Function at 0x41f964
Capabilities:
Access peb ldr_data
Acquire debug privileges
Create process on windows
Get number of processors

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x67
push 0
push 0
dec ecx
jne 0x41f96c
push ebx
push esi
push edi
mov eax, 0x41f86c
call fcn.00405788
xor eax, eax
push ebp
push 0x4219f6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x44]
call fcn.0041d7f0
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.0040760c
mov eax, dword [ebp - 0x40]
mov edx, 0x421a10
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x4c]
call fcn.0041d7f0
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.0040760c
mov eax, dword [ebp - 0x48]
mov edx, 0x421a24
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x54]
call fcn.0041d7f0
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.0040760c
mov eax, dword [ebp - 0x50]
mov edx, 0x421a3c
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x5c]
call fcn.0041d7f0
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.0040760c
mov eax, dword [ebp - 0x58]
mov edx, 0x421a5c
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x64]
call fcn.0041d7f0
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.0040760c
mov eax, dword [ebp - 0x60]
mov edx, 0x421a70
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x6c]
call fcn.0041d7f0
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.0040760c
mov eax, dword [ebp - 0x68]
mov edx, 0x421a84
call fcn.004043f0
je 0x4219b8
lea eax, [ebp - 0x74]
call fcn.0041d7f0
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.0040760c
mov eax, dword [ebp - 0x70]
mov edx, 0x421a98
call fcn.004043f0
je 0x4219b8
mov eax, dword [0x424338]
mov byte [eax], 0
lea eax, [ebp - 0x78]
call fcn.0041d88c
mov eax, dword [ebp - 0x78]
call fcn.004044a4
mov edx, eax
mov eax, dword [0x424434]
call fcn.004041e4
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [0x424434]
mov ecx, dword [ecx]
mov edx, 0x421ab0
mov eax, 2
call fcn.00416914
lea edx, [ebp - 0x80]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov edx, dword [ebp - 0x80]
mov eax, dword [0x424434]
call fcn.00404060
lea edx, [ebp - 0x84]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00407a30
mov edx, dword [ebp - 0x84]
mov eax, dword [0x424344]
call fcn.00404060
lea eax, [ebp - 0x88]
call fcn.0041d7f0
mov eax, dword [ebp - 0x88]
call fcn.004044a4
mov edx, eax
mov eax, dword [0x4243f4]
call fcn.004041e4
lea eax, [ebp - 0x8c]
call fcn.0041c384
push dword [ebp - 0x8c]
lea edx, [ebp - 0x90]
mov eax, dword [0x424344]
mov eax, dword [eax]
call fcn.0041c468
push dword [ebp - 0x90]
push 0x421ac4
mov eax, dword [0x4244ec]
mov edx, 3
call fcn.0040436c
lea eax, [ebp - 0x98]
call fcn.0041d900
lea eax, [ebp - 0x98]
mov edx, 0x421ad4
call fcn.004042b4
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x94]
call fcn.00416790
push dword [ebp - 0x94]
push 0x421af4
lea edx, [ebp - 0x9c]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
push dword [ebp - 0x9c]
push 0x421b00
mov eax, dword [0x424358]
mov edx, 4
call fcn.0040436c
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x4243c4]
mov dword [edx], eax
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x424408]
mov dword [edx], eax
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x4243e4]
mov dword [edx], eax
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x42433c]
mov dword [edx], eax
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x4244f4]
mov dword [edx], eax
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x42447c]
mov dword [edx], eax
mov eax, dword [0x424380]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x424438]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x424428]
mov byte [eax], 0
lea edx, [ebp - 0xa0]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00407a30
mov edx, dword [ebp - 0xa0]
mov eax, 0x428654
call fcn.00404060
push 0
push 0
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov ebx, eax
push ebx
mov eax, dword [0x424430]
push eax
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
lea edx, [ebp - 0xa4]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.00407a30
mov edx, dword [ebp - 0xa4]
mov eax, 0x428654
call fcn.00404060
push 0
push 0
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov ebx, eax
push ebx
