Function at 0x401f7d
Capabilities:
Contain obfuscated stackstrings
Delete file
Get file size
Hash data with crc32
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d5c
push edi
lea edi, [ebp - 0x2d5c]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x401fa6
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x4052ec
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x402123
push eax
push edi
call fcn.00405ada
cmp eax, 1
jne 0x401fda
mov dword [edi], 0x405edb
jmp 0x40200b
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x402121
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x402121
lea edx, [ebp - 0x2afc]
push edx
lea edx, [ebp - 0x2b4c]
push edx
lea edx, [ebp - 0x2b9c]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x402121
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2b9c]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2b4c]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402163
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x4052ec
mov dword [ebp - 0x28b0], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x2aac]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x27a0], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x4021c9
cmp eax, 0xb
jne 0x4022e1
mov byte [ebp - 0xaa6], 0x29
mov byte [ebp - 0xaa5], 2
push 0xfa
lea edx, [ebp - 0x29b2]
push edx
push 2
lea edx, [ebp - 0xaa6]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x402246
push 0xa0d31
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x27a0], 1
jmp 0x4022e1
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0xa9a], esp
push 0x7068
push 0x702e7473
push 0x65745f6e
push 0x61635f6b
push 0x36393034
push 0x5f303538
push 0x68725f74
push 0x6c75616e
push 0x65722f74
push 0x7365742f
lea edx, [ebp - 0xaa2]
push edx
lea edx, [ebp - 0x29b2]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0xa9a]
call fcn.00406a29
mov dword [ebp - 0x27a0], eax
add esp, 0x28
add esp, 0xc
test eax, eax
jne 0x4022e1
mov byte [ebp - 0xaa4], 0x2a
mov byte [ebp - 0xaa3], 0xa
push 0xfa
lea edx, [ebp - 0x29b2]
push edx
push 0xa
lea edx, [ebp - 0xaa4]
push edx
call dword [ebx + 0x40]
cmp dword [esi + 0x270], 0x6c6e7224
jne 0x40234f
cmp dword [esi + 0x274], 0x31303174
jne 0x40234f
cmp dword [esi + 0x278], 0x74694824
jne 0x40234f
cmp dword [esi + 0x27c], 0x69686361
jne 0x40234f
cmp dword [esi + 0x280], 0x38485220
jne 0x40234f
cmp dword [esi + 0x284], 0x345b3035
jne 0x40234f
cmp dword [esi + 0x288], 0x6b363930
jne 0x40234f
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40234f
cmp word [esi + 0x290], 0x4e
je 0x4023ef
cmp dword [esi + 0x270], 0x6c6e7224
jne 0x4024c0
cmp dword [esi + 0x274], 0x31303174
jne 0x4024c0
cmp dword [esi + 0x278], 0x45542824
jne 0x4024c0
cmp dword [esi + 0x27c], 0x48295453
jne 0x4024c0
cmp dword [esi + 0x280], 0x63617469
jne 0x4024c0
cmp dword [esi + 0x284], 0x52206968
jne 0x4024c0
cmp dword [esi + 0x288], 0x30353848
jne 0x4024c0
cmp dword [esi + 0x28c], 0x3930345b
jne 0x4024c0
cmp dword [esi + 0x290], 0x205d6b36
jne 0x4024c0
cmp dword [esi + 0x294], 0x4e4143
jne 0x4024c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x402465
mov eax, dword [esi + 0x20]
push 0xefc00
lea edx, [eax + 0x10400]
push edx
lea edx, [ebp - 0xcba]
push edx
call fcn.004057e0
mov dword [ebp - 0xca6], 0x10400
mov dword [ebp - 0xca2], 0x100000
mov dword [ebp - 0xc9e], 0
mov dword [ebp - 0xc9a], 0
mov dword [ebp - 0xc96], 0
mov dword [ebp - 0xc92], 0
mov dword [ebp - 0xc8e], 0
mov dword [ebp - 0xc8a], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x4024c0
mov dword [ebp - 0xca6], 0x10400
mov dword [ebp - 0xca2], 0x100000
mov dword [ebp - 0xc9e], 0
mov dword [ebp - 0xc9a], 0
mov dword [ebp - 0xc96], 0
mov dword [ebp - 0xc92], 0
mov dword [ebp - 0xc8e], 0
mov dword [ebp - 0xc8a], 0
cmp dword [esi + 0x270], 0x6c6e7224
jne 0x40252e
cmp dword [esi + 0x274], 0x31303174
jne 0x40252e
cmp dword [esi + 0x278], 0x74694824
jne 0x40252e
cmp dword [esi + 0x27c], 0x69686361
jne 0x40252e
cmp dword [esi + 0x280], 0x38485220
jne 0x40252e
cmp dword [esi + 0x284], 0x345b3035
jne 0x40252e
cmp dword [esi + 0x288], 0x6b363930
jne 0x40252e
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40252e
cmp word [esi + 0x290], 0x4e
je 0x4025ce
cmp dword [esi + 0x270], 0x6c6e7224
jne 0x404bb2
cmp dword [esi + 0x274], 0x31303174
jne 0x404bb2
cmp dword [esi + 0x278], 0x45542824
jne 0x404bb2
cmp dword [esi + 0x27c], 0x48295453
jne 0x404bb2
cmp dword [esi + 0x280], 0x63617469
jne 0x404bb2
cmp dword [esi + 0x284], 0x52206968
jne 0x404bb2
cmp dword [esi + 0x288], 0x30353848
jne 0x404bb2
cmp dword [esi + 0x28c], 0x3930345b
jne 0x404bb2
cmp dword [esi + 0x290], 0x205d6b36
jne 0x404bb2
cmp dword [esi + 0x294], 0x4e4143
jne 0x404bb2
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4025f1
cmp eax, 0xa
je 0x4025f1
cmp eax, 0xb
je 0x4025f1
cmp eax, 0x17
je 0x4025f1
cmp eax, 0x18
jne 0x4041c9
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40261f
mov dword [ebp - 0x27a0], 1
jmp 0x4041c9
