Function at 0x40ef14
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x42
push 0
push 0
dec ecx
jne 0x40ef1c
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov esi, eax
xor eax, eax
push ebp
push 0x40feb2
push dword fs:[eax]
mov dword fs:[eax], esp
mov al, byte [0x40fec0]
call fcn.004098c0
test al, al
jne 0x40ef71
mov al, byte [0x40fec4]
call fcn.004098c0
test al, al
jne 0x40ef71
mov al, byte [0x40fec8]
call fcn.004098c0
test al, al
jne 0x40ef71
mov al, byte [0x40fecc]
call fcn.004098c0
test al, al
je 0x40efe8
mov edi, dword [esi + 0xf4]
test edi, edi
jle 0x40ef8d
mov edx, 0x40fed8
mov eax, 0x80000001
call fcn.0040566c
dec edi
jne 0x40ef7b
mov eax, dword [esi + 0xdc]
mov edi, dword [eax + 0x1c]
test edi, edi
jle 0x40efe8
mov ebx, 1
lea ecx, [ebp - 0x140]
mov edx, ebx
dec edx
mov eax, dword [esi + 0xdc]
call fcn.004084e8
mov eax, dword [ebp - 0x140]
push eax
lea edx, [ebp - 0x144]
mov eax, ebx
call fcn.00404e28
mov eax, dword [ebp - 0x144]
push eax
mov edx, 0x40fed8
mov eax, 0x80000001
call fcn.004054b4
pop edx
pop ecx
call fcn.00405620
inc ebx
dec edi
jne 0x40ef9f
mov al, byte [0x40fef0]
call fcn.004098c0
test al, al
jne 0x40f008
mov al, byte [0x40fef4]
call fcn.004098c0
test al, al
je 0x40f090
mov edi, dword [esi + 0xf4]
test edi, edi
jle 0x40f024
mov edx, 0x40fed8
mov eax, 0x80000001
call fcn.0040566c
dec edi
jne 0x40f012
mov eax, dword [esi + 0xdc]
mov edi, dword [eax + 0x1c]
test edi, edi
jle 0x40f090
mov ebx, 1
lea ecx, [ebp - 0x148]
mov edx, ebx
dec edx
mov eax, dword [esi + 0xdc]
call fcn.004084e8
mov eax, dword [ebp - 0x148]
push eax
lea edx, [ebp - 0x150]
mov eax, ebx
call fcn.00404e28
mov ecx, dword [ebp - 0x150]
lea eax, [ebp - 0x14c]
mov edx, 0x40ff00
call fcn.0040356c
mov edx, dword [ebp - 0x14c]
mov eax, 0x80000001
call fcn.004054b4
xor edx, edx
pop ecx
call fcn.00405620
inc ebx
dec edi
jne 0x40f036
xor ebx, ebx
lea ecx, [ebp - 0x158]
lea edi, [ebx + 0x100]
mov eax, edi
mov edx, 3
call fcn.00404dbc
mov ecx, dword [ebp - 0x158]
lea eax, [ebp - 0x154]
mov edx, 0x40ff24
call fcn.0040356c
mov edx, dword [ebp - 0x154]
mov eax, 0x80000001
call fcn.004056b4
test al, al
je 0x40f10c
lea ecx, [ebp - 0x160]
mov eax, edi
mov edx, 3
call fcn.00404dbc
mov ecx, dword [ebp - 0x160]
lea eax, [ebp - 0x15c]
mov edx, 0x40ff24
call fcn.0040356c
mov edx, dword [ebp - 0x15c]
mov eax, 0x80000001
call fcn.0040566c
inc ebx
cmp ebx, 0xc9
jne 0x40f092
mov eax, dword [esi + 0xe4]
mov edi, dword [eax + 0x1c]
dec edi
test edi, edi
jl 0x40f343
inc edi
xor ebx, ebx
lea ecx, [ebp - 0x164]
mov eax, dword [esi + 0xe4]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x164]
call fcn.00404df0
mov dword [ebp - 8], eax
push 4
lea ecx, [ebp - 0x16c]
lea eax, [ebx + 0x100]
mov edx, 3
call fcn.00404dbc
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
mov edx, 0x40ff24
call fcn.0040356c
mov edx, dword [ebp - 0x168]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff58
call fcn.0040574c
lea ecx, [ebp - 0x170]
mov eax, dword [esi + 0xec]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x170]
call fcn.00404df0
mov dword [ebp - 8], eax
push 4
lea ecx, [ebp - 0x178]
lea eax, [ebx + 0x100]
mov edx, 3
call fcn.00404dbc
mov ecx, dword [ebp - 0x178]
lea eax, [ebp - 0x174]
mov edx, 0x40ff24
call fcn.0040356c
