Function at 0x434090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb18
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, 0
mov ebx, 0x8c
mov dword [esp + 0x22c], eax
lea eax, [esp + 0xa60]
mov dword [esp + 0x228], eax
mov eax, dword [esp + 0x22c]
mov dword [esp + 0xb04], eax
mov dword [esp + 0xb00], ecx
mov dword [esp + 0xafc], edx
mov dword [esp + 0xaf8], esi
mov dword [esp + 0xaf4], 0
mov dword [esp + 0xaf0], 0
mov dword [esp + 0xa5c], 0xd
mov dword [esp + 0xa58], 0
mov dword [esp + 0xa50], 0
mov dword [esp + 0xa4c], 0x400
mov dword [esp + 0xa40], 0xffffffff
mov ecx, dword [esp + 0x228]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8c
mov dword [esp + 0x224], ebx
mov dword [esp + 0x220], edi
call fcn.00407df0
mov ecx, 5
lea edx, [esp + 0x237]
mov esi, dword [esp + 0xaf8]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x21c], eax
mov dword [esp + 0x218], ecx
call fcn.00406dc0
mov ecx, 5
lea edx, [esp + 0xa60]
lea esi, [esp + 0x237]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x214], eax
mov dword [esp + 0x210], ecx
call fcn.00435910
mov dword [esp + 0xb08], eax
mov dword [esp + 0x230], 0xaf30d586
mov eax, dword [esp + 0x230]
mov ecx, eax
sub ecx, 0x74e85db1
mov dword [esp + 0x20c], eax
mov dword [esp + 0x208], ecx
jg 0x434ee9
jmp 0x43420e
mov eax, dword [esp + 0x20c]
sub eax, 0x6e2c6d54
mov dword [esp + 0x204], eax
jg 0x434ece
jmp 0x43422c
mov eax, dword [esp + 0x20c]
sub eax, 0x84314d03
mov dword [esp + 0x200], eax
jg 0x434268
jmp 0x43424a
mov eax, dword [esp + 0x20c]
sub eax, 0x8122d596
mov dword [esp + 0x1fc], eax
je 0x4355b7
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x85fd6377
mov dword [esp + 0x1f8], eax
jg 0x4342a4
jmp 0x434286
mov eax, dword [esp + 0x20c]
sub eax, 0x84314d04
mov dword [esp + 0x1f4], eax
je 0x4351a0
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x8a346275
mov dword [esp + 0x1f0], eax
jg 0x4342e0
jmp 0x4342c2
mov eax, dword [esp + 0x20c]
sub eax, 0x85fd6378
mov dword [esp + 0x1ec], eax
je 0x435126
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x94fdd158
mov dword [esp + 0x1e8], eax
jg 0x43431c
jmp 0x4342fe
mov eax, dword [esp + 0x20c]
sub eax, 0x8a346276
mov dword [esp + 0x1e4], eax
je 0x4358e4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x961336b4
mov dword [esp + 0x1e0], eax
jg 0x434358
jmp 0x43433a
mov eax, dword [esp + 0x20c]
sub eax, 0x94fdd159
mov dword [esp + 0x1dc], eax
je 0x43565f
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x99572f97
mov dword [esp + 0x1d8], eax
jg 0x434394
jmp 0x434376
mov eax, dword [esp + 0x20c]
sub eax, 0x961336b5
mov dword [esp + 0x1d4], eax
je 0x43503f
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x9b0500dc
mov dword [esp + 0x1d0], eax
jg 0x4343d0
jmp 0x4343b2
mov eax, dword [esp + 0x20c]
sub eax, 0x99572f98
mov dword [esp + 0x1cc], eax
je 0x4353ba
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x9fb64fb4
mov dword [esp + 0x1c8], eax
jg 0x43440c
jmp 0x4343ee
mov eax, dword [esp + 0x20c]
sub eax, 0x9b0500dd
mov dword [esp + 0x1c4], eax
je 0x434f79
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xa1c48e76
mov dword [esp + 0x1c0], eax
