Function at 0x40207c
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3234
push edi
lea edi, [ebp - 0x3234]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x40220e
push eax
push edi
call fcn.00407607
cmp eax, 1
jne 0x4020c5
mov dword [edi], 0x407a08
jmp 0x4020f6
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x40220c
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x40220c
lea edx, [ebp - 0x2fd4]
push edx
lea edx, [ebp - 0x3024]
push edx
lea edx, [ebp - 0x3074]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x40220c
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3074]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3024]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x40224e
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x406fcc
mov dword [ebp - 0x2d88], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x2f84]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x2c7c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4022aa
cmp eax, 0xb
je 0x4022aa
cmp eax, 0x1a
je 0x4022aa
cmp eax, 0x17
je 0x4022aa
cmp eax, 0x18
jne 0x406fc4
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4022d8
mov dword [ebp - 0x2c7c], 1
jmp 0x406fc4
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402305
mov dword [ebp - 0x2c7c], 1
jmp 0x406fae
cmp dword [esi + 0x270], 0x776d6224
jne 0x40238b
cmp dword [esi + 0x274], 0x305f655f
jne 0x40238b
cmp dword [esi + 0x278], 0x2d452435
jne 0x40238b
cmp dword [esi + 0x27c], 0x69726573
jne 0x40238b
cmp dword [esi + 0x280], 0x42207365
jne 0x40238b
cmp dword [esi + 0x284], 0x6863736f
jne 0x40238b
cmp dword [esi + 0x288], 0x73614d20
jne 0x40238b
cmp dword [esi + 0x28c], 0x28726574
jne 0x40238b
cmp dword [esi + 0x290], 0x656e7574
jne 0x40238b
cmp dword [esi + 0x294], 0x41432029
jne 0x40238b
cmp word [esi + 0x298], 0x4e
je 0x4024bf
cmp dword [esi + 0x270], 0x776d6224
jne 0x40241f
cmp dword [esi + 0x274], 0x305f655f
jne 0x40241f
cmp dword [esi + 0x278], 0x2d452436
jne 0x40241f
cmp dword [esi + 0x27c], 0x69726573
jne 0x40241f
cmp dword [esi + 0x280], 0x42207365
jne 0x40241f
cmp dword [esi + 0x284], 0x6863736f
jne 0x40241f
cmp dword [esi + 0x288], 0x73614d20
jne 0x40241f
cmp dword [esi + 0x28c], 0x28726574
jne 0x40241f
cmp dword [esi + 0x290], 0x636f7473
jne 0x40241f
cmp dword [esi + 0x294], 0x4320296b
jne 0x40241f
cmp word [esi + 0x298], 0x4e41
jne 0x40241f
cmp byte [esi + 0x29a], 0
je 0x4024bf
cmp dword [esi + 0x270], 0x776d6224
jne 0x402518
cmp dword [esi + 0x274], 0x305f655f
jne 0x402518
cmp dword [esi + 0x278], 0x2d452437
jne 0x402518
cmp dword [esi + 0x27c], 0x69726573
jne 0x402518
cmp dword [esi + 0x280], 0x42207365
jne 0x402518
cmp dword [esi + 0x284], 0x6863736f
jne 0x402518
cmp dword [esi + 0x288], 0x73614d20
jne 0x402518
cmp dword [esi + 0x28c], 0x28726574
jne 0x402518
cmp dword [esi + 0x290], 0x61706572
jne 0x402518
cmp dword [esi + 0x294], 0x20297269
jne 0x402518
cmp dword [esi + 0x298], 0x4e4143
jne 0x402518
push 0x12f106
push 0
push 0
push 0x50000
push 0
push 0xc00000
push 0
push 0x6f112
push 0x6000000
push 0
push 0x500
push 0
push 0xc000
push 0
push 0x6ff
push 0xffffffffffffffff
push 0
push 5
push 0
push 0xc0
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x64
cmp dword [esi + 0x270], 0x776d6224
jne 0x40259d
cmp dword [esi + 0x274], 0x305f655f
jne 0x40259d
cmp dword [esi + 0x278], 0x2d452438
jne 0x40259d
cmp dword [esi + 0x27c], 0x69726573
jne 0x40259d
cmp dword [esi + 0x280], 0x42207365
jne 0x40259d
cmp dword [esi + 0x284], 0x6863736f
jne 0x40259d
cmp dword [esi + 0x288], 0x616c5320
jne 0x40259d
cmp dword [esi + 0x28c], 0x74286576
jne 0x40259d
cmp dword [esi + 0x290], 0x29656e75
jne 0x40259d
cmp dword [esi + 0x294], 0x4e414320
jne 0x40259d
cmp byte [esi + 0x298], 0
je 0x4026cf
cmp dword [esi + 0x270], 0x776d6224
jne 0x402623
cmp dword [esi + 0x274], 0x305f655f
jne 0x402623
cmp dword [esi + 0x278], 0x2d452439
jne 0x402623
cmp dword [esi + 0x27c], 0x69726573
jne 0x402623
cmp dword [esi + 0x280], 0x42207365
jne 0x402623
cmp dword [esi + 0x284], 0x6863736f
jne 0x402623
cmp dword [esi + 0x288], 0x616c5320
jne 0x402623
cmp dword [esi + 0x28c], 0x73286576
jne 0x402623
cmp dword [esi + 0x290], 0x6b636f74
jne 0x402623
cmp dword [esi + 0x294], 0x41432029
jne 0x402623
cmp word [esi + 0x298], 0x4e
je 0x4026cf
cmp dword [esi + 0x270], 0x776d6224
jne 0x402728
cmp dword [esi + 0x274], 0x315f655f
jne 0x402728
cmp dword [esi + 0x278], 0x2d452430
jne 0x402728
cmp dword [esi + 0x27c], 0x69726573
jne 0x402728
cmp dword [esi + 0x280], 0x42207365
jne 0x402728
cmp dword [esi + 0x284], 0x6863736f
jne 0x402728
cmp dword [esi + 0x288], 0x616c5320
jne 0x402728
cmp dword [esi + 0x28c], 0x72286576
jne 0x402728
cmp dword [esi + 0x290], 0x69617065
jne 0x402728
cmp dword [esi + 0x294], 0x43202972
jne 0x402728
cmp word [esi + 0x298], 0x4e41
jne 0x402728
cmp byte [esi + 0x29a], 0
jne 0x402728
push 0x13f106
push 0
push 0
push 0x50000
push 0
push 0xc00000
push 0
push 0x6f113
push 0x6000000
push 0
push 0x500
push 0
push 0xc000
push 0
push 0x6ff
push 0xffffffffffffffff
push 0
push 5
push 0
push 0xc0
