Function at 0x41b22a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5819f9
mov eax, dword fs:[0]
push eax
mov eax, 0x1464
call fcn.00529dc0
mov eax, dword [0x61b660]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x13c4], ecx
mov dword [ebp - 0xf4], 0
cmp dword [ebp + 0xc], 0xbd0
jne 0x41a716
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x13c8], eax
cmp dword [ebp - 0x13c8], 0xbd1
je 0x41a5e6
cmp dword [ebp - 0x13c8], 0xbd2
je 0x41a67e
cmp dword [ebp - 0x13c8], 0xbd3
je 0x41a6cb
jmp 0x41a716
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x21c
push ecx
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov edx, dword [ebp - 0x13c4]
mov dword [edx + 0x418], 0
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0x5b0], 0
je 0x41a663
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x588
mov dword [ebp - 0x1218], ecx
mov edx, dword [ebp - 0x1218]
cmp dword [edx + 0x14], 0x10
jb 0x41a648
mov eax, dword [ebp - 0x1218]
mov ecx, dword [eax]
mov dword [ebp - 0x13cc], ecx
jmp 0x41a654
mov edx, dword [ebp - 0x1218]
mov dword [ebp - 0x13cc], edx
mov eax, dword [ebp - 0x13cc]
push eax
call fcn.00405120
add esp, 4
push 0
push 0
push 0x12
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x41a716
mov eax, dword [ebp - 0x13c4]
add eax, 0x1ac
mov dword [ebp - 0x121c], eax
mov ecx, dword [ebp - 0x121c]
cmp dword [ecx + 0x14], 0x10
jb 0x41a6ab
mov edx, dword [ebp - 0x121c]
mov eax, dword [edx]
mov dword [ebp - 0x13d0], eax
jmp 0x41a6b7
mov ecx, dword [ebp - 0x121c]
mov dword [ebp - 0x13d0], ecx
mov edx, dword [ebp - 0x13d0]
push edx
mov ecx, dword [ebp - 0x13c4]
call fcn.00420960
jmp 0x41a716
mov eax, dword [ebp - 0x13c4]
add eax, 0x1c8
mov dword [ebp - 0x1220], eax
mov ecx, dword [ebp - 0x1220]
cmp dword [ecx + 0x14], 0x10
jb 0x41a6f8
mov edx, dword [ebp - 0x1220]
mov eax, dword [edx]
mov dword [ebp - 0x13d4], eax
jmp 0x41a704
mov ecx, dword [ebp - 0x1220]
mov dword [ebp - 0x13d4], ecx
mov edx, dword [ebp - 0x13d4]
push edx
mov ecx, dword [ebp - 0x13c4]
call fcn.00420960
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13d8], eax
cmp dword [ebp - 0x13d8], 0x411
ja 0x41a75a
cmp dword [ebp - 0x13d8], 0x411
je 0x41af72
cmp dword [ebp - 0x13d8], 8
je 0x41b48f
cmp dword [ebp - 0x13d8], 0x4a
je 0x41b665
jmp case.0x41a811.3
cmp dword [ebp - 0x13d8], 0x1f43
ja 0x41a7a9
cmp dword [ebp - 0x13d8], 0x1f43
je 0x41ba85
mov ecx, dword [ebp - 0x13d8]
sub ecx, 0x412
mov dword [ebp - 0x13d8], ecx
cmp dword [ebp - 0x13d8], 0x24
ja case.0x41a811.3
mov edx, dword [ebp - 0x13d8]
movzx eax, byte [edx + 0x41c2c4]
jmp dword [eax*4 + 0x41c268]
cmp dword [ebp - 0x13d8], 0x1f4b
ja 0x41a7ed
cmp dword [ebp - 0x13d8], 0x1f4b
je 0x41a818
mov ecx, dword [ebp - 0x13d8]
sub ecx, 0x1f44
mov dword [ebp - 0x13d8], ecx
cmp dword [ebp - 0x13d8], 3
ja case.0x41a811.3
mov edx, dword [ebp - 0x13d8]
jmp dword [edx*4 + 0x41c2ec]
mov eax, dword [ebp - 0x13d8]
sub eax, 0x2328
mov dword [ebp - 0x13d8], eax
cmp dword [ebp - 0x13d8], 5
ja case.0x41a811.3
mov ecx, dword [ebp - 0x13d8]
jmp dword [ecx*4 + 0x41c2fc]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x13c4]
call fcn.0040de70
cmp dword [ebp - 0xf8], 0
je 0x41a864
push 1
push 0
push 0x232e
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
push 1
mov ecx, dword [ebp - 0x13c4]
call fcn.00424850
jmp case.0x41a811.3
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x100]
cmp dword [eax + 0x10], 1
jne 0x41a8bc
mov ecx, dword [0x5a6ffc]
push ecx
push 0
mov edx, dword [ebp - 0x100]
add edx, 0x68
push edx
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x4e8
call fcn.00405c70
mov ecx, dword [ebp - 0x13c4]
call fcn.00424ff0
jmp 0x41a8e5
mov eax, dword [ebp - 0x13c4]
mov dword [eax + 0x50c], 1
push 0
push 0x6ddd00
push 9
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x11c4], eax
mov ecx, dword [ebp - 0x11c4]
mov dword [ebp - 0x11c0], ecx
cmp dword [ebp - 0x11c0], 0
je 0x41a938
mov ecx, dword [ebp - 0x11c0]
call fcn.0041c340
mov edx, 1
