Function at 0x43051b
Capabilities:
Shutdown system

Disassembly:
push 0x908
mov eax, 0x45d22d
call fcn.0043aa77
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0x10]
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0x170
lea eax, [ebp - 0x8d0]
push ebx
push eax
call fcn.0043c020
add esp, 0xc
lea ecx, [ebp - 0x8d0]
call fcn.0042b3fa
push 0x80
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], ebx
push ebx
push eax
call fcn.0043c020
add esp, 0xc
lea ecx, [ebp - 0x4dc]
call fcn.00433c98
push 0xcc
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 1
push ebx
push eax
call fcn.0043c020
add esp, 0xc
lea ecx, [ebp - 0x28c]
call fcn.00433cd4
push 0xf0
lea eax, [ebp - 0x760]
mov byte [ebp - 4], 2
push ebx
push eax
call fcn.0043c020
add esp, 0xc
lea ecx, [ebp - 0x760]
call fcn.00433bd5
push 0x194
lea eax, [ebp - 0x670]
mov byte [ebp - 4], 3
push ebx
push eax
call fcn.0043c020
add esp, 0xc
lea ecx, [ebp - 0x670]
call fcn.004277ed
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ecx
mov word [ebp - 0x50], ax
lea edi, [ebp - 0x1a8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ecx
mov word [ebp - 0x1a8], ax
lea edi, [ebp - 0x120]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ecx
mov word [ebp - 0x120], ax
lea edi, [ebp - 0x78]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x78], ax
lea edi, [ebp - 0x90]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ecx
mov word [ebp - 0x90], ax
lea edi, [ebp - 0xc0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ecx
mov word [ebp - 0xc0], ax
lea edi, [ebp - 0x108]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ecx
mov word [ebp - 0x108], ax
lea edi, [ebp - 0xd8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ecx
mov word [ebp - 0xd8], ax
lea edi, [ebp - 0xa8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ecx
mov word [ebp - 0xa8], ax
push 0x406078
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x8e0], ebx
call fcn.0042b488
mov byte [ebp - 0x8e8], bl
mov byte [ebp - 0x8e1], bl
mov byte [ebp - 0x8e4], 1
mov byte [ebp - 0x8e3], bl
mov byte [ebp - 0x8d9], bl
xor eax, eax
mov byte [ebp - 0x38], bl
lea edi, [ebp - 0x60]
mov dword [ebp - 0x8d8], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], 0x405278
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
push ebx
mov byte [ebp - 4], 0x11
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x60]
push eax
call fcn.0042cea8
pop ecx
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x8e8]
push eax
push esi
call fcn.0042d13a
add esp, 0x10
test al, al
je 0x430b0e
mov esi, dword [0x46203c]
cmp dword [esi], 0xffffffff
je 0x4307af
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x20]
mov edi, 0x1000
push 8
pop esi
cmp eax, esi
jb 0x430802
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x4307f9
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x430836
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x94]
cmp eax, esi
jb 0x43087e
mov ecx, dword [ebp - 0xa8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430875
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x94], 7
cmp eax, esi
jb 0x4308df
mov ecx, dword [ebp - 0xd8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x4308d6
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xc4], 7
cmp eax, esi
jb 0x430940
mov ecx, dword [ebp - 0x108]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430937
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov word [ebp - 0x108], ax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xf4], 7
cmp eax, esi
jb 0x4309a1
mov ecx, dword [ebp - 0xc0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430998
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xac], 7
cmp eax, esi
jb 0x4309ff
mov ecx, dword [ebp - 0x90]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x4309f6
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], 7
cmp eax, esi
jb 0x430a54
mov ecx, dword [ebp - 0x78]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430a4b
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x64], 7
cmp eax, esi
jb 0x430aac
mov ecx, dword [ebp - 0x120]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430aa3
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x110], ebx
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], 7
cmp eax, esi
jb 0x430b07
mov ecx, dword [ebp - 0x50]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x430afe
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
mov esi, ebx
jmp 0x431b1b
cmp byte [ebp - 0x8e8], 0
lea eax, [ebp - 0x78]
push eax
jne 0x430b22
call fcn.00437c18
jmp 0x430b27
call fcn.00436fa8
pop ecx
push 8
pop esi
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x430b36
mov eax, dword [ebp - 0x78]
push eax
call fcn.00436733
lea eax, [ebp - 0x78]
pop ecx
cmp dword [ebp - 0x64], esi
jb 0x430b48
mov eax, dword [ebp - 0x78]
push ebx
push 0x406094
push eax
lea eax, [ebp - 0x90]
push ebx
push eax
call fcn.004386be
add esp, 0x14
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x430b70
mov eax, dword [ebp - 0x90]
push dword [ebp - 0x8e8]
mov ecx, dword [0x46203c]
push eax
call fcn.0042caf9
cmp byte [ebp - 0x8e8], 0
je 0x430bb3
lea eax, [ebp - 0xd8]
cmp dword [ebp - 0xc4], esi
jb 0x430b9f
mov eax, dword [ebp - 0xd8]
push eax
push 0x4060b0
push dword [0x46203c]
call fcn.004143e5
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x1c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0x12
