Function at 0x4067d0
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x548
mov eax, dword [0x43000c]
xor eax, ebp
test cl, cl
mov dword [esp + 0x540], eax
mov eax, 0xf
jne 0x40684e
lea esi, [esp + 0x38]
xor ecx, ecx
inc ecx
mov edx, esi
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
call fcn.00408ae0
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jae 0x40682f
mov ecx, dword [esp + 0x540]
xor ecx, ebp
call fcn.00429010
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0x38]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40868d
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406819
mov edi, edx
xor eax, eax
lea esi, [esp + 0x28]
mov dword [esi + 4], eax
push 0x40
call fcn.0042866c
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
lea ebx, [esp + 0x450]
mov word [eax + 0xc], 0x101
mov dword [esi], eax
xor eax, eax
inc eax
mov ecx, ebx
push eax
push eax
push edi
call fcn.00416d10
mov ecx, ebx
xor edi, edi
mov edx, esi
push edi
call fcn.00405d20
add esp, 4
lea ebx, [esp + 0x38]
mov eax, 0xf
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x10], edi
mov byte [ebx], 0
sub esp, 0xc
lea edi, [esp + 0x534]
mov ecx, ebx
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.StopSendingReportsFor
mov dword [esp], 0x15
call fcn.00405430
mov ecx, esi
mov edx, edi
push ebx
call fcn.00413c10
add esp, 4
mov eax, dword [ebx + 0x14]
mov ecx, dword [esi]
mov esi, dword [edi]
cmp eax, 0x10
jae 0x406d21
cmp esi, ecx
mov ebx, ecx
je 0x406bd9
mov eax, 0xf
xor ebx, ebx
mov dword [esp + 0x53c], eax
mov dword [esp + 0x538], ebx
mov byte [esp + 0x528], bl
sub esp, 0xc
lea esi, [esp + 0x51c]
mov ecx, edi
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.StopSendingReportsFor
mov dword [esp], 0x15
call fcn.00405430
lea ecx, [esp + 0x28]
mov edx, esi
push edi
call fcn.0041a710
add esp, 4
mov eax, dword [esi]
mov edi, dword [0x430528]
mov ecx, 0xf
mov dword [esp + 8], esi
mov dword [esp + 0x508], ebx
mov dword [esp + 4], eax
mov eax, 0xf
mov dword [esp + 0x50c], eax
lea eax, [edi + 1]
mov byte [esp + 0x4f8], bl
cmp eax, 0x10
jae 0x4086dd
cmp dword [0x43052c], 0xf
mov eax, 0x430518
jbe 0x406994
mov eax, dword [0x430518]
cmp ecx, edi
jb 0x406dfa
cmp ecx, 0xf
mov dword [esp + 0x508], edi
jbe 0x4069b1
mov esi, dword [esp + 0x4f8]
jmp 0x4069b8
lea esi, [esp + 0x4f8]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x508]
mov ecx, dword [esp + 0x50c]
cmp ecx, eax
je 0x406e24
lea edx, [eax + 1]
cmp ecx, 0xf
mov dword [esp + 0x508], edx
jbe 0x4069f5
mov ecx, dword [esp + 0x4f8]
jmp 0x4069fc
lea ecx, [esp + 0x4f8]
mov word [ecx + eax], 0x5c
mov ecx, dword [esp + 0x50c]
mov edi, dword [esp + 0x508]
mov eax, ecx
sub eax, edi
cmp eax, 9
jb 0x406e55
lea eax, [esp + 0x4f8]
lea edx, [edi + 9]
cmp ecx, 0xf
mov esi, eax
mov dword [eax + 0x10], edx
jbe 0x406a38
mov esi, dword [esp + 0x4f8]
lea ecx, [esp + 0x508]
lea edx, [esp + 0x50c]
mov dword [esi + edi + 4], 0x66694c66
mov dword [esi + edi], 0x4f646e45
mov word [esi + edi + 8], 0x65
xor esi, esi
mov ebx, dword [esp + 4]
mov dword [esp + 0x520], esi
mov dword [esp + 0x524], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x520], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x510], xmm0
movsd qword [esp + 0x518], xmm1
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [ebx + 0x38]
cmp dword [ebx + 0x3c], 0xf
jbe 0x406ab2
mov ebx, dword [ebx + 0x28]
jmp 0x406ab5
add ebx, 0x28
mov edx, dword [esp + 0x524]
mov ecx, dword [esp + 0x520]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x406e8e
lea esi, [ecx + eax]
cmp edx, 0xf
lea edi, [esp + 0x510]
mov dword [esp + 0x520], esi
jbe 0x406aec
mov edi, dword [esp + 0x510]
add ecx, edi
push eax
push ebx
push ecx
call sub.VCRUNTIME140.dll_memmove
lea edx, [esp + 0x52c]
add esp, 0xc
mov byte [edi + esi], 0
lea esi, [esp + 0x524]
mov ecx, dword [esp + 8]
xor eax, eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
movsd xmm0, qword [ecx + 0x10]
movsd qword [esp + 0x48], xmm0
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x40], xmm1
mov dword [edx], eax
mov dword [esi], 0xf
mov byte [ecx], 0
mov eax, dword [esp + 0x524]
cmp eax, 0x10
jae 0x406d69
mov eax, dword [esp + 0x50c]
mov dword [esp + 0x520], 0
mov dword [esp + 0x524], 0xf
mov byte [esp + 0x510], 0
cmp eax, 0x10
jae 0x406d8e
mov eax, dword [esp + 0x53c]
cmp eax, 0x10
jae 0x406db3
lea ecx, [esp + 0x38]
mov edx, 0x10
call fcn.00415e10
cmp dword [eax + 0x50], 0
mov esi, eax
jne 0x40705c
mov eax, dword [esi]
mov edi, esi
mov eax, dword [eax + 4]
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, dword [esp + 0x4c]
cmp eax, 0x10
jae 0x406dd8
mov ebx, dword [esp + 0x28]
mov eax, 0xf
lea esi, [esp + 0x528]
mov dword [esp + 0x48], 9
