Function at 0x4185c0
Capabilities:
Copy file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x435d0b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2b8
mov eax, dword [0x44500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
cmp dword [ebx + 0x18], 0
je 0x418899
call fcn.004168e0
lea eax, [ebp - 0x25c]
push eax
call fcn.0041b5e0
mov byte [ebp - 4], 1
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x258]
sub ecx, dword [ebp - 0x25c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push str.Recurse__d
call fcn.004168e0
push eax
call fcn.00416a50
mov ecx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x25c]
add esp, 0xc
imul ecx
mov dword [ebp - 0x2b4], 0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41888a
xor edi, edi
nop word [eax + eax]
push 0
push 0x43a7e9
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
call fcn.00408050
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x290]
push 0
push 0x43a7e9
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
call fcn.00408050
mov byte [ebp - 4], 3
sub esp, 0x18
mov eax, dword [ebp - 0x25c]
mov esi, esp
mov dword [ebp - 0x2c8], esp
add eax, edi
sub esp, 0x18
mov dword [ebp - 0x2b8], 0
mov ecx, esp
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0xffffffff
mov dword [ebp - 0x2bc], 0
push eax
call fcn.00415280
mov ecx, esi
call fcn.00415b30
add esp, 0x18
mov byte [ebp - 4], 4
mov edx, dword fs:[0x2c]
mov eax, dword [0x44a29c]
mov ecx, dword [edx]
cmp eax, dword [ecx + 4]
jle 0x418799
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x418799
mov byte [ebp - 4], 5
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 4
push 0x44a29c
call fcn.00432c3a
add esp, 4
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x2c0]
mov ecx, 0x44a108
push eax
lea eax, [ebp - 0x238]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x290]
push eax
push 2
lea eax, [ebx + 8]
push eax
call fcn.00419570
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x27c]
cmp edx, 0x10
jb 0x418817
mov ecx, dword [ebp - 0x290]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41880d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x418b6e
push edx
push ecx
call fcn.00432a88
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x224]
cmp edx, 0x10
jb 0x418855
mov ecx, dword [ebp - 0x238]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41884b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x418b6e
push edx
push ecx
call fcn.00432a88
add esp, 8
mov ecx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x25c]
add edi, 0x18
mov esi, dword [ebp - 0x2b4]
imul ecx
inc esi
sar edx, 2
mov eax, edx
mov dword [ebp - 0x2b4], esi
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x418690
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0
call fcn.0041bf20
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x4188eb
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x4188eb
mov byte [ebp - 4], 6
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0
push 0x44a29c
call fcn.00432c3a
add esp, 4
sub esp, 0x18
mov ecx, 0x44a108
mov esi, esp
call fcn.00416f10
mov edx, eax
mov ecx, esi
call fcn.0042f670
xor cl, cl
call fcn.00431090
mov esi, eax
add esp, 0x18
test esi, esi
jle 0x418975
mov ecx, dword [0x44a29c]
cmp ecx, dword [edi + 4]
jle 0x41895a
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x41895a
mov byte [ebp - 4], 7
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
push 0x44a29c
call fcn.00432c3a
add esp, 4
push esi
push str.Instance2_exist_and_skip_to_launch:__d
push 0x44a108
call fcn.00416a50
add esp, 0xc
or esi, 0xffffffff
jmp 0x41950d
xor eax, eax
mov dword [ebp - 0x268], 0
push eax
push 0x43b0d8
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
call fcn.00415360
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov byte [ebp - 0x2a9], 0
xor eax, eax
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x43b700
mov word [ecx], ax
call fcn.00415360
lea eax, [ebp - 0x2a9]
push eax
lea edx, [ebp - 0x278]
call fcn.0042f830
add esp, 0x1c
cmp byte [ebp - 0x2a9], 0
je 0x4189f8
or esi, 0xffffffff
jmp 0x4194ae
cmp dword [ebp - 0x268], 0
je 0x4194a9
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
push 0
cmovae eax, dword [ebp - 0x278]
push eax
call dword [0x438350]
add esp, 8
test eax, eax
jne 0x4194a9
mov edi, dword [ebp - 0x264]
lea edx, [ebp - 0x278]
mov esi, dword [ebp - 0x268]
cmp edi, 8
cmovae edx, dword [ebp - 0x278]
test esi, esi
je 0x418a75
or ecx, 0xffffffff
lea eax, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp word [edx + ecx*2], 0x5c
lea ecx, [edx + ecx*2]
je 0x418a6f
cmp ecx, edx
je 0x418a75
sub ecx, 2
cmp word [ecx], 0x5c
jne 0x418a62
sub ecx, edx
sar ecx, 1
jmp 0x418a78
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x280], 0
cmp esi, ecx
mov word [ebp - 0x290], ax
