Function at 0x401220
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b40e6
mov eax, dword fs:[0]
push eax
sub esp, 0x780
mov eax, dword [0x4fa008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0x10]
lea ecx, [ebp - 0x618]
push 0
mov dword [ebp - 0x60c], edi
call fcn.00405480
mov dword [ebp - 4], 0
lea eax, [ebp - 0x5d8]
push eax
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
mov dword [ebp - 0x5e0], 0
mov dword [ebp - method.LocalMutex.virtual_0], vtable.LocalMutex.0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x618]
mov dword [ebp - 0x5c0], eax
mov byte [ebp - 4], 1
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov eax, dword [0x4feeb0]
lea ecx, [ebp - 0x5bc]
test eax, eax
cmovne ecx, eax
mov dword [0x4feeb0], ecx
mov byte [ebp - 4], 2
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
lea eax, [ebp - 0x5ec]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], 0x4cbc88
push 0x410310
mov dword [0x4fed20], eax
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov byte [ebp - 4], 3
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov eax, dword [0x4fed10]
lea ecx, [ebp - 0x608]
test eax, eax
cmovne ecx, eax
mov dword [0x4fed10], ecx
mov byte [ebp - 4], 4
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x608], 0x4cb3f4
mov dword [ebp - 0x604], ebx
mov dword [ebp - 0x9c], str._service
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], str._configapp
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], str._configservice
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], str._setservicecontrolpass
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], str._setservicevncpass
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], str._checkservicepasswords
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], str._controlservice
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], str._controlapp
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], str._desktopserver
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], str._queryconnection
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x4c52c0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], str._logout
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], str._install
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], str._remove
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], str._reinstall
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], str._start
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], str._stop
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 0
lea eax, [ebp - 0x5fc]
mov byte [ebp - 4], 7
push eax
push 1
mov ecx, eax
call fcn.00403cc0
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x5fc]
sub eax, ecx
sar eax, 1
add eax, eax
push eax
push 0x4cb34c
push ecx
call fcn.0049a3f0
add esp, 0xc
push edi
lea ecx, [ebp - 0x634]
mov byte [ebp - 4], 9
call fcn.0041b640
lea eax, [ebp - 0x634]
mov byte [ebp - 4], 0xa
push eax
push 0x11
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.004040c0
lea ecx, [ebp - 0x630]
mov dword [ebp - method.CommandLineArgs.virtual_0], vtable.CommandLineArgs.0
call fcn.004044b0
mov dword [ebp - 4], 8
jmp 0x40155b
mov ecx, dword [ebp - 0x5b4]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40158e
mov eax, dword [ebp - 0x600]
lea ecx, [ebp - 0x600]
push dword [esi + 4]
call dword [eax + 4]
mov eax, dword [ebp - 0x5fc]
test eax, eax
je 0x402cb1
mov edx, str._service
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4015c9
test si, si
je 0x4015c5
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4015c9
add ecx, 4
add edx, 4
test si, si
jne 0x4015a3
xor ecx, ecx
jmp 0x4015ce
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x401a05
lea eax, [ebp - 0x3a4]
mov dword [ebp - method.Service.virtual_0], vtable.Service.0
mov dword [ebp - 0x60c], eax
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x398], ecx
lea eax, [ebp - 0x3a0]
mov byte [ebp - 4], 0xc
push eax
push 1
mov ecx, eax
call fcn.00403cc0
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x3a0]
sub eax, ecx
sar eax, 1
add eax, eax
push eax
push 0x4cb34c
push ecx
call fcn.0049a3f0
add esp, 0xc
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x3a8]
mov dword [0x4fed24], eax
lea ecx, [ebp - 0x3a4]
mov eax, dword [ebp - 0x3a4]
push 0x4c5434
call dword [eax + 4]
mov byte [ebp - 4], 0xf
push ecx
lea ecx, [ebp - 0x368]
mov dword [ebp - method.TvnService.1.virtual_0], vtable.TvnService.1.0
mov dword [ebp - method.TvnService.2.virtual_0], vtable.TvnService.2.0
mov dword [ebp - method.TvnService.virtual_0], vtable.TvnService.0
call fcn.0041d1f0
push ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0x360], 0
call fcn.004503f0
sub esp, 8
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2ac]
call fcn.004516c0
lea eax, [ebp - 0x5e8]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x5f0]
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 0x13
mov ecx, 0x4fb4b0
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 4]
mov dword [reloc.WS2_32.dll_accept], 0x80000002
mov byte [ebp - 4], 0x14
mov ecx, 0x4fb4b0
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x13
call fcn.0041be80
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], 0x12
call fcn.004112d0
