Function at 0x439d20
Capabilities:
Query environment variable

Disassembly:
mov edx, dword [ecx + 8]
sub edx, dword [ecx + 4]
xor eax, eax
sar edx, 3
imul edx, edx, 0xaaaaaaab
test edx, edx
jne 0x439d40
repz ret
push ebp
mov eax, 0x613c
mov ebp, esp
push edi
push esi
push ebx
call fcn.005d4d10
sub esp, eax
lea eax, [ebp - 0x60d0]
mov dword [ebp - 0x60fc], ecx
mov dword [esp], 0x83b1c0
mov dword [0x8531c0], 0x80009812
mov dword [0x8531e4], 0
mov dword [ebp - 0x60d8], eax
call fcn.005e72a0
lea ebx, [eax + eax]
mov edx, ebx
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2018], edx
ja 0x439f7c
cmp edx, 1
mov eax, dword [ebp - 0x60d8]
je 0x439eec
test edx, edx
jne 0x439fad
xor ecx, ecx
mov dword [ebp - 0x60d4], edx
mov word [eax + edx*2], cx
mov dword [0x83718c], 0
call fcn.00445060
mov dword [0x8575d0], eax
mov eax, dword [0x70ec60]
lea edi, [ebp - 0x6018]
mov ecx, 0x800
lea esi, [ebp - 0x6018]
mov ebx, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x6110], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esp + 8], 0x1000
mov dword [esp + 4], esi
mov dword [esp], 0x7241b8
call ebx
sub esp, 0xc
mov dword [esp + 4], 0x7241d0
mov dword [esp], esi
call fcn.005e72d8
lea eax, [ebp - 0x4018]
mov dword [esp + 8], 0x1000
mov dword [esp], 0x7241dc
mov dword [esp + 4], eax
call ebx
lea eax, [ebp - 0x4018]
sub esp, 0xc
mov dword [esp], eax
call fcn.005e72a0
test eax, eax
je 0x439fd2
lea eax, [ebp - 0x4018]
mov dword [esp + 8], 0x1000
mov dword [esp], 0x7241dc
mov dword [esp + 4], eax
call ebx
lea eax, [ebp - 0x4018]
sub esp, 0xc
mov dword [esp + 4], 0x7241e6
mov dword [esp], 0x8330e0
mov dword [esp + 8], eax
mov eax, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [ebp - 0x6120], eax
call eax
mov eax, dword [ebp - 0x60fc]
mov esi, dword [eax + 4]
cmp esi, dword [eax + 8]
je 0x439f4a
lea eax, [ebp - 0x60b8]
mov dword [ebp - 0x60c0], eax
mov eax, dword [esi + 4]
mov edi, dword [esi]
lea ebx, [eax + eax]
mov eax, edi
add eax, ebx
setne dl
test edi, edi
sete al
and dl, al
mov byte [ebp - 0x6111], dl
je 0x439fe9
mov esi, esi
lea edi, [edi]
mov dword [esp], 0x72407c
call fcn.006dfd70
movzx ecx, word [0x83b1c0]
mov word [eax], cx
jmp 0x439db1
mov dword [esp + 4], 0x7249c4
mov dword [esp], 0x835180
call fcn.0041e920
mov eax, dword [ebp - 0x60a8]
lea esi, [ebp - 0x60a0]
cmp eax, esi
je 0x439f27
mov dword [esp], eax
call fcn.006eb330
lea ecx, [ebp - 0x60e4]
lea esi, [ebp - 0x60b8]
call fcn.006b80a0
mov eax, dword [ebp - 0x60c0]
cmp eax, esi
je 0x439f4a
mov dword [esp], eax
call fcn.006eb330
mov edx, dword [ebp - 0x60d8]
lea esi, [ebp - 0x60d0]
mov eax, 1
cmp edx, esi
je 0x439f74
mov dword [esp], edx
mov byte [ebp - 0x60fc], al
call fcn.006eb330
movzx eax, byte [ebp - 0x60fc]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x2018]
lea ecx, [ebp - 0x60d8]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x2018]
sub esp, 8
mov dword [ebp - 0x60d8], eax
mov dword [ebp - 0x60d0], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x83b1c0
mov dword [esp], eax
call fcn.005e73f8
mov edx, dword [ebp - 0x2018]
mov eax, dword [ebp - 0x60d8]
jmp 0x439db1
lea eax, [ebp - 0x4018]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.005e72b8
jmp 0x439e53
mov dword [ebp - 0x6104], 0
mov edx, ebx
sar edx, 1
cmp edx, 7
mov eax, edx
mov dword [ebp - 0x60a8], edx
ja 0x43a390
cmp eax, 1
je 0x43a3e2
test edx, edx
lea ecx, [ebp - 0x60b8]
jne 0x43a4c8
xor edx, edx
mov dword [ebp - 0x60bc], eax
mov word [ecx + eax*2], dx
lea eax, [ebp - 0x60c0]
mov dword [esp + 8], 0x20
mov dword [esp + 4], eax
lea eax, [ebp - 0x60e4]
mov dword [esp], eax
call fcn.00404750
lea eax, [ebp - 0x60a0]
lea ecx, [ebp - 0x60c0]
mov dword [esp + 4], 0
mov dword [esp], 0x20
mov dword [ebp - 0x60a4], 0
mov dword [ebp - 0x60a8], eax
xor eax, eax
mov word [ebp - 0x60a0], ax
call fcn.0064af60
sub esp, 8
cmp eax, 0xffffffff
je 0x43a18f
mov ebx, dword [ebp - 0x60bc]
add eax, 1
cmp eax, ebx
ja 0x43aa2c
mov edx, dword [ebp - 0x60c0]
sub ebx, eax
lea edi, [ebp - 0x6088]
add ebx, ebx
mov dword [ebp - 0x6090], edi
lea ecx, [edx + eax*2]
mov eax, ecx
mov dword [ebp - 0x6100], ecx
add eax, ebx
je 0x43a0d6
test ecx, ecx
jne 0x43a0d6
mov dword [esp], 0x72407c
call fcn.006dfd70
mov eax, ebx
sar eax, 1
cmp eax, 7
mov dword [ebp - 0x60ec], eax
ja 0x43a410
cmp eax, 1
je 0x43a450
test eax, eax
je 0x43a4b2
mov eax, edi
mov ecx, dword [ebp - 0x6100]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005e73f8
mov ecx, dword [ebp - 0x6090]
mov edx, dword [ebp - 0x60ec]
xor eax, eax
cmp ecx, edi
mov dword [ebp - 0x608c], edx
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 0x60a8]
je 0x43a473
lea ebx, [ebp - 0x60a0]
cmp eax, ebx
je 0x43a495
mov dword [ebp - 0x60a4], edx
mov edx, dword [ebp - 0x6088]
test eax, eax
mov ebx, dword [ebp - 0x60a0]
