Function at 0x4123f0
Capabilities:
Check if file exists
Create process on windows
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x585aa8
mov eax, dword fs:[0]
push eax
sub esp, 0x4b8
mov eax, dword [0x60e9b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x460], edx
mov eax, ecx
mov dword [ebp - 0x420], eax
push ecx
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041ae20
mov dword [ebp - 4], 0
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0
call fcn.00413870
mov dword [ebp - 0x458], eax
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 1
call fcn.00421720
lea edx, [ebp - 0x458]
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004427d0
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov edx, dword [ebp - 0x418]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4124ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5ea238
push str.mpSetup_Cls
call dword [sym.imp.USER32.dll_FindWindowW]
push str._updump
lea ecx, [ebp - 0x41c]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 3
mov esi, esp
mov dword [ebp - 0x418], esi
mov ecx, dword [ebp - 0x41c]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ebx, ebx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x41c]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412521
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4125ce
push 0x5e90d4
push str.none
push str.crash
call fcn.00438690
add esp, 8
mov ecx, esp
push str._updump
call fcn.004078d0
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041bb20
push ecx
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x418], esp
push 0x5e90d4
call fcn.004078d0
mov byte [ebp - 4], 5
cmp dword [0x618050], 0
jne 0x41259d
push 4
call fcn.0055602b
mov dword [ebp - 0x418], eax
add esp, 4
mov dword [0x618050], eax
mov dword [eax], vtable.CUploadDumpMgr.0
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 4
push eax
call fcn.00414000
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4125ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._updump_cv
lea ecx, [ebp - 0x41c]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 6
mov esi, esp
mov dword [ebp - 0x418], esi
mov ecx, dword [ebp - 0x41c]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ebx, ebx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x41c]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412632
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x41271c
push ecx
mov ecx, esp
push str._updump_cv
call fcn.004078d0
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041bb20
push ecx
mov ecx, esp
mov byte [ebp - 4], 7
push str._updump_ver
call fcn.004078d0
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041bb20
push ecx
mov byte [ebp - 4], 8
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x41c]
mov dword [ebp - 0x464], esp
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 9
cmp dword [0x618050], 0
jne 0x4126ca
push 4
call fcn.0055602b
mov dword [ebp - 0x424], eax
add esp, 4
mov dword [0x618050], eax
mov dword [eax], vtable.CUploadDumpMgr.0
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 8
push eax
call fcn.00414000
mov byte [ebp - 4], 7
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4126fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41271c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x420]
lea ecx, [ebp - 0x450]
call fcn.004078d0
mov byte [ebp - 4], 0xa
push str._cpCallApp
push dword [ebp - 0x450]
call fcn.005629b8
add esp, 8
test eax, eax
je 0x41275f
push str._rgCallApp
push dword [ebp - 0x450]
call fcn.005629b8
add esp, 8
test eax, eax
jne 0x4127ca
push str._cpCallApp
push dword [ebp - 0x450]
call fcn.005629b8
add esp, 8
mov edx, str.rg_callapp
test eax, eax
mov ecx, str.cp_callapp
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0x418]
call fcn.004078d0
push 0x5e90d4
mov byte [ebp - 4], 0xb
push str.none
push dword [ebp - 0x418]
call fcn.00438690
mov byte [ebp - 4], 0xa
add esp, 0xc
mov edx, dword [ebp - 0x418]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4127ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._check_update
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0xc
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ebx, ebx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41282e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4128c5
cmp dword [ebp - 0x454], 0
jne 0x4128c5
push ecx
mov ecx, esp
mov dword [ebp - 0x434], 0
push str._check_update
call fcn.004078d0
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0041bb20
mov byte [ebp - 4], 0xd
mov eax, dword [0x61804c]
test eax, eax
jne 0x41289d
push 0xc
call fcn.0055602b
add esp, 4
mov dword [ebp - 0x424], eax
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00401630
mov byte [ebp - 4], 0xd
mov dword [0x61804c], eax
mov ecx, eax
call fcn.004017c0
mov byte [ebp - 4], 0xa
mov eax, edi
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4128c5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, esp
push str._check_enable_pdf_protect
