Function at 0x466220
Capabilities:
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x49f098
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x4b0c90]
xor eax, esp
mov dword [esp + 0x64], eax
push esi
push edi
mov eax, dword [0x4b0c90]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
xor edi, edi
push edi
mov ecx, 0x4a4459
mov esi, ebx
call fcn.00468240
push edi
mov ecx, 0x4a4459
call fcn.00468240
push edi
call fcn.0048583f
add esp, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
call fcn.0047483b
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x46629b
push 0x80004005
call fcn.00415b20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x1c]
push ecx
lea esi, [esp + 0x14]
mov dword [esp + 0x84], edi
call fcn.004742b0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x84], 1
call fcn.00428690
mov byte [esp + 0x80], 0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4662fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push str.TEST_RESULT
push ecx
lea ecx, [esp + 0x20]
call fcn.004740b0
add esp, 8
mov byte [esp + 0x80], 2
mov eax, dword [eax]
push ebx
mov esi, eax
call fcn.00468450
mov byte [esp + 0x80], 0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x46634a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push edi
mov ecx, str.TEST_RESULT
mov esi, ebx
call fcn.00468240
cmp dword [ebx + 0x328], edi
je 0x4664c7
cmp dword [ebx + 0x1fc], edi
mov dword [ebx + 0x94], edi
jne 0x4663b6
cmp dword [ebx + 0x200], edi
jne 0x4663b6
cmp dword [ebx + 0x20c], edi
jne 0x4663b6
cmp dword [ebx + 0x210], edi
jne 0x4663b6
cmp dword [ebx + 0x214], edi
jne 0x4663b6
cmp dword [ebx + 0x218], edi
jne 0x4663b6
cmp dword [ebx + 0x21c], edi
jne 0x4663b6
cmp dword [ebx + 0x220], edi
jne 0x4663b6
push ebx
mov esi, str.Pass_HD_Codec_Register_Get_Set_Command_Test__
call fcn.00468450
jmp 0x4663cb
push ebx
mov esi, str.Failed_HD_Codec_Register_Get_Set_Command_Test__
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [ebx + 0x204], edi
jne 0x4663e8
cmp dword [ebx + 0x208], edi
jne 0x4663e8
push ebx
mov esi, str.Pass_HD_Codec_Register_Default_Parameter__Test__
call fcn.00468450
jmp 0x4663fd
push ebx
mov esi, str.Failed_HD_Codec_Register_Default_Parameter__Test__
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [ebx + 0x208], edi
push ebx
je 0x46641c
mov esi, str.Failed_HD_Codec_Configuration_Byte_Test__
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
jmp 0x466426
mov esi, str.Pass_HD_Codec_Configuration_Byte_Test__
call fcn.00468450
cmp dword [0x4b9e0c], edi
je 0x466457
cmp dword [ebx + 0x230], edi
push ebx
je 0x46644d
mov esi, str.Failed_ALC269VB_Class_D_overcurrent_and_phase_error__
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
jmp 0x466457
mov esi, str.Pass_ALC269VB_Class_D_overcurrent_and_phase_error__
call fcn.00468450
cmp dword [ebx + 0x204], edi
jne 0x4664fb
cmp dword [ebx + 0x208], edi
jne 0x4664fb
cmp dword [ebx + 0x1fc], edi
jne 0x4664fb
cmp dword [ebx + 0x200], edi
jne 0x4664fb
cmp dword [ebx + 0x20c], edi
jne 0x4664fb
cmp dword [ebx + 0x210], edi
jne 0x4664fb
cmp dword [ebx + 0x214], edi
jne 0x4664fb
cmp dword [ebx + 0x218], edi
jne 0x4664fb
cmp dword [ebx + 0x21c], edi
jne 0x4664fb
cmp dword [ebx + 0x220], edi
jne 0x4664fb
cmp dword [ebx + 0x230], edi
jne 0x4664fb
mov dword [ebx + 0x94], 1
jmp 0x4664fb
push ebx
mov esi, str.Codec_Register_Get_Set_Command_not_Test_
call fcn.00468450
push ebx
mov esi, str.Codec_Register_Default_Parameter__not_Test_
call fcn.00468450
push ebx
mov esi, str.HD_Codec_Configuration_Byte_not_Test_
call fcn.00468450
cmp dword [0x4b9e0c], edi
je 0x4664fb
push ebx
mov esi, str.ALC269VB_Class_D_overcurrent_and_phase_check_not_Test_
call fcn.00468450
cmp dword [ebx + 0x314], edi
jne 0x466552
cmp dword [ebx + 0x2f4], edi
jne 0x466552
cmp dword [ebx + 0x2f8], edi
jne 0x466552
cmp dword [ebx + 0x2fc], edi
jne 0x466552
cmp dword [ebx + 0x300], edi
jne 0x466552
cmp dword [ebx + 0x304], edi
jne 0x466552