push 0x40c
push eax
call fcn.004376fb
cmp byte [ebp - 0x8e8], 0
pop ecx
pop ecx
jne 0x430d89
call fcn.0042cc11
test al, al
je 0x430d89
mov ecx, dword [0x46203c]
push 0x40612c
call fcn.00415670
call fcn.004362d6
test al, al
lea eax, [ebp - 0x34]
je 0x430c6c
push 0x598
push eax
call fcn.004376fb
pop ecx
pop ecx
lea ecx, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], esi
jb 0x430c46
mov ecx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430c51
mov eax, dword [ebp - 0x34]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x430ca3
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x430ca3
push 0x599
push eax
call fcn.004376fb
pop ecx
pop ecx
lea ecx, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], esi
jb 0x430c8d
mov ecx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430c98
mov eax, dword [ebp - 0x34]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov esi, dword [0x46203c]
cmp dword [esi], 0xffffffff
je 0x430cb6
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x1c0]
call fcn.00415705
lea ecx, [ebp - 0x34]
call fcn.00415705
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x430cf6
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00415705
lea ecx, [ebp - 0xd8]
call fcn.00415705
lea ecx, [ebp - 0x108]
call fcn.00415705
lea ecx, [ebp - 0xc0]
call fcn.00415705
lea ecx, [ebp - 0x90]
call fcn.00415705
lea ecx, [ebp - 0x78]
call fcn.00415705
lea ecx, [ebp - 0x120]
call fcn.00415705
lea ecx, [ebp - 0x1a8]
call fcn.00415705
lea ecx, [ebp - 0x50]
call fcn.00415705
lea ecx, [ebp - 0x670]
call fcn.00427bf8
lea ecx, [ebp - 0x760]
call fcn.00433dab
lea ecx, [ebp - 0x28c]
call fcn.00433e03
lea ecx, [ebp - 0x4dc]
call fcn.00433ded
mov esi, 0xbc2
jmp 0x432bb1
lea eax, [ebp - 0x34]
push 0x40d
push eax
call fcn.004376fb
pop ecx
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c0]
push eax
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4dc]
call fcn.00434ab2
xor eax, eax
lea edi, [ebp - 0x308]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ecx
mov word [ebp - 0x308], ax
lea edi, [ebp - 0x338]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x324], ecx
mov word [ebp - 0x338], ax
lea edi, [ebp - 0x2c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x2b4], ebx
mov dword [ebp - 0x2c0], 0x405278
xor eax, eax
lea edi, [ebp - 0x160]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
xor eax, eax
lea edi, [ebp - 0x154]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
lea eax, [ebp - 0x308]
mov byte [ebp - 4], 0x17
push eax
call fcn.0042cace
pop ecx
push dword [ebp - 0x8e8]
lea eax, [ebp - 0x338]
push eax
call fcn.0042bfa7
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
call fcn.0042c955
pop ecx
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0042c078
add esp, 0xc
lea eax, [ebp - 0x2c0]
push eax
call fcn.0042cdf9
pop ecx
lea eax, [ebp - 0xa8]
push eax
call fcn.00436fa8
pop ecx
push 0x406160
lea ecx, [ebp - 0x2c0]
call fcn.004223d1
mov edx, eax
test edx, edx
je 0x430f40
cmp byte [ebp - 0x8e8], 0
je 0x430efb
cmp dword [ebp - 0xc8], 0
je 0x430efb
lea eax, [ebp - 0xd8]
cmp dword [ebp - 0xc4], esi
jb 0x430f0f
mov eax, dword [ebp - 0xd8]
jmp 0x430f0f
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x430f0f
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x308]
cmp dword [ebp - 0x2f4], esi
jb 0x430f23
mov ecx, dword [ebp - 0x308]
push eax
push ecx
push edx
lea ecx, [ebp - 0x8d0]
call fcn.0041511a
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x8d0]
call fcn.0042ca06
cmp dword [ebp - 0x40], 0
jne 0x430f56
lea eax, [ebp - 0x50]
push 0x418
push eax
call fcn.004376fb
pop ecx
pop ecx
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x430f6a
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x178]
call fcn.0041407d
push 0x18
pop eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], al
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x38]
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00428e95
lea ecx, [ebp - 0x178]
call fcn.00415705
xor eax, eax
lea edi, [ebp - 0x320]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x310], ebx
mov dword [ebp - 0x30c], ecx
mov word [ebp - 0x320], ax
lea edi, [ebp - 0x3c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x3b0], ebx
mov dword [ebp - 0x3ac], ecx
mov word [ebp - 0x3c0], ax
lea edi, [ebp - 0x3a8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x398], ebx
mov dword [ebp - 0x394], ecx
mov word [ebp - 0x3a8], ax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x3c], esi
jb 0x431037
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f4
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x320]
push 0x3ec
push eax
call fcn.004376fb
pop ecx
pop ecx
lea eax, [ebp - 0x3c0]
push 0x3eb
push eax
call fcn.004376fb
pop ecx
pop ecx
lea eax, [ebp - 0x3a8]
push 0x41f
push eax
call fcn.004376fb
pop ecx
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x34]
push eax
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x28c]
call fcn.00434b38
cmp byte [ebp - 0x8e8], 0
jne 0x4310d3
push ebx
lea ecx, [ebp - 0x670]
call fcn.00427d11
mov byte [ebp - 0x8e2], al
mov edi, 0x1000
jmp 0x431236
xor eax, eax
lea edi, [ebp - 0xf0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x94], esi
jb 0x431110
mov eax, dword [ebp - 0xa8]
push ebx
push 0x406178
push eax
lea eax, [ebp - 0xf0]
push ebx
push eax
call fcn.004386be
add esp, 0x14
