART
lea ecx, [ebp - 0x228]
call fcn.00422890
test al, al
je 0x41c38d
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x81
call fcn.004059a0
test al, al
jne 0x41c27c
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x82
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb61
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x83
call fcn.004059a0
test al, al
jne 0x41c2c7
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x84
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb6b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03208
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x85
call fcn.004059a0
test al, al
jne 0x41c312
push 5
push str.03208
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x86
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x84
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c359
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x82
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
mov edx, dword [ebp - 0x1e4]
mov esi, dword [edx - 0xc]
test esi, esi
js 0x41cb89
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x41c3c1
push esi
lea ecx, [ebp - 0x1e4]
call fcn.00405f70
mov edx, dword [ebp - 0x1e4]
lea eax, [esi + 1]
push eax
push edx
call fcn.005792eb
mov eax, dword [ebp - 0x1e4]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x41cb89
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1e4]
mov word [eax + esi*2], cx
mov eax, dword [ebp - 0x1e4]
cmp dword [eax - 0xc], ecx
jl 0x41c832
push str.FALSE
push eax
call fcn.005709eb
add esp, 8
test eax, eax
je 0x41c832
sub eax, dword [ebp - 0x1e4]
sar eax, 1
js 0x41c832
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x87
call fcn.004059a0
test al, al
jne 0x41c466
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x88
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb75
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x89
call fcn.004059a0
test al, al
jne 0x41c4b1
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x8a
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb7f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03209
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x8b
call fcn.004059a0
test al, al
jne 0x41c4fc
push 5
push str.03209
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x8a
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c543
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x88
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
cmp eax, 0x102
jne 0x41c6da
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x75
call fcn.004059a0
test al, al
jne 0x41c5c9
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x76
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb93
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e712c
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x77
call fcn.004059a0
test al, al
jne 0x41c614
push 3
push 0x5e712c
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x78
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cb9d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03206
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x79
call fcn.004059a0
test al, al
jne 0x41c65f
push 5
push str.03206
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x78
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c6a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x76
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x7b
call fcn.004059a0
test al, al
jne 0x41c721
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 0x7c
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cba7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x7d
call fcn.004059a0
test al, al
jne 0x41c76c
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0x7e
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbb1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03207
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x7f
call fcn.004059a0
test al, al
jne 0x41c7b7
push 5
push str.03207
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x7e
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c7fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7c
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbbb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.data.dat
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x8d
call fcn.004059a0
test al, al
jne 0x41c884
push 8
push str.data.dat
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
push 0
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x8e
push eax
push ecx
mov ecx, 0x616450
call fcn.004069d0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x41a8c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41a8c1
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbc5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 7
call fcn.004059a0
test al, al
jne 0x41c90b
push 0
push 0x5e2d2c
lea ecx, [ebp - 0x1dc]
call fcn.004060b0
mov byte [ebp - 4], 8
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbcf
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
push 0x5e7140
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 9
call fcn.004059a0
test al, al
jne 0x41c956
push 3
push 0x5e7140
lea ecx, [ebp - 0x1d8]
call fcn.004060b0
mov byte [ebp - 4], 0xa
call fcn.00433b0d
mov ecx, eax
test ecx, ecx
je 0x41cbd9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
push str.03004
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0xb
call fcn.004059a0
test al, al
jne 0x41c9a1
push 5
push str.03004
lea ecx, [ebp - 0x1d4]
call fcn.004060b0
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x1d8]
mov ecx, 0x61649c
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0xa
or edi, 0xffffffff
mov edx, dword [ebp - 0x1d4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c9e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x1d8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ac0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1dc]
jmp 0x41a5da
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
call fcn.00433611
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80070057
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
push 0x80004005
call fcn.00406290
int3