and edx, 1
je 0x41a92a
mov eax, dword [ebp - 0x11c0]
push eax
call fcn.0042a4c9
add esp, 4
mov ecx, dword [ebp - 0x11c0]
mov dword [ebp - 0x13dc], ecx
jmp 0x41a942
mov dword [ebp - 0x13dc], 0
jmp case.0x41a811.3
mov edx, dword [ebp - 0x13c4]
mov dword [edx + 0x54c], 1
mov eax, dword [ebp - 0x13c4]
mov dword [eax + 0x544], 1
cmp dword [0x62cb30], 0
jne 0x41aa91
mov ecx, dword [ebp - 0x13c4]
xor edx, edx
cmp dword [ecx + 0x4f8], 0
sete dl
movzx eax, dl
test eax, eax
je 0x41a9d3
mov ecx, dword [ebp - 0x13c4]
cmp dword [ecx + 0x50c], 0
je 0x41a9be
push 9
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebp - 0x13c4]
mov dword [ecx + 0x50c], 0
mov ecx, dword [ebp - 0x13c4]
call fcn.00424e60
jmp case.0x41a811.3
mov edx, dword [ebp - 0x13c4]
cmp dword [edx + 0x510], 0
je 0x41aa04
push 0xa
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [ebp - 0x13c4]
mov dword [edx + 0x510], 0
mov eax, dword [ebp - 0x13c4]
add eax, 0x4e8
mov dword [ebp - 0x1228], eax
mov ecx, dword [ebp - 0x1228]
cmp dword [ecx + 0x14], 0x10
jb 0x41aa31
mov edx, dword [ebp - 0x1228]
mov eax, dword [edx]
mov dword [ebp - 0x13e0], eax
jmp 0x41aa3d
mov ecx, dword [ebp - 0x1228]
mov dword [ebp - 0x13e0], ecx
push 1
push 0
push 0
mov edx, dword [ebp - 0x13e0]
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0x514], 0
jne 0x41aa8c
push 0
push 0x1e
push 0xb
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebp - 0x13c4]
mov dword [eax + 0x514], 1
jmp case.0x41a811.3
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
call fcn.00425290
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
mov dword [ecx + 0x544], 0
jmp case.0x41a811.3
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x104]
cmp dword [eax + 0x10], 1
jne 0x41acdd
push str.unrar.dll
push 0x62ca68
lea ecx, [ebp - 0x2c]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x122c], eax
mov edx, dword [ebp - 0x122c]
cmp dword [edx + 0x14], 0x10
jb 0x41ab0c
mov eax, dword [ebp - 0x122c]
mov ecx, dword [eax]
mov dword [ebp - 0x13e4], ecx
jmp 0x41ab18
mov edx, dword [ebp - 0x122c]
mov dword [ebp - 0x13e4], edx
push 0
mov eax, dword [ebp - 0x13e4]
push eax
call fcn.00529925
add esp, 8
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov byte [ebp - 0x11c5], cl
mov dword [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
movzx edx, byte [ebp - 0x11c5]
test edx, edx
je 0x41acdd
push str.unrar.dll
push 0x62ca68
lea eax, [ebp - 0x48]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x13e8], eax
mov ecx, dword [ebp - 0x13e8]
mov dword [ebp - 0x1230], ecx
mov dword [ebp - 4], 1
push str.TempDownLoad
push 0x62ca68
lea edx, [ebp - 0x64]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0x13ec]
mov dword [ebp - 0x1234], eax
mov byte [ebp - 4], 2
push str.TempDownLoadPopResources.rar
push 0x62ca68
lea ecx, [ebp - 0x80]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x13f0], eax
mov edx, dword [ebp - 0x13f0]
mov dword [ebp - 0x1238], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1230]
cmp dword [eax + 0x14], 0x10
jb 0x41ac03
mov ecx, dword [ebp - 0x1230]
mov edx, dword [ecx]
mov dword [ebp - 0x13f4], edx
jmp 0x41ac0f
mov eax, dword [ebp - 0x1230]
mov dword [ebp - 0x13f4], eax
mov ecx, dword [ebp - 0x1234]
cmp dword [ecx + 0x14], 0x10
jb 0x41ac2b
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
mov dword [ebp - 0x13f8], eax
jmp 0x41ac37
mov ecx, dword [ebp - 0x1234]
mov dword [ebp - 0x13f8], ecx
mov edx, dword [ebp - 0x1238]
cmp dword [edx + 0x14], 0x10
jb 0x41ac53
mov eax, dword [ebp - 0x1238]
mov ecx, dword [eax]
mov dword [ebp - 0x13fc], ecx
jmp 0x41ac5f
mov edx, dword [ebp - 0x1238]
mov dword [ebp - 0x13fc], edx
mov eax, dword [ebp - 0x13f4]
push eax
mov ecx, dword [ebp - 0x13f8]
push ecx
mov edx, dword [ebp - 0x13fc]
push edx
call fcn.00429f90
add esp, 0xc
mov dword [ebp - 0x108], eax
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00406060
mov byte [ebp - 4], 2
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406060
