Function at 0x424370
Capabilities:
Acquire debug privileges
Check if file exists
Contain obfuscated stackstrings
Delete file
Encode data using xor
Get file attributes
Manipulate console buffer
Set file attributes
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x488bc3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0xc
mov eax, 0x16b4
call fcn.004857b0
mov eax, dword [0x4a2400]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x104
lea eax, [ebp - 0x130]
mov dword [ebp - 4], 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea esi, [ebp - 0x130]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4243e2
sub ecx, edx
push ecx
push esi
call fcn.00484922
mov edx, eax
lea ecx, [ebp - 0x210]
call fcn.00404260
add esp, 8
mov byte [ebp - 4], 1
mov dword [ebp - 0x1630], 0xb6535d81
mov dword [ebp - 0x162c], 0x7bdae284
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1630], 0x9b217a88
mov dword [ebp - 0x162c], 0x217dc9f1
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1630], 0xd32b38af
mov dword [ebp - 0x162c], 0x7bdae284
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1630], 0x9b217a88
mov dword [ebp - 0x162c], 0x217dc9f1
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
mov dword [ebp - 0x188], eax
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
call fcn.00423e10
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 2
push ecx
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004128d0
add esp, 4
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1634]
cmp ecx, 0xf
jbe 0x424531
mov edx, dword [ebp - 0x1648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424527
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424527
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
cmp dword [ebp - 0x1e4], 0xf
lea eax, [ebp - 0x1f8]
push dword [ebp - 0x1e8]
cmova eax, dword [ebp - 0x1f8]
push eax
mov dword [ebp - 0x1638], 0
mov dword [ebp - 0x1634], 0xf
mov byte [ebp - 0x1648], 0
call fcn.00484922
mov edx, eax
lea ecx, [ebp - 0x158]
call fcn.00404260
add esp, 8
mov byte [ebp - 4], 5
lea edi, [ebp - 0x210]
cmp dword [ebp - 0x1fc], 7
mov eax, dword [ebp - 0x200]
cmova edi, dword [ebp - 0x210]
mov ecx, edi
lea edx, [edi + eax*2]
call fcn.00421f90
cmp eax, edx
je 0x4245f5
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x4245b5
cmp ecx, 0x2f
jne 0x4245bc
add eax, 2
cmp eax, edx
jne 0x4245a8
cmp eax, edx
je 0x4245f5
movzx esi, word [edx - 2]
cmp esi, 0x5c
je 0x4245d7
cmp esi, 0x2f
je 0x4245d7
add edx, 0xfffffffe
cmp eax, edx
jne 0x4245c0
jmp 0x4245f5
cmp eax, edx
je 0x4245f5
nop dword [eax + eax]
movzx esi, word [edx - 2]
cmp esi, 0x5c
je 0x4245ee
cmp esi, 0x2f
jne 0x4245f5
add edx, 0xfffffffe
cmp eax, edx
jne 0x4245e0
sub edx, edi
mov dword [ebp - 0x1b0], 0
sar edx, 1
lea ecx, [ebp - 0x1c0]
push edx
xorps xmm0, xmm0
mov dword [ebp - 0x1ac], 0
push edi
movups xmmword [ebp - 0x1c0], xmm0
call fcn.004137a0
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 6
push eax
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x178]
call fcn.004223c0
add esp, 4
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 7
jbe 0x424683
mov edx, dword [ebp - 0x1c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424679
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4246d6
push ecx
push edx
call fcn.0048531b
add esp, 8
xor eax, eax
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x144]
cmp ecx, 7
jbe 0x4246e6
mov edx, dword [ebp - 0x158]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4246dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4246dc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
xor eax, eax
mov dword [ebp - 0x148], 0
cmp dword [ebp - 0x164], 7
lea ecx, [ebp - 0x178]
mov word [ebp - 0x158], ax
lea eax, [ebp - 0x210]
cmova ecx, dword [ebp - 0x178]
cmp dword [ebp - 0x1fc], 7
push ecx
cmova eax, dword [ebp - 0x210]
push eax
mov dword [ebp - 0x144], 7
call fcn.00484dc3
test eax, eax
jne 0x427dc9
call dword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
push eax
lea ecx, [ebp - 0x1618]
call fcn.00427e20
call fcn.004284f0
mov esi, 0x259e9d81
mul esi
cmp eax, esi
jae 0x424777
cmp eax, 0x1e484efa
jae 0x424777
lea ecx, [ebp - 0x1618]
call fcn.004284f0
mul esi
cmp eax, 0x1e484efa
jb 0x424763
lea eax, [edx - 0x4792bc80]
mov ecx, 0x989680
xor eax, 0x80000000
imul ecx
lea ecx, [ebp - 0x178]
add eax, 0xd53e8000
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x1648]
adc edx, 0x19db1de
push eax
mov dword [ebp - 0x134], edx
call fcn.004043e0
cmp dword [eax + 0x14], 0xf
jbe 0x4247ba
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 0
push 0x100
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x1634]
mov esi, eax
cmp ecx, 0xf
jbe 0x424811
mov edx, dword [ebp - 0x1648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424807
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424807
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
lea eax, [ebp - 0x138]
mov dword [ebp - 0x1638], 0
push eax
push eax
push eax
push esi
mov dword [ebp - 0x1634], 0xf