jg 0x434448
jmp 0x43442a
mov eax, dword [esp + 0x20c]
sub eax, 0x9fb64fb5
mov dword [esp + 0x1bc], eax
je 0x4355e3
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xa4e4e44b
mov dword [esp + 0x1b8], eax
jg 0x434484
jmp 0x434466
mov eax, dword [esp + 0x20c]
sub eax, 0xa1c48e77
mov dword [esp + 0x1b4], eax
je 0x435688
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xa67b9785
mov dword [esp + 0x1b0], eax
jg 0x4344c0
jmp 0x4344a2
mov eax, dword [esp + 0x20c]
sub eax, 0xa4e4e44c
mov dword [esp + 0x1ac], eax
je 0x4358f4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x69dd5048
mov dword [esp + 0x1a8], eax
jg 0x434eb3
jmp 0x4344de
mov eax, dword [esp + 0x20c]
sub eax, 0x6941cfde
mov dword [esp + 0x1a4], eax
jg 0x434e98
jmp 0x4344fc
mov eax, dword [esp + 0x20c]
sub eax, 0x68167497
mov dword [esp + 0x1a0], eax
jg 0x434e7d
jmp 0x43451a
mov eax, dword [esp + 0x20c]
sub eax, 0x676e18c6
mov dword [esp + 0x19c], eax
jg 0x434e62
jmp 0x434538
mov eax, dword [esp + 0x20c]
sub eax, 0x6419ee0b
mov dword [esp + 0x198], eax
jg 0x434e47
jmp 0x434556
mov eax, dword [esp + 0x20c]
sub eax, 0x5b30defe
mov dword [esp + 0x194], eax
jg 0x434e2c
jmp 0x434574
mov eax, dword [esp + 0x20c]
sub eax, 0x53b922a1
mov dword [esp + 0x190], eax
jg 0x434e11
jmp 0x434592
mov eax, dword [esp + 0x20c]
sub eax, 0x517fbc31
mov dword [esp + 0x18c], eax
jg 0x434df6
jmp 0x4345b0
mov eax, dword [esp + 0x20c]
sub eax, 0x4ee4bbd4
mov dword [esp + 0x188], eax
jg 0x434ddb
jmp 0x4345ce
mov eax, dword [esp + 0x20c]
sub eax, 0x491789e5
mov dword [esp + 0x184], eax
jg 0x434dc0
jmp 0x4345ec
mov eax, dword [esp + 0x20c]
sub eax, 0xa68d6725
mov dword [esp + 0x180], eax
jg 0x434628
jmp 0x43460a
mov eax, dword [esp + 0x20c]
sub eax, 0xa67b9786
mov dword [esp + 0x17c], eax
je 0x4356d9
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xadf5ac66
mov dword [esp + 0x178], eax
jg 0x434664
jmp 0x434646
mov eax, dword [esp + 0x20c]
sub eax, 0xa68d6726
mov dword [esp + 0x174], eax
je 0x43556b
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xaf30d585
mov dword [esp + 0x170], eax
jg 0x4346a0
jmp 0x434682
mov eax, dword [esp + 0x20c]
sub eax, 0xadf5ac67
mov dword [esp + 0x16c], eax
je 0x434f68
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xb4d7b4df
mov dword [esp + 0x168], eax
jg 0x4346dc
jmp 0x4346be
mov eax, dword [esp + 0x20c]
sub eax, 0xaf30d586
mov dword [esp + 0x164], eax
je 0x434f09
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xbeb252aa
mov dword [esp + 0x160], eax
jg 0x434718
jmp 0x4346fa
mov eax, dword [esp + 0x20c]
sub eax, 0xb4d7b4e0
mov dword [esp + 0x15c], eax
je 0x434f40
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xbeeb8951
mov dword [esp + 0x158], eax
jg 0x434754
jmp 0x434736
mov eax, dword [esp + 0x20c]
sub eax, 0xbeb252ab
mov dword [esp + 0x154], eax
je 0x4350a4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xc1b0a62b
mov dword [esp + 0x150], eax
jg 0x434790
jmp 0x434772
mov eax, dword [esp + 0x20c]
sub eax, 0xbeeb8952
mov dword [esp + 0x14c], eax
je 0x435001
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xc5aae2bf
mov dword [esp + 0x148], eax
jg 0x4347cc
jmp 0x4347ae
