Function at 0x402430
Capabilities:
Check for time delay via gettickcount
Delete file
Encrypt data using speck
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3600
push edi
lea edi, [ebp - 0x3600]
push 1
call dword [ebx + 0x44]
cmp dword [esi + 0x270], 0x6d637424
jne 0x4024ca
cmp dword [esi + 0x274], 0x64726f66
jne 0x4024ca
cmp dword [esi + 0x278], 0x315f3738
jne 0x4024ca
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x4024ca
cmp dword [esi + 0x280], 0x6f502431
jne 0x4024ca
cmp dword [esi + 0x284], 0x53726577
jne 0x4024ca
cmp dword [esi + 0x288], 0x6b6f7274
jne 0x4024ca
cmp dword [esi + 0x28c], 0x35315b65
jne 0x4024ca
cmp dword [esi + 0x290], 0x5d6b3430
jne 0x4024ca
cmp dword [esi + 0x294], 0x6e614320
jne 0x4024ca
cmp byte [esi + 0x298], 0
je 0x402677
cmp dword [esi + 0x270], 0x6d637424
jne 0x40256e
cmp dword [esi + 0x274], 0x64726f66
jne 0x40256e
cmp dword [esi + 0x278], 0x315f3738
jne 0x40256e
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x40256e
cmp dword [esi + 0x280], 0x54282431
jne 0x40256e
cmp dword [esi + 0x284], 0x29545345
jne 0x40256e
cmp dword [esi + 0x288], 0x65776f50
jne 0x40256e
cmp dword [esi + 0x28c], 0x72745372
jne 0x40256e
cmp dword [esi + 0x290], 0x5b656b6f
jne 0x40256e
cmp dword [esi + 0x294], 0x34303531
jne 0x40256e
cmp dword [esi + 0x298], 0x43205d6b
jne 0x40256e
cmp word [esi + 0x29c], 0x6e61
jne 0x40256e
cmp byte [esi + 0x29e], 0
je 0x402677
cmp dword [esi + 0x270], 0x6d637424
jne 0x4025e7
cmp dword [esi + 0x274], 0x64726f66
jne 0x4025e7
cmp dword [esi + 0x278], 0x315f3738
jne 0x4025e7
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x4025e7
cmp dword [esi + 0x280], 0x54412432
jne 0x4025e7
cmp dword [esi + 0x284], 0x38523620
jne 0x4025e7
cmp dword [esi + 0x288], 0x35315b30
jne 0x4025e7
cmp dword [esi + 0x28c], 0x5d6b3430
jne 0x4025e7
cmp dword [esi + 0x290], 0x6e614320
jne 0x4025e7
cmp byte [esi + 0x294], 0
je 0x402677
cmp dword [esi + 0x270], 0x6d637424
jne 0x40267f
cmp dword [esi + 0x274], 0x64726f66
jne 0x40267f
cmp dword [esi + 0x278], 0x315f3738
jne 0x40267f
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x40267f
cmp dword [esi + 0x280], 0x54282432
jne 0x40267f
cmp dword [esi + 0x284], 0x29545345
jne 0x40267f
cmp dword [esi + 0x288], 0x36205441
jne 0x40267f
cmp dword [esi + 0x28c], 0x5b303852
jne 0x40267f
cmp dword [esi + 0x290], 0x34303531
jne 0x40267f
cmp dword [esi + 0x294], 0x43205d6b
jne 0x40267f
cmp word [esi + 0x298], 0x6e61
jne 0x40267f
cmp byte [esi + 0x29a], 0
jne 0x40267f
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x40268b
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x405682
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x402808
push eax
push edi
call fcn.00405f76
cmp eax, 1
jne 0x4026bf
mov dword [edi], 0x406377
jmp 0x4026f0
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x402806
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x402806
lea edx, [ebp - 0x33a0]
push edx
lea edx, [ebp - 0x33f0]
push edx
lea edx, [ebp - 0x3440]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x402806
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3440]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x33f0]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402848
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x405682
mov dword [ebp - 0x315c], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x3350]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x304c], 0
mov dword [ebp - 0xfe8], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4029b8
mov byte [ebp - 0x1020], 0x29
mov byte [ebp - 0x101f], 2
push 0xfa
lea edx, [ebp - 0x3256]
push edx
push 2
lea edx, [ebp - 0x1020]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x40291d
push 0xa0d
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x4029b8
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0x628], esp
push 0x706870
push 0x2e747365
push 0x745f6e61
push 0x635f656b
push 0x6f727473
push 0x7265776f
push 0x705f6d63
push 0x745f6472
push 0x6f662f74
push 0x7365742f
lea edx, [ebp - 0x101c]
push edx
lea edx, [ebp - 0x3256]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0x628]
call fcn.00406ec6
mov dword [ebp - 0x304c], eax
add esp, 0x28
add esp, 0xc
test eax, eax
jne 0x4029b8
mov byte [ebp - 0x101e], 0x2a
mov byte [ebp - 0x101d], 0xa
push 0xfa
lea edx, [ebp - 0x3256]
push edx
push 0xa
lea edx, [ebp - 0x101e]
push edx
call dword [ebx + 0x40]
cmp dword [esi + 0x270], 0x6d637424
jne 0x402a3d
cmp dword [esi + 0x274], 0x64726f66
jne 0x402a3d
cmp dword [esi + 0x278], 0x315f3738
jne 0x402a3d
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402a3d
cmp dword [esi + 0x280], 0x6f502431
jne 0x402a3d
cmp dword [esi + 0x284], 0x53726577
jne 0x402a3d
cmp dword [esi + 0x288], 0x6b6f7274
jne 0x402a3d
cmp dword [esi + 0x28c], 0x35315b65
jne 0x402a3d
cmp dword [esi + 0x290], 0x5d6b3430
jne 0x402a3d
cmp dword [esi + 0x294], 0x6e614320
jne 0x402a3d
cmp byte [esi + 0x298], 0
je 0x402c16
cmp dword [esi + 0x270], 0x6d637424
jne 0x402ae1
cmp dword [esi + 0x274], 0x64726f66
jne 0x402ae1
cmp dword [esi + 0x278], 0x315f3738
jne 0x402ae1
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402ae1
cmp dword [esi + 0x280], 0x54282431
jne 0x402ae1
cmp dword [esi + 0x284], 0x29545345
jne 0x402ae1
cmp dword [esi + 0x288], 0x65776f50