cmp dword [ebx + 0x308], edi
jne 0x466552
cmp dword [ebx + 0x30c], edi
jne 0x466552
cmp dword [ebx + 0x310], edi
jne 0x466552
cmp dword [ebx + 0x3c8], edi
jne 0x466552
mov esi, str.JD_not_Test_
jmp 0x4665bf
mov dword [ebx + 0x98], edi
mov eax, dword [0x4b31e4]
cmp eax, edi
jle 0x4665aa
mov edi, 1
cmp eax, edi
jl 0x4665aa
lea ebx, [ebx]
mov ecx, dword [edi*4 + 0x4b350c]
push ecx
push str.Fail_Widge_lx_JD_Test_
lea edx, [esp + 0x2c]
call fcn.00409950
add esp, 8
push ebx
lea esi, [esp + 0x28]
call fcn.00468450
mov ecx, esi
push 0
mov esi, ebx
call fcn.00468240
mov eax, dword [0x4b31e4]
add edi, 1
cmp edi, eax
jle 0x466570
xor edi, edi
cmp eax, edi
jne 0x4665c5
mov dword [ebx + 0x98], 1
mov esi, str.Pass_JD_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x318], edi
je 0x466649
mov dword [ebx + 0xa0], edi
mov eax, dword [0x4b31d8]
cmp eax, edi
jle 0x466632
mov edi, 1
cmp eax, edi
jl 0x466632
jmp 0x4665f0
mov edx, dword [edi*4 + 0x4b31ec]
mov eax, dword [edi*4 + 0x4b323c]
push edx
push eax
push str.Fail_OUTPORT_lx_INPORT_lx_Playback_Recording_test_
lea edx, [esp + 0x30]
call fcn.00409950
add esp, 0xc
push ebx
lea esi, [esp + 0x28]
call fcn.00468450
mov ecx, esi
push 0
mov esi, ebx
call fcn.00468240
mov eax, dword [0x4b31d8]
add edi, 1
cmp edi, eax
jle 0x4665f0
xor edi, edi
cmp eax, edi
jne 0x466654
mov dword [ebx + 0xa0], 1
mov esi, str.Pass_Playback_Recording_Test_
jmp 0x46664e
mov esi, str.Playback_Recording_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x358], edi
je 0x4666d7
mov dword [ebx + 0xa4], edi
mov eax, dword [0x4b31e8]
cmp eax, edi
jle 0x4666c2
mov edi, 1
cmp eax, edi
jl 0x4666c2
jmp 0x466680
mov ecx, dword [edi*4 + 0x4b341c]
mov edx, dword [edi*4 + 0x4b33cc]
push ecx
push edx
push str.Fail_OUTPORT_lx_INPORT_lx_THDN_test_
lea edx, [esp + 0x30]
call fcn.00409950
add esp, 0xc
push ebx
lea esi, [esp + 0x28]
call fcn.00468450
mov ecx, esi
push 0
mov esi, ebx
call fcn.00468240
mov eax, dword [0x4b31e8]
add edi, 1
cmp edi, eax
jle 0x466680
test eax, eax
jne 0x4666e2
mov dword [ebx + 0xa4], 1
mov esi, str.Pass_THDN_Test_
jmp 0x4666dc
mov esi, str.THDN_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x31c], 0
je 0x46675f
mov dword [ebx + 0xa8], 0
mov eax, dword [0x4b31dc]
test eax, eax
jle 0x46674c
mov edi, 1
cmp eax, edi
jl 0x46674a
jmp 0x466710
mov eax, dword [edi*4 + 0x4b328c]
push eax
push str.Fail_INPORT_lx_L_R_Channel_Short_Test_
lea edx, [esp + 0x2c]
call fcn.00409950
add esp, 8
push ebx
lea esi, [esp + 0x28]
call fcn.00468450
mov ecx, esi
push 0
mov esi, ebx
call fcn.00468240
mov eax, dword [0x4b31dc]
add edi, 1
cmp edi, eax
jle 0x466710
test eax, eax
jne 0x46676a
mov dword [ebx + 0xa8], 1
mov esi, str.Pass_L_R_Channel_Short_Test_
jmp 0x466764
mov esi, str.L_R_Channel_Short_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x320], 0
je 0x4667e7
mov dword [ebx + 0xac], 0
mov eax, dword [0x4b31e0]
test eax, eax
jle 0x4667ca
mov edi, 1
cmp eax, edi
jl 0x4667ca
nop
mov ecx, dword [edi*4 + 0x4b332c]
push ecx
push str.Fail_INPORT_lx_Mute_Test_
lea edx, [esp + 0x2c]
call fcn.00409950
add esp, 8
push ebx
lea esi, [esp + 0x28]
call fcn.00468450
mov ecx, esi
push 0
mov esi, ebx
call fcn.00468240
mov eax, dword [0x4b31e0]
add edi, 1
cmp edi, eax
jle 0x466790
xor edi, edi
cmp eax, edi
jne 0x4667f4
push ebx
mov esi, str.Pass_Mute_Test_
mov dword [ebx + 0xac], 1
call fcn.00468450
jmp 0x4667f4
push ebx
mov esi, str.Mute_not_Test_
call fcn.00468450
xor edi, edi
cmp dword [ebx + 0x3b8], edi
je 0x466848
cmp dword [0x4b9f48], edi
mov dword [ebx + 0xb4], edi
je 0x466812
cmp dword [0x4b9f44], edi
jne 0x466827
push ebx
mov esi, str.Fail_GHS_Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [0x4b9f48], edi
je 0x466853
cmp dword [0x4b9f44], edi
je 0x466853
mov dword [ebx + 0xb4], 1
mov esi, str.Pass_GHS_Test_
jmp 0x46684d
mov esi, str.GHS_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x3bc], edi
je 0x466897
cmp dword [0x4b9f20], edi
