Function at 0x4326a0
Capabilities:
Get token membership

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x48
mov eax, dword [0x441004]
xor eax, esp
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0xc]
xor ecx, ecx
push esi
push edi
mov dword [esp + 0x10], eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2c], ecx
push eax
push eax
push 1
push eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x30], eax
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapSetInformation]
cmp dword [ebp + 8], 2
jl 0x4338ff
push 1
push 0x4301b0
call dword [sym.imp.api_ms_win_core_console_l1_1_0.dll_SetConsoleCtrlHandler]
mov esi, 1
jmp 0x432700
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + esi*4]
movzx eax, word [ecx]
cmp eax, 0x2d
je 0x432714
cmp eax, 0x2f
jne 0x43274d
lea eax, [ecx + 2]
push 0x42bfd4
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x432732
inc esi
cmp esi, dword [ebp + 8]
jl 0x432700
jmp 0x43274d
push 0x42bfd8
push 7
push 0xfffffffffffffff4
mov dword [0x441604], 1
call fcn.004357e0
add esp, 0xc
mov edi, 0x44109c
mov dword [esp + 0x18], 0x1c
lea ebx, [ebx]
lea eax, [esp + 0x44]
mov byte [esp + 0x38], 4
push eax
lea eax, [esp + 0xc]
mov ecx, 0x441120
push eax
lea eax, [esp + 0x24]
push eax
push edi
call fcn.00435360
mov esi, eax
test esi, esi
jne 0x432912
cmp dword [0x441120], eax
jne 0x4327f1
mov esi, dword [0x441128]
cmp esi, 0x3fffffff
ja 0x433971
xor ecx, ecx
mov eax, esi
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043fcb9
mov ecx, eax
add esp, 4
mov dword [0x441120], ecx
test ecx, ecx
je 0x433971
lea eax, [esi*4]
push eax
push 0
push ecx
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [0x441128], esi
mov ecx, 0x441120
call fcn.004353f0
mov esi, dword [0x44114c]
test esi, esi
jne 0x43288b
mov eax, dword [0x441144]
mov ecx, 0x28
mul ecx
mov ecx, eax
test edx, edx
ja 0x433971
jb 0x432820
cmp ecx, 0xffffffff
ja 0x433971
not eax
cmp eax, 4
jb 0x433971
add ecx, 4
push ecx
call dword [sym.imp.msvcrt.dll_malloc]
mov edx, eax
add esp, 4
test edx, edx
je 0x433971
mov eax, dword [0x441148]
mov dword [edx], eax
mov ecx, dword [0x441144]
mov esi, dword [0x44114c]
mov dword [0x441148], edx
lea eax, [ecx + ecx*4]
lea eax, [eax*8 - 0x24]
add eax, edx
add ecx, 0xffffffff
js 0x432883
lea esp, [esp]
mov dword [eax + 0x20], esi
mov esi, eax
sub eax, 0x28
mov dword [0x44114c], esi
sub ecx, 1
jns 0x432870
test esi, esi
je 0x433967
mov eax, dword [esi + 0x20]
mov dword [0x44114c], eax
mov eax, dword [edi]
mov dword [esi], eax
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 8]
mov dword [esi + 0x24], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x10], 0
lea ecx, [eax*4]
mov dword [esi + 0x14], 0
mov byte [esi + 0x18], 4
mov eax, dword [0x441120]
inc dword [0x441124]
mov eax, dword [eax + ecx]
mov dword [esi + 0x20], eax
mov eax, dword [0x441120]
mov dword [eax + ecx], esi
mov eax, dword [0x441124]
cmp eax, dword [0x441138]
jbe 0x432912
cmp dword [0x441140], 0
jne 0x432912
push eax
mov ecx, 0x441120
call fcn.00435560
push eax
mov ecx, 0x441120
call fcn.00435470
mov eax, dword [esp + 0x38]
add edi, 0x1c
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x18]
add eax, 0x1c
mov dword [esp + 0x18], eax
cmp eax, 0x54
jb 0x432760
cmp dword [0x441604], 0
je 0x43295f
push 0x42bff0
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0xc
push 2
push 0
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx]
mov edi, eax
mov dword [esp + 0x24], edi
test edi, edi
jns 0x4329db
lea edx, [esp + 0x20]
mov dword [esp + 0x20], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c038
push dword [esp + 0x24]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x2e5
push 0x42b744
push 0x42b77c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
jmp 0x433904
mov esi, 1
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + esi*4]
movzx eax, word [ecx]
cmp eax, 0x2d
je 0x4329f4
cmp eax, 0x2f
jne 0x432a18
lea eax, [ecx + 2]
inc esi
push 0x42c068
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x432a93
cmp esi, dword [ebp + 8]
jl 0x4329e0
mov edx, dword [esp + 0x10]
mov esi, 1
mov dword [esp + 0x28], esi
mov ecx, dword [edx + esi*4]
movzx eax, word [ecx]
cmp eax, 0x2d
je 0x432a35
cmp eax, 0x2f
jne 0x4331d5
lea eax, [ecx + 2]
push 0x42c0ac
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432ba1
inc esi
cmp esi, dword [ebp + 8]