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x64
cmp eax, 0xffffffff
jne 0x40273c
mov dword [ebp - 0x2c7c], 1
jmp 0x406fae
mov dword [ebp - 0x26], 0
mov dword [ebp - 0x187c], 0xffffffff
mov dword [ebp - 0x446], 0xffffffff
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x402770
cmp eax, 0xe
je 0x402770
cmp eax, 0x1a
jne 0x403973
push 0x100
push 0
lea edx, [ebp - 0x1bd8]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
cmp dword [ebp - 0x2c7c], 0
jne 0x402c02
cmp dword [esi + 0x270], 0x776d6224
jne 0x40281a
cmp dword [esi + 0x274], 0x305f655f
jne 0x40281a
cmp dword [esi + 0x278], 0x2d452435
jne 0x40281a
cmp dword [esi + 0x27c], 0x69726573
jne 0x40281a
cmp dword [esi + 0x280], 0x42207365
jne 0x40281a
cmp dword [esi + 0x284], 0x6863736f
jne 0x40281a
cmp dword [esi + 0x288], 0x73614d20
jne 0x40281a
cmp dword [esi + 0x28c], 0x28726574
jne 0x40281a
cmp dword [esi + 0x290], 0x656e7574
jne 0x40281a
cmp dword [esi + 0x294], 0x41432029
jne 0x40281a
cmp word [esi + 0x298], 0x4e
je 0x402942
cmp dword [esi + 0x270], 0x776d6224
jne 0x4028ae
cmp dword [esi + 0x274], 0x305f655f
jne 0x4028ae
cmp dword [esi + 0x278], 0x2d452436
jne 0x4028ae
cmp dword [esi + 0x27c], 0x69726573
jne 0x4028ae
cmp dword [esi + 0x280], 0x42207365
jne 0x4028ae
cmp dword [esi + 0x284], 0x6863736f
jne 0x4028ae
cmp dword [esi + 0x288], 0x73614d20
jne 0x4028ae
cmp dword [esi + 0x28c], 0x28726574
jne 0x4028ae
cmp dword [esi + 0x290], 0x636f7473
jne 0x4028ae
cmp dword [esi + 0x294], 0x4320296b
jne 0x4028ae
cmp word [esi + 0x298], 0x4e41
jne 0x4028ae
cmp byte [esi + 0x29a], 0
je 0x402942
cmp dword [esi + 0x270], 0x776d6224
jne 0x402976
cmp dword [esi + 0x274], 0x305f655f
jne 0x402976
cmp dword [esi + 0x278], 0x2d452437
jne 0x402976
cmp dword [esi + 0x27c], 0x69726573
jne 0x402976
cmp dword [esi + 0x280], 0x42207365
jne 0x402976
cmp dword [esi + 0x284], 0x6863736f
jne 0x402976
cmp dword [esi + 0x288], 0x73614d20
jne 0x402976
cmp dword [esi + 0x28c], 0x28726574
jne 0x402976
cmp dword [esi + 0x290], 0x61706572
jne 0x402976
cmp dword [esi + 0x294], 0x20297269
jne 0x402976
cmp dword [esi + 0x298], 0x4e4143
jne 0x402976
push 0x400700
push 0x2312
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp dword [esi + 0x270], 0x776d6224
jne 0x4029fb
cmp dword [esi + 0x274], 0x305f655f
jne 0x4029fb
cmp dword [esi + 0x278], 0x2d452438
jne 0x4029fb
cmp dword [esi + 0x27c], 0x69726573
jne 0x4029fb
cmp dword [esi + 0x280], 0x42207365
jne 0x4029fb
cmp dword [esi + 0x284], 0x6863736f
jne 0x4029fb
cmp dword [esi + 0x288], 0x616c5320
jne 0x4029fb
cmp dword [esi + 0x28c], 0x74286576
jne 0x4029fb
cmp dword [esi + 0x290], 0x29656e75
jne 0x4029fb
cmp dword [esi + 0x294], 0x4e414320
jne 0x4029fb
cmp byte [esi + 0x298], 0
je 0x402b21
cmp dword [esi + 0x270], 0x776d6224
jne 0x402a81
cmp dword [esi + 0x274], 0x305f655f
jne 0x402a81
cmp dword [esi + 0x278], 0x2d452439
jne 0x402a81
cmp dword [esi + 0x27c], 0x69726573
jne 0x402a81
cmp dword [esi + 0x280], 0x42207365
jne 0x402a81
cmp dword [esi + 0x284], 0x6863736f
jne 0x402a81
cmp dword [esi + 0x288], 0x616c5320
jne 0x402a81
cmp dword [esi + 0x28c], 0x73286576
jne 0x402a81
cmp dword [esi + 0x290], 0x6b636f74
jne 0x402a81
cmp dword [esi + 0x294], 0x41432029
jne 0x402a81
cmp word [esi + 0x298], 0x4e
je 0x402b21
cmp dword [esi + 0x270], 0x776d6224
jne 0x402b55
cmp dword [esi + 0x274], 0x315f655f
jne 0x402b55
cmp dword [esi + 0x278], 0x2d452430
jne 0x402b55
cmp dword [esi + 0x27c], 0x69726573
jne 0x402b55
cmp dword [esi + 0x280], 0x42207365
jne 0x402b55
cmp dword [esi + 0x284], 0x6863736f
jne 0x402b55
cmp dword [esi + 0x288], 0x616c5320
jne 0x402b55
cmp dword [esi + 0x28c], 0x72286576
jne 0x402b55
cmp dword [esi + 0x290], 0x69617065
jne 0x402b55
cmp dword [esi + 0x294], 0x43202972
jne 0x402b55
cmp word [esi + 0x298], 0x4e41
jne 0x402b55
cmp byte [esi + 0x29a], 0
jne 0x402b55
push 0x400700
push 0x2313
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp eax, 0
je 0x402b5f
cmp eax, 0xffffffff
jne 0x402b6e
mov dword [ebp - 0x2c7c], 1
jmp 0x402c02
cmp byte [ebp - 0x2c73], 0x63
je 0x402be9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402bc9
xor eax, eax
jmp 0x402bd3
cmp eax, 0x20
jbe 0x402bd3
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x402c02
push 0x40
lea edx, [ebp - 0x2c72]
push edx
lea edx, [ebp - 0x1bd8]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x2c7c], 0
jne 0x40307d
cmp dword [esi + 0x270], 0x776d6224
jne 0x402c95
cmp dword [esi + 0x274], 0x305f655f
jne 0x402c95
cmp dword [esi + 0x278], 0x2d452435
jne 0x402c95
cmp dword [esi + 0x27c], 0x69726573
jne 0x402c95
cmp dword [esi + 0x280], 0x42207365
jne 0x402c95
cmp dword [esi + 0x284], 0x6863736f
jne 0x402c95
cmp dword [esi + 0x288], 0x73614d20
jne 0x402c95
cmp dword [esi + 0x28c], 0x28726574
jne 0x402c95
cmp dword [esi + 0x290], 0x656e7574
jne 0x402c95
cmp dword [esi + 0x294], 0x41432029
jne 0x402c95
cmp word [esi + 0x298], 0x4e
je 0x402dbd
cmp dword [esi + 0x270], 0x776d6224
jne 0x402d29
cmp dword [esi + 0x274], 0x305f655f
jne 0x402d29
cmp dword [esi + 0x278], 0x2d452436
jne 0x402d29
cmp dword [esi + 0x27c], 0x69726573
