Function at 0x41c000
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc0c0
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
push ebx
push esi
push edi
mov eax, dword [0x505070]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x50], edx
push ecx
push ecx
lea ecx, [ebp - 0x40]
call fcn.00467970
mov dword [ebp - 4], 0
mov ebx, 1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
call fcn.0041d190
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.0046d590
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.00485180
mov byte [ebp - 4], bl
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c096
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x4e63f4
push str.mpSetup_Cls
call dword [sym.imp.USER32.dll_FindWindowW]
push 0x4e564c
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x1c], eax
call fcn.00405360
push ecx
mov byte [ebp - 4], 3
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x18], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c104
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x41c183
push 0x4e470c
push str.none
push str.crash
call fcn.00472b70
add esp, 8
mov ecx, esp
push 0x4e564c
call fcn.00405360
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x40]
call fcn.004684a0
mov byte [ebp - 4], 4
cmp dword [0x51ddc0], 0
jne 0x41c15c
push 4
call fcn.0049f1e8
mov dword [ebp - 0x18], eax
add esp, 4
mov dword [0x51ddc0], eax
mov dword [eax], vtable.CUploadDumpMgr.0
lea eax, [ebp - 0x14]
push eax
call fcn.0041f0b0
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c183
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._check_update
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 5
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x18], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c1de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x41c259
cmp dword [ebp - 0x44], 0
jne 0x41c259
push ecx
mov ecx, esp
xor ebx, ebx
push str._check_update
mov dword [ebp - 0x28], ebx
call fcn.00405360
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x40]
call fcn.004684a0
mov byte [ebp - 4], 6
mov eax, dword [0x51ddbc]
test eax, eax
jne 0x41c234
push 0xc
call fcn.0049f1e8
add esp, 4
mov dword [ebp - 0x14], eax
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0040d640
mov byte [ebp - 4], 6
mov dword [0x51ddbc], eax
mov ecx, eax
call fcn.0040d7d0
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c259
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._recommend_soft
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 8
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x18], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c2b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x41c329
push ecx
mov ecx, esp
xor ebx, ebx
push str._recommend_soft
mov dword [ebp - 0x28], ebx
call fcn.00405360
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x40]
call fcn.004684a0
mov byte [ebp - 4], 9
mov eax, dword [0x51ddb8]
test eax, eax
jne 0x41c304
push 0x5c
call fcn.0049f1e8
add esp, 4
mov dword [ebp - 0x14], eax
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00417ca0
mov byte [ebp - 4], 9
mov dword [0x51ddb8], eax
mov ecx, eax
call fcn.00417fa0
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c329
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._install
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 0xb
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x18], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c384
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x41c39d
push ecx
mov ecx, esp
push str._install
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
push ecx
mov ecx, esp
push str._update
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
push ecx
mov ecx, esp
push str._uninstall
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
push str._showtips
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 0xc
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x18], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c422
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x41c453
cmp dword [ebp - 0x44], 0
jne 0x41c453
cmp dword [ebp - 0x1c], 0
jne 0x41c453
push 0x4e470c
push 0x4e01f0
xor ebx, ebx
push 0x4e01d8
mov dword [ebp - 0x28], ebx
call fcn.00472aa0
add esp, 0xc
call fcn.0041dc10
push str._serverReport
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 0xd
mov esi, esp
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c4ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x41c4c9
push 0x4e470c
push str.none
push str.server_run
call fcn.00472b70
add esp, 0xc
push str._deviceReport
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 0xe
mov esi, esp
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c524
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x41c58c
cmp dword [0x51ddc4], 0
jne 0x41c549
push 4
call fcn.0049f1e8
mov dword [ebp - 0x1c], eax
add esp, 4
mov dword [0x51ddc4], eax
mov dword [eax], vtable.CDeviceEnvMgr.0
cmp dword [0x51c334], 0
jne 0x41c56a
push 4
call fcn.0049f1e8
mov dword [ebp - 0x1c], eax
add esp, 4
mov dword [0x51c334], eax
mov dword [eax], vtable.CSoftwareDetectMgr.0
call fcn.0041d3b0
push eax
push str.data_d
push 0x4dff20
push str.device_software_env
call fcn.00472b70
add esp, 0x10
call fcn.00410be0
push str._serverCallSpeedup
lea ecx, [ebp - 0x14]
call fcn.00405360
push ecx
mov byte [ebp - 4], 0xf
mov esi, esp
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c5e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x41c698