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x4017bc
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x401794
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40307a
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x1a
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x1b
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x1c
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x1d
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x401874
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
call dword [eax + 8]
lea eax, [ebp - 0x5d8]
mov dword [ebp - method.LocalMutex.virtual_0], vtable.LocalMutex.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x618]
mov dword [ebp - method.Lockable.virtual_0], vtable.Lockable.0
call fcn.00405580
xor eax, eax
jmp 0x40305c
mov edx, str._configapp
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401a36
test si, si
je 0x401a32
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401a36
add ecx, 4
add edx, 4
test si, si
jne 0x401a10
xor ecx, ecx
jmp 0x401a3b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._configservice
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401a76
test si, si
je 0x401a72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401a76
add ecx, 4
add edx, 4
test si, si
jne 0x401a50
xor ecx, ecx
jmp 0x401a7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._setservicecontrolpass
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401ab6
test si, si
je 0x401ab2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401ab6
add ecx, 4
add edx, 4
test si, si
jne 0x401a90
xor ecx, ecx
jmp 0x401abb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._setservicevncpass
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401af6
test si, si
je 0x401af2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401af6
add ecx, 4
add edx, 4
test si, si
jne 0x401ad0
xor ecx, ecx
jmp 0x401afb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._controlservice
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401b36
test si, si
je 0x401b32
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401b36
add ecx, 4
add edx, 4
test si, si
jne 0x401b10
xor ecx, ecx
jmp 0x401b3b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._controlapp
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401b76
test si, si
je 0x401b72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401b76
add ecx, 4
add edx, 4
test si, si
jne 0x401b50
xor ecx, ecx
jmp 0x401b7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, str._checkservicepasswords
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401bb6
test si, si
je 0x401bb2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401bb6
add ecx, 4
add edx, 4
test si, si
jne 0x401b90
xor ecx, ecx
jmp 0x401bbb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402879
mov edx, 0x4c52c0
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401bf6
test si, si
je 0x401bf2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401bf6
add ecx, 4
add edx, 4
test si, si
jne 0x401bd0
xor ecx, ecx
jmp 0x401bfb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402570
mov edx, str._logout
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401c36
test si, si
je 0x401c32
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401c36
add ecx, 4
add edx, 4
test si, si
jne 0x401c10
xor ecx, ecx
jmp 0x401c3b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x402570
mov edx, str._desktopserver
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401c76
test si, si
je 0x401c72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401c76
add ecx, 4
add edx, 4
test si, si
jne 0x401c50
xor ecx, ecx
jmp 0x401c7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x401f66
mov byte [ebp - 4], 0x43
call fcn.004108c0
push edi
lea ecx, [ebp - 0x644]
call fcn.0041b640
lea eax, [ebp - 0x644]
mov byte [ebp - 4], 0x44
push eax
push ecx
push ebx
lea ecx, [ebp - 0x5ac]
call fcn.00411e10
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 0x45
call fcn.00412aa0
lea ecx, [ebp - 0x5ac]
mov edi, eax
call fcn.00412810
lea ecx, [ebp - 0x640]
mov dword [ebp - method.CommandLineArgs.virtual_0], vtable.CommandLineArgs.0
call fcn.004044b0
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x401d7e
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x401d56
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403084
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x46
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x47
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x48
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x49
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x401e36
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x5dc]
mov edx, dword [ebp - 0x5dc]
call dword [edx + 8]
jmp 0x40302e
mov edx, str._queryconnection
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x401f96
test si, si
je 0x401f92
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x401f96
add ecx, 4
add edx, 4
test si, si
jne 0x401f70
xor ecx, ecx
jmp 0x401f9b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x402274
call fcn.00410860
push ecx
push ebx
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 0x51
call fcn.0041f6b0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x680]
