Function at 0x401400
Capabilities:
Check for software breakpoints
Delete directory
Encode data using xor
Enumerate files on windows
Get disk information
Get disk size
Get file size
Get geographical location
Manipulate console buffer
Move file
Query environment variable
Set environment variable
Set thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x12634
call fcn.004eed70
push esi
push 0
push 0
push 0
lea ecx, [ebp - 0x3404]
call fcn.004eed20
push 0
push 0
push 0
lea ecx, [ebp - 0x1eb8]
call fcn.004eed20
push 0
push 0
push 0
lea ecx, [ebp - 0x7a38]
call fcn.004eed20
push 0
push 0
push 0
lea ecx, [ebp - 0x9e98]
call fcn.004eed20
mov byte [ebp - 0x818d], 0x79
mov al, byte [ebp - 0x818d]
mov byte [ebp - 0x12500], al
cmp byte [ebp - 0x12500], 0x79
je 0x401470
jmp 0x4014d0
movsx ecx, byte [ebp - 0x818d]
cmp ecx, 0x55
jg 0x4014a7
movsx edx, byte [ebp - 0x818d]
sub edx, 0x38
mov byte [ebp - 0x818d], dl
movzx eax, byte [ebp - 0x818d]
push eax
mov dl, byte [ebp - 0x818d]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
jmp 0x4014ce
movsx ecx, byte [ebp - 0x818d]
add ecx, 0x70
cmp ecx, 0x58
jge 0x4014ce
movzx edx, byte [ebp - 0x818d]
push edx
movzx eax, byte [ebp - 0x818d]
push eax
call fcn.004eea50
add esp, 8
jmp 0x4014e9
movzx ecx, byte [ebp - 0x818d]
push ecx
mov dl, byte [ebp - 0x818d]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
mov dword [ebp - 0xab68], 0x1612
movsx edx, byte [ebp - 0x818d]
imul edx, edx, 0x50
cmp edx, 0x5d
jle 0x4eea04
movsx eax, word [0x4f8004]
or eax, 0x755
mov word [0x4f8004], ax
mov ecx, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], ecx
mov dword [ebp - 0xf224], 0x1844
mov edx, 0x28
mov word [ebp - 0x28c4], dx
mov dword [ebp - 0x24f8], 0xf65b
mov eax, dword [ebp - 0xbe04]
xor eax, 0xb81d
cmp eax, dword [ebp - 0x10be4]
jbe 0x4ee9ee
movzx ecx, word [ebp - 0x28c4]
cmp ecx, 0xde1
je 0x40158f
mov dx, word [ebp - 0x28c4]
mov word [ebp - 0x76d4], dx
mov al, byte [ebp - 0x818d]
mov byte [0x4f9d4e], al
mov byte [ebp - 0xc97a], 0x70
jmp 0x40164d
movsx ecx, word [0x4f8004]
cmp ecx, 0xa5
jge 0x40164d
movzx edx, byte [ebp - 0xc97a]
add edx, 0xb3
mov byte [ebp - 0xc97a], dl
lea eax, [ebp - 0x818d]
push eax
call dword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov dword [ebp - 0x10ee0], eax
mov cl, byte [ebp - 0xc97a]
mov byte [ebp - 0x12504], cl
cmp byte [ebp - 0x12504], 0xc
je 0x4015df
jmp 0x401629
movsx edx, byte [ebp - 0x818d]
sub edx, 0x60
movsx eax, byte [0x4f9d4e]
cmp edx, eax
jl 0x40160f
movzx ecx, byte [ebp - 0xc97a]
and ecx, 0x35
mov byte [ebp - 0xc97a], cl
mov ecx, dword [ebp - 0xbe04]
call section..text
movzx edx, byte [ebp - 0x818d]
push edx
movzx eax, byte [ebp - 0x818d]
push eax
call fcn.004eea50
add esp, 8
jmp 0x40164d
push 0xcd
mov ecx, dword [ebp - 0x7940]
push ecx
call dword [sym.imp.KERNEL32.dll_GetConsoleFontSize]
mov dword [ebp - 0x124fc], eax
mov edx, dword [ebp - 0x124fc]
mov dword [ebp - 0x2ac4], edx
movzx eax, byte [ebp - 0xc97a]
sub eax, 0x3f
mov byte [ebp - 0xc97a], al
movzx ecx, word [ebp - 0x28c4]
add ecx, 0x900
mov word [ebp - 0x76d4], cx
movzx edx, byte [ebp - 0xc97a]
add edx, 0x40
mov byte [ebp - 0xc97a], dl
movzx eax, word [ebp - 0x76d4]
sub eax, 0x890
mov word [ebp - 0x28c4], ax
movzx ecx, byte [ebp - 0xc97a]
sar ecx, 2
mov byte [ebp - 0xc97a], cl
movzx edx, byte [ebp - 0xc97a]
shl edx, 7
mov byte [ebp - 0xc97a], dl
movzx eax, byte [ebp - 0xc97a]
xor eax, 0xcd
mov byte [ebp - 0xc97a], al
mov ecx, dword [ebp - 0x10be4]
mov dword [ebp - 0xbe04], ecx
movzx edx, byte [ebp - 0xc97a]
or edx, 0x67
mov byte [ebp - 0xc97a], dl
mov eax, dword [ebp - 0xbe04]
and eax, 0x7d68
mov dword [ebp - 0x10be4], eax
movzx ecx, word [ebp - 0x28c4]
add ecx, 0x12b
mov word [ebp - 0x76d4], cx
movsx edx, byte [0x4f9d4e]
sub edx, 0x5e
mov byte [ebp - 0x818d], dl
movsx eax, byte [ebp - 0x818d]
add eax, 0x72
mov byte [0x4f9d4e], al
mov ecx, dword [ebp - 0xbe04]
sub ecx, 0xf260
mov dword [ebp - 0x10be4], ecx
movzx edx, word [ebp - 0x28c4]
and edx, 0x940
mov word [ebp - 0x76d4], dx
movzx eax, byte [ebp - 0xc97a]
add eax, 0x29
mov byte [ebp - 0xc97a], al
movzx ecx, byte [ebp - 0xc97a]
sub ecx, 2
mov byte [ebp - 0xc97a], cl
movsx edx, byte [ebp - 0x818d]
add edx, 0x7a
mov byte [0x4f9d4e], dl
movzx eax, byte [ebp - 0xc97a]
sub eax, 0x5b
mov byte [ebp - 0xc97a], al
movzx ecx, byte [ebp - 0xc97a]
xor ecx, 0x4b
mov byte [ebp - 0xc97a], cl
mov edx, dword [ebp - 0x10be4]
or edx, 0x5e33
mov dword [ebp - 0xbe04], edx
movzx eax, word [ebp - 0x28c4]
shl eax, 0xf
mov word [ebp - 0x76d4], ax
mov ecx, dword [ebp - 0x10be4]
shr ecx, 0x17
mov dword [ebp - 0xbe04], ecx
mov edx, dword [ebp - 0x10be4]
and edx, 0x4932
mov dword [ebp - 0xbe04], edx
movzx eax, byte [ebp - 0xc97a]
sub eax, 0xdb
mov byte [ebp - 0xc97a], al
mov ecx, dword [ebp - 0x10be4]
add ecx, 0x873e
mov dword [ebp - 0xbe04], ecx
movzx edx, byte [ebp - 0xc97a]
add edx, 0xf6
mov byte [ebp - 0xc97a], dl
movzx eax, word [ebp - 0x28c4]
sub eax, 0x84b
mov word [ebp - 0x76d4], ax
movzx ecx, byte [ebp - 0xc97a]
add ecx, 0x1d
mov byte [ebp - 0xc97a], cl
mov edx, dword [ebp - 0xf224]
add edx, 0xa4
mov dword [ebp - 0xf224], edx
movsx eax, byte [ebp - 0x818d]
and eax, 0x26
mov byte [0x4f9d4e], al
movsx ecx, byte [0x4f9d4e]
sub ecx, 0x48
mov byte [ebp - 0x818d], cl
movsx edx, byte [0x4f9d4e]
add edx, 3
mov byte [ebp - 0x818d], dl
movzx eax, byte [ebp - 0xc97a]
sub eax, 0xe0
mov byte [ebp - 0xc97a], al
movzx ecx, word [ebp - 0x28c4]
or ecx, 0xdd
mov word [ebp - 0x76d4], cx
cmp dword [ebp - 0xf224], 0x5668
jne 0x40164d
cmp dword [ebp - 0xab68], 0x217b
jae 0x401992
mov edx, dword [ebp - 0x10be4]
shl edx, 0x1b
mov dword [ebp - 0xbe04], edx
movsx eax, byte [0x4f9d4e]
sar eax, 1
mov byte [ebp - 0x818d], al
movzx ecx, byte [ebp - 0xc97a]
xor ecx, 0x8a
mov byte [ebp - 0xc97a], cl
mov edx, dword [ebp - 0x10be4]
and edx, 0xd1b3
mov dword [ebp - 0xbe04], edx
movzx eax, byte [ebp - 0xc97a]
add eax, 0x64
mov byte [ebp - 0xc97a], al
mov ecx, dword [ebp - 0x10be4]
sub ecx, 0x88bb
mov dword [ebp - 0xbe04], ecx
movzx edx, byte [ebp - 0xc97a]
add edx, 0xec
mov byte [ebp - 0xc97a], dl
movsx eax, byte [0x4f9d4e]
sub eax, 0x57
mov byte [ebp - 0x818d], al
movzx ecx, byte [ebp - 0xc97a]
sub ecx, 0x67
mov byte [ebp - 0xc97a], cl
mov edx, dword [ebp - 0xab68]
add edx, 0x7f
mov dword [ebp - 0xab68], edx
movzx eax, word [ebp - 0x76d4]
add eax, 0x2a8
mov word [ebp - 0x28c4], ax
mov ecx, dword [ebp - 0x10be4]
and ecx, 0x8c0c
mov dword [ebp - 0xbe04], ecx
jmp 0x4018b1
mov dword [ebp - 0x1544], 0x33a
movzx edx, byte [ebp - 0xc97a]
cmp edx, 0xa3
jne 0x401a4f
movzx eax, word [ebp - 0x76d4]
mov dword [ebp - 0x12508], eax
cmp dword [ebp - 0x12508], 0x42a
je 0x4019d6
cmp dword [ebp - 0x12508], 0x976
je 0x401a10
jmp 0x401a22
movsx ecx, byte [ebp - 0x818d]
sub ecx, 0x47
mov byte [0x4f9d4e], cl
movzx edx, word [ebp - 0x28c4]
shl edx, 1
mov word [ebp - 0x76d4], dx
movzx eax, byte [ebp - 0x818d]
push eax
movzx ecx, byte [ebp - 0x818d]
push ecx
call fcn.004eea50
add esp, 8
jmp 0x401a22
mov edx, dword [ebp - 0x1544]
xor edx, 0x1e35
mov dword [ebp - 0x1544], edx
lea eax, [ebp - 0x818d]
push eax
mov ecx, dword [ebp - 0x115d0]
push ecx
push 0xc0
lea edx, [ebp - 0x1544]
push edx
mov eax, dword [ebp - 0x8e14]
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
mov dword [ebp - 0x67ac], eax
mov dword [ebp - 0x720c], 0x7046
lea ecx, [ebp - 0x1544]
mov dword [ebp - 0x122e8], ecx
mov edx, dword [ebp - 0x10be4]
shr edx, 0xc6
cmp edx, dword [ebp - 0xbe04]
jae 0x401ae1
movzx eax, word [ebp - 0x76d4]
or eax, 0x71
movzx ecx, word [ebp - 0x28c4]
cmp eax, ecx
jge 0x401ac9
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
add eax, dword [ebp - 0x1544]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
movsx edx, byte [0x4f9d4e]
and edx, 0xc
mov byte [ebp - 0x818d], dl
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1544]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
jmp 0x401adc
mov eax, dword [ebp - 0x1f00]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0x83f8], eax
jmp 0x401b62
movzx ecx, byte [ebp - 0xc97a]
cmp ecx, 0x8a
je 0x401b62
movsx edx, word [0x4f8004]
mov dword [ebp - 0x1250c], edx
cmp dword [ebp - 0x1250c], 0x7f5
je 0x401b0b
jmp 0x401b49
movsx eax, byte [ebp - 0x818d]
add eax, 0x55
movsx ecx, byte [0x4f9d4e]
cmp eax, ecx
jle 0x401b47
movzx edx, byte [ebp - 0xc97a]
sub edx, 0x72
mov byte [ebp - 0xc97a], dl
mov eax, dword [ebp - 0x1544]
push eax
movzx ecx, byte [ebp - 0x818d]
push ecx
call fcn.00401230
add esp, 8
jmp 0x401b62
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x818d]
push ecx
call fcn.00401230
add esp, 8
lea edx, [ebp - 0x28c4]
mov dword [ebp - 0xfde4], edx
movzx eax, byte [ebp - 0xc97a]
cmp eax, 0x98
jl 0x401b95
movzx ecx, word [ebp - 0x28c4]
movzx edx, word [ebp - 0x76d4]
add ecx, edx
mov eax, dword [ebp - 0xfde4]
mov word [eax], cx
lea ecx, [ebp - 0xbe04]
mov dword [ebp - 0xeb0], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
sub eax, 0x647
cmp eax, dword [ebp - 0x1544]
jg 0x401c97
lea ecx, [ebp - 0xc97a]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x6940], 0x4adb
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
add eax, 0x95
movzx ecx, byte [ebp - 0xc97a]
cmp eax, ecx
jle 0x401c85
mov edx, dword [ebp - 0xfde4]
mov ax, word [edx]
mov word [ebp - 0x8b14], ax
lea ecx, [ebp - 0x1544]
mov dword [ebp - 0x11af4], ecx
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
mov dword [ebp - 0x1dc8], eax
mov cl, byte [ebp - 0xc97a]
mov byte [ebp - 0x12510], cl
cmp byte [ebp - 0x12510], 0xcf
je 0x401c2e
jmp 0x401c77
movsx edx, byte [ebp - 0x818d]
and edx, 0x4d
mov byte [0x4f9d4e], dl
push 0x2a
lea eax, [ebp - 0xd160]
push eax
push 0xdc
push 0xcf
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov dword [ebp - 0x706c], eax
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x706c]
sar edx, cl
mov eax, dword [ebp - 0x11af4]
mov dword [eax], edx
jmp 0x401c83
lea ecx, [ebp - 0x8b14]
mov dword [ebp - 0x4088], ecx
jmp 0x401c97
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
shl eax, 2
mov byte [ebp - 0xc97a], al
lea ecx, [ebp - 0xbe04]
mov dword [ebp - 0x62d4], ecx
lea edx, [ebp - 0x706c]
mov dword [ebp - 0xab98], edx
movsx eax, byte [0x4f9d4e]
or eax, 0x20
mov byte [ebp - 0x818d], al
movsx ecx, byte [0x4f9d4e]
xor ecx, 0x19
mov byte [ebp - 0x818d], cl
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
sub eax, 0x14
mov byte [ebp - 0xc97a], al
movsx ecx, byte [ebp - 0x818d]
add ecx, 0x7b
mov byte [0x4f9d4e], cl
mov edx, dword [ebp - 0xeb0]
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x1dc8], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0x706c]
sub eax, dword [edx]
mov dword [ebp - 0x1544], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x11af4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x62d4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1dc8]
mov dword [ebp - 0x10be4], edx
mov eax, dword [ebp - 0xab98]
mov ecx, dword [eax]
mov dword [ebp - 0x706c], ecx
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
add eax, 0x58
mov byte [ebp - 0xc97a], al
movzx ecx, word [ebp - 0x28c4]
movzx edx, word [ebp - 0x76d4]
sub ecx, edx
mov eax, dword [ebp - 0xfde4]
mov word [eax], cx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1544]
mov dword [ebp - 0x706c], edx
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [ebp - 0x10be4]
add ecx, dword [eax]
mov edx, dword [ebp - 0x62d4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [ebp - 0x1544]
add ecx, dword [eax]
mov edx, dword [ebp - 0xab98]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1544]
mov ecx, dword [ebp - 0x706c]
shl eax, cl
mov ecx, dword [ebp - 0xab98]
mov dword [ecx], eax
movzx edx, word [ebp - 0x76d4]
movzx eax, word [ebp - 0x28c4]
xor edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xc97a]
or eax, ecx
mov edx, dword [ebp - 0x190c]
mov byte [edx], al
mov eax, dword [ebp - 0x11af4]
mov edx, dword [ebp - 0x706c]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
sub eax, dword [ebp - 0xbe04]
mov ecx, dword [ebp - 0xeb0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x706c]
mov dword [ebp - 0x1544], eax
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x4088]
mov word [eax], dx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
add edx, 0xf5
mov byte [ebp - 0xc97a], dl
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [ebp - 0x62d4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xbe04], edx
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x11af4]
add ecx, dword [edx]
mov eax, dword [ebp - 0xab98]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x706c]
sub ecx, dword [ebp - 0x1544]
mov edx, dword [ebp - 0xab98]
mov dword [edx], ecx
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10be4]
mov dword [ebp - 0xbe04], ecx
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x28c4]
sar eax, cl
mov ecx, dword [ebp - 0x4088]
mov word [ecx], ax
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xc97a]
xor eax, ecx
mov edx, dword [ebp - 0x190c]
mov byte [edx], al
mov eax, dword [ebp - 0xab98]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x706c]
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [ebp - 0xab98]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x11af4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xbe04]
and ecx, dword [ebp - 0x1dc8]
mov dword [ebp - 0x10be4], ecx
mov edx, dword [ebp - 0x706c]
sub edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0x11af4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0xab98]
mov dword [eax], edx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xab98]
add edx, dword [eax]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], edx
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
and eax, 0x6c
mov byte [ebp - 0xc97a], al
mov ecx, dword [ebp - 0x6940]
sub ecx, 0x87
mov dword [ebp - 0x6940], ecx
movzx edx, word [ebp - 0x76d4]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0xfde4]
mov word [eax], dx
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ebp - 0x1dc8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x818d]
add ecx, 0x74
mov byte [0x4f9d4e], cl
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x28c4]
sub eax, ecx
mov edx, dword [ebp - 0xfde4]
mov word [edx], ax
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
sar ecx, 2
mov byte [ebp - 0xc97a], cl
cmp dword [ebp - 0x6940], 0x318b
jae 0x401caf
mov edx, dword [ebp - 0xbe04]
mov ecx, dword [ebp - 0x1dc8]
shl edx, cl
mov dword [ebp - 0x10be4], edx
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x8b14]
xor ecx, edx
mov eax, dword [ebp - 0xfde4]
movzx edx, word [eax]
movzx eax, word [ebp - 0x76d4]
or edx, eax
cmp ecx, edx
jge 0x4020c6
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
mov dword [ebp - 0x67c], edx
lea eax, [ebp - 0x1544]
mov dword [ebp - 0x7fa4], eax
lea ecx, [ebp - 0xbe04]
mov dword [ebp - 0xa274], ecx
lea edx, [ebp - 0xc97a]
mov dword [ebp - 0x5ec], edx
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x76d4]
imul ecx, edx
mov word [ebp - 0x8b14], cx
mov dword [ebp - 0x1404], 0x101d8
mov dword [ebp - 0xb794], 0x6b49
lea eax, [ebp - 0x818d]
mov dword [0x4fae34], eax
mov ecx, dword [ebp - 0x706c]
mov dword [ebp - 0x35b0], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [ebp - 0x7fa4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
mov dword [ebp - 0x6cf4], 0x6cb8
mov edx, dword [0x4fae34]
movsx eax, byte [edx]
movsx ecx, byte [0x4f9d4e]
add eax, ecx
movsx edx, byte [ebp - 0x818d]
cmp eax, edx
jl 0x4ee8f2
movzx eax, word [ebp - 0x8b14]
mov ecx, dword [ebp - 0xfde4]
movzx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [ebp - 0x4088]
movzx ecx, word [edx]
movzx edx, word [ebp - 0x76d4]
xor ecx, edx
cmp eax, ecx
je 0x4021ad
lea eax, [ebp - 0x10be4]
mov dword [ebp - 0x3420], eax
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1544]
sar edx, cl
mov eax, dword [ebp - 0xab98]
mov dword [eax], edx
mov ecx, dword [ebp - 0x706c]
or ecx, dword [ebp - 0x35b0]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
mov dword [ebp - 0xf4cc], 0x8e13
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x818d]
and ecx, edx
movsx eax, byte [0x4f9d4e]
cmp ecx, eax
jge 0x4021f7
lea ecx, [ebp - 0x1544]
mov dword [ebp - 0xc028], ecx
lea edx, [ebp - 0x76d4]
mov dword [ebp - 0x964c], edx
lea eax, [ebp - 0xc97a]
mov dword [ebp - 0xd404], eax
mov ecx, dword [0x4fae34]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x818d]
add edx, eax
movsx ecx, byte [0x4f9d4e]
cmp edx, ecx
je 0x402314
mov edx, dword [ebp - 0xeb0]
mov eax, dword [ebp - 0xa274]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xbe04], ecx
mov edx, dword [ebp - 0xbe04]
mov dword [ebp - 0x12514], edx
cmp dword [ebp - 0x12514], 0
je 0x402258