mov eax, dword [esp + 0x20c]
sub eax, 0xc1b0a62c
mov dword [esp + 0x144], eax
je 0x43547e
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xc755a91e
mov dword [esp + 0x140], eax
jg 0x434808
jmp 0x4347ea
mov eax, dword [esp + 0x20c]
sub eax, 0xc5aae2c0
mov dword [esp + 0x13c], eax
je 0x43572e
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xcdfbfa9d
mov dword [esp + 0x138], eax
jg 0x434844
jmp 0x434826
mov eax, dword [esp + 0x20c]
sub eax, 0xc755a91f
mov dword [esp + 0x134], eax
je 0x435365
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xdcd52983
mov dword [esp + 0x130], eax
jg 0x434880
jmp 0x434862
mov eax, dword [esp + 0x20c]
sub eax, 0xcdfbfa9e
mov dword [esp + 0x12c], eax
je 0x435259
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xe9cfaf8e
mov dword [esp + 0x128], eax
jg 0x4348bc
jmp 0x43489e
mov eax, dword [esp + 0x20c]
sub eax, 0xdcd52984
mov dword [esp + 0x124], eax
je 0x43516e
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xeb61eeff
mov dword [esp + 0x120], eax
jg 0x4348f8
jmp 0x4348da
mov eax, dword [esp + 0x20c]
sub eax, 0xe9cfaf8f
mov dword [esp + 0x11c], eax
je 0x435594
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xeeea682a
mov dword [esp + 0x118], eax
jg 0x434934
jmp 0x434916
mov eax, dword [esp + 0x20c]
sub eax, 0xeb61ef00
mov dword [esp + 0x114], eax
je 0x4350df
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xf26392aa
mov dword [esp + 0x110], eax
jg 0x434970
jmp 0x434952
mov eax, dword [esp + 0x20c]
sub eax, 0xeeea682b
mov dword [esp + 0x10c], eax
je 0x4353e9
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xf42ebd3d
mov dword [esp + 0x108], eax
jg 0x4349ac
jmp 0x43498e
mov eax, dword [esp + 0x20c]
sub eax, 0xf26392ab
mov dword [esp + 0x104], eax
je 0x4354dd
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0xf89618f6
mov dword [esp + 0x100], eax
jg 0x4349e8
jmp 0x4349ca
mov eax, dword [esp + 0x20c]
sub eax, 0xf42ebd3e
mov dword [esp + 0xfc], eax
je 0x4356ab
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x650332b
mov dword [esp + 0xf8], eax
jg 0x434a24
jmp 0x434a06
mov eax, dword [esp + 0x20c]
sub eax, 0xf89618f7
mov dword [esp + 0xf4], eax
je 0x435081
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x119ebbac
mov dword [esp + 0xf0], eax
jg 0x434a60
jmp 0x434a42
mov eax, dword [esp + 0x20c]
sub eax, 0x650332c
mov dword [esp + 0xec], eax
je 0x434ff1
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x1747ef58
mov dword [esp + 0xe8], eax
jg 0x434a9c
jmp 0x434a7e
mov eax, dword [esp + 0x20c]
sub eax, 0x119ebbad
mov dword [esp + 0xe4], eax
je 0x4350c4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x18b04540
mov dword [esp + 0xe0], eax
jg 0x434ad8
jmp 0x434aba
mov eax, dword [esp + 0x20c]
sub eax, 0x1747ef59
mov dword [esp + 0xdc], eax
je 0x435248
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x1a44714f
mov dword [esp + 0xd8], eax
jg 0x434b14
jmp 0x434af6
mov eax, dword [esp + 0x20c]
sub eax, 0x18b04541
mov dword [esp + 0xd4], eax
je 0x43554a
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x241404be
mov dword [esp + 0xd0], eax
jg 0x434b50
jmp 0x434b32
mov eax, dword [esp + 0x20c]
sub eax, 0x1a447150
