Function at 0x473323
Capabilities:
Create process on windows
Create process suspended
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5268e5
mov eax, dword fs:[0]
push eax
mov eax, 0x43fc
call fcn.004ade10
mov eax, dword [0x5770a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x42d8], ecx
and dword [ebp - 0x4370], 0
push str._TCLS_Launcher::RealLaunch_
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
pop ecx
pop ecx
mov eax, dword [ebp - 0x42d8]
and dword [eax + 0x6fc90], 0
and dword [ebp - 0x42dc], 0
and dword [ebp - 0x42f8], 0
push 0x44
push 0
lea eax, [ebp - 0x4408]
push eax
call fcn.004b0090
add esp, 0xc
mov dword [ebp - 0x4408], 0x44
xor eax, eax
lea edi, [ebp - 0x439c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x410
push 0
lea eax, [ebp - 0x830]
push eax
call fcn.004b0090
add esp, 0xc
push 0x1800
push 0
lea eax, [ebp - 0x2850]
push eax
call fcn.004b0090
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004b0090
add esp, 0xc
push 0x1a0c
push 0
lea eax, [ebp - 0x42d4]
push eax
call fcn.004b0090
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x42d8]
call fcn.0046e692
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x619a0], 0
je 0x4734be
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6199c], 0
je 0x4734be
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x70], 0
je 0x4734be
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x70]
call dword [eax + 0x6c]
mov dword [ebp - 0x4360], eax
cmp dword [ebp - 0x4360], 0
je 0x47349b
push 0
push 1
push 6
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
jmp 0x4734be
push 0
push 2
push 6
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
mov eax, dword [ebp - 0x42d8]
add eax, 0x61fc8
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x61dc8
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.0046fe0f
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6199c], 0
je 0x473547
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x61fc8], 0
jne 0x473524
push 0
push 1
push 7
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
jmp 0x473547
push 0
push 2
push 7
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push str._Launch__TCLS_Launcher::Launch_CMain::StartGameClient__s_
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
mov eax, dword [ebp - 0x42d8]
add eax, 0x5dddc
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x68
call fcn.0047cfd0
test eax, eax
je 0x4735b3
push 0x104
lea eax, [ebp - 0x830]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047b821
jmp 0x473641
mov eax, dword [ebp - 0x42d8]
add eax, 0x5dddc
mov dword [ebp - 0x42e8], eax
and dword [ebp - 0x4364], 0
lea eax, [ebp - 0x830]
test eax, eax
je 0x473641
mov eax, 0x104
test eax, eax
jle 0x473641
cmp dword [ebp - 0x42e8], 0
je 0x473641
and dword [ebp - 0x4330], 0
cmp dword [ebp - 0x42e8], 0
je 0x473614
push dword [ebp - 0x42e8]
call fcn.004cc4f3
pop ecx
cmp eax, 0x104
jae 0x473614
mov dword [ebp - 0x4330], 1
cmp dword [ebp - 0x4330], 0
je 0x473641
push dword [ebp - 0x42e8]
push 0x104
lea eax, [ebp - 0x830]
push eax
call fcn.004cc3b7
add esp, 0xc
mov dword [ebp - 0x4364], 1
push 0x104
lea eax, [ebp - 0x830]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047b821
lea eax, [ebp - 0x830]
push eax
push 0x53a228
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
mov dword [ebp - 0x4408], 0x44
mov ecx, dword [ebp - 0x42d8]
call fcn.0047624e
push 1
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047cd13
mov dword [ebp - 0x42dc], eax
cmp dword [ebp - 0x42dc], 0
je 0x4743be
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x70], 0
je 0x4743be
push 0x585ec8
lea eax, [ebp - 0x2880]
push eax
call fcn.0044ae06
pop ecx
pop ecx
and dword [ebp - 4], 0
call fcn.004cf563
cdq
push 0x64
pop ecx
idiv ecx
mov dword [ebp - 0x4368], edx
lea ecx, [ebp - 0x2880]
call fcn.004059a0
mov dword [ebp - 0x436c], eax
push dword [ebp - 0x4368]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5e1ec
push eax
push dword [ebp - 0x436c]
push 0x53a2a4
push 0
push 0x104
mov eax, dword [ebp - 0x42d8]
add eax, 0x5e3f4
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x68
push eax
call fcn.0047e608
