Function at 0x401a86
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82ac0
push edi
lea edi, [ebp - 0x82ac0]
push 1
call dword [ebx + 0x44]
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x405d15
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x401c31
push eax
push edi
call fcn.00408870
cmp eax, 1
jne 0x401adb
mov dword [edi], 0x408c71
jmp 0x401b0c
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x401c2f
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x82a04]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x82a04]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x401c2f
lea edx, [ebp - 0x82554]
push edx
lea edx, [ebp - 0x825a4]
push edx
lea edx, [ebp - 0x825f4]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x401c22
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x825f4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x82a04]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x82a04]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x825a4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x82a04]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x82a04]
push edx
call dword [ebx + 0x30]
add esp, 0x18
push dword [edi + 0x38]
call dword [edi + 0x34]
mov dword [edi + 0x38], 0xffffffff
jmp 0x401c71
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x405d15
mov dword [ebp - 0x82504], 0
cmp dword [esi + 0x270], 0x39393924
jne 0x401cca
cmp dword [esi + 0x274], 0x4524315f
jne 0x401cca
cmp dword [esi + 0x278], 0x43205543
jne 0x401cca
cmp dword [esi + 0x27c], 0x6e69646f
jne 0x401cca
cmp dword [esi + 0x280], 0x41432067
jne 0x401cca
cmp word [esi + 0x284], 0x4e
je 0x401d2a
cmp dword [esi + 0x270], 0x39393924
jne 0x405d15
cmp dword [esi + 0x274], 0x4524325f
jne 0x405d15
cmp dword [esi + 0x278], 0x53434154
jne 0x405d15
cmp dword [esi + 0x27c], 0x646f4320
jne 0x405d15
cmp dword [esi + 0x280], 0x20676e69
jne 0x405d15
cmp dword [esi + 0x284], 0x4e4143
jne 0x405d15
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x401d52
cmp eax, 0x11
je 0x401d52
cmp eax, 0x12
je 0x401d52
cmp eax, 0x28
je 0x401d52
cmp eax, 0x17
je 0x401d52
cmp eax, 0x18
jne 0x405d15
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x401d80
mov dword [ebp - 0x82504], 1
jmp 0x405d15
mov dword [ebp - 0x812ce], 0
push 0x208
push 0
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebx + 0xd30], 0
mov dword [ebx + 0xd34], 0
mov dword [ebx + 0xd38], 0
mov dword [ebx + 0xd3c], 0
mov dword [ebx + 0xd40], 0
mov dword [ebx + 0xd44], 0
mov dword [ebx + 0xd48], 0
mov dword [ebx + 0xd4c], 0
mov dword [ebx + 0xd50], 0
mov dword [ebx + 0xd54], 0
mov dword [ebx + 0xd58], 0
mov dword [ebx + 0xd5c], 0
mov dword [ebp - 0x811b2], 0xffffffff
mov dword [ebp - 0x811aa], 0xffffffff
mov dword [ebp - 0x811a2], 0xffffffff
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x401e5f
mov dword [ebp - 0x82504], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x401e7d
cmp eax, 0x11
je 0x401e7d
cmp eax, 0x17
je 0x401e7d
cmp eax, 0x18
jne 0x4023b7
cmp dword [ebp - 0x82504], 0
jne 0x402155
mov dword [ebp - 0x813de], 0
cmp dword [esi + 0x270], 0x39393924
jne 0x401f78
cmp dword [esi + 0x274], 0x4524315f
jne 0x401f78
cmp dword [esi + 0x278], 0x43205543
jne 0x401f78
cmp dword [esi + 0x27c], 0x6e69646f
jne 0x401f78
cmp dword [esi + 0x280], 0x41432067
jne 0x401f78
cmp word [esi + 0x284], 0x4e
jne 0x401f78
cmp dword [ebp - 0x813de], 0
jne 0x401f11
mov dword [ebp - 0x813da], 0xe0070000
mov dword [ebp - 0x813d6], 0xe8070000
jmp 0x401f78
push 0x5834
push 0x2e25203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push 0
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x3c
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
mov dword [ebp - 0x82504], 1
cmp dword [esi + 0x270], 0x39393924
jne 0x402086
cmp dword [esi + 0x274], 0x4524325f
jne 0x402086
cmp dword [esi + 0x278], 0x53434154
jne 0x402086
cmp dword [esi + 0x27c], 0x646f4320
jne 0x402086
cmp dword [esi + 0x280], 0x20676e69
jne 0x402086
cmp dword [esi + 0x284], 0x4e4143
jne 0x402086
cmp dword [ebp - 0x813de], 0
jne 0x401ffa
mov dword [ebp - 0x813da], 0xaa070000
mov dword [ebp - 0x813d6], 0xab070000
jmp 0x402086
cmp dword [ebp - 0x813de], 1
jne 0x402019
mov dword [ebp - 0x813da], 0xa0070000
mov dword [ebp - 0x813d6], 0xa1070000
jmp 0x402086
cmp dword [ebp - 0x813de], 2
jne 0x402038
mov dword [ebp - 0x813da], 0x20060000
mov dword [ebp - 0x813d6], 0x4050000
jmp 0x402086
push 0x2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push 0
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x4020e2
push dword [ebp - 0x813da]
push 0
push 4
push 0
push 0x40
push 0
push 6
push dword [ebp - 0x813d6]
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4020e2
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x402155
push 0x871a
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x40211f
mov dword [ebp - 0x82504], 1
jmp 0x402155
lea edx, [ebp - 0x824f8]
push edx
push 0xc8
push 6
push 0
call fcn.00405eca
cmp eax, 0xffffffff
jne 0x402145
mov dword [ebp - 0x82504], 1
jmp 0x402155
cmp eax, 0
jne 0x402155
inc dword [ebp - 0x813de]
jmp 0x401e94
cmp dword [ebp - 0x82504], 0
jne 0x4022dd
cmp byte [ebp - 0x824f4], 0x5a
jne 0x402170
cmp eax, 0x10
ja 0x4021e5
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4021c2
xor eax, eax
jmp 0x4021cc
cmp eax, 0x20
jbe 0x4021cc
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4022dd
sub eax, 0x10
xor ecx, ecx
cmp ecx, 0x104
jae 0x40221b
cmp ecx, eax
jae 0x40221b
cmp byte [ebp + ecx - 0x824e8], 0
je 0x40221b
cmp byte [ebp + ecx - 0x824e8], 0x20
je 0x40221b
mov dl, byte [ebp + ecx - 0x824e8]
mov byte [ebp + ecx - 0x813d2], dl
inc ecx
jmp 0x4021ea
mov byte [ebp + ecx - 0x813d2], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x40226a
lea ecx, [ebp - 0x813d2]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
movzx ecx, word [ebp - 0x824f0]
xchg cl, ch
mov dword [ebp - 0x811c6], ecx
movzx ecx, byte [ebp - 0x824eb]
shl ecx, 0x10
mov ch, byte [ebp - 0x824ea]
mov cl, byte [ebp - 0x824e9]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x4022dd
push 0xa0d58
push 0x362e2520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
cmp dword [ebp - 0x82504], 0
jne 0x4023b7
push 0x23e
push 0x1c000000
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x1f4
push 0
push 0
mov dword [ebp - 0x274], esp
push 0
push dword [ebp - 0x274]
push 6
call dword [edi]
add esp, 0x2c
push 0x23e
push 0xdf070000
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x1f4
push 0
push 1
mov dword [ebp - 0x270], esp
push 0
push dword [ebp - 0x270]
push 6
call dword [edi]
add esp, 0x2c
push 0x9210
push 0xdf070000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x402380
mov dword [ebp - 0x82504], 1
jmp 0x4023b4
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x4023ac
mov dword [ebp - 0x82504], 1
jmp 0x4023b4
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
add esp, 8
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
je 0x4023cb
cmp eax, 0x17
jne 0x402bf2
cmp dword [ebp - 0x82504], 0
jne 0x4026c5
push 0x881a
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x40240f
mov dword [ebp - 0x82504], 1
jmp 0x4026c5
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 6
push 0
call fcn.00405eca
