Function at 0x433ebf
Capabilities:
Create thread

Disassembly:
push 0x864
mov eax, 0x4763c4
call fcn.00472eab
mov ebx, ecx
mov dword [ebp - 0x850], ebx
mov eax, dword [ebp + 8]
lea esi, [ebp + 0x18]
and dword [ebp - 0x860], 0
lea edi, [ebp - 0x840]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x864]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x858], eax
xor eax, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x85c], eax
lea eax, [ebx + 0x9c]
push ecx
movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [ebp - 0x870], eax
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [ebp - 0x854], edi
mov dword [ebp - 0x848], edi
call fcn.0042e6d4
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x433fd2
mov ecx, dword [ebx + 0x60]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2ca
mov eax, dword [ebx + 0x60]
push 0x40ec20
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
mov edx, dword [ebp - 0x844]
mov ecx, eax
call fcn.0044829d
mov esi, dword [ebp - 0x84c]
mov eax, dword [ebp - 0x844]
mov ecx, eax
call fcn.0042757e
and dword [ebp - 4], 0
test esi, esi
je 0x433fa3
mov ecx, esi
call fcn.00427347
mov dword [ebp - 4], 1
test edi, edi
je 0x433fb5
mov ecx, edi
call fcn.00427347
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.00424486
mov eax, dword [ebp - 0x844]
call fcn.00472e69
ret 0x20
cmp dword [ebp - 0x864], 0xfebefebe
je 0x43400d
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0x844], 0x800704df
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x434edd
push 0x2cb
jmp 0x433f5c
mov eax, 0x3e8
mov dword [ebx + 0x360], 0x7530
mov dword [ebx + 0x364], eax
mov dword [ebx + 0x368], eax
xor eax, eax
push eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
lea ecx, [ebx + 0x7c]
call fcn.00416991
cmp dword [ebx + 0x7c], edi
jne 0x43407b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2d8
jmp 0x433f5c
xor eax, eax
lea esi, [ebx + 0x80]
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
mov ecx, esi
call fcn.00416991
cmp dword [esi], edi
jne 0x4340d1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2db
jmp 0x433f5c
xor eax, eax
lea esi, [ebx + 0x84]
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
mov ecx, esi
call fcn.00416991
cmp dword [esi], edi
jne 0x434127
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2de
jmp 0x433f5c
lea edx, [ebp - 0x840]
call fcn.0042df68
test al, al
je 0x434267
mov eax, dword [ebx + 0x314]
lea esi, [ebp - 0x840]
mov dword [ebp - 0x864], eax
mov ebx, dword [eax]
lea eax, [ebp - 0x860]
push eax
sub esp, 0x10
mov edi, esp
mov ecx, dword [ebx + 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x47d838]
mov ecx, dword [ebp - 0x864]
call dword [ebx + 0x28]
mov ebx, dword [ebp - 0x850]
mov edi, eax
mov dword [ebp - 0x844], edi
test edi, edi
jns 0x4341ca
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4341bf
push 0x2e5
mov eax, dword [ebx + 0x60]
push 0x40ec20
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
mov edx, edi
mov ecx, eax
call fcn.0044829d
mov edi, dword [ebp - 0x854]
jmp 0x433f81
mov esi, dword [ebp - 0x860]
lea eax, [ebx + 0x398]
push eax
mov ecx, dword [esi]
mov edi, dword [ecx + 0x1c]
mov ecx, edi
call dword [0x47d838]
mov ecx, esi
call edi
mov edi, eax
mov dword [ebp - 0x844], edi
test edi, edi
jns 0x434212
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4341bf
push 0x2e9
jmp 0x43419e
mov esi, dword [ebp - 0x860]
lea eax, [ebx + 0x35c]
push eax
mov ecx, dword [esi]
mov edi, dword [ecx + 0x20]
mov ecx, edi
call dword [0x47d838]
mov ecx, esi
call edi
mov edi, eax
mov dword [ebp - 0x844], edi
test edi, edi
jns 0x434261
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4341bf
push 0x2ed
jmp 0x43419e
mov edi, dword [ebp - 0x854]
mov eax, dword [ebp - 0x868]
test eax, eax
je 0x4342d8
lea edx, [ebp - 0x848]
mov ecx, eax
call fcn.0042743a
mov edi, eax
mov dword [ebp - 0x844], edi
test edi, edi
jns 0x4342d2
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4342c7
mov eax, dword [ebx + 0x60]
push 0x2f5
push 0x40ec20
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
mov edx, edi
mov ecx, eax
call fcn.0044829d
mov edi, dword [ebp - 0x848]
jmp 0x433f81
mov edi, dword [ebp - 0x848]
mov esi, dword [ebp - 0x858]
test esi, esi
je 0x43450e
cmp dword [ebp + 0x14], 0
mov ecx, esi