jne 0x402d29
cmp dword [esi + 0x280], 0x42207365
jne 0x402d29
cmp dword [esi + 0x284], 0x6863736f
jne 0x402d29
cmp dword [esi + 0x288], 0x73614d20
jne 0x402d29
cmp dword [esi + 0x28c], 0x28726574
jne 0x402d29
cmp dword [esi + 0x290], 0x636f7473
jne 0x402d29
cmp dword [esi + 0x294], 0x4320296b
jne 0x402d29
cmp word [esi + 0x298], 0x4e41
jne 0x402d29
cmp byte [esi + 0x29a], 0
je 0x402dbd
cmp dword [esi + 0x270], 0x776d6224
jne 0x402df1
cmp dword [esi + 0x274], 0x305f655f
jne 0x402df1
cmp dword [esi + 0x278], 0x2d452437
jne 0x402df1
cmp dword [esi + 0x27c], 0x69726573
jne 0x402df1
cmp dword [esi + 0x280], 0x42207365
jne 0x402df1
cmp dword [esi + 0x284], 0x6863736f
jne 0x402df1
cmp dword [esi + 0x288], 0x73614d20
jne 0x402df1
cmp dword [esi + 0x28c], 0x28726574
jne 0x402df1
cmp dword [esi + 0x290], 0x61706572
jne 0x402df1
cmp dword [esi + 0x294], 0x20297269
jne 0x402df1
cmp dword [esi + 0x298], 0x4e4143
jne 0x402df1
push 0x400740
push 0x2312
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp dword [esi + 0x270], 0x776d6224
jne 0x402e76
cmp dword [esi + 0x274], 0x305f655f
jne 0x402e76
cmp dword [esi + 0x278], 0x2d452438
jne 0x402e76
cmp dword [esi + 0x27c], 0x69726573
jne 0x402e76
cmp dword [esi + 0x280], 0x42207365
jne 0x402e76
cmp dword [esi + 0x284], 0x6863736f
jne 0x402e76
cmp dword [esi + 0x288], 0x616c5320
jne 0x402e76
cmp dword [esi + 0x28c], 0x74286576
jne 0x402e76
cmp dword [esi + 0x290], 0x29656e75
jne 0x402e76
cmp dword [esi + 0x294], 0x4e414320
jne 0x402e76
cmp byte [esi + 0x298], 0
je 0x402f9c
cmp dword [esi + 0x270], 0x776d6224
jne 0x402efc
cmp dword [esi + 0x274], 0x305f655f
jne 0x402efc
cmp dword [esi + 0x278], 0x2d452439
jne 0x402efc
cmp dword [esi + 0x27c], 0x69726573
jne 0x402efc
cmp dword [esi + 0x280], 0x42207365
jne 0x402efc
cmp dword [esi + 0x284], 0x6863736f
jne 0x402efc
cmp dword [esi + 0x288], 0x616c5320
jne 0x402efc
cmp dword [esi + 0x28c], 0x73286576
jne 0x402efc
cmp dword [esi + 0x290], 0x6b636f74
jne 0x402efc
cmp dword [esi + 0x294], 0x41432029
jne 0x402efc
cmp word [esi + 0x298], 0x4e
je 0x402f9c
cmp dword [esi + 0x270], 0x776d6224
jne 0x402fd0
cmp dword [esi + 0x274], 0x315f655f
jne 0x402fd0
cmp dword [esi + 0x278], 0x2d452430
jne 0x402fd0
cmp dword [esi + 0x27c], 0x69726573
jne 0x402fd0
cmp dword [esi + 0x280], 0x42207365
jne 0x402fd0
cmp dword [esi + 0x284], 0x6863736f
jne 0x402fd0
cmp dword [esi + 0x288], 0x616c5320
jne 0x402fd0
cmp dword [esi + 0x28c], 0x72286576
jne 0x402fd0
cmp dword [esi + 0x290], 0x69617065
jne 0x402fd0
cmp dword [esi + 0x294], 0x43202972
jne 0x402fd0
cmp word [esi + 0x298], 0x4e41
jne 0x402fd0
cmp byte [esi + 0x29a], 0
jne 0x402fd0
push 0x400740
push 0x2313
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp eax, 0
je 0x402fda
cmp eax, 0xffffffff
jne 0x402fe9
mov dword [ebp - 0x2c7c], 1
jmp 0x40307d
cmp byte [ebp - 0x2c73], 0x63
je 0x403064
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403044
xor eax, eax
jmp 0x40304e
cmp eax, 0x20
jbe 0x40304e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x40307d
push 0x40
lea edx, [ebp - 0x2c72]
push edx
lea edx, [ebp - 0x1b98]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x2c7c], 0
jne 0x4034f8
cmp dword [esi + 0x270], 0x776d6224
jne 0x403110
cmp dword [esi + 0x274], 0x305f655f
jne 0x403110
cmp dword [esi + 0x278], 0x2d452435
jne 0x403110
cmp dword [esi + 0x27c], 0x69726573
jne 0x403110
cmp dword [esi + 0x280], 0x42207365
jne 0x403110
cmp dword [esi + 0x284], 0x6863736f
jne 0x403110
cmp dword [esi + 0x288], 0x73614d20
jne 0x403110
cmp dword [esi + 0x28c], 0x28726574
jne 0x403110
cmp dword [esi + 0x290], 0x656e7574
jne 0x403110
cmp dword [esi + 0x294], 0x41432029
jne 0x403110
cmp word [esi + 0x298], 0x4e
je 0x403238
cmp dword [esi + 0x270], 0x776d6224
jne 0x4031a4
cmp dword [esi + 0x274], 0x305f655f
jne 0x4031a4
cmp dword [esi + 0x278], 0x2d452436
jne 0x4031a4
cmp dword [esi + 0x27c], 0x69726573
jne 0x4031a4
cmp dword [esi + 0x280], 0x42207365
jne 0x4031a4
cmp dword [esi + 0x284], 0x6863736f
jne 0x4031a4
cmp dword [esi + 0x288], 0x73614d20
jne 0x4031a4
cmp dword [esi + 0x28c], 0x28726574
jne 0x4031a4
cmp dword [esi + 0x290], 0x636f7473
jne 0x4031a4
cmp dword [esi + 0x294], 0x4320296b
jne 0x4031a4
cmp word [esi + 0x298], 0x4e41
jne 0x4031a4
cmp byte [esi + 0x29a], 0
je 0x403238
cmp dword [esi + 0x270], 0x776d6224
jne 0x40326c
cmp dword [esi + 0x274], 0x305f655f
jne 0x40326c
cmp dword [esi + 0x278], 0x2d452437
jne 0x40326c
cmp dword [esi + 0x27c], 0x69726573
jne 0x40326c
cmp dword [esi + 0x280], 0x42207365
jne 0x40326c
cmp dword [esi + 0x284], 0x6863736f
jne 0x40326c
cmp dword [esi + 0x288], 0x73614d20
jne 0x40326c
cmp dword [esi + 0x28c], 0x28726574
jne 0x40326c
cmp dword [esi + 0x290], 0x61706572
jne 0x40326c
cmp dword [esi + 0x294], 0x20297269
jne 0x40326c
cmp dword [esi + 0x298], 0x4e4143
jne 0x40326c
push 0x400780
push 0x2312
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0x9c49
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp dword [esi + 0x270], 0x776d6224
jne 0x4032f1
cmp dword [esi + 0x274], 0x305f655f
jne 0x4032f1
