Function at 0x416b10
Capabilities:
Create process on windows
Get common file path
Get program files directory
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c47d1
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x798
mov eax, dword [0x4ff12c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x664], edi
mov eax, dword [ebx + 8]
xorps xmm0, xmm0
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 1
call fcn.004070a0
lea ecx, [ebp - 0xd8]
call fcn.004070c0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.004070a0
lea ecx, [ebp - 0x4c]
call fcn.004070c0
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 5
call fcn.004070a0
lea ecx, [ebp - 0x108]
call fcn.004070c0
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 7
call fcn.004070a0
lea ecx, [ebp - 0x150]
call fcn.004070c0
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 9
call fcn.004070a0
lea ecx, [ebp - 0xf0]
call fcn.004070c0
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0xa
call fcn.0040ab10
push 1
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x644], esp
push 0x4e8020
call fcn.00405b50
mov byte [ebp - 4], 0xc
call fcn.004034c0
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.0040ada0
lea eax, [edi + 0xe0]
push eax
lea ecx, [ebp - 0xf0]
call fcn.00421bc0
mov eax, dword [edi + 0x84]
cmp eax, 2
jne 0x4170c9
push 0
push 0
push 0
lea eax, [ebp - 0x410]
push str.tip.startpairbluetooth
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, eax
mov dword [ebp - 0x644], esp
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov byte [ebp - 4], 0xe
call fcn.004034c0
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.0040ada0
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0xb
call fcn.004367b7
mov esi, dword [edi + 0x88]
call fcn.004034c0
mov edi, eax
mov ecx, edi
call fcn.00419f70
cmp eax, esi
jbe 0x4194c6
imul esi, esi, 0x230
mov ecx, 0x8c
add esi, dword [edi]
lea edi, [ebp - 0x640]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xf
call fcn.004070a0
lea ecx, [ebp - 0x90]
call fcn.004070c0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x640]
call fcn.004300b0
add esp, 4
test al, al
lea eax, [ebp - 0x410]
push 0
jne 0x416df5
push str.tip.pairbluetoothfailpinis
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.00408300
push eax
lea ecx, [ebp - 0xc0]
call fcn.00405b50
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], 8
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x65c]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x13
call fcn.00407040
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x14
call fcn.00407040
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x10
call fcn.004367b7
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
push 0
cmovae eax, dword [ebp - 0x4c]
push 1
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00405b50
mov ecx, dword [ebp - 0x664]
call fcn.0040ada0
jmp 0x416f70
push 0
push 0
push str.tip.pairbluetoothsuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov edi, dword [ebp - 0x664]
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x10
call fcn.004367b7
lea edx, [ebp - 0x90]
xor esi, esi
lea ecx, [ebp - 0x640]
call fcn.004301f0
test al, al
jne 0x416e86
nop word [eax + eax]
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0x28
jg 0x416e86
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x640]
call fcn.004301f0
test al, al
je 0x416e60
push dword [ebp - 0x634]
xor dl, dl
lea ecx, [ebp - 0x65c]
push dword [ebp - 0x638]
call fcn.00430410
add esp, 8
lea ecx, [ebp - 0x150]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x1d
call fcn.00407040
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c], eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov esi, esp
lea eax, [ebp - 0x65d]
mov dword [ebp - 0x644], esi
mov ecx, esi
push eax
push dword [ebp - 0x644]
call fcn.00406ad0
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x1e
push eax
mov ecx, esi
call fcn.00405d70
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x10
call fcn.00423d80
add esp, 0x18
test al, al
jne 0x416f84
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x2c]
inc eax
cmp dword [ebp - 0x34], 0x28
mov dword [ebp - 0x2c], eax
jl 0x416ec6
push 0
push 1
push 0
lea eax, [ebp - 0x410]
push str.tip.getbluetoothserialportfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x410]
call fcn.004367b7
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x20
call fcn.00407040
jmp 0x41945f
lea eax, [ebp - 0x108]
push eax
lea ecx, [edi + 0x94]
call fcn.00421bc0
push 0x3a
lea ecx, [edi + 0x94]
call fcn.00420820
sub esp, 0x18
lea eax, [ebp - 0x65d]
mov esi, esp