test eax, eax
jne 0x402493
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402470
xor eax, eax
jmp 0x40247a
cmp eax, 0x20
jbe 0x40247a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4026c5
cmp eax, 0xffffffff
jne 0x4024a7
mov dword [ebp - 0x82504], 1
jmp 0x4026c5
cmp byte [ebp - 0x824f4], 0x5a
je 0x4026c5
cmp byte [ebp - 0x824f4], 0x7f
jne 0x40240f
cmp byte [ebp - 0x824f4], 0x7f
jne 0x4024d7
cmp byte [ebp - 0x824f2], 0x78
je 0x40240f
cmp byte [ebp - 0x824f2], 0x12
jne 0x402655
push 0x901a
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x40251b
mov dword [ebp - 0x82504], 1
jmp 0x402653
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 6
push 0
call fcn.00405eca
test eax, eax
jne 0x40259f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40257c
xor eax, eax
jmp 0x402586
cmp eax, 0x20
jbe 0x402586
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x402653
cmp eax, 0xffffffff
jne 0x4025b3
mov dword [ebp - 0x82504], 1
jmp 0x402653
cmp byte [ebp - 0x824f4], 0x5a
je 0x402653
cmp byte [ebp - 0x824f4], 0x7f
jne 0x40251b
cmp byte [ebp - 0x824f4], 0x7f
jne 0x4025e3
cmp byte [ebp - 0x824f2], 0x78
je 0x40251b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402635
xor eax, eax
jmp 0x40263f
cmp eax, 0x20
jbe 0x40263f
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4026c5
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4026a7
xor eax, eax
jmp 0x4026b1
cmp eax, 0x20
jbe 0x4026b1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x40272a
push ebx
sub eax, 6
xor ecx, ecx
cmp ecx, 0x104
jae 0x4026ed
cmp ecx, eax
jae 0x4026ed
cmp byte [ebp + ecx - 0x824f2], 0x20
jne 0x4026ed
inc ecx
jmp 0x4026d4
xor ebx, ebx
cmp ecx, 0x104
jae 0x402721
cmp ecx, eax
jae 0x402721
cmp byte [ebp + ecx - 0x824f2], 0
je 0x402721
cmp byte [ebp + ecx - 0x824f2], 0x20
je 0x402721
mov dl, byte [ebp + ecx - 0x824f2]
mov byte [ebp + ebx - 0x812ce], dl
inc ecx
inc ebx
jmp 0x4026ef
mov byte [ebp + ebx - 0x812ce], 0
pop ebx
cmp dword [ebp - 0x82504], 0
jne 0x4027c6
cmp dword [ebp - 0x82504], 0
jne 0x4027c6
push 0xa
push 2
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x402784
mov dword [ebp - 0x811b6], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x811ae], eax
push dword [ebp - 0x811b6]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x402784
mov dword [ebp - 0x811b2], eax
test eax, eax
jne 0x4027c6
push 0xa0d
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x402bc8
push dword [ebp - 0x811ae]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x811aa], eax
push dword [ebp - 0x811ae]
push dword [ebp - 0x811b2]
push eax
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov byte [ebp - 0x81172], 0x21
mov byte [ebp - 0x81171], 0xf4
mov dword [ebp - 0x81170], 0
push 0xf0
push dword [ebp - 0x811aa]
lea edx, [ebp + ecx - 0x8116c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push 0xfa
lea edx, [ebp - 0x814d8]
push edx
push 0xf6
lea edx, [ebp - 0x81172]
push edx
call dword [ebx + 0x40]
cmp eax, 0xf0
je 0x402896
push 0xa0d
push 0x32232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x402bbc
push 0xf0
lea edx, [ebp - 0x814d8]
push edx
push dword [ebp - 0x811aa]
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov edx, dword [ebp - 0x811aa]
cmp byte [edx + 3], 8
je 0x402900
push 0xa0d
push 0x33232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x402bbc
lea ecx, [edx - 4]
add ecx, dword [ebp - 0x811ae]
mov ecx, dword [ecx]
mov dword [ebp - 0x811a6], ecx
push dword [ebp - 0x811a6]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x811a2], eax
push dword [ebp - 0x811a6]
push dword [ebp - 0x811a2]
push dword [ebp - 0x811ae]
push dword [ebp - 0x811aa]
call dword [ebx + 0x4c]
test eax, eax
jne 0x402987
push 0xa0d
push 0x34232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x402bbc
xor eax, eax
pushal
mov esi, dword [ebp - 0x811a2]
xor edi, edi
cmp edi, dword [esi]
jae 0x402aba
cmp byte [esi + edi + 0xc], 0x2d
jne 0x402a12
mov eax, dword [esi + edi + 8]
cmp eax, dword [ebp - 0x812c9]
jne 0x4029d7
mov eax, dword [esi + edi + 0xd]
cmp eax, dword [ebp - 0x812c4]
jne 0x4029d7
mov ax, word [esi + edi + 0x11]
cmp ax, word [ebp - 0x812c0]
jne 0x4029d7
mov al, byte [esi + edi + 0x13]
cmp al, byte [ebp - 0x812be]
je 0x402aba
mov eax, dword [esi + edi + 8]
cmp eax, dword [ebp - 0x812ce]
jne 0x402a0d
mov eax, dword [esi + edi + 0xd]
cmp eax, dword [ebp - 0x812c9]
jne 0x402a0d
mov ax, word [esi + edi + 0xf]
cmp ax, word [ebp - 0x812c7]
jne 0x402a0d
mov al, byte [esi + edi + 0x11]
cmp al, byte [ebp - 0x812c5]
je 0x402aba
add edi, 0x15
jmp 0x402992
cmp word [esi + edi + 0xf], 0x2020
jne 0x402a76
cmp byte [esi + edi + 0x11], 0x20
jne 0x402a76
mov eax, dword [esi + edi + 8]
cmp eax, dword [ebp - 0x812cb]
jne 0x402a6e
mov ax, word [esi + edi + 0xc]
cmp ax, word [ebp - 0x812c7]
jne 0x402a6e
mov al, byte [esi + edi + 0xe]
cmp al, byte [ebp - 0x812c5]
jne 0x402a6e
mov eax, dword [esi + edi + 0x12]
cmp eax, dword [ebp - 0x812c4]
jne 0x402a6e
mov ax, word [esi + edi + 0x16]
cmp ax, word [ebp - 0x812c0]
jne 0x402a6e
mov al, byte [esi + edi + 0x18]
cmp al, byte [ebp - 0x812be]
je 0x402aba
add edi, 0x15
jmp 0x402992
mov eax, dword [esi + edi + 8]
cmp eax, dword [ebp - 0x812ce]
jne 0x402ab2
mov eax, dword [esi + edi + 0xc]
cmp eax, dword [ebp - 0x812ca]
jne 0x402ab2
mov eax, dword [esi + edi + 0x10]
cmp eax, dword [ebp - 0x812c6]
jne 0x402ab2
mov eax, dword [esi + edi + 0x14]
cmp eax, dword [ebp - 0x812c2]
jne 0x402ab2
mov al, byte [esi + edi + 0x18]
cmp al, byte [ebp - 0x812be]
je 0x402aba
add edi, 0x15
jmp 0x402992
cmp edi, dword [esi]
jae 0x402ac6
mov eax, dword [esi + edi + 0x19]
mov dword [esp + 0x1c], eax
popal
test eax, eax
jne 0x402b0b
push 0
push 0xa0d2455
push 0x43455f44
push 0x4554524f
push 0x50505553
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x402bbc
mov dword [ebp - 0x811ca], eax
xor eax, eax
pushal
mov esi, dword [ebp - 0x811a2]
mov ebx, dword [esi + 4]
add esi, dword [esi]
xor edi, edi
cmp edi, ebx
jae 0x402b5a
mov eax, dword [esi + edi + 8]
cmp eax, dword [ebp - 0x811ca]
je 0x402b36
add edi, 0x14
jmp 0x402b21
mov eax, dword [esi + edi + 0xc]
bswap eax
cmp eax, dword [ebp - 0x813da]
je 0x402b49
add edi, 0x14
jmp 0x402b21
mov eax, dword [esi + edi + 0x10]
cmp eax, dword [ebp - 0x811c6]
je 0x402b5a
add edi, 0x14
jmp 0x402b21
cmp edi, ebx
jae 0x402b6e
mov eax, dword [esi + edi + 0x14]
mov dword [esp + 0x1c], eax
mov ecx, dword [esi + edi + 0x18]
mov dword [esp + 0x18], ecx
popal
test eax, eax
jne 0x402bb0
push 0
push 0xa0d2455
push 0x43455f44
push 0x4554524f
push 0x50505553
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x402bbc
mov dword [ebp - 0x811c2], eax
mov dword [ebp - 0x811be], ecx
push dword [ebp - 0x811aa]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebp - 0x811b2], 0xffffffff
je 0x402bdd
push dword [ebp - 0x811b6]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x811a2], 0xffffffff
je 0x402bf2
push dword [ebp - 0x811a2]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x12
je 0x402c06
cmp eax, 0x28
jne 0x40315f
cmp dword [ebp - 0x82504], 0
jne 0x40315f
push 0
push 0x6c006d
push 0x78002e
mov dword [ebp - 0x26c], esp
push 0
mov dword [ebp - 0x268], esp
push 0
push 0x6c006d
push 0x78002e
push 0x2a0000
