Function at 0x448470
Capabilities:
Check if file exists
Create pipe
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4e8b7e
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x670f1c]
xor eax, esp
mov dword [esp + 0x4c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x670f1c]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov esi, ecx
xor ebp, ebp
cmp byte [esi + 0x1002ec], 0
jne 0x448c59
cmp byte [esi + 0x1ec], 0
mov byte [esp + 0x17], 1
je 0x44891a
or edi, 0xffffffff
cmp byte [esi + 0x1002f0], 0
lea ebx, [ebp + 8]
jne 0x4485c9
mov eax, dword [esi + 0x21e]
cmp eax, ebp
je 0x4484ea
cmp eax, edi
jne 0x4485c9
lea eax, [esi + 0x1002a0]
push eax
lea ecx, [esi + 0x222]
call fcn.00411460
fstp qword [esp + 0x1c]
call fcn.00419310
fld qword [esp + 0x1c]
fcomp qword [eax + 0x252]
fnstsw ax
test ah, 0x41
jne 0x4485c4
mov eax, dword [esi + 0x20e]
cmp eax, ebp
je 0x44852b
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [esi + 0x10023c]
push ecx
lea edx, [esp + 0x2c]
push 0x66e390
push edx
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x40], ebx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x6c], ebp
jae 0x448556
lea eax, [esp + 0x2c]
lea ecx, [esi + 0x100230]
push ecx
push ebp
push 0x100000
push 0x100000
push 0xff
push ebp
push 3
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
cmp eax, edi
mov dword [esi + 0x21e], eax
je 0x4485b7
cmp dword [esp + 0x40], ebx
mov ecx, dword [esp + 0x2c]
jae 0x44858f
lea ecx, [esp + 0x2c]
cmp dword [esi + 0x206], ebx
jb 0x44859f
mov eax, dword [esi + 0x1f2]
jmp 0x4485a5
lea eax, [esi + 0x1f2]
push ecx
push eax
push 0x4fdd10
push 3
push esi
call fcn.00418e80
add esp, 0x14
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], edi
call fcn.00401470
mov byte [esp + 0x17], 0
cmp dword [esi + 0x20a], ebp
jne 0x448695
lea edx, [esi + 0x1002a0]
push edx
lea ecx, [esi + 0x222]
call fcn.00411460
fstp qword [esp + 0x1c]
call fcn.00419310
fld qword [esp + 0x1c]
fcomp qword [eax + 0x252]
fnstsw ax
test ah, 0x41
jne 0x448690
lea eax, [esi + 0x10023c]
push eax
lea ecx, [esp + 0x2c]
push 0x66e3ac
push ecx
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x40], ebx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x6c], 1
jae 0x448634
lea eax, [esp + 0x2c]
push eax
push ebp
lea edx, [esi + 0x100230]
push edx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
cmp eax, ebp
mov dword [esi + 0x20a], eax
je 0x448683
cmp dword [esp + 0x40], ebx
mov ecx, dword [esp + 0x2c]
jae 0x44865b
lea ecx, [esp + 0x2c]
cmp dword [esi + 0x206], ebx
jb 0x44866b
mov eax, dword [esi + 0x1f2]
jmp 0x448671
lea eax, [esi + 0x1f2]
push ecx
push eax
push 0x4fdd68
push 3
push esi
call fcn.00418e80
add esp, 0x14
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], edi
call fcn.00401470
mov byte [esp + 0x17], 0
cmp dword [esi + 0x20e], ebp
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
jne 0x4486f4
lea eax, [esi + 0x10023c]
push eax
lea ecx, [esp + 0x2c]
push 0x66e400
push ecx
call fcn.00406700
add esp, 0xc
cmp dword [eax + 0x18], ebx
jb 0x4486c6
mov eax, dword [eax + 4]
jmp 0x4486c9
add eax, 4
push eax
push ebp
push 1
lea edx, [esi + 0x100230]
push edx
call edi
cmp dword [esp + 0x40], ebx
mov dword [esi + 0x20e], eax