cmp dword [esi + 0x278], 0x2d452438
jne 0x4032f1
cmp dword [esi + 0x27c], 0x69726573
jne 0x4032f1
cmp dword [esi + 0x280], 0x42207365
jne 0x4032f1
cmp dword [esi + 0x284], 0x6863736f
jne 0x4032f1
cmp dword [esi + 0x288], 0x616c5320
jne 0x4032f1
cmp dword [esi + 0x28c], 0x74286576
jne 0x4032f1
cmp dword [esi + 0x290], 0x29656e75
jne 0x4032f1
cmp dword [esi + 0x294], 0x4e414320
jne 0x4032f1
cmp byte [esi + 0x298], 0
je 0x403417
cmp dword [esi + 0x270], 0x776d6224
jne 0x403377
cmp dword [esi + 0x274], 0x305f655f
jne 0x403377
cmp dword [esi + 0x278], 0x2d452439
jne 0x403377
cmp dword [esi + 0x27c], 0x69726573
jne 0x403377
cmp dword [esi + 0x280], 0x42207365
jne 0x403377
cmp dword [esi + 0x284], 0x6863736f
jne 0x403377
cmp dword [esi + 0x288], 0x616c5320
jne 0x403377
cmp dword [esi + 0x28c], 0x73286576
jne 0x403377
cmp dword [esi + 0x290], 0x6b636f74
jne 0x403377
cmp dword [esi + 0x294], 0x41432029
jne 0x403377
cmp word [esi + 0x298], 0x4e
je 0x403417
cmp dword [esi + 0x270], 0x776d6224
jne 0x40344b
cmp dword [esi + 0x274], 0x315f655f
jne 0x40344b
cmp dword [esi + 0x278], 0x2d452430
jne 0x40344b
cmp dword [esi + 0x27c], 0x69726573
jne 0x40344b
cmp dword [esi + 0x280], 0x42207365
jne 0x40344b
cmp dword [esi + 0x284], 0x6863736f
jne 0x40344b
cmp dword [esi + 0x288], 0x616c5320
jne 0x40344b
cmp dword [esi + 0x28c], 0x72286576
jne 0x40344b
cmp dword [esi + 0x290], 0x69617065
jne 0x40344b
cmp dword [esi + 0x294], 0x43202972
jne 0x40344b
cmp word [esi + 0x298], 0x4e41
jne 0x40344b
cmp byte [esi + 0x29a], 0
jne 0x40344b
push 0x400780
push 0x2313
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0x9c49
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp eax, 0
je 0x403455
cmp eax, 0xffffffff
jne 0x403464
mov dword [ebp - 0x2c7c], 1
jmp 0x4034f8
cmp byte [ebp - 0x2c73], 0x63
je 0x4034df
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4034bf
xor eax, eax
jmp 0x4034c9
cmp eax, 0x20
jbe 0x4034c9
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x4034f8
push 0x40
lea edx, [ebp - 0x2c72]
push edx
lea edx, [ebp - 0x1b58]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x2c7c], 0
jne 0x403973
cmp dword [esi + 0x270], 0x776d6224
jne 0x40358b
cmp dword [esi + 0x274], 0x305f655f
jne 0x40358b
cmp dword [esi + 0x278], 0x2d452435
jne 0x40358b
cmp dword [esi + 0x27c], 0x69726573
jne 0x40358b
cmp dword [esi + 0x280], 0x42207365
jne 0x40358b
cmp dword [esi + 0x284], 0x6863736f
jne 0x40358b
cmp dword [esi + 0x288], 0x73614d20
jne 0x40358b
cmp dword [esi + 0x28c], 0x28726574
jne 0x40358b
cmp dword [esi + 0x290], 0x656e7574
jne 0x40358b
cmp dword [esi + 0x294], 0x41432029
jne 0x40358b
cmp word [esi + 0x298], 0x4e
je 0x4036b3
cmp dword [esi + 0x270], 0x776d6224
jne 0x40361f
cmp dword [esi + 0x274], 0x305f655f
jne 0x40361f
cmp dword [esi + 0x278], 0x2d452436
jne 0x40361f
cmp dword [esi + 0x27c], 0x69726573
jne 0x40361f
cmp dword [esi + 0x280], 0x42207365
jne 0x40361f
cmp dword [esi + 0x284], 0x6863736f
jne 0x40361f
cmp dword [esi + 0x288], 0x73614d20
jne 0x40361f
cmp dword [esi + 0x28c], 0x28726574
jne 0x40361f
cmp dword [esi + 0x290], 0x636f7473
jne 0x40361f
cmp dword [esi + 0x294], 0x4320296b
jne 0x40361f
cmp word [esi + 0x298], 0x4e41
jne 0x40361f
cmp byte [esi + 0x29a], 0
je 0x4036b3
cmp dword [esi + 0x270], 0x776d6224
jne 0x4036e7
cmp dword [esi + 0x274], 0x305f655f
jne 0x4036e7
cmp dword [esi + 0x278], 0x2d452437
jne 0x4036e7
cmp dword [esi + 0x27c], 0x69726573
jne 0x4036e7
cmp dword [esi + 0x280], 0x42207365
jne 0x4036e7
cmp dword [esi + 0x284], 0x6863736f
jne 0x4036e7
cmp dword [esi + 0x288], 0x73614d20
jne 0x4036e7
cmp dword [esi + 0x28c], 0x28726574
jne 0x4036e7
cmp dword [esi + 0x290], 0x61706572
jne 0x4036e7
cmp dword [esi + 0x294], 0x20297269
jne 0x4036e7
cmp dword [esi + 0x298], 0x4e4143
jne 0x4036e7
push 0x4007c0
push 0x2312
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0x9c49
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp dword [esi + 0x270], 0x776d6224
jne 0x40376c
cmp dword [esi + 0x274], 0x305f655f
jne 0x40376c
cmp dword [esi + 0x278], 0x2d452438
jne 0x40376c
cmp dword [esi + 0x27c], 0x69726573
jne 0x40376c
cmp dword [esi + 0x280], 0x42207365
jne 0x40376c
cmp dword [esi + 0x284], 0x6863736f
jne 0x40376c
cmp dword [esi + 0x288], 0x616c5320
jne 0x40376c
cmp dword [esi + 0x28c], 0x74286576
jne 0x40376c
cmp dword [esi + 0x290], 0x29656e75
jne 0x40376c
cmp dword [esi + 0x294], 0x4e414320
jne 0x40376c
cmp byte [esi + 0x298], 0
je 0x403892
cmp dword [esi + 0x270], 0x776d6224
jne 0x4037f2
cmp dword [esi + 0x274], 0x305f655f
jne 0x4037f2
cmp dword [esi + 0x278], 0x2d452439
jne 0x4037f2
cmp dword [esi + 0x27c], 0x69726573
jne 0x4037f2
cmp dword [esi + 0x280], 0x42207365
jne 0x4037f2
cmp dword [esi + 0x284], 0x6863736f
jne 0x4037f2
cmp dword [esi + 0x288], 0x616c5320
jne 0x4037f2
cmp dword [esi + 0x28c], 0x73286576
jne 0x4037f2
cmp dword [esi + 0x290], 0x6b636f74
jne 0x4037f2
cmp dword [esi + 0x294], 0x41432029
jne 0x4037f2
cmp word [esi + 0x298], 0x4e
je 0x403892
cmp dword [esi + 0x270], 0x776d6224
jne 0x4038c6
cmp dword [esi + 0x274], 0x315f655f
jne 0x4038c6
