Function at 0x42ec1c
Capabilities:
Shutdown system

Disassembly:
push 0x908
mov eax, 0x45af6f
call fcn.00438d0a
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0x10]
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea ecx, [ebp - 0x8d0]
call fcn.00429d3d
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 4], ebx
call fcn.00432222
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 1
call fcn.0043225e
lea ecx, [ebp - 0x760]
mov byte [ebp - 4], 2
call fcn.0043215f
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 3
call fcn.0042626f
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ecx
mov word [ebp - 0x50], ax
lea edi, [ebp - 0x274]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], ecx
mov word [ebp - 0x274], ax
lea edi, [ebp - 0x120]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ecx
mov word [ebp - 0x120], ax
lea edi, [ebp - 0x78]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x78], ax
lea edi, [ebp - 0x90]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ecx
mov word [ebp - 0x90], ax
lea edi, [ebp - 0xf0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ecx
mov word [ebp - 0xf0], ax
lea edi, [ebp - 0xd8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ecx
mov word [ebp - 0xd8], ax
lea edi, [ebp - 0xc0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ecx
mov word [ebp - 0xc0], ax
lea edi, [ebp - 0xa8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ecx
mov word [ebp - 0xa8], ax
push 0x405a18
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0xd
call fcn.00429dcb
mov byte [ebp - 0x8e8], bl
mov byte [ebp - 0x8e1], bl
mov byte [ebp - 0x8e4], 1
mov byte [ebp - 0x8e3], bl
mov byte [ebp - 0x8d9], bl
mov byte [ebp - 0x38], bl
mov dword [ebp - 0x8d8], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], 0x404c18
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
push ebx
mov byte [ebp - 4], 0x11
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x60]
push eax
call fcn.0042b65c
pop ecx
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x8e8]
push eax
push esi
call fcn.0042b8ee
add esp, 0x10
test al, al
je 0x42f1d1
mov esi, dword [0x46003c]
cmp dword [esi], 0xffffffff
je 0x42ee38
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x20]
mov edi, 0x1000
push 8
pop esi
cmp eax, esi
jb 0x42ee8b
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42ee82
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x42eebf
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x94]
cmp eax, esi
jb 0x42ef07
mov ecx, dword [ebp - 0xa8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42eefe
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x94], 7
cmp eax, esi
jb 0x42ef68
mov ecx, dword [ebp - 0xc0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42ef5f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xac], 7
cmp eax, esi
jb 0x42efc9
mov ecx, dword [ebp - 0xd8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42efc0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc4], 7
cmp eax, esi
jb 0x42f02a
mov ecx, dword [ebp - 0xf0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42f021
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov word [ebp - 0xf0], ax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdc], 7
cmp eax, esi
jb 0x42f088
mov ecx, dword [ebp - 0x90]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42f07f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], 7
cmp eax, esi
jb 0x42f0dd
mov ecx, dword [ebp - 0x78]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42f0d4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x64], 7
cmp eax, esi
jb 0x42f135
mov ecx, dword [ebp - 0x120]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42f12c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x110], ebx
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], 7
cmp eax, esi
jb 0x42f190
mov ecx, dword [ebp - 0x50]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8d8], ecx
cmp eax, edi
jb 0x42f187
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x8d8]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d8]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x40], ebx
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042667a
lea ecx, [ebp - 0x760]
call fcn.00432335
lea ecx, [ebp - 0x244]
call fcn.0043238d
lea ecx, [ebp - 0x4b0]
call fcn.00432377
jmp 0x43097b
cmp byte [ebp - 0x8e8], 0
lea eax, [ebp - 0x78]
push eax
jne 0x42f1e5
call fcn.0043603f
jmp 0x42f1ea
call fcn.00435415
pop ecx
push 8
pop esi
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x42f1f9
mov eax, dword [ebp - 0x78]
push eax
call fcn.00434bd0
lea eax, [ebp - 0x78]
pop ecx
cmp dword [ebp - 0x64], esi
jb 0x42f20b
mov eax, dword [ebp - 0x78]
push ebx
push 0x405a34
push eax
lea eax, [ebp - 0x90]
push ebx
push eax
call fcn.00436a70
add esp, 0x14
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x42f233
mov eax, dword [ebp - 0x90]
push dword [ebp - 0x8e8]
mov ecx, dword [0x46003c]
push eax
call fcn.0042b394
cmp byte [ebp - 0x8e8], 0
je 0x42f276
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xac], esi
jb 0x42f262
mov eax, dword [ebp - 0xc0]
push eax
push 0x405a50
push dword [0x46003c]
call fcn.00413c6e
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x28c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], 7
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x12
push 0x40c
push eax
call fcn.00435b36
cmp byte [ebp - 0x8e8], 0
pop ecx
