Function at 0x41a2d0
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41d6d0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x148
mov eax, dword [0x427008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xc4], edi
xor esi, esi
mov dword [ebp - 0xec], esi
mov ecx, dword [edi]
cmp dword [ecx + 0x5c], esi
jne 0x41a6cd
rdtsc
mov ecx, edx
lea esi, [ebp - 0x16]
mov dword [ebp - 0xe4], esi
mov edi, eax
mov dword [ebp - 0xf4], edi
test ecx, ecx
jne 0x41a350
cmp edi, 0xffffffff
jbe 0x41a460
nop
mov eax, edi
mov dword [ebp - 0xc0], ecx
mov edx, 0x6d694b2f
mul edx
mov dword [ebp - 0xf0], eax
mov esi, edx
mov eax, edi
mov edx, 0x12e0be82
mul edx
mov edi, eax
mov dword [ebp - 0xf8], edx
mov eax, ecx
mov ecx, 0x6d694b2f
mul ecx
mov ecx, eax
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0xc0]
mov edx, 0x12e0be82
mul edx
add ecx, esi
mov dword [ebp - 0xec], edx
mov edx, dword [ebp - 0xac]
mov esi, dword [ebp - 0xec]
adc edx, 0
add edi, ecx
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0xf8]
adc ecx, 0
mov dword [ebp - 0xb0], edi
mov edi, dword [ebp - 0xf4]
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x44]
adc eax, eax
add ecx, edx
mov edx, edi
adc esi, eax
mov eax, dword [ebp - 0xc0]
sub edx, ecx
sbb eax, esi
shrd edx, eax, 1
shr eax, 1
add edx, ecx
adc eax, esi
mov esi, dword [ebp - 0xe4]
shrd edx, eax, 0x1d
shr eax, 0x1d
mov dword [ebp - 0xc0], eax
imul eax, edx, 0x3b9aca00
sub edi, eax
mov ecx, edi
mov edi, edx
mov dword [ebp - 0xf4], edi
mov edi, 9
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
sub edi, 1
jne 0x41a414
mov ecx, dword [ebp - 0xc0]
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0xe4], esi
test ecx, ecx
ja 0x41a350
jb 0x41a460
cmp edi, 0xffffffff
ja 0x41a350
nop word [eax + eax]
mov eax, 0xcccccccd
sub esi, 2
mul edi
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub edi, eax
add edi, 0x30
mov word [esi], di
mov edi, edx
test edi, edi
jne 0x41a460
xor eax, eax
mov dword [ebp - 0xe0], edx
mov word [ebp - 0xe0], ax
xor ecx, ecx
lea eax, [ebp - 0x16]
mov dword [ebp - 0xd0], ecx
mov edx, 7
mov dword [ebp - 0xcc], edx
cmp esi, eax
je 0x41a4c6
sub eax, esi
lea ecx, [ebp - 0xe0]
sar eax, 1
push eax
push esi
call fcn.0040de20
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
mov eax, edx
mov dword [ebp - 4], 0
sub eax, ecx
cmp eax, 5
jb 0x41a56a
cmp edx, 8
lea edi, [ebp - 0xe0]
lea eax, [ecx + 5]
cmovae edi, dword [ebp - 0xe0]
lea edx, [ecx + ecx]
mov dword [ebp - 0xd0], eax
cmp edi, 0x424676
jae 0x41a520
lea eax, [edx + edi]
cmp eax, str.ImBox
jb 0x41a520
cmp edi, str.ImBox
ja 0x41a514
xor esi, esi
jmp 0x41a525
mov esi, edi
sub esi, str.ImBox
sar esi, 1
jmp 0x41a525
mov esi, 5
lea eax, [edx + 2]
push eax
lea ecx, [edi + 0xa]
push edi
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
add esi, esi
push esi
push str.ImBox
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [esi + edi]
mov eax, 0xa
sub eax, esi
push eax
lea eax, [esi + 0x424676]
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0xe0]
jmp 0x41a589
push 5
sub esp, 8
mov byte [ebp - 0xec], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0xec]
push 5
call fcn.0041b590
movups xmm0, xmmword [eax]
xor ecx, ecx
mov edi, dword [ebp - 0xc4]
movq xmm1, qword [eax + 0x10]
mov word [eax], cx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea esi, [ecx + 0x1c]
mov eax, dword [edi]
lea ecx, [ebp - 0x110]
add eax, 0x4c
movq qword [ebp - 0xf0], xmm1
movq qword [ebp - 0x100], xmm1
mov dword [ebp - 0xc4], eax
movups xmmword [ebp - 0x120], xmm0
movups xmmword [ebp - 0x110], xmm0
cmp eax, ecx
je 0x41a646
mov ecx, dword [eax + 0x14]
cmp ecx, 8
jb 0x41a62e
mov eax, dword [eax]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41a60f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a6bb
mov eax, edx
push ecx
push eax
call fcn.0041c8aa
movups xmm0, xmmword [ebp - 0x120]
add esp, 8
mov eax, dword [ebp - 0xc4]
movq xmm1, qword [ebp - 0xf0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm1
jmp 0x41a682
mov edx, dword [ebp - 0xfc]
cmp edx, 8
jb 0x41a682
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41a678
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a6bb
push edx
push ecx
call fcn.0041c8aa
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xcc]
cmp edx, 8
jb 0x41a6cb
mov ecx, dword [ebp - 0xe0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41a6c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41a6c1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
add esp, 8
mov ecx, dword [edi]
mov edx, dword [ecx + 0x5c]
add ecx, 0x4c
mov eax, 0x7ffffffe
sub eax, edx
cmp eax, 7
jb 0x41af48
cmp dword [ecx + 0x14], 8
jb 0x41a6eb
mov ecx, dword [ecx]