cmp dword [ebp - 0x12514], 0x47a2
je 0x4022fb
jmp 0x402312
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x38f0], eax
mov ecx, dword [ebp - 0x3420]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1dc8]
mov eax, dword [ebp - 0xbe04]
sub eax, dword [ebp - 0x54f4]
cmp edx, eax
je 0x4022c2
mov ecx, dword [ebp - 0x67c]
xor ecx, dword [ebp - 0x35b0]
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54f4]
shl eax, cl
mov dword [ebp - 0x1dc8], eax
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ebp - 0x1544]
mov ecx, dword [ecx]
sar edx, cl
mov dword [0x4f8008], edx
jmp 0x4022f9
mov eax, dword [ebp - 0x7fa4]
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0xc028]
mov ecx, dword [ebp - 0x122e8]
mov eax, dword [eax]
sub eax, dword [ecx]
cmp edx, eax
jle 0x4022f9
lea ecx, [ebp - 0x818d]
push ecx
call dword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov dword [ebp - 0x6b64], eax
jmp 0x402312
mov edx, dword [ebp - 0x1544]
push edx
movzx eax, byte [ebp - 0x818d]
push eax
call fcn.00401230
add esp, 8
jmp 0x402367
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x35b0]
add ecx, dword [ebp - 0x67c]
cmp eax, ecx
jge 0x402367
movzx edx, byte [ebp - 0xc97a]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0xd404]
mov byte [eax], dl
movzx ecx, word [ebp - 0x8b14]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x28c4], cx
mov ecx, dword [ebp - 0x5ec]
mov dl, byte [ecx]
mov byte [ebp - 0x12518], dl
cmp byte [ebp - 0x12518], 0x57
je 0x402383
jmp 0x402448
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
movsx edx, byte [0x4f9d4e]
and ecx, edx
mov byte [ebp - 0x818d], cl
mov eax, dword [ebp - 0x35b0]
mov dword [ebp - 0x1251c], eax
cmp dword [ebp - 0x1251c], 0x7693
je 0x4023b4
jmp 0x402429
push 0xc1
mov ecx, dword [ebp - 0x3f24]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
mov dword [ebp - 0xa900], eax
mov edx, dword [ebp - 0x67c]
sub edx, dword [ebp - 0x706c]
mov eax, dword [ebp - 0x38f0]
mov dword [eax], edx
movsx ecx, word [0x4f8004]
cmp ecx, 0x7a1
jg 0x402427
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0x54f4]
add eax, dword [edx]
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x67c]
mov eax, dword [ebp - 0xc028]
mov dword [eax], edx
push 0x55
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [ebp - 0x8e14], eax
jmp 0x402443
mov ecx, dword [ebp - 0x5ec]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xc97a], dl
jmp 0x4ee8d1
mov dx, word [ebp - 0x28c4]
mov word [ebp - 0x3628], dx
mov dword [ebp - 0xaacc], 0x6a1f
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [ebp - 0x10be4]
sub ecx, dword [eax]
mov dword [0x4f800c], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1544]
mov dword [ebp - 0x67c], eax
lea ecx, [ebp - 0x54f4]
mov dword [ebp - 0xb82c], ecx
mov edx, dword [ebp - 0xab98]
mov eax, dword [ebp - 0x35b0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x7fa4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1544]
mov dword [ebp - 0x12520], edx
cmp dword [ebp - 0x12520], 0
je 0x40252e
cmp dword [ebp - 0x12520], 0x681d
je 0x4024d0
jmp 0x402587
movsx eax, word [0x4f8004]
imul eax, eax, 0x4be
cmp eax, 0x230
jge 0x40252c
mov ecx, dword [ebp - 0x67c]
and ecx, dword [0x4f8008]
mov edx, dword [ebp - 0x38f0]
mov dword [edx], ecx
movzx eax, word [ebp - 0x76d4]
movzx ecx, word [ebp - 0x28c4]
xor eax, ecx
mov word [ebp - 0x8b14], ax
mov edx, dword [0x4fae34]
movzx eax, byte [edx]
push eax
mov ecx, dword [0x4fae34]
mov dl, byte [ecx]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
jmp 0x402587
mov edx, dword [ebp - 0x11af4]
mov eax, dword [edx]
mov dword [ebp - 0x12524], eax
cmp dword [ebp - 0x12524], 0
je 0x402547
jmp 0x40256f
mov cl, byte [ebp - 0xc97a]
mov byte [ebp - 0x4d61], cl
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
mov dword [ebp - 0x54f4], eax
lea ecx, [ebp - 0x1544]
mov dword [ebp - 0x8ae8], ecx
jmp 0x402587
movzx edx, byte [ebp - 0x818d]
push edx
movzx eax, byte [0x4f9d4e]
push eax
call fcn.004eea50
add esp, 8
mov ecx, dword [ebp - 0x24f8]
add ecx, 0x7b
mov dword [ebp - 0x24f8], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x35b0]
shl eax, cl
mov dword [0x4f8008], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ebp - 0x67c]
or edx, dword [ecx]
mov dword [ebp - 0x1544], edx
mov eax, dword [ebp - 0x35b0]
mov ecx, dword [ebp - 0x67c]
sar eax, cl
mov ecx, dword [ebp - 0x38f0]
mov dword [ecx], eax
mov edx, dword [0x4fae34]
movsx eax, byte [edx]
movsx ecx, byte [0x4f9d4e]
add eax, ecx
mov byte [ebp - 0x818d], al
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], al
movzx edx, byte [ebp - 0xc97a]
movzx eax, byte [ebp - 0x4d61]
and edx, eax
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3628]
sub eax, ecx
mov edx, dword [ebp - 0xfde4]
mov word [edx], ax
mov eax, dword [ebp - 0x3420]
mov ecx, dword [ebp - 0x10be4]
sub ecx, dword [eax]
mov dword [ebp - 0x1dc8], ecx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0xbe04]
add eax, dword [edx]
mov ecx, dword [ebp - 0xeb0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3420]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10be4]
mov dword [0x4f800c], eax
movzx ecx, byte [ebp - 0xc97a]
movzx edx, byte [ebp - 0x4d61]
sub ecx, edx
mov eax, dword [ebp - 0xd404]
mov byte [eax], cl
mov ecx, dword [ebp - 0x67c]
add ecx, dword [ebp - 0x1544]
mov dword [ebp - 0x35b0], ecx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0x10be4]
add eax, dword [edx]
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [0x4f8008]
sub edx, dword [ecx]
mov dword [ebp - 0x1544], edx
mov eax, dword [ebp - 0xab98]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1544]
sar edx, cl
mov dword [ebp - 0x706c], edx
mov eax, dword [ebp - 0x4088]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x76d4]
shl edx, cl
mov eax, dword [ebp - 0x4088]
mov word [eax], dx
mov ecx, dword [ebp - 0x5ec]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xc97a], dl
mov edx, dword [ebp - 0x1dc8]
xor edx, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], edx
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x818d]
and ecx, edx
mov eax, dword [0x4fae34]
mov byte [eax], cl
movzx ecx, byte [ebp - 0xc97a]
mov edx, dword [ebp - 0xd404]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x4d61], cl
mov ecx, dword [ebp - 0xa274]
mov edx, dword [ecx]
add edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
cmp dword [ebp - 0x24f8], 0x1132f
jbe 0x402587
movzx ecx, word [ebp - 0x76d4]
movzx edx, word [ebp - 0x28c4]
and ecx, edx
mov word [ebp - 0x3628], cx
mov al, byte [ebp - 0x818d]
mov byte [ebp - 0x12528], al
cmp byte [ebp - 0x12528], 0x69
je 0x4027af
jmp 0x402861
mov ecx, dword [0x4f800c]
mov dword [ebp - 0x1252c], ecx
cmp dword [ebp - 0x1252c], 0x8e66
je 0x4027c9
jmp 0x4027df
mov edx, dword [ebp - 0xb82c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1dc8]
shl eax, cl
mov dword [ebp - 0x54f4], eax
movsx ecx, word [0x4f8004]
sub ecx, 0x200
cmp ecx, 0xcd
jg 0x402801
lea edx, [ebp - 0x6b64]
push edx
call dword [sym.imp.SHELL32.dll_ILFree]
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [ebp - 0x10be4]
add ecx, dword [eax]
mov edx, dword [ebp - 0xeb0]
mov dword [edx], ecx
mov eax, dword [ebp - 0xab98]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x122e8]
add ecx, dword [edx]
mov dword [ebp - 0x35b0], ecx
mov eax, dword [ebp - 0x8ae8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x35b0]
mov edx, dword [ebp - 0x8ae8]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x818d]
push eax
mov dl, byte [ebp - 0x818d]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
jmp 0x4ee891
mov edx, dword [ebp - 0x67c]
or edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0x706c]
mov ecx, dword [ebp - 0x35b0]
sar eax, cl
cmp edx, eax
jge 0x402942
mov ecx, dword [0x4fae34]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x818d]
sub edx, eax
mov ecx, dword [0x4fae34]
mov byte [ecx], dl
mov edx, dword [0x4fae34]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x818d]
sub eax, ecx
movsx edx, byte [0x4f9d4e]
cmp eax, edx
je 0x4028e9
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xc97a]
add ecx, edx
mov byte [ebp - 0x4d61], cl
mov eax, dword [ebp - 0x35b0]
push eax
movzx ecx, byte [ebp - 0x818d]
push ecx
call fcn.00401230
add esp, 8
lea edx, [ebp - 0x83f8]
push edx
call dword [sym.imp.SHELL32.dll_ILFree]
movzx eax, word [ebp - 0x28c4]
movzx ecx, word [ebp - 0x8b14]
sub eax, ecx
mov edx, dword [ebp - 0xfde4]
mov word [edx], ax
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x1544], ecx
mov edx, dword [0x4fae34]
movzx eax, byte [edx]
push eax
mov dl, byte [ebp - 0x818d]
mov ecx, dword [0x4fae34]
mov cl, byte [ecx]
call fcn.00401140
jmp 0x4029b1
lea edx, [ebp - 0x10be4]
mov dword [ebp - 0x6228], edx
mov eax, dword [ebp - 0x35b0]
add eax, dword [ebp - 0x706c]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x35b0]
mov dword [ebp - 0xb3fc], ecx
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], ax
movzx edx, byte [ebp - 0xc97a]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xd404]
mov byte [eax], dl
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
mov dword [0x4fa670], edx
mov eax, dword [ebp - 0x3420]
mov ecx, dword [eax]
mov dword [ebp - 0x12530], ecx
cmp dword [ebp - 0x12530], 0x6a6a
je 0x4029dc
cmp dword [ebp - 0x12530], 0x55ef9800
je 0x4029e9
jmp 0x402a66
mov ecx, dword [ebp - 0x10be4]
call section..text
jmp 0x402a66
mov edx, dword [0x4fae34]
mov al, byte [edx]
mov byte [ebp - 0x42b9], al
mov cx, word [0x4f8004]
mov word [ebp - 0x3cd0], cx
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
mov dword [ebp - 0xca60], eax
mov ecx, dword [ebp - 0x67c]
add ecx, dword [ebp - 0x706c]
mov edx, dword [ebp - 0x11af4]
mov dword [edx], ecx
lea eax, [ebp - 0x4d61]
mov dword [ebp - 0x52e0], eax
movzx edx, word [ebp - 0x8b14]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x964c]
mov word [ecx], dx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0x1dc8]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0xa274]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1dc8]
or edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0x6228]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x10be4]
cmp edx, ecx
ja 0x402b0e
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [edx]
mov dword [ebp - 0x4f00], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
mov dword [ebp - 0x12534], edx
cmp dword [ebp - 0x12534], 0
je 0x402aaf
jmp 0x402af2
lea eax, [ebp - 0xca60]
mov dword [0x4faa24], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
and edx, dword [ecx]
mov dword [ebp - 0x4f00], edx
lea eax, [ebp - 0x1dc8]
mov dword [ebp - 0x108c8], eax
movzx ecx, word [ebp - 0x3628]
imul ecx, ecx, 0xaa2
mov edx, dword [ebp - 0x964c]
mov word [edx], cx
jmp 0x402b0e
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x190c]
mov byte [edx], cl
movzx eax, word [ebp - 0x28c4]
mov dword [ebp - 0x12538], eax
cmp dword [ebp - 0x12538], 0x55ba
je 0x402b2c
jmp 0x4ee78b
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
mov dword [ebp - 0x1253c], edx
cmp dword [ebp - 0x1253c], 0xc1da
je 0x402b4c
jmp 0x402c69
mov ax, word [ebp - 0x3cd0]
mov word [ebp - 0xd470], ax
movsx ecx, word [ebp - 0x3cd0]
movsx edx, word [ebp - 0xd470]
add ecx, edx
movsx eax, word [0x4f8004]
cmp ecx, eax
jne 0x402b95
mov ecx, dword [0x4fae34]
movzx edx, byte [ecx]
push edx
mov dl, byte [ebp - 0x818d]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
jmp 0x402c64
mov eax, dword [ebp - 0x4f00]
mov dword [ebp - 0x12540], eax
cmp dword [ebp - 0x12540], 0
je 0x402baf
jmp 0x402c4c
movzx ecx, word [ebp - 0x76d4]
mov dword [ebp - 0x12544], ecx
cmp dword [ebp - 0x12544], 0x5d0
je 0x402bd6
cmp dword [ebp - 0x12544], 0xd98
je 0x402c25
jmp 0x402c40
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xc97a]
sar eax, cl
mov ecx, dword [ebp - 0x5ec]
mov byte [ecx], al
push 0xa6
lea edx, [ebp - 0x8b14]
push edx
call dword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [ebp - 0xd3c4], eax
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x3628], cx
jmp 0x402c40
movzx ecx, byte [ebp - 0x818d]
push ecx
mov edx, dword [0x4fae34]
mov dl, byte [edx]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
mov dword [ebp - 0xb47c], 0x3b6f
jmp 0x402c64
mov eax, dword [ebp - 0x62d4]
mov edx, dword [ebp - 0x10be4]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x3420]
mov dword [eax], edx
jmp 0x402d4c
mov ecx, dword [ebp - 0x3420]
mov esi, dword [ebp - 0x6228]
mov eax, dword [ecx]
xor edx, edx
div dword [esi]
mov edx, dword [0x4faa24]
mov ecx, dword [edx]
and ecx, dword [ebp - 0xca60]
cmp eax, ecx
jbe 0x402d4c
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ebp - 0x67c]
add eax, dword [edx]
mov dword [ebp - 0x1544], eax
lea ecx, [ebp - 0xf3ac]
push ecx
lea edx, [ebp - 0x1eb8]
push edx
lea eax, [ebp - 0x118a8]
push eax
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0xbe04], eax
mov cl, byte [ebp - 0xc97a]
mov byte [ebp - 0x12548], cl
cmp byte [ebp - 0x12548], 0x40
je 0x402d38
cmp byte [ebp - 0x12548], 0xa3
je 0x402ce5
jmp 0x402d4c
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x964c]
mov word [ecx], ax
movzx edx, byte [ebp - 0x4d61]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xc97a], dl
mov edx, dword [0x4fae34]
movzx eax, byte [edx]
push eax
mov ecx, dword [0x4fae34]
movzx edx, byte [ecx]
push edx
call fcn.004eea50
add esp, 8
jmp 0x402d4c
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1dc8]
mov dword [0x4f800c], ecx
mov edx, dword [ebp - 0xc028]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38f0]
add eax, dword [ecx]
mov dword [ebp - 0x1544], eax
movsx edx, word [ebp - 0x3cd0]
movsx eax, word [ebp - 0xd470]
add edx, eax
movsx ecx, word [0x4f8004]
cmp edx, ecx
jl 0x402dac
lea edx, [ebp - 0x4f00]
mov dword [ebp - 0x11c84], edx
mov eax, dword [0x4faa24]
mov ecx, dword [ebp - 0x108c8]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3420]
mov dword [eax], edx
lea ecx, [ebp - 0x4d61]
mov dword [ebp - 0x8b8c], ecx
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x76d4]
imul eax, ecx
mov edx, dword [ebp - 0x964c]
mov word [edx], ax
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [0x4f8008]
sub ecx, dword [eax]
mov dword [ebp - 0x4f00], ecx
lea edx, [ebp - 0x67c]
mov dword [ebp - 0xaf60], edx
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
mov dword [ebp - 0x1254c], ecx
cmp dword [ebp - 0x1254c], 0
je 0x402e05
jmp 0x402ecf
movsx edx, word [ebp - 0xd470]
mov dword [ebp - 0x12550], edx
cmp dword [ebp - 0x12550], 0x344
je 0x402eb2
cmp dword [ebp - 0x12550], 0x7f5
je 0x402e33
jmp 0x402eca
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xc97a]
or ecx, edx
movzx eax, byte [ebp - 0x4d61]
mov edx, dword [ebp - 0x190c]
movzx edx, byte [edx]
xor eax, edx
cmp ecx, eax
jne 0x402e89
mov dword [ebp - 0x10d5c], 0x4f9d4e
movzx eax, word [ebp - 0x3628]
movzx ecx, word [ebp - 0x8b14]
shl eax, cl
mov word [0x4f8010], ax
mov cx, word [ebp - 0xd470]
mov word [ebp - 0xe34c], cx
movzx edx, word [ebp - 0x76d4]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x3628], dx
mov ecx, dword [ebp - 0x8b8c]
mov dl, byte [ecx]
mov byte [ebp - 0x2465], dl
jmp 0x402eca
mov eax, dword [ebp - 0x3420]
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3420]
mov dword [eax], edx
jmp 0x402f7e
mov ecx, dword [ebp - 0xfa88]
push ecx
push 0x3e
push 0x13
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [ebp - 0xc060], eax
mov edx, dword [ebp - 0x11c84]
mov eax, dword [edx]
mov dword [ebp - 0x12554], eax
cmp dword [ebp - 0x12554], 0x4d40
je 0x402f38
cmp dword [ebp - 0x12554], 0x78b1
je 0x402f0e
jmp 0x402f51
mov ecx, dword [ebp - 0xa274]
mov edx, dword [ebp - 0x54f4]
and edx, dword [ecx]
mov dword [ebp - 0xca60], edx
mov eax, dword [ebp - 0x706c]
sub eax, dword [ebp - 0x67c]
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], eax
jmp 0x402f51
mov edx, dword [ebp - 0x8ae8]
mov eax, dword [edx]
add eax, dword [ebp - 0x67c]
mov dword [ebp - 0x35b0], eax
call fcn.00401320
push 0xd1
lea ecx, [ebp - 0xf1d4]
push ecx
lea edx, [ebp - 0x52e0]
push edx
push 0x41
push 0x9d
mov eax, dword [ebp - 0x1f00]
push eax
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0xffe4], eax
cmp dword [ebp - 0xf4cc], 0xad00
je 0x403349
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x11af4]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0x4d61]
sub ecx, edx
mov eax, dword [ebp - 0x190c]
mov byte [eax], cl
movzx ecx, word [ebp - 0x8b14]
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
add ecx, eax
mov word [0x4f8010], cx
mov ecx, dword [ebp - 0x6228]
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x54f4], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
add edx, dword [ecx]