pop ecx
jne 0x42f44c
call fcn.0042b4a0
test al, al
je 0x42f44c
mov ecx, dword [0x46003c]
push 0x405acc
call fcn.00414e8b
call fcn.00434790
test al, al
lea eax, [ebp - 0x34]
je 0x42f32f
push 0x598
push eax
call fcn.00435b36
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
cmp dword [ebp - 0x278], esi
jb 0x42f309
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x42f314
mov eax, dword [ebp - 0x34]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x42f366
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x42f366
push 0x599
push eax
call fcn.00435b36
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
cmp dword [ebp - 0x278], esi
jb 0x42f350
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x42f35b
mov eax, dword [ebp - 0x34]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov esi, dword [0x46003c]
cmp dword [esi], 0xffffffff
je 0x42f379
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x28c]
call fcn.00414f1b
lea ecx, [ebp - 0x34]
call fcn.00414f1b
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x42f3b9
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00414f1b
lea ecx, [ebp - 0xc0]
call fcn.00414f1b
lea ecx, [ebp - 0xd8]
call fcn.00414f1b
lea ecx, [ebp - 0xf0]
call fcn.00414f1b
lea ecx, [ebp - 0x90]
call fcn.00414f1b
lea ecx, [ebp - 0x78]
call fcn.00414f1b
lea ecx, [ebp - 0x120]
call fcn.00414f1b
lea ecx, [ebp - 0x274]
call fcn.00414f1b
lea ecx, [ebp - 0x50]
call fcn.00414f1b
lea ecx, [ebp - 0x670]
call fcn.0042667a
lea ecx, [ebp - 0x760]
call fcn.00432335
lea ecx, [ebp - 0x244]
call fcn.0043238d
lea ecx, [ebp - 0x4b0]
call fcn.00432377
mov ebx, 0xbc2
jmp 0x43097b
lea eax, [ebp - 0x34]
push 0x40d
push eax
call fcn.00435b36
pop ecx
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x28c]
push eax
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4b0]
call fcn.00432fe0
xor eax, eax
lea edi, [ebp - 0x2e0]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ecx
mov word [ebp - 0x2e0], ax
lea edi, [ebp - 0x398]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x388], ebx
mov dword [ebp - 0x384], ecx
mov word [ebp - 0x398], ax
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2f0], 0x404c18
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 0x17
push eax
call fcn.0042b369
pop ecx
push dword [ebp - 0x8e8]
lea eax, [ebp - 0x398]
push eax
call fcn.0042a8eb
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
call fcn.0042b1f0
pop ecx
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0042a91f
add esp, 0xc
lea eax, [ebp - 0x2f0]
push eax
call fcn.0042b5ad
pop ecx
lea eax, [ebp - 0xa8]
push eax
call fcn.00435415
pop ecx
push 0x405b00
lea ecx, [ebp - 0x2f0]
call fcn.0042123f
mov edx, eax
test edx, edx
je 0x42f5e3
cmp byte [ebp - 0x8e8], 0
je 0x42f59e
cmp dword [ebp - 0xb0], 0
je 0x42f59e
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xac], esi
jb 0x42f5b2
mov eax, dword [ebp - 0xc0]
jmp 0x42f5b2
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x42f5b2
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x2e0]
cmp dword [ebp - 0x2cc], esi
jb 0x42f5c6
mov ecx, dword [ebp - 0x2e0]
push eax
push ecx
push edx
lea ecx, [ebp - 0x8d0]
call fcn.00414951
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x8d0]
call fcn.0042b2a1
cmp dword [ebp - 0x40], 0
jne 0x42f5f9
lea eax, [ebp - 0x50]
push 0x418
push eax
call fcn.00435b36
pop ecx
pop ecx
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x42f60d
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x320]
call fcn.00413941
push 0x18
pop eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], al
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x38]
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.00427907
lea ecx, [ebp - 0x320]
call fcn.00414f1b
xor eax, eax
lea edi, [ebp - 0x380]
stosd dword es:[edi], eax
push 7
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x370], ebx
mov dword [ebp - 0x36c], ecx
mov word [ebp - 0x380], ax
lea edi, [ebp - 0x350]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x33c], ecx
mov word [ebp - 0x350], ax
lea edi, [ebp - 0x338]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x324], ecx
mov word [ebp - 0x338], ax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x3c], esi
jb 0x42f6da
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f4
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x380]
push 0x3ec
push eax
call fcn.00435b36
pop ecx
pop ecx
lea eax, [ebp - 0x350]
push 0x3eb
push eax
call fcn.00435b36
pop ecx
pop ecx
lea eax, [ebp - 0x338]
push 0x41f
push eax
call fcn.00435b36
pop ecx
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x34]
push eax
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.00433066
cmp byte [ebp - 0x8e8], 0
jne 0x42fbc4
push ebx
lea ecx, [ebp - 0x670]
call fcn.00426793
mov byte [ebp - 0x8e2], al
mov edi, 0x1000
mov eax, dword [ebp - 0x324]
cmp eax, esi
jb 0x42f7bd
mov ecx, dword [ebp - 0x338]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x38], ecx
cmp eax, edi
jb 0x42f7b4
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x38]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x328], ebx
mov word [ebp - 0x338], ax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x324], 7
cmp eax, esi
jb 0x42f81e
mov ecx, dword [ebp - 0x350]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x38], ecx
cmp eax, edi
jb 0x42f815
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x38]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x340], ebx