mov byte [ebp - 4], 1
mov dword [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x108], 0
je 0x41acdd
mov eax, dword [ebp - 0x13c4]
mov dword [eax + 0x548], 1
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x11d0], ecx
mov edx, dword [ebp - 0x11d0]
mov dword [ebp - 0x11cc], edx
cmp dword [ebp - 0x11cc], 0
je 0x41ad30
mov ecx, dword [ebp - 0x11cc]
call fcn.0041c340
mov eax, 1
and eax, 1
je 0x41ad22
mov ecx, dword [ebp - 0x11cc]
push ecx
call fcn.0042a4c9
add esp, 4
mov edx, dword [ebp - 0x11cc]
mov dword [ebp - 0x1400], edx
jmp 0x41ad3a
mov dword [ebp - 0x1400], 0
jmp case.0x41a811.3
push 6
mov ecx, dword [ebp - 0x13c4]
call fcn.004337ac
jmp case.0x41a811.3
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
push 0
lea eax, [ebp - 0x13c]
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
lea ecx, [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0x10
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x13c]
push edx
call fcn.0052bea1
add esp, 0xc
test eax, eax
je 0x41ae49
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0x13c]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x130]
sub ecx, dword [ebp - 0x138]
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x10c], 1
jmp 0x41ae85
mov edx, dword [ebp - 0x13c4]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [edx + 0x158]
sub ecx, dword [eax + 0x150]
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x13c4]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [edx + 0x15c]
sub ecx, dword [eax + 0x154]
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0x110]
push edx
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x98]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x98]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [ebp - 0x10c]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x11c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x118]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x114]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x110]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0x9c]
mov ecx, dword [ebp - 0x13c4]
mov ecx, dword [ecx + 0x9c]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
push 0
mov ecx, dword [ebp - 0x13c4]
call fcn.0042ed6e
jmp case.0x41a811.3
push 0
mov ecx, dword [ebp - 0x13c4]
call fcn.004337ac
mov dword [0x616b58], 1
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x9c]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x9c]
mov edx, dword [edx]
mov eax, dword [edx + 0x14]
call eax
jmp case.0x41a811.3
cmp dword [0x616b5c], 1
je 0x41af6d
mov dword [0x616b58], 1
mov ecx, dword [0x62cb0c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x41a811.3
cmp dword [0x616b5c], 2
je 0x41af92
mov dword [0x616b58], 1
mov edx, dword [0x62cb10]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x41a811.3
push 1
mov ecx, dword [ebp - 0x13c4]
call fcn.00424850
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x140], eax
cmp dword [ebp + 0xc], 1
jne 0x41afd9
mov ecx, dword [ebp - 0x140]
push ecx
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0x9c]
mov ecx, dword [ebp - 0x13c4]
mov ecx, dword [ecx + 0x9c]
mov edx, dword [eax]
mov eax, dword [edx + 0x20]
call eax
cmp dword [0x616b5c], 0
je 0x41b00b
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x9c]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x9c]
mov edx, dword [edx]
mov eax, dword [edx + 0x14]
call eax
mov dword [0x616b5c], 0
mov dword [0x616b58], 1
push 0xffffffffffffffff
mov ecx, dword [0x62cb04]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x616b58], 0
mov edx, dword [0x62cb04]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, 0x62f7c0
call fcn.00564220
push 0x62f7c0
mov eax, dword [ebp - 0x140]
push eax
mov ecx, dword [0x62905c]
call fcn.004286d0
test eax, eax
je 0x41b06f
mov ecx, dword [0x62cb08]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x41b07c
mov edx, dword [0x62cb04]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x41a811.3
push 5