cmp dword [esi + 0x278], 0x2d452430
jne 0x4038c6
cmp dword [esi + 0x27c], 0x69726573
jne 0x4038c6
cmp dword [esi + 0x280], 0x42207365
jne 0x4038c6
cmp dword [esi + 0x284], 0x6863736f
jne 0x4038c6
cmp dword [esi + 0x288], 0x616c5320
jne 0x4038c6
cmp dword [esi + 0x28c], 0x72286576
jne 0x4038c6
cmp dword [esi + 0x290], 0x69617065
jne 0x4038c6
cmp dword [esi + 0x294], 0x43202972
jne 0x4038c6
cmp word [esi + 0x298], 0x4e41
jne 0x4038c6
cmp byte [esi + 0x29a], 0
jne 0x4038c6
push 0x4007c0
push 0x2313
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 0xb
push eax
push 0x9c49
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp eax, 0
je 0x4038d0
cmp eax, 0xffffffff
jne 0x4038df
mov dword [ebp - 0x2c7c], 1
jmp 0x403973
cmp byte [ebp - 0x2c73], 0x63
je 0x40395a
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40393a
xor eax, eax
jmp 0x403944
cmp eax, 0x20
jbe 0x403944
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x403973
push 0x40
lea edx, [ebp - 0x2c72]
push edx
lea edx, [ebp - 0x1b18]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x403987
cmp eax, 0x1a
jne 0x406201
cmp dword [ebp - 0x2c7c], 0
jne 0x403deb
cmp dword [esi + 0x270], 0x776d6224
jne 0x403a1a
cmp dword [esi + 0x274], 0x305f655f
jne 0x403a1a
cmp dword [esi + 0x278], 0x2d452435
jne 0x403a1a
cmp dword [esi + 0x27c], 0x69726573
jne 0x403a1a
cmp dword [esi + 0x280], 0x42207365
jne 0x403a1a
cmp dword [esi + 0x284], 0x6863736f
jne 0x403a1a
cmp dword [esi + 0x288], 0x73614d20
jne 0x403a1a
cmp dword [esi + 0x28c], 0x28726574
jne 0x403a1a
cmp dword [esi + 0x290], 0x656e7574
jne 0x403a1a
cmp dword [esi + 0x294], 0x41432029
jne 0x403a1a
cmp word [esi + 0x298], 0x4e
je 0x403b42
cmp dword [esi + 0x270], 0x776d6224
jne 0x403aae
cmp dword [esi + 0x274], 0x305f655f
jne 0x403aae
cmp dword [esi + 0x278], 0x2d452436
jne 0x403aae
cmp dword [esi + 0x27c], 0x69726573
jne 0x403aae
cmp dword [esi + 0x280], 0x42207365
jne 0x403aae
cmp dword [esi + 0x284], 0x6863736f
jne 0x403aae
cmp dword [esi + 0x288], 0x73614d20
jne 0x403aae
cmp dword [esi + 0x28c], 0x28726574
jne 0x403aae
cmp dword [esi + 0x290], 0x636f7473
jne 0x403aae
cmp dword [esi + 0x294], 0x4320296b
jne 0x403aae
cmp word [esi + 0x298], 0x4e41
jne 0x403aae
cmp byte [esi + 0x29a], 0
je 0x403b42
cmp dword [esi + 0x270], 0x776d6224
jne 0x403b71
cmp dword [esi + 0x274], 0x305f655f
jne 0x403b71
cmp dword [esi + 0x278], 0x2d452437
jne 0x403b71
cmp dword [esi + 0x27c], 0x69726573
jne 0x403b71
cmp dword [esi + 0x280], 0x42207365
jne 0x403b71
cmp dword [esi + 0x284], 0x6863736f
jne 0x403b71
cmp dword [esi + 0x288], 0x73614d20
jne 0x403b71
cmp dword [esi + 0x28c], 0x28726574
jne 0x403b71
cmp dword [esi + 0x290], 0x61706572
jne 0x403b71
cmp dword [esi + 0x294], 0x20297269
jne 0x403b71
cmp dword [esi + 0x298], 0x4e4143
jne 0x403b71
push 0x891a12
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x403bf6
cmp dword [esi + 0x274], 0x305f655f
jne 0x403bf6
cmp dword [esi + 0x278], 0x2d452438
jne 0x403bf6
cmp dword [esi + 0x27c], 0x69726573
jne 0x403bf6
cmp dword [esi + 0x280], 0x42207365
jne 0x403bf6
cmp dword [esi + 0x284], 0x6863736f
jne 0x403bf6
cmp dword [esi + 0x288], 0x616c5320
jne 0x403bf6
cmp dword [esi + 0x28c], 0x74286576
jne 0x403bf6
cmp dword [esi + 0x290], 0x29656e75
jne 0x403bf6
cmp dword [esi + 0x294], 0x4e414320
jne 0x403bf6
cmp byte [esi + 0x298], 0
je 0x403d18
cmp dword [esi + 0x270], 0x776d6224
jne 0x403c7c
cmp dword [esi + 0x274], 0x305f655f
jne 0x403c7c
cmp dword [esi + 0x278], 0x2d452439
jne 0x403c7c
cmp dword [esi + 0x27c], 0x69726573
jne 0x403c7c
cmp dword [esi + 0x280], 0x42207365
jne 0x403c7c
cmp dword [esi + 0x284], 0x6863736f
jne 0x403c7c
cmp dword [esi + 0x288], 0x616c5320
jne 0x403c7c
cmp dword [esi + 0x28c], 0x73286576
jne 0x403c7c
cmp dword [esi + 0x290], 0x6b636f74
jne 0x403c7c
cmp dword [esi + 0x294], 0x41432029
jne 0x403c7c
cmp word [esi + 0x298], 0x4e
je 0x403d18
cmp dword [esi + 0x270], 0x776d6224
jne 0x403d47
cmp dword [esi + 0x274], 0x315f655f
jne 0x403d47
cmp dword [esi + 0x278], 0x2d452430
jne 0x403d47
cmp dword [esi + 0x27c], 0x69726573
jne 0x403d47
cmp dword [esi + 0x280], 0x42207365
jne 0x403d47
cmp dword [esi + 0x284], 0x6863736f
jne 0x403d47
cmp dword [esi + 0x288], 0x616c5320
jne 0x403d47
cmp dword [esi + 0x28c], 0x72286576
jne 0x403d47
cmp dword [esi + 0x290], 0x69617065
jne 0x403d47
cmp dword [esi + 0x294], 0x43202972
jne 0x403d47
cmp word [esi + 0x298], 0x4e41
jne 0x403d47
cmp byte [esi + 0x29a], 0
jne 0x403d47
push 0x891a13
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x403d51
cmp eax, 0xffffffff
jne 0x403d60
mov dword [ebp - 0x2c7c], 1
jmp 0x403deb
cmp byte [ebp - 0x2c73], 0x5a
jne 0x403deb
sub eax, 7
xor ecx, ecx
cmp ecx, eax
jae 0x403d90
cmp ecx, 0x3f
jae 0x403d90
mov al, byte [ebp + ecx - 0x2c71]
test al, al
je 0x403d90
mov byte [ebp + ecx - 0x1ad8], al
inc ecx
jmp 0x403d72
mov byte [ebp + ecx - 0x1ad8], 0
lea eax, [ebp - 0x1ad8]
push 0xa0d73
push 0x25203a4e
push 0x53205543
push 0x45207265
push 0x696c7070
push 0x7573206d
push 0x65747379
push 0x53202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x404242