mov dword [esp + 0xcc], eax
je 0x43560c
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x25841987
mov dword [esp + 0xc8], eax
jg 0x434b8c
jmp 0x434b6e
mov eax, dword [esp + 0x20c]
sub eax, 0x241404bf
mov dword [esp + 0xc4], eax
je 0x4358d4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x2b8abdeb
mov dword [esp + 0xc0], eax
jg 0x434bc8
jmp 0x434baa
mov eax, dword [esp + 0x20c]
sub eax, 0x25841988
mov dword [esp + 0xbc], eax
je 0x435757
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x2c33ef00
mov dword [esp + 0xb8], eax
jg 0x434c04
jmp 0x434be6
mov eax, dword [esp + 0x20c]
sub eax, 0x2b8abdec
mov dword [esp + 0xb4], eax
je 0x4354bf
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x2d6afcdb
mov dword [esp + 0xb0], eax
jg 0x434c40
jmp 0x434c22
mov eax, dword [esp + 0x20c]
sub eax, 0x2c33ef01
mov dword [esp + 0xac], eax
je 0x434fce
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x312cd0ec
mov dword [esp + 0xa8], eax
jg 0x434c7c
jmp 0x434c5e
mov eax, dword [esp + 0x20c]
sub eax, 0x2d6afcdc
mov dword [esp + 0xa4], eax
je 0x4354ee
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x31435209
mov dword [esp + 0xa0], eax
jg 0x434cb8
jmp 0x434c9a
mov eax, dword [esp + 0x20c]
sub eax, 0x312cd0ed
mov dword [esp + 0x9c], eax
je 0x435388
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x37cfa7e6
mov dword [esp + 0x98], eax
jg 0x434cf4
jmp 0x434cd6
mov eax, dword [esp + 0x20c]
sub eax, 0x3143520a
mov dword [esp + 0x94], eax
je 0x43553a
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x3cd4ae6a
mov dword [esp + 0x90], eax
jg 0x434d30
jmp 0x434d12
mov eax, dword [esp + 0x20c]
sub eax, 0x37cfa7e7
mov dword [esp + 0x8c], eax
je 0x4356ca
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x43df7cdf
mov dword [esp + 0x88], eax
jg 0x434d6c
jmp 0x434d4e
mov eax, dword [esp + 0x20c]
sub eax, 0x3cd4ae6b
mov dword [esp + 0x84], eax
je 0x43502e
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x43df7ce0
mov dword [esp + 0x80], eax
je 0x4358c4
jmp 0x434d8a
mov eax, dword [esp + 0x20c]
sub eax, 0x4570fe0d
mov dword [esp + 0x7c], eax
je 0x43555a
jmp 0x434da5
mov eax, dword [esp + 0x20c]
sub eax, 0x4577fb13
mov dword [esp + 0x78], eax
je 0x435517
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x491789e6
mov dword [esp + 0x74], eax
je 0x4356f0
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x4ee4bbd5
mov dword [esp + 0x70], eax
je 0x4351be
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x517fbc32
mov dword [esp + 0x6c], eax
je 0x434f2f
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x53b922a2
mov dword [esp + 0x68], eax
je 0x4350b4
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x5b30deff
mov dword [esp + 0x64], eax
je 0x4353d8
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x6419ee0c
mov dword [esp + 0x60], eax
je 0x434f58
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x676e18c7
mov dword [esp + 0x5c], eax
je 0x43514a
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x68167498
mov dword [esp + 0x58], eax
je 0x4354a1
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x6941cfdf
mov dword [esp + 0x54], eax
je 0x43584b