jge 0x432fb5
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + esi*4]
call fcn.004301f0
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + esi*4]
test eax, eax
je 0x432b7d
push 0xa
push 0
push ecx
call dword [sym.imp.msvcrt.dll_wcstoul]
add esp, 0xc
mov dword [esp + 0x20], eax
mov dword [esp + 0xc], 1
jmp 0x432dcb
cmp esi, dword [ebp + 8]
jl 0x432aef
mov edi, 0x80070057
mov dword [esp + 0x20], 0
lea edx, [esp + 0x20]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0x24]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x2f4
jmp 0x4329c0
cmp dword [0x441604], 0
je 0x432b11
mov eax, dword [esp + 0x10]
mov eax, dword [eax + esi*4]
push eax
push 0x42c078
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x10
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + esi*4]
call fcn.00431790
mov edi, eax
mov dword [esp + 0x24], eax
test edi, edi
jns 0x432a14
lea edx, [esp + 0x20]
mov dword [esp + 0x20], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c090
push dword [esp + 0x24]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x2f7
jmp 0x4329c0
lea edx, [esp + 0x20]
call fcn.00432160
mov edi, eax
mov dword [esp + 0x24], edi
test edi, edi
js 0x432f63
mov dword [esp + 0xc], 1
jmp 0x432dcb
mov eax, dword [esp + 0x10]
push 0x42c068
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432c21
mov eax, dword [ebp + 8]
inc esi
cmp esi, eax
jl 0x432dce
mov edi, 0x80070057
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x31d
jmp 0x4329c0
mov eax, dword [esp + 0x10]
push 0x42c0e4
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4338ff
mov eax, dword [esp + 0x10]
push 0x42c0e8
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4338ff
mov eax, dword [esp + 0x10]
push 0x42c0ec
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432de4
inc esi
mov dword [esp + 0x28], esi
cmp esi, dword [ebp + 8]
jge 0x43307e
mov eax, dword [esp + 0x10]
mov edi, dword [eax + esi*4]
mov eax, dword [0x441180]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x4422c4]
mov ecx, 0x441180
call esi
add eax, 0x10
lea ecx, [esp + 0x1c]
push edi
mov dword [esp + 0x20], eax
call fcn.00433e40
test al, al
jne 0x432cec
test edi, edi
jne 0x432ccd
xor ecx, ecx
jmp 0x432ce1
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432cd2
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x24]
call fcn.00435250
lea eax, [esp + 8]
mov dword [esp + 8], 0
push eax
push ecx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x28]
call fcn.00433c10
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x432d77
mov ecx, eax
call fcn.00430830
mov edi, eax
mov dword [esp + 0x24], edi
test edi, edi
js 0x43300c
lea eax, [esp + 8]
push eax
push ecx
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x28]
call fcn.00433c10
push eax
lea ecx, [esp + 0x1c]
call fcn.00433d10
mov ecx, dword [esp + 0x44]
or eax, 0xffffffff
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x432d6d
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
jne 0x432d12
lea ecx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x432d9b
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
mov ecx, dword [esp + 0x1c]
or eax, 0xffffffff
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x432dc3
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
mov eax, dword [ebp + 8]
inc esi
mov dword [esp + 0x28], esi
cmp esi, eax
jge 0x4331d5
mov edx, dword [esp + 0x10]
jmp 0x432a21
mov eax, dword [esp + 0x10]
push 0x42c11c
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432e5f
inc esi
mov dword [esp + 0x28], esi
cmp esi, dword [ebp + 8]
jge 0x433127
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x17]
mov ecx, dword [eax + esi*4]
call fcn.00430390
mov edi, eax
mov dword [esp + 0x24], edi
test edi, edi
js 0x4330d5
mov edi, 0x44109c
mov esi, 2
jmp 0x432e40
push edi
mov ecx, 0x441120
call fcn.004355d0
mov cl, byte [esp + 0x17]
add edi, 0x1c
mov byte [eax + 8], cl
sub esi, 1
jne 0x432e40
jmp 0x432dc3
mov eax, dword [esp + 0x10]
push 0x42c148
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432e88
or dword [0x4410e0], 1
jmp 0x432dcb
mov eax, dword [esp + 0x10]
push 0x42c150
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432eb1
and dword [0x4410e0], 0xfffffffd
jmp 0x432dcb
mov eax, dword [esp + 0x10]
push 0x42c158
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x432f22
inc esi
cmp esi, dword [ebp + 8]
jge 0x43317e