jne 0x402ae1
cmp dword [esi + 0x28c], 0x72745372
jne 0x402ae1
cmp dword [esi + 0x290], 0x5b656b6f
jne 0x402ae1
cmp dword [esi + 0x294], 0x34303531
jne 0x402ae1
cmp dword [esi + 0x298], 0x43205d6b
jne 0x402ae1
cmp word [esi + 0x29c], 0x6e61
jne 0x402ae1
cmp byte [esi + 0x29e], 0
je 0x402c16
cmp dword [esi + 0x270], 0x6d637424
jne 0x402b5a
cmp dword [esi + 0x274], 0x64726f66
jne 0x402b5a
cmp dword [esi + 0x278], 0x315f3738
jne 0x402b5a
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402b5a
cmp dword [esi + 0x280], 0x54412432
jne 0x402b5a
cmp dword [esi + 0x284], 0x38523620
jne 0x402b5a
cmp dword [esi + 0x288], 0x35315b30
jne 0x402b5a
cmp dword [esi + 0x28c], 0x5d6b3430
jne 0x402b5a
cmp dword [esi + 0x290], 0x6e614320
jne 0x402b5a
cmp byte [esi + 0x294], 0
je 0x402c16
cmp dword [esi + 0x270], 0x6d637424
jne 0x40330b
cmp dword [esi + 0x274], 0x64726f66
jne 0x40330b
cmp dword [esi + 0x278], 0x315f3738
jne 0x40330b
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x40330b
cmp dword [esi + 0x280], 0x54282432
jne 0x40330b
cmp dword [esi + 0x284], 0x29545345
jne 0x40330b
cmp dword [esi + 0x288], 0x36205441
jne 0x40330b
cmp dword [esi + 0x28c], 0x5b303852
jne 0x40330b
cmp dword [esi + 0x290], 0x34303531
jne 0x40330b
cmp dword [esi + 0x294], 0x43205d6b
jne 0x40330b
cmp word [esi + 0x298], 0x6e61
jne 0x40330b
cmp byte [esi + 0x29a], 0
jne 0x40330b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40330b
cmp dword [ebp - 0x304c], 0
jne 0x40330b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x402f23
cmp dword [esi + 0x270], 0x6d637424
jne 0x402cc6
cmp dword [esi + 0x274], 0x64726f66
jne 0x402cc6
cmp dword [esi + 0x278], 0x315f3738
jne 0x402cc6
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402cc6
cmp dword [esi + 0x280], 0x6f502431
jne 0x402cc6
cmp dword [esi + 0x284], 0x53726577
jne 0x402cc6
cmp dword [esi + 0x288], 0x6b6f7274
jne 0x402cc6
cmp dword [esi + 0x28c], 0x35315b65
jne 0x402cc6
cmp dword [esi + 0x290], 0x5d6b3430
jne 0x402cc6
cmp dword [esi + 0x294], 0x6e614320
jne 0x402cc6
cmp byte [esi + 0x298], 0
je 0x402d7a
cmp dword [esi + 0x270], 0x6d637424
jne 0x402dc0
cmp dword [esi + 0x274], 0x64726f66
jne 0x402dc0
cmp dword [esi + 0x278], 0x315f3738
jne 0x402dc0
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402dc0
cmp dword [esi + 0x280], 0x54282431
jne 0x402dc0
cmp dword [esi + 0x284], 0x29545345
jne 0x402dc0
cmp dword [esi + 0x288], 0x65776f50
jne 0x402dc0
cmp dword [esi + 0x28c], 0x72745372
jne 0x402dc0
cmp dword [esi + 0x290], 0x5b656b6f
jne 0x402dc0
cmp dword [esi + 0x294], 0x34303531
jne 0x402dc0
cmp dword [esi + 0x298], 0x43205d6b
jne 0x402dc0
cmp word [esi + 0x29c], 0x6e61
jne 0x402dc0
cmp byte [esi + 0x29e], 0
jne 0x402dc0
mov dword [ebp - 0x1014], 0x401080
mov dword [ebp - 0x1010], pe_nt_image_headers32
mov dword [ebp - 0x100c], 0x50
mov dword [ebp - 0x1008], 2
mov dword [ebp - 0x1004], 0x401000
mov dword [ebp - 0x1000], 0
mov dword [ebp - 0xffc], 0x40
cmp dword [esi + 0x270], 0x6d637424
jne 0x402e39
cmp dword [esi + 0x274], 0x64726f66
jne 0x402e39
cmp dword [esi + 0x278], 0x315f3738
jne 0x402e39
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402e39
cmp dword [esi + 0x280], 0x54412432
jne 0x402e39
cmp dword [esi + 0x284], 0x38523620
jne 0x402e39
cmp dword [esi + 0x288], 0x35315b30
jne 0x402e39
cmp dword [esi + 0x28c], 0x5d6b3430
jne 0x402e39
cmp dword [esi + 0x290], 0x6e614320
jne 0x402e39
cmp byte [esi + 0x294], 0
je 0x402edd
cmp dword [esi + 0x270], 0x6d637424
jne 0x402f23
cmp dword [esi + 0x274], 0x64726f66
jne 0x402f23
cmp dword [esi + 0x278], 0x315f3738
jne 0x402f23
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x402f23
cmp dword [esi + 0x280], 0x54282432
jne 0x402f23
cmp dword [esi + 0x284], 0x29545345
jne 0x402f23
cmp dword [esi + 0x288], 0x36205441
jne 0x402f23
cmp dword [esi + 0x28c], 0x5b303852
jne 0x402f23
cmp dword [esi + 0x290], 0x34303531
jne 0x402f23
cmp dword [esi + 0x294], 0x43205d6b
jne 0x402f23
cmp word [esi + 0x298], 0x6e61
jne 0x402f23
cmp byte [esi + 0x29a], 0
jne 0x402f23
mov dword [ebp - 0x1014], 0x4010d0
mov dword [ebp - 0x1010], 0xd0
mov dword [ebp - 0x100c], 0x50
mov dword [ebp - 0x1008], 3
mov dword [ebp - 0x1004], 0x401040
mov dword [ebp - 0x1000], 0x40
mov dword [ebp - 0xffc], 0x40
push 0x320
push 0
lea edx, [ebp - 0xee6]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0xfdc], 0x21
mov dword [ebp - 0xfe4], 0
mov ecx, dword [ebp - 0xfe4]
cmp ecx, dword [ebp - 0x100c]
jae 0x403039
mov eax, dword [ebp - 0x1010]
lea eax, [eax + ecx]
mov dword [ebp - 0xfda], eax
mov edx, dword [ebp - 0x100c]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x402f9b
cmp ecx, 0xf0
jae 0x402f9b
mov eax, dword [ebp - 0x1014]
add eax, dword [ebp - 0xfe4]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0xfd6], al
inc ecx
jmp 0x402f76
mov dword [ebp - 0xfe0], ecx
add ecx, 4
mov byte [ebp - 0xfdb], cl
push 0xfa
lea edx, [ebp - 0x3256]
push edx
push 0xf6
lea edx, [ebp - 0xfdc]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x403009
push 0xa0d
push 0x32232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x403039
mov eax, dword [ebp - 0xfe0]
mov ecx, dword [ebp - 0xfe4]
add dword [ebp - 0xfe4], eax
push eax
lea edx, [ebp - 0x3256]
push edx
