Function at 0x4085b0
Capabilities:
Create thread
Delete file
Get common file path
Get file attributes
Persist via run registry key
Query environment variable
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
mov eax, 0x1320
call fcn.004265c0
mov esi, esp
mov dword [esi + 0xc], ecx
mov eax, dword [0x42d00c]
xor eax, ebp
mov dword [esi + 0x1318], eax
mov eax, 0x12
mov dword [esi + 0x10], edx
mov dword [0x42d53c], edx
mov dword [esi + 0x164], 0x1f
lea eax, [eax + 0xb]
mov dword [esi + 0x160], eax
push 0x20
call fcn.0042557a
add esp, 4
lea ebx, [esi + 0x150]
lea ecx, [esi + 0x138]
mov dword [eax + 0x18], 0x494d4255
mov dword [eax + 0x14], 0x535f4f54
mov dword [eax + 0x10], 0x55415f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov word [eax + 0x1c], 0x54
mov dword [esi + 0x150], eax
mov edx, ebx
call fcn.00410360
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408679
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cc4d
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x148], 0
mov dword [esi + 0x12fc], 0xf
mov dword [esi + 0x12f8], 0
mov byte [esi + 0x12e8], 0
setne byte [0x42d540]
push 0x104
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x408a7b
push 0x2e
push ebx
call sub.VCRUNTIME140.dll_wcsrchr
add esp, 8
test eax, eax
je 0x408a7b
push str..ini
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
add esp, 8
mov dword [esi + 0x1314], 7
mov dword [esi + 0x1310], 0
mov word [esi + 0x1300], 0
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
add esp, 4
mov edi, eax
cmp eax, 7
jbe 0x40872c
sub esp, 0xc
mov al, byte [esi + 0x40]
lea ecx, [esi + 0x1300]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov dword [esp + 8], eax
call section..text
jmp 0x408751
mov eax, edi
mov dword [esi + 0x1310], edi
lea ecx, [esi + 0x1300]
add eax, edi
push eax
push ebx
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esi + edi*2 + 0x1300], 0
lea edi, [esi + 0x40]
lea edx, [esi + 0x1300]
mov ecx, edi
call fcn.00411340
lea ecx, [esi + 0x12e8]
push edi
call fcn.004065f0
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x408791
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cd0e
push edi
push ecx
call fcn.004255af
add esp, 8
mov ecx, dword [esi + 0x1314]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0xf
mov byte [esi + 0x40], 0
cmp ecx, 8
jb 0x4087ce
mov eax, dword [esi + 0x1300]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40cdf6
push edx
push eax
call fcn.004255af
add esp, 8
lea ecx, [esi + 0x12e8]
xor edx, edx
xor ebx, ebx
call fcn.00406690
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x40881c
mov edx, 0x42d4ec
mov ecx, edi
push 1
call fcn.004060d0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403e40
mov bl, 1
test eax, eax
jne 0x40881c
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
test bl, bl
je 0x408a7b
push str.MOZ_CRASHREPORTER_STRINGS_OVERRIDE
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov bl, 1
test eax, eax
je 0x408a7d
cmp byte [eax], 0
mov edi, eax
je 0x408a7d
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x14], edi
jbe 0x40ccf1
test eax, eax
js 0x41031d
mov ebx, eax
mov dword [esi + 0x1c], eax
or ebx, 0xf
js 0x40faba
cmp ebx, 0x16
mov eax, 0x16
cmova eax, ebx
mov dword [esi + 0x18], eax
inc eax
cmp eax, 0x1000
jae 0x40d018
push eax
call fcn.0042557a
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x1c]
mov eax, dword [esi + 0x18]
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], eax
push ebx
push dword [esi + 0x14]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov bl, 1
mov dword [esi + 0x40], edi
lea edi, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, edi
call fcn.00411750
cmp dword [esi + 0x164], 7
jbe 0x4088fb
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov edi, eax
cmp ecx, 8
jb 0x40892f
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40d121
push edx
push eax
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x408955
mov ecx, dword [esi + 0x40]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40d094
push ebx
push ecx
call fcn.004255af
add esp, 8
mov bl, 1
cmp edi, 0xffffffff
je 0x408a7d
mov edi, dword [esi + 0x14]
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xf
mov dword [esi + 0x18], eax
jbe 0x40ce4b
test eax, eax
js 0x41031d
mov edi, eax
or edi, 0xf
js 0x40fcbc
cmp edi, 0x16
mov eax, 0x16
cmova eax, edi
mov dword [esi + 0x1c], eax
inc eax
cmp eax, 0x1000
jae 0x40d101
push eax
call fcn.0042557a
add esp, 4
mov ebx, eax
mov edi, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x160], edi
mov dword [esi + 0x164], eax
push edi
push dword [esi + 0x14]
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x150], ebx
mov bl, 1
lea ecx, [esi + 0x150]
xor edx, edx
call fcn.00406690
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x408a3f
mov edx, 0x42d4ec
mov ecx, edi
push 1
call fcn.004060d0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403e40
test eax, eax
jne 0x408a3f
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408a7d
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d198
push edi
push ecx
call fcn.004255af
add esp, 8
jmp 0x408a7d
xor ebx, ebx
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x408aa7
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cc6a
push edi
push ecx
call fcn.004255af
add esp, 8
test bl, bl
je 0x4096db
lea edi, [esi + 0x150]
mov edx, 0x4276d8
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276dc
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276e0
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276e4
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276e8
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276ec
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276f0
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276f4
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276f8
mov ecx, edi
call fcn.00418b10
mov edx, 0x4276fc
mov ecx, edi
call fcn.00418b10
mov dword [esi + 0x150], 8
mov dword [esi + 0x154], 0x20
push edi
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push str.Msftedit.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp dword [esi + 0xc], 2
jl 0x408b94
mov eax, dword [esi + 0x10]
mov ebx, dword [eax + 4]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [0x42d55c]
cmp ecx, eax
jae 0x40cc1c
sub esp, 0xc
mov cl, byte [esi + 0x150]
mov byte [esp + 4], cl
mov ecx, 0x42d548
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.00405430
cmp dword [0x42d558], 0
mov ecx, 0x1f
je 0x409778
lea ebx, [esi + 0x120]
mov dword [esi + 0x130], 0
mov dword [esi + 0x134], 0
mov ecx, ebx
push 0x42d548
call fcn.0041a1f0
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0
mov ecx, edi
push ebx
call fcn.0041a1f0
mov dword [esi + 0x34], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x38], 0
push 0x18
call fcn.0042557a
add esp, 4
lea ebx, [eax + 0x18]
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], eax
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov ecx, eax
mov dword [esi + 0x38], ebx
push edi
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
mov dword [esi + 0x34], ebx
cmp eax, 0x10
jb 0x408c56
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cd2b
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push 0x30
call fcn.0042557a
add esp, 4
mov edi, eax
mov dword [esi + 0x160], 0x22
mov dword [esi + 0x164], 0x2f
push 0x22
push str.MOZ_CRASHREPORTER_DUMP_ALL_THREADS
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + 0x22], 0
mov dword [esi + 0x150], edi
lea edi, [esi + 0x150]
lea ecx, [esi + 0x108]
mov edx, edi
call fcn.00410360
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408ce9
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40cd48
push ebx
