Function at 0x433030
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e6c58
mov eax, dword fs:[0]
push eax
sub esp, 0x468
mov eax, dword [0x52610c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x470], edi
mov dword [ebp - 0x46c], edi
lea ecx, [edi + 0x10]
mov dword [ebp - 0x474], edi
call fcn.00433eb0
lea ecx, [edi + 0xe8]
mov dword [ebp - 4], 0
call fcn.00417810
lea esi, [edi + 0xf8]
mov dword [ebp - 0x46c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0044f260
mov dword [esi], eax
lea eax, [esi + 8]
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push eax
call esi
lea eax, [edi + 0x118]
push eax
call esi
lea eax, [edi + 0x130]
mov dword [eax], 0
mov dword [ebp - 0x46c], eax
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
push 0
push 1
push 0
call esi
push 0
push 0
push 1
push 0
mov dword [edi + 0xc4], eax
call esi
mov dword [edi + 0xc8], eax
xorps xmm0, xmm0
push 0x14
movq qword [edi], xmm0
push 0x40
mov dword [edi + 8], 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [edi + 0xc], eax
test eax, eax
je 0x433158
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
je 0x433158
push 0
push 0
push 1
push dword [edi + 0xc]
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
je 0x433158
mov eax, dword [edi + 0xc]
mov dword [edi], 0xc
mov dword [edi + 4], eax
mov dword [edi + 8], 0
mov edx, 0x5b
mov dword [ebp - 0x320], 0x39005b
mov dword [ebp - 0x31c], 0x350032
mov dword [ebp - 0x318], 0x280007
mov dword [ebp - 0x314], 0x2e002f
lea edi, [edx - 0x29]
mov dword [ebp - 0x310], 0x70039
mov dword [ebp - 0x30c], 0x3e000c
mov dword [ebp - 0x308], 0x2e0019
mov dword [ebp - 0x304], 0x3d003d
mov dword [ebp - 0x300], 0x320017
mov dword [ebp - 0x2fc], 0x40039
mov dword [ebp - 0x2f8], 0x630023
mov dword [ebp - 0x2f4], 0x75006d
mov dword [ebp - 0x2f0], 0x37003f
mov dword [ebp - 0x2ec], 0x37
mov byte [ebp - 4], 4
xor ecx, ecx
movzx eax, word [ebp + ecx*2 - 0x31e]
xor ax, dx
mov word [ebp + ecx*2 - 0x2e8], ax
movzx eax, word [ebp + ecx*2 - 0x31c]
xor ax, word [ebp - 0x320]
mov word [ebp + ecx*2 - 0x2e6], ax
add ecx, 2
cmp ecx, 0x1a
jae 0x43322d
mov dx, word [ebp - 0x320]
jmp 0x4331f2
xor eax, eax
mov dword [ebp - 0x454], 7
mov word [ebp - 0x2b4], ax
mov dword [ebp - 0x458], eax
mov word [ebp - 0x468], ax
cmp word [ebp - 0x2e8], ax
jne 0x43325a
xor ecx, ecx
jmp 0x433272
lea ecx, [ebp - 0x2e8]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433263
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x468]
call fcn.00403e20
push 0x36
lea eax, [ebp - 0x31e]
push 0
push eax
call fcn.004b98e0
mov edx, 0x57
mov dword [ebp - 0x390], 0x350057
add esp, 0xc
mov dword [ebp - 0x38c], 0x39003e
mov dword [ebp - 0x388], 0x24000b
mov dword [ebp - 0x384], 0x220023
mov dword [ebp - 0x380], 0xb0035
lea esi, [edx - 0x42]
mov dword [ebp - 0x37c], 0x320000
mov dword [ebp - 0x378], 0x220015
mov dword [ebp - 0x374], 0x310031
mov dword [ebp - 0x370], 0x3e001b
mov dword [ebp - 0x36c], 0x80035
mov dword [ebp - 0x368], 0x61002f
mov dword [ebp - 0x364], 0x790063
mov dword [ebp - 0x360], 0x3b0033
mov dword [ebp - 0x35c], 0x3b
