Function at 0x41e21f
Capabilities:
Check if file exists
Get memory capacity
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2610
call fcn.00430730
push esi
push edi
mov ecx, 0xd
mov esi, str.DumpAndCheckServerVersion
lea edi, [ebp - 0x470]
rep movsd dword es:[edi], dword [esi]
mov ax, word [0x449534]
mov word [ebp - 0x84], ax
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x82]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0x44953c]
mov word [ebp - 0x130c], cx
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x130a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0x449544]
mov word [ebp - 0x1204], dx
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x1202]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0x44954c]
mov word [ebp - 0xd80], ax
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0xd7e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0x449554]
mov word [ebp - 0x1004], cx
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x1002]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0x44955c]
mov word [ebp - 0xf04], dx
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0xf02]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0x449564]
mov word [ebp - 0x10c], ax
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x10a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0x44956c]
mov word [ebp - 0x878], cx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x876]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0x449574]
mov word [ebp - 0xc80], dx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xc7e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0x44957c]
mov word [ebp - 0x246c], ax
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x246a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0x449584]
mov word [ebp - 0xe04], cx
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0xe02]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0x44958c]
mov word [ebp - 0x25f8], dx
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x25f6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0x449594]
mov word [ebp - 0x24f0], ax
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x24ee]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0x44959c]
mov word [ebp - 0x23ec], cx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x23ea]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0x4495a4]
mov word [ebp - 0x238], dx
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x236]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0x4495ac]
mov word [ebp - 0x43c], ax
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x43a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x1fec], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x1fe8], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0xd84], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x1fe4], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x2470], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 4], 0
push 0x40
lea ecx, [ebp - 0x84]
push ecx
push 0x17
mov edx, dword [0x4492ac]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
mov dword [ebp - 0x12c], 0x20
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
cmp dword [ebp - 0x124], 0
jne 0x41e4f5
mov dword [ebp - 0x124], 0xffffffff