push 0x65006c
push 0x690066
push 0x20004c
push 0x4d0058
mov dword [ebp - 0x264], esp
push 0
push 0
push 0
push 0
push 0
push 0x1800
push 0
push 0
push 0
push 0
push 0x104
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0x4c
mov eax, dword [ebx + 0x8ac]
mov dword [esp + 4], eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleW]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x264]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf78]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x26c]
mov dword [esp + 0x3c], eax
push esp
call dword [sym.imp.COMDLG32.DLL_GetOpenFileNameW]
add esp, 0x4c
add esp, 0x20
add esp, 4
add esp, 0xc
test eax, eax
jne 0x402cec
mov dword [ebp - 0x82504], 1
jmp 0x40315f
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0xf7c], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0x20
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
push 0
push 0x74006e
push 0x65006d
push 0x750063
push 0x6f0044
push 0x4d004f
push 0x44002e
push 0x32004c
push 0x4d0058
push 0x53004d
mov dword [ebp - 0x260], esp
lea edx, [ebp - 0xd70]
push edx
push dword [ebp - 0x260]
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
add esp, 0x28
test eax, eax
je 0x402db3
push 0xa
push 0xd323123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403153
push 0x46000000
push 0xc0
push 0
push 0x20400
mov dword [ebp - 0x25c], esp
mov dword [ebp - 0xd60], 0
lea edx, [ebp - 0xd60]
push edx
push dword [ebp - 0x25c]
push 1
push 0
lea edx, [ebp - 0xd70]
push edx
call dword [sym.imp.ole32.dll_CoCreateInstance]
add esp, 0x10
test eax, eax
je 0x402e3e
push 0xa
push 0xd333123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403153
lea edx, [ebp - 0xd44]
push edx
push 0x1a
push dword [ebp - 0xf7c]
push 0
push 8
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0xe8]
test eax, eax
je 0x402ea9
push 0xa
push 0xd343123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403147
push 0x64
push 0x69002f
push 0x67006e
push 0x690064
push 0x6f0063
mov ecx, esp
lea edx, [ebp - 0xd58]
push edx
push ecx
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0x94]
add esp, 0x14
test eax, eax
je 0x402f24
push 0xa
push 0xd353123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403147
lea edx, [ebp - 0xd34]
push edx
mov eax, dword [ebp - 0xd58]
push eax
mov eax, dword [eax]
call dword [eax + 0x68]
test eax, eax
je 0x402f80
push 0xa
push 0xd363123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x40313b
push dword [ebp - 0xd34]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp eax, 0x18
je 0x402fd6
push 0xa
push 0xd373123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x40313b
xor ecx, ecx
mov edx, dword [ebp - 0xd34]
mov dword [ebp - 0x813da], 0
cmp ecx, 8
jae 0x40304f
cmp word [edx + ecx*2], 0
je 0x40304f
movzx eax, word [edx + ecx*2]
cmp eax, 0x2f
jbe 0x403015
cmp eax, 0x3a
jae 0x403015
sub eax, 0x30
shl dword [ebp - 0x813da], 4
add dword [ebp - 0x813da], eax
inc ecx
jmp 0x402fe8
cmp eax, 0x40
jbe 0x403032
cmp eax, 0x47
jae 0x403032
sub eax, 0x37
shl dword [ebp - 0x813da], 4
add dword [ebp - 0x813da], eax
inc ecx
jmp 0x402fe8
cmp eax, 0x60
jbe 0x40304f
cmp eax, 0x67
jae 0x40304f
sub eax, 0x57
shl dword [ebp - 0x813da], 4
add dword [ebp - 0x813da], eax
inc ecx
jmp 0x402fe8
xor ecx, ecx
lea edx, [edx + 0x10]
mov dword [ebp - 0x813d6], 0
cmp ecx, 8
jae 0x4030c5
cmp word [edx + ecx*2], 0
je 0x4030c5
movzx eax, word [edx + ecx*2]
cmp eax, 0x2f
jbe 0x40308b
cmp eax, 0x3a
jae 0x40308b
sub eax, 0x30
shl dword [ebp - 0x813d6], 4
add dword [ebp - 0x813d6], eax
inc ecx
jmp 0x40305e
cmp eax, 0x40
jbe 0x4030a8
cmp eax, 0x47
jae 0x4030a8
sub eax, 0x37
shl dword [ebp - 0x813d6], 4
add dword [ebp - 0x813d6], eax
inc ecx
jmp 0x40305e
cmp eax, 0x60
jbe 0x4030c5
cmp eax, 0x67
jae 0x4030c5
sub eax, 0x57
shl dword [ebp - 0x813d6], 4
add dword [ebp - 0x813d6], eax
inc ecx
jmp 0x40305e
xor ecx, ecx
lea edx, [edx + 0x10]
mov dword [ebp - 0x811c2], 0
cmp ecx, 8
jae 0x40313b
cmp word [edx + ecx*2], 0
je 0x40313b
movzx eax, word [edx + ecx*2]
cmp eax, 0x2f
jbe 0x403101
cmp eax, 0x3a
jae 0x403101
sub eax, 0x30
shl dword [ebp - 0x811c2], 4
add dword [ebp - 0x811c2], eax
inc ecx
jmp 0x4030d4
cmp eax, 0x40
jbe 0x40311e
cmp eax, 0x47
jae 0x40311e
sub eax, 0x37
shl dword [ebp - 0x811c2], 4
add dword [ebp - 0x811c2], eax
inc ecx
jmp 0x4030d4
cmp eax, 0x60
jbe 0x40313b
cmp eax, 0x67
jae 0x40313b
sub eax, 0x57
shl dword [ebp - 0x811c2], 4
add dword [ebp - 0x811c2], eax
inc ecx
jmp 0x4030d4
mov eax, dword [ebp - 0xd58]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 8]
push dword [ebp - 0xf7c]
call dword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
je 0x403178
cmp eax, 0x12
je 0x403178
cmp eax, 0x28
jne 0x403869
mov dword [ebp - 0x8119a], 0xffffffff
cmp dword [ebp - 0x82504], 0
jne 0x40321b
mov dword [ebx + 0xd1c], 0
push 0xa
push 3
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4031d9
mov dword [ebp - 0x8119e], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x81196], eax
push dword [ebp - 0x8119e]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4031d9
mov dword [ebp - 0x8119a], eax
test eax, eax
jne 0x40321b
push 0xa0d
push 0x35232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x40345a
xor ecx, ecx
mov edx, dword [ebp - 0x8119a]
cmp ecx, dword [ebp - 0x81196]
jae 0x403249
mov eax, dword [ebp - 0x811c2]
cmp eax, dword [edx + ecx + 4]
je 0x403249
add ecx, dword [edx + ecx]
jmp 0x403230
cmp ecx, dword [ebp - 0x81196]
jb 0x403294
push 0xa0d
push 0x36232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x40345a
mov eax, dword [edx + ecx]
sub eax, 8
mov dword [ebp - 0x81192], eax
mov dword [ebp - 0x8118e], ecx
add dword [ebp - 0x8118e], 8
add ecx, dword [edx + ecx]
mov dword [ebp - 0x8118a], ecx
mov ecx, dword [ebp - 0x8118e]
cmp ecx, dword [ebp - 0x8118a]
jae 0x40345a
mov byte [ebp - 0x81172], 0x21
mov byte [ebp - 0x81171], 0xf4
mov dword [ebp - 0x81170], ecx
mov dword [ebp - 0x81186], 0
cmp ecx, dword [ebp - 0x8118a]
jae 0x403319
cmp dword [ebp - 0x81186], 0xf0
jae 0x403319
mov edx, dword [ebp - 0x8119a]
mov al, byte [edx + ecx]
mov edx, dword [ebp - 0x81186]
mov byte [ebp + edx - 0x8116c], al
inc ecx
inc dword [ebp - 0x81186]
jmp 0x4032e6
mov dword [ebp - 0x8118e], ecx
push 0xfa
lea edx, [ebp - 0x814d8]
push edx
push 0xf6
lea edx, [ebp - 0x81172]
push edx
call dword [ebx + 0x40]
cmp eax, 0xf0
je 0x403384
push 0xa0d
push 0x37232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x40345a
push dword [ebp - 0x81186]
lea edx, [ebp - 0x814d8]
push edx
lea edx, [ebp - 0x8107c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp - 0x8118e]
sub dword [ebp - 0x8118a], eax
cmp dword [ebp - 0x8118a], 0
je 0x4033da
mov ecx, dword [ebp - 0x81186]
add eax, dword [ebp - 0x8119a]
push dword [ebp - 0x8118a]
push eax
lea edx, [ebp + ecx - 0x8107c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x81192]
mov eax, dword [ebp + ecx - 0x81080]
mov dword [ebx + 0xd20], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebx + 0xd1c], eax
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
push dword [ebp - 0x81192]
lea edx, [ebp - 0x8107c]
push edx
call dword [ebx + 0x4c]
test eax, eax
jne 0x40345a
push 0xa0d
push 0x38232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x8119a], 0xffffffff