mov dword [ebp - 0x60a8], ecx
mov dword [ebp - 0x60a0], edx
je 0x43a18f
mov dword [ebp - 0x6090], eax
mov dword [ebp - 0x6088], ebx
xor ebx, ebx
cmp eax, edi
mov dword [ebp - 0x608c], 0
mov word [eax], bx
je 0x43a18f
mov dword [esp], eax
call fcn.006eb330
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
test eax, eax
jne 0x43a260
mov eax, dword [ebp - 0x60a8]
lea ecx, [ebp - 0x60a0]
cmp eax, ecx
je 0x43a1c6
mov dword [esp], eax
call fcn.006eb330
mov ebx, dword [ebp - 0x60e0]
mov edi, dword [ebp - 0x60e4]
cmp ebx, edi
je 0x43a1fe
lea esi, [esi]
lea edi, [edi]
mov eax, dword [edi]
lea edx, [edi + 8]
cmp eax, edx
je 0x43a1f1
mov dword [esp], eax
call fcn.006eb330
add edi, 0x18
cmp ebx, edi
jne 0x43a1e0
mov edi, dword [ebp - 0x60e4]
test edi, edi
je 0x43a20a
mov dword [esp], edi
call fcn.006eb330
mov eax, dword [ebp - 0x60c0]
lea ecx, [ebp - 0x60b8]
cmp eax, ecx
je 0x43a222
mov dword [esp], eax
call fcn.006eb330
mov ecx, dword [ebp - 0x60fc]
lea eax, [esi + 0x18]
cmp dword [ecx + 8], eax
je 0x439f4a
mov ebx, dword [esi + 0x1c]
mov edi, dword [esi + 0x18]
lea ecx, [ebp - 0x60b8]
mov dword [ebp - 0x60c0], ecx
add ebx, ebx
mov esi, edi
add esi, ebx
je 0x43a256
test edi, edi
je 0x439ee0
mov esi, eax
jmp 0x439ff3
mov eax, dword [edx]
mov dword [esp + 4], 0x72420b
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724218
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43a4cf
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43a400
mov dword [esp + 4], 0x724222
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
mov ebx, eax
mov eax, dword [ebp - 0x60e4]
sub esp, 8
mov eax, dword [eax + 0x18]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
test ebx, ebx
je 0x43a400
mov eax, dword [0x8531c0]
or eax, 1
mov dword [0x8531c0], eax
mov ecx, 0x8532e0
imul eax, dword [0x70c364], 0x874
mov eax, dword [eax + 0x854c10]
mov dword [esp], eax
call fcn.00433910
imul eax, dword [0x70c364], 0x874
sub esp, 4
mov ecx, 0x8532f4
mov eax, dword [eax + 0x854c10]
mov dword [esp], eax
call fcn.00433910
imul ecx, dword [0x70c364], 0x874
sub esp, 4
add ecx, 0x8543a0
call fcn.00438730
mov dword [esp], 0xf
call fcn.00423cd0
mov dword [esp], 0x8543a0
call fcn.00438ee0
sub esp, 4
mov dword [ebp - 0x6104], eax
and dword [0x8531c0], 0xfffffffe
jmp 0x43a1ae
lea eax, [ebp - 0x60a8]
lea ecx, [ebp - 0x60c0]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x60a8]
sub esp, 8
mov dword [ebp - 0x60c0], eax
mov dword [ebp - 0x60b8], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.005e73f8
mov eax, dword [ebp - 0x60a8]
mov ecx, dword [ebp - 0x60c0]
jmp 0x43a01f
movzx edx, word [edi]
lea ecx, [ebp - 0x60b8]
mov word [ebp - 0x60b8], dx
jmp 0x43a01f
mov eax, dword [0x8531c0]
and eax, 0xfffffffe
jmp 0x43a306
lea eax, [ebp - 0x60ec]
lea ecx, [ebp - 0x6090]
mov dword [esp + 4], 0
mov dword [esp], eax
call int.006c1e40
mov edx, dword [ebp - 0x60ec]
sub esp, 8
mov dword [ebp - 0x6090], eax
mov dword [ebp - 0x6088], edx
jmp 0x43a0fc
mov eax, dword [ebp - 0x6100]
movzx eax, word [eax]
mov dword [ebp - 0x608c], 1
mov word [ebp - 0x6088], ax
xor eax, eax
mov word [ebp - 0x6086], ax
lea eax, [ebp - 0x6090]
lea ecx, [ebp - 0x60a8]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x6090]
sub esp, 4
jmp 0x43a174
mov eax, dword [ebp - 0x6088]
mov dword [ebp - 0x60a8], ecx
mov dword [ebp - 0x60a4], edx
mov dword [ebp - 0x60a0], eax
jmp 0x43a18f
xor eax, eax
mov dword [ebp - 0x608c], 0
mov word [ebp + ebx - 0x6088], ax
jmp 0x43a473
mov eax, ecx
jmp 0x43a3c1
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724240
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__wcsicmp]
mov dword [ebp - 0x6108], eax
call eax
test eax, eax
jne 0x43a5bc
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43a8d7
mov ebx, dword [edx + 0x18]
mov edi, dword [sym.imp.msvcrt.dll__errno]
call edi
mov eax, dword [eax]
mov dword [ebp - 0x6100], eax
call edi
mov dword [eax], 0
lea eax, [ebp - 0x60e8]
mov dword [esp + 8], 0xa
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.005e7278
cmp ebx, dword [ebp - 0x60e8]
mov dword [ebp - 0x6108], eax
je 0x43aa4f
call edi
cmp dword [eax], 0x22
je 0x43a8cb
call edi
mov edx, dword [eax]
test edx, edx
jne 0x43a57b
call edi
mov ecx, dword [ebp - 0x6100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6108]
mov dword [esp + 4], 0x724261
mov dword [esp], 0x835180
mov dword [esp + 8], eax
mov dword [0x70ec64], eax
call fcn.0041f130
mov ecx, dword [0x8575d0]
test ecx, ecx
je 0x43a5ad
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00445060
mov dword [0x8575d0], eax
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72429a
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43aa5b
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
mov dword [ebp - 0x2018], 0
mov dword [ebp - 0x2014], 0
mov dword [ebp - 0x2010], 0
