Function at 0x401890
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41a642
mov eax, dword fs:[0]
push eax
sub esp, 0x680
mov eax, dword [0x42400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x620], ebx
mov dword [ebp - 0x638], 0
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x640], eax
push 0x640000
mov dword [ebp - 4], 0
mov ecx, dword [ebx + 0x24]
mov eax, dword [ebx + 4]
push 0
push 0x401
push 0x418
mov dword [ecx], eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fd4
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x650], edi
mov byte [ebp - 4], 1
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fde
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x63c], esi
mov eax, dword [ebp - 0x620]
xor bh, bh
mov byte [ebp - 4], 2
xor bl, bl
mov byte [ebp - 0x619], bh
mov byte [ebp - 0x61a], bl
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
test al, al
je 0x4024dd
nop dword [eax + eax]
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov edi, eax
call fcn.004012f0
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x64c], eax
push edi
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 3
call fcn.004046c0
test al, al
jne 0x4019e0
push edi
lea ecx, [ebp - 0x64c]
call fcn.004044d0
mov byte [ebp - 4], 4
test edi, edi
mov edi, dword [ebp - 0x64c]
je 0x402f11
mov ecx, 0x420b30
mov eax, edi
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401a26
test dx, dx
je 0x401a22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401a26
add eax, 4
add ecx, 4
test dx, dx
jne 0x401a00
xor eax, eax
jmp 0x401a2b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402510
cmp bl, 2
jne 0x401a40
test bh, bh
jne 0x402ae7
mov ebx, dword [ebp - 0x620]
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov esi, eax
call fcn.004012f0
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x668], eax
push esi
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 5
call fcn.004046c0
test al, al
jne 0x401a9b
push esi
lea ecx, [ebp - 0x668]
call fcn.004044d0
mov byte [ebp - 4], 6
mov edx, 0x80000001
mov esi, dword [ebp - 0x668]
push ecx
mov ecx, esi
call fcn.004063b0
add esp, 4
mov byte [ebp - 0x619], al
test al, al
jne 0x401ad9
push ecx
mov edx, 0x80000002
mov ecx, esi
call fcn.004063b0
add esp, 4
mov byte [ebp - 0x619], al
test al, al
je 0x401b13
push 0x420af8
push 0
call fcn.004068d0
mov edx, eax
add esp, 8
test edx, edx
jne 0x401af2
xor ecx, ecx
jmp 0x401b06
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401af7
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x63c]
call fcn.00404970
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov edi, eax
call fcn.004012f0
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x628], eax
push edi
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 7
call fcn.004046c0
test al, al
jne 0x401b68
push edi
lea ecx, [ebp - 0x628]
call fcn.004044d0
cmp byte [ebp - 0x619], 0
mov byte [ebp - 4], 8
mov edi, dword [ebp - 0x628]
je 0x4021ae
mov ecx, str.None
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401bac
test dx, dx
je 0x401ba8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401bac
add eax, 4
add ecx, 4
test dx, dx
jne 0x401b86
xor eax, eax
jmp 0x401bb1
sbb eax, eax
or eax, 1
test eax, eax
je 0x4021ae
mov dword [ebp - 0x678], 0
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x670], 0
push 0x420b70
lea ecx, [ebp - 0x62c]
mov byte [ebp - 4], 9
call fcn.00404600
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x624], 0
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x634], esi
lea eax, [ebp - 0x624]
mov byte [ebp - 4], 0xb
push eax
push dword [ebp - 0x62c]
lea eax, [ebp - 0x684]
push eax
lea ecx, [ebp - 0x628]
call fcn.004042f0
mov byte [ebp - 4], 0xc
lea ebx, [esi - 0x10]
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, ebx
je 0x401c9d
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x401c88