mov eax, dword [0x4244e4]
push eax
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
lea edx, [ebp - 0xa8]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov edx, dword [ebp - 0xa8]
mov eax, 0x428654
call fcn.00404060
push 0
push 0
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov ebx, eax
push ebx
mov eax, dword [0x424500]
push eax
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov eax, 0x428654
mov edx, dword [0x424358]
mov edx, dword [edx]
call fcn.00404060
push 0
push 0
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov ebx, eax
push ebx
mov eax, dword [0x424414]
push eax
mov eax, dword [0x428654]
call fcn.004042ac
push eax
mov eax, dword [0x428654]
call fcn.004044a4
push eax
push 1
push 0
call sub.kernel32.dll_MultiByteToWideChar
mov eax, 0x421b0c
mov edx, dword [0x424410]
mov dword [edx], eax
push 0x421b54
mov eax, dword [0x4243f4]
push dword [eax]
push 0x421b68
push 0x421b74
mov eax, dword [0x424434]
push dword [eax]
push 0x421b84
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb0]
call fcn.00407678
push dword [ebp - 0xb0]
lea eax, [ebp - 0xac]
mov edx, 7
call fcn.0040436c
mov eax, dword [ebp - 0xac]
call fcn.0041b370
lea edx, [ebp - 0xb4]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0xb4]
mov edx, 0x421b94
call fcn.004043f0
je 0x41fed0
mov esi, dword [0x425710]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
cmp esi, dword [eax + 0x18]
jne 0x41fea8
mov esi, dword [eax]
mov ebx, dword [eax + 4]
mov dword [ebx], esi
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ebx + 4], esi
lea eax, [eax + 8]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
mov dword [ebx], esi
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ebx + 4], esi
call fcn.00414cd8
mov eax, 0x421bac
call fcn.00414dc8
call fcn.0041a304
mov edx, dword [0x4243bc]
mov byte [edx], al
mov edx, dword [0x4244ec]
mov edx, dword [edx]
mov eax, dword [0x4243a8]
call fcn.0041d724
test al, al
je 0x42057f
mov eax, dword [0x4243a8]
cmp byte [eax + 0x1102], 0
jne 0x421046
mov ecx, dword [0x4243f4]
mov ecx, dword [ecx]
lea eax, [ebp - 0xb8]
mov edx, 0x421bc8
call fcn.004042f8
mov eax, dword [ebp - 0xb8]
call fcn.0041b370
mov eax, dword [0x4243a8]
cmp byte [eax + 0x300], 0
je 0x420093
lea eax, [ebp - 0x1bc]
push eax
mov ecx, dword [0x4243a8]
movzx ecx, byte [ecx + 0x300]
sub ecx, 4
mov eax, dword [0x4243a8]
add eax, 0x300
mov edx, 1
call fcn.00402674
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0xbc]
call fcn.00404250
mov eax, dword [ebp - 0xbc]
call fcn.0041e1ac
lea eax, [ebp - 0x1c0]
mov edx, dword [0x4243a8]
add edx, 0x300
call fcn.00404250
mov eax, dword [ebp - 0x1c0]
call fcn.0041e1ac
test al, al
je 0x420093
lea eax, [ebp - 0x1cc]
mov edx, dword [0x4243a8]
add edx, 0x300
call fcn.00404250
mov eax, dword [ebp - 0x1cc]
lea edx, [ebp - 0x1c8]
call fcn.004079fc
push dword [ebp - 0x1c8]
lea eax, [ebp - 0x1d8]
mov edx, dword [0x4243a8]
add edx, 0x300
call fcn.00404250
mov eax, dword [ebp - 0x1d8]
lea edx, [ebp - 0x1d4]
call fcn.00407a30
mov eax, dword [ebp - 0x1d4]
lea edx, [ebp - 0x1d0]
call fcn.0041c468
push dword [ebp - 0x1d0]
push 0x421ac4
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.0040436c
mov eax, dword [ebp - 0x1c4]
call fcn.0041e1ac
mov eax, dword [0x4243a8]
mov byte [eax + 0x300], 0
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x300
lea eax, [ebp - 0x1dc]
mov edx, dword [0x4243a8]
add edx, 0x300
call fcn.00404250
mov edx, dword [ebp - 0x1dc]
xor ecx, ecx
mov eax, 1
call fcn.0041d4c4
mov eax, dword [0x4243a8]
cmp byte [eax + 0x900], 0
je 0x42010f
lea eax, [ebp - 0x1e0]
mov edx, dword [0x4243a8]
add edx, 0x900
call fcn.00404250
mov eax, dword [ebp - 0x1e0]
call fcn.0041e1ac
test al, al
je 0x42010f
mov eax, dword [0x4243a8]
mov byte [eax + 0x900], 0
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x900
lea eax, [ebp - 0x1e4]
mov edx, dword [0x4243a8]
add edx, 0x900
call fcn.00404250
mov edx, dword [ebp - 0x1e4]
xor ecx, ecx
mov eax, 1
call fcn.0041d4c4
mov eax, dword [0x4243a8]
cmp dword [eax + 0x1128], 0xc8
je 0x420353
lea eax, [ebp - 0x1e8]
call fcn.0041e104
mov edx, dword [ebp - 0x1e8]
mov eax, dword [0x4243a8]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x4243a8]