push 0
push 0
push str.control.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x41a811.3
cmp dword [ebp + 0xc], 0
jne 0x41b0c9
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x144]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x41b133
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x548], edx
mov byte [ebp - 0x544], 0
push 0x3ff
push 0
lea eax, [ebp - 0x543]
push eax
call fcn.00529d40
add esp, 0xc
lea ecx, [ebp - 0x544]
push ecx
mov edx, dword [ebp - 0x548]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [edx + 8]
push ecx
mov edx, dword [ebp - 0x548]
movzx eax, byte [edx]
push eax
mov ecx, dword [0x62905c]
call fcn.00427f00
push 1
push 0
push 0
lea ecx, [ebp - 0x544]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x41a811.3
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x54c], edx
cmp dword [ebp - 0x54c], 0
je 0x41b225
mov eax, dword [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x568]
call fcn.00405860
mov dword [ebp - 4], 7
push str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x127c], eax
mov ecx, dword [ebp - 0x127c]
push ecx
push str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
mov edx, dword [ebp - 0x558]
push edx
push 0
lea ecx, [ebp - 0x568]
call fcn.00405fa0
neg eax
sbb eax, eax
add eax, 1
movzx eax, al
test eax, eax
je 0x41b1ee
cmp dword [ebp - 0x13c4], 0
jne 0x41b1bd
mov dword [ebp - 0x1404], 0
jmp 0x41b1cc
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x1404], edx
push 1
push 0
push 0x5c2418
push str.explorer.exe
push str.open
mov eax, dword [ebp - 0x1404]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x41b208
push 1
push 0
push 0
mov ecx, dword [ebp - 0x54c]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x568]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
jmp case.0x41a811.3
lea edx, [ebp - 0x1285]
mov dword [ebp - 0x1284], edx
lea eax, [ebp - 0x584]
mov dword [ebp - 0x1408], eax
mov dword [ebp - 4], 9
push 0
push 0
lea ecx, [ebp - 0x584]
call fcn.00406060
mov dword [ebp - 4], 0xa
cmp dword [ebp + 0xc], 0
jne 0x41b28f
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x128c], eax
mov edx, dword [ebp - 0x128c]
push edx
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x584]
call fcn.004064c0
jmp 0x41b30d
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x988], ecx
mov byte [ebp - 0x984], 0
push 0x3ff
push 0
lea edx, [ebp - 0x983]
push edx
call fcn.00529d40
add esp, 0xc
lea eax, [ebp - 0x984]
push eax
mov ecx, dword [ebp - 0x988]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ecx + 8]
push eax
mov ecx, dword [ebp - 0x988]
movzx edx, byte [ecx]
push edx
mov ecx, dword [0x62905c]
call fcn.00427f00
lea eax, [ebp - 0x984]
push eax
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1294], eax
mov ecx, dword [ebp - 0x1294]
push ecx
lea edx, [ebp - 0x984]
push edx
lea ecx, [ebp - 0x584]
call fcn.004064c0
lea eax, [ebp - 0x584]
push eax
push str._select_
lea ecx, [ebp - 0x9c]
push ecx
call fcn.00407200
add esp, 0xc
mov dword [ebp - 0x140c], eax
mov edx, dword [ebp - 0x140c]
mov dword [ebp - 0x12a0], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x12a0]
push eax
lea ecx, [ebp - 0x584]
call fcn.00405ab0
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406060
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x570], 0x10
jb 0x41b37e
mov ecx, dword [ebp - 0x584]
mov dword [ebp - 0x1410], ecx
jmp 0x41b38a
lea edx, [ebp - 0x584]
mov dword [ebp - 0x1410], edx
cmp dword [ebp - 0x13c4], 0
jne 0x41b39f
mov dword [ebp - 0x1414], 0
jmp 0x41b3ae
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x1414], ecx
push 1
push 0
mov edx, dword [ebp - 0x1410]
push edx
push str.explorer.exe
push str.open
mov eax, dword [ebp - 0x1414]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp - 0x584]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
jmp case.0x41a811.3
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0xd90], ecx
mov byte [ebp - 0xd8c], 0
push 0x3ff
push 0