lea edx, [ebp + ecx - 0xee6]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x402f4b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40330b
cmp dword [ebp - 0x304c], 0
jne 0x40316b
push 0x320
push 0
lea edx, [ebp - 0xbc6]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0xfdc], 0x21
mov dword [ebp - 0xfe4], 0
mov ecx, dword [ebp - 0xfe4]
cmp ecx, dword [ebp - 0xffc]
jae 0x40316b
mov eax, dword [ebp - 0x1000]
lea eax, [eax + ecx]
mov dword [ebp - 0xfda], eax
mov edx, dword [ebp - 0xffc]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x4030cd
cmp ecx, 0xf0
jae 0x4030cd
mov eax, dword [ebp - 0x1004]
add eax, dword [ebp - 0xfe4]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0xfd6], al
inc ecx
jmp 0x4030a8
mov dword [ebp - 0xfe0], ecx
add ecx, 4
mov byte [ebp - 0xfdb], cl
push 0xfa
lea edx, [ebp - 0x3256]
push edx
push 0xf6
lea edx, [ebp - 0xfdc]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x40313b
push 0xa0d
push 0x33232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x40316b
mov eax, dword [ebp - 0xfe0]
mov ecx, dword [ebp - 0xfe4]
add dword [ebp - 0xfe4], eax
push eax
lea edx, [ebp - 0x3256]
push edx
lea edx, [ebp + ecx - 0xbc6]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x40307d
cmp dword [ebp - 0x304c], 0
jne 0x40330b
push 0xa
push dword [ebp - 0x1008]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
jne 0x4031d0
push 0xa0d
push 0x34232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x40330b
mov dword [ebp - 0xff8], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0xff4], eax
push dword [ebp - 0xff8]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
jne 0x40323c
push 0xa0d
push 0x35232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x40330b
mov dword [ebp - 0xff0], eax
cmp byte [eax + 3], 8
je 0x403288
push 0xa0d
push 0x36232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x4032ff
mov ecx, dword [ebp - 0xff4]
mov eax, dword [ecx + eax - 4]
mov dword [ebp - 0xfec], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0xfe8], eax
push dword [ebp - 0xfec]
push eax
push dword [ebp - 0xff4]
push dword [ebp - 0xff0]
call dword [ebx + 0x4c]
test eax, eax
jne 0x4032ff
push 0xa0d
push 0x37232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
push dword [ebp - 0xff0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [esi + 0x270], 0x6d637424
jne 0x403390
cmp dword [esi + 0x274], 0x64726f66
jne 0x403390
cmp dword [esi + 0x278], 0x315f3738
jne 0x403390
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x403390
cmp dword [esi + 0x280], 0x6f502431
jne 0x403390
cmp dword [esi + 0x284], 0x53726577
jne 0x403390
cmp dword [esi + 0x288], 0x6b6f7274
jne 0x403390
cmp dword [esi + 0x28c], 0x35315b65
jne 0x403390
cmp dword [esi + 0x290], 0x5d6b3430
jne 0x403390
cmp dword [esi + 0x294], 0x6e614320
jne 0x403390
cmp byte [esi + 0x298], 0
je 0x4034a5
cmp dword [esi + 0x270], 0x6d637424
jne 0x403430
cmp dword [esi + 0x274], 0x64726f66
jne 0x403430
cmp dword [esi + 0x278], 0x315f3738
jne 0x403430
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x403430
cmp dword [esi + 0x280], 0x54282431
jne 0x403430
cmp dword [esi + 0x284], 0x29545345
jne 0x403430
cmp dword [esi + 0x288], 0x65776f50
jne 0x403430
cmp dword [esi + 0x28c], 0x72745372
jne 0x403430
cmp dword [esi + 0x290], 0x5b656b6f
jne 0x403430
cmp dword [esi + 0x294], 0x34303531
jne 0x403430
cmp dword [esi + 0x298], 0x43205d6b
jne 0x403430
cmp word [esi + 0x29c], 0x6e61
jne 0x403430
cmp byte [esi + 0x29e], 0
je 0x4034a5
cmp dword [esi + 0x270], 0x6d637424
jne 0x4034a5
cmp dword [esi + 0x274], 0x64726f66
jne 0x4034a5
cmp dword [esi + 0x278], 0x315f3738
jne 0x4034a5
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x4034a5
cmp dword [esi + 0x280], 0x54412432
jne 0x4034a5
cmp dword [esi + 0x284], 0x38523620
jne 0x4034a5
cmp dword [esi + 0x288], 0x35315b30
jne 0x4034a5
cmp dword [esi + 0x28c], 0x5d6b3430
jne 0x4034a5
cmp dword [esi + 0x290], 0x6e614320
jne 0x4034a5
cmp byte [esi + 0x294], 0
je 0x4034a5
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4034c8
cmp eax, 0xb
je 0x4034c8
cmp eax, 0x17
je 0x4034c8
cmp eax, 0x18
je 0x4034c8
cmp eax, 0x1a
jne 0x4053aa
mov byte [esi + 0x6c], 0
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4034fa
mov dword [ebp - 0x304c], 1
jmp 0x4053aa
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x403527
mov dword [ebp - 0x304c], 1
jmp 0x4053aa
mov dword [ebp - 0x8a6], 0xe1070000
mov dword [ebp - 0x8a2], 0xe9070000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x624], esp
mov eax, dword [ebp - 0x8a2]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x8a6]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x624]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4035a8
mov dword [ebp - 0x304c], 1
jmp 0x405394
mov byte [ebp - 0x89e], 0
mov byte [ebp - 0x85e], 0
mov byte [ebp - 0x81e], 0
mov byte [ebp - 0x7de], 0
mov byte [ebp - 0x79e], 0
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4035eb
cmp eax, 0x1a
jne 0x40379f
cmp dword [ebp - 0x304c], 0
jne 0x40368a
mov dword [ebp - 0x2024], 0x88f122
lea edx, [ebp - 0x2028]
push edx
push 7
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403630
cmp eax, 0xffffffff
jne 0x40363c
mov dword [ebp - 0x304c], 1
jmp 0x40368a
cmp byte [ebp - 0x3044], 0x62
jne 0x40368a
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403682