mov eax, dword [esp + 0x10]
mov edx, dword [eax + esi*4]
test edx, edx
jne 0x432ef6
xor ecx, ecx
push ecx
push edx
mov ecx, 0x4410e4
call fcn.00435250
jmp 0x432dcb
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 8], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432f00
sub ecx, dword [esp + 8]
sar ecx, 1
push ecx
push edx
mov ecx, 0x4410e4
call fcn.00435250
jmp 0x432dcb
mov eax, dword [esp + 0x10]
push 0x42bfd4
mov eax, dword [eax + esi*4]
add eax, 2
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x4338b0
push 0x42bfd8
push 7
push 0xfffffffffffffff4
mov dword [0x441604], 1
call fcn.004357e0
add esp, 0xc
jmp 0x432dcb
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c0b0
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x313
jmp 0x4329c0
mov edi, 0x80070057
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x30b
jmp 0x4329c0
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433067
push 0x42c0f4
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433067
push 0x337
push 0x42b744
push 0x42b77c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
lea ecx, [esp + 0x18]
call fcn.00433d90
lea ecx, [esp + 0x1c]
call fcn.00433d90
jmp 0x433904
mov edi, 0x80070057
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x32e
jmp 0x4329c0
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c120
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x343
jmp 0x4329c0
mov edi, 0x80070057
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x340
jmp 0x4329c0
mov edi, 0x80070057
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c06c
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x35b
jmp 0x4329c0
mov edi, dword [ebp + 8]
mov eax, edi
sub eax, esi
mov dword [esp + 0x44], 0
mov dword [esp + 0x1c], eax
lea eax, [esp + 8]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0x220
push 0x20
push 2
lea eax, [esp + 0x6c]
mov word [esp + 0x70], 0x500
push eax
call dword [sym.imp.api_ms_win_security_base_l1_1_0.dll_AllocateAndInitializeSid]
mov dword [esp + 0x18], eax
test eax, eax
je 0x43383f
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
push 0
call dword [sym.imp.api_ms_win_security_base_l1_1_0.dll_CheckTokenMembership]
push dword [esp + 8]
neg eax
sbb eax, eax
and dword [esp + 0x1c], eax
call dword [sym.imp.api_ms_win_security_base_l1_1_0.dll_FreeSid]
cmp dword [esp + 0x18], 0
je 0x43383f
call fcn.00438470
mov edi, eax
test edi, edi
jns 0x4332ab
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c1ac
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x37b
jmp 0x4329c0
mov eax, 0x421a80
xor edi, edi
mov dword [esp + 8], eax
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, 0x441120
call fcn.00435360
test eax, eax
jne 0x43334b
mov eax, dword [esp + 8]
add edi, 0x1c
add eax, 0x1c
mov dword [esp + 8], eax
cmp edi, 0x150
jb 0x4332b6
call fcn.00439100
mov edi, eax
test edi, edi
jns 0x4333a8
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c1e8
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x38d
jmp 0x4329c0
call fcn.00438b50
mov edi, eax
test edi, edi
jns 0x4332ea
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c1d0
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x389
jmp 0x4329c0
call fcn.00438ec0
mov edi, eax
test edi, edi
jns 0x433405
lea edx, [esp + 8]
mov dword [esp + 8], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c200
push dword [esp + 0xc]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x38e
jmp 0x4329c0
cmp dword [0x441604], 0
je 0x433425
push dword [0x441124]
push 0x42c218
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x10
cmp dword [0x441124], 0
je 0x4334e1
mov edi, dword [0x441128]
xor eax, eax
test edi, edi
je 0x43344f
mov ecx, dword [0x441120]
cmp dword [ecx + eax*4], 0
jne 0x43346e
inc eax
cmp eax, edi
jb 0x433444
xor eax, eax
test eax, eax
je 0x4334e1
lea esp, [esp]
mov edx, eax
mov dword [esp + 0x44], edx
test eax, eax
jne 0x433473
xor ecx, ecx
jmp 0x43349e
mov eax, dword [ecx + eax*4]
jmp 0x433451
mov ecx, dword [eax + 0x20]
test ecx, ecx
jne 0x43349e
mov eax, dword [eax + 0x24]
xor edx, edx
div edi
mov esi, dword [0x441120]
inc edx
cmp edx, edi
jae 0x43349a
mov eax, dword [esi + edx*4]
test eax, eax
je 0x433495
mov ecx, eax
inc edx
test ecx, ecx
je 0x433488
mov edx, dword [esp + 0x44]
mov al, byte [edx + 0x18]
mov esi, dword [edx + 0x10]
mov edi, dword [edx + 0x14]