push edx
push ecx
push 7
push str.Global_
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xe0]
call fcn.0040e5b0
or esi, 0x20
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xcc], 8
mov dword [ebp - 0xc0], esi
cmovae eax, dword [ebp - 0xe0]
push eax
push 0x101000
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov edx, dword [ebp - 0xcc]
mov esi, eax
test esi, esi
sete al
mov byte [ebp - 0xb9], al
cmp edx, 8
jb 0x41a78f
mov ecx, dword [ebp - 0xe0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41a77f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41a77f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
mov al, byte [ebp - 0xb9]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], cx
test al, al
jne 0x41af25
push ecx
push ecx
push ecx
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
test esi, esi
je 0x41af25
mov ecx, dword [edi + 4]
push esi
mov edx, dword [ecx]
call dword [edx + 0x14]
mov ecx, dword [edi]
mov eax, 0x7ffffffe
add ecx, 0x4c
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 7
jb 0x41af4d
cmp dword [ecx + 0x14], 8
jb 0x41a7f3
mov ecx, dword [ecx]
push edx
push ecx
push 7
push str.Global_
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x128]
call fcn.0040e5b0
mov eax, dword [ebp - 0xc0]
or eax, 0x40
or eax, 1
mov dword [ebp - 4], 1
push str._Request
lea edx, [ebp - 0x128]
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0x158]
mov dword [ebp - 0xec], eax
call fcn.0040df90
or dword [ebp - 0xc0], 2
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x41a855
mov eax, dword [eax]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0xe4], eax
test eax, eax
je 0x41a880
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 0xb9], 0
cmp eax, 0xb7
jne 0x41a887
mov byte [ebp - 0xb9], 1
mov eax, dword [ebp - 0xc0]
test al, 2
je 0x41a8f9
mov edx, dword [ebp - 0x144]
and eax, 0xfffffffd
mov dword [ebp - 0xc0], eax
cmp edx, 8
jb 0x41a8dc
mov ecx, dword [ebp - 0x158]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41a8cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a936
push edx
push ecx
call fcn.0041c8aa
mov eax, dword [ebp - 0xc0]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 7
mov word [ebp - 0x158], cx
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x41a963
mov edx, dword [ebp - 0x114]
cmp edx, 8
jb 0x41a946
mov ecx, dword [ebp - 0x128]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41a93c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41a93c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
add esp, 8
xor eax, eax
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
cmp byte [ebp - 0xb9], 0
jne 0x41af1e
mov ecx, dword [edi]
mov eax, 0x7ffffffe
add ecx, 0x4c
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 7
jb 0x41af52
cmp dword [ecx + 0x14], 8
jb 0x41a990
mov ecx, dword [ecx]
push edx
push ecx
push 7
push str.Global_
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x140]
call fcn.0040e5b0
push str._Response
lea edx, [ebp - 0x140]
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.0040df90
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x41a9d3
mov eax, dword [eax]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edx, dword [ebp - 0xfc]
test eax, eax
mov dword [ebp - 0xc4], eax
sete byte [ebp - 0xb9]
cmp edx, 8
jb 0x41aa2b
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41aa21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa81
push edx
push ecx
call fcn.0041c8aa
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
cmp edx, 8
jb 0x41aa91
mov ecx, dword [ebp - 0x140]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41aa87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41aa87
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
add esp, 8
xor eax, eax
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
cmp byte [ebp - 0xb9], al
jne 0x41af1e
push 0x40
push eax
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x44
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
mov eax, 0x7ffffffe
add ecx, 0x4c
add esp, 0xc
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0x1d
jb 0x41af57
cmp dword [ecx + 0x14], 8
jb 0x41aaf6
mov ecx, dword [ecx]
push edx
push ecx
push 0x1d
push str.imdisk__a__t_proxy__o_shm__f
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x60]
call fcn.0040e5b0
mov dword [ebp - 4], 3
mov ecx, dword [edi]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x41ac18
mov eax, 0x7ffffffe
sub eax, edx
cmp eax, 5
jb 0x41af5c
cmp dword [ecx + 0x14], 8
jb 0x41ab3a
mov ecx, dword [ecx]
push edx
push ecx
push 5
push 0x4246f0
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x30]
call fcn.0040e5b0
push 0x4246ec