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x118], 0
je 0x408d5d
mov eax, 0xf
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x30]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x6c6c
mov dword [esi + 0x150], 0x75662d2d
mov byte [esi + 0x156], 0
push edi
push dword [esi + 0x30]
call fcn.0041b7e0
add esp, 8
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408d5d
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cf93
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x20
call fcn.0042557a
add esp, 4
lea edi, [esi + 0x150]
lea edx, [esi + 0x40]
mov dword [esi + 0x50], 0x11
mov dword [esi + 0x54], 0x1f
mov dword [eax + 0xc], 0x657a796c
mov dword [eax + 8], 0x616e612d
mov dword [eax + 4], 0x706d7564
mov dword [eax], 0x696e696d
mov word [eax + 0x10], 0x72
mov dword [esi + 0x40], eax
mov ecx, edi
call fcn.00410970
lea edx, [esi + 0x30]
mov ecx, edi
push 1
call fcn.004104b0
add esp, 4
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408df5
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40cd65
push ebx
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
jb 0x408e34
mov ecx, dword [esi + 0x40]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40cd82
push ebx
push ecx
call fcn.004255af
add esp, 8
mov edx, 0x4276c0
mov ecx, edi
call fcn.00410ae0
mov ecx, 0x42d560
push edi
call fcn.004065f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408e75
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40cd9f
push ebx
push ecx
call fcn.004255af
add esp, 8
cmp dword [0x42d570], 0
je 0x409859
mov edx, 0x42d560
mov ecx, edi
call fcn.00411750
cmp dword [esi + 0x164], 7
jbe 0x408e9d
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov edi, eax
cmp ecx, 8
jb 0x408ed1
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40cfcd
push edx
push eax
call fcn.004255af
add esp, 8
cmp edi, 0xffffffff
je 0x40989a
lea edi, [esi + 0x150]
mov edx, str..memory.json.gz
mov ecx, edi
call fcn.00410ae0
mov ecx, 0x42d578
push edi
call fcn.004065f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408f21
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40cfec
push ebx
push ecx
call fcn.004255af
add esp, 8
mov edx, 0x42d578
mov ecx, edi
call fcn.00411750
cmp dword [esi + 0x164], 7
jbe 0x408f3c
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov edi, eax
cmp ecx, 8
jb 0x408f70
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40d038
push edx
push eax
call fcn.004255af
add esp, 8
cmp edi, 0xffffffff
jne 0x408f95
cmp dword [0x42d58c], 0xf
mov eax, 0x42d578
jbe 0x408f88
mov eax, dword [0x42d578]
mov dword [0x42d588], 0
mov byte [eax], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
push 0x40
call fcn.0042557a
add esp, 4
mov ecx, 0x42d560
xor edx, edx
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi + 0x28], eax
xor ebx, ebx
call fcn.00406690
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x409009
lea edx, [esi + 0x28]
mov ecx, edi
push 1
call fcn.004060d0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403e40
mov bl, 1
test eax, eax
jne 0x409009
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
test bl, bl
je 0x409939
mov ebx, 0xf
lea edi, [esi + 0x150]
mov dword [esi + 0x160], 0xb
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], ebx
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov dword [esi + 0x158], 0x656d61
push edi
call fcn.00410c30
add esp, 4
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x28]
je 0x40a7fc
mov dword [esi + 0x164], ebx
mov dword [esi + 0x160], 0xb
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov dword [esi + 0x158], 0x656d61
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
lea ecx, [esi + 0x40]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0
mov dword [esi + 0x10], ecx
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x4090fc
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40d1e6
push ebx
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x28]
lea edx, [esi + 0x1300]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x726f
mov dword [esi + 0x150], 0x646e6556
mov byte [esi + 0x156], 0
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x1300]
lea ebx, [esi + 0x1300]
mov dword [esi + 0x1310], 0
mov dword [esi + 0x1314], 0
mov ecx, ebx
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x409192
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d203
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x1310], 0
jne 0x409213
mov eax, dword [esi + 0x1314]
cmp eax, 7
jae 0x40d080
mov edi, eax
shr edi, 1
mov ecx, edi
xor ecx, 0x7fffffff
cmp eax, ecx
ja 0x40fffb
add edi, eax
mov ebx, 0xf
cmp edi, 0xf
cmova ebx, edi
lea eax, [ebx + 1]
cmp eax, 0x1000
jae 0x40e2e3
test eax, eax
je 0x41021e
push eax
call fcn.0042557a
add esp, 4
mov dword [esi + 0x1310], 7
mov dword [esi + 0x1314], ebx
lea ebx, [esi + 0x1300]
mov dword [eax], 0x697a6f4d
mov dword [eax + 4], 0x616c6c
mov dword [esi + 0x1300], eax
cmp dword [esi + 0x1314], 0xf
jbe 0x409222
mov ebx, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], eax
mov byte [esi + 0x12e8], 0
push 0x20
call fcn.0042557a
add esp, 4
lea edi, [esi + 0x12e8]
mov dword [esi + 0x12f8], 0x18
mov dword [esi + 0x12fc], 0x1f
mov dword [eax + 0x14], 0x656c7469
mov dword [eax + 0x10], 0x54726f64
mov dword [eax + 0xc], 0x6e655672
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x18], 0
mov dword [esi + 0x12e8], eax
lea edx, [esi + 0x150]
mov ecx, 0x42d4ec
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x150]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x4092ba
mov eax, dword [eax]
push ebx
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x4092fa
mov ecx, dword [esi + 0x12e8]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40d220
push ebx
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], eax
mov byte [esi + 0x12e8], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12f8], 0x12
mov dword [esi + 0x12fc], 0x1f
mov word [eax + 0x10], 0x656c
mov dword [eax + 0xc], 0x74695472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x12], 0
mov dword [esi + 0x12e8], eax
lea edx, [esi + 0x12d0]
mov ecx, 0x42d4ec
push edi
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12d0]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40ce74
sub esp, 0xc
mov al, byte [esi + 0x12d0]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12fc]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x4093ed
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d23d
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x1e
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x1c], 0x3274
mov dword [eax + 0x18], 0x78655472
mov dword [eax + 0x14], 0x6f727245
mov dword [eax + 0x10], 0x74637564
mov dword [eax + 0xc], 0x6f725072
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x1e], 0
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12e8]
mov ecx, 0x42d4ec
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12e8]
lea ebx, [esi + 0x12e8]
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], 0
mov ecx, ebx
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x4094d0
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d260
push edi
push ecx
call fcn.004255af
add esp, 8
mov edi, dword [esi + 0x12f8]
cmp dword [esi + 0x12fc], 0xf
jbe 0x4094e5
mov ebx, dword [esi + 0x12e8]
mov ecx, ebx
mov edx, edi
push 2
push 0
call fcn.0041b600
add esp, 8
cmp eax, 0xffffffff
je 0x4099d6
add eax, 2
mov ecx, ebx
mov edx, edi
push 2
push eax
call fcn.0041b600
add esp, 8
cmp eax, 0xffffffff
je 0x4099d6
cmp dword [esi + 0x54], 0xf
jbe 0x409525
mov eax, dword [esi + 0x40]
mov dword [esi + 0x10], eax
mov eax, 0xf
lea ebx, [esi + 0x12d0]
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x1e
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x1c], 0x3274