mov dword [ebp - 0x644], esi
mov ecx, esi
push eax
push dword [ebp - 0x644]
call fcn.00406ad0
lea eax, [edi + 0x94]
mov byte [ebp - 4], 0x27
push eax
mov ecx, esi
call fcn.00405d70
mov byte [ebp - 4], 0x10
call fcn.004259f0
add esp, 0x18
test al, al
jne 0x417027
sub esp, 0x18
lea eax, [ebp - 0x65d]
mov esi, esp
mov dword [ebp - 0x644], esi
mov ecx, esi
push eax
push dword [ebp - 0x644]
call fcn.00406ad0
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.00405d70
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 0x10
call fcn.00430270
add esp, 0x18
push 0
lea eax, [ebp - 0x410]
push str.tip.readbluetoothserialport
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00408300
push eax
lea ecx, [ebp - 0xc0]
call fcn.00405b50
lea eax, [edi + 0x94]
mov byte [ebp - 4], 0x2a
cmp dword [eax + 0x14], 8
jb 0x41706a
mov eax, dword [eax]
push eax
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x65c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x2b
call fcn.00407040
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x2c
call fcn.00407040
lea ecx, [ebp - 0x410]
call fcn.004367b7
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2d
call fcn.00407040
mov byte [ebp - 4], 0xb
jmp 0x4171ce
cmp eax, 1
jne 0x4171ce
push 0
push 0
push 0
lea eax, [ebp - 0x410]
push str.tip.startaddlanport
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0xb
call fcn.004367b7
lea edx, [edi + 0xc8]
lea ecx, [edi + 0x94]
call fcn.00425b50
test al, al
lea eax, [ebp - 0x410]
push 0
jne 0x417180
push 1
push 0
push str.tip.addlanportfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x410]
call fcn.004367b7
jmp 0x41945f
push 0
push 0
push str.tip.addlanportsuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x30
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0xb
call fcn.004367b7
mov eax, dword [ebp - 0x698]
mov byte [eax + 1], 1
call fcn.004249b0
test al, al
je 0x418609
lea ecx, [ebp - 0x90]
call fcn.00408770
lea ecx, [ebp - 0x120]
call fcn.00408770
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x32
push eax
mov ecx, edi
call fcn.00403790
push dword [edi + 0x90]
mov dword [ebp - 0x34], 0x409
push ecx
call fcn.004034c0
add esp, 4
lea ecx, [eax + 0x18]
call fcn.00419b10
push eax
lea ecx, [ebp - 0x300]
call fcn.004194d0
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x190]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x190]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x4172d4
nop
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0x334]
call fcn.004130f0
mov ax, word [ebp - 0x304]
lea ecx, [ebp - 0x334]
cmp ax, word [ebp - 0x160]
je 0x4172c9
call fcn.00412380
lea ecx, [ebp - 0x30]
call fcn.00419c50
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x417280
jmp 0x4172d4
movzx eax, ax
mov dword [ebp - 0x34], eax
call fcn.00412380
push 0
push 0x26
lea eax, [ebp - 0x618]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea ecx, [ebp - 0x90]
test eax, eax
jne 0x4172f8
push str.C:PrinterDriverPosDriver11.3.0.1_
jmp 0x41730f
lea eax, [ebp - 0x618]
push eax
call fcn.0041e5e0
push str.PrinterDriverPosDriver11.3.0.1_
lea ecx, [ebp - 0x90]
call fcn.0041e5e0
lea ecx, [ebp - 0x90]
call fcn.00424ef0
push 0
cmp eax, 0xffffffff
jne 0x417343
push 1
sub esp, 0x18
mov ecx, esp
push str.Failed_to_create_directory
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
jmp 0x4185ee
push 0
push 0
lea eax, [ebp - 0x720]
push str.tip.startcopyfile
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x32
call fcn.004367b7
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x41745e
nop
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea ecx, [ebp - 0x70]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x70]
call fcn.00421bc0
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x70]
call fcn.0041a480
lea ecx, [ebp - 0x70]
call fcn.00424ef0
cmp eax, 0xffffffff
je 0x417648
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x32
call fcn.00407040
lea ecx, [ebp - 0x30]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x4173e0
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test al, al
je 0x4176ae
nop word [eax + eax]
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea ecx, [ebp - 0x70]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x70]
call fcn.00421bc0
sub esp, 0x18
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xa8]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
je 0x4178a9
push 0x4e8020
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea eax, [ebp - 0x65c]
mov byte [ebp - 4], 0x3b
push eax
push dword [ebp - 0x34]
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00419d00
mov ecx, edi
