Function at 0x401000
Capabilities:
Allocate thread local storage
Log keystrokes via application hook

Disassembly:
push 0x910
push 0
push 0x47e414
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x47e418], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x47e414], eax
mov eax, 0x43d12c
mov dword [0x47e41c], eax
call fcn.00435e30
call fcn.00435ce5
call fcn.004322f0
call fcn.00431944
call fcn.0042a80c
call fcn.0042a6f8
call fcn.0042a07d
call fcn.00429517
call fcn.00429363
call fcn.00427cba
call fcn.00421e65
call fcn.00421d87
call fcn.00421ac5
call fcn.004216a0
call fcn.00420aac
call fcn.00420379
call fcn.0041fe8c
call fcn.0041e28c
mov dword [0x43b001], 0x10000ca
lea eax, [0x4085c3]
push eax
pop dword [0x47e420]
mov dword [0x43b001], 0x79
push 0x47ed0c
push 0x43d114
push 7
push 0x25
push 0x1c
call fcn.00435be6
mov dword [0x43b001], 0x7a
push 0x47ed14
push 0x43d0f8
push 7
push 0x3e8
push 0x18
call fcn.00435be6
mov dword [0x43b001], 0x4000074
push 0x47ed1c
push 0x43d0a8
push 8
push 0x65
push 4
call fcn.00435be6
mov dword [0x43b001], 0x4000076
mov dword [0x47e438], 0
mov dword [0x43b001], 0x4000076
mov ebx, dword [0x47e438]
mov ebp, dword [0x47ed1c]
shl ebx, 2
mov edx, str.NPC_n
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000077
inc dword [0x47e438]
mov dword [0x43b001], 0x4000077
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c974
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000078
inc dword [0x47e438]
mov dword [0x43b001], 0x4000078
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b26b
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000079
inc dword [0x47e438]
mov dword [0x43b001], 0x4000079
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bfe3
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007a
inc dword [0x47e438]
mov dword [0x43b001], 0x400007a
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bf63
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007b
inc dword [0x47e438]
mov dword [0x43b001], 0x400007b
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b8c3
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007c
inc dword [0x47e438]
mov dword [0x43b001], 0x400007c
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cdd8
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007d
inc dword [0x47e438]
mov dword [0x43b001], 0x400007d
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b9b8
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007e
inc dword [0x47e438]
mov dword [0x43b001], 0x400007e
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b7fb
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400007f
inc dword [0x47e438]
mov dword [0x43b001], 0x400007f
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cf2d
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000080
inc dword [0x47e438]
mov dword [0x43b001], 0x4000080
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b6bd
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000081
inc dword [0x47e438]
mov dword [0x43b001], 0x4000081
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43ba7a
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000082
inc dword [0x47e438]
mov dword [0x43b001], 0x4000082
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b698
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000083
inc dword [0x47e438]
mov dword [0x43b001], 0x4000083
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43ccb8
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000084
inc dword [0x47e438]
mov dword [0x43b001], 0x4000084
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c617