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40264c
mov dword [ebp - 0x27a0], 1
jmp 0x4041b3
mov byte [ebp - 0xf40], 0
mov byte [ebp - 0xf00], 0
mov byte [ebp - 0xec0], 0
mov byte [ebp - 0xe80], 0
mov byte [ebp - 0xe40], 0
mov byte [ebp - 0xe00], 0
mov dword [ebp - 0xdc0], 0
mov dword [ebp - 0xdbc], 0
mov dword [ebp - 0xdb8], 0
mov dword [ebp - 0xdb4], 0
mov dword [ebp - 0x1778], 0xe0070000
mov dword [ebp - 0x1774], 0xe8070000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0xa96], esp
mov eax, dword [ebp - 0x1774]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1778]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0xa96]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40271f
mov dword [ebp - 0x27a0], 1
jmp 0x4041b3
mov eax, dword [ebp - 0x1778]
mov dword [ebp - 0x1748], eax
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x40273f
cmp eax, 0xa
jne 0x402e3d
cmp dword [ebp - 0x27a0], 0
jne 0x402809
mov dword [ebp - 0x1744], 0x110
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402784
cmp eax, 0xffffffff
jne 0x402790
mov dword [ebp - 0x27a0], 1
jmp 0x402809
cmp byte [ebp - 0x2798], 0x50
je 0x402809
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4027eb
xor eax, eax
jmp 0x4027f5
cmp eax, 0x20
jbe 0x4027f5
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x402894
mov dword [ebp - 0x1744], 0x87f122
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xfa
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x40284e
cmp eax, 0xffffffff
jne 0x40285a
mov dword [ebp - 0x27a0], 1
jmp 0x402894
cmp byte [ebp - 0x2798], 0x62
jne 0x402894
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40288c
cmp ecx, eax
jae 0x40288c
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x40288c
cmp dl, 0xff
je 0x40288c
mov byte [ebp + ecx - 0xf40], dl
inc ecx
jmp 0x402868
mov byte [ebp + ecx - 0xf40], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402935
cmp byte [ebp - 0xf40], 0
jne 0x4028e2
push 0
push 0xa0d612f
push 0x6e203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
jmp 0x402935
lea ecx, [ebp - 0xf40]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x27a0], 0
jne 0x4029c0
mov dword [ebp - 0x1744], 0x88f122
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x40297a
cmp eax, 0xffffffff
jne 0x402986
mov dword [ebp - 0x27a0], 1
jmp 0x4029c0
cmp byte [ebp - 0x2798], 0x62
jne 0x4029c0
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x4029b8
cmp ecx, eax
jae 0x4029b8
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x4029b8
cmp dl, 0xff
je 0x4029b8
mov byte [ebp + ecx - 0xf00], dl
inc ecx
jmp 0x402994
mov byte [ebp + ecx - 0xf00], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402a44
cmp byte [ebp - 0xf00], 0
jne 0x4029fe
push 0xa0d
push 0x612f6e20
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x402a44
lea ecx, [ebp - 0xf00]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x27a0], 0
jne 0x402acf
mov dword [ebp - 0x1744], 0x409
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402a89
cmp eax, 0xffffffff
jne 0x402a95
mov dword [ebp - 0x27a0], 1
jmp 0x402acf
cmp byte [ebp - 0x2798], 0x49
jne 0x402acf
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402ac7
cmp ecx, eax
jae 0x402ac7
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x402ac7
cmp dl, 0xff
je 0x402ac7
mov byte [ebp + ecx - 0xec0], dl
inc ecx
jmp 0x402aa3
mov byte [ebp + ecx - 0xec0], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402b42
cmp byte [ebp - 0xec0], 0
jne 0x402b03
push 0xa0d61
push 0x2f6e203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x402b42
lea ecx, [ebp - 0xec0]
push 0xa0d
push 0x7325203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x27a0], 0
jne 0x402bcd
mov dword [ebp - 0x1744], 0x91f122
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402b87
cmp eax, 0xffffffff
jne 0x402b93
mov dword [ebp - 0x27a0], 1
jmp 0x402bcd
cmp byte [ebp - 0x2798], 0x62
jne 0x402bcd
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402bc5
cmp ecx, eax
jae 0x402bc5
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x402bc5
cmp dl, 0xff
je 0x402bc5
mov byte [ebp + ecx - 0xe80], dl
inc ecx
jmp 0x402ba1
mov byte [ebp + ecx - 0xe80], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402c44
cmp byte [ebp - 0xe80], 0
jne 0x402c03
push 0xa
push 0xd612f6e
push 0x203a244e
push 0x505f5748
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402c44
lea ecx, [ebp - 0xe80]
push 0
push 0xa0d7325
push 0x203a244e
push 0x505f5748
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x27a0], 0
jne 0x402ccf
mov dword [ebp - 0x1744], 0x8cf122
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402c89
cmp eax, 0xffffffff
jne 0x402c95
mov dword [ebp - 0x27a0], 1
jmp 0x402ccf
cmp byte [ebp - 0x2798], 0x62
jne 0x402ccf
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402cc7
cmp ecx, eax
jae 0x402cc7
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x402cc7
cmp dl, 0xff
je 0x402cc7
mov byte [ebp + ecx - 0xe40], dl
inc ecx
jmp 0x402ca3