mov eax, dword [ebp - 0xaf60]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ebp - 0xaf60]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x11c84]
mov dword [ecx], eax
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ebp - 0x1dc8]
or eax, dword [edx]
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x28c4]
sar edx, cl
mov word [ebp - 0x8b14], dx
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x8b8c]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x4d61], cl
movsx edx, word [ebp - 0x3cd0]
movsx ecx, word [ebp - 0xe34c]
shl edx, cl
mov word [ebp - 0xd470], dx
movsx eax, byte [ebp - 0x42b9]
mov ecx, dword [0x4fae34]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x818d], al
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [ebp - 0xbe04]
add ecx, dword [eax]
mov dword [0x4f800c], ecx
mov edx, dword [ebp - 0xb3fc]
and edx, dword [ebp - 0x35b0]
mov eax, dword [ebp - 0xab98]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2465]
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x4d61], cl
movzx ecx, word [ebp - 0x8b14]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xfde4]
mov word [edx], cx
mov eax, dword [ebp - 0xc028]
mov ecx, dword [eax]
add ecx, dword [0x4f8008]
mov edx, dword [ebp - 0x38f0]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf4cc]
add eax, 0x57
mov dword [ebp - 0xf4cc], eax
mov ecx, dword [ebp - 0x108c8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xca60]
mov eax, dword [ebp - 0xeb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc028]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x38f0]
add edx, dword [eax]
mov dword [ebp - 0x1544], edx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1544]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x28c4], cx
mov ecx, dword [ebp - 0x54f4]
add ecx, dword [ebp - 0x10be4]
mov dword [0x4f800c], ecx
mov edx, dword [ebp - 0x10be4]
xor edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0x3420]
mov dword [eax], edx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0xaf60]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x67c]
sar edx, cl
mov dword [ebp - 0x4f00], edx
mov eax, dword [ebp - 0x4f00]
or eax, dword [ebp - 0x67c]
mov dword [ebp - 0x35b0], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ebp - 0x8ae8]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x67c], eax
movsx ecx, byte [ebp - 0x42b9]
mov edx, dword [ebp - 0x10d5c]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x818d], cl
movsx ecx, word [ebp - 0xd470]
movsx edx, word [0x4f8004]
add ecx, edx
mov word [ebp - 0xe34c], cx
movzx eax, word [ebp - 0x8b14]
movzx ecx, word [ebp - 0x3628]
and eax, ecx
mov edx, dword [ebp - 0x4088]
mov word [edx], ax
movsx eax, byte [ebp - 0x42b9]
movsx ecx, byte [ebp - 0x818d]
add eax, ecx
mov edx, dword [0x4fae34]
mov byte [edx], al
mov eax, dword [0x4faa24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xeb0]
add ecx, dword [edx]
mov eax, dword [ebp - 0x3420]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xa274]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xbe04]
mov dword [ebp - 0x1dc8], edx
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x3628], cx
movzx ecx, byte [ebp - 0x4d61]
movzx edx, byte [ebp - 0xc97a]
sub ecx, edx
mov byte [ebp - 0x2465], cl
mov eax, dword [ebp - 0xb3fc]
xor eax, dword [0x4fa670]
mov ecx, dword [ebp - 0x38f0]
mov dword [ecx], eax
mov edx, dword [ebp - 0xca60]
or edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x38f0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ebp - 0x122e8]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x7fa4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xbe04]
and ecx, dword [ebp - 0x1dc8]
mov edx, dword [0x4faa24]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x8b8c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x52e0]
mov byte [edx], cl
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3420]
add ecx, dword [edx]
mov dword [ebp - 0xca60], ecx
jmp 0x402f7e
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [eax]
mov dword [ebp - 0x28fc], ecx
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x8b14]
add eax, ecx
mov edx, dword [ebp - 0x964c]
movzx ecx, word [edx]
mov edx, dword [ebp - 0xfde4]
movzx edx, word [edx]
sub ecx, edx
cmp eax, ecx
jne 0x403398
mov eax, dword [ebp - 0xb3fc]
push eax
movzx ecx, byte [ebp - 0x818d]
push ecx
call fcn.00401230
add esp, 8
cmp dword [ebp - 0xb794], 0x92ef
jae 0x4036eb
movsx edx, byte [ebp - 0x42b9]
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x10d5c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x10d5c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3628]
sub edx, eax
mov word [ebp - 0x28c4], dx
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x4d61], dl
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
add eax, dword [ebp - 0x10be4]
mov dword [ebp - 0x54f4], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ebp - 0x706c]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x4f8008], edx
mov eax, dword [ebp - 0x38f0]
mov edx, dword [ebp - 0x706c]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x8ae8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ebp - 0x54f4]
xor edx, dword [ecx]
mov dword [ebp - 0x10be4], edx
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x28fc]
mov edx, dword [ebp - 0x11af4]
mov dword [edx], ecx
movzx eax, word [ebp - 0x28c4]
movzx ecx, word [ebp - 0x76d4]
and eax, ecx
mov edx, dword [ebp - 0x4088]
mov word [edx], ax
movzx eax, byte [ebp - 0x2465]
mov ecx, dword [ebp - 0x5ec]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x52e0]
mov byte [ecx], al
mov edx, dword [ebp - 0xab98]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
add eax, dword [ecx]
mov edx, dword [ebp - 0xab98]
mov dword [edx], eax
mov eax, dword [ebp - 0xa274]
mov ecx, dword [ebp - 0xbe04]
sub ecx, dword [eax]
mov dword [ebp - 0x10be4], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xaf60]
add eax, dword [ecx]
mov dword [ebp - 0x706c], eax
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [0x4fa670], ecx
movzx edx, byte [ebp - 0x2465]
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x8b8c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3628]
sub edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
movsx edx, byte [ebp - 0x42b9]
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x10d5c]
mov byte [eax], dl
movsx ecx, word [0x4f8004]
movsx edx, word [ebp - 0x3cd0]
add ecx, edx
mov word [ebp - 0xd470], cx
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [ebp - 0x108c8]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x1dc8], edx
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x28fc], edx
mov eax, dword [ebp - 0x4088]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x3628]
sar edx, cl
mov eax, dword [ebp - 0xfde4]
mov word [eax], dx
mov ecx, dword [ebp - 0x52e0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2465]
or edx, eax
mov byte [ebp - 0xc97a], dl
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ebp - 0xbe04]
and edx, dword [ecx]
mov dword [0x4f800c], edx
mov eax, dword [ebp - 0xab98]
mov ecx, dword [ebp - 0x1544]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x11af4]
add ecx, dword [edx]
mov dword [ebp - 0xb3fc], ecx
mov eax, dword [ebp - 0x1dc8]
add eax, dword [ebp - 0x10be4]
mov dword [ebp - 0x54f4], eax
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x28c4]
sub edx, eax
mov word [ebp - 0x3628], dx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x52e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x122e8]
add edx, dword [eax]
mov ecx, dword [ebp - 0xab98]
mov dword [ecx], edx
mov edx, dword [ebp - 0xb794]
add edx, 0xaf
mov dword [ebp - 0xb794], edx
mov eax, dword [ebp - 0x28fc]
and eax, dword [ebp - 0x67c]
mov ecx, dword [ebp - 0xc028]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb82c]
mov eax, dword [ebp - 0x10be4]
add eax, dword [edx]
mov dword [ebp - 0x1dc8], eax
mov ecx, dword [0x4fa670]
xor ecx, dword [ebp - 0x67c]
mov dword [0x4f8008], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0xb3fc]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x8ae8]
mov dword [ecx], eax
movsx edx, word [ebp - 0xd470]
movsx ecx, word [ebp - 0xe34c]
shl edx, cl
mov word [ebp - 0x3cd0], dx
jmp 0x403398
lea eax, [ebp - 0x42b9]
mov dword [ebp - 0xf044], eax
movzx ecx, word [ebp - 0x28c4]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0xfde4]
mov word [edx], cx
mov eax, dword [ebp - 0x190c]
mov cl, byte [eax]
mov byte [ebp - 0x741d], cl
mov edx, dword [ebp - 0xeb0]
mov eax, dword [ebp - 0xca60]
add eax, dword [edx]
mov ecx, dword [ebp - 0x108c8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
movzx edx, byte [ebp - 0x2465]
mov eax, dword [ebp - 0x8b8c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xc97a], dl
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
sub eax, edx
mov word [0x4f8010], ax
mov eax, dword [0x4faa24]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xca60]
mov dword [ebp - 0xbe04], ecx
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8ae8]
add eax, dword [ecx]
mov dword [ebp - 0xb3fc], eax
mov edx, dword [ebp - 0x38f0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb82c]
add eax, dword [ecx]
mov dword [ebp - 0x54f4], eax
movzx edx, byte [ebp - 0xc97a]
mov eax, dword [ebp - 0x8b8c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x2465], dl
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x3628], ax
mov eax, dword [ebp - 0x11c84]
mov ecx, dword [ebp - 0x706c]
or ecx, dword [eax]
mov dword [ebp - 0xb3fc], ecx
mov edx, dword [ebp - 0x35b0]
mov ecx, dword [ebp - 0x28fc]
sar edx, cl
mov eax, dword [ebp - 0xaf60]
mov dword [eax], edx
movsx edx, word [ebp - 0xe34c]
movsx ecx, word [ebp - 0x3cd0]
shl edx, cl
mov word [0x4f8004], dx
movsx eax, byte [ebp - 0x42b9]
movsx ecx, byte [0x4f9d4e]
xor eax, ecx
mov byte [ebp - 0x818d], al
movzx edx, byte [ebp - 0x741d]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xc97a], dl
movzx edx, word [ebp - 0x3628]
movzx eax, word [ebp - 0x76d4]
sub edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
mov edx, dword [ebp - 0x3420]
mov eax, dword [edx]
and eax, dword [ebp - 0x10be4]
mov dword [ebp - 0xca60], eax
mov ecx, dword [ebp - 0x6cf4]
sub ecx, 0xee
mov dword [ebp - 0x6cf4], ecx
mov edx, dword [ebp - 0x1dc8]
add edx, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], edx
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38f0]
add ecx, dword [edx]
mov eax, dword [ebp - 0x11af4]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0x7fa4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ebp - 0x11c84]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x35b0], eax
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2465]
sub edx, eax
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], dl
movzx edx, word [ebp - 0x76d4]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
sub edx, ecx
mov word [0x4f8010], dx
mov edx, dword [ebp - 0xca60]
add edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x706c]
add ecx, dword [ebp - 0x1544]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x11c84]
mov edx, dword [ebp - 0x4f00]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xa274]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10be4]
shr edx, cl
mov eax, dword [ebp - 0x6228]
mov dword [eax], edx
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3628]
xor edx, eax
mov word [ebp - 0x28c4], dx
mov ecx, dword [ebp - 0x52e0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x741d]
or edx, eax
mov byte [ebp - 0x4d61], dl
movsx ecx, word [ebp - 0x3cd0]
movsx edx, word [0x4f8004]
and ecx, edx
mov word [ebp - 0xd470], cx
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xf044]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x42b9], cl
mov ecx, dword [ebp - 0xa274]
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
mov edx, dword [0x4f8008]
and edx, dword [ebp - 0xb3fc]
mov dword [ebp - 0x4f00], edx
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x964c]
mov word [edx], cx
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xc97a]
add ecx, edx
mov byte [ebp - 0x2465], cl
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x4f00]
mov dword [ebp - 0x706c], ecx
mov edx, dword [ebp - 0x10be4]
add edx, dword [0x4f800c]
mov dword [ebp - 0xbe04], edx
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [ebp - 0x4f00]
sub ecx, dword [eax]
mov dword [ebp - 0x35b0], ecx
cmp dword [ebp - 0x6cf4], 0x2ba4
jae 0x403720
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ebp - 0x8ae8]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
movzx edx, word [ebp - 0x8b14]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0xfde4]
mov word [eax], dx
lea ecx, [ebp - 0x1dc8]
mov dword [ebp - 0xabfc], ecx
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ebp - 0x11af4]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x28fc]
mov ecx, dword [ebp - 0x35b0]
sar eax, cl
cmp edx, eax
je 0x403b9b
mov ecx, dword [ebp - 0xf044]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
movsx eax, byte [ebp - 0x42b9]
imul ecx, eax
cmp edx, ecx
je 0x403b47
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xaf60]
mov dword [ecx], eax
mov edx, dword [ebp - 0x35b0]
add edx, dword [ebp - 0x4f00]
mov dword [ebp - 0x706c], edx
mov eax, dword [ebp - 0x8ae8]
mov ecx, dword [ebp - 0x1544]
sub ecx, dword [eax]
mov dword [ebp - 0x35b0], ecx
lea edx, [ebp - 0x35b0]
push edx
push 0xc0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0xa900], eax
mov eax, dword [ebp - 0x7fa4]
mov ecx, dword [ebp - 0x28fc]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
movsx eax, word [ebp - 0xd470]
movsx ecx, word [ebp - 0x3cd0]
and eax, ecx
movsx edx, word [ebp - 0xe34c]
movsx ecx, word [0x4f8004]
add edx, ecx
cmp eax, edx
jg 0x403c7a
mov dl, byte [ebp - 0xc97a]
mov byte [ebp - 0x12558], dl
cmp byte [ebp - 0x12558], 0
je 0x403be6
cmp byte [ebp - 0x12558], 0x78
je 0x403c1d
jmp 0x403c7a
mov eax, dword [ebp - 0x10d5c]
mov cl, byte [eax]
mov byte [ebp - 0xe679], cl
lea edx, [ebp - 0x3cd0]
mov dword [ebp - 0x2858], edx
movzx eax, word [ebp - 0x76d4]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], ax
jmp 0x403c7a
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x76d4]
add eax, ecx
mov word [0x4f8010], ax
mov edx, dword [ebp - 0xb82c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6228]
add eax, dword [ecx]
mov edx, dword [ebp - 0xeb0]
mov dword [edx], eax
push 0xf3
lea eax, [ebp - 0xd470]
push eax
mov ecx, dword [ebp - 0x1d24]
push ecx
mov edx, dword [ebp - 0x1d24]
push edx
mov eax, dword [ebp - 0x1d24]
push eax
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0xbaa0], eax
lea ecx, [ebp - 0x54f4]
mov dword [ebp - 0xa568], ecx
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x8b14]
or edx, ecx
cmp eax, edx
jl 0x403d82
movzx edx, byte [ebp - 0x741d]
movzx ecx, byte [ebp - 0x2465]
sar edx, cl
mov byte [ebp - 0x4d61], dl
mov eax, dword [ebp - 0x2858]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x3cd0]
shl edx, cl
movsx eax, word [ebp - 0xe34c]
movsx ecx, word [ebp - 0xd470]
and eax, ecx
cmp edx, eax
je 0x403d62
mov edx, dword [ebp - 0x190c]
mov al, byte [edx]
mov byte [ebp - 0x1255c], al
cmp byte [ebp - 0x1255c], 0xae
je 0x403d09
jmp 0x403d4b
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x76d4]
sub edx, eax
mov word [ebp - 0x8b14], dx
mov ecx, dword [ebp - 0xb3fc]
add ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x7fa4]
mov dword [edx], ecx
mov eax, dword [0x4faa24]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x54f4]
mov dword [ebp - 0xbe04], ecx
jmp 0x403d62
mov edx, dword [ebp - 0x4f00]
push edx
movzx eax, byte [ebp - 0xe679]
push eax
call fcn.00401230
add esp, 8
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ebp - 0x28fc]
sub edx, dword [ecx]
mov dword [ebp - 0x67c], edx
lea eax, [ebp - 0x28fc]
mov dword [ebp - 0x1014], eax
mov ecx, dword [ebp - 0x5ec]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2465]
sub edx, eax
mov byte [0x4f8006], dl
movzx ecx, word [ebp - 0x76d4]
movzx edx, word [ebp - 0x8b14]
and ecx, edx
mov eax, dword [ebp - 0x4088]
mov word [eax], cx
mov ecx, dword [ebp - 0x10be4]
mov dword [ebp - 0x103f4], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0x28fc]
sub eax, dword [edx]
mov dword [ebp - 0x1544], eax
mov ecx, dword [ebp - 0x52e0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
add edx, ecx
movzx eax, byte [ebp - 0x2465]
movzx ecx, byte [ebp - 0xc97a]
add eax, ecx
cmp edx, eax
jle 0x403e18
movzx edx, byte [ebp - 0x42b9]
push edx
mov eax, dword [ebp - 0xf044]
mov dl, byte [eax]
mov ecx, dword [ebp - 0x10d5c]
mov cl, byte [ecx]
call fcn.00401140
lea edx, [ebp - 0xe34c]