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000085
inc dword [0x47e438]
mov dword [0x43b001], 0x4000085
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b2a1
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000086
inc dword [0x47e438]
mov dword [0x43b001], 0x4000086
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43be9a
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000087
inc dword [0x47e438]
mov dword [0x43b001], 0x4000087
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c54d
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000088
inc dword [0x47e438]
mov dword [0x43b001], 0x4000088
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c26e
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000089
inc dword [0x47e438]
mov dword [0x43b001], 0x4000089
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b359
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008a
inc dword [0x47e438]
mov dword [0x43b001], 0x400008a
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b7cc
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008b
inc dword [0x47e438]
mov dword [0x43b001], 0x400008b
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c69b
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008c
inc dword [0x47e438]
mov dword [0x43b001], 0x400008c
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cdc7
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008d
inc dword [0x47e438]
mov dword [0x43b001], 0x400008d
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c23c
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008e
inc dword [0x47e438]
mov dword [0x43b001], 0x400008e
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b280
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400008f
inc dword [0x47e438]
mov dword [0x43b001], 0x400008f
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43be6b
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000090
inc dword [0x47e438]
mov dword [0x43b001], 0x4000090
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c5b9
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000091
inc dword [0x47e438]
mov dword [0x43b001], 0x4000091
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b28e
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000092
inc dword [0x47e438]
mov dword [0x43b001], 0x4000092
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cffd
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000093
inc dword [0x47e438]
mov dword [0x43b001], 0x4000093
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bc2a
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000094
inc dword [0x47e438]
mov dword [0x43b001], 0x4000094
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b417
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000095
inc dword [0x47e438]
mov dword [0x43b001], 0x4000095
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bdc7
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000096
inc dword [0x47e438]
mov dword [0x43b001], 0x4000096
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c34a
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000097
inc dword [0x47e438]
mov dword [0x43b001], 0x4000097
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c512
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000098
inc dword [0x47e438]
mov dword [0x43b001], 0x4000098
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b797
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x4000099
inc dword [0x47e438]
mov dword [0x43b001], 0x4000099
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c0e0
