Function at 0x43f7c0
Capabilities:
Get file version info
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d9e40
mov eax, dword fs:[0]
push eax
sub esp, 0xa64
mov eax, dword [0x65afd4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xa54], edi
mov byte [ebp - 0xa60], 0
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440e5a
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440e64
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa5c], eax
push 2
push 0x627008
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 4], 0
call fcn.004020e5
mov esi, dword [ebp - 0xa5c]
mov ecx, dword [edi]
push esi
push 0
push 0x1175e
call fcn.00417e80
or ebx, 0xffffffff
mov dword [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43f8a4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440e6b
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440e6b
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0xa40]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xa5c], eax
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440e72
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440e7c
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa40], eax
mov esi, 0x62b058
mov dword [ebp - 4], 2
test esi, 0xffff0000
jne 0x43f90e
movzx eax, si
lea ecx, [ebp - 0xa40]
push eax
call fcn.0040d540
jmp 0x43f9c3
mov edx, dword [ebp - 0xa40]
mov ecx, 1
sub esi, edx
sar esi, 1
mov eax, dword [edx - 8]
sub ecx, dword [edx - 4]
sub eax, 3
or eax, ecx
mov edi, dword [edx - 0xc]
jge 0x43f940
push 3
lea ecx, [ebp - 0xa40]
call fcn.00401fd8
mov edx, dword [ebp - 0xa40]
cmp esi, edi
ja 0x43f987
mov eax, dword [edx - 8]
lea ecx, [edx + esi*2]
test ecx, ecx
jne 0x43f960
call fcn.005b0142
mov dword [eax], 0x16
call fcn.005b0069
jmp 0x43f99a
add eax, eax
cmp eax, 6
jae 0x43f979
call fcn.005b0142
mov dword [eax], 0x22
call fcn.005b0069
jmp 0x43f99a
push 6
push ecx
push edx
call fcn.005acee0
add esp, 0xc
jmp 0x43f99a
push 3
push 0x62b058
push dword [edx - 8]
push edx
call fcn.004021b4
add esp, 0x10
mov eax, dword [ebp - 0xa40]
cmp dword [eax - 8], 3
jl 0x440f8e
mov edi, dword [ebp - 0xa54]
xor ecx, ecx
mov dword [eax - 0xc], 3
mov eax, dword [ebp - 0xa40]
mov word [eax + 6], cx
mov dword [ebp - 4], 3
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440e83
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440e8d
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0xa40]
mov dword [ebp - 4], 5
push eax
push 0
push 0x1175f
mov ecx, edi
call fcn.0045dea0
lea ecx, [ebp - 0xa40]
mov dword [ebp - 4], 0xffffffff
call fcn.00439360
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440e94
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440e9e
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0xa68], esi
mov dword [ebp - 4], 6
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440ea5
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440eaf
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea edi, [eax + 0x10]
mov dword [ebp - 0xa38], edi
mov edx, str.C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe
mov byte [ebp - 4], 7
test edx, 0xffff0000
jne 0x43fab7
movzx eax, dx
lea ecx, [ebp - 0xa38]
push eax
call fcn.0040d540
mov edi, dword [ebp - 0xa38]
jmp 0x43fb6a
mov eax, dword [edi - 0xc]
sub edx, edi
mov dword [ebp - 0xa48], eax
mov ecx, 1
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, 0x3c
sar edx, 1
or eax, ecx
mov dword [ebp - 0xa58], edx
jge 0x43faf5
push 0x3c
lea ecx, [ebp - 0xa38]
call fcn.00401fd8
mov edi, dword [ebp - 0xa38]
mov edx, dword [ebp - 0xa58]
cmp edx, dword [ebp - 0xa48]
ja 0x43fb40
mov eax, dword [edi - 8]
lea ecx, [edi + edx*2]
test ecx, ecx
jne 0x43fb19
call fcn.005b0142
mov dword [eax], 0x16
call fcn.005b0069
jmp 0x43fb53
add eax, eax
cmp eax, 0x78
jae 0x43fb32
call fcn.005b0142
mov dword [eax], 0x22
call fcn.005b0069
jmp 0x43fb53
push 0x78
push ecx
push edi
call fcn.005acee0
add esp, 0xc
jmp 0x43fb53
push 0x3c
push str.C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe
push dword [edi - 8]
push edi
call fcn.004021b4
add esp, 0x10
cmp dword [edi - 8], 0x3c
jl 0x440f8e
xor eax, eax
mov dword [edi - 0xc], 0x3c
mov word [edi + 0x78], ax
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 8
push eax
push edi