mov byte [eax + 0x1101], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1102], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1103], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1108], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1109], 0
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1140], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1234], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1118], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x111c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1120], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x114c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1150], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1154], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1164], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x116c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1170], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1124], edx
mov eax, dword [0x4243a8]
lea edi, [eax + 0x100]
mov esi, 0x421be8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [0x4243a8]
mov dword [eax + 0x1128], 0xc8
mov eax, dword [0x4243a8]
mov byte [eax + 0x500], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1105], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1106], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1107], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x110a], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x600], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x700], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x800], 0
mov eax, dword [0x4243a8]
add eax, 0x400
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x4243a8]
mov byte [eax + 0x300], 0
lea eax, [ebp - 0x1f0]
call fcn.0041c384
push dword [ebp - 0x1f0]
lea eax, [ebp - 0x1fc]
mov edx, dword [0x4243a8]
add edx, 0x400
call fcn.00404250
mov eax, dword [ebp - 0x1fc]
lea edx, [ebp - 0x1f8]
call fcn.00407a30
mov eax, dword [ebp - 0x1f8]
lea edx, [ebp - 0x1f4]
call fcn.0041c468
push dword [ebp - 0x1f4]
push 0x421ac4
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.0040436c
mov eax, dword [ebp - 0x1ec]
call fcn.004044a4
mov edx, eax
mov eax, dword [0x4244ec]
call fcn.004041e4
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
lea edx, [ebp - 0x200]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov eax, dword [ebp - 0x200]
call fcn.0041bb68
test al, al
je 0x4203f2
xor eax, eax
push ebp
push 0x4203e3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x421bf8
call fcn.0041b370
mov eax, 0x421b94
call fcn.0041b414
test al, al
je 0x4203c0
lea eax, [ebp - 0x204]
call fcn.0041d900
lea eax, [ebp - 0x204]
mov edx, 0x421c10
call fcn.004042b4
mov eax, dword [ebp - 0x204]
call fcn.0041b4ec
lea eax, [ebp - 0x208]
call fcn.0041c2a4
mov eax, dword [ebp - 0x208]
call fcn.0041bd18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x421046
mov eax, 0x421c2c
call fcn.0041b370
lea edx, [ebp - 0x20c]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov eax, dword [ebp - 0x20c]
call fcn.0041ba2c
test al, al
je 0x4204dc
mov eax, 0x421c54
call fcn.0041b370
mov edx, dword [0x4243a8]
mov al, 1
mov byte [edx + 0x110b], al
push 0
push 0
mov edx, dword [0x4243a8]
push eax
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x110b
xor ecx, ecx
xor edx, edx
mov eax, 4
call fcn.0041d4c4
lea eax, [ebp - 0x210]
call fcn.0041d900
lea eax, [ebp - 0x210]
mov edx, 0x421c10
call fcn.004042b4
mov eax, dword [ebp - 0x210]
call fcn.0041b4ec
lea edx, [ebp - 0x214]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x214]
mov edx, 0x421b94
call fcn.004043f0
jne 0x421046
mov eax, 0x421c60
call fcn.0041d948
push eax
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.004044a4
pop edx
call fcn.00414f78
test al, al
jne 0x421046
call fcn.0041218c
jmp 0x421046
xor eax, eax
push ebp
push 0x420570
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x421c74
call fcn.0041b370
lea eax, [ebp - 0x220]
call fcn.0041d900
lea eax, [ebp - 0x220]
mov edx, 0x421ad4
call fcn.004042b4
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x21c]
call fcn.00416790
push dword [ebp - 0x21c]
push 0x421af4
lea edx, [ebp - 0x224]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
push dword [ebp - 0x224]
push 0x421b00
lea eax, [ebp - 0x218]
mov edx, 4
call fcn.0040436c
mov eax, dword [ebp - 0x218]
call fcn.0041b588
