Function at 0x40ebe0
Capabilities:
Check if file exists
Delete file
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d720
mov eax, dword fs:[0]
push eax
sub esp, 0x32c
mov eax, dword [0x5be26c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x15c], 0
push eax
call fcn.004278c0
mov ecx, eax
call fcn.00427890
cmp dword [ebp - 0x130], 0
mov dword [ebp - 4], 0
jne 0x40ec77
mov edi, dword [ebp - 0x12c]
test edi, edi
je 0x40fb5b
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x40fb5b
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x40fb5b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
jmp 0x40fb5b
lea eax, [ebp - 0x124]
push eax
call fcn.0045e270
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 1
push eax
call fcn.0045d720
mov eax, dword [ebp - 0x130]
push 0
mov byte [ebp - 4], 2
push dword [eax + 0x18]
lea eax, [ebp - 0x118]
push eax
call fcn.00505d80
add esp, 0x14
push 4
push str..lnk
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 3
call fcn.00410b90
mov eax, dword [ebp - 0x130]
push 0
push dword [eax + 0x18]
lea eax, [ebp - 0x120]
push eax
call fcn.00505d80
add esp, 0xc
push 4
push str..url
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 4
call fcn.00410b90
mov edx, dword [ebp - 0x118]
cmp dword [edx - 4], 1
jle 0x40ed17
push dword [edx - 0xc]
lea ecx, [ebp - 0x118]
call fcn.00417250
mov edx, dword [ebp - 0x118]
sub esp, 0x18
mov ecx, edx
mov esi, esp
xor eax, eax
lea edi, [ecx + 2]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ed34
sub ecx, edi
sar ecx, 1
push ecx
push edx
mov ecx, esi
call fcn.00421290
lea eax, [ebp - 0x28]
push eax
call fcn.0045e8c0
add esp, 0x1c
mov ecx, dword [ebp - 0x124]
mov edx, ecx
mov byte [ebp - 4], 5
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x40ed67
mov eax, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
mov ebx, dword [ebp - 0x28]
sub edx, esi
mov esi, dword [ebp - 0x18]
sar edx, 1
cmp eax, 8
cmovae edi, ebx
cmp esi, edx
jne 0x40eeca
test esi, esi
je 0x40edb8
sub edi, ecx
nop word [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x40eeca
add ecx, 2
sub esi, 1
jne 0x40eda0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x15c], 1
mov byte [ebp - 4], 4
cmp eax, 8
jb 0x40edfa
lea ecx, [eax*2 + 2]
mov eax, ebx
cmp ecx, 0x1000
jb 0x40edf0
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb7d
push ecx
push ebx
call fcn.0046c2cf
add esp, 8
or esi, 0xffffffff
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], eax
mov word [ebp - 0x28], ax
mov edx, dword [ebp - 0x120]
mov eax, esi
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ee2e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x118]
mov eax, esi
mov byte [ebp - 4], 2
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ee4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x128]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ee70
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x124]
mov eax, esi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ee91
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x12c]
test edi, edi
je 0x40fb5b
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x40fb5b
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x40fb5b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
jmp 0x40fb5b
push dword [ebp - 0x118]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x40f04c
push dword [ebp - 0x118]
call esi
call fcn.0047a580
mov ecx, eax
push 0
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x40f04c
mov ebx, dword [ebp - 0x118]
lea ecx, [ebp - 0x7c]
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], al
call fcn.004211a0
push 3
push 0x572954
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 6
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
call fcn.004211a0
mov byte [ebp - 4], 7
call fcn.0047a580
mov edi, eax
lea ecx, [ebp - 0x208]
push 0x28e
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0040b1c0
mov esi, eax
push str.InstallHelper::AddDeskIcon_delete_desk_lnk:
push esi
mov byte [ebp - 4], 8
call fcn.0040c570
test ebx, ebx
mov ecx, 0x572928
cmovne ecx, ebx
push ecx
push esi
call fcn.00409810
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040cbc0