lea edx, [ebp - 0xd8b]
push edx
call fcn.00529d40
add esp, 0xc
lea eax, [ebp - 0xd8c]
push eax
mov ecx, dword [ebp - 0xd90]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ecx + 8]
push eax
mov ecx, dword [ebp - 0xd90]
movzx edx, byte [ecx]
push edx
mov ecx, dword [0x62905c]
call fcn.00427f00
push 0x1388
push 0x64
lea eax, [ebp - 0xd8c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp - 0x13c4]
add ecx, 0xa8
call fcn.00429e80
jmp case.0x41a811.3
push 0x1388
push 0x64
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x13c4]
add ecx, 0xa8
call fcn.00429e80
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
cmp dword [ecx + 0x9c], 0
je 0x41b4bd
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0x9c]
mov ecx, dword [ebp - 0x13c4]
mov ecx, dword [ecx + 0x9c]
mov edx, dword [eax]
mov eax, dword [edx + 0x30]
call eax
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x9c]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x9c]
mov edx, dword [edx]
mov eax, dword [edx + 0x14]
call eax
jmp case.0x41a811.3
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x1198], ecx
mov byte [ebp - 0x1194], 0
push 0x3ff
push 0
lea edx, [ebp - 0x1193]
push edx
call fcn.00529d40
add esp, 0xc
cmp dword [ebp - 0x1198], 0
je 0x41b53f
lea eax, [ebp - 0x1194]
push eax
mov ecx, dword [ebp - 0x1198]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ecx + 8]
push eax
mov ecx, dword [ebp - 0x1198]
movzx edx, byte [ecx]
push edx
mov ecx, dword [0x62905c]
call fcn.00427f00
lea eax, [ebp - 0x1194]
push eax
call fcn.005291f0
add esp, 4
test eax, eax
je 0x41b660
push 0x20
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x11d8], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x11d8], 0
je 0x41b5b3
lea ecx, [ebp - 0x12b9]
mov dword [ebp - 0x12b8], ecx
mov edx, dword [ebp - 0x11d8]
mov dword [ebp - 0x1418], edx
mov byte [ebp - 4], 0xf
push 0
push 0
mov ecx, dword [ebp - 0x11d8]
call fcn.00406060
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x11d8]
mov dword [ebp - 0x141c], eax
jmp 0x41b5bd
mov dword [ebp - 0x141c], 0
mov ecx, dword [ebp - 0x141c]
mov dword [ebp - 0x11d4], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x11d4]
mov dword [ebp - 0x119c], edx
mov eax, dword [ebp - 0x119c]
mov dword [ebp - 0x12cc], eax
lea ecx, [ebp - 0x1194]
push ecx
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x12c0], eax
mov edx, dword [ebp - 0x12c0]
push edx
lea eax, [ebp - 0x1194]
push eax
mov ecx, dword [ebp - 0x12cc]
call fcn.004064c0
mov ecx, dword [ebp - 0x119c]
mov edx, dword [ebp - 0x1198]
mov dword [ecx + 0x1c], edx
push 0x62caa0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x119c]
push eax
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x49c
call fcn.00425bb0
push 0x62caa0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x62cb14]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x41a811.3
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x11a0], edx
mov eax, dword [ebp - 0x11a0]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0xf4]
add edx, 1
push edx
call fcn.0042a4d4
add esp, 4
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x11dc]
mov dword [ebp - 0x11a4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
mov edx, dword [ebp - 0x11a0]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x11a4]
push ecx
call fcn.00529940
add esp, 0xc
mov edx, dword [ebp - 0x11a4]
add edx, dword [ebp - 0xf4]
mov byte [edx], 0
cmp dword [ebp + 0xc], 0x1f42
jne 0x41b7d1
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0xa0], 0
jne 0x41b780
push 0x18c
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x11e4], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x11e4], 0
je 0x41b728
push 0
mov ecx, dword [ebp - 0x11e4]
call fcn.0040bb60
mov dword [ebp - 0x1420], eax
jmp 0x41b732
mov dword [ebp - 0x1420], 0
mov ecx, dword [ebp - 0x1420]
mov dword [ebp - 0x11e0], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x13c4]
mov eax, dword [ebp - 0x11e0]
mov dword [edx + 0xa0], eax