cmp ecx, eax
jae 0x403682
cmp byte [ebp + ecx - 0x3041], 0
je 0x403682
cmp byte [ebp + ecx - 0x3041], 0x20
je 0x403682
cmp byte [ebp + ecx - 0x3041], 0xff
je 0x403682
mov dl, byte [ebp + ecx - 0x3041]
mov byte [ebp + ecx - 0x89e], dl
inc ecx
jmp 0x40364a
mov byte [ebp + ecx - 0x89e], 0
cmp dword [ebp - 0x304c], 0
jne 0x403736
cmp byte [ebp - 0x89e], 0
jne 0x403736
mov dword [ebp - 0x2024], 0x409
lea edx, [ebp - 0x2028]
push edx
push 6
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4036dc
cmp eax, 0xffffffff
jne 0x4036e8
mov dword [ebp - 0x304c], 1
jmp 0x403736
cmp byte [ebp - 0x3044], 0x49
jne 0x403736
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40372e
cmp ecx, eax
jae 0x40372e
cmp byte [ebp + ecx - 0x3041], 0
je 0x40372e
cmp byte [ebp + ecx - 0x3041], 0x20
je 0x40372e
cmp byte [ebp + ecx - 0x3041], 0xff
je 0x40372e
mov dl, byte [ebp + ecx - 0x3042]
mov byte [ebp + ecx - 0x89e], dl
inc ecx
jmp 0x4036f6
mov byte [ebp + ecx - 0x89e], 0
cmp dword [ebp - 0x304c], 0
jne 0x40379f
cmp byte [ebp - 0x89e], 0
je 0x40379f
lea ecx, [ebp - 0x89e]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0x89e]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x403b78
cmp dword [ebp - 0x304c], 0
jne 0x40384d
mov dword [ebp - 0x2024], 0x11e622
lea edx, [ebp - 0x2028]
push edx
push 7
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4037f3
cmp eax, 0xffffffff
jne 0x4037ff
mov dword [ebp - 0x304c], 1
jmp 0x40384d
cmp byte [ebp - 0x3044], 0x62
jne 0x40384d
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403845
cmp ecx, eax
jae 0x403845
cmp byte [ebp + ecx - 0x3041], 0
je 0x403845
cmp byte [ebp + ecx - 0x3041], 0x20
je 0x403845
cmp byte [ebp + ecx - 0x3041], 0xff
je 0x403845
mov dl, byte [ebp + ecx - 0x3041]
mov byte [ebp + ecx - 0x85e], dl
inc ecx
jmp 0x40380d
mov byte [ebp + ecx - 0x85e], 0
cmp dword [ebp - 0x304c], 0
jne 0x4038bf
cmp byte [ebp - 0x85e], 0
je 0x4038bf
lea ecx, [ebp - 0x85e]
push 0xa0d
push 0x7325203a
push 0x24545241
push 0x505f454e
push 0x49474e45
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
cmp byte [esi + 0x6c], 0
jne 0x4038bf
lea edx, [ebp - 0x85e]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
cmp dword [ebp - 0x304c], 0
jne 0x40395e
mov dword [ebp - 0x2024], 0x13f122
lea edx, [ebp - 0x2028]
push edx
push 7
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403904
cmp eax, 0xffffffff
jne 0x403910
mov dword [ebp - 0x304c], 1
jmp 0x40395e
cmp byte [ebp - 0x3044], 0x62
jne 0x40395e
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403956
cmp ecx, eax
jae 0x403956
cmp byte [ebp + ecx - 0x3041], 0
je 0x403956
cmp byte [ebp + ecx - 0x3041], 0x20
je 0x403956
cmp byte [ebp + ecx - 0x3041], 0xff
je 0x403956
mov dl, byte [ebp + ecx - 0x3041]
mov byte [ebp + ecx - 0x81e], dl
inc ecx
jmp 0x40391e
mov byte [ebp + ecx - 0x81e], 0
cmp dword [ebp - 0x304c], 0
jne 0x4039af
cmp byte [ebp - 0x81e], 0
je 0x4039af
lea ecx, [ebp - 0x81e]
push 0xa0d
push 0x7325203a
push 0x24544143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x304c], 0
jne 0x403a4e
mov dword [ebp - 0x2024], 0x8cf122
lea edx, [ebp - 0x2028]
push edx
push 7
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4039f4
cmp eax, 0xffffffff
jne 0x403a00
mov dword [ebp - 0x304c], 1
jmp 0x403a4e
cmp byte [ebp - 0x3044], 0x62
jne 0x403a4e
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403a46
cmp ecx, eax
jae 0x403a46
cmp byte [ebp + ecx - 0x3041], 0
je 0x403a46
cmp byte [ebp + ecx - 0x3041], 0x20
je 0x403a46
cmp byte [ebp + ecx - 0x3041], 0xff
je 0x403a46
mov dl, byte [ebp + ecx - 0x3041]
mov byte [ebp + ecx - 0x7de], dl
inc ecx
jmp 0x403a0e
mov byte [ebp + ecx - 0x7de], 0
cmp dword [ebp - 0x304c], 0
jne 0x403a9c
cmp byte [ebp - 0x7de], 0
je 0x403a9c
lea ecx, [ebp - 0x7de]
push 0xa
push 0xd732520
push 0x3a244e53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x304c], 0
jne 0x403b27
mov dword [ebp - 0x2024], 0x609
lea edx, [ebp - 0x2028]
push edx
push 6
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403ae1
cmp eax, 0xffffffff
jne 0x403aed
mov dword [ebp - 0x304c], 1
jmp 0x403b27
cmp byte [ebp - 0x3044], 0x62
jne 0x403b27
cmp dword [ebp - 0x3041], 0
je 0x403b27
push 0
push 0x58382e25
mov eax, dword [ebp - 0x3041]
bswap eax
push eax
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x79e]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
add esp, 8
cmp dword [ebp - 0x304c], 0
jne 0x403b78
cmp byte [ebp - 0x79e], 0
je 0x403b78
lea ecx, [ebp - 0x79e]
push 0xa0d
push 0x7325203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x1a
jne 0x403b98
cmp dword [ebp - 0x304c], 0
jne 0x403b98
lea edx, [ebp - 0x89e]
push edx
call fcn.00407e04
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x404f36
cmp dword [ebp - 0x304c], 0
jne 0x403c8a
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], 0x210
lea edx, [ebp - 0x2028]
push edx
push 6
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403bf8
cmp eax, 0xffffffff
jne 0x403c07
mov dword [ebp - 0x304c], 1
jmp 0x403c8a
cmp byte [ebp - 0x3044], 0x50
je 0x403c8a
push 0x203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c244544
push 0x4f4d5f47
push 0x4e494d4d
push 0x4152474f
push 0x52505f54
push 0x45535f54
push 0x4f4e5f4e
push 0x41435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403c6c