mov byte [ebp - 4], 7
xor ecx, ecx
movzx eax, word [ebp + ecx*2 - 0x38e]
xor ax, dx
mov word [ebp + ecx*2 - 0x358], ax
movzx eax, word [ebp + ecx*2 - 0x38c]
xor ax, word [ebp - 0x390]
mov word [ebp + ecx*2 - 0x356], ax
add ecx, 2
cmp ecx, 0x1a
jae 0x43336d
mov dx, word [ebp - 0x390]
jmp 0x433332
xor eax, eax
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x324], ax
mov dword [ebp - 0x440], eax
mov word [ebp - 0x450], ax
cmp word [ebp - 0x358], ax
jne 0x43339a
xor ecx, ecx
jmp 0x4333b2
lea ecx, [ebp - 0x358]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4333a3
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x450]
call fcn.00403e20
push 0x36
lea eax, [ebp - 0x38e]
push 0
push eax
call fcn.004b98e0
xor eax, eax
mov dword [ebp - 0x1bc], 0xa0068
add esp, 0xc
mov dword [ebp - 0x1b8], 0x60001
mov edx, 0x68
mov dword [ebp - 0x1b4], 0x3f0034
mov dword [ebp - 0x1b0], 0x2a000d
mov dword [ebp - 0x1ac], 0xe001d
mov dword [ebp - 0x1a8], 0x24000e
mov dword [ebp - 0x1a4], 0xa0001
mov dword [ebp - 0x1a0], 0x100037
mov dword [ebp - 0x19c], 0x5e0050
mov dword [ebp - 0x198], 0xc0046
mov dword [ebp - 0x194], 0x40004
mov word [ebp - 0x190], ax
mov byte [ebp - 4], 0xa
xor ecx, ecx
nop word [eax + eax]
movzx eax, word [ebp + ecx*2 - 0x1ba]
xor ax, dx
mov word [ebp + ecx*2 - 0x18e], ax
movzx eax, word [ebp + ecx*2 - 0x1b8]
xor ax, word [ebp - 0x1bc]
mov word [ebp + ecx*2 - 0x18c], ax
movzx eax, word [ebp + ecx*2 - 0x1b6]
xor ax, word [ebp - 0x1bc]
mov word [ebp + ecx*2 - 0x18a], ax
add ecx, 3
cmp ecx, 0x15
jae 0x4334b2
mov dx, word [ebp - 0x1bc]
jmp 0x433460
xor eax, eax
mov dword [ebp - 0x424], 7
mov word [ebp - 0x164], ax
mov dword [ebp - 0x428], eax
mov word [ebp - 0x438], ax
cmp word [ebp - 0x18e], ax
jne 0x4334df
xor ecx, ecx
jmp 0x4334ff
lea ecx, [ebp - 0x18e]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4334f0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x18e]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403e20
push 0x2c
lea eax, [ebp - 0x1ba]
push 0
push eax
call fcn.004b98e0
xor eax, eax
mov dword [ebp - 0x218], 0xc006e
add esp, 0xc
mov dword [ebp - 0x214], 7
mov edx, 0x6e
mov dword [ebp - 0x210], 0x390032
mov dword [ebp - 0x20c], 0x2c000b
mov dword [ebp - 0x208], 0x8001b
mov dword [ebp - 0x204], 0x220008
mov dword [ebp - 0x200], 0xc0007
mov dword [ebp - 0x1fc], 0x160031
mov dword [ebp - 0x1f8], 0x5a0058
mov dword [ebp - 0x1f4], 0xa0040
mov dword [ebp - 0x1f0], 0x20002
mov word [ebp - 0x1ec], ax
mov byte [ebp - 4], 0xd
xor ecx, ecx
nop word [eax + eax]
movzx eax, word [ebp + ecx*2 - 0x216]
xor ax, dx
mov word [ebp + ecx*2 - 0x1ea], ax
movzx eax, word [ebp + ecx*2 - 0x214]
xor ax, word [ebp - 0x218]
mov word [ebp + ecx*2 - 0x1e8], ax
movzx eax, word [ebp + ecx*2 - 0x212]
xor ax, word [ebp - 0x218]
mov word [ebp + ecx*2 - 0x1e6], ax
add ecx, 3
cmp ecx, 0x15
jae 0x433602
mov dx, word [ebp - 0x218]
jmp 0x4335b0
xor eax, eax
mov dword [ebp - 0x40c], 7
mov word [ebp - 0x1c0], ax
mov dword [ebp - 0x410], eax
mov word [ebp - 0x420], ax
cmp word [ebp - 0x1ea], ax
jne 0x43362f
xor ecx, ecx
jmp 0x43364f
