Function at 0x43906c
Capabilities:
Copy file
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffa10
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5f0], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x178]
mov edx, dword [0x405f5c]
call fcn.00403d48
lea eax, [ebp - 0x2d0]
mov edx, dword [0x405f5c]
call fcn.00403d48
mov ebx, 0x43d798
xor eax, eax
push ebp
push 0x43a318
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebx], 1
jmp 0x439100
mov eax, dword [0x43d768]
mov edx, dword [ebx]
mov al, byte [eax + edx - 1]
cmp al, 8
jne 0x4390fe
mov edx, dword [ebx]
dec edx
mov eax, 0x43d768
mov ecx, 2
call fcn.00403ad0
sub dword [ebx], 2
cmp dword [ebx], 1
jge 0x4390fe
mov dword [ebx], 0x4d1
inc dword [ebx]
mov eax, dword [0x43d768]
call fcn.0040388c
cmp eax, dword [ebx]
jl 0x43911b
cmp dword [ebx], 0
jle 0x43911b
cmp dword [ebx], 0x4d2
jne 0x4390cf
xor ecx, ecx
push ebp
push 0x43a2b6
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [0x43d768]
mov edx, 0x43a330
call fcn.0040399c
jne 0x4391e5
mov eax, dword [0x43d76c]
mov edx, 0x43a340
call fcn.0040399c
jne 0x439153
xor ebx, ebx
jmp 0x439185
mov eax, dword [0x43d76c]
mov edx, 0x43a34c
call fcn.0040399c
jne 0x43916b
mov ebx, 5
jmp 0x439185
mov edx, 0x43a358
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
push ebx
push dword [0x43d774]
push 0x43a380
push dword [0x43d778]
push 0x43a380
push dword [0x43d77c]
push 0x43a380
push dword [0x43d780]
lea eax, [ebp - 0x5f0]
mov edx, 7
call fcn.0040394c
mov eax, dword [ebp - 0x5f0]
lea edx, [ebp - 0x5ec]
call fcn.00406c28
mov edx, dword [ebp - 0x5ec]
xor ecx, ecx
mov eax, dword [0x43d770]
call fcn.0043901c
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a38c
call fcn.0040399c
jne 0x4392d5
lea ecx, [ebp - 0x178]
mov edx, 0x3f
mov eax, dword [0x43d76c]
call fcn.00406fd8
test eax, eax
jne 0x4392c5
mov edx, dword [ebp - 0x170]
cmp edx, 8
je 0x4392bd
cmp edx, 0x10
je 0x439251
lea edx, [ebp - 0x5ec]
mov eax, dword [ebp - 0x174]
call fcn.00406da8
mov edx, dword [ebp - 0x5ec]
lea eax, [ebp - 0xc]
mov ecx, 0x43a398
call fcn.004038d8
jmp 0x43925e
lea eax, [ebp - 0xc]
mov edx, 0x43a3a8
call fcn.004036a8
push dword [ebp - 0x16c]
push 0x43a3b8
push dword [ebp - 0xc]
push 0x43a3b8
mov eax, dword [ebp - 0x178]
call fcn.00407194
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x5f0]
call fcn.00408924
push dword [ebp - 0x5f0]
lea eax, [ebp - 0x5ec]
mov edx, 5
call fcn.0040394c
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
lea eax, [ebp - 0x178]
call fcn.00407024
test eax, eax
je 0x439217
lea eax, [ebp - 0x178]
call fcn.00407048
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a3c8
call fcn.0040399c
jne 0x439304
lea eax, [ebp - 0x5ec]
call fcn.00407200
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a3d8
call fcn.0040399c
jne 0x43936f
cmp dword [0x43d76c], 0
jne 0x439338
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d76c]
call fcn.004026b4
call fcn.004026d0
test eax, eax
je 0x43935d
mov edx, 0x43a404
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a444
call fcn.0040399c
jne 0x4393fb
cmp dword [0x43d76c], 0
je 0x439392
cmp dword [0x43d770], 0
jne 0x4393ac
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
push 0
mov eax, dword [0x43d770]
call fcn.00403a50
push eax
mov eax, dword [0x43d76c]
call fcn.00403a50
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x43d770]
call fcn.00406f64
test al, al
jne 0x4393e9
mov edx, 0x43a454
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a470
call fcn.0040399c
jne 0x439485
cmp dword [0x43d76c], 0
je 0x43941e
cmp dword [0x43d770], 0
jne 0x439438
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d770]
call fcn.00403a50
push eax
mov eax, dword [0x43d76c]
call fcn.00403a50
push eax
call sub.kernel32.dll_MoveFileA
mov eax, dword [0x43d770]
call fcn.00406f64
test al, al
jne 0x439473
mov edx, 0x43a480
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a49c
call fcn.0040399c
jne 0x439539
cmp dword [0x43d76c], 0
je 0x4394ac
cmp dword [0x43d770], 0
jne 0x4394c6
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d770]
call fcn.00403a50
mov edx, eax
lea eax, [ebp - 0x5ec]
call fcn.004037c4
mov eax, dword [ebp - 0x5ec]
push eax
mov eax, dword [0x43d76c]
call fcn.00403a50
mov edx, eax
