Function at 0x403ed9
Capabilities:
Set file attributes
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfac
push ebx
push esi
push edi
push 7
pop ecx
xor ebx, ebx
push 0x44f7d8
push dword [ebp + 8]
xor eax, eax
mov word [ebp - 0x3c], bx
lea edi, [ebp - 0x3a]
mov byte [ebp - 6], bl
mov byte [ebp - 5], bl
mov byte [ebp - 0xd], bl
rep stosd dword es:[edi], eax
call fcn.00403e0c
cmp dword [0x44f7d8], ebx
pop ecx
pop ecx
je 0x4052b8
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x100
lea eax, [ebp - 0xca8]
push ebx
push eax
call fcn.00421a10
push 0x100
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00421a10
lea eax, [ebp - 0xba8]
push eax
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [0x44f7d8]
push dword [eax]
call fcn.00403cb8
add esp, 0x24
xor ecx, ecx
cmp eax, ebx
mov dword [ebp - 4], eax
jle 0x403f96
lea eax, [ebp - 0xba6]
cmp byte [eax - 2], 0x2d
jne 0x403f8b
cmp byte [eax], bl
jne 0x403f8b
movzx edx, byte [eax - 1]
dec dword [ebp - 4]
mov byte [ebp + edx - 0xca8], 1
inc ecx
add eax, 0x100
cmp ecx, dword [ebp - 4]
jl 0x403f72
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb30
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404007
cmp dword [ebp - 4], 2
jl 0x404007
push 0x80
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.0040ec4c
add esp, 0x14
test al, al
je 0x404007
cmp byte [ebp - 0xc36], bl
je 0x404007
push 1
push ebx
push ebx
lea eax, [ebp - 0xaa8]
push eax
push ebx
push ebx
call dword [0x458c8c]
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb40
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404191
cmp dword [ebp - 4], 3
jl 0x404191
lea eax, [ebp - 0x9a8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x40
jne 0x404191
push 0x500000
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xba8]
push ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
call fcn.0040ec4c
add esp, 0x14
test al, al
je 0x405283
push 0x10
pop ecx
xor eax, eax
push 0x3f
mov byte [ebp - 0x1a8], bl
lea edi, [ebp - 0x1a7]
rep stosd dword es:[edi], eax
pop ecx
mov byte [ebp - 0xfac], bl
lea edi, [ebp - 0xfab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebp - 0xfac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0xfac]
push eax
push dword [ebp - 4]
push dword [ebp - 0x14]
call fcn.0041a46e
lea eax, [ebp - 0x1a8]
push eax
push dword [ebp - 4]
push dword [ebp - 0x14]
call fcn.0041a59d
push 0x40
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.00422291
add esp, 0x24
test eax, eax
jne 0x404183
mov edi, 0x80
push edi
lea eax, [ebp - 0xaa8]
push eax
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push ebx
push edi
push 2
push ebx
push 2
push 0x40000000
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x404183
push ebx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 4]
push dword [ebp - 0x14]
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 4]
jne 0x404176
cmp byte [ebp - 0xc36], bl
je 0x404183
xor eax, eax
cmp byte [ebp - 0xc40], bl
sete al
push eax
push ebx
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0xaa8]
push eax
push ebx
push ebx
call dword [0x458c8c]
jmp 0x404183
lea eax, [ebp - 0xaa8]
push eax
call fcn.00414cee
pop ecx
push dword [ebp - 0x14]
call fcn.00410b23
pop ecx
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb20
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4041bc
cmp dword [ebp - 4], 2
jge 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb50
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
je 0x4052bd
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb60
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40422e
cmp dword [ebp - 4], 1
jl 0x40422e
cmp byte [ebp - 0xc40], bl
sete al
push eax
push ebx
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0xba8]
push eax
push ebx
push ebx
call dword [0x458c8c]
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb70
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40426e
cmp dword [ebp - 4], 1
jl 0x40426e
lea eax, [ebp - 0xba8]
push eax
call fcn.004136ef
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb80
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4042a6
cmp dword [ebp - 4], 1
jl 0x4042a6
lea eax, [ebp - 0xba8]
push eax
call fcn.00413757
jmp 0x40418b
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42ebd0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4042d1
call fcn.00413be5
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eb90
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404328
cmp dword [ebp - 4], 3
jl 0x404328
lea eax, [ebp - 0x9a8]
push eax
call fcn.00421dee
pop ecx
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.004136ef
pop ecx
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.00408e7c
add esp, 0xc
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42ebb0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40435a
mov byte [0x457aa0], bl