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x69dd5049
mov dword [esp + 0x50], eax
je 0x43564e
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x6e2c6d55
mov dword [esp + 0x4c], eax
je 0x43562f
jmp 0x434f04
mov eax, dword [esp + 0x20c]
sub eax, 0x74e85db2
mov dword [esp + 0x48], eax
je 0x4355d2
jmp 0x434f04
jmp 0x4358ff
mov eax, 0xadf5ac67
mov ecx, 0x517fbc32
mov edx, dword [esp + 0xb08]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0xb4d7b4e0
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [sym.imp.ADVAPI32.dll_AccessCheckByType]
mov edi, dword [eax]
mov eax, 0x6419ee0c
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov dword [esp + 0x230], 0x74e85db2
jmp 0x4358ff
mov eax, 0x9b0500dd
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x300
mov ecx, dword [esp + 0xa60]
add ecx, dword [esp + 0xa64]
shl eax, cl
add eax, 0x736
shl eax, 1
mov dword [esp], eax
call fcn.0043d974
mov edx, 0x2c33ef01
mov dword [esp + 0xa70], eax
cmp dword [esp + 0xa70], 0
setne cl
and cl, 1
mov byte [esp + 0xb0c], cl
mov dword [esp + 0x230], edx
jmp 0x4358ff
mov eax, 0x650332c
mov ecx, 0xbeeb8952
mov dl, byte [esp + 0xb0c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov dword [esp + 0x230], 0x74e85db2
jmp 0x4358ff
call fcn.00419c30
mov ecx, 0x119ebbad
mov edx, 0x3cd4ae6b
cmp dword [esp + 0xa6c], 0
cmovne ecx, edx
mov dword [esp + 0x230], ecx
mov dword [esp + 0x44], eax
jmp 0x4358ff
mov eax, 0x961336b5
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xa6c]
shl eax, 0
mov dword [esp], eax
call fcn.0043d974
mov ecx, 0xf89618f7
mov dword [esp + 0xa74], eax
cmp dword [esp + 0xa74], 0
setne dl
and dl, 1
mov byte [esp + 0xb0d], dl
mov dword [esp + 0x230], ecx
jmp 0x4358ff
mov eax, 0xbeb252ab
mov ecx, 0x53b922a2
mov dl, byte [esp + 0xb0d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov dword [esp + 0x230], 0x74e85db2
jmp 0x4358ff
mov dword [esp + 0x230], 0xeb61ef00
jmp 0x4358ff
mov dword [esp + 0xa74], 0
mov dword [esp + 0x230], 0xeb61ef00
jmp 0x4358ff
lea eax, [esp + 0x23c]
mov dword [esp + 0xaf0], eax
mov eax, dword [esp + 0xafc]
sub eax, 0xd
mov dword [esp + 0xafc], eax
mov dword [esp + 0xae4], 0xfffffffe
mov dword [esp + 0xab8], 0
mov dword [esp + 0x230], 0x85fd6378
jmp 0x4358ff
mov eax, 0x1747ef59
mov ecx, 0x676e18c7
cmp dword [esp + 0xa50], 0
cmove eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x1747ef59
mov ecx, 0xdcd52984
cmp dword [esp + 0xafc], 0
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x4ee4bbd5
mov ecx, 0x84314d04
mov dword [esp + 0xa54], 0x400
mov edx, dword [esp + 0xa54]
cmp edx, dword [esp + 0xafc]
cmova eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xafc]
mov dword [esp + 0xa54], eax
mov dword [esp + 0x230], 0x4ee4bbd5
jmp 0x4358ff
lea eax, [esp + 0x63c]
mov ecx, dword [esp + 0xa54]
mov edx, dword [esp + 0xaf8]
add edx, dword [esp + 0xa5c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00406dc0
lea ecx, [esp + 0x63c]
mov edx, dword [esp + 0xa54]
mov esi, dword [esp + 0xa5c]
add esi, edx
mov dword [esp + 0xa5c], esi
mov edx, dword [esp + 0xa54]
mov esi, dword [esp + 0xafc]
sub esi, edx
mov dword [esp + 0xafc], esi