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x421046
mov ecx, dword [0x4243f4]
mov ecx, dword [ecx]
lea eax, [ebp - 0x228]
mov edx, 0x421c98
call fcn.004042f8
mov eax, dword [ebp - 0x228]
call fcn.0041b370
lea eax, [ebp - 0x22c]
call fcn.0041e104
mov edx, dword [ebp - 0x22c]
mov eax, dword [0x4243a8]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x4243a8]
mov byte [eax + 0x1101], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1102], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1103], 0
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1118], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x111c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1120], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x114c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1150], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1154], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x116c], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1234], edx
mov eax, dword [0x4243a8]
mov byte [eax + 0x1105], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1106], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1107], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1108], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1109], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x110a], 1
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1124], edx
mov eax, dword [0x4243a8]
lea edi, [eax + 0x100]
mov esi, 0x421be8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [0x4243a8]
mov dword [eax + 0x1128], 0xc8
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1170], edx
mov eax, dword [0x4243a8]
mov byte [eax + 0x500], 0
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1140], edx
mov eax, dword [0x4243a8]
xor edx, edx
mov dword [eax + 0x1164], edx
mov eax, dword [0x4243a8]
mov byte [eax + 0x600], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x700], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x800], 0
lea edx, [ebp - 0x230]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x230]
push eax
lea eax, [ebp - 0x238]
call fcn.0041c384
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 0x234]
call fcn.0040760c
mov eax, dword [ebp - 0x234]
pop edx
call fcn.0040458c
test eax, eax
je 0x420b76
mov eax, dword [0x4243a8]
add eax, 0x400
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x4243a8]
mov byte [eax + 0x300], 0
lea eax, [ebp - 0x240]
call fcn.0041c384
push dword [ebp - 0x240]
lea eax, [ebp - 0x24c]
mov edx, dword [0x4243a8]
add edx, 0x400
call fcn.00404250
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 0x248]
call fcn.00407a30
mov eax, dword [ebp - 0x248]
lea edx, [ebp - 0x244]
call fcn.0041c468
push dword [ebp - 0x244]
push 0x421ac4
lea eax, [ebp - 0x23c]
mov edx, 3
call fcn.0040436c
mov eax, dword [ebp - 0x23c]
call fcn.004044a4
mov edx, eax
mov eax, dword [0x4244ec]
call fcn.004041e4
mov eax, 0x428654
call fcn.0040400c
mov edx, dword [0x424360]
mov eax, 0x428654
call fcn.0041b68c
test al, al
je 0x420afd
lea edx, [ebp - 0x250]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov eax, dword [ebp - 0x250]
call fcn.0041ba2c
test al, al
je 0x42092a
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 1
mov eax, dword [0x424360]
add eax, 0x300
mov edx, dword [0x424360]
add edx, 0x400
call fcn.00402c34
mov eax, dword [0x424360]
add eax, 0x400
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x424360]
mov byte [eax + 0x1102], 0
mov eax, dword [0x424360]
lea edi, [eax + 0x100]
mov esi, 0x421be8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [0x424360]
mov dword [eax + 0x1128], 0xc8
mov eax, dword [0x424360]
mov edx, dword [0x4243a8]
mov esi, eax
mov edi, edx
mov ecx, 0x498
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x4244ec]
mov edx, dword [edx]
mov eax, dword [0x428654]
call fcn.0041dcc8
test al, al
je 0x420913
mov edx, dword [0x4244ec]
mov edx, dword [edx]
mov eax, dword [0x4243a8]
call fcn.0041d64c
mov eax, dword [0x4244ec]
mov eax, dword [eax]
mov edx, 2
call fcn.00407878
jmp 0x421046
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
jmp 0x421046
mov eax, 0x421cbc
call fcn.0041b370
lea eax, [ebp - 0x25c]
call fcn.0041d900
lea eax, [ebp - 0x25c]
mov edx, 0x421ad4
call fcn.004042b4
mov eax, dword [ebp - 0x25c]