mov dword [eax + 0x18], 0x78655472
mov dword [eax + 0x14], 0x6f727245
mov dword [eax + 0x10], 0x74637564
mov dword [eax + 0xc], 0x6f725072
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x1e], 0
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x4095ca
mov eax, dword [eax]
push 0x42813a
push dword [esi + 0x10]
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x14
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x409611
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e33b
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x16
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x14], 0x7478
mov dword [eax + 0x10], 0x6554726f
mov dword [eax + 0xc], 0x72724572
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x16], 0
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40d057
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
jmp 0x409aa5
push 0x20
call fcn.0042557a
add esp, 4
lea ecx, [esi + 0x150]
mov dword [esi + 0x160], 0x1c
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0x18], 0x2e6e6f69
mov dword [eax + 0x14], 0x74617275
mov dword [eax + 0x10], 0x6769666e
mov dword [eax + 0xc], 0x6f632064
mov dword [eax + 8], 0x61657220
mov dword [eax + 4], 0x74276e64
mov dword [eax], 0x6c756f43
mov byte [eax + 0x1c], 0
mov dword [esi + 0x150], eax
call fcn.00405960
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40aed4
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x40aeca
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jb 0x40cdea
jmp 0x41034e
cmp byte [0x42d540], 0
jne 0x40aed4
mov eax, 0x12
mov dword [esi + 0x164], ecx
add eax, 2
mov dword [esi + 0x160], eax
push 0x20
call fcn.0042557a
add esp, 4
mov dword [eax + 0x10], 0x746c7561
mov dword [eax + 0xc], 0x66654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x14], 0
mov dword [esi + 0x150], eax
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
push edi
call fcn.0041a4a0
add esp, 4
mov edx, dword [esi + 0x40]
lea edi, [esi + 0x40]
mov ecx, edi
add edx, 0x28
call fcn.00411750
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40981a
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40d0bc
push ebx
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x54], 7
jbe 0x409823
mov edi, dword [esi + 0x40]
push 0x10
push 0x4294c8
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x40aed4
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40d15c
push edx
push eax
jmp 0x40aecc
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x11
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x746e656d
mov dword [eax + 8], 0x75677241
mov dword [eax + 4], 0x64614272
mov dword [eax], 0x6f727245
mov word [eax + 0x10], 0x73
jmp 0x4098de
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x14
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0x10], 0x73747369
mov dword [eax + 0xc], 0x7845656c
mov dword [eax + 8], 0x69466172
mov dword [eax + 4], 0x74784572
mov dword [eax], 0x6f727245
mov byte [eax + 0x14], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
push eax
call fcn.0041a4a0
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405960
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ae78
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cfb0
push edi
push ecx
call fcn.004255af
add esp, 8
jmp 0x40ae78
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x6461
mov dword [eax + 0xc], 0x6552656c
mov dword [eax + 8], 0x69466172
mov dword [eax + 4], 0x74784572
mov dword [eax], 0x6f727245
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
push eax
call fcn.0041a4a0
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405960
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x4099ce
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d0e4
push edi
push ecx
call fcn.004255af
add esp, 8
lea ebx, [esi + 0x28]
jmp 0x40ae71
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x16
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x14], 0x7478
mov dword [eax + 0x10], 0x6554726f
mov dword [eax + 0xc], 0x72724572
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x16], 0
mov dword [esi + 0x12d0], eax
lea eax, [esi + 0x12d0]
mov ecx, 0x42d4ec
lea edx, [esi + 0x12b8]
push eax
call fcn.0041a4a0
add esp, 4
mov ecx, dword [esi + 0x12b8]
lea eax, [esi + 0x12e8]
lea ebx, [ecx + 0x28]
cmp eax, ebx
je 0x409aaa
mov edi, dword [esi + 0x12f8]
cmp dword [esi + 0x12fc], 0xf
jbe 0x409a84
mov eax, dword [esi + 0x12e8]
mov edx, dword [ecx + 0x3c]
cmp edx, edi
jae 0x40d009
sub esp, 0xc
mov cl, byte [esi + 0x12b8]
mov byte [esp + 4], cl
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, ebx
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x409ada
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d27d
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40ce15
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x1d
mov dword [esi + 0x12e4], 0x1f
mov dword [eax + 0x18], 0x74786554
mov dword [eax + 0x14], 0x6e6f6974
mov dword [eax + 0x10], 0x70697263
mov dword [eax + 0xc], 0x73654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov word [eax + 0x1c], 0x32
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x409b82
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x409bc2
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d2a0
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x12e0], 0x1d
mov dword [esi + 0x12e4], 0x1f
mov dword [eax + 0x18], 0x74786554
mov dword [eax + 0x14], 0x6e6f6974
mov dword [eax + 0x10], 0x70697263
mov dword [eax + 0xc], 0x73654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov word [eax + 0x1c], 0x32
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40ce9d
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x409cc6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d2c3
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x1314], 0xf
jbe 0x40ce1d
mov edi, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d8], 0x70655264
mov dword [esi + 0x12d4], 0x6e65536b
mov dword [esi + 0x12d0], 0x63656843
mov dword [esi + 0x12dc], 0x74726f
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x409d3b
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x409d7b
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d2e6
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d8], 0x70655264
mov dword [esi + 0x12d4], 0x6e65536b
mov dword [esi + 0x12d0], 0x63656843
mov dword [esi + 0x12dc], 0x74726f
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40cec6
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x409e46
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d309
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x1314], 0xf
jbe 0x40ce28
mov edi, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d8], 0x6d45776f
mov dword [esi + 0x12d4], 0x6c6c416b
mov dword [esi + 0x12d0], 0x63656843
mov dword [esi + 0x12dc], 0x6c6961
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x409ebb
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x409efb
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d32c
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d8], 0x6d45776f
mov dword [esi + 0x12d4], 0x6c6c416b
mov dword [esi + 0x12d0], 0x63656843
mov dword [esi + 0x12dc], 0x6c6961
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40ceef
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x409fc6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d34f
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40ce33
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 7
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74736552
mov dword [esi + 0x12d4], 0x747261
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a021
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a061