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009a
inc dword [0x47e438]
mov dword [0x43b001], 0x400009a
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bf42
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009b
inc dword [0x47e438]
mov dword [0x43b001], 0x400009b
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c82b
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009c
inc dword [0x47e438]
mov dword [0x43b001], 0x400009c
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b483
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009d
inc dword [0x47e438]
mov dword [0x43b001], 0x400009d
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c6c6
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009e
inc dword [0x47e438]
mov dword [0x43b001], 0x400009e
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b8f3
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x400009f
inc dword [0x47e438]
mov dword [0x43b001], 0x400009f
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b9fa
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a0
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a0
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c571
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a1
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a1
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c08c
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a2
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a2
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bcb1
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a3
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a3
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43caa5
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a4
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a4
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43c29e
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a5
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a5
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b657
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a6
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a6
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b737
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a7
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a7
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cc4b
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a8
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a8
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43b77e
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000a9
inc dword [0x47e438]
mov dword [0x43b001], 0x40000a9
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43bf9a
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x40000aa
inc dword [0x47e438]
mov dword [0x43b001], 0x40000aa
mov ebx, dword [0x47e438]
shl ebx, 2
mov edx, 0x43cac3
lea ecx, [ebp + ebx]
call fcn.0041e008
mov dword [0x43b001], 0x30a
call fcn.0041f180
mov dword [0x43b001], 0x30b
call fcn.004172d9
mov dword [0x43b001], 0x30c
call fcn.0041b289
mov dword [0x43b001], 0x30d
call fcn.00416fd4
mov dword [0x43b001], 0x30e
call fcn.0040e650
mov dword [0x43b001], 0x310
push 0xca0000
push 0x43c52a
push 0xe1
push 0xdc
lea ebp, [0x47e460]
movsx eax, word [ebp + 0x52]
push eax
movsx eax, word [ebp + 0x50]
push eax
push 0
call fcn.0042801c
mov dword [0x47e43c], eax
mov dword [0x43b001], 0x311
mov ebx, dword [0x47e43c]
and ebx, ebx
jne 0x401c0c
mov dword [0x43b001], 0x311
jmp 0x40287f
mov dword [0x43b001], 0x311
mov dword [0x43b001], 0x312
push 1
push 0
call fcn.0042803f