lea edx, [ebp - 0x258]
call fcn.00416790
push dword [ebp - 0x258]
push 0x421af4
lea edx, [ebp - 0x260]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
push dword [ebp - 0x260]
push 0x421b00
lea eax, [ebp - 0x254]
mov edx, 4
call fcn.0040436c
mov eax, dword [ebp - 0x254]
call fcn.0041b588
test al, al
je 0x420ad0
mov eax, 0x421ce0
call fcn.0041b370
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 0
mov eax, dword [0x424360]
add eax, 0x300
mov edx, dword [0x424360]
add edx, 0x400
call fcn.00402c34
mov eax, dword [0x424360]
add eax, 0x400
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404288
mov eax, dword [0x424360]
mov byte [eax + 0x1102], 0
mov eax, dword [0x424360]
lea edi, [eax + 0x100]
mov esi, 0x421be8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [0x424360]
mov dword [eax + 0x1128], 0xc8
mov eax, dword [0x424360]
mov edx, dword [0x4243a8]
mov esi, eax
mov edi, edx
mov ecx, 0x498
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x4244ec]
mov edx, dword [edx]
mov eax, dword [0x428654]
call fcn.0041dcc8
test al, al
je 0x420ab9
push 0x421d04
push dword [0x428654]
push 0x421d28
mov eax, dword [0x4244ec]
push dword [eax]
lea eax, [ebp - 0x264]
mov edx, 4
call fcn.0040436c
mov eax, dword [ebp - 0x264]
call fcn.0041b370
mov edx, dword [0x4244ec]
mov edx, dword [edx]
mov eax, dword [0x4243a8]
call fcn.0041d64c
test al, al
je 0x420aa3
mov eax, 0x421d38
call fcn.0041b370
mov eax, dword [0x4244ec]
mov eax, dword [eax]
mov edx, 2
call fcn.00407878
jmp 0x421046
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
jmp 0x421046
mov eax, 0x421d4c
call fcn.0041b370
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 0
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
jmp 0x421046
lea edx, [ebp - 0x268]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov eax, dword [ebp - 0x268]
call fcn.0041ba2c
test al, al
je 0x420b2c
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 1
jmp 0x420b5f
mov eax, 0x421d64
call fcn.0041b370
lea edx, [ebp - 0x26c]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
mov eax, dword [ebp - 0x26c]
call fcn.0041b588
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 0
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
jmp 0x421046
mov eax, 0x421d90
call fcn.0041b370
mov eax, dword [0x4243a8]
add eax, 0x300
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404288
lea eax, [ebp - 0x274]
call fcn.0041c384
push dword [ebp - 0x274]
lea edx, [ebp - 0x278]
mov eax, 4
call fcn.0041cf48
push dword [ebp - 0x278]
push 0x421ac4
lea eax, [ebp - 0x270]
mov edx, 3
call fcn.0040436c
mov edx, dword [ebp - 0x270]
mov eax, dword [0x4243a8]
add eax, 0x400
mov ecx, 0xff
call fcn.00404288
lea eax, [ebp - 0x280]
call fcn.0041c384
push dword [ebp - 0x280]
lea eax, [ebp - 0x28c]
mov edx, dword [0x4243a8]
add edx, 0x400
call fcn.00404250
mov eax, dword [ebp - 0x28c]
lea edx, [ebp - 0x288]
call fcn.00407a30
mov eax, dword [ebp - 0x288]
lea edx, [ebp - 0x284]
call fcn.0041c468
push dword [ebp - 0x284]
push 0x421ac4
lea eax, [ebp - 0x27c]
mov edx, 3
call fcn.0040436c
mov eax, dword [ebp - 0x27c]
call fcn.004044a4
mov edx, eax
mov eax, dword [0x4244ec]
call fcn.004041e4
lea eax, [ebp - 0x290]
mov edx, dword [0x4243a8]
add edx, 0x400
call fcn.00404250
mov edx, dword [ebp - 0x290]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.0041dcc8
test al, al
je 0x420f74
mov eax, 0x421db8
call fcn.0041b370
mov eax, dword [0x424434]
mov edx, dword [0x4243a8]
add edx, 0x400
call fcn.00404250
mov eax, dword [0x424434]
mov eax, dword [eax]
mov edx, 0x20
call fcn.00407878
xor eax, eax
push ebp
push 0x420cf4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.0041ce1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x420cfe
xor eax, eax
push ebp
push 0x420d5b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x294]
call fcn.0041d900
lea eax, [ebp - 0x294]
mov edx, 0x421dd4
call fcn.004042b4
mov eax, dword [ebp - 0x294]
call fcn.0041dc08
fstp qword [0x42865c]
wait
push dword [0x428660]
push dword [0x42865c]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.0041db04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x420d65
mov eax, dword [0x424434]
mov eax, dword [eax]
mov edx, 2
call fcn.00407878
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.0041ba2c