add esp, 0x20
cmp dword [ebp - 0x42dc], 0
je 0x473ceb
and dword [ebp - 0x4324], 0
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x3ac], 0
jbe 0x473a1e
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x3b0], 0
jl 0x473a1e
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x3b0], 0x80
jge 0x473a1e
mov eax, dword [ebp - 0x42d8]
imul eax, dword [eax + 0x3b0], 0xba0
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [ecx + eax + 0xe50]
mov dword [ebp - 0x4324], eax
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6fc84], 0
jne 0x473a1e
mov eax, dword [ebp - 0x42d8]
imul eax, dword [eax + 0x3b0], 0xba0
mov ecx, dword [ebp - 0x42d8]
lea eax, [ecx + eax + 0xf5c]
mov dword [ebp - 0x42ec], eax
cmp dword [ebp - 0x42ec], 0
jne 0x473812
and dword [ebp - 0x432c], 0
jmp 0x4738d4
push dword [ebp - 0x42ec]
call fcn.004cc5f0
pop ecx
inc eax
mov dword [ebp - 0x4304], eax
cmp dword [ebp - 0x4304], 0x3fffffff
jle 0x47383d
and dword [ebp - 0x42e4], 0
jmp 0x4738c8
mov eax, dword [ebp - 0x4304]
shl eax, 1
call fcn.004ae160
mov dword [ebp - 0x42f0], esp
mov eax, dword [ebp - 0x43b8]
mov dword [ebp - 0x42e4], eax
cmp dword [ebp - 0x42f0], 0
je 0x47386e
cmp dword [ebp - 0x42ec], 0
jne 0x473877
and dword [ebp - 0x42e4], 0
jmp 0x4738c8
xor eax, eax
mov ecx, dword [ebp - 0x42f0]
mov word [ecx], ax
push dword [ebp - 0x4304]
push dword [ebp - 0x42f0]
push 0xffffffffffffffff
push dword [ebp - 0x42ec]
push 0
push dword [ebp - 0x4370]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x4374], eax
cmp dword [ebp - 0x4374], 0
jne 0x4738bc
and dword [ebp - 0x42e4], 0
jmp 0x4738c8
mov eax, dword [ebp - 0x42f0]
mov dword [ebp - 0x42e4], eax
mov eax, dword [ebp - 0x42e4]
mov dword [ebp - 0x432c], eax
push dword [ebp - 0x432c]
lea ecx, [ebp - 0x28c8]
call fcn.00409053
mov byte [ebp - 4], 1
lea eax, [ebp - 0x28c8]
push eax
lea eax, [ebp - 0x2868]
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.004784ea
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28c8]
call fcn.0040a62b
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28c8]
mov dword [ebp - 0x43bc], eax
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2858]
mov dword [ebp - 0x4378], eax
cmp dword [ebp - 0x4378], 0
jne 0x473952
mov dword [ebp - 0x4328], 1
jmp 0x473959
and dword [ebp - 0x4328], 0
movzx eax, byte [ebp - 0x4328]
test eax, eax
jne 0x4739ef
mov eax, dword [ebp - 0x42d8]
add eax, 0x623fc
push eax
push 0x104
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0040a5f1
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047e1a4
push 0x104
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047e6c6
push 1
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x58
call fcn.0047cd13
test eax, eax
je 0x4739ef
lea eax, [ebp - 0x420]
push eax
push 0x208
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
call fcn.004cc3b7
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2868]
call fcn.0040a62b
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0
lea eax, [ebp - 0x2868]
mov dword [ebp - 0x43c0], eax
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0
push 0x410
push 0
lea eax, [ebp - 0xc40]
push eax
call fcn.004b0090
add esp, 0xc
push 0x539f84
push 0x208
lea eax, [ebp - 0xc40]
push eax
push 0x53a2b4
push 0x53a2cc
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x619b0
call fcn.0040eeb4
lea eax, [ebp - 0xc40]
push eax
push str.__TCLS_Launcher__RealLaunchByTGP_got_cmd_in_cfg:_s
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
push 0x410
push 0
lea eax, [ebp - 0x1050]
push eax
call fcn.004b0090
add esp, 0xc
push 0x53a064
push 0x208
lea eax, [ebp - 0x1050]
push eax
push 0x53a358
push 0x53a378
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x619b0
call fcn.0040eeb4
lea eax, [ebp - 0x1050]
push eax
push 0x53a388
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
call sub.common.dll_int___cdecl_ierd_tgp::overseas::get_current_language_void_
push eax
call sub.common.dll_int___cdecl_ierd_tgp::overseas::CovertToTPLangValue_int_
pop ecx
mov dword [ebp - 0x437c], eax
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [eax + 0x6f740]
mov dword [ebp - 0x433c], ecx
