Function at 0x435870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb28
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, 0
mov ebx, 0x8c
mov dword [esp + 0x23c], eax
lea eax, [esp + 0xa70]
mov dword [esp + 0x238], eax
mov eax, dword [esp + 0x23c]
mov dword [esp + 0xb14], eax
mov dword [esp + 0xb10], ecx
mov dword [esp + 0xb0c], edx
mov dword [esp + 0xb08], esi
mov dword [esp + 0xb04], 0
mov dword [esp + 0xb00], 0
mov dword [esp + 0xa6c], 0xd
mov dword [esp + 0xa68], 0
mov dword [esp + 0xa60], 0
mov dword [esp + 0xa5c], 0x400
mov dword [esp + 0xa50], 0xffffffff
mov ecx, dword [esp + 0x238]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8c
mov dword [esp + 0x234], ebx
mov dword [esp + 0x230], edi
call fcn.00407ed0
mov ecx, 5
lea edx, [esp + 0x247]
mov esi, dword [esp + 0xb08]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x22c], eax
mov dword [esp + 0x228], ecx
call fcn.00406870
mov ecx, 5
lea edx, [esp + 0xa70]
lea esi, [esp + 0x247]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x224], eax
mov dword [esp + 0x220], ecx
call fcn.00437100
mov dword [esp + 0xb18], eax
mov dword [esp + 0x240], 0xece0ff22
mov eax, dword [esp + 0x240]
mov ecx, eax
sub ecx, 0x847cbc45
mov dword [esp + 0x21c], eax
mov dword [esp + 0x218], ecx
jg 0x435a0c
jmp 0x4359ee
mov eax, dword [esp + 0x21c]
sub eax, 0x80a96737
mov dword [esp + 0x214], eax
je 0x436d7d
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x85ac8eb5
mov dword [esp + 0x210], eax
jg 0x435a48
jmp 0x435a2a
mov eax, dword [esp + 0x21c]
sub eax, 0x847cbc46
mov dword [esp + 0x20c], eax
je 0x436fa0
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x87fd2a8a
mov dword [esp + 0x208], eax
jg 0x435a84
jmp 0x435a66
mov eax, dword [esp + 0x21c]
sub eax, 0x85ac8eb6
mov dword [esp + 0x204], eax
je 0x436f5b
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x7b9ed83c
mov dword [esp + 0x200], eax
jg 0x436777
jmp 0x435aa2
mov eax, dword [esp + 0x21c]
sub eax, 0x7a7e229d
mov dword [esp + 0x1fc], eax
jg 0x43675c
jmp 0x435ac0
mov eax, dword [esp + 0x21c]
sub eax, 0x771c7147
mov dword [esp + 0x1f8], eax
jg 0x436741
jmp 0x435ade
mov eax, dword [esp + 0x21c]
sub eax, 0x6b0b89b6
mov dword [esp + 0x1f4], eax
jg 0x436726
jmp 0x435afc
mov eax, dword [esp + 0x21c]
sub eax, 0x6a7cd886
mov dword [esp + 0x1f0], eax
jg 0x43670b
jmp 0x435b1a
mov eax, dword [esp + 0x21c]
sub eax, 0x68b0ed31
mov dword [esp + 0x1ec], eax
jg 0x4366f0
jmp 0x435b38
mov eax, dword [esp + 0x21c]
sub eax, 0x8888a275
mov dword [esp + 0x1e8], eax
jg 0x435b74
jmp 0x435b56
mov eax, dword [esp + 0x21c]
sub eax, 0x87fd2a8b
mov dword [esp + 0x1e4], eax
je 0x436d8e
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x8ebc1b5e
mov dword [esp + 0x1e0], eax
jg 0x435bb0
jmp 0x435b92
mov eax, dword [esp + 0x21c]
sub eax, 0x8888a276
mov dword [esp + 0x1dc], eax
je 0x436ff4
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x65c1fb9e
mov dword [esp + 0x1d8], eax
jg 0x4366d5
jmp 0x435bce
mov eax, dword [esp + 0x21c]
sub eax, 0x65629fc4
mov dword [esp + 0x1d4], eax
jg 0x4366ba
jmp 0x435bec
mov eax, dword [esp + 0x21c]
sub eax, 0x64e2a8ab
mov dword [esp + 0x1d0], eax
jg 0x43669f