mov dword [ebx + 0xb8], edi
jne 0x466886
push ebx
mov esi, str.Fail_Vref1_Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [0x4b9f20], edi
je 0x4668a2
mov dword [ebx + 0xb8], 1
mov esi, str.Pass_Vref1_Test_
jmp 0x46689c
mov esi, str.Vref1_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x3c0], edi
je 0x4668e6
cmp dword [0x4b9f1c], edi
mov dword [ebx + 0xbc], edi
jne 0x4668d5
push ebx
mov esi, str.Fail_Vref2_Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [0x4b9f1c], edi
je 0x4668f1
mov dword [ebx + 0xbc], 1
mov esi, str.Pass_Vref2_Test_
jmp 0x4668eb
mov esi, str.Vref2_not_Test_
push ebx
call fcn.00468450
cmp dword [ebx + 0x3c4], edi
je 0x466935
cmp dword [0x4b9f18], edi
mov dword [ebx + 0xc0], edi
jne 0x466924
push ebx
mov esi, str.Fail_Vref3_Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [0x4b9f18], edi
je 0x466940
mov dword [ebx + 0xc0], 1
mov esi, str.Pass_Vref3_Test_
jmp 0x46693a
mov esi, str.Vref3_not_Test_
push ebx
call fcn.00468450
mov eax, dword [ebx + 0x33c]
cmp eax, edi
jne 0x46695c
cmp dword [ebx + 0x340], edi
jne 0x46695c
mov esi, str.SPDIFIN_OUT_48K__not_Test_
jmp 0x4669f6
cmp dword [ebx + 0x1e4], edi
mov dword [ebx + 0xb0], edi
jne 0x46699a
cmp eax, edi
je 0x46697d
push ebx
mov esi, str.Fail_SPDIFIN_OUT_48K__Test_
call fcn.00468450
mov ecx, esi
jmp 0x466992
cmp dword [ebx + 0x340], edi
je 0x46699a
push ebx
mov esi, str.Fail_SPDIFIN_OUT2_48K__Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
cmp dword [ebx + 0x1e0], edi
jne 0x4669d6
cmp dword [ebx + 0x33c], edi
je 0x4669b9
push ebx
mov esi, str.Fail_SPDIFIN_OUT_44K__Test_
call fcn.00468450
mov ecx, esi
jmp 0x4669ce
cmp dword [ebx + 0x340], edi
je 0x4669d6
push ebx
mov esi, str.Fail_SPDIFIN_OUT2_44K__Test_
call fcn.00468450
mov ecx, esi
push edi
mov esi, ebx
call fcn.00468240
mov eax, 1
cmp dword [ebx + 0x1e4], eax
jne 0x4669fc
cmp dword [ebx + 0x1e0], eax
jne 0x4669fc
mov dword [ebx + 0xb0], eax
mov esi, str.Pass_SPDIFIN_OUT_44K__and_SPDIFIN_OUT_48K__Test_
push ebx
call fcn.00468450
cmp dword [0x4b9ec8], edi
je 0x466a0c
cmp dword [0x4b9ecc], edi
jne 0x466a7e
push ebx
mov esi, str.WAVE_IN_OUT_Device_fail_
call fcn.00468450
push edi
mov ecx, str.WAVE_IN_OUT_Device_fail__
mov esi, ebx
call fcn.00468240
push str.log_
lea edx, [esp + 0x14]
push 0x4ba3a0
push edx
call fcn.00421440
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
add esp, 0xc
push eax
call esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466a66
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [0x4b9fc0]
push ecx
call fcn.00483dd6
mov edx, dword [0x4ba3a0]
add esp, 4
push edx
call esi
cmp dword [ebx + 0x94], edi
je 0x466b25
cmp dword [ebx + 0x98], edi
je 0x466b25
cmp dword [ebx + 0x9c], edi
je 0x466b25
cmp dword [ebx + 0xa0], edi
je 0x466b25
cmp dword [ebx + 0xa4], edi
je 0x466b25
cmp dword [ebx + 0xa8], edi
je 0x466b25
cmp dword [ebx + 0xac], edi
je 0x466b25
cmp dword [ebx + 0xb0], edi
je 0x466b25
cmp dword [ebx + 0xb4], edi
je 0x466b25
cmp dword [ebx + 0xb8], edi
je 0x466b25
cmp dword [ebx + 0xbc], edi
je 0x466b25
cmp dword [ebx + 0xc0], edi
je 0x466b25
cmp dword [0x4b9ec8], edi
je 0x466b25
cmp dword [0x4b9ecc], edi
je 0x466b25
push ebx
mov esi, str.ALL_PASS_____
call fcn.00468450
push ebx
mov esi, 0x4a4459
call fcn.00468450
push ebx
call fcn.00468450
push edi
mov ecx, str.ALL_PASS_____
mov esi, ebx
call fcn.00468240
jmp 0x466b36
push ebx
mov esi, 0x4a4459
call fcn.00468450
push ebx
call fcn.00468450
push edi
mov ecx, 0x4a4459
mov esi, ebx
call fcn.00468240
push edi
mov ecx, 0x4a4459
call fcn.00468240
cmp dword [ebx + 0x3b8], edi
je 0x467c4c
cmp dword [0x4b9e40], 0
je 0x466e19
cmp dword [0x4b9edc], 1
jne 0x466bee
mov eax, dword [ebx + 0x244]
or eax, 0x20150000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
xor esi, esi
push 0x220414
mov edi, 0x4ba3b0
mov dword [esp + 0x24], esi
call fcn.00427290
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebx + 0x23c]