mov eax, dword [eax + 0x6f744]
mov dword [ebp - 0x4338], eax
cmp dword [ebp - 0x433c], 0x1d
jne 0x473b20
cmp dword [ebp - 0x4338], 0
je 0x473b34
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x4320], eax
jmp 0x473b3b
and dword [ebp - 0x4320], 0
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d9cc
push eax
lea eax, [ebp - 0x1050]
push eax
lea eax, [ebp - 0xc40]
push eax
push dword [ebp - 0x4324]
push dword [ebp - 0x437c]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x6f744]
push dword [eax + 0x6f740]
push dword [ebp - 0x4320]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push str.__s___q__u__srctgp__game_id__llu__area__d__zone_id__u__s__s__s
push 0xc00
lea eax, [ebp - 0x2850]
push eax
call fcn.0041cdb4
add esp, 0x30
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [eax + 0x6f740]
mov dword [ebp - 0x4344], ecx
mov eax, dword [eax + 0x6f744]
mov dword [ebp - 0x4340], eax
cmp dword [ebp - 0x4344], 0x39
jne 0x473be7
cmp dword [ebp - 0x4340], 0
jne 0x473be7
push str.__corp_TGP__plugin_1
push 0xc00
lea eax, [ebp - 0x2850]
push eax
call fcn.004cc2e2
add esp, 0xc
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [eax + 0x6f740]
mov dword [ebp - 0x434c], ecx
mov eax, dword [eax + 0x6f744]
mov dword [ebp - 0x4348], eax
cmp dword [ebp - 0x434c], 0x3a
jne 0x473c30
cmp dword [ebp - 0x4348], 0
jne 0x473c30
push str.__config:language:t_HChinese_
push 0xc00
lea eax, [ebp - 0x2850]
push eax
call fcn.004cc2e2
add esp, 0xc
mov eax, dword [ebp - 0x42d8]
add eax, 0x5e3f4
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.0046e737
mov dword [ebp - 0x42dc], eax
cmp dword [ebp - 0x42dc], 0
jne 0x473ceb
and dword [ebp - 0x4380], 0
lea eax, [ebp - 0x218]
test eax, eax
je 0x473cd5
mov eax, 0x104
test eax, eax
jle 0x473cd5
mov eax, 0x53a214
test eax, eax
je 0x473cd5
and dword [ebp - 0x431c], 0
mov eax, 0x53a214
test eax, eax
je 0x473ca9
push 0x53a214
call fcn.004cc4f3
pop ecx
cmp eax, 0x104
jae 0x473ca9
mov dword [ebp - 0x431c], 1
cmp dword [ebp - 0x431c], 0
je 0x473cd5
push 0x53a214
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.004cc3b7
add esp, 0xc
mov dword [ebp - 0x4380], 1
push 0x53a2dc
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
pop ecx
pop ecx
cmp dword [ebp - 0x42dc], 0
je 0x47437e
and dword [ebp - 0x42f4], 0
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x70], 0
je 0x473d2b
lea eax, [ebp - 0x42f4]
push eax
push 3
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x70]
call dword [eax + 0x28]
and dword [ebp - 0x430c], 0
and dword [ebp - 0x4308], 0
and dword [ebp - 0x4334], 0
cmp dword [ebp - 0x42f4], 0
je 0x473d72
lea eax, [ebp - 0x4334]
push eax
lea eax, [ebp - 0x4308]
push eax
lea eax, [ebp - 0x430c]
push eax
mov eax, dword [ebp - 0x42f4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x42f4]
call dword [eax + 0x8c]
push dword [ebp - 0x4334]
push dword [ebp - 0x4308]
push dword [ebp - 0x430c]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.004770e0
mov dword [ebp - 0x42dc], eax
cmp dword [ebp - 0x42dc], 0
jne 0x473ff2
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [eax + 0x6f740]
mov dword [ebp - 0x4354], ecx
mov eax, dword [eax + 0x6f744]
mov dword [ebp - 0x4350], eax
cmp dword [ebp - 0x4354], 1
jne 0x473e00
cmp dword [ebp - 0x4350], 0
jne 0x473e00
mov dword [ebp - 0x42dc], 1
push str.NOT_Check_DNF_Instance
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
pop ecx
pop ecx
jmp 0x473e1d
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.004752bc
mov dword [ebp - 0x42dc], eax
push 0
push str.Modify
push str.LOLLandingPageURL
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x619b0
call fcn.00468814
mov dword [ebp - 0x4384], eax
cmp dword [ebp - 0x4384], 0
je 0x473e54
mov ecx, dword [ebp - 0x42d8]
call fcn.00478113
cmp dword [ebp - 0x42dc], 0
je 0x473fc3
mov ecx, dword [ebp - 0x42d8]
call fcn.00477e8c
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [eax + 0x6f740]
mov dword [ebp - 0x435c], ecx
mov eax, dword [eax + 0x6f744]
mov dword [ebp - 0x4358], eax
push dword [ebp - 0x4358]
push dword [ebp - 0x435c]
lea eax, [ebp - 0x2898]
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.00479344