lea ecx, [ebp - 0x1ea]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433640
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x1ea]
push eax
lea ecx, [ebp - 0x420]
call fcn.00403e20
push 0x2c
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.004b98e0
xor eax, eax
mov dword [ebp - 0x264], 0x770015
add esp, 0xc
mov dword [ebp - 0x260], 0x7b007c
mov dword [ebp - 0x25c], 0x560049
mov dword [ebp - 0x258], 0x590050
mov dword [ebp - 0x254], 0x77007c
mov dword [ebp - 0x250], 0x6d004a
mov dword [ebp - 0x24c], 0x23002d
mov dword [ebp - 0x248], 0x71003b
mov dword [ebp - 0x244], 0x790079
mov word [ebp - 0x240], ax
mov byte [ebp - 4], 0x10
xor ecx, ecx
nop
mov ax, word [ebp + ecx*2 - 0x262]
xor ax, si
mov word [ebp + ecx*2 - 0x23e], ax
inc ecx
cmp ecx, 0x11
jae 0x433702
mov si, word [ebp - 0x264]
jmp 0x4336e0
xor eax, eax
mov dword [ebp - 0x3f4], 7
mov word [ebp - 0x21c], ax
mov dword [ebp - 0x3f8], eax
mov word [ebp - 0x408], ax
cmp word [ebp - 0x23e], ax
jne 0x43372f
xor ecx, ecx
jmp 0x43374f
lea ecx, [ebp - 0x23e]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433740
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x23e]
push eax
lea ecx, [ebp - 0x408]
call fcn.00403e20
xorps xmm0, xmm0
mov dword [ebp - 0x242], 0
xor eax, eax
mov dword [ebp - 0x2b0], 0x500032
movups xmmword [ebp - 0x262], xmm0
mov dword [ebp - 0x2ac], 0x5c005b
movups xmmword [ebp - 0x252], xmm0
mov dword [ebp - 0x2a8], 0x71006e
mov dword [ebp - 0x2a4], 0x7e0077
mov dword [ebp - 0x2a0], 0x50005b
mov dword [ebp - 0x29c], 0x4a006d
mov dword [ebp - 0x298], 0x60004
mov dword [ebp - 0x294], 0x56001c
mov dword [ebp - 0x290], 0x5e005e
mov word [ebp - 0x28c], ax
mov byte [ebp - 4], 0x13
xor ecx, ecx
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x2ae]
xor ax, di
mov word [ebp + ecx*2 - 0x28a], ax
inc ecx
cmp ecx, 0x11
jae 0x433812
mov di, word [ebp - 0x2b0]
jmp 0x4337f0
xor eax, eax
mov dword [ebp - 0x3dc], 7
mov word [ebp - 0x268], ax
mov dword [ebp - 0x3e0], eax
mov word [ebp - 0x3f0], ax
cmp word [ebp - 0x28a], ax
jne 0x43383f
xor ecx, ecx
jmp 0x43385f
lea ecx, [ebp - 0x28a]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433850
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x28a]
push eax
lea ecx, [ebp - 0x3f0]
call fcn.00403e20
xorps xmm0, xmm0
mov dword [ebp - 0x28e], 0
movups xmmword [ebp - 0x2ae], xmm0
mov edx, 0x43
mov dword [ebp - 0x90], 0x140043
movups xmmword [ebp - 0x29e], xmm0
mov dword [ebp - 0x8c], 0x10026
mov dword [ebp - 0x88], 0x250036
mov dword [ebp - 0x84], 0xb0025
mov dword [ebp - 0x80], 0x30002c
mov dword [ebp - 0x7c], 0x1c0037
mov dword [ebp - 0x78], 0x7b003b
mov dword [ebp - 0x74], 0x6d0075
mov dword [ebp - 0x70], 0x3b0026
mov dword [ebp - 0x6c], 0x26
mov byte [ebp - 4], 0x16
xor ecx, ecx
nop word [eax + eax]
movzx eax, word [ebp + ecx*2 - 0x8e]
xor ax, dx
mov word [ebp + ecx*2 - 0x68], ax
movzx eax, word [ebp + ecx*2 - 0x8c]
xor ax, word [ebp - 0x90]
mov word [ebp + ecx*2 - 0x66], ax
movzx eax, word [ebp + ecx*2 - 0x8a]
xor ax, word [ebp - 0x90]
mov word [ebp + ecx*2 - 0x64], ax