mov byte [ebp + ecx - 0xe40], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402d3f
cmp byte [ebp - 0xe40], 0
jne 0x402d03
push 0xa0d
push 0x612f6e20
push 0x3a244e53
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x402d3f
lea ecx, [ebp - 0xe40]
push 0xa
push 0xd732520
push 0x3a244e53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x27a0], 0
jne 0x402dca
mov dword [ebp - 0x1744], 0x90f122
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402d84
cmp eax, 0xffffffff
jne 0x402d90
mov dword [ebp - 0x27a0], 1
jmp 0x402dca
cmp byte [ebp - 0x2798], 0x62
jne 0x402dca
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402dc2
cmp ecx, eax
jae 0x402dc2
mov dl, byte [ebp + ecx - 0x2795]
cmp dl, 0
je 0x402dc2
cmp dl, 0xff
je 0x402dc2
mov byte [ebp + ecx - 0xe00], dl
inc ecx
jmp 0x402d9e
mov byte [ebp + ecx - 0xe00], 0
cmp dword [ebp - 0x27a0], 0
jne 0x402e3d
cmp byte [ebp - 0xe00], 0
jne 0x402dfe
push 0xa0d61
push 0x2f6e203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x402e3d
lea ecx, [ebp - 0xe00]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x402f16
cmp dword [ebp - 0x27a0], 0
jne 0x402f16
mov dword [ebp - 0x1744], 0x110
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402e91
cmp eax, 0xffffffff
jne 0x402e9d
mov dword [ebp - 0x27a0], 1
jmp 0x402f16
cmp byte [ebp - 0x2798], 0x50
je 0x402f16
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402ef8
xor eax, eax
jmp 0x402f02
cmp eax, 0x20
jbe 0x402f02
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x4032b9
cmp dword [ebp - 0x27a0], 0
jne 0x403014
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x1744], 0x7b10
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x402f8f
cmp eax, 0xffffffff
jne 0x402f9b
mov dword [ebp - 0x27a0], 1
jmp 0x403014
cmp byte [ebp - 0x2798], 0x50
je 0x403014
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402ff6
xor eax, eax
jmp 0x403000
cmp eax, 0x20
jbe 0x403000
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x40327e
mov dword [ebp - 0x1770], 0
mov dword [ebp - 0x176c], 0
mov ecx, dword [ebp - 0x1770]
cmp ecx, 0x20
jae 0x403073
imul ecx, ecx, 0x10
mov eax, dword [ebp + ecx - 0xca2]
sub eax, dword [ebp + ecx - 0xca6]
test eax, eax
je 0x403073
test eax, 0x1f
je 0x403062
inc dword [ebp - 0x176c]
shr eax, 5
add dword [ebp - 0x176c], eax
inc dword [ebp - 0x1770]
jmp 0x403035
mov eax, dword [ebp - 0x176c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
push dword [esi + 0x28]
push 0xff
push eax
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0x1770], 0
mov ecx, dword [ebp - 0x1770]
cmp ecx, 0x20
jae 0x40327e
imul ecx, ecx, 0x10
mov edx, dword [ebp + ecx - 0xca2]
mov dword [ebp - 0x1764], edx
mov eax, dword [ebp + ecx - 0xca6]
mov dword [ebp - 0x1768], eax
sub edx, eax
test edx, edx
je 0x40327e
mov eax, dword [ebp + ecx - 0xc9e]
mov dword [ebp - 0x1760], eax
mov eax, dword [ebp - 0x1768]
mov ecx, dword [ebp - 0x1764]
cmp eax, ecx
jae 0x403273
sub ecx, eax
cmp ecx, 0x20
jbe 0x40314e
mov ecx, 0x20
mov dword [ebp - 0x1758], ecx
add eax, dword [ebp - 0x1760]
mov byte [ebp - 0x1744], 0x23
mov byte [ebp - 0x1741], ah
mov byte [ebp - 0x1740], al
shr eax, 0x10
mov byte [ebp - 0x1743], ah
mov byte [ebp - 0x1742], al
mov byte [ebp - 0x173f], ch
mov byte [ebp - 0x173e], cl
lea edx, [ebp - 0x1748]
push edx
push 0xb
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x4031b6
cmp eax, 0xffffffff
jne 0x4031c5
mov dword [ebp - 0x27a0], 1
jmp 0x403271
cmp byte [ebp - 0x2798], 0x63
je 0x403240
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403220
xor eax, eax
jmp 0x40322a
cmp eax, 0x20
jbe 0x40322a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403271
mov eax, dword [ebp - 0x1758]
mov ecx, dword [ebp - 0x1768]
add dword [ebp - 0x1768], eax
add ecx, dword [esi + 0x24]
push eax
lea edx, [ebp - 0x2797]
push edx
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
call fcn.00405457
jmp 0x40312e
jmp 0x40327e
inc dword [ebp - 0x1770]
jmp 0x4030eb
cmp dword [ebp - 0x27a0], 0
jne 0x4032b0
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x4032b9
lea edx, [esi + 0x24]
push edx
call fcn.004057b8
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4040c5
cmp dword [ebp - 0x27a0], 0
jne 0x403392
mov dword [ebp - 0x1744], 0x210
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x40330d
cmp eax, 0xffffffff
jne 0x403319
mov dword [ebp - 0x27a0], 1
jmp 0x403392
cmp byte [ebp - 0x2798], 0x50
je 0x403392
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403374
xor eax, eax
jmp 0x40337e
cmp eax, 0x20
jbe 0x40337e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x403488
mov dword [ebp - 0x1744], 0x11f022
lea edx, [ebp - 0x1748]
push edx
push 7
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x4033d7
cmp eax, 0xffffffff
jne 0x4033e6
mov dword [ebp - 0x27a0], 1
jmp 0x403488
cmp byte [ebp - 0x2798], 0x62
je 0x403461
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403441
xor eax, eax
jmp 0x40344b
cmp eax, 0x20
jbe 0x40344b
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403488
sub eax, 7