mov edx, dword [ebp - 0x174]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff70
call fcn.0040574c
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x180]
mov eax, dword [esi + 0xe8]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x180]
mov ecx, 4
mov edx, 1
call fcn.00403780
mov eax, dword [ebp - 0x17c]
mov edx, 0x40ff84
call fcn.0040366c
jne 0x40f2cf
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x188]
mov eax, dword [esi + 0xe8]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x188]
mov ecx, 8
mov edx, 5
call fcn.00403780
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x190]
mov eax, dword [esi + 0xe8]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x190]
mov ecx, 8
mov edx, 5
call fcn.00403780
mov edx, dword [ebp - 0x18c]
pop eax
call fcn.00403528
mov ecx, dword [ebp - 0x184]
mov eax, dword [esi + 0xe8]
mov edx, ebx
call fcn.00408638
lea ecx, [ebp - 0x194]
mov eax, dword [esi + 0xe8]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x194]
call fcn.00404df0
mov dword [ebp - 8], eax
push 4
lea ecx, [ebp - 0x19c]
lea eax, [ebx + 0x100]
mov edx, 3
call fcn.00404dbc
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 0x40ff24
call fcn.0040356c
mov edx, dword [ebp - 0x198]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff94
call fcn.0040574c
inc ebx
dec edi
jne 0x40f12e
mov ebx, dword [esi + 0xf0]
cmp ebx, 0x804
jne 0x40f35e
lea eax, [ebp - 0xc]
mov edx, 0x40ffa8
call fcn.00403434
cmp ebx, 0x404
jne 0x40f373
lea eax, [ebp - 0xc]
mov edx, 0x40ffb4
call fcn.00403434
cmp ebx, 0x412
jne 0x40f388
lea eax, [ebp - 0xc]
mov edx, 0x40ffc0
call fcn.00403434
cmp ebx, 0x411
je 0x40f397
mov eax, 3
jmp 0x40f39c
mov eax, 1
mov edi, eax
test edi, edi
jle 0x40f4c1
mov ebx, 1
lea eax, [esi + 0x17c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
call fcn.00404df0
mov dword [ebp - 8], eax
push 4
push 0x40ffcc
push dword [ebp - 0xc]
lea edx, [ebp - 0x1a4]
mov eax, ebx
dec eax
call fcn.00404e28
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
mov edx, 3
call fcn.004035e0
mov edx, dword [ebp - 0x1a0]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff58
call fcn.0040574c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
call fcn.00404df0
mov dword [ebp - 8], eax
push 4
push 0x40ffcc
push dword [ebp - 0xc]
lea edx, [ebp - 0x1ac]
mov eax, ebx
dec eax
call fcn.00404e28
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov edx, 3
call fcn.004035e0
mov edx, dword [ebp - 0x1a8]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff70
call fcn.0040574c
xor eax, eax
mov dword [ebp - 8], eax
push 4
push 0x40ffcc
push dword [ebp - 0xc]
lea edx, [ebp - 0x1b4]
mov eax, ebx
dec eax
call fcn.00404e28
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
mov edx, 3
call fcn.004035e0
mov edx, dword [ebp - 0x1b0]
mov eax, 0x80000001
call fcn.004054b4
lea ecx, [ebp - 8]
mov edx, 0x40ff94
call fcn.0040570c
inc ebx
add dword [ebp - 0x14], 8
dec edi
jne 0x40f3b4
mov eax, dword [esi + 0x80]
call fcn.00407d38
test al, al
je 0x40f5d4
mov eax, dword [esi + 0x84]
call fcn.004082b0
test eax, eax
jne 0x40f55f
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410020
mov edx, 0x41002c
call fcn.00405620
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410020
mov edx, 0x41003c
call fcn.00405620
mov al, byte [0x40fef0]
call fcn.004098c0