or eax, 0x20c40000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
push 0x220414
mov dword [esp + 0x24], esi
call fcn.00427290
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebx + 0x240]
or eax, 0x20c30000
jmp 0x4679a5
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050015
test edx, 0x400000
je 0x466c33
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466c52
test edx, 0x800000
je 0x466c47
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466c52
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x244]
test edx, 0x400000
je 0x466c9d
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466cbc
test edx, 0x800000
je 0x466cb1
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466cbc
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f4
call edi
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x20500c4
test edx, 0x400000
je 0x466d0e
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466d2d
test edx, 0x800000
je 0x466d22
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466d2d
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x23c]
test edx, 0x400000
je 0x466d78
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466d97
test edx, 0x800000
je 0x466d8c
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466d97
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0x64
call edi
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x20500c3
test edx, 0x400000
je 0x466de0
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466dff
test edx, 0x800000
je 0x466df4
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466dff
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x240]
jmp 0x467bf7
cmp dword [0x4b9e48], 0
je 0x466f89
cmp dword [0x4b9e54], 0
jne 0x466f30
cmp dword [0x4b9edc], 1
jne 0x466f3d
mov eax, dword [ebx + 0x250]
or eax, 0x20460000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
xor esi, esi
push 0x220414
mov edi, 0x4ba3b0
mov dword [esp + 0x24], esi
call fcn.00427290
push 0x1f4
jmp 0x467994
test edx, 0x800000
je 0x466e8f
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x466e9a
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x250]
test edx, 0x400000
je 0x466ef3
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x467b7e
test edx, 0x800000
je 0x466f15
mov ecx, 0x4ba3b0
call fcn.00425b40
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x467b7e
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x467b7e
cmp dword [0x4b9edc], 1
je 0x466e40
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050046
test edx, 0x400000
je 0x466e7b
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x466e9a
cmp dword [0x4b9e58], 0
je 0x467142
cmp dword [0x4b9edc], 1
jne 0x466feb
mov eax, dword [ebx + 0x248]
or eax, 0x20500000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
xor esi, esi
push 0x220414
mov edi, 0x4ba3b0
mov dword [esp + 0x24], esi
call fcn.00427290
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebx + 0x24c]
or eax, 0x204f0000
jmp 0x4679a5
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050050
test edx, 0x400000
je 0x467030
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46704f
test edx, 0x800000
je 0x467044
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46704f
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x248]
test edx, 0x400000
je 0x46709a
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4670b9
test edx, 0x800000
je 0x4670ae
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4670b9
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205004f
test edx, 0x400000
je 0x467109
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467128
test edx, 0x800000
je 0x46711d
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467128
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x24c]
jmp 0x467bf7
cmp dword [0x4b9e4c], 0
je 0x4676b9
cmp dword [0x4b9edc], 1
je 0x466f9f
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205004a
test edx, 0x400000
je 0x4671a1