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43a902
mov ebx, 1
mov dword [ebp - 0x6104], 0
jmp 0x43a659
or dword [ebp - 0x6104], 2
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
add ebx, 1
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, ebx
jbe 0x43a74d
lea edi, [ebx + ebx*2]
mov dword [esp + 4], 0x7242a8
lea eax, [edi*8]
mov dword [ebp - 0x610c], eax
mov eax, dword [edx + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
je 0x43a630
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7242b8
mov eax, dword [eax + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43a6cd
or dword [ebp - 0x6104], 4
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7242c4
mov eax, dword [eax + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43a70b
or dword [ebp - 0x6104], 8
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7242d4
mov eax, dword [eax + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43a931
or dword [ebp - 0x6104], 0x10
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov eax, dword [ebp - 0x2014]
sub eax, dword [ebp - 0x2018]
mov edx, dword [ebp - 0x6104]
sar eax, 3
imul eax, eax, 0xaaaaaaab
test edx, edx
je 0x43a8fa
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x6104]
mov dword [esp + 4], 0x724a48
mov dword [esp], 0x835180
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
call fcn.0041eed0
mov ecx, dword [str.HMS]
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0
mov dword [esp], 0x7e
mov dword [ebp - 0x6100], eax
call fcn.0042dad0
mov ecx, dword [str.HMS]
sub esp, 8
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0
mov dword [esp], 0xd
mov dword [ebp - 0x6100], eax
call fcn.0042efe0
mov ecx, dword [str.HMS]
lea eax, [ebp - 0x2018]
sub esp, 8
mov dword [ebp - 0x6100], eax
call fcn.0042fc30
lea ecx, [ebp - 0x2018]
mov eax, dword [ebp - 0x6104]
mov dword [ebp - 0x6100], ecx
mov dword [esp + 4], ecx
mov ecx, dword [str.HMS]
mov dword [esp], eax
mov dword [0x8531e4], eax
call fcn.0042dad0
mov ecx, dword [str.HMS]
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0xd
call fcn.0042efe0
mov ecx, dword [str.HMS]
sub esp, 8
call fcn.0042fd50
mov ecx, dword [str.HMS]
call fcn.0042eee0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x7242fa
mov dword [esp], 0x835180
call fcn.0041eed0
mov dword [ebp - 0x6104], 0
mov ebx, dword [ebp - 0x2014]
mov edi, dword [ebp - 0x2018]
cmp ebx, edi
je 0x43a8b6
mov eax, dword [edi]
lea edx, [edi + 8]
cmp eax, edx
je 0x43a8a9
mov dword [esp], eax
call fcn.006eb330
add edi, 0x18
cmp ebx, edi
jne 0x43a898
mov edi, dword [ebp - 0x2018]
test edi, edi
je 0x43a1ae
mov dword [esp], edi
call fcn.006eb330
jmp 0x43a1ae
mov dword [esp], 0x72425c
call fcn.006e00d0
mov dword [esp + 4], 0x724270
mov dword [esp], 0x835180
call fcn.0041e920
mov dword [ebp - 0x6104], 1
jmp 0x43a1ae
test eax, eax
jne 0x43a770
lea eax, [ebp - 0x2018]
mov dword [esp + 4], 0x724a58
mov dword [esp], 0x835180
mov dword [ebp - 0x6100], eax
call fcn.0041e920
mov dword [ebp - 0x6104], 1
jmp 0x43a888
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7242e0
mov eax, dword [eax + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43a9ea
or dword [ebp - 0x6104], 0x20
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov eax, dword [ebp - 0x60d8]
lea esi, [ebp - 0x60d0]
cmp eax, esi
je 0x43a98d
mov dword [esp], eax
call fcn.006eb330
mov dword [esp], ebx
call fcn.005d7530
mov ebx, eax
mov eax, dword [ebp - 0x60a8]
lea esi, [ebp - 0x60a0]
cmp eax, esi
je 0x43a9af
mov dword [esp], eax
call fcn.006eb330
lea ecx, [ebp - 0x60e4]
call fcn.006b80a0
mov eax, dword [ebp - 0x60c0]
lea esi, [ebp - 0x60b8]
cmp eax, esi
je 0x43a975
mov dword [esp], eax
call fcn.006eb330
jmp 0x43a975
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], str.4jr_rp
mov eax, dword [eax + edi*8]
mov dword [esp], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43aab2
or dword [ebp - 0x6104], 0x40
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x7241f6
mov dword [esp], 0x724100
call fcn.006e1100
mov ebx, eax
jmp 0x43a9ba
mov dword [esp], 0x72425c
call fcn.006e10b0
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724310
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43ab36
mov ecx, dword [0x8575d0]
mov ebx, dword [ebp - 0x6110]
mov eax, dword [ecx]
mov dword [esp], ebx
call dword [eax + 0x50]
sub esp, 4
mov dword [ebp - 0x6104], eax
jmp 0x43a1ae
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x610c]
mov ecx, dword [ebp - 0x2014]
add eax, edx
cmp ecx, dword [ebp - 0x2010]
je 0x43ab14
test ecx, ecx
je 0x43ab06
lea edx, [ecx + 8]
mov dword [ecx], edx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], edx
lea eax, [edx + eax*2]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
call fcn.00439290
mov ecx, dword [ebp - 0x2014]
mov edx, dword [ebp - 0x60e4]