mov byte [0x459669], bl
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42eba0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404441
cmp dword [ebp - 4], 3
jl 0x404441
cmp dword [ebp - 4], 5
jl 0x4043a1
lea eax, [ebp - 0x7a8]
push eax
call fcn.00421dee
pop ecx
mov dword [ebp - 0x1c], eax
jmp 0x4043a8
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 4], 4
jl 0x4043bf
lea eax, [ebp - 0x8a8]
push eax
call fcn.00421dee
pop ecx
mov edi, eax
jmp 0x4043c1
xor edi, edi
lea eax, [ebp - 0x9a8]
push eax
call fcn.00421dee
cmp eax, 1
pop ecx
jge 0x4043d8
xor eax, eax
inc eax
jmp 0x4043e5
lea eax, [ebp - 0x9a8]
push eax
call fcn.00421dee
pop ecx
cmp dword [ebp - 4], 6
lea esi, [ebp - 0x6a8]
jge 0x4043f6
mov esi, 0x42a4d8
cmp byte [ebp - 0xc40], bl
push dword [ebp - 0x1c]
sete cl
cmp byte [ebp - 0xc47], bl
push edi
push ecx
push dword [ebp - 0xc36]
sete cl
push ecx
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.004136ef
pop ecx
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
lea eax, [ebp - 0xba8]
push esi
push eax
call fcn.0040e7b3
add esp, 0x24
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
lea eax, [ebp - 0x164]
push eax
push 0x42ebe0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4046a4
cmp dword [ebp - 4], 1
jl 0x4046a4
push 0x458ee8
lea eax, [ebp - 0xdac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x12
lea eax, [ebp - 0x164]
push eax
push 0x42fd58
call fcn.0041321d
add esp, 0xc
push eax
lea eax, [ebp - 0xdac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xba8]
push eax
push 0x42a4d4
call edi
test eax, eax
jne 0x404552
cmp dword [ebp - 4], 2
jl 0x404552
mov dword [ebp - 0x14], ebx
push ebx
push 0x80
push 4
push ebx
push 2
push 0x40000000
lea eax, [ebp - 0xdac]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x404504
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x4044c9
jmp 0x404552
push 2
push ebx
push ebx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
lea eax, [ebp - 0x18]
push eax
push 2
push 0x42a4d0
push dword [ebp - 0xc]
call esi
push ebx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xaa8]
push eax
push dword [ebp - 0xc]
call esi
push ebx
lea eax, [ebp - 0x18]
push eax
push 2
push 0x42a4d0
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 0xba8]
push eax
push 0x42a4cc
call edi
test eax, eax
jne 0x40464c
cmp dword [ebp - 4], 2
jl 0x40464c
xor edi, edi
push ebx
push 0x80
push 4
push ebx
push 2
push 0x40000000
lea eax, [ebp - 0xdac]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x4045af
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jl 0x404574
jmp 0x404696
push 7
pop ecx
mov byte [ebp - 0x64], bl
xor eax, eax
lea edi, [ebp - 0x63]
rep stosd dword es:[edi], eax
push 2
push ebx
stosw word es:[edi], ax
push ebx
push dword [ebp - 0xc]
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
lea eax, [ebp - 0x18]
push eax
push 2
push 0x42a4d0
push dword [ebp - 0xc]
call esi
lea eax, [ebp - 0x64]
push eax
call fcn.00421b32
imul eax, eax, 0x12d687
push eax
call fcn.0041434b
pop ecx
pop ecx
push 0x42a438
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x64]
push eax
call edi
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0xc]
call esi
push ebx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xaa8]
push eax
call edi
push eax
lea eax, [ebp - 0xaa8]
push eax
push dword [ebp - 0xc]
call esi
push ebx
lea eax, [ebp - 0x18]
push eax
push 2
push 0x42a4d0
push dword [ebp - 0xc]
call esi
jmp 0x404696
lea eax, [ebp - 0xba8]
push eax
push 0x42a4c8
call edi
test eax, eax
jne 0x404696
xor esi, esi
push ebx
push 0x80
push 2
push ebx
push 2
push 0x40000000
lea eax, [ebp - 0xdac]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x404696
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jl 0x404660
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push 0xf
pop esi
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ebf0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4046f2
cmp dword [ebp - 4], 2
jl 0x4046f2
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.00405727
add esp, 0xc
mov byte [ebp - 6], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec00
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40472e
cmp dword [ebp - 4], 1
jl 0x40472e
push dword [ebp - 0xc47]
lea eax, [ebp - 0xba8]
push eax
call fcn.004057a4
pop ecx
pop ecx
jmp 0x4046e9
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec10
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40475b
cmp dword [ebp - 4], 1
jl 0x40475b
call fcn.004059f1
jmp 0x4046e9
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec30
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4047f7
cmp dword [ebp - 4], 1
jl 0x4047f7
lea eax, [ebp - 0xba8]
push eax
call fcn.00402517
cmp eax, ebx
pop ecx
je 0x404798
mov byte [eax + 0x42], 1
mov byte [eax], bl
lea eax, [ebp - 0xba8]
push eax
call fcn.004033c8