lea eax, [ebp - 0x5f0]
call fcn.004037c4
mov eax, dword [ebp - 0x5f0]
pop edx
call fcn.00407070
mov eax, dword [0x43d770]
call fcn.00406f64
test al, al
jne 0x439527
mov edx, 0x43a4a8
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a4c8
call fcn.0040399c
jne 0x4395a9
cmp dword [0x43d76c], 0
jne 0x43956d
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d76c]
call fcn.00407058
mov eax, dword [0x43d76c]
call fcn.00406f64
test al, al
je 0x439597
mov edx, 0x43a4d4
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a4f4
call fcn.0040399c
jne 0x439614
cmp dword [0x43d76c], 0
jne 0x4395dd
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d76c]
call fcn.004026e8
call fcn.004026d0
test eax, eax
je 0x439602
mov edx, 0x43a504
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a528
call fcn.0040399c
jne 0x43967f
cmp dword [0x43d76c], 0
jne 0x439648
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d76c]
call fcn.00402748
call fcn.004026d0
test eax, eax
je 0x43966d
mov edx, 0x43a538
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov edx, 0x43a428
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a55c
call fcn.0040399c
jne 0x43974a
cmp dword [0x43d76c], 0
jne 0x4396b7
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov edx, dword [0x43d76c]
lea eax, [ebp - 0x49c]
call fcn.004048f2
lea eax, [ebp - 0x49c]
call fcn.00404d5f
call fcn.004026d0
test eax, eax
je 0x43971e
mov edx, 0x43a568
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x49c]
call fcn.00403bc4
lea eax, [ebp - 0x49c]
call fcn.00404cfc
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov eax, dword [0x43c078]
mov eax, dword [eax]
call fcn.0042a030
lea eax, [ebp - 0x49c]
call fcn.00404aec
test al, al
je 0x4396ee
lea eax, [ebp - 0x49c]
call fcn.00404a5c
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a5a0
call fcn.0040399c
jne 0x43986f
cmp dword [0x43d76c], 0
jne 0x439782
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov edx, dword [0x43d76c]
lea eax, [ebp - 0x5e8]
call fcn.004048f2
mov edx, 1
lea eax, [ebp - 0x5e8]
call fcn.00404e75
call fcn.004026d0
test eax, eax
je 0x4397be
mov edx, 0x43a568
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
lea eax, [ebp - 0x14]
call fcn.00403610
jmp 0x439832
lea edx, [ebp - 0x15]
lea eax, [ebp - 0x5e8]
call fcn.00404ba4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5ec]
xor eax, eax
mov al, byte [ebp - 0x15]
mov edx, 2
call fcn.00406dd8
push dword [ebp - 0x5ec]
push 0x43a380
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.0040394c
mov eax, dword [ebp - 0x14]
call fcn.0040388c
cmp eax, 0x4a
jle 0x439826
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00438bc4
lea eax, [ebp - 0x14]
call fcn.00403610
mov eax, dword [0x43c078]
mov eax, dword [eax]
call fcn.0042a030
lea eax, [ebp - 0x5e8]
call fcn.00404a98
test al, al
je 0x4397c8
cmp dword [ebp - 0x14], 0
je 0x439852
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00438bc4
lea eax, [ebp - 0x5e8]
call fcn.00404a5c
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
cmp byte [eax], 0x46
jne 0x439b51
mov eax, dword [0x43d768]
cmp byte [eax + 1], 0x54
jne 0x439b51
mov eax, dword [0x43d768]
cmp byte [eax + 2], 0x50
jne 0x439b51
mov eax, dword [0x43d768]
mov bl, byte [eax + 3]
cmp bl, 0x44
je 0x4398f5
cmp bl, 0x55
je 0x4398f5
push 0x43a5ac
lea eax, [ebp - 0x5f0]
mov edx, ebx
call fcn.004037b4
push dword [ebp - 0x5f0]
push 0x43a5cc
lea eax, [ebp - 0x5ec]
mov edx, 3
call fcn.0040394c
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
cmp dword [0x43d76c], 0
je 0x43992b
cmp dword [0x43d770], 0
je 0x43992b
cmp dword [0x43d774], 0
je 0x43992b
cmp dword [0x43d778], 0
je 0x43992b
cmp dword [0x43d77c], 0
je 0x43992b
cmp dword [0x43d770], 0
jne 0x439945
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
push 0x43a5f0
push dword [0x43d774]
push 0x43a604
lea eax, [ebp - 0x5ec]
mov edx, 3
call fcn.0040394c
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov bl, 1
xor eax, eax
push ebp
push 0x4399ce
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x1e0]
lea eax, [esi + 0x7d0]
mov edx, dword [0x43d76c]
call fcn.00403664
lea eax, [esi + 0x7d4]
mov edx, dword [0x43d770]
call fcn.00403664
mov edx, dword [0x43d774]
mov eax, esi
call fcn.004330f0
mov dl, 2
mov eax, esi
