Function at 0x437d00
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x467846
mov eax, dword fs:[0]
push eax
sub esp, 0xfa4
mov eax, dword [0x4760c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xfb0], 0
mov eax, 0x5994
mov word [ebp - 0xafc], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
movzx ecx, ax
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xafa], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 1
movzx eax, dx
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str.C:Windows_system32_]
xor edx, eax
mov word [ebp - 0xaf8], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 2
movzx eax, dx
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str.C:Windows_system32_]
xor edx, eax
mov word [ebp - 0xaf6], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 3
movzx eax, dx
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaf4], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 4
movzx edx, cx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.C:Windows_system32_]
xor ecx, edx
mov word [ebp - 0xaf2], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 5
movzx edx, cx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xaf0], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 6
movzx ecx, ax
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xaee], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 7
movzx eax, dx
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaec], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 8
movzx edx, cx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.C:Windows_system32_]
xor ecx, edx
mov word [ebp - 0xaea], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 9
movzx edx, cx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xae8], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0xa
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xae6], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0xb
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xae4], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0xc
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xae2], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0xd
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xae0], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0xe
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xade], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0xf
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xadc], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x10
movzx ecx, ax
mov edx, 2
shl edx, 4
movzx eax, word [edx + str.C:Windows_system32_]
xor eax, ecx
mov word [ebp - 0xada], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x11
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xad8], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x12
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xad6], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x13
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xad4], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x14
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xad2], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x15
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xad0], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x16
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xace], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x17
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x17
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xacc], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x18
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x18
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaca], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x19
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xac8], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x1a
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1a
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xac6], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x1b
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1b
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xac4], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x1c
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xac2], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x1d
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1d
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xac0], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x1e
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1e
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xabe], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x1f
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xabc], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x20
movzx ecx, ax
mov edx, 2
shl edx, 5
movzx eax, word [edx + str.C:Windows_system32_]
xor eax, ecx
mov word [ebp - 0xaba], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x21
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x21
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xab8], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x22
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x22
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xab6], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x23
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x23
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xab4], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x24
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x24
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xab2], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x25
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x25
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xab0], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xafc]
add ecx, 0x26
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x26
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xaae], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xafc]
add eax, 0x27
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x27
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xaac], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xafc]
add edx, 0x28
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x28
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaaa], cx
xor edx, edx
mov word [ebp - 0xaa8], dx
lea ecx, [ebp - 0xafc]
call fcn.0042d1a0
mov dword [ebp - 0xe8c], eax
lea eax, [ebp - 0xda8]
mov dword [ebp - 0xf48], eax
movzx ecx, byte [ebp - 0xe5f]
push ecx
mov ecx, dword [ebp - 0xf48]
call fcn.00401f30
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xe8c]
mov dword [ebp - 0xdf4], edx
mov eax, dword [ebp - 0xdf4]
add eax, 2
mov dword [ebp - 0xf4c], eax
mov ecx, dword [ebp - 0xdf4]
mov dx, word [ecx]
mov word [ebp - 0xe62], dx
add dword [ebp - 0xdf4], 2
cmp word [ebp - 0xe62], 0
jne 0x4384f6
mov eax, dword [ebp - 0xdf4]
sub eax, dword [ebp - 0xf4c]
sar eax, 1
mov dword [ebp - 0xf50], eax
mov ecx, dword [ebp - 0xf50]
mov dword [ebp - 0xf54], ecx
mov edx, dword [ebp - 0xf54]
mov dword [ebp - 0xf58], edx
mov eax, dword [ebp - 0xf58]
push eax
mov ecx, dword [ebp - 0xe8c]
push ecx
lea ecx, [ebp - 0xda8]
call fcn.00415270
mov dword [ebp - 4], 1
mov edx, 0xbdfd
mov word [ebp - 0xb54], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb52], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 1
movzx edx, cx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.computerdefaults.exe]
xor ecx, edx
mov word [ebp - 0xb50], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 2
movzx edx, cx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.computerdefaults.exe]
xor ecx, edx
mov word [ebp - 0xb4e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 3
movzx edx, cx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb4c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 4
movzx ecx, ax
mov edx, 2
shl edx, 2
movzx eax, word [edx + str.computerdefaults.exe]
xor eax, ecx
mov word [ebp - 0xb4a], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 5
movzx ecx, ax
mov edx, 2
imul eax, edx, 5
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb48], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 6
movzx eax, dx
mov ecx, 2
imul edx, ecx, 6
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb46], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 7
movzx edx, cx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb44], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 8
movzx ecx, ax
mov edx, 2
shl edx, 3
movzx eax, word [edx + str.computerdefaults.exe]
xor eax, ecx
mov word [ebp - 0xb42], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 9
movzx ecx, ax
mov edx, 2
imul eax, edx, 9
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb40], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0xa
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xa
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb3e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0xb
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb3c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0xc
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xc
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb3a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0xd