call fcn.00412b60
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x37
mov esi, eax
call fcn.00407040
test esi, esi
jne 0x417675
push esi
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x3d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x67c]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x694]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x37
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
jmp 0x41767b
push 0
push 1
sub esp, 0x18
mov ecx, esp
push str.Failed_to_create_directory
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
jmp 0x4185e9
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x32
call fcn.00407040
lea ecx, [ebp - 0x30]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x4174c0
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x417996
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea ecx, [ebp - 0x70]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x70]
call fcn.00421bc0
push str.ia64
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
push 0x4eb494
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
sub esp, 0x18
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xa8]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
je 0x417b95
push str.ia64
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea eax, [ebp - 0x65c]
mov byte [ebp - 4], 0x44
push eax
push dword [ebp - 0x34]
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00419d00
mov ecx, edi
call fcn.00412b60
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x40
mov esi, eax
call fcn.00407040
test esi, esi
jne 0x41795d
push esi
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x46
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x40
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
jmp 0x417963
push 0
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x38
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x39
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x37
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
jmp 0x41765b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x32
call fcn.00407040
lea ecx, [ebp - 0x30]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x417704
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x417c82
nop dword [eax]
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea ecx, [ebp - 0x70]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x70]
call fcn.00421bc0
push 0x4eaecc
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
push 0x4eb494
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
sub esp, 0x18
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xa8]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
je 0x417e7d
push 0x4eaecc
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea eax, [ebp - 0x65c]
mov byte [ebp - 4], 0x4d
push eax
push dword [ebp - 0x34]
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00419d00
mov ecx, edi
call fcn.00412b60
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x49
mov esi, eax
call fcn.00407040
test esi, esi
jne 0x417c49
push esi
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x4e
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x4f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x50
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x49
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
jmp 0x417c4f
push 0
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x42
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x40
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
jmp 0x41765b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x32
call fcn.00407040
lea ecx, [ebp - 0x30]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x4179f0
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00408210
push 4
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00408220
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x417f6a
lea ecx, [ebp - 0x30]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea ecx, [ebp - 0x70]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x70]
call fcn.00421bc0
push str.i386
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
push 0x4eb494
lea ecx, [ebp - 0x70]
call fcn.0041e5e0
sub esp, 0x18
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xa8]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
je 0x4181d8
push str.i386
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea eax, [ebp - 0x65c]
mov byte [ebp - 4], 0x56
push eax
push dword [ebp - 0x34]
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00419d00
mov ecx, edi
call fcn.00412b60
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x52
mov esi, eax