sub esp, 8
add ecx, 0x18
mov dword [ebp - 0x2014], ecx
jmp 0x43a63d
lea ecx, [ebp - 0x2018]
mov dword [esp], eax
mov dword [ebp - 0x6100], ecx
call fcn.006b7e00
sub esp, 4
mov edx, dword [ebp - 0x60e4]
jmp 0x43a63d
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72432a
mov ebx, dword [ebp - 0x6108]
mov eax, dword [eax]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x43abbf
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43adaa
mov dword [esp + 4], 0x724332
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x43ad5c
mov ecx, dword [0x8575d0]
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
mov dword [ebp - 0x6104], eax
jne 0x43ac4c
mov dword [esp + 4], 0x72433c
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72450c
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43ac65
mov ecx, dword [0x8575d0]
mov eax, dword [ecx]
call dword [eax + 0x68]
mov dword [ebp - 0x6104], eax
mov eax, dword [0x8554a0]
mov dword [esp + 4], 0x72451c
mov dword [esp], 0x835180
mov edx, eax
mov ebx, eax
mov dword [esp + 8], eax
shr edx, 0x1e
sar ebx, 0x10
movzx edi, ax
mov ecx, edx
movzx ebx, bl
and ecx, 1
mov byte [ebp - 0x6111], cl
call fcn.0041f130
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0x724538
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov dword [esp + 4], 0x724361
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724562
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43b04a
mov ecx, 0x835180
and dword [0x8531c0], 0xffffefff
call fcn.0041e770
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b014
mov eax, dword [edx + 0x18]
mov dword [esp + 4], 0x724574
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov dword [esp], eax
mov eax, dword [ebp - 0x6120]
call eax
mov eax, dword [ebp - 0x6100]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov ecx, dword [ebp - 0x6100]
mov dword [esp], ecx
mov ecx, eax
call fcn.0040b0c0
sub esp, 4
mov dword [ebp - 0x6104], eax
test eax, eax
mov edx, 0x724188
mov eax, 0x724196
mov dword [esp + 4], 0x724598
cmovne eax, edx
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041eed0
or dword [0x8531c0], 0x1000
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72437e
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43addc
mov ecx, dword [0x8575d0]
mov eax, dword [ecx]
call dword [eax + 0x58]
test eax, eax
mov dword [ebp - 0x6104], eax
jne 0x43adc3
mov dword [esp + 4], 0x724390
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov dword [esp + 4], 0x7244ec
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], 0x7243b1
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7243ca
mov ebx, dword [ebp - 0x6108]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x43afbe
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 2
jbe 0x43afa5
mov dword [esp + 4], 0x7243e2
mov eax, dword [edx + 0x30]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x43af07
mov eax, dword [ebp - 0x60e4]
mov eax, dword [eax + 0x30]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [0x8575d0]
mov edx, dword [ebp - 0x60e4]
lea edi, [ebp - 0x6078]
lea ebx, [ebp - 0x6070]
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6078], ebx
mov eax, dword [eax + 0x5c]
mov dword [ebp - 0x6100], eax
mov eax, dword [edx + 0x30]
mov edx, dword [edx + 0x34]
mov dword [esp], eax
lea edx, [eax + edx*2]
mov dword [esp + 4], edx
call fcn.00439290
sub esp, 8
mov ecx, dword [0x8575d0]
mov dword [esp], edi
call dword [ebp - 0x6100]
mov dword [ebp - 0x6104], eax
mov eax, dword [ebp - 0x6078]
sub esp, 4
cmp eax, ebx
je 0x43aec5
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x6104]
test eax, eax
jne 0x43af8c
mov dword [esp + 4], 0x72440c
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7242a8
mov eax, dword [eax + 0x30]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
je 0x43ae38
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7243ea
mov eax, dword [eax + 0x30]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
je 0x43ae38
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7243fa
mov eax, dword [eax + 0x30]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
je 0x43ae38
mov dword [esp + 4], 0x724a7c
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], str.XE6i_
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov dword [esp + 4], 0x724450
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72447c
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43b106
mov ecx, dword [0x8575d0]
mov eax, dword [ecx]
call dword [eax + 0x60]
test eax, eax
mov dword [ebp - 0x6104], eax
jne 0x43b0ed
mov dword [esp + 4], 0x724494
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60d8]
mov dword [esp + 0xc], 0x835180
mov dword [esp + 4], 0x72457a
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x6100], eax
mov dword [esp], eax