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xd
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb38], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0xe
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb36], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0xf
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xf
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb34], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x10
movzx eax, dx
mov ecx, 2
shl ecx, 4
movzx edx, word [ecx + str.computerdefaults.exe]
xor edx, eax
mov word [ebp - 0xb32], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x11
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x11
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb30], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x12
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb2e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x13
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x13
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb2c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x14
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x14
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb2a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x15
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb28], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x16
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x16
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb26], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x17
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x17
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb24], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x18
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb22], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x19
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x19
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb20], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x1a
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1a
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb1e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x1b
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1b
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb1c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x1c
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1c
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb1a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x1d
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1d
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb18], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x1e
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1e
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb16], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x1f
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1f
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb14], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x20
movzx eax, dx
mov ecx, 2
shl ecx, 5
movzx edx, word [ecx + str.computerdefaults.exe]
xor edx, eax
mov word [ebp - 0xb12], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x21
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x21
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb10], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x22
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x22
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb0e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x23
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x23
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb0c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x24
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x24
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb0a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x25
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x25
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb08], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb54]
add eax, 0x26
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x26
movzx edx, word [eax + str.computerdefaults.exe]
xor edx, ecx
mov word [ebp - 0xb06], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb54]
add edx, 0x27
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x27
movzx ecx, word [edx + str.computerdefaults.exe]
xor ecx, eax
mov word [ebp - 0xb04], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb54]
add ecx, 0x28
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x28
movzx eax, word [ecx + str.computerdefaults.exe]
xor eax, edx
mov word [ebp - 0xb02], ax
xor ecx, ecx
mov word [ebp - 0xb00], cx
lea ecx, [ebp - 0xb54]
call fcn.0042d1a0
push eax
lea edx, [ebp - 0xda8]
push edx
lea eax, [ebp - 0xdc0]
push eax
call fcn.004431f0
add esp, 0xc
mov byte [ebp - 4], 2
mov ecx, 0xd848
mov word [ebp - 0xc1c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
movzx edx, cx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xc1a], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 1
movzx ecx, ax
mov edx, 2
shl edx, 0
movzx eax, word [edx + str.ms_settings]
xor eax, ecx
mov word [ebp - 0xc18], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 2
movzx ecx, ax
mov edx, 2
shl edx, 1
movzx eax, word [edx + str.ms_settings]
xor eax, ecx
mov word [ebp - 0xc16], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 3
movzx ecx, ax
mov edx, 2
imul eax, edx, 3
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xc14], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 4
movzx eax, dx
mov ecx, 2
shl ecx, 2
movzx edx, word [ecx + str.ms_settings]
xor edx, eax
mov word [ebp - 0xc12], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 5
movzx eax, dx
mov ecx, 2
imul edx, ecx, 5
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xc10], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 6
movzx edx, cx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xc0e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 7
movzx ecx, ax
mov edx, 2
imul eax, edx, 7
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xc0c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 8
movzx eax, dx
mov ecx, 2
shl ecx, 3
movzx edx, word [ecx + str.ms_settings]
xor edx, eax
mov word [ebp - 0xc0a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 9
movzx eax, dx
mov ecx, 2
imul edx, ecx, 9
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xc08], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 0xa
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xc06], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 0xb
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xb
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xc04], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 0xc
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xc
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xc02], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 0xd
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xc00], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 0xe
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xe
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbfe], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 0xf
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xf
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbfc], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 0x10
movzx edx, cx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str.ms_settings]
xor ecx, edx
mov word [ebp - 0xbfa], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 0x11
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xbf8], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 0x12
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x12
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbf6], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 0x13
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x13
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbf4], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc1c]
add ecx, 0x14
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xbf2], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc1c]
add eax, 0x15
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x15
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbf0], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc1c]
add edx, 0x16
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x16
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbee], cx
xor edx, edx
mov word [ebp - 0xbec], dx
lea ecx, [ebp - 0xc1c]
call fcn.0042d210
mov dword [ebp - 0xeb0], eax
lea eax, [ebp - 0xdc0]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
mov dword [ebp - 0xe90], ecx
mov edx, dword [ebp - 0xe4c]
cmp dword [edx + 0x14], 7
jbe 0x43916c
mov dword [ebp - 0xe94], 1
jmp 0x439176
mov dword [ebp - 0xe94], 0
mov al, byte [ebp - 0xe94]
mov byte [ebp - 0xdce], al
movzx ecx, byte [ebp - 0xdce]
test ecx, ecx
je 0x4391a7
mov edx, dword [ebp - 0xe4c]
mov eax, dword [edx]
mov dword [ebp - 0xf5c], eax
mov ecx, dword [ebp - 0xf5c]
mov dword [ebp - 0xe90], ecx
mov edx, dword [ebp - 0xe90]