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d372
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 7
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74736552
mov dword [esi + 0x12d4], 0x747261
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40cf18
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a118
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d395
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40ce3b
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 5
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74697551
mov word [esi + 0x12d4], 0x32
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a172
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a1b2
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d3b8
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 5
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74697551
mov word [esi + 0x12d4], 0x32
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40cf41
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a268
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d3db
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40ce43
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xe
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov word [esi + 0x12dc], 0x6566
mov dword [esi + 0x12d8], 0x694c664f
mov dword [esi + 0x12d4], 0x646e4572
mov dword [esi + 0x12d0], 0x6f727245
mov byte [esi + 0x12de], 0
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a2dd
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00406090
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a31d
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d3fe
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xe
lea edx, [esi + 0x12b8]
mov ecx, 0x42d4ec
mov dword [esi + 0x12e4], eax
mov word [esi + 0x12dc], 0x6566
mov dword [esi + 0x12d8], 0x694c664f
mov dword [esi + 0x12d4], 0x646e4572
mov dword [esi + 0x12d0], 0x6f727245
mov byte [esi + 0x12de], 0
push ebx
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esi + 0x12b8]
lea eax, [ebx + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40cf6a
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405430
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a3e8
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d421
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40a412
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d43e
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x1314]
cmp eax, 0x10
jb 0x40a43c
mov ecx, dword [esi + 0x1300]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d45b
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40a460
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d478
push edi
push ecx
call fcn.004255af
add esp, 8
mov edi, 0xf
lea ebx, [esi + 0x150]
mov dword [esi + 0x160], 9
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], edi
mov dword [esi + 0x154], 0x52557265
mov dword [esi + 0x150], 0x76726553
mov word [esi + 0x158], 0x4c
push ebx
call fcn.00410c30
add esp, 4
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x28]
je 0x40a850
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], 0
mov byte [esi + 0x40], 0
push 0x30
call fcn.0042557a
add esp, 4
lea edx, [esi + 0x40]
mov ecx, ebx
mov dword [esi + 0x50], 0x20
mov dword [esi + 0x54], 0x2f
mov dword [eax + 0x1c], 0x59524f54
mov dword [eax + 0x18], 0x43455249
mov dword [eax + 0x14], 0x445f4154
mov dword [eax + 0x10], 0x41445f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov byte [eax + 0x20], 0
mov dword [esi + 0x40], eax
call fcn.00410360
mov ecx, 0x42d4f4
push ebx
call fcn.004065f0
mov eax, dword [esi + 0x164]
lea ebx, [esi + 0x28]
cmp eax, 0x10
jb 0x40a559
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d4a0
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
jb 0x40a598
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d4bd
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [0x42d504], 0
jne 0x40aa23
mov eax, 0xf
lea edi, [esi + 0x150]
mov dword [esi + 0x160], 0xb
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov dword [esi + 0x158], 0x656d61
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], 0
lea ecx, [esi + 0x12e8]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40a643
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40f964
push edi
push ecx
call fcn.004255af
add esp, 8
lea edi, [esi + 0x150]
mov eax, 0xf
lea ebx, [esi + 0x40]
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x28]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x726f
mov dword [esi + 0x150], 0x646e6556
mov byte [esi + 0x156], 0
mov edx, ebx
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], 0
lea ecx, [esi + 0x12d0]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40a6d9
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40f981
push edi
push ecx
call fcn.004255af
add esp, 8
lea edi, [esi + 0x150]
push 0x208
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x40a8cc
cmp dword [esi + 0x12e0], 0
je 0x40a74c
lea edx, [esi + 0x12d0]
mov ecx, ebx
call fcn.00411750
cmp dword [esi + 0x54], 7
jbe 0x40a71f
mov ebx, dword [esi + 0x40]
push ebx
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x40a74c
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40fe0b
push edx
push eax
call fcn.004255af
add esp, 8
lea edi, [esi + 0x40]
lea edx, [esi + 0x12e8]
mov ecx, edi
call fcn.00411750
cmp dword [esi + 0x54], 7
jbe 0x40a765
mov edi, dword [esi + 0x40]
push edi
lea edi, [esi + 0x150]
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esi + 0x54]
lea ebx, [esi + 0x28]
cmp ecx, 8
jb 0x40a79b
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40fb18
push edx
push eax
call fcn.004255af
add esp, 8
push str.Crash_Reports
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [esi + 0x1314], 7
mov dword [esi + 0x1310], 0
mov word [esi + 0x1300], 0
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
add esp, 4
mov edx, edi
mov edi, eax
cmp eax, 7
jbe 0x40a921
sub esp, 0xc
mov al, byte [esi + 0x40]
lea ecx, [esi + 0x1300]
mov byte [esp + 4], al
mov dword [esp + 8], edx
mov dword [esp], edi
call section..text
jmp 0x40a946
push 0x20
call fcn.0042557a
add esp, 4
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x656d
mov dword [eax + 0xc], 0x614e7463
mov dword [eax + 8], 0x75646f72
mov dword [eax + 4], 0x506f4e72
mov dword [eax], 0x6f727245
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
push edi
jmp 0x40a8a2
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x10
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x4c525572
mov dword [eax + 8], 0x65767265
mov dword [eax + 4], 0x536f4e72
mov dword [eax], 0x6f727245
mov byte [eax + 0x10], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
push eax
call fcn.0041a4a0
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405960
mov eax, dword [esi + 0x164]
lea ebx, [esi + 0x28]
cmp eax, 0x10
jae 0x40ae52
jmp 0x40ae71
lea eax, [esi + 0x40]
mov dword [esi + 0x12b8], 0x207
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x40afa2
cmp dword [0x42d508], 0xf
mov eax, 0x42d4f4
jbe 0x40a90c
mov eax, dword [0x42d4f4]
lea ebx, [esi + 0x28]
mov dword [0x42d504], 0
mov byte [eax], 0
jmp 0x40a9c2
mov eax, edi
mov dword [esi + 0x1310], edi
lea ecx, [esi + 0x1300]
add eax, edi
push eax
push edx
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esi + edi*2 + 0x1300], 0
lea edi, [esi + 0x40]
lea edx, [esi + 0x1300]
mov ecx, edi
call fcn.00411340
mov ecx, 0x42d4f4
push edi
call fcn.004065f0
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40a985
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40fa7b
push edi
push ecx
call fcn.004255af
add esp, 8
mov ecx, dword [esi + 0x1314]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0xf
