Function at 0x407850
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x474920
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x49e044]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp + 0x28]
xor eax, eax
mov esi, dword [ebp + 0x38]
xor ebx, ebx
mov edx, dword [ebp + 0x18]
mov word [edi], ax
mov eax, dword [ebp + 0x30]
mov byte [eax], 0
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [esi + 8], ecx
mov eax, dword [eax + 4]
mov dword [esi + 0xc], eax
cmp edx, 3
ja case.default.0x4078a7
jmp dword [edx*4 + 0x407aa0]
call fcn.004069d0
jmp 0x407908
call fcn.004069f0
jmp 0x407908
test ecx, ecx
js 0x4078f8
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
push 0x8007029c
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00419700
add esp, 0x14
mov dword [esi + 8], 0x8007029c
mov ecx, 0x8007029c
call fcn.00406c10
mov dword [esi + 0xc], eax
mov ecx, 0x8007029c
call fcn.00406a10
jmp 0x407908
push ecx
call fcn.00406a30
add esp, 4
mov ebx, eax
mov eax, dword [ebp + 0x18]
mov dword [esi], eax
mov eax, dword [ebp + 0x1c]
mov dword [esi + 4], 0
cmp byte [eax + 8], 0
je 0x407926
mov dword [esi + 4], 8
mov eax, 1
lock xadd dword [0x4a5878], eax
inc eax
mov dword [esi + 0x10], eax
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x407944
cmp word [eax], 0
jne 0x407946
xor eax, eax
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esi + 0x18], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x24], eax
mov eax, dword [ebp - 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x50], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 0x54], eax
xor eax, eax
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], eax
mov dword [esi + 0x48], eax
mov eax, dword [0x4a581c]
test eax, eax
je 0x4079a1
call eax
jmp 0x4079a3
xor eax, eax
mov dword [esi + 0x4c], eax
mov eax, dword [0x4a57f4]
test eax, eax
je 0x4079ba
push 0x400
push dword [ebp + 0x30]
push esi
call eax
mov eax, dword [0x4a57ec]
test eax, eax
je 0x4079c6
push esi
call eax
mov eax, dword [0x4a5808]
test eax, eax
je 0x4079d2
push esi
call eax
cmp dword [esi + 8], 0
jl 0x4079f6
cmp dword [ebp + 0x18], 3
jne 0x407a98
mov ecx, 0x8000ffff
mov dword [esi + 8], 0x8000ffff
call fcn.00406c10
mov dword [esi + 0xc], eax
cmp byte [0x4a57d0], 0
jne 0x407a3a
mov eax, dword [0x4a57c8]
test eax, eax
je 0x407a0f
call eax
movzx eax, al
jmp 0x407a1b
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
neg eax
sbb eax, eax
neg eax
test eax, eax
jne 0x407a3a
mov eax, dword [0x4a57d4]
test eax, eax
je 0x407a72
cmp byte [0x4a57e0], 0
jne 0x407a72
push 0
push 0
push esi
call eax
jmp 0x407a72
mov eax, dword [0x4a57d4]
test eax, eax
je 0x407a55
cmp byte [0x4a57e0], 0
jne 0x407a55
push 0x800
push edi
push esi
call eax
cmp word [edi], 0
jne 0x407a6b
push esi
mov edx, 0x800
mov ecx, edi
call fcn.00406670
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp byte [0x4a57d8], 0
je 0x407a86
mov eax, dword [0x4a57fc]
test eax, eax
je 0x407a86
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00407da0
lea ecx, [ecx]
scasb al, byte es:[edi]
js 4225763
add byte [ebp - 0x43ffbf88], dh
js 0x407aeb
add bh, bh
js 0x407aef
add ah, cl
int3
push eax
add byte [eax], al
add bh, al
inc ebp
enter 0, 0
add bh, al
inc ebp
int3