mov word [ebp - 0x350], ax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x33c], 7
cmp eax, esi
jb 0x42f87f
mov ecx, dword [ebp - 0x380]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x38], ecx
cmp eax, edi
jb 0x42f876
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x38]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154]
xor eax, eax
mov dword [ebp - 0x370], ebx
mov dword [ebp - 0x36c], 7
mov word [ebp - 0x380], ax
mov dword [ebp - 0x8d4], ecx
test ecx, ecx
je 0x42f92c
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x38], eax
cmp ecx, eax
je 0x42f8da
call fcn.00414f1b
mov ecx, dword [ebp - 0x8d4]
push 0x18
pop eax
add ecx, eax
mov dword [ebp - 0x8d4], ecx
cmp ecx, dword [ebp - 0x38]
jne 0x42f8b9
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x8d4], ecx
cdq
idiv dword [ebp - 0x18]
imul eax, eax, 0x18
mov dword [ebp - 0x38], eax
cmp eax, edi
jb 0x42f911
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x38]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x8d4], ecx
test ecx, ecx
je 0x42f9c0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x38], eax
cmp ecx, eax
je 0x42f96e
call fcn.00414f1b
mov ecx, dword [ebp - 0x8d4]
push 0x18
pop eax
add ecx, eax
mov dword [ebp - 0x8d4], ecx
cmp ecx, dword [ebp - 0x38]
jne 0x42f94d
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x158]
sub eax, ecx
cdq
idiv dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
imul eax, eax, 0x18
mov dword [ebp - 0x8d4], eax
cmp eax, edi
jb 0x42f9a5
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x8d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], 0x404c18
call fcn.0041d3f0
mov eax, dword [ebp - 0x384]
cmp eax, esi
jb 0x42fa1d
mov ecx, dword [ebp - 0x398]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42fa14
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x388], ebx
mov word [ebp - 0x398], ax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x384], 7
cmp eax, esi
jb 0x42fa7e
mov ecx, dword [ebp - 0x2e0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42fa75
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x2d0], ebx
mov word [ebp - 0x2e0], ax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x2cc], 7
cmp eax, esi
jb 0x42fadf
mov ecx, dword [ebp - 0x28c]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42fad6
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
cmp byte [ebp - 0x8e2], 0
mov dword [ebp - 4], 0x10
jne 0x43024c
lea ecx, [ebp - 0x4b0]
call fcn.00434080
lea ecx, [ebp - 0x3f0]
call fcn.00426359
xor eax, eax
lea edi, [ebp - 0x108]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x670]
call fcn.00427802
dec eax
lea ecx, [ebp - 0x670]
push eax
call fcn.004277da
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x42fb63
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x40b
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x42fb80
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
cmp dword [ebp - 0x3d0], 0
jne 0x42fd0b
lea eax, [ebp - 0x108]
cmp dword [ebp - 0xf4], esi
jb 0x42fbad
mov eax, dword [ebp - 0x108]
push eax
lea eax, [ebp - 0x34]
push 0x40a
push eax
call fcn.00435b36
add esp, 0xc
jmp 0x42fd46
xor eax, eax
lea edi, [ebp - 0x108]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x94], esi
jb 0x42fc01
mov eax, dword [ebp - 0xa8]
push ebx
push 0x405b18
push eax
lea eax, [ebp - 0x108]
push ebx
push eax
call fcn.00436a70
add esp, 0x14
lea eax, [ebp - 0x108]
cmp dword [ebp - 0xf4], esi
jb 0x42fc2c
mov eax, dword [ebp - 0x108]
push eax
call fcn.004363ea
pop ecx
test al, al
je 0x42fca3
mov edi, 0x404c18
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x148], edi
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0xf4], esi
jb 0x42fc6c
mov eax, dword [ebp - 0x108]
push eax
lea ecx, [ebp - 0x148]
call fcn.0041e343
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x670]
call fcn.00426793
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x8e2], al
mov dword [ebp - 0x148], edi
call fcn.0041d3f0
jmp 0x42fcb5
push ebx
lea ecx, [ebp - 0x670]
call fcn.00426793
mov byte [ebp - 0x8e2], al
mov eax, dword [ebp - 0xf4]
cmp eax, esi
jb 0x42f770
mov ecx, dword [ebp - 0x108]
lea eax, [eax*2 + 2]
mov edi, 0x1000
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42fcfd
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x38]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
jmp 0x42f775
lea ecx, [ebp - 0x108]
cmp dword [ebp - 0xf4], esi
jb 0x42fd1f
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x3e0]
cmp dword [ebp - 0x3cc], esi
jb 0x42fd33
mov eax, dword [ebp - 0x3e0]
push eax
push ecx
lea eax, [ebp - 0x34]
push 0x41e
push eax
call fcn.00435b36
add esp, 0x10
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x42fd51
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042b3e3
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x244]
call fcn.004327b0
mov ecx, dword [0x46003c]
or edi, 0xffffffff
cmp dword [ecx], edi
je 0x42fe19
lea eax, [ebp - 0x108]
cmp dword [ebp - 0xf4], esi
jb 0x42fd92
mov eax, dword [ebp - 0x108]
push eax
push 0x405bc0
push ecx
call fcn.00413c6e
add esp, 0xc
cmp dword [ebp - 0x3d0], 0
je 0x42fdd2
lea eax, [ebp - 0x3e0]
cmp dword [ebp - 0x3cc], esi
jb 0x42fdbe
mov eax, dword [ebp - 0x3e0]
push eax
push 0x405c10
push dword [0x46003c]
call fcn.00413c6e
add esp, 0xc
push 2
lea ecx, [ebp - 0x244]
call fcn.004327b0
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x42fdf0