lea ecx, [esp + 0x28]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0x63736944
mov dword [esp + 0x3c], 0x65647261
mov word [esp + 0x40], 0x64
mov edx, esi
push eax
call fcn.00413c10
add esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov esi, dword [esi]
cmp eax, 0x10
jae 0x406d47
cmp esi, ebx
je 0x406ec2
xor ebx, ebx
mov eax, dword [esp + 0x450]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x450], 0x42a4a0
mov eax, dword [esp + 0x450]
mov eax, dword [eax + 4]
lea ecx, [eax - 0x60]
mov dword [esp + eax + 0x44c], ecx
mov dword [esp + 0x460], 0x42a4b0
test byte [esp + 0x49c], 1
je 0x406cb5
mov eax, dword [esp + 0x480]
mov eax, dword [eax]
test eax, eax
je 0x4086aa
lea ecx, [esp + 0x450]
add ecx, 0x40
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [esp + 0x46c]
mov ecx, dword [ecx]
sub eax, ecx
cmp eax, 0x1000
jae 0x4086c2
push eax
push ecx
call fcn.004286a1
add esp, 8
lea ecx, [esp + 0x460]
xor edi, edi
lea esi, [esp + 0x4b0]
mov eax, dword [ecx + 0xc]
mov dword [eax], edi
mov eax, dword [ecx + 0x1c]
mov dword [eax], edi
mov eax, dword [ecx + 0x2c]
mov dword [eax], edi
mov eax, dword [ecx + 0x10]
mov dword [eax], edi
mov eax, dword [ecx + 0x20]
mov dword [eax], edi
mov eax, dword [ecx + 0x30]
mov dword [eax], edi
mov dword [ecx + 0x38], edi
and byte [ecx + 0x3c], 0xfe
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
mov esi, dword [esp + 0x28]
mov ecx, dword [esi + 4]
call fcn.00416c40
push 0x40
push esi
call fcn.004286a1
add esp, 8
test bl, bl
je 0x406faa
call fcn.00406660
jmp 0x406819
mov ebx, ecx
mov ecx, dword [esp + 0x38]
lea edx, [eax + 1]
cmp edx, 0x1000
jae 0x408711
push edx
push ecx
call fcn.004286a1
add esp, 8
mov ecx, ebx
jmp 0x4068eb
mov ecx, dword [esp + 0x38]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408734
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406c2e
mov ecx, dword [esp + 0x510]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408751
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406b54
mov ecx, dword [esp + 0x4f8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40876e
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406b82
mov ecx, dword [esp + 0x528]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40878b
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406b92
mov ecx, dword [esp + 0x38]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4087a8
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406bd5
sub esp, 0x10
mov cl, byte [esp + 0x448]
mov byte [esp + 4], cl
lea ecx, [esp + 0x508]
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.00405160
jmp 0x4069c7
sub esp, 0x10
mov al, byte [esp + 0x448]
lea ecx, [esp + 0x508]
mov byte [esp + 4], al
xor eax, eax
mov dword [esp + 8], 0x42c13e
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
jmp 0x406a02
sub esp, 0x10
mov al, byte [esp + 0x448]
lea ecx, [esp + 0x508]
mov byte [esp + 4], al
mov eax, 9
mov dword [esp + 8], str.EndOfLife
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x406a5c
sub esp, 0x10
mov cl, byte [esp + 0x448]
mov byte [esp + 4], cl
lea ecx, [esp + 0x520]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.00405160
lea edx, [eax + 0x10]
lea esi, [eax + 0x14]
mov dword [esp + 8], eax
jmp 0x406b0b
mov eax, 0xf
lea esi, [esp + 0x528]
mov dword [esp + 0x48], 7
lea ecx, [esp + 0x28]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0x73617243
mov dword [esp + 0x3b], 0x44496873
mov byte [esp + 0x3f], 0
mov edx, esi
push eax
call fcn.00413c10
add esp, 4
mov eax, dword [esp + 0x4c]
mov esi, dword [esi]
cmp eax, 0x10
jae 0x407a29
cmp esi, ebx
je 0x406c36
mov edi, dword [0x430528]
mov eax, 0xf
mov ecx, 0xf
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], eax
mov byte [esp + 0x38], 0
lea eax, [edi + 1]
cmp eax, 0x10
jae 0x4087c5
cmp dword [0x43052c], 0xf
mov eax, 0x430518
jbe 0x406f59
mov eax, dword [0x430518]
cmp ecx, edi
jb 0x407bb3
cmp ecx, 0xf
lea esi, [esp + 0x38]
mov dword [esp + 0x48], edi
jbe 0x406f72
mov esi, dword [esp + 0x38]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
je 0x407bda
lea edx, [eax + 1]
cmp ecx, 0xf
mov dword [esp + 0x48], edx
jbe 0x407080
mov ecx, dword [esp + 0x38]
jmp 0x407084
mov eax, dword [0x43057c]
cmp dword [0x430580], 0xf
mov esi, 0x43056c
mov dword [esp + 0x448], edi
mov dword [esp + 0x44c], edi
jbe 0x406fd1
mov esi, dword [0x43056c]
cmp eax, 0xf
ja 0x407f76
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
mov ebx, 0xf
movsd qword [esp + 0x440], xmm1
movsd qword [esp + 0x438], xmm0
lea edi, [esp + 0x438]
mov esi, ebx
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], ebx
mov ebx, eax
call fcn.00408a50
cmp eax, 2
jl 0x407b10
mov edx, eax
sub edx, ebx
jbe 0x407170