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test eax, eax
je 0x412942
push 0x400
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00559270
add esp, 0xc
call fcn.00408c40
push eax
call fcn.004088b0
push eax
push str.___Check_enable_pdf_protect__d__d___
lea eax, [ebp - 0x414]
push 0x200
push eax
call fcn.0040b760
add esp, 0x14
lea eax, [ebp - 0x414]
push eax
call ebx
call fcn.004088b0
test eax, eax
je 0x412942
call fcn.00408c40
test eax, eax
je 0x412942
call fcn.004122f0
push str._enable_pdf_protect
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0xf
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4129b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x4129bd
call fcn.004122f0
jmp 0x412a10
push ecx
mov ecx, esp
push str._disable_pdf_protect
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041b990
test eax, eax
jne 0x4129f5
push ecx
mov ecx, esp
push str._sp_dpp
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041b990
test eax, eax
je 0x412a10
call fcn.004056d0
call fcn.00439be0
cmp dword [0x615f48], 0x800
jl 0x412a10
call fcn.0045bd60
push str._install
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x10
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412a80
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
jne 0x412a9c
push ecx
mov ecx, esp
push str._install
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
push ecx
mov ecx, esp
push str._update
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
push ecx
mov ecx, esp
push str._uninstall
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
push 0x5ea3fc
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x11
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412b3c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x412b57
push 0x5e90d4
push str.none
push str.server_run
call fcn.00438690
add esp, 0xc
push str._DREP
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x12
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412bc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x412bf4
cmp dword [0x618054], 0
jne 0x412bef
push 4
call fcn.0055602b
mov dword [ebp - 0x424], eax
add esp, 4
mov dword [0x618054], eax
mov dword [eax], vtable.CDeviceEnvMgr.0
call fcn.00409f40
push str._SCS
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x13
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412c64
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x412d21
call fcn.00402a90
mov ecx, eax
test ecx, ecx
jne 0x412c81
push 0x80004005
call fcn.00402b10
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x14
push eax
push ecx
mov ecx, esp
push str._SCS
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041bc10
mov esi, dword [ebp - 0x418]
push 0x5ea41c
push esi
call fcn.005629b8
add esp, 8
test eax, eax
jne 0x412cd6
push 0x5e90d4
push 0x5e0998
jmp 0x412cf9
push 0x5ea420
push esi
call fcn.005629b8
add esp, 8
push 0x5e90d4
test eax, eax
jne 0x412cf4
push str.cancel
jmp 0x412cf9
push 0x5e0958
push str.server_call_speedup
call fcn.00438690
add esp, 0xc
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x412d21
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - method.CCheckCloudConfigMgr.virtual_0], vtable.CCheckCloudConfigMgr.0
push 0x5ea424
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x15
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x16
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412d9f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x412de8
mov eax, dword [0x615818]
mov dword [ebp - 0x434], 0
test eax, eax
jne 0x412dda
push 0x48
call fcn.0055602b
add esp, 4
mov dword [ebp - 0x424], eax
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.00408de0
mov byte [ebp - 4], 0x15
mov dword [0x615818], eax
lea ecx, [ebp - 0x45c]
push ecx
mov ecx, eax
call fcn.00409460
push str._ChckePDF
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x18
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ecx, ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne cl
add edx, 0xfffffff0
mov dword [ebp - 0x420], ecx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412e58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x420]
test ecx, ecx
je 0x412eb9
push str.___RunningHelper_check_pdf_Assoc___
call ebx
call fcn.004088b0
test eax, eax
je 0x412eb2
push str.___RunningHelper_check_pdf_Assoc_False___
call ebx
push ecx
mov ecx, esp
mov byte [ebp - 0x42d], 0
push 0x5e90d4
call fcn.004078d0
mov dl, byte [ebp - 0x42d]
call fcn.0042cc20
add esp, 4
test eax, eax
je 0x412eb9
push 0x5e90d4
push str.none
push str.revise_assoc
call fcn.00438690
add esp, 0xc
jmp 0x412eb9
push str.___RunningHelper_check_pdf_Assoc_True___
call ebx
push ecx
mov ecx, esp
push str._shellextshow
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412f78
push str.PDEngine
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x412f22
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x42c], 0x3e8
push ecx
push 0
push 0x4a
push eax
mov dword [ebp - 0x428], 4