jb 0x4486ef
mov eax, dword [esp + 0x2c]
push eax
call fcn.004aef39
add esp, 4
mov byte [esp + 0x17], 0
cmp dword [esi + 0x212], ebp
jne 0x44874d
lea ecx, [esi + 0x10023c]
push ecx
lea edx, [esp + 0x2c]
push 0x66e41c
push edx
call fcn.00406700
add esp, 0xc
cmp dword [eax + 0x18], ebx
jb 0x44871f
mov eax, dword [eax + 4]
jmp 0x448722
add eax, 4
push eax
push ebp
push 1
lea eax, [esi + 0x100230]
push eax
call edi
cmp dword [esp + 0x40], ebx
mov dword [esi + 0x212], eax
jb 0x448748
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004aef39
add esp, 4
mov byte [esp + 0x17], 0
cmp byte [esi + 0x1002f0], 0
jne 0x4487b5
cmp dword [esi + 0x21a], ebp
jne 0x4487b5
mov eax, dword [esi + 0x21e]
cmp eax, ebp
je 0x4487b0
cmp eax, 0xffffffff
je 0x4487b0
lea edx, [esi + 0x10023c]
push edx
lea eax, [esp + 0x2c]
push 0x66e3c8
push eax
call fcn.00406700
add esp, 0xc
cmp dword [eax + 0x18], ebx
jb 0x448790
mov eax, dword [eax + 4]
jmp 0x448793
add eax, 4
push eax
push 1
push 1
lea ecx, [esi + 0x100230]
push ecx
call edi
lea ecx, [esp + 0x28]
mov dword [esi + 0x21a], eax
call fcn.00401470
mov byte [esp + 0x17], 0
sub esp, 0x1c
mov eax, esp
lea edx, [esi + 0x10023c]
mov dword [esp + 0x34], esp
push edx
push 0x66e3e4
push eax
call fcn.00406700
add esp, 0xc
mov ecx, esi
call fcn.004479f0
test al, al
je 0x44881a
cmp byte [esi + 0x100258], 0
jne 0x44880e
cmp dword [esi + 0x206], ebx
jb 0x4487f7
mov eax, dword [esi + 0x1f2]
jmp 0x4487fd
lea eax, [esi + 0x1f2]
push eax
push 0x4fddb4
push 3
push esi
call fcn.00418e80
add esp, 0x10
mov byte [esi + 0x100258], 1
jmp 0x449472
cmp byte [esi + 0x100258], 0
jne 0x448855
call fcn.004107c0
cmp ax, 3
jne 0x44946d
lea ecx, [esi + 0x1002c0]
push ecx
lea ecx, [esi + 0x222]
call fcn.00411460
fcomp qword [0x4f8a58]
fnstsw ax
test ah, 0x41
jne 0x44946d
cmp dword [esi + 0x206], ebx
jb 0x448865
mov eax, dword [esi + 0x1f2]
jmp 0x44886b
lea eax, [esi + 0x1f2]
push eax
push 0x4fdde0
push 3
push esi
call fcn.00418e80
add esp, 0x10
call fcn.004107c0
movzx eax, ax
sub eax, 3
je 0x4488a4
sub eax, 1
jne 0x4488b6
mov ecx, esi
call fcn.00447870
push ebp
push ebp
push 0x14
push 2
mov ecx, esi
call fcn.004477e0
jmp 0x4488b6
mov ecx, esi
call fcn.004478a0
test al, al
je 0x448912
mov byte [esi + 0x1002f0], 1
mov edx, dword [esi + 0x21e]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call edi
mov eax, dword [esi + 0x20a]
push eax
mov dword [esi + 0x21e], ebp
mov byte [esi + 0x100292], 0
mov word [esi + 0x100294], bp
call edi
lea ecx, [esi + 0x1002a0]
push ecx
lea ecx, [esi + 0x222]
mov dword [esi + 0x20a], ebp
mov byte [esi + 0x100258], 0
mov dword [esi + 0x100298], ebp
mov dword [esi + 0x10029c], ebp
call fcn.004113f0
jmp 0x44946d
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp byte [esi + 0x1002f0], 0
jne 0x4490b0
cmp byte [esi + 0x100258], 0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x448a64
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x34], esp
lea ebp, [esi + 0x10023c]
push ebp
push 0x66e3c8
push edx
call fcn.00406700
add esp, 0xc
mov ecx, esi
call fcn.004479f0
test al, al
jne 0x448a64
cmp dword [esi + 0x206], 8
jb 0x448978
mov eax, dword [esi + 0x1f2]
jmp 0x44897e
lea eax, [esi + 0x1f2]
push eax
push 0x4fde08
push 3
push esi