mov ecx, esi
sub ecx, ebx
cmp ecx, edx
jae 0x4087f6
sub esp, 0x10
mov cl, byte [esp + 0x48]
mov byte [esp + 4], cl
lea ecx, [esp + 0x448]
mov dword [esp + 8], edx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call fcn.0041a590
jmp 0x407187
mov ecx, esi
push 1
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
push 0x42c82a
push eax
call fcn.00406430
add esp, 8
mov ecx, esi
call fcn.00416dc0
jmp 0x406bac
lea ecx, [esp + 0x38]
mov word [ecx + eax], 0x5c
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov eax, ecx
sub eax, esi
cmp eax, 9
jb 0x407c08
lea eax, [esp + 0x38]
lea edx, [esi + 9]
cmp ecx, 0xf
mov edi, eax
mov dword [eax + 0x10], edx
jbe 0x4070b4
mov edi, dword [esp + 0x38]
lea ecx, [esp + 0x48]
lea edx, [esp + 0x4c]
mov dword [edi + esi + 4], 0x65747469
mov dword [edi + esi], 0x6d627573
mov word [edi + esi + 8], 0x64
xor esi, esi
mov dword [esp + 0x538], esi
mov dword [esp + 0x53c], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x538], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x528], xmm0
movsd qword [esp + 0x530], xmm1
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x4c]
cmp eax, 0x10
jae 0x407a4b
lea esi, [esp + 0x528]
mov ecx, esi
call fcn.004133e0
test al, al
jne 0x407c3e
xor ebx, ebx
mov eax, dword [esp + 0x53c]
cmp eax, 0x10
jb 0x406c38
mov ecx, dword [esp + 0x528]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4088a7
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406c38
cmp esi, 0xf
jbe 0x40717c
mov edi, dword [esp + 0x438]
mov dword [esp + 0x448], eax
mov byte [edi + eax], 0
lea edx, [esp + 0x438]
lea ecx, [esp + 0x528]
call fcn.00413af0
mov edi, dword [esp + 0x538]
lea esi, [esp + 0x510]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
mov ecx, esi
lea eax, [edi + 6]
push eax
call fcn.00401490
cmp dword [esp + 0x53c], 7
jbe 0x4071db
mov eax, dword [esp + 0x528]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x524]
mov eax, dword [esp + 0x520]
mov edx, ecx
sub edx, eax
cmp edx, edi
jb 0x407b36
lea ebx, [eax + edi]
cmp ecx, 7
mov dword [esp + 0x520], ebx
jbe 0x40720b
mov esi, dword [esp + 0x510]
add edi, edi
lea eax, [esi + eax*2]
push edi
push dword [esp + 0xc]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + ebx*2], 0
mov ecx, dword [esp + 0x524]
mov eax, dword [esp + 0x520]
mov edx, ecx
sub edx, eax
cmp edx, 6
jb 0x407b61
lea edx, [eax + 6]
cmp ecx, 7
mov dword [esp + 0x520], edx
jbe 0x407257
mov ecx, dword [esp + 0x510]
jmp 0x40725e
lea ecx, [esp + 0x510]
mov edx, dword [0x42ca96]
movsd xmm0, qword [str..dmp]
mov dword [ecx + eax*2 + 8], edx
movsd qword [ecx + eax*2], xmm0
mov word [ecx + eax*2 + 0xc], 0
cmp dword [esp + 0x524], 7
jbe 0x40728f
mov eax, dword [esp + 0x510]
jmp 0x407296
lea eax, [esp + 0x510]
lea ecx, [esp + 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
je 0x407a79
xor ebx, ebx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
dec ebx
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x538]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x508], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x454], ecx
mov ecx, 7
inc edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x450], eax
mov dword [esp + 0x50c], ecx
lea ecx, [esp + 0x4f8]
mov word [esp + 0x4f8], 0
push edx
call fcn.00401490
mov eax, dword [esp + 0x538]
cmp dword [esp + 0x53c], 7
lea ecx, [esp + 0x528]
jbe 0x40733d
mov ecx, dword [esp + 0x528]
mov edi, dword [esp + 0x50c]
mov edx, dword [esp + 0x508]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4075c5
lea esi, [edx + eax]
cmp edi, 7
lea edi, [esp + 0x4f8]
mov dword [esp + 0x508], esi
jbe 0x407374
mov edi, dword [esp + 0x4f8]
add eax, eax
lea edx, [edi + edx*2]
push eax
push ecx
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [edi + esi*2], 0
mov eax, dword [esp + 0x508]
mov ecx, dword [esp + 0x50c]
cmp ecx, eax
je 0x4075ec
lea edx, [eax + 1]
cmp ecx, 7
lea ecx, [esp + 0x4f8]
mov dword [esp + 0x508], edx
jbe 0x4073bd
mov ecx, dword [esp + 0x4f8]
mov word [ecx + eax*2], 0x5c
mov word [ecx + eax*2 + 2], 0
lea eax, [esp + 0x64]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edx, dword [esp + 0x50c]
mov ecx, dword [esp + 0x508]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x40761a
lea esi, [ecx + eax]
cmp edx, 7
lea edi, [esp + 0x4f8]
mov dword [esp + 0x508], esi
jbe 0x40740e
mov edi, dword [esp + 0x4f8]
lea ecx, [edi + ecx*2]
add eax, eax
push eax
lea eax, [esp + 0x68]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [edi + esi*2], 0
lea eax, [esp + 0x4f8]
lea ecx, [esp + 0x50c]
lea edx, [esp + 0x508]
movsd xmm0, qword [eax + 0x10]
lea esi, [esp + 0x458]
movsd qword [esi + 0x10], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 8], xmm1