xor eax, eax
jmp 0x403c76
cmp eax, 0x20
jbe 0x403c76
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x403ec0
mov dword [ebp - 0x3154], 0x20
mov dword [ebp - 0x2024], 0x127
lea edx, [ebp - 0x2028]
push edx
push 6
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403cd9
cmp eax, 0xffffffff
jne 0x403ce8
mov dword [ebp - 0x304c], 1
jmp 0x403ec0
cmp byte [ebp - 0x3044], 0x7f
jne 0x403e45
cmp byte [ebp - 0x3042], 0x36
jne 0x403d41
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x1f4]
mov dword [ebp - 0x742], eax
lea edx, [ebp - 0x3048]
push edx
push 0xa
push 6
push 0
call fcn.00405dcc
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x742]
jl 0x403d10
dec dword [ebp - 0x3154]
jne 0x403ca1
jmp 0x403dd1
cmp byte [ebp - 0x3042], 0x37
jne 0x403d8a
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x1f4]
mov dword [ebp - 0x742], eax
lea edx, [ebp - 0x3048]
push edx
push 0xa
push 6
push 0
call fcn.00405dcc
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x742]
jl 0x403d5c
dec dword [ebp - 0x3154]
jne 0x403ca1
jmp 0x403dd1
cmp byte [ebp - 0x3042], 0x22
jne 0x403dd1
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x1f4]
mov dword [ebp - 0x742], eax
lea edx, [ebp - 0x3048]
push edx
push 0xa
push 6
push 0
call fcn.00405dcc
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x742]
jl 0x403da5
dec dword [ebp - 0x3154]
jne 0x403ca1
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403e25
xor eax, eax
jmp 0x403e2f
cmp eax, 0x20
jbe 0x403e2f
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x403ec0
cmp byte [ebp - 0x3044], 0x67
je 0x403ec0
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403ea2
xor eax, eax
jmp 0x403eac
cmp eax, 0x20
jbe 0x403eac
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x40406f
cmp word [ebp - 0x3042], 0
jne 0x403ee4
cmp byte [ebp - 0x3040], 0
je 0x40406f
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x32]
mov dword [ebp - 0x742], eax
lea edx, [ebp - 0x3048]
push edx
push 0xa
push 6
push 0
call fcn.00405dcc
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x742]
jl 0x403ef3
mov byte [ebp - 0x73e], 0x20
mov byte [ebp - 0x73d], 0xf4
mov dword [ebp - 0x73c], 1
mov eax, dword [ebp - 0x3042]
mov dword [ebp - 0x738], eax
push 0xfa
lea edx, [ebp - 0x3256]
push edx
push 0xf6
lea edx, [ebp - 0x73e]
push edx
call dword [ebx + 0x40]
cmp eax, 3
je 0x403f9a
push 0xa0d
push 0x38232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x304c], 1
jmp 0x40406f
mov word [ebp - 0x2024], 0x227
push 3
lea edx, [ebp - 0x3256]
push edx
lea edx, [ebp - 0x2022]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
lea edx, [ebp - 0x2028]
push edx
push 9
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x403fea
cmp eax, 0xffffffff
jne 0x403ff6
mov dword [ebp - 0x304c], 1
jmp 0x40406f
cmp byte [ebp - 0x3044], 0x67
je 0x40406f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404051
xor eax, eax
jmp 0x40405b
cmp eax, 0x20
jbe 0x40405b
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x404f21
push 0xa0d24
push 0x544f4f42
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x10
mov dword [ebp - 0x75a], 0
mov dword [ebp - 0x75e], 0
cmp dword [ebp - 0x75e], 0x32
jae 0x4040db
imul ecx, dword [ebp - 0x75e], 0x10
mov eax, dword [ebp + ecx - 0xbc2]
sub eax, dword [ebp + ecx - 0xbc6]
test eax, eax
je 0x4040db
add dword [ebp - 0x75a], eax
inc dword [ebp - 0x75e]
jmp 0x4040ab
mov dword [ebp - 0x75e], 0
cmp dword [ebp - 0x75e], 0x32
jae 0x4044e5
imul ecx, dword [ebp - 0x75e], 0x10
mov eax, dword [ebp + ecx - 0xbc2]
sub eax, dword [ebp + ecx - 0xbc6]
test eax, eax
je 0x4044e5
mov eax, dword [ebp + ecx - 0xbc6]
mov dword [ebp - 0x752], eax
mov eax, dword [ebp + ecx - 0xbc2]
mov dword [ebp - 0x74e], eax
mov eax, dword [ebp + ecx - 0xbbe]
mov dword [ebp - 0x74a], eax
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], 0x440034
mov eax, dword [ebp - 0x752]
add eax, dword [ebp - 0x74a]
mov byte [ebp - 0x201f], ah
mov byte [ebp - 0x201e], al
shr eax, 0x10
mov byte [ebp - 0x2021], ah
mov byte [ebp - 0x2020], al
mov eax, dword [ebp - 0x74e]
sub eax, dword [ebp - 0x752]
mov byte [ebp - 0x201b], ah
mov byte [ebp - 0x201a], al
shr eax, 0x10
mov byte [ebp - 0x201d], ah
mov byte [ebp - 0x201c], al
lea edx, [ebp - 0x2028]
push edx
push 0xf
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4041c8
cmp eax, 0xffffffff
jne 0x4041d7
mov dword [ebp - 0x304c], 1
jmp 0x4042ce
cmp byte [ebp - 0x3044], 0x74
je 0x404252
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404232
xor eax, eax
jmp 0x40423c
cmp eax, 0x20
jbe 0x40423c
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x4042ce
mov ecx, 6
xor edx, edx
cmp ecx, 0xa
jae 0x40426f
cmp ecx, eax
jae 0x40426f
shl edx, 8
mov dl, byte [ebp + ecx - 0x3048]
inc ecx
jmp 0x404259
mov eax, dword [ebp - 0x74e]
sub eax, dword [ebp - 0x752]
lea ecx, [edx - 2]
mov dword [ebp - 0x648], ecx
xor edx, edx
div ecx
test edx, edx
je 0x40428d
inc eax
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
cmp dword [ebp - 0x304c], 0
jne 0x4044e5
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0x752]
mov ecx, dword [ebp - 0x74e]
cmp eax, ecx
jae 0x40441b
sub ecx, eax
cmp ecx, dword [ebp - 0x648]
jbe 0x404309
mov ecx, dword [ebp - 0x648]
mov dword [ebp - 0x746], ecx
mov byte [ebp - 0x2024], 0x36
add eax, dword [ebp - 0xfe8]