mov byte [esi + 0x40], 0
cmp ecx, 8
jb 0x40a9c2
mov eax, dword [esi + 0x1300]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40fb40
push edx
push eax
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a9ec
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40f99e
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40aa16
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40f9be
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [0x42d504], 0
je 0x40addf
mov ecx, 0x42d4f4
call fcn.00410cb0
test al, al
je 0x40addf
lea ebx, [esi + 0x40]
mov edx, 0x42d4f4
mov ecx, ebx
push 0x428e23
call fcn.004084e0
add esp, 4
mov ecx, ebx
push str.submit.log
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
movsd qword [esi + 0x160], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x158], xmm1
movsd qword [esi + 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40aab3
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e37e
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x164], 0xf
jbe 0x40d0b1
mov ecx, dword [esi + 0x150]
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0xc], ecx
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x40d142
test edi, edi
js 0x41031d
mov ebx, edi
mov dword [esi + 0x14], edi
or ebx, 0xf
js 0x4100be
cmp ebx, 0x16
mov eax, 0x16
cmova eax, ebx
mov dword [esi + 0x10], eax
inc eax
cmp eax, 0x1000
jae 0x40e35e
push eax
call fcn.0042557a
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], eax
push ebx
push dword [esi + 0xc]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x40], edi
lea ecx, [esi + 0x40]
mov edx, 1
push 0
call fcn.00406990
add esp, 4
mov edi, eax
mov eax, dword [0x42d544]
cmp eax, edi
je 0x40ab7b
test eax, eax
je 0x40ab7b
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
lea ecx, [eax + edx]
mov eax, dword [eax + edx]
push 1
call dword [eax]
mov eax, dword [esi + 0x54]
mov dword [0x42d544], edi
cmp eax, 0x10
jb 0x40aba5
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e39b
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40abcf
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e3b8
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x30
call fcn.0042557a
add esp, 4
mov dword [esi + 0x50], 0x22
mov edi, eax
mov dword [esi + 0x54], 0x2f
push 0x22
push str.MOZ_CRASHREPORTER_EVENTS_DIRECTORY
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ebx, [esi + 0x150]
lea edx, [esi + 0x40]
mov byte [edi + 0x22], 0
mov dword [esi + 0x40], edi
mov ecx, ebx
call fcn.00410360
mov ecx, 0x42d50c
push ebx
call fcn.004065f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ac58
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e3d5
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
jb 0x40ac97
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e3f2
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x30
call fcn.0042557a
add esp, 4
lea edx, [esi + 0x40]
mov ecx, ebx
mov dword [esi + 0x50], 0x20
mov dword [esi + 0x54], 0x2f
mov dword [eax + 0x1c], 0x59524f54
mov dword [eax + 0x18], 0x43455249
mov dword [eax + 0x14], 0x445f474e
mov dword [eax + 0x10], 0x49505f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov byte [eax + 0x20], 0
mov dword [esi + 0x40], eax
call fcn.00410360
mov ecx, 0x42d524
push ebx
call fcn.004065f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ad3f
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e40f
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x54]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
jb 0x40ad7e
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e42c
push edi
push ecx
call fcn.004255af
add esp, 8
mov edi, 0xf
mov dword [esi + 0x100], 0
mov dword [esi + 0xe8], 0
mov dword [esi + 0x104], edi
mov dword [esi + 0xec], edi
mov byte [esi + 0xf0], 0
mov byte [esi + 0xd8], 0
push 0x17
push 0x429282
push 0x429282
push 0x429282
push 0
call sub.nss3.dll_NSS_Initialize
add esp, 0x14
test eax, eax
je 0x40af13
mov dword [esi + 0x1314], edi
jmp 0x40b166
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x13
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x5073676e
mov dword [eax + 8], 0x69747465
mov dword [eax + 4], 0x536f4e72
mov dword [eax], 0x6f727245
mov dword [eax + 0x10], 0x687461
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42d4ec
push eax
call fcn.0041a4a0
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405960
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ae71
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40d17b
push edi
push ecx
call fcn.004255af
add esp, 8
mov ecx, ebx
call fcn.00405650
mov eax, dword [esi + 0x11c]
cmp eax, 0x10
jb 0x40aea2
mov ecx, dword [esi + 0x108]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cdbc
push edi
push ecx
call fcn.004255af
add esp, 8
lea ecx, [esi + 0x30]
call fcn.0041b720
mov eax, dword [esi + 0x134]
cmp eax, 0x10
jb 0x40aed4
mov ecx, dword [esi + 0x120]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cdd9
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x14c]
cmp eax, 0x10
jb 0x40aefe
mov ecx, dword [esi + 0x138]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cc87
push edi
push ecx
call fcn.004255af
add esp, 8
mov ecx, dword [esi + 0x1318]
xor ecx, ebp
call fcn.00425eac
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 4
call sub.nss3.dll_HASH_Create
add esp, 4
test eax, eax
je 0x40b155
mov ebx, eax
push eax
call sub.nss3.dll_HASH_Begin
add esp, 4
mov ecx, 0x42d548
mov edx, 1
call fcn.00406690
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x40b015
mov dword [esi + 0xc], ebx
lea ebx, [esi + 0x150]
mov ecx, edi
push 0
push 0x1000
push ebx
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::bad_void_const]
test al, al
jne 0x40b01c
push dword [edi + 8]
push ebx
push dword [esi + 0xc]
call sub.nss3.dll_HASH_Update
add esp, 0xc
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
je 0x40af54
mov dword [esi + 0x10], 0
jmp 0x40b021
lea eax, [esi + 0x1300]
lea ecx, [esi + 0x12b8]
push ecx
lea ecx, [esi + 0x150]
push ecx
push eax
push 0
push str.AppData
push dword [esi + 0x40]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
push dword [esi + 0x40]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esi + 0x12b8]
test al, 1
jne 0x40a8f9
test edi, edi
jne 0x40a8f9
cmp dword [esi + 0x1300], 1
jne 0x40a8f9
test eax, eax
je 0x40a8f9
lea edi, [esi + 0x150]
cmp dword [esi + 0x12e0], 0
jne 0x40a709
jmp 0x40a74c
mov al, 1
mov dword [esi + 0x10], eax
jmp 0x40b049
mov al, 1
mov dword [esi + 0x10], eax
lea ecx, [edi + 0x10]
call fcn.00403e40
mov ebx, dword [esi + 0xc]
test eax, eax
jne 0x40b049
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax]
push 1
call dword [eax]
mov dword [esi + 0x12e8], 0
lea eax, [esi + 0x12e8]
push 0x20
push eax
lea eax, [esi + 0x40]
push eax
push ebx
call sub.nss3.dll_HASH_End
add esp, 0x10
mov edi, dword [esi + 0x12e8]
push ebx
call sub.nss3.dll_HASH_Destroy
add esp, 4
cmp byte [esi + 0x10], 0
jne 0x40b155
cmp edi, 0x20
jne 0x40b155
lea edi, [esi + 0x150]
mov ecx, edi
push 1
push 2
call fcn.00411060
mov ebx, 0xffffffe0
push 0
push 2
lea eax, [esi + 0x1300]
push eax
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__
add esp, 0xc
mov eax, dword [esi + 0x150]
mov eax, dword [eax + 4]
add eax, edi
push dword [esi + 0x130c]
push dword [esi + 0x1308]
push eax
call dword [esi + 0x1300]
add esp, 0xc
mov eax, dword [esi + 0x150]
mov edx, 0xfffff1ff
mov eax, dword [eax + 4]
mov byte [esi + eax + 0x190], 0x30
mov eax, dword [esi + 0x150]
mov eax, dword [eax + 4]
mov ecx, dword [esi + eax + 0x164]
and ecx, edx
or ecx, 0x800
mov dword [esi + eax + 0x164], ecx
movzx eax, byte [esi + ebx + 0x60]
mov ecx, edi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
inc ebx