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe0]
call fcn.0040df90
add esp, 4
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.0041b520
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xcc]
cmp edx, 8
jb 0x41abb9
mov ecx, dword [ebp - 0xe0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41abaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ac06
push edx
push ecx
call fcn.0041c8aa
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp edx, 8
jb 0x41ac16
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ac0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41ac0c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
add esp, 8
mov ecx, dword [edi]
cmp dword [ecx + 0x40], 0
je 0x41aca6
mov edx, dword [ecx + 0x40]
add ecx, 0x30
mov eax, 0x7ffffffe
sub eax, edx
cmp eax, 1
jb 0x41af61
cmp dword [ecx + 0x14], 8
jb 0x41ac40
mov ecx, dword [ecx]
push edx
push ecx
push 1
push 0x4246fc
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x30]
call fcn.0040e5b0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x60]
call fcn.0041b520
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x41aca6
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ac9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41af0a
push edx
push ecx
call fcn.0041c8aa
add esp, 8
cmp dword [ebp - 0x4c], 8
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0xa8]
push ecx
push 0
push 0
push 0x8000000
push 0
push 0
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x41acf2
push 0x424700
call fcn.0040d690
add esp, 4
mov esi, 0xa
jmp 0x41aede
push dword [ebp - 0xb4]
call dword [sym.imp.ntdll.dll_NtClose]
mov eax, dword [edi]
cmp dword [eax + 0x10], 0
je 0x41ad58
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
test al, al
jne 0x41ad2d
mov eax, dword [edi]
add eax, 0x18
mov dword [eax + 0x10], 0
cmp dword [eax + 0x14], 8
jb 0x41ad28
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
mov ecx, dword [edi]
mov eax, dword [ebp - 0xb8]
push 0
push 0
mov dword [ecx + 0x48], eax
push dword [edi]
push 0x419c90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 8], eax
mov dword [edi], 0
jmp 0x41ad64
push dword [ebp - 0xb8]
call dword [sym.imp.ntdll.dll_NtClose]
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfa0a1f00
push eax
push 0
push dword [ebp - 0xe4]
mov dword [ebp - 0x44], 0xffffffff
call dword [sym.imp.ntdll.dll_NtWaitForSingleObject]
test eax, eax
jne 0x41aed9
cmp byte [esi], 1
jne 0x41aed9
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [ebp - 0xe0]
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0xcc], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0xd0]
movq qword [esi + 0x10], xmm0
nop word [eax + eax]
push 0
push 0
push dword [ebp - 0xe4]
push dword [ebp - 0xc4]
call dword [sym.imp.ntdll.dll_NtSignalAndWaitForSingleObject]
mov al, byte [esi]
cmp al, 2
jne 0x41ae48
push dword [esi + 0xc]
mov ecx, dword [edi + 4]
lea edx, [esi + 0x1000]
push dword [esi + 8]
push dword [esi + 0x10]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x41aea5
push str.DiskRead_error._n
call fcn.0040d690
mov eax, dword [esi + 0x10]
add esp, 4
mov ecx, dword [esi + 0x14]
mov byte [esi], 0
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
jmp 0x41adf0
cmp al, 3
jne 0x41ae8b
push dword [esi + 0xc]
mov ecx, dword [edi + 4]
lea edx, [esi + 0x1000]
push dword [esi + 8]
push dword [esi + 0x10]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0x18]
call eax
test al, al
jne 0x41aea5
push str.DiskWrite_error__SOME_DATA_WILL_BE_LOST.
call fcn.0040d690
mov eax, dword [esi + 0x10]
add esp, 4
mov ecx, dword [esi + 0x14]
mov byte [esi], 0
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
jmp 0x41adf0
cmp al, 6
jne 0x41aeb9
mov ecx, dword [edi + 4]
mov eax, dword [esi + 8]
shr eax, 4
push eax
mov edx, dword [ecx]
lea eax, [esi + 0x1000]
push eax
call dword [edx + 0x20]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
mov byte [esi], 0
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
jmp 0x41adf0
cmp al, 5
jne 0x41aec1
xor esi, esi
jmp 0x41aede
movzx eax, al
push eax
push str.Unknown_Command:__d_n
call fcn.0040d690
add esp, 8
mov esi, 0xc
jmp 0x41aede
mov esi, 0xb
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x41af1a
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41af10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41af10
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0041c8aa
add esp, 8
mov eax, esi
jmp 0x41af2a
mov eax, 9
jmp 0x41af2a
mov eax, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041c61b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0040d660
call fcn.0040d660
call fcn.0040d660
call fcn.0040d660
call fcn.0040d660
call fcn.0040d660
int3