test al, al
jne 0x40f53f
mov al, byte [0x40fef4]
call fcn.004098c0
test al, al
je 0x40f610
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410020
xor edx, edx
call fcn.00405620
jmp 0x40f610
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x40ffa8
mov edx, 0x41002c
call fcn.00405620
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x40ffa8
mov edx, 0x41003c
call fcn.00405620
mov al, byte [0x40fef0]
call fcn.004098c0
test al, al
jne 0x40f5b7
mov al, byte [0x40fef4]
call fcn.004098c0
test al, al
je 0x40f610
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x40ffa8
xor edx, edx
call fcn.00405620
jmp 0x40f610
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410054
mov edx, 0x41002c
call fcn.00405620
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410054
mov edx, 0x41003c
call fcn.00405620
mov eax, dword [esi + 0x88]
call fcn.00407d38
test al, al
je 0x40f66e
mov eax, dword [esi + 0x8c]
call fcn.004082b0
test eax, eax
jne 0x40f64e
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410020
mov edx, 0x410060
call fcn.00405620
jmp 0x40f68c
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x40ffa8
mov edx, 0x410060
call fcn.00405620
jmp 0x40f68c
mov edx, 0x410000
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410054
mov edx, 0x410060
call fcn.00405620
mov eax, dword [esi + 0xa8]
call fcn.00407d38
test al, al
je 0x40f6c8
mov edx, 0x410078
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x40ffa8
mov edx, 0x41009c
call fcn.00405620
push 1
push 0
push 1
push 0x6f
call fcn.00403ff8
jmp 0x40f6f3
mov edx, 0x410078
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x4100b0
mov edx, 0x41009c
call fcn.00405620
push 1
push 0
push 0
push 0x6f
call fcn.00403ff8
mov al, byte [0x40fec0]
call fcn.004098c0
test al, al
jne 0x40f72b
mov al, byte [0x40fec4]
call fcn.004098c0
test al, al
jne 0x40f72b
mov al, byte [0x40fec8]
call fcn.004098c0
test al, al
jne 0x40f72b
mov al, byte [0x40fecc]
call fcn.004098c0
test al, al
je 0x40f78d
mov eax, dword [esi + 0xa4]
call fcn.004082b0
test eax, eax
jne 0x40f763
mov edx, 0x4100bc
mov eax, 0x80000001
call fcn.004054b4
xor ecx, ecx
mov edx, 0x4100d4
call fcn.004055e8
push 0x40000000
push 0
call fcn.00403e00
jmp 0x40f78d
mov edx, 0x4100bc
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x10000
mov edx, 0x4100d4
call fcn.004055e8
push 0x40010000
push 0
call fcn.00403e00
push 2
push 0
push 0
push 0x5b
call fcn.00403ff8
lea eax, [esi + 0x100]
push eax
push 0x1e
call fcn.00403ec8
mov ebx, 0x1f
lea edi, [esi + 0x100]
cmp dword [edi], 0
je 0x40f7c2
mov eax, dword [edi]
push eax
call fcn.00404008
test eax, eax
add edi, 4
dec ebx
jne 0x40f7b3
mov eax, dword [esi + 0xdc]
mov ebx, dword [eax + 0x1c]
cmp ebx, 1
jl 0x40f802
push 8
lea ecx, [ebp - 0x1b8]
mov edx, ebx
dec edx
mov eax, dword [esi + 0xdc]
call fcn.004084e8
mov eax, dword [ebp - 0x1b8]
call fcn.00403720
push eax
call fcn.00403f60
dec ebx
test ebx, ebx
jne 0x40f7d6
lea eax, [esi + 0x100]
push eax
push 0x1e
call fcn.00403ec8
push 2
lea eax, [esi + 0x100]
push eax
push 0
push 0x5a
call fcn.00403ff8
call fcn.00408450
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
call fcn.0040339c
mov edx, 0x4100e8
mov eax, 0x80000002
call fcn.00405484
mov edx, dword [ebp - 0x10]
call fcn.00405784
mov eax, dword [ebp - 0x10]