mov eax, dword [ebp - 0x6120]
call eax
jmp 0x43ace2
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7245a6
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43b151
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b138
mov eax, dword [edx + 0x18]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60e4]
mov ecx, 0x8554b8
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call fcn.0043f310
sub esp, 4
test al, al
je 0x43b11f
mov eax, dword [ebp - 0x60e4]
mov eax, dword [eax + 0x18]
mov dword [esp], 0x8491c0
mov dword [esp + 4], eax
call fcn.005e72b8
mov dword [0x8531c4], 1
jmp 0x43a1ae
mov dword [esp + 4], 0x7244b8
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a1ae
mov dword [esp + 4], 0x7244cc
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], 0x7245c0
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], 0x7245e8
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724610
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43b17f
mov dword [0x8531c4], 0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72462e
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b336
lea eax, [ebp - 0x2018]
mov dword [esp], 0x724648
mov ecx, eax
mov dword [ebp - 0x6100], eax
call fcn.006ec740
mov eax, dword [ebp - 0x60e0]
sub eax, dword [ebp - 0x60e4]
sub esp, 4
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b262
mov ecx, dword [ebp - 0x6100]
mov dword [esp], 0x724138
call fcn.006c0b10
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub esp, 4
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
je 0x43b262
mov ebx, 0x18
mov edi, 1
mov eax, dword [edx + ebx]
mov ecx, dword [ebp - 0x6100]
mov dword [esp], eax
call fcn.006c0900
mov ecx, dword [ebp - 0x6100]
sub esp, 4
mov dword [esp], 0x724678
call fcn.006c0900
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
add edi, 1
sub esp, 4
add ebx, 0x18
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp edi, eax
jne 0x43b218
mov eax, dword [ebp - 0x2018]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x2018]
mov edx, dword [ebp - 0x2014]
lea edi, [ebp - 0x6060]
lea ebx, [ebp - 0x6058]
mov ecx, edi
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [ebp - 0x6060], ebx
mov dword [esp + 4], edx
call fcn.00439290
sub esp, 8
mov ecx, 0x8554b8
mov dword [esp], edi
call fcn.00441a50
xor eax, 1
sub esp, 4
mov edi, eax
movzx eax, al
mov dword [ebp - 0x6104], eax
mov eax, dword [ebp - 0x6060]
cmp eax, ebx
je 0x43b2e2
mov dword [esp], eax
call fcn.006eb330
mov eax, edi
mov edx, 0x724188
mov dword [esp + 4], 0x72467c
test al, al
mov eax, 0x724196
mov dword [esp], 0x835180
cmovne eax, edx
mov edx, dword [ebp - 0x2018]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.0041eed0
mov eax, dword [ebp - 0x2018]
lea ebx, [ebp - 0x2010]
cmp eax, ebx
je 0x43a1ae
mov dword [esp], eax
call fcn.006eb330
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724694
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b44a
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b431
mov eax, dword [edx + 0x18]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60e4]
mov eax, dword [eax + 0x18]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2018]
mov dword [esp], eax
mov ebx, eax
call fcn.005e72b8
mov eax, dword [str.HMS]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov dword [esp], ebx
call dword [eax + 0x14]
sub esp, 4
mov dword [ebp - 0x6104], eax
test eax, eax
mov edx, 0x724188
mov eax, 0x724196
mov dword [esp + 4], 0x7246b4
cmovne eax, edx
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041eed0
jmp 0x43a1ae
mov ebx, eax
mov eax, dword [ebp - 0x2018]
lea edx, [ebp - 0x2010]
cmp eax, edx
je 0x43a997
mov dword [esp], eax
call fcn.006eb330
jmp 0x43a997
mov dword [esp + 4], 0x7246cc
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7246f8
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b4b1
mov eax, dword [ebp - 0x60a4]
test eax, eax
je 0x43b523
lea eax, [ebp - 0x60a8]
lea ecx, [ebp - 0x60d8]
mov dword [esp], eax
call fcn.006c1d80
mov eax, dword [ebp - 0x60a8]
sub esp, 4
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72472a
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b555
mov eax, dword [ebp - 0x60a4]
test eax, eax
je 0x43b53c
mov eax, dword [ebp - 0x60a8]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60a8]
mov dword [esp], 0x83d1c0
mov dword [esp + 4], eax
call fcn.005e72b8
mov dword [esp], 9
call fcn.00423cd0
jmp 0x43a1ae
mov dword [esp + 4], 0x724708
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], 0x724738
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72475a
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b5c7
mov edi, dword [ebp - 0x60a4]
test edi, edi
je 0x43b629
mov eax, dword [ebp - 0x60a8]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60a8]