push 0
push 0x82
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [edx]
mov eax, dword [edx + 0x160]
call eax
cmp dword [ebp - 0xf4], 0
je 0x41b7cc
push 0
push 0
push 0x42d
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0x11a4]
push ecx
push 0
push 0x417
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0xa0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
cmp dword [ebp + 0xc], 0x1f48
jne 0x41ba1a
mov dword [ebp - 0x11a8], 0
mov dword [ebp - 0x11ac], 0
jmp 0x41b803
mov edx, dword [ebp - 0x11ac]
add edx, 1
mov dword [ebp - 0x11ac], edx
mov eax, dword [ebp - 0x13c4]
add eax, 0x20c
mov dword [ebp - 0x12dc], eax
mov ecx, dword [ebp - 0x12dc]
mov edx, dword [ebp - 0x12dc]
mov eax, dword [ecx + 4]
sub eax, dword [edx]
sar eax, 2
cmp dword [ebp - 0x11ac], eax
jae 0x41b9d3
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20c]
mov eax, dword [ebp - 0x11ac]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x11b0], ecx
mov edx, dword [ebp - 0x11b0]
cmp dword [edx + 0x14], 0x10
jb 0x41b86b
mov eax, dword [ebp - 0x11b0]
mov ecx, dword [eax]
mov dword [ebp - 0x1424], ecx
jmp 0x41b877
mov edx, dword [ebp - 0x11b0]
mov dword [ebp - 0x1424], edx
mov eax, dword [ebp - 0x1424]
push eax
mov ecx, dword [ebp - 0x11a4]
push ecx
call fcn.00529cb0
add esp, 8
test eax, eax
jne 0x41b9ce
mov edx, dword [ebp - 0x13c4]
cmp dword [edx + 0xa0], 0
jne 0x41b93a
push 0x18c
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x11ec], eax
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x11ec], 0
je 0x41b8e0
push 0
mov ecx, dword [ebp - 0x11ec]
call fcn.0040bb60
mov dword [ebp - 0x1428], eax
jmp 0x41b8ea
mov dword [ebp - 0x1428], 0
mov eax, dword [ebp - 0x1428]
mov dword [ebp - 0x11e8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ebp - 0x11e8]
mov dword [ecx + 0xa0], edx
push 0
push 0x82
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0xa0]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x160]
call eax
mov dword [ebp - 0x11a8], 1
mov ecx, dword [ebp - 0x11b0]
cmp dword [ecx + 0x14], 0x10
jb 0x41b960
mov edx, dword [ebp - 0x11b0]
mov eax, dword [edx]
mov dword [ebp - 0x142c], eax
jmp 0x41b96c
mov ecx, dword [ebp - 0x11b0]
mov dword [ebp - 0x142c], ecx
mov edx, dword [ebp - 0x11b0]
add edx, 0x1c
mov dword [ebp - 0x12e0], edx
mov eax, dword [ebp - 0x12e0]
cmp dword [eax + 0x14], 0x10
jb 0x41b997
mov ecx, dword [ebp - 0x12e0]
mov edx, dword [ecx]
mov dword [ebp - 0x1430], edx
jmp 0x41b9a3
mov eax, dword [ebp - 0x12e0]
mov dword [ebp - 0x1430], eax
mov ecx, dword [ebp - 0x142c]
push ecx
mov edx, dword [ebp - 0x1430]
push edx
push 0x1f40
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x41b9d3
jmp 0x41b7f4
cmp dword [ebp - 0x11a8], 0
jne 0x41b9fa
mov eax, dword [ebp - 0x11a4]
push eax
push 1
push 0x416
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x11a4]
mov dword [ebp - 0x11f0], eax
mov ecx, dword [ebp - 0x11f0]
push ecx
call fcn.0042a4c9
add esp, 4
jmp case.0x41a811.3
jmp case.0x41a811.3
mov edx, dword [ebp - 0x13c4]
cmp dword [edx + 0xa0], 0
je 0x41ba4d
push 0
push 0
push 0x1f46
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0xa0], 0
je 0x41ba80
push 0
push 0
push 0x1f47
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
cmp dword [ecx + 0xa0], 0
je 0x41bab3
push 0
push 0
push 0x1f43
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0xa0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov edx, dword [ebp - 0x13c4]
cmp dword [edx + 0xa0], 0
je 0x41bae6
push 0
push 0
push 0x1f44
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0xa0], 0
je 0x41bb19
push 0
push 0
push 0x1f45
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
cmp dword [ecx + 0xa0], 0
jne 0x41bbc1
push 0x18c
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x11f8], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x11f8], 0
je 0x41bb69
push 0
mov ecx, dword [ebp - 0x11f8]
call fcn.0040bb60
mov dword [ebp - 0x1434], eax
jmp 0x41bb73
mov dword [ebp - 0x1434], 0