jmp 0x435c0a
mov eax, dword [esp + 0x21c]
sub eax, 0x615a3778
mov dword [esp + 0x1cc], eax
jg 0x436684
jmp 0x435c28
mov eax, dword [esp + 0x21c]
sub eax, 0x60922e74
mov dword [esp + 0x1c8], eax
jg 0x436669
jmp 0x435c46
mov eax, dword [esp + 0x21c]
sub eax, 0x4a40e70b
mov dword [esp + 0x1c4], eax
jg 0x43664e
jmp 0x435c64
mov eax, dword [esp + 0x21c]
sub eax, 0x498a9564
mov dword [esp + 0x1c0], eax
jg 0x436633
jmp 0x435c82
mov eax, dword [esp + 0x21c]
sub eax, 0x488770a1
mov dword [esp + 0x1bc], eax
jg 0x436618
jmp 0x435ca0
mov eax, dword [esp + 0x21c]
sub eax, 0x40a5dd47
mov dword [esp + 0x1b8], eax
jg 0x4365fd
jmp 0x435cbe
mov eax, dword [esp + 0x21c]
sub eax, 0x3fbbaf59
mov dword [esp + 0x1b4], eax
jg 0x4365e2
jmp 0x435cdc
mov eax, dword [esp + 0x21c]
sub eax, 0x3efdc9be
mov dword [esp + 0x1b0], eax
jg 0x4365c4
jmp 0x435cfa
mov eax, dword [esp + 0x21c]
sub eax, 0x3df12f1b
mov dword [esp + 0x1ac], eax
jg 0x4365a6
jmp 0x435d18
mov eax, dword [esp + 0x21c]
sub eax, 0x8edc3bb1
mov dword [esp + 0x1a8], eax
jg 0x435d54
jmp 0x435d36
mov eax, dword [esp + 0x21c]
sub eax, 0x8ebc1b5f
mov dword [esp + 0x1a4], eax
je 0x436ddb
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x90e1dd1f
mov dword [esp + 0x1a0], eax
jg 0x435d90
jmp 0x435d72
mov eax, dword [esp + 0x21c]
sub eax, 0x8edc3bb2
mov dword [esp + 0x19c], eax
je 0x4367ce
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x95eafc29
mov dword [esp + 0x198], eax
jg 0x435dcc
jmp 0x435dae
mov eax, dword [esp + 0x21c]
sub eax, 0x90e1dd20
mov dword [esp + 0x194], eax
je 0x436e92
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x99661fcb
mov dword [esp + 0x190], eax
jg 0x435e08
jmp 0x435dea
mov eax, dword [esp + 0x21c]
sub eax, 0x95eafc2a
mov dword [esp + 0x18c], eax
je 0x43697a
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x9afbb631
mov dword [esp + 0x188], eax
jg 0x435e44
jmp 0x435e26
mov eax, dword [esp + 0x21c]
sub eax, 0x99661fcc
mov dword [esp + 0x184], eax
je 0x43687b
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xa283a932
mov dword [esp + 0x180], eax
jg 0x435e80
jmp 0x435e62
mov eax, dword [esp + 0x21c]
sub eax, 0x9afbb632
mov dword [esp + 0x17c], eax
je 0x43695f
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xa8355481
mov dword [esp + 0x178], eax
jg 0x435ebc
jmp 0x435e9e
mov eax, dword [esp + 0x21c]
sub eax, 0xa283a933
mov dword [esp + 0x174], eax
je 0x436e31
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xb512b592
mov dword [esp + 0x170], eax
jg 0x435ef8
jmp 0x435eda
mov eax, dword [esp + 0x21c]
sub eax, 0xa8355482
mov dword [esp + 0x16c], eax
je 0x436ef7
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xbc7f2b86
mov dword [esp + 0x168], eax
jg 0x435f34
jmp 0x435f16
mov eax, dword [esp + 0x21c]
sub eax, 0xb512b593
mov dword [esp + 0x164], eax
je 0x436dbd
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xc0e99fd6
mov dword [esp + 0x160], eax
jg 0x435f70
jmp 0x435f52
mov eax, dword [esp + 0x21c]
sub eax, 0xbc7f2b87
mov dword [esp + 0x15c], eax
je 0x436a7e
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xc8ff3ae6
mov dword [esp + 0x158], eax
jg 0x435fac
jmp 0x435f8e
mov eax, dword [esp + 0x21c]