mov dword [ebp - 0xf60], edx
mov eax, dword [ebp - 0xf60]
mov dword [ebp - 0xeec], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xe50], ecx
mov edx, dword [ebp - 0xe50]
mov dword [ebp - 0xe98], edx
mov eax, dword [ebp - 0xe50]
cmp dword [eax + 0x14], 7
jbe 0x4391ec
mov dword [ebp - 0xe9c], 1
jmp 0x4391f6
mov dword [ebp - 0xe9c], 0
mov cl, byte [ebp - 0xe9c]
mov byte [ebp - 0xdcf], cl
movzx edx, byte [ebp - 0xdcf]
test edx, edx
je 0x439227
mov eax, dword [ebp - 0xe50]
mov ecx, dword [eax]
mov dword [ebp - 0xf64], ecx
mov edx, dword [ebp - 0xf64]
mov dword [ebp - 0xe98], edx
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0xf68], eax
mov ecx, dword [ebp - 0xf68]
mov dword [ebp - 0xebc], ecx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xce8], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xce6], cx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xce4], cx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xce2], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xce0], cx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcde], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcdc], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcda], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xcd8], cx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcd6], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcd4], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcd2], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcd0], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcce], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xccc], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcca], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xcc8], cx
mov edx, 0x4916
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcc6], ax
mov ecx, 0x4916
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xcc4], ax
xor ecx, ecx
mov word [ebp - 0xcc2], cx
mov dword [ebp - 0xdf0], 0
jmp 0x439593
mov edx, dword [ebp - 0xdf0]
add edx, 1
mov dword [ebp - 0xdf0], edx
cmp dword [ebp - 0xdf0], 0x13
jae 0x4395cf
mov eax, 0x4916
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdf0]
movzx ecx, word [ebp + eax*2 - 0xce8]
sub ecx, edx
mov edx, dword [ebp - 0xdf0]
mov word [ebp + edx*2 - 0xce8], cx
jmp 0x439584
lea eax, [ebp - 0xce8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x478460], eax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd4c], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.advapi32.dll]
add ecx, edx
mov word [ebp - 0xd4a], cx
mov edx, 0x89e5
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.advapi32.dll]
add ecx, edx
mov word [ebp - 0xd48], cx
mov edx, 0x89e5
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd46], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.advapi32.dll]
add ecx, edx
mov word [ebp - 0xd44], cx
mov edx, 0x89e5
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd42], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd40], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd3e], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.advapi32.dll]
add ecx, edx
mov word [ebp - 0xd3c], cx
mov edx, 0x89e5
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd3a], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd38], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd36], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd34], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd32], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd30], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd2e], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str.advapi32.dll]
add ecx, edx
mov word [ebp - 0xd2c], cx
mov edx, 0x89e5
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd2a], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd28], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd26], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd24], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd22], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd20], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x17
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd1e], ax
mov ecx, 0x89e5
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + str.advapi32.dll]
add eax, edx
mov word [ebp - 0xd1c], ax
xor ecx, ecx
mov word [ebp - 0xd1a], cx
mov dword [ebp - 0xdec], 0
jmp 0x439a37
mov edx, dword [ebp - 0xdec]
add edx, 1
mov dword [ebp - 0xdec], edx
cmp dword [ebp - 0xdec], 0x19
jae 0x439a73
mov eax, 0x89e5
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdec]
movzx ecx, word [ebp + eax*2 - 0xd4c]
sub ecx, edx
mov edx, dword [ebp - 0xdec]
mov word [ebp + edx*2 - 0xd4c], cx
jmp 0x439a28
lea eax, [ebp - 0xd4c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x478464], eax
mov ecx, 0x2732
mov word [ebp - 0xc7c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
movzx edx, cx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x46909c]
xor eax, edx
mov word [ebp - 0xc7a], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 1
movzx ecx, ax
mov edx, 2
shl edx, 0
movzx eax, word [edx + 0x46909c]
xor eax, ecx
mov word [ebp - 0xc78], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 2
movzx ecx, ax
mov edx, 2
shl edx, 1
movzx eax, word [edx + 0x46909c]
xor eax, ecx
mov word [ebp - 0xc76], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 3
movzx ecx, ax
mov edx, 2
imul eax, edx, 3
movzx edx, word [eax + 0x46909c]
xor edx, ecx
mov word [ebp - 0xc74], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 4
movzx eax, dx
mov ecx, 2
shl ecx, 2
movzx edx, word [ecx + 0x46909c]
xor edx, eax
mov word [ebp - 0xc72], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 5
movzx eax, dx
mov ecx, 2
imul edx, ecx, 5
movzx ecx, word [edx + 0x46909c]
xor ecx, eax
mov word [ebp - 0xc70], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
add ecx, 6
movzx edx, cx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x46909c]
xor eax, edx
mov word [ebp - 0xc6e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 7
movzx ecx, ax
mov edx, 2
imul eax, edx, 7
movzx edx, word [eax + 0x46909c]
xor edx, ecx
mov word [ebp - 0xc6c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 8
movzx eax, dx
mov ecx, 2
shl ecx, 3
movzx edx, word [ecx + 0x46909c]
xor edx, eax
mov word [ebp - 0xc6a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 9
movzx eax, dx
mov ecx, 2
imul edx, ecx, 9
movzx ecx, word [edx + 0x46909c]
xor ecx, eax
mov word [ebp - 0xc68], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
add ecx, 0xa
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x46909c]
xor eax, edx
mov word [ebp - 0xc66], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 0xb
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xb
movzx edx, word [eax + 0x46909c]
xor edx, ecx
mov word [ebp - 0xc64], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 0xc
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xc
movzx ecx, word [edx + 0x46909c]
xor ecx, eax
mov word [ebp - 0xc62], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
add ecx, 0xd
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x46909c]
xor eax, edx
mov word [ebp - 0xc60], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 0xe
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xe
movzx edx, word [eax + 0x46909c]
xor edx, ecx
mov word [ebp - 0xc5e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc7c]
add edx, 0xf
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xf
movzx ecx, word [edx + 0x46909c]
xor ecx, eax
mov word [ebp - 0xc5c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
add ecx, 0x10
movzx edx, cx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x46909c]
xor ecx, edx
mov word [ebp - 0xc5a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc7c]
add ecx, 0x11
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x46909c]
xor eax, edx
mov word [ebp - 0xc58], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc7c]
add eax, 0x12
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x12
movzx edx, word [eax + 0x46909c]
xor edx, ecx
mov word [ebp - 0xc56], dx
xor eax, eax
mov word [ebp - 0xc54], ax
lea ecx, [ebp - 0xc7c]
call fcn.00443ee0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x478440], eax
call fcn.0043d960
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa94], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.RtlCreateHeap]
add ecx, edx
mov byte [ebp - 0xa93], cl
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.RtlCreateHeap]
add ecx, edx
mov byte [ebp - 0xa92], cl
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa91], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.RtlCreateHeap]
add ecx, edx
mov byte [ebp - 0xa90], cl
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa8f], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa8e], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa8d], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.RtlCreateHeap]
add ecx, edx
mov byte [ebp - 0xa8c], cl
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa8b], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa8a], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa89], al
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.RtlCreateHeap]
add eax, edx