mov edx, dword [ebp - 0x644]
mov byte [ebp - 0x2023], dl
push ecx
push eax
lea edx, [ebp - 0x2022]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x746]
lea edx, [ebp - 0x2028]
push edx
lea edx, [ecx + 6]
push edx
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404370
cmp eax, 0xffffffff
jne 0x40437f
mov dword [ebp - 0x304c], 1
jmp 0x404416
cmp byte [ebp - 0x3044], 0x76
je 0x4043fa
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4043da
xor eax, eax
jmp 0x4043e4
cmp eax, 0x20
jbe 0x4043e4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404416
inc dword [ebp - 0x644]
mov ecx, dword [ebp - 0x746]
add dword [ebp - 0x752], ecx
call fcn.00405bed
jmp 0x4042e5
jmp 0x4044e5
mov byte [ebp - 0x2024], 0x37
lea edx, [ebp - 0x2028]
push edx
push 5
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404450
cmp eax, 0xffffffff
jne 0x40445f
mov dword [ebp - 0x304c], 1
jmp 0x4044e5
cmp byte [ebp - 0x3044], 0x77
je 0x4044da
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4044ba
xor eax, eax
jmp 0x4044c4
cmp eax, 0x20
jbe 0x4044c4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x4044e5
inc dword [ebp - 0x75e]
jmp 0x4040e5
cmp dword [ebp - 0x304c], 0
jne 0x404778
mov dword [ebp - 0x2024], 0x1030131
cmp dword [esi + 0x270], 0x6d637424
jne 0x404581
cmp dword [esi + 0x274], 0x64726f66
jne 0x404581
cmp dword [esi + 0x278], 0x315f3738
jne 0x404581
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x404581
cmp dword [esi + 0x280], 0x6f502431
jne 0x404581
cmp dword [esi + 0x284], 0x53726577
jne 0x404581
cmp dword [esi + 0x288], 0x6b6f7274
jne 0x404581
cmp dword [esi + 0x28c], 0x35315b65
jne 0x404581
cmp dword [esi + 0x290], 0x5d6b3430
jne 0x404581
cmp dword [esi + 0x294], 0x6e614320
jne 0x404581
cmp byte [esi + 0x298], 0
je 0x404696
cmp dword [esi + 0x270], 0x6d637424
jne 0x404621
cmp dword [esi + 0x274], 0x64726f66
jne 0x404621
cmp dword [esi + 0x278], 0x315f3738
jne 0x404621
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x404621
cmp dword [esi + 0x280], 0x54282431
jne 0x404621
cmp dword [esi + 0x284], 0x29545345
jne 0x404621
cmp dword [esi + 0x288], 0x65776f50
jne 0x404621
cmp dword [esi + 0x28c], 0x72745372
jne 0x404621
cmp dword [esi + 0x290], 0x5b656b6f
jne 0x404621
cmp dword [esi + 0x294], 0x34303531
jne 0x404621
cmp dword [esi + 0x298], 0x43205d6b
jne 0x404621
cmp word [esi + 0x29c], 0x6e61
jne 0x404621
cmp byte [esi + 0x29e], 0
je 0x404696
cmp dword [esi + 0x270], 0x6d637424
jne 0x404696
cmp dword [esi + 0x274], 0x64726f66
jne 0x404696
cmp dword [esi + 0x278], 0x315f3738
jne 0x404696
cmp dword [esi + 0x27c], 0x5f37386d
jne 0x404696
cmp dword [esi + 0x280], 0x54412432
jne 0x404696
cmp dword [esi + 0x284], 0x38523620
jne 0x404696
cmp dword [esi + 0x288], 0x35315b30
jne 0x404696
cmp dword [esi + 0x28c], 0x5d6b3430
jne 0x404696
cmp dword [esi + 0x290], 0x6e614320
jne 0x404696
cmp byte [esi + 0x294], 0
je 0x404696
mov dword [ebp - 0x2020], 0x4000d0
lea edx, [ebp - 0x2028]
push edx
push 0xc
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4046ce
cmp eax, 0xffffffff
jne 0x4046dd
mov dword [ebp - 0x304c], 1
jmp 0x404778
cmp byte [ebp - 0x3044], 0x71
je 0x404758
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404738
xor eax, eax
jmp 0x404742
cmp eax, 0x20
jbe 0x404742
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404778
push 0xa0d
push 0x244b4f5f
push 0x544f4f42
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x14
cmp dword [ebp - 0x304c], 0
jne 0x404f21
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x75e], 0
cmp dword [ebp - 0x75e], 0x32
jae 0x404956
imul ecx, dword [ebp - 0x75e], 0x10
mov eax, dword [ebp + ecx - 0xee2]
sub eax, dword [ebp + ecx - 0xee6]
test eax, eax
je 0x404956
mov dword [ebp - 0x2024], 0xff0131
mov byte [ebp - 0x201a], ah
mov byte [ebp - 0x2019], al
shr eax, 0x10
mov byte [ebp - 0x201c], ah
mov byte [ebp - 0x201b], al
mov eax, dword [ebp + ecx - 0xee6]
add eax, dword [ebp + ecx - 0xede]
mov byte [ebp - 0x201e], ah
mov byte [ebp - 0x201d], al
shr eax, 0x10
mov byte [ebp - 0x2020], ah
mov byte [ebp - 0x201f], al
mov dword [ebp - 0x3154], 0x20
lea edx, [ebp - 0x2028]
push edx
push 0x10
push 0x1f4
push 0x40
push 6
push 0
call fcn.00405c70
cmp eax, 0xffffffff
jne 0x404863
mov dword [ebp - 0x304c], 1
jmp 0x404956
lea edx, [ebp - 0x3048]
push edx
push 0x3e8
push 6
push 0
call fcn.00405d1f
cmp eax, 0xffffffff
jne 0x40488c
mov dword [ebp - 0x304c], 1
jmp 0x404956
test eax, eax
jne 0x4048d3
dec dword [ebp - 0x3154]
jne 0x404863
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x304c], 1
jmp 0x404956
cmp byte [ebp - 0x3044], 0x71
je 0x40494b
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x24524f52
push 0x52455f4d
push 0x4f525f47
push 0x4e495341
push 0x52455f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40492b
xor eax, eax
jmp 0x404935
cmp eax, 0x20
jbe 0x404935
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404956
inc dword [ebp - 0x75e]
jmp 0x4047b4
cmp dword [ebp - 0x304c], 0
jne 0x404e27
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x75a], 0
mov dword [ebp - 0x75e], 0
cmp dword [ebp - 0x75e], 0x32
jae 0x4049f3
imul ecx, dword [ebp - 0x75e], 0x10
mov eax, dword [ebp + ecx - 0xee2]
sub eax, dword [ebp + ecx - 0xee6]
test eax, eax
je 0x4049f3
add dword [ebp - 0x75a], eax