sub eax, 0xc0e99fd7
mov dword [esp + 0x154], eax
je 0x43694f
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xcbf5c63f
mov dword [esp + 0x150], eax
jg 0x435fe8
jmp 0x435fca
mov eax, dword [esp + 0x21c]
sub eax, 0xc8ff3ae7
mov dword [esp + 0x14c], eax
je 0x4370d1
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xd0b8acb4
mov dword [esp + 0x148], eax
jg 0x436024
jmp 0x436006
mov eax, dword [esp + 0x21c]
sub eax, 0xcbf5c640
mov dword [esp + 0x144], eax
je 0x4367bd
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xd342a1a0
mov dword [esp + 0x140], eax
jg 0x436060
jmp 0x436042
mov eax, dword [esp + 0x21c]
sub eax, 0xd0b8acb5
mov dword [esp + 0x13c], eax
je 0x43689c
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xd6e0d42d
mov dword [esp + 0x138], eax
jg 0x43609c
jmp 0x43607e
mov eax, dword [esp + 0x21c]
sub eax, 0xd342a1a1
mov dword [esp + 0x134], eax
je 0x436c51
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xe32627b2
mov dword [esp + 0x130], eax
jg 0x4360d8
jmp 0x4360ba
mov eax, dword [esp + 0x21c]
sub eax, 0xd6e0d42e
mov dword [esp + 0x12c], eax
je 0x436f7a
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xe6b29c4c
mov dword [esp + 0x128], eax
jg 0x436114
jmp 0x4360f6
mov eax, dword [esp + 0x21c]
sub eax, 0xe32627b3
mov dword [esp + 0x124], eax
je 0x436ed7
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xe7dc3798
mov dword [esp + 0x120], eax
jg 0x436150
jmp 0x436132
mov eax, dword [esp + 0x21c]
sub eax, 0xe6b29c4d
mov dword [esp + 0x11c], eax
je 0x436f07
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xec7146fc
mov dword [esp + 0x118], eax
jg 0x43618c
jmp 0x43616e
mov eax, dword [esp + 0x21c]
sub eax, 0xe7dc3799
mov dword [esp + 0x114], eax
je 0x436e65
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xec9e0ebf
mov dword [esp + 0x110], eax
jg 0x4361c8
jmp 0x4361aa
mov eax, dword [esp + 0x21c]
sub eax, 0xec7146fd
mov dword [esp + 0x10c], eax
je 0x436b31
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xece0ff21
mov dword [esp + 0x108], eax
jg 0x436204
jmp 0x4361e6
mov eax, dword [esp + 0x21c]
sub eax, 0xec9e0ec0
mov dword [esp + 0x104], eax
je 0x436a5b
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xf0059d01
mov dword [esp + 0x100], eax
jg 0x436240
jmp 0x436222
mov eax, dword [esp + 0x21c]
sub eax, 0xece0ff22
mov dword [esp + 0xfc], eax
je 0x436797
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xf3403240
mov dword [esp + 0xf8], eax
jg 0x43627c
jmp 0x43625e
mov eax, dword [esp + 0x21c]
sub eax, 0xf0059d02
mov dword [esp + 0xf4], eax
je 0x436f2b
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xf43a9680
mov dword [esp + 0xf0], eax
jg 0x4362b8
jmp 0x43629a
mov eax, dword [esp + 0x21c]
sub eax, 0xf3403241
mov dword [esp + 0xec], eax
je 0x4369cb
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xf473797d
mov dword [esp + 0xe8], eax
jg 0x4362f4
jmp 0x4362d6
mov eax, dword [esp + 0x21c]
sub eax, 0xf43a9681
mov dword [esp + 0xe4], eax
je 0x4370b6
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x4e3e1b4
mov dword [esp + 0xe0], eax
jg 0x436330
jmp 0x436312
mov eax, dword [esp + 0x21c]
sub eax, 0xf473797e
mov dword [esp + 0xdc], eax