cmp dword [esi + 0x270], 0x776d6224
jne 0x403e7e
cmp dword [esi + 0x274], 0x305f655f
jne 0x403e7e
cmp dword [esi + 0x278], 0x2d452435
jne 0x403e7e
cmp dword [esi + 0x27c], 0x69726573
jne 0x403e7e
cmp dword [esi + 0x280], 0x42207365
jne 0x403e7e
cmp dword [esi + 0x284], 0x6863736f
jne 0x403e7e
cmp dword [esi + 0x288], 0x73614d20
jne 0x403e7e
cmp dword [esi + 0x28c], 0x28726574
jne 0x403e7e
cmp dword [esi + 0x290], 0x656e7574
jne 0x403e7e
cmp dword [esi + 0x294], 0x41432029
jne 0x403e7e
cmp word [esi + 0x298], 0x4e
je 0x403fa6
cmp dword [esi + 0x270], 0x776d6224
jne 0x403f12
cmp dword [esi + 0x274], 0x305f655f
jne 0x403f12
cmp dword [esi + 0x278], 0x2d452436
jne 0x403f12
cmp dword [esi + 0x27c], 0x69726573
jne 0x403f12
cmp dword [esi + 0x280], 0x42207365
jne 0x403f12
cmp dword [esi + 0x284], 0x6863736f
jne 0x403f12
cmp dword [esi + 0x288], 0x73614d20
jne 0x403f12
cmp dword [esi + 0x28c], 0x28726574
jne 0x403f12
cmp dword [esi + 0x290], 0x636f7473
jne 0x403f12
cmp dword [esi + 0x294], 0x4320296b
jne 0x403f12
cmp word [esi + 0x298], 0x4e41
jne 0x403f12
cmp byte [esi + 0x29a], 0
je 0x403fa6
cmp dword [esi + 0x270], 0x776d6224
jne 0x403fd5
cmp dword [esi + 0x274], 0x305f655f
jne 0x403fd5
cmp dword [esi + 0x278], 0x2d452437
jne 0x403fd5
cmp dword [esi + 0x27c], 0x69726573
jne 0x403fd5
cmp dword [esi + 0x280], 0x42207365
jne 0x403fd5
cmp dword [esi + 0x284], 0x6863736f
jne 0x403fd5
cmp dword [esi + 0x288], 0x73614d20
jne 0x403fd5
cmp dword [esi + 0x28c], 0x28726574
jne 0x403fd5
cmp dword [esi + 0x290], 0x61706572
jne 0x403fd5
cmp dword [esi + 0x294], 0x20297269
jne 0x403fd5
cmp dword [esi + 0x298], 0x4e4143
jne 0x403fd5
push 0x911a12
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x40405a
cmp dword [esi + 0x274], 0x305f655f
jne 0x40405a
cmp dword [esi + 0x278], 0x2d452438
jne 0x40405a
cmp dword [esi + 0x27c], 0x69726573
jne 0x40405a
cmp dword [esi + 0x280], 0x42207365
jne 0x40405a
cmp dword [esi + 0x284], 0x6863736f
jne 0x40405a
cmp dword [esi + 0x288], 0x616c5320
jne 0x40405a
cmp dword [esi + 0x28c], 0x74286576
jne 0x40405a
cmp dword [esi + 0x290], 0x29656e75
jne 0x40405a
cmp dword [esi + 0x294], 0x4e414320
jne 0x40405a
cmp byte [esi + 0x298], 0
je 0x40417c
cmp dword [esi + 0x270], 0x776d6224
jne 0x4040e0
cmp dword [esi + 0x274], 0x305f655f
jne 0x4040e0
cmp dword [esi + 0x278], 0x2d452439
jne 0x4040e0
cmp dword [esi + 0x27c], 0x69726573
jne 0x4040e0
cmp dword [esi + 0x280], 0x42207365
jne 0x4040e0
cmp dword [esi + 0x284], 0x6863736f
jne 0x4040e0
cmp dword [esi + 0x288], 0x616c5320
jne 0x4040e0
cmp dword [esi + 0x28c], 0x73286576
jne 0x4040e0
cmp dword [esi + 0x290], 0x6b636f74
jne 0x4040e0
cmp dword [esi + 0x294], 0x41432029
jne 0x4040e0
cmp word [esi + 0x298], 0x4e
je 0x40417c
cmp dword [esi + 0x270], 0x776d6224
jne 0x4041ab
cmp dword [esi + 0x274], 0x315f655f
jne 0x4041ab
cmp dword [esi + 0x278], 0x2d452430
jne 0x4041ab
cmp dword [esi + 0x27c], 0x69726573
jne 0x4041ab
cmp dword [esi + 0x280], 0x42207365
jne 0x4041ab
cmp dword [esi + 0x284], 0x6863736f
jne 0x4041ab
cmp dword [esi + 0x288], 0x616c5320
jne 0x4041ab
cmp dword [esi + 0x28c], 0x72286576
jne 0x4041ab
cmp dword [esi + 0x290], 0x69617065
jne 0x4041ab
cmp dword [esi + 0x294], 0x43202972
jne 0x4041ab
cmp word [esi + 0x298], 0x4e41
jne 0x4041ab
cmp byte [esi + 0x29a], 0
jne 0x4041ab
push 0x911a13
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x4041b5
cmp eax, 0xffffffff
jne 0x4041c4
mov dword [ebp - 0x2c7c], 1
jmp 0x404242
cmp byte [ebp - 0x2c73], 0x5a
jne 0x404242
mov ecx, dword [ebp - 0x2c71]
bswap ecx
movzx eax, word [ebp - 0x2c6d]
xchg ah, al
push 0xa
push 0xd58322e
push 0x2558382e
push 0x25203a72
push 0x65626d75
push 0x6e205748
push 0x20554345
push 0x20726572
push 0x75746361
push 0x66756e61
push 0x6d20656c
push 0x63696865
push 0x56202445
push 0x4d495424
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x48
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x40477e
cmp dword [esi + 0x270], 0x776d6224
jne 0x4042d5
cmp dword [esi + 0x274], 0x305f655f
jne 0x4042d5
cmp dword [esi + 0x278], 0x2d452435
jne 0x4042d5
cmp dword [esi + 0x27c], 0x69726573
jne 0x4042d5
cmp dword [esi + 0x280], 0x42207365
jne 0x4042d5
cmp dword [esi + 0x284], 0x6863736f
jne 0x4042d5
cmp dword [esi + 0x288], 0x73614d20
jne 0x4042d5
cmp dword [esi + 0x28c], 0x28726574
jne 0x4042d5
cmp dword [esi + 0x290], 0x656e7574
jne 0x4042d5
cmp dword [esi + 0x294], 0x41432029
jne 0x4042d5
cmp word [esi + 0x298], 0x4e
je 0x4043fd
cmp dword [esi + 0x270], 0x776d6224
jne 0x404369
cmp dword [esi + 0x274], 0x305f655f
jne 0x404369
cmp dword [esi + 0x278], 0x2d452436
jne 0x404369
cmp dword [esi + 0x27c], 0x69726573
jne 0x404369
cmp dword [esi + 0x280], 0x42207365
jne 0x404369
cmp dword [esi + 0x284], 0x6863736f
jne 0x404369
cmp dword [esi + 0x288], 0x73614d20
jne 0x404369
cmp dword [esi + 0x28c], 0x28726574
jne 0x404369
cmp dword [esi + 0x290], 0x636f7473
jne 0x404369
cmp dword [esi + 0x294], 0x4320296b
jne 0x404369
cmp word [esi + 0x298], 0x4e41
jne 0x404369
cmp byte [esi + 0x29a], 0
je 0x4043fd
cmp dword [esi + 0x270], 0x776d6224
