Function at 0x405468
Capabilities:
Check mutex on windows
Gather firefox profile information
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa3c
push ebx
mov ebx, dword [sym.imp.kernel32.dll_CreateSemaphoreA]
push esi
push edi
push 0x411ce0
push 1
xor esi, esi
push esi
push esi
call ebx
mov edi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push esi
push 1
push eax
call edi
push 0xdbb
push esi
mov esi, dword [sym.imp.kernel32.dll_LocalAlloc]
call esi
lea eax, [ebp - 0x178]
mov dword [0x4152d8], 0x411cec
push eax
push 0x411cf4
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
mov ecx, 0x411d00
call fcn.0040169e
push 0x8ab
push 0
mov dword [0x41550c], eax
call esi
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x411d0c
push 1
push 0
push 0
mov dword [0x4154ec], 0x411d04
call ebx
mov esi, eax
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push 0x411d1c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0
push 1
push esi
call edi
push 0x411d30
push 1
push 0
push 0
mov dword [0x4152bc], 0x411d28
call ebx
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push 0
push 1
push esi
call edi
push 0xb01
push 0
mov dword [0x41557c], 0x411d40
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov edi, dword [sym.imp.kernel32.dll_OutputDebugStringA]
mov esi, eax
push 0x411d48
call edi
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x411d6c
push 0
mov dword [0x4154dc], 0x411d54
push 1
push 0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x411d90
xor esi, esi
mov dword [0x4154f4], 0x411d78
push esi
push esi
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x4055e2
push eax
call dword [0x411020]
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push 0x411d9c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov esi, dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
xor edi, edi
push 0x411dc4
push 1
push edi
mov dword [0x41531c], 0x411da8
mov dword [0x4155a4], 0x411db4
call esi
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
lea eax, [ebp - 0xc]
push eax
push 0x20019
push edi
push 0x411dd4
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x411dec
push 1
push edi
mov dword [0x41530c], 0x411de0
call esi
test eax, eax
je 0x40564a
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
jmp 0x405650
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x411e0c
push 1
push edi
push edi
mov dword [0x4154c8], 0x411dfc
call ebx
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push edi
push 1
push eax
call esi
lea eax, [ebp - 0x10]
push eax
push 0x20019
push edi
push 0x411e18
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0xa
mov dword [0x4152b0], 0x411e24
pop edi
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x411e4c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
sub edi, 1
jne 0x405698
push 0x411e70
push 1
push edi
mov dword [0x415538], 0x411e58
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
test eax, eax
je 0x4056ed
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x411e80
push 0x411e8c
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
jmp 0x4056f3
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x411e9c
push 1
push edi
push edi
mov dword [0x4154f8], 0x411e98
call ebx
push edi
push 1
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 0x20019
push edi
push 0x411ea8
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x411ecc
push 1
push edi
push edi
mov dword [0x415564], 0x411eb4
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 0x20019
push edi
push 0x411edc
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push edi
push 1
push esi
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
call esi
push 0x411f00
push 1
push edi
mov dword [0x4152f4], 0x411ee8
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov edi, dword [sym.imp.kernel32.dll_OutputDebugStringA]
test eax, eax
je 0x40578e
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
xor eax, eax
mov dword [0x4153c8], 0x411f10
push eax
push 0xf43
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.kernel32.dll_]
push 0x411f40
push 1
push 0
push 0
mov dword [0x415500], 0x411f28
mov dword [0x415384], 0x411f3c
call ebx
push 0
push 1
push eax
call esi
mov esi, dword [sym.imp.advapi32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
push 0
push 0x411f4c
push 0x80000001
call esi
push 0x411f5c
push 0
push 0
mov dword [0x415578], 0x411f58
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x405825
push eax
call dword [0x411020]
push 0x411f68
call edi
jmp 0x405843
push 0x411f74
