Function at 0x4415e0
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45d460
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x750
mov eax, dword [0x474a60]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x74c], ecx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x74c]
call fcn.00442660
mov byte [ebp - 0x218], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x217]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004427f0
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x750]
add edx, 0x1fd24
push edx
push str._s__q__u__s__u
lea eax, [ebp - 0x218]
push eax
call fcn.0042c838
add esp, 0x14
mov byte [ebp - 0x320], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x31f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004427f0
mov dword [ebp - 0x754], eax
mov ecx, dword [ebp - 0x754]
add ecx, 0x1fc20
push ecx
push str._sShipping
lea edx, [ebp - 0x320]
push edx
call fcn.0042c838
add esp, 0xc
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 8]
add ecx, 0x36
push ecx
lea edx, [ebp - 0x320]
push edx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x330]
push ecx
mov ecx, dword [ebp - 0x74c]
call fcn.004425a0
mov dword [ebp - 0x758], eax
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x758]
mov dword [eax + 0x4a9], ecx
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx + 8]
cmp dword [eax + 0x4a9], 0
je 0x4418fa
mov byte [ebp - 0x530], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x52f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x74c]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x4a9]
push eax
push str.TCLS_SHAREDMEMEMORY_d
lea ecx, [ebp - 0x530]
push ecx
call fcn.0042c838
add esp, 0xc
push 0x11c80
lea edx, [ebp - 0x530]
push edx
mov ecx, dword [ebp - 0x74c]
call fcn.00442370
mov byte [ebp - 0x759], al
movzx eax, byte [ebp - 0x759]
test eax, eax
je 0x4417ab
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x74c]
call fcn.00441a50
mov ecx, dword [ebp - 0x74c]
call fcn.00442360
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov byte [ebp - 0x638], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x637]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov byte [ebp - 0x430], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x42f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov byte [ebp - 0x738], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x737]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004427f0
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x760]
add ecx, 0x1fc20
push ecx
lea edx, [ebp - 0x738]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.TCLSClient.exe
lea eax, [ebp - 0x738]
push eax
push 0x46859c
lea ecx, [ebp - 0x430]
push ecx
call fcn.0042c838
add esp, 0x10
push 0
push 0
push 3
push 0
push 1
push SysReAllocString
lea edx, [ebp - 0x430]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0xffffffff
je 0x4418fa
push 0
push 0
lea eax, [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x534]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x4418ed
mov edx, dword [ebp - 0x73c]
push edx
mov eax, dword [ebp - 0x740]
push eax
push str.DAFEC031_5ACB_4AD3_B3ED_F12EB3B02B19
push str._s_08x
lea ecx, [ebp - 0x638]
push ecx
call fcn.0042c838
add esp, 0x14
lea edx, [ebp - 0x638]
push edx
push 0
push 0xf001f
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0
jne 0x4418ed
lea eax, [ebp - 0x638]
push eax
push 0x208
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x534]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x330]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x4a9]
jmp 0x441948
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042b91e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4