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x42fe0d
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00432523
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433f6b
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x42fe40
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x244]
call fcn.00433765
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
push 2
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433e7c
push 1
lea ecx, [ebp - 0x244]
call fcn.00433de0
mov eax, dword [0x46003c]
mov dword [ebp - 0x18], eax
cmp dword [eax], edi
je 0x42fe9b
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
push 1
push 1
lea ecx, [ebp - 0x244]
mov dword [eax], edi
call fcn.004331db
lea ecx, [ebp - 0x244]
call fcn.00434108
push edi
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x108]
call fcn.00414f1b
lea ecx, [ebp - 0x3c8]
call fcn.00414f1b
lea ecx, [ebp - 0x3e0]
call fcn.00414f1b
mov eax, dword [ebp - 0x20]
mov edi, 0x1000
cmp eax, esi
jb 0x42ff32
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42ff29
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x42ff66
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x94]
cmp eax, esi
jb 0x42ffae
mov ecx, dword [ebp - 0xa8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x42ffa5
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x94], 7
cmp eax, esi
jb 0x43000f
mov ecx, dword [ebp - 0xc0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x430006
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xac], 7
cmp eax, esi
jb 0x430070
mov ecx, dword [ebp - 0xd8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x430067
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc4], 7
cmp eax, esi
jb 0x4300d1
mov ecx, dword [ebp - 0xf0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x4300c8
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov word [ebp - 0xf0], ax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdc], 7
cmp eax, esi
jb 0x43012f
mov ecx, dword [ebp - 0x90]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x430126
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], 7
cmp eax, esi
jb 0x430184
mov ecx, dword [ebp - 0x78]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x43017b
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x64], 7
cmp eax, esi
jb 0x4301dc
mov ecx, dword [ebp - 0x120]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x4301d3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x110], ebx
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], 7
cmp eax, esi
jb 0x430237
mov ecx, dword [ebp - 0x50]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, edi
jb 0x43022e
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
jmp 0x43094a
lea ecx, [ebp - 0x670]
call fcn.00427802
mov cl, byte [ebp - 0x8e8]
mov dword [ebp - 0x38], eax
test cl, cl
je 0x43038c
test eax, eax
jle 0x43038e
lea ecx, [ebp - 0x3f0]
call fcn.00426359
xor eax, eax
lea edi, [ebp - 0x178]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
mov edi, dword [ebp - 0x8d8]
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x24
push eax
push edi
lea ecx, [ebp - 0x670]
call fcn.004277da
mov eax, dword [ebp - 0x3f0]
and eax, 0xf
cmp al, 3
jne 0x43036d
mov eax, dword [ebp - 0x164]
inc edi
mov dword [ebp - 0x8d8], edi
cmp eax, esi
jb 0x430327
mov ecx, dword [ebp - 0x178]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x43031e
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x168], ebx
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
mov byte [ebp - 4], 0x10
call fcn.00414f1b
lea ecx, [ebp - 0x3e0]
call fcn.00414f1b
mov eax, dword [ebp - 0x38]
cmp edi, eax
jl 0x430270
mov cl, byte [ebp - 0x8e8]
jmp 0x430396
lea ecx, [ebp - 0x178]
call fcn.00414f1b
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x10
call fcn.004266df
mov eax, dword [ebp - 0x38]
jmp 0x430365
test eax, eax
je 0x4315da
mov edi, ebx
test cl, cl
je 0x4303a2
cmp edi, eax
je 0x4315da
lea ecx, [ebp - 0x4b0]
call fcn.00434080
cmp byte [ebp - 0x8e8], 0
jne 0x430aae
lea ecx, [ebp - 0x3b0]
call fcn.00413980
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x3c], esi
jb 0x4303d4
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x3b0]
push 0x4bd
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x760]
push eax
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x3b0]
push eax
push ebx
push dword [ebp - 0x1c]
call fcn.00432e3d
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x760]
push eax
call fcn.0042d69c
add esp, 0xc
test al, al
jne 0x43051c
mov esi, dword [0x46003c]
cmp dword [esi], 0xffffffff
je 0x43043e
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
lea ecx, [ebp - 0x760]
call fcn.00434080
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x3b0]
call fcn.00414f1b
lea ecx, [ebp - 0x34]
call fcn.00414f1b
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x430489
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00414f1b
lea ecx, [ebp - 0xc0]
call fcn.00414f1b
lea ecx, [ebp - 0xd8]
call fcn.00414f1b
lea ecx, [ebp - 0xf0]
call fcn.00414f1b
lea ecx, [ebp - 0x90]
call fcn.00414f1b
lea ecx, [ebp - 0x78]
call fcn.00414f1b
lea ecx, [ebp - 0x120]
call fcn.00414f1b
lea ecx, [ebp - 0x274]
call fcn.00414f1b
lea ecx, [ebp - 0x50]
call fcn.00414f1b
lea ecx, [ebp - 0x670]
call fcn.0042667a
lea ecx, [ebp - 0x760]
call fcn.00432335
lea ecx, [ebp - 0x244]
call fcn.0043238d
lea ecx, [ebp - 0x4b0]
call fcn.00432377
mov ebx, 0x642