mov edx, dword [esp + 0xa54]
mov dword [esp + 0xa50], edx
mov dword [esp + 0xaf4], ecx
mov dword [esp + 0x230], 0x1747ef59
mov dword [esp + 0x40], eax
jmp 0x4358ff
mov eax, 0xcdfbfa9e
mov dword [esp + 0x230], eax
jmp 0x4358ff
lea eax, [esp + 0xa60]
lea ecx, [esp + 0xa48]
lea edx, [esp + 0xa44]
cmp dword [esp + 0xa50], 0
sete bl
and bl, 1
movzx esi, bl
mov edi, dword [esp + 0xa4c]
mov ebx, dword [esp + 0xaf0]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xa50]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xaf4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], esi
call fcn.00436340
mov ecx, 0xc755a91f
mov dword [esp + 0xa3c], eax
mov eax, dword [esp + 0xa48]
mov edx, dword [esp + 0xa50]
sub edx, eax
mov dword [esp + 0xa50], edx
mov eax, dword [esp + 0xa48]
mov edx, dword [esp + 0xaf4]
add edx, eax
mov dword [esp + 0xaf4], edx
mov eax, dword [esp + 0xa44]
mov edx, dword [esp + 0xa4c]
sub edx, eax
mov dword [esp + 0xa4c], edx
mov eax, dword [esp + 0xa44]
mov edx, dword [esp + 0xaf0]
add edx, eax
mov dword [esp + 0xaf0], edx
cmp dword [esp + 0xa4c], 0
sete al
and al, 1
mov byte [esp + 0xb0e], al
mov dword [esp + 0x230], ecx
jmp 0x4358ff
mov eax, 0xf26392ab
mov ecx, 0x312cd0ed
mov dl, byte [esp + 0xb0e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x5b30deff
mov ecx, 0x99572f98
mov dword [esp + 0xa54], 0x400
mov edx, dword [esp + 0xa54]
cmp edx, dword [esp + 0xb04]
cmova eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xb04]
mov dword [esp + 0xa54], eax
mov dword [esp + 0x230], 0x5b30deff
jmp 0x4358ff
mov eax, 0xeeea682b
mov dword [esp + 0x230], eax
jmp 0x4358ff
lea eax, [esp + 0x23c]
mov ecx, dword [esp + 0xa54]
mov edx, dword [esp + 0xb00]
add edx, dword [esp + 0xa58]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00406dc0
mov ecx, 0xc1b0a62c
mov edx, dword [esp + 0xa54]
mov esi, dword [esp + 0xa58]
add esi, edx
mov dword [esp + 0xa58], esi
mov edx, dword [esp + 0xa54]
mov esi, dword [esp + 0xb04]
sub esi, edx
mov dword [esp + 0xb04], esi
mov dword [esp + 0xa4c], 0x400
mov edx, dword [esp + 0xa4c]
cmp edx, dword [esp + 0xb04]
seta bl
and bl, 1
mov byte [esp + 0xb0f], bl
mov dword [esp + 0x230], ecx
mov dword [esp + 0x30], eax
jmp 0x4358ff
mov eax, 0x2b8abdec
mov ecx, 0x68167498
mov dl, byte [esp + 0xb0f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xb04]
mov dword [esp + 0xa4c], eax
mov dword [esp + 0x230], 0x2b8abdec
jmp 0x4358ff
lea eax, [esp + 0x23c]
mov dword [esp + 0xaf0], eax
mov dword [esp + 0x230], 0xf26392ab
jmp 0x4358ff
mov eax, 0x2d6afcdc
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x4577fb13
cmp dword [esp + 0xa3c], 0
setne cl
and cl, 1
mov byte [esp + 0xb10], cl
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x18b04541
mov ecx, 0x3143520a
mov dl, byte [esp + 0xb10]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov dword [esp + 0x230], 0x74e85db2
jmp 0x4358ff
mov dword [esp + 0x230], 0x4570fe0d
jmp 0x4358ff
mov eax, 0xa68d6726
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0xe9cfaf8f
cmp dword [esp + 0xa4c], 0
setne cl
and cl, 1
mov byte [esp + 0xb11], cl
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x8122d596