je 0x40346f
push dword [ebp - 0x8119e]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x82504], 0
jne 0x403869
mov dword [ebp - 0x81182], 0
mov dword [ebp - 0x924], 0
mov dword [ebp - 0x920], 0
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 0
mov dword [ebp - 0x914], 0
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x90c], 0
mov dword [ebp - 0x908], 0
push 0x120
push 0
lea edx, [ebp - 0x904]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov ecx, dword [ebp - 0x81182]
mov edx, dword [ebx + 0xd1c]
cmp ecx, dword [ebx + 0xd20]
jae 0x40374d
cmp word [edx + ecx], 0x4124
jne 0x403547
cmp dword [ebp - 0x924], 0
jne 0x403719
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.0040845f
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x924], 1
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x5324
jne 0x40357f
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.00408406
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x920], 1
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x4b24
jne 0x4035b7
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.00408406
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x914], 1
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x4424
jne 0x4035ec
lea edx, [ebp - 0x8e4]
push edx
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.00408593
mov dword [ebp - 0x8e8], eax
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x4224
jne 0x403652
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.0040845f
cmp dword [ebp - 0x920], 1
jne 0x403629
cmp dword [ebp - 0x91c], 0
jne 0x403629
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x91c], eax
jmp 0x403647
cmp dword [ebp - 0x914], 1
jne 0x403647
cmp dword [ebp - 0x910], 0
jne 0x403647
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x910], eax
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x4c24
jne 0x4036b8
lea edx, [ecx + 2]
push edx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.0040845f
cmp dword [ebp - 0x920], 1
jne 0x40368f
cmp dword [ebp - 0x918], 0
jne 0x40368f
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x918], eax
jmp 0x4036ad
cmp dword [ebp - 0x914], 1
jne 0x4036ad
cmp dword [ebp - 0x90c], 0
jne 0x4036ad
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x90c], eax
inc dword [ebp - 0x81182]
jmp 0x4034ed
cmp word [edx + ecx], 0x4f24
je 0x4036e8
cmp word [edx + ecx], 0x4924
je 0x4036e8
cmp word [edx + ecx], 0x5924
je 0x4036e8
cmp word [edx + ecx], 0x5424
je 0x4036e8
cmp word [edx + ecx], 0x5024
je 0x4036e8
cmp word [edx + ecx], 0x5524
jne 0x40370e
cmp dword [ebp - 0x924], 0
jne 0x403719
push ecx
push dword [ebx + 0xd20]
push dword [ebx + 0xd1c]
call fcn.00407716
mov dword [ebp - 0x81182], eax
jmp 0x4034ed
inc dword [ebp - 0x81182]
jmp 0x4034ed
push 0x120
lea edx, [ebp - 0x904]
push edx
lea edx, [ebx + 0xd30]
push edx
call fcn.00408813
push 0x120
push 0
lea edx, [ebp - 0x904]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
jmp 0x403486
mov dword [ebp - 0x258], 0
mov ecx, dword [ebp - 0x258]
cmp ecx, dword [ebx + 0xd50]
jae 0x403869
add ecx, dword [ebx + 0xd48]
cmp byte [ecx + 0x32c], 0
je 0x40385a
cmp byte [ecx + 0x32d], 0
je 0x40385a
movzx eax, byte [ecx + 0x32c]
mov dword [ebp - 0x254], eax
movzx eax, byte [ecx + 0x32d]
mov dword [ebp - 0x250], eax
xor edx, edx
mov ecx, dword [ebx + 0xd3c]
cmp edx, dword [ebx + 0xd44]
jae 0x4037d5
movzx eax, byte [edx + ecx + 8]
cmp eax, dword [ebp - 0x254]
jne 0x4037cd
movzx eax, byte [edx + ecx + 9]
cmp eax, dword [ebp - 0x250]
je 0x4037d5
add edx, 0x214
jmp 0x4037ab
cmp edx, dword [ebx + 0xd44]
jae 0x4037f1
mov ecx, dword [ebp - 0x258]
add ecx, dword [ebx + 0xd48]
mov dword [ecx + 0x328], edx
jmp 0x40385a
push 0x214
push 0
lea edx, [ebp - 0x24c]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0x24c], 8
mov eax, dword [ebp - 0x254]
mov byte [ebp - 0x244], al
mov eax, dword [ebp - 0x250]
mov byte [ebp - 0x243], al
mov eax, dword [ebx + 0xd44]
mov ecx, dword [ebp - 0x258]
add ecx, dword [ebx + 0xd48]
mov dword [ecx + 0x328], eax
push 0x214
lea edx, [ebp - 0x24c]
push edx
lea edx, [ebx + 0xd3c]
push edx
call fcn.00408813
add dword [ebp - 0x258], 0x43e
jmp 0x403757
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x12
je 0x40387d
cmp eax, 0x28
jne 0x403e7b
cmp dword [ebp - 0x82504], 0
jne 0x403db3
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0xf7c], eax
push 0
push 0x74006e
push 0x65006d
push 0x750063
push 0x6f0044
push 0x4d004f
push 0x44002e
push 0x32004c
push 0x4d0058
push 0x53004d
mov dword [ebp - 0x38], esp
lea edx, [ebp - 0xd70]
push edx
push dword [ebp - 0x38]
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
add esp, 0x28
test eax, eax
je 0x40392b
push 0xa
push 0xd383123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403da7
push 0x46000000
push 0xc0
push 0
push 0x20400
mov dword [ebp - 0x34], esp
mov dword [ebp - 0xd60], 0
lea edx, [ebp - 0xd60]
push edx
push dword [ebp - 0x34]
push 1
push 0
lea edx, [ebp - 0xd70]
push edx
call dword [sym.imp.ole32.dll_CoCreateInstance]
add esp, 0x10
test eax, eax
je 0x4039b0
push 0xa
push 0xd393123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403da7
lea edx, [ebp - 0xd44]
push edx
push 0x1a
push dword [ebp - 0xf7c]
push 0
push 8
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0xe8]
test eax, eax
je 0x403a1b
push 0xa
push 0xd303223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403d9b
push 0
push 0x67006e
push 0x690064
push 0x6f0063
mov ecx, esp
lea edx, [ebp - 0xd5c]
push edx
push ecx
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0x94]
add esp, 0x10
test eax, eax
je 0x403a91
push 0xa
push 0xd313223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403d9b
lea edx, [ebp - 0xd50]
push edx
mov eax, dword [ebp - 0xd5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x30]
test eax, eax
je 0x403aed
push 0xa
push 0xd323223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403d8f
mov dword [ebp - 0xd30], 0
cmp dword [ebp - 0x82504], 0
jne 0x403d83
lea edx, [ebp - 0xd4c]
push edx
push dword [ebp - 0xd30]
mov eax, dword [ebp - 0xd50]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
test eax, eax
jne 0x403d83
lea edx, [ebp - 0xd2c]
push edx
mov eax, dword [ebp - 0xd4c]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
test eax, eax
je 0x403b81
push 0xa
push 0xd333223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403d6c
mov edx, dword [ebp - 0xd2c]
cmp word [edx], 0x64
jne 0x403d6c
cmp word [edx + 2], 0x61
jne 0x403d6c
cmp word [edx + 4], 0x74
jne 0x403d6c
cmp word [edx + 6], 0x61
jne 0x403d6c
xor ecx, ecx
mov dword [ebp - 0x811ba], 0
cmp ecx, 2
jae 0x403c27
cmp word [edx + ecx*2 + 8], 0
je 0x403c27
movzx eax, word [edx + ecx*2 + 8]
cmp eax, 0x2f
jbe 0x403bed
cmp eax, 0x3a
jae 0x403bed
sub eax, 0x30
shl dword [ebp - 0x811ba], 4
add dword [ebp - 0x811ba], eax
inc ecx
jmp 0x403bbe
cmp eax, 0x40
jbe 0x403c0a
cmp eax, 0x47
jae 0x403c0a
sub eax, 0x37
shl dword [ebp - 0x811ba], 4
add dword [ebp - 0x811ba], eax
inc ecx
jmp 0x403bbe
cmp eax, 0x60
jbe 0x403c27
cmp eax, 0x67
jae 0x403c27
sub eax, 0x57
shl dword [ebp - 0x811ba], 4
add dword [ebp - 0x811ba], eax
inc ecx
jmp 0x403bbe
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x403c69