je 0x436f89
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xbcb294c
mov dword [esp + 0xd8], eax
jg 0x43636c
jmp 0x43634e
mov eax, dword [esp + 0x21c]
sub eax, 0x4e3e1b5
mov dword [esp + 0xd4], eax
je 0x436e41
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xc9678d0
mov dword [esp + 0xd0], eax
jg 0x4363a8
jmp 0x43638a
mov eax, dword [esp + 0x21c]
sub eax, 0xbcb294d
mov dword [esp + 0xcc], eax
je 0x436a24
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0xcda0d6f
mov dword [esp + 0xc8], eax
jg 0x4363e4
jmp 0x4363c6
mov eax, dword [esp + 0x21c]
sub eax, 0xc9678d1
mov dword [esp + 0xc4], eax
je 0x4368c9
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x1476bb40
mov dword [esp + 0xc0], eax
jg 0x436420
jmp 0x436402
mov eax, dword [esp + 0x21c]
sub eax, 0xcda0d70
mov dword [esp + 0xbc], eax
je 0x436ec6
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x1823a63d
mov dword [esp + 0xb8], eax
jg 0x43645c
jmp 0x43643e
mov eax, dword [esp + 0x21c]
sub eax, 0x1476bb41
mov dword [esp + 0xb4], eax
je 0x436dff
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x1851d39f
mov dword [esp + 0xb0], eax
jg 0x436498
jmp 0x43647a
mov eax, dword [esp + 0x21c]
sub eax, 0x1823a63e
mov dword [esp + 0xac], eax
je 0x4369ef
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x25d218dc
mov dword [esp + 0xa8], eax
jg 0x4364d4
jmp 0x4364b6
mov eax, dword [esp + 0x21c]
sub eax, 0x1851d3a0
mov dword [esp + 0xa4], eax
je 0x437088
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x29d9567d
mov dword [esp + 0xa0], eax
jg 0x436510
jmp 0x4364f2
mov eax, dword [esp + 0x21c]
sub eax, 0x25d218dd
mov dword [esp + 0x9c], eax
je 0x43693f
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x39fafbc4
mov dword [esp + 0x98], eax
jg 0x43654c
jmp 0x43652e
mov eax, dword [esp + 0x21c]
sub eax, 0x29d9567e
mov dword [esp + 0x94], eax
je 0x4367e6
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x39fafbc5
mov dword [esp + 0x90], eax
je 0x436f4a
jmp 0x43656a
mov eax, dword [esp + 0x21c]
sub eax, 0x3c129791
mov dword [esp + 0x8c], eax
je 0x4368da
jmp 0x436588
mov eax, dword [esp + 0x21c]
sub eax, 0x3c239931
mov dword [esp + 0x88], eax
je 0x436fd9
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x3df12f1c
mov dword [esp + 0x84], eax
je 0x436dad
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x3efdc9bf
mov dword [esp + 0x80], eax
je 0x43691c
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x3fbbaf5a
mov dword [esp + 0x7c], eax
je 0x436ea2
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x40a5dd48
mov dword [esp + 0x78], eax
je 0x436fb0
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x488770a2
mov dword [esp + 0x74], eax
je 0x436c83
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x498a9565
mov dword [esp + 0x70], eax
je 0x436a9c
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x4a40e70c
mov dword [esp + 0x6c], eax
je 0x436cb2
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x60922e75
mov dword [esp + 0x68], eax
je 0x43686a
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x615a3779
mov dword [esp + 0x64], eax
je 0x43688c
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x64e2a8ac