mov byte [ebp - 4], 0xc
push dword [0x577010]
lea ecx, [ebp - 0x28b0]
call fcn.00409053
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x2898]
push eax
lea eax, [ebp - 0x28b0]
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.00479418
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x28b0]
call fcn.0040a62b
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x28b0]
mov dword [ebp - 0x43c4], eax
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x2850]
push eax
push str.__TCLS_Launcher__RealLaunchByTGP_finial_cmd:_s
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
add esp, 0xc
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push str._TCLS_Launcher__RealLaunchByTGP_ClientFileName:_s
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
add esp, 0xc
lea eax, [ebp - 0x439c]
push eax
lea eax, [ebp - 0x4408]
push eax
lea eax, [ebp - 0x830]
push eax
push 0
push 4
push 1
push 0
push 0
lea eax, [ebp - 0x2850]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x42f8], eax
mov eax, dword [ebp - 0x42f8]
mov dword [ebp - 0x42dc], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2898]
call fcn.0040a62b
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0
lea eax, [ebp - 0x2898]
mov dword [ebp - 0x43b0], eax
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0
cmp dword [ebp - 0x42dc], 0
je 0x473ff0
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [ebp - 0x439c]
mov dword [eax + 0x88], ecx
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [ebp - 0x4394]
mov dword [eax + 0x8c], ecx
jmp 0x474015
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push str._Launch__TCLS_Launcher::StartGame___s_had_been_started
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
cmp dword [ebp - 0x42dc], 0
je 0x4742d9
mov eax, dword [ebp - 0x42d8]
and dword [eax + 0x61fec], 0
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push str._Launch__TCLS_Launcher::StartGame_Create_Process__s_Success
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
lea eax, [ebp - 0x2850]
push eax
call fcn.004cc4f3
pop ecx
test eax, eax
jbe 0x474081
lea eax, [ebp - 0x2850]
push eax
push str._Launch__TCLS_Launcher::StartGame_CommandLine_:__s
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
and dword [ebp - 0x42fc], 0
and dword [ebp - 0x4300], 0
and dword [ebp - 0x42e0], 0
lea eax, [ebp - 0x42e0]
push eax
push 5
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x70]
call dword [eax + 0x28]
cmp dword [ebp - 0x42e0], 0
je 0x4740f0
mov eax, dword [ebp - 0x42e0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x42e0]
call dword [eax + 0x78]
mov dword [ebp - 0x42fc], eax
mov eax, dword [ebp - 0x42e0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x42e0]
call dword [eax + 0x84]
mov dword [ebp - 0x4300], eax
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6fc88], 0
je 0x474142
push dword [ebp - 0x4300]
push dword [ebp - 0x42fc]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x8c]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x61fc8]
mov eax, dword [ebp - 0x42d8]
add eax, 0x61dc8
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.004713ec
mov dword [ebp - 0x42dc], eax
jmp 0x474183
push dword [ebp - 0x4300]
push dword [ebp - 0x42fc]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x8c]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x61fc8]
mov eax, dword [ebp - 0x42d8]
add eax, 0x61dc8
push eax
mov ecx, dword [ebp - 0x42d8]
call fcn.004701e3
mov dword [ebp - 0x42dc], eax
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6fc88], 0
jne 0x47419d
mov ecx, dword [ebp - 0x42d8]
call fcn.0046e50f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x42d8]
mov dword [ecx + 0x78], eax
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x7c], 0
jne 0x474208
mov dword [ebp - 0x43ac], 0x47aa3e
mov dword [ebp - 0x43a8], 0x24
and dword [ebp - 0x43a4], 0
and dword [ebp - 0x43a0], 0
sub esp, 0x10
lea esi, [ebp - 0x43ac]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
push 0x64
mov ecx, dword [ebp - 0x42d8]
add ecx, 0x20
call fcn.0047e3cf
mov eax, dword [ebp - 0x42d8]
mov dword [eax + 0x7c], 1
cmp dword [ebp - 0x42dc], 0