call edi
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x411f80
push 0x80000001
call esi
lea eax, [ebp - 0x2b8]
mov dword [0x415430], 0x411f8c
push eax
push 0x411f90
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x411fa0
push 0
push 1
push 0
mov dword [0x4154d0], 0x411f9c
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
mov esi, dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x411fb0
push 0
push 0
mov dword [0x41535c], 0x411fac
call esi
test eax, eax
je 0x4058b9
push eax
call dword [0x411020]
jmp 0x4058d0
push 0x411fbc
push 0x411fc8
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x411fd4
call edi
xor eax, eax
mov dword [0x415574], 0x411fe0
push eax
push 0x107
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.kernel32.dll_]
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x411fe8
push 0
push 0
mov dword [0x4152ec], 0x411fe4
call esi
mov esi, eax
test esi, esi
je 0x405948
push 0x411ff4
push 0x412000
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [0x411020]
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x41200c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x41201c
push 1
push 0
mov dword [0x41528c], 0x412018
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x185
push 0
mov dword [0x4153f0], 0x41202c
call dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x412030
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
mov esi, dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x412040
push 0
push 0
mov dword [0x41529c], 0x41203c
call esi
test eax, eax
je 0x4059b7
push eax
call dword [0x411020]
jmp 0x4059c7
push 0x41204c
push 0x412058
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412070
push 0
push 0
mov dword [0x4152b8], 0x412064
call esi
mov esi, eax
test esi, esi
je 0x405a0b
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x41207c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
call dword [0x411020]
push 0x412088
call edi
push 0x4120a4
push 0
push 1
push 0
mov dword [0x4154d8], 0x412094
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
mov esi, dword [sym.imp.kernel32.dll_CreateFileMappingW]
xor eax, eax
push eax
push 0x390
push eax
push 4
push eax
push 0xffffffffffffffff
mov dword [0x415508], 0x4120b0
call esi
xor eax, eax
mov dword [0x41552c], 0x4120c0
push eax
push 0x1163
push eax
push 4
push eax
push 0xffffffffffffffff
call esi
push 0x4120d0
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_]
push 0xcda
xor esi, esi
mov dword [0x41549c], 0x4120dc
push esi
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push esi
push 0x136e
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x4120e4
push esi
push 1
push esi
mov dword [0x41554c], 0x4120e0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x4120f4
push 0
push 1
push 0
mov dword [0x415474], 0x4120f0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412140
push 1
xor esi, esi
mov dword [0x4154bc], 0x412100
push esi
push esi
call ebx
push esi
push 1
push eax
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
call esi
push 0x41217c
push 1
push 0
push 0
mov dword [0x415504], 0x41214c
call ebx
push 0
push 1
push eax
call esi
test eax, eax
je 0x405b50
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x4121a8
push 1
push 0
push 0
mov dword [0x41547c], 0x41218c
call ebx
push 0
push 1
push eax
call esi
push 0x4121c4
push 0
push 1
push 0
mov dword [0x415520], 0x4121b8
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0xa
mov dword [0x4153b8], 0x4121d0
mov dword [0x415598], 0x4121d8
pop esi
push 0x4121e0
call edi
sub esi, 1
jne 0x405bb0
push esi
push 0x71b
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x4154a8], 0x4121ec
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.kernel32.dll_]
push 0x4121f4
call edi
lea eax, [ebp - 0x3f8]
mov dword [0x415544], 0x412200
push eax
push 0x41220c
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x41222c
push 1
push esi
mov dword [0x4154a0], 0x412218
mov dword [0x4154ac], 0x412224
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov esi, dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 4], eax
call esi
mov eax, dword [ebp - 4]
test eax, eax
je 0x405c46
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
call esi
xor eax, eax
mov dword [0x415490], 0x41223c
push eax
push 0x1c
push eax
push 4
push eax
push 0xffffffffffffffff
mov dword [0x415278], 0x412248
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x412254
push 0x412260
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x41229c
push 1
xor esi, esi