mov edx, dword [ebp - 0x50]
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x40efe4
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40efda
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb82
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x40f02e
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40f024
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb87
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
push dword [ebp - 0x120]
call ebx
test eax, eax
je 0x40f1ef
push dword [ebp - 0x120]
call esi
call fcn.0047a580
mov ecx, eax
push 0
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x40f1ef
mov ebx, dword [ebp - 0x120]
lea ecx, [ebp - 0xac]
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], al
call fcn.004211a0
push 3
push 0x572954
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 9
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
call fcn.004211a0
mov byte [ebp - 4], 0xa
call fcn.0047a580
mov edi, eax
lea ecx, [ebp - 0x2a0]
push 0x294
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.0040b1c0
mov esi, eax
push str.InstallHelper::AddDeskIcon_delete_desk_lnk:
push esi
mov byte [ebp - 4], 0xb
call fcn.0040c570
test ebx, ebx
mov eax, 0x572928
cmovne eax, ebx
push eax
push esi
call fcn.00409810
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x2a0]
call fcn.0040cbc0
mov edx, dword [ebp - 0x80]
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x40f178
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40f16e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb8c
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x40f1ce
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40f1c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb91
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 0x54]
sub eax, 0x10
push eax
call fcn.004112d0
add esp, 4
lea esi, [eax + 0x10]
mov dword [ebp - 0x158], esi
cmp dword [esi - 0xc], 0
mov byte [ebp - 4], 0xc
jne 0x40f27c
lea edx, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f235
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov byte [ebp - 4], 4
cmp edx, 8
jb 0x40edfd
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f26d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fb96
push edx
push ecx
call fcn.0046c2cf
add esp, 8
jmp 0x40edfd
push dword [ebp - 0x124]
call ebx
test eax, eax
jne 0x40f2b3
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
mov byte [ebp - 4], 5
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f2a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x28]
call fcn.0040bbd0
jmp 0x40ee0d
mov eax, 0x9970
mov ecx, 0x9907
mov word [ebp - 0x4c], ax
xor edi, edi
mov eax, 0x9973
mov word [ebp - 0x4a], ax
mov eax, 0x9935
mov word [ebp - 0x48], ax
mov eax, 0x9920
mov word [ebp - 0x46], ax
lea edx, [edi + 0xf]
mov eax, 0x993f
mov word [ebp - 0x44], ax
mov eax, 0x9937
mov word [ebp - 0x42], ax
mov eax, 0x9962
mov word [ebp - 0x40], ax
mov eax, 0x9931
mov word [ebp - 0x3e], ax
mov eax, 0x991e
mov word [ebp - 0x3c], cx
mov word [ebp - 0x3a], ax
mov eax, 0x990d
mov word [ebp - 0x38], ax
mov eax, 0x993b
mov word [ebp - 0x36], ax
mov eax, 0x9904
mov word [ebp - 0x34], cx
mov word [ebp - 0x32], ax
mov eax, 0x9900
mov word [ebp - 0x30], ax
mov eax, 0x9908
mov word [ebp - 0x2e], ax
mov eax, 0x9960
mov word [ebp - 0x2c], ax
mov ax, word [ebp - 0x4c]
mov ax, word [ebp + edi*2 - 0x4c]
mov ecx, edi
and ecx, 0xf
movzx esi, ax
cmp ecx, 0xf
mov eax, 0xa17c9958
cmovae ecx, edx
mov edx, 0x192a74c2
shl ecx, 2
call fcn.0046c590
mov cx, ax
mov edx, 0xf
and cx, 0xf
lea eax, [edi - 0x66a8]
xor cx, ax
xor cx, si
mov word [ebp + edi*2 - 0x4c], cx
inc edi
cmp edi, 0x11
jb 0x40f350
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x150]
call fcn.0040ad40
mov eax, dword [ebp - 0x130]
mov byte [ebp - 4], 0xd
mov eax, dword [eax + 0x30]
sub eax, 0x10
push eax
call fcn.004112d0
add esp, 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x170], edi
push edi
mov byte [ebp - 4], 0xe
call ebx
or ebx, 0xffffffff
test eax, eax
jne 0x40f697
movaps xmm0, xmmword [0x573970]
lea ecx, [ebp - 0x13c]
push dword [ebp - 0x170]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0xdc]