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x401c88
call fcn.00404c00
mov dword [ebp - 0x648], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x401c7d
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x648]
lea esi, [eax + 0x10]
mov dword [ebp - 0x634], esi
jmp 0x401c9d
push dword [edx - 0xc]
lea ecx, [ebp - 0x634]
push edx
call fcn.00404970
mov esi, dword [ebp - 0x634]
mov byte [ebp - 4], 0xb
or eax, 0xffffffff
mov edx, dword [ebp - 0x684]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x401cbf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call fcn.0040dab7
add esp, 4
mov dword [ebp - 0x630], eax
lea eax, [ebp - 0x624]
lea ecx, [ebp - 0x628]
push eax
push dword [ebp - 0x62c]
lea eax, [ebp - 0x688]
push eax
call fcn.004042f0
mov byte [ebp - 4], 0xd
lea ebx, [esi - 0x10]
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, ebx
je 0x401d51
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x401d3c
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x401d3c
call fcn.00404c00
mov dword [ebp - 0x648], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x401d31
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x648]
lea esi, [eax + 0x10]
mov dword [ebp - 0x634], esi
jmp 0x401d51
push dword [edx - 0xc]
lea ecx, [ebp - 0x634]
push edx
call fcn.00404970
mov esi, dword [ebp - 0x634]
mov byte [ebp - 4], 0xb
or eax, 0xffffffff
mov edx, dword [ebp - 0x688]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x401d73
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0
je 0x401fe1
mov ebx, dword [ebp - 0x624]
mov dword [ebp - 0x624], ebx
nop dword [eax]
mov eax, dword [ebp - 0x638]
lea ecx, [ebp - 0x634]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x674]
push ecx
cmp dword [ebp - 0x670], eax
je 0x401dc4
mov edx, eax
call fcn.00404fa0
add esp, 4
add dword [ebp - 0x674], 4
jmp 0x401dd0
push eax
lea ecx, [ebp - 0x678]
call fcn.00405010
mov esi, dword [ebp - 0x62c]
test ebx, ebx
js 0x402fe8
test esi, esi
je 0x401e5e
cmp word [esi], 0
je 0x401e5e
mov eax, dword [edi - 0xc]
lea ebx, [edi + ebx*2]
lea eax, [edi + eax*2]
mov dword [ebp - 0x648], eax
cmp ebx, eax
jae 0x401ef6
push esi
push ebx
call fcn.0040dadc
mov dword [ebp - 0x654], eax
add esp, 8
lea eax, [ebx + eax*2]
cmp eax, dword [ebp - 0x648]
jae 0x401ef6
push esi
push eax
call fcn.0040db3b
mov ecx, dword [ebp - 0x654]
add esp, 8
add ecx, dword [ebp - 0x624]
push eax
lea edx, [ecx + 1]
add edx, eax
lea eax, [ebp - 0x664]
push ecx
push eax
lea ecx, [ebp - 0x628]
mov dword [ebp - 0x624], edx
call fcn.004047e0
mov eax, dword [ebp - 0x664]
jmp 0x401f33
cmp ebx, dword [edi - 0xc]
jge 0x401ef6
mov ecx, dword [edi - 0x10]
test ecx, ecx
je 0x401e77
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x401e83
call fcn.004012f0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
lea esi, [edi + ebx*2]
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x664], eax
push esi
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 0xe
call fcn.004046c0
test al, al
jne 0x401eee
test esi, esi
jne 0x401ecd
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x664]
call fcn.00404970
mov eax, dword [ebp - 0x664]
jmp 0x401f33
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401ed2
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x664]
call fcn.00404970
mov eax, dword [ebp - 0x664]
jmp 0x401f33
mov ecx, dword [edi - 0x10]
or edx, 0xffffffff
mov dword [ebp - 0x624], edx
test ecx, ecx
je 0x401f0f
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x401f23
call fcn.004012f0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x664], eax
mov ecx, dword [ebp - 0x638]
mov byte [ebp - 4], 0xf
lea ebx, [eax - 0x10]
mov esi, dword [ebp - 0x634]
or ecx, 1
mov dword [ebp - 0x638], ecx
lea edx, [esi - 0x10]
mov dword [ebp - 0x654], edx
cmp ebx, edx
je 0x401fb8