mov dword [0x41558c], 0x41226c
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
lea eax, [ebp - 0x20]
push eax
push 0x20019
push esi
push 0x4122a8
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
push 0x94a
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x415340], 0x4122b4
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x4122bc
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_]
push 0x4122e0
push 1
xor esi, esi
mov dword [0x41533c], 0x4122c8
push esi
push esi
mov dword [0x4153d0], 0x4122d4
call ebx
push esi
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 1
push eax
call esi
test eax, eax
je 0x405d23
push 0x4122f0
call edi
push 0x412308
push 1
push 0
mov dword [0x415424], 0x4122fc
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push 0x41232c
push 1
push 0
mov dword [0x4151c8], 0x412318
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
test eax, eax
je 0x405d60
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x41234c
push 1
push 0
push 0
mov dword [0x415220], 0x41233c
call ebx
push 0
push 1
push eax
call esi
push 0x412358
xor esi, esi
push esi
push 1
push esi
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
push esi
push 0x178
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x415238], 0x412364
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x412384
push 1
xor esi, esi
mov dword [0x415274], 0x412374
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x23d
push esi
call dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x4123a4
push 1
push esi
mov esi, dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov dword [0x4151ec], 0x412390
call esi
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x4123cc
push 1
push 0
mov dword [0x4151c4], 0x4123b4
call esi
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x4123dc
push 0x4123e8
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x22
push 0
mov dword [0x415260], 0x4123f4
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
xor eax, eax
mov dword [0x4151b4], 0x41240c
push eax
push 0xb1a
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x1ea
xor esi, esi
mov dword [0x415224], 0x412420
push esi
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412460
push esi
push esi
call dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x4124c4
push 1
push esi
mov dword [0x41524c], 0x412470
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
test eax, eax
je 0x405ee3
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x4124d4
push 0x4124e0
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412510
push 1
push esi
push esi
mov dword [0x4151f8], 0x4124ec
call ebx
push esi
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 1
push eax
call esi
push 0x412528
mov dword [0x415388], 0x412520
call edi
push 0x41253c
push 1
push 0
push 0
mov dword [0x415378], 0x412534
call ebx
push 0
push 1
push eax
call esi
lea eax, [ebp - 0x24]
push eax
push 0x20019
push 0
push 0x412548
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x41259c
push 0x4125a8
mov dword [0x415494], 0x412558
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x4125e4
push 1
push 0
mov dword [0x41527c], 0x4125b4
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
xor eax, eax
push eax
push 0xe48
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
xor eax, eax
mov dword [0x415300], 0x4125f4
push eax
push 0x156
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.kernel32.dll_]
push 0x412604
push 0
push 1
push 0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
push 0x41261c
push 1
push 0
push 0
mov dword [0x4152c0], 0x412610
call ebx
push 0
push 1
push eax
call esi
push 0x412628
push 0x412634
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
mov dword [0x415454], 0x412640
push 0x41264c
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x40602a
push eax
call dword [0x411020]
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x5ba
push 0
mov dword [0x4153a4], 0x412658
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x41266c
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x41268c
push 1
push 0
push 0
mov dword [0x4154b8], 0x412678
call ebx
push 0
push 1
push eax
call esi
lea eax, [ebp - 0x28]
xor esi, esi
push eax
push 0x20019
push esi
push 0x412698
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x4126c8
push esi
push 1
push esi
mov dword [0x4154e4], 0x4126a4
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
xor eax, eax
mov dword [0x415554], 0x4126d4
push eax
push 0x702
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x41270c