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4671c0
test edx, 0x800000
je 0x4671b5
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4671c0
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x26c]
test edx, 0x400000
je 0x46720b
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46722a
test edx, 0x800000
je 0x46721f
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46722a
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050045
test edx, 0x400000
je 0x46727a
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467299
test edx, 0x800000
je 0x46728e
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467299
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x254]
test edx, 0x400000
je 0x4672e4
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467303
test edx, 0x800000
je 0x4672f8
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467303
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050010
test edx, 0x400000
je 0x467348
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467367
test edx, 0x800000
je 0x46735c
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467367
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x258]
test edx, 0x400000
je 0x4673b2
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4673d1
test edx, 0x800000
je 0x4673c6
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4673d1
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050076
test edx, 0x400000
je 0x467416
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467435
test edx, 0x800000
je 0x46742a
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467435
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x25c]
test edx, 0x400000
je 0x467480
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46749f
test edx, 0x800000
je 0x467494
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46749f
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205006c
test edx, 0x400000
je 0x4674e4
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467503
test edx, 0x800000
je 0x4674f8
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467503
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x260]
test edx, 0x400000
je 0x46754e
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46756d
test edx, 0x800000
je 0x467562
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46756d
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205006b
test edx, 0x400000
je 0x4675b2
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4675d1
test edx, 0x800000
je 0x4675c6
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4675d1
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x264]
test edx, 0x400000
je 0x46761c
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46763b
test edx, 0x800000
je 0x467630
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46763b
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050018
test edx, 0x400000
je 0x467680
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46769f
test edx, 0x800000
je 0x467694
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46769f
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x268]
jmp 0x467bf7
cmp dword [0x4b9e6c], 0
jne 0x46791c
cmp dword [0x4b9e78], 0
jne 0x46791c
cmp dword [0x4b9e7c], 0
jne 0x46789c
cmp dword [0x4b9e90], 0
jne 0x46789c
cmp dword [0x4b9e9c], 0
jne 0x467703
cmp dword [0x4b9ea0], 0
je 0x467c4c
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x26c]
mov ecx, 0x4ba3b0
call fcn.00425750
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x64
call esi
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2050045
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x254]
mov ecx, 0x4ba3b0
call fcn.00425750
push 0x64
call esi
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205003a
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x284]
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
mov eax, 0xc00
mov cl, 0x20
call fcn.00409b10
or eax, 0x8000
mov dword [ebx + 0x238], eax
