Function at 0x430000
Capabilities:
Check if file exists
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55675d
mov eax, dword fs:[0]
push eax
sub esp, 0x274
mov eax, dword [0x5ad6f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x250], 0
xor bh, bh
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
call fcn.00406530
mov ecx, eax
test ecx, ecx
je 0x430db3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x280]
call fcn.00412820
test al, al
jne 0x4300c7
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4300a5
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x280]
call fcn.0040adc0
push 0x5645e0
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00407b80
push str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 3
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 3
mov bl, al
cmp edx, 8
jb 0x430156
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43014c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dbd
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x4301b7
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4301ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dc2
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edi, dword [ebp - 0x280]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test bl, bl
je 0x4302e9
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x4302e9
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x4302e9
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x12
push str.imageres.dll__109
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 5
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x43024f
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x278]
call fcn.00407b80
push 0x5645e0
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 6
call fcn.00407b80
push str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 7
call fcn.00407b80
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
lea ecx, [ebp - 0x278]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4302e3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0x5645e0
lea ecx, [ebp - 0x248]
call fcn.00407b80
push str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 9
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 9
mov bl, al
cmp edx, 8
jb 0x430374
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43036a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dc7
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x4303d5
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4303cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dcc
push edx
push ecx
call fcn.004d65a7
add esp, 8
test bl, bl
je 0x4304f5
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x4304f5
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x4304f5
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x12
push str.imageres.dll__123
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xb
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x430461
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x230]
call fcn.00407b80
push 0x5645e0
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0xc
call fcn.00407b80
push str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xd
call fcn.00407b80
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x278]
call fcn.004087e0
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4304f5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5645e0
lea ecx, [ebp - 0x248]
call fcn.00407b80
push 0x567788
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 0xf
mov bl, al
cmp edx, 8
jb 0x430580
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x430576
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dd1
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x4305e1
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4305d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dd6
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test bl, bl
je 0x43070d
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x43070d
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x43070d
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x11
push str.imageres.dll__54
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x11
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x430673
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x230]
call fcn.00407b80
push 0x5645e0
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x12
call fcn.00407b80
push 0x567788
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x13
call fcn.00407b80
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x278]
call fcn.004087e0
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x430707
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0x5677fc
lea ecx, [ebp - 0x248]
call fcn.00407b80
push str.645FF040_5081_101B_9F08_00AA002F954E
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x15
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 0x15
mov bl, al
cmp edx, 8
jb 0x430798
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43078e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430ddb
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x4307f9
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4307ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430de0
push edx
push ecx
call fcn.004d65a7
add esp, 8
test bl, bl
je 0x430919
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x430919
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x430919
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x11
push str.imageres.dll__55
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x17
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x430885
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x230]
call fcn.00407b80
push 0x5677fc
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x18
call fcn.00407b80
push 0x567788
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x19
call fcn.00407b80
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x278]
call fcn.004087e0
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x430919
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.full
lea ecx, [ebp - 0x248]
call fcn.00407b80
push 0x567788
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1b
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 0x1b
mov bl, al
cmp edx, 8
jb 0x4309a4
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43099a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430de5
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x430a05
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4309fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430dea
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test bl, bl
je 0x430b31
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x430b31
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x430b31
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x11
push str.imageres.dll__54
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x1d
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x430a97
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x230]
call fcn.00407b80
push str.full
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x1e
call fcn.00407b80
push 0x567788
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x1f
call fcn.00407b80
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x278]
call fcn.004087e0
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x430b2b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0x5645e0
lea ecx, [ebp - 0x248]
call fcn.00407b80
push str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x21
call fcn.00407b80
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0042fe80
mov edx, dword [ebp - 0x21c]
add esp, 0xc
mov byte [ebp - 4], 0x21
mov bl, al
cmp edx, 8
jb 0x430bbc
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x430bb2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430def
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x430c1d
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x430c13
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430df4
push edx
push ecx
call fcn.004d65a7
add esp, 8
test bl, bl
je 0x430d3d
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call esi
test eax, eax
jne 0x430d3d
push eax
push str.IconsResource
lea ecx, [ebp - 0x260]
call fcn.00433fc0
cmp eax, 0xffffffff
je 0x430d3d
lea eax, [edi - 0x10]
push eax
call fcn.004129e0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x27c], eax
push 0x11
push str.imageres.dll__25
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x23
call fcn.00427ac0
mov esi, dword [ebp - 0x27c]
cmp dword [esi - 4], 1
jle 0x430ca9
push dword [esi - 0xc]
lea ecx, [ebp - 0x27c]
call fcn.004063c0
mov esi, dword [ebp - 0x27c]
push esi
lea ecx, [ebp - 0x230]
call fcn.00407b80
push 0x5645e0
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x24
call fcn.00407b80
push str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x25
call fcn.00407b80
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00432120
add esp, 0xc
lea ecx, [ebp - 0x278]
call fcn.004087e0
lea ecx, [ebp - 0x248]
call fcn.004087e0
lea ecx, [ebp - 0x230]
call fcn.004087e0
mov bh, 1
mov byte [ebp - 4], 2
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x430d3d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x430d59
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x430d95
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x430d8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x430df9
push edx
push ecx
call fcn.004d65a7
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d684f
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00406210
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
call fcn.005172e0
int3