jne 0x40b0b0
lea eax, [esi + 0x1300]
lea ecx, [esi + 0x154]
push eax
call fcn.0041b540
lea ebx, [esi + 0x1a0]
mov ecx, ebx
call fcn.004169d0
mov ecx, ebx
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
mov ebx, edi
jmp 0x40b177
mov eax, 0xf
lea ebx, [esi + 0x150]
mov dword [esi + 0x1314], eax
mov dword [esi + 0x1310], 0
mov byte [esi + 0x1300], 0
lea eax, [esi + 0x1300]
lea ecx, [esi + 0xf0]
push eax
call fcn.004065f0
mov eax, dword [esi + 0x1314]
cmp eax, 0x10
jb 0x40b1b3
mov ecx, dword [esi + 0x1300]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e449
push edi
push ecx
call fcn.004255af
add esp, 8
cmp dword [esi + 0x100], 0
je 0x40b260
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push 0x20
call fcn.0042557a
add esp, 4
lea ecx, [esi + 0x150]
lea edx, [esi + 0xf0]
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x6873
mov dword [eax + 0xc], 0x61483635
mov dword [eax + 8], 0x32616853
mov dword [eax + 4], 0x706d7564
mov dword [eax], 0x696e694d
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
call fcn.00410d50
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b260
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40fa1e
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0x12
mov ecx, 0x1f
add eax, 0xffffffff
adc ecx, 0xffffffff
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], ecx
push 0x20
call fcn.0042557a
add esp, 4
mov dword [eax + 0xc], 0x49746e65
mov dword [eax + 8], 0x696c4379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov word [eax + 0x10], 0x64
mov dword [esi + 0x150], eax
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x1220], 0
mov dword [esi + 0x1224], 0
lea ecx, [esi + 0x1210]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b30c
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e466
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x4c52
mov dword [eax + 0xc], 0x55726576
mov dword [eax + 8], 0x72655379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x1208], 0
mov dword [esi + 0x120c], 0
lea ecx, [esi + 0x11f8]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b3d0
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e483
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x6449
mov dword [eax + 0xc], 0x6e6f6973
mov dword [eax + 8], 0x73655379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x11f0], 0
mov dword [esi + 0x11f4], 0
lea ecx, [esi + 0x11e0]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b494
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e4a0
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0x12
mov ecx, 0x1f
add eax, 0xffffffff
adc ecx, 0xffffffff
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], ecx
push 0x20
call fcn.0042557a
add esp, 4
lea edi, [esi + 0x28]
lea edx, [esi + 0x150]
mov ebx, eax
mov dword [eax + 0xc], 0x49746e65
mov dword [eax + 8], 0x696c4379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov word [eax + 0x10], 0x64
mov dword [esi + 0x150], eax
mov ecx, edi
call fcn.00411010
push 0x20
push ebx
call fcn.004255af
add esp, 8
mov eax, 0x1f
mov dword [esi + 0x164], eax
mov eax, 0x12
mov dword [esi + 0x160], eax
push 0x20
call fcn.0042557a
add esp, 4
lea edx, [esi + 0x150]
mov ecx, edi
mov ebx, eax
mov word [eax + 0x10], 0x4c52
mov dword [eax + 0xc], 0x55726576
mov dword [eax + 8], 0x72655379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
call fcn.00411010
push 0x20
push ebx
call fcn.004255af
add esp, 8
mov eax, 0x1f
mov dword [esi + 0x164], eax
mov eax, 0x12
mov dword [esi + 0x160], eax
push 0x20
call fcn.0042557a
add esp, 4
lea edi, [esi + 0x150]
lea ecx, [esi + 0x28]
mov ebx, eax
mov word [eax + 0x10], 0x6449
mov dword [eax + 0xc], 0x6e6f6973
mov dword [eax + 8], 0x73655379
mov dword [eax + 4], 0x7274656d
mov dword [eax], 0x656c6554
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
mov edx, edi
call fcn.00411010
push 0x20
push ebx
mov ebx, edi
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 7
lea edx, [esi + 0x40]
lea ecx, [esi + 0x28]
mov dword [esi + 0x164], eax
mov dword [esi + 0x150], 0x6c697542
mov dword [esi + 0x154], 0x444964
push edi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x11d8], 0
mov dword [esi + 0x11dc], 0
lea ecx, [esi + 0x11c8]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b655
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e4bd
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0xe
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov word [esi + 0x15c], 0x6c65
mov dword [esi + 0x158], 0x6e6e6168
mov dword [esi + 0x154], 0x43657361
mov dword [esi + 0x150], 0x656c6552
mov byte [esi + 0x15e], 0
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x11c0], 0
mov dword [esi + 0x11c4], 0
lea ecx, [esi + 0x11b0]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b6f7
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e4e0
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0xb
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov dword [esi + 0x158], 0x656d61
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x11a8], 0
mov dword [esi + 0x11ac], 0
lea ecx, [esi + 0x1198]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b789
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e503
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, 0xf
lea edi, [esi + 0x40]
mov dword [esi + 0x160], 7
lea ecx, [esi + 0x28]
mov dword [esi + 0x164], eax
mov dword [esi + 0x150], 0x73726556
mov dword [esi + 0x154], 0x6e6f69
mov edx, edi
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esi + 0x40]
mov dword [esi + 0x1190], 0
mov dword [esi + 0x1194], 0
lea ecx, [esi + 0x1180]
add eax, 0x28
push eax
call fcn.0041a1f0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b817
mov ecx, dword [esi + 0x150]
mov ebx, edi
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e526
push edi
push ecx
call fcn.004255af
add esp, 8
mov edi, ebx
xorps xmm0, xmm0
movaps xmmword [esi + 0x40], xmm0
push edi
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
js 0x40b9a4
movzx eax, word [esi + 0x46]
xorps xmm0, xmm0
mov dword [esi + 0x171], 0
movaps xmmword [esi + 0x160], xmm0
movaps xmmword [esi + 0x150], xmm0
mov dword [esi + 0x16d], 0
and eax, 0xfff
or eax, 0x4000
mov word [esi + 0x46], ax
movzx ecx, byte [esi + 0x48]
and ecx, 0x3f
or ecx, 0x80
mov byte [esi + 0x48], cl
movzx edx, byte [esi + 0x4f]
movzx edi, byte [esi + 0x4e]
movzx ebx, byte [esi + 0x4d]
mov dword [esi + 0x10], edx
movzx edx, byte [esi + 0x4c]
mov dword [esi + 0x18], edx
movzx edx, byte [esi + 0x4b]
mov dword [esi + 0x1c], edx
movzx edx, byte [esi + 0x4a]
mov dword [esi + 0x24], edx
movzx edx, byte [esi + 0x49]
mov dword [esi + 0x20], edx
movzx edx, word [esi + 0x44]
mov dword [esi + 0xc], edx
mov edx, dword [esi + 0x40]
mov dword [esi + 0x14], edx
sub esp, 0x38
mov dword [esp + 0x30], edi
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x2c], ebx
mov ebx, dword [esi + 0x18]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], edi
mov edi, dword [esi + 0x20]
mov dword [esp + 0x28], ebx
mov ebx, dword [esi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], edi
lea edi, [esi + 0x150]
mov dword [esp + 0x20], ebx
mov dword [esp + 0xc], eax
mov dword [esp], edi
call fcn.00418f90
add esp, 0x38
cmp eax, 0x24
mov ecx, 0xf
mov dword [esi + 0x1178], 0
mov dword [esi + 0x117c], ecx
mov byte [esi + 0x1168], 0
jne 0x40b9c2
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
cmp eax, 0xf
jbe 0x40e317
test ebx, ebx
js 0x41031d
mov edi, ebx
mov dword [esi + 0x10], ebx
or edi, 0xf
js 0x410288
cmp edi, 0x16
mov eax, 0x16
cmova eax, edi
mov dword [esi + 0xc], eax
inc eax
cmp eax, 0x1000
jae 0x40fbb7
push eax
call fcn.0042557a
add esp, 4
mov ebx, eax
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