jmp 0x43097b
lea ecx, [ebp - 0x760]
call fcn.00434080
push 1
lea ecx, [ebp - 0x244]
call fcn.00433de0
push 1
lea ecx, [ebp - 0x244]
call fcn.00433f6b
push ebx
push 2
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
push 3
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433e7c
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.004331db
lea eax, [ebp - 0x34]
push 0x3f2
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x430593
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x4305aa
mov eax, dword [ebp - 0x78]
push eax
push 0x405c58
push dword [0x46003c]
call fcn.00413c6e
add esp, 0xc
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x4305c9
mov eax, dword [ebp - 0x78]
push eax
call fcn.0042a077
lea eax, [ebp - 0x78]
pop ecx
cmp dword [ebp - 0x64], esi
jb 0x4305db
mov eax, dword [ebp - 0x78]
push 1
push eax
lea ecx, [ebp - 0x670]
call fcn.00426e27
test al, al
jne 0x43099c
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x4305fc
mov eax, dword [ebp - 0x78]
push eax
push 0x405cac
push dword [0x46003c]
call fcn.00413c6e
add esp, 0xc
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x8d4], ecx
cmp dword [ebp - 0x64], esi
jb 0x430627
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x8d4], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x3c], esi
jb 0x430638
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x244]
call fcn.00432990
push dword [ebp - 0x18]
lea ecx, [ebp - 0x670]
push eax
push 1
push ebx
push dword [ebp - 0x8d4]
call fcn.0042674a
lea ecx, [ebp - 0x4dc]
call fcn.00429df7
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x7c], esi
jb 0x43067b
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x430686
mov eax, dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x4dc]
push ecx
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x670]
push eax
call fcn.0042e534
add esp, 0x14
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x244]
push 0x40108c
call fcn.00433bf9
cmp dword [ebp - 0x18], 0
jge 0x43098d
lea ecx, [ebp - 0x244]
call fcn.00432b37
test al, al
je 0x4306fd
mov esi, dword [0x46003c]
cmp dword [esi], 0xffffffff
je 0x4306e4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x4c8]
call fcn.00414f1b
jmp 0x430452
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x430708
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x578
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430725
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x320]
call fcn.0041390a
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x30c], esi
jb 0x43075b
mov eax, dword [ebp - 0x320]
push eax
lea eax, [ebp - 0x34]
push 0x579
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430778
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042b3e3
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x244]
call fcn.004327b0
push dword [ebp - 0x4d4]
lea eax, [ebp - 0x34]
push 0x57a
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4307b6
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00432523
push 1
lea ecx, [ebp - 0x244]
call fcn.004327b0
mov eax, dword [0x46003c]
cmp dword [eax], 0xffffffff
je 0x430820
push 2
lea ecx, [ebp - 0x244]
call fcn.004327b0
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x4307f7
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430814
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00432523
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x43083b
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x244]
call fcn.00433765
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
push 2
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433f6b
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.004331db
lea ecx, [ebp - 0x244]
call fcn.00434108
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x320]
call fcn.00414f1b
lea ecx, [ebp - 0x4c8]
call fcn.00414f1b
lea ecx, [ebp - 0x3b0]
call fcn.00414f1b
lea ecx, [ebp - 0x34]
call fcn.00414f1b
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x4308ed
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00414f1b
lea ecx, [ebp - 0xc0]
call fcn.00414f1b
lea ecx, [ebp - 0xd8]
call fcn.00414f1b
lea ecx, [ebp - 0xf0]
call fcn.00414f1b
lea ecx, [ebp - 0x90]
call fcn.00414f1b
lea ecx, [ebp - 0x78]
call fcn.00414f1b
lea ecx, [ebp - 0x120]
call fcn.00414f1b
lea ecx, [ebp - 0x274]
call fcn.00414f1b
lea ecx, [ebp - 0x50]
call fcn.00414f1b
lea ecx, [ebp - 0x670]
call fcn.0042667a
lea ecx, [ebp - 0x760]
call fcn.00432335
lea ecx, [ebp - 0x244]
call fcn.0043238d
lea ecx, [ebp - 0x4b0]
call fcn.00432377
mov ebx, 0x643
lea ecx, [ebp - 0x8d0]
call fcn.00429e34
mov eax, ebx
jmp 0x432076
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x26
call fcn.00414f1b
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2c4], ebx
mov dword [ebp - 0x2c0], ebx
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x670]
call fcn.00427b4e
test al, al
jne 0x430a98
lea ecx, [ebp - 0x308]
call fcn.00413980
lea ecx, [ebp - 0x138]
call fcn.00413980
lea ecx, [ebp - 0x2a4]
call fcn.00413980
lea ecx, [ebp - 0x320]
call fcn.00413980
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00420117
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00420f6e
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041d722
test al, al
je 0x43207e
lea ecx, [ebp - 0x1c]
call fcn.0041d77f
mov ecx, eax
call fcn.00414fe9
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00413941
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x2e