mov byte [ebp - 0x1648], 0
call dword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x424847
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x164]
cmp ecx, 7
jbe 0x4248a8
mov edx, dword [ebp - 0x178]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42489e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424950
push ecx
push edx
call fcn.0048531b
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
cmp ecx, 0xf
jbe 0x4248ff
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4248f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424950
push ecx
push edx
call fcn.0048531b
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
cmp ecx, 7
jbe 0x424960
mov edx, dword [ebp - 0x210]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424956
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424956
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0x210], ax
xorps xmm0, xmm0
mov dword [ebp - 0x1620], eax
lea eax, [ebp - 0x1620]
push eax
push 0x28
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 7
movups xmmword [ebp - 0x238], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x4249fd
lea eax, [ebp - 0x234]
mov dword [ebp - 0x238], 1
push eax
push str.SeDebugPrivilege
push 0
mov dword [ebp - 0x22c], 2
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x4249f5
push 0
push 0
push 0
lea eax, [ebp - 0x238]
push eax
push 0
push dword [ebp - 0x1620]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [ebp - 0x1620]
call esi
cmp dword [0x4a374c], 0xf
mov eax, 0x4a3738
mov dword [0x4a3748], 0
cmova eax, dword [0x4a3738]
mov byte [eax], 0
mov eax, 0x4a34f4
cmp dword [0x4a3508], 0xf
mov dword [0x4a3504], 0
cmova eax, dword [0x4a34f4]
mov byte [eax], 0
mov eax, 0x4a34c4
cmp dword [0x4a34d8], 0xf
mov dword [0x4a34d4], 0
cmova eax, dword [0x4a34c4]
mov byte [eax], 0
mov eax, 0x4a34ac
cmp dword [0x4a34c0], 0xf
mov dword [0x4a34bc], 0
cmova eax, dword [0x4a34ac]
mov byte [eax], 0
mov eax, 0x4a350c
cmp dword [0x4a3520], 0xf
mov dword [0x4a351c], 0
cmova eax, dword [0x4a350c]
xor edi, edi
mov byte [eax], 0
nop
mov eax, dword [edi + 0x4a251c]
xor cl, cl
mov edx, dword [edi + 0x4a2518]
mov dword [ebp - 0x161c], eax
xor al, al
mov dword [ebp - 0x1a4], edx
xor esi, esi
mov byte [ebp - 0x1621], al
test esi, esi
je 0x424ae9
cmp dword [esi*8 + 0x4a24a0], edx
jne 0x424ae9
mov eax, dword [esi*8 + 0x4a24a4]
mov byte [ebp - 0x1621], 1
call eax
mov edx, dword [ebp - 0x1a4]
mov cl, al
inc esi
cmp esi, 0xd
jl 0x424ac4
mov al, byte [ebp - 0x1621]
test al, al
je 0x424b56
test cl, cl
jne 0x424b01
xor al, al
jmp 0x424b56
mov edx, dword [ebp - 0x161c]
test edx, edx
jne 0x424b0f
mov al, 1
jmp 0x424b56
xor cl, cl
mov esi, 0x4a24a4
mov byte [ebp - 0x1621], cl
xor al, al
nop
cmp dword [esi - 4], edx
jne 0x424b3b
mov eax, dword [esi]
mov byte [ebp - 0x1621], 1
call eax
mov edx, dword [ebp - 0x161c]
test al, al
sete al
add esi, 8
cmp esi, 0x4a250c
jl 0x424b20
mov cl, byte [ebp - 0x1621]
xor edx, edx
test cl, cl
movzx eax, al
cmove eax, edx
push dword [edi + 0x4a250c]
mov byte [edi + 0x4a2521], al
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x424b74
mov byte [edi + 0x4a2520], al
jmp 0x424b92
push dword [edi + 0x4a2510]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [edi + 0x4a2524], eax
setne al
mov byte [edi + 0x4a2520], al
add edi, 0x20
cmp edi, 0x360
jb 0x424aa0
lea eax, [ebp - 0x161c]
xor esi, esi
push eax
push 8
mov dword [ebp - 0x161c], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x424bf4
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1a4], 4
push eax
push 4
lea eax, [ebp - 0x1c4]
push eax
push 0x14
push dword [ebp - 0x161c]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne esi, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x161c]
test eax, eax
je 0x424c05
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x427b33
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov esi, eax
xor ecx, ecx
mov edx, 0x4a2508
nop dword [eax]
cmp dword [edx], 0x11
je 0x424c30
inc ecx
add edx, 0x20
cmp ecx, 0x1b
jb 0x424c20
jmp 0x424c53
shl ecx, 5
cmp byte [ecx + 0x4a2520], 0
je 0x424c53
mov eax, dword [ecx + 0x4a2524]
test eax, eax
je 0x424c53
test esi, esi
je 0x424c53
push 0
push 0
push 0x11
push esi
call eax
push 0x422cb0
lea ecx, [ebp - 0x288]
call fcn.004213c0
push 0x422e10
lea ecx, [ebp - 0x290]
mov dword [ebp - 4], 0xb
call fcn.004213c0
mov byte [ebp - 4], 0xc
call fcn.00420ee0
mov dword [ebp - 0x138], 0xa74256c6
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0x12b683ed
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0xfc4f13f2
mov dword [ebp - 0x134], 0x217dc9fb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x424d70
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x158]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov edi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 9
push esi
call edi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x150]
push esi
call edi
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x424e41