cmp dword [edx + 0xc], 0
lea esi, [edx + 0xc]
jl 0x401fa3
mov ecx, dword [ebx]
cmp ecx, dword [edx]
jne 0x401fa3
mov ecx, ebx
call fcn.00404c00
mov dword [ebp - 0x648], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x401f98
mov esi, dword [ebp - 0x654]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x648]
lea esi, [eax + 0x10]
mov dword [ebp - 0x634], esi
jmp 0x401fb8
push dword [eax - 0xc]
lea ecx, [ebp - 0x634]
push eax
call fcn.00404970
mov esi, dword [ebp - 0x634]
mov byte [ebp - 4], 0xb
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x401fd1
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0
mov ebx, dword [ebp - 0x624]
jne 0x401d90
mov eax, dword [ebp - 0x674]
sub eax, dword [ebp - 0x678]
sar eax, 2
mov dword [ebp - 0x624], eax
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
mov dword [ebp - 0x654], eax
lea ecx, [eax + 0x10]
mov dword [ebp - 0x648], ecx
xor ebx, ebx
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x630], ebx
jne 0x40206c
mov byte [ebp - 0x619], bl
cmp dword [ebp - 0x624], ebx
jle 0x4020aa
nop word [eax + eax]
mov eax, dword [ebp - 0x678]
push dword [eax + ebx*4]
push dword [ebp - 0x63c]
call fcn.004015a0
test al, al
je 0x402063
inc ebx
cmp ebx, dword [ebp - 0x624]
jl 0x402040
jmp 0x4020aa
mov byte [ebp - 0x619], 1
jmp 0x4020aa
cmp dword [ebp - 0x624], ebx
jle 0x4020aa
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x678]
push dword [eax + ebx*4]
push dword [ebp - 0x63c]
call fcn.004015a0
test al, al
jne 0x4020a3
inc ebx
cmp ebx, dword [ebp - 0x624]
jl 0x402080
jmp 0x4020aa
mov byte [ebp - 0x619], 0
mov edx, dword [ebp - 0x654]
or eax, 0xffffffff
mov byte [ebp - 4], 0xb
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4020c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4020e5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
or eax, 0xffffffff
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402107
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov esi, dword [ebp - 0x678]
test esi, esi
je 0x4021a2
mov ebx, dword [ebp - 0x674]
cmp esi, ebx
je 0x40214a
mov edx, dword [esi]
or eax, 0xffffffff
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40213d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x402123
mov esi, dword [ebp - 0x678]
mov eax, dword [ebp - 0x670]
sub eax, esi
sar eax, 2
lea ecx, [eax*4]
mov eax, esi
cmp ecx, 0x1000
jb 0x40217a
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402ff2
push ecx
push esi
call fcn.00408576
add esp, 8
mov dword [ebp - 0x678], 0
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x670], 0
mov ebx, dword [ebp - 0x620]
mov esi, dword [ebp - 0x668]
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov dword [ebp - 0x630], eax
test eax, eax
je 0x402231
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ebx, [eax - 1]
test ebx, ebx
jle 0x402231
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, ebx
or eax, ecx
jge 0x402209
push ebx
lea ecx, [ebp - 0x628]
call fcn.00404cf0
mov edi, dword [ebp - 0x628]
push ebx
push edi
push 0xffffffffffffffff
push dword [ebp - 0x630]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebx, dword [edi - 8]
jg 0x402fe8
xor eax, eax
mov dword [edi - 0xc], ebx
mov word [edi + ebx*2], ax
jmp 0x402242
lea ecx, [ebp - 0x628]
call fcn.00404a60
mov edi, dword [ebp - 0x628]
push edi
call fcn.0040dab7
mov ebx, dword [ebp - 0x620]
add esp, 4
mov byte [ebp - 0x61a], al
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov ecx, dword [ebx + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov dword [ebp - 0x630], eax
test eax, eax
je 0x4022da
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ebx, [eax - 1]
test ebx, ebx
jle 0x4022da
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, ebx
or eax, ecx
jge 0x4022b2
push ebx
lea ecx, [ebp - 0x628]
call fcn.00404cf0
mov edi, dword [ebp - 0x628]
push ebx
push edi