inc dword [ebp - 0x75e]
jmp 0x4049c3
mov eax, dword [ebp - 0x75a]
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0x756], 0
mov dword [ebp - 0x75e], 0
cmp dword [ebp - 0x75e], 0x32
jae 0x404e27
imul ecx, dword [ebp - 0x75e], 0x10
mov eax, dword [ebp + ecx - 0xee2]
sub eax, dword [ebp + ecx - 0xee6]
test eax, eax
je 0x404e27
mov eax, dword [ebp + ecx - 0xee6]
mov dword [ebp - 0x752], eax
mov eax, dword [ebp + ecx - 0xee2]
mov dword [ebp - 0x74e], eax
mov eax, dword [ebp + ecx - 0xede]
mov dword [ebp - 0x74a], eax
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], 0x440034
mov eax, dword [ebp - 0x752]
add eax, dword [ebp - 0x74a]
mov byte [ebp - 0x201f], ah
mov byte [ebp - 0x201e], al
shr eax, 0x10
mov byte [ebp - 0x2021], ah
mov byte [ebp - 0x2020], al
mov eax, dword [ebp - 0x74e]
sub eax, dword [ebp - 0x752]
mov byte [ebp - 0x201b], ah
mov byte [ebp - 0x201a], al
shr eax, 0x10
mov byte [ebp - 0x201d], ah
mov byte [ebp - 0x201c], al
lea edx, [ebp - 0x2028]
push edx
push 0xf
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404b3e
cmp eax, 0xffffffff
jne 0x404b4d
mov dword [ebp - 0x304c], 1
jmp 0x404bfa
cmp byte [ebp - 0x3044], 0x74
je 0x404bc8
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404ba8
xor eax, eax
jmp 0x404bb2
cmp eax, 0x20
jbe 0x404bb2
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404bfa
mov ecx, 6
xor edx, edx
cmp ecx, 0xa
jae 0x404be5
cmp ecx, eax
jae 0x404be5
shl edx, 8
mov dl, byte [ebp + ecx - 0x3048]
inc ecx
jmp 0x404bcf
mov eax, dword [ebp - 0x74e]
sub eax, dword [ebp - 0x752]
lea ecx, [edx - 2]
mov dword [ebp - 0x648], ecx
cmp dword [ebp - 0x304c], 0
jne 0x404e27
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0x752]
mov ecx, dword [ebp - 0x74e]
cmp eax, ecx
jae 0x404d5d
sub ecx, eax
cmp ecx, dword [ebp - 0x648]
jbe 0x404c35
mov ecx, dword [ebp - 0x648]
mov dword [ebp - 0x746], ecx
mov byte [ebp - 0x2024], 0x36
add eax, dword [esi + 0x20]
mov edx, dword [ebp - 0x644]
mov byte [ebp - 0x2023], dl
push ecx
push eax
lea edx, [ebp - 0x2022]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x746]
lea edx, [ebp - 0x2028]
push edx
lea edx, [ecx + 6]
push edx
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404c99
cmp eax, 0xffffffff
jne 0x404ca8
mov dword [ebp - 0x304c], 1
jmp 0x404d58
cmp byte [ebp - 0x3044], 0x76
je 0x404d23
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404d03
xor eax, eax
jmp 0x404d0d
cmp eax, 0x20
jbe 0x404d0d
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404d58
mov eax, dword [ebp - 0x752]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x756]
je 0x404d41
mov dword [ebp - 0x756], eax
call fcn.00405bed
inc dword [ebp - 0x644]
mov ecx, dword [ebp - 0x746]
add dword [ebp - 0x752], ecx
jmp 0x404c11
jmp 0x404e27
mov byte [ebp - 0x2024], 0x37
lea edx, [ebp - 0x2028]
push edx
push 5
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404d92
cmp eax, 0xffffffff
jne 0x404da1
mov dword [ebp - 0x304c], 1
jmp 0x404e27
cmp byte [ebp - 0x3044], 0x77
je 0x404e1c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404dfc
xor eax, eax
jmp 0x404e06
cmp eax, 0x20
jbe 0x404e06
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x404e27
inc dword [ebp - 0x75e]
jmp 0x404a5b
cmp dword [ebp - 0x304c], 0
jne 0x404ef1
mov dword [ebp - 0x2024], 0x4030131
lea edx, [ebp - 0x2028]
push edx
push 8
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404e6c
cmp eax, 0xffffffff
jne 0x404e78
mov dword [ebp - 0x304c], 1
jmp 0x404ef1
cmp byte [ebp - 0x3044], 0x71
je 0x404ef1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404ed3
xor eax, eax
jmp 0x404edd
cmp eax, 0x20
jbe 0x404edd
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x404f21
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
cmp dword [ebp - 0xfe8], 0
je 0x404f36
push dword [ebp - 0xfe8]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x4051e8
cmp dword [ebp - 0x304c], 0
jne 0x40501b
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], 0x110
lea edx, [ebp - 0x2028]
push edx
push 6
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x404f96
cmp eax, 0xffffffff
jne 0x404fa2
mov dword [ebp - 0x304c], 1
jmp 0x40501b
cmp byte [ebp - 0x3044], 0x50
je 0x40501b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404ffd
xor eax, eax
jmp 0x405007
cmp eax, 0x20
jbe 0x405007
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x4051e8
mov dword [ebp - 0x2024], 0x8f0219
lea edx, [ebp - 0x2028]
push edx
push 7
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x405060
cmp eax, 0xffffffff
jne 0x40506f
mov dword [ebp - 0x304c], 1
jmp 0x4051e8
cmp byte [ebp - 0x3044], 0x59
je 0x4050ed
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4050ca
xor eax, eax
jmp 0x4050d4
cmp eax, 0x20
jbe 0x4050d4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x4051e8
sub eax, 7
shr eax, 2
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], 0
push 0xa
push 0xd642520
push 0x3a24544e
push 0x554f435f
push 0x43544424
push dword [ebp - 0x640]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
mov ecx, dword [ebp - 0x63c]
cmp ecx, dword [ebp - 0x640]
jae 0x4051e8
imul ecx, ecx, 4
movzx eax, byte [ebp + ecx - 0x3041]
mov dword [ebp - 0x638], eax
movzx eax, byte [ebp + ecx - 0x3040]
mov dword [ebp - 0x634], eax
movzx eax, byte [ebp + ecx - 0x303f]