push 0x412718
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x412728
push 0
push 1
push 0
mov dword [0x415510], 0x412724
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 5
mov dword [0x415428], 0x412734
pop esi
call dword [sym.imp.kernel32.dll_GetLastError]
sub esi, 1
jne 0x406129
push 0x49f
push esi
mov dword [0x4152e0], 0x41273c
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412740
call edi
push 0x412764
push esi
push esi
mov dword [0x4154c4], 0x41274c
mov dword [0x415594], 0x412758
call dword [sym.imp.kernel32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x4061a3
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x412770
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
call dword [0x411020]
jmp 0x4061ba
push 0x41277c
push 0x412788
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412794
call edi
xor eax, eax
mov dword [0x4153dc], 0x4127a0
push eax
push 0xfce
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x4127ac
push 0x4127b8
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x4127d0
push 1
xor esi, esi
mov dword [0x4152cc], 0x4127c4
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x4127dc
push 0x4127e8
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412804
push esi
push esi
mov dword [0x415464], 0x4127f4
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x406246
push eax
call dword [0x411020]
jmp 0x406260
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push 0x412810
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x538]
mov dword [0x415290], 0x41281c
push eax
push 0x412830
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x412854
push 1
push esi
mov dword [0x415298], 0x41283c
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
mov esi, dword [sym.imp.kernel32.dll_CancelWaitableTimer]
call esi
lea eax, [ebp - 4]
mov dword [0x4154b0], 0x412864
push eax
push 0x20019
push 0
push 0x412880
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 5
mov dword [0x415420], 0x41288c
pop ebx
call dword [sym.imp.kernel32.dll_GetLastError]
sub ebx, 1
jne 0x4062de
push 0x4128bc
push 1
push ebx
mov dword [0x415370], 0x4128a8
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov ebx, dword [sym.imp.kernel32.dll_CreateSemaphoreA]
test eax, eax
je 0x40630e
push eax
call esi
push 6
mov dword [0x4153f4], 0x4128cc
pop esi
push 0x4128d4
call edi
sub esi, 1
jne 0x40631b
lea eax, [ebp - 0x678]
mov dword [0x415450], 0x4128e0
push eax
push 0x4128f8
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x412918
push esi
push esi
mov dword [0x415350], 0x412904
call dword [sym.imp.kernel32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x406387
push 0x412924
call edi
push esi
call dword [0x411020]
push 0x412930
push 0x41293c
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
jmp 0x40638e
push 0x412948
call edi
push 0x412964
push 1
push 0
push 0
mov dword [0x415400], 0x412954
call ebx
mov esi, eax
lea eax, [ebp - 0x2c]
push eax
push 0x20019
push 0
push 0x412974
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0
push 1
push esi
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push pe_nt_image_headers32
push 0
mov dword [0x41559c], 0x412980
mov dword [0x415314], 0x41298c
call dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x41299c
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x4129bc
push 1
xor esi, esi
mov dword [0x415550], 0x4129a8
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x412a38
push esi
push esi
mov dword [0x415410], 0x4129cc
mov dword [0x4151dc], 0x4129d8
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x406457
push eax
call dword [0x411020]
push 0x412a44
push 0x412a50
jmp 0x406461
push 0x412a5c
push 0x412a68
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x3f6
push esi
mov dword [0x415250], 0x412a74
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov esi, eax
lea eax, [ebp - 0x30]
push eax
push 0x20019
push 0
push 0x412aa8
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412abc
xor esi, esi
mov dword [0x415444], 0x412ab4
push esi
push esi
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x4064ce
push eax
call dword [0x411020]
push 0x412ac8
call edi
jmp 0x4064d4
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x412ae4
push 1
push esi
push esi
mov dword [0x4153f8], 0x412ad4
call ebx
push 0x412af4
mov esi, eax
call edi
push 0
push 1
push esi
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x412b1c
push 0
push 1
push 0
mov dword [0x4153e8], 0x412b00
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412b40