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424e37
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424e37
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov ecx, 0x4a3528
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call fcn.00405360
cmp byte [0x4a36c0], 0
je 0x4254c1
mov dword [ebp - 0x138], 0xb44c57c3
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0x5bbd8ced
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0xbb5415f1
mov dword [ebp - 0x134], 0x2177a798
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x424f60
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0xe
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x158]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x150]
push esi
call edi
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x42502b
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425021
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425021
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0xbb5f4dce
mov dword [ebp - 0x134], 0x10b596aa
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b2114ed
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425160
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x178]
cmp dword [ebp - 0x164], 0xf
push dword [ebp - 0x168]
cmova eax, dword [ebp - 0x178]
push eax
call fcn.00484922
mov edx, eax
lea ecx, [ebp - 0x1c0]
call fcn.00404260
add esp, 8
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x11
call fcn.00405020
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x1ac]
mov byte [ebp - 0x1621], al
cmp ecx, 7
jbe 0x42520b
mov edx, dword [ebp - 0x1c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425201
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425201
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
cmp ecx, 0xf
jbe 0x425268
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42525e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42525e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
cmp byte [ebp - 0x1621], 0
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
je 0x4254d5
mov dword [ebp - 0x138], 0xbb5f4dce
mov dword [ebp - 0x134], 0x10b596aa
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b2114ed
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425380
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00413c60
lea edx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1648]
call fcn.004287a0
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00410090
mov ecx, dword [ebp - 0x1634]
cmp ecx, 0xf
jbe 0x4253f3
mov edx, dword [ebp - 0x1648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4253e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42543e
push ecx
push edx
call fcn.0048531b
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1638], 0
mov dword [ebp - 0x1634], 0xf
mov byte [ebp - 0x1648], 0
cmp ecx, 0xf
jbe 0x42544e
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425444
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425444
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
test ecx, ecx
je 0x425499
cmp dword [ebp - 0x1cc], 0xf
lea eax, [ebp - 0x1e0]
cmova eax, dword [ebp - 0x1e0]
cmp byte [ecx + eax - 1], 0xa
jne 0x425499
lea ecx, [ebp - 0x1e0]
call fcn.00427f90
sub esp, 0x18
lea eax, [ebp - 0x1e0]
mov ecx, esp
push eax
call fcn.00410150
mov ecx, 0x4a3528
call fcn.00408680
cmp byte [0x4a36c0], 0
jne 0x4258fd
mov edx, 0xc
mov ecx, 0x4a36c4
call fcn.004212c0
jmp 0x427171
mov dword [ebp - 0x138], 0xe9525dc4
mov dword [ebp - 0x134], 0x7bdae2a4
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4255c0
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x13
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x158]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x150]
push esi
call edi
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x42568b
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425681
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425681
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
push 0xfffffffffffffff5
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 9
push eax
call edi
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0xa
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
lea edx, [ebp - 0x1e0]
push eax
mov ecx, esi
call fcn.00418790
sub esp, 0x14
lea eax, [ebp - 0x1e0]
mov ecx, esp
push eax
call fcn.00410150
mov ecx, 0x4a3528
call fcn.00408680
cmp byte [0x4a36c0], 0
je 0x4254c1
mov dword [ebp - 0x138], 0xbb5f4dce
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0x10b596aa
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b2114ed
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4257f0
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00413c60
push 0xb0
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 0x14
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x340]
push 2
push eax
call fcn.0040d6a0
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x2f0], 0
je 0x425897
cmp dword [ebp - 0x1cc], 0xf
lea edx, [ebp - 0x1e0]