mov dword [0x43b001], 0x313
call fcn.0040b6d4
mov dword [0x43b001], 0x314
lea ebp, [0x47e460]
mov edx, 0x43cbe3
lea ecx, [ebp + 0xd3]
call fcn.0041e008
mov dword [0x43b001], 0x315
movsx ebx, byte [ebp + 0x6e]
cmp ebx, 1
jne 0x401cb2
mov dword [0x43b001], 0x316
call fcn.00435e80
push eax
mov edx, 0x43c8cb
call fcn.00435ea0
lea ebp, [0x47e460]
mov edx, dword [ebp + 0xd7]
call fcn.00435ea0
push 0x47e440
call fcn.00435f00
mov dword [0x43b001], 0x317
jmp 0x401cd6
mov dword [0x43b001], 0x317
mov dword [0x43b001], 0x318
mov edx, 0x43c842
lea ecx, [0x47e440]
call fcn.0041e008
mov dword [0x43b001], 0x319
mov dword [0x43b001], 0x31a
mov edx, 0x43cfe1
lea ecx, [0x47e444]
call fcn.0041e008
mov dword [0x43b001], 0x31c
push dword [0x47e448]
call fcn.0041c672
mov dword [0x43b001], 0x31d
push 0x43bafd
call fcn.0041c5c1
mov dword [0x43b001], 0x31e
lea ebp, [0x47e460]
mov byte [ebp + 0x6d], 1
mov dword [0x43b001], 0x31f
mov byte [ebp + 0x79], 0
mov dword [0x43b001], 0x320
mov dword [ebp + 0x72], 1
mov dword [0x43b001], 0x321
push 1
lea eax, [0x41d5af]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x321
push 0x64
call fcn.004213ee
mov dword [0x43b001], 0x322
push 1
lea eax, [0x41d76d]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x322
push 0x64
call fcn.004213ee
mov dword [0x43b001], 0x323
push 1
lea eax, [0x41d355]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x323
push 0x64
call fcn.004213ee
mov dword [0x43b001], 0x324
push 0
push 0
call sub.KERNEL32.dll_GetModuleHandleA
push eax
lea eax, [0x4149af]
push eax
push 0xd
call sub.USER32.DLL_SetWindowsHookExA
mov dword [0x43b001], 0x34b
mov dword [0x43b001], 0x34d
call fcn.00428076
mov dword [0x47e44c], eax
mov dword [0x43b001], 0x34e
call fcn.0042807e
mov dword [0x47e450], eax
mov dword [0x43b001], 0x34f
call fcn.0042808d
mov dword [0x47e454], eax
mov dword [0x43b001], 0x350
push dword [0x47e44c]
mov dword [0x43b001], 0x351
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x401e99
mov dword [0x43b001], 0x351
add esp, 4
jmp 0x4027e2
mov dword [0x43b001], 0x352
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x402594
mov dword [0x43b001], 0x353
push dword [0x47e450]
mov dword [0x43b001], 0x356
mov ebx, 0x89
cmp ebx, dword [esp]
jne 0x401ef8
mov dword [0x43b001], 0x356
push 0xffffffff
call fcn.0040d1e2
mov dword [0x43b001], 0x358
jmp 0x402589
mov dword [0x43b001], 0x358
mov ebx, 0x6e
cmp ebx, dword [esp]
jne 0x401f3b
mov dword [0x43b001], 0x358
push 0x6e
call fcn.00421eef
push eax
lea ebp, [0x47e460]
pop eax
mov word [ebp + 0x56], ax
mov dword [0x43b001], 0x359
jmp 0x402589
mov dword [0x43b001], 0x359
mov ebx, 0x71
cmp ebx, dword [esp]
jne 0x401f7e
mov dword [0x43b001], 0x359
push 0x71
call fcn.00421eef
push eax
lea ebp, [0x47e460]
pop eax
mov word [ebp + 0x54], ax
mov dword [0x43b001], 0x35a
jmp 0x402589
mov dword [0x43b001], 0x35a
mov ebx, 0x67
cmp ebx, dword [esp]
jne 0x401fb0
mov dword [0x43b001], 0x35a
call fcn.0040d4ed
mov dword [0x43b001], 0x35b
jmp 0x402589
mov dword [0x43b001], 0x35b
mov ebx, 0x69
cmp ebx, dword [esp]
jne 0x401fe7
mov dword [0x43b001], 0x35b
push 1
call fcn.0040c782
mov dword [0x43b001], 0x35c
jmp 0x402589
mov dword [0x43b001], 0x35c
mov ebx, 0x6a
cmp ebx, dword [esp]
jne 0x40201e
mov dword [0x43b001], 0x35c
push 0
call fcn.0040c782
mov dword [0x43b001], 0x35d
jmp 0x402589
mov dword [0x43b001], 0x35d
mov ebx, 0x68
cmp ebx, dword [esp]
jne 0x402050
mov dword [0x43b001], 0x35d
call fcn.0040d15c
mov dword [0x43b001], 0x35e
jmp 0x402589
mov dword [0x43b001], 0x35e
mov ebx, 0x6c
cmp ebx, dword [esp]
jne 0x402082
mov dword [0x43b001], 0x35e
call fcn.0040d6b0
