Function at 0x419cf0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5757e3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x2e8
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x98], 0
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x38], esi
push str.U3UwJQQY8DEBInhFEI1hNhFskLx4UmWS9zqBUIu8MBBDAMnM8ndHsPbARUl7Dxs
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x94], 0
movups xmmword [ebp - 0xa8], xmm0
call fcn.0042db40
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x60]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
push str.WUNYaSCkxPNywsfICw
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0
call fcn.0042db40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x90]
push 0x27
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push str.Zm5ipThMHXPS0U8CwM6mDwEMIEQAPSCyIDMCg
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x7c], 0
call fcn.0042db40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
push 0x27
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.RDlNacSdLSKBAwkUCIfaG1w_MAytLMcFQzdSg
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x64], 0
call fcn.0042db40
mov byte [ebp - 4], 4
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a7fa
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 5
call fcn.00460e20
cmp eax, 1
jne 0x41a020
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a840
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.aFRYkax09FBx8NKJjUCrBjUsNAgc6lBw4aSJjcZ
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call fcn.0042f750
test al, al
jne 0x419e4c
push 0x27
push str.aFRYkax09FBx8NKJjUCrBjUsNAgc6lBw4aSJjcZ
lea ecx, [ebp - 0x24]
call fcn.0042fa90
mov byte [ebp - 4], 7
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a804
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push 0x5911fc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.0042f750
test al, al
jne 0x419e90
push 0
push 0x5911fc
lea ecx, [ebp - 0x14]
call fcn.0042fa90
mov byte [ebp - 4], 9
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a80e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5911fc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
call fcn.0042f750
test al, al
jne 0x419ed4
push 0
push 0x5911fc
lea ecx, [ebp - 0x1c]
call fcn.0042fa90
mov byte [ebp - 4], 0xb
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a818
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5911fc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xc
call fcn.0042f750
test al, al
jne 0x419f18
push 0
push 0x5911fc
lea ecx, [ebp - 0x20]
call fcn.0042fa90
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x24]
push ecx
add eax, 0xfffffff0
mov esi, esp
mov ecx, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], eax
call fcn.0042ee10
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00445a80
mov esi, eax
sub esp, 0x14
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0042ef00
lea ecx, [ebp - 0x38]
call fcn.00445650
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
push ecx
lea ecx, [ebp - 0x1c]
mov edx, esi
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.00454e90
mov edx, dword [ebp - 0x38]
or esi, 0xffffffff
add esp, 0x24
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419f94
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419fae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419fc8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419fe2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419ffc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a27a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 0x15], 0
jmp 0x41a6d4
push 0x104
lea eax, [ebp - 0x2f8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jle 0x41a05c
nop dword [eax + eax]
lea ecx, [ebp - 0x2f8]
cmp word [ecx + eax*2], 0x5c
lea ecx, [ecx + eax*2]
je 0x41a057
dec eax
test eax, eax
jg 0x41a040
jmp 0x41a05c
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x2f8]
push eax
call fcn.0055a4ae
add esp, 4
test eax, eax
je 0x41a283
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a840
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.YlpxSWgYzcAz8BVLh4osGwUC5LQsuiEjIL5NBYFKBygD4NRA
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x10
call fcn.0042f750
test al, al
jne 0x41a0b3
push 0x31
push str.YlpxSWgYzcAz8BVLh4osGwUC5LQsuiEjIL5NBYFKBygD4NRA
lea ecx, [ebp - 0x24]
call fcn.0042fa90
mov byte [ebp - 4], 0x11
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a822
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5911fc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x12
call fcn.0042f750
test al, al
jne 0x41a0f7
push 0
push 0x5911fc
lea ecx, [ebp - 0x20]
call fcn.0042fa90
mov byte [ebp - 4], 0x13
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a82c
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5911fc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.0042f750
test al, al
jne 0x41a13b
push 0
push 0x5911fc
lea ecx, [ebp - 0x1c]
call fcn.0042fa90
mov byte [ebp - 4], 0x15
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a836
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push 0x5911fc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x16
call fcn.0042f750
test al, al
jne 0x41a17f
push 0
push 0x5911fc
lea ecx, [ebp - 0x14]
call fcn.0042fa90
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x24]
push ecx
add eax, 0xfffffff0
mov esi, esp
mov ecx, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], eax
call fcn.0042ee10
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00445a80
mov esi, eax
sub esp, 0x14
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0042ef00
lea ecx, [ebp - 0x2c]
call fcn.00445650
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x19
push ecx
lea ecx, [ebp - 0x1c]
mov edx, esi
push ecx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.00454e90
mov edx, dword [ebp - 0x2c]
or esi, 0xffffffff
add esp, 0x24
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a1fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a215
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a22f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a249
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a263
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a27a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 0x15], 0
jmp 0x41a6d4