mov dword [ebp - 0x107c4], edx
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [ebp - 0xf044]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0xe679], al
mov dword [ebp - 0x2d18], 0x326d
lea eax, [ebp - 0xc97a]
mov dword [ebp - 0x57c4], eax
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x3628], dx
mov ecx, dword [ebp - 0x1dc8]
mov dword [ebp - 0xcbe0], ecx
lea edx, [ebp - 0x35b0]
mov dword [0x4facf4], edx
mov eax, dword [ebp - 0x1014]
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
lea ecx, [ebp - 0x103f4]
mov dword [ebp - 0x9f48], ecx
mov edx, dword [ebp - 0x28fc]
mov ecx, dword [ebp - 0x35b0]
shl edx, cl
mov dword [ebp - 0x706c], edx
movzx eax, word [ebp - 0x3628]
movzx ecx, word [ebp - 0x76d4]
and eax, ecx
mov edx, dword [ebp - 0xfde4]
movzx ecx, word [edx]
movzx edx, word [ebp - 0x28c4]
add ecx, edx
cmp eax, ecx
jge 0x403f2b
movzx eax, word [ebp - 0x28c4]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x8b14], ax
push 0x7b
mov eax, dword [ebp - 0xdcbc]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov dword [ebp - 0xbaa0], eax
movzx ecx, byte [ebp - 0x4d61]
movzx edx, byte [ebp - 0x2465]
sub ecx, edx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], cl
jmp 0x403f9f
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x103f4]
mov eax, dword [ebp - 0x1dc8]
add eax, dword [ebp - 0x54f4]
cmp edx, eax
je 0x403f9f
mov ecx, dword [ebp - 0x4f00]
add ecx, dword [ebp - 0x1544]
mov dword [ebp - 0x706c], ecx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
and eax, dword [ebp - 0x1dc8]
mov ecx, dword [ebp - 0xb82c]
mov dword [ecx], eax
lea edx, [ebp - 0x3c18]
push edx
mov eax, dword [ebp - 0xdcbc]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xbaa0], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x28fc]
mov dword [ebp - 0x67c], edx
mov eax, dword [0x4facf4]
mov ecx, dword [eax]
mov dword [0x4fa7c0], ecx
movzx edx, byte [ebp - 0x4d61]
movzx eax, byte [ebp - 0x741d]
xor edx, eax
mov byte [ebp - 0x2465], dl
lea ecx, [ebp - 0x3628]
mov dword [ebp - 0xf9d0], ecx
mov dl, byte [ebp - 0x4d61]
mov byte [ebp - 0x12560], dl
cmp byte [ebp - 0x12560], 8
je 0x4040a5
cmp byte [ebp - 0x12560], 0x20
je 0x403ff5
jmp 0x4040c0
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xf044]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x10d5c]
mov byte [edx], cl
mov eax, dword [ebp - 0x54f4]
mov ecx, dword [ebp - 0xcbe0]
shr eax, cl
mov ecx, dword [ebp - 0x9f48]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1dc8]
shl edx, cl
cmp eax, edx
ja 0x40406b
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xd470], cx
mov ecx, dword [ebp - 0x10d5c]
movzx edx, byte [ecx]
push edx
mov dl, byte [ebp - 0x818d]
mov eax, dword [ebp - 0xf044]
mov cl, byte [eax]
call fcn.00401140
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov dword [ebp - 0x67ac], eax
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ebp - 0xa274]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3420]
mov dword [ecx], eax
mov edx, dword [ebp - 0xaf60]
mov eax, dword [edx]
add eax, dword [ebp - 0x1544]
mov dword [ebp - 0x67c], eax
jmp 0x4040c0
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x10d5c]
movzx ecx, byte [eax]
push ecx
call fcn.00401230
add esp, 8
cmp dword [ebp - 0x1404], 0xe23a
jb 0x404570
movzx edx, byte [ebp - 0xc97a]
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x2465], dl
movzx edx, word [0x4f8010]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x8b14], dx
mov edx, dword [ebp - 0x103f4]
sub edx, dword [ebp - 0x10be4]
mov dword [0x4f800c], edx
mov eax, dword [ebp - 0x7fa4]
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
mov ecx, dword [ebp - 0x11c84]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1014]
add edx, dword [eax]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], edx
mov edx, dword [ebp - 0xabfc]
mov eax, dword [edx]
sub eax, dword [0x4f800c]
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x964c]
mov word [eax], dx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4d61]
or edx, eax
mov byte [ebp - 0x741d], dl
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x28fc]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x1014]
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov edx, dword [ebp - 0xbe04]
mov ecx, dword [0x4f800c]
shr edx, cl
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc028]
mov edx, dword [ebp - 0xaf60]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x4fa670], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1544]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x818d]
movsx edx, byte [ebp - 0x42b9]
and ecx, edx
mov byte [ebp - 0xe679], cl
movsx eax, word [ebp - 0xe34c]
movsx ecx, word [ebp - 0x3cd0]
sub eax, ecx
mov word [ebp - 0xd470], ax
movzx edx, byte [ebp - 0x741d]
movzx eax, byte [ebp - 0x4d61]
sub edx, eax
mov ecx, dword [ebp - 0x8b8c]
mov byte [ecx], dl
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xf9d0]
mov word [ecx], ax
mov edx, dword [0x4faa24]
mov eax, dword [ebp - 0x103f4]
sub eax, dword [edx]
mov dword [ebp - 0xcbe0], eax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1544]
mov dword [ebp - 0x28fc], edx
mov eax, dword [ebp - 0x1404]
sub eax, 0xd5
mov dword [ebp - 0x1404], eax
mov ecx, dword [ebp - 0x52e0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x741d]
add edx, eax
mov byte [ebp - 0xc97a], dl
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
add edx, ecx
mov word [0x4f8010], dx
mov edx, dword [ebp - 0xa568]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xeb0]
add eax, dword [ecx]
mov edx, dword [ebp - 0x9f48]
mov dword [edx], eax
mov eax, dword [ebp - 0xab98]
mov ecx, dword [0x4facf4]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
mov ecx, dword [ebp - 0x28fc]
or ecx, dword [ebp - 0xb3fc]
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0xa274]
mov eax, dword [ebp - 0x54f4]
xor eax, dword [edx]
mov dword [ebp - 0x1dc8], eax
mov ecx, dword [ebp - 0xd404]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], dl
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xf9d0]
mov word [ecx], ax
mov edx, dword [ebp - 0xab98]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x11c84]
add eax, dword [ecx]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], eax
mov eax, dword [ebp - 0xb3fc]
add eax, dword [ebp - 0x706c]
mov ecx, dword [ebp - 0x1014]
mov dword [ecx], eax
movsx edx, byte [ebp - 0xe679]
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x4fae34]
mov byte [eax], dl
movsx ecx, word [ebp - 0xe34c]
movsx edx, word [ebp - 0xd470]
sub ecx, edx
mov word [ebp - 0x3cd0], cx
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x76d4]
sub ecx, edx
mov word [ebp - 0x28c4], cx
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xd404]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x190c]
mov byte [edx], cl
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xcbe0]
mov dword [ebp - 0x10be4], ecx
mov edx, dword [ebp - 0xeb0]
mov eax, dword [0x4f800c]
sub eax, dword [edx]
mov dword [ebp - 0xcbe0], eax
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [ebp - 0x1014]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x67c], eax
mov edx, dword [ebp - 0xb3fc]
mov ecx, dword [ebp - 0x67c]
shl edx, cl
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov edx, dword [ebp - 0xb3fc]
mov ecx, dword [ebp - 0x28fc]
sar edx, cl
mov eax, dword [ebp - 0xaf60]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2465]
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0xc97a], cl
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
and edx, ecx
mov word [0x4f8010], dx
mov edx, dword [ebp - 0x108c8]
mov eax, dword [edx]
add eax, dword [ebp - 0x54f4]
mov ecx, dword [ebp - 0xb82c]
mov dword [ecx], eax
mov edx, dword [0x4facf4]
mov eax, dword [ebp - 0x4f00]
add eax, dword [edx]
mov ecx, dword [ebp - 0x7fa4]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc028]
mov eax, dword [ebp - 0x1544]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xab98]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6228]
mov eax, dword [ebp - 0xa568]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xa274]
mov dword [edx], ecx
movzx eax, word [0x4f8010]
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x4088]
mov word [ecx], ax
movzx edx, byte [ebp - 0x2465]
movzx eax, byte [ebp - 0xc97a]
sub edx, eax
mov ecx, dword [ebp - 0x52e0]
mov byte [ecx], dl
movsx edx, byte [ebp - 0x818d]
movsx eax, byte [ebp - 0x42b9]
sub edx, eax
mov byte [ebp - 0xe679], dl
movsx ecx, word [ebp - 0xd470]
movsx edx, word [ebp - 0x3cd0]
add ecx, edx
mov word [ebp - 0xe34c], cx
mov eax, dword [ebp - 0x9f48]
mov ecx, dword [ebp - 0xca60]
add ecx, dword [eax]
mov dword [0x4f800c], ecx
mov edx, dword [ebp - 0x8ae8]
mov eax, dword [edx]
xor eax, dword [ebp - 0xb3fc]
mov ecx, dword [ebp - 0x1014]
mov dword [ecx], eax
jmp 0x4040c0
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2465]
or eax, ecx
mov byte [ebp - 0x4d61], al
mov edx, dword [ebp - 0x1014]
mov eax, dword [ebp - 0xab98]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x7fa4]
mov esi, dword [ebp - 0x1544]
mov ecx, dword [eax]
sar esi, cl
cmp edx, esi
jne 0x40463d
movsx ecx, word [ebp - 0xd470]
mov dword [ebp - 0x12564], ecx
cmp dword [ebp - 0x12564], 0x645
je 0x4045d9
cmp dword [ebp - 0x12564], 0x7f5
je 0x4045f8
jmp 0x40462e
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4088]
mov word [ecx], ax
jmp 0x40462e
mov edx, dword [ebp - 0x28fc]
mov dword [ebp - 0xbd4], edx
mov eax, dword [ebp - 0xa274]
mov ecx, dword [ebp - 0x10be4]
add ecx, dword [eax]
mov dword [ebp - 0xcbe0], ecx
mov edx, dword [ebp - 0xab98]
mov eax, dword [ebp - 0x4f00]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8ae8]
mov dword [ecx], eax
mov dword [ebp - 0xf0b8], 0xd6ec
jmp 0x4046c5
mov edx, dword [ebp - 0xa274]
mov eax, dword [edx]
and eax, dword [ebp - 0x10be4]
mov ecx, dword [ebp - 0x62d4]
mov edx, dword [ecx]
add edx, dword [ebp - 0xca60]
cmp eax, edx
jne 0x4046c5
lea eax, [ebp - 0x118a8]
push eax
lea ecx, [ebp - 0x3f24]
push ecx
lea edx, [ebp - 0x122e8]
push edx
push str.C:doormatmanagerialgrubsArgue
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [ebp - 0xa900], eax
mov eax, dword [ebp - 0x11c84]
mov ecx, dword [ebp - 0x35b0]
sub ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
movzx edx, byte [ebp - 0xc97a]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x2465], dl
mov edx, dword [ebp - 0x108c8]
mov eax, dword [edx]
sub eax, dword [ebp - 0xca60]
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
movsx edx, word [ebp - 0xe34c]
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
movsx eax, word [ebp - 0x3cd0]
sub ecx, eax
cmp edx, ecx
jl 0x4ee748
mov dword [ebp - 0x8470], 0x4fa7c0
mov cl, byte [ebp - 0xc97a]
mov byte [ebp - 0x12568], cl
cmp byte [ebp - 0x12568], 0xc
je 0x404715
jmp 0x40479e
mov edx, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x35b0]
shl edx, cl
mov eax, dword [ebp - 0x11c84]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x818d]
xor edx, eax
movsx eax, byte [ebp - 0xe679]
movsx ecx, byte [ebp - 0x42b9]
sar eax, cl
cmp edx, eax
jl 0x404786
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [ebp - 0x28fc]
add edx, dword [ecx]
mov dword [ebp - 0x4f00], edx
mov eax, dword [ebp - 0x10d5c]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0xf044]
mov dl, byte [edx]
mov eax, dword [ebp - 0xf044]
mov cl, byte [eax]
call fcn.00401140
jmp 0x40479c
mov ecx, dword [ebp - 0x11c84]
mov edx, dword [ebp - 0x1544]
add edx, dword [ecx]
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
jmp 0x4047cf
lea ecx, [ebp - 0x42b9]
mov dword [ebp - 0xb1f4], ecx
movsx edx, word [ebp - 0x3cd0]
movsx eax, word [ebp - 0xd470]
sub edx, eax
mov word [ebp - 0xe34c], dx
mov ecx, dword [ebp - 0xd404]
mov dl, byte [ecx]
mov byte [ebp - 0xb2e5], dl
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx edx, byte [ebp - 0x741d]
add eax, edx
cmp ecx, eax
jge 0x4048a7
mov eax, dword [ebp - 0x57c4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x741d]
and ecx, edx
movzx eax, byte [0x4f8006]
mov edx, dword [ebp - 0xd404]
movzx edx, byte [edx]
sub eax, edx
cmp ecx, eax
jle 0x40486f
push 0xeb
mov eax, dword [ebp - 0xe8bc]
push eax
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [ebp - 0x83f8], eax
movzx edx, word [ebp - 0x28c4]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
shl edx, cl
mov word [0x4f8010], dx
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ebp - 0xa568]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x9f48]
mov dword [ecx], eax
jmp 0x4048a7
movsx edx, word [ebp - 0xd470]
movsx ecx, word [ebp - 0xe34c]
sar edx, cl
movsx eax, word [ebp - 0x3cd0]
movsx ecx, word [0x4f8004]
or eax, ecx
cmp edx, eax
jge 0x4048a7
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
add eax, dword [ebp - 0x1dc8]
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x76d4]
and edx, eax
mov word [ebp - 0x28c4], dx
mov ecx, dword [0x4faa24]
mov edx, dword [ecx]
mov dword [ebp - 0x1256c], edx
cmp dword [ebp - 0x1256c], 0
je 0x4048d9
jmp 0x404928
movzx eax, byte [ebp - 0x2465]
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xb2e5], al
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [eax]
mov dword [ebp - 0x7710], ecx
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xeb0]
add eax, dword [ecx]
mov edx, dword [ebp - 0xa568]
mov dword [edx], eax
mov eax, dword [ebp - 0x35b0]
mov dword [ebp - 0x622c], eax
jmp 0x4049b6
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ecx]
mov dword [ebp - 0x12570], edx
cmp dword [ebp - 0x12570], 0x5a1f
je 0x404944
jmp 0x40496d
push 1
mov eax, dword [ebp - 0x9e18]
push eax
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov ecx, dword [ebp - 0x1014]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xab98]
add edx, dword [eax]
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], edx
jmp 0x404983
movzx edx, byte [ebp - 0x2465]
movzx eax, byte [ebp - 0x4d61]
sub edx, eax
mov byte [0x4f8006], dl
movzx ecx, word [ebp - 0x3628]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x76d4], cx
mov ecx, dword [0x4fae34]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x818d]
push eax
call fcn.004eea50
add esp, 8
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ecx]
mov dword [ebp - 0x12574], edx
cmp dword [ebp - 0x12574], 0x1952
je 0x404a1c
cmp dword [ebp - 0x12574], 0x26e1
je 0x4049e1
jmp 0x404aac
mov eax, dword [ebp - 0x6228]
mov ecx, dword [ebp - 0x1dc8]
add ecx, dword [eax]
mov edx, dword [ebp - 0xabfc]
mov dword [edx], ecx
lea eax, [ebp - 0xcc08]
push eax
lea ecx, [ebp - 0x9e98]
push ecx
lea edx, [ebp - 0x299c]
push edx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0xbe04], eax
jmp 0x404aac
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x706c]
and eax, dword [ebp - 0x7710]
cmp edx, eax
jge 0x404a81
mov ecx, dword [0x4facf4]
mov edx, dword [ebp - 0xbd4]
or edx, dword [ecx]
mov dword [ebp - 0x1544], edx
movsx eax, word [ebp - 0xe34c]
movsx ecx, word [ebp - 0x3cd0]
xor eax, ecx
mov edx, dword [ebp - 0x2858]
mov word [edx], ax
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [ebp - 0xb1f4]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0xe679], al
push 0xec
lea edx, [ebp - 0x299c]
push edx
push 0xd1
lea eax, [ebp - 0x115d0]
push eax
lea ecx, [ebp - 0x35b0]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [ebp - 0xf1d4], eax
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2465]
shl eax, cl
mov ecx, dword [ebp - 0x57c4]
movzx edx, byte [ecx]
mov ecx, dword [ebp - 0xd404]
movzx ecx, byte [ecx]
sub edx, ecx
cmp eax, edx
jge 0x404af4
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0xe679]
push ecx
call fcn.00401230
add esp, 8
jmp 0x404b7f
mov edx, dword [ebp - 0xca60]
sub edx, dword [0x4f800c]
mov eax, dword [ebp - 0x103f4]
and eax, dword [ebp - 0xbe04]
cmp edx, eax
ja 0x404b7f
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xe679]
sub edx, eax
movsx ecx, byte [ebp - 0x42b9]
movsx eax, byte [ebp - 0x818d]
add ecx, eax
cmp edx, ecx
jl 0x404b6b
movzx ecx, byte [ebp - 0x741d]
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x52e0]
mov byte [edx], cl
movzx eax, word [ebp - 0x28c4]
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x8b14], ax
jmp 0x404b7f
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], ecx
mov edx, dword [ebp - 0x3420]
mov eax, dword [0x4f800c]
add eax, dword [edx]
mov ecx, dword [ebp - 0xcbe0]
or ecx, dword [ebp - 0xca60]
cmp eax, ecx
jb 0x404c86
mov edx, dword [ebp - 0x1014]
mov eax, dword [ebp - 0x7710]
xor eax, dword [edx]
mov dword [0x4f8014], eax
mov ecx, dword [ebp - 0x706c]
and ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x4f00], ecx
mov edx, dword [ebp - 0x1dc8]