add ecx, dword [ebx + 0xd3c]
mov eax, dword [ebp - 0x811ba]
test dword [ecx], 8
je 0x403c58
cmp byte [ecx + 9], al
je 0x403c69
cmp byte [ecx + 0xb], al
je 0x403c69
add dword [ebp - 0x8117e], 0x214
jmp 0x403c31
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x403d6c
lea edx, [ebp - 0xd28]
push edx
mov eax, dword [ebp - 0xd4c]
push eax
mov eax, dword [eax]
call dword [eax + 0x68]
test eax, eax
je 0x403cd7
push 0xa
push 0xd343223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x403d6c
xor ecx, ecx
mov edx, dword [ebp - 0xd28]
cmp word [edx + ecx*4], 0
je 0x403d5d
cmp word [edx + ecx*4 + 2], 0
je 0x403d5d
movzx eax, byte [edx + ecx*4]
cmp al, 0x2f
jbe 0x403cfc
cmp al, 0x3a
jae 0x403cfc
sub al, 0x30
cmp al, 0x40
jbe 0x403d06
cmp al, 0x47
jae 0x403d06
sub al, 0x37
cmp al, 0x60
jbe 0x403d10
cmp al, 0x67
jge 0x403d5d
sub al, 0x57
shl eax, 4
mov ah, byte [edx + ecx*4 + 2]
cmp ah, 0x2f
jbe 0x403d24
cmp ah, 0x3a
jae 0x403d24
sub ah, 0x30
cmp ah, 0x40
jbe 0x403d31
cmp ah, 0x47
jae 0x403d31
sub ah, 0x37
cmp ah, 0x60
jbe 0x403d3e
cmp ah, 0x67
jge 0x403d5d
sub ah, 0x57
or al, ah
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd3c]
mov byte [edx + ecx + 0x14], al
mov byte [edx + ecx + 0x114], al
inc ecx
jmp 0x403cd9
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd3c]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0xd4c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
inc dword [ebp - 0xd30]
jmp 0x403af7
mov eax, dword [ebp - 0xd50]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0xd5c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 8]
push dword [ebp - 0xf7c]
call dword [sym.imp.oleaut32.dll_SysFreeString]
cmp dword [ebp - 0x82504], 0
jne 0x403e7b
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x403e00
add ecx, dword [ebx + 0xd3c]
cmp dword [ecx + 0xc], 0
jne 0x403df4
mov byte [ecx + 8], 0
mov byte [ecx + 9], 0
mov byte [ecx + 0xa], 0
mov byte [ecx + 0xb], 0
add dword [ebp - 0x8117e], 0x214
jmp 0x403dca
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xf78]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x107c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0xf78]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea eax, [ebp - 0x107c]
push 0xa
push 0xd732520
push 0x3a244445
push 0x5443454c
push 0x45535f45
push 0x4c494624
push eax
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
je 0x403e8f
cmp eax, 0x12
jne 0x4040ec
cmp dword [ebp - 0x82504], 0
jne 0x4040ec
mov dword [ebp - 0x8117e], 0
cmp dword [ebp - 0x82504], 0
jne 0x4040ec
mov edx, dword [ebp - 0x8117e]
cmp edx, dword [ebx + 0xd50]
jae 0x4040ec
add edx, dword [ebx + 0xd48]
mov ecx, dword [edx]
add ecx, dword [ebx + 0xd3c]
test dword [ecx], 4
je 0x4040dd
cmp dword [edx + 0x1c], 0
jne 0x403eeb
imul ecx, dword [edx + 0x18], 8
jmp 0x403eee
mov ecx, dword [edx + 0x1c]
mov dword [ebp - 0x81176], ecx
xor edx, edx
xor ecx, ecx
cmp ecx, dword [ebp - 0x81176]
jae 0x403f06
shl edx, 1
inc edx
inc ecx
jmp 0x403ef8
mov eax, dword [ebp - 0x8117e]
add eax, dword [ebx + 0xd48]
mov ecx, dword [eax + 0x14]
shl edx, cl
mov ecx, dword [ebp - 0x81176]
add ecx, dword [eax + 0x14]
cmp ecx, 8
ja 0x403f30
mov ecx, dword [eax + 0x10]
lea ecx, [eax + ecx]
or byte [ecx + 0x26], dl
jmp 0x403f75
cmp ecx, 0x10
ja 0x403f43
mov ecx, dword [eax + 0x10]
lea ecx, [eax + ecx]
or byte [ecx + 0x26], dh
or byte [ecx + 0x27], dl
jmp 0x403f75
cmp ecx, 0x18
ja 0x403f5e
mov ecx, dword [eax + 0x10]
lea ecx, [eax + ecx]
mov eax, edx
shr eax, 0x10
or byte [ecx + 0x26], al
or byte [ecx + 0x27], dh
or byte [ecx + 0x28], dl
jmp 0x403f75
mov ecx, dword [eax + 0x10]
lea ecx, [eax + ecx]
mov eax, edx
shr eax, 0x10
or byte [ecx + 0x26], ah
or byte [ecx + 0x27], al
or byte [ecx + 0x28], dh
or byte [ecx + 0x29], dl
mov dword [ebp - 0x8117a], 0
cmp dword [ebp - 0x82504], 0
jne 0x404043
mov ecx, dword [ebp - 0x8117a]
cmp ecx, dword [ebx + 0xd5c]
jae 0x404043
add ecx, dword [ebx + 0xd54]
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x8117e]
jne 0x404034
add eax, dword [ebx + 0xd48]
push 0x100
lea edx, [eax + 0x28]
push edx
lea edx, [ecx + 8]
push edx
lea edx, [ebp - 0x107c]
push edx
call fcn.00408358
mov ecx, dword [ebp - 0x8117a]
add ecx, dword [ebx + 0xd54]
push 0x100
lea edx, [ecx + 8]
push edx
lea edx, [ebp - 0x107c]
push edx
call fcn.004083df
test eax, eax
je 0x404034
push 0xa0d
push 0x39232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
add dword [ebp - 0x8117a], 0x308
jmp 0x403f7f
cmp dword [ebp - 0x82504], 0
jne 0x4040dd
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd48]
cmp byte [edx + 0x32c], 0
je 0x4040dd
cmp byte [edx + 0x32d], 0
je 0x4040dd
cmp dword [edx + 0x33a], 0
jne 0x404080
imul ecx, dword [edx + 0x332], 8
jmp 0x404086
mov ecx, dword [edx + 0x33a]
mov dword [ebp - 0x81176], ecx
mov dword [ebp - 0x30], 0
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x81176]
jae 0x4040dd
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd48]
add ecx, dword [edx + 0x336]
mov edx, dword [edx + 0x32e]
mov eax, ecx
shr eax, 3
sub edx, eax
and ecx, 7
xor eax, eax
inc eax
shl eax, cl
mov ecx, dword [ebp - 0x8117e]
add ecx, dword [ebx + 0xd48]
or byte [ecx + edx + 0x33c], al
inc dword [ebp - 0x30]
jmp 0x404093
add dword [ebp - 0x8117e], 0x43e
jmp 0x403ea6
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
jne 0x404b00
cmp dword [ebp - 0x82504], 0
jne 0x404217
push 0xa0d
push 0x24474e49
push 0x444f435f
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
mov dword [ebp - 0x8117e], 0
mov edx, dword [ebp - 0x8117e]
cmp edx, dword [ebx + 0xd44]
jae 0x404214
add edx, dword [ebx + 0xd3c]
mov ah, byte [edx + 8]
mov al, byte [edx + 9]
cmp ah, 0
je 0x404205
cmp al, 0
je 0x404205
mov byte [esp + 4], ah
mov byte [esp + 5], al
push esp
push 6
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0xffffffff
je 0x4041a4
cmp eax, 0
jne 0x4041b0
mov dword [ebp - 0x82504], 1
jmp 0x404205
cmp byte [ebp - 0x824f4], 0x7f
jne 0x4041d7
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd3c]
mov byte [edx + 8], 0
mov byte [edx + 9], 0
mov byte [edx + 0xa], 0
mov byte [edx + 0xb], 0
jmp 0x404205
mov edx, dword [ebp - 0x8117e]
add edx, dword [ebx + 0xd3c]
sub eax, 6
mov dword [edx + 0xc], eax
xor ecx, ecx
cmp ecx, dword [edx + 0xc]
jae 0x404205
mov al, byte [ebp + ecx - 0x824f2]
mov byte [edx + ecx + 0x14], al
mov byte [edx + ecx + 0x114], al
inc ecx
jmp 0x4041eb
add dword [ebp - 0x8117e], 0x214
jmp 0x404144
add esp, 8
cmp dword [ebp - 0x82504], 0
jne 0x404b00
push 0xa
push 0xd244b4f
push 0x5f474e49
push 0x444f435f
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov dword [ebx + 0xd24], 1
call fcn.00405f1b
cmp dword [ebx + 0xd28], 1
jne 0x404b00
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x4042e8
add ecx, dword [ebx + 0xd3c]
test dword [ecx], 2
je 0x4042dc
mov ecx, dword [ebp - 0x8117e]
add ecx, dword [ebx + 0xd3c]
push ecx
push 0
push 0
push 0xffffffffffffffff
lea edx, [ecx + 0x14]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
pop ecx
push eax
lea edx, [ebp - 0xf78]
push edx
push 0xffffffffffffffff
lea edx, [ecx + 0x14]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
push 0x5f
push esp
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 4