mov edx, dword [ebp - 0x1434]
mov dword [ebp - 0x11f4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [ebp - 0x11f4]
mov dword [eax + 0xa0], ecx
push 0
push 0x82
mov edx, dword [ebp - 0x13c4]
mov eax, dword [edx + 0xa0]
mov ecx, dword [ebp - 0x13c4]
mov ecx, dword [ecx + 0xa0]
mov edx, dword [eax]
mov eax, dword [edx + 0x160]
call eax
push 1
push 0
push 0x232d
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x21c
push ecx
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov edx, dword [ebp - 0x13c4]
mov dword [edx + 0x418], 0
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0x5b0], 0
je 0x41bc62
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x588
mov dword [ebp - 0x12e4], ecx
mov edx, dword [ebp - 0x12e4]
cmp dword [edx + 0x14], 0x10
jb 0x41bc47
mov eax, dword [ebp - 0x12e4]
mov ecx, dword [eax]
mov dword [ebp - 0x1438], ecx
jmp 0x41bc53
mov edx, dword [ebp - 0x12e4]
mov dword [ebp - 0x1438], edx
mov eax, dword [ebp - 0x1438]
push eax
call fcn.00405120
add esp, 4
push 0
push 0
push 0x12
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41a811.3
mov eax, dword [ebp - 0x13c4]
add eax, 0x1ac
mov dword [ebp - 0x12e8], eax
mov ecx, dword [ebp - 0x12e8]
cmp dword [ecx + 0x14], 0x10
jb 0x41bcaa
mov edx, dword [ebp - 0x12e8]
mov eax, dword [edx]
mov dword [ebp - 0x143c], eax
jmp 0x41bcb6
mov ecx, dword [ebp - 0x12e8]
mov dword [ebp - 0x143c], ecx
mov edx, dword [ebp - 0x143c]
push edx
mov ecx, dword [ebp - 0x13c4]
call fcn.00420960
jmp case.0x41a811.3
mov eax, dword [ebp - 0x13c4]
add eax, 0x1c8
mov dword [ebp - 0x12ec], eax
mov ecx, dword [ebp - 0x12ec]
cmp dword [ecx + 0x14], 0x10
jb 0x41bcfa
mov edx, dword [ebp - 0x12ec]
mov eax, dword [edx]
mov dword [ebp - 0x1440], eax
jmp 0x41bd06
mov ecx, dword [ebp - 0x12ec]
mov dword [ebp - 0x1440], ecx
mov edx, dword [ebp - 0x1440]
push edx
mov ecx, dword [ebp - 0x13c4]
call fcn.00420960
jmp case.0x41a811.3
mov dword [0x62cb2c], 1
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x11b4], eax
mov ecx, dword [ebp - 0x11b4]
cmp dword [ecx + 0x10], 1
jne 0x41bfcb
mov edx, dword [ebp - 0x11b4]
add edx, 0x68
mov dword [ebp - 0x12f0], edx
mov eax, dword [ebp - 0x12f0]
cmp dword [eax + 0x14], 0x10
jb 0x41bd6b
mov ecx, dword [ebp - 0x12f0]
mov edx, dword [ecx]
mov dword [ebp - 0x1444], edx
jmp 0x41bd77
mov eax, dword [ebp - 0x12f0]
mov dword [ebp - 0x1444], eax
mov ecx, dword [ebp - 0x1444]
push ecx
mov ecx, dword [ebp - 0x13c4]
call fcn.0041eb20
cmp dword [0x62cb2c], 0
je 0x41bdde
mov edx, dword [ebp - 0x13c4]
add edx, 0x1e4
mov dword [ebp - 0x12f4], edx
mov eax, dword [ebp - 0x12f4]
cmp dword [eax + 0x14], 0x10
jb 0x41bdc0
mov ecx, dword [ebp - 0x12f4]
mov edx, dword [ecx]
mov dword [ebp - 0x1448], edx
jmp 0x41bdcc
mov eax, dword [ebp - 0x12f4]
mov dword [ebp - 0x1448], eax
mov ecx, dword [ebp - 0x1448]
push ecx
mov ecx, dword [ebp - 0x13c4]
call fcn.0041f8b0
mov edx, dword [ebp - 0x13c4]
xor eax, eax
cmp dword [edx + 0x1a0], 0
sete al
movzx ecx, al
test ecx, ecx
jne 0x41bfab
push str.TempDownLoadlogo.png
push 0x62ca68
lea edx, [ebp - 0xb8]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x12f8], eax
mov eax, dword [ebp - 0x12f8]
cmp dword [eax + 0x14], 0x10
jb 0x41be36
mov ecx, dword [ebp - 0x12f8]
mov edx, dword [ecx]
mov dword [ebp - 0x144c], edx
jmp 0x41be42
mov eax, dword [ebp - 0x12f8]
mov dword [ebp - 0x144c], eax
mov ecx, dword [ebp - 0x144c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
push str.TempDownLoad_
push 0x62ca68
lea edx, [ebp - 0xd4]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x1450], eax
mov eax, dword [ebp - 0x1450]
mov dword [ebp - 0x1308], eax
mov dword [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1308]
cmp dword [ecx + 0x14], 0x10
jb 0x41beba
mov edx, dword [ebp - 0x1308]
mov eax, dword [edx]
mov dword [ebp - 0x1454], eax
jmp 0x41bec6
mov ecx, dword [ebp - 0x1308]
mov dword [ebp - 0x1454], ecx
mov edx, dword [ebp - 0x13c4]
add edx, 0x190
mov dword [ebp - 0x130c], edx
