Function at 0x40b6a0
Capabilities:
Accept command line arguments
Check if file exists
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48f860
mov eax, dword fs:[0]
push eax
sub esp, 0x590
mov eax, dword [0x4c312c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x544]
mov dword [ebp - 0x544], 8
push eax
mov dword [ebp - 0x540], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 1
push 0
call fcn.00454499
add esp, 8
push 2
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea ecx, [ebp - 0x558]
call fcn.00405840
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x558]
call fcn.00406340
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c34a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x53c], eax
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c354
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x524], eax
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c35e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x538], eax
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c368
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x534], eax
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c372
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
push dword [0x4ba02c]
add eax, 0x10
lea ecx, [ebp - 0x514]
mov dword [ebp - 0x530], eax
call fcn.00407b30
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x558]
call fcn.004060f0
mov edx, dword [ebp - 0x514]
or edi, 0xffffffff
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b828
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x4ba030]
lea ecx, [ebp - 0x510]
call fcn.00407b30
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x558]
call fcn.004060f0
mov edx, dword [ebp - 0x510]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b86f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x4ba028]
lea ecx, [ebp - 0x514]
call fcn.00407b30
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x558]
call fcn.004060f0
mov edx, dword [ebp - 0x514]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b8b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x4ba034]
lea ecx, [ebp - 0x510]
call fcn.00407b30
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x558]
call fcn.004060f0
mov edx, dword [ebp - 0x510]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b8fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c37c
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
lea ecx, [ebp - 0x510]
push str.sync
mov dword [ebp - 0x510], eax
call fcn.00405d50
test al, al
jne 0x40b942
push 4
push str.sync
lea ecx, [ebp - 0x510]
call fcn.004072e0
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x558]
call fcn.004060f0
mov edx, dword [ebp - 0x510]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b978
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x510], eax
cmp dword [eax - 0xc], 0
je 0x40bd0b
lea ecx, [ebp - 0x508]
mov dword [ebp - 0x50c], ecx
mov ecx, eax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b9a0
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea esi, [eax*4]
mov dword [ebp - 0x514], eax
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x50c]
push esi
push eax
call fcn.00407950
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x50c]
mov esi, dword [ebp - 0x510]
push dword [ebp - 0x514]
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x520], ecx
test eax, eax
jne 0x40ba80
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x40ba7a
push 0
push 0
push 0
push 0
push dword [ebp - 0x514]
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea eax, [ebp - 0x508]
push 0x80
push eax
lea eax, [ebp - 0x50c]
push esi
push eax
call fcn.00407950
add esp, 0x10
push 0
push 0
push esi
push dword [ebp - 0x50c]
push dword [ebp - 0x514]
push dword [ebp - 0x510]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x40ba80
mov ecx, dword [ebp - 0x520]
test ecx, ecx
jne 0x40c386
lea ecx, [ebp - 0x488]
call fcn.00407c00
mov edx, dword [ebp - 0x50c]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40baa0
sub ecx, esi
push 0
push ecx
push edx
lea ecx, [ebp - 0x488]
call fcn.00408a50
push 0x2000
call fcn.00446d39
mov esi, eax
mov dword [ebp - 0x514], eax
add esp, 4
test esi, esi
je 0x40bae3
push 0x2000
push 0
push esi
call fcn.00449a30
add esp, 0xc
jmp 0x40baeb
xor esi, esi
mov dword [ebp - 0x514], esi
push str.cmd_line
lea ecx, [ebp - 0x488]
call fcn.004092a0
test eax, eax
je 0x40bb17
add eax, 0x3a
je 0x40bb17
test esi, esi
je 0x40bb17
push 0x2000
push eax
push esi
call fcn.00448f30
add esp, 0xc
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00449a30
add esp, 0xc