jmp 0x4042e8
add dword [ebp - 0x8117e], 0x214
jmp 0x404271
push 0
push 0x6c006d
push 0x78002e
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x813d2]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
push eax
lea edx, [ebp - 0xd24]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x813d2]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
lea edx, [ebp - 0xd24]
push edx
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
push 0
mov dword [ebp - 0x28], esp
push 0
push 0x6c006d
push 0x78002e
push 0x2a0000
push 0x65006c
push 0x690066
push 0x20004c
push 0x4d0058
mov dword [ebp - 0x24], esp
push 0
push 0
push 0
push 0
push 0
push 0x800
push 0
push 0
push 0
push 0
push 0x104
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0x4c
mov eax, dword [ebx + 0x8ac]
mov dword [esp + 4], eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleW]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xf78]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], 2
push esp
call dword [sym.imp.COMDLG32.DLL_GetSaveFileNameW]
add esp, 0x4c
add esp, 0x20
add esp, 4
add esp, 0xc
test eax, eax
je 0x404b00
lea edx, [ebp - 0xf78]
push edx
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0xf7c], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0x20
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
push 0
push 0x74006e
push 0x65006d
push 0x750063
push 0x6f0044
push 0x4d004f
push 0x44002e
push 0x32004c
push 0x4d0058
push 0x53004d
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0xd70]
push edx
push dword [ebp - 0x20]
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
add esp, 0x28
test eax, eax
je 0x4044b3
push 0
push 0xa0d3123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404af4
push 0x46000000
push 0xc0
push 0
push 0x20400
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0xd60], 0
lea edx, [ebp - 0xd60]
push edx
push dword [ebp - 0x1c]
push 1
push 0
lea edx, [ebp - 0xd70]
push edx
call dword [sym.imp.ole32.dll_CoCreateInstance]
add esp, 0x10
test eax, eax
je 0x404538
push 0
push 0xa0d3223
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404af4
push 0x3e
push 0x67006e
push 0x690064
push 0x6f0063
push 0x2f003c
push 0x3e0067
push 0x6e0069
push 0x64006f
push 0x63003c
mov ecx, esp
lea edx, [ebp - 0xd44]
push edx
push ecx
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0x104]
add esp, 0x24
test eax, eax
je 0x4045c7
push 0
push 0xa0d3323
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404ae8
push 0
push 0x67006e
push 0x690064
push 0x6f0063
mov ecx, esp
lea edx, [ebp - 0xd5c]
push edx
push ecx
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0x94]
add esp, 0x10
test eax, eax
je 0x40463d
push 0
push 0xa0d3423
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404ae8
push 0
push 0x640069
mov dword [ebp - 0x18], esp
push 0
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0xd58]
push edx
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push 0
push 1
push 0
push 2
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0xe0]
add esp, 4
add esp, 8
test eax, eax
je 0x4046bf
push 0
push 0xa0d3523
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404ae8
push 0
push 0x580038
push 0x2e0025
push 0x580038
push 0x2e0025
push 0x580038
push 0x2e0025
mov ecx, esp
push dword [ebp - 0x811c2]
push dword [ebp - 0x813d6]
push dword [ebp - 0x813da]
push ecx
lea edx, [ebp - 0xd24]
push edx
call dword [sym.imp.USER32.DLL_wsprintfW]
add esp, 0x14
add esp, 0x1c
lea edx, [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd58]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
test eax, eax
je 0x404763
push 0
push 0xa0d3623
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404adc
lea edx, [ebp - 0xd54]
push edx
push dword [ebp - 0xd58]
mov eax, dword [ebp - 0xd5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
test eax, eax
je 0x4047c5
push 0
push 0xa0d3723
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404adc
mov eax, dword [ebp - 0xd54]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x4049f5
push 0
push 0x580032
push 0x2e0025
push 0x610074
push 0x610064
mov ecx, dword [ebp - 0x8117e]
add ecx, dword [ebx + 0xd3c]
movzx eax, byte [ecx + 9]
mov ecx, esp
push eax
push ecx
lea edx, [ebp - 0xd24]
push edx
call dword [sym.imp.USER32.DLL_wsprintfW]
add esp, 0xc
add esp, 0x14
push 0
mov dword [ebp - 0x10], esp
lea edx, [ebp - 0xd4c]
push edx
push dword [ebp - 0x10]
lea edx, [ebp - 0xd24]
push edx
push 0
push 1
push 0
push 2
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0xe0]
add esp, 4
test eax, eax
je 0x4048a3
push 0
push 0xa0d3823
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x4049dd
push 0
push 0x580032
push 0x2e0025
mov word [ebp - 0xd24], 0
mov dword [ebp - 0x8117a], 0
lea edx, [ebp - 0xd24]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [ebp - 0x8117e]
mov edx, dword [ebp - 0x8117a]
add ecx, dword [ebx + 0xd3c]
cmp edx, dword [ecx + 0xc]
jae 0x40490a
movzx ecx, byte [ecx + edx + 0x14]
push ecx
lea edx, [esp + 4]
push edx
lea edx, [ebp + eax*2 - 0xd24]
push edx
call dword [sym.imp.USER32.DLL_wsprintfW]
add esp, 0xc
inc dword [ebp - 0x8117a]
jmp 0x4048c2
add esp, 0xc
lea edx, [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd4c]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
test eax, eax
je 0x404966
push 0
push 0xa0d3923
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x4049d1
lea edx, [ebp - 0xd48]
push edx
push dword [ebp - 0xd4c]
mov eax, dword [ebp - 0xd5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
test eax, eax
je 0x4049c5
push 0xa
push 0xd303123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x4049d1
mov eax, dword [ebp - 0xd48]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0xd4c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
cmp dword [ebp - 0x82504], 0
jne 0x4049f5
add dword [ebp - 0x8117e], 0x214
jmp 0x4047db
cmp dword [ebp - 0x82504], 0
jne 0x404adc
push 0
push dword [ebp - 0xf7c]
push 0
push 8
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 0x108]
test eax, eax
je 0x404a63
push 0xa
push 0xd313123
push 0x20726f72
push 0x72652074
push 0x6e656d75
push 0x636f444d
push 0x4f442e32
push 0x4c4d5853
push 0x4d202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x82504], 1
jmp 0x404adc
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xf78]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x107c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0xf78]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea eax, [ebp - 0x107c]
push 0xa0d
push 0x7325203a
push 0x24444556
push 0x41535f45
push 0x4c494624
push eax
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
mov eax, dword [ebp - 0xd58]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0xd60]
push eax
mov eax, dword [eax]
call dword [eax + 8]
push dword [ebp - 0xf7c]
call dword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x12
je 0x404b14
cmp eax, 0x28
jne 0x40561d
cmp dword [ebp - 0x82504], 0
jne 0x404c09
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x12
jne 0x404bcd
mov dword [ebx + 0xd24], 0
call fcn.00405f1b
cmp dword [ebx + 0xd28], 0
jne 0x404b54
mov dword [ebp - 0x82504], 1
jmp 0x404bcd
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x404b84
add ecx, dword [ebx + 0xd3c]