jne 0x40442c
cmp dword [esi + 0x274], 0x305f655f
jne 0x40442c
cmp dword [esi + 0x278], 0x2d452437
jne 0x40442c
cmp dword [esi + 0x27c], 0x69726573
jne 0x40442c
cmp dword [esi + 0x280], 0x42207365
jne 0x40442c
cmp dword [esi + 0x284], 0x6863736f
jne 0x40442c
cmp dword [esi + 0x288], 0x73614d20
jne 0x40442c
cmp dword [esi + 0x28c], 0x28726574
jne 0x40442c
cmp dword [esi + 0x290], 0x61706572
jne 0x40442c
cmp dword [esi + 0x294], 0x20297269
jne 0x40442c
cmp dword [esi + 0x298], 0x4e4143
jne 0x40442c
push 0x801a12
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x4044b1
cmp dword [esi + 0x274], 0x305f655f
jne 0x4044b1
cmp dword [esi + 0x278], 0x2d452438
jne 0x4044b1
cmp dword [esi + 0x27c], 0x69726573
jne 0x4044b1
cmp dword [esi + 0x280], 0x42207365
jne 0x4044b1
cmp dword [esi + 0x284], 0x6863736f
jne 0x4044b1
cmp dword [esi + 0x288], 0x616c5320
jne 0x4044b1
cmp dword [esi + 0x28c], 0x74286576
jne 0x4044b1
cmp dword [esi + 0x290], 0x29656e75
jne 0x4044b1
cmp dword [esi + 0x294], 0x4e414320
jne 0x4044b1
cmp byte [esi + 0x298], 0
je 0x4045d3
cmp dword [esi + 0x270], 0x776d6224
jne 0x404537
cmp dword [esi + 0x274], 0x305f655f
jne 0x404537
cmp dword [esi + 0x278], 0x2d452439
jne 0x404537
cmp dword [esi + 0x27c], 0x69726573
jne 0x404537
cmp dword [esi + 0x280], 0x42207365
jne 0x404537
cmp dword [esi + 0x284], 0x6863736f
jne 0x404537
cmp dword [esi + 0x288], 0x616c5320
jne 0x404537
cmp dword [esi + 0x28c], 0x73286576
jne 0x404537
cmp dword [esi + 0x290], 0x6b636f74
jne 0x404537
cmp dword [esi + 0x294], 0x41432029
jne 0x404537
cmp word [esi + 0x298], 0x4e
je 0x4045d3
cmp dword [esi + 0x270], 0x776d6224
jne 0x404602
cmp dword [esi + 0x274], 0x315f655f
jne 0x404602
cmp dword [esi + 0x278], 0x2d452430
jne 0x404602
cmp dword [esi + 0x27c], 0x69726573
jne 0x404602
cmp dword [esi + 0x280], 0x42207365
jne 0x404602
cmp dword [esi + 0x284], 0x6863736f
jne 0x404602
cmp dword [esi + 0x288], 0x616c5320
jne 0x404602
cmp dword [esi + 0x28c], 0x72286576
jne 0x404602
cmp dword [esi + 0x290], 0x69617065
jne 0x404602
cmp dword [esi + 0x294], 0x43202972
jne 0x404602
cmp word [esi + 0x298], 0x4e41
jne 0x404602
cmp byte [esi + 0x29a], 0
jne 0x404602
push 0x801a13
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x40460c
cmp eax, 0xffffffff
jne 0x40461b
mov dword [ebp - 0x2c7c], 1
jmp 0x40477e
cmp byte [ebp - 0x2c73], 0x5a
jne 0x40477e
movzx eax, word [ebp - 0x2c6b]
xchg ah, al
push 0xa0d58
push 0x342e2520
push 0x3a786564
push 0x6e692067
push 0x6e69646f
push 0x43202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp - 0x2c69]
bswap eax
push 0xa0d58
push 0x382e2520
push 0x3a6e6f69
push 0x73726576
push 0x2065736f
push 0x6e676169
push 0x44202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
movzx edx, byte [ebp - 0x2c64]
movzx ecx, byte [ebp - 0x2c63]
movzx eax, byte [ebp - 0x2c62]
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2530
push 0x32203a6e
push 0x6f697463
push 0x75646f72
push 0x7020666f
push 0x20657461
push 0x44202445
push 0x4d495424
push eax
push ecx
push edx
lea eax, [esp + 0xc]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x44
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
movzx eax, byte [ebp - 0x2c61]
push 0xa0d58
push 0x322e2520
push 0x3a726569
push 0x6c707075
push 0x7320574d
push 0x42202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x404bd9
cmp dword [esi + 0x270], 0x776d6224
jne 0x404811
cmp dword [esi + 0x274], 0x305f655f
jne 0x404811
cmp dword [esi + 0x278], 0x2d452435
jne 0x404811
cmp dword [esi + 0x27c], 0x69726573
jne 0x404811
cmp dword [esi + 0x280], 0x42207365
jne 0x404811
cmp dword [esi + 0x284], 0x6863736f
jne 0x404811
cmp dword [esi + 0x288], 0x73614d20
jne 0x404811
cmp dword [esi + 0x28c], 0x28726574
jne 0x404811
cmp dword [esi + 0x290], 0x656e7574
jne 0x404811
cmp dword [esi + 0x294], 0x41432029
jne 0x404811
cmp word [esi + 0x298], 0x4e
je 0x404939
cmp dword [esi + 0x270], 0x776d6224
jne 0x4048a5
cmp dword [esi + 0x274], 0x305f655f
jne 0x4048a5
cmp dword [esi + 0x278], 0x2d452436
jne 0x4048a5
cmp dword [esi + 0x27c], 0x69726573
jne 0x4048a5
cmp dword [esi + 0x280], 0x42207365
jne 0x4048a5
cmp dword [esi + 0x284], 0x6863736f
jne 0x4048a5
cmp dword [esi + 0x288], 0x73614d20
jne 0x4048a5
cmp dword [esi + 0x28c], 0x28726574
jne 0x4048a5
cmp dword [esi + 0x290], 0x636f7473
jne 0x4048a5
cmp dword [esi + 0x294], 0x4320296b
jne 0x4048a5
cmp word [esi + 0x298], 0x4e41
jne 0x4048a5
cmp byte [esi + 0x29a], 0
je 0x404939
cmp dword [esi + 0x270], 0x776d6224
jne 0x404968
cmp dword [esi + 0x274], 0x305f655f
jne 0x404968
cmp dword [esi + 0x278], 0x2d452437
jne 0x404968
cmp dword [esi + 0x27c], 0x69726573
jne 0x404968
cmp dword [esi + 0x280], 0x42207365
jne 0x404968
cmp dword [esi + 0x284], 0x6863736f
jne 0x404968
cmp dword [esi + 0x288], 0x73614d20
jne 0x404968
cmp dword [esi + 0x28c], 0x28726574
jne 0x404968
cmp dword [esi + 0x290], 0x61706572
jne 0x404968
cmp dword [esi + 0x294], 0x20297269
jne 0x404968
cmp dword [esi + 0x298], 0x4e4143
jne 0x404968
push 0x2252212
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x4049ed