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov dword [ebp - 0xa58], eax
test eax, eax
jne 0x43fb91
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x4403d2
push eax
call fcn.005b5318
add esp, 4
mov dword [ebp - 0xa48], eax
test eax, eax
je 0x4403d2
push eax
push dword [ebp - 0xa58]
push dword [ebp - 0xa64]
push edi
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x4403c4
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0xa44]
push eax
push 0x62b118
push dword [ebp - 0xa48]
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x4403c4
mov eax, dword [ebp - 0xa44]
push dword [ebp - 0xa48]
movzx ecx, word [eax + 0xa]
movzx ebx, word [eax + 0xe]
movzx esi, word [eax + 0xc]
mov dword [ebp - 0xa4c], ecx
movzx ecx, word [eax + 8]
mov dword [ebp - 0xa58], ecx
call fcn.005b2d01
mov eax, dword [ebp - 0xa58]
push esi
movzx eax, ax
push ebx
push eax
mov eax, dword [ebp - 0xa4c]
movzx eax, ax
push eax
lea eax, [ebp - 0xa68]
push str._d._d._d._d
push eax
call fcn.0043ba70
add esp, 0x1c
lea eax, [ebp - 0xa68]
lea ecx, [ebp - 0xa60]
push eax
call fcn.0045e870
mov ebx, dword [ebp - 0xa54]
mov ecx, ebx
push eax
push 0
push 0x1175f
mov byte [ebp - 4], 9
call fcn.0045dea0
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 8
call fcn.00439360
mov byte [ebp - 0xa40], 1
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440eb6
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ec0
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa3c], eax
push 3
push 0x62f614
lea ecx, [ebp - 0xa3c]
mov byte [ebp - 4], 0xa
call fcn.004020e5
mov esi, dword [ebp - 0xa3c]
mov ecx, dword [ebx]
push esi
push 0
push 0x1175e
call fcn.00417e80
or ebx, 0xffffffff
mov byte [ebp - 4], 0xb
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43fd24
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ec7
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440ec7
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 8
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440ece
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ed8
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0xa48], esi
mov ecx, str.Edge
mov byte [ebp - 4], 0xc
test ecx, 0xffff0000
jne 0x43fd82
movzx eax, cx
lea ecx, [ebp - 0xa48]
push eax
call fcn.0040d540
mov esi, dword [ebp - 0xa48]
jmp 0x43fe35
mov eax, dword [esi - 0xc]
sub ecx, esi
mov dword [ebp - 0xa58], eax
mov edx, 1
mov eax, dword [esi - 8]
sub edx, dword [esi - 4]
sub eax, 4
sar ecx, 1
or eax, edx
mov dword [ebp - 0xa4c], ecx
jge 0x43fdc0
push 4
lea ecx, [ebp - 0xa48]
call fcn.00401fd8
mov esi, dword [ebp - 0xa48]
mov ecx, dword [ebp - 0xa4c]
cmp ecx, dword [ebp - 0xa58]
ja 0x43fe0b
mov eax, dword [esi - 8]
lea ecx, [esi + ecx*2]
test ecx, ecx
jne 0x43fde4
call fcn.005b0142
mov dword [eax], 0x16
call fcn.005b0069
jmp 0x43fe1e
add eax, eax
cmp eax, 8
jae 0x43fdfd
call fcn.005b0142
mov dword [eax], 0x22
call fcn.005b0069
jmp 0x43fe1e
push 8
push ecx
push esi
call fcn.005acee0
add esp, 0xc
jmp 0x43fe1e
push 4
push str.Edge
push dword [esi - 8]
push esi
call fcn.004021b4
add esp, 0x10
cmp dword [esi - 8], 4
jl 0x440f8e
xor eax, eax
mov dword [esi - 0xc], 4
mov word [esi + 8], ax
mov ecx, dword [ebp - 0xa54]
push esi
mov byte [ebp - 4], 0xd
push dword [0x66559c]
mov ecx, dword [ecx]
push 0x116b9
call fcn.00417e80
mov byte [ebp - 4], 8
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43fe96
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440edf
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440edf
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0xa68]
push eax
lea ecx, [ebp - 0xa40]
call fcn.0045e870
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0xe
push dword [0x66559c]
push 0x116b8
call fcn.0045dea0
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 8
call fcn.00439360
mov byte [ebp - 0xa60], 0
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440ee6
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ef0
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa5c], eax
push 2
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa5c]
mov esi, dword [0x66559c]
push 0x627008
call fcn.004020e5
mov eax, dword [ebp - 0xa54]
mov ebx, dword [ebp - 0xa5c]
push ebx
push esi
mov ecx, dword [eax]
push 0x1177b
call fcn.00417e80
mov byte [ebp - 4], 0x10
