Function at 0x403e00
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41ad70
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x428040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0xbd], dl
mov esi, ecx
mov edx, str.leagueoflegends
call fcn.00409a90
test al, al
je 0x404ba6
mov dword [ebp - 0x38], str.LeagueClient.exe
lea esi, [ebp - 0x38]
mov dword [ebp - 0x34], str.LeagueClientUx.exe
mov edx, str.LeagueClient.exe
mov dword [ebp - 0x30], str.LeagueClientUxRender.exe
mov dword [ebp - 0x2c], str.League_of_Legends.exe
mov dword [ebp - 0x28], str.Riot_Client.exe
mov dword [ebp - 0x24], str.RiotClientServices.exe
nop dword [eax]
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
mov ecx, edx
mov dword [ebp - 4], 0
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403eb0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbc]
call fcn.0040a110
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0xffffffff
call fcn.00403a30
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x403f1e
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403f14
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
add esi, 4
lea eax, [ebp - 0x20]
cmp esi, eax
je 0x403f2f
mov edx, dword [esi]
jmp 0x403e80
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x1e
push str.Riot_ClientRiotClientElectron
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 1
call fcn.0040a110
xor edx, edx
mov dword [ebp - 4], 2
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edx + 0x38]
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x403fc8
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403fbe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405096
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x12
push str.d3dcompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 3
call fcn.0040a110
mov edx, 0x38
mov dword [ebp - 4], 4
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edx + 1]
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404064
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40405a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40509b
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x5c], str.concrt140.dll
mov dword [ebp - 0x58], str.d3dcompiler_47.dll
mov dword [ebp - 0x54], str.msvcp140.dll
mov dword [ebp - 0x50], str.msvcp140_1.dll
mov dword [ebp - 0x4c], str.msvcp140_2.dll
mov dword [ebp - 0x48], str.msvcp140_codecvt_ids.dll
mov dword [ebp - 0x44], str.ucrtbase.dll
mov dword [ebp - 0x40], str.vcruntime140.dll
mov dword [ebp - 0x3c], str.vcruntime140_1.dll
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
push 0x11
push str.League_of_Legends
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 5
call fcn.0040a110
lea edx, [ebp - 0xbc]
mov dword [ebp - 4], 6
xor ecx, ecx
call fcn.004037c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404135
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40412b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050a0
push ecx
push edx
call fcn.0040c332
add esp, 8
xor esi, esi
nop word [eax + eax]
mov edx, dword [ebp + esi*4 - 0x5c]
xorps xmm0, xmm0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov ecx, edx
mov dword [ebp - 4], 7
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404170
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbc]
call fcn.0040a110
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 8
push eax
lea ecx, [esi + 0x2a]
xor edx, edx
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x4041ee
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4041e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405096
push ecx
push edx
call fcn.0040c332
add esp, 8
inc esi
cmp esi, 9
jl 0x404140
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 4
push str.Game
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 9
call fcn.0040a110
xor edx, edx
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edx + 0x33]
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404291
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404287
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050a5
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x15
push str.League_of_Legends.exe
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0xb
call fcn.0040a110
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0xc
push eax
mov edx, 0x33
lea ecx, [ebp - 0xd8]
call fcn.00403640
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00403b20
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x404338
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40432e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050aa
push ecx
push edx
call fcn.0040c332
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
cmp ecx, 7
jbe 0x40439c
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404392
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050aa
push ecx
push edx
call fcn.0040c332
add esp, 8
mov dword [ebp - 0x20], str.D3DCompiler_47.dll
xor esi, esi
mov dword [ebp - 0x1c], str.D3dx9_43.dll
mov dword [ebp - 0x18], str.xinput1_3.dll
mov dword [ebp - 0x14], str.tbb.dll
nop word [eax + eax]
mov edx, dword [ebp + esi*4 - 0x20]
xorps xmm0, xmm0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov ecx, edx
mov dword [ebp - 4], 0xe
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4043f0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbc]
call fcn.0040a110
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0xf
push eax
lea ecx, [esi + 0x34]
mov edx, 0x33
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404471
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404467
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405096
push ecx
push edx
call fcn.0040c332
add esp, 8
inc esi
cmp esi, 3
jl 0x4043c0
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 4], 0x10
mov esi, dword [ebp - 0x14]
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4044b0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xbc]
call fcn.0040a110
mov edx, 0x33
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edx + 4]
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404531
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404527
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050af
push ecx
push edx
call fcn.0040c332
add esp, 8
cmp byte [ebp - 0xbd], 0
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x68], eax
lea ecx, [ebp - 0x68]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x64], eax
je 0x40455a
push 1
push str.r_lol_
call fcn.004050e0
jmp 0x404998
push 0
push 0x4223a4
call fcn.004050e0
push str.IsWow64Process2
push str.kernel32
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x404730
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x404730
cmp word [ebp - 0x60], 0
je 0x404730
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x14
push str.6_D3DCompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x12
call fcn.0040a110
push 1
mov edx, 0x34
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404653
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404649
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0xb
push str.6_tbb12.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x14
call fcn.0040a110
push 1
mov edx, 0x36
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x4046ed