mov dword [esp], 0x8431c0
mov dword [esp + 4], eax
call fcn.005e72b8
mov dword [esp], 9
call fcn.00423cd0
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724790
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b65b
mov ebx, dword [ebp - 0x60a4]
test ebx, ebx
je 0x43b642
mov eax, dword [ebp - 0x60a8]
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov eax, dword [ebp - 0x60a8]
mov dword [esp], 0x8330e0
mov dword [esp + 4], eax
call fcn.005e72b8
jmp 0x43a1ae
mov dword [esp + 4], 0x72476c
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov dword [esp + 4], 0x7247a8
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7247ce
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b6e8
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b783
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0
mov eax, dword [edx + 0x18]
mov dword [esp + 4], 0x72425c
mov dword [esp], fcn.005e7278
mov dword [esp + 8], eax
call fcn.00639770
mov dword [esp + 8], eax
mov dword [esp + 4], 0x724261
mov dword [esp], 0x835180
mov dword [ebp - 0x6110], eax
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724810
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43b7eb
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b7e1
mov dword [esp + 4], 0x7241aa
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b79c
mov eax, dword [0x8531c0]
or eax, 0x40000
mov dword [0x8531c0], eax
test eax, 0x40000
mov edx, 0x7241aa
mov eax, 0x7241b0
cmovne eax, edx
mov dword [esp + 4], 0x724854
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
jmp 0x43a1ae
mov dword [esp + 4], 0x7247e8
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7241b0
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b7cd
mov eax, dword [0x8531c0]
and eax, 0xfffbffff
mov dword [0x8531c0], eax
jmp 0x43b754
mov dword [esp + 4], 0x72482c
mov dword [esp], 0x835180
call fcn.0041e920
mov eax, dword [0x8531c0]
jmp 0x43b754
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72486c
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b843
mov ebx, dword [0x83718c]
mov dword [esp + 4], 0x724876
mov dword [esp], 0x835180
mov eax, ebx
or ah, 1
mov dword [0x83718c], eax
mov eax, dword [ebp - 0x60c0]
mov dword [esp + 8], eax
call fcn.0041eed0
mov dword [0x83718c], ebx
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x72487a
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b8d8
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
mov ebx, dword [0x83718c]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b8ab
mov dword [esp + 4], 0x7241aa
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bc03
or bh, 0x10
mov dword [0x83718c], ebx
and bh, 0x10
mov edx, 0x7241aa
mov eax, 0x7241b0
cmovne eax, edx
mov dword [esp + 4], 0x724886
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724894
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b99a
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43b969
mov dword [esp + 4], 0x7241aa
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bc2e
mov eax, dword [ebp - 0x60d8]
and dword [0x8531c0], 0xfffff7ff
mov dword [esp + 4], eax
lea eax, [ebp - 0x2018]
mov ebx, eax
mov dword [esp], eax
call fcn.005e72b8
mov dword [esp], ebx
mov ecx, 0x835180
call fcn.0041e9b0
sub esp, 4
test byte [0x8531c1], 8
mov edx, 0x7241b0
mov eax, 0x7241aa
mov dword [esp + 4], 0x7248a4
mov dword [esp], 0x835180
cmovne eax, edx
mov dword [esp + 8], eax
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7248b4
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bb73
mov eax, dword [ebp - 0x60e0]
sub eax, dword [ebp - 0x60e4]
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43bb5a
lea eax, [ebp - 0x2018]
mov dword [esp], 0x7248bc
mov ecx, eax
mov dword [ebp - 0x6100], eax
call fcn.006ec740
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub esp, 4
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
je 0x43baed
lea eax, [ebp - 0x6040]
mov ebx, 0x18
mov edi, 1
mov dword [ebp - 0x6108], eax
mov eax, dword [ebp - 0x6108]
add edx, ebx
lea ecx, [ebp - 0x6048]
mov dword [ebp - 0x6048], eax
mov eax, dword [edx]
mov edx, dword [edx + 4]
mov dword [esp], eax
lea edx, [eax + edx*2]
mov dword [esp + 4], edx
call fcn.00439290
sub esp, 8
mov dword [esp], 0x724678
call fcn.005e72a0
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x6044]
cmp eax, edx
ja 0x43bb49
lea ecx, [ebp - 0x6048]
mov dword [esp + 4], eax
mov dword [esp], 0x724678
call fcn.006c1ce0
mov eax, dword [ebp - 0x6044]
sub esp, 8
mov ecx, dword [ebp - 0x6100]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x6048]
mov dword [esp], eax
call fcn.006c1ce0
sub esp, 8
mov eax, dword [ebp - 0x6048]
cmp eax, dword [ebp - 0x6108]
je 0x43bac8
mov dword [esp], eax
call fcn.006eb330
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
add edi, 1
add ebx, 0x18