cmp eax, ebx
pop ecx
je 0x4047b6
mov byte [eax + 0x4c], 1
mov byte [eax + 0x4e], bl
mov byte [eax + 0x4d], 1
jmp 0x4047ee
mov edi, 0x44f7b8
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.00403436
mov esi, eax
cmp esi, ebx
je 0x4047e7
lea eax, [ebp - 0xba8]
push eax
push esi
call fcn.00421e50
pop ecx
pop ecx
mov byte [esi + 0x4c], 1
mov byte [esi + 0x4e], bl
mov byte [esi + 0x4d], 1
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 0xd], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec40
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404867
mov esi, dword [0x44f7d0]
jmp 0x40485e
cmp byte [esi + 0x4c], bl
je 0x40485b
cmp esi, dword [0x44f7d4]
je 0x40485b
push esi
call fcn.00402517
cmp eax, ebx
pop ecx
je 0x40483d
mov byte [eax + 0x42], 1
mov byte [eax], bl
push 0x41
push ebx
push esi
mov byte [esi + 0x4e], bl
call fcn.00421a10
add esp, 0xc
mov byte [esi + 0x4d], bl
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x50], ebx
mov byte [esi + 0x4c], bl
mov esi, dword [esi + 0x58]
cmp esi, ebx
jne 0x40481f
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec50
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4048b3
cmp dword [ebp - 4], 2
jl 0x4048b3
lea eax, [ebp - 0xaa8]
push 2
push eax
call fcn.00421dee
test eax, eax
setne al
pop ecx
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.0040661f
jmp 0x404320
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec60
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4048df
mov byte [0x454670], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec70
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x40490b
mov byte [0x454671], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec80
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404937
mov byte [0x454672], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ec90
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404963
mov byte [0x454673], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42eca0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x4049f2
cmp dword [ebp - 4], 2
jl 0x4049f2
mov cl, byte [ebp - 0xba8]
lea eax, [ebp - 0xba8]
jmp 0x4049a4
cmp cl, 0x30
jb 0x4049b6
cmp cl, 0x39
ja 0x4049b6
inc eax
mov cl, byte [eax]
cmp cl, bl
jne 0x404997
lea eax, [ebp - 0xba8]
push eax
call fcn.00421d96
jmp 0x4049c2
lea eax, [ebp - 0xba8]
push eax
call fcn.004136c9
cmp eax, ebx
pop ecx
mov dword [ebp - 0x44], eax
je 0x405283
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
push ecx
mov word [ebp - 0x40], ax
lea esi, [ebp - 0x44]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call fcn.004129b2
pop ecx
jmp 0x40418b
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ecb0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404a26
mov eax, dword [0x459830]
cmp eax, ebx
je 0x405283
mov byte [eax + 6], bl
mov dword [eax], ebx
jmp 0x404a1f
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ecc0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404a86
cmp dword [ebp - 4], 1
jl 0x404a86
lea eax, [ebp - 0xba8]
push eax
call fcn.00421dee
cmp ax, 0x100
pop ecx
jae case.default.0x404c52
movzx eax, ax
mov ecx, eax
shr ecx, 5
cdq
lea edi, [ecx*4 + 0x4594b0]
push 0x20
pop ecx
idiv ecx
xor eax, eax
inc eax
mov ecx, edx
shl eax, cl
or dword [edi], eax
jmp case.default.0x404c52
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ecd0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404ae8
cmp dword [ebp - 4], 1
jl 0x404ae8
lea eax, [ebp - 0xba8]
push eax
call fcn.00421dee
cmp ax, 0x100
pop ecx
jae case.default.0x404c52
movzx eax, ax
mov ecx, eax
shr ecx, 5
cdq
lea edi, [ecx*4 + 0x4594b0]
push 0x20
pop ecx
idiv ecx
xor eax, eax
inc eax
mov ecx, edx
shl eax, cl
not eax
and dword [edi], eax
jmp case.default.0x404c52
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ece0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404b60
cmp dword [ebp - 4], 2
jl 0x404b60
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x40
jne 0x405283
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.00401c74
test al, al
pop ecx
pop ecx
je 0x405283
cmp byte [ebp - 0xc36], bl
je 0x405283
mov byte [0x44f794], 1
mov byte [0x448064], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ecf0
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404b8c
mov byte [0x44f794], 1
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push 0x42ed00
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x404c0e
cmp dword [ebp - 4], 2
jl 0x404c0e
push 0x3f
pop ecx
mov byte [ebp - 0xeac], bl
lea edi, [ebp - 0xeab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
movzx eax, word [0x459440]
push eax
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0xba8]
push eax
push str._s__s_d
lea eax, [ebp - 0xeac]
push 0xfa
push eax
call fcn.00421df3
push ebx
push ebx
push ebx
lea eax, [ebp - 0xeac]
push str.btlc.dat
push eax
call fcn.0040ec4c