mov byte [ebp - 0xa88], al
mov byte [ebp - 0xa87], 0
mov dword [ebp - 0xde8], 0
jmp 0x43a038
mov ecx, dword [ebp - 0xde8]
add ecx, 1
mov dword [ebp - 0xde8], ecx
cmp dword [ebp - 0xde8], 0xd
jae 0x43a070
mov eax, 0x40
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, dword [ebp - 0xde8]
movsx ecx, byte [ebp + eax - 0xa94]
sub ecx, edx
mov edx, dword [ebp - 0xde8]
mov byte [ebp + edx - 0xa94], cl
jmp 0x43a029
lea eax, [ebp - 0xa94]
mov dword [ebp - 0xf6c], eax
mov ecx, dword [0x478460]
mov dword [ebp - 0xf70], ecx
mov edx, dword [ebp - 0xf6c]
push edx
mov eax, dword [ebp - 0xf70]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf7c], eax
mov byte [ebp - 0xa50], 5
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
movsx ecx, al
mov edx, 1
imul eax, edx, 0
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa4f], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 1
movsx eax, dl
mov ecx, 1
shl ecx, 0
movsx edx, byte [ecx + str.RtlSetHeapInformation]
xor edx, eax
mov byte [ebp - 0xa4e], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 2
movsx eax, dl
mov ecx, 1
shl ecx, 1
movsx edx, byte [ecx + str.RtlSetHeapInformation]
xor edx, eax
mov byte [ebp - 0xa4d], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 3
movsx eax, dl
mov ecx, 1
imul edx, ecx, 3
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa4c], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 4
movsx edx, cl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.RtlSetHeapInformation]
xor ecx, edx
mov byte [ebp - 0xa4b], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 5
movsx edx, cl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa4a], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 6
movsx ecx, al
mov edx, 1
imul eax, edx, 6
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa49], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 7
movsx eax, dl
mov ecx, 1
imul edx, ecx, 7
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa48], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 8
movsx edx, cl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.RtlSetHeapInformation]
xor ecx, edx
mov byte [ebp - 0xa47], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 9
movsx edx, cl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa46], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 0xa
movsx ecx, al
mov edx, 1
imul eax, edx, 0xa
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa45], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 0xb
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xb
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa44], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 0xc
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa43], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 0xd
movsx ecx, al
mov edx, 1
imul eax, edx, 0xd
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa42], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 0xe
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xe
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa41], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 0xf
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xf
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa40], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 0x10
movsx ecx, al
mov edx, 1
shl edx, 4
movsx eax, byte [edx + str.RtlSetHeapInformation]
xor eax, ecx
mov byte [ebp - 0xa3f], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 0x11
movsx ecx, al
mov edx, 1
imul eax, edx, 0x11
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa3e], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa50]
add edx, 0x12
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0x12
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa3d], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa50]
add ecx, 0x13
movsx edx, cl
mov eax, 1
imul ecx, eax, 0x13
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa3c], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa50]
add eax, 0x14
movsx ecx, al
mov edx, 1
imul eax, edx, 0x14
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa3b], dl
xor eax, eax
mov byte [ebp - 0xa3a], al
lea ecx, [ebp - 0xa50]
call fcn.00443860
mov dword [ebp - 0xf74], eax
mov ecx, dword [0x478460]
mov dword [ebp - 0xf78], ecx
mov edx, dword [ebp - 0xf74]
push edx
mov eax, dword [ebp - 0xf78]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf28], eax
mov ecx, dword [ebp - 0xf7c]
mov dword [ebp - 0xf18], ecx
push 0
push 0
push 0
push 0
push 0
push 2
call dword [ebp - 0xf18]
mov dword [0x47845c], eax
mov edx, dword [ebp - 0xf28]
mov dword [ebp - 0xf2c], edx
push 0
push 0
push 1
mov eax, dword [0x47845c]
push eax
call dword [ebp - 0xf2c]
mov dword [ebp - 0xeb4], 0xc0000022
mov byte [ebp - 0xdc5], 0
mov dword [ebp - 0xdc4], 0xc0000022
mov dword [ebp - 0xea8], 0
mov dword [ebp - 0xdcc], 0
mov dword [ebp - 0xde0], 0
mov dword [ebp - 0xdfc], 0
mov ecx, dword [0x478474]
mov dword [ebp - 0xf30], ecx
mov edx, 0x2b17
mov word [ebp - 0xba0], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb9e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 1
movzx edx, cx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + 0x4690d8]
xor ecx, edx
mov word [ebp - 0xb9c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 2
movzx edx, cx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + 0x4690d8]
xor ecx, edx
mov word [ebp - 0xb9a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 3
movzx edx, cx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb98], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 4
movzx ecx, ax
mov edx, 2
shl edx, 2
movzx eax, word [edx + 0x4690d8]
xor eax, ecx
mov word [ebp - 0xb96], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 5
movzx ecx, ax
mov edx, 2
imul eax, edx, 5
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb94], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 6
movzx eax, dx
mov ecx, 2
imul edx, ecx, 6
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb92], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 7
movzx edx, cx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb90], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 8
movzx ecx, ax
mov edx, 2
shl edx, 3
movzx eax, word [edx + 0x4690d8]
xor eax, ecx
mov word [ebp - 0xb8e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 9
movzx ecx, ax
mov edx, 2
imul eax, edx, 9
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb8c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0xa
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xa
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb8a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0xb
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb88], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0xc
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xc
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb86], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0xd
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xd
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb84], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0xe
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb82], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0xf
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xf
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb80], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x10
movzx eax, dx
mov ecx, 2
shl ecx, 4
movzx edx, word [ecx + 0x4690d8]
xor edx, eax
mov word [ebp - 0xb7e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x11
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x11
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb7c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x12
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb7a], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0x13
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x13
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb78], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x14
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x14
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb76], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x15
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb74], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0x16
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x16
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb72], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x17
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x17
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb70], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x18
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb6e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0x19
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x19
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb6c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x1a
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1a
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb6a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x1b
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1b