xor ecx, ecx
cmp ecx, 0x10
jae 0x403480
cmp ecx, eax
jae 0x403480
mov dl, byte [ebp + ecx - 0x2795]
mov byte [ebp + ecx - 0xdc0], dl
inc ecx
jmp 0x403466
mov byte [ebp + ecx - 0xdc0], 0
cmp dword [ebp - 0x27a0], 0
jne 0x403642
mov dword [ebp - 0x28a8], 0x20
mov dword [ebp - 0x1744], 0x127
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x4034d7
cmp eax, 0xffffffff
jne 0x4034e6
mov dword [ebp - 0x27a0], 1
jmp 0x403642
cmp byte [ebp - 0x2798], 0x7f
jne 0x4035c7
cmp byte [ebp - 0x2796], 0x36
jne 0x403511
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x28a8]
jne 0x40349f
jmp 0x403553
cmp byte [ebp - 0x2796], 0x37
jne 0x403533
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x28a8]
jne 0x40349f
jmp 0x403553
cmp byte [ebp - 0x2796], 0x22
jne 0x403553
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x28a8]
jne 0x40349f
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4035a7
xor eax, eax
jmp 0x4035b1
cmp eax, 0x20
jbe 0x4035b1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403642
cmp byte [ebp - 0x2798], 0x67
je 0x403642
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403624
xor eax, eax
jmp 0x40362e
cmp eax, 0x20
jbe 0x40362e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x40397c
mov byte [ebp - 0xdb0], 0x20
mov byte [ebp - 0xdaf], 0xf4
mov dword [ebp - 0xdae], 1
mov eax, dword [ebp - 0x2796]
mov dword [ebp - 0xdaa], eax
mov eax, dword [ebp - 0x2792]
mov dword [ebp - 0xda6], eax
mov eax, dword [ebp - 0x278e]
mov dword [ebp - 0xda2], eax
mov eax, dword [ebp - 0x278a]
mov dword [ebp - 0xd9e], eax
mov eax, dword [ebp - 0x2786]
mov dword [ebp - 0xd9a], eax
mov eax, dword [ebp - 0x2782]
mov dword [ebp - 0xd96], eax
mov eax, dword [ebp - 0x277e]
mov dword [ebp - 0xd92], eax
mov eax, dword [ebp - 0x277a]
mov dword [ebp - 0xd8e], eax
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0xd32], eax
mov eax, dword [ebp - 0xdbc]
mov dword [ebp - 0xd2e], eax
mov eax, dword [ebp - 0xdb8]
mov dword [ebp - 0xd2a], eax
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0xd26], eax
mov dword [ebp - 0xd22], 0
mov dword [ebp - 0xd1e], 0
mov dword [ebp - 0xd1a], 0x410f0211
mov dword [ebp - 0xd16], 0x52455446
mov dword [ebp - 0xd12], 0x454c4153
mov dword [ebp - 0xd0e], 0x20202020
mov dword [ebp - 0xd0a], 0x8080808
mov dword [ebp - 0xd06], 0x8080808
push 0xfa
lea edx, [ebp - 0x29b2]
push edx
push 0xf6
lea edx, [ebp - 0xdb0]
push edx
call dword [ebx + 0x40]
cmp eax, 0x20
je 0x4037bb
push 0
push 0xa0d3223
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x27a0], 1
jmp 0x40397c
mov dword [ebp - 0x1744], 0x227
mov eax, dword [ebp - 0x29b2]
mov dword [ebp - 0x1742], eax
mov eax, dword [ebp - 0x29ae]
mov dword [ebp - 0x173e], eax
mov eax, dword [ebp - 0x29aa]
mov dword [ebp - 0x173a], eax
mov eax, dword [ebp - 0x29a6]
mov dword [ebp - 0x1736], eax
mov eax, dword [ebp - 0x29a2]
mov dword [ebp - 0x1732], eax
mov eax, dword [ebp - 0x299e]
mov dword [ebp - 0x172e], eax
mov eax, dword [ebp - 0x299a]
mov dword [ebp - 0x172a], eax
mov eax, dword [ebp - 0x2996]
mov dword [ebp - 0x1726], eax
lea edx, [ebp - 0x1748]
push edx
push 0x26
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403853
cmp eax, 0xffffffff
jne 0x403862
mov dword [ebp - 0x27a0], 1
jmp 0x40397c
cmp byte [ebp - 0x2798], 0x7f
jne 0x403903
cmp byte [ebp - 0x2796], 0x36
je 0x403881
cmp byte [ebp - 0x2796], 0x37
jne 0x403891
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x40349f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4038e3
xor eax, eax
jmp 0x4038ed
cmp eax, 0x20
jbe 0x4038ed
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x40397c
cmp byte [ebp - 0x2798], 0x67
je 0x40397c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40395e
xor eax, eax
jmp 0x403968
cmp eax, 0x20
jbe 0x403968
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x403aa7
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x1744], 0xfd2e
mov eax, dword [ebp - 0xcba]
mov dword [ebp - 0x1741], eax
mov eax, dword [ebp - 0xcb6]
mov dword [ebp - 0x173d], eax
mov eax, dword [ebp - 0xcb2]
mov dword [ebp - 0x1739], eax
mov eax, dword [ebp - 0xcae]
mov dword [ebp - 0x1735], eax
mov eax, dword [ebp - 0xcaa]
mov dword [ebp - 0x1731], eax
lea edx, [ebp - 0x1748]
push edx
push 0x1b
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403a22
cmp eax, 0xffffffff
jne 0x403a2e
mov dword [ebp - 0x27a0], 1
jmp 0x403aa7
cmp byte [ebp - 0x2798], 0x6e
je 0x403aa7
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403a89
xor eax, eax
jmp 0x403a93
cmp eax, 0x20
jbe 0x403a93
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x403ee1
mov dword [ebp - 0x1770], 0
mov dword [ebp - 0x176c], 0
mov ecx, dword [ebp - 0x1770]
cmp ecx, 0x20
jae 0x403ee1
imul ecx, ecx, 0x10
mov edx, dword [ebp + ecx - 0xca2]
mov dword [ebp - 0x1764], edx
sub edx, dword [ebp + ecx - 0xca6]
test edx, edx
je 0x403ee1
mov eax, dword [ebp + ecx - 0xca6]
mov dword [ebp - 0x1768], eax
mov ecx, dword [ebp + ecx - 0xc9e]
mov dword [ebp - 0x1760], ecx