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp edi, eax
jne 0x43ba2e
mov eax, dword [ebp - 0x2018]
mov dword [esp + 0xc], 1
mov ecx, 0x8554b8
mov dword [esp + 8], 1
mov dword [esp], 0x7248b4
mov dword [esp + 4], eax
call fcn.00440110
sub esp, 0x10
mov dword [ebp - 0x6104], eax
jmp 0x43b315
mov dword [esp], 0x724156
call fcn.006e0080
jmp 0x43b3f6
mov dword [esp + 4], str.A17z_
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a8eb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7248e8
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bc75
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43bc6b
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0
mov eax, dword [edx + 0x18]
mov dword [esp + 4], 0x72425c
mov dword [esp], fcn.005e7278
mov dword [esp + 8], eax
call fcn.00639770
mov dword [0x83718c], eax
mov dword [esp + 8], eax
mov dword [esp + 4], 0x7248f8
mov dword [esp], 0x835180
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7241b0
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
mov edx, ebx
sub esp, 8
and dh, 0xef
test eax, eax
cmovne ebx, edx
jmp 0x43b8a5
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7241b0
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43b969
mov ecx, 0x835180
or dword [0x8531c0], 0x800
call fcn.0041e8d0
jmp 0x43b969
mov eax, dword [0x83718c]
jmp 0x43bbe6
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724908
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bce1
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
ja 0x43bd11
mov eax, dword [0x8531c0]
test al, 0x40
mov edx, 0x7241b0
mov eax, 0x7241aa
cmovne eax, edx
mov dword [esp + 4], 0x724924
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724934
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bd41
mov dword [esp], 0x724940
call fcn.005e7318
jmp 0x43a1ae
mov dword [esp + 4], 0x7241aa
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43bdd3
mov eax, dword [0x8531c0]
and eax, 0xffffffbf
mov dword [0x8531c0], eax
jmp 0x43bcb5
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724946
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43be39
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
ja 0x43be09
lea eax, [ebp - 0x4018]
mov dword [esp + 4], 0x724954
mov dword [esp], eax
call fcn.005e72b8
lea eax, [ebp - 0x4018]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], 0x7248b4
mov ecx, 0x8554b8
mov dword [esp + 4], eax
call fcn.00440110
sub esp, 0x10
mov dword [ebp - 0x6104], eax
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7241b0
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
mov eax, dword [0x8531c0]
je 0x43bcb5
or eax, 0x40
mov dword [0x8531c0], eax
jmp 0x43bcb5
mov dword [esp + 4], 0x724986
mov eax, dword [edx + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43bd84
cmp byte [ebp - 0x6111], 0
je 0x43a1ae
jmp 0x43bd84
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x724998
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43c090
lea eax, [ebp - 0x6040]
mov edx, dword [ebp - 0x60e4]
xor ecx, ecx
mov dword [ebp - 0x6044], 0
mov word [ebp - 0x6040], cx
mov dword [ebp - 0x6108], eax
mov dword [ebp - 0x6048], eax
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
je 0x43c083
lea ebx, [ebp - 0x6030]
lea edi, [ebp - 0x6028]
mov dword [ebp - 0x611c], 0x18
mov dword [ebp - 0x6100], 1
add edx, dword [ebp - 0x611c]
mov dword [esp], 0x724678
mov dword [ebp - 0x610c], edx
call fcn.005e72a0
xor edx, edx
mov dword [ebp - 0x602c], 0
mov dword [ebp - 0x6118], eax
mov word [ebp - 0x6028], dx
mov edx, dword [ebp - 0x610c]
mov ecx, ebx
mov dword [ebp - 0x6030], edi
add eax, dword [edx + 4]
mov dword [esp], eax
call fcn.006c1b30
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x602c]
sub esp, 4
cmp dword [ebp - 0x6118], edx
ja 0x43c075
mov eax, dword [ebp - 0x6118]
mov dword [esp], 0x724678
mov ecx, ebx
mov dword [esp + 4], eax
call fcn.006c1ce0
mov ecx, dword [ebp - 0x610c]
sub esp, 8
mov eax, dword [ecx + 4]
mov dword [esp + 4], eax
mov eax, dword [ecx]
mov ecx, ebx
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x602c]
sub esp, 8
lea ecx, [ebp - 0x6048]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x6030]
mov dword [esp], eax
call fcn.006c1ce0
mov eax, dword [ebp - 0x6030]
sub esp, 8
cmp eax, edi
je 0x43bf8f
mov dword [esp], eax
call fcn.006eb330
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
add dword [ebp - 0x6100], 1
add dword [ebp - 0x611c], 0x18
mov ecx, dword [ebp - 0x6100]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp ecx, eax
jne 0x43bec1
mov eax, dword [ebp - 0x6048]
mov edx, dword [ebp - 0x6044]
lea edx, [eax + edx*2]
lea ecx, [ebp - 0x2018]
lea ebx, [ebp - 0x2010]
mov dword [esp + 4], edx
mov dword [esp], eax
mov edi, ecx
mov dword [ebp - 0x2018], ebx
call fcn.00439290
mov ecx, dword [ebp - 0x60fc]