mov edi, dword [eax + 0x1c]
dec edi
test edi, edi
jl 0x40f94c
inc edi
xor ebx, ebx
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x10]
mov edx, ebx
call fcn.004084e8
mov eax, dword [ebp - 0x1c0]
mov ecx, 1
mov edx, 1
call fcn.00403780
mov eax, dword [ebp - 0x1bc]
mov edx, 0x4100b0
call fcn.0040366c
je 0x40f944
lea ecx, [ebp - 0x1c8]
mov eax, dword [ebp - 0x10]
mov edx, ebx
call fcn.004084e8
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 0x410124
call fcn.0040356c
mov edx, dword [ebp - 0x1c4]
mov eax, 0x80000002
call fcn.00405484
lea ecx, [ebp - 0xc]
mov edx, 0x410160
call fcn.00405584
cmp dword [ebp - 0xc], 0
je 0x40f90e
lea eax, [ebp - 0x1cc]
call fcn.004053d8
lea eax, [ebp - 0x1cc]
mov edx, dword [ebp - 0xc]
call fcn.00403528
mov eax, dword [ebp - 0x1cc]
call fcn.00405300
test al, al
jne 0x40f944
lea ecx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x10]
mov edx, ebx
call fcn.004084e8
mov ecx, dword [ebp - 0x1d4]
lea eax, [ebp - 0x1d0]
mov edx, 0x410124
call fcn.0040356c
mov edx, dword [ebp - 0x1d0]
mov eax, 0x80000002
call fcn.0040566c
inc ebx
dec edi
jne 0x40f85b
mov eax, dword [ebp - 0x10]
call fcn.004044f4
mov eax, dword [esi + 0x74]
call fcn.00407d38
test al, al
je 0x40fa9e
mov al, byte [0x40fec8]
call fcn.004098c0
test al, al
je 0x40f98d
mov edx, 0x410174
mov eax, 0x80000001
call fcn.004054b4
xor ecx, ecx
mov edx, 0x410194
call fcn.004055e8
push 1
push 0x4101b4
push 0x4101b8
push 0x4101c8
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
push 1
push 0x4101b4
push 0x4101e0
push 0x4101c8
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
push 1
push 0x4101b4
push 0x4101f0
push 0x4101c8
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
push 1
push 0x4101b4
push 0x4101b4
push 0x410200
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
mov eax, esi
mov edx, 0x410214
call fcn.0040cec0
test al, al
je 0x40fa64
mov eax, esi
mov ecx, 1
mov edx, 0x410228
call fcn.0040cce0
mov eax, esi
xor ecx, ecx
mov edx, 0x410214
call fcn.0040cce0
test al, al
jne 0x40fa9e
mov edx, 0x410240
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410214
mov edx, 0x410214
call fcn.00405620
jmp 0x40fa9e
cmp dword [esi + 0xf0], 0x404
jne 0x40fa7c
mov eax, 0x410278
call fcn.00404458
jmp 0x40fa9e
cmp dword [esi + 0xf0], 0x804
jne 0x40fa94
mov eax, 0x410294
call fcn.00404458
jmp 0x40fa9e
mov eax, 0x4102b0
call fcn.00404458
mov eax, dword [esi + 0x78]
call fcn.00407d38
test al, al
je 0x40fe6e
mov al, byte [0x40fec8]
call fcn.004098c0
test al, al
je 0x40fada
mov edx, 0x410174
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 1
mov edx, 0x410194
call fcn.004055e8
mov eax, esi
mov ecx, 1
mov edx, 0x410214
call fcn.0040cce0
xor edx, edx
mov eax, 2
call fcn.0040a330
mov edi, eax
mov dword [ebp - 0x13c], 0x128
lea edx, [ebp - 0x13c]
mov eax, edi
call fcn.0040a350
cmp eax, 1
sbb ebx, ebx
inc ebx
jmp 0x40fbef
lea eax, [ebp - 0x1e0]
lea edx, [ebp - 0x118]
mov ecx, 0x104
call fcn.00403508
mov eax, dword [ebp - 0x1e0]
lea edx, [ebp - 0x1dc]
call fcn.004053bc
mov eax, dword [ebp - 0x1dc]
lea edx, [ebp - 0x1d8]
call fcn.00404f74
mov eax, dword [ebp - 0x1d8]
push eax
lea edx, [ebp - 0x1e4]
mov eax, 0x410214
call fcn.00404f74
mov edx, dword [ebp - 0x1e4]
pop eax
call fcn.0040366c
je 0x40fbc4
lea eax, [ebp - 0x1ec]