call fcn.00414fe9
push eax
lea ecx, [ebp - 0x320]
call fcn.00418458
push 0x4010cc
lea ecx, [ebp - 0x320]
call fcn.00418458
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x2d
call fcn.00413b12
lea ecx, [ebp - 0x1c]
call fcn.0041d782
jmp 0x430a19
lea ecx, [ebp - 0x2c8]
call fcn.00425bf1
lea ecx, [ebp - 0x3b0]
call fcn.00414f1b
push 1
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], 0x10
call fcn.00433de0
push 1
lea ecx, [ebp - 0x244]
call fcn.00433f6b
lea eax, [ebp - 0x34]
push 0x3e8
push eax
call fcn.00435b36
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00433e18
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x430af9
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x244]
call fcn.00433765
push ebx
push 2
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
push 3
lea ecx, [ebp - 0x244]
call fcn.00433e18
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433e7c
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.004331db
push edi
lea ecx, [ebp - 0x670]
call fcn.0042676f
push edi
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042ce43
add esp, 0xc
mov byte [ebp - 0x8e2], bl
cmp byte [ebp - 0x8e3], 0
jne 0x430f3c
xor eax, eax
lea edi, [ebp - 0x25c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x248], 7
mov word [ebp - 0x25c], ax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov byte [ebp - 0x13c], bl
call fcn.00427754
cmp byte [ebp - 0x13c], 0
mov byte [ebp - 0x8e3], al
je 0x43125f
push 0x40108c
lea ecx, [ebp - 0x244]
call fcn.00433bf9
lea ecx, [ebp - 0x430]
mov byte [ebp - 0x8e2], bl
call fcn.00426359
mov edi, dword [ebp - 0x8d8]
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x33
push eax
push edi
lea ecx, [ebp - 0x670]
call fcn.004277da
mov ecx, dword [ebp - 0x430]
cmp ecx, 7
je 0x430fc7
mov eax, ecx
and eax, 0xf
cmp al, 5
je 0x430fc7
test cl, 0x30
je 0x430f7c
cmp dword [ebp - 0x110], 0
jne 0x430f1a
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00413b30
cmp byte [ebp - 0x8e8], 0
je 0x430ed6
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xac], esi
jb 0x430eea
mov eax, dword [ebp - 0xc0]
jmp 0x430eea
lea eax, [ebp - 0xa8]
cmp dword [ebp - 0x94], esi
jb 0x430eea
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0xf0]
cmp dword [ebp - 0xdc], esi
jb 0x430efe
mov ecx, dword [ebp - 0xf0]
push ecx
push eax
lea eax, [ebp - 0x120]
push 0x405ce0
push eax
call fcn.00434f16
mov ecx, dword [ebp - 0x430]
add esp, 0x10
mov byte [ebp - 0x8e1], 1
test cl, 0x10
je 0x430f7c
lea ecx, [ebp - 0x430]
call fcn.004266df
lea ecx, [ebp - 0x25c]
call fcn.00414f1b
or edi, 0xffffffff
mov dword [ebp - 4], 0x10
push edi
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
cmp byte [ebp - 0x8e3], 0
je 0x4315ef
lea ecx, [ebp - 0x244]
call fcn.00432b37
neg al
sbb al, al
inc al
mov byte [ebp - 0x8e4], al
jmp 0x4315ef
inc edi
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x8d8], edi
call fcn.00432b37
test al, al
jne 0x430f26
cmp byte [ebp - 0x8e3], al
jne 0x430fb1
push edi
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042ce43
add esp, 0xc
lea ecx, [ebp - 0x408]
call fcn.00414f1b
lea ecx, [ebp - 0x420]
jmp 0x4313db
test cl, 0x30
jne 0x430ffd
cmp byte [ebp - 0x8e1], 0
jne 0x431016
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x430fe0
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f8
push eax
call fcn.00435b36
mov al, byte [ebp - 0x8e1]
mov byte [ebp - 0x8e1], al
jmp 0x431030
lea eax, [ebp - 0x25c]
mov byte [ebp - 0x8e1], 1
push eax
lea ecx, [ebp - 0xd8]
call fcn.00413b30
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x431021
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push 0x3f9
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x43103e
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
or edi, 0xffffffff
lea ecx, [ebp - 0x244]
push edi
call fcn.00433363
cmp dword [ebp - 0x410], 0
jbe 0x43109f
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x248], esi
jb 0x431076
mov ecx, dword [ebp - 0x25c]
lea eax, [ebp - 0x420]
cmp dword [ebp - 0x40c], esi
jb 0x43108a
mov eax, dword [ebp - 0x420]
push eax
push ecx
lea eax, [ebp - 0x34]
push 0x402
push eax
call fcn.00435b36
add esp, 0x10
jmp 0x4310c5
lea eax, [ebp - 0x25c]
cmp dword [ebp - 0x248], esi
jb 0x4310b3
mov eax, dword [ebp - 0x25c]
push eax
lea eax, [ebp - 0x34]
push 0x401
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4310d0
mov eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042b3e3
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x244]
call fcn.004327b0
push ebx
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042c6b7
mov eax, dword [0x46003c]
add esp, 0xc
cmp dword [eax], edi
je 0x431146
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], esi
jb 0x43111d
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push 0x404
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x43113a
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00432523
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433f6b
cmp byte [ebp - 0x8e1], 0
je 0x4311b3
push ebx
push ebx
call fcn.0042cf97
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00432819
push 3
lea ecx, [ebp - 0x244]
call fcn.00433806
push 3
lea ecx, [ebp - 0x244]
call fcn.004336c3
lea eax, [ebp - 0x244]
push eax
call fcn.0042c4fc
mov esi, dword [0x46003c]
pop ecx
cmp dword [esi], edi
je 0x4311ac
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
jmp 0x431243