call fcn.00418e80
add esp, 0x10
xor ebx, ebx
push ebx
push ebx
push 0x1f
push 7
mov ecx, esi
call fcn.004477e0
push 0xffffffffffffffff
push ebx
push 0x66e438
mov ecx, ebp
call fcn.00401640
mov eax, dword [esi + 0x21e]
push eax
call edi
mov ecx, dword [esi + 0x20a]
push ecx
mov dword [esi + 0x21e], ebx
mov byte [esi + 0x100292], bl
mov word [esi + 0x100294], bx
call edi
mov edx, dword [esi + 0x216]
push edx
mov dword [esi + 0x20a], ebx
call edi
mov eax, dword [esi + 0x20e]
push eax
mov dword [esi + 0x216], ebx
call edi
mov ecx, dword [esi + 0x212]
push ecx
mov dword [esi + 0x20e], ebx
call edi
xor eax, eax
mov dword [esi + 0x212], ebx
mov byte [esi + 0x100258], bl
mov dword [esi + 0x1002dc], eax
mov dword [esi + 0x1002e0], eax
mov dword [esi + 0x1002e4], eax
mov dword [esi + 0x1002e8], eax
lea edx, [esi + 0x1002a0]
push edx
lea ecx, [esi + 0x222]
mov dword [esi + 0x1002d4], ebx
mov dword [esi + 0x1002d8], ebx
mov word [esi + 0x1002ee], bx
mov byte [esp + 0x1b], al
mov dword [esi + 0x100298], ebx
mov dword [esi + 0x10029c], ebx
call fcn.004113f0
add word [esi + 0x100296], 1
jmp 0x448a66
xor ebx, ebx
cmp dword [esi + 0x216], ebx
jne 0x448b2d
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x34], esp
push 0x66e438
push 0x66e3e4
push eax
call fcn.00406700
add esp, 0xc
mov ecx, esi
call fcn.004479f0
test al, al
je 0x448b28
mov ebx, 8
cmp dword [esi + 0x206], ebx
jb 0x448ab2
mov eax, dword [esi + 0x1f2]
jmp 0x448ab8
lea eax, [esi + 0x1f2]
push eax
push 0x4fde30
push 3
push esi
call fcn.00418e40
add esp, 0x10
lea ecx, [esp + 0x18]
call fcn.00407400
cmp dword [0x66e46c], ebx
mov ebp, dword [str.Exe_d]
mov dword [esp + 0x6c], 2
jae 0x448aed
mov ebp, str.Exe_d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [esp + 0x1c]
push ebp
push ecx
call fcn.00406da0
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00410900
push eax
lea ecx, [esi + 0x10023c]
call fcn.0040b920
lea ecx, [esp + 0x18]
mov dword [esp + 0x6c], 0xffffffff
call fcn.00406960
mov byte [esp + 0x17], 0
lea ebx, [esi + 0x10023c]
push 0x66e438
push ebx
call fcn.004410d0
add esp, 8
test al, al
je 0x448c6d
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 0x66e3c8
push edx
call fcn.00406700
add esp, 0xc
mov ecx, esi
call fcn.004479f0
test al, al
je 0x448bad
cmp byte [esi + 0x100258], 0
mov edi, 8
jne 0x448ba1
cmp dword [esi + 0x206], edi
jb 0x448b8a
mov eax, dword [esi + 0x1f2]
jmp 0x448b90
lea eax, [esi + 0x1f2]
push eax
push 0x4fdea0
push 3
push esi
call fcn.00418e80
add esp, 0x10
mov byte [esi + 0x100258], 1
jmp 0x448c72
cmp dword [esi + 0x206], 8
jb 0x448bbe
mov ebp, dword [esi + 0x1f2]
jmp 0x448bc4
lea ebp, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push 0x4fded0
push 3
push esi
call fcn.00418e40
add esp, 0x14
lea ecx, [esp + 0x18]
call fcn.00407400
cmp dword [0x66e46c], 8
mov ebp, dword [str.Exe_d]
mov dword [esp + 0x6c], 3
jae 0x448c01
mov ebp, str.Exe_d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.00406da0
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00410900
push eax
mov ecx, ebx
call fcn.0040b920
mov ecx, dword [esi + 0x216]
push ecx
call edi
add word [esi + 0x100296], 1
cmp byte [esi + 0x100258], 0
mov dword [esi + 0x216], 0
mov byte [esp + 0x17], 0