lea edx, [ebp - 0x118]
mov ecx, 0x104
call fcn.00403508
mov eax, dword [ebp - 0x1ec]
lea edx, [ebp - 0x1e8]
call fcn.00404f74
mov eax, dword [ebp - 0x1e8]
push eax
lea edx, [ebp - 0x1f0]
mov eax, 0x410214
call fcn.00404f74
mov edx, dword [ebp - 0x1f0]
pop eax
call fcn.0040366c
jne 0x40fbdc
push 0
mov eax, dword [ebp - 0x134]
push eax
push 0
push 1
call fcn.00403d50
push eax
call fcn.00403d60
lea edx, [ebp - 0x13c]
mov eax, edi
call fcn.0040a370
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x40fb1b
push 1
push 0x4101b4
push 0x4102c8
push 0x4101c8
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
push 1
push 0x4101b4
push 0x4102dc
push 0x4101c8
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
mov eax, esi
mov edx, 0x410228
call fcn.0040cec0
test al, al
jne 0x40fdbc
lea eax, [ebp - 0x1f4]
call fcn.004053d8
lea eax, [ebp - 0x1f4]
mov edx, 0x410228
call fcn.00403528
mov eax, dword [ebp - 0x1f4]
call fcn.00405300
test al, al
jne 0x40fdbc
lea eax, [ebp - 0x1f8]
call fcn.00405450
lea eax, [ebp - 0x1f8]
mov edx, 0x410228
call fcn.00403528
mov eax, dword [ebp - 0x1f8]
call fcn.00405300
test al, al
je 0x40fcfa
push 0xffffffffffffffff
lea eax, [ebp - 0x1fc]
call fcn.004053d8
lea eax, [ebp - 0x1fc]
mov edx, 0x410228
call fcn.00403528
mov eax, dword [ebp - 0x1fc]
call fcn.00403720
push eax
lea eax, [ebp - 0x200]
call fcn.00405450
lea eax, [ebp - 0x200]
mov edx, 0x410228
call fcn.00403528
mov eax, dword [ebp - 0x200]
call fcn.00403720
push eax
call fcn.00403ce8
lea eax, [ebp - 0x204]
call fcn.00405450
lea eax, [ebp - 0x204]
mov edx, 0x4102f4
call fcn.00403528
mov eax, dword [ebp - 0x204]
call fcn.00405300
test al, al
je 0x40fd79
push 0xffffffffffffffff
lea eax, [ebp - 0x208]
call fcn.004053d8
lea eax, [ebp - 0x208]
mov edx, 0x4102f4
call fcn.00403528
mov eax, dword [ebp - 0x208]
call fcn.00403720
push eax
lea eax, [ebp - 0x20c]
call fcn.00405450
lea eax, [ebp - 0x20c]
mov edx, 0x4102f4
call fcn.00403528
mov eax, dword [ebp - 0x20c]
call fcn.00403720
push eax
call fcn.00403ce8
push 1
push 0x4101b4
push 0x4101b4
lea eax, [ebp - 0x210]
call fcn.004053d8
lea eax, [ebp - 0x210]
mov edx, 0x410228
call fcn.00403528
mov eax, dword [ebp - 0x210]
call fcn.00403720
push eax
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
mov eax, esi
mov edx, 0x410228
call fcn.0040cec0
test al, al
jne 0x40fded
push 1
push 0x4101b4
push 0x4101b4
push 0x410304
push 0x4101d8
call fcn.00403e80
push eax
call fcn.004040d4
mov eax, esi
mov edx, 0x410228
call fcn.0040cec0
test al, al
jne 0x40fe3e
call fcn.00405244
test eax, eax
jne 0x40fe3e
mov eax, dword [esi + 0xf0]
cmp eax, 0x404
jne 0x40fe1f
mov eax, 0x41031c
call fcn.00404458
jmp 0x40fe6e
cmp eax, 0x804
jne 0x40fe32
mov eax, 0x4103c4
call fcn.00404458
jmp 0x40fe6e
mov eax, 0x41046c
call fcn.00404458
jmp 0x40fe6e
mov eax, esi
xor ecx, ecx
mov edx, 0x410228
call fcn.0040cce0
test al, al
jne 0x40fe6e
mov edx, 0x410240
mov eax, 0x80000001
call fcn.004054b4
mov ecx, 0x410228
mov edx, 0x410228
call fcn.00405620
mov eax, 0x80000002
call fcn.00405660
mov eax, 0x80000001
call fcn.00405660
mov eax, esi
mov edx, dword [ebp - 4]
call fcn.0040d194
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40feb9
lea eax, [ebp - 0x210]
mov edx, 0x35
call fcn.004033c0
lea eax, [ebp - 0xc]
call fcn.0040339c
ret