mov dword [ebp - 0x1744], 0x440034
add eax, ecx
mov byte [ebp - 0x173f], ah
mov byte [ebp - 0x173e], al
shr eax, 0x10
mov byte [ebp - 0x1741], ah
mov byte [ebp - 0x1740], al
mov byte [ebp - 0x173b], dh
mov byte [ebp - 0x173a], dl
shr edx, 0x10
mov byte [ebp - 0x173d], dh
mov byte [ebp - 0x173c], dl
lea edx, [ebp - 0x1748]
push edx
push 0xf
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403b80
cmp eax, 0xffffffff
jne 0x403b8f
mov dword [ebp - 0x27a0], 1
jmp 0x403ccd
cmp byte [ebp - 0x2798], 0x74
je 0x403c0d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403bea
xor eax, eax
jmp 0x403bf4
cmp eax, 0x20
jbe 0x403bf4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403ccd
mov ecx, 6
xor edx, edx
cmp ecx, 0xa
jae 0x403c2a
cmp ecx, eax
jae 0x403c2a
shl edx, 8
mov dl, byte [ebp + ecx - 0x279c]
inc ecx
jmp 0x403c14
dec edx
dec edx
mov dword [ebp - 0x175c], edx
cmp dword [ebp - 0x176c], 0
jne 0x403ccd
mov dword [ebp - 0x1754], 0
mov ecx, dword [ebp - 0x1754]
cmp ecx, 0x20
jae 0x403c86
imul ecx, ecx, 0x10
mov eax, dword [ebp + ecx - 0xca2]
sub eax, dword [ebp + ecx - 0xca6]
test eax, eax
je 0x403c86
mov ecx, dword [ebp - 0x175c]
xor edx, edx
div ecx
test edx, edx
je 0x403c78
inc eax
add dword [ebp - 0x176c], eax
inc dword [ebp - 0x1754]
jmp 0x403c49
mov eax, dword [ebp - 0x176c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
cmp dword [ebp - 0x27a0], 0
jne 0x403ee1
mov dword [ebp - 0x1750], 1
mov eax, dword [ebp - 0x1768]
mov ecx, dword [ebp - 0x1764]
cmp eax, ecx
jae 0x403e17
sub ecx, eax
cmp ecx, dword [ebp - 0x175c]
jbe 0x403d08
mov ecx, dword [ebp - 0x175c]
mov dword [ebp - 0x1758], ecx
mov edx, dword [ebp - 0x1750]
mov byte [ebp - 0x1744], 0x36
mov byte [ebp - 0x1743], dl
add eax, dword [esi + 0x20]
push ecx
push eax
lea edx, [ebp - 0x1742]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x1758]
lea edx, [ebp - 0x1748]
push edx
lea edx, [ecx + 6]
push edx
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403d6c
cmp eax, 0xffffffff
jne 0x403d7b
mov dword [ebp - 0x27a0], 1
jmp 0x403e12
cmp byte [ebp - 0x2798], 0x76
je 0x403df6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403dd6
xor eax, eax
jmp 0x403de0
cmp eax, 0x20
jbe 0x403de0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403e12
mov ecx, dword [ebp - 0x1758]
add dword [ebp - 0x1768], ecx
call fcn.00405457
inc dword [ebp - 0x1750]
jmp 0x403ce4
jmp 0x403ee1
mov byte [ebp - 0x1744], 0x37
lea edx, [ebp - 0x1748]
push edx
push 5
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403e4c
cmp eax, 0xffffffff
jne 0x403e5b
mov dword [ebp - 0x27a0], 1
jmp 0x403ee1
cmp byte [ebp - 0x2798], 0x77
je 0x403ed6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403eb6
xor eax, eax
jmp 0x403ec0
cmp eax, 0x20
jbe 0x403ec0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x403ee1
inc dword [ebp - 0x1770]
jmp 0x403ac8
cmp dword [ebp - 0x27a0], 0
jne 0x403fb5
mov dword [ebp - 0x1744], 0x6ff0131
mov dword [ebp - 0x1740], 0x5100fd
lea edx, [ebp - 0x1748]
push edx
push 0xb
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x403f30
cmp eax, 0xffffffff
jne 0x403f3c
mov dword [ebp - 0x27a0], 1
jmp 0x403fb5
cmp byte [ebp - 0x2798], 0x71
je 0x403fb5
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403f97
xor eax, eax
jmp 0x403fa1
cmp eax, 0x20
jbe 0x403fa1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x404095
mov dword [ebp - 0x1744], 0x6ff0131
mov dword [ebp - 0x1740], 0x600fd
lea edx, [ebp - 0x1748]
push edx
push 0xb
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x404004
cmp eax, 0xffffffff
jne 0x404013
mov dword [ebp - 0x27a0], 1
jmp 0x404095
cmp byte [ebp - 0x2798], 0x71
jne 0x404025
cmp byte [ebp - 0x2798], 0
je 0x404095
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404077
xor eax, eax
jmp 0x404081
cmp eax, 0x20
jbe 0x404081
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x4040c5
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x4040d9
cmp eax, 0xb
jne 0x4041a3
cmp dword [ebp - 0x27a0], 0
jne 0x4041a3
mov dword [ebp - 0x1744], 0x110
lea edx, [ebp - 0x1748]
push edx
push 6
lea edx, [ebp - 0x279c]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x40411e
cmp eax, 0xffffffff
jne 0x40412a
mov dword [ebp - 0x27a0], 1
jmp 0x4041a3
cmp byte [ebp - 0x2798], 0x50
je 0x4041a3
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404185
xor eax, eax
jmp 0x40418f
cmp eax, 0x20
jbe 0x40418f
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x40466d
cmp dword [ebp - 0x27a0], 0
jne 0x40429c
push 0x110
push 0xe0070000
lea eax, [ebp - 0x279c]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x404217
cmp eax, 0xffffffff
jne 0x404223
mov dword [ebp - 0x27a0], 1
jmp 0x40429c
cmp byte [ebp - 0x2798], 0x50
je 0x40429c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40427e
xor eax, eax
jmp 0x404288
cmp eax, 0x20
jbe 0x404288
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x40466d
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8f0219
push 0xe0070000