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], esi
jb 0x43113b
mov eax, dword [ebp - 0xf0]
push eax
call fcn.00437fdb
pop ecx
test al, al
je 0x4311be
xor eax, eax
lea edi, [ebp - 0x148]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, 0x405278
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x148], edi
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0xdc], esi
jb 0x431187
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x148]
call fcn.0041f1a5
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x670]
call fcn.00427d11
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x8e2], al
mov dword [ebp - 0x148], edi
call fcn.0041e11b
jmp 0x4311d0
push ebx
lea ecx, [ebp - 0x670]
call fcn.00427d11
mov byte [ebp - 0x8e2], al
mov eax, dword [ebp - 0xdc]
mov edi, 0x1000
cmp eax, esi
jb 0x43121d
mov ecx, dword [ebp - 0xf0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431214
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x38]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea ecx, [ebp - 0x3a8]
call fcn.00415705
lea ecx, [ebp - 0x3c0]
call fcn.00415705
mov eax, dword [ebp - 0x30c]
cmp eax, esi
jb 0x431294
mov ecx, dword [ebp - 0x320]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x38], ecx
cmp eax, edi
jb 0x43128b
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x38]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154]
xor eax, eax
mov dword [ebp - 0x310], ebx
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
mov dword [ebp - 0x8d4], ecx
test ecx, ecx
je 0x431341
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x38], eax
cmp ecx, eax
je 0x4312ef
call fcn.00415705
mov ecx, dword [ebp - 0x8d4]
push 0x18
pop eax
add ecx, eax
mov dword [ebp - 0x8d4], ecx
cmp ecx, dword [ebp - 0x38]
jne 0x4312ce
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x8d4], ecx
cdq
idiv dword [ebp - 0x18]
imul eax, eax, 0x18
mov dword [ebp - 0x38], eax
cmp eax, edi
jb 0x431326
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x38]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x8d4], ecx
test ecx, ecx
je 0x4313d5
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x38], eax
cmp ecx, eax
je 0x431383
call fcn.00415705
mov ecx, dword [ebp - 0x8d4]
push 0x18
pop eax
add ecx, eax
mov dword [ebp - 0x8d4], ecx
cmp ecx, dword [ebp - 0x38]
jne 0x431362
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x158]
sub eax, ecx
cdq
idiv dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
imul eax, eax, 0x18
mov dword [ebp - 0x8d4], eax
cmp eax, edi
jb 0x4313ba
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], 0x405278
call fcn.0041e11b
mov eax, dword [ebp - 0x324]
cmp eax, esi
jb 0x431432
mov ecx, dword [ebp - 0x338]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431429
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x328], ebx
mov word [ebp - 0x338], ax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x324], 7
cmp eax, esi
jb 0x431493
mov ecx, dword [ebp - 0x308]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x43148a
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x2f8], ebx
mov word [ebp - 0x308], ax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x2f4], 7
cmp eax, esi
jb 0x4314f4
mov ecx, dword [ebp - 0x1c0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x4314eb
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
mov dword [ebp - 4], 0x10
cmp byte [ebp - 0x8e2], al
jne 0x431b30
lea ecx, [ebp - 0x4dc]
call fcn.00435b8c
lea ecx, [ebp - 0x430]
call fcn.004278d7
xor eax, eax
lea edi, [ebp - 0x2f0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x670]
call fcn.00428d82
dec eax
lea ecx, [ebp - 0x670]
push eax
call fcn.00428d5a
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x431590
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x40b
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4315ad
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
cmp dword [ebp - 0x410], 0
jne 0x4315ea
lea eax, [ebp - 0x2f0]
cmp dword [ebp - 0x2dc], esi
jb 0x4315d6
mov eax, dword [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x34]
push 0x40a
push eax
call fcn.004376fb
add esp, 0xc
jmp 0x431625
lea ecx, [ebp - 0x420]
cmp dword [ebp - 0x40c], esi
jb 0x4315fe
mov ecx, dword [ebp - 0x420]
lea eax, [ebp - 0x2f0]
cmp dword [ebp - 0x2dc], esi
jb 0x431612
mov eax, dword [ebp - 0x2f0]
push ecx
push eax
lea eax, [ebp - 0x34]
push 0x41e
push eax
call fcn.004376fb
add esp, 0x10
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x431630
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042cb54
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434268
mov ecx, dword [0x46203c]
or edi, 0xffffffff
cmp dword [ecx], edi
je 0x4316f8
lea eax, [ebp - 0x2f0]
cmp dword [ebp - 0x2dc], esi
jb 0x431671
mov eax, dword [ebp - 0x2f0]
push eax
push 0x406220
push ecx
call fcn.004143e5
add esp, 0xc
cmp dword [ebp - 0x410], 0
je 0x4316b1
lea eax, [ebp - 0x420]
cmp dword [ebp - 0x40c], esi
jb 0x43169d
mov eax, dword [ebp - 0x420]
push eax
push 0x406270
push dword [0x46203c]
call fcn.004143e5
add esp, 0xc
push 2
lea ecx, [ebp - 0x28c]
call fcn.00434268
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x4316cf
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4316ec
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00433fbb
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00435a7c
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x43171f