lea eax, [ebp - 0x278]
mov dword [ebp - 0x27c], 7
cmovb ecx, esi
cmp edi, 8
push ecx
cmovae eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x290]
push eax
call fcn.00415360
push str.Launch_1
push ecx
mov byte [ebp - 4], 9
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
push str.libcurl.dll
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x2a8]
call fcn.00415510
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xa
call fcn.004168e0
add eax, 0x20
lea ecx, [ebp - 0x238]
push eax
call fcn.00415280
push 0x43b4d8
lea edx, [ebp - 0x238]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x250]
call fcn.0041c250
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x418b28
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x418b30
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push esi
push eax
call edi
mov edx, dword [ebp - 0x23c]
cmp edx, 8
jb 0x418b7e
mov ecx, dword [ebp - 0x250]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418b74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418b74
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp edx, 8
jb 0x418be1
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418bd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418bd7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
cmp edx, 8
jb 0x418c44
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418c3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418c3a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
push str.msvcr90.dll
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x2a8]
call fcn.00415510
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xc
call fcn.004168e0
add eax, 0x20
lea ecx, [ebp - 0x238]
push eax
call fcn.00415280
push 0x43b4f0
lea edx, [ebp - 0x238]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x250]
call fcn.0041c250
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x418c9c
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x418ca4
mov eax, dword [eax]
push 0
push esi
push eax
call edi
mov edx, dword [ebp - 0x23c]
cmp edx, 8
jb 0x418cec
mov ecx, dword [ebp - 0x250]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418ce2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418ce2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp edx, 8
jb 0x418d4f
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418d45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418d45
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
cmp edx, 8
jb 0x418db2
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418da8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418da8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
push str.libeay32.dll
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x2a8]
call fcn.00415510
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xe
call fcn.004168e0
add eax, 0x20
lea ecx, [ebp - 0x238]
push eax
call fcn.00415280
push 0x43b508
lea edx, [ebp - 0x238]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x250]
call fcn.0041c250
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x418e0a
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x418e12
mov eax, dword [eax]
push 0
push esi
push eax
call edi
mov edx, dword [ebp - 0x23c]
cmp edx, 8
jb 0x418e5a
mov ecx, dword [ebp - 0x250]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418e50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418e50
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp edx, 8
jb 0x418ebd
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418eb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418eb3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
cmp edx, 8
jb 0x418f20
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418f16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418f16
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
push str.libcrypto_1_1.dll
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x2a8]
call fcn.00415510
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x10
call fcn.004168e0
add eax, 0x20
lea ecx, [ebp - 0x238]
push eax
call fcn.00415280
push 0x43b524
lea edx, [ebp - 0x238]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x250]
call fcn.0041c250
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x418f78
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x418f80
mov eax, dword [eax]
push 0
push esi
push eax
call edi
mov edx, dword [ebp - 0x23c]
cmp edx, 8
jb 0x418fc8
mov ecx, dword [ebp - 0x250]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x418fbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x418fbe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp edx, 8
jb 0x41902b
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419021
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419021
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