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4046e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x14
push str.6_D3DCompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x16
call fcn.0040a110
mov dword [ebp - 4], 0x17
jmp 0x4048a2
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x12
push str.D3DCompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x18
call fcn.0040a110
push 1
mov edx, 0x34
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x4047ca
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4047c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 9
push str.tbb12.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x1a
call fcn.0040a110
push 1
mov edx, 0x36
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404864
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40485a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x12
push str.D3DCompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x1c
call fcn.0040a110
mov dword [ebp - 4], 0x1d
push 1
mov edx, 0x37
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x4048fe
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4048f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0x12
push str.D3DCompiler_47.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x1e
call fcn.0040a110
push 1
mov edx, 0x39
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404998
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40498e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b4
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0
push 0x4223a4
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x20
call fcn.0040a110
mov dword [ebp - 4], 0x21
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
push 0xf
push str.Riot_Client.exe
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x22
call fcn.0040a110
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
push eax
mov edx, 0x38
lea ecx, [ebp - 0xf0]
call fcn.00403640
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
add esp, 4
movlpd qword [ebp - 0x9c], xmm0
movlpd qword [ebp - 0x84], xmm0
cmp dword [eax + 0x14], 7
movlpd qword [ebp - 0x7c], xmm0
movlpd qword [ebp - 0x74], xmm0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0xa4], 0x3c
mov dword [ebp - 0xa0], 0x40
mov dword [ebp - 0x88], 1
jbe 0x404a7c
mov eax, dword [eax]
cmp dword [ebp - 0xa8], 7
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
cmova eax, dword [ebp - 0xbc]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x404ae9
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404adf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b9
push ecx
push edx
call fcn.0040c332
add esp, 8
mov ecx, dword [ebp - 0xc4]
xor eax, eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
cmp ecx, 7
jbe 0x404b46
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404b3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b9
push ecx
push edx
call fcn.0040c332
add esp, 8
mov ecx, dword [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
cmp ecx, 7
jbe 0x40507b
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405071
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b9
jmp 0x405071
mov edx, str.dota2
mov ecx, esi
call fcn.00409a90
test al, al
je 0x40507b
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 9
push str.dota2.exe
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x24
call fcn.0040a110
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0xffffffff
call fcn.00403a30
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404c43
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404c39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050cd
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0xe
push str.game_binwin64
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x25
call fcn.0040a110
lea edx, [ebp - 0xbc]
mov dword [ebp - 4], 0x26
xor ecx, ecx
call fcn.004037c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404cd5
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404ccb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050be
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0xb
push str.embree3.dll
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x27
call fcn.0040a110
xor edx, edx
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edx + 1]
call fcn.004038a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404d6e
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404d64
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050c3
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 9
push str.dota2.exe
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x29
call fcn.0040a110
lea eax, [ebp - 0xbc]
mov dword [ebp - 4], 0x2a
push eax
xor edx, edx
lea ecx, [ebp - 0xf0]
call fcn.00403640
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.00403b20
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xdc]
cmp ecx, 7
jbe 0x404e12
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404e08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050c8
push ecx
push edx
call fcn.0040c332
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
cmp ecx, 7
jbe 0x404e76
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404e6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050c8
push ecx
push edx
call fcn.0040c332
add esp, 8
cmp byte [ebp - 0xbd], 0
mov esi, str.r_dota2_embree3.dll
mov eax, str.6_embree4.dll
mov dword [ebp - 0xac], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
cmove esi, eax
movups xmmword [ebp - 0xbc], xmm0
mov ecx, esi
mov dword [ebp - 4], 0x2c
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404eb4
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xbc]
call fcn.0040a110
push 1
mov edx, 1
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0xbc]
call fcn.00403c20
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x404f33
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404f29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050cd
push ecx
push edx
call fcn.0040c332
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xa8], 0
push 0
push 0x4223a4
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x2e
call fcn.0040a110
mov dword [ebp - 4], 0x2f
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
push 0x15
push str.steam:__rungameid_570
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x30
call fcn.0040a110
cmp dword [ebp - 0xc4], 7
lea eax, [ebp - 0xd8]
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
cmova eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xa8], 7
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
cmova eax, dword [ebp - 0xbc]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa4]
push eax
movlpd qword [ebp - 0x9c], xmm0
movlpd qword [ebp - 0x84], xmm0
movlpd qword [ebp - 0x7c], xmm0
movlpd qword [ebp - 0x74], xmm0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0xa4], 0x3c
mov dword [ebp - 0xa0], 0x40
mov dword [ebp - 0x88], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x404b46
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404b3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4050b9
jmp 0x404b3c
push ecx
push edx
call fcn.0040c332
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040bf89
mov esp, ebp
pop ebp
ret
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
call fcn.0040f4f2
int3