call fcn.00407040
test esi, esi
jne 0x417f31
push esi
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x57
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x58
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x59
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x52
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
jmp 0x417f37
push 0
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x4a
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x4b
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x4c
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x49
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
jmp 0x41765b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x70]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x32
call fcn.00407040
lea ecx, [ebp - 0x30]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004081f0
test al, al
jne 0x417cd8
push 0
push 0
push 0
lea eax, [ebp - 0x720]
push str.tip.copyfilesuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x5a
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
call fcn.004367b7
lea ecx, [ebp - 0xc0]
call fcn.00408770
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x5b
push eax
lea ecx, [ebp - 0xc0]
call fcn.00421bc0
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0041a480
sub esp, 0x18
lea eax, [ebp - 0xc0]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, dword [edi + 0x38]
call fcn.00424710
add esp, 0x18
lea eax, [ebp - 0x720]
push 0
push 0
push 0
push str.tip.startinstalldriver
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x5c
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x5b
call fcn.004367b7
lea ecx, [ebp - 0x120]
call fcn.0041a460
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x120]
call fcn.00421bc0
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x120]
call fcn.0041a480
push str.printui.dll__PrintUIEntry__ia__m___s___f___s_
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x120]
call fcn.00406b00
push eax
lea ecx, [ebp - 0x2e4]
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b160
add esp, 8
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x5b
call fcn.00407040
mov eax, dword [edi + 0x38]
lea ecx, [ebp - 0x4c]
xorps xmm0, xmm0
mov dword [ebp - 0x374], 0x3c
movlpd qword [ebp - 0x360], xmm0
movlpd qword [ebp - 0x358], xmm0
movlpd qword [ebp - 0x350], xmm0
movlpd qword [ebp - 0x348], xmm0
movlpd qword [ebp - 0x340], xmm0
mov dword [ebp - 0x370], 0x40
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], str.open
mov dword [ebp - 0x364], str.rundll32.exe
call fcn.00406b00
mov dword [ebp - 0x360], eax
lea eax, [ebp - 0x374]
push eax
mov dword [ebp - 0x358], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x418177
mov eax, dword [ebp - 0x33c]
test eax, eax
je 0x418177
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x2e4]
call fcn.00425d30
test eax, eax
lea eax, [ebp - 0x720]
push 0
jne 0x41828c
push 1
push 0
push str.tip.installdriverfail2
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
jmp 0x4185de
push 0
lea eax, [ebp - 0x720]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x53
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x54
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x52
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
jmp 0x41765b
push str.tip.installdriversuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x5f
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea edx, [ebp - 0x65c]
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x67c]
call fcn.0041b280
push eax
lea ecx, [ebp - 0x4c]
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x5b
call fcn.004367b7
push 0
push 0
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x2e4]
call fcn.00406b00
mov esi, dword [ebp - 0x664]
mov edi, eax
lea ecx, [esi + 0xb0]
call fcn.00406b00
lea ecx, [esi + 0x94]
mov dword [ebp - 0x2c], eax
call fcn.00406b00
push 0x54
mov esi, eax
lea eax, [ebp - 0x3e0]
push 0
push eax
call fcn.004a21c0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
movups xmm0, xmmword [str.WinPrint]
mov cx, word [0x4ebb48]
mov dword [ebp - 0x3dc], eax
lea eax, [ebp - 0x28]
push 0
push 0
push 0
mov dword [ebp - 0x3bc], eax
lea eax, [ebp - 0x720]
push str.tip.startinstallprinter
push eax
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x18], cx
mov dword [ebp - 0x3d4], esi
mov dword [ebp - 0x3d0], edi
mov dword [ebp - 0x3ac], 0x40
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x61
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov edi, dword [ebp - 0x664]
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x5b
call fcn.004367b7