mov dword [esi + 0x1178], edi
mov dword [esi + 0x117c], eax
push edi
lea eax, [esi + 0x150]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov dword [esi + 0x1168], ebx
jmp 0x40b9d3
mov eax, 0xf
mov dword [esi + 0x1178], 0
mov dword [esi + 0x117c], eax
mov byte [esi + 0x1168], 0
jmp 0x40b9d8
mov dword [esi + 0x1178], 0
mov byte [esi + 0x1168], 0
mov eax, 0xf
lea edi, [esi + 0x1228]
mov dword [esi + 0x164], eax
mov dword [esi + 0x160], 1
mov word [esi + 0x150], 0x34
lea edx, [esi + 0x11f8]
mov ecx, edi
push str._submit_telemetry_
call fcn.004084e0
add esp, 4
lea eax, [esi + 0x1168]
lea ebx, [esi + 0x1240]
mov dword [esi + 0x18], eax
push eax
push edi
push ebx
call fcn.00403a20
add esp, 0xc
mov ecx, ebx
push str._crash_
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
lea edi, [esi + 0x1270]
lea ecx, [esi + 0x1198]
movsd qword [esi + 0x1268], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x1260], xmm1
movsd qword [esi + 0x1258], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esi + 0x1258]
push ecx
push eax
push edi
call fcn.00403a20
add esp, 0xc
mov ecx, edi
push 0x428ff5
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
lea edi, [esi + 0x12a0]
lea ecx, [esi + 0x1180]
movsd qword [esi + 0x1298], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x1290], xmm1
movsd qword [esi + 0x1288], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esi + 0x1288]
push ecx
push eax
push edi
call fcn.00403a20
add esp, 0xc
mov ecx, edi
push 0x428ff5
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
movsd qword [esi + 0x12c8], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x12c0], xmm1
movsd qword [esi + 0x12b8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esi + 0x11b0]
push eax
lea eax, [esi + 0x12b8]
push eax
lea edi, [esi + 0x12d0]
push edi
call fcn.00403a20
add esp, 0xc
mov ecx, edi
push 0x428ff5
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
lea ecx, [esi + 0x12e8]
movsd qword [esi + 0x12f8], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x12f0], xmm1
movsd qword [esi + 0x12e8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esi + 0x11c8]
push eax
push ecx
lea edi, [esi + 0x1300]
push edi
call fcn.00403a20
add esp, 0xc
mov ecx, edi
push 0x428f5c
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
movsd qword [esi + 0x50], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x48], xmm1
movsd qword [esi + 0x40], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ebx, dword [esi + 0x164]
mov ecx, dword [esi + 0x160]
mov edi, dword [esi + 0x54]
mov eax, dword [esi + 0x50]
mov edx, ebx
mov dword [esi + 0xc], edi
sub edi, eax
sub edx, ecx
cmp edx, eax
jb 0x40bc07
cmp ecx, edi
ja 0x40cbc3
cmp ebx, 0xf
jbe 0x40d0d9
mov edx, dword [esi + 0x150]
lea ebx, [esi + 0x150]
cmp ecx, edi
ja 0x40bc60
cmp dword [esi + 0xc], 0xf
mov dword [esi + 0x14], edx
lea edx, [eax + ecx]
lea edi, [esi + 0x40]
mov ebx, edx
mov ebx, edi
mov dword [esi + 0x10], edx
mov dword [esi + 0x50], edx
jbe 0x40bc3c
mov ebx, dword [esi + 0x40]
add eax, ebx
push ecx
push dword [esi + 0x14]
push eax
call sub.VCRUNTIME140.dll_memmove
lea ecx, [esi + 0x50]
lea eax, [esi + 0x54]
add esp, 0xc
mov edx, dword [esi + 0x10]
mov byte [ebx + edx], 0
lea ebx, [esi + 0x150]
jmp 0x40bc88
sub esp, 0x10
mov al, byte [esi + 0x1150]
mov byte [esp + 4], al
mov dword [esp + 0xc], ecx
mov dword [esp], ecx
lea ecx, [esi + 0x40]
mov dword [esp + 8], edx
call fcn.00404f30
mov edi, eax
lea ecx, [eax + 0x10]
add eax, 0x14
movsd xmm0, qword [edi + 0x10]
movsd qword [esi + 0x1160], xmm0
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
movsd qword [esi + 0x1158], xmm1
movsd qword [esi + 0x1150], xmm0
mov dword [ecx], 0
mov dword [eax], 0xf
mov byte [edi], 0
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40bce1
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e543
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x1314]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0xf
mov byte [esi + 0x40], 0
cmp eax, 0x10
jb 0x40bd1d
mov ecx, dword [esi + 0x1300]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e566
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12fc]
mov dword [esi + 0x1310], 0
mov dword [esi + 0x1314], 0xf
mov byte [esi + 0x1300], 0
cmp eax, 0x10
jb 0x40bd62
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e589
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12e4]
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], 0xf
mov byte [esi + 0x12e8], 0
cmp eax, 0x10
jb 0x40bda7
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e5ac
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12cc]
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], 0xf
mov byte [esi + 0x12d0], 0
cmp eax, 0x10
jb 0x40bdec
mov ecx, dword [esi + 0x12b8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e5cf
mov eax, dword [esi + 0x12b4]
mov dword [esi + 0x12c8], 0
mov dword [esi + 0x12cc], 0xf
mov byte [esi + 0x12b8], 0
cmp eax, 0x10
jb 0x40be31
mov bl, 1
jmp 0x40c55d
lea ecx, [esi + 0x12a0]
call fcn.0041b720
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40c592
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40fc2e
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40c5bc
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40fc4b
push edi
push ecx
call fcn.004255af
add esp, 8
mov dword [esi + 0x40], 0x427170
mov eax, dword [esi + 0x58]
cmp eax, 0x10
jb 0x40c5e7
mov ecx, dword [esi + 0x44]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40fc68
lea ecx, [esi + 0x1300]
call fcn.004202f0
mov eax, dword [esi + 0x1164]
cmp eax, 0x10
jb 0x40c61c
cmp dword [esi + 0xc], 0xf
jbe 0x40fca3
mov edx, dword [esi + 0x40]
lea ebx, [esi + 0x150]
lea ecx, [esi + 0x150]
push eax
push edx
push 0
call fcn.004050b0
movsd xmm0, qword [eax + 0x10]
mov edi, eax
movsd qword [esi + 0x1160], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x1158], xmm1
movsd qword [esi + 0x1150], xmm0
mov dword [eax + 0x10], 0
add eax, 0x14
jmp 0x40bcb4
cmp ecx, 0xf
mov ecx, 0x42d548
jbe 0x40cc2c
mov ecx, dword [0x42d548]
mov dword [0x42d558], eax
push eax
push ebx
push ecx
mov dword [esi + 0xc], eax
mov ebx, ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esi + 0xc]
mov byte [ebx + eax], 0
jmp 0x408b94
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40866f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408a9d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x410354
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40aef4
mov dword [esi + 0x50], eax
push eax
push edi
mov edi, eax
lea eax, [esi + 0x40]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi + 0x40], 0
jmp 0x4088dc
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408787
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408c4c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408cdf
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408deb
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408e2a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408e6b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x410354
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ae98
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x410354
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40aeca
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x4087c4
lea edi, [esi + 0x40]
jmp 0x409ae7
lea edi, [esi + 0x1300]
jmp 0x409cd9
lea edi, [esi + 0x1300]
jmp 0x409e59
lea edi, [esi + 0x40]
jmp 0x409fd3
lea edi, [esi + 0x40]
jmp 0x40a125
lea edi, [esi + 0x40]
jmp 0x40a275
mov ecx, eax
mov dword [esi + 0x160], eax
lea eax, [esi + 0x150]
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esi + 0x18]
mov byte [esi + eax + 0x150], 0
jmp 0x4089f5