push 0
push 0
mov dword [0x4153ec], 0x412b28
call dword [sym.imp.kernel32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x406555
push 0x412b4c
call edi
push esi
call dword [0x411020]
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x412b60
push 1
xor esi, esi
mov dword [0x4153e0], 0x412b58
push esi
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x412b70
push 0x412b7c
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412b94
push 1
push esi
push esi
mov dword [0x415338], 0x412b88
call ebx
push 0x412ba4
mov esi, eax
call edi
push 0
push 1
push esi
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x412bc0
push 0
push 1
push 0
mov dword [0x4154d4], 0x412bb0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x954
push 0
mov dword [0x415518], 0x412bcc
call dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x412be4
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412c00
push 1
push 0
mov dword [0x41543c], 0x412bf0
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push 0x412c10
mov esi, eax
call edi
test esi, esi
je 0x406636
push esi
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
jmp 0x406646
push 0x412c1c
push 0x412c28
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0x7b8]
mov dword [0x415530], 0x412c34
push eax
push 0x412c48
call dword [sym.imp.kernel32.dll_FindFirstFileA]
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x412c64
push 0
push 1
push 0
mov dword [0x415584], 0x412c54
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412c84
push 1
xor esi, esi
mov dword [0x4152d4], 0x412c70
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
mov esi, dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push 0x412c90
push 0x412c9c
call esi
push 0x412cb4
push 1
push 0
mov dword [0x41546c], 0x412ca8
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
test eax, eax
je 0x4066f7
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push 0x412cc4
push 0x412cd0
call esi
push 0xa07
push 0
mov dword [0x41545c], 0x412cdc
call dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x412cec
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
mov esi, dword [sym.imp.kernel32.dll_LocalAlloc]
push 0x60
push 0
mov dword [0x415360], 0x412cf8
mov dword [0x4153d8], 0x412d10
call esi
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412d28
push 1
push 0
push 0
call ebx
push 0x586
push 0
mov dword [0x415460], 0x412d34
call esi
push 0x412d40
push 0x412d4c
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 3
mov dword [0x41532c], 0x412d58
pop esi
call dword [sym.imp.kernel32.dll_GetLastError]
sub esi, 1
jne 0x40678b
xor eax, eax
mov dword [0x41555c], 0x412d64
push eax
push 0x61f
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x412d68
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_]
push 0x412d78
push 1
push 0
mov dword [0x4152a4], 0x412d74
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push 0x412d88
mov esi, eax
call edi
push esi
mov esi, dword [sym.imp.kernel32.dll_CancelWaitableTimer]
call esi
push 0x412da0
push 1
push 0
mov dword [0x415438], 0x412d94
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push eax
call esi
push 0x412db0
push 1
xor esi, esi
push esi
push esi
call ebx
push 0x412dc4
mov dword [0x415264], 0x412dc0
call edi
push 0x412dd4
push esi
push 1
push esi
mov dword [0x415368], 0x412dd0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
mov esi, dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x412de8
push 0
push 0
mov dword [0x415318], 0x412de0
call esi
mov dword [ebp - 4], eax
test eax, eax
je 0x406886
push 0x412df4
call edi
push dword [ebp - 4]
call dword [0x411020]
jmp 0x40688c
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x412e0c
push 0
push 0
mov dword [0x4153fc], 0x412e00
call esi
test eax, eax
je 0x4068ae
push eax
call dword [0x411020]
jmp 0x4068c9
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x412e18
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x526
push 0
mov dword [0x415390], 0x412e24
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x412e38
push 0
push 1
push 0
mov dword [0x415484], 0x412e30
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412e60
push 0
push 1
push 0
mov dword [0x41553c], 0x412e44
mov dword [0x4154cc], 0x412e50
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412e70
push 1
xor esi, esi
mov dword [0x415394], 0x412e6c
push esi
push esi
call ebx
push esi
mov esi, dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 1
push eax
call esi
push 0x412e7c
push 0
push 1