lea ecx, [esp + 0x18]
je 0x448c60
call fcn.00406960
xor al, al
jmp 0x449476
mov dword [esp + 0x6c], 0xffffffff
call fcn.00406960
mov edi, 8
push 0x66e438
push ebx
call fcn.004412d0
add esp, 8
test al, al
je 0x448f5e
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x34], esp
push ebx
push 0x66e3c8
push edx
call fcn.00406700
add esp, 0xc
mov ecx, esi
call fcn.004479f0
test al, al
je 0x448ce7
cmp byte [esi + 0x100258], 0
jne 0x448cdb
cmp dword [esi + 0x206], edi
jb 0x448cc4
mov eax, dword [esi + 0x1f2]
jmp 0x448cca
lea eax, [esi + 0x1f2]
push eax
push 0x4fdf10
push 3
push esi
call fcn.00418e80
add esp, 0x10
mov byte [esi + 0x100258], 1
jmp 0x448f5e
lea ebp, [esi + 0x1002d4]
xor ebx, ebx
cmp dword [ebp + 4], ebx
ja 0x448cfd
cmp dword [ebp], ebx
jbe 0x448de1
mov ecx, dword [esi + 0x1002dc]
lea eax, [esp + 0x18]
push eax
push ecx
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x448d1d
mov dword [esp + 0x18], ebx
jmp 0x448d5a
mov edi, 0x103
cmp dword [esp + 0x18], edi
jne 0x448d5a
push ebp
lea ecx, [esi + 0x222]
call fcn.00411460
fcomp qword [0x4f8a58]
fnstsw ax
test ah, 0x41
jne 0x448f54
cmp dword [esp + 0x18], edi
jne 0x448d5a
mov edx, dword [esi + 0x1002dc]
push 1
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
mov dword [esi + 0x1002dc], eax
mov dword [esi + 0x1002e0], eax
mov dword [esi + 0x1002e4], eax
mov dword [esi + 0x1002e8], eax
add word [esi + 0x1002ee], 1
movzx eax, word [esi + 0x1002ee]
cmp ax, 3
mov dword [ebp], ebx
mov dword [ebp + 4], ebx
jb 0x448f54
cmp dword [esi + 0x206], 8
jb 0x448da4
mov eax, dword [esi + 0x1f2]
jmp 0x448daa
lea eax, [esi + 0x1f2]
push eax
push 0x4fdf44
push 3
push esi
call fcn.00418e40
add esp, 0x10
push ebx
push ebx
push 0x1f
push 7
mov ecx, esi
call fcn.004477e0
push ebx
push ebx
push 0x21
push 7
mov ecx, esi
call fcn.004477e0
mov byte [esi + 0x1002ec], 1
jmp 0x448f54
cmp dword [esi + 0x10028a], 8
lea edi, [esi + 0x100272]
jb 0x448df5
mov eax, dword [edi + 4]
jmp 0x448df8
lea eax, [edi + 4]
push eax
lea ecx, [esp + 0x1c]
call fcn.00406e40
mov ebx, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x6c], ebx
call fcn.00410900
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x448e4a
cmp dword [esi + 0x206], 8
jb 0x448e39
mov eax, dword [esi + 0x1f2]
push eax
push 0x4fdf78
jmp 0x448f13
lea eax, [esi + 0x1f2]
push eax
push 0x4fdf78
jmp 0x448f13
cmp dword [esi + 0x206], 8
jb 0x448e5b
mov eax, dword [esi + 0x1f2]
jmp 0x448e61
lea eax, [esi + 0x1f2]
push eax
push 0x4fdfa0
push 3
push esi
call fcn.00418e40
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [esp + 0x1c]
push 0x4fdfc8
push eax
call fcn.00423e70
add esp, 0xc
lea ecx, [esi + 0x1002dc]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00410900
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00401430
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push edi
mov byte [esp + 0xac], 5
call fcn.00406510
mov ecx, esi
mov byte [esp + 0xa8], bl
call fcn.00447a50
test al, al
je 0x448ee1
push ebp
lea ecx, [esi + 0x222]
call fcn.004113f0
jmp 0x448f43
add word [esi + 0x1002ee], 1
movzx eax, word [esi + 0x1002ee]
cmp ax, 3
jbe 0x448f43
cmp dword [esi + 0x206], 8
jb 0x448f07
mov eax, dword [esi + 0x1f2]
jmp 0x448f0d
lea eax, [esi + 0x1f2]