jne 0x474272
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4310], eax
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [ebp - 0x4310]
mov dword [eax + 0x6fc90], ecx
push dword [ebp - 0x4310]
push 0x53a758
push 0
push 0x104
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x68
push eax
call fcn.0047e608
add esp, 0x18
push str._Launch__TCLS_Launcher::Launch_Save_Game_Info_Fail_
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
pop ecx
pop ecx
jmp 0x4742c8
push dword [ebp - 0x4398]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x4388], eax
cmp dword [ebp - 0x4388], 0xffffffff
jne 0x4742c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4314], eax
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [ebp - 0x4314]
mov dword [eax + 0x6fc90], ecx
push dword [ebp - 0x4314]
push str._Launch__TCLS_Launcher::Launch_Resume_Thread_Fail_GetLastError_____d
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
add esp, 0xc
push dword [ebp - 0x4398]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x47437e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4318], eax
mov eax, dword [ebp - 0x42d8]
mov ecx, dword [ebp - 0x4318]
mov dword [eax + 0x6fc90], ecx
push dword [ebp - 0x4318]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push 0x53a51c
push 0
push 0x104
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x68
push eax
call fcn.0047e608
add esp, 0x1c
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6199c], 0
je 0x474360
push 0
push 0x1e
push 2
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
lea eax, [ebp - 0x218]
push eax
push str._Launch__TCLS_Launcher::RealLaunch__s
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
add esp, 0xc
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x2880]
call fcn.00405a40
mov dword [ebp - 4], 0x17
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2880]
mov dword [ebp - 0x43b4], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 4], 0x19
or dword [ebp - 4], 0xffffffff
jmp 0x474444
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x6199c], 0
je 0x4743f0
push 0
push 3
push 2
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x6199c]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x6199c]
call dword [eax + 0xc]
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push 0x53a8c4
push 0
push 0x104
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x42d8]
add eax, 0x68
push eax
call fcn.0047e608
add esp, 0x18
mov eax, dword [ebp - 0x42d8]
add eax, 0x5d5bc
push eax
push 0x53a8f8
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d5fa
add esp, 0xc
mov eax, dword [ebp - 0x42d8]
cmp dword [eax + 0x70], 0
je 0x4744d9
cmp dword [ebp - 0x42dc], 0
je 0x4744d9
and dword [ebp - 0x438c], 0
lea eax, [ebp - 0x438c]
push eax
push 3
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x70]
call dword [eax + 0x28]
push 0
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x78]
mov eax, dword [ebp - 0x42d8]
add eax, 0x623fc
push eax
mov eax, 0xba0
imul eax, eax, 0
mov ecx, dword [ebp - 0x42d8]
push dword [ecx + eax + 0xe50]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x61dc4]
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x9c]
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x42d8]
call dword [eax + 0x70]
cmp dword [ebp - 0x42dc], 0
je 0x474516
push str._Launcher__TCLS_Launcher::RealLaunch_OnMessage__CommandID_:_SC_LAUNCHGAMESUCCESS
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
pop ecx
pop ecx
mov eax, dword [ebp - 0x42d8]
push dword [eax + 0x8c]
push 0x10000400
mov ecx, dword [ebp - 0x42d8]
call fcn.00479528
jmp 0x47454b
lea eax, [ebp - 0x218]
push eax
push 0x53aa00
mov eax, dword [ebp - 0x42d8]
add eax, 0x69
push eax
call fcn.0047d64c
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x10000401
mov ecx, dword [ebp - 0x42d8]
call fcn.004795a0
cmp dword [ebp - 0x42f8], 0
jne 0x47456f
mov eax, dword [ebp - 0x42d8]
mov eax, dword [eax + 0x61ff4]
or eax, 0x40
mov ecx, dword [ebp - 0x42d8]
mov dword [ecx + 0x61ff4], eax
mov eax, dword [ebp - 0x42dc]
lea esp, [ebp - 0x4414]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ad99f
leave
ret 4