lea eax, [ebp - 0x3e0]
push eax
push 2
push 0
call dword [sym.imp.WINSPOOL.DRV_AddPrinterW]
test eax, eax
je 0x418486
push eax
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 0
push 0
push 0
lea eax, [ebp - 0x720]
push str.tip.installprintersuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x62
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x5b
call fcn.004367b7
cmp dword [edi + 0xac], 1
jne 0x418460
push dword [ebp - 0x2c]
call dword [sym.imp.WINSPOOL.DRV_Ordinal_204]
sub esp, 0x18
mov ecx, esp
push dword [ebp - 0x2c]
call fcn.00405b50
mov ecx, dword [edi + 0x38]
call fcn.004254c0
mov eax, dword [ebp - 0x698]
add esp, 0x18
mov byte [eax], 1
jmp 0x4185e3
push 0
lea eax, [ebp - 0x720]
push str.tip.installprinterfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x64
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x65
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x66
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x5b
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
call esi
cmp eax, 0x704
jne 0x4185e3
sub esp, 0x18
lea eax, [edi + 0x94]
mov ecx, esp
push eax
call fcn.00405ba0
call fcn.004259f0
add esp, 0x18
test al, al
jne 0x4185e3
push 0
lea eax, [ebp - 0x7a8]
push str.tip.dlgtitle
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov edi, eax
push 0
lea eax, [ebp - 0x720]
mov byte [ebp - 4], 0x67
push str.tip.port.unidentification
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov esi, eax
push 0x40
mov ecx, edi
mov byte [ebp - 4], 0x68
call fcn.00408300
push eax
mov ecx, esi
call fcn.00408300
mov esi, dword [ebp - 0x664]
push eax
push dword [esi + 0x38]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x720]
call fcn.004367b7
lea ecx, [ebp - 0x7a8]
call fcn.004367b7
lea ecx, [ebp - 0xc0]
call fcn.00407040
lea ecx, [ebp - 0x120]
call fcn.00407040
lea ecx, [ebp - 0x90]
call fcn.00407040
jmp 0x41945f
push dword [edi + 0x90]
lea ecx, [edi + 0x18]
call fcn.00419b10
push eax
lea ecx, [ebp - 0x300]
call fcn.004194d0
call fcn.004034c0
mov ecx, eax
call fcn.00408790
movzx eax, ax
mov dword [ebp - 0x30], eax
call fcn.00424a30
lea ecx, [ebp - 0x138]
movzx esi, ax
call fcn.0040a550
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x69
call fcn.0040a550
push 0xc
lea ecx, [ebp - 0x24]
call fcn.004197e0
lea ecx, [ebp - 0x24]
call fcn.004082a0
push 8
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x6b
call fcn.00419800
lea ecx, [ebp - 0x78]
call fcn.00419f40
mov ecx, edi
mov byte [ebp - 4], 0x6c
call fcn.0040ad40
test al, al
jne 0x4186ae
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x24]
call fcn.0041a070
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x78]
call fcn.00419f10
jmp 0x4186f1
cmp esi, 6
jne 0x4186d3
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x24]
call fcn.0041a070
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x78]
call fcn.00419f10
jmp 0x4186f1
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x78]
call fcn.00419f10
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x24]
call fcn.0041a070
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x220]
call fcn.00419db0
lea ecx, [ebp - 0x220]
cmp eax, 1
jne 0x418716
lea eax, [ebp - 0x30]
push eax
call fcn.00419e90
jmp 0x418726
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x409
push eax
call fcn.00419e90
push eax
lea ecx, [ebp - 0x138]
call fcn.00419810
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x78]
call fcn.00419db0
lea ecx, [ebp - 0x78]
cmp eax, 1
jne 0x418751
lea eax, [ebp - 0x30]
push eax
call fcn.00419e90
jmp 0x418761
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x409
push eax
call fcn.00419e90
push eax
lea ecx, [ebp - 0x180]
call fcn.00419810
lea ecx, [ebp - 0x67c]
call fcn.00425ed0
push eax
lea ecx, [ebp - 0xd8]
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0xd8]
call fcn.00406af0
test eax, eax
lea eax, [ebp - 0x7a8]
push 0
jne 0x418861
push str.tip.readdriverdirfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x6d
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x6e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
jmp 0x419439
push 0
push 0
push str.tip.startcopyfile
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x70
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00408210
push 4
lea ecx, [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00408220
lea ecx, [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test al, al
je 0x418a76
lea ecx, [ebp - 0x34]
call fcn.00408300
push eax
lea ecx, [ebp - 0xa8]
call fcn.00405ba0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0xc0]
call fcn.00405ba0
sub esp, 0x18
mov byte [ebp - 4], 0x72