push dword [ebp - 0x1d0]
cmova edx, dword [ebp - 0x1e0]
lea ecx, [ebp - 0x340]
call fcn.00418b10
add esp, 4
lea ecx, [ebp - 0x33c]
call fcn.004110f0
test eax, eax
jne 0x425897
mov eax, dword [ebp - 0x340]
lea ecx, [ebp - 0x340]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x340]
call fcn.0040d3e0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0xf
jbe 0x4258e2
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4258d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4258d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x138], 0xf35e57d6
mov dword [ebp - 0x134], 0x1eac83ec
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1680], eax
mov dword [ebp - 0x167c], ecx
mov dword [ebp - 0x138], 0xf85409a8
mov dword [ebp - 0x134], 0x520eac92
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1678], eax
mov dword [ebp - 0x1674], ecx
mov dword [ebp - 0x138], 0x12591c4f
mov dword [ebp - 0x134], 0x79233c47
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1670], eax
mov dword [ebp - 0x166c], ecx
mov dword [ebp - 0x138], 0x9988e0ad
mov dword [ebp - 0x134], 0x1823c5db
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0x1664], ecx
mov dword [ebp - 0x138], 0x84f56673
mov dword [ebp - 0x134], 0x30cbd5e0
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1660], eax
mov dword [ebp - 0x165c], ecx
mov dword [ebp - 0x138], 0x4da37afc
mov dword [ebp - 0x134], 0x1eb2997d
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1658], eax
mov dword [ebp - 0x1654], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16b0], eax
mov dword [ebp - 0x16ac], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16a8], eax
mov dword [ebp - 0x16a4], ecx
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16a0], eax
mov dword [ebp - 0x169c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1698], eax
mov dword [ebp - 0x1694], ecx
mov dword [ebp - 0x138], 0x84f56673
mov dword [ebp - 0x134], 0x30cbd5e0
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1690], eax
mov dword [ebp - 0x168c], ecx
mov dword [ebp - 0x138], 0x4da37afc
mov dword [ebp - 0x134], 0x1eb2997d
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x16b0]
xorps xmm1, xmmword [ebp - 0x1680]
movaps xmmword [ebp - 0x1680], xmm1
movaps xmm1, xmmword [ebp - 0x1670]
xorps xmm1, xmmword [ebp - 0x16a0]
movaps xmmword [ebp - 0x1670], xmm1
movaps xmm1, xmmword [ebp - 0x1660]
mov dword [ebp - 0x1688], eax
mov dword [ebp - 0x1684], ecx
xorps xmm1, xmmword [ebp - 0x1690]
lea ecx, [ebp - 0x1680]
xorps xmm0, xmm0
movaps xmmword [ebp - 0x1660], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x164], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425b80
sub ecx, edx
lea eax, [ebp - 0x1680]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x16
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x158]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x150]
push esi
call edi
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x425c4b
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425c41
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425c41
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
push 0x5dc
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x161c], eax
lea eax, [ebp - 0x228]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx eax, word [ebp - 0x226]
movsx ecx, word [ebp - 0x228]
mov esi, dword [ebp - 0x161c]
imul ecx, eax
lea eax, [ebp - 0x1a4]
push eax
push esi
push ecx
push 0x20
push edi
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterA]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x138], 0xb0475dd8
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0x5bbf8feb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0xf0421bea
mov dword [ebp - 0x134], 0x217dc9fb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425dc0
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x17
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x198]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov edi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 9
push esi
call edi
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x190]
push esi
call edi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xf
call fcn.00410040
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [0x4a3630]
lea ecx, [ebp - 0x280]
call fcn.0041e7b0
sub esp, 0x18
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x268]
mov ecx, esp
push eax
call fcn.00410150
call fcn.00422c40
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x1678]
mov dword [ebp - 0x134], edx
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [ebp - 0x1678]
mov eax, dword [ebp - 0x1658]
push ecx
mov ecx, esp
movups xmmword [ecx], xmm0
movups xmm0, xmmword [ebp - 0x1668]
movups xmmword [ecx + 0x10], xmm0
mov dword [ecx + 0x20], eax
lea ecx, [ebp - 0x1698]
call fcn.00422bb0
add esp, 0x24
mov ecx, eax
call fcn.0040fec0
lea ecx, [ebp - 0x1698]
mov esi, eax
call fcn.00410040
mov dword [ebp - 0x138], 0xa0494ddc
mov dword [ebp - 0x134], 0xbb390e7