add ebx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43ff83
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ef7
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440ef7
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 8
mov byte [ebp - 0xa60], 0
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440efe
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f08
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa5c], eax
push 2
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa5c]
mov esi, dword [0x66559c]
push 0x627008
call fcn.004020e5
mov eax, dword [ebp - 0xa54]
mov ebx, dword [ebp - 0xa5c]
push ebx
push esi
mov ecx, dword [eax]
push 0x1177e
call fcn.00417e80
mov byte [ebp - 4], 0x12
add ebx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x440038
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f0f
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f0f
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 8
mov byte [ebp - 0xa60], 0
call fcn.0040cce6
mov ecx, eax
test ecx, ecx
je 0x440f16
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f20
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0xa5c], eax
push 2
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa5c]
mov esi, dword [0x66559c]
push 0x627008
call fcn.004020e5
mov eax, dword [ebp - 0xa54]
mov ebx, dword [ebp - 0xa5c]
push ebx
push esi
mov ecx, dword [eax]
push 0x1177c
call fcn.00417e80
lea ecx, [ebx - 0x10]
mov byte [ebp - 4], 0x14
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4400f3
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f27
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f27
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push dword [edx + 4]
call esi
jmp 0x4400f9
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 8
call fcn.0045ea00
mov byte [ebp - 4], 0x15
mov edx, 0x62f614
mov ecx, dword [0x66559c]
cmp byte [eax], 0
mov dword [ebp - 0xa58], ecx
mov ecx, 0x627008
cmove edx, ecx
add eax, 4
mov ecx, edx
mov dword [ebp - 0xa48], eax
lea eax, [ecx + 2]
mov dword [ebp - 0xa4c], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x440140
sub ecx, dword [ebp - 0xa4c]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xa48]
push edx
call fcn.004020e5
mov eax, dword [ebp - 0xa48]
push dword [eax]
mov eax, dword [ebp - 0xa54]
push dword [ebp - 0xa58]
push 0x11780
mov ecx, dword [eax]
call fcn.00417e80
mov byte [ebp - 4], 0x16
mov eax, ebx
mov ecx, dword [ebp - 0xa5c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4401de
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f3d
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f30
push 0
push dword [edx + 4]
call esi
push 1
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 8
call fcn.0045ea00
mov byte [ebp - 4], 0x17
mov edx, 0x62f614
mov ecx, dword [0x66559c]
cmp byte [eax], 0
mov dword [ebp - 0xa58], ecx
mov ecx, 0x627008
cmove edx, ecx
add eax, 4
mov ecx, edx
mov dword [ebp - 0xa48], eax
lea eax, [ecx + 2]
mov dword [ebp - 0xa4c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x440223
sub ecx, dword [ebp - 0xa4c]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xa48]
push edx
call fcn.004020e5
mov eax, dword [ebp - 0xa48]
push dword [eax]
mov eax, dword [ebp - 0xa54]
push dword [ebp - 0xa58]
push 0x1177f
mov ecx, dword [eax]
call fcn.00417e80
mov byte [ebp - 4], 0x18
mov eax, ebx
mov ecx, dword [ebp - 0xa5c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4402c1
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f57
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f4a
push 0
push dword [edx + 4]
call esi
push 0
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 8
call fcn.0045ea00
mov byte [ebp - 4], 0x19
mov edx, 0x627008
mov ecx, dword [0x66559c]
cmp byte [eax], 0
mov dword [ebp - 0xa58], ecx
mov ecx, 0x62f614
cmove ecx, edx
add eax, 4
mov edx, ecx
mov dword [ebp - 0xa48], eax
lea eax, [edx + 2]
mov dword [ebp - 0xa4c], eax
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x440306
sub edx, dword [ebp - 0xa4c]
sar edx, 1
push edx
push ecx
mov ecx, dword [ebp - 0xa48]
call fcn.004020e5
mov eax, dword [ebp - 0xa48]
push dword [eax]
mov eax, dword [ebp - 0xa54]
push dword [ebp - 0xa58]
push 0x1177d
mov ecx, dword [eax]
call fcn.00417e80
mov byte [ebp - 4], 0x1a