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x238]
mov ecx, 0x4ba3b0
call fcn.00425750
push 0x12c
call esi
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
mov eax, 0xc00
mov cl, 0x20
call fcn.00409b10
and eax, 0x7fff
mov dword [ebx + 0x238], eax
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x238]
mov ecx, 0x4ba3b0
call fcn.00425750
push 0x12c
call esi
jmp 0x467c4c
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x205004a
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x26c]
mov ecx, 0x4ba3b0
call fcn.00425750
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2050045
mov ecx, 0x4ba3b0
call fcn.00425750
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x254]
mov ecx, 0x4ba3b0
call fcn.00425750
jmp 0x467c4c
cmp dword [0x4b9edc], 1
jne 0x4679ce
mov eax, dword [ebx + 0x270]
or eax, 0x20670000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
xor esi, esi
push 0x220414
mov edi, 0x4ba3b0
mov dword [esp + 0x24], esi
call fcn.00427290
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebx + 0x26c]
or eax, 0x204a0000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
push 0x220414
mov dword [esp + 0x24], esi
call fcn.00427290
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebx + 0x254]
or eax, 0x20450000
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
push edx
push 0x220414
mov edi, 0x4ba3b0
mov dword [esp + 0x24], esi
call fcn.00427290
jmp 0x467c4c
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050067
test edx, 0x400000
je 0x467a13
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467a32
test edx, 0x800000
je 0x467a27
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467a32
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x270]
test edx, 0x400000
je 0x467a7d
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467a9c
test edx, 0x800000
je 0x467a91
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467a9c
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xc8
call edi
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205004a
test edx, 0x400000
je 0x467aee
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467b0d
test edx, 0x800000
je 0x467b02
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467b0d
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x26c]
test edx, 0x400000
je 0x467b58
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467b77
test edx, 0x800000
je 0x467b6c
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467b77
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0xc8
call edi
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050045
test edx, 0x400000
je 0x467bc3
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467be2
test edx, 0x800000
je 0x467bd7
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467be2
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
movzx eax, byte [0x4ba6c0]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x254]
mov ecx, dword [0x4c6e74]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
test edx, 0x400000
je 0x467c2d
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467c4c
test edx, 0x800000
je 0x467c41
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467c4c
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
cmp dword [0x4b9e44], 0
je 0x467d27
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x205001a
test edx, 0x400000
je 0x467c9e
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467cbd
test edx, 0x800000
je 0x467cb2
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467cbd
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x278]
test edx, 0x400000
je 0x467d08
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467d27
test edx, 0x800000
je 0x467d1c
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467d27
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push 0
push str.net_start_RtkAudioUniversalService
call dword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
or eax, 0x5570881