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.0043526d
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
lea ecx, [ebp - 0x28c]
call fcn.0043598b
push 1
lea ecx, [ebp - 0x28c]
call fcn.004358ef
mov eax, dword [0x46203c]
mov dword [ebp - 0x18], eax
cmp dword [eax], edi
je 0x43177a
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
push 1
push 1
lea ecx, [ebp - 0x28c]
mov dword [eax], edi
call fcn.00434cb5
lea ecx, [ebp - 0x28c]
call fcn.00435c14
push edi
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x2f0]
call fcn.00415705
lea ecx, [ebp - 0x408]
call fcn.00415705
lea ecx, [ebp - 0x420]
call fcn.00415705
mov eax, dword [ebp - 0x20]
mov edi, 0x1000
cmp eax, esi
jb 0x431811
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431808
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x431845
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x94]
cmp eax, esi
jb 0x43188d
mov ecx, dword [ebp - 0xa8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431884
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x94], 7
cmp eax, esi
jb 0x4318ee
mov ecx, dword [ebp - 0xd8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x4318e5
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xc4], 7
cmp eax, esi
jb 0x43194f
mov ecx, dword [ebp - 0x108]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431946
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov word [ebp - 0x108], ax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xf4], 7
cmp eax, esi
jb 0x4319b0
mov ecx, dword [ebp - 0xc0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x4319a7
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xac], 7
cmp eax, esi
jb 0x431a0e
mov ecx, dword [ebp - 0x90]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431a05
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], 7
cmp eax, esi
jb 0x431a63
mov ecx, dword [ebp - 0x78]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431a5a
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x64], 7
cmp eax, esi
jb 0x431abb
mov ecx, dword [ebp - 0x120]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431ab2
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x110], ebx
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], 7
cmp eax, esi
jb 0x431b16
mov ecx, dword [ebp - 0x50]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x431b0d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
mov esi, 0x643
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
jmp 0x43273d
lea ecx, [ebp - 0x670]
call fcn.00428d82
mov cl, byte [ebp - 0x8e8]
mov dword [ebp - 0x38], eax
test cl, cl
je 0x431c70
test eax, eax
jle 0x431c72
lea ecx, [ebp - 0x390]
call fcn.004278d7
xor eax, eax
lea edi, [ebp - 0x190]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
mov edi, dword [ebp - 0x8d8]
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x24
push eax
push edi
lea ecx, [ebp - 0x670]
call fcn.00428d5a
mov eax, dword [ebp - 0x390]
and eax, 0xf
cmp al, 3
jne 0x431c51
mov eax, dword [ebp - 0x17c]
inc edi
mov dword [ebp - 0x8d8], edi
cmp eax, esi
jb 0x431c0b
mov ecx, dword [ebp - 0x190]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x431c02
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
mov byte [ebp - 4], 0x10
call fcn.00415705
lea ecx, [ebp - 0x380]
call fcn.00415705
mov eax, dword [ebp - 0x38]
cmp edi, eax
jl 0x431b54
mov cl, byte [ebp - 0x8e8]
jmp 0x431c7a
lea ecx, [ebp - 0x190]
call fcn.00415705
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x10
call fcn.00427c5d
mov eax, dword [ebp - 0x38]
jmp 0x431c49
test eax, eax
je 0x432ff6
mov edi, ebx
test cl, cl
je 0x431c86
cmp edi, eax
je 0x432ff6
lea ecx, [ebp - 0x4dc]
call fcn.00435b8c
cmp byte [ebp - 0x8e8], 0
jne 0x432340
lea ecx, [ebp - 0x3d8]
call fcn.004140bc
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x3c], esi
jb 0x431cb8
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x3d8]
push 0x4bd
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x760]
push eax
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x3d8]
push eax
push ebx
push dword [ebp - 0x1c]
call fcn.00434912
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x760]
push eax
call fcn.0042ef6f
add esp, 0xc
test al, al
jne 0x431dd4
mov esi, dword [0x46203c]
cmp dword [esi], 0xffffffff
je 0x431d22
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
lea ecx, [ebp - 0x760]
call fcn.00435b8c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x3d8]
call fcn.00415705
lea ecx, [ebp - 0x34]
call fcn.00415705
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x431d6d
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00415705
lea ecx, [ebp - 0xd8]
call fcn.00415705
lea ecx, [ebp - 0x108]
call fcn.00415705
lea ecx, [ebp - 0xc0]
call fcn.00415705
lea ecx, [ebp - 0x90]
call fcn.00415705
lea ecx, [ebp - 0x78]
call fcn.00415705
lea ecx, [ebp - 0x120]
call fcn.00415705
lea ecx, [ebp - 0x1a8]
call fcn.00415705
lea ecx, [ebp - 0x50]
call fcn.00415705
mov esi, 0x642
jmp 0x43273d
lea ecx, [ebp - 0x760]
call fcn.00435b8c
push 1
lea ecx, [ebp - 0x28c]
call fcn.004358ef
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435a7c
push ebx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
push 3
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
lea ecx, [ebp - 0x28c]
call fcn.0043598b
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
lea eax, [ebp - 0x34]
push 0x3f2