movups xmmword [ebp - 0x114], xmm0
push eax
movaps xmm0, xmmword [0x573980]
lea eax, [ebp - 0x114]
movups xmmword [ebp - 0x104], xmm0
push eax
movaps xmm0, xmmword [0x573990]
movups xmmword [ebp - 0xf4], xmm0
mov dword [ebp - 0xe0], 0x100
call fcn.0040a620
mov byte [ebp - 4], 0xf
call fcn.00418ed0
mov ecx, eax
test ecx, ecx
je 0x40fb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x130]
mov byte [ebp - 4], 0x10
push dword [eax + 0x14]
lea eax, [ebp - 0x140]
push dword [ebp - 0x128]
push str._s_s.ico
push eax
call fcn.00417390
mov esi, dword [ebp - 0x140]
add esp, 0x10
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40f4a6
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x13c]
mov ecx, eax
mov dword [ebp - 0x16c], eax
cmp ecx, dword [ebp - 0x138]
je 0x40f4f6
mov esi, eax
nop
mov eax, dword [esi + 4]
push 0
push eax
push eax
push 1
push 0x191
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [esi], eax
add esi, 8
cmp esi, dword [ebp - 0x138]
jne 0x40f4c0
mov esi, dword [ebp - 0x140]
mov eax, dword [ebp - 0x13c]
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x160], edx
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x11c], eax
cmp eax, dword [ebp - 0x138]
je 0x40f7e8
mov esi, eax
mov eax, dword [esi]
mov dword [ebp - 0x11c], eax
test eax, eax
je 0x40f560
cmp edx, ecx
je 0x40f541
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x164], ecx
jmp 0x40f560
lea eax, [ebp - 0x11c]
push eax
push ecx
lea ecx, [ebp - 0x168]
call fcn.0040a180
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x164]
add esi, 8
cmp esi, dword [ebp - 0x138]
jne 0x40f524
mov eax, dword [ebp - 0x168]
mov esi, dword [ebp - 0x140]
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x154], eax
cmp eax, ecx
je 0x40f7ea
sub ecx, eax
sar ecx, 2
push esi
push ecx
push eax
call fcn.004613e0
add esp, 0xc
test eax, eax
jne 0x40f621
lea ecx, [ebp - 0x168]
call fcn.0040bd90
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0xf
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f5cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x13c]
call fcn.0040bdf0
mov byte [ebp - 4], 0xd
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x40f5f2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x150]
mov eax, esi
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f613
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x158]
add edx, 0xfffffff0
jmp 0x40f28e
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
test ecx, ecx
je 0x40f63a
push ecx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [ebp - 0x16c]
add eax, 8
mov dword [ebp - 0x16c], eax
cmp eax, dword [ebp - 0x138]
jne 0x40f627
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x40f66d
mov eax, dword [ebp - 0x11c]
sub eax, ecx
sar eax, 2
push eax
push ecx
lea ecx, [ebp - 0x168]
call fcn.00421420
mov byte [ebp - 4], 0xf
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40f688
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0xe
call fcn.0040bdf0
mov esi, dword [ebp - 0x158]
push 0
push edi
push dword [ebp - 0x118]
push dword [ebp - 0x150]
push dword [ebp - 0x124]
push esi
call fcn.00411840
add esp, 0x18
test eax, eax
jne 0x40f7af
call fcn.0047a580
mov ecx, eax
push 2
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x40f7af
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], al
call fcn.004211a0
push 3
push 0x572a44
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
call fcn.004211a0
mov byte [ebp - 4], 0x13
call fcn.0047a580
mov dword [ebp - 0x11c], eax
lea ecx, [ebp - 0x338]
push 0x2d2
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.0040b1c0
mov ebx, eax
push str.InstallHelper::AddDeskIcon_FAILED
push ebx
mov byte [ebp - 4], 0x14
call fcn.0040c570
mov eax, dword [ebp - 0x11c]
add esp, 8
mov ecx, eax
mov edx, dword [eax]
push ebx
call dword [edx + 0x1c]
lea ecx, [ebp - 0x338]
call fcn.0040cbc0
lea ecx, [ebp - 0xc4]
call fcn.0040bb80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xe
call fcn.0040bb80
or ebx, 0xffffffff
push 0
push 0x2a
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0
push 0x1000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
call fcn.00418ed0
mov ecx, eax
test ecx, ecx
je 0x40fba5