call fcn.00405a90
mov ecx, eax
test ecx, ecx
jne 0x41c604
push 0x80004005
call fcn.00405cb0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x10
push eax
push ecx
mov ecx, esp
push str._serverCallSpeedup
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.00468590
mov esi, dword [ebp - 0x14]
push 0x4e6508
push esi
call fcn.004a812c
add esp, 8
test eax, eax
jne 0x41c64d
push 0x4e470c
push str.fail
jmp 0x41c670
push 0x4e650c
push esi
call fcn.004a812c
add esp, 8
push 0x4e470c
test eax, eax
jne 0x41c66b
push 0x4e017c
jmp 0x41c670
push 0x4e0174
push str.server_call_speedup
call fcn.00472b70
add esp, 0xc
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41c698
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x4c], vtable.CCheckCloudConfigMgr.0
push 0x4e6510
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.00405360
push ecx
mov byte [ebp - 4], 0x12
mov esi, esp
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c6fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x41c73c
mov eax, dword [0x51c330]
xor ebx, ebx
mov dword [ebp - 0x28], ebx
test eax, eax
jne 0x41c731
push 0x44
call fcn.0049f1e8
add esp, 4
mov dword [ebp - 0x1c], eax
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.0040fcc0
mov byte [ebp - 4], 0x11
mov dword [0x51c330], eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.004102e0
push ecx
mov ecx, esp
push str._shellextshow
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
je 0x41c7de
push str.XDSpeedup
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x41c790
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x3e8
push ecx
push 0
push 0x4a
push eax
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x1c], str.test
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41c7de
push ecx
mov edx, str.pdfspeedup.exe
lea ecx, [ebp - 0x14]
call fcn.0046d440
add esp, 4
push dword [ebp - 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41c7c4
push 1
push 0
push str._shellextshow
push dword [ebp - 0x14]
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c7de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x7c], vtable.CEndSessionMgr.1.0
mov dword [ebp - 0x58], vtable.CEndSessionMgr.0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x14
push str._enableServer
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
je 0x41c83a
xor ebx, ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x28], ebx
call fcn.00411560
lea ecx, [ebp - 0xb0]
call fcn.0040def0
push str._checkActive
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call fcn.00405360
push ecx
mov byte [ebp - 4], 0x16
mov esi, esp
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405420
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00468270
xor ecx, ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c8a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x41c8b8
xor ebx, ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x28], ebx
call fcn.0040e3f0
push ecx
mov ecx, esp
push str._launchMainProg
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
jne 0x41c907
push ecx
mov ecx, esp
push str._startmenu
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
jne 0x41c907
push ecx
mov ecx, esp
push str._taskbar
call fcn.0041cb10
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
je 0x41c9d5
lea ecx, [ebp - 0x14]
call fcn.0046d590
push dword [ebp - 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41c9b7
push str.Globalmasterpdf_server_event_C33B7EE9753C
push 0
push 2
mov byte [ebp - 4], 0x18
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push str.Globalmasterpdf_server_mapping_C33B7EE9753C
push 0
mov esi, eax
push 2
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
je 0x41c96c
test esi, esi
je 0x41c96c
sub esp, 8
lea ecx, [ebp - 0x20]
push dword [ebp - 0x14]
call fcn.00485460
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
test eax, eax
jns 0x41c99c
push ecx
push 0
push 0
push 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xffffffff
call fcn.00468b00
test eax, eax
jne 0x41c99c
push 1
push eax
push eax
push dword [ebp - 0x14]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x41c9ad
push esi
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x41c9b4
push ebx
call eax
mov ebx, dword [ebp - 0x28]
mov byte [ebp - 4], 0x15
mov eax, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41c9d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, esp
push str._kszRecommend
call fcn.00405360
lea ecx, [ebp - 0x40]
call fcn.004683a0
test eax, eax
je 0x41cac2
call fcn.00417510
test eax, eax
je 0x41cac2
call fcn.00415a10
mov ecx, dword [ebp - 0x50]
call fcn.0041d200
mov esi, eax
lea ecx, [ebp - 0xb0]
call fcn.0040e050
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], vtable.CEndSessionMgr.1.0
mov dword [ebp - 0x58], vtable.CEndSessionMgr.0
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41ca3d
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x58], vtable.CSingletonBase_class_CEndSessionMgr_.0
test eax, eax
je 0x41ca51
push eax
call fcn.0049df8f
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], vtable.CCheckCloudConfigMgr.0
push dword [eax]
lea eax, [ebp - 0x50]
push eax
call fcn.0041cc40
push dword [ebp - 0x48]
call fcn.0049f1af
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41ca96
mov edx, dword [ebp - 0x38]
call fcn.00412160
push dword [ebp - 0x3c]
call fcn.004a4b97
add esp, 4
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x41caae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x41ca04
xor esi, esi
jmp 0x41ca0e