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x431e4b
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x431e62
mov eax, dword [ebp - 0x78]
push eax
push 0x4062b8
push dword [0x46203c]
call fcn.004143e5
add esp, 0xc
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x431e81
mov eax, dword [ebp - 0x78]
push eax
call fcn.0042b745
lea eax, [ebp - 0x78]
pop ecx
cmp dword [ebp - 0x64], esi
jb 0x431e93
mov eax, dword [ebp - 0x78]
push 1
push eax
lea ecx, [ebp - 0x670]
call fcn.004283bb
test al, al
jne 0x432207
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x431eb4
mov eax, dword [ebp - 0x78]
push eax
push 0x40630c
push dword [0x46203c]
call fcn.004143e5
add esp, 0xc
lea eax, [ebp - 0x50]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x3c], esi
jb 0x431ed9
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
lea edi, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x431ee4
mov edi, dword [ebp - 0x78]
lea ecx, [ebp - 0x28c]
call fcn.00434453
push dword [ebp - 0x18]
lea ecx, [ebp - 0x670]
push eax
push 1
push ebx
push edi
call fcn.00427cc8
lea ecx, [ebp - 0x45c]
call fcn.0042b4b4
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x3c], esi
jb 0x431f1c
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x431f2d
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x45c]
push eax
push ecx
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x670]
push eax
call fcn.0042fe2a
add esp, 0x14
lea ecx, [ebp - 0x28c]
mov edi, eax
push 0x4016ec
call fcn.00435707
test edi, edi
jns 0x4321f8
lea ecx, [ebp - 0x28c]
call fcn.00434608
test al, al
je 0x431fa1
mov esi, dword [0x46203c]
cmp dword [esi], 0xffffffff
je 0x431f88
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x448]
call fcn.00415705
jmp 0x431d36
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x431fac
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x578
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x431fc9
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x178]
call fcn.00414046
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x164], esi
jb 0x431fff
mov eax, dword [ebp - 0x178]
push eax
lea eax, [ebp - 0x34]
push 0x579
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x43201c
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042cb54
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434268
push dword [ebp - 0x454]
lea eax, [ebp - 0x34]
push 0x57a
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x43205a
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00433fbb
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434268
mov eax, dword [0x46203c]
cmp dword [eax], 0xffffffff
je 0x4320c4
push 2
lea ecx, [ebp - 0x28c]
call fcn.00434268
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x43209b
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4320b8
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00433fbb
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x4320df
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.0043526d
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00435a7c
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
lea ecx, [ebp - 0x28c]
call fcn.00435c14
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x178]
call fcn.00415705
lea ecx, [ebp - 0x448]
call fcn.00415705
lea ecx, [ebp - 0x3d8]
call fcn.00415705
lea ecx, [ebp - 0x34]
call fcn.00415705
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x432191
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00415705
lea ecx, [ebp - 0xd8]
call fcn.00415705
lea ecx, [ebp - 0x108]
call fcn.00415705
lea ecx, [ebp - 0xc0]
call fcn.00415705
lea ecx, [ebp - 0x90]
call fcn.00415705
lea ecx, [ebp - 0x78]
call fcn.00415705
lea ecx, [ebp - 0x120]
call fcn.00415705
lea ecx, [ebp - 0x1a8]
call fcn.00415705
lea ecx, [ebp - 0x50]
call fcn.00415705
mov esi, 0x643
jmp 0x43273d
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x26
call fcn.00415705
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
xor eax, eax
lea edi, [ebp - 0x298]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x290], ebx
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x670]
call fcn.004290f4
test al, al
jne 0x43232a
lea ecx, [ebp - 0x3f0]
call fcn.004140bc
lea ecx, [ebp - 0x138]
call fcn.004140bc
lea ecx, [ebp - 0x2b0]
call fcn.004140bc
lea ecx, [ebp - 0x178]
call fcn.004140bc
push 4
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x2d
call fcn.00420fbb
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0x298]
call fcn.004210c1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x298]
call fcn.004220c0
push eax
lea ecx, [ebp - 0x8d8]
call fcn.0041e45b
test al, al
je 0x433ae5
lea ecx, [ebp - 0x8d8]
call fcn.0041e4b8
mov ecx, eax
call fcn.004157b7
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0041407d
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x2e
call fcn.004157b7
push eax
lea ecx, [ebp - 0x178]
call fcn.00418f0a
push 0x40172c
lea ecx, [ebp - 0x178]
call fcn.00418f0a
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x2d
call fcn.0041426c
lea ecx, [ebp - 0x8d8]
call fcn.0041e4bb
jmp 0x43229f
lea ecx, [ebp - 0x298]
call fcn.004271ac
lea ecx, [ebp - 0x3d8]
call fcn.00415705
push 1
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], 0x10
call fcn.004358ef
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435a7c
lea eax, [ebp - 0x34]
push 0x3e8
push eax
call fcn.004376fb