movsd qword [esi], xmm0
mov dword [edx], 0
mov dword [ecx], 7
mov word [eax], 0
mov ecx, dword [esp + 0x50c]
cmp ecx, 8
jb 0x40749e
mov eax, dword [esp + 0x4f8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40791d
push edx
push eax
call fcn.004286a1
add esp, 8
mov edi, dword [esp + 8]
mov ecx, dword [esp + 0xc]
cmp edi, ecx
je 0x40754a
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x458]
mov dword [ecx + 4], edx
xor edx, edx
mov dword [ecx], eax
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x1c], edx
mov esi, dword [esp + 0x468]
cmp dword [esp + 0x46c], 7
jbe 0x4074e2
mov edi, dword [esp + 0x458]
lea eax, [ecx + 8]
cmp esi, 7
jbe 0x40765c
mov ebx, esi
mov dword [esp + 0x10], eax
mov eax, 0x7ffffffe
or ebx, 7
cmp ebx, eax
cmovae ebx, eax
lea eax, [ebx + ebx]
cmp ebx, 0x7ff
jae 0x4078c9
add eax, 2
push eax
call fcn.0042866c
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
lea ecx, [esi + esi + 2]
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], esi
mov dword [eax + 0x1c], ebx
add eax, 0x20
xor ebx, ebx
mov dword [esp + 0xc], eax
dec ebx
jmp 0x407864
mov eax, dword [esp + 4]
mov esi, ebx
sub ecx, eax
sub edi, eax
sar ecx, 5
mov dword [esp + 0x1c], edi
sar edi, 5
mov eax, edi
inc ecx
mov edx, ecx
shr eax, 1
mov ecx, 0x7ffffff
sub ecx, eax
add eax, edi
mov ebx, edx
cmp eax, edx
cmovb eax, edx
cmp edi, ecx
mov ecx, 0x7ffffff
cmova eax, edx
mov edx, eax
shl edx, 5
cmp eax, ecx
mov eax, edx
mov dword [esp + 0x24], edx
cmova eax, esi
cmp eax, 0x1000
jb 0x40764b
sub eax, 0xffffffdd
cmovae eax, esi
push eax
call fcn.0042866c
add esp, 4
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
mov eax, dword [esp + 0x450]
mov ecx, dword [esp + 0x454]
jmp 0x407682
sub esp, 0x10
mov dl, byte [esp + 0x40]
mov byte [esp + 4], dl
mov dword [esp + 8], ecx
lea ecx, [esp + 0x508]
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00401360
jmp 0x40738a
sub esp, 0x10
mov al, byte [esp + 0x40]
lea ecx, [esp + 0x508]
mov byte [esp + 4], al
xor eax, eax
mov dword [esp + 8], 0x42cbba
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00401360
jmp 0x4073ca
sub esp, 0x10
mov cl, byte [esp + 0x40]
mov byte [esp + 4], cl
lea ecx, [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], ecx
lea ecx, [esp + 0x508]
call fcn.00401360
lea edx, [eax + 0x10]
lea ecx, [eax + 0x14]
jmp 0x40743d
test eax, eax
je 0x407678
push eax
call fcn.0042866c
add esp, 4
mov esi, eax
jmp 0x40767a
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov ebx, 7
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
jmp 0x407531
xor esi, esi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
shl edi, 5
mov dword [esi + edi], eax
xor eax, eax
mov dword [esi + edi + 4], ecx
mov dword [esi + edi + 0x18], eax
mov dword [esi + edi + 0x1c], eax
lea eax, [esp + 0x458]
mov edx, eax
mov ecx, dword [esp + 0x468]
cmp dword [esp + 0x46c], 7
mov eax, dword [esp + 8]
jbe 0x4076bb
mov edx, dword [esp + 0x458]
lea edi, [esi + edi + 8]
cmp ecx, 7
mov dword [esp + 0xc], ebx
jbe 0x4078ad
mov ebx, ecx
mov eax, 0x7ffffffe
mov dword [esp + 0x20], edx
mov dword [esp + 0x10], ecx
or ebx, 7
cmp ebx, eax
cmovae ebx, eax
lea eax, [ebx + ebx]
cmp ebx, 0x7ff
jae 0x4078f3
add eax, 2
push eax
call fcn.0042866c
add esp, 4
mov dword [edi], eax
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x10]
lea ecx, [edi + edi + 2]
push ecx
push dword [esp + 0x24]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, edi
mov edi, dword [esp + 0x20]
add esp, 0xc
mov eax, dword [esp + 8]
cmp dword [esp + 4], eax
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], ebx
je 0x407799
mov dword [esp + 8], eax
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 4]
lea ecx, [ecx + eax + 0x20]
mov edx, dword [ecx - 0x20]
mov edi, dword [ecx - 0x1c]
mov dword [esi + eax + 4], edi
mov dword [esi + eax], edx
mov dword [esi + eax + 0x18], ebx
mov dword [esi + eax + 0x1c], ebx
movsd xmm0, qword [ecx - 8]
movsd qword [esi + eax + 0x18], xmm0
movsd xmm0, qword [ecx - 0x18]
movsd xmm1, qword [ecx - 0x10]
movsd qword [esi + eax + 0x10], xmm1
movsd qword [esi + eax + 8], xmm0
add eax, 0x20
cmp ecx, dword [esp + 8]
mov dword [ecx - 8], ebx
mov dword [ecx - 4], 7
mov word [ecx - 0x18], 0
jne 0x407738
mov edi, dword [esp + 4]
mov eax, dword [esp + 8]
jmp 0x40779b
mov edi, eax
mov ecx, dword [esp + 0xc]
test edi, edi
mov ebx, 0xffffffff
je 0x40784d
cmp edi, eax
je 0x40781b
mov ecx, dword [edi + 0x1c]
cmp ecx, 8
jb 0x4077d5
mov eax, dword [edi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4077f2
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, dword [esp + 8]
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 7
mov word [edi + 8], 0
add edi, 0x20