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb68], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0x1c
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1c
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb66], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x1d
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1d
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb64], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x1e
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1e
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb62], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xba0]
add eax, 0x1f
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1f
movzx edx, word [eax + 0x4690d8]
xor edx, ecx
mov word [ebp - 0xb60], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x20
movzx eax, dx
mov ecx, 2
shl ecx, 5
movzx edx, word [ecx + 0x4690d8]
xor edx, eax
mov word [ebp - 0xb5e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xba0]
add edx, 0x21
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x21
movzx ecx, word [edx + 0x4690d8]
xor ecx, eax
mov word [ebp - 0xb5c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xba0]
add ecx, 0x22
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x22
movzx eax, word [ecx + 0x4690d8]
xor eax, edx
mov word [ebp - 0xb5a], ax
xor ecx, ecx
mov word [ebp - 0xb58], cx
lea ecx, [ebp - 0xba0]
call fcn.00443f50
push eax
lea edx, [ebp - 0xfac]
push edx
call dword [ebp - 0xf30]
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xaa4], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + 0x4690fc]
add ecx, edx
mov byte [ebp - 0xaa3], cl
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + 0x4690fc]
add ecx, edx
mov byte [ebp - 0xaa2], cl
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xaa1], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + 0x4690fc]
add ecx, edx
mov byte [ebp - 0xaa0], cl
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa9f], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa9e], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa9d], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + 0x4690fc]
add ecx, edx
mov byte [ebp - 0xa9c], cl
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa9b], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa9a], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa99], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa98], al
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xd
movsx eax, byte [ecx + 0x4690fc]
add eax, edx
mov byte [ebp - 0xa97], al
mov byte [ebp - 0xa96], 0
mov dword [ebp - 0xde4], 0
jmp 0x43addc
mov ecx, dword [ebp - 0xde4]
add ecx, 1
mov dword [ebp - 0xde4], ecx
cmp dword [ebp - 0xde4], 0xe
jae 0x43ae14
mov eax, 0x55
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, dword [ebp - 0xde4]
movsx ecx, byte [ebp + eax - 0xaa4]
sub ecx, edx
mov edx, dword [ebp - 0xde4]
mov byte [ebp + edx - 0xaa4], cl
jmp 0x43adcd
lea eax, [ebp - 0xaa4]
mov dword [ebp - 0xf34], eax
mov ecx, dword [0x478440]
mov dword [ebp - 0xf38], ecx
mov edx, dword [ebp - 0xf34]
push edx
mov eax, dword [ebp - 0xf38]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov dword [ebp - 0xf40], ecx
push 2
push 0
call dword [ebp - 0xf40]
mov dword [ebp - 0xf04], eax
mov dword [ebp - 0xe58], 0x410
lea edx, [ebp - 0xa38]
mov dword [ebp - 0xe54], edx
cmp dword [ebp - 0xe58], 0
je 0x43aeaa
mov eax, dword [ebp - 0xe54]
mov byte [eax], 0
mov ecx, dword [ebp - 0xe54]
add ecx, 1
mov dword [ebp - 0xe54], ecx
mov edx, dword [ebp - 0xe58]
sub edx, 1
mov dword [ebp - 0xe58], edx
jmp 0x43ae78
push 1
call fcn.00442d00
add esp, 4
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43aefb
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0xf44], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc0]
call fcn.0042bd30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda8]
call fcn.0042bd30
mov eax, dword [ebp - 0xf44]
jmp 0x43d93c
mov ecx, dword [0x478468]
mov dword [ebp - 0xeb8], ecx
lea edx, [ebp - 0xf20]
push edx
call dword [ebp - 0xeb8]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43af28
jmp 0x43c451
lea eax, [ebp - 0xdcc]
push eax
lea ecx, [ebp - 0xf20]
push ecx
call fcn.0043fb50
add esp, 8
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43af52
jmp 0x43c451
mov edx, 2
imul eax, edx, 0
mov ecx, 0x5c
mov word [ebp + eax - 0xa38], cx
mov dword [ebp - 0xea0], 2
cmp dword [ebp - 0xea0], 0x410
jae 0x43af7f
jmp 0x43af84
call fcn.00448efd
xor edx, edx
mov eax, dword [ebp - 0xea0]
mov word [ebp + eax - 0xa38], dx
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0xa38]
push edx
mov eax, dword [ebp - 0xebc]
push eax
mov ecx, dword [ebp - 0xdcc]
push ecx
call fcn.00442100
add esp, 0xc
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43afce
jmp 0x43c451
mov byte [ebp - 0xdc5], 1
lea edx, [ebp - 0xa38]
push edx
call fcn.00450e03
add esp, 4
movzx ecx, word [ebp - 0xf1e]
lea edx, [ecx + eax*2 + 0x104]
mov dword [ebp - 0xe5c], edx
mov eax, dword [ebp - 0xe5c]
push eax
call fcn.0043f690
add esp, 4
mov dword [ebp - 0xdfc], eax
cmp dword [ebp - 0xdfc], 0
jne 0x43b01b
jmp 0x43c451
mov ecx, dword [ebp - 0xdfc]
mov dword [ebp - 0xe0c], ecx
xor edx, edx
mov word [ebp - 0xe10], dx
mov ax, word [ebp - 0xe5c]
mov word [ebp - 0xe0e], ax
mov ecx, dword [0x47846c]
mov dword [ebp - 0xec0], ecx
lea edx, [ebp - 0xf20]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xec0]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43b072
jmp 0x43c451
mov ecx, 2
imul edx, ecx, 0
mov eax, 0x5c
mov word [ebp + edx - 0x628], ax
mov dword [ebp - 0xea4], 2
cmp dword [ebp - 0xea4], 0x208
jae 0x43b09f
jmp 0x43b0a4
call fcn.00448efd
xor ecx, ecx
mov edx, dword [ebp - 0xea4]
mov word [ebp + edx - 0x628], cx
mov eax, 0xb3e9
mov word [ebp - 0xbe8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe64], ax
movzx ecx, word [ebp - 0xe64]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbe6], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe66], dx
movzx eax, word [ebp - 0xe66]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + 0x46910c]
xor edx, eax
mov word [ebp - 0xbe4], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe68], dx
movzx eax, word [ebp - 0xe68]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + 0x46910c]
xor edx, eax
mov word [ebp - 0xbe2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe5e], dx
movzx eax, word [ebp - 0xe5e]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbe0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe6a], cx
movzx edx, word [ebp - 0xe6a]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x46910c]
xor ecx, edx
mov word [ebp - 0xbde], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe6c], cx
movzx edx, word [ebp - 0xe6c]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbdc], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe6e], ax
movzx ecx, word [ebp - 0xe6e]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbda], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe70], dx
movzx eax, word [ebp - 0xe70]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbd8], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe72], cx
movzx edx, word [ebp - 0xe72]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x46910c]
xor ecx, edx
mov word [ebp - 0xbd6], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe74], cx
movzx edx, word [ebp - 0xe74]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbd4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe76], ax
movzx ecx, word [ebp - 0xe76]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbd2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe78], dx
movzx eax, word [ebp - 0xe78]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbd0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe7a], cx
movzx edx, word [ebp - 0xe7a]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbce], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe7c], ax
movzx ecx, word [ebp - 0xe7c]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbcc], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe7e], dx
movzx eax, word [ebp - 0xe7e]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbca], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe80], cx
movzx edx, word [ebp - 0xe80]
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbc8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe82], ax
movzx ecx, word [ebp - 0xe82]
mov edx, 2
shl edx, 4
movzx eax, word [edx + 0x46910c]
xor eax, ecx
mov word [ebp - 0xbc6], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe84], ax
movzx ecx, word [ebp - 0xe84]
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbc4], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe86], dx
movzx eax, word [ebp - 0xe86]
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbc2], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe88], cx
movzx edx, word [ebp - 0xe88]
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbc0], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe12], ax
movzx ecx, word [ebp - 0xe12]
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbbe], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe14], dx
movzx eax, word [ebp - 0xe14]
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbbc], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe16], cx