movzx eax, word [ebp + ecx*2 - 0x88]
xor ax, word [ebp - 0x90]
mov word [ebp + ecx*2 - 0x62], ax
movzx eax, word [ebp + ecx*2 - 0x86]
xor ax, word [ebp - 0x90]
mov word [ebp + ecx*2 - 0x60], ax
movzx eax, word [ebp + ecx*2 - 0x84]
xor ax, word [ebp - 0x90]
mov word [ebp + ecx*2 - 0x5e], ax
add ecx, 6
cmp ecx, 0x12
jae 0x433978
mov dx, word [ebp - 0x90]
jmp 0x4338f0
xor eax, eax
mov dword [ebp - 0x134], 7
mov word [ebp - 0x44], ax
mov dword [ebp - 0x138], eax
mov word [ebp - 0x148], ax
cmp word [ebp - 0x68], ax
jne 0x43399f
xor ecx, ecx
jmp 0x4339b4
lea ecx, [ebp - 0x68]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4339a5
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x148]
call fcn.00403e20
mov dword [ebp - 0x28], 0x130071
mov edi, 0x1f
mov dword [ebp - 0x24], 0x1f0018
mov dword [ebp - 0x20], 0x2d
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x26]
xor eax, ecx
mov word [ebp - 0x1c], ax
mov eax, dword [ebp - 0x24]
xor eax, ecx
mov word [ebp - 0x1a], ax
mov eax, dword [ebp - 0x22]
xor eax, ecx
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x20]
xor eax, ecx
lea ecx, [ebp - 0x3d8]
mov word [ebp - 0x16], ax
xor eax, eax
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x148]
push eax
call fcn.00413190
add esp, 4
xorps xmm0, xmm0
mov word [ebp - 0x1e], 0
movq qword [ebp - 0x26], xmm0
mov eax, dword [ebp - 0x134]
cmp eax, 8
jb 0x433a53
inc eax
lea ecx, [ebp - 0x148]
push eax
push dword [ebp - 0x148]
call fcn.00403f90
xor eax, eax
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], 0
mov word [ebp - 0x148], ax
xorps xmm0, xmm0
mov dword [ebp - 0x6e], eax
movups xmmword [ebp - 0x8e], xmm0
mov word [ebp - 0x6a], ax
lea esi, [eax + 0x6b]
movups xmmword [ebp - 0x7e], xmm0
mov dword [ebp - 0xe0], 0x48001f
mov dword [ebp - 0xdc], 0x5d007a
mov dword [ebp - 0xd8], 0x79006a
mov dword [ebp - 0xd4], 0x570079
mov dword [ebp - 0xd0], 0x6c0070
mov dword [ebp - 0xcc], 0x40006b
mov dword [ebp - 0xc8], 0x290067
mov dword [ebp - 0xc4], 0x31002b
mov dword [ebp - 0xc0], 0x67007a
mov dword [ebp - 0xbc], 0x7a
mov byte [ebp - 4], 0x1d
xor ecx, ecx
movzx eax, word [ebp + ecx*2 - 0xde]
xor ax, di
mov word [ebp + ecx*2 - 0xb8], ax
movzx eax, word [ebp + ecx*2 - 0xdc]
xor ax, word [ebp - 0xe0]
mov word [ebp + ecx*2 - 0xb6], ax
movzx eax, word [ebp + ecx*2 - 0xda]
xor ax, word [ebp - 0xe0]
mov word [ebp + ecx*2 - 0xb4], ax
movzx eax, word [ebp + ecx*2 - 0xd8]
xor ax, word [ebp - 0xe0]
mov word [ebp + ecx*2 - 0xb2], ax
movzx eax, word [ebp + ecx*2 - 0xd6]
xor ax, word [ebp - 0xe0]
mov word [ebp + ecx*2 - 0xb0], ax
movzx eax, word [ebp + ecx*2 - 0xd4]
xor ax, word [ebp - 0xe0]
mov word [ebp + ecx*2 - 0xae], ax
add ecx, 6
cmp ecx, 0x12
jae 0x433b8c
mov di, word [ebp - 0xe0]
jmp 0x433af2
xor eax, eax
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x94], ax
mov dword [ebp - 0x150], eax
mov word [ebp - 0x160], ax
cmp word [ebp - 0xb8], ax
jne 0x433bb9
xor ecx, ecx
jmp 0x433bd1
lea ecx, [ebp - 0xb8]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433bc2
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x160]
call fcn.00403e20