cmp edx, 8
jb 0x41908e
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419084
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
lea eax, [ebp - 0x260]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x260], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
call fcn.004168e0
mov ecx, eax
call fcn.00416f10
push eax
sub esp, 0x18
push esp
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.004170b0
lea ecx, [ebp - 0x2a8]
call fcn.00415960
add esp, 0x18
mov esi, eax
mov byte [ebp - 4], 0x12
cmp dword [esi + 0x14], 8
jb 0x4190f8
mov esi, dword [esi]
call fcn.004168e0
push esi
push dword [eax + 0x44]
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x258]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25e]
push eax
movzx eax, word [ebp - 0x260]
push eax
lea eax, [ebp - 0x220]
push str._ppu_.4d_.2d_.2d__.2d_.2d_.2d_d____s____d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov byte [ebp - 4], 9
add esp, 0x2c
mov edx, dword [ebp - 0x294]
cmp edx, 8
jb 0x41918c
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419182
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419182
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x238]
call fcn.00415280
mov byte [ebp - 4], 0x13
call fcn.004168e0
lea ecx, [eax + 0xac]
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x238]
cmp ecx, eax
je 0x4191d5
cmp dword [ebp - 0x224], 8
push dword [ebp - 0x228]
cmovae eax, dword [ebp - 0x238]
push eax
call fcn.00415360
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x224]
cmp edx, 8
jb 0x41921b
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419211
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419211
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x228], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419241
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x238]
call fcn.00415360
mov byte [ebp - 4], 0x15
xor eax, eax
mov word [ebp - 0x250], ax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
cmp eax, 1
jb 0x419565
dec eax
mov ecx, 0x12
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
add eax, 2
lea ecx, [ebp - 0x250]
push eax
call fcn.00415360
mov byte [ebp - 4], 0x16
call fcn.004168e0
lea ecx, [eax + 0xc4]
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x250]
cmp ecx, eax
je 0x4192f9
cmp dword [ebp - 0x23c], 8
push dword [ebp - 0x240]
cmovae eax, dword [ebp - 0x250]
push eax
call fcn.00415360
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x23c]
cmp edx, 8
jb 0x41933f
mov ecx, dword [ebp - 0x250]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419335
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419335
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x278]
lea edx, [ebp - 0x220]
cmovae ecx, dword [ebp - 0x278]
call fcn.00430ed0
lea ecx, [ebp - 0x220]
mov esi, eax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419370
sub ecx, edx
xor eax, eax
sar ecx, 1
test esi, esi
setne al
push eax
push ecx
push dword [ebp - 0x268]
push str.Launch_2:__d___d___d
call fcn.004168e0
push eax
call fcn.00416a50
add esp, 0x14
test esi, esi
je 0x4193b0
push 0x5dc
call dword [0x438048]
call fcn.004168e0
push 0xffffffffffffffff
push esi
mov byte [eax + 0x154], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add al, ch
push ss
aad 0xff
dec dword [ebx + 0x54be80f0]
add dword [eax], eax
add byte [eax], al
je 0x41940a
cmp dword [esi + 0xd4], 0
je 0x41940a
mov eax, dword [esi + 0xa8]
test eax, eax
je 0x41940a
cmp eax, 0xffffffff
je 0x41940a
push eax
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
push dword [esi + 0xa8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0xa8], 0
call fcn.004168e0
mov byte [eax + 0x154], 0
call fcn.004137d0
push ecx
call fcn.00415030
mov edx, dword [ebp - 0x224]
cmp edx, 8
jb 0x419463
mov ecx, dword [ebp - 0x238]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x419459
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419459
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x27c]
cmp edx, 8
jb 0x4194a5
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41949b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41949b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor esi, esi
jmp 0x4194ae
mov esi, 0xfffffffe
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x4194f0
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4194e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4194e6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov edx, dword [ebx + 0x1c]
cmp edx, 0x10
jb 0x419543
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x419539
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419539
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043284c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x18
call fcn.00408440
int3