mov ecx, dword [ebp - 0x124]
shr ecx, 0x14
mov eax, dword [ebp - 0x124]
xor edx, edx
mov esi, 0x100000
div esi
neg edx
sbb edx, edx
neg edx
add ecx, edx
mov dword [ebp - 0x880], ecx
mov dword [ebp - 0x1fe0], 0x114
lea edx, [ebp - 0x1fe0]
push edx
call dword [sym.imp.SQLUNIRL.dll__GetVersionEx_4]
test eax, eax
je 0x41e5c1
lea eax, [ebp - 0x1fcc]
push eax
call fcn.0042fab9
add esp, 4
cmp dword [0x448b1c], 0
je 0x41e564
mov ecx, dword [ebp - 0x1fd4]
and ecx, 0xffff
mov dword [ebp - 0x1fd4], ecx
cmp dword [ebp - 0x1fd0], 2
jne 0x41e579
mov dword [ebp - 0x25fc], 0x43e9dc
jmp 0x41e583
mov dword [ebp - 0x25fc], 0x43e9e4
lea edx, [ebp - 0x1fcc]
push edx
mov eax, dword [ebp - 0x1fd4]
push eax
mov ecx, dword [ebp - 0x1fd8]
push ecx
mov edx, dword [ebp - 0x1fdc]
push edx
mov eax, dword [ebp - 0x25fc]
push eax
push str.Windows__s__ld._ld___ld___s
lea ecx, [ebp - 0x1204]
push ecx
mov edx, dword [0x449ba0]
call dword [edx + 0x4cc]
add esp, 0x1c
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
push 0x43ea24
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
push str.unicode
lea eax, [ebp - 0x246c]
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
cmp dword [0x448b20], 0
je 0x41e628
push 0x40
lea ecx, [ebp - 0xe04]
push ecx
push 0x16e
mov edx, dword [0x4492ac]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
jmp 0x41e643
push 0x40
lea eax, [ebp - 0xe04]
push eax
push 0x16f
mov ecx, dword [0x4492ac]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
mov edx, dword [0x448b4c]
and edx, 1
test edx, edx
jne 0x41e85f
push 0x100
lea eax, [ebp - 0x43c]
push eax
call fcn.00421dc6
add esp, 8
lea ecx, [ebp - 0x43c]
push ecx
push 0
push 0x100000
mov edx, dword [0x449ba0]
call dword [edx + 0x350]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x41e7a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1fe4], eax
cmp dword [ebp - 0x1fe4], 2
jne 0x41e742
cmp dword [0x448b1c], 0
jne 0x41e6d3
push 0
push 0
push 0
push 4
call fcn.0042f186
add esp, 0x10
mov eax, dword [0x4492a4]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x15e
push 0
push 4
call fcn.0041b8d1
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x43c]
push ecx
call fcn.00421dc6
add esp, 8
lea edx, [ebp - 0x43c]
push edx
push 0
push 0x100000
mov eax, dword [0x449ba0]
call dword [eax + 0x350]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x41e740
push 0x1f4
mov ecx, dword [0x44b940]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x41e73e
jmp 0x41f032
jmp 0x41e6f8
jmp 0x41e7a3
push 0x400
lea edx, [ebp - 0x23ec]
push edx
mov eax, dword [ebp - 0x1fe4]
push eax
call fcn.0042f8f7
add esp, 0xc
push 0x200
lea ecx, [ebp - 0xc80]
push ecx
push 0x17d
mov edx, dword [0x4492ac]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0xc80]
push ecx
lea edx, [ebp - 0x878]
push edx
mov eax, dword [0x449ba0]
call dword [eax + 0x4cc]
add esp, 0xc
jmp 0x41f032
cmp dword [ebp - 0x130], 0
je 0x41e7f6
push 0
mov ecx, dword [ebp - 0x130]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41e7f6
push 0x189
push 0
push 4
call fcn.0041b8d1
add esp, 0xc
cmp dword [0x448b1c], 0
jne 0x41e7f6
push 0
push 0
push 0
push 4
call fcn.0042f186
add esp, 0x10
mov edx, dword [0x4492a4]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [ebp - 0x130], 0
je 0x41e82f
push 0