cmp eax, edi
jne 0x4077b0
jmp 0x407811
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
xor ebx, ebx
mov edx, ecx
dec ebx
jmp 0x4077c7
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x1c]
jmp 0x407821
sub eax, edi
mov edx, eax
mov eax, edi
cmp edx, 0x1000
jb 0x40783f
mov ecx, eax
mov eax, dword [eax - 4]
sub ecx, eax
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x408a46
add edx, 0x23
push edx
push eax
call fcn.004286a1
add esp, 8
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x24]
shl ecx, 5
mov dword [esp + 4], esi
add ecx, esi
mov dword [esp + 0xc], ecx
add eax, esi
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x46c]
cmp ecx, 8
jb 0x407891
mov eax, dword [esp + 0x458]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40793f
push edx
push eax
call fcn.004286a1
add esp, 8
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4072ca
jmp 0x407961
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
mov ebx, 7
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
jmp 0x407724
add eax, 0x25
cmp ebx, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0042866c
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40751c
add eax, 0x25
cmp ebx, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0042866c
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4076fe
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
xor ebx, ebx
mov edx, ecx
dec ebx
jmp 0x407494
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
xor ebx, ebx
mov edx, ecx
dec ebx
jmp 0x407887
mov edx, dword [esp + 0xc]
mov edi, dword [esp + 4]
mov esi, edx
mov ecx, edi
sub esi, edi
sar esi, 5
push esi
call fcn.0041c270
add esp, 4
cmp esi, 0xb
jae 0x408121
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x407a79
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 8]
cmp edi, ebx
je 0x407a04
mov esi, dword [esp + 4]
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x4079cb
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4079e8
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, dword [esp + 8]
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], 0
add esi, 0x20
cmp ebx, esi
jne 0x4079a6
jmp 0x407a04
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x4079bd
mov edx, dword [esp + 4]
sub eax, edx
mov ecx, eax
cmp eax, 0x1000
jb 0x407a6d
mov eax, dword [edx - 4]
sub edx, eax
add edx, 0xfffffffc
cmp edx, 0x20
jae 0x408a46
add ecx, 0x23
jmp 0x407a6f
mov ecx, dword [esp + 0x38]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40884f
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x406f11
mov ecx, dword [esp + 0x38]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4088c4
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x407123
mov eax, edx
push ecx
push eax
call fcn.004286a1
add esp, 8
mov ecx, dword [esp + 0x524]
mov eax, 0xf
cmp ecx, 8
jb 0x407ab0
mov eax, dword [esp + 0x510]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x408811
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, 0xf
mov ecx, dword [esp + 0x53c]
cmp ecx, 8
jb 0x407ae2
mov eax, dword [esp + 0x528]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x408830
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, 0xf
lea esi, [esp + 0x38]
xor ecx, ecx
inc ecx
mov edx, esi
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
call fcn.00408ae0
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jae 0x407b91
mov esi, dword [esp + 0x44c]
cmp esi, 0x10
jb 0x406819
mov eax, dword [esp + 0x438]
lea edx, [esi + 1]
cmp edx, 0x1000
jae 0x40886c
push edx
push eax
jmp 0x406844
sub esp, 0x10
mov al, byte [esp + 0x48]
lea ecx, [esp + 0x520]
mov byte [esp + 4], al
mov dword [esp + 0xc], edi
mov dword [esp], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 8], eax
call fcn.00401360
jmp 0x407224
sub esp, 0x10
mov al, byte [esp + 0x48]
lea ecx, [esp + 0x520]
mov byte [esp + 4], al
mov eax, 6
mov dword [esp + 8], str..dmp
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00401360
jmp 0x40727c
mov ecx, dword [esp + 0x38]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4088e1
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x407b09
sub esp, 0x10
mov cl, byte [esp + 0x520]
mov byte [esp + 4], cl
lea ecx, [esp + 0x48]
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.00405160
jmp 0x406f81
sub esp, 0x10
mov al, byte [esp + 0x520]
lea ecx, [esp + 0x48]
mov byte [esp + 4], al
xor eax, eax
mov dword [esp + 8], 0x42c13e
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
jmp 0x40708a
sub esp, 0x10
mov al, byte [esp + 0x520]
lea ecx, [esp + 0x48]
mov byte [esp + 4], al
mov eax, 9
mov dword [esp + 8], str.submitted
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x4070d2
lea eax, [esp + 0x4f8]