test edx, 0x400000
je 0x467d79
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467d98
test edx, 0x800000
je 0x467d8d
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467d98
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
cmp dword [0x4b9e54], 0
jne 0x467dbf
mov eax, dword [0x4b9eb4]
cmp eax, 0x10ec0255
je 0x467dbf
cmp eax, 0x10ec0256
je 0x467dbf
cmp eax, 0x10ec0274
jne 0x467f5b
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
or eax, 0x5750003
test edx, 0x400000
je 0x467e04
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467e23
test edx, 0x800000
je 0x467e18
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467e23
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
or eax, dword [ebx + 0x298]
or eax, 0x5740000
test edx, 0x400000
je 0x467e6e
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467e8d
test edx, 0x800000
je 0x467e82
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467e8d
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
or eax, 0x5750005
test edx, 0x400000
je 0x467ed2
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467ef1
test edx, 0x800000
je 0x467ee6
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467ef1
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
or eax, dword [ebx + 0x29c]
or eax, 0x5740000
test edx, 0x400000
je 0x467f3c
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467f5b
test edx, 0x800000
je 0x467f50
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467f5b
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
cmp dword [0x4b9e88], 0
je 0x46810c
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050058
test edx, 0x400000
je 0x467fad
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x467fcc
test edx, 0x800000
je 0x467fc1
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x467fcc
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
movzx eax, byte [0x4ba6c0]
push 0x20
push eax
xor dl, dl
mov eax, 0xc00
call fcn.00409970
test eax, eax
je 0x468020
mov ecx, dword [0x4c6e74]
imul ecx, ecx, 0x334
mov eax, dword [ecx + 0x4bab00]
test eax, 0x400000
je 0x468006
mov eax, dword [0x4c6e98]
jmp 0x468033
test eax, 0x800000
je 0x468014
mov eax, dword [0x4c6e94]
jmp 0x468033
mov esi, 0x4ba3b0
call fcn.004259c0
jmp 0x468033
push 0x12
push str._Cannt_Send_Verb
mov ecx, 0x4ba2e0
call fcn.004160a0
xor eax, eax
or eax, 0x8000
mov dword [ebx + 0x2a0], eax
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2050058
test edx, 0x400000
je 0x468083
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4680a2
test edx, 0x800000
je 0x468097
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4680a2
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x2040000
or eax, dword [ebx + 0x2a0]
test edx, 0x400000
je 0x4680ed
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46810c
test edx, 0x800000
je 0x468101
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46810c
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
cmp dword [0x4b9e98], 0
je 0x4681e7
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x5a50001
test edx, 0x400000
je 0x46815e
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x46817d
test edx, 0x800000
je 0x468172
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x46817d
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
mov ecx, dword [0x4c6e74]
movzx eax, byte [0x4ba6c0]
imul ecx, ecx, 0x334
mov edx, dword [ecx + 0x4bab00]
shl eax, 0x1c
add eax, 0x5a40000
or eax, dword [ebx + 0x280]
test edx, 0x400000
je 0x4681c8
mov ecx, dword [ecx + 0x4bab04]
and eax, 0xfffffff
shl ecx, 0x1c
or ecx, eax
mov eax, 0x4ba3b0
call fcn.00427b10
jmp 0x4681e7
test edx, 0x800000
je 0x4681dc
mov ecx, 0x4ba3b0
call fcn.00425b40
jmp 0x4681e7
push eax
mov esi, 0x4ba3b0
call fcn.004257a0
push ebx
call fcn.004734f0
mov dword [esp + 0x80], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x468218
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.00483e52
mov esp, ebp
pop ebp
ret