mov dword [esp + 0x60], eax
je 0x436e10
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x65629fc5
mov dword [esp + 0x5c], eax
je 0x436e76
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x65c1fb9f
mov dword [esp + 0x58], eax
je 0x4367f6
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x68b0ed32
mov dword [esp + 0x54], eax
je 0x436d5a
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x6a7cd887
mov dword [esp + 0x50], eax
je 0x4370a6
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x6b0b89b7
mov dword [esp + 0x4c], eax
je 0x4370f0
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x771c7148
mov dword [esp + 0x48], eax
je 0x436e21
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x7a7e229e
mov dword [esp + 0x44], eax
je 0x436ca1
jmp 0x436792
mov eax, dword [esp + 0x21c]
sub eax, 0x7b9ed83d
mov dword [esp + 0x40], eax
je 0x436a13
jmp 0x436792
jmp 0x4370fb
mov eax, 0x65c1fb9f
mov ecx, 0xcbf5c640
mov edx, dword [esp + 0xb18]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x8edc3bb2
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [sym.imp.ADVAPI32.dll_BuildTrusteeWithNameA]
mov edi, dword [eax]
mov eax, 0x29d9567e
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0x3fbbaf5a
jmp 0x4370fb
mov eax, 0x736
mov ecx, 0x300
mov edx, dword [esp + 0xa70]
mov esi, dword [esp + 0xa74]
sub edx, 0xf85300cb
add edx, esi
add edx, 0xf85300cb
mov dword [esp + 0x3c], ecx
mov ecx, edx
mov edx, dword [esp + 0x3c]
shl edx, cl
sub eax, 0x76e37629
add eax, edx
add eax, 0x76e37629
shl eax, 1
mov dword [esp], eax
call fcn.0043ede4
mov edx, 0x60922e75
mov esi, 0xd0b8acb5
mov dword [esp + 0xa80], eax
cmp dword [esp + 0xa80], 0
cmovne edx, esi
mov dword [esp + 0x240], edx
jmp 0x4370fb
mov eax, 0x99661fcc
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x615a3779
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0x3fbbaf5a
jmp 0x4370fb
call fcn.0041ac50
mov ecx, 0x9afbb632
mov edx, 0xc9678d1
cmp dword [esp + 0xa7c], 0
cmovne ecx, edx
mov dword [esp + 0x240], ecx
mov dword [esp + 0x38], eax
jmp 0x4370fb
mov eax, 0x3c129791
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xa7c]
shl eax, 0
mov dword [esp], eax
call fcn.0043ede4
mov ecx, 0x3efdc9bf
mov dword [esp + 0xa84], eax
cmp dword [esp + 0xa84], 0
setne dl
and dl, 1
mov byte [esp + 0xb1d], dl
mov dword [esp + 0x240], ecx
jmp 0x4370fb
mov eax, 0x25d218dd
mov ecx, 0xc0e99fd7
mov dl, byte [esp + 0xb1d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0x3fbbaf5a
jmp 0x4370fb
mov dword [esp + 0x240], 0x95eafc2a
jmp 0x4370fb
mov dword [esp + 0xa84], 0
mov dword [esp + 0x240], 0x95eafc2a
jmp 0x4370fb
lea eax, [esp + 0x24c]
mov dword [esp + 0xb00], eax
mov eax, dword [esp + 0xb0c]
add eax, 0xa18c69d3
sub eax, 0xd
sub eax, 0xa18c69d3
mov dword [esp + 0xb0c], eax
mov dword [esp + 0xaf4], 0xfffffffe
mov dword [esp + 0xac8], 0
mov dword [esp + 0x240], 0xf3403241
jmp 0x4370fb
mov eax, 0xec7146fd
mov ecx, 0x1823a63e
cmp dword [esp + 0xa60], 0
cmove eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0xec7146fd
mov ecx, 0x7b9ed83d
cmp dword [esp + 0xb0c], 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0xbcb294d