mov ecx, 0xf
lea edi, [esp + 0x438]
xor ebx, ebx
mov dword [eax + 0x14], ecx
lea ecx, [esp + 0x28]
mov dword [eax + 0x10], 7
mov dword [eax], 0x73617243
mov dword [eax + 3], 0x44496873
mov byte [eax + 7], bl
mov edx, edi
push eax
call fcn.0041a710
add esp, 4
mov eax, dword [edi]
mov dword [edi + 0x10], 0
mov dword [esp + 4], eax
mov eax, 0xf
mov dword [edi + 0x14], eax
mov byte [edi], bl
mov ebx, dword [esp + 0x538]
mov eax, 0xf
lea ecx, [ebx + 1]
cmp ecx, 0x10
jae 0x4088fe
cmp dword [esp + 0x53c], 0xf
jbe 0x407cbc
mov esi, dword [esp + 0x528]
cmp eax, ebx
jb 0x407fbd
cmp eax, 0xf
mov dword [esp + 0x448], ebx
jbe 0x407cd7
mov edi, dword [esp + 0x438]
push ebx
push esi
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
mov eax, dword [esp + 0x448]
mov ecx, dword [esp + 0x44c]
cmp ecx, eax
je 0x407fe4
lea edx, [eax + 1]
cmp ecx, 0xf
mov dword [esp + 0x448], edx
jbe 0x407d14
mov ecx, dword [esp + 0x438]
jmp 0x407d1b
lea ecx, [esp + 0x438]
mov word [ecx + eax], 0x5c
mov ecx, dword [esp + 4]
mov eax, dword [ecx + 0x38]
cmp dword [ecx + 0x3c], 0xf
jbe 0x407d33
mov ecx, dword [ecx + 0x28]
jmp 0x407d36
add ecx, 0x28
mov edx, dword [esp + 0x44c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x448]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x408012
lea esi, [esp + 0x438]
lea edi, [ecx + eax]
cmp edx, 0xf
mov ebx, esi
mov dword [esi + 0x10], edi
jbe 0x407d6f
mov ebx, dword [esp + 0x438]
lea edx, [esp + 0x448]
add ecx, ebx
mov dword [esp + 0xc], edx
lea edx, [esp + 0x44c]
mov dword [esp + 0x10], edx
push eax
push dword [esp + 8]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
xor eax, eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
movsd xmm0, qword [esi + 0x10]
movsd qword [esp + 0x48], xmm0
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x40], xmm1
mov dword [ecx], eax
mov eax, dword [esp + 0x10]
mov dword [eax], 0xf
mov byte [esi], 0
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov eax, ecx
sub eax, esi
cmp eax, 4
jb 0x40804d
lea eax, [esp + 0x38]
lea edx, [esi + 4]
cmp ecx, 0xf
mov edi, eax
mov dword [eax + 0x10], edx
jbe 0x407e00
mov edi, dword [esp + 0x38]
mov dword [edi + esi], 0x7478742e
lea ecx, [esp + 0x48]
lea edx, [esp + 0x4c]
mov byte [edi + esi + 4], 0
xor esi, esi
mov dword [esp + 0x520], esi
mov dword [esp + 0x524], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x520], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x510], xmm0
movsd qword [esp + 0x518], xmm1
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x4c]
cmp eax, 0x10
jae 0x407f0a
mov eax, dword [esp + 0x44c]
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0xf
mov byte [esp + 0x38], 0
cmp eax, 0x10
jae 0x407f2c
mov eax, dword [esp + 0x50c]
cmp eax, 0x10
jae 0x407f51
lea ecx, [esp + 0x510]
mov edx, 0x10
call fcn.00415e10
cmp dword [eax + 0x50], 0
mov esi, eax
jne 0x408279
mov eax, dword [esi]
mov edi, esi
mov eax, dword [eax + 4]
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
xor ebx, ebx
mov eax, dword [esp + 0x524]
cmp eax, 0x10
jb 0x40713b
mov ecx, dword [esp + 0x510]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408932
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x40713b
mov ecx, dword [esp + 0x38]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40894f
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x407e65
mov ecx, dword [esp + 0x438]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40896c
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x407e8a
mov ecx, dword [esp + 0x4f8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408989
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x407e9a
mov ecx, eax
mov edi, eax
mov eax, 0x7fffffff
or ecx, 0xf
cmp ecx, eax
cmovae ecx, eax
mov ebx, ecx
cmp ecx, 0xfff
jae 0x408671
lea eax, [ebx + 1]
push eax
call fcn.0042866c
add esp, 4
lea ecx, [edi + 1]
mov dword [esp + 0x438], eax
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, edi
add esp, 0xc
jmp 0x406ffa
sub esp, 0x10
mov al, byte [esp + 0x40]
lea ecx, [esp + 0x448]
mov byte [esp + 4], al
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp], ebx
call fcn.00405160
jmp 0x407ce6
sub esp, 0x10
mov al, byte [esp + 0x40]
lea ecx, [esp + 0x448]
mov byte [esp + 4], al
xor eax, eax
mov dword [esp + 8], 0x42c13e
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
jmp 0x407d21
sub esp, 0x10
mov cl, byte [esp + 0x40]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x448]
call fcn.00405160
mov esi, eax
add eax, 0x10
lea ecx, [esi + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
jmp 0x407d99
sub esp, 0x10
mov al, byte [esp + 0x40]
lea ecx, [esp + 0x48]
mov byte [esp + 4], al
mov eax, 4
mov dword [esp + 8], str..txt
mov dword [esp + 0xc], eax