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x138], 0xf54e13fc
mov dword [ebp - 0x134], 0x4513acd1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x138], 0x7e15535a
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x160]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x180], xmm1
movaps xmm1, xmmword [ebp - 0x170]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x180]
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x1648]
xorps xmm1, xmmword [ebp - 0x150]
push eax
movaps xmmword [ebp - 0x170], xmm1
call fcn.00410110
mov edx, 7
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
mov byte [ebp - 4], 0x18
call fcn.00410040
mov dword [ebp - 0x138], 0xd32b38a5
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x178]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
call fcn.00405350
mov ecx, esi
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4261a1
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x178]
call fcn.00413c60
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x1a
push eax
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x1648]
call fcn.004128d0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x1b
call fcn.00421350
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1634]
cmp ecx, 0xf
jbe 0x42621b
mov edx, dword [ebp - 0x1648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426211
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426266
push ecx
push edx
call fcn.0048531b
add esp, 8
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1638], 0
mov dword [ebp - 0x1634], 0xf
mov byte [ebp - 0x1648], 0
cmp ecx, 0xf
jbe 0x426276
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42626c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42626c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x168], 0
xorps xmm0, xmm0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 0x138], 0xb7444adf
mov dword [ebp - 0x134], 0x41ae81f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b217aa8
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426380
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x1c
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x198]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x190]
push esi
call edi
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x42644b
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426441
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x426441
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 0x138], 0xd32b38a5
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16cc], ecx
mov dword [ebp - 0x16d0], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16c4], ecx
mov dword [ebp - 0x16c8], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x16d0]
mov dword [ebp - 0x148], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x16d0]
movaps xmmword [ebp - 0x16d0], xmm1
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426534
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x270]
sub eax, edx
cmp eax, ecx
jb 0x427dde
cmp dword [ebp - 0x26c], 0xf
lea eax, [ebp - 0x280]
push ecx
cmova eax, dword [ebp - 0x280]
lea ecx, [ebp - 0x16d0]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x178]
call fcn.004153e0
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x1d
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x158]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x150]
push esi
call edi
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x426614
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42660a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42660a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call esi
sub esp, 0x18
mov dword [ebp - 0x1e4], 0
xorps xmm0, xmm0
mov ecx, esp
movq qword [ebp - 0x1ec], xmm0
push 0x4a3720
call fcn.00410150
lea eax, [ebp - 0x1ec]
mov ecx, 0x4a3528
push eax
call fcn.00409520
mov byte [ebp - 4], 0x1e
cmp byte [0x4a36c0], 0
jne 0x42669c
mov edx, 0xc
mov ecx, 0x4a36c4
call fcn.004212c0
push 0xbb8
call esi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x4a3720
call fcn.0040ff10
push 0xb0
lea eax, [ebp - 0x340]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x340]
push 0x22
push 0x4a34dc
call fcn.0040d6a0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x1ec]
sub ecx, eax
push 0
push ecx
push eax
lea ecx, [ebp - 0x340]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea ecx, [ebp - 0x340]
call fcn.0040d670
push 2
mov ecx, 0x4a34dc
call fcn.0040fec0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x3e8
call esi
lea ecx, [ebp - 0x250]
call fcn.00405330
mov byte [ebp - 4], 0x20
xor esi, esi
nop word [eax + eax]
mov dword [ebp - 0x138], 0xa14259c9
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0x2bb8ef4
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1630], 0x9b211ee3
mov dword [ebp - 0x162c], 0x217dc9f1
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a8], 0xd32b38af
mov dword [ebp - 0x1a4], 0x7bdae284
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1c8], 0x9b217a88
mov dword [ebp - 0x1c4], 0x217dc9f1