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435927
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x43238b
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.0043526d
push ebx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
push 3
lea ecx, [ebp - 0x28c]
call fcn.00435927
push ebx
lea ecx, [ebp - 0x28c]
call fcn.0043598b
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
mov edi, dword [ebp - 0x8d8]
lea ecx, [ebp - 0x670]
push edi
call fcn.00427ced
push edi
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042e6e2
add esp, 0xc
mov byte [ebp - 0x8e2], bl
cmp byte [ebp - 0x8e3], 0
jne 0x4327d4
xor eax, eax
lea edi, [ebp - 0xf0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov byte [ebp - 0x13c], bl
call fcn.00428cd4
cmp byte [ebp - 0x13c], 0
mov byte [ebp - 0x8e3], al
je 0x432bc3
push 0x4016ec
lea ecx, [ebp - 0x28c]
call fcn.00435707
lea ecx, [ebp - 0x390]
mov byte [ebp - 0x8e2], bl
call fcn.004278d7
mov edi, dword [ebp - 0x8d8]
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x33
push eax
push edi
lea ecx, [ebp - 0x670]
call fcn.00428d5a
mov ecx, dword [ebp - 0x390]
cmp ecx, 7
je 0x43285f
mov eax, ecx
and eax, 0xf
cmp al, 5
je 0x43285f
test cl, 0x30
je 0x432814
cmp dword [ebp - 0x110], 0
jne 0x4327b2
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x108]
call fcn.004142a1
cmp byte [ebp - 0x8e8], 0
je 0x43276e
lea eax, [ebp - 0xd8]
cmp dword [ebp - 0xc4], esi
jb 0x432782
mov eax, dword [ebp - 0xd8]
jmp 0x432782
lea ecx, [ebp - 0x670]
call fcn.00427bf8
lea ecx, [ebp - 0x760]
call fcn.00433dab
lea ecx, [ebp - 0x28c]
call fcn.00433e03
lea ecx, [ebp - 0x4dc]
call fcn.00433ded
jmp 0x432bb1
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x432782
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0xc0]
cmp dword [ebp - 0xac], esi
jb 0x432796
mov ecx, dword [ebp - 0xc0]
push ecx
push eax
lea eax, [ebp - 0x120]
push 0x406340
push eax
call fcn.00436a7f
mov ecx, dword [ebp - 0x390]
add esp, 0x10
mov byte [ebp - 0x8e1], 1
test cl, 0x10
je 0x432814
lea ecx, [ebp - 0x390]
call fcn.00427c5d
lea ecx, [ebp - 0xf0]
call fcn.00415705
or edi, 0xffffffff
mov dword [ebp - 4], 0x10
push edi
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
cmp byte [ebp - 0x8e3], 0
je 0x43300b
lea ecx, [ebp - 0x28c]
call fcn.00434608
neg al
sbb al, al
inc al
mov byte [ebp - 0x8e4], al
jmp 0x43300b
inc edi
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x8d8], edi
call fcn.00434608
test al, al
jne 0x4327be
cmp byte [ebp - 0x8e3], al
jne 0x432849
push edi
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042e6e2
add esp, 0xc
lea ecx, [ebp - 0x368]
call fcn.00415705
lea ecx, [ebp - 0x380]
jmp 0x432d3f
test cl, 0x30
jne 0x432895
cmp byte [ebp - 0x8e1], 0
jne 0x4328ae
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x432878
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f8
push eax
call fcn.004376fb
mov al, byte [ebp - 0x8e1]
mov byte [ebp - 0x8e1], al
jmp 0x4328c8
lea eax, [ebp - 0xf0]
mov byte [ebp - 0x8e1], 1
push eax
lea ecx, [ebp - 0x108]
call fcn.004142a1
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x4328b9
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f9
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4328d6
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
or edi, 0xffffffff
lea ecx, [ebp - 0x28c]
push edi
call fcn.00434e4c
cmp dword [ebp - 0x370], 0
jbe 0x432937
lea ecx, [ebp - 0x380]
cmp dword [ebp - 0x36c], esi
jb 0x43290e
mov ecx, dword [ebp - 0x380]
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], esi
jb 0x432922
mov eax, dword [ebp - 0xf0]
push ecx
push eax
lea eax, [ebp - 0x34]
push 0x402
push eax
call fcn.004376fb
add esp, 0x10
jmp 0x43295d
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], esi
jb 0x43294b
mov eax, dword [ebp - 0xf0]
push eax
lea eax, [ebp - 0x34]
push 0x401
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x432968
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042cb54
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00434268
push ebx
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042df82
mov eax, dword [0x46203c]
add esp, 0xc
cmp dword [eax], edi
je 0x4329de
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x4329b5
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4329d2
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00433fbb
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00435a7c
cmp byte [ebp - 0x8e1], 0
je 0x432a4b
push ebx
push ebx
call fcn.0042e836
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.004342d1
push 3
lea ecx, [ebp - 0x28c]
call fcn.0043530d
push 3
lea ecx, [ebp - 0x28c]
call fcn.004351c7
lea eax, [ebp - 0x28c]
push eax
call fcn.0042ddc7
mov esi, dword [0x46203c]
pop ecx
cmp dword [esi], edi
je 0x432a44
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
jmp 0x432adb
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x432a66
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.0043526d
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00435927
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.004342d1
push ebx
push 2
lea ecx, [ebp - 0x28c]
call fcn.00435927
mov esi, dword [0x46203c]
cmp dword [esi], edi
je 0x432ab2
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push 1
lea ecx, [ebp - 0x28c]
mov dword [esi], edi
call fcn.00434cb5
lea ecx, [ebp - 0x28c]
call fcn.00435c14
push edi