push 0xffffffffffffffff
push dword [ebp - 0x630]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebx, dword [edi - 8]
jg 0x402fe8
xor eax, eax
mov dword [edi - 0xc], ebx
mov word [edi + ebx*2], ax
jmp 0x4022eb
lea ecx, [ebp - 0x628]
call fcn.00404a60
mov edi, dword [ebp - 0x628]
cmp byte [ebp - 0x61a], 1
jne 0x402301
cmp byte [ebp - 0x619], 0
je 0x402b0c
mov ebx, 0x104
mov eax, str._Root__
nop dword [eax + eax]
cmp word [eax], 0
je 0x40231e
add eax, 2
sub ebx, 1
jne 0x402310
mov edi, dword [ebp - 0x620]
mov ecx, ebx
mov eax, 0x104
sub eax, ebx
neg ecx
sbb ecx, ecx
and ecx, eax
neg ebx
sbb ebx, ebx
and ebx, ecx
mov ecx, dword [edi + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov ecx, dword [edi + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
mov edi, eax
call fcn.004012f0
test eax, eax
je 0x402fca
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x624], eax
push edi
lea ecx, [ebp - 0x624]
mov byte [ebp - 4], 0x11
call fcn.004046c0
test al, al
jne 0x40238e
push edi
lea ecx, [ebp - 0x624]
call fcn.004044d0
mov byte [ebp - 4], 0x12
mov edi, dword [ebp - 0x624]
cmp dword [edi - 0xc], 0
jl 0x402b28
push str._Root__
push edi
call fcn.00409401
add esp, 8
test eax, eax
je 0x402b28
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
je 0x402b28
mov eax, dword [edi - 0xc]
lea ecx, [ebp - 0x624]
sub eax, ebx
push eax
push ebx
lea eax, [ebp - 0x68c]
push eax
call fcn.004047e0
or dword [ebp - 0x638], 2
mov eax, dword [ebp - 0x620]
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x68c]
push esi
mov eax, dword [eax + 0x24]
push dword [eax + 0x10]
lea eax, [ebp - 0x650]
push str._s_s
push eax
call fcn.00404ee0
or ebx, 0xffffffff
mov byte [ebp - 4], 0x12
add esp, 0x10
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40242e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x402449
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov eax, ebx
mov edx, dword [ebp - 0x628]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40246a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, ebx
mov edx, dword [ebp - 0x668]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40248b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, ebx
mov edx, dword [ebp - 0x64c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4024ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x63c]
mov bh, byte [ebp - 0x619]
mov bl, byte [ebp - 0x61a]
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
test al, al
jne 0x401990
mov edi, dword [ebp - 0x650]
mov edx, dword [ebp - 0x620]
mov ebx, dword [edx + 0x24]
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
cmp eax, ecx
jne 0x402f39
push 0x40000
push 0
push 0x420dc0
push dword [edx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
xor bl, bl
jmp 0x402f50
mov ecx, str._SetPostProc_
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40253d
test dx, dx
je 0x402539
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40253d
add eax, 4
add ecx, 4
test dx, dx
jne 0x402517
xor eax, eax
jmp 0x402542
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402744
mov ebx, 0x104
mov eax, str._Root__
cmp word [eax], 0
je 0x402562
add eax, 2
sub ebx, 1
jne 0x402554
mov ecx, ebx
mov eax, 0x104
sub eax, ebx
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ebp - 0x620]
neg ebx
sbb ebx, ebx
and ebx, ecx
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00405fc0
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx + 0x58]
call fcn.00406220
push eax
lea ecx, [ebp - 0x66c]
call fcn.00404580
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x66c]
cmp dword [eax - 0xc], 0
jge 0x4025ba
or ecx, 0xffffffff
jmp 0x4025dd
push str._Root__
push eax
call fcn.00409401
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x66c]
test ecx, ecx
jne 0x4025d9
or ecx, 0xffffffff
jmp 0x4025dd
sub ecx, eax
sar ecx, 1
cmp ecx, 0xffffffff