push 0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
push 0x412e94
push 1
push 0
push 0
mov dword [0x415280], 0x412e88
call ebx
push 0
push 1
push eax
call esi
test eax, eax
je 0x4069aa
push 0x412ea4
call edi
push 0x776
push 0
mov dword [0x4154a4], 0x412eb0
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
push esi
call dword [sym.imp.kernel32.dll_LocalFree]
push 0x412ed8
push 1
xor esi, esi
mov dword [0x415354], 0x412eb8
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push 0x412ef4
push 1
push esi
push esi
mov dword [0x415560], 0x412ee4
mov dword [0x415590], 0x412eec
call ebx
mov esi, eax
lea eax, [ebp - 0x34]
push eax
push 0x20019
push 0
push 0x412f04
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0
push 1
push esi
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
xor eax, eax
mov dword [0x415404], 0x412f10
push eax
push 0x8df
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x412f14
push 0x412f20
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.kernel32.dll_]
push 0x412f3c
push 1
push 0
mov dword [0x415324], 0x412f2c
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
mov esi, eax
lea eax, [ebp - 0x38]
push eax
push 0x20019
push 0
push 0x412f4c
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
mov esi, dword [sym.imp.kernel32.dll_CreateMutexA]
push 0x412f78
push 0
push 0
mov dword [0x4153c0], 0x412f58
call esi
push 0x412fb8
push 0
push 0
mov dword [0x415588], 0x412f84
call esi
mov esi, eax
test esi, esi
je 0x406b06
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x412fc4
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push esi
call dword [0x411020]
jmp 0x406b0c
call dword [sym.imp.kernel32.dll_GetLastError]
push 0x412fdc
push 0
push 1
push 0
mov dword [0x415498], 0x412fd0
call dword [sym.imp.kernel32.dll____TEg_Td:kJ__FfFpIDL_]
mov esi, eax
push esi
call dword [sym.imp.kernel32.dll_SetEvent]
push esi
call dword [sym.imp.kernel32.dll_ResetEvent]
push 0x412ff8
push 1
push 0
mov dword [0x4153b0], 0x412fe8
call dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push 0x413008
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
mov esi, dword [sym.imp.kernel32.dll_FindFirstFileA]
lea eax, [ebp - 0x8f8]
push eax
push 0x41301c
mov dword [0x415470], 0x413014
call esi
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
lea eax, [ebp - 0xa38]
mov dword [0x4152c4], 0x413028
push eax
push 0x413038
call esi
push eax
call dword [sym.imp.kernel32.dll_pd_3JD9_w_8]
push 0x413048
xor esi, esi
mov dword [0x4152f8], 0x413044
push esi
push esi
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x406bca
push eax
call dword [0x411020]
jmp 0x406bd8
push 0x413054
call edi
push 0x413060
call edi
push 0x413078
push 1
push esi
push esi
mov dword [0x415334], 0x41306c
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
push esi
push 0xbef
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x4153c4], 0x413084
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x413088
mov esi, eax
call edi
push esi
call dword [sym.imp.kernel32.dll_]
push 0x413098
push 1
xor esi, esi
mov dword [0x415364], 0x413094
push esi
push esi
call ebx
push esi
push 1
push eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
mov ebx, dword [sym.imp.kernel32.dll_GetLastError]
call ebx
push esi
push 0x68d
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [0x41551c], 0x4130a4
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
mov esi, eax
call ebx
push esi
call dword [sym.imp.kernel32.dll_]
push 0xaa9
xor esi, esi
mov dword [0x415468], 0x4130b0
push esi
call dword [sym.imp.kernel32.dll_LocalAlloc]
push eax
call dword [sym.imp.kernel32.dll_LocalFree]
push esi
push 0x19d
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
push 0x4130c0
push esi
push esi
mov dword [0x4153a8], 0x4130b8
call dword [sym.imp.kernel32.dll_CreateMutexA]
test eax, eax
je 0x406cc8
push eax
call dword [0x411020]
jmp 0x406ce2
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push 0x4130cc
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov ebx, dword [sym.imp.kernel32.dll_CreateWaitableTimerA]
push 0x4130e0
push 1
push esi
mov dword [0x415568], 0x4130d8
call ebx
test eax, eax
je 0x406d09
push eax
call dword [sym.imp.kernel32.dll_CancelWaitableTimer]
jmp 0x406d23
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push 0x4130f0
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
push 0x413104
push 1
push esi
mov dword [0x41556c], 0x4130fc
call ebx
push 0x413114
mov esi, eax
call edi
mov edi, dword [sym.imp.kernel32.dll_CancelWaitableTimer]