lea eax, [ebp - 0x420]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push str.taskbar_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x40
lea eax, [ebp - 0x598]
mov dword [ebp - 0x59c], 0x44
push 0
push eax
call fcn.00449a30
add esp, 0xc
mov dword [ebp - 0x570], 1
xor eax, eax
xorps xmm0, xmm0
mov word [ebp - 0x56c], ax
movups xmmword [ebp - 0x54c], xmm0
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c3a5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x59c]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
push esi
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40bc0e
mov eax, dword [ebp - 0x530]
cmp dword [eax - 0xc], 0
je 0x40bc02
push eax
push 0
push 2
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x520], eax
test eax, eax
je 0x40bc02
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [ebp - 0x520]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x510], 1
jmp 0x40bc34
push dword [ebp - 0x54c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x548]
call esi
mov esi, dword [ebp - 0x514]
mov dword [ebp - 0x510], 0
mov edx, dword [ebp - 0x528]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bc4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x40bc5b
push esi
call fcn.00446d42
add esp, 4
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x42c]
push eax
push 0
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.004079f0
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], 0
test ecx, ecx
je 0x40bce0
mov edx, dword [ebp - 0x424]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40bcb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c3af
push edx
push ecx
call fcn.004468e9
add esp, 8
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x50c]
lea ecx, [ebp - 0x508]
mov dword [ebp - 4], 0xffffffff
cmp eax, ecx
je 0x40bd00
push eax
call fcn.00454411
add esp, 4
mov esi, dword [ebp - 0x510]
jmp 0x40c291
push str.RunExtention.tpi
push str.REXT.tpi
lea ecx, [ebp - 0x524]
call fcn.0040a760
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c3b4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
lea ecx, [ebp - 0x518]
push str.rundll
mov dword [ebp - 0x518], eax
call fcn.00405d50
test al, al
jne 0x40bd65
push 6
push str.rundll
lea ecx, [ebp - 0x518]
call fcn.004072e0
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c3be
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x524]
add eax, 0xfffffff0
push eax
call fcn.00405e90
mov esi, dword [eax + 4]
add esp, 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x510], edi
test esi, esi
js 0x40c3c8
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or ecx, eax
jge 0x40bdd3
push esi
lea ecx, [ebp - 0x510]
call fcn.00406f90
mov edi, dword [ebp - 0x510]
lea eax, [esi + 1]
push eax
push edi
call fcn.004547e2
add esp, 8
cmp esi, dword [edi - 8]
jg 0x40c3c8
xor eax, eax
mov dword [edi - 0xc], esi
mov word [edi + esi*2], ax
mov eax, dword [ebp - 0x53c]
cmp dword [eax - 0xc], 0
je 0x40be72
mov esi, dword [ebp - 0x518]
lea ecx, [eax - 0x10]
mov dword [ebp - 0x520], ecx
mov dword [ebp - 0x510], esi
lea edx, [esi - 0x10]
mov dword [ebp - 0x540], edx
cmp ecx, edx
je 0x40beae
cmp dword [edx + 0xc], 0
lea esi, [edx + 0xc]
jl 0x40be6c
mov ecx, dword [ecx]
cmp ecx, dword [edx]
jne 0x40be6c
push dword [ebp - 0x520]
call fcn.00405e90
add esp, 4
mov dword [ebp - 0x520], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40be67
mov esi, dword [ebp - 0x540]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x520]
lea esi, [eax + 0x10]
jmp 0x40bea8
push dword [eax - 0xc]
push eax
jmp 0x40be97
cmp dword [edi - 0xc], 0
jl 0x40bea2
push str.utilityEx.dll
push edi
call fcn.00449b8a
add esp, 8
test eax, eax
je 0x40bea2
sub eax, edi
sar eax, 1
js 0x40bea2
push 5
push str.popex
lea ecx, [ebp - 0x518]
call fcn.004072e0
mov esi, dword [ebp - 0x518]
mov dword [ebp - 0x510], esi
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00449a30
add esp, 0xc
push dword [ebp - 0x524]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x40bf17
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push dword [ebp - 0x524]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x40bf61
mov eax, dword [ebp - 0x524]
lea ecx, [ebp - 0x218]
mov esi, ecx
mov edx, 0x104
sub eax, esi
mov esi, eax
nop
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x40bf4e
movzx eax, word [ecx + esi]
test ax, ax
je 0x40bf4e
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x40bf30
mov esi, dword [ebp - 0x510]
lea eax, [ecx - 2]
test edx, edx
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c3d2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