mov dword [0x43b001], 0x35f
jmp 0x402589
mov dword [0x43b001], 0x35f
mov ebx, 0x77
cmp ebx, dword [esp]
jne 0x4020b4
mov dword [0x43b001], 0x35f
call fcn.0041985d
mov dword [0x43b001], 0x360
jmp 0x402589
mov dword [0x43b001], 0x360
mov ebx, 0x73
cmp ebx, dword [esp]
jne 0x4020e6
mov dword [0x43b001], 0x360
call fcn.0041ac29
mov dword [0x43b001], 0x361
jmp 0x402589
mov dword [0x43b001], 0x361
mov ebx, 0x88
cmp ebx, dword [esp]
jne 0x402118
mov dword [0x43b001], 0x361
call fcn.0041a3f7
mov dword [0x43b001], 0x362
jmp 0x402589
mov dword [0x43b001], 0x362
mov ebx, 0x92
cmp ebx, dword [esp]
jne 0x40214a
mov dword [0x43b001], 0x362
call fcn.004190d9
mov dword [0x43b001], 0x364
jmp 0x402589
mov dword [0x43b001], 0x364
mov ebx, 0x76
cmp ebx, dword [esp]
jne 0x40217c
mov dword [0x43b001], 0x364
call fcn.0040be1f
mov dword [0x43b001], 0x365
jmp 0x402589
mov dword [0x43b001], 0x365
mov ebx, 0x2c
cmp ebx, dword [esp]
jne 0x4021ae
mov dword [0x43b001], 0x365
call fcn.0040d3c4
mov dword [0x43b001], 0x366
jmp 0x402589
mov dword [0x43b001], 0x366
mov ebx, 0x75
cmp ebx, dword [esp]
jne 0x4021e0
mov dword [0x43b001], 0x366
call fcn.0040bc77
mov dword [0x43b001], 0x368
jmp 0x402589
mov dword [0x43b001], 0x368
mov ebx, 0x78
cmp ebx, dword [esp]
jne 0x402212
mov dword [0x43b001], 0x368
call fcn.004186a8
mov dword [0x43b001], 0x369
jmp 0x402589
mov dword [0x43b001], 0x369
mov ebx, 0x79
cmp ebx, dword [esp]
jne 0x402244
mov dword [0x43b001], 0x369
call fcn.0041897b
mov dword [0x43b001], 0x36a
jmp 0x402589
mov dword [0x43b001], 0x36a
mov ebx, 0x7a
cmp ebx, dword [esp]
jne 0x402276
mov dword [0x43b001], 0x36a
call fcn.00419331
mov dword [0x43b001], 0x36b
jmp 0x402589
mov dword [0x43b001], 0x36b
mov ebx, 0x7b
cmp ebx, dword [esp]
jne 0x4022a8
mov dword [0x43b001], 0x36b
call fcn.0041a12a
mov dword [0x43b001], 0x36c
jmp 0x402589
mov dword [0x43b001], 0x36c
mov ebx, 0x7c
cmp ebx, dword [esp]
jne 0x4022da
mov dword [0x43b001], 0x36c
call fcn.004195a3
mov dword [0x43b001], 0x36f
jmp 0x402589
mov dword [0x43b001], 0x36f
mov ebx, 0x7f
cmp ebx, dword [esp]
jne 0x40230c
mov dword [0x43b001], 0x36f
call fcn.0040c576
mov dword [0x43b001], 0x370
jmp 0x402589
mov dword [0x43b001], 0x370
mov ebx, 0x85
cmp ebx, dword [esp]
jne 0x40233e
mov dword [0x43b001], 0x370
call fcn.00419d11
mov dword [0x43b001], 0x371
jmp 0x402589
mov dword [0x43b001], 0x371
mov ebx, 0x84
cmp ebx, dword [esp]
jne 0x402370
mov dword [0x43b001], 0x371
call fcn.00419a04
mov dword [0x43b001], 0x372
jmp 0x402589
mov dword [0x43b001], 0x372
mov ebx, 0x82
cmp ebx, dword [esp]
jne 0x4023ae
mov dword [0x43b001], 0x372
push 1
lea eax, [fcn.00415d74]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x373
jmp 0x402589
mov dword [0x43b001], 0x373
mov ebx, 0x83
cmp ebx, dword [esp]
jne 0x4023ec
mov dword [0x43b001], 0x373
push 1
lea eax, [0x414c3f]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x374
jmp 0x402589
mov dword [0x43b001], 0x374
mov ebx, 0x86
cmp ebx, dword [esp]
jne 0x40241e
mov dword [0x43b001], 0x374
call fcn.0041adc0
mov dword [0x43b001], 0x375
jmp 0x402589
mov dword [0x43b001], 0x375
mov ebx, 0x90
cmp ebx, dword [esp]
jne 0x402450
mov dword [0x43b001], 0x375
call fcn.0041ae4a
mov dword [0x43b001], 0x376
jmp 0x402589
mov dword [0x43b001], 0x376
mov ebx, 0x91
cmp ebx, dword [esp]
jne 0x402482
mov dword [0x43b001], 0x376
call fcn.0041af34
mov dword [0x43b001], 0x378
jmp 0x402589
mov dword [0x43b001], 0x378
mov ebx, 0x94
cmp ebx, dword [esp]
jne 0x4024b9
mov dword [0x43b001], 0x378
push 0x93
call fcn.00421f1a
mov dword [0x43b001], 0x379
jmp 0x402589
mov dword [0x43b001], 0x379
mov ebx, 0x95