mov eax, dword [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41e82f
push 0x1f4
mov ecx, dword [0x44b940]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x41e82d
jmp 0x41e82f
jmp 0x41e7f6
cmp dword [ebp - 0x130], 0
je 0x41e845
mov edx, dword [ebp - 0x130]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
mov eax, dword [0x44b940]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x41e85f
jmp 0x41f032
push str.SQLAgent___Initial_Boot_Probe
lea ecx, [ebp - 0x1ecc]
push ecx
call fcn.00407820
add esp, 8
push 0
push 1
lea edx, [ebp - 0x1ecc]
push edx
call fcn.004078f6
add esp, 0xc
test eax, eax
je 0x41ebad
push 0x43ea78
lea eax, [ebp - 0x1ecc]
push eax
call fcn.00408148
add esp, 8
test eax, eax
jne 0x41e8f9
lea ecx, [ebp - 0x1ecc]
push ecx
call dword [sym.imp.SQLSVC.dll_QSQLLogoff]
add esp, 4
push 0x200
lea edx, [ebp - 0xc80]
push edx
push 0x15f
mov eax, dword [0x4492ac]
push eax
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43ea84
lea ecx, [ebp - 0xc80]
push ecx
lea edx, [ebp - 0x878]
push edx
mov eax, dword [0x449ba0]
call dword [eax + 0x4cc]
add esp, 0xc
jmp 0x41f032
lea ecx, [ebp - 0x1fec]
push ecx
push 0x80
push 0x4493c4
push 0x12
push 2
push 1
lea edx, [ebp - 0x1ecc]
push edx
call dword [sym.imp.SQLSVC.dll_QSQLGetProperty]
add esp, 0x1c
test eax, eax
jne 0x41e9c4
push 0x4493c4
lea eax, [ebp - 0xd80]
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
push 0x100
lea ecx, [ebp - 0x1004]
push ecx
push 0x4495b0
push 0x43ea90
lea edx, [ebp - 0xd80]
push edx
call fcn.0042f530
add esp, 0x14
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.MSVCRT.dll__wtol]
add esp, 4
mov dword [0x4494c4], eax
mov eax, dword [0x4494c4]
cdq
mov ecx, 0x2710
idiv ecx
push edx
mov eax, dword [0x4494c4]
cdq
mov ecx, 0xf4240
idiv ecx
mov eax, edx
cdq
mov ecx, 0x2710
idiv ecx
push eax
mov eax, dword [0x4494c4]
cdq
mov ecx, 0xf4240
idiv ecx
push eax
push 0x43ea94
push 0x4493c4
mov edx, dword [0x449ba0]
call dword [edx + 0x4cc]
add esp, 0x14
lea eax, [ebp - 0x1fec]
push eax
push 0x80
push 0x4492c4
push 7
push 2
push 1
lea ecx, [ebp - 0x1ecc]
push ecx
call dword [sym.imp.SQLSVC.dll_QSQLGetProperty]
add esp, 0x1c
test eax, eax
jne 0x41ea93
push 0x4492c4
lea edx, [ebp - 0xd80]
push edx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
push 0x100
lea eax, [ebp - 0x1004]
push eax
push 0x4495b4
push 0x43eab4
lea ecx, [ebp - 0xd80]
push ecx
call fcn.0042f530
add esp, 0x14
lea edx, [ebp - 0x1004]
push edx
call dword [sym.imp.MSVCRT.dll__wtol]
add esp, 4
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x2710
idiv ecx
push edx
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0xf4240
idiv ecx
mov eax, edx
cdq
mov ecx, 0x2710
idiv ecx
push eax
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0xf4240
idiv ecx
push eax
push 0x43eab8
push 0x4492c4
mov edx, dword [0x449ba0]
call dword [edx + 0x4cc]
add esp, 0x14
lea eax, [ebp - 0x1fec]
push eax
push 0x80
lea ecx, [ebp - 0xf04]
push ecx
push 0x4af
push 2
push 1
lea edx, [ebp - 0x1ecc]
push edx
call dword [sym.imp.SQLSVC.dll_QSQLGetProperty]
add esp, 0x1c
push 0
push 0
lea eax, [ebp - 0x130c]
push eax
lea ecx, [ebp - 0x1fe8]
push ecx
push 0
push 0
lea edx, [ebp - 0x1ecc]
push edx
call fcn.00407ee1
add esp, 0x1c
push 0x448b48
lea eax, [ebp - 0x238]
push eax
push 0x4492c0
push 0x4492bc