call fcn.004378f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x439a09
test bl, bl
jne 0x439a1f
mov edx, 0x43a644
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x439b3f
mov edx, 0x43a660
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor edx, edx
push ebp
push 0x439aa9
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x1e0]
lea eax, [esi + 0x7d8]
mov edx, dword [0x43d778]
call fcn.00403664
mov edx, dword [0x43d77c]
mov eax, esi
call fcn.00437788
lea eax, [esi + 0x7e0]
mov edx, dword [0x43d780]
call fcn.00403664
mov dl, 2
mov eax, esi
call fcn.00437830
mov eax, dword [0x43d768]
mov al, byte [eax + 3]
cmp al, 0x44
jne 0x439a92
mov dl, 4
mov eax, esi
call fcn.004378f0
jmp 0x439a9f
cmp al, 0x55
jne 0x439a9f
mov dl, 5
mov eax, esi
call fcn.004378f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x439ae4
test bl, bl
je 0x439af5
mov edx, 0x43a6bc
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor edx, edx
push ebp
push 0x439b1d
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
mov dl, 3
call fcn.004378f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x439b3f
mov edx, 0x43a6e0
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a700
call fcn.0040399c
jne 0x439c35
mov ebx, 0x43d79c
push 0x4f
push ebx
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x5ec]
mov edx, ebx
call fcn.004037c4
lea eax, [ebp - 0x5ec]
mov edx, 0x43a710
call fcn.00403894
mov eax, dword [ebp - 0x5ec]
lea ecx, [ebp - 0x2d0]
mov edx, 0x20
call fcn.00406fd8
test eax, eax
jne 0x439bc4
mov eax, dword [ebp - 0x2c4]
call fcn.00407058
lea eax, [ebp - 0x2d0]
call fcn.00407024
test eax, eax
je 0x439baa
lea eax, [ebp - 0x2d0]
call fcn.00407048
push 0x4f
push ebx
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x5ec]
mov edx, ebx
call fcn.004037c4
lea eax, [ebp - 0x5ec]
mov edx, 0x43a710
call fcn.00403894
mov eax, dword [ebp - 0x5ec]
lea ecx, [ebp - 0x2d0]
mov edx, 0x20
call fcn.00406fd8
test eax, eax
jne 0x439c28
mov eax, dword [ebp - 0x2c4]
call fcn.00407058
lea eax, [ebp - 0x2d0]
call fcn.00407024
test eax, eax
je 0x439c0e
lea eax, [ebp - 0x2d0]
call fcn.00407048
jmp 0x439c33
mov eax, dword [0x43d768]
mov edx, 0x43a720
call fcn.0040399c
jne 0x439c48
jmp 0x439c46
mov eax, dword [0x43d768]
mov edx, 0x43a730
call fcn.0040399c
jne 0x43a094
mov eax, dword [0x43d76c]
mov edx, 0x43a73c
call fcn.0040399c
je 0x439cab
mov eax, dword [0x43d76c]
mov edx, 0x43a74c
call fcn.0040399c
je 0x439cab
cmp dword [0x43d76c], 0
je 0x439c91
cmp dword [0x43d770], 0
jne 0x439cab
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov dl, 1
mov eax, dword [0x42f270]
call fcn.0042f3a4
mov dword [ebp - 8], eax
mov edx, 0x80000002
mov eax, dword [ebp - 8]
call fcn.0042f438
xor ecx, ecx
mov edx, 0x43a75c
mov eax, dword [ebp - 8]
call fcn.0042f594
mov eax, dword [ebp - 8]
mov byte [eax + 0xc], 0
mov eax, dword [0x43d76c]
mov edx, 0x43a794
call fcn.0040399c
jne 0x439d24
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042f4a0
test al, al
je 0x439d12
mov edx, 0x43a7a4
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov edx, 0x43a7c4
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a7e8
call fcn.0040399c
jne 0x439d6b
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042f6b8
test al, al
je 0x439d59
mov edx, 0x43a7f8
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov edx, 0x43a818
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a840
call fcn.0040399c
jne 0x439db2
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042f834
test al, al
je 0x439da0
mov edx, 0x43a850
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov edx, 0x43a7c4
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a874
call fcn.0040399c
jne 0x439df9
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042fc98
test al, al
je 0x439de7
mov edx, 0x43a884
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov edx, 0x43a8a8
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a8d0
call fcn.0040399c
jne 0x439e42
xor ecx, ecx
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042f594
test al, al
je 0x439e30
mov edx, 0x43a8e0
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov edx, 0x43a8fc
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a914
call fcn.0040399c
jne 0x439e87
lea ecx, [ebp - 0x5ec]