mov eax, dword [ebp - 0x130c]
cmp dword [eax + 0x14], 0x10
jb 0x41bef4
mov ecx, dword [ebp - 0x130c]
mov edx, dword [ecx]
mov dword [ebp - 0x1458], edx
jmp 0x41bf00
mov eax, dword [ebp - 0x130c]
mov dword [ebp - 0x1458], eax
push 0
push 0
push str.logo.png
mov ecx, dword [ebp - 0x1454]
push ecx
mov edx, dword [ebp - 0x1458]
push edx
call fcn.00401000
add esp, 0x14
mov dword [ebp - 0x11b8], eax
mov dword [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x11b8], 1
jne 0x41bfab
push str.TempDownLoadlogo.png
push 0x62ca68
lea eax, [ebp - 0xf0]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1328], ecx
mov dword [ebp - 4], 0x16
mov edx, dword [ebp - 0x1328]
push edx
mov ecx, 0x6304e4
call fcn.00405ab0
mov dword [ebp - 4], 0x17
push 0
push 1
lea ecx, [ebp - 0xf0]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0xa0], 0
je 0x41bfcb
mov ecx, dword [ebp - 0x13c4]
mov ecx, dword [ecx + 0xa0]
call fcn.0040df00
mov edx, dword [ebp - 0x11b4]
mov dword [ebp - 0x1200], edx
mov eax, dword [ebp - 0x1200]
mov dword [ebp - 0x11fc], eax
cmp dword [ebp - 0x11fc], 0
je 0x41c01e
mov ecx, dword [ebp - 0x11fc]
call fcn.0041c340
mov ecx, 1
and ecx, 1
je 0x41c010
mov edx, dword [ebp - 0x11fc]
push edx
call fcn.0042a4c9
add esp, 4
mov eax, dword [ebp - 0x11fc]
mov dword [ebp - 0x1460], eax
jmp 0x41c028
mov dword [ebp - 0x1460], 0
jmp case.0x41a811.3
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x11bc], ecx
mov edx, dword [ebp - 0x11bc]
cmp dword [edx + 0x10], 1
jne 0x41c168
mov eax, dword [ebp - 0x11bc]
add eax, 0x68
mov dword [ebp - 0x1360], eax
mov ecx, dword [ebp - 0x1360]
cmp dword [ecx + 0x14], 0x10
jb 0x41c071
mov edx, dword [ebp - 0x1360]
mov eax, dword [edx]
mov dword [ebp - 0x1464], eax
jmp 0x41c07d
mov ecx, dword [ebp - 0x1360]
mov dword [ebp - 0x1464], ecx
mov edx, dword [ebp - 0x1464]
push edx
mov ecx, dword [ebp - 0x13c4]
call fcn.0041f9f0
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0xa0], 0
jne 0x41c132
push 0x18c
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x1208], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x1208], 0
je 0x41c0da
push 0
mov ecx, dword [ebp - 0x1208]
call fcn.0040bb60
mov dword [ebp - 0x1468], eax
jmp 0x41c0e4
mov dword [ebp - 0x1468], 0
mov ecx, dword [ebp - 0x1468]
mov dword [ebp - 0x1204], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x13c4]
mov eax, dword [ebp - 0x1204]
mov dword [edx + 0xa0], eax
push 0
push 0x82
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
mov edx, dword [edx]
mov eax, dword [edx + 0x160]
call eax
mov ecx, dword [ebp - 0x13c4]
add ecx, 0x20c
sub esp, 0x10
mov edx, esp
mov dword [ebp - 0x120c], esp
push ecx
mov ecx, edx
call fcn.0040e520
mov dword [ebp - 0x146c], eax
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0xa0]
call fcn.0040e1a0
mov ecx, dword [ebp - 0x13c4]
call fcn.0041fea0
mov ecx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1214], ecx
mov edx, dword [ebp - 0x1214]
mov dword [ebp - 0x1210], edx
cmp dword [ebp - 0x1210], 0
je 0x41c1c6
mov ecx, dword [ebp - 0x1210]
call fcn.0041c340
mov eax, 1
and eax, 1
je 0x41c1b8
mov ecx, dword [ebp - 0x1210]
push ecx
call fcn.0042a4c9
add esp, 4
mov edx, dword [ebp - 0x1210]
mov dword [ebp - 0x1470], edx
jmp 0x41c1d0
mov dword [ebp - 0x1470], 0
jmp case.0x41a811.3
cmp dword [ebp + 0x10], 0x201
jne 0x41c1ea
push 1
mov ecx, dword [ebp - 0x13c4]
call fcn.00424850
jmp 0x41c1fe
cmp dword [ebp + 0x10], 0x204
jne 0x41c1fe
mov ecx, dword [ebp - 0x13c4]
call fcn.00421550
jmp case.0x41a811.3
cmp dword [ebp + 0xc], 1
jne case.0x41a811.3
mov eax, dword [ebp - 0x13c4]
cmp dword [eax + 0x9c], 0
je case.0x41a811.3
push 0
mov ecx, dword [ebp - 0x13c4]
mov edx, dword [ecx + 0x9c]
mov eax, dword [ebp - 0x13c4]
mov ecx, dword [eax + 0x9c]
mov edx, dword [edx]
mov eax, dword [edx + 0x38]
call eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x13c4]
call fcn.0042d194
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052927b
mov esp, ebp
pop ebp
ret 0xc