push esi
call edi
push 0x413134
push 1
push 0
mov dword [0x415528], 0x413120
call ebx
push 0x413144
push 0x413150
mov esi, eax
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
push esi
call edi
mov ecx, dword [0x4152d8]
call fcn.0040f15f
mov ecx, dword [0x41550c]
mov dword [0x4152e8], eax
call fcn.0040f15f
mov ecx, dword [0x41557c]
mov dword [0x415374], eax
call fcn.0040f15f
mov ecx, dword [0x4154ec]
mov dword [0x415480], eax
call fcn.0040f15f
mov ecx, dword [0x4154ac]
mov dword [0x4151ac], eax
call fcn.0040f15f
mov ecx, dword [0x4154dc]
mov dword [0x415514], eax
call fcn.0040f15f
mov ecx, dword [0x4152f4]
mov dword [0x415258], eax
call fcn.0040f15f
mov ecx, dword [0x41531c]
mov dword [0x4153d4], eax
call fcn.0040f15f
mov ecx, dword [0x4152bc]
mov dword [0x4152c8], eax
call fcn.0040f15f
mov ecx, dword [0x4153c8]
mov dword [0x4152a0], eax
call fcn.0040f15f
mov ecx, dword [0x4155a4]
mov dword [0x41539c], eax
call fcn.0040f15f
mov ecx, dword [0x4154f4]
mov dword [0x4155a0], eax
call fcn.0040f15f
mov ecx, dword [0x41530c]
mov dword [0x4151a8], eax
call fcn.0040f15f
mov ecx, dword [0x4154c8]
mov dword [0x4153e4], eax
call fcn.0040f15f
mov ecx, dword [0x4152b0]
mov dword [0x4152fc], eax
call fcn.0040f15f
mov ecx, dword [0x415538]
mov dword [0x415398], eax
call fcn.0040f15f
mov ecx, dword [0x4154f8]
mov dword [0x41534c], eax
call fcn.0040f15f
mov ecx, dword [0x415564]
mov dword [0x415308], eax
call fcn.0040f15f
mov ecx, dword [0x415500]
mov dword [0x415380], eax
call fcn.0040f15f
mov ecx, dword [0x415384]
mov dword [0x4152e4], eax
call fcn.0040f15f
mov ecx, dword [0x415578]
mov dword [0x4154c0], eax
call fcn.0040f15f
mov ecx, dword [0x415430]
mov dword [0x4152a8], eax
call fcn.0040f15f
mov ecx, dword [0x4154d0]
mov dword [0x415268], eax
call fcn.0040f15f
mov ecx, dword [0x41535c]
mov dword [0x41541c], eax
call fcn.0040f15f
mov ecx, dword [0x415574]
mov dword [0x415210], eax
call fcn.0040f15f
mov ecx, dword [0x4152ec]
mov dword [0x415434], eax
call fcn.0040f15f
mov ecx, dword [0x41528c]
mov dword [0x415200], eax
call fcn.0040f15f
mov ecx, dword [0x4153f0]
mov dword [0x41520c], eax
call fcn.0040f15f
mov ecx, dword [0x4152b8]
mov dword [0x41523c], eax
call fcn.0040f15f
mov ecx, dword [0x41529c]
mov dword [0x4153b4], eax
call fcn.0040f15f
mov ecx, dword [0x4154d8]
mov dword [0x4151d8], eax
call fcn.0040f15f
mov ecx, dword [0x415508]
mov dword [0x415270], eax
call fcn.0040f15f
mov ecx, dword [0x41552c]
mov dword [0x41525c], eax
call fcn.0040f15f
mov ecx, dword [0x41549c]
mov dword [0x4151e0], eax
call fcn.0040f15f
mov ecx, dword [0x41554c]
mov dword [0x4151bc], eax
call fcn.0040f15f
mov ecx, dword [0x415474]
mov dword [0x4154f0], eax
call fcn.0040f15f
mov ecx, dword [0x4154bc]
mov dword [0x415234], eax
call fcn.0040f15f
mov ecx, dword [0x415504]
mov dword [0x4153cc], eax
call fcn.0040f15f
mov ecx, dword [0x415520]
mov dword [0x415240], eax
call fcn.0040f15f
mov ecx, dword [0x4153b8]
mov dword [0x4151e8], eax
call fcn.0040f15f
mov ecx, dword [0x415598]
mov dword [0x4151b8], eax
call fcn.0040f15f
mov ecx, dword [0x4154a8]
mov dword [0x415310], eax
call fcn.0040f15f
mov ecx, dword [0x415544]
mov dword [0x415488], eax
call fcn.0040f15f
mov ecx, dword [0x4154a0]
mov dword [0x41536c], eax
call fcn.0040f15f
mov ecx, dword [0x41547c]
mov dword [0x415534], eax
call fcn.0040f15f
mov ecx, dword [0x415490]
mov dword [0x41544c], eax
call fcn.0040f15f
mov ecx, dword [0x415278]
mov dword [0x415448], eax
call fcn.0040f15f
mov ecx, dword [0x41558c]
mov dword [0x415570], eax
call fcn.0040f15f
mov ecx, dword [0x415340]
mov dword [0x415304], eax
call fcn.0040f15f
mov ecx, dword [0x41533c]
mov dword [0x41537c], eax
call fcn.0040f15f
mov ecx, dword [0x415388]
mov dword [0x415558], eax
call fcn.0040f15f
mov ecx, dword [0x415378]
mov dword [0x4151b0], eax
call fcn.0040f15f
mov ecx, dword [0x4153d0]
mov dword [0x4151d0], eax
call fcn.0040f15f
mov ecx, dword [0x415424]
mov dword [0x4151c0], eax
call fcn.0040f15f
mov ecx, dword [0x415300]
mov dword [0x4151f0], eax
call fcn.0040f15f
mov ecx, dword [0x4152c0]
mov dword [0x415288], eax
call fcn.0040f15f
mov ecx, dword [0x415454]
mov dword [0x415414], eax
call fcn.0040f15f
mov ecx, dword [0x4153a4]
mov dword [0x4153bc], eax
call fcn.0040f15f
mov ecx, dword [0x4154b8]
mov dword [0x415214], eax
call fcn.0040f15f
mov ecx, dword [0x4154e4]
mov dword [0x415230], eax
call fcn.0040f15f
mov ecx, dword [0x415554]
mov dword [0x41542c], eax
call fcn.0040f15f
mov ecx, dword [0x415510]
mov dword [0x415408], eax