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x4311ce
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x244]
call fcn.00433765
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00433e18
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00432819
push ebx
push 2
lea ecx, [ebp - 0x244]
call fcn.00433e18
mov esi, dword [0x46003c]
cmp dword [esi], edi
je 0x43121a
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push 1
lea ecx, [ebp - 0x244]
mov dword [esi], edi
call fcn.004331db
lea ecx, [ebp - 0x244]
call fcn.00434108
push edi
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x430]
call fcn.004266df
lea ecx, [ebp - 0x25c]
jmp 0x4308bc
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x140]
cmp eax, ecx
jbe 0x4312c1
test ecx, ecx
je 0x4312c1
test eax, eax
je 0x4312c1
cmp byte [ebp - 0x8e2], 0
jne 0x4312ba
lea eax, [ebp - 0x34]
push 0x417
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x43129b
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00433bf9
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov byte [ebp - 0x8e2], 1
xor edx, edx
div ecx
push edx
jmp 0x4312c2
push eax
push ecx
lea ecx, [ebp - 0x244]
call fcn.00432b3e
cmp byte [ebp - 0x8d9], 0
jne 0x4313e0
lea ecx, [ebp - 0x244]
call fcn.00432b37
test al, al
je 0x4313e0
lea ecx, [ebp - 0x2a4]
call fcn.00413980
lea eax, [ebp - 0x2a4]
mov byte [ebp - 4], 0x34
push 0x406
push eax
call fcn.00435b36
pop ecx
pop ecx
lea ecx, [ebp - 0x138]
call fcn.00413980
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x3c], esi
jb 0x43132a
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x138]
push 0x3f4
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x2a4]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x290], esi
jb 0x431359
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x18], eax
lea edi, [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jb 0x43136d
mov edi, dword [ebp - 0x138]
lea ecx, [ebp - 0x244]
call fcn.00432990
push 0x34
push edi
push dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4313be
mov ecx, dword [0x46003c]
push 0x405d0c
call fcn.00414e8b
push 0xffffffffffffffff
lea ecx, [ebp - 0x244]
call fcn.004336c3
push ebx
push 1
lea ecx, [ebp - 0x244]
call fcn.00432819
mov byte [ebp - 0x8d9], 1
jmp 0x4313ca
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433da5
lea ecx, [ebp - 0x138]
call fcn.00414f1b
lea ecx, [ebp - 0x2a4]
call fcn.00414f1b
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x248]
cmp eax, esi
jb 0x430b67
mov ecx, dword [ebp - 0x25c]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x43142e
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
jmp 0x430b67
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 0x8e4], 1
call fcn.00434080
or edi, 0xffffffff
lea eax, [ebp - 0x34]
push 0x3ea
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x43160a
mov eax, dword [ebp - 0x34]
push eax
push 1
lea ecx, [ebp - 0x244]
call fcn.00433765
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.00432819
lea ecx, [ebp - 0x244]
call fcn.00432b37
cmp byte [ebp - 0x8e1], 0
je 0x4318ec
test al, al
lea eax, [ebp - 0x34]
je 0x43164d
push 0x408
jmp 0x431652
push 0x409
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x431665
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
lea eax, [ebp - 0x244]
push ebx
push eax
call fcn.0042b3e3
cmp dword [ebp - 0xc8], 0
pop ecx
pop ecx
je 0x4316d3
lea eax, [ebp - 0xd8]
cmp dword [ebp - 0xc4], esi
jb 0x43169d
mov eax, dword [ebp - 0xd8]
push eax
lea eax, [ebp - 0x34]
push 0x411
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], esi
jb 0x4316ba
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.00432523
push 2
lea ecx, [ebp - 0x244]
call fcn.004327b0
push 1
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042c6b7
add esp, 0xc
lea ecx, [ebp - 0x244]
call fcn.00432b37
test al, al
jne 0x431786
lea ecx, [ebp - 0x78]
cmp dword [ebp - 0x64], esi
jb 0x431709
mov ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x120]
cmp dword [ebp - 0x10c], esi
jb 0x43171d
mov eax, dword [ebp - 0x120]
push eax
push ecx
call fcn.0042cf97
pop ecx
pop ecx
lea ecx, [ebp - 0x138]
call fcn.00413980
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x64], esi
jb 0x431740
mov eax, dword [ebp - 0x78]
push ebx
push 0x405b18
push eax
lea eax, [ebp - 0x138]
push ebx
push eax
call fcn.00436a70
add esp, 0x14
lea eax, [ebp - 0x138]
cmp dword [ebp - 0x124], esi
jb 0x43176b
mov eax, dword [ebp - 0x138]
push eax
lea ecx, [ebp - 0x670]
call fcn.00427deb
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x10
call fcn.00414f1b
push 3
lea ecx, [ebp - 0x244]
call fcn.00433806
push 3
lea ecx, [ebp - 0x244]
call fcn.004336c3
lea eax, [ebp - 0x244]
push eax
call fcn.0042c4fc
pop ecx
mov eax, dword [0x46003c]
mov dword [ebp - 0x18], eax
cmp dword [eax], edi
je 0x4317c4
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
mov dword [eax], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x34]
call fcn.00414f1b
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x404c18
call fcn.0041d3f0
cmp dword [ebp - 0x8e0], 0
je 0x4317f8
push dword [ebp - 0x8e0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xa8]
call fcn.00414f1b
lea ecx, [ebp - 0xc0]
call fcn.00414f1b
mov eax, dword [ebp - 0xc4]
cmp eax, esi
jb 0x431859
mov ecx, dword [ebp - 0xd8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8d4], ecx
cmp eax, 0x1000
jb 0x431850
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00414eaa