movzx edx, word [ebp - 0xe16]
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbba], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe18], ax
movzx ecx, word [ebp - 0xe18]
mov edx, 2
imul eax, edx, 0x17
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbb8], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe1a], dx
movzx eax, word [ebp - 0xe1a]
mov ecx, 2
imul edx, ecx, 0x18
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbb6], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe1c], cx
movzx edx, word [ebp - 0xe1c]
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbb4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe1e], ax
movzx ecx, word [ebp - 0xe1e]
mov edx, 2
imul eax, edx, 0x1a
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbb2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe20], dx
movzx eax, word [ebp - 0xe20]
mov ecx, 2
imul edx, ecx, 0x1b
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbb0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe22], cx
movzx edx, word [ebp - 0xe22]
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xbae], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe24], ax
movzx ecx, word [ebp - 0xe24]
mov edx, 2
imul eax, edx, 0x1d
movzx edx, word [eax + 0x46910c]
xor edx, ecx
mov word [ebp - 0xbac], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbe8]
mov word [ebp - 0xe26], dx
movzx eax, word [ebp - 0xe26]
mov ecx, 2
imul edx, ecx, 0x1e
movzx ecx, word [edx + 0x46910c]
xor ecx, eax
mov word [ebp - 0xbaa], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbe8]
mov word [ebp - 0xe28], cx
movzx edx, word [ebp - 0xe28]
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + 0x46910c]
xor eax, edx
mov word [ebp - 0xba8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbe8]
mov word [ebp - 0xe2a], ax
movzx ecx, word [ebp - 0xe2a]
mov edx, 2
shl edx, 5
movzx eax, word [edx + 0x46910c]
xor eax, ecx
mov word [ebp - 0xba6], ax
xor ecx, ecx
mov word [ebp - 0xba4], cx
lea ecx, [ebp - 0xbe8]
call fcn.00444180
push eax
mov edx, 2
shl edx, 0
lea eax, [ebp + edx - 0x628]
push eax
call fcn.00451413
add esp, 8
mov ecx, dword [0x478470]
mov dword [ebp - 0xec4], ecx
lea edx, [ebp - 0x628]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xec4]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43b816
jmp 0x43c451
mov ecx, dword [0x478470]
mov dword [ebp - 0xec8], ecx
lea edx, [ebp - 0xa38]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xec8]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43b84a
jmp 0x43c451
push 0x104
mov ecx, dword [ebp - 0xeb0]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.00451435
add esp, 0xc
mov eax, 0x96d8
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd18], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str._shellopen]
add ecx, edx
mov word [ebp - 0xd16], cx
mov edx, 0x96d8
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str._shellopen]
add ecx, edx
mov word [ebp - 0xd14], cx
mov edx, 0x96d8
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd12], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str._shellopen]
add ecx, edx
mov word [ebp - 0xd10], cx
mov edx, 0x96d8
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd0e], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd0c], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd0a], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str._shellopen]
add ecx, edx
mov word [ebp - 0xd08], cx
mov edx, 0x96d8
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd06], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd04], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd02], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xd00], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcfe], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcfc], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcfa], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str._shellopen]
add ecx, edx
mov word [ebp - 0xcf8], cx
mov edx, 0x96d8
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcf6], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcf4], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcf2], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcf0], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcee], ax
mov ecx, 0x96d8
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str._shellopen]
add eax, edx
mov word [ebp - 0xcec], ax
xor ecx, ecx
mov word [ebp - 0xcea], cx
mov dword [ebp - 0xe08], 0
jmp 0x43bc65
mov edx, dword [ebp - 0xe08]
add edx, 1
mov dword [ebp - 0xe08], edx
cmp dword [ebp - 0xe08], 0x17
jae 0x43bca1
mov eax, 0x96d8
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xe08]
movzx ecx, word [ebp + eax*2 - 0xd18]
sub ecx, edx
mov edx, dword [ebp - 0xe08]
mov word [ebp + edx*2 - 0xd18], cx
jmp 0x43bc56
lea eax, [ebp - 0xd18]
push eax
lea ecx, [ebp - 0x420]
push ecx
call fcn.004513e2
add esp, 8
mov byte [ebp - 0xa64], 8
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
movsx edx, cl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa63], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 1
movsx ecx, al
mov edx, 1
shl edx, 0
movsx eax, byte [edx + str.RegCreateKeyExW]
xor eax, ecx
mov byte [ebp - 0xa62], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 2
movsx ecx, al
mov edx, 1
shl edx, 1
movsx eax, byte [edx + str.RegCreateKeyExW]
xor eax, ecx
mov byte [ebp - 0xa61], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 3
movsx ecx, al
mov edx, 1
imul eax, edx, 3
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa60], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 4
movsx eax, dl
mov ecx, 1
shl ecx, 2
movsx edx, byte [ecx + str.RegCreateKeyExW]
xor edx, eax
mov byte [ebp - 0xa5f], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 5
movsx eax, dl
mov ecx, 1
imul edx, ecx, 5
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa5e], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 6
movsx edx, cl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa5d], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 7
movsx ecx, al
mov edx, 1
imul eax, edx, 7
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa5c], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 8
movsx eax, dl
mov ecx, 1
shl ecx, 3
movsx edx, byte [ecx + str.RegCreateKeyExW]
xor edx, eax
mov byte [ebp - 0xa5b], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 9
movsx eax, dl
mov ecx, 1
imul edx, ecx, 9
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa5a], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 0xa
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa59], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 0xb
movsx ecx, al
mov edx, 1
imul eax, edx, 0xb
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa58], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 0xc
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xc
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa57], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 0xd
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xd
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa56], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 0xe
movsx ecx, al
mov edx, 1
imul eax, edx, 0xe
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa55], dl
xor eax, eax
mov byte [ebp - 0xa54], al
lea ecx, [ebp - 0xa64]
call fcn.004438d0
mov dword [ebp - 0xecc], eax
mov ecx, dword [0x478464]
mov dword [ebp - 0xed0], ecx
mov edx, dword [ebp - 0xecc]
push edx
mov eax, dword [ebp - 0xed0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xed4], eax
mov ecx, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], ecx
push 0
lea edx, [ebp - 0xea8]
push edx
push 0
push 0x2000000
push 0
push 0
push 0
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [ebp - 0xed8]
test eax, eax
je 0x43bfdb
jmp 0x43c451
mov edx, dword [0x478474]
mov dword [ebp - 0xedc], edx
mov eax, 0x3d72
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcc0], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.command]
add ecx, edx
mov word [ebp - 0xcbe], cx
mov edx, 0x3d72
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.command]
add ecx, edx
mov word [ebp - 0xcbc], cx
mov edx, 0x3d72
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcba], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.command]
add ecx, edx
mov word [ebp - 0xcb8], cx
mov edx, 0x3d72
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcb6], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcb4], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcb2], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.command]
add ecx, edx
mov word [ebp - 0xcb0], cx
mov edx, 0x3d72
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcae], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcac], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xcaa], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xca8], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xca6], ax
mov ecx, 0x3d72
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.command]
add eax, edx
mov word [ebp - 0xca4], ax
xor ecx, ecx
mov word [ebp - 0xca2], cx
mov dword [ebp - 0xdf8], 0
jmp 0x43c28f