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a840
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push str.M0d4YUh0bQFiVZUNCQc2ZBgL0Jlw10HXxWCPx0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0042f750
test al, al
jne 0x41a2c3
push 0x27
push str.M0d4YUh0bQFiVZUNCQc2ZBgL0Jlw10HXxWCPx0
lea ecx, [ebp - 0x20]
call fcn.0042fa90
mov byte [ebp - 4], 0x1b
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a84a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.aUhOJYUcUZOwg1eZg
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1c
call fcn.0042f750
test al, al
jne 0x41a307
push 0x13
push str.aUhOJYUcUZOwg1eZg
lea ecx, [ebp - 0x24]
call fcn.0042fa90
mov byte [ebp - 4], 0x1d
xorps xmm0, xmm0
mov eax, dword [ebp - 0x24]
push ecx
add eax, 0xfffffff0
movups xmmword [esi + 0x34], xmm0
mov esi, esp
mov dword [ebp - 0x48], eax
mov ecx, eax
mov dword [ebp - 0x28], esi
call fcn.0042ee10
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [esi], eax
call fcn.00445a80
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov dword [ebp - 0x28], esi
mov ecx, eax
mov dword [ebp - 0x28], eax
call fcn.0042ee10
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00445a80
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
mov ecx, dword [eax]
sub ecx, 0x10
movlpd qword [ebp - 0xec], xmm0
movlpd qword [ebp - 0xe4], xmm0
movlpd qword [ebp - 0xdc], xmm0
movlpd qword [ebp - 0xd4], xmm0
movlpd qword [ebp - 0xcc], xmm0
movlpd qword [ebp - 0xc4], xmm0
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
mov dword [ebp - 0xf0], 0x44
call fcn.0042ee10
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x2c], ecx
lea esi, [ecx + 1]
test esi, esi
js 0x41a7f0
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x41a3f5
push esi
lea ecx, [ebp - 0x14]
call fcn.0042f9f0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
mov edx, 0x20
mov word [eax + ecx*2], dx
cmp esi, dword [eax - 8]
jg 0x41a7f0
mov dword [eax - 0xc], esi
xor ecx, ecx
mov word [eax + esi*2], cx
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042e200
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x14]
add eax, 0x34
push eax
lea eax, [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0x1c]
push 0
push 0
push 0x200
push 0
push 0
push 0
push esi
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
lea edx, [esi - 0x10]
or esi, 0xffffffff
test eax, eax
mov eax, esi
jne 0x41a477
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a46e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x14], 0
jmp 0x41a490
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a489
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x40]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a4aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov eax, esi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a4c8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x14], 0
je 0x41a4d7
mov byte [ebp - 0x15], 1
jmp 0x41a6a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov esi, dword [ebp - 0x44]
lea eax, [ebp - 0x78]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0042ef00
lea ecx, [ebp - 0x30]
call fcn.00445650
push esi
mov byte [ebp - 4], 0x21
push dword [eax]
lea eax, [ebp - 0x34]
push eax
call fcn.00421db0
mov byte [ebp - 4], 0x1d
add esp, 0x24
mov edx, dword [ebp - 0x30]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a54a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xd
lea ecx, [ebp - 0x34]
call fcn.00420130
push 0xa
lea ecx, [ebp - 0x34]
call fcn.00420130
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a854
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5911fc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x22
call fcn.0042f750
test al, al
jne 0x41a59e
push 0
push 0x5911fc
lea ecx, [ebp - 0x1c]
call fcn.0042fa90
mov byte [ebp - 4], 0x23
call fcn.0042f4e0
mov ecx, eax
test ecx, ecx
je 0x41a85e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push 0x5911fc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x24
call fcn.0042f750
test al, al
jne 0x41a5e2
push 0
push 0x5911fc
lea ecx, [ebp - 0x14]
call fcn.0042fa90
sub esp, 0x18
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x90]
mov ecx, esp
push eax
call fcn.0042ef00
lea ecx, [ebp - 0x40]
call fcn.00445650
mov esi, eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x26
mov ecx, esp
push eax
call fcn.0042ef00
lea ecx, [ebp - 0x30]
call fcn.00445650
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x27
push ecx
lea ecx, [ebp - 0x14]
mov edx, esi
push ecx
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.00454e90
mov edx, dword [ebp - 0x30]
or esi, 0xffffffff
add esp, 0x24
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a651
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a66b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a685
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a69f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x34]
mov byte [ebp - 0x15], 0
mov edx, dword [ebp - 0x48]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a6bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41a6d4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x41a6e9
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x64]
cmp ecx, 8
jb 0x41a723
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a719
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a868
push ecx
push edx
call fcn.00549ad4
add esp, 8
mov ecx, dword [ebp - 0x7c]
cmp ecx, 8
jb 0x41a760
mov edx, dword [ebp - 0x90]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a756
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a868
push ecx
push edx
call fcn.00549ad4
add esp, 8
mov ecx, dword [ebp - 0x4c]
cmp ecx, 8
jb 0x41a79a
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a790
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a868
push ecx
push edx
call fcn.00549ad4
add esp, 8
mov ecx, dword [ebp - 0x94]
cmp ecx, 8
jb 0x41a7da
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a7d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a868
push ecx
push edx
call fcn.00549ad4
add esp, 8
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x15]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80070057
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
push 0x80004005
call fcn.0042fa70
call fcn.0054e9bf
int3