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xc0]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
jne 0x418a27
push 0
lea eax, [ebp - 0x7a8]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x73
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x74
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x72
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
lea eax, [ebp - 0x644]
mov dword [ebp - 0x644], 0
push eax
lea ecx, [ebp - 0x58]
call fcn.0041a360
lea ecx, [ebp - 0xc0]
call fcn.00407040
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x6c
call fcn.00407040
lea ecx, [ebp - 0x34]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x34]
call fcn.004081f0
test al, al
jne 0x418901
sub esp, 0x18
lea eax, [ebp - 0x120]
mov ecx, esp
push eax
call fcn.00405ba0
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00406b00
push eax
lea ecx, [ebp - 0x138]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
jne 0x418b70
push 0
lea eax, [ebp - 0x7a8]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x77
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
lea eax, [ebp - 0x644]
mov dword [ebp - 0x644], 0
push eax
lea ecx, [ebp - 0x58]
call fcn.0041a360
push 4
lea ecx, [ebp - 0x2c]
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x24]
call fcn.00408210
push 4
lea ecx, [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
call fcn.004130e0
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x24]
call fcn.00408220
lea ecx, [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004081f0
test al, al
je 0x418d34
nop dword [eax]
lea ecx, [ebp - 0x34]
call fcn.00408300
push eax
lea ecx, [ebp - 0xc0]
call fcn.00405ba0
sub esp, 0x18
mov byte [ebp - 4], 0x79
mov ecx, esp
push 0x4e8020
call fcn.00405b50
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00406b00
push eax
lea ecx, [ebp - 0xc0]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
jne 0x418cf0
push 0
lea eax, [ebp - 0x7a8]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x7a
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x7b
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x79
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
lea eax, [ebp - 0x644]
mov dword [ebp - 0x644], 0
push eax
lea ecx, [ebp - 0x58]
call fcn.0041a360
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x6c
call fcn.00407040
lea ecx, [ebp - 0x34]
call fcn.00408390
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x34]
call fcn.004081f0
test al, al
jne 0x418be0
sub esp, 0x18
lea eax, [ebp - 0x168]
mov ecx, esp
push eax
call fcn.00405ba0
push 0x4e8020
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00406b00
push eax
lea ecx, [ebp - 0x180]
call fcn.00406b00
push eax
call fcn.0043e645
add esp, 0x2c
test al, al
jne 0x418e2e
push 0
lea eax, [ebp - 0x7a8]
push str.tip.copyfilefail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x7d
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x7e
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x7f
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
lea eax, [ebp - 0x644]
mov dword [ebp - 0x644], 0
push eax
lea ecx, [ebp - 0x58]
call fcn.0041a360
lea eax, [ebp - 0x644]
mov dword [ebp - 0x644], 0
push eax
lea ecx, [ebp - 0x58]
call fcn.0041a360
push 0
push 0
push 0
lea eax, [ebp - 0x7a8]
push str.tip.copyfilesuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x80
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
lea ecx, [ebp - 0x2e4]
call fcn.00406b00
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], eax
call fcn.00408300
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x2c], eax
call fcn.00406b00
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x644], eax
call fcn.00406b00
lea ecx, [ebp - 0x274]
mov edi, eax
call fcn.00406b00
lea ecx, [ebp - 0x25c]
mov esi, eax
call fcn.00406b00
mov ecx, dword [ebp - 0x34]
push 0
push 0
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x2c]
push 0
mov dword [ebp - 0x36c], eax
lea eax, [ebp - 0x7a8]
mov dword [ebp - 0x384], ecx
mov ecx, dword [ebp - 0x644]
push str.tip.startinstalldriver
push eax
mov dword [ebp - 0x388], 3
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x374], esi
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x350], 3
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x348], str.Zijiang
mov dword [ebp - 0x33c], 0x4ebc50
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x81
mov ecx, eax
mov dword [ebp - 0x644], esp
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov byte [ebp - 4], 0x82
call fcn.004034c0
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.0040ada0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 4