cmp dword [ecx + 4], 0
jne 0x404b84
add dword [ebp - 0x8117e], 0x214
jmp 0x404b5e
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jb 0x404bcd
push 0xa
push 0xd244554
push 0x4952575f
push 0x4f545f41
push 0x5441445f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x28
jne 0x404c09
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x404c09
add ecx, dword [ebx + 0xd3c]
mov dword [ecx + 4], 1
add dword [ebp - 0x8117e], 0x214
jmp 0x404be2
cmp dword [ebp - 0x82504], 0
jne 0x4053b5
mov dword [ebp - 0x7e4], 0
push 0xa0d24
push 0x474e4944
push 0x4f435f45
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push dword [ebp - 0x813da]
push 0
push 4
push 0
push 0x40
push 0
push 6
push dword [ebp - 0x813d6]
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x404c9d
mov dword [ebp - 0x82504], 1
jmp 0x4053b5
cmp dword [ebp - 0x82504], 0
jne 0x404dd0
push 0x23e
push 0x1c000000
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x1f4
push 0
push 0
mov dword [ebp - 0xc], esp
push 0
push dword [ebp - 0xc]
push 6
call dword [edi]
add esp, 0x2c
push 0x23e
push 0xdf070000
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x1f4
push 1
push 0
mov dword [ebp - 8], esp
push 0
push dword [ebp - 8]
push 6
call dword [edi]
add esp, 0x2c
push 0x9210
push 0x1c000000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x404d34
mov dword [ebp - 0x82504], 1
jmp 0x404d68
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x404d60
mov dword [ebp - 0x82504], 1
jmp 0x404d68
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
add esp, 8
push 0x9210
push 0xdf070000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x404d99
mov dword [ebp - 0x82504], 1
jmp 0x404dcd
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
cmp eax, 0xffffffff
jne 0x404dc5
mov dword [ebp - 0x82504], 1
jmp 0x404dcd
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
add esp, 8
cmp dword [ebp - 0x82504], 0
jne 0x4053b5
mov dword [ebp - 0x8117e], 0
mov ecx, dword [ebp - 0x8117e]
cmp ecx, dword [ebx + 0xd44]
jae 0x4053b5
add ecx, dword [ebx + 0xd3c]
cmp dword [ecx + 4], 0
jne 0x404e16
add dword [ebp - 0x8117e], 0x214
jmp 0x404de7
cmp byte [ecx + 0xa], 0
je 0x4053b5
mov al, byte [ecx + 0xa]
mov byte [ebp - 0x7d8], al
mov al, byte [ecx + 0xb]
mov byte [ebp - 0x7d7], al
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x7e0], eax
push eax
lea edx, [ecx + 0x14]
push edx
lea edx, [ebp - 0x7d6]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
add dword [ebp - 0x7e0], 6
mov eax, dword [ebp - 0x813da]
mov dword [ebp - 0x7dc], eax
lea edx, [ebp - 0x7dc]
push edx
push dword [ebp - 0x7e0]
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0xffffffff
je 0x404e96
cmp eax, 0
jne 0x404ea5
mov dword [ebp - 0x82504], 1
jmp 0x4053b5
cmp byte [ebp - 0x824f4], 0x7f
jne 0x405321
cmp byte [ebp - 0x824f2], 0x33
je 0x404ed1
cmp byte [ebp - 0x824f2], 0x22
je 0x404ed1
cmp byte [ebp - 0x824f2], 0x80
jne 0x40531c
imul ecx, dword [ebp - 0x7e4], 0x120
cmp ecx, dword [ebx + 0xd38]
jae 0x4052a3
add ecx, dword [ebx + 0xd30]
mov eax, dword [ebp - 0x813da]
mov dword [ebp - 0x6c6], eax
mov dword [ebp - 0x6b6], eax
mov eax, dword [ecx + 4]
mov byte [ebp - 0x6c2], ah
mov byte [ebp - 0x6c1], al
mov eax, dword [ecx + 8]
mov dword [ebp - 0x6d6], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x6d2], eax
mov eax, dword [ecx + 0x10]
mov byte [ebp - 0x6b2], ah
mov byte [ebp - 0x6b1], al
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x6ce], eax
mov eax, dword [ecx + 0x18]
mov dword [ebp - 0x6ca], eax
mov byte [ebp - 0x6a6], 0x20
mov byte [ebp - 0x6a5], 0xf4
mov dword [ebp - 0x6a4], 0
mov eax, dword [ecx + 0x1c]
mov dword [ebp - 0x628], eax
push eax
lea edx, [ecx + 0x20]
push edx
lea edx, [ebp - 0x624]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x82500], 0x10
lea edx, [ebp - 0x6c6]
push edx
push 6
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0
je 0x404fb0
cmp eax, 0xffffffff
jne 0x404fbf
mov dword [ebp - 0x82504], 1
jmp 0x40511b
cmp byte [ebp - 0x824f4], 0x7f
jne 0x4050a0
cmp byte [ebp - 0x824f2], 0x36
jne 0x404fea
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x82500]
jne 0x404f81
jmp 0x40502c
cmp byte [ebp - 0x824f2], 0x37
jne 0x40500c
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x82500]
jne 0x404f81
jmp 0x40502c
cmp byte [ebp - 0x824f2], 0x22
jne 0x40502c
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x82500]
jne 0x404f81
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x405080
xor eax, eax
jmp 0x40508a
cmp eax, 0x20
jbe 0x40508a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x40511b
cmp byte [ebp - 0x824f4], 0x67
je 0x40511b
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4050fd
xor eax, eax
jmp 0x405107
cmp eax, 0x20
jbe 0x405107
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x4052a3
mov eax, dword [ebp - 0x6d6]
push dword [ebp - 0x6d2]
lea edx, [ebp + eax - 0x824f4]
push edx
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push 0xfa
lea edx, [ebp - 0x814d8]
push edx
push 0xf6
lea edx, [ebp - 0x6a6]
push edx
call dword [ebx + 0x40]
cmp eax, dword [ebp - 0x6ca]
je 0x4051b2
push 0xa0d30
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x4052a3
mov ecx, dword [ebp - 0x6ce]
push eax
lea edx, [ebp - 0x814d8]
push edx
lea edx, [ebp + ecx - 0x6b2]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x6ce]
add ecx, dword [ebp - 0x6ca]
lea edx, [ebp - 0x6b6]
push edx
lea edx, [ecx + 4]
push edx
lea edx, [ebp - 0x824f8]
push edx
push 0x3e8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0
je 0x40520e
cmp eax, 0xffffffff
jne 0x40521d
mov dword [ebp - 0x82504], 1
jmp 0x4052a3
cmp byte [ebp - 0x824f4], 0x67
je 0x405298
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x405278
xor eax, eax
jmp 0x405282
cmp eax, 0x20
jbe 0x405282
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4052a3
inc dword [ebp - 0x7e4]
jmp 0x404e63
cmp dword [ebp - 0x82504], 0
jne 0x40531c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4052fe
xor eax, eax
jmp 0x405308
cmp eax, 0x20
jbe 0x405308
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4053b5
cmp byte [ebp - 0x824f4], 0x7b
je 0x40539c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40537c
xor eax, eax
jmp 0x405386
cmp eax, 0x20
jbe 0x405386
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x4053b5
pushal
push 0
call dword [sym.imp.USER32.DLL_MessageBeep]
popal
add dword [ebp - 0x8117e], 0x214
jmp 0x404de7
cmp dword [ebp - 0x82504], 0
jne 0x40542d
push 0xc8
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 2
push 0xff0285
push 0x1c000000
push esp
push 9
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4053fc
mov dword [ebp - 0x82504], 1
jmp 0x40542d
push 2
push 0xff0285
push 0xdf070000
push esp
push 9
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40542d
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x405502
push 0xc8
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x111
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 6
lea edx, [ebp - 0x824f8]
push edx
push 0xbb8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
test eax, eax
je 0x40547d
cmp eax, 0xffffffff
jne 0x405489
mov dword [ebp - 0x82504], 1
jmp 0x405502
cmp byte [ebp - 0x824f4], 0x51
je 0x405502