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x8d4]
push eax
push ecx
call fcn.00438c1d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc8], ebx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
call fcn.00414f1b
lea ecx, [ebp - 0x90]
call fcn.00414f1b
lea ecx, [ebp - 0x78]
call fcn.00414f1b
lea ecx, [ebp - 0x120]
call fcn.00414f1b
lea ecx, [ebp - 0x274]
call fcn.00414f1b
lea ecx, [ebp - 0x50]
call fcn.00414f1b
lea ecx, [ebp - 0x670]
call fcn.0042667a
lea ecx, [ebp - 0x760]
call fcn.00432335
lea ecx, [ebp - 0x244]
call fcn.0043238d
lea ecx, [ebp - 0x4b0]
call fcn.00432377
lea ecx, [ebp - 0x8d0]
call fcn.00429e34
xor eax, eax
jmp 0x432076
test al, al
je 0x431977
lea eax, [ebp - 0x34]
push 0x40e
push eax
call fcn.00435b36
lea eax, [ebp - 0x34]
pop ecx
pop ecx
cmp dword [ebp - 0x20], esi
jb 0x43190f
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x244]
call fcn.004333c1
lea eax, [ebp - 0x244]
push ebx
push eax
call fcn.0042b3e3
push ebx
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042c6b7
add esp, 0x14
lea ecx, [ebp - 0x244]
push ebx
call fcn.00433f6b
push 1
push 1
lea ecx, [ebp - 0x244]
call fcn.004331db
lea ecx, [ebp - 0x244]
call fcn.00434108
push edi
push ebx
lea ecx, [ebp - 0x244]
call fcn.004331db
jmp 0x4317ad
cmp byte [ebp - 0x8e4], 0
je 0x4317ad
cmp dword [ebp - 0x7a8], 0
je 0x4317ad
lea ecx, [ebp - 0x2a4]
call fcn.00413980
lea eax, [ebp - 0x2a4]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00413e31
lea eax, [ebp - 0x2a4]
cmp dword [ebp - 0x290], esi
jb 0x4319c6
mov eax, dword [ebp - 0x2a4]
push 0x401130
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00413b86
test al, al
je 0x431ba9
lea ecx, [ebp - 0x178]
call fcn.00413980
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00413d1a
test eax, eax
je 0x431b9a
lea ecx, [ebp - 0x368]
call fcn.00413980
lea eax, [ebp - 0x368]
mov byte [ebp - 4], 0x3c
push eax
call fcn.0042b2c6
pop ecx
push 0x404454
lea ecx, [ebp - 0x178]
call fcn.00427ffe
test al, al
jne 0x431b8f
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x178]
call fcn.0042eb96
test al, al
jne 0x431b8f
lea ecx, [ebp - 0x2bc]
call fcn.00413980
lea ecx, [ebp - 0x308]
call fcn.00413980
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x354], esi
jb 0x431a84
mov ecx, dword [ebp - 0x368]
lea eax, [ebp - 0x178]
cmp dword [ebp - 0x164], esi
jb 0x431a98
mov eax, dword [ebp - 0x178]
push ecx
push eax
lea eax, [ebp - 0x2bc]
push 0x5a9
push eax
call fcn.00435b36
add esp, 0x10
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x431ab9
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x308]
push 0x3f4
push eax
call fcn.00435b36
add esp, 0xc
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], esi
jb 0x431ae2
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x2bc]
cmp dword [ebp - 0x2a8], esi
jb 0x431af6
mov ecx, dword [ebp - 0x2bc]
push 0x30
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x368]
cmp dword [ebp - 0x354], esi
jb 0x431b15
mov ecx, dword [ebp - 0x368]
lea eax, [ebp - 0x178]
cmp dword [ebp - 0x164], esi
jb 0x431b29
mov eax, dword [ebp - 0x178]
push ecx
push eax
push 0x405d48
push dword [0x46003c]
call fcn.00413c6e
mov esi, dword [0x46003c]
add esp, 0x10
cmp dword [esi], edi
je 0x431b50
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x308]
call fcn.00414f1b
lea ecx, [ebp - 0x2bc]
call fcn.00414f1b
lea ecx, [ebp - 0x368]
call fcn.00414f1b
lea ecx, [ebp - 0x178]
call fcn.00414f1b
lea ecx, [ebp - 0x2a4]
jmp 0x4308bc
lea ecx, [ebp - 0x368]
call fcn.00414f1b
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x3a
call fcn.00414f1b
lea ecx, [ebp - 0x8d0]
call fcn.00413c2a
test al, al
je 0x431cb0
push ebx
push ebx
lea ecx, [ebp - 0x8d0]
call fcn.0042a059
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], esi
jb 0x431bd4
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x8d0]
push eax
call fcn.0042dfdb
add esp, 0xc
test eax, eax
jns 0x431c22
push eax
push 0x405db0
push dword [0x46003c]
call fcn.00413c6e
mov esi, dword [0x46003c]
add esp, 0xc
cmp dword [esi], edi
je 0x431c15
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x431b84
lea ecx, [ebp - 0x138]
call fcn.00413980
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x3f
push eax
call fcn.00435737
lea eax, [ebp - 0x138]
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x124], esi
jb 0x431c58
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x244]
call fcn.00432990
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8d0]
call fcn.00414b3c
cmp eax, 1
je 0x431ca1
cmp eax, 4
je 0x431ca1
mov esi, dword [0x46003c]
cmp dword [esi], edi
je 0x431c8e
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], edi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x138]
jmp 0x431b7f
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x3a
call fcn.00414f1b
mov ecx, dword [0x46003c]
push 0x405e18
call fcn.00414e8b
push ebx
lea ecx, [ebp - 0x244]
call fcn.00433de0
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], esi
jb 0x431ce0
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00413e94
lea ecx, [ebp - 0x2a4]
call fcn.00414f1b
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], 0x10
call fcn.00434085
jmp 0x4317ad
call fcn.00438c5c
ret 0x10
lea ecx, [ebp - 0x320]
call fcn.00414fe9
push eax
push 0x57d
lea eax, [ebp - 0x914]
push 2
push eax
call fcn.0041399d
add esp, 0x10
lea eax, [ebp - 0x914]
push 0x45ba6c
push eax
call fcn.00439908
int3