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042facc
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a924
call fcn.0040399c
jne 0x439ebe
mov ecx, dword [0x43d774]
mov edx, dword [0x43d770]
mov eax, dword [ebp - 8]
call fcn.0042faa0
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a73c
call fcn.0040399c
jne 0x439fa5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [eax]
call dword [edx + 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [eax + 0x130]
mov eax, dword [ebp - 8]
call fcn.0042f898
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov eax, dword [eax + 0x130]
mov dword [ebp - 0x1c], eax
push 0x43a934
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x5f0]
call fcn.00406da8
push dword [ebp - 0x5f0]
push 0x43a944
lea eax, [ebp - 0x5ec]
mov edx, 3
call fcn.0040394c
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x439f93
inc esi
mov dword [ebx], 0
lea ecx, [ebp - 0x5ec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov eax, dword [eax + 0x130]
mov edx, dword [ebx]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
inc dword [ebx]
dec esi
jne 0x439f64
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
jmp 0x43a087
mov eax, dword [0x43d76c]
mov edx, 0x43a74c
call fcn.0040399c
jne 0x43a087
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [eax]
call dword [edx + 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [eax + 0x130]
mov eax, dword [ebp - 8]
call fcn.0042f960
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov eax, dword [eax + 0x130]
mov dword [ebp - 0x20], eax
push 0x43a934
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x5f0]
call fcn.00406da8
push dword [ebp - 0x5f0]
push 0x43a944
lea eax, [ebp - 0x5ec]
mov edx, 3
call fcn.0040394c
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x43a07a
inc esi
mov dword [ebx], 0
lea ecx, [ebp - 0x5ec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov eax, dword [eax + 0x130]
mov edx, dword [ebx]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x5ec]
mov eax, dword [ebp - 4]
call fcn.00438bc4
inc dword [ebx]
dec esi
jne 0x43a04b
mov edx, 0x43a584
mov eax, dword [ebp - 4]
call fcn.00438bc4
mov eax, dword [ebp - 8]
call fcn.00402bac
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a954
call fcn.0040399c
jne 0x43a1c1
cmp dword [0x43d76c], 0
je 0x43a1a7
cmp dword [0x43d770], 0
je 0x43a0df
push dword [0x43d76c]
push 0x43a380
push dword [0x43d770]
mov eax, 0x43d76c
mov edx, 3
call fcn.0040394c
cmp dword [0x43d774], 0
je 0x43a108
push dword [0x43d76c]
push 0x43a380
push dword [0x43d774]
mov eax, 0x43d76c
mov edx, 3
call fcn.0040394c
cmp dword [0x43d778], 0
je 0x43a131
push dword [0x43d76c]
push 0x43a380
push dword [0x43d778]
mov eax, 0x43d76c
mov edx, 3
call fcn.0040394c
cmp dword [0x43d77c], 0
je 0x43a15a
push dword [0x43d76c]
push 0x43a380
push dword [0x43d77c]
mov eax, 0x43d76c
mov edx, 3
call fcn.0040394c
cmp dword [0x43d780], 0
je 0x43a183
push dword [0x43d76c]
push 0x43a380
push dword [0x43d780]
mov eax, 0x43d76c
mov edx, 3
call fcn.0040394c
push 0
mov eax, dword [0x43d76c]
call fcn.00403a50
mov edx, eax
mov ecx, 0x43a95c
mov eax, dword [0x43c078]
mov eax, dword [eax]
call fcn.0042a32c
jmp 0x43a2ac
mov edx, 0x43a3e4
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2d7
mov eax, dword [0x43d768]
mov edx, 0x43a968
call fcn.0040399c
jne 0x43a1ee
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
xor ecx, ecx
mov dx, word [0x43d794]
call fcn.00435320
jmp 0x43a2ac
mov eax, dword [0x43d768]
mov edx, 0x43a978
call fcn.0040399c
jne 0x43a2ac
xor eax, eax
push ebp
push 0x43a23b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
xor edx, edx
call fcn.00435350
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a25d
xor eax, eax
push ebp
push 0x43a285
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x40]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2a7
call fcn.004034e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43a2cd
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00438bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43a31f
lea eax, [ebp - 0x5f0]
mov edx, 2
call fcn.00403634
lea eax, [ebp - 0x2d0]
mov edx, dword [0x405f5c]
mov ecx, 2
call fcn.00403e3c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00403634
ret