add esp, 0x2c
jmp 0x405283
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x164]
push eax
push str.1aIQ
call fcn.0041321d
add esp, 0xc
push eax
call edi
test eax, eax
jne 0x405283
cmp dword [ebp - 4], 2
jl 0x405283
lea eax, [ebp - 0xba8]
push eax
call fcn.00421dee
cmp eax, 0x3f
pop ecx
ja case.default.0x404c52
jmp dword [eax*4 + 0x4052c4]
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov word [0x459440], ax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459444], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov word [0x459448], ax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x45944a], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x45944b], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45944c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459450], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459451], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459452], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459453], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459454], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459458], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459460], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459464], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459468], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45946c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459470], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov word [0x459472], ax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov word [0x459474], ax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459476], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459478], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45947c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459480], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459481], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459482], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459483], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459484], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459485], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459486], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459487], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459488], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459489], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45948c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459490], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov word [0x459494], ax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459496], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459497], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459498], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459499], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x45949a], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45949c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594a0], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594a4], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594a5], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594a8], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594ac], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594d0], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594d5], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594d8], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594dc], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594dd], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594e0], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594e4], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594e8], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x4594ec], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594f0], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594f1], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x4594f2], al
jmp 0x40527e
push 0x41
lea eax, [ebp - 0xaa8]
push eax
push 0x4594f3
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp case.default.0x404c52
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459534], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459538], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x45953c], eax
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
test eax, eax
setne al
mov byte [0x459540], al
jmp 0x40527e
lea eax, [ebp - 0xaa8]
push eax
call fcn.00421dee
mov dword [0x459544], eax
pop ecx
mov byte [ebp - 5], 1
push 0x44f7d8
call fcn.00403eb8
cmp dword [0x44f7d8], ebx
pop ecx
jne 0x403f19
cmp byte [ebp - 6], bl
je 0x4052a4
call fcn.004107ed
cmp byte [ebp - 5], bl
je 0x4052ae
call fcn.004108f1
cmp byte [ebp - 0xd], bl
je 0x4052b8
call fcn.004108b0
pop edi
pop esi
pop ebx
leave
ret
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]