push eax
push 0x4fdfd8
push 3
push esi
call fcn.00418e40
add esp, 0x10
push 0
push 0
push 0x1f
push 7
mov ecx, esi
call fcn.004477e0
push 0
push 0
push 0x21
push 7
mov ecx, esi
call fcn.004477e0
mov byte [esi + 0x1002ec], 1
lea ecx, [esp + 0x18]
mov dword [esp + 0x6c], 0xffffffff
call fcn.00406960
mov byte [esp + 0x17], 0
mov edi, 8
cmp byte [esi + 0x100258], 0
je 0x4491ec
mov eax, dword [esi + 0x21e]
test eax, eax
je 0x448f7e
cmp eax, 0xffffffff
jne 0x4490b0
lea edx, [esi + 0x1002a0]
push edx
lea ecx, [esi + 0x222]
call fcn.00411460
fstp qword [esp + 0x1c]
call fcn.00419310
fld qword [esp + 0x1c]
fcomp qword [eax + 0x25a]
fnstsw ax
test ah, 0x41
jne 0x4490ab
mov eax, dword [esi + 0x20e]
test eax, eax
je 0x448fbf
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [esi + 0x10023c]
push eax
lea eax, [esp + 0x2c]
push 0x66e390
push eax
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x40], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x6c], 6
jae 0x448fee
lea eax, [esp + 0x2c]
push 0
push 0xa0000000
push 3
push 0
push 0
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esi + 0x21e], eax
je 0x449054
cmp dword [esp + 0x40], edi
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0x10028e], 0
jae 0x44902a
lea ecx, [esp + 0x2c]
cmp dword [esi + 0x206], edi
jb 0x44903a
mov eax, dword [esi + 0x1f2]
jmp 0x449040
lea eax, [esi + 0x1f2]
push ecx
push eax
push 0x4fe010
push 3
push esi
call fcn.00418e80
add esp, 0x14
jmp 0x44909a
add word [esi + 0x100296], 1
cmp dword [esp + 0x40], edi
mov ebp, dword [esp + 0x2c]
jae 0x44906a
lea ebp, [esp + 0x2c]
cmp dword [esi + 0x206], 8
jb 0x44907b
mov edi, dword [esi + 0x1f2]
jmp 0x449081
lea edi, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push edi
push 0x4fe068
push 3
push esi
call fcn.00418e40
add esp, 0x18
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0xffffffff
call fcn.00401470
mov byte [esp + 0x17], 0
cmp byte [esi + 0x100258], 0
je 0x4491ec
cmp dword [esi + 0x20a], 0
jne 0x4491ec
lea ecx, [esi + 0x1002a0]
push ecx
lea ecx, [esi + 0x222]
call fcn.00411460
fstp qword [esp + 0x1c]
call fcn.00419310
fld qword [esp + 0x1c]
fcomp qword [eax + 0x25a]
fnstsw ax
test ah, 0x41
jne 0x4491e0
lea edx, [esi + 0x10023c]
push edx
lea eax, [esp + 0x2c]
push 0x66e3ac
push eax
call fcn.00406700
add esp, 0xc
mov eax, dword [esp + 0x2c]
mov edi, 8
cmp dword [esp + 0x40], edi
mov dword [esp + 0x6c], 7
jae 0x44912e
lea eax, [esp + 0x2c]
push eax
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
mov dword [esi + 0x20a], eax
je 0x44917e
cmp dword [esp + 0x40], edi
mov ecx, dword [esp + 0x2c]
jae 0x449154
lea ecx, [esp + 0x2c]
cmp dword [esi + 0x206], edi
jb 0x449164
mov eax, dword [esi + 0x1f2]
jmp 0x44916a
lea eax, [esi + 0x1f2]
push ecx
push eax
push 0x4fe0c8
push 3
push esi
call fcn.00418e80
add esp, 0x14
jmp 0x4491c8
add word [esi + 0x100296], 1
cmp dword [esp + 0x40], edi
mov ebp, dword [esp + 0x2c]
jae 0x449194
lea ebp, [esp + 0x2c]
cmp dword [esi + 0x206], edi
jb 0x4491a4
mov edi, dword [esi + 0x1f2]
jmp 0x4491aa
lea edi, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push edi
push 0x4fe118
push 3
push esi
call fcn.00418e40
add esp, 0x18
mov edi, 8
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0xffffffff