lea ecx, [ebp - 0x25f8]
push ecx
lea edx, [ebp - 4]
push edx
push 0x448b30
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x478]
push ecx
lea edx, [ebp - 0xd84]
push edx
lea eax, [ebp - 0x1ecc]
push eax
call fcn.0040826b
add esp, 0x2c
cmp dword [0x448b1c], 0
jne 0x41eb4c
cmp dword [0x4492bc], 8
jl 0x41eb4c
mov ecx, dword [0x4492bc]
mov dword [0x44b924], ecx
lea edx, [ebp - 0x470]
push edx
push 0
push 0
push 1
push 1
push str.IF__NOT_EXISTS__SELECT__FROM_master.dbo.sysdatabases_WHERE__name__Nmsdb__AND__status__8__8____EXECUTE_master.dbo.sp_dboption_Nmsdb__Ntrunc._log_on_chkpt.__true
lea eax, [ebp - 0x1ecc]
push eax
call fcn.00407c09
add esp, 0x1c
cmp dword [0x43e354], 0
jne 0x41eb9b
lea ecx, [ebp - 0x470]
push ecx
push 0
push 0
push 1
push 1
push str.update_msdb.dbo.sysalerts_set_event_source__case_when__serverproperty_instancename__is_null__then_NMSSQLSERVER_else_NMSSQL___convert_nvarchar_64___serverproperty_instancename___end
lea edx, [ebp - 0x1ecc]
push edx
call fcn.00407c09
add esp, 0x1c
lea eax, [ebp - 0x1ecc]
push eax
call dword [sym.imp.SQLSVC.dll_QSQLLogoff]
add esp, 4
jmp 0x41ebf5
push 0x200
lea ecx, [ebp - 0xc80]
push ecx
push 0x63
mov edx, dword [0x4492ac]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43edac
lea eax, [ebp - 0x1eb8]
push eax
lea ecx, [ebp - 0xc80]
push ecx
lea edx, [ebp - 0x878]
push edx
mov eax, dword [0x449ba0]
call dword [eax + 0x4cc]
add esp, 0x10
jmp 0x41f032
cmp dword [0x448b1c], 0
je 0x41ec0a
mov dword [ebp - 0x2600], 0x43edcc
jmp 0x41ec14
mov dword [ebp - 0x2600], 0x43edd4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, dword [ebp - 0x2600]
push ecx
lea edx, [ebp - 0x24f0]
push edx
mov eax, dword [0x449ba0]
call dword [eax + 0x4cc]
add esp, 0xc
lea ecx, [ebp - 0x24f0]
push ecx
lea edx, [ebp - 0xe04]
push edx
lea eax, [ebp - 0x246c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
push str.8.00.194
push 0x43edf0
push 0x64
push 0
push 4
call fcn.0041b8d1
add esp, 0x24
xor edx, edx
mov dx, word [0x4493c4]
test edx, edx
je 0x41ec84
mov dword [ebp - 0x2604], 0x4493c4
jmp 0x41ec90
lea eax, [ebp - 0x84]
mov dword [ebp - 0x2604], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x2604]
push edx
lea eax, [ebp - 0x25f8]
push eax
push 0x65
push 0
push 4
call fcn.0041b8d1
add esp, 0x18
xor ecx, ecx
mov cx, word [0x4492c4]
test ecx, ecx
je 0x41ecc9
mov dword [ebp - 0x2608], 0x4492c4
jmp 0x41ecd5
lea edx, [ebp - 0x84]
mov dword [ebp - 0x2608], edx
mov eax, dword [ebp - 0x2608]
push eax
push 0x66
push 0
push 4
call fcn.0041b8d1
add esp, 0x10
mov ecx, dword [ebp - 0xf04]
and ecx, 0xffff
test ecx, ecx
je 0x41ed12
lea edx, [ebp - 0xf04]
push edx
call dword [sym.imp.MSVCRT.dll__wcsupr]
add esp, 4
mov dword [ebp - 0x260c], eax
jmp 0x41ed1e
lea eax, [ebp - 0x84]
mov dword [ebp - 0x260c], eax
push 0x449e64
mov ecx, dword [ebp - 0x260c]
push ecx
push 0x67
push 0
push 4
call fcn.0041b8d1
add esp, 0x14
mov edx, dword [ebp - 0x880]
push edx
mov eax, dword [0x448b50]
push eax
push 0x136
push 0
push 4
call fcn.0041b8d1
add esp, 0x14
lea ecx, [ebp - 0x1204]
push ecx
push 0x448d5c
push 0x153
push 0
push 4
call fcn.0041b8d1
add esp, 0x14
cmp dword [ebp - 0x1fe8], 0
jne 0x41edee
push 0x200
lea edx, [ebp - 0xc80]
push edx
push 0x69
mov eax, dword [0x4492ac]
push eax
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