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x390]
call fcn.00427c5d
lea ecx, [ebp - 0xf0]
call fcn.00415705
lea ecx, [ebp - 0x34]
call fcn.00415705
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x432b23
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00415705
lea ecx, [ebp - 0xd8]
call fcn.00415705
lea ecx, [ebp - 0x108]
call fcn.00415705
lea ecx, [ebp - 0xc0]
call fcn.00415705
lea ecx, [ebp - 0x90]
call fcn.00415705
lea ecx, [ebp - 0x78]
call fcn.00415705
lea ecx, [ebp - 0x120]
call fcn.00415705
lea ecx, [ebp - 0x1a8]
call fcn.00415705
lea ecx, [ebp - 0x50]
call fcn.00415705
lea ecx, [ebp - 0x670]
call fcn.00427bf8
lea ecx, [ebp - 0x760]
call fcn.00433dab
lea ecx, [ebp - 0x28c]
call fcn.00433e03
lea ecx, [ebp - 0x4dc]
call fcn.00433ded
mov esi, 0x643
lea ecx, [ebp - 0x8d0]
call fcn.0042b4f1
mov eax, esi
jmp 0x433add
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x140]
cmp eax, ecx
jbe 0x432c25
test ecx, ecx
je 0x432c25
test eax, eax
je 0x432c25
cmp byte [ebp - 0x8e2], 0
jne 0x432c1e
lea eax, [ebp - 0x34]
push 0x417
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x432bff
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00435707
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov byte [ebp - 0x8e2], 1
xor edx, edx
div ecx
push edx
jmp 0x432c26
push eax
push ecx
lea ecx, [ebp - 0x28c]
call fcn.0043460f
cmp byte [ebp - 0x8d9], 0
jne 0x432d44
lea ecx, [ebp - 0x28c]
call fcn.00434608
test al, al
je 0x432d44
lea ecx, [ebp - 0x2b0]
call fcn.004140bc
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 0x34
push 0x406
push eax
call fcn.004376fb
pop ecx
pop ecx
lea ecx, [ebp - 0x138]
call fcn.004140bc
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x3c], esi
jb 0x432c8e
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x138]
push 0x3f4
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x29c], esi
jb 0x432cbd
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x18], eax
lea edi, [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jb 0x432cd1
mov edi, dword [ebp - 0x138]
lea ecx, [ebp - 0x28c]
call fcn.00434453
push 0x34
push edi
push dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x432d22
mov ecx, dword [0x46203c]
push 0x40636c
call fcn.00415670
push 0xffffffffffffffff
lea ecx, [ebp - 0x28c]
call fcn.004351c7
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.004342d1
mov byte [ebp - 0x8d9], 1
jmp 0x432d2e
push ebx
lea ecx, [ebp - 0x28c]
call fcn.004358b4
lea ecx, [ebp - 0x138]
call fcn.00415705
lea ecx, [ebp - 0x2b0]
call fcn.00415705
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0xdc]
cmp eax, esi
jb 0x4323ff
mov ecx, dword [ebp - 0xf0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x432d92
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
jmp 0x4323ff
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0x8e4], 1
call fcn.00435b8c
or edi, 0xffffffff
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x433026
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.0043526d
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.004342d1
lea ecx, [ebp - 0x28c]
call fcn.00434608
cmp byte [ebp - 0x8e1], 0
je 0x433350
test al, al
lea eax, [ebp - 0x34]
je 0x433069
push 0x408
jmp 0x43306e
push 0x409
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x433081
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.0042cb54
cmp dword [ebp - 0xf8], 0
pop ecx
pop ecx
je 0x4330ef
lea eax, [ebp - 0x108]
cmp dword [ebp - 0xf4], esi
jb 0x4330b9
mov eax, dword [ebp - 0x108]
push eax
lea eax, [ebp - 0x34]
push 0x411
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4330d6
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00433fbb
push 2
lea ecx, [ebp - 0x28c]
call fcn.00434268
push 1
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042df82
add esp, 0xc
lea ecx, [ebp - 0x28c]
call fcn.00434608
test al, al
jne 0x4331a2
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x10c], esi
jb 0x43312e
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x433139
mov eax, dword [ebp - 0x78]
push ecx
push eax
call fcn.0042e836
pop ecx
pop ecx
lea ecx, [ebp - 0x138]
call fcn.004140bc
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x64], esi
jb 0x43315c
mov eax, dword [ebp - 0x78]
push ebx
push 0x406178
push eax
lea eax, [ebp - 0x138]
push ebx
push eax
call fcn.004386be
add esp, 0x14
lea eax, [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jb 0x433187
mov eax, dword [ebp - 0x138]
push eax
lea ecx, [ebp - 0x670]
call fcn.00429399
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x10
call fcn.00415705
push 3
lea ecx, [ebp - 0x28c]
call fcn.0043530d
push 3
lea ecx, [ebp - 0x28c]
call fcn.004351c7
lea eax, [ebp - 0x28c]
push eax
call fcn.0042ddc7
pop ecx
mov eax, dword [0x46203c]
mov dword [ebp - 0x18], eax
cmp dword [eax], edi
je 0x4331e0
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
mov dword [eax], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x20]
cmp eax, esi
jb 0x43322d
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x433224
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x20], edi
mov word [ebp - 0x34], ax
mov dword [ebp - 0x60], 0x405278
call fcn.0041e11b
cmp dword [ebp - 0x8e0], 0
je 0x433260
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00415705
lea ecx, [ebp - 0xd8]
call fcn.00415705
lea ecx, [ebp - 0x108]
call fcn.00415705
mov eax, dword [ebp - 0xac]
cmp eax, esi
jb 0x4332cc