je 0x402bae
mov eax, dword [eax - 0xc]
lea ecx, [ebp - 0x66c]
sub eax, ebx
push eax
push ebx
lea eax, [ebp - 0x67c]
push eax
call fcn.004047e0
or dword [ebp - 0x638], 4
mov ebx, dword [ebp - 0x620]
mov byte [ebp - 4], 0x15
mov esi, dword [ebp - 0x67c]
push esi
mov eax, dword [ebx + 0x24]
push dword [eax + 0x10]
add eax, 0x48
push str._s_s
push eax
call fcn.00404ee0
add esp, 0x10
mov byte [ebp - 4], 0x14
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40264a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
lea ecx, [ebp - 0x618]
mov word [ebp - 0x618], ax
mov word [ebp - 0x612], ax
mov word [ebp - 0x412], ax
mov word [ebp - 0x212], ax
mov eax, dword [ebx + 0x24]
push dword [eax + 0x48]
lea eax, [ebp - 0x680]
push eax
call fcn.00403fb0
mov byte [ebp - 4], 0x16
mov ebx, dword [ebx + 0x24]
mov edx, dword [eax]
mov esi, dword [ebx + 0x4c]
lea ecx, [edx - 0x10]
sub esi, 0x10
cmp ecx, esi
je 0x4026de
cmp dword [esi + 0xc], 0
jl 0x4026d2
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4026d2
call fcn.00404c00
mov dword [ebp - 0x630], eax
lea edx, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4026ca
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x630]
add eax, 0x10
mov dword [ebx + 0x4c], eax
jmp 0x4026de
push dword [edx - 0xc]
lea ecx, [ebx + 0x4c]
push edx
call fcn.00404970
mov byte [ebp - 4], 0x14
or ebx, 0xffffffff
mov edx, dword [ebp - 0x680]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402702
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, ebx
mov edx, dword [ebp - 0x66c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402723
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4024ac
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
jmp 0x4024a9
test bh, bh
jne 0x40276d
mov byte [ebp - 4], 2
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4024be
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4024be
mov ecx, dword [ebp - 0x620]
mov eax, dword [ecx + 0x24]
cmp dword [eax + 0x18], 0x800
jge 0x402efc
mov eax, dword [0x4256c8]
test eax, eax
jne 0x40279e
push eax
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x4256c8], eax
push 0xc
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
test eax, eax
jne 0x4027b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x4027ca
push eax
push 0
push dword [0x4256c8]
call dword [sym.imp.KERNEL32.dll_HeapSize]
add dword [0x4256cc], eax
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov byte [ebp - 4], 0x17
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x65c], eax
mov byte [ebp - 4], 0x18
call fcn.004012f0
mov ecx, eax
test ecx, ecx
je 0x402fca
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x658], eax
push 0
push 0x420af8
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0x19
call fcn.00404970
push 0
push 0x420af8
lea ecx, [ebp - 0x65c]
call fcn.00404970
push 0
push 0x420af8
lea ecx, [ebp - 0x658]
call fcn.00404970
mov byte [ebp - 4], 0x1a
lea ecx, [edi - 0x10]
mov ebx, dword [ebp - 0x660]
add ebx, 0xfffffff0
mov dword [ebp - 0x654], ecx
cmp ecx, ebx
je 0x4028cb
cmp dword [ebx + 0xc], 0
jl 0x4028bc
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x4028bc
call fcn.00404c00
mov dword [ebp - 0x630], eax
lea edx, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4028b1
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x630]
add eax, 0x10
mov dword [ebp - 0x660], eax
jmp 0x4028cb
push dword [edi - 0xc]
lea ecx, [ebp - 0x660]
push edi
call fcn.00404970
mov eax, dword [ebp - 0x650]
mov ebx, dword [ebp - 0x65c]
add ebx, 0xfffffff0
lea edx, [eax - 0x10]
mov dword [ebp - 0x630], edx
cmp edx, ebx
je 0x40293b
cmp dword [ebx + 0xc], 0
jl 0x40292c
mov edx, dword [edx]
cmp edx, dword [ebx]
jne 0x40292c
mov ecx, dword [ebp - 0x630]
call fcn.00404c00
mov dword [ebp - 0x630], eax
lea edx, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x402921