je 0x4344d3
lea edx, [ebp - 0x848]
call fcn.00426bf6
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x43432c
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2fe
jmp 0x433f5c
cmp dword [ebp - 0x848], 0
jne 0x434381
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0x844], 0x80070003
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x2ff
mov eax, dword [ebx + 0x60]
push 0x40ec20
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
mov edx, 0x80070003
jmp 0x433f7a
and dword [ebp - 0x86c], 0
lea eax, [ebp - 0x830]
push 0x820
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x830]
push eax
push 0x410
push esi
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x4343f4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x305
jmp 0x433f5c
lea edx, [ebp - 0x848]
lea ecx, [ebp - 0x830]
call fcn.00426bf6
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434434
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x309
jmp 0x433f5c
cmp dword [ebp - 0x848], 0
jne 0x43446c
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0x844], 0x80070003
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x433f81
push 0x30a
jmp 0x43435f
lea edx, [ebp - 0x85c]
lea ecx, [ebp - 0x830]
call fcn.0042743a
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434506
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4344c8
push 0x30f
mov eax, dword [ebx + 0x60]
push 0x40ec20
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
mov edx, dword [ebp - 0x844]
mov ecx, eax
call fcn.0044829d
mov esi, dword [ebp - 0x85c]
jmp 0x433f87
lea edx, [ebp - 0x85c]
call fcn.0042743a
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434506
mov eax, dword [ebx + 0x60]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x47d838]
lea ecx, [ebx + 0x60]
call esi
test eax, eax
je 0x4344c8
push 0x316
jmp 0x4344a3
mov esi, dword [ebp - 0x85c]
jmp 0x434514
mov esi, dword [ebp - 0x84c]
mov ecx, dword [ebx + 0x314]
xor ebx, ebx
mov dword [ebp - 0x844], ebx
test ecx, ecx
jne 0x43453a
mov ebx, 0x80070057
mov ecx, ebx
mov dword [ebp - 0x844], ebx
call fcn.00427566
jmp 0x434543
mov eax, dword [ebp - 0x850]
mov dword [eax + 0x34], ecx
mov ecx, ebx
call fcn.0042757e
test ebx, ebx
jns 0x4345b1
mov eax, dword [ebp - 0x850]
add eax, 0x60
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x31c
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
mov edx, dword [ebp - 0x844]
mov ecx, eax
call fcn.0044829d
jmp 0x433f87
mov ebx, dword [ebp - 0x850]
lea ecx, [ebx + 0xf8]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434617
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x320
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x118]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x43467a
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x321
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x138]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x4346dd
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x322
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x158]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434740
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x323
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x178]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x4347a3
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x324
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x198]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434806
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x325
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x1b8]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434869
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x326
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x1d8]
call fcn.00416b2b
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x4348cc
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x327
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
push 0xffffffffffffffff
lea ecx, [ebx + 0x1f4]
call fcn.00416b98
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434931
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x328
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
push 0xffffffffffffffff
lea ecx, [ebx + 0x2f0]
call fcn.00416b98
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434996