call fcn.0040f15f
mov ecx, dword [0x415428]
mov dword [0x415524], eax
call fcn.0040f15f
mov ecx, dword [0x4152e0]
mov dword [0x4152ac], eax
call fcn.0040f15f
mov ecx, dword [0x4154c4]
mov dword [0x4154b4], eax
call fcn.0040f15f
mov ecx, dword [0x415594]
mov dword [0x4152d0], eax
call fcn.0040f15f
mov ecx, dword [0x4153dc]
mov dword [0x415418], eax
call fcn.0040f15f
mov ecx, dword [0x4152cc]
mov dword [0x41548c], eax
call fcn.0040f15f
mov ecx, dword [0x415464]
mov dword [0x41538c], eax
call fcn.0040f15f
mov ecx, dword [0x415290]
call fcn.0040f15f
mov ecx, dword [0x415298]
call fcn.0040f15f
mov ecx, dword [0x4154b0]
call fcn.0040f15f
mov ecx, dword [0x415420]
call fcn.0040f15f
mov ecx, dword [0x415370]
call fcn.0040f15f
mov ecx, dword [0x4153f4]
call fcn.0040f15f
mov ecx, dword [0x415450]
call fcn.0040f15f
mov ecx, dword [0x415350]
call fcn.0040f15f
mov ecx, dword [0x415400]
call fcn.0040f15f
mov ecx, dword [0x41559c]
call fcn.0040f15f
mov ecx, dword [0x415314]
call fcn.0040f15f
mov ecx, dword [0x415550]
call fcn.0040f15f
mov ecx, dword [0x415410]
call fcn.0040f15f
mov ecx, dword [0x4151dc]
call fcn.0040f15f
mov ecx, dword [0x4153e8]
call fcn.0040f15f
mov ecx, dword [0x4153e0]
mov dword [0x4151cc], eax
call fcn.0040f15f
mov ecx, dword [0x415338]
mov dword [0x415248], eax
call fcn.0040f15f
mov ecx, dword [0x4154d4]
call fcn.0040f15f
mov ecx, dword [0x415518]
call fcn.0040f15f
mov ecx, dword [0x41543c]
call fcn.0040f15f
mov ecx, dword [0x415530]
call fcn.0040f15f
mov ecx, dword [0x415584]
call fcn.0040f15f
mov ecx, dword [0x4152d4]
call fcn.0040f15f
mov ecx, dword [0x41546c]
call fcn.0040f15f
mov ecx, dword [0x41545c]
call fcn.0040f15f
mov ecx, dword [0x415360]
call fcn.0040f15f
mov ecx, dword [0x4153d8]
call fcn.0040f15f
mov ecx, dword [0x415460]
call fcn.0040f15f
mov ecx, dword [0x41532c]
call fcn.0040f15f
mov ecx, dword [0x41555c]
mov dword [0x415478], eax
call fcn.0040f15f
mov ecx, dword [0x4152a4]
mov dword [0x4154e0], eax
call fcn.0040f15f
mov ecx, dword [0x415438]
call fcn.0040f15f
mov ecx, dword [0x415264]
mov dword [0x415580], eax
call fcn.0040f15f
mov ecx, dword [0x415368]
call fcn.0040f15f
mov ecx, dword [0x415318]
mov dword [0x415294], eax
call fcn.0040f15f
mov ecx, dword [0x4153fc]
mov dword [0x41521c], eax
call fcn.0040f15f
mov ecx, dword [0x415390]
mov dword [0x4151f4], eax
call fcn.0040f15f
mov ecx, dword [0x415484]
mov dword [0x41526c], eax
call fcn.0040f15f
mov ecx, dword [0x41553c]
mov dword [0x415218], eax
call fcn.0040f15f
mov ecx, dword [0x4154cc]
mov dword [0x415540], eax
call fcn.0040f15f
mov ecx, dword [0x415394]
mov dword [0x415344], eax
call fcn.0040f15f
mov ecx, dword [0x415280]
mov dword [0x415284], eax
call fcn.0040f15f
mov ecx, dword [0x4154a4]
mov dword [0x4153ac], eax
call fcn.0040f15f
mov ecx, dword [0x415354]
mov dword [0x4152b4], eax
call fcn.0040f15f
mov ecx, dword [0x415560]
call fcn.0040f15f
mov ecx, dword [0x415590]
mov dword [0x415244], eax
call fcn.0040f15f
mov ecx, dword [0x415404]
mov dword [0x415208], eax
call fcn.0040f15f
mov ecx, dword [0x415324]
mov dword [0x4151e4], eax
call fcn.0040f15f
mov ecx, dword [0x4153c0]
mov dword [0x415548], eax
call fcn.0040f15f
mov ecx, dword [0x415588]
mov dword [0x4153a0], eax
call fcn.0040f15f
mov ecx, dword [0x415498]
mov dword [0x415440], eax
call fcn.0040f15f
mov ecx, dword [0x4153b0]
mov dword [0x415320], eax
call fcn.0040f15f
mov ecx, dword [0x415470]
mov dword [0x4152f0], eax
call fcn.0040f15f
mov ecx, dword [0x4152c4]
mov dword [0x415358], eax
call fcn.0040f15f
mov ecx, dword [0x4152f8]
mov dword [0x415330], eax
call fcn.0040f15f
mov ecx, dword [0x415444]
mov dword [0x415458], eax
call fcn.0040f15f
mov ecx, dword [0x4153f8]
mov dword [0x4151fc], eax
call fcn.0040f15f
mov ecx, dword [0x415334]
mov dword [0x415228], eax
call fcn.0040f15f
mov ecx, dword [0x4153c4]
mov dword [0x41522c], eax
call fcn.0040f15f
mov ecx, dword [0x415364]
mov dword [0x4151d4], eax
call fcn.0040f15f
mov ecx, dword [0x41551c]
mov dword [0x4154fc], eax
call fcn.0040f15f
mov ecx, dword [0x415468]
mov dword [0x41540c], eax
call fcn.0040f15f
mov ecx, dword [0x4153a8]
mov dword [0x415348], eax
call fcn.0040f15f
mov ecx, dword [0x415568]
mov dword [0x4154e8], eax
call fcn.0040f15f
mov ecx, dword [0x41556c]
mov dword [0x415328], eax
call fcn.0040f15f
mov ecx, dword [0x4153ec]
mov dword [0x4152dc], eax
call fcn.0040f15f
mov ecx, dword [0x415528]
mov dword [0x415254], eax
call fcn.0040f15f
pop edi
pop esi
mov dword [0x415204], eax
xor eax, eax
pop ebx
leave
ret