mov eax, ebx
mov ecx, dword [ebp - 0xa5c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4403b2
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edx, dword [eax + 4]
mov dword [ebp - 0xa4c], edx
mov edx, dword [ecx]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f81
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f64
push 0
push dword [edx + 4]
call esi
mov byte [ebp - 4], 8
inc dword [0x66559c]
mov esi, dword [ebp - 0xa68]
jmp 0x4403ed
mov byte [ebp - 4], 8
inc dword [0x66559c]
mov esi, dword [ebp - 0xa68]
jmp 0x4403ed
push dword [ebp - 0xa48]
call fcn.005b2d01
add esp, 4
lea eax, [ebp - 0xa34]
push eax
push str.windows_systemappsmicrosoft.microsoftedge_
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
jne 0x440485
mov eax, ebx
mov byte [ebp - 4], 6
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x440435
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440f98
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f98
mov edi, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push dword [ecx + 4]
call edi
jmp 0x44043b
mov edi, dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x440e3e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4410dc
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x4410dc
push 0
push dword [ecx + 4]
call edi
jmp 0x440e3e
push str.windows_systemapps_
lea ecx, [ebp - 0xa48]
call fcn.0040d480
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x1b
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4404a2
sub ecx, edx
lea eax, [ebp - 0xa08]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa48]
call fcn.00404643
push 0x11
push str._appxmanifest.xml
lea ecx, [ebp - 0xa48]
call fcn.00404643
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
push dword [ebp - 0xa48]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa5c], eax
cmp eax, 0xffffffff
jne 0x44056a
mov byte [ebp - 4], 8
mov eax, ebx
mov ecx, dword [ebp - 0xa48]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4403ed
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440fac
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440f9f
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x4403ed
push 0
lea ecx, [ebp - 0xa58]
mov dword [ebp - 0xa58], 0
push ecx
push 0x7d0
lea ecx, [ebp - 0x7e4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x440dc7
mov eax, dword [ebp - 0xa58]
cmp eax, 0x7d2
jae 0x4410bd
mov byte [ebp + eax - 0x7e4], 0
lea ecx, [ebp - 0xa64]
lea eax, [ebp - 0x7e4]
push eax
call fcn.0043b9d0
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0xa64]
cmp dword [eax - 0xc], 0
jl 0x440d65
push str.Version
push eax
call fcn.005ac36f
add esp, 8
test eax, eax
je 0x440d65
sub eax, dword [ebp - 0xa64]
sar eax, 1
mov dword [ebp - 0xa4c], eax
js 0x440d65
push ecx
push 0x22
lea ecx, [ebp - 0xa64]
call fcn.004274a0
test eax, eax
js 0x440d65
push eax
mov eax, dword [ebp - 0xa4c]
lea ecx, [ebp - 0xa64]
add eax, 9
push eax
lea eax, [ebp - 0xa44]
push eax
call fcn.0040ec40
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xa44]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x440d03
js 0x440677
push str.20.10240
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x440677
sub ecx, eax
sar ecx, 1
js 0x440677
push 8
push str.12.10240
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.25.10586
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x4406ad
sub ecx, eax
sar ecx, 1
js 0x4406ad
push 8
push str.13.10586
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.38.14393
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x4406e3
sub ecx, eax
sar ecx, 1
js 0x4406e3
push 8
push str.14.14393
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.40.15063
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x440719
sub ecx, eax
sar ecx, 1
js 0x440719
push 8
push str.15.15063
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.41.16299
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x44074f
sub ecx, eax
sar ecx, 1
js 0x44074f
push 8
push str.16.16299
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.42.17134
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x440785
sub ecx, eax
sar ecx, 1
js 0x440785
push 8
push str.17.17134
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.44.17763