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x150], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426820
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
mov byte [ebp - 4], 0x21
test esi, esi
jle 0x4268ba
mov edx, esi
lea ecx, [ebp - 0x1648]
call fcn.004025a0
push eax
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x22
call fcn.0040ffa0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x1634]
cmp ecx, 0xf
jbe 0x42689f
mov edx, dword [ebp - 0x1648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426895
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424521
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x1638], 0
mov dword [ebp - 0x1634], 0xf
mov byte [ebp - 0x1648], 0
lea ecx, [ebp - 0x178]
call fcn.00422f10
test al, al
jne 0x426912
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x426903
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4268f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426968
push ecx
push edx
call fcn.0048531b
add esp, 8
inc esi
cmp esi, 0xa
jle 0x426730
jmp 0x426993
cmp dword [ebp - 0x164], 0xf
lea eax, [ebp - 0x178]
push dword [ebp - 0x168]
cmova eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x250]
push eax
call fcn.00412490
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x426978
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42696e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42696e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 0x138], 0xbd5e59c3
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0xffa8ae7
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x169c], ecx
mov dword [ebp - 0x16a0], eax
mov dword [ebp - 0x138], 0xfc011fe0
mov dword [ebp - 0x134], 0x2b18a490
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1694], ecx
mov dword [ebp - 0x1698], eax
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x168c], ecx
mov dword [ebp - 0x1690], eax
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1684], ecx
mov dword [ebp - 0x1688], eax
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x164c], ecx
mov dword [ebp - 0x1650], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1644], ecx
mov dword [ebp - 0x1648], eax
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x163c], ecx
mov dword [ebp - 0x1640], eax
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x1650]
xorps xmm1, xmmword [ebp - 0x16a0]
mov dword [ebp - 0x1634], ecx
lea ecx, [ebp - 0x16a0]
movaps xmmword [ebp - 0x16a0], xmm1
lea edx, [ecx + 1]
mov dword [ebp - 0x1638], eax
movaps xmm1, xmmword [ebp - 0x1640]
xorps xmm1, xmmword [ebp - 0x1690]
movaps xmmword [ebp - 0x1690], xmm1
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426b44
sub ecx, edx
lea eax, [ebp - 0x16a0]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00413c60
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x23
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x198]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push esi
call edi
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00421460
push 7
push esi
call edi
cmp dword [ebp - 0x164], 0xf
lea edx, [ebp - 0x178]
push dword [ebp - 0x168]
cmova edx, dword [ebp - 0x178]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00418b10
add esp, 4
push dword [ebp - 0x190]
push esi
call edi
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x426c0f
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426c05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x426c05
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0048531b
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 0x1a8], 0x8c4a4cc8
mov dword [ebp - 0x1a4], 0x1ef483f7
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1c8], 0x9b211ff0
mov dword [ebp - 0x1c4], 0x217dc9f1
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1630], 0xd32b38af
mov dword [ebp - 0x162c], 0x7bdae284
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x190]
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x148], eax
xorps xmm1, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x190], xmm1
call fcn.004286b0
mov esi, eax
test esi, esi
jne 0x426df5
xorps xmm0, xmm0
movlpd qword [ebp - 0x16b8], xmm0
nop
lea ecx, [ebp - 0x16b8]
call fcn.00427fb0
mov dword [ebp - 0x1a8], 0x8c4a4cc8
mov dword [ebp - 0x1a4], 0x1ef483f7
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1c8], 0x9b211ff0
mov dword [ebp - 0x1c4], 0x217dc9f1
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1630], 0xd32b38af
mov dword [ebp - 0x162c], 0x7bdae284
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x190]
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x148], eax
xorps xmm1, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x190], xmm1
call fcn.004286b0
mov esi, eax
test esi, esi
je 0x426d10
cmp dword [ebp - 0x240], 0
je 0x426e09
lea ecx, [ebp - 0x250]
call fcn.004231c0
lea eax, [ebp - 0x161c]
mov dword [ebp - 0x161c], 0
push eax
xorps xmm0, xmm0
push 0x28
movups xmmword [ebp - 0x224], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x426e8e