lea ecx, [ebp - 0x518]
mov dword [ebp - 0x518], eax
lea eax, [ebp - 0x218]
push eax
call fcn.00405d50
test al, al
jne 0x40bfc2
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40bfa0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x518]
call fcn.004072e0
mov eax, dword [ebp - 0x518]
cmp dword [eax - 0xc], 0
je 0x40bffd
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40bffd
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.00408c90
mov eax, dword [ebp - 0x528]
add esp, 8
mov dword [ebp - 0x514], eax
jmp 0x40c003
mov eax, dword [ebp - 0x514]
push 0
push 0
push eax
push esi
lea ecx, [ebp - 0x529]
call fcn.0040fee0
push 0
push dword [ebp + 8]
mov ecx, 0x4c4cd0
push 0
call fcn.00409390
lea eax, [ebp - 0x520]
push 1
push eax
call fcn.00441b30
add esp, 8
call fcn.00406030
mov ecx, eax
test ecx, ecx
je 0x40c3dc
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
push dword [ebp - 0x520]
add eax, 0x10
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x528]
push str._sLogTool.log
push eax
call fcn.00408960
mov esi, dword [ebp - 0x528]
add esp, 0xc
push esi
call fcn.00445b70
lea ecx, [ebp - 0x519]
call fcn.0040c950
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x519]
call fcn.0040dd90
call fcn.00445e90
lea ecx, [ebp - 0x519]
call fcn.0040d590
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c0c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x520]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c0e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x4c4cb0]
add eax, 0x10
push eax
mov dword [ebp - 0x540], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x4c4d08]
test esi, esi
je 0x40c14d
cmp dword [esi + 4], 0
jle 0x40c11b
mov eax, dword [esi]
push dword [eax]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov esi, dword [0x4c4d08]
test esi, esi
je 0x40c14d
mov eax, dword [esi]
test eax, eax
je 0x40c134
push eax
call fcn.00454411
add esp, 4
mov dword [esi], 0
push 0xc
push esi
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.004468e9
add esp, 8
push dword [ebp - 0x540]
mov dword [0x4c4d08], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x4c4d04]
test esi, esi
je 0x40c1ab
mov eax, dword [esi]
test eax, eax
je 0x40c182
push eax
call fcn.00454411
add esp, 4
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x40c199
push eax
call fcn.00454411
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
mov dword [esi + 8], 0
call fcn.004468e9
add esp, 8
mov esi, dword [0x4c4cfc]
test esi, esi
je 0x40c1e3
cmp dword [esi], 0
je 0x40c1e3
nop word [eax + eax]
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x40c1cd
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [esi + 0x20]
push 0
mov dword [esi + 0x10], 0
call eax
add esi, 0x24
cmp dword [esi], 0
jne 0x40c1c0
mov esi, dword [0x4ba008]
mov ecx, dword [0x4ba00c]
cmp esi, ecx
jae 0x40c20d
mov eax, dword [esi]
test eax, eax
je 0x40c206
mov eax, dword [eax + 0x1c]
push 0
call eax
mov ecx, dword [0x4ba00c]
add esi, 4
cmp esi, ecx
jb 0x40c1f3
mov ecx, 0x4c4cd0
call fcn.0040abd0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0x518]
xor esi, esi
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c23d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c257
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x514]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c274
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x510]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c291
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x530]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c2ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x534]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c2cb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x538]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c2e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x524]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c305
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x53c]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x40c320
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0x558]
call fcn.00405920
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00446cf9
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80
lea eax, [ebp - 0x508]
push eax
push dword [ebp - 0x50c]
call fcn.004079d0
add esp, 0xc
call fcn.00408780
push 0x80004005
call fcn.00405d30
call fcn.00453b88
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80070057
call fcn.00405d30
push 0x80004005
call fcn.00405d30
push 0x80004005
call fcn.00405d30
int3