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x4407b8
sub ecx, eax
sar ecx, 1
js 0x4407b8
push 8
push str.18.17763
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.44.18362
push eax
call fcn.005ac36f
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0xa44]
test ecx, ecx
je 0x4407e7
sub ecx, eax
sar ecx, 1
js 0x4407e7
push 8
push str.18.18363
jmp 0x440810
cmp dword [eax - 0xc], 0
jl 0x44081b
push str.44.19041
push eax
call fcn.005ac36f
add esp, 8
test eax, eax
je 0x44081b
sub eax, dword [ebp - 0xa44]
sar eax, 1
js 0x44081b
push 8
push str.18.19041
lea ecx, [ebp - 0xa44]
call fcn.004020e5
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa40]
call fcn.0045e870
mov ecx, dword [ebp - 0xa54]
push eax
push 0
push 0x1175f
mov byte [ebp - 4], 0x1e
call fcn.0045dea0
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0x1d
call fcn.00439360
push 1
lea ecx, [ebp - 0xa40]
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
push 0
push 0x1175e
mov byte [ebp - 4], 0x1f
call fcn.0045de40
mov byte [ebp - 4], 0x20
mov eax, ebx
mov ecx, dword [ebp - 0xa3c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4408d9
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440fc6
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa4c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440fb9
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push str.Edge
lea ecx, [ebp - 0xa4c]
mov byte [ebp - 4], 0x1d
call fcn.0040d480
mov byte [ebp - 4], 0x21
push dword [eax]
mov eax, dword [ebp - 0xa54]
push dword [0x66559c]
push 0x116b9
mov ecx, dword [eax]
call fcn.00417e80
mov byte [ebp - 4], 0x1d
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x44096d
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440fe0
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440fd3
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xa40]
call fcn.0045e870
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x22
push dword [0x66559c]
push 0x116b8
call fcn.0045dea0
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0x1d
call fcn.00439360
push 0
lea ecx, [ebp - 0xa50]
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x23
push dword [0x66559c]
push 0x1177b
call fcn.0045de40
mov byte [ebp - 4], 0x24
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440a33
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x440ffa
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x440fed
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
lea ecx, [ebp - 0xa50]
mov byte [ebp - 4], 0x1d
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x25
push dword [0x66559c]
push 0x1177e
call fcn.0045de40
mov byte [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440ac1
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x441014
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x441007
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
lea ecx, [ebp - 0xa50]
mov byte [ebp - 4], 0x1d
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x27
push dword [0x66559c]
push 0x1177c
call fcn.0045de40
mov byte [ebp - 4], 0x28
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440b4f
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x44102e
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x441021
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
lea ecx, [ebp - 0xa50]
mov byte [ebp - 4], 0x1d
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x29
push dword [0x66559c]
push 0x11780
call fcn.0045de40
mov byte [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440bdd
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x441048
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x44103b
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0xa50]
mov byte [ebp - 4], 0x1d
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x2b
push dword [0x66559c]
push 0x1177f
call fcn.0045de40
mov byte [ebp - 4], 0x2c
mov eax, ebx
mov ecx, dword [ebp - 0xa4c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440c6b
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x441062
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x441055
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
lea ecx, [ebp - 0xa70]
mov byte [ebp - 4], 0x1d
call fcn.0045ea00
mov ecx, dword [ebp - 0xa54]
push eax
mov byte [ebp - 4], 0x2d