lea eax, [ebp - 0x279c]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x4042e3
cmp eax, 0xffffffff
jne 0x4042f2
mov dword [ebp - 0x27a0], 1
jmp 0x40466d
cmp byte [ebp - 0x2798], 0x59
je 0x404370
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40434d
xor eax, eax
jmp 0x404357
cmp eax, 0x20
jbe 0x404357
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x40466d
sub eax, 7
shr eax, 2
mov dword [ebp - 0xa92], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0xa8e], 0
mov ecx, dword [ebp - 0xa8e]
cmp ecx, dword [ebp - 0xa92]
jae 0x40466d
shl ecx, 2
movzx eax, byte [ebp + ecx - 0x2795]
mov dword [ebp - 0xa8a], eax
movzx eax, byte [ebp + ecx - 0x2794]
mov dword [ebp - 0xa86], eax
movzx eax, byte [ebp + ecx - 0x2793]
mov dword [ebp - 0xa82], eax
movzx eax, byte [ebp + ecx - 0x2792]
mov dword [ebp - 0xa7e], eax
mov eax, dword [ebp - 0xa8a]
and eax, 0xf0
cmp eax, 0xc0
jne 0x404483
mov eax, dword [ebp - 0xa8a]
and eax, 0xf
push 0xa0d
push 0x58322e25
push 0x2d58322e
push 0x252d5832
push 0x2e255831
push 0x2e253055
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
jmp 0x404662
cmp eax, 0xd0
jne 0x4044e8
mov eax, dword [ebp - 0xa8a]
and eax, 0xf
push 0xa0d
push 0x58322e25
push 0x2d58322e
push 0x252d5832
push 0x2e255831
push 0x2e253155
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
jmp 0x404662
cmp eax, 0x40
jne 0x40454b
mov eax, dword [ebp - 0xa8a]
and eax, 0xf
push 0xa0d
push 0x58322e25
push 0x2d58322e
push 0x252d5832
push 0x2e255831
push 0x2e253043
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
jmp 0x404662
cmp eax, 0x60
jne 0x4045ae
mov eax, dword [ebp - 0xa8a]
and eax, 0xf
push 0xa0d
push 0x58322e25
push 0x2d58322e
push 0x252d5832
push 0x2e255831
push 0x2e253243
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
jmp 0x404662
cmp eax, 0x90
jne 0x404610
mov eax, dword [ebp - 0xa8a]
and eax, 0xf
push 0xa0d
push 0x58322e25
push 0x2d58322e
push 0x252d5832
push 0x2e255831
push 0x2e253142
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
jmp 0x404662
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0xa7e]
push dword [ebp - 0xa82]
push dword [ebp - 0xa86]
push dword [ebp - 0xa8a]
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2ca0]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2ca0]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0xa8e]
jmp 0x4043c6
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x404bb2
cmp dword [ebp - 0x27a0], 0
jne 0x4049f0
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xffffff14
push 0xe4070000
push 0x8cd00ff
push 0xffff14e4
push 0x7000008
push 0xcc00ffff
push 0xff14e107
push 0x8cd
push 0xffffff
push 0x14d90700
push 0x86800
push 0xffffff14
push 0xd4070000
push 0x86900ff
push 0xffff14b7
push 0x7000008
push 0xd200ffff
push 0xff149707
push 0x8cd
push 0xffffff
push 0x14970700
push 0x86a00
push 0xffffff14
push 0x5d070000
push 0x8cb00ff
push 0xffff1458
push 0x7000008
push 0xce00ffff
push 0xff145507
push 0x868
push 0xffffff
push 0x14520700
push 0x8d200
push 0xffffff14
push 0x4e070000
push 0x86800ff
push 0xffff144e
push 0x7000008
push 0xcc00ffff
push 0xff144d07
push 0x8ce
push 0xffffff
push 0x14480700
push 0x8cc00
push 0xffffff14
push 0x47070000
push 0x86900ff
push 0xffff1446
push 0x7000008
push 0xd100ffff
push 0xff144507
push 0x869
push 0xffffff
push 0x14440700
push 0x8cd00
push 0xffffff14
push 0x43070000
push 0x8cd00ff
push 0xffff1442
push 0x7000008
push 0x6800ffff
push 0xff144007
push 0x8cd
push 0xffffff
push 0x143d0700
push 0x8d100
push 0xffffff14
push 0x23070000
push 0x8cc00ff
push 0xffff1410
push 0x7000008
push 0x7500ffff
push 0xff140c07
push 0x8ce
push 0xffffff
push 0x14070700
push 0x8cd00
push 0xc010e407
push 0x669
push 0x110e4
push 0x7000006
push 0x6800c010
push 0xe1070000
push 0x6d300c0
push 0x10d90700
push 0x6cd00
push 0xc010d407
push 0x668
push 0xc010b7
push 0x7000006
push 0xce00c010
push 0x97070000
push 0x6cd0001
push 0x10970700
push 0x66800
push 0xc0105d07
push 0x6d3
push 0x11058
push 0x7000006
push 0x6700c010
push 0x55070000
push 0x6cd0003
push 0x10520700
push 0x6cd00
push 0xc0104e07
push 0x6cc
push 0x1104e
push 0x7000006
push 0x6800c010
push 0x4d070000
push 0x66d00c0
push 0x10480700
push 0x6cd00
push 0xc0104707
push 0x6cc
push 0xc01046
push 0x7000006
push 0xcd000110
push 0x45070000
push 0x6cd00c0
push 0x10440700
push 0x66800
push 0xc0104307
push 0x66d
push 0xc01042
push 0x7000006
push 0xcd008110
push 0x40070000
push 0x6cc00c0
push 0x103d0700
push 0x66b00
push 0xc0102307
push 0x6cd
push 0x11010
push 0x7000006
push 0x68000310
push 0xc070000
push 0x66e00c0
push 0x10070700
push 0x60000
mov dword [ebp - 0x174c], 0
mov ecx, dword [ebp - 0x174c]
cmp ecx, 0x230
jae 0x4049ea
movzx eax, byte [esp + ecx + 1]
mov ah, byte [esp + ecx]
push eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov ecx, dword [ebp - 0x174c]
movzx edx, byte [esp + ecx + 2]
push edx
lea edx, [esp + ecx + 7]
push edx
lea edx, [ebp - 0x1748]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x174c]
movzx ecx, byte [esp + ecx + 2]
lea eax, [ecx + 3]