mov edx, dword [ebp - 0xdf8]
add edx, 1
mov dword [ebp - 0xdf8], edx
cmp dword [ebp - 0xdf8], 0xf
jae 0x43c2cb
mov eax, 0x3d72
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdf8]
movzx ecx, word [ebp + eax*2 - 0xcc0]
sub ecx, edx
mov edx, dword [ebp - 0xdf8]
mov word [ebp + edx*2 - 0xcc0], cx
jmp 0x43c280
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0xfa4]
push ecx
call dword [ebp - 0xedc]
mov dword [ebp - 0xf98], 0x18
mov edx, dword [ebp - 0xea8]
mov dword [ebp - 0xf94], edx
mov dword [ebp - 0xf8c], 0x40
lea eax, [ebp - 0xfa4]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0
mov dword [ebp - 0xf84], 0
mov ecx, dword [0x478488]
mov dword [ebp - 0xee0], ecx
lea edx, [ebp - 0xf9c]
push edx
push 3
push 0
push 0
lea eax, [ebp - 0xf98]
push eax
push 0xf003f
lea ecx, [ebp - 0xde0]
push ecx
call dword [ebp - 0xee0]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0xc0000035
jne 0x43c39f
mov edx, dword [ebp - 0xf8c]
or edx, 0x100
mov dword [ebp - 0xf8c], edx
mov eax, dword [0x478484]
mov dword [ebp - 0xee4], eax
lea ecx, [ebp - 0xf98]
push ecx
push 0xf003f
lea edx, [ebp - 0xde0]
push edx
call dword [ebp - 0xee4]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43c3ad
jmp 0x43c451
mov eax, dword [ebp - 0xe0c]
push eax
call fcn.00450e03
add esp, 4
shl eax, 1
mov dword [ebp - 0xe5c], eax
mov ecx, dword [0x478480]
mov dword [ebp - 0xf80], ecx
movzx edx, word [ebp - 0xe10]
push edx
mov eax, dword [ebp - 0xe0c]
push eax
push 6
push 0
lea ecx, [ebp - 0xfac]
push ecx
mov edx, dword [ebp - 0xde0]
push edx
call dword [ebp - 0xf80]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x43c408
jmp 0x43c451
mov eax, dword [0x47847c]
mov dword [ebp - 0xee8], eax
mov ecx, dword [ebp - 0xde0]
push ecx
call dword [ebp - 0xee8]
mov dword [ebp - 0xde0], 0
push 0
mov edx, dword [ebp - 0xeec]
push edx
call fcn.00441910
add esp, 8
test eax, eax
je 0x43c449
mov dword [ebp - 0xeb4], 0
xor eax, eax
jne 0x43aefb
cmp dword [ebp - 0xde0], 0
je 0x43c473
mov ecx, dword [0x47847c]
mov dword [ebp - 0xef0], ecx
mov edx, dword [ebp - 0xde0]
push edx
call dword [ebp - 0xef0]
cmp dword [ebp - 0xdfc], 0
je 0x43c48b
mov eax, dword [ebp - 0xdfc]
push eax
call fcn.0043f940
add esp, 4
movzx ecx, byte [ebp - 0xdc5]
test ecx, ecx
je 0x43c756
cmp dword [ebp - 0xdcc], 0
je 0x43c756
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa84], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.RegDeleteKeyW]
add ecx, edx
mov byte [ebp - 0xa83], cl
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.RegDeleteKeyW]
add ecx, edx
mov byte [ebp - 0xa82], cl
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa81], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.RegDeleteKeyW]
add ecx, edx
mov byte [ebp - 0xa80], cl
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa7f], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa7e], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa7d], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.RegDeleteKeyW]
add ecx, edx
mov byte [ebp - 0xa7c], cl
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa7b], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa7a], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa79], al
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.RegDeleteKeyW]
add eax, edx
mov byte [ebp - 0xa78], al
mov byte [ebp - 0xa77], 0
mov dword [ebp - 0xe00], 0
jmp 0x43c6c3
mov ecx, dword [ebp - 0xe00]
add ecx, 1
mov dword [ebp - 0xe00], ecx
cmp dword [ebp - 0xe00], 0xd
jae 0x43c6fb
mov eax, 0x44
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, dword [ebp - 0xe00]
movsx ecx, byte [ebp + eax - 0xa84]
sub ecx, edx
mov edx, dword [ebp - 0xe00]
mov byte [ebp + edx - 0xa84], cl
jmp 0x43c6b4
lea eax, [ebp - 0xa84]
mov dword [ebp - 0xf10], eax
mov ecx, dword [0x478464]
mov dword [ebp - 0xef4], ecx
mov edx, dword [ebp - 0xf10]
push edx
mov eax, dword [ebp - 0xef4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xef8], eax
mov ecx, dword [ebp - 0xef8]
mov dword [ebp - 0xefc], ecx
mov edx, 2
shl edx, 0
lea eax, [ebp + edx - 0xa38]
push eax
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [ebp - 0xefc]
cmp dword [ebp - 0xdcc], 0
je 0x43c778
mov edx, dword [0x47847c]
mov dword [ebp - 0xf00], edx
mov eax, dword [ebp - 0xdcc]
push eax
call dword [ebp - 0xf00]
cmp dword [ebp - 0xf04], 0
jl 0x43ca9a
mov byte [ebp - 0xa74], 0x71
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa74]
mov byte [ebp - 0xdd0], al
movsx ecx, byte [ebp - 0xdd0]
mov edx, 1
imul eax, edx, 0
movsx edx, byte [eax + str.CoUninitialize]
xor edx, ecx
mov byte [ebp - 0xa73], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa74]
mov byte [ebp - 0xdd1], dl
movsx eax, byte [ebp - 0xdd1]
mov ecx, 1
shl ecx, 0
movsx edx, byte [ecx + str.CoUninitialize]
xor edx, eax
mov byte [ebp - 0xa72], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa74]
mov byte [ebp - 0xdd2], dl
movsx eax, byte [ebp - 0xdd2]
mov ecx, 1
shl ecx, 1
movsx edx, byte [ecx + str.CoUninitialize]
xor edx, eax
mov byte [ebp - 0xa71], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa74]
mov byte [ebp - 0xdcd], dl
movsx eax, byte [ebp - 0xdcd]
mov ecx, 1
imul edx, ecx, 3
movsx ecx, byte [edx + str.CoUninitialize]
xor ecx, eax
mov byte [ebp - 0xa70], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa74]
mov byte [ebp - 0xdd3], cl
movsx edx, byte [ebp - 0xdd3]
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.CoUninitialize]
xor ecx, edx
mov byte [ebp - 0xa6f], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa74]
mov byte [ebp - 0xdd4], cl
movsx edx, byte [ebp - 0xdd4]
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.CoUninitialize]
xor eax, edx
mov byte [ebp - 0xa6e], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa74]
mov byte [ebp - 0xdd5], al
movsx ecx, byte [ebp - 0xdd5]
mov edx, 1
imul eax, edx, 6
movsx edx, byte [eax + str.CoUninitialize]
xor edx, ecx
mov byte [ebp - 0xa6d], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa74]
mov byte [ebp - 0xdd6], dl
movsx eax, byte [ebp - 0xdd6]
mov ecx, 1
imul edx, ecx, 7
movsx ecx, byte [edx + str.CoUninitialize]
xor ecx, eax
mov byte [ebp - 0xa6c], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa74]
mov byte [ebp - 0xdd7], cl
movsx edx, byte [ebp - 0xdd7]
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.CoUninitialize]
xor ecx, edx
mov byte [ebp - 0xa6b], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa74]
mov byte [ebp - 0xdd8], cl
movsx edx, byte [ebp - 0xdd8]
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.CoUninitialize]
xor eax, edx
mov byte [ebp - 0xa6a], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa74]
mov byte [ebp - 0xdd9], al
movsx ecx, byte [ebp - 0xdd9]
mov edx, 1
imul eax, edx, 0xa
movsx edx, byte [eax + str.CoUninitialize]
xor edx, ecx
mov byte [ebp - 0xa69], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa74]
mov byte [ebp - 0xdda], dl
movsx eax, byte [ebp - 0xdda]
mov ecx, 1
imul edx, ecx, 0xb
movsx ecx, byte [edx + str.CoUninitialize]
xor ecx, eax
mov byte [ebp - 0xa68], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa74]
mov byte [ebp - 0xddb], cl
movsx edx, byte [ebp - 0xddb]
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.CoUninitialize]
xor eax, edx
mov byte [ebp - 0xa67], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa74]
mov byte [ebp - 0xddc], al
movsx ecx, byte [ebp - 0xddc]
mov edx, 1
imul eax, edx, 0xd
movsx edx, byte [eax + str.CoUninitialize]
xor edx, ecx
mov byte [ebp - 0xa66], dl
xor eax, eax
mov byte [ebp - 0xa65], al
lea ecx, [ebp - 0xa74]
call fcn.00443e70
mov dword [ebp - 0xf08], eax
mov ecx, dword [0x478440]
mov dword [ebp - 0xf0c], ecx
mov edx, dword [ebp - 0xf08]
push edx
mov eax, dword [ebp - 0xf0c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf24], eax
call dword [ebp - 0xf24]
mov ecx, 2
imul edx, ecx, 0
mov eax, 0x5c
mov word [ebp + edx - 0x420], ax
mov dword [ebp - 0xeac], 2
cmp dword [ebp - 0xeac], 0x410
jae 0x43cac7
jmp 0x43cacc
call fcn.00448efd
xor ecx, ecx
mov edx, dword [ebp - 0xeac]
mov word [ebp + edx - 0x420], cx
mov eax, 0x7a4b
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd90], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd8e], cx
mov edx, 0x7a4b
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd8c], cx
mov edx, 0x7a4b
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd8a], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd88], cx
mov edx, 0x7a4b
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd86], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd84], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd82], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd80], cx
mov edx, 0x7a4b
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd7e], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd7c], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd7a], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd78], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd76], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd74], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd72], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd70], cx
mov edx, 0x7a4b