lea eax, [ebp - 0x388]
push eax
push 6
push 0
call dword [sym.imp.WINSPOOL.DRV_AddPrinterDriverExW]
test eax, eax
lea eax, [ebp - 0x7a8]
push 0
jne 0x4190ec
push str.tip.installdriverfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x83
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x84
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x85
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, dword [ebp - 0x664]
call fcn.0040ada0
jmp 0x419439
push str.tip.installdriversuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
lea edx, [ebp - 0x65c]
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x67c]
call fcn.0041b280
push eax
lea ecx, [ebp - 0x4c]
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 0
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov edi, dword [ebp - 0x664]
mov ecx, edi
call fcn.0040ada0
lea ecx, [edi + 0xb0]
call fcn.00406b00
lea ecx, [edi + 0x94]
mov dword [ebp - 0x2c], eax
call fcn.00406b00
push 0x54
mov esi, eax
lea eax, [ebp - 0x3e0]
push 0
push eax
call fcn.004a21c0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
movups xmm0, xmmword [str.WinPrint]
mov cx, word [0x4ebb48]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x34]
push 0
mov dword [ebp - 0x3d0], eax
lea eax, [ebp - 0x8c]
push 0
push 0
mov dword [ebp - 0x3bc], eax
lea eax, [ebp - 0x7a8]
push str.tip.startinstallprinter
push eax
movups xmmword [ebp - 0x8c], xmm0
mov word [ebp - 0x7c], cx
mov dword [ebp - 0x3d4], esi
mov dword [ebp - 0x3ac], 0x40
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x89
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
lea eax, [ebp - 0x3e0]
push eax
push 2
push 0
call dword [sym.imp.WINSPOOL.DRV_AddPrinterW]
test eax, eax
je 0x4192dc
push eax
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 0
push 0
push 0
lea eax, [ebp - 0x7a8]
push str.tip.installprintersuccess
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
sub esp, 0x18
mov byte [ebp - 4], 0x8a
mov ecx, eax
mov esi, esp
call fcn.00408300
push eax
mov ecx, esi
call fcn.00405b50
mov ecx, edi
call fcn.0040ada0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
cmp dword [edi + 0xac], 1
jne 0x4192b6
push dword [ebp - 0x2c]
call dword [sym.imp.WINSPOOL.DRV_Ordinal_204]
sub esp, 0x18
mov ecx, esp
push dword [ebp - 0x2c]
call fcn.00405b50
mov ecx, dword [edi + 0x38]
call fcn.004254c0
mov eax, dword [ebp - 0x698]
add esp, 0x18
mov byte [eax], 1
jmp 0x419439
push 0
lea eax, [ebp - 0x7a8]
push str.tip.installprinterfail
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov ecx, eax
mov byte [ebp - 4], 0x8c
call fcn.00408300
push eax
lea ecx, [ebp - 0x65c]
call fcn.00405b50
mov byte [ebp - 4], 0x8d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, eax
lea ecx, [ebp - 0x694]
call fcn.00425e00
mov ecx, eax
mov byte [ebp - 4], 0x8e
call fcn.00406b00
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x67c]
call fcn.0041b050
add esp, 4
lea ecx, [ebp - 0x4c]
push eax
call fcn.004082c0
lea ecx, [ebp - 0x67c]
call fcn.00407040
lea ecx, [ebp - 0x694]
call fcn.00407040
lea ecx, [ebp - 0x65c]
call fcn.00407040
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x6c
call fcn.004367b7
push 0
push 1
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.00405ba0
mov ecx, edi
call fcn.0040ada0
call esi
cmp eax, 0x704
jne 0x419439
sub esp, 0x18
lea eax, [edi + 0x94]
mov ecx, esp
push eax
call fcn.00405ba0
call fcn.004259f0
add esp, 0x18
test al, al
jne 0x419439
push 0
lea eax, [ebp - 0x720]
push str.tip.dlgtitle
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov edi, eax
push 0
lea eax, [ebp - 0x7a8]
mov byte [ebp - 4], 0x8f
push str.tip.port.unidentification
push eax
call fcn.00406b10
mov ecx, eax
call fcn.0045e146
mov esi, eax
push 0x40
mov ecx, edi
mov byte [ebp - 4], 0x90
call fcn.00408300
push eax
mov ecx, esi
call fcn.00408300
mov esi, dword [ebp - 0x664]
push eax
push dword [esi + 0x38]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x7a8]
call fcn.004367b7
lea ecx, [ebp - 0x720]
call fcn.004367b7
lea ecx, [ebp - 0x78]
call fcn.0040b190
lea ecx, [ebp - 0x24]
call fcn.00408290
lea ecx, [ebp - 0x180]
call fcn.00412380
lea ecx, [ebp - 0x138]
call fcn.00412380
lea ecx, [ebp - 0x300]
call fcn.0040d400
lea ecx, [ebp - 0xf0]
call fcn.00407040
lea ecx, [ebp - 0x150]
call fcn.00407040
lea ecx, [ebp - 0x108]
call fcn.00407040
lea ecx, [ebp - 0x4c]
call fcn.00407040
lea ecx, [ebp - 0xd8]
call fcn.00407040
lea ecx, [ebp - 0x58]
call fcn.0041a390
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0048aaf4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.0041a5c0
int3