mov dword [esp], eax
call fcn.00405160
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x407e14
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
lea eax, [esp + 0x450]
movsd qword [esp + 0x458], xmm1
movsd qword [esp + 0x450], xmm0
mov dword [esp + 0x460], ebx
mov dword [esp + 0x464], 7
jmp 0x4081a4
add eax, 0x25
cmp edi, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0042866c
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x408179
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x408206
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40824b
xor eax, eax
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], eax
mov eax, dword [esp + 0xc]
mov ebx, dword [eax - 8]
cmp dword [eax - 4], 7
jbe 0x408143
mov esi, dword [eax - 0x18]
jmp 0x408146
lea esi, [eax - 0x18]
cmp ebx, 8
jb 0x408080
mov edi, ebx
mov eax, 0x7ffffffe
or edi, 7
cmp edi, eax
cmovae edi, eax
lea eax, [edi + edi]
cmp edi, 0x7ff
jae 0x4080b9
add eax, 2
push eax
call fcn.0042866c
add esp, 4
lea ecx, [ebx + ebx + 2]
mov dword [esp + 0x450], eax
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0x460], ebx
mov dword [esp + 0x464], edi
mov eax, dword [esp + 0x450]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [esp + 0x460]
lea esi, [esp + 0x450]
mov ecx, esi
add edx, 0xfffffffc
push 6
push str..extra
push 4
call fcn.0041ba50
add esp, 0xc
cmp dword [esp + 0x464], 7
jbe 0x4081e0
mov esi, dword [esp + 0x450]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 4]
cmp ecx, 8
jb 0x408214
mov eax, dword [eax - 0x18]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4080e3
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, dword [esp + 0xc]
mov dword [eax - 8], 0
mov dword [eax - 4], 7
mov word [eax - 0x18], 0
mov ecx, dword [esp + 0x464]
cmp ecx, 8
jb 0x408259
mov eax, dword [esp + 0x450]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x408102
push edx
push eax
call fcn.004286a1
add esp, 8
mov eax, dword [esp + 0xc]
add eax, 0xffffffe0
mov dword [esp + 0xc], eax
sub eax, dword [esp + 4]
sar eax, 5
cmp eax, 0xa
ja 0x408121
mov edi, dword [esp + 4]
jmp 0x407984
mov eax, 0xf
lea edi, [esp + 0x38]
mov dword [esp + 0x508], 7
lea ecx, [esp + 0x28]
mov dword [esp + 0x50c], eax
lea eax, [esp + 0x4f8]
mov dword [esp + 0x4f8], 0x73617243
mov dword [esp + 0x4fb], 0x44496873
mov byte [esp + 0x4ff], 0
mov edx, edi
push eax
call fcn.0041a710
add esp, 4
mov eax, dword [edi]
cmp dword [eax + 0x3c], 0x10
lea edi, [eax + 0x28]
jb 0x4082d5
mov edi, dword [edi]
lea eax, [esp + 0x438]
mov ecx, 0xf
lea ebx, [esp + 0x38]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], 7
mov dword [eax], 0x73617243
mov dword [eax + 3], 0x44496873
mov byte [eax + 7], 0
mov ecx, 0x4304f4
mov edx, ebx
push eax
call fcn.0041a710
add esp, 4
mov ecx, dword [ebx]
cmp dword [ecx + 0x3c], 0x10
lea eax, [ecx + 0x28]
jb 0x40831d
mov eax, dword [eax]
push edi
push eax
push 0x400
lea eax, [esp + 0x44]
push eax
call fcn.00405c50
add esp, 0x10
mov eax, dword [esp + 0x44c]
cmp eax, 0x10
jae 0x408593
mov eax, dword [esp + 0x50c]
cmp eax, 0x10
jae 0x4085b8
lea eax, [esp + 0x38]
push eax
push esi
call fcn.00406430
add esp, 8
push 0x42c82a
push eax
call fcn.00406430
add esp, 8
mov eax, 0xf
lea edi, [esp + 0x28]
lea ebx, [esp + 0x438]
mov dword [esp + 0x508], 7
mov dword [esp + 0x50c], eax
lea eax, [esp + 0x4f8]
mov dword [esp + 0x4f8], 0x77656956
mov dword [esp + 0x4fb], 0x4c525577
mov byte [esp + 0x4ff], 0
mov ecx, edi
mov edx, ebx
push eax
call fcn.00413c10
add esp, 4
mov eax, dword [esp + 0x50c]
mov edi, dword [edi]
mov ebx, dword [ebx]
cmp eax, 0x10
jae 0x4085dd
cmp ebx, edi
je 0x4084ff
mov eax, 0xf
lea edi, [esp + 0x438]
mov dword [esp + 0x508], 7
lea ecx, [esp + 0x28]
mov dword [esp + 0x50c], eax
lea eax, [esp + 0x4f8]
mov dword [esp + 0x4f8], 0x77656956
mov dword [esp + 0x4fb], 0x4c525577
mov byte [esp + 0x4ff], 0
mov edx, edi
push eax
call fcn.0041a710
add esp, 4
mov eax, dword [edi]
cmp dword [eax + 0x3c], 0x10
lea ebx, [eax + 0x28]
jb 0x40843c
mov ebx, dword [ebx]
mov eax, 0xf
lea edi, [esp + 0x30]
mov dword [esp + 0x448], 0xf
mov ecx, 0x4304f4
mov dword [esp + 0x44c], eax
lea eax, [esp + 0x438]
mov dword [esp + 0x440], 0x736c6961
mov dword [esp + 0x438], 0x73617243
mov dword [esp + 0x43c], 0x74654468
mov dword [esp + 0x443], 0x4c525573
mov byte [esp + 0x447], 0
mov edx, edi
push eax
call fcn.0041a710
add esp, 4
mov ecx, dword [edi]
cmp dword [ecx + 0x3c], 0x10
lea eax, [ecx + 0x28]
jb 0x4084af
mov eax, dword [eax]
push ebx
push eax
push 0x400
lea eax, [esp + 0x44]
push eax
call fcn.00405c50
add esp, 0x10
mov eax, dword [esp + 0x44c]
cmp eax, 0x10
jae 0x408627
mov eax, dword [esp + 0x50c]
cmp eax, 0x10
jae 0x40864c