mov ecx, dword [ebp - 0x130c]
and ecx, 0xffff
test ecx, ecx
je 0x41edb4
lea edx, [ebp - 0x130c]
mov dword [ebp - 0x2610], edx
jmp 0x41edc0
lea eax, [ebp - 0x84]
mov dword [ebp - 0x2610], eax
mov ecx, dword [ebp - 0x2610]
push ecx
push 0x43ee10
lea edx, [ebp - 0xc80]
push edx
lea eax, [ebp - 0x878]
push eax
mov ecx, dword [0x449ba0]
call dword [ecx + 0x4cc]
add esp, 0x10
jmp 0x41f032
cmp dword [ebp - 0x478], 0
je 0x41ee3f
push 0x200
lea edx, [ebp - 0xc80]
push edx
push 0xff
mov eax, dword [0x4492ac]
push eax
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43ee30
push 0x43ee3c
lea ecx, [ebp - 0xc80]
push ecx
lea edx, [ebp - 0x878]
push edx
mov eax, dword [0x449ba0]
call dword [eax + 0x4cc]
add esp, 0x10
jmp 0x41f032
cmp dword [ebp - 0xd84], 0
jne 0x41ee92
push 0x200
lea ecx, [ebp - 0xc80]
push ecx
push 0x183
mov edx, dword [0x4492ac]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43ee5c
push 0x43ee68
lea eax, [ebp - 0xc80]
push eax
lea ecx, [ebp - 0x878]
push ecx
mov edx, dword [0x449ba0]
call dword [edx + 0x4cc]
add esp, 0x10
jmp 0x41f032
cmp dword [ebp - 0x88], 0
jne 0x41eee5
push 0x200
lea eax, [ebp - 0xc80]
push eax
push 0x184
mov ecx, dword [0x4492ac]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43ee88
push 0x43ee94
lea edx, [ebp - 0xc80]
push edx
lea eax, [ebp - 0x878]
push eax
mov ecx, dword [0x449ba0]
call dword [ecx + 0x4cc]
add esp, 0x10
jmp 0x41f032
push str.MSSQLSERVER
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.MSVCRT.dll_wcscmp]
add esp, 8
test eax, eax
je 0x41ef4f
push 0x200
lea eax, [ebp - 0xc80]
push eax
push 0x197
mov ecx, dword [0x4492ac]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push str.MSSQLSERVER
lea edx, [ebp - 0x238]
push edx
push 0x43eeb4
lea eax, [ebp - 0xc80]
push eax
lea ecx, [ebp - 0x878]
push ecx
mov edx, dword [0x449ba0]
call dword [edx + 0x4cc]
add esp, 0x14
jmp 0x41f032
cmp dword [0x44b3b0], 0
jne 0x41efe2
cmp dword [0x4494c4], 0
jne 0x41efa7
push 0x200
lea eax, [ebp - 0xc80]
push eax
push 0x6b
mov ecx, dword [0x4492ac]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
push 0x43eed4
lea edx, [ebp - 0xc80]
push edx
lea eax, [ebp - 0x878]
push eax
mov ecx, dword [0x449ba0]
call dword [ecx + 0x4cc]
add esp, 0xc
jmp 0x41f032
cmp dword [0x4494c4], 0x6c5660
jge 0x41efd6
push 0x43eef4
push 2
push 0x43eefc
push 2
push 4
push 0xc000006b
push 1
push 3
call fcn.0041b0dc
add esp, 0x20
jmp 0x41f032
mov dword [ebp - 0x23c], 1
jmp 0x41efec
mov dword [ebp - 0x23c], 1
cmp dword [ebp - 0x23c], 0
je 0x41f002
push 0x449e00
call fcn.0042fcb0
add esp, 4
cmp dword [0x448b1c], 0
jne 0x41f032
push 0x43ef1c
call fcn.0042f3c4
add esp, 4
test eax, eax
jne 0x41f032
push str.Messenger
push 0x16c
push 0
push 1
call fcn.0041b8d1
add esp, 0x10
cmp dword [ebp - 0x23c], 0
jne 0x41f07e
lea edx, [ebp - 0x878]
push edx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
test eax, eax
je 0x41f07e
push 0
lea eax, [ebp - 0x878]
push eax
push 1
call fcn.0041b8d1
add esp, 0xc
lea ecx, [ebp - 0x878]
push ecx
push 2
push 2
push 0x40000067
push 1
push 1
call fcn.0041b0dc
add esp, 0x18
push 0
mov edx, dword [0x44b940]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x41f098
xor eax, eax
jmp 0x41f09e
mov eax, dword [ebp - 0x23c]
pop edi
pop esi
mov esp, ebp
pop ebp
ret