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x329
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x218]
call fcn.0042dfb3
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x4349f9
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x32a
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea ecx, [ebx + 0x288]
call fcn.0042dfb3
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x434a5c
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x32b
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea eax, [ebx + 0x250]
lea ecx, [eax + 0x18]
mov dword [ebp - 0x858], eax
call fcn.00416b2b
mov ebx, eax
mov dword [ebp - 0x844], eax
test ebx, ebx
js 0x434a94
push ecx
mov ecx, dword [ebp - 0x858]
call fcn.0042e483
mov ebx, eax
mov dword [ebp - 0x844], ebx
test ebx, ebx
jns 0x434a9b
mov ecx, ebx
call fcn.00427566
mov ecx, ebx
call fcn.0042757e
test ebx, ebx
jns 0x434afa
mov eax, dword [ebp - 0x850]
add eax, 0x60
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x32c
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
mov ebx, dword [ebp - 0x850]
test edi, edi
je 0x434b2c
mov ecx, edi
xor edi, edi
mov dword [ebp - 0x858], ecx
cmp dword [ebx + 0x78], edi
je 0x434b21
mov ecx, dword [ebx + 0x78]
call fcn.00427347
mov ecx, dword [ebp - 0x858]
mov eax, ecx
neg eax
sbb eax, eax
and eax, ecx
mov dword [ebx + 0x78], eax
test esi, esi
je 0x434b58
mov ecx, esi
xor esi, esi
mov dword [ebp - 0x858], ecx
cmp dword [ebx + 0x74], esi
je 0x434b4d
mov ecx, dword [ebx + 0x74]
call fcn.00427347
mov ecx, dword [ebp - 0x858]
mov eax, ecx
neg eax
sbb eax, eax
and eax, ecx
mov dword [ebx + 0x74], eax
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
lea ecx, [ebx + 0x88]
call fcn.00416991
cmp dword [ebx + 0x88], 0
jne 0x434bda
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x33c
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
lea ecx, [ebx + 0x8c]
call fcn.00416991
cmp dword [ebx + 0x8c], 0
jne 0x434c5c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x33f
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
xor eax, eax
push eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
lea ecx, [ebx + 0x90]
call fcn.00416991
lea edx, [ebx + 0x90]
cmp dword [edx], 0
jne 0x434ce1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
lea eax, [ebx + 0x60]
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x342
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
lea eax, [ebx + 0xdc]
mov dword [ebx + 0x32c], eax
lea ecx, [ebx + 0x320]
lea eax, [ebx + 0x134]
mov dword [ecx], ebx
mov dword [ebx + 0x330], eax
mov eax, dword [ebx + 0x88]
mov dword [ebx + 0x324], eax
mov eax, dword [edx]
mov dword [ebx + 0x328], eax
xor eax, eax
push eax
push eax
push ecx
push 0x433d10
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
lea ecx, [ebx + 0x94]
call fcn.00416991
cmp dword [ebx + 0x94], 0
jne 0x434da3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x850]
add eax, 0x60
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x352
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
mov edx, dword [ebp - 0x850]
lea eax, [edx + 0xe8]
mov dword [edx + 0x340], eax
lea ecx, [edx + 0x334]
lea eax, [edx + 0x154]
mov dword [ecx], edx
mov dword [edx + 0x344], eax
lea ebx, [edx + 0x98]
mov eax, dword [edx + 0x8c]
mov dword [edx + 0x338], eax
mov eax, dword [edx + 0x90]
mov dword [edx + 0x33c], eax
xor eax, eax
push eax
push eax
push ecx
push 0x433d10
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
mov ecx, ebx
call fcn.00416991
cmp dword [ebx], 0
jne 0x434e6d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x850]
add eax, 0x60
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x360
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
push dword [ebp + 0x10]
mov ecx, dword [ebp - 0x870]
call fcn.0042e927
mov dword [ebp - 0x844], eax
test eax, eax
jns 0x433f8d
mov eax, dword [ebp - 0x850]
add eax, 0x60
mov dword [ebp - 0x848], eax
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
call ebx
test eax, eax
je 0x433f87
mov eax, dword [ebp - 0x848]
push 0x364
push 0x40ec20
mov eax, dword [eax]
mov ebx, dword [eax + 8]
mov ecx, ebx
call dword [0x47d838]
mov ecx, dword [ebp - 0x848]
jmp 0x43459d
mov esi, dword [ebp - 0x84c]
mov eax, 0x800704df
jmp 0x433f8d