push edi
mov dword [ebp - method.QueryConnectionApplication.virtual_0], vtable.QueryConnectionApplication.0
call fcn.00403200
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 0x53
call fcn.0040f9a0
lea ecx, [ebp - 0x69c]
mov edi, eax
call fcn.0040f970
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x40208c
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x402064
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40308e
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x54
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x55
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x56
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x57
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x402144
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x5dc]
mov edx, dword [ebp - 0x5dc]
call dword [edx + 8]
jmp 0x40302e
mov edx, str._install
mov ecx, eax
nop dword [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x4022a6
test si, si
je 0x4022a2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4022a6
add ecx, 4
add edx, 4
test si, si
jne 0x402280
xor ecx, ecx
jmp 0x4022ab
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4023a3
mov edx, str._remove
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x4022e6
test si, si
je 0x4022e2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4022e6
add ecx, 4
add edx, 4
test si, si
jne 0x4022c0
xor ecx, ecx
jmp 0x4022eb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4023a3
mov edx, str._reinstall
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x402326
test si, si
je 0x402322
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x402326
add ecx, 4
add edx, 4
test si, si
jne 0x402300
xor ecx, ecx
jmp 0x40232b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4023a3
mov edx, str._start
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x40235c
test si, si
je 0x402358
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x40235c
add ecx, 4
add edx, 4
test si, si
jne 0x402336
xor ecx, ecx
jmp 0x402361
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4023a3
mov ecx, str._stop
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x402396
test dx, dx
je 0x402392
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x402396
add eax, 4
add ecx, 4
test dx, dx
jne 0x402370
xor eax, eax
jmp 0x40239b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402cb1
call fcn.00410860
push str.TvnWindowsApplicationClass
lea ecx, [ebp - 0x664]
mov dword [ebp - method.WindowsApplication.virtual_0], vtable.WindowsApplication.0
mov dword [ebp - 0x66c], ebx
mov dword [ebp - 0x668], 0
call fcn.00403200
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x654]
push edi
mov dword [ebp - method.ServiceControlApplication.virtual_0], vtable.ServiceControlApplication.0
call fcn.00403200
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0x60
call fcn.00412ca0
lea ecx, [ebp - 0x670]
mov edi, eax
call fcn.00412c70
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x4024a5
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x40247d
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403098
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x61
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x62
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x63
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x64
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x40255d
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x66
jmp 0x40301f
call fcn.00410860
push ecx
push ebx
lea ecx, [ebp - 0x6c8]
mov byte [ebp - 4], 0x35
call fcn.0041f6b0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x6ac]
push edi
mov dword [ebp - method.AdditionalActionApplication.virtual_0], vtable.AdditionalActionApplication.0
call fcn.00403200
lea ecx, [ebp - 0x6c8]
mov byte [ebp - 4], 0x37
call fcn.00411a10
lea ecx, [ebp - 0x6c8]
mov edi, eax
call fcn.004119e0
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x402659
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x402631
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40309d
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x38
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x39
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x3a
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x3b
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x402711
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5dc]
mov edx, dword [ebp - 0x5dc]
call dword [edx + 8]
jmp 0x40302e
mov eax, dword [vtable.LocalMutex.0]
mov ecx, 0x4fb4b0
call dword [eax + 4]
mov byte [0x4fed1c], 1
mov byte [ebp - 4], 0x20
mov ecx, 0x4fb4b0
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1f4]
push str.TvnWindowsApplicationClass
mov dword [ebp - method.WindowsApplication.virtual_0], vtable.WindowsApplication.0
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x1f8], 0
call fcn.00403200
mov dword [ebp - method.Notificator.virtual_0], vtable.Notificator.0
lea eax, [ebp - 0x1d8]
mov dword [ebp - method.Thread.virtual_0], vtable.Thread.0
push eax
push 4
lea eax, [ebp - 0x1e0]
mov byte [ebp - 0x1d4], 0
push eax
push 0x46e520
push 0
push 0
mov byte [ebp - 0x1d3], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1d0]
push 0