test al, al
je 0x420ddd
mov eax, 0x421df4
call fcn.0041b370
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 1
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
mov eax, 0x421c60
call fcn.0041d948
push eax
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.004044a4
pop edx
call fcn.00414f78
test al, al
jne 0x421046
call fcn.0041218c
jmp 0x421046
mov eax, dword [0x4243a8]
mov byte [eax + 0x110b], 0
lea eax, [ebp - 0x2a0]
call fcn.0041d900
lea eax, [ebp - 0x2a0]
mov edx, 0x421ad4
call fcn.004042b4
mov eax, dword [ebp - 0x2a0]
lea edx, [ebp - 0x29c]
call fcn.00416790
push dword [ebp - 0x29c]
push 0x421af4
lea edx, [ebp - 0x2a4]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
push dword [ebp - 0x2a4]
push 0x421b00
lea eax, [ebp - 0x298]
mov edx, 4
call fcn.0040436c
mov eax, dword [ebp - 0x298]
call fcn.0041b588
test al, al
jne 0x420f07
mov eax, 0x421e14
call fcn.0041b370
lea eax, [ebp - 0x2a8]
call fcn.0041c2a4
mov eax, dword [ebp - 0x2a8]
call fcn.0041bd18
lea eax, [ebp - 0x2ac]
call fcn.0041c2a4
mov edx, dword [ebp - 0x2ac]
mov eax, 0x428654
call fcn.00404060
cmp dword [0x428654], 0
je 0x420f07
push dword [0x428654]
lea edx, [ebp - 0x2b0]
mov eax, 3
call fcn.0041cf48
push dword [ebp - 0x2b0]
push 0x421e40
mov eax, 0x428654
mov edx, 3
call fcn.0040436c
lea eax, [ebp - 0x2b4]
call fcn.0041d900
lea eax, [ebp - 0x2b4]
mov edx, 0x421e4c
call fcn.004042b4
mov edx, dword [ebp - 0x2b4]
mov ecx, dword [0x424434]
mov ecx, dword [ecx]
mov eax, dword [0x428654]
call fcn.0041c764
mov edx, dword [0x4243a8]
mov eax, dword [0x4244ec]
mov eax, dword [eax]
call fcn.0041b018
call fcn.00415fc0
test al, al
jne 0x420f2c
call sym.win32.dll_StartAs
jmp 0x421046
push 0
push 0x421e64
lea edx, [ebp - 0x2b8]
mov eax, dword [0x424434]
mov eax, dword [eax]
call fcn.00416790
lea eax, [ebp - 0x2b8]
mov edx, 0x421b00
call fcn.004042b4
mov eax, dword [ebp - 0x2b8]
call fcn.004044a4
push eax
push 0x421e68
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x421046
lea eax, [ebp - 0x2bc]
call fcn.0041c384
push dword [ebp - 0x2bc]
lea edx, [ebp - 0x2c0]
mov eax, 4
call fcn.0041cf48
push dword [ebp - 0x2c0]
push 0x421e80
mov eax, 0x428654
mov edx, 3
call fcn.0040436c
lea eax, [ebp - 0x2c4]
call fcn.0041c384
push dword [ebp - 0x2c4]
lea edx, [ebp - 0x2c8]
mov eax, 4
call fcn.0041cf48
push dword [ebp - 0x2c8]
push 0x421e40
mov eax, 0x428658
mov edx, 3
call fcn.0040436c
mov edx, dword [0x424434]
mov edx, dword [edx]
mov ecx, dword [0x428658]
mov eax, dword [0x428654]
call fcn.0041bf24
push 0x64
call sub.kernel32.dll_Sleep
mov edx, dword [0x428654]
mov eax, dword [0x428658]
call fcn.0041c524
push 0x64
call sub.kernel32.dll_Sleep
push 0
push 0
push 0
mov eax, dword [0x428658]
call fcn.004044a4
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
push 0x64
call sub.kernel32.dll_Sleep
call fcn.00403ea0
push 0x421e88
call sub.kernel32.dll_GetModuleHandleA_1
test eax, eax
jne 0x421070
push 0x421e94
call sub.kernel32.dll_GetModuleHandleA_1
test eax, eax
jne 0x421070
push 0x421ea4
call sub.kernel32.dll_GetModuleHandleA_1
test eax, eax
je 0x421078
mov eax, dword [0x424478]
mov byte [eax], 1
lea edx, [ebp - 0x2cc]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2cc]
mov edx, 0x421eb8
call fcn.004043f0
jne 0x42115f
mov eax, dword [0x424504]
mov byte [eax], 1
mov eax, dword [0x4243d4]
mov byte [eax], 1
mov eax, dword [0x424478]
mov byte [eax], 1
call fcn.0041a304
test al, al
jne 0x42115f
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x42115f
mov eax, dword [0x4243a8]
mov eax, dword [eax + 0x116c]
call fcn.00415a9c
test al, al
jne 0x42113a
call sub.kernel32.dll_GetCurrentProcessId
mov ebx, eax
mov eax, dword [0x4243a8]
mov dword [eax + 0x116c], ebx
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x116c
mov eax, dword [0x4243a8]
mov ecx, ebx
xor edx, edx
mov eax, 2
call fcn.0041d4c4
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
call sub.kernel32.dll_GetCurrentProcessId
call fcn.0041a404
test al, al
jne 0x42115f
push 0
push 0
push 0x428664
mov ecx, 0x41f150
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2d0]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2d0]
mov edx, 0x421ecc
call fcn.004043f0
jne 0x4211d2
mov eax, dword [0x424504]
mov byte [eax], 1
mov eax, dword [0x4243d4]
mov byte [eax], 1