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x630]
add eax, 0x10
mov dword [ebp - 0x65c], eax
jmp 0x40293b
push dword [eax - 0xc]
lea ecx, [ebp - 0x65c]
push eax
call fcn.00404970
mov ebx, dword [ebp - 0x658]
lea ecx, [esi - 0x10]
add ebx, 0xfffffff0
cmp ecx, ebx
je 0x402999
cmp dword [ebx + 0xc], 0
jl 0x40298a
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x40298a
call fcn.00404c00
mov dword [ebp - 0x630], eax
lea edx, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40297f
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x630]
add eax, 0x10
mov dword [ebp - 0x658], eax
jmp 0x402999
push dword [esi - 0xc]
lea ecx, [ebp - 0x658]
push esi
call fcn.00404970
mov eax, dword [ebp - 0x620]
lea ecx, [ebp - 0x660]
push ecx
mov ebx, dword [eax + 0x24]
mov eax, dword [ebx + 0x2c]
cmp dword [ebx + 0x30], eax
je 0x4029be
mov ecx, eax
call fcn.00401650
add dword [ebx + 0x2c], 0xc
jmp 0x4029c7
push eax
lea ecx, [ebx + 0x28]
call fcn.00405290
lea eax, [ebp - 0x660]
push eax
lea edx, [ebp - 0x65c]
lea ecx, [ebp - 0x644]
call fcn.00404240
add esp, 4
mov byte [ebp - 4], 0x1b
mov edx, dword [eax]
mov ebx, dword [ebp - 0x640]
add ebx, 0xfffffff0
lea ecx, [edx - 0x10]
cmp ecx, ebx
je 0x402a46
cmp dword [ebx + 0xc], 0
jl 0x402a37
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x402a37
call fcn.00404c00
mov dword [ebp - 0x630], eax
lea edx, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x402a2c
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x630]
add eax, 0x10
mov dword [ebp - 0x640], eax
jmp 0x402a46
push dword [edx - 0xc]
lea ecx, [ebp - 0x640]
push edx
call fcn.00404970
mov byte [ebp - 4], 0x1a
or ebx, 0xffffffff
mov edx, dword [ebp - 0x644]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402a6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x640]
call fcn.00405900
test eax, eax
je 0x402d3e
mov ecx, dword [ebp - 0x620]
mov ecx, dword [ecx + 0x24]
mov ecx, dword [ecx + 0x48]
cmp dword [ecx - 0xc], 0
je 0x402a9c
call fcn.00405900
test eax, eax
je 0x402bf6
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [ebp - 0x620]
mov ecx, dword [ecx + 0x24]
add dword [ecx + 0x20], eax
adc dword [ecx + 0x24], 0
lea ecx, [ebp - 0x660]
call fcn.00403000
mov edx, dword [ebp - 0x654]
mov eax, ebx
mov byte [ebp - 4], 2
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4024b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4024b2
mov byte [ebp - 4], 2
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4024d7
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4024d7
mov eax, dword [ebp - 0x620]
push 0x40000
push 0
push edi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
or ebx, 0xffffffff
jmp 0x402b67
mov eax, dword [ebp - 0x620]
push 0x40000
push 0
push 0x420b9c
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
or ebx, 0xffffffff
mov byte [ebp - 4], 8
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x402b61
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x628]
mov byte [ebp - 4], 6
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x402b82
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x402b9d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x63c]
mov edi, dword [ebp - 0x64c]
jmp 0x402f14
mov eax, dword [ebp - 0x620]
push 0x40000
push 0
push 0x420bd4
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp - 0x66c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402f14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x402f14
mov eax, dword [ebp - 0x640]
lea ecx, [ebp - 0x62c]
mov ebx, dword [eax - 0xc]
cmp ebx, 0x104
jl 0x402d1f
push 0x420af8
call fcn.00404600
push ebx
lea eax, [ebp - 0x62c]
mov byte [ebp - 4], 0x23
push 0x420c18
push eax
call fcn.00404ee0
lea eax, [ebp - 0x62c]
mov edx, 0x420c38
push eax
lea ecx, [ebp - 0x680]
call fcn.004040a0
push str._n__path_
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x644]