add dword [ebp - 0x174c], eax
lea edx, [ebp - 0x1748]
push edx
push ecx
push 0xc8
push 0x40
push 6
push 0
call fcn.004054da
cmp eax, 0xffffffff
jne 0x404971
mov dword [ebp - 0x27a0], 1
add esp, 0x230
cmp dword [ebp - 0x27a0], 0
jne 0x404abc
push 0x75
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x310
push 0xe0070000
lea eax, [ebp - 0x279c]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x404a37
cmp eax, 0xffffffff
jne 0x404a43
mov dword [ebp - 0x27a0], 1
jmp 0x404abc
cmp byte [ebp - 0x2798], 0x50
je 0x404abc
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404a9e
xor eax, eax
jmp 0x404aa8
cmp eax, 0x20
jbe 0x404aa8
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
cmp dword [ebp - 0x27a0], 0
jne 0x404bb2
push 3
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0xffffff14
push 0xe0070000
lea eax, [ebp - 0x279c]
push esp
push 8
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.004054a6
test eax, eax
je 0x404b03
cmp eax, 0xffffffff
jne 0x404b12
mov dword [ebp - 0x27a0], 1
jmp 0x404bb2
cmp byte [ebp - 0x2798], 0x54
je 0x404b8d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x279c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404b6d
xor eax, eax
jmp 0x404b77
cmp eax, 0x20
jbe 0x404b77
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405687
mov dword [ebp - 0x27a0], 1
jmp 0x404bb2
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x4052e4
cmp dword [ebp - 0x27a0], 0
jne 0x4052e4
xor eax, eax
pushal
mov dword [ebp - 0xa72], 0xffffffff
mov dword [ebp - 0xa6e], 0xffffffff
mov ecx, 0x24
mov edi, dword [esi + 0x20]
cmp ecx, dword [esi + 0x14]
jae 0x404caf
cmp dword [edi + ecx - 0x24], 0xe55553
jne 0x404ca7
cmp dword [edi + ecx - 4], 0x4c4b4
jne 0x404c57
lea eax, [ecx - 8]
mov dword [ebp - 0xa72], eax
lea eax, [ecx - 0x14]
mov dword [ebp - 0xa6e], eax
mov dword [ebp - 0xa7a], 0x10400
mov dword [ebp - 0xa76], 0x100000
mov dword [ebp - 0xa5a], 0x10402
mov dword [ebp - 0xa56], 0x100000
mov dword [ebp - 0xa52], 0x10400
jmp 0x404d0e
cmp dword [edi + ecx - 8], 0x4c4b4
jne 0x404ca7
lea eax, [ecx - 0xc]
mov dword [ebp - 0xa72], eax
lea eax, [ecx - 0x18]
mov dword [ebp - 0xa6e], eax
mov dword [ebp - 0xa7a], 0x10400
mov dword [ebp - 0xa76], 0x100000
mov dword [ebp - 0xa5a], 0x10402
mov dword [ebp - 0xa56], 0x100000
mov dword [ebp - 0xa52], 0x10400
jmp 0x404d0e
add ecx, 4
jmp 0x404bed
mov ecx, 0x24
cmp ecx, dword [esi + 0x14]
jae 0x404d0e
cmp dword [edi + ecx - 4], 0x4c4b4
jne 0x404d09
lea eax, [ecx - 8]
mov dword [ebp - 0xa72], eax
lea eax, [ecx - 0x14]
mov dword [ebp - 0xa6e], eax
mov dword [ebp - 0xa7a], 0x10400
mov dword [ebp - 0xa76], 0x100000
mov dword [ebp - 0xa5a], 0x10402
mov dword [ebp - 0xa56], 0x100000
mov dword [ebp - 0xa52], 0x10400
jmp 0x404d0e
add ecx, 4
jmp 0x404cb4
cmp dword [ebp - 0xa72], 0xffffffff
jne 0x404d24
mov dword [esp + 0x1c], 3
jmp 0x40526c
push 0x208
push 0
lea edx, [ebp - 0xa3a]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
push 0x24454c
push 0x49465f4d
push 0x4f525f4b
push 0x434f5453
push 0x5f45534f
push 0x4f484324
lea edx, [ebp - 0x832]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0x18
push 0
mov dword [ebp - 0x62a], esp
push 0
push 0x2a002e
push 0x2a0000
push 0x730065
push 0x6c0069
push 0x660020
push 0x6c006c
push 0x410000
push 0x780065
push 0x68002e
push 0x2a0000
push 0x65006c
push 0x690066
push 0x200078
push 0x650048
push 0x6e
push 0x690062
push 0x2e002a
push 0x65
push 0x6c0069
push 0x660020
push 0x790072
push 0x61006e
push 0x690042
mov dword [ebp - 0x626], esp
push 0
push 0
push 0
push 0
push 0
push 0x1800
push 0
push 0
push 0
push 0
push 0x104
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0x4c
mov eax, dword [ebx + 0x8ac]
mov dword [esp + 4], eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x626]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xa3a]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x62a]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x832]
mov dword [esp + 0x30], eax
push esp
call dword [sym.imp.COMDLG32.DLL_GetOpenFileNameW]
add esp, 0x4c
add esp, 0x60
add esp, 4
test eax, eax
je 0x40526c
mov eax, dword [esi + 0x14]
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0xa4e], eax
push 0
push pe_nt_image_headers32
push 3
push 0
push 0
push 0x80000000
lea edx, [ebp - 0xa3a]
push edx
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
cmp eax, 0xffffffff
jne 0x404ed8
push 0xa0d
push 0x24454c49
push 0x465f474e
push 0x494e4550
push 0x4f5f524f
push 0x52524524
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [esp + 0x1c], 3
jmp 0x405260
mov dword [ebp - 0xa4a], eax
push 0
push dword [ebp - 0xa4a]
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
mov ecx, dword [esi + 0x14]
cmp eax, ecx
je 0x404f5b
push 0xa
push 0xd245345
push 0x54594224
push 0x20642520
push 0x3a244542
push 0x5f545355
push 0x4d5f455a
push 0x49535f45
push 0x4c494624
push dword [esi + 0x14]
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x832]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