mov dword [ebp - 0x424], str.test
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x412f78
push ecx
mov edx, str.PDFEngine.exe
lea ecx, [ebp - 0x41c]
call fcn.004212a0
add esp, 4
push dword [ebp - 0x41c]
call esi
test eax, eax
je 0x412f5b
push 1
push 0
push str._shellextshow
push dword [ebp - 0x41c]
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x41c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x412f78
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], eax
mov dword [ebp - method.CEndSessionMgr.1.virtual_0], vtable.CEndSessionMgr.1.0
mov dword [ebp - method.CEndSessionMgr.virtual_0], vtable.CEndSessionMgr.0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x19
push str._enableServer
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
je 0x412ff4
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x434], 0
call fcn.0040a9e0
push ecx
mov ecx, esp
push str._enableServerNow
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
je 0x413026
mov dword [ebp - 0x434], 1
call fcn.0040ac30
push str.enableServerNow_run_finished
call ebx
lea ecx, [ebp - 0x4c4]
call fcn.00404150
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x1a
push str._forceActive
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
je 0x41308b
push dword [ebp - 0x494]
call esi
test eax, eax
je 0x41308b
push dword [ebp - 0x494]
push 1
push str.Activate
push str.masterpdf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41308b
lea ecx, [ebp - 0x4c4]
call fcn.00404da0
push str._checkActive
lea ecx, [ebp - 0x418]
call fcn.004078d0
push ecx
mov byte [ebp - 4], 0x1b
mov esi, esp
mov dword [ebp - 0x424], esi
mov ecx, dword [ebp - 0x418]
lea ecx, [ecx - 0x10]
call fcn.00407c00
add eax, 0x10
lea ecx, [ebp - 0x44c]
mov dword [esi], eax
call fcn.0041b860
xor ebx, ebx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x418]
cmp eax, 0xffffffff
mov eax, edi
setne bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4130ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x413108
lea ecx, [ebp - 0x4c4]
mov dword [ebp - 0x434], 0
call fcn.00404670
push ecx
mov ecx, esp
push str._launchMainProg
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
jne 0x413160
push ecx
mov ecx, esp
push str._startmenu
call fcn.004078d0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
jne 0x413160
push ecx
mov ecx, esp
push str._taskbar
call fcn.004133a0
lea ecx, [ebp - 0x44c]
call fcn.0041ba20
test eax, eax
je 0x413248
lea ecx, [ebp - 0x41c]
call fcn.00421720
push dword [ebp - 0x41c]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x413227
push str.Globalmasterpdf_server_event_C33B7EE9753C
push 0
push 2
mov byte [ebp - 4], 0x1d
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push str.Globalmasterpdf_server_mapping_C33B7EE9753C
push 0
mov esi, eax
push 2
mov dword [ebp - 0x424], esi
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov ebx, eax
mov dword [ebp - 0x428], ebx
test ebx, ebx
je 0x4131dd
test esi, esi
je 0x4131dd
sub esp, 8
lea ecx, [ebp - 0x428]
push dword [ebp - 0x41c]
call fcn.00442c30
mov esi, dword [ebp - 0x424]
mov ebx, dword [ebp - 0x428]
test eax, eax
jns 0x41320f
sub esp, 0x10
mov dword [ebp - 0x424], 0xffffffff
push dword [ebp - 0x41c]
call fcn.0041c1d0
test eax, eax
jne 0x41320f
push 1
push eax
push eax
push dword [ebp - 0x41c]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x413220
push esi
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x413227
push ebx
call eax
mov byte [ebp - 4], 0x1a
mov eax, edi
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x413248
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x434], 0
je 0x413255
xor esi, esi
jmp 0x413262
mov ecx, dword [ebp - 0x460]
call fcn.004138e0
mov esi, eax
lea ecx, [ebp - 0x4c4]
call fcn.004042c0
push dword [ebp - 0x48c]
mov dword [ebp - method.CEndSessionMgr.1.virtual_0], vtable.CEndSessionMgr.1.0
mov dword [ebp - method.CEndSessionMgr.virtual_0], vtable.CEndSessionMgr.0
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41329d
push dword [ebp - 0x48c]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x47c]
mov dword [ebp - method.CSingletonBase_class_CEndSessionMgr_.virtual_0], vtable.CSingletonBase_class_CEndSessionMgr_.0
test eax, eax
je 0x4132b7
push eax
call fcn.00553633
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x450]
mov dword [ebp - method.CCheckCloudConfigMgr.virtual_0], vtable.CCheckCloudConfigMgr.0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4132e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x458]
lea ecx, [ebp - 0x458]
push eax
push dword [eax]
lea eax, [ebp - 0x424]
push eax
call fcn.004134d0
push dword [ebp - 0x458]
call fcn.00555b32
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x448]
test ecx, ecx
je 0x413335
mov edx, dword [ebp - 0x444]
call fcn.0040ee20
push dword [ebp - 0x448]
call fcn.0055c217
add esp, 4
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x413350
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00555b37
mov esp, ebp
pop ebp
ret