mov dword [ebp - 0x630], eax
movzx eax, byte [ebp + ecx - 0x303e]
mov dword [ebp - 0x62c], eax
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
push dword [ebp - 0x634]
push dword [ebp - 0x638]
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x3544]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x3544]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x63c]
jmp 0x40513e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x405384
cmp dword [ebp - 0x304c], 0
jne 0x40525e
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x2028], 0xdf070000
mov dword [ebp - 0x2024], 0xffffff14
lea edx, [ebp - 0x2028]
push edx
push 8
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c70
cmp eax, 0xffffffff
jne 0x40525e
mov dword [ebp - 0x304c], 1
cmp dword [ebp - 0x304c], 0
jne 0x405384
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [ebp - 0x8a6]
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], 0xffffff14
push 0
push 0
lea edx, [esp + 4]
push edx
push 0xa
call dword [edi]
push 0
lea edx, [esp + 4]
push edx
push 0xb
call dword [edi]
add esp, 4
lea edx, [ebp - 0x2028]
push edx
push 8
lea edx, [ebp - 0x3048]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00405c3c
test eax, eax
je 0x4052d5
cmp eax, 0xffffffff
jne 0x4052e4
mov dword [ebp - 0x304c], 1
jmp 0x405384
cmp byte [ebp - 0x3044], 0x54
je 0x40535f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3048]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40533f
xor eax, eax
jmp 0x405349
cmp eax, 0x20
jbe 0x405349
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00405e1d
mov dword [ebp - 0x304c], 1
jmp 0x405384
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x40567a
xor eax, eax
pushal
mov edi, dword [esi + 0x20]
cmp dword [esp + 0x1c], 3
je 0x4054d6
cmp dword [edi + 0x20308], 0
je 0x4054d6
cmp dword [edi + 0x20308], 0x20
jb 0x4053ed
mov dword [esp + 0x1c], 3
jmp 0x4054d6
mov dword [ebp - 0x620], 0
xor ebx, ebx
cmp ebx, dword [edi + 0x20308]
jae 0x4054ba
mov ecx, dword [edi + ebx*8 + 0x2030c]
mov edx, dword [edi + ebx*8 + 0x20310]
cmp ecx, edx
jb 0x405424
mov dword [esp + 0x1c], 3
jmp 0x4054ba
cmp ecx, 0xa0020000
jae 0x405439
mov dword [esp + 0x1c], 3
jmp 0x4054ba
cmp edx, 0xa0080000
jb 0x40544b
mov dword [esp + 0x1c], 3
jmp 0x4054ba
mov eax, ecx
and eax, 0x8fe00000
cmp eax, 0x80800000
jne 0x405467
and ecx, 0x1fffff
lea ecx, [ecx + 0x200000]
jmp 0x40546d
and ecx, 0x3fffff
mov eax, edx
and eax, 0x8fe00000
cmp eax, 0x80800000
jne 0x405489
and edx, 0x1fffff
lea ecx, [edx + 0x200000]
jmp 0x40548f
and edx, 0x3fffff
cmp ecx, edx
ja 0x4054b4
movzx eax, byte [edi + ecx]
xor al, byte [ebp - 0x61d]
shl dword [ebp - 0x620], 8
mov eax, dword [eax*4 + 0x4057ed]
xor dword [ebp - 0x620], eax
inc ecx
jmp 0x40548f
inc ebx
jmp 0x4053f9
mov ecx, dword [ebp - 0x620]
cmp ecx, dword [edi + 0x20304]
je 0x4054d6
mov dword [edi + 0x20304], ecx
mov dword [esp + 0x1c], 1
cmp dword [esp + 0x1c], 3
je 0x4055ed
cmp dword [edi + 0x80308], 0
je 0x4055ed
cmp dword [edi + 0x80308], 0x20
jb 0x405504
mov dword [esp + 0x1c], 3
jmp 0x4055ed
mov dword [ebp - 0x620], 0
xor ebx, ebx
cmp ebx, dword [edi + 0x80308]
jae 0x4055d1
mov ecx, dword [edi + ebx*8 + 0x8030c]
mov edx, dword [edi + ebx*8 + 0x80310]
cmp ecx, edx
jb 0x40553b
mov dword [esp + 0x1c], 3
jmp 0x4055d1
cmp ecx, 0x80080000
jae 0x405550
mov dword [esp + 0x1c], 3
jmp 0x4055d1
cmp edx, 0x80178000
jb 0x405562
mov dword [esp + 0x1c], 3
jmp 0x4055d1
mov eax, ecx
and eax, 0x8fe00000
cmp eax, 0x80800000
jne 0x40557e
and ecx, 0x1fffff
lea ecx, [ecx + 0x200000]
jmp 0x405584
and ecx, 0x3fffff
mov eax, edx
and eax, 0x8fe00000
cmp eax, 0x80800000
jne 0x4055a0
and edx, 0x1fffff
lea ecx, [edx + 0x200000]
jmp 0x4055a6
and edx, 0x3fffff
cmp ecx, edx
ja 0x4055cb
movzx eax, byte [edi + ecx]
xor al, byte [ebp - 0x61d]
shl dword [ebp - 0x620], 8
mov eax, dword [eax*4 + 0x4057ed]
xor dword [ebp - 0x620], eax
inc ecx
jmp 0x4055a6
inc ebx
jmp 0x405510
mov ecx, dword [ebp - 0x620]
cmp ecx, dword [edi + 0x80304]
je 0x4055ed
mov dword [edi + 0x80304], ecx
mov dword [esp + 0x1c], 1
popal
test eax, eax
jne 0x40561b
push 0xa
push 0xd244449
push 0x4c41565f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x40567a
cmp eax, 1
jne 0x40564e
push 0xa
push 0xd244445
push 0x54434552
push 0x524f435f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
jmp 0x40567a
push 0xa
push 0xd24444e
push 0x554f465f
push 0x544f4e5f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcec], 0
je 0x4057c7
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcec], 0
je 0x4056c9
push dword [ebx + 0xcec]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcec], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xae4]
push edx
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61c]
push edx
lea edx, [ebx + 0xae4]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x4057c7
lea edx, [ebx + 0xae4]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 4], esp
push 0x706870
push 0x2e747365
push 0x745f6e61
push 0x635f656b
push 0x6f727473
push 0x7265776f
push 0x705f6d63
push 0x745f6472
push 0x6f662f74
push 0x7365742f
lea edx, [ebp - 0x20c]
push edx
lea edx, [ebp - 0x61c]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 4]
call fcn.0040759a
add esp, 0x28
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8