add esp, 0x24
lea edx, [ebp - 0x832]
push edx
call dword [ebx + 0x30]
mov dword [esp + 0x1c], 3
push dword [ebp - 0xa4a]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x405260
push 0
lea edx, [ebp - 0xa46]
push edx
push dword [esi + 0x14]
push dword [ebp - 0xa4e]
push dword [ebp - 0xa4a]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [ebp - 0xa4a]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
pushal
xor eax, eax
mov ebx, dword [esi + 0x20]
xor edi, edi
cmp edi, dword [esi + 0x14]
jae 0x404fb8
movzx ecx, byte [ebx + edi]
cmp ch, 8
jae 0x404fb5
movzx edx, cl
xor edx, eax
shr eax, 1
shr cl, 1
test edx, 1
je 0x404fb1
xor eax, 0xedb88320
inc ch
jmp 0x404f96
inc edi
jmp 0x404f8d
mov dword [ebp - 0xa42], eax
xor eax, eax
mov ebx, dword [ebp - 0xa4e]
xor edi, edi
cmp edi, dword [esi + 0x14]
jae 0x404ff3
movzx ecx, byte [ebx + edi]
cmp ch, 8
jae 0x404ff0
movzx edx, cl
xor edx, eax
shr eax, 1
shr cl, 1
test edx, 1
je 0x404fec
xor eax, 0xedb88320
inc ch
jmp 0x404fd1
inc edi
jmp 0x404fc8
mov dword [ebp - 0xa3e], eax
popal
mov eax, dword [ebp - 0xa42]
cmp eax, dword [ebp - 0xa3e]
jne 0x4050f8
push 0
push 0xa0d2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
push 0x2a2a2a2a
mov dword [ebp - 0x622], esp
push 0xa0d
push 0x24454d41
push 0x535f4548
push 0x545f4552
push 0x415f4b43
push 0x4f54535f
push 0x444e415f
push 0x454c4946
push 0x5f4e4553
push 0x4f48435f
push 0x474e494e
push 0x52415724
push dword [ebp - 0x622]
call dword [ebx + 0x30]
push esp
call dword [ebx + 0x30]
push dword [ebp - 0x622]
call dword [ebx + 0x30]
add esp, 0x30
add esp, 0x74
mov dword [ebp - 0xa62], 0
mov dword [ebp - 0xa5e], 0
mov ecx, dword [ebp - 0xa7a]
mov edx, dword [ebp - 0xa4e]
cmp ecx, dword [ebp - 0xa76]
jae 0x405156
cmp ecx, dword [ebp - 0xa52]
je 0x405151
cmp ecx, dword [ebp - 0xa56]
je 0x405151
cmp ecx, dword [ebp - 0xa72]
je 0x405151
cmp ecx, dword [ebp - 0xa6e]
je 0x405151
mov eax, dword [edx + ecx]
bswap eax
add dword [ebp - 0xa62], eax
xor dword [ebp - 0xa5e], eax
add ecx, 4
jmp 0x405118
mov eax, dword [ebp - 0xa72]
mov eax, dword [edx + eax]
bswap eax
sub eax, dword [ebp - 0xa62]
mov dword [ebp - 0xa6a], eax
mov eax, dword [ebp - 0xa6e]
mov eax, dword [edx + eax]
bswap eax
xor eax, dword [ebp - 0xa5e]
mov dword [ebp - 0xa66], eax
mov dword [ebp - 0xa62], 0
mov dword [ebp - 0xa5e], 0
mov ecx, dword [ebp - 0xa7a]
cmp ecx, dword [ebp - 0xa76]
jae 0x4051dc
cmp ecx, dword [ebp - 0xa52]
je 0x4051d7
cmp ecx, dword [ebp - 0xa56]
je 0x4051d7
cmp ecx, dword [ebp - 0xa72]
je 0x4051d7
cmp ecx, dword [ebp - 0xa6e]
je 0x4051d7
mov eax, dword [edi + ecx]
bswap eax
add dword [ebp - 0xa62], eax
xor dword [ebp - 0xa5e], eax
add ecx, 4
jmp 0x40519e
mov eax, dword [ebp - 0xa62]
add eax, dword [ebp - 0xa6a]
bswap eax
mov ecx, dword [ebp - 0xa72]
cmp dword [edi + ecx], eax
je 0x405200
mov dword [edi + ecx], eax
mov dword [esp + 0x1c], 1
mov eax, dword [ebp - 0xa5e]
xor eax, dword [ebp - 0xa66]
bswap eax
mov ecx, dword [ebp - 0xa6e]
cmp dword [edi + ecx], eax
je 0x405224
mov dword [edi + ecx], eax
mov dword [esp + 0x1c], 1
mov ecx, dword [ebp - 0xa5a]
xor edx, edx
cmp ecx, dword [ebp - 0xa56]
jae 0x405240
movzx eax, word [edi + ecx]
xchg ah, al
add edx, eax
inc ecx
inc ecx
jmp 0x40522c
and edx, 0xffff
xchg dh, dl
mov ecx, dword [ebp - 0xa52]
cmp word [edi + ecx], dx
je 0x405260
mov word [edi + ecx], dx
mov dword [esp + 0x1c], 1
push dword [ebp - 0xa4e]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
popal
test eax, eax
jne 0x405293
push 0xa0d
push 0x2444494c
push 0x41565f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x4052e4
cmp eax, 1
jne 0x4052bf
push 0xa0d
push 0x24444554
push 0x43455252
push 0x4f435f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x4052e4
push 0xa0d
push 0x24444e55
push 0x4f465f54
push 0x4f4e5f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcec], 0
je 0x405431
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcec], 0
je 0x405333
push dword [ebx + 0xcec]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcec], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xae4]
push edx
lea edx, [ebp - 0x61e]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61e]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61e]
push edx
lea edx, [ebx + 0xae4]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x405431
lea edx, [ebx + 0xae4]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61e]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20e]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61e]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20e]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 6], esp
push 0x7068
push 0x702e7473
push 0x65745f6e
push 0x61635f6b
push 0x36393034
push 0x5f303538
push 0x68725f74
push 0x6c75616e
push 0x65722f74
push 0x7365742f
lea edx, [ebp - 0x20e]
push edx
lea edx, [ebp - 0x61e]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 6]
call fcn.004070fd
add esp, 0x28
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8