lea eax, [esp + 0x38]
push eax
push esi
call fcn.00406430
add esp, 8
push 0x42c82a
push eax
call fcn.00406430
add esp, 8
mov ecx, esi
call fcn.00416dc0
mov eax, dword [esi]
mov edi, esi
mov eax, dword [eax + 4]
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, 0xf
lea esi, [esp + 0x438]
mov dword [esp + 0x508], 7
lea ecx, [esp + 0x28]
mov dword [esp + 0x50c], eax
lea eax, [esp + 0x4f8]
mov dword [esp + 0x4f8], 0x73617243
mov dword [esp + 0x4fb], 0x44496873
mov byte [esp + 0x4ff], 0
mov edx, esi
push eax
call fcn.0041a710
add esp, 4
mov edx, dword [esi]
xor ecx, ecx
add edx, 0x28
call fcn.00408ae0
mov eax, dword [esp + 0x50c]
cmp eax, 0x10
jae 0x408602
mov bl, 1
jmp 0x407ed5
mov ecx, dword [esp + 0x438]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x4089a6
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x408341
mov ecx, dword [esp + 0x4f8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x4089c3
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x408351
mov ecx, dword [esp + 0x4f8]
lea edx, [eax + 1]
cmp edx, 0x1000
jae 0x4089dc
push edx
push ecx
call fcn.004286a1
add esp, 8
jmp 0x4083d5
mov ecx, dword [esp + 0x4f8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4089fb
push esi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x40858c
mov ecx, dword [esp + 0x438]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408a14
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x4084d3
mov ecx, dword [esp + 0x4f8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408a2d
push edi
push ecx
call fcn.004286a1
add esp, 8
jmp 0x4084e3
lea eax, [ebx + 0x24]
push eax
call fcn.0042866c
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x407fa1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406842
mov eax, dword [esp + 0x47c]
lea ecx, [esp + 0x450]
add ecx, 0x3c
mov eax, dword [eax]
jmp 0x406c91
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x23
mov ecx, edx
jmp 0x406cab
sub esp, 8
mov cl, byte [esp + 0x440]
lea esi, [esp + 0x500]
mov byte [esp + 4], cl
mov ecx, esi
mov dword [esp], eax
call fcn.00403f40
mov dword [esi + 0x10], 0
mov edi, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x406981
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
mov dword [esp + 8], edx
cmp ecx, 0x20
jae 0x408a46
mov ecx, dword [esp + 8]
add eax, 0x24
mov edx, eax
jmp 0x406d36
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x406d5a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406d7f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406da4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406dc9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406deb
sub esp, 8
mov cl, byte [esp + 0x518]
lea esi, [esp + 0x40]
mov byte [esp + 4], cl
mov ecx, esi
mov dword [esp], eax
call fcn.00403f40
mov dword [esi + 0x10], 0
mov edi, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x406f46
mov edi, eax
cmp esi, 0xf
mov dword [esp + 0x448], eax
jbe 0x408889
mov esi, dword [esp + 0x438]
jmp 0x408890
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407aa1
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x408a46
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407ad3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x407a3c
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x408a46
add esi, 0x24
mov eax, ecx
mov edx, esi
jmp 0x407b2f
lea esi, [esp + 0x438]
add ebx, esi
push edx
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x407187
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407161
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407a5e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407ba4
sub esp, 8
mov al, byte [esp + 0x38]
lea ebx, [esp + 0x440]
mov byte [esp + 4], al
mov dword [esp], ecx
mov ecx, ebx
call fcn.00403f40
mov dword [ebx + 0x10], 0
mov eax, ebx
mov ebx, dword [esp + 0x538]
mov eax, dword [eax + 0x14]
jmp 0x407cab
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407efb
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407f1d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407f42
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407f67
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4085a9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4085ce
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
mov dword [esp + 4], edx
cmp ecx, 0x20
jae 0x408a46
mov ecx, dword [esp + 4]
add eax, 0x24
mov edx, eax
jmp 0x4085f3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x408618
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40863d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x408a46
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408662
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3