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40ce7e
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x4093bd
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40cea7
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x409c96
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40ced0
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x409e16
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40cef9
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x409f96
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40cf22
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x40a0e8
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40cf4b
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x40a238
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40cf74
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x40a3be
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408d53
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40992a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x408ec7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408f17
cmp edx, 0x10
jb 0x40d010
mov ebx, dword [ebx]
mov dword [ecx + 0x38], edi
push edi
push eax
push ebx
jmp 0x40d06f
add dword [esi + 0x18], 0x24
push dword [esi + 0x18]
call fcn.0042557a
add esp, 4
lea edi, [eax + 0x23]
mov dword [esi + 0x18], ebx
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x4088ba
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x408f66
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40d061
mov ecx, dword [ecx]
mov dword [ebx + 0x38], edi
push edi
lea eax, [esi + 0x150]
push eax
mov ebx, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
jmp 0x409aaa
cmp eax, 0xf
jbe 0x40d1b7
mov eax, dword [esi + 0x1300]
jmp 0x40d1bd
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408949
lea ecx, [esi + 0x150]
jmp 0x40aac6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x409810
lea edx, [esi + 0x150]
jmp 0x40bc16
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4099c4
add dword [esi + 0x1c], 0x24
push dword [esi + 0x1c]
call fcn.0042557a
add esp, 4
lea ebx, [eax + 0x23]
mov dword [esi + 0x1c], edi
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
jmp 0x4089ca
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
mov bl, 1
add ecx, 0x25
mov edx, ecx
jmp 0x408925
mov dword [esi + 0x50], edi
push edi
push dword [esi + 0xc]
push ebx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi + 0x40], 0
jmp 0x40ab4b
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x409852
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ae67
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov bl, 1
mov edi, eax
jmp 0x408a6f
lea eax, [esi + 0x1300]
mov dword [esi + 0x1310], 7
mov dword [eax], 0x697a6f4d
mov dword [eax + 4], 0x616c6c
cmp dword [esi + 0x1314], 0xf
ja 0x40921c
jmp 0x409222
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x4090f2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409188
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x4092f0
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x4093e3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4094c6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409ad0
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409bb8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409cbc
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409d71
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409e3c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409ef1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409fbc
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a057
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a10e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a1a8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a25e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a313
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a3de
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a408
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a432
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a456
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a54f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a58e
add ebx, 0x24
cmp eax, 0xffffffdc
mov eax, 0xffffffff
cmovbe eax, ebx
push eax
call fcn.0042557a
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
mov ebx, edi
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4091ea
mov dword [esi + 0x1178], ebx
lea eax, [esi + 0x1168]
push ebx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + ebx + 0x1168], 0
jmp 0x40b9d3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409607
add dword [esi + 0x10], 0x24
push dword [esi + 0x10]
call fcn.0042557a
add esp, 4
lea edi, [eax + 0x23]
mov dword [esi + 0x10], ebx
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x40ab2b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40aaa9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ab9b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40abc5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ac4e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ac8d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ad35
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ad74
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b1a9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b302
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b3c6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b48a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b64b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b6ed
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b77f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b80b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40bcd7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40bd13
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40bd58
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a633
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40a6c9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x28]
mov edi, eax
jmp 0x40a9e2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x28]
mov edi, eax
jmp 0x40aa0c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b256
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x28]
mov edi, eax
jmp 0x40a97b
mov dword [esi + 0x18], 0x80000023
mov ebx, 0x7fffffff
jmp 0x40d01c
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
lea ebx, [esi + 0x28]
lea edi, [esi + 0x150]
add ecx, 0x25
mov edx, ecx
jmp 0x40a791
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
lea ebx, [esi + 0x28]
add ecx, 0x25
mov edx, ecx
jmp 0x40a9b8
add dword [esi + 0xc], 0x24
push dword [esi + 0xc]
call fcn.0042557a
add esp, 4
lea ebx, [eax + 0x23]
mov dword [esi + 0xc], edi
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
jmp 0x40b975
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40c588
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41034e
lea ebx, [esi + 0x150]
lea edx, [esi + 0x40]
jmp 0x40cbd6
mov dword [esi + 0x1c], 0x80000023
mov edi, 0x7fffffff
jmp 0x40d105
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41034e
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40a742
mov eax, 0x80000023
mov edi, 0x7fffffff
jmp 0x40e2f1
mov dword [esi + 0x10], 0x80000023
mov ebx, 0x7fffffff
jmp 0x40e362
xor eax, eax
mov ebx, 0xffffffff
jmp 0x4091ea
mov dword [esi + 0xc], 0x80000023
mov edi, 0x7fffffff
jmp 0x40fbbb
push ecx
push eax
call fcn.004255af
add esp, 8
mov eax, dword [esi + 0xc]
mov dword [esi + 0xd8], eax
jmp 0x40c553
call fcn.00401120
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x41034e
add edi, 0x24
mov eax, edx
mov ecx, edi
jmp 0x4102cb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3