call fcn.00404170
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 0x25
push ecx
mov edx, eax
lea ecx, [ebp - 0x624]
call fcn.00404240
add esp, 0x18
mov byte [ebp - 4], 0x27
or ebx, 0xffffffff
mov edx, dword [ebp - 0x644]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402c9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov eax, ebx
mov edx, dword [ebp - 0x680]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402cbe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x624]
mov edx, 0x420d48
push eax
lea ecx, [ebp - 0x67c]
call fcn.004040a0
add esp, 4
push 0x40000
push 0x420c48
push dword [eax]
mov eax, dword [ebp - 0x620]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x67c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402d10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x624]
jmp 0x402eb7
lea eax, [ebp - 0x660]
mov edx, 0x420d78
push eax
call fcn.004040a0
mov byte [ebp - 4], 0x29
mov edx, 0x420d94
jmp 0x402e7e
mov eax, dword [ebp - 0x640]
lea ecx, [ebp - 0x62c]
mov ebx, dword [eax - 0xc]
cmp ebx, 0x104
jl 0x402e64
push 0x420af8
call fcn.00404600
push ebx
lea eax, [ebp - 0x62c]
mov byte [ebp - 4], 0x1c
push 0x420c18
push eax
call fcn.00404ee0
lea eax, [ebp - 0x62c]
mov edx, 0x420c38
push eax
lea ecx, [ebp - 0x680]
call fcn.004040a0
push str._n__path_
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x644]
call fcn.00404170
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 0x1e
push ecx
mov edx, eax
lea ecx, [ebp - 0x624]
call fcn.00404240
add esp, 0x18
mov byte [ebp - 4], 0x20
or ebx, 0xffffffff
mov edx, dword [ebp - 0x644]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402de5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov eax, ebx
mov edx, dword [ebp - 0x680]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402e06
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x624]
mov edx, 0x420c54
push eax
lea ecx, [ebp - 0x67c]
call fcn.004040a0
add esp, 4
push 0x40000
push 0x420c48
push dword [eax]
mov eax, dword [ebp - 0x620]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x67c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402e58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x624]
jmp 0x402eb7
lea eax, [ebp - 0x660]
mov edx, 0x420c80
push eax
call fcn.004040a0
mov byte [ebp - 4], 0x22
mov edx, 0x420cd0
lea eax, [ebp - 0x62c]
push eax
lea ecx, [ebp - 0x644]
call fcn.004040a0
add esp, 8
push 0x40000
push 0x420cb8
push dword [eax]
mov eax, dword [ebp - 0x620]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x644]
or ebx, 0xffffffff
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402ece
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov eax, ebx
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x402eef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x660]
call fcn.00403000
jmp 0x402f14
push 0x40000
push 0
push 0x420bf8
push dword [ecx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
or ebx, 0xffffffff
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x402f2f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x650]
xor bl, bl
jmp 0x402f50
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebx + 0x18], eax
mov bl, 1
mov byte [ebp - 4], 1
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x402f6c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
or esi, 0xffffffff
mov byte [ebp - 4], 0
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x402f8a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x640]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], esi
dec esi
test esi, esi
jg 0x402fac
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040805b
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00405840
push 0x80004005
call fcn.00405840
push 0x80004005
call fcn.00405840
push 0x80070057
call fcn.00405840
call fcn.0040dfd9
int3