add edx, dword [ebp - 0xca60]
mov eax, dword [ebp - 0xabfc]
mov dword [eax], edx
mov cl, byte [0x4f8006]
mov byte [ebp - 0x12578], cl
cmp byte [ebp - 0x12578], 0
je 0x404bfc
cmp byte [ebp - 0x12578], 0xa
je 0x404c59
jmp 0x404c81
lea edx, [ebp - 0x622c]
mov dword [ebp - 0x3dec], edx
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x4088]
mov word [edx], cx
mov eax, dword [ebp - 0x5ec]
mov cl, byte [eax]
mov byte [ebp - 0xcd95], cl
mov edx, dword [ebp - 0x11c84]
mov eax, dword [ebp - 0x7710]
and eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa568]
mov eax, dword [edx]
mov dword [ebp - 0xff2c], eax
jmp 0x404c81
lea ecx, [ebp - 0x818d]
push ecx
lea edx, [ebp - 0xc97a]
push edx
lea eax, [ebp - 0x964c]
push eax
lea ecx, [ebp - 0x622c]
push ecx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x83f8], eax
jmp 0x404dd9
mov edx, dword [ebp - 0x3420]
mov eax, dword [0x4f800c]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x103f4]
shl edx, cl
cmp eax, edx
jbe 0x404dd9
mov eax, dword [ebp - 0xabfc]
mov ecx, dword [eax]
mov dword [ebp - 0x1257c], ecx
cmp dword [ebp - 0x1257c], 0x26fa
je 0x404cdc
cmp dword [ebp - 0x1257c], 0x8238
je 0x404dbe
jmp 0x404dd9
mov edx, dword [ebp - 0x1014]
mov eax, dword [ebp - 0x706c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x8ae8]
mov dword [ecx], eax
movsx edx, word [ebp - 0x3cd0]
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
add edx, ecx
movsx eax, word [ebp - 0xe34c]
mov ecx, dword [ebp - 0x107c4]
movsx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
je 0x404d7c
mov edx, dword [ebp - 0x1014]
mov eax, dword [ebp - 0x7710]
or eax, dword [edx]
mov dword [0x4fa7c0], eax
movzx edx, byte [ebp - 0xcd95]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x190c]
mov byte [ecx], dl
lea edx, [ebp - 0x66d0]
push edx
push str.C:SprightliestBlasting
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x7940], eax
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x3628], cx
jmp 0x404dbc
movzx ecx, byte [ebp - 0x2465]
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
sub ecx, eax
movzx edx, byte [ebp - 0xc97a]
movzx eax, byte [ebp - 0xb2e5]
sub edx, eax
cmp ecx, edx
jge 0x404dbc
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x818d]
sar edx, cl
mov eax, dword [ebp - 0xf044]
mov byte [eax], dl
jmp 0x404dd9
mov ecx, dword [ebp - 0x2858]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xd470], dx
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
mov dword [ebp - 0x12580], eax
cmp dword [ebp - 0x12580], 0x311
je 0x404df9
jmp 0x404ec1
mov ecx, dword [ebp - 0xb3fc]
xor ecx, dword [0x4f8008]
mov edx, dword [ebp - 0x38f0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1014]
mov edx, dword [eax]
or edx, dword [ebp - 0x622c]
mov eax, dword [ebp - 0xab98]
mov ecx, dword [ebp - 0x122e8]
mov eax, dword [eax]
mov ecx, dword [ecx]
shl eax, cl
cmp edx, eax
je 0x404e9f
mov ecx, dword [ebp - 0xc028]
mov edx, dword [ebp - 0x28fc]
sub edx, dword [ecx]
mov dword [ebp - 0x4f00], edx
push 0xfd
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov dword [ebp - 0x1c50], eax
mov eax, dword [ebp - 0xa274]
mov ecx, dword [ebp - 0x1dc8]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xa568]
mov dword [edx], ecx
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xcd95], cl
mov ecx, dword [ebp - 0xbd4]
push ecx
movzx edx, byte [0x4f9d4e]
push edx
call fcn.00401230
add esp, 8
jmp 0x404ebc
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x4088]
mov word [edx], cx
jmp 0x4ee5ea
mov eax, dword [ebp - 0xc028]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xab98]
add ecx, dword [edx]
mov eax, dword [ebp - 0x122e8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x62d4]
mov edx, dword [ecx]
mov dword [ebp - 0x12584], edx
cmp dword [ebp - 0x12584], 0x1be7
je 0x404f4c
cmp dword [ebp - 0x12584], 0x6561
je 0x404f01
jmp 0x404f69
push 0x3f
lea eax, [ebp - 0xaeb8]
push eax
push 0x7d
push str.Ikuje
push 0x7c
push 0xae
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [ebp - 0x622c], eax
mov ecx, dword [ebp - 0x1544]
and ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x35b0], ecx
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ebp - 0x1dc8]
sub eax, dword [edx]
mov dword [ebp - 0xca60], eax
jmp 0x404f69
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x8ae8]
add edx, dword [eax]
mov ecx, dword [0x4facf4]
mov dword [ecx], edx
call fcn.00401320
movzx edx, byte [ebp - 0x2465]
movzx eax, byte [0x4f8006]
add edx, eax
movzx ecx, byte [ebp - 0x4d61]
mov eax, dword [ebp - 0xd404]
movzx eax, byte [eax]
or ecx, eax
cmp edx, ecx
jge 0x404ff2
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ebp - 0xb3fc]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x1544], edx
mov eax, dword [ebp - 0xdcbc]
push eax
mov ecx, dword [ebp - 0x3f24]
push ecx
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [ebp - 0xa900], eax
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x107c4]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x2858]
mov word [ecx], ax
movsx edx, byte [ebp - 0x42b9]
movsx ecx, byte [ebp - 0xe679]
shl edx, cl
mov byte [ebp - 0x818d], dl
mov eax, dword [ebp - 0xd404]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xcd95], cl
mov cl, byte [ebp - 0x741d]
mov byte [ebp - 0x12588], cl
cmp byte [ebp - 0x12588], 0
je 0x405026
jmp 0x4ee50a
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
movzx ecx, byte [0x4f8006]
sub eax, ecx
mov byte [ebp - 0xc97a], al
movzx edx, word [ebp - 0x28c4]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
and edx, ecx
mov word [0x4f8010], dx
mov edx, dword [ebp - 0x9f48]
mov eax, dword [ebp - 0xcbe0]
add eax, dword [edx]
mov dword [ebp - 0x54f4], eax
mov ecx, dword [ebp - 0x11af4]
mov edx, dword [0x4f8014]
or edx, dword [ecx]
mov dword [ebp - 0x35b0], edx
mov eax, dword [ebp - 0xbd4]
mov ecx, dword [ebp - 0x67c]
shl eax, cl
mov ecx, dword [ebp - 0xc028]
mov dword [ecx], eax
mov edx, dword [ebp - 0xeb0]
mov eax, dword [ebp - 0xcbe0]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x28c4]
xor edx, eax
mov ecx, dword [ebp - 0xf9d0]
mov word [ecx], dx
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb2e5]
add eax, ecx
mov edx, dword [ebp - 0x8b8c]
mov byte [edx], al
mov eax, dword [ebp - 0x67c]
and eax, dword [ebp - 0x7710]
mov dword [ebp - 0x4f00], eax
mov ecx, dword [ebp - 0x11c84]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x622c]
mov eax, dword [ebp - 0xc028]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x818d]
sub edx, eax
mov ecx, dword [0x4fae34]
mov byte [ecx], dl
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x2858]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xd470], ax
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x76d4], cx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xc97a], dl
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ebp - 0xcbe0]
sub eax, dword [edx]
mov dword [ebp - 0xbe04], eax
mov ecx, dword [ebp - 0xf0b8]
add ecx, 0x7e
mov dword [ebp - 0xf0b8], ecx
mov edx, dword [ebp - 0x9f48]
mov eax, dword [edx]
add eax, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x11c84]
mov edx, dword [ebp - 0xbd4]
and edx, dword [ecx]
mov dword [ebp - 0x706c], edx
cmp dword [ebp - 0xf0b8], 0x10140
jne 0x405026
mov eax, dword [ebp - 0x52e0]
mov cl, byte [eax]
mov byte [ebp - 0x1258c], cl
cmp byte [ebp - 0x1258c], 0xc1
je 0x4051e6
jmp 0x4051f0
call fcn.00401320
jmp 0x4ee3f8
lea edx, [ebp - 0x103f4]
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0xb3fc]
sub eax, dword [0x4fa670]
mov dword [ebp - 0x35b0], eax
mov ecx, dword [ebp - 0x622c]
mov dword [ebp - 0xf6e0], ecx
mov edx, dword [ebp - 0xcbe0]
add edx, dword [ebp - 0xbe04]
mov eax, dword [ebp - 0xb82c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x28c4]
sub edx, eax
mov ecx, dword [ebp - 0x964c]
mov word [ecx], dx
movzx edx, byte [ebp - 0xcd95]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x8b8c]
mov byte [eax], dl
movsx ecx, word [ebp - 0xd470]
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x107c4]
mov word [edx], cx
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xf044]
movsx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0xe679], cl
mov ecx, dword [ebp - 0xb47c]
add ecx, 0xe3
mov dword [ebp - 0xb47c], ecx
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ebp - 0xca60]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
mov edx, dword [0x4fa7c0]
xor edx, dword [ebp - 0x622c]
mov dword [ebp - 0x706c], edx
mov eax, dword [ebp - 0x4088]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x3628]
shl edx, cl
mov word [ebp - 0x76d4], dx
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x741d], cl
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
add edx, dword [ecx]
mov dword [ebp - 0x4f00], edx
mov eax, dword [ebp - 0x108c8]
mov ecx, dword [eax]
add ecx, dword [0x4f800c]
mov dword [ebp - 0x1dc8], ecx
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
and eax, dword [ebp - 0x4f00]
mov dword [ebp - 0xf6e0], eax
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ebp - 0x706c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x741d]
add edx, eax
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], dl
mov edx, dword [ebp - 0x9f48]
mov eax, dword [ebp - 0x103f4]
sub eax, dword [edx]
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
sub eax, dword [ebp - 0xff2c]
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x8470]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xbd4]
mov eax, dword [ebp - 0x38f0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1014]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x622c]
sar edx, cl
mov eax, dword [ebp - 0xab98]
mov dword [eax], edx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x622c]
or edx, dword [ecx]
mov dword [ebp - 0x7710], edx
mov eax, dword [ebp - 0xc028]
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x35b0], edx
mov eax, dword [ebp - 0xb1f4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x818d]
xor ecx, edx
mov eax, dword [ebp - 0x10d5c]
mov byte [eax], cl
movsx ecx, word [ebp - 0x3cd0]
movsx edx, word [ebp - 0xe34c]
and ecx, edx
mov word [ebp - 0xd470], cx
movzx eax, byte [ebp - 0x741d]
mov ecx, dword [ebp - 0x52e0]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x2465], al
mov eax, dword [ebp - 0xf044]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x42b9]
sub ecx, edx
mov eax, dword [0x4fae34]
mov byte [eax], cl
mov ecx, dword [ebp - 0x54f4]
add ecx, dword [ebp - 0x103f4]
mov dword [ebp - 0x10be4], ecx
mov edx, dword [ebp - 0xca60]
sub edx, dword [ebp - 0x10be4]
mov dword [ebp - 0xff2c], edx
movzx eax, word [ebp - 0x28c4]
movzx ecx, word [ebp - 0x3628]
and eax, ecx
mov word [ebp - 0x76d4], ax
movzx edx, byte [ebp - 0xcd95]
movzx eax, byte [0x4f8006]
add edx, eax
mov byte [ebp - 0x741d], dl
mov ecx, dword [ebp - 0x3dec]
mov edx, dword [ecx]
add edx, dword [ebp - 0x67c]
mov dword [ebp - 0x7710], edx
mov eax, dword [ebp - 0xca60]
sub eax, dword [ebp - 0xbe04]
mov ecx, dword [ebp - 0xa568]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1014]
mov eax, dword [edx]
sub eax, dword [ebp - 0x35b0]
mov dword [ebp - 0x622c], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x67c]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x706c], edx
movzx eax, byte [ebp - 0xcd95]
movzx ecx, byte [ebp - 0xb2e5]
shl eax, cl
mov byte [0x4f8006], al
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x28c4]
or edx, eax
mov ecx, dword [ebp - 0x4088]
mov word [ecx], dx
mov edx, dword [ebp - 0xeb0]
mov eax, dword [edx]
xor eax, dword [0x4f800c]
mov ecx, dword [ebp - 0xabfc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xaf60]
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x7fa4]
mov dword [edx], ecx
movsx eax, byte [ebp - 0xe679]
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x42b9], al
movsx eax, word [ebp - 0x3cd0]
movsx ecx, word [ebp - 0xd470]
sub eax, ecx
mov word [ebp - 0xe34c], ax
movzx edx, word [ebp - 0x76d4]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x4088]
mov word [eax], dx
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0x4d61]
add ecx, edx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], cl
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ebp - 0xabfc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xff2c], eax
mov ecx, dword [ebp - 0xc028]
mov edx, dword [ecx]
and edx, dword [0x4fa7c0]
mov dword [0x4fa670], edx
mov eax, dword [ebp - 0xc028]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xb3fc]
mov dword [ebp - 0x1544], ecx
cmp dword [ebp - 0xb47c], 0x58b2
jb 0x40522e
movsx edx, word [ebp - 0x3cd0]
movsx eax, word [ebp - 0xe34c]
add edx, eax
mov ecx, dword [ebp - 0x2858]
movsx eax, word [ecx]
movsx ecx, word [ebp - 0xd470]
sub eax, ecx
cmp edx, eax
jl 0x405735
mov edx, dword [ebp - 0xcbe0]
mov ecx, dword [ebp - 0xca60]
shr edx, cl
mov eax, dword [ebp - 0x6228]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
mov dword [ebp - 0x12590], edx
cmp dword [ebp - 0x12590], 0x1ff
je 0x40567a
cmp dword [ebp - 0x12590], 0xb34
je 0x405720
jmp 0x405735
movsx eax, word [0x4f8004]
mov ecx, dword [ebp - 0x2858]
movsx edx, word [ecx]
or eax, edx
movsx edx, word [ebp - 0xd470]
movsx ecx, word [ebp - 0xe34c]
shl edx, cl
cmp eax, edx
jl 0x405709
lea eax, [ebp - 0x8470]
push eax
mov ecx, dword [ebp - 0xc08]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov dword [ebp - 0x1c50], eax
mov edx, dword [0x4facf4]
mov eax, dword [ebp - 0x35b0]
add eax, dword [edx]
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], eax
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x3628], ax
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x52e0]
mov byte [edx], cl
jmp 0x40571e
mov eax, dword [0x4facf4]
mov ecx, dword [ebp - 0x11c84]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x35b0], edx
jmp 0x405735
push 0x67
lea eax, [ebp - 0xcd28]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
mov dword [ebp - 0xff2c], eax
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x8b14]
add edx, eax
mov ecx, dword [ebp - 0xf9d0]
movzx eax, word [ecx]
mov ecx, dword [ebp - 0x964c]
movzx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jg 0x40580f
movsx edx, word [0x4f8004]
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
sar edx, cl
movsx eax, word [ebp - 0xe34c]
mov ecx, dword [ebp - 0x107c4]
movsx ecx, word [ecx]
shl eax, cl
cmp edx, eax
jg 0x4057f0
movsx edx, word [ebp - 0x3cd0]
mov dword [ebp - 0x12594], edx
cmp dword [ebp - 0x12594], 0xc4
je 0x4057b2
cmp dword [ebp - 0x12594], 0x161
je 0x4057dc
jmp 0x4057ee
mov eax, dword [ebp - 0x103f4]
add eax, dword [ebp - 0xcbe0]
mov ecx, dword [ebp - 0x6228]
mov dword [ecx], eax
mov edx, dword [ebp - 0xaf60]
mov eax, dword [edx]
and eax, dword [ebp - 0x4f00]
mov dword [ebp - 0x622c], eax
jmp 0x4057ee
mov ecx, dword [ebp - 0x67c]
sub ecx, dword [ebp - 0x1544]
mov dword [0x4fa7c0], ecx
jmp 0x40580a
mov edx, dword [ebp - 0xf9d0]
mov ax, word [edx]
mov word [ebp - 0xf524], ax
mov dword [ebp - 0xcf8], 0x44b2
jmp 0x4058e8
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
mov dword [ebp - 0x12598], edx
cmp dword [ebp - 0x12598], 0x4bb
je 0x40582f
jmp 0x4058d6
push 0
push 4
mov eax, dword [ebp - 0x1534]
push eax
call dword [sym.imp.KERNEL32.dll_EraseTape]
mov dword [ebp - 0x1dc8], eax
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x57c4]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x52e0]
mov byte [eax], dl
mov ecx, dword [0x4facf4]
mov edx, dword [ecx]
add edx, dword [ebp - 0xbd4]
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [ebp - 0x35b0]
sub ecx, dword [eax]
cmp edx, ecx
jne 0x4058d4
movsx edx, word [ebp - 0xe34c]
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xd470], dx
movsx edx, byte [ebp - 0x42b9]
movsx eax, byte [ebp - 0xe679]
sub edx, eax
mov ecx, dword [ebp - 0xf044]
mov byte [ecx], dl
lea edx, [ebp - 0xd404]
push edx
lea eax, [ebp - 0x76d4]
push eax
mov ecx, dword [ebp - 0x8e14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov dword [ebp - 0x83f8], eax
jmp 0x4058e8
mov edx, dword [ebp - 0x10be4]
add edx, dword [0x4f800c]
mov dword [ebp - 0xbe04], edx
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [ebp - 0x4f00]
and ecx, dword [eax]
mov edx, dword [ebp - 0x7fa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4088]
mov cx, word [eax]
mov word [ebp - 0x2348], cx
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb2e5]
xor eax, ecx
mov byte [ebp - 0x2465], al
mov edx, dword [ebp - 0x6228]
mov eax, dword [ebp - 0xcbe0]
mov ecx, dword [edx]
shr eax, cl
mov dword [0x4f8018], eax
mov ecx, dword [ebp - 0x8470]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7710]
shl edx, cl
mov dword [ebp - 0xf6e0], edx