push dword [0x66559c]
push 0x1177d
call fcn.0045de40
mov byte [ebp - 4], 0x2e
mov eax, ebx
mov ecx, dword [ebp - 0xa6c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440cf9
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x44107c
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x44106f
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 0x1d
inc dword [0x66559c]
mov byte [ebp - 4], 0x1c
mov eax, ebx
mov ecx, dword [ebp - 0xa44]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440d65
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x441096
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x441089
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 0x1b
mov eax, ebx
mov ecx, dword [ebp - 0xa64]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x440dc7
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4410b0
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa3c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x4410a3
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0xa5c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 8
mov eax, ebx
mov ecx, dword [ebp - 0xa48]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4403ed
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa5c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4410cf
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
mov dword [ebp - 0xa5c], edi
mov edi, dword [ebp - 0xa38]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x4410c2
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x4403ed
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005a8a56
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004022df
call edx
jmp 0x43f823
call edx
jmp 0x43f8a4
push 0x80004005
call fcn.004022df
call edx
jmp 0x43f8dd
push 0x80004005
call fcn.004022df
call edx
jmp 0x43f9f0
push 0x80004005
call fcn.004022df
call edx
jmp 0x43fa4d
push 0x80004005
call fcn.004022df
call edx
jmp 0x43fa83
push 0x80004005
call fcn.004022df
call edx
jmp 0x43fca9
call edx
jmp 0x43fd24
push 0x80004005
call fcn.004022df
call edx
jmp 0x43fd4e
call edx
jmp 0x43fe96
push 0x80004005
call fcn.004022df
call edx
jmp 0x43feff
call edx
jmp 0x43ff83
push 0x80004005
call fcn.004022df
call edx
jmp 0x43ffb4
call edx
jmp 0x440038
push 0x80004005
call fcn.004022df
call edx
jmp 0x440069
mov ecx, edx
call esi
jmp 0x4400f3
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4401de
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4401de
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4402c1
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4402c1
mov ecx, edx
call dword [ebp - 0xa4c]
mov byte [ebp - 4], 8
inc dword [0x66559c]
mov esi, dword [ebp - 0xa68]
jmp 0x4403ed
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4403b2
push 0x80070057
call fcn.004022df
call edx
jmp 0x440435
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4403ed
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4403ed
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4408d9
mov ecx, edx
call dword [ebp - 0xa4c]
jmp 0x4408d9
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x44096d
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x44096d
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440a33
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440a33
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440ac1
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440ac1
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440b4f
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440b4f
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440bdd
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440bdd
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440c6b
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440c6b
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440cf9
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440cf9
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440d65
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440d65
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440dc7
mov ecx, edx
call dword [ebp - 0xa3c]
jmp 0x440dc7
call fcn.005a90e7
mov ecx, edx
call dword [ebp - 0xa5c]
jmp 0x4403ed
mov ecx, edx
call dword [ebp - 0xa5c]
jmp 0x4403ed
call edx
jmp 0x440e3e