mov dword [ebp - 0x40], 0x200042
mov dword [ebp - 0x3c], 0x2c002b
mov dword [ebp - 0x38], 0x1e
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3e]
xor eax, ecx
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x3c]
xor eax, ecx
mov word [ebp - 0x32], ax
mov eax, dword [ebp - 0x3a]
xor eax, ecx
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x38]
xor eax, ecx
lea ecx, [ebp - 0x3c0]
mov word [ebp - 0x2e], ax
xor eax, eax
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x160]
push eax
call fcn.00413190
add esp, 4
xorps xmm0, xmm0
mov word [ebp - 0x36], 0
movq qword [ebp - 0x3e], xmm0
mov eax, dword [ebp - 0x14c]
cmp eax, 8
jb 0x433c6e
inc eax
lea ecx, [ebp - 0x160]
push eax
push dword [ebp - 0x160]
call fcn.00403f90
xor eax, eax
mov dword [ebp - 0x14c], 7
mov dword [ebp - 0x150], 0
mov word [ebp - 0x160], ax
xorps xmm0, xmm0
mov dword [ebp - 0xbe], eax
movups xmmword [ebp - 0xde], xmm0
mov word [ebp - 0xba], ax
movups xmmword [ebp - 0xce], xmm0
mov dword [ebp - 0x130], 0x3c006b
mov dword [ebp - 0x12c], 0x29000e
mov dword [ebp - 0x128], 0xd001e
mov dword [ebp - 0x124], 0x28000d
mov dword [ebp - 0x120], 0x190004
mov dword [ebp - 0x11c], 0x34000e
mov dword [ebp - 0x118], 0x5d0013
mov dword [ebp - 0x114], 0x45005f
mov dword [ebp - 0x110], 0x13000e
mov dword [ebp - 0x10c], 0xe
mov byte [ebp - 4], 0x24
xor ecx, ecx
movzx eax, word [ebp + ecx*2 - 0x12e]
xor ax, si
mov word [ebp + ecx*2 - 0x108], ax
movzx eax, word [ebp + ecx*2 - 0x12c]
xor ax, word [ebp - 0x130]
mov word [ebp + ecx*2 - 0x106], ax
movzx eax, word [ebp + ecx*2 - 0x12a]
xor ax, word [ebp - 0x130]
mov word [ebp + ecx*2 - 0x104], ax
movzx eax, word [ebp + ecx*2 - 0x128]
xor ax, word [ebp - 0x130]
mov word [ebp + ecx*2 - 0x102], ax
movzx eax, word [ebp + ecx*2 - 0x126]
xor ax, word [ebp - 0x130]
mov word [ebp + ecx*2 - 0x100], ax
movzx eax, word [ebp + ecx*2 - 0x124]
xor ax, word [ebp - 0x130]
mov word [ebp + ecx*2 - 0xfe], ax
add ecx, 6
cmp ecx, 0x12
jae 0x433dad
mov si, word [ebp - 0x130]
jmp 0x433d13
xor eax, eax
mov dword [ebp - 0x394], 7
mov word [ebp - 0xe4], ax
mov dword [ebp - 0x398], eax
mov word [ebp - 0x3a8], ax
cmp word [ebp - 0x108], ax
jne 0x433dda
xor ecx, ecx
jmp 0x433df2
lea ecx, [ebp - 0x108]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433de3
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.00403e20
xorps xmm0, xmm0
mov dword [ebp - 0x10e], 0
movups xmmword [ebp - 0x12e], xmm0
mov word [ebp - 0x10a], 0
movups xmmword [ebp - 0x11e], xmm0
mov byte [ebp - 4], 0x25
mov esi, dword [ebp - 0x46c]
push dword [ebp - 0x474]
push ecx
mov edx, dword [esi + 4]
mov ecx, dword [esi]
call fcn.00422570
mov eax, dword [esi]
add esp, 8
mov dword [esi + 4], eax
mov ecx, esi
mov byte [ebp - 0x46c], 0
lea eax, [ebp - 0x390]
push dword [ebp - 0x46c]
push eax
lea eax, [ebp - 0x468]
push eax
call fcn.0043ddc0
push fcn.00404060
push 9
push 0x18
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 3
push eax
call fcn.004a0a32
mov eax, dword [ebp - 0x470]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a04d5
mov esp, ebp
pop ebp
ret