jmp 0x40f8ef
xor eax, eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x40f82b
sub edx, eax
mov ecx, eax
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x40f821
mov eax, dword [eax - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x154], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x40fb7d
mov eax, dword [ebp - 0x154]
push edx
push eax
call fcn.0046c2cf
add esp, 8
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0xf
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f849
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x13c]
mov byte [ebp - 4], 0xe
test ecx, ecx
je 0x40f891
mov eax, dword [ebp - 0x134]
sub eax, ecx
sar eax, 3
lea edx, [eax*8]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f887
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fbaf
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov byte [ebp - 4], 0xd
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x40f8ac
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x150]
mov eax, esi
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f8cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x158]
mov eax, esi
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f235
jmp 0x40f22d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14c], eax
push 0x5726b4
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x15
call fcn.00410de0
test al, al
jne 0x40f927
push 0
push 0x5726b4
lea ecx, [ebp - 0x14c]
call fcn.0041f550
mov byte [ebp - 4], 0x16
call fcn.00418ed0
mov ecx, eax
test ecx, ecx
je 0x40fbb4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x148], eax
push 0x5726b4
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x17
call fcn.00410de0
test al, al
jne 0x40f972
push 0
push 0x5726b4
lea ecx, [ebp - 0x148]
call fcn.0041f550
mov byte [ebp - 4], 0x18
call fcn.00418ed0
mov ecx, eax
test ecx, ecx
je 0x40fbbe
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x144], eax
push str.add_desk_icon
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x19
call fcn.00410de0
test al, al
jne 0x40f9bd
push 0xd
push str.add_desk_icon
lea ecx, [ebp - 0x144]
call fcn.0041f550
mov byte [ebp - 4], 0x1a
call fcn.00459e50
lea ecx, [ebp - 0x14c]
push ecx
lea ecx, [ebp - 0x148]
mov edx, dword [eax]
push ecx
push 1
lea ecx, [ebp - 0x144]
push ecx
mov ecx, eax
call dword [edx]
mov edx, dword [ebp - 0x144]
mov eax, ebx
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fa04
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x148]
mov eax, ebx
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fa25
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14c]
mov eax, ebx
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fa46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x15c], 1
add edi, 0xfffffff0
mov byte [ebp - 4], 0xd
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x40fa6b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x150]
mov eax, ebx
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fa8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40faa7
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x28]
call fcn.0040bbd0
mov edx, dword [ebp - 0x120]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fad0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x118]
mov eax, ebx
mov byte [ebp - 4], 2
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40faf1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x128]
mov eax, ebx
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fb12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x124]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40fb33
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x12c]
test esi, esi
je 0x40fb5b
mov eax, ebx
lock xadd dword [esi + 4], eax
jne 0x40fb5b
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], ebx
dec ebx
jne 0x40fb5b
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046c16d
mov esp, ebp
pop ebp
ret
call fcn.0051a7fc
call fcn.0051a7fc
call fcn.0051a7fc
call fcn.0051a7fc
call fcn.0051a7fc
call fcn.0051a7fc
push 0x80004005
call fcn.00410dc0
push 0x80004005
call fcn.00410dc0
call fcn.0051a7fc
push 0x80004005
call fcn.00410dc0
push 0x80004005
call fcn.00410dc0
int3