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd6e], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd6c], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd6a], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd68], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd66], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd64], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x17
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd62], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd60], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd5e], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1a
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd5c], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1b
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd5a], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd58], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1d
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd56], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1e
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd54], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + 0x469188]
add eax, edx
mov word [ebp - 0xd52], ax
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 5
movzx ecx, word [eax + 0x469188]
add ecx, edx
mov word [ebp - 0xd50], cx
xor edx, edx
mov word [ebp - 0xd4e], dx
mov dword [ebp - 0xe04], 0
jmp 0x43d08a
mov eax, dword [ebp - 0xe04]
add eax, 1
mov dword [ebp - 0xe04], eax
cmp dword [ebp - 0xe04], 0x21
jae 0x43d0c6
mov ecx, 0x7a4b
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xe04]
movzx ecx, word [ebp + eax*2 - 0xd90]
sub ecx, edx
mov edx, dword [ebp - 0xe04]
mov word [ebp + edx*2 - 0xd90], cx
jmp 0x43d07b
lea eax, [ebp - 0xd90]
push eax
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0x420]
push edx
call fcn.00451413
add esp, 8
push 0x4691ac
lea eax, [ebp - 0x420]
push eax
call fcn.004513e2
add esp, 8
mov ecx, dword [ebp - 0xeb0]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.004513e2
add esp, 8
mov eax, 0x6d78
mov word [ebp - 0xc50], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
movzx ecx, ax
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc4e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 1
movzx eax, dx
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + 0x4691b0]
xor edx, eax
mov word [ebp - 0xc4c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 2
movzx eax, dx
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + 0x4691b0]
xor edx, eax
mov word [ebp - 0xc4a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 3
movzx eax, dx
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc48], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 4
movzx edx, cx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x4691b0]
xor ecx, edx
mov word [ebp - 0xc46], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 5
movzx edx, cx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc44], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 6
movzx ecx, ax
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc42], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 7
movzx eax, dx
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc40], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 8
movzx edx, cx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x4691b0]
xor ecx, edx
mov word [ebp - 0xc3e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 9
movzx edx, cx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc3c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 0xa
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc3a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 0xb
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc38], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 0xc
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc36], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 0xd
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc34], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 0xe
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc32], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 0xf
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc30], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 0x10
movzx ecx, ax
mov edx, 2
shl edx, 4
movzx eax, word [edx + 0x4691b0]
xor eax, ecx
mov word [ebp - 0xc2e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 0x11
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc2c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 0x12
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc2a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 0x13
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc28], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xc50]
add eax, 0x14
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + 0x4691b0]
xor edx, ecx
mov word [ebp - 0xc26], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xc50]
add edx, 0x15
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + 0x4691b0]
xor ecx, eax
mov word [ebp - 0xc24], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xc50]
add ecx, 0x16
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x4691b0]
xor eax, edx
mov word [ebp - 0xc22], ax
xor ecx, ecx
mov word [ebp - 0xc20], cx
lea ecx, [ebp - 0xc50]
call fcn.0042d210
push eax
lea edx, [ebp - 0x420]
push edx
call fcn.004513e2
add esp, 8
push 0x4691c8
lea eax, [ebp - 0x420]
push eax
call fcn.004513e2
add esp, 8
mov ecx, 0x196a
mov word [ebp - 0xca0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xca0]
mov word [ebp - 0xe2c], cx
movzx edx, word [ebp - 0xe2c]
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x4691cc]
xor eax, edx
mov word [ebp - 0xc9e], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe2e], ax
movzx ecx, word [ebp - 0xe2e]
mov edx, 2
shl edx, 0
movzx eax, word [edx + 0x4691cc]
xor eax, ecx
mov word [ebp - 0xc9c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe30], ax
movzx ecx, word [ebp - 0xe30]
mov edx, 2
shl edx, 1
movzx eax, word [edx + 0x4691cc]
xor eax, ecx
mov word [ebp - 0xc9a], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe32], ax
movzx ecx, word [ebp - 0xe32]
mov edx, 2
imul eax, edx, 3
movzx edx, word [eax + 0x4691cc]
xor edx, ecx
mov word [ebp - 0xc98], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xca0]
mov word [ebp - 0xe34], dx
movzx eax, word [ebp - 0xe34]
mov ecx, 2
shl ecx, 2
movzx edx, word [ecx + 0x4691cc]
xor edx, eax
mov word [ebp - 0xc96], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xca0]
mov word [ebp - 0xe36], dx
movzx eax, word [ebp - 0xe36]
mov ecx, 2
imul edx, ecx, 5
movzx ecx, word [edx + 0x4691cc]
xor ecx, eax
mov word [ebp - 0xc94], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xca0]
mov word [ebp - 0xe38], cx
movzx edx, word [ebp - 0xe38]
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x4691cc]
xor eax, edx
mov word [ebp - 0xc92], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe3a], ax
movzx ecx, word [ebp - 0xe3a]
mov edx, 2
imul eax, edx, 7
movzx edx, word [eax + 0x4691cc]
xor edx, ecx
mov word [ebp - 0xc90], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xca0]
mov word [ebp - 0xe3c], dx
movzx eax, word [ebp - 0xe3c]
mov ecx, 2
shl ecx, 3
movzx edx, word [ecx + 0x4691cc]
xor edx, eax
mov word [ebp - 0xc8e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xca0]
mov word [ebp - 0xe3e], dx
movzx eax, word [ebp - 0xe3e]
mov ecx, 2
imul edx, ecx, 9
movzx ecx, word [edx + 0x4691cc]
xor ecx, eax
mov word [ebp - 0xc8c], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xca0]
mov word [ebp - 0xe40], cx
movzx edx, word [ebp - 0xe40]
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x4691cc]
xor eax, edx
mov word [ebp - 0xc8a], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe42], ax
movzx ecx, word [ebp - 0xe42]
mov edx, 2
imul eax, edx, 0xb
movzx edx, word [eax + 0x4691cc]
xor edx, ecx
mov word [ebp - 0xc88], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xca0]
mov word [ebp - 0xe44], dx
movzx eax, word [ebp - 0xe44]
mov ecx, 2
imul edx, ecx, 0xc
movzx ecx, word [edx + 0x4691cc]
xor ecx, eax
mov word [ebp - 0xc86], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xca0]
mov word [ebp - 0xe46], cx
movzx edx, word [ebp - 0xe46]
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x4691cc]
xor eax, edx
mov word [ebp - 0xc84], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xca0]
mov word [ebp - 0xe48], ax
movzx ecx, word [ebp - 0xe48]
mov edx, 2
imul eax, edx, 0xe
movzx edx, word [eax + 0x4691cc]
xor edx, ecx
mov word [ebp - 0xc82], dx
xor eax, eax
mov word [ebp - 0xc80], ax
lea ecx, [ebp - 0xca0]
call fcn.004440a0
push eax
lea ecx, [ebp - 0x420]
push ecx
call fcn.004513e2
add esp, 8
lea edx, [ebp - 0x420]
push edx
call fcn.00440200
add esp, 4
push 0
call fcn.00442d00
add esp, 4
mov eax, dword [0x478460]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [0x478464]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, dword [0x478440]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0xf14], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc0]
call fcn.0042bd30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda8]
call fcn.0042bd30
mov eax, dword [ebp - 0xf14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00448a1c
mov esp, ebp
pop ebp
ret