mov dword [ebp - method.ControlApplication.2.virtual_0], vtable.ControlApplication.2.0
mov dword [ebp - method.ControlApplication.virtual_0], vtable.ControlApplication.0
mov dword [ebp - method.ControlApplication.1.virtual_0], vtable.ControlApplication.1.0
call fcn.00405480
push 0
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x25
call fcn.00467920
xorps xmm0, xmm0
mov dword [ebp - 0xb0], vtable.StringStorage.0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x27
push eax
push 1
mov ecx, eax
call fcn.00403cc0
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xac]
sub eax, ecx
sar eax, 1
add eax, eax
push eax
push 0x4cb34c
push ecx
call fcn.0049a3f0
add esp, 0xc
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
push edi
mov byte [ebp - 0xa0], 0
call dword [eax + 4]
mov dword [ebp - 0x61c], 0x323b
lea eax, [ebp - 0x620]
mov dword [ebp - 0x620], 8
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
cmp eax, 1
jne 0x4030a7
call fcn.00454a60
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x29
call fcn.00409930
lea ecx, [ebp - 0x200]
mov edi, eax
call fcn.00409800
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x402ac9
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x402aa1
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030cc
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x2a
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x2b
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x2c
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x2d
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x402b81
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x5dc]
mov edx, dword [ebp - 0x5dc]
call dword [edx + 8]
jmp 0x40302e
call fcn.00410860
lea eax, [ebp - 0x5f0]
push eax
push edi
push ecx
push ebx
lea ecx, [ebp - 0x788]
call fcn.00410ab0
mov byte [ebp - 4], 0x67
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov ecx, 0x804
cmp ax, cx
je 0x402ea4
mov ecx, 0x404
cmp ax, cx
je 0x402ea4
lea ecx, [ebp - 0x788]
call fcn.00410ca0
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x402d9c
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x402d74
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030d6
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x68
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x69
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x6a
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x6b
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x402e54
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
call dword [eax + 8]
lea eax, [ebp - 0x5d8]
mov dword [ebp - method.LocalMutex.virtual_0], vtable.LocalMutex.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x618]
mov dword [ebp - method.Lockable.virtual_0], vtable.Lockable.0
call fcn.00405580
xor eax, eax
jmp 0x40305c
lea ecx, [ebp - 0x788]
call fcn.00410d00
lea ecx, [ebp - 0x788]
mov edi, eax
call fcn.00410ca0
lea ecx, [ebp - 0x5fc]
mov dword [ebp - method.StringStorage.virtual_0], vtable.StringStorage.0
call fcn.00403b90
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5b8]
test ecx, ecx
je 0x402f59
mov edx, dword [ebp - 0x5b4]
push ecx
call fcn.00404840
mov ecx, dword [ebp - 0x5b0]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0x5b8]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*8]
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x402f31
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030db
push ecx
push esi
call fcn.004971f4
add esp, 8
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0
mov byte [ebp - 4], 0x6e
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_ResourceLoader_.virtual_0], vtable.Singleton_class_ResourceLoader_.0
call dword [eax + 4]
mov dword [0x4fed10], 0
mov byte [ebp - 4], 0x6f
mov ecx, 0x4fb5c8
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov byte [ebp - 4], 0x70
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
mov dword [ebp - method.Singleton_class_CrashHook_.virtual_0], vtable.Singleton_class_CrashHook_.0
call dword [eax + 4]
mov dword [0x4feeb0], 0
mov byte [ebp - 4], 0x71
mov ecx, 0x4fb5e4
mov eax, dword [vtable.LocalMutex.0]
call dword [eax + 8]
mov dword [ebp - method.WinEventLogWriter.virtual_0], vtable.WinEventLogWriter.0
mov dword [ebp - method.WinEventLogWriter.2.virtual_0], vtable.WinEventLogWriter.2.0
mov dword [ebp - method.WinEventLogWriter.1.virtual_0], vtable.WinEventLogWriter.1.0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - method.WinEventLog.virtual_0], vtable.WinEventLog.0
call dword [eax + 4]
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x403011
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0x5dc]
lea ecx, [ebp - 0x5dc]
call dword [eax + 8]
lea eax, [ebp - 0x5d8]
mov dword [ebp - method.LocalMutex.virtual_0], vtable.LocalMutex.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x618]
mov dword [ebp - method.Lockable.virtual_0], vtable.Lockable.0
call fcn.00405580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00496cab
mov esp, ebp
pop ebp
ret 0x10
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
lea eax, [ebp - 0x6dc]
push 0x4dab48
push eax
call fcn.00404e00
add esp, 8
lea eax, [ebp - 0x6dc]
push 0x4f7990
push eax
call fcn.00498928
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
call fcn.0049df39
int3