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0xec18], eax
movzx ecx, word [ebp - 0x3628]
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
mov edx, dword [ebp - 0x4088]
movzx edx, word [edx]
add eax, edx
cmp ecx, eax
jge 0x4059f1
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xff2c]
mov edx, dword [ebp - 0xb82c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [ebp - 0x7710]
and ecx, dword [eax]
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0x706c]
add eax, dword [edx]
cmp ecx, eax
jl 0x4059f1
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x2348], dx
mov edx, dword [ebp - 0xc028]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x42b9]
push ecx
call fcn.00401230
add esp, 8
movzx edx, byte [ebp - 0x4d61]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xc97a], dl
movzx edx, word [ebp - 0x3628]
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x964c]
movzx eax, word [eax]
add ecx, eax
cmp edx, ecx
jl 0x4ee3db
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x11c7c], ecx
mov edx, dword [ebp - 0xab98]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x8ae8]
mov dword [edx], eax
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [0x4faa24]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x6228]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xb1f4]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf044]
movsx ecx, byte [eax]
movsx eax, byte [ebp - 0x818d]
or ecx, eax
cmp edx, ecx
je 0x4ee2f8
mov ecx, dword [ebp - 0x62d4]
mov edx, dword [ebp - 0x103f4]
and edx, dword [ecx]
mov eax, dword [ebp - 0x9f48]
mov ecx, dword [ebp - 0x108c8]
mov eax, dword [eax]
imul eax, dword [ecx]
cmp edx, eax
jae 0x405bb0
movsx ecx, word [ebp - 0x3cd0]
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
add ecx, eax
movsx edx, word [ebp - 0xe34c]
movsx eax, word [ebp - 0xd470]
add edx, eax
cmp ecx, edx
jle 0x405b6d
mov ecx, dword [ebp - 0xbe04]
mov dword [ebp - 0x1259c], ecx
cmp dword [ebp - 0x1259c], 0x5a3d
je 0x405b08
jmp 0x405b57
movzx edx, word [ebp - 0x28c4]
movzx ecx, word [ebp - 0x8b14]
shl edx, cl
mov word [ebp - 0x3628], dx
mov eax, dword [ebp - 0x8b8c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xd404]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x5ec]
mov byte [edx], cl
mov eax, dword [ebp - 0xf044]
movzx ecx, byte [eax]
push ecx
movzx edx, byte [ebp - 0x42b9]
push edx
call fcn.004eea50
add esp, 8
jmp 0x405b6b
mov eax, dword [ebp - 0x9f48]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xff2c]
mov dword [ebp - 0x10be4], ecx
jmp 0x405bae
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x107c4]
movsx edx, word [ecx]
add eax, edx
movsx edx, word [ebp - 0xe34c]
movsx ecx, word [0x4f8004]
sar edx, cl
cmp eax, edx
jle 0x405bae
movzx eax, byte [ebp - 0x42b9]
push eax
mov dl, byte [ebp - 0x42b9]
mov cl, byte [ebp - 0xe679]
call fcn.00401140
jmp 0x405bdd
lea ecx, [ebp - 0x107c4]
push ecx
lea edx, [ebp - 0x4088]
push edx
lea eax, [ebp - 0x3c18]
push eax
lea ecx, [ebp - 0x2ac4]
push ecx
push str.C:Ureterplayboys_sedatesPlaywrights
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 0xe6d8], eax
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0xc028]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [0x4facf4]
mov eax, dword [edx]
mov edx, dword [ebp - 0xab98]
add eax, dword [edx]
cmp ecx, eax
je 0x405c1c
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x7710]
mov edx, dword [ebp - 0x8ae8]
mov dword [edx], ecx
jmp 0x405cba
movsx eax, byte [ebp - 0xe679]
movsx ecx, byte [ebp - 0x818d]
sub eax, ecx
movsx edx, byte [0x4f9d4e]
mov ecx, dword [ebp - 0xf044]
movsx ecx, byte [ecx]
sub edx, ecx
cmp eax, edx
jle 0x405cba
mov edx, dword [0x4faa24]
mov eax, dword [ebp - 0xca60]
and eax, dword [edx]
mov ecx, dword [ebp - 0x54f4]
sub ecx, dword [ebp - 0xcbe0]
cmp eax, ecx
jne 0x405c7d
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x4d61]
add eax, ecx
mov byte [ebp - 0xcd95], al
call fcn.00401320
mov edx, dword [ebp - 0x3420]
mov eax, dword [edx]
add eax, dword [ebp - 0x103f4]
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
push 0x17
mov edx, dword [ebp - 0xc08]
push edx
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov dword [ebp - 0xc060], eax
mov eax, dword [ebp - 0xff2c]
add eax, dword [ebp - 0x10be4]
mov dword [ebp - 0xca60], eax
lea ecx, [ebp - 0x4f00]
mov dword [ebp - 0xc2dc], ecx
movsx edx, word [0x4f8004]
mov dword [ebp - 0x125a0], edx
cmp dword [ebp - 0x125a0], 0x7f5
je 0x405ce4
jmp 0x405db0
mov eax, dword [ebp - 0x8ae8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb3fc]
shl edx, cl
mov dword [ebp - 0x11c7c], edx
mov eax, dword [ebp - 0x108c8]
mov ecx, dword [eax]
mov dword [ebp - 0x9d98], ecx
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb2e5]
xor eax, ecx
mov edx, dword [ebp - 0xd404]
mov byte [edx], al
mov eax, dword [ebp - 0x5ec]
mov cl, byte [eax]
mov byte [ebp - 0x125a4], cl
cmp byte [ebp - 0x125a4], 0
je 0x405d44
cmp byte [ebp - 0x125a4], 0x31
je 0x405d92
jmp 0x405dab
mov edx, dword [ebp - 0xfde4]
mov ax, word [edx]
mov word [ebp - 0xe478], ax
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [0x4facf4]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0xc2dc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xab98]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7710]
sar eax, cl
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], eax
lea edx, [ebp - 0xe679]
mov dword [0x4f9c8c], edx
jmp 0x405dab
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
movsx edx, word [0x4f8004]
and ecx, edx
mov word [ebp - 0x3cd0], cx
jmp 0x405e5c
movzx eax, word [ebp - 0x2348]
movzx ecx, word [ebp - 0x8b14]
sub eax, ecx
mov edx, dword [ebp - 0xfde4]
mov word [edx], ax
mov eax, dword [ebp - 0xca60]
add eax, dword [ebp - 0xff2c]
mov ecx, dword [ebp - 0x103f4]
sub ecx, dword [ebp - 0xbe04]
cmp eax, ecx
jbe 0x405df4
mov edx, dword [ebp - 0xabfc]
mov ecx, dword [edx]
call section..text
jmp 0x405e5c
movzx eax, byte [ebp - 0xc97a]
movzx ecx, byte [ebp - 0x741d]
and eax, ecx
mov byte [ebp - 0xcd95], al
push 0xd
lea edx, [ebp - 0xcd28]
push edx
lea eax, [ebp - 0x89f0]
push eax
push str.PIYR_3lR
push 0xbe
push 0x67
call dword [sym.imp.KERNEL32.dll_GetNumberFormatW]
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0xff2c]
sub ecx, dword [ebp - 0xcbe0]
mov edx, dword [ebp - 0xb82c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x108c8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x62d4]
add ecx, dword [edx]
mov dword [ebp - 0xbe04], ecx
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
mov dword [ebp - 0x125a8], ecx
cmp dword [ebp - 0x125a8], 0
je 0x405e89
cmp dword [ebp - 0x125a8], 0x495
je 0x405f14
jmp 0x405f2f
mov edx, dword [ebp - 0xca60]
mov dword [ebp - 0x125ac], edx
cmp dword [ebp - 0x125ac], 0x91ab
je 0x405ea3
jmp 0x405f12
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
add eax, edx
movsx edx, byte [ebp - 0xe679]
movsx ecx, byte [ebp - 0x42b9]
sar edx, cl
cmp eax, edx
jge 0x405f12
mov eax, dword [0x4facf4]
mov ecx, dword [ebp - 0x3dec]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
lea ecx, [ebp - 0x11ee8]
push ecx
lea edx, [ebp - 0x3404]
push edx
lea eax, [ebp - 0x9e18]
push eax
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0xca60], eax
mov ecx, dword [ebp - 0x11c7c]
xor ecx, dword [ebp - 0x7468]
mov dword [ebp - 0x4f00], ecx
jmp 0x405f2f
mov edx, dword [ebp - 0x122e8]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x10d5c]
movzx edx, byte [ecx]
push edx
call fcn.00401230
add esp, 8
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x8ec0], eax
mov ecx, dword [ebp - 0xd404]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xc97a]
shl edx, cl
movzx eax, byte [0x4f8006]
movzx ecx, byte [ebp - 0xcd95]
and eax, ecx
cmp edx, eax
jne 0x4ee1f6
mov edx, dword [ebp - 0x6228]
mov eax, dword [ebp - 0xca60]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x108c8]
mov dword [ecx], eax
movzx edx, word [ebp - 0xe478]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x964c]
mov word [eax], dx
mov ecx, dword [ebp - 0x2d18]
sub ecx, 0x2e
mov dword [ebp - 0x2d18], ecx
movzx edx, byte [ebp - 0x2465]
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xb2e5], dl
mov edx, dword [ebp - 0x10d5c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xf044]
mov byte [ecx], al
movsx edx, word [ebp - 0xe34c]
movsx eax, word [ebp - 0x3cd0]
sub edx, eax
mov ecx, dword [ebp - 0x107c4]
mov word [ecx], dx
mov edx, dword [ebp - 0xbe04]
add edx, dword [ebp - 0x10be4]
mov dword [0x4f8018], edx
mov eax, dword [ebp - 0xc028]
mov ecx, dword [0x4fa670]
add ecx, dword [eax]
mov dword [ebp - 0xb3fc], ecx
movzx edx, byte [ebp - 0xcd95]
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], dl
movzx ecx, word [ebp - 0x28c4]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x964c]
mov word [edx], cx
mov eax, dword [ebp - 0xc2dc]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x622c]
mov dword [ebp - 0x4f00], ecx
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ebp - 0x6228]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x54f4], ecx
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ebp - 0xf6e0]
or eax, dword [edx]
mov dword [ebp - 0x706c], eax
mov edx, dword [ebp - 0x8ec0]
mov ecx, dword [ebp - 0x706c]
sar edx, cl
mov eax, dword [ebp - 0x8470]
mov dword [eax], edx
mov ecx, dword [ebp - 0x57c4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4d61]
xor edx, eax
mov byte [ebp - 0xc97a], dl
movzx edx, word [ebp - 0x8b14]
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
shl edx, cl
mov word [0x4f8010], dx
mov ecx, dword [ebp - 0x103f4]
sub ecx, dword [ebp - 0x9d98]
mov dword [ebp - 0xbe04], ecx
mov edx, dword [ebp - 0x1014]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc2dc]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1014]
mov dword [edx], eax
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [eax]
and ecx, dword [ebp - 0xec18]
mov dword [ebp - 0xb3fc], ecx
mov edx, dword [ebp - 0x8470]
mov eax, dword [edx]
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0x622c]
sub ecx, dword [ebp - 0x1544]
mov dword [ebp - 0x7710], ecx
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xe34c]
sub eax, ecx
mov word [ebp - 0x3cd0], ax
movsx edx, byte [ebp - 0xe679]
movsx eax, byte [ebp - 0x42b9]
add edx, eax
mov ecx, dword [ebp - 0xf044]
mov byte [ecx], dl
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xe478]
add eax, ecx
mov word [ebp - 0x3628], ax
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x741d]
add eax, ecx
mov byte [0x4f8006], al
mov edx, dword [ebp - 0xa568]
mov eax, dword [ebp - 0xff2c]
add eax, dword [edx]
mov ecx, dword [ebp - 0xa274]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0xa568]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xbe04], ecx
movzx edx, word [0x4f8010]
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x964c]
mov word [eax], dx
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0x4d61]
xor ecx, edx
mov byte [ebp - 0xb2e5], cl
mov eax, dword [ebp - 0x706c]
mov ecx, dword [ebp - 0xbd4]
shl eax, cl
mov dword [ebp - 0x35b0], eax
mov edx, dword [ebp - 0xcbe0]
mov ecx, dword [ebp - 0x10be4]
shr edx, cl
mov dword [ebp - 0xff2c], edx
mov eax, dword [ebp - 0x1544]
or eax, dword [ebp - 0x7710]
mov ecx, dword [ebp - 0xc2dc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3dec]
mov eax, dword [ebp - 0x28fc]
and eax, dword [edx]
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], eax
movzx edx, word [ebp - 0xf524]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
add edx, ecx
mov word [0x4f8010], dx
mov edx, dword [ebp - 0x8b8c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xd404]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x190c]
mov byte [ecx], al
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0x6228]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0xff2c], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x8ae8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x3cd0]
sub ecx, edx
mov word [ebp - 0xd470], cx
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x42b9], al
movzx eax, word [ebp - 0x8b14]
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xf9d0]
mov word [ecx], ax
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb2e5]
add eax, ecx
mov byte [ebp - 0x2465], al
mov edx, dword [ebp - 0x6228]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xbe04]
shl eax, cl
mov dword [ebp - 0xff2c], eax
mov edx, dword [ebp - 0x706c]
mov ecx, dword [ebp - 0xec18]
sar edx, cl
mov eax, dword [0x4facf4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
xor edx, dword [0x4fa670]
mov dword [ebp - 0x28fc], edx
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [ebp - 0xbe04]
or ecx, dword [eax]
mov dword [ebp - 0x103f4], ecx
mov edx, dword [ebp - 0xc028]
mov eax, dword [ebp - 0x8ec0]
and eax, dword [edx]
mov dword [ebp - 0xf6e0], eax
movzx ecx, word [ebp - 0x28c4]
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xe478], cx
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0x741d]
add ecx, edx
mov byte [ebp - 0x4d61], cl
cmp dword [ebp - 0x2d18], 0x2d37
ja 0x405f7d
mov eax, dword [ebp - 0x11af4]
mov ecx, dword [eax]
mov dword [ebp - 0xf20c], ecx
mov edx, dword [ebp - 0x9f48]
mov eax, dword [ebp - 0x108c8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1dc8], ecx
mov edx, dword [ebp - 0x8470]
mov eax, dword [ebp - 0xf6e0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xaf60]
mov dword [ecx], eax
mov edx, dword [0x4f8008]
and edx, dword [ebp - 0xf04]
mov dword [0x4fa7c0], edx
mov ax, word [ebp - 0x8b14]
mov word [ebp - 0xe654], ax
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0xc97a]
add ecx, edx
mov eax, dword [ebp - 0x190c]
mov byte [eax], cl
movsx ecx, word [ebp - 0x3cd0]
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
movsx edx, word [ebp - 0xd470]
add eax, edx
cmp ecx, eax
jg 0x4ee12f
lea eax, [ebp - 0x8b14]
mov dword [ebp - 0xb35c], eax
lea ecx, [ebp - 0xcbe0]
mov dword [0x4f9d98], ecx
cmp dword [ebp - 0xcf8], 0x7a4a
jae 0x40688c
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ebp - 0x7710]
sub eax, dword [edx]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x1544]
add ecx, dword [ebp - 0x4f00]
mov dword [ebp - 0xbd4], ecx
mov edx, dword [ebp - 0xa274]
mov eax, dword [edx]
sub eax, dword [ebp - 0x9d98]
mov ecx, dword [ebp - 0x3420]
mov dword [ecx], eax
movzx edx, word [ebp - 0x3628]
movzx eax, word [ebp - 0xe478]
add edx, eax
mov word [ebp - 0x28c4], dx
movzx ecx, byte [ebp - 0x4d61]
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x8b8c]
mov byte [edx], cl
mov eax, dword [ebp - 0x11c84]
mov ecx, dword [ebp - 0x706c]
add ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0x622c]
sub edx, dword [0x4fa7c0]
mov eax, dword [ebp - 0xc2dc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ecx]
add edx, dword [ebp - 0xff2c]
mov eax, dword [ebp - 0x1fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ebp - 0x706c]
xor edx, dword [ecx]
mov dword [0x4fa670], edx
mov eax, dword [ebp - 0x7fa4]
mov ecx, dword [ebp - 0x1014]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3dec]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf044]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0xe679]
sar edx, cl
mov byte [ebp - 0x818d], dl
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
movsx edx, word [0x4f8004]
or ecx, edx
mov word [ebp - 0xd470], cx
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xfde4]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0xf9d0]
mov word [edx], cx
movzx eax, byte [ebp - 0x2465]
movzx ecx, byte [ebp - 0xcd95]
sub eax, ecx
mov byte [ebp - 0xc97a], al
mov edx, dword [0x4f9d98]
mov eax, dword [edx]
sub eax, dword [ebp - 0xca60]
mov dword [ebp - 0xff2c], eax
mov ecx, dword [ebp - 0xc2dc]
mov edx, dword [ebp - 0xf04]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xab98]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3628]
add edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
mov edx, dword [ebp - 0x1dc8]
add edx, dword [ebp - 0x10be4]
mov eax, dword [0x4f9d98]
mov dword [eax], edx
mov ecx, dword [ebp - 0xff2c]
add ecx, dword [0x4f800c]
mov dword [ebp - 0x54f4], ecx
mov edx, dword [ebp - 0x38f0]
mov eax, dword [edx]
and eax, dword [ebp - 0xf6e0]
mov ecx, dword [ebp - 0x1014]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc028]
mov eax, dword [edx]
add eax, dword [ebp - 0x35b0]
mov dword [ebp - 0xf20c], eax
mov edx, dword [ebp - 0x54f4]
mov ecx, dword [ebp - 0x10be4]
shl edx, cl
mov dword [ebp - 0xff2c], edx
mov eax, dword [ebp - 0x8b8c]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x2465]
sar edx, cl
mov eax, dword [ebp - 0x52e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3628]
or edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
mov edx, dword [ebp - 0x7710]
xor edx, dword [ebp - 0x4f00]
mov dword [ebp - 0x11c7c], edx
mov eax, dword [ebp - 0x1014]
mov ecx, dword [eax]
mov dword [ebp - 0x7468], ecx
mov edx, dword [ebp - 0xb1f4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xe679]
sub eax, ecx
mov byte [0x4f9d4e], al
movsx edx, word [ebp - 0xd470]
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x2858]
mov word [eax], dx
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx eax, word [0x4f8010]
add edx, eax
mov ecx, dword [ebp - 0xf9d0]
mov word [ecx], dx
movzx edx, byte [ebp - 0x741d]
movzx eax, byte [ebp - 0x2465]
sub edx, eax
mov ecx, dword [ebp - 0xd404]
mov byte [ecx], dl
mov edx, dword [ebp - 0xabfc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa274]
add eax, dword [ecx]
mov dword [ebp - 0x1dc8], eax
mov edx, dword [ebp - 0xa568]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1fc]
add eax, dword [ecx]
mov edx, dword [ebp - 0xeb0]
mov dword [edx], eax
mov eax, dword [ebp - 0xc028]
mov ecx, dword [ebp - 0xbd4]
sub ecx, dword [eax]
mov dword [ebp - 0x7710], ecx
mov edx, dword [ebp - 0x11af4]
mov eax, dword [0x4facf4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xf20c], ecx
mov edx, dword [ebp - 0xcf8]
add edx, 0xc4
mov dword [ebp - 0xcf8], edx
mov eax, dword [ebp - 0x11c84]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x67c]
mov edx, dword [ebp - 0x11c84]
mov dword [edx], ecx
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xd404]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xcd95], cl
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe654]
xor edx, eax
mov word [0x4f8010], dx
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ebp - 0x108c8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0xbe04], eax
mov ecx, dword [0x4fa670]
or ecx, dword [ebp - 0x622c]
mov edx, dword [ebp - 0x7fa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x7fa4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf04]
shl edx, cl
mov eax, dword [ebp - 0x38f0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1dc8]
add ecx, dword [ebp - 0xca60]
mov edx, dword [ebp - 0x3420]
mov dword [edx], ecx
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x190c]
mov byte [edx], cl
movzx eax, word [ebp - 0x3628]
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xe654], ax
mov eax, dword [0x4fae34]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xb1f4]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0xf044]
mov byte [edx], cl
movsx eax, word [ebp - 0xd470]
mov ecx, dword [ebp - 0x2858]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x3cd0], ax
jmp 0x406465
mov eax, dword [ebp - 0x6228]
mov ecx, dword [eax]
mov dword [ebp - 0x125b0], ecx
cmp dword [ebp - 0x125b0], 0x5555
je 0x4068ab
jmp 0x406969
mov edx, dword [ebp - 0x8470]
mov eax, dword [ebp - 0x35b0]
sub eax, dword [edx]
mov dword [ebp - 0xf6e0], eax
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
mov dword [ebp - 0x125b4], edx
cmp dword [ebp - 0x125b4], 0x429
je 0x4068e8
cmp dword [ebp - 0x125b4], 0xa3c
je 0x406939
jmp 0x406964
push 0x6f
lea eax, [ebp - 0x8c0]
push eax
push str.C:_testerLatheredPrimariesFleabitesProsecutable
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov dword [ebp - 0x2054], eax
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4d61]
add edx, eax
mov ecx, dword [ebp - 0x8b8c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xb35c]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x28c4], ax
jmp 0x406964
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x38f0]
mov dword [eax], edx
mov ecx, dword [ebp - 0xfa88]
push ecx
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0x11d2c], eax
jmp 0x4ee114
mov edx, dword [ebp - 0x9d98]
sub edx, dword [ebp - 0x1dc8]
mov eax, dword [ebp - 0x108c8]
mov dword [eax], edx
movsx edx, byte [ebp - 0xe679]
mov eax, dword [ebp - 0x10d5c]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0xb1f4]
movsx eax, byte [eax]
movsx ecx, byte [ebp - 0x818d]
shl eax, cl
cmp edx, eax
jne 0x4069d1
mov ecx, dword [ebp - 0x3dec]
mov edx, dword [ecx]
or edx, dword [ebp - 0x7468]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x11c84]
mov edx, dword [ebp - 0xbd4]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe654]
and edx, eax
mov word [ebp - 0x8b14], dx
mov cl, byte [ebp - 0x4d61]
mov byte [ebp - 0x125b8], cl
cmp byte [ebp - 0x125b8], 0
je 0x406a0d
cmp byte [ebp - 0x125b8], 0x82
je 0x406a61
jmp 0x406a8e
lea edx, [ebp - 0x4d61]
mov dword [0x4f9e48], edx
mov eax, dword [ebp - 0x62d4]
mov ecx, dword [eax]
mov dword [ebp - 0x2b3c], ecx
mov edx, dword [ebp - 0x3dec]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc028]
add eax, dword [ecx]
mov dword [ebp - 0xf04], eax
mov edx, dword [0x4f8014]
mov dword [ebp - 0xac44], edx
mov eax, dword [ebp - 0x8ae8]
mov ecx, dword [ebp - 0x4f00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3dec]
mov dword [edx], ecx
jmp 0x406a8e
mov eax, dword [ebp - 0xc028]
mov ecx, dword [ebp - 0xc2dc]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0xf6e0], edx
mov eax, dword [ebp - 0x7710]
push eax
movzx ecx, byte [ebp - 0xe679]
push ecx
call fcn.00401230
add esp, 8
mov edx, dword [ebp - 0x107c4]
mov ax, word [edx]
mov word [ebp - 0xb4d4], ax
cmp dword [ebp - 0xaacc], 0x3973
jb 0x406e6b
movsx ecx, byte [ebp - 0x42b9]
mov edx, dword [ebp - 0x10d5c]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xe679], cl
mov ecx, dword [0x4f9e48]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], dl
movzx ecx, word [ebp - 0x8b14]
movzx edx, word [ebp - 0x28c4]
add ecx, edx
mov word [0x4f8010], cx
mov eax, dword [0x4f9d98]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xff2c]
mov edx, dword [ebp - 0x9f48]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xbe04]
mov dword [ebp - 0x2b3c], ecx
movzx edx, word [ebp - 0xf524]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xe478], dx
movzx edx, byte [ebp - 0xb2e5]
movzx ecx, byte [ebp - 0x4d61]
shl edx, cl
mov eax, dword [ebp - 0x52e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ebp - 0x3dec]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x706c], eax
mov ecx, dword [ebp - 0xeb0]
mov edx, dword [ebp - 0xcbe0]
or edx, dword [ecx]
mov dword [ebp - 0x54f4], edx
mov eax, dword [ebp - 0x3dec]
mov ecx, dword [ebp - 0xf04]
and ecx, dword [eax]
mov edx, dword [ebp - 0x122e8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
sub eax, dword [ebp - 0xf6e0]
mov dword [ebp - 0x11c7c], eax
movzx ecx, byte [ebp - 0x2465]
movzx edx, byte [ebp - 0x4d61]
add ecx, edx
mov byte [0x4f8006], cl
mov eax, dword [ebp - 0xb35c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x2348], cx
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ebp - 0x54f4]
add edx, dword [ecx]
mov eax, dword [ebp - 0xabfc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x7468], eax
mov ecx, dword [ebp - 0x107c4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb4d4]
add edx, eax
mov ecx, dword [ebp - 0x2858]
mov word [ecx], dx
mov edx, dword [ebp - 0xb1f4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xf044]
mov byte [ecx], al
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3628]
sub eax, ecx
mov edx, dword [ebp - 0xf9d0]
mov word [edx], ax
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x5ec]
mov byte [edx], cl
mov eax, dword [ebp - 0xa274]
mov edx, dword [ebp - 0x10be4]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x1fc]
mov dword [eax], edx
mov ecx, dword [0x4facf4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xec18]
shl edx, cl
mov eax, dword [0x4facf4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ebp - 0x8470]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xc028]
mov dword [ecx], eax
mov edx, dword [ebp - 0x108c8]
mov eax, dword [edx]
or eax, dword [ebp - 0xcbe0]
mov dword [ebp - 0x1dc8], eax
mov ecx, dword [ebp - 0xaf60]
mov edx, dword [ecx]
and edx, dword [ebp - 0x28fc]
mov eax, dword [ebp - 0x11c84]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb35c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xf9d0]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xf524], dx
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2465]
sub eax, ecx
mov edx, dword [ebp - 0x190c]
mov byte [edx], al
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [ebp - 0xac44]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xc028]
mov dword [edx], ecx
mov eax, dword [ebp - 0xa568]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1dc8]
mov dword [ebp - 0xcbe0], ecx
mov edx, dword [ebp - 0xf20c]
add edx, dword [ebp - 0x706c]
mov dword [ebp - 0x8ec0], edx
mov eax, dword [ebp - 0xab98]
mov ecx, dword [eax]
and ecx, dword [0x4f8008]
mov dword [0x4f8014], ecx
movzx edx, byte [ebp - 0xcd95]
mov eax, dword [ebp - 0x57c4]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x8b8c]
mov byte [eax], dl
movzx ecx, word [ebp - 0x3628]
movzx edx, word [0x4f8010]
add ecx, edx
mov eax, dword [ebp - 0x4088]
mov word [eax], cx
movsx ecx, word [ebp - 0xb4d4]
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xd470], cx
movsx edx, byte [ebp - 0x818d]
mov eax, dword [ebp - 0xb1f4]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x42b9], dl
mov edx, dword [0x4f8018]
mov ecx, dword [ebp - 0xca60]
shr edx, cl
mov eax, dword [ebp - 0x1fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc2dc]
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x4d61]
mov eax, dword [0x4f9e48]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0xb2e5], dl
mov edx, dword [ebp - 0xaacc]
sub edx, 0x8c
mov dword [ebp - 0xaacc], edx
movzx eax, word [ebp - 0xe654]
movzx ecx, word [ebp - 0x3628]
and eax, ecx
mov edx, dword [ebp - 0x4088]
mov word [edx], ax
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xcbe0]
mov edx, dword [0x4faa24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8470]
mov ecx, dword [ebp - 0x8ec0]
add ecx, dword [eax]
mov edx, dword [ebp - 0xaf60]
mov dword [edx], ecx
jmp 0x406a9e
mov eax, dword [ebp - 0x1014]
mov ecx, dword [eax]
mov dword [ebp - 0x125bc], ecx
cmp dword [ebp - 0x125bc], 0
je 0x406eb3
cmp dword [ebp - 0x125bc], 0x729c
je 0x406e93
jmp 0x406ffb
mov edx, dword [ebp - 0xab98]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x10d5c]
movzx edx, byte [ecx]
push edx
call fcn.00401230
add esp, 8
jmp 0x406ffb
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [ebp - 0x706c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ebp - 0xbd4]
sub eax, dword [edx]
cmp ecx, eax
jle 0x406ffb
mov ecx, dword [0x4facf4]
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x11c7c], eax
push 0x1c
lea ecx, [ebp - 0xcd28]
push ecx
push str.T3Tl_BuYqhjb3.GcFM9bi3_22J3
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x103f4], eax
mov edx, dword [ebp - 0xac44]
mov dword [ebp - 0x125c0], edx
cmp dword [ebp - 0x125c0], 0x2952
je 0x406f24
jmp 0x406fe5
mov eax, dword [ebp - 0xc028]
mov ecx, dword [ebp - 0x67c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x38f0]
mov eax, dword [ebp - 0x7710]
and eax, dword [edx]
cmp ecx, eax
jge 0x406fab
mov ecx, dword [ebp - 0xb82c]
mov edx, dword [ebp - 0xff2c]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x3420]
mov dword [eax], edx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xb2e5]
shl edx, cl
mov byte [ebp - 0xcd95], dl
mov eax, dword [ebp - 0x4088]
movzx edx, word [eax]
mov eax, dword [ebp - 0x964c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
lea edx, [ebp - 0x66d0]
push edx
mov eax, dword [ebp - 0x9888]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x54f4], eax
jmp 0x406fe3
movsx ecx, byte [ebp - 0x818d]
movsx edx, byte [ebp - 0x42b9]
sub ecx, edx
movsx eax, byte [ebp - 0xe679]
mov edx, dword [ebp - 0xf044]
movsx edx, byte [edx]
or eax, edx
cmp ecx, eax
jle 0x406fe3
mov eax, dword [ebp - 0x28fc]
add eax, dword [ebp - 0xec18]
mov dword [ebp - 0xf6e0], eax
jmp 0x406ffb
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [0x4fa7c0]
and edx, dword [ecx]
mov eax, dword [ebp - 0x11c84]
mov dword [eax], edx
movsx ecx, word [ebp - 0x3cd0]
mov edx, dword [ebp - 0x2858]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
movsx edx, word [ebp - 0xd470]
add eax, edx
cmp ecx, eax
je 0x4070a9
mov eax, dword [ebp - 0x57c4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5ec]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
mov edx, dword [0x4f9e48]
movzx edx, byte [edx]
sub eax, edx
cmp ecx, eax
jl 0x40706d
movzx eax, byte [ebp - 0xe679]
push eax
movzx ecx, byte [ebp - 0xe679]
push ecx
call fcn.004eea50
add esp, 8
jmp 0x4070a9
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb4d4]
sub eax, ecx
mov edx, dword [ebp - 0x2858]
movsx ecx, word [edx]
movsx edx, word [ebp - 0x3cd0]
add ecx, edx
cmp eax, ecx
je 0x4070a9
mov eax, dword [ebp - 0xabfc]
mov ecx, dword [ebp - 0x103f4]
sub ecx, dword [eax]
mov dword [ebp - 0xcbe0], ecx
mov edx, dword [0x4fa7c0]
mov dword [0x4f9bc4], edx
mov eax, dword [ebp - 0x35b0]
and eax, dword [ebp - 0x11c7c]
mov dword [ebp - 0x28fc], eax
mov ecx, dword [ebp - 0xb1f4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xe679]
xor edx, eax
mov byte [ebp - 0x42b9], dl
movsx edx, byte [ebp - 0x818d]
movsx eax, byte [ebp - 0x42b9]
or edx, eax
mov ecx, dword [ebp - 0x10d5c]
movsx eax, byte [ecx]
mov ecx, dword [ebp - 0xb1f4]
movsx ecx, byte [ecx]
sar eax, cl
cmp edx, eax
jle 0x4071d9
mov edx, dword [ebp - 0xf6e0]
add edx, dword [ebp - 0x7468]
mov eax, dword [ebp - 0x8ae8]
mov ecx, dword [0x4fa7c0]
and ecx, dword [eax]
cmp edx, ecx
jle 0x407193
lea edx, [ebp - 0x818d]
push edx
mov eax, dword [ebp - 0xc08]
push eax
call dword [sym.imp.KERNEL32.dll_GetNumberOfConsoleInputEvents]
mov dword [ebp - 0xc060], eax
mov ecx, dword [ebp - 0x107c4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2858]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x107c4]
mov word [eax], dx
movzx ecx, word [ebp - 0x28c4]
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x2348], cx
movzx ecx, byte [ebp - 0x741d]
movzx edx, byte [ebp - 0xcd95]
sub ecx, edx
mov eax, dword [ebp - 0x190c]
mov byte [eax], cl
jmp 0x4071d4
mov ecx, dword [ebp - 0xac44]
add ecx, dword [ebp - 0xec18]
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [ebp - 0x11c84]
mov edx, dword [edx]
sub edx, dword [eax]
cmp ecx, edx
je 0x4071d4
push 0x47
lea eax, [ebp - 0x9e18]
push eax
push 0xf8
mov ecx, dword [ebp - 0xe8bc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x1dc8], eax
jmp 0x4072b7
movzx edx, word [ebp - 0xf524]
mov dword [ebp - 0x125c4], edx
cmp dword [ebp - 0x125c4], 0x4e1
je 0x407203
cmp dword [ebp - 0x125c4], 0x50d
je 0x40721c
jmp 0x4072b7
mov eax, dword [ebp - 0x9f48]
mov ecx, dword [ebp - 0x1dc8]
sub ecx, dword [eax]
mov dword [ebp - 0xca60], ecx
jmp 0x4072b7
mov edx, dword [ebp - 0x11c7c]
sub edx, dword [ebp - 0x622c]
mov dword [ebp - 0x7468], edx
mov eax, dword [ebp - 0x190c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xc97a]
sub ecx, edx
movzx eax, byte [0x4f8006]
mov edx, dword [ebp - 0x8b8c]
movzx edx, byte [edx]
or eax, edx
cmp ecx, eax
jl 0x4072a1
mov eax, dword [ebp - 0xfde4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4088]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
mov edx, dword [ebp - 0x52e0]
movzx eax, byte [edx]
mov ecx, dword [0x4f9e48]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x4f8006], al
push 1
push 0x8b
call dword [sym.imp.KERNEL32.dll_SleepEx]
mov dword [ebp - 0x40ec], eax
jmp 0x4072b7
mov eax, dword [ebp - 0x9f48]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xbe04]
mov edx, dword [ebp - 0x6228]
mov dword [edx], ecx
mov al, byte [ebp - 0x2465]
mov byte [ebp - 0x125c8], al
cmp byte [ebp - 0x125c8], 3
je 0x4072de
cmp byte [ebp - 0x125c8], 0x8a
je 0x40735c
jmp 0x407361
movzx ecx, word [ebp - 0x2348]
movzx edx, word [0x4f8010]
add ecx, edx
mov eax, dword [ebp - 0xb35c]
movzx edx, word [eax]
movzx eax, word [ebp - 0xf524]
and edx, eax
cmp ecx, edx
jg 0x40735a
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ebp - 0xbd4]
sub edx, dword [ecx]
mov dword [ebp - 0xf20c], edx
mov eax, dword [ebp - 0x38f0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x7468]
mov edx, dword [ebp - 0xc2dc]
mov dword [edx], ecx
lea eax, [ebp - 0xcc08]
push eax
lea ecx, [ebp - 0x1eb8]
push ecx
lea edx, [ebp - 0x7940]
push edx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x10be4], eax
mov eax, dword [ebp - 0xca60]
mov dword [ebp - 0x40ec], eax
jmp 0x407361
call fcn.00401320
mov ecx, dword [ebp - 0x190c]
mov dl, byte [ecx]
mov byte [ebp - 0x41f9], dl
mov al, byte [ebp - 0xcd95]
mov byte [ebp - 0x125cc], al
cmp byte [ebp - 0x125cc], 0
je 0x4073b8
cmp byte [ebp - 0x125cc], 0xc3
je 0x407392