cmp ebx, dword [esp]
jne 0x4024f0
mov dword [0x43b001], 0x379
push 0x43c2e0
call fcn.0042080c
mov dword [0x43b001], 0x37c
jmp 0x402589
mov dword [0x43b001], 0x37c
mov ebx, 0x97
cmp ebx, dword [esp]
jne 0x402589
mov dword [0x43b001], 0x37d
push 0x97
call fcn.00421eef
and eax, eax
je 0x40255e
mov dword [0x43b001], 0x37e
lea ebp, [0x47e460]
mov dword [ebp + 0x7e], 1
mov dword [0x43b001], 0x37f
push 1
lea eax, [0x41d9cb]
push eax
call fcn.0041e2da
mov dword [0x43b001], 0x380
jmp 0x40257f
mov dword [0x43b001], 0x380
mov dword [0x43b001], 0x381
lea ebp, [0x47e460]
mov dword [ebp + 0x7e], 0
mov dword [0x43b001], 0x382
mov dword [0x43b001], 0x383
pop eax
mov dword [0x43b001], 0x385
pop eax
mov dword [0x43b001], 0x386
push dword [0x47e454]
mov dword [0x43b001], 0x387
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40261c
mov dword [0x43b001], 0x388
push dword [0x47e450]
mov dword [0x43b001], 0x389
mov ebx, 2
cmp ebx, dword [esp]
jg 0x402605
mov ebx, 0x24
cmp ebx, dword [esp]
jl 0x402605
mov dword [0x43b001], 0x389
mov ebx, dword [0x47e450]
dec ebx
push ebx
call fcn.0041a722
mov dword [0x43b001], 0x38a
pop eax
mov dword [0x43b001], 0x38b
jmp 0x402680
mov dword [0x43b001], 0x38b
mov ebx, 2
cmp ebx, dword [esp]
jne 0x402680
mov dword [0x43b001], 0x38c
push dword [0x47e450]
mov dword [0x43b001], 0x38d
mov ebx, 2
cmp ebx, dword [esp]
jg 0x402675
mov ebx, 0x24
cmp ebx, dword [esp]
jl 0x402675
mov dword [0x43b001], 0x38d
mov ebx, dword [0x47e450]
dec ebx
push ebx
call fcn.00418c39
mov dword [0x43b001], 0x38e
pop eax
mov dword [0x43b001], 0x38f
pop eax
mov dword [0x43b001], 0x390
push dword [0x47e440]
lea ebp, [0x47e460]
mov edx, dword [ebp + 0xd3]
pop ecx
call fcn.00435f90
jne 0x4027b5
mov dword [0x43b001], 0x391
mov edx, dword [0x47e45c]
call fcn.00435e80
push eax
call fcn.00435ea0
push 0x47e458
call fcn.00435f00
mov dword [0x43b001], 0x392
mov edx, dword [0x47e444]
call fcn.00435e80
push eax
call fcn.00435ea0
push 0x47e45c
call fcn.00435f00
mov dword [0x43b001], 0x393
mov edx, dword [0x47e440]
call fcn.00435e80
push eax
call fcn.00435ea0
push 0x47e444
call fcn.00435f00
mov dword [0x43b001], 0x394
lea ebp, [0x47e460]
mov edx, dword [ebp + 0xd3]
call fcn.00435e80
push eax
call fcn.00435ea0
push 0x47e440
call fcn.00435f00
mov dword [0x43b001], 0x395
push dword [0x47e440]
push 0x8c
call fcn.00421f3d
mov dword [0x43b001], 0x396
push dword [0x47e444]
push 0x8d
call fcn.00421f3d
mov dword [0x43b001], 0x397
push dword [0x47e45c]
push 0x8e
call fcn.00421f3d
mov dword [0x43b001], 0x398
push dword [0x47e458]
push 0x8f
call fcn.00421f3d
mov dword [0x43b001], 0x399
mov dword [0x43b001], 0x39a
push 1
call fcn.004213ee
mov dword [0x43b001], 0x39b
jmp 0x401e0e
mov dword [0x43b001], 0x39c
push 1
call fcn.00415d74
mov dword [0x43b001], 0x39d
call fcn.004176c7
mov dword [0x43b001], 0x39e
call fcn.00435e80
push eax
push eax
mov edx, 0x43bd25
call fcn.00435ea0
call fcn.00435e80
push eax
push eax
call sub.KERNEL32.dll_GetTickCount
mov ebx, eax
lea ebp, [0x47e460]
sub ebx, dword [ebp + 0x7a]
mov eax, ebx
mov ecx, 0x3e8
cdq
idiv ecx
mov ebx, eax
push ebx
push str.__hh:_ii:_ss_
call fcn.00433608
pop eax
call fcn.00435fd2
add dword [esp], edx
call fcn.004181a0
call fcn.00435ff0
mov dword [0x43b001], 0x39f
push str.______________
call fcn.004181a0
mov dword [0x43b001], 0x3a0
push 0
call 0x40289e
call fcn.00435e60
push dword [0x47e414]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0041e298
call fcn.0041f377
call fcn.00420a90
call fcn.00421d0d
call fcn.00421ed5
call fcn.00427c3c
call fcn.004295a5
call fcn.0042a04f
call fcn.00431916
call fcn.004322e0
call fcn.004216c0
ret