mov ecx, dword [ebp - 0xc0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x4332c3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0041568f
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.0043a98a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xac], edi
mov word [ebp - 0xc0], ax
call fcn.00415705
lea ecx, [ebp - 0x78]
call fcn.00415705
lea ecx, [ebp - 0x120]
call fcn.00415705
lea ecx, [ebp - 0x1a8]
call fcn.00415705
lea ecx, [ebp - 0x50]
call fcn.00415705
lea ecx, [ebp - 0x670]
call fcn.00427bf8
lea ecx, [ebp - 0x760]
call fcn.00433dab
lea ecx, [ebp - 0x28c]
call fcn.00433e03
lea ecx, [ebp - 0x4dc]
call fcn.00433ded
lea ecx, [ebp - 0x8d0]
call fcn.0042b4f1
xor eax, eax
jmp 0x433add
test al, al
je 0x4333db
lea eax, [ebp - 0x34]
push 0x40e
push eax
call fcn.004376fb
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x433373
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00434eaa
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.0042cb54
push ebx
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0042df82
add esp, 0x14
lea ecx, [ebp - 0x28c]
push ebx
call fcn.00435a7c
push 1
push 1
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
lea ecx, [ebp - 0x28c]
call fcn.00435c14
push edi
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00434cb5
jmp 0x4331c9
cmp byte [ebp - 0x8e4], 0
je 0x4331c9
cmp dword [ebp - 0x7a8], 0
je 0x4331c9
lea ecx, [ebp - 0x2b0]
call fcn.004140bc
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x8d0]
call fcn.004145a8
lea eax, [ebp - 0x2b0]
cmp dword [ebp - 0x29c], esi
jb 0x43342a
mov eax, dword [ebp - 0x2b0]
push 0x401790
push eax
lea ecx, [ebp - 0x8d0]
call fcn.004142fd
test al, al
je 0x43360d
lea ecx, [ebp - 0x190]
call fcn.004140bc
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00414491
test eax, eax
je 0x4335fe
lea ecx, [ebp - 0x350]
call fcn.004140bc
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 0x3c
push eax
call fcn.0042ca2b
pop ecx
push 0x404ab4
lea ecx, [ebp - 0x190]
call fcn.00429603
test al, al
jne 0x4335f3
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0x190]
call fcn.00430495
test al, al
jne 0x4335f3
lea ecx, [ebp - 0x2d8]
call fcn.004140bc
lea ecx, [ebp - 0x3f0]
call fcn.004140bc
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x33c], esi
jb 0x4334e8
mov ecx, dword [ebp - 0x350]
lea eax, [ebp - 0x190]
cmp dword [ebp - 0x17c], esi
jb 0x4334fc
mov eax, dword [ebp - 0x190]
push ecx
push eax
lea eax, [ebp - 0x2d8]
push 0x5a9
push eax
call fcn.004376fb
add esp, 0x10
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x43351d
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x3f0]
push 0x3f4
push eax
call fcn.004376fb
add esp, 0xc
lea eax, [ebp - 0x3f0]
cmp dword [ebp - 0x3dc], esi
jb 0x433546
mov eax, dword [ebp - 0x3f0]
lea ecx, [ebp - 0x2d8]
cmp dword [ebp - 0x2c4], esi
jb 0x43355a
mov ecx, dword [ebp - 0x2d8]
push 0x30
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x350]
cmp dword [ebp - 0x33c], esi
jb 0x433579
mov ecx, dword [ebp - 0x350]
lea eax, [ebp - 0x190]
cmp dword [ebp - 0x17c], esi
jb 0x43358d
mov eax, dword [ebp - 0x190]
push ecx
push eax
push 0x4063a8
push dword [0x46203c]
call fcn.004143e5
mov esi, dword [0x46203c]
add esp, 0x10
cmp dword [esi], edi
je 0x4335b4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x3f0]
call fcn.00415705
lea ecx, [ebp - 0x2d8]
call fcn.00415705
lea ecx, [ebp - 0x350]
call fcn.00415705
lea ecx, [ebp - 0x190]
call fcn.00415705
lea ecx, [ebp - 0x2b0]
jmp 0x432af2
lea ecx, [ebp - 0x350]
call fcn.00415705
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x3a
call fcn.00415705
lea ecx, [ebp - 0x8d0]
call fcn.004143a1
test al, al
je 0x433717
push ebx
push ebx
lea ecx, [ebp - 0x8d0]
call fcn.0042b727
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x433638
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x8d0]
push eax
call fcn.0042f8d1
add esp, 0xc
test eax, eax
jns 0x433689
push eax
lfence
push 0x406410
push dword [0x46203c]
call fcn.004143e5
mov esi, dword [0x46203c]
add esp, 0xc
cmp dword [esi], edi
je 0x43367c
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4335e8
lea ecx, [ebp - 0x138]
call fcn.004140bc
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x3f
push eax
call fcn.004372ca
lea eax, [ebp - 0x138]
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x124], esi
jb 0x4336bf
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x28c]
call fcn.00434453
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8d0]
call fcn.00415305
cmp eax, 1
je 0x433708
cmp eax, 4
je 0x433708
mov esi, dword [0x46203c]
cmp dword [esi], edi
je 0x4336f5
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x138]
jmp 0x4335e3
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x3a
call fcn.00415705
mov ecx, dword [0x46203c]
push 0x406478
call fcn.00415670
push ebx
lea ecx, [ebp - 0x28c]
call fcn.004358ef
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xac], esi
jb 0x433747
mov eax, dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x8d0]
call fcn.0041460b
lea ecx, [ebp - 0x2b0]
call fcn.00415705
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], 0x10
call fcn.00435b91
jmp 0x4331c9
call fcn.0043a9c9
ret 0x10
lea ecx, [ebp - 0x178]
call fcn.004157b7
push eax
push 0x57d
lea eax, [ebp - 0x914]
push 2
push eax
call fcn.004140d9
add esp, 0x10
lea eax, [ebp - 0x914]
push 0x45ddbc
push eax
call fcn.0043b678
int3