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0xec9e0ec0
mov dword [esp + 0xa64], 0x400
mov ecx, dword [esp + 0xa64]
cmp ecx, dword [esp + 0xb0c]
seta dl
and dl, 1
mov byte [esp + 0xb1e], dl
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x498a9565
mov ecx, 0xbc7f2b87
mov dl, byte [esp + 0xb1e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xb0c]
mov dword [esp + 0xa64], eax
mov dword [esp + 0x240], 0x498a9565
jmp 0x4370fb
lea eax, [esp + 0x64c]
mov ecx, dword [esp + 0xa64]
mov edx, dword [esp + 0xb08]
add edx, dword [esp + 0xa6c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00406870
lea ecx, [esp + 0x64c]
mov edx, 0
mov esi, dword [esp + 0xa64]
mov edi, dword [esp + 0xa6c]
mov ebx, edx
sub ebx, esi
sub edi, ebx
mov dword [esp + 0xa6c], edi
mov esi, dword [esp + 0xa64]
mov edi, dword [esp + 0xb0c]
sub edx, esi
add edi, edx
mov dword [esp + 0xb0c], edi
mov edx, dword [esp + 0xa64]
mov dword [esp + 0xa60], edx
mov dword [esp + 0xb04], ecx
mov dword [esp + 0x240], 0xec7146fd
mov dword [esp + 0x34], eax
jmp 0x4370fb
lea eax, [esp + 0xa70]
lea ecx, [esp + 0xa58]
lea edx, [esp + 0xa54]
cmp dword [esp + 0xa60], 0
sete bl
and bl, 1
movzx esi, bl
mov edi, dword [esp + 0xa5c]
mov ebx, dword [esp + 0xb00]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xb04]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], esi
call fcn.00437ac0
mov ecx, 0x8ebc1b5f
mov edx, 0xd342a1a1
mov dword [esp + 0xa4c], eax
mov eax, dword [esp + 0xa58]
mov esi, dword [esp + 0xa60]
sub esi, 0x961202b3
sub esi, eax
add esi, 0x961202b3
mov dword [esp + 0xa60], esi
mov eax, dword [esp + 0xa58]
mov esi, dword [esp + 0xb04]
add esi, eax
mov dword [esp + 0xb04], esi
mov eax, dword [esp + 0xa54]
mov esi, dword [esp + 0xa5c]
add esi, 0x782b98ed
sub esi, eax
sub esi, 0x782b98ed
mov dword [esp + 0xa5c], esi
mov eax, dword [esp + 0xa54]
mov esi, dword [esp + 0xb00]
add esi, eax
mov dword [esp + 0xb00], esi
cmp dword [esp + 0xa5c], 0
cmove ecx, edx
mov dword [esp + 0x240], ecx
jmp 0x4370fb
mov eax, 0x7a7e229e
mov ecx, 0x488770a2
mov dword [esp + 0xa64], 0x400
mov edx, dword [esp + 0xa64]
cmp edx, dword [esp + 0xb14]
cmova eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xb14]
mov dword [esp + 0xa64], eax
mov dword [esp + 0x240], 0x7a7e229e
jmp 0x4370fb
mov eax, 0x4a40e70c
mov dword [esp + 0x240], eax
jmp 0x4370fb
lea eax, [esp + 0x24c]
mov ecx, dword [esp + 0xa64]
mov edx, dword [esp + 0xb10]
add edx, dword [esp + 0xa68]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00406870
mov ecx, 0x68b0ed32
mov edx, 0
mov esi, dword [esp + 0xa64]
mov edi, dword [esp + 0xa68]
sub edx, esi
sub edi, edx
mov dword [esp + 0xa68], edi
mov edx, dword [esp + 0xa64]
mov esi, dword [esp + 0xb14]
add esi, 0xbed20c5b
sub esi, edx
sub esi, 0xbed20c5b
mov dword [esp + 0xb14], esi
mov dword [esp + 0xa5c], 0x400
mov edx, dword [esp + 0xa5c]
cmp edx, dword [esp + 0xb14]
seta bl
and bl, 1
mov byte [esp + 0xb1f], bl
mov dword [esp + 0x240], ecx
mov dword [esp + 0x24], eax
jmp 0x4370fb
mov eax, 0xb512b593
mov ecx, 0x80a96737
mov dl, byte [esp + 0xb1f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x87fd2a8b