mov eax, dword [0x424478]
mov byte [eax], 1
call fcn.0041a304
test al, al
jne 0x4211d2
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x4211d2
call fcn.00415910
test al, al
jne 0x4211d2
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2d4]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2d4]
mov edx, 0x421ee4
call fcn.004043f0
jne 0x4212d5
mov eax, dword [0x4243d4]
mov byte [eax], 1
mov eax, dword [0x424478]
mov byte [eax], 1
call fcn.0041a304
test al, al
jne 0x4212d5
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x4212d5
mov eax, dword [0x4243a8]
mov eax, dword [eax + 0x116c]
call fcn.00415a9c
test al, al
jne 0x42128c
call sub.kernel32.dll_GetCurrentProcessId
mov ebx, eax
mov eax, dword [0x4243a8]
mov dword [eax + 0x116c], ebx
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x116c
mov eax, dword [0x4243a8]
mov ecx, ebx
xor edx, edx
mov eax, 2
call fcn.0041d4c4
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
call sub.kernel32.dll_GetCurrentProcessId
call fcn.0041a404
test al, al
jne 0x4212d5
lea eax, [ebp - 0x2d8]
call fcn.0041c384
mov eax, dword [ebp - 0x2d8]
call fcn.0041bd18
call sub.kernel32.dll_GetCurrentProcessId
call fcn.0041a404
test al, al
jne 0x4212d5
push 0
push 0
push 0x428664
mov ecx, 0x41f150
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2dc]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2dc]
mov edx, 0x421efc
call fcn.004043f0
jne 0x42136c
mov eax, dword [0x424504]
mov byte [eax], 1
mov eax, dword [0x4243d4]
mov byte [eax], 1
mov eax, dword [0x424478]
mov byte [eax], 1
call fcn.0041a304
test al, al
jne 0x42136c
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x42136c
lea eax, [ebp - 0x2e0]
call fcn.0041c384
mov eax, dword [ebp - 0x2e0]
call fcn.0041bd18
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
push 0
push 0
push 0x428664
mov ecx, 0x41f150
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2e4]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2e4]
mov edx, 0x421f10
call fcn.004043f0
jne 0x421403
mov eax, dword [0x424504]
mov byte [eax], 1
mov eax, dword [0x4243d4]
mov byte [eax], 1
mov eax, dword [0x424478]
mov byte [eax], 1
call fcn.0041a304
test al, al
jne 0x421403
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x421403
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea eax, [ebp - 0x2e8]
call fcn.0041c384
mov eax, dword [ebp - 0x2e8]
call fcn.0041bd18
push 0
push 0
push 0x428664
mov ecx, 0x41f150
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2ec]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2ec]
mov edx, 0x421f24
call fcn.004043f0
jne 0x42142c
call fcn.0041ea28
lea edx, [ebp - 0x2f0]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2f0]
mov edx, 0x421f3c
call fcn.004043f0
jne 0x4215bc
mov eax, dword [0x4243a8]
mov eax, dword [eax + 0x1170]
call fcn.00415b84
test al, al
je 0x42147a
mov eax, dword [0x4243a8]
cmp dword [eax + 0x1170], 0
jne 0x4215bc
mov edx, dword [0x4243a8]
xor eax, eax
mov dword [edx + 0x1120], eax
push 0
push 0
push 0
mov edx, dword [0x4244ec]
mov edx, dword [edx]
push edx
push 0x1120
mov edx, dword [0x4243a8]
mov ecx, eax
xor edx, edx
mov eax, 2
call fcn.0041d4c4
call sub.kernel32.dll_GetCurrentProcessId
mov ebx, eax
mov eax, dword [0x4243a8]
mov dword [eax + 0x1170], ebx
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x1158
mov eax, dword [0x4243a8]
mov ecx, ebx
xor edx, edx
mov eax, 2
call fcn.0041d4c4
mov eax, dword [0x424504]
mov byte [eax], 0
mov eax, dword [0x4243d4]
mov byte [eax], 0
mov eax, dword [0x4243a8]
mov byte [eax + 0x1108], 0
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x1108
xor ecx, ecx
xor edx, edx
mov eax, 4
call fcn.0041d4c4
push 0
push 0
push 0x428664
mov ecx, 0x415c78
xor edx, edx
xor eax, eax
call fcn.00403fc8
push 0
push 0
push 0x428664
mov ecx, 0x41487c
xor edx, edx
xor eax, eax
call fcn.00403fc8
push 0
push 0
push 0x428664
mov ecx, 0x41f298
xor edx, edx
xor eax, eax
call fcn.00403fc8
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110a], 0
je 0x4215bc
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x110a
xor ecx, ecx
xor edx, edx
mov eax, 4
call fcn.0041d4c4
mov dl, 1
mov eax, dword [0x40ab34]
call fcn.00403544
mov edx, dword [0x42437c]
mov dword [edx], eax
mov eax, dword [0x42437c]
mov edx, 0x421f50