mov ecx, 0x85fd6378
mov dl, byte [esp + 0xb11]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov dword [esp + 0xa40], 0
mov dword [esp + 0x230], 0x74e85db2
jmp 0x4358ff
mov eax, 0x9fb64fb5
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x1a447150
cmp dword [esp + 0xa74], 0
setne cl
and cl, 1
mov byte [esp + 0xb12], cl
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x69dd5049
mov ecx, 0x6e2c6d55
mov dl, byte [esp + 0xb12]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xa74]
mov dword [esp], eax
call fcn.0043c6a0
mov dword [esp + 0x230], 0x69dd5049
jmp 0x4358ff
mov eax, 0x94fdd159
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0xa1c48e77
cmp dword [esp + 0xa70], 0
setne cl
and cl, 1
mov byte [esp + 0xb13], cl
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, 0x37cfa7e7
mov ecx, 0xf42ebd3e
mov dl, byte [esp + 0xb13]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x230], eax
jmp 0x4358ff
mov eax, dword [esp + 0xa70]
mov dword [esp], eax
call fcn.0043c6a0
mov dword [esp + 0x230], 0x37cfa7e7
jmp 0x4358ff
mov eax, dword [esp + 0xa40]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [sym.imp.ADVAPI32.dll_AccessCheckByType]
mov edi, dword [eax]
mov dword [esp + 0x230], 0xb4d7b4e0
jmp 0x4358ff
mov eax, 0x300
mov ecx, dword [esp + 0xa60]
mov edx, dword [esp + 0xa64]
add ecx, edx
shl eax, cl
add eax, 0x736
shl eax, 1
mov dword [esp], eax
call fcn.0043d974
mov dword [esp + 0xa70], eax
mov dword [esp + 0x230], 0x9b0500dd
jmp 0x4358ff
mov eax, dword [esp + 0xa6c]
shl eax, 0
mov dword [esp], eax
call fcn.0043d974
mov dword [esp + 0xa74], eax
mov dword [esp + 0x230], 0x961336b5
jmp 0x4358ff
lea eax, [esp + 0xa60]
lea ecx, [esp + 0xa48]
lea edx, [esp + 0xa44]
cmp dword [esp + 0xa50], 0
sete bl
and bl, 1
movzx esi, bl
mov edi, dword [esp + 0xa4c]
mov ebx, dword [esp + 0xaf0]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xaf4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], esi
call fcn.00436340
mov dword [esp + 0xa3c], eax
mov eax, dword [esp + 0xa48]
mov ecx, dword [esp + 0xa50]
sub ecx, eax
mov dword [esp + 0xa50], ecx
mov eax, dword [esp + 0xa48]
mov ecx, dword [esp + 0xaf4]
add ecx, eax
mov dword [esp + 0xaf4], ecx
mov eax, dword [esp + 0xa44]
mov ecx, dword [esp + 0xa4c]
sub ecx, eax
mov dword [esp + 0xa4c], ecx
mov eax, dword [esp + 0xa44]
mov ecx, dword [esp + 0xaf0]
add ecx, eax
mov dword [esp + 0xaf0], ecx
mov dword [esp + 0x230], 0xcdfbfa9e
jmp 0x4358ff
lea eax, [esp + 0x23c]
mov ecx, dword [esp + 0xa54]
mov edx, dword [esp + 0xb00]
add edx, dword [esp + 0xa58]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00406dc0
mov ecx, dword [esp + 0xa54]
mov edx, dword [esp + 0xa58]
add edx, ecx
mov dword [esp + 0xa58], edx
mov ecx, dword [esp + 0xa54]
mov edx, dword [esp + 0xb04]
sub edx, ecx
mov dword [esp + 0xb04], edx
mov dword [esp + 0xa4c], 0x400
mov dword [esp + 0x230], 0xeeea682b
mov dword [esp + 0x20], eax
jmp 0x4358ff
mov dword [esp + 0x230], 0x2d6afcdc
jmp 0x4358ff
mov dword [esp + 0x230], 0xa68d6726
jmp 0x4358ff
mov dword [esp + 0x230], 0x9fb64fb5
jmp 0x4358ff
mov dword [esp + 0x230], 0x94fdd159
jmp 0x4341e6