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4054e4
xor eax, eax
jmp 0x4054ee
cmp eax, 0x20
jbe 0x4054ee
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x405576
push 0xc8
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8110
push 0x1c000000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 8
cmp eax, 0xffffffff
jne 0x405547
mov dword [ebp - 0x82504], 1
jmp 0x405576
push 0x8110
push 0xdf070000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 8
cmp eax, 0xffffffff
jne 0x405576
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x4055ea
push 0xc8
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x9210
push 0x1c000000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 8
cmp eax, 0xffffffff
jne 0x4055bb
mov dword [ebp - 0x82504], 1
jmp 0x4055ea
push 0x9210
push 0xdf070000
push esp
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d72
add esp, 8
cmp eax, 0xffffffff
jne 0x4055ea
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x40561d
push 0xa0d
push 0x244b4f5f
push 0x474e4944
push 0x4f435f45
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
je 0x405632
cmp eax, 0x12
je 0x405632
cmp eax, 0x28
jne 0x40569b
cmp dword [ebx + 0xd1c], 0
je 0x405647
push dword [ebx + 0xd1c]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebx + 0xd30], 0
je 0x40565c
push dword [ebx + 0xd30]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebx + 0xd3c], 0
je 0x405671
push dword [ebx + 0xd3c]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebx + 0xd48], 0
je 0x405686
push dword [ebx + 0xd48]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebx + 0xd54], 0
je 0x40569b
push dword [ebx + 0xd54]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x405bc9
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x82504], 0
jne 0x40574d
push 0xa
push 4
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40570b
mov dword [ebp - 0x5b0], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x5ac], eax
push dword [ebp - 0x5b0]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40570b
mov dword [ebp - 0x5a8], eax
test eax, eax
jne 0x40574d
push 0xa0d31
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x40582b
mov edx, dword [ebp - 0x5a8]
cmp byte [edx + 3], 8
je 0x4057a9
push 0xa0d32
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
jmp 0x40582b
lea ecx, [edx - 4]
add ecx, dword [ebp - 0x5ac]
mov ecx, dword [ecx]
mov dword [ebp - 0x5a4], ecx
push dword [ebp - 0x5a4]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x5a0], eax
push dword [ebp - 0x5a4]
push dword [ebp - 0x5a0]
push dword [ebp - 0x5ac]
push dword [ebp - 0x5a8]
call dword [ebx + 0x4c]
test eax, eax
jne 0x40582b
push 0xa0d33
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x82504], 1
cmp dword [ebp - 0x82504], 0
jne 0x405b9f
push 0xa0d24
push 0x4354445f
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x14
push 0xff0018
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 8
lea edx, [ebp - 0x824f8]
push edx
push 0xbb8
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0
je 0x405891
cmp eax, 0xffffffff
jne 0x4058a0
mov dword [ebp - 0x82504], 1
jmp 0x405b9f
cmp byte [ebp - 0x824f4], 0x58
je 0x40591e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4058fb
xor eax, eax
jmp 0x405905
cmp eax, 0x20
jbe 0x405905
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x405b9f
movzx eax, byte [ebp - 0x824f3]
mov dword [ebp - 0x594], eax
push 0xa
push 0xd642520
push 0x3a24544e
push 0x554f435f
push 0x43544424
push dword [ebp - 0x594]
lea eax, [esp + 4]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
mov dword [ebp - 0x590], 0
mov ecx, dword [ebp - 0x590]
cmp ecx, dword [ebp - 0x594]
jae 0x405b9f
mov byte [ebp - 0x47c], 0
mov byte [ebp - 0x378], 0
mov dword [ebp - 0x580], 0
imul ecx, ecx, 3
movzx eax, byte [ebp + ecx - 0x824f1]
mov dword [ebp - 0x588], eax
movzx eax, byte [ebp + ecx - 0x824f0]
mov dword [ebp - 0x584], eax
movzx eax, byte [ebp + ecx - 0x824f2]
mov dword [ebp - 0x58c], eax
shr eax, 4
and eax, 0xc
cmp eax, 5
jae 0x4059f3
test eax, eax
je 0x4059e7
cmp eax, 4
jne 0x4059e5
mov dword [ebp - 0x580], 0x43
jmp 0x4059f1
mov dword [ebp - 0x580], 0x50
jmp 0x405a13
cmp eax, 8
je 0x405a09
cmp eax, 0xc
jne 0x405a07
mov dword [ebp - 0x580], 0x55
jmp 0x405a13
mov dword [ebp - 0x580], 0x42
push 0x58
push 0x322e252d
push 0x58322e25
push 0x58322e25
lea edx, [ebp - 0x580]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
mov ecx, dword [ebp - 0x58c]
and ecx, 0x3f
push dword [ebp - 0x584]
push dword [ebp - 0x588]
push ecx
lea edx, [esp + 0xc]
push edx
lea edx, [ebp + eax - 0x580]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x14
add esp, 0x10
mov eax, dword [ebp - 0x584]
and eax, 0x60
cmp eax, 0x20
jne 0x405a8d
push 0x29
push 0x6465726f
push 0x74732820
push esp
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0xc
jmp 0x405ac4
cmp eax, 0x60
jne 0x405ab1
push 0x29
push 0x65766974
push 0x63612820
push esp
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0xc
jmp 0x405ac4
push 9
push esp
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 4
mov ecx, dword [ebp - 0x5a0]
mov eax, dword [ecx]
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x598], 0
mov ecx, dword [ebp - 0x598]
cmp ecx, dword [ebp - 0x59c]
jae 0x405b54
imul edx, ecx, 0xe
add edx, dword [ebp - 0x5a0]
movzx eax, byte [edx + 4]
cmp eax, dword [ebp - 0x811be]
je 0x405b07
inc dword [ebp - 0x598]
jmp 0x405adc
xor ecx, ecx
cmp ecx, 9
jae 0x405b29
mov al, byte [ebp + ecx - 0x580]
test al, al
je 0x405b29
cmp byte [edx + ecx + 5], 0
je 0x405b29
cmp al, byte [edx + ecx + 5]
jne 0x405b29
inc ecx
jmp 0x405b09
cmp ecx, 8
ja 0x405b35
cmp byte [edx + ecx + 5], 0
je 0x405b3d
inc dword [ebp - 0x598]
jmp 0x405adc
mov ecx, dword [edx + 0xe]
add ecx, dword [ebp - 0x5a0]
push ecx
lea edx, [ebp - 0x378]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea eax, [ebp - 0x378]
lea ecx, [ebp - 0x47c]
lea edx, [ebp - 0x580]
push 0xa
push 0xd732509
push 0x73257325
push eax
push ecx
push edx
lea eax, [esp + 0xc]
push eax
lea eax, [ebp - 0x82a04]
push eax
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x82a04]
push eax
call dword [ebx + 0x30]
inc dword [ebp - 0x590]
jmp 0x405970
cmp dword [ebp - 0x5a8], 0
je 0x405bb4
push dword [ebp - 0x5b0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x5a0], 0
je 0x405bc9
push dword [ebp - 0x5a0]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x405cef
cmp dword [ebp - 0x82504], 0
jne 0x405cef
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xff14
push 0
mov eax, dword [ebp - 0x813da]
mov dword [esp], eax
push esp
push 7
lea edx, [ebp - 0x824f8]
push edx
push 0x1388
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405d3e
cmp eax, 0
je 0x405c40
cmp eax, 0xffffffff
jne 0x405c4f
mov dword [ebp - 0x82504], 1
jmp 0x405cef
cmp byte [ebp - 0x824f4], 0x54
je 0x405cca
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x824f8]
mov edx, esp
cmp eax, 0xffffffff
jne 0x405caa
xor eax, eax
jmp 0x405cb4
cmp eax, 0x20
jbe 0x405cb4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040873c
mov dword [ebp - 0x82504], 1
jmp 0x405cef
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
push 0
mov dword [ebp - 4], esp
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8