call fcn.004177e0
lea edx, [ebp - 0x2f4]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2f4]
mov edx, 0x421f6c
call fcn.004043f0
jne 0x421731
mov eax, dword [0x4243a8]
mov eax, dword [eax + 0x1168]
call fcn.00415a9c
test al, al
jne 0x421711
call sub.kernel32.dll_GetCurrentProcessId
mov ebx, eax
mov eax, dword [0x4243a8]
mov dword [eax + 0x1168], ebx
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x1168
mov eax, dword [0x4243a8]
mov ecx, ebx
xor edx, edx
mov eax, 2
call fcn.0041d4c4
push 0
push 0
push 0x428664
mov ecx, 0x41f298
xor edx, edx
xor eax, eax
call fcn.00403fc8
call fcn.0041b624
call fcn.00414d40
cmp eax, 0x3c
jae 0x42165f
call fcn.0041ed58
call fcn.0041a304
test al, al
jne 0x421731
mov eax, dword [0x4243a8]
mov byte [eax + 0x1108], 0
push 0
push 0
push 0
mov eax, dword [0x4244ec]
mov eax, dword [eax]
push eax
push 0x1108
xor ecx, ecx
xor edx, edx
mov eax, 4
call fcn.0041d4c4
mov eax, dword [0x4243a8]
cmp byte [eax + 0x110b], 0
jne 0x421731
mov edx, dword [0x4243a8]
xor eax, eax
mov dword [edx + 0x1120], eax
push 0
push 0
push 0
mov edx, dword [0x4244ec]
mov edx, dword [edx]
push edx
push 0x1120
mov edx, dword [0x4243a8]
mov ecx, eax
xor edx, edx
mov eax, 2
call fcn.0041d4c4
push 0
push 0
push 0x428664
mov ecx, 0x415c78
xor edx, edx
xor eax, eax
call fcn.00403fc8
push 0
push 0
push 0x428664
mov ecx, 0x41f6f4
xor edx, edx
xor eax, eax
call fcn.00403fc8
jmp 0x421731
call fcn.0041a304
test al, al
je 0x421731
push 0
push 0
push 0x428664
mov ecx, 0x41f298
xor edx, edx
xor eax, eax
call fcn.00403fc8
lea edx, [ebp - 0x2f8]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2f8]
mov edx, 0x421f84
call fcn.004043f0
jne 0x42175a
call fcn.0041ec44
lea edx, [ebp - 0x2fc]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x2fc]
mov edx, 0x421f98
call fcn.004043f0
jne 0x42179a
call fcn.0041eb50
push 0
push 0
push 0x428664
mov ecx, 0x41a2e8
xor edx, edx
xor eax, eax
call fcn.00403fc8
call sub.kernel32.dll_GetCurrentProcessId
lea edx, [ebp - 0x304]
call fcn.004151e4
mov eax, dword [ebp - 0x304]
lea edx, [ebp - 0x300]
call fcn.0040760c
mov eax, dword [ebp - 0x300]
mov edx, 0x421fac
call fcn.004043f0
je 0x42183d
call sub.kernel32.dll_GetCurrentProcessId
lea edx, [ebp - 0x30c]
call fcn.004151e4
mov eax, dword [ebp - 0x30c]
lea edx, [ebp - 0x308]
call fcn.0040760c
mov eax, dword [ebp - 0x308]
mov edx, 0x421fbc
call fcn.004043f0
je 0x42183d
call sub.kernel32.dll_GetCurrentProcessId
lea edx, [ebp - 0x314]
call fcn.004151e4
mov eax, dword [ebp - 0x314]
lea edx, [ebp - 0x310]
call fcn.0040760c
mov eax, dword [ebp - 0x310]
mov edx, 0x421fd4
call fcn.004043f0
je 0x42183d
mov eax, dword [0x4243d4]
mov byte [eax], 1
jmp 0x421845
mov eax, dword [0x4243d4]
mov byte [eax], 0
lea edx, [ebp - 0x318]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x318]
mov edx, 0x421f6c
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x31c]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x31c]
mov edx, 0x421f3c
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x320]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x320]
mov edx, 0x421a3c
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x324]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x324]
mov edx, 0x421b94
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x328]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x328]
mov edx, 0x421f24
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x32c]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x32c]
mov edx, 0x421a5c
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x330]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x330]
mov edx, 0x421a70
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x334]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x334]
mov edx, 0x421a84
call fcn.004043f0
je 0x4219b8
lea edx, [ebp - 0x338]
mov eax, dword [0x4243f4]
mov eax, dword [eax]
call fcn.0040760c
mov eax, dword [ebp - 0x338]
mov edx, 0x421a98
call fcn.004043f0
je 0x4219b8
push 0
push 0
push 0x428664
mov ecx, 0x41f298
xor edx, edx
xor eax, eax
call fcn.00403fc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4219fd
lea eax, [ebp - 0x338]
mov edx, 0x5f
call fcn.00404030
lea eax, [ebp - 0xbc]
mov edx, 5
call fcn.00404030
lea eax, [ebp - 0xa8]
mov edx, 0x1b
call fcn.00404030
ret