lea eax, [ebp - 0x220]
mov dword [ebp - 0x224], 1
push eax
push str.SeDebugPrivilege
push 0
mov dword [ebp - 0x218], 2
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x426e7e
push 0
push 0
push 0
lea eax, [ebp - 0x224]
push eax
push 0
push dword [ebp - 0x161c]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [ebp - 0x161c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x426e94
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x427184
mov dword [ebp - 0x138], 0xd32b3286
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
movaps xmm0, xmmword [ebp - 0x190]
xorps xmm0, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0x150], xmm0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x178]
call fcn.004216f0
push eax
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x138], 0xb30140b9
mov dword [ebp - 0x134], 0x643986b2
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x138], 0x7e354913
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1670], eax
mov dword [ebp - 0x166c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0x1664], ecx
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1660], eax
mov dword [ebp - 0x165c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1658], eax
movaps xmm0, xmmword [ebp - 0x190]
lea edx, [ebp - 0x1a0]
movaps xmm1, xmmword [ebp - 0x1670]
xorps xmm1, xmmword [ebp - 0x1a0]
mov dword [ebp - 0x1654], ecx
lea ecx, [ebp - 0x1648]
xorps xmm0, xmmword [ebp - 0x1660]
movaps xmmword [ebp - 0x1a0], xmm1
movaps xmmword [ebp - 0x190], xmm0
call fcn.00412800
add esp, 4
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x25
push ecx
mov edx, eax
lea ecx, [ebp - 0x1698]
call fcn.004128d0
add esp, 4
lea edx, [esi + 0xc]
mov byte [ebp - 4], 0x26
mov ecx, eax
call fcn.004212c0
lea ecx, [ebp - 0x1698]
call fcn.00410040
lea ecx, [ebp - 0x1648]
call fcn.00410040
lea ecx, [ebp - 0x178]
call fcn.00410040
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x1c4], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x4271b6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Cant_confirm_target_process_architecture:_0x_X_n
call fcn.00428670
add esp, 8
jmp 0x4271e6
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1a4], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x1a4]
je 0x4272f2
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b2170ba
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.00410110
mov byte [ebp - 4], 0x27
mov edx, 0xc
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
call fcn.00410040
push esi
call edi
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x4a34dc
call fcn.0040fec0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x4273ec
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b2170bb
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.00410110
mov byte [ebp - 4], 0x28
jmp 0x4272c1
push 0xb8
lea eax, [ebp - 0xe8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0xe8]
push 0x24
push 0x4a34dc
call fcn.0040eaf0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::fail_void_const]
test al, al
je 0x42753f
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b2170bc
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
xorps xmm1, xmmword [ebp - 0x190]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.00410110
mov edx, 0xc
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
mov byte [ebp - 4], 0x29
call fcn.00410040
lea ecx, [ebp - 0xe8]
call fcn.00427df0
jmp 0x4272dc
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0xe8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____thiscall_std::basic_istream_char__struct_std::char_traits_char__::tellg_void_]
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1b4]
adc ecx, dword [ebp - 0x1bc]
test ecx, ecx
jg 0x427689
jl 0x42757f
cmp eax, 0x1000
jae 0x427689
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b2170bd
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm0, xmmword [ebp - 0x150]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
xorps xmm0, xmmword [ebp - 0x190]
push eax
movaps xmmword [ebp - 0x150], xmm0
call fcn.00410110
mov edx, 0xc
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
mov byte [ebp - 4], 0x29
call fcn.00410040
lea ecx, [ebp - 0xe8]
call fcn.00427df0
jmp 0x4272dc
push eax
mov dword [ebp - 0x16b4], ecx
call fcn.00485329
add esp, 4
lea ecx, [ebp - 0xe8]
mov edi, eax
push 0
push 0
push 0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1b4]
adc ecx, dword [ebp - 0x1bc]
push ecx
push edx
push edi
lea ecx, [ebp - 0xe8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
lea ecx, [ebp - 0xe8]
call fcn.00427df0
mov dword [ebp - 0x138], 0xb64254cc
mov dword [ebp - 0x134], 0x17fa96ea
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0xf84f0fe9
mov dword [ebp - 0x134], 0x217dc399
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.00410110
mov edx, 7
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
mov byte [ebp - 4], 0x29
call fcn.00410040
mov ecx, dword [ebp - 0x1b8]
mov edx, edi
add ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1b4]
adc eax, dword [ebp - 0x1bc]
push 0
push 1
push 1
push 1
push 1
push 1
push ecx
mov ecx, esi
mov dword [ebp - 0x16b4], eax
call fcn.00428ae0
add esp, 0x1c
push edi
test al, al
jne 0x42791d
call fcn.00484fe0
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x138], 0x9c796aea
mov dword [ebp - 0x134], 0x4bf9c2d6
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x138], 0x9b2170bf
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1648]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x150]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.00410110
mov edx, 0xc
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1648]
call fcn.004212c0
lea ecx, [ebp - 0x1648]
jmp 0x42716c
call fcn.00484fe0
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x4a34dc
call fcn.0040fec0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0xe8]
call fcn.004080c0
lea ecx, [ebp - 0x250]
call fcn.00410040
lea ecx, [ebp - 0x340]
call fcn.0040d3e0
lea ecx, [ebp - 0x1ec]
call fcn.0040fe20
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0xf
call fcn.00403d80
mov dword [ebp - 0x138], 0xb0484ddc
mov dword [ebp - 0x134], 0x1da991e1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16a0], eax
mov dword [ebp - 0x169c], ecx
mov dword [ebp - 0x138], 0xe24d16fd
mov dword [ebp - 0x134], 0x511ca4d1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1698], eax
mov dword [ebp - 0x1694], ecx
mov dword [ebp - 0x138], 0x5e510c59
mov dword [ebp - 0x134], 0x712e7157
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1690], eax
mov dword [ebp - 0x168c], ecx
mov dword [ebp - 0x138], 0xfded8daf
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1688], eax
mov dword [ebp - 0x1684], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1670], eax
mov dword [ebp - 0x166c], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0x1664], ecx
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1660], eax
mov dword [ebp - 0x165c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x1670]
xorps xmm1, xmmword [ebp - 0x16a0]
mov dword [ebp - 0x1658], eax
lea eax, [ebp - 0x16a0]
mov dword [ebp - 0x1654], ecx
lea ecx, [ebp - 0x1648]
movaps xmmword [ebp - 0x16a0], xmm1
movaps xmm1, xmmword [ebp - 0x1660]
xorps xmm1, xmmword [ebp - 0x1690]
push eax
movaps xmmword [ebp - 0x1690], xmm1
call fcn.00410110
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1648]
mov edx, 7
call fcn.004212c0
lea ecx, [ebp - 0x1648]
jmp 0x42716c
mov dword [ebp - 0x138], 0xf34e50fb
mov dword [ebp - 0x134], 0x17aa92c5
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1680], eax
mov dword [ebp - 0x167c], ecx
mov dword [ebp - 0x138], 0xef4019e1
mov dword [ebp - 0x134], 0x113a698
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1678], eax
mov dword [ebp - 0x1674], ecx
mov dword [ebp - 0x138], 0xa461c44
mov dword [ebp - 0x134], 0x362a7e1e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1670], eax
mov dword [ebp - 0x166c], ecx
mov dword [ebp - 0x138], 0xdd83f2b8
mov dword [ebp - 0x134], 0x736ddf9a
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0x1664], ecx
mov dword [ebp - 0x138], 0xea9c0b17
mov dword [ebp - 0x134], 0x42bfa689
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1660], eax
mov dword [ebp - 0x165c], ecx
mov dword [ebp - 0x138], 0x3fcc0e9d
mov dword [ebp - 0x134], 0x1eb2997d
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1658], eax
mov dword [ebp - 0x1654], ecx
mov dword [ebp - 0x138], 0xd32b38af
mov dword [ebp - 0x134], 0x7bdae284
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16b0], eax
mov dword [ebp - 0x16ac], ecx
mov dword [ebp - 0x138], 0x9b217a88
mov dword [ebp - 0x134], 0x217dc9f1
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16a8], eax
mov dword [ebp - 0x16a4], ecx
mov dword [ebp - 0x138], 0x7e356929
mov dword [ebp - 0x134], 0x164f1c3e
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x16a0], eax
mov dword [ebp - 0x169c], ecx
mov dword [ebp - 0x138], 0xfded87ca
mov dword [ebp - 0x134], 0x124dacfb
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1698], eax
mov dword [ebp - 0x1694], ecx
mov dword [ebp - 0x138], 0x84f56673
mov dword [ebp - 0x134], 0x30cbd5e0
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x1690], eax
mov dword [ebp - 0x168c], ecx
mov dword [ebp - 0x138], 0x4da37afc
mov dword [ebp - 0x134], 0x1eb2997d
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
movaps xmm1, xmmword [ebp - 0x1680]
xorps xmm1, xmmword [ebp - 0x16b0]
movaps xmmword [ebp - 0x1680], xmm1
movaps xmm1, xmmword [ebp - 0x16a0]
xorps xmm1, xmmword [ebp - 0x1670]
movaps xmmword [ebp - 0x1670], xmm1
mov dword [ebp - 0x1688], eax
mov dword [ebp - 0x1684], ecx
movaps xmm1, xmmword [ebp - 0x1690]
xorps xmm1, xmmword [ebp - 0x1660]
movaps xmmword [ebp - 0x1660], xmm1
push 0x10
push 0
lea eax, [ebp - 0x1680]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x42717c
lea ecx, [ebp - 0x178]
mov edx, eax
push ecx
lea ecx, [ebp - 0x210]
push ecx
call fcn.00422640
call fcn.00401da0
int3