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x3df12f1c
mov ecx, dword [esp + 0xb14]
mov dword [esp + 0xa5c], ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0xb512b593
jmp 0x4370fb
lea eax, [esp + 0x24c]
mov dword [esp + 0xb00], eax
mov dword [esp + 0x240], 0x8ebc1b5f
jmp 0x4370fb
mov eax, 0xa283a933
mov ecx, 0x1476bb41
cmp dword [esp + 0xa4c], 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x64e2a8ac
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x771c7148
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0x3fbbaf5a
jmp 0x4370fb
mov dword [esp + 0x240], 0x4e3e1b5
jmp 0x4370fb
mov eax, 0xe7dc3799
mov ecx, 0xf3403241
cmp dword [esp + 0xa5c], 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x65629fc5
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0x90e1dd20
mov dword [esp + 0xa50], 0
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0x3fbbaf5a
jmp 0x4370fb
mov eax, 0xe6b29c4d
mov ecx, 0xcda0d70
cmp dword [esp + 0xa84], 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0xe32627b3
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xa84]
mov dword [esp], eax
call fcn.0043db10
mov eax, 0xa8355482
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov dword [esp + 0x240], 0xe6b29c4d
jmp 0x4370fb
mov eax, 0x39fafbc5
mov ecx, 0xf0059d02
cmp dword [esp + 0xa80], 0
cmovne eax, ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xa80]
mov dword [esp], eax
call fcn.0043db10
mov dword [esp + 0x240], 0x39fafbc5
jmp 0x4370fb
mov eax, 0x85ac8eb6
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, 0xd6e0d42e
mov ecx, dword [esp + 0xa50]
mov dword [esp + 0xb20], ecx
mov dword [esp + 0x240], eax
jmp 0x4370fb
mov eax, dword [esp + 0xb20]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [sym.imp.ADVAPI32.dll_BuildTrusteeWithNameA]
mov edi, dword [eax]
mov dword [esp + 0x240], 0x8edc3bb2
jmp 0x4370fb
mov dword [esp + 0x240], 0x99661fcc
jmp 0x4370fb
mov eax, dword [esp + 0xa7c]
shl eax, 0
mov dword [esp], eax
call fcn.0043ede4
mov dword [esp + 0xa84], eax
mov dword [esp + 0x240], 0x3c129791
jmp 0x4370fb
mov dword [esp + 0xa64], 0x400
mov dword [esp + 0x240], 0xbcb294d
jmp 0x4370fb
lea eax, [esp + 0x24c]
mov ecx, dword [esp + 0xa64]
mov edx, dword [esp + 0xb10]
add edx, dword [esp + 0xa68]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00406870
mov ecx, 0
mov edx, dword [esp + 0xa64]
mov esi, dword [esp + 0xa68]
mov edi, ecx
sub edi, esi
mov esi, ecx
sub esi, edx
add edi, esi
sub ecx, edi
mov dword [esp + 0xa68], ecx
mov ecx, dword [esp + 0xa64]
mov edx, dword [esp + 0xb14]
add edx, 0x1114f209
sub edx, ecx
sub edx, 0x1114f209
mov dword [esp + 0xb14], edx
mov dword [esp + 0xa5c], 0x400
mov dword [esp + 0x240], 0x4a40e70c
mov dword [esp + 0x20], eax
jmp 0x4370fb
mov eax, dword [esp + 0xb14]
mov dword [esp + 0xa5c], eax
mov dword [esp + 0x240], 0x87fd2a8b
jmp 0x4370fb
mov dword [esp + 0x240], 0x64e2a8ac
jmp 0x4370fb
mov dword [esp + 0xa50], 0
mov dword [esp + 0x240], 0x65629fc5
jmp 0x4370fb
mov eax, dword [esp + 0xa84]
mov dword [esp], eax
call fcn.0043db10
mov dword [esp + 0x240], 0xe32627b3
jmp 0x4370fb
mov dword [esp + 0x240], 0x85ac8eb6
jmp 0x4359c6