jmp 0x4ee081
lea ecx, [ebp - 0x118a8]
push ecx
mov edx, dword [ebp - 0x1d24]
push edx
mov eax, dword [ebp - 0xe9b4]
push eax
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0x1810], eax
jmp 0x4ee081
mov ecx, dword [0x4f9e48]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x57c4]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], dl
mov ecx, dword [ebp - 0xf9d0]
mov dx, word [ecx]
mov word [ebp - 0x3328], dx
mov eax, dword [ebp - 0xd404]
mov cl, byte [eax]
mov byte [ebp - 0x125d0], cl
cmp byte [ebp - 0x125d0], 0
je 0x407400
jmp 0x40754d
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
mov dword [ebp - 0x125d4], eax
cmp dword [ebp - 0x125d4], 0x1ae
je 0x407420
jmp 0x4074ad
mov ecx, dword [ebp - 0xb35c]
movzx edx, word [ecx]
mov dword [ebp - 0x125d8], edx
cmp dword [ebp - 0x125d8], 0x904
je 0x407461
cmp dword [ebp - 0x125d8], 0xa84
je 0x407449
jmp 0x4074a8
mov eax, dword [ebp - 0x3420]
mov ecx, dword [ebp - 0xbe04]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xabfc]
mov dword [edx], ecx
jmp 0x4074a8
mov eax, dword [ebp - 0xeb0]
mov ecx, dword [eax]
mov dword [ebp - 0x40ec], ecx
mov edx, dword [0x4facf4]
mov eax, dword [edx]
add eax, dword [ebp - 0xf6e0]
mov ecx, dword [ebp - 0x11af4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3dec]
mov eax, dword [ebp - 0x11af4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1544], ecx
mov edx, dword [ebp - 0x62d4]
mov ecx, dword [edx]
call section..text
jmp 0x40754b
mov eax, dword [ebp - 0xaf60]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1014]
add ecx, dword [edx]
mov dword [ebp - 0x7710], ecx
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
and eax, edx
movsx ecx, byte [ebp - 0xe679]
movsx edx, byte [ebp - 0x42b9]
sub ecx, edx
cmp eax, ecx
jg 0x407531
movzx eax, byte [0x4f8006]
mov ecx, dword [ebp - 0x57c4]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x52e0]
mov byte [ecx], al
lea edx, [ebp - 0xf524]
mov dword [0x4f98f0], edx
lea eax, [ebp - 0x103f4]
mov dword [ebp - 0xe6a0], eax
mov edx, dword [0x4fa670]
mov ecx, dword [ebp - 0xf04]
sar edx, cl
mov dword [ebp - 0x35b0], edx
jmp 0x40754b
mov eax, dword [ebp - 0x1f00]
push eax
push 0xec
push 0x2e
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [ebp - 0x2054], eax
jmp 0x407596
mov ecx, dword [ebp - 0x1014]
mov edx, dword [ecx]
mov dword [ebp - 0x125dc], edx
cmp dword [ebp - 0x125dc], 0xe4
je 0x40757c
cmp dword [ebp - 0x125dc], 0x3198
je 0x407575
jmp 0x407596
call fcn.00401320
jmp 0x407596
mov eax, dword [ebp - 0x1014]
mov ecx, dword [ebp - 0xab98]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0xc2dc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x108c8]
mov edx, dword [ecx]
mov dword [ebp - 0x8490], edx
mov eax, dword [ebp - 0xb82c]
mov ecx, dword [ebp - 0xcbe0]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x62d4]
mov eax, dword [ebp - 0x40ec]
or eax, dword [edx]
cmp ecx, eax
jne 0x4075ee
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
mov eax, dword [0x4f98f0]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xe478], dx
mov ecx, dword [ebp - 0x40ec]
call section..text
jmp 0x4076a2
mov edx, dword [0x4f98f0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
mov ecx, dword [ebp - 0xb35c]
movzx ecx, word [ecx]
add edx, ecx
cmp eax, edx
jl 0x4076a2
mov edx, dword [ebp - 0x57c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x741d]
add eax, ecx
mov byte [ebp - 0xcd95], al
mov edx, dword [ebp - 0xd404]
mov al, byte [edx]
mov byte [ebp - 0x125e0], al
cmp byte [ebp - 0x125e0], 0
je 0x407687
mov dword [0x4fa324], 0x4f8018
mov eax, dword [ebp - 0xf044]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xe679]
imul ecx, edx
mov eax, dword [ebp - 0x10d5c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0xb1f4]
movsx eax, byte [eax]
and edx, eax
cmp ecx, edx
jg 0x407720
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x964c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x4088]
mov word [edx], cx
mov eax, dword [ebp - 0x122e8]
mov edx, dword [ebp - 0x7468]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0xb3fc], edx
mov eax, dword [ebp - 0x1d24]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0xc90c], eax
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [ebp - 0xc028]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x122e8]
mov dword [ecx], eax
movsx edx, word [ebp - 0xd470]
mov eax, dword [ebp - 0x107c4]
movsx ecx, word [eax]
or edx, ecx
mov word [0x4f8004], dx
mov edx, dword [ebp - 0xb1f4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0xe679], al
mov eax, dword [ebp - 0x108c8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10be4]
mov dword [0x4f800c], ecx
call fcn.00401320
jmp 0x4ee198
movzx edx, word [ebp - 0x28c4]
movzx eax, word [0x4f8010]
sub edx, eax
mov ecx, dword [ebp - 0x4088]
movzx eax, word [ecx]
movzx ecx, word [ebp - 0x8b14]
sar eax, cl
cmp edx, eax
je 0x4ee198
mov ecx, dword [ebp - 0xc2dc]
mov edx, dword [ecx]
and edx, dword [ebp - 0x7710]
mov dword [ebp - 0xbd4], edx
mov eax, dword [ebp - 0xdcbc]
push eax
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [ebp - 0x1c50], eax
mov ecx, dword [ebp - 0x8b8c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x52e0]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x5ec]
mov byte [eax], dl
movsx ecx, byte [ebp - 0xe679]
mov edx, dword [0x4fae34]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0xf044]
mov byte [edx], cl
mov eax, dword [ebp - 0x1d24]
push eax
push 0x59
push 0x48
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [ebp - 0x778c], eax
movsx edx, word [ebp - 0xe34c]
movsx ecx, word [ebp - 0xd470]
shl edx, cl
mov word [ebp - 0x3cd0], dx
mov eax, dword [ebp - 0x103f4]
xor eax, dword [ebp - 0xca60]
mov ecx, dword [ebp - 0xeb0]
mov dword [ecx], eax
jmp 0x4ee24c
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3628]
add eax, ecx
movzx edx, word [ebp - 0xf524]
mov ecx, dword [ebp - 0xfde4]
movzx ecx, word [ecx]
add edx, ecx
cmp eax, edx
je 0x4ee24c
mov edx, dword [ebp - 0x3dec]
mov eax, dword [edx]
xor eax, dword [ebp - 0x8ec0]
mov dword [ebp - 0xbd4], eax
mov ecx, dword [ebp - 0xab98]
mov edx, dword [ecx]
push edx
mov eax, dword [0x4f9c8c]
movzx ecx, byte [eax]
push ecx
call fcn.00401230
add esp, 8
mov edx, dword [ebp - 0x11af4]
mov eax, dword [ebp - 0xb3fc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8ec0]
sub ecx, dword [ebp - 0x67c]
cmp eax, ecx
jl 0x4ee2c2
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xf9d0]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x964c]
mov word [ecx], ax
movzx edx, byte [ebp - 0xc97a]
movzx eax, byte [ebp - 0x741d]
sub edx, eax
mov byte [0x4f8006], dl
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov word [ebp - 0xe478], ax
mov ecx, dword [ebp - 0x6228]
mov edx, dword [ecx]
or edx, dword [ebp - 0x103f4]
mov eax, dword [ebp - 0x62d4]
mov dword [eax], edx
jmp 0x4ee2f6
mov ecx, dword [ebp - 0x706c]
add ecx, dword [ebp - 0x67c]
mov edx, dword [ebp - 0x8ec0]
sub edx, dword [ebp - 0x11c7c]
cmp ecx, edx
jl 0x4ee2f6
mov eax, dword [ebp - 0xab98]
mov ecx, dword [ebp - 0x8ae8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x622c], edx
jmp 0x4ee310
push 0x4f54d4
lea eax, [ebp - 0xcd28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [ebp - 0x7468], eax
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf6e0]
sar edx, cl
mov dword [0x4f8008], edx
movzx eax, word [ebp - 0x2348]
mov dword [ebp - 0x12620], eax
cmp dword [ebp - 0x12620], 0x47c
je 0x4ee350
cmp dword [ebp - 0x12620], 0x767
je 0x4ee3bc
jmp 0x4ee3db
push 0x1d
push 0x7f
push 0x8b
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x1534]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0xf9e0], eax
mov edx, dword [ebp - 0x28fc]
and edx, dword [ebp - 0xbd4]
mov eax, dword [ebp - 0x122e8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d5c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xf044]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x42b9], dl
mov edx, dword [ebp - 0x107c4]
movsx eax, word [edx]
movsx ecx, word [0x4f8004]
sub eax, ecx
mov edx, dword [ebp - 0x2858]
mov word [edx], ax
jmp 0x4ee3db
mov eax, dword [ebp - 0x10d5c]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0xf044]
mov dl, byte [edx]
mov eax, dword [ebp - 0xf044]
mov cl, byte [eax]
call fcn.00401140
movzx ecx, byte [ebp - 0x818d]
push ecx
mov edx, dword [ebp - 0x10d5c]
mov dl, byte [edx]
mov eax, dword [ebp - 0xf044]
mov cl, byte [eax]
call fcn.00401140
movzx edx, word [ebp - 0x76d4]
movzx ecx, word [ebp - 0x8b14]
shl edx, cl
mov eax, dword [ebp - 0xfde4]
movzx eax, word [eax]
mov ecx, dword [ebp - 0xf9d0]
movzx ecx, word [ecx]
sar eax, cl
cmp edx, eax
je 0x4ee505
mov edx, dword [ebp - 0xc028]
mov eax, dword [ebp - 0x706c]
xor eax, dword [edx]
mov dword [ebp - 0x28fc], eax
mov ecx, dword [ebp - 0xc08]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x67ac], eax
mov dl, byte [ebp - 0x2465]
mov byte [ebp - 0x12624], dl
cmp byte [ebp - 0x12624], 0x10
je 0x4ee465
jmp 0x4ee4ea
mov eax, dword [ebp - 0x1dc8]
or eax, dword [ebp - 0xcbe0]
mov ecx, dword [0x4faa24]
mov edx, dword [ebp - 0x108c8]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
jae 0x4ee49f
mov edx, dword [ebp - 0x11c84]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x122e8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1014]
mov dword [edx], eax
jmp 0x4ee4e8
movzx eax, byte [ebp - 0xb2e5]
movzx ecx, byte [ebp - 0xcd95]
sub eax, ecx
mov edx, dword [ebp - 0x190c]
movzx ecx, byte [edx]
movzx edx, byte [0x4f8006]
and ecx, edx
cmp eax, ecx
jge 0x4ee4e8
movzx eax, byte [ebp - 0x4d61]
mov ecx, dword [ebp - 0x57c4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x741d], al
mov ecx, dword [0x4f800c]
call section..text
jmp 0x4ee505
mov eax, dword [ebp - 0xfde4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4088]
movzx eax, word [edx]
add ecx, eax
mov word [0x4f8010], cx
jmp 0x4ee5d2
mov ecx, dword [ebp - 0x4088]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x8b14]
sub edx, eax
mov ecx, dword [ebp - 0xfde4]
mov word [ecx], dx
movsx edx, byte [ebp - 0x42b9]
mov eax, dword [ebp - 0xb1f4]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf044]
movsx ecx, byte [eax]
movsx eax, byte [0x4f9d4e]
add ecx, eax
cmp edx, ecx
jl 0x4ee5d2
mov ecx, dword [ebp - 0x52e0]
mov dl, byte [ecx]
mov byte [ebp - 0x12628], dl
cmp byte [ebp - 0x12628], 0x4b
je 0x4ee573
cmp byte [ebp - 0x12628], 0xb8
je 0x4ee5ba
jmp 0x4ee5d2
mov eax, dword [ebp - 0x1d24]
push eax
mov ecx, dword [ebp - 0x1d24]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [ebp - 0xe6d8], eax
mov edx, dword [ebp - 0xabfc]
mov eax, dword [edx]
sub eax, dword [ebp - 0x103f4]
mov dword [ebp - 0xff2c], eax
mov ecx, dword [0x4f8008]
push ecx
movzx edx, byte [ebp - 0xe679]
push edx
call fcn.00401230
add esp, 8
jmp 0x4ee5d2
mov eax, dword [ebp - 0x11c84]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38f0]
add ecx, dword [edx]
mov eax, dword [ebp - 0xab98]
mov dword [eax], ecx
movzx ecx, byte [ebp - 0x42b9]
push ecx
movzx edx, byte [ebp - 0x818d]
push edx
call fcn.004eea50
add esp, 8
mov eax, dword [ebp - 0x54f4]
sub eax, dword [ebp - 0xbe04]
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x107c4]
movsx edx, word [ecx]
mov dword [ebp - 0x1262c], edx
cmp dword [ebp - 0x1262c], 0x3df
je 0x4ee62c
cmp dword [ebp - 0x1262c], 0x586
je 0x4ee735
jmp 0x4ee748
lea eax, [ebp - 0xf3ac]
push eax
mov ecx, dword [ebp - 0x11490]
push ecx
push 0x62
lea edx, [ebp - 0x11af4]
push edx
mov eax, dword [ebp - 0xe8bc]
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
mov dword [ebp - 0x2054], eax
mov ecx, dword [ebp - 0x8470]
mov edx, dword [ecx]
add edx, dword [ebp - 0x35b0]
mov eax, dword [ebp - 0x1014]
mov dword [eax], edx
movsx ecx, word [ebp - 0xe34c]
movsx edx, word [ebp - 0x3cd0]
sub ecx, edx
mov eax, dword [ebp - 0x2858]
movsx edx, word [eax]
movsx eax, word [ebp - 0xd470]
sub edx, eax
cmp ecx, edx
jl 0x4ee6e3
movzx ecx, word [0x4f8010]
mov edx, dword [ebp - 0xf9d0]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x76d4], cx
mov ecx, dword [ebp - 0x57c4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcd95]
add edx, eax
mov ecx, dword [ebp - 0x57c4]
mov byte [ecx], dl
mov edx, dword [0x4fae34]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0xb1f4]
movzx edx, byte [ecx]
push edx
call fcn.004eea50
add esp, 8
jmp 0x4ee733
movzx eax, word [ebp - 0x76d4]
mov ecx, dword [ebp - 0xfde4]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x964c]
movzx edx, word [ecx]
mov ecx, dword [ebp - 0xf9d0]
movzx ecx, word [ecx]
sub edx, ecx
cmp eax, edx
jle 0x4ee733
lea edx, [ebp - 0x10ee0]
push edx
push 0xeb
lea eax, [ebp - 0x706c]
push eax
mov ecx, dword [ebp - 0x7940]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
mov dword [ebp - 0x67ac], eax
jmp 0x4ee748
mov edx, dword [ebp - 0xa568]
mov eax, dword [edx]
add eax, dword [ebp - 0x1dc8]
mov dword [0x4f800c], eax
mov ecx, dword [ebp - 0x103f4]
or ecx, dword [ebp - 0xbe04]
mov dword [ebp - 0xcbe0], ecx
lea edx, [ebp - 0x118a8]
push edx
mov eax, dword [ebp - 0x11490]
push eax
mov ecx, dword [ebp - 0x11490]
push ecx
lea edx, [ebp - 0xc97a]
push edx
mov eax, dword [ebp - 0x8e14]
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
mov dword [ebp - 0xf9e0], eax
jmp 0x4ee7e1
lea ecx, [ebp - 0x3f24]
push ecx
lea edx, [ebp - 0x1dc8]
push edx
lea eax, [ebp - 0xb3fc]
push eax
mov ecx, dword [ebp - 0x1d24]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [ebp - 0xa900], eax
mov edx, dword [ebp - 0xb82c]
mov eax, dword [edx]
and eax, dword [ebp - 0xca60]
mov ecx, dword [0x4faa24]
mov dword [ecx], eax
mov edx, dword [0x4fae34]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x818d]
sub eax, ecx
mov byte [ebp - 0x42b9], al
push 0xf8
mov edx, dword [ebp - 0xfa88]
push edx
lea eax, [ebp - 0xd160]
push eax
mov ecx, dword [ebp - 0x118a8]
push ecx
call dword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [ebp - 0xf1d4], eax
mov edx, dword [ebp - 0x52e0]
mov al, byte [edx]
mov byte [ebp - 0x12630], al
cmp byte [ebp - 0x12630], 0xac
je 0x4ee820
jmp 0x4ee834
mov ecx, dword [ebp - 0x38f0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x67c]
mov dword [ebp - 0x4f00], edx
mov eax, dword [ebp - 0xab98]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x11af4]
add ecx, dword [edx]
mov dword [ebp - 0x35b0], ecx
mov eax, dword [ebp - 0x122e8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38f0]
add ecx, dword [edx]
mov dword [ebp - 0xb3fc], ecx
mov eax, dword [ebp - 0xa274]
mov ecx, dword [ebp - 0xca60]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xeb0]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x818d]
push eax
mov dl, byte [0x4f9d4e]
mov ecx, dword [0x4fae34]
mov cl, byte [ecx]
call fcn.00401140
movzx edx, byte [ebp - 0x4d61]
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xc97a], dl
lea edx, [ebp - 0x964c]
push edx
lea eax, [ebp - 0x38f0]
push eax
lea ecx, [ebp - 0x299c]
push ecx
lea edx, [ebp - 0x115d0]
push edx
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0xffe4], eax
mov eax, dword [0x4fae34]
movzx ecx, byte [eax]
push ecx
mov edx, dword [0x4fae34]
mov dl, byte [edx]
mov cl, byte [ebp - 0x818d]
call fcn.00401140
jmp 0x4ee9da
movzx eax, byte [ebp - 0xc97a]
mov ecx, dword [ebp - 0x5ec]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x190c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4ee9da
movsx eax, byte [ebp - 0x818d]
mov ecx, dword [0x4fae34]
movsx edx, byte [ecx]
add eax, edx
movsx ecx, byte [0x4f9d4e]
cmp eax, ecx
jle 0x4ee962
mov edx, dword [ebp - 0x62d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54f4]
shl eax, cl
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x122e8]
mov edx, dword [ecx]
push edx
mov eax, dword [0x4fae34]
movzx ecx, byte [eax]
push ecx
call fcn.00401230
add esp, 8
mov edx, dword [ebp - 0x7fa4]
mov eax, dword [edx]
mov dword [ebp - 0x12634], eax
cmp dword [ebp - 0x12634], 0x7a3b
je 0x4ee97e
jmp 0x4ee9c1
push 0
push 0xeb
call dword [sym.imp.KERNEL32.dll_SleepEx]
mov dword [ebp - 0x54f4], eax
mov ecx, dword [ebp - 0x1544]
sub ecx, dword [ebp - 0x706c]
mov edx, dword [ebp - 0xab98]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x190c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xc97a], cl
jmp 0x4ee9da
movzx ecx, word [ebp - 0x76d4]
movzx edx, word [ebp - 0x8b14]
sub ecx, edx
mov eax, dword [ebp - 0xfde4]
mov word [eax], cx
mov ecx, dword [ebp - 0x7fa4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x35b0]
mov dword [ebp - 0x67c], edx
movzx eax, word [ebp - 0x28c4]
shl eax, 0xe
mov word [ebp - 0x28c4], ax
call fcn.00401320
movsx ecx, byte [ebp - 0x818d]
and ecx, 0x25
mov byte [ebp - 0x818d], cl
push 0xce
call dword [sym.imp.KERNEL32.dll_ExitProcess]