mov dword [esp + 8], ecx
mov ecx, 0x4410e8
push edx
mov byte [esp + 0x3c], al
call fcn.004355d0
mov ecx, dword [esp + 0x38]
mov dword [eax], esi
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esp + 8]
test eax, eax
je 0x4334dd
mov edi, dword [0x441128]
jmp 0x433460
mov esi, dword [esp + 0x28]
cmp dword [0x441604], 0
je 0x4334fb
push 0x42c248
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0xc
cmp dword [esp + 0xc], 0
je 0x4335da
cmp dword [esp + 0x1c], 0
je 0x433575
push 0x42c268
push 0xc
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0xc
mov dword [esp + 0xc], 0
mov edi, 0x80070057
lea edx, [esp + 0xc]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c15c
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x3a4
jmp 0x4329c0
push dword [esp + 0x20]
call fcn.00435e80
mov edi, eax
test edi, edi
jns 0x433904
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c2ac
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x3a7
jmp 0x4329c0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x433644
push eax
call fcn.00435c20
mov edi, eax
test edi, edi
jns 0x433904
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c2dc
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x3ad
jmp 0x4329c0
cmp eax, 1
jne 0x43368e
push ecx
lea eax, [esp + 0x48]
push eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
mov eax, dword [eax + esi*4]
push eax
call fcn.00433dc0
mov ecx, eax
call fcn.00433b80
push 0x42c2f8
mov ecx, 3
mov dword [esp + 0x30], ecx
push dword [eax]
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x43368e
mov byte [esp + 0x17], 1
lea edx, [eax + 3]
jmp 0x433697
mov edx, dword [esp + 0x2c]
mov byte [esp + 0x17], 0
test dl, 2
je 0x4336cf
mov ecx, dword [esp + 0x44]
and edx, 0xfffffffd
mov dword [esp + 0x2c], edx
add ecx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4336cf
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
mov edx, dword [esp + 0x2c]
test dl, 1
je 0x4336fc
mov ecx, dword [esp + 0xc]
or eax, 0xffffffff
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4336fc
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
cmp byte [esp + 0x17], 0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
lea edi, [ecx + eax*4]
je 0x433771
push dword [edi]
call fcn.00435c20
mov edi, eax
test edi, edi
jns 0x433904
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c304
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x3b3
jmp 0x4329c0
mov eax, dword [0x441180]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x4422c4]
mov ecx, 0x441180
call esi
mov ecx, dword [esp + 0x1c]
add eax, 0x10
mov dword [esp + 0xc], eax
mov edx, edi
lea eax, [esp + 0xc]
push eax
call fcn.00438010
mov esi, dword [esp + 0xc]
push esi
call fcn.00436300
mov edi, eax
mov dword [esp + 0x24], edi
test edi, edi
jns 0x43380e
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43380e
push 0x42c32c
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43380e
push 0x3bd
push 0x42b744
push 0x42b77c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x433904
mov edi, dword [esi]
push esi
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4422c4]
mov ecx, edi
call esi
mov edi, dword [esp + 0x24]
jmp 0x433904
push 0x42c174
call dword [sym.imp.msvcrt.dll_printf_s]
mov edx, dword [esp + 0x14]
add esp, 4
mov ecx, edi
call fcn.00437e20
mov edi, eax
test edi, edi
jns 0x433904
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c188
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x376
jmp 0x4329c0
mov edi, 0x80070057
mov dword [esp + 0xc], 0
lea edx, [esp + 0xc]
mov ecx, edi
call fcn.00435760
cmp dword [0x441604], 0
je 0x433904
push 0x42c15c
push dword [esp + 0x10]
push edi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x433904
push 0x369
jmp 0x4329c0
call fcn.0042fda0
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
test edi, edi
jns 0x433951
lea edx, [esp + 0xc]
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00435760
push dword [esp + 0xc]
push edi
push 0x42c350
push 0xc
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
cmp dword [0x441604], 0
jne 0x433951
push 0x42c36c
push 0xc
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0xc
mov ecx, dword [esp + 0x4c]
shr edi, 0x1f
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.0043ffc0
mov esp, ebp
pop ebp
ret
mov ecx, 0x80004005
call fcn.00435870
mov ecx, 0x8007000e
call fcn.00435870
int3