call fcn.00401470
mov byte [esp + 0x17], 0
jmp 0x4491f1
mov edi, 8
mov byte [esp + 0x17], 0
jmp 0x4491f1
mov edi, 8
cmp byte [esi + 0x100258], 0
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
je 0x4493a7
cmp dword [esi + 0x20e], 0
jne 0x4492e9
lea ecx, [esi + 0x10023c]
push ecx
lea edx, [esp + 0x2c]
push 0x66e41c
push edx
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x40], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x6c], edi
jae 0x44923c
lea eax, [esp + 0x2c]
push eax
push 0
push 0x1f0003
call ebx
test eax, eax
mov dword [esi + 0x20e], eax
je 0x449288
cmp dword [esp + 0x40], edi
mov ecx, dword [esp + 0x2c]
jae 0x44925e
lea ecx, [esp + 0x2c]
cmp dword [esi + 0x206], edi
jb 0x44926e
mov eax, dword [esi + 0x1f2]
jmp 0x449274
lea eax, [esi + 0x1f2]
push ecx
push eax
push 0x4fe168
push 3
push esi
call fcn.00418e40
add esp, 0x14
jmp 0x4492d3
add word [esi + 0x100296], 1
cmp dword [esp + 0x40], edi
mov ebp, dword [esp + 0x2c]
jae 0x44929e
lea ebp, [esp + 0x2c]
cmp dword [esi + 0x206], 8
jb 0x4492af
mov edi, dword [esi + 0x1f2]
jmp 0x4492b5
lea edi, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push edi
push 0x4fe1c0
push 3
push esi
call fcn.00418e40
add esp, 0x18
mov edi, 8
lea ecx, [esp + 0x28]
mov byte [esp + 0x17], 0
mov dword [esp + 0x6c], 0xffffffff
call fcn.00401470
cmp byte [esi + 0x100258], 0
je 0x4493a7
cmp dword [esi + 0x212], 0
jne 0x4493a7
lea eax, [esi + 0x10023c]
push eax
lea ecx, [esp + 0x2c]
push 0x66e400
push ecx
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x40], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x6c], 9
jae 0x449332
lea eax, [esp + 0x2c]
push eax
push 0
push 0x1f0003
call ebx
test eax, eax
mov dword [esi + 0x212], eax
jne 0x449391
add word [esi + 0x100296], 1
cmp dword [esp + 0x40], edi
mov ebp, dword [esp + 0x2c]
jae 0x44935c
lea ebp, [esp + 0x2c]
cmp dword [esi + 0x206], 8
jb 0x44936d
mov edi, dword [esi + 0x1f2]
jmp 0x449373
lea edi, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push edi
push 0x4fe218
push 3
push esi
call fcn.00418e40
add esp, 0x18
mov edi, 8
lea ecx, [esp + 0x28]
mov byte [esp + 0x17], 0
mov dword [esp + 0x6c], 0xffffffff
call fcn.00401470
cmp byte [esi + 0x1002f0], 0
jne 0x449472
cmp dword [esi + 0x216], 0
jne 0x449472
mov eax, dword [esi + 0x21e]
test eax, eax
je 0x44946d
cmp eax, 0xffffffff
je 0x44946d
lea edx, [esi + 0x10023c]
push edx
lea eax, [esp + 0x48]
push 0x66e3e4
push eax
call fcn.00406700
add esp, 0xc
cmp dword [esp + 0x5c], edi
mov eax, dword [esp + 0x48]
mov dword [esp + 0x6c], 0xa
jae 0x449407
lea eax, [esp + 0x48]
push eax
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
mov dword [esi + 0x216], eax
jne 0x449464
add word [esi + 0x100296], 1
cmp dword [esp + 0x5c], edi
mov ebp, dword [esp + 0x48]
jae 0x449434
lea ebp, [esp + 0x48]
cmp dword [esi + 0x206], 8
jb 0x449445
mov edi, dword [esi + 0x1f2]
jmp 0x44944b
lea edi, [esi + 0x1f2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push edi
push 0x4fe270
push 3
push esi
call fcn.00418e40
add esp, 0x18
lea ecx, [esp + 0x44]
call fcn.00401470
mov byte [esp + 0x17], 0
mov al, byte [esp + 0x17]
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.004bfdfd
add esp, 0x5c
ret