sub esp, 8
mov dword [esp], edi
call fcn.00439930
mov eax, dword [ebp - 0x2018]
sub esp, 4
cmp eax, ebx
je 0x43c017
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x6048]
cmp eax, dword [ebp - 0x6108]
jne 0x43b329
jmp 0x43a1ae
mov ebx, eax
mov eax, dword [ebp - 0x6030]
cmp eax, edi
je 0x43c042
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x6048]
cmp eax, dword [ebp - 0x6108]
jne 0x43b40c
jmp 0x43a997
mov dword [esp], 0x724156
call fcn.006e0080
jmp 0x43c02e
mov eax, dword [ebp - 0x6108]
mov edx, eax
jmp 0x43bfd1
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7249ac
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x43c2ff
mov ecx, dword [ebp - 0x6104]
test ecx, ecx
je 0x43a1ae
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43c2e6
mov dword [esp + 4], 0x7249bc
mov eax, dword [edx + 0x18]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
jne 0x439efb
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7249e4
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43a1ae
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 2
jbe 0x43c2cd
lea edi, [ebp - 0x6028]
lea ebx, [ebp - 0x6030]
mov dword [ebp - 0x6030], edi
mov eax, dword [edx + 0x30]
mov ecx, ebx
mov edx, dword [edx + 0x34]
mov dword [esp], eax
lea edx, [eax + edx*2]
mov dword [esp + 4], edx
call fcn.00439290
mov eax, dword [ebp - 0x6030]
sub esp, 8
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov dword [esp], 0x7249ee
call fcn.005e72a0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov ecx, ebx
mov dword [esp], 0x7249ee
call fcn.0064ae60
sub esp, 0xc
cmp eax, 0xffffffff
je 0x43c2ab
mov eax, dword [ebp - 0x60fc]
lea ebx, [ebp - 0x2018]
mov dword [ebp - 0x6100], ebx
lea ebx, [ebp - 0x2010]
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
mov dword [ebp - 0x610c], ecx
je 0x43c26f
mov ecx, dword [ebp - 0x610c]
mov dword [ebp - 0x2018], ebx
mov edx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x6100]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00439290
mov eax, dword [ebp - 0x6030]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
mov eax, dword [ebp - 0x2018]
je 0x43c25d
cmp eax, ebx
je 0x43c243
mov dword [esp], eax
call fcn.006eb330
mov ecx, dword [ebp - 0x60fc]
add dword [ebp - 0x610c], 0x18
mov eax, dword [ebp - 0x610c]
cmp dword [ecx + 8], eax
jne 0x43c1e9
jmp 0x43c26f
cmp eax, ebx
je 0x43c269
mov dword [esp], eax
call fcn.006eb330
mov esi, dword [ebp - 0x610c]
mov eax, dword [ebp - 0x6030]
cmp eax, edi
jne 0x43b329
jmp 0x43a1ae
mov dword [esp + 4], 0x7249ee
mov dword [esp], 0
mov ecx, ebx
call fcn.006c0e00
sub esp, 8
jmp 0x43c1bf
mov dword [esp + 4], 0x7249f4
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a1ae
mov dword [esp + 4], 0x724a14
mov dword [esp], 0x835180
call fcn.0041e920
jmp 0x43a1ae
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7249e4
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
jne 0x43c487
mov edx, dword [ebp - 0x60e4]
mov eax, dword [ebp - 0x60e0]
sub eax, edx
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 1
jbe 0x43c2cd
lea edi, [ebp - 0x6028]
lea ebx, [ebp - 0x6030]
mov dword [ebp - 0x6030], edi
mov eax, dword [edx + 0x18]
mov ecx, ebx
mov edx, dword [edx + 0x1c]
mov dword [esp], eax
lea edx, [eax + edx*2]
mov dword [esp + 4], edx
call fcn.00439290
mov eax, dword [ebp - 0x6030]
sub esp, 8
mov dword [esp + 4], 0x724232
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041f130
mov dword [esp], 0x7249ee
call fcn.005e72a0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov ecx, ebx
mov dword [esp], 0x7249ee
call fcn.0064ae60
sub esp, 0xc
cmp eax, 0xffffffff
je 0x43c464
mov eax, dword [ebp - 0x60fc]
lea ebx, [ebp - 0x2018]
mov dword [ebp - 0x6100], ebx
lea ebx, [ebp - 0x2010]
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
mov dword [ebp - 0x610c], ecx
je 0x43c26f
mov ecx, dword [ebp - 0x610c]
mov dword [ebp - 0x2018], ebx
mov edx, dword [ecx + 4]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x6100]
lea edx, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00439290
mov eax, dword [ebp - 0x6030]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2018]
mov dword [esp], eax
mov eax, dword [ebp - 0x6108]
call eax
test eax, eax
mov eax, dword [ebp - 0x2018]
je 0x43c25d
cmp eax, ebx
je 0x43c442
mov dword [esp], eax
call fcn.006eb330
mov ecx, dword [ebp - 0x60fc]
add dword [ebp - 0x610c], 0x18
mov eax, dword [ebp - 0x610c]
cmp dword [ecx + 8], eax
jne 0x43c3e4
jmp 0x43c26f
mov dword [esp + 4], 0x7249ee
mov dword [esp], 0
mov ecx, ebx
call fcn.006c0e00
sub esp, 8
jmp 0x43c3ba
mov eax, dword [ebp - 0x60e4]
mov dword [esp + 4], 0x7249bc
mov eax, dword [eax]
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
jne 0x439f0f
mov dword [esp + 4], 0x724a37
mov dword [esp], 0x835180
call fcn.0041eed0
jmp 0x43a8eb