cmp dword [esi + 0x274], 0x305f655f
jne 0x4049ed
cmp dword [esi + 0x278], 0x2d452438
jne 0x4049ed
cmp dword [esi + 0x27c], 0x69726573
jne 0x4049ed
cmp dword [esi + 0x280], 0x42207365
jne 0x4049ed
cmp dword [esi + 0x284], 0x6863736f
jne 0x4049ed
cmp dword [esi + 0x288], 0x616c5320
jne 0x4049ed
cmp dword [esi + 0x28c], 0x74286576
jne 0x4049ed
cmp dword [esi + 0x290], 0x29656e75
jne 0x4049ed
cmp dword [esi + 0x294], 0x4e414320
jne 0x4049ed
cmp byte [esi + 0x298], 0
je 0x404b0f
cmp dword [esi + 0x270], 0x776d6224
jne 0x404a73
cmp dword [esi + 0x274], 0x305f655f
jne 0x404a73
cmp dword [esi + 0x278], 0x2d452439
jne 0x404a73
cmp dword [esi + 0x27c], 0x69726573
jne 0x404a73
cmp dword [esi + 0x280], 0x42207365
jne 0x404a73
cmp dword [esi + 0x284], 0x6863736f
jne 0x404a73
cmp dword [esi + 0x288], 0x616c5320
jne 0x404a73
cmp dword [esi + 0x28c], 0x73286576
jne 0x404a73
cmp dword [esi + 0x290], 0x6b636f74
jne 0x404a73
cmp dword [esi + 0x294], 0x41432029
jne 0x404a73
cmp word [esi + 0x298], 0x4e
je 0x404b0f
cmp dword [esi + 0x270], 0x776d6224
jne 0x404b3e
cmp dword [esi + 0x274], 0x315f655f
jne 0x404b3e
cmp dword [esi + 0x278], 0x2d452430
jne 0x404b3e
cmp dword [esi + 0x27c], 0x69726573
jne 0x404b3e
cmp dword [esi + 0x280], 0x42207365
jne 0x404b3e
cmp dword [esi + 0x284], 0x6863736f
jne 0x404b3e
cmp dword [esi + 0x288], 0x616c5320
jne 0x404b3e
cmp dword [esi + 0x28c], 0x72286576
jne 0x404b3e
cmp dword [esi + 0x290], 0x69617065
jne 0x404b3e
cmp dword [esi + 0x294], 0x43202972
jne 0x404b3e
cmp word [esi + 0x298], 0x4e41
jne 0x404b3e
cmp byte [esi + 0x29a], 0
jne 0x404b3e
push 0x2252213
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x404b48
cmp eax, 0xffffffff
jne 0x404b57
mov dword [ebp - 0x2c7c], 1
jmp 0x404bd9
cmp byte [ebp - 0x2c73], 0x62
jne 0x404bd9
sub eax, 8
xor ecx, ecx
cmp ecx, eax
jae 0x404b83
cmp ecx, 0x3f
jae 0x404b83
mov al, byte [ebp + ecx - 0x2c70]
test al, al
je 0x404b83
mov byte [ebp + ecx - 0x1a98], al
inc ecx
jmp 0x404b65
mov byte [ebp + ecx - 0x1a98], 0
lea eax, [ebp - 0x1a98]
push 0xa0d73
push 0x25203a65
push 0x636e6572
push 0x65666572
push 0x20657261
push 0x77647261
push 0x48202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x405034
cmp dword [esi + 0x270], 0x776d6224
jne 0x404c6c
cmp dword [esi + 0x274], 0x305f655f
jne 0x404c6c
cmp dword [esi + 0x278], 0x2d452435
jne 0x404c6c
cmp dword [esi + 0x27c], 0x69726573
jne 0x404c6c
cmp dword [esi + 0x280], 0x42207365
jne 0x404c6c
cmp dword [esi + 0x284], 0x6863736f
jne 0x404c6c
cmp dword [esi + 0x288], 0x73614d20
jne 0x404c6c
cmp dword [esi + 0x28c], 0x28726574
jne 0x404c6c
cmp dword [esi + 0x290], 0x656e7574
jne 0x404c6c
cmp dword [esi + 0x294], 0x41432029
jne 0x404c6c
cmp word [esi + 0x298], 0x4e
je 0x404d94
cmp dword [esi + 0x270], 0x776d6224
jne 0x404d00
cmp dword [esi + 0x274], 0x305f655f
jne 0x404d00
cmp dword [esi + 0x278], 0x2d452436
jne 0x404d00
cmp dword [esi + 0x27c], 0x69726573
jne 0x404d00
cmp dword [esi + 0x280], 0x42207365
jne 0x404d00
cmp dword [esi + 0x284], 0x6863736f
jne 0x404d00
cmp dword [esi + 0x288], 0x73614d20
jne 0x404d00
cmp dword [esi + 0x28c], 0x28726574
jne 0x404d00
cmp dword [esi + 0x290], 0x636f7473
jne 0x404d00
cmp dword [esi + 0x294], 0x4320296b
jne 0x404d00
cmp word [esi + 0x298], 0x4e41
jne 0x404d00
cmp byte [esi + 0x29a], 0
je 0x404d94
cmp dword [esi + 0x270], 0x776d6224
jne 0x404dc3
cmp dword [esi + 0x274], 0x305f655f
jne 0x404dc3
cmp dword [esi + 0x278], 0x2d452437
jne 0x404dc3
cmp dword [esi + 0x27c], 0x69726573
jne 0x404dc3
cmp dword [esi + 0x280], 0x42207365
jne 0x404dc3
cmp dword [esi + 0x284], 0x6863736f
jne 0x404dc3
cmp dword [esi + 0x288], 0x73614d20
jne 0x404dc3
cmp dword [esi + 0x28c], 0x28726574
jne 0x404dc3
cmp dword [esi + 0x290], 0x61706572
jne 0x404dc3
cmp dword [esi + 0x294], 0x20297269
jne 0x404dc3
cmp dword [esi + 0x298], 0x4e4143
jne 0x404dc3
push 0x3252212
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x404e48
cmp dword [esi + 0x274], 0x305f655f
jne 0x404e48
cmp dword [esi + 0x278], 0x2d452438
jne 0x404e48
cmp dword [esi + 0x27c], 0x69726573
jne 0x404e48
cmp dword [esi + 0x280], 0x42207365
jne 0x404e48
cmp dword [esi + 0x284], 0x6863736f
jne 0x404e48
cmp dword [esi + 0x288], 0x616c5320
jne 0x404e48
cmp dword [esi + 0x28c], 0x74286576
jne 0x404e48
cmp dword [esi + 0x290], 0x29656e75
jne 0x404e48
cmp dword [esi + 0x294], 0x4e414320
jne 0x404e48
cmp byte [esi + 0x298], 0
je 0x404f6a
cmp dword [esi + 0x270], 0x776d6224
jne 0x404ece
cmp dword [esi + 0x274], 0x305f655f
jne 0x404ece
cmp dword [esi + 0x278], 0x2d452439
jne 0x404ece
cmp dword [esi + 0x27c], 0x69726573
jne 0x404ece
cmp dword [esi + 0x280], 0x42207365
jne 0x404ece
cmp dword [esi + 0x284], 0x6863736f
jne 0x404ece
cmp dword [esi + 0x288], 0x616c5320
jne 0x404ece
cmp dword [esi + 0x28c], 0x73286576
jne 0x404ece
cmp dword [esi + 0x290], 0x6b636f74
jne 0x404ece
cmp dword [esi + 0x294], 0x41432029
jne 0x404ece
cmp word [esi + 0x298], 0x4e
je 0x404f6a
cmp dword [esi + 0x270], 0x776d6224
jne 0x404f99
cmp dword [esi + 0x274], 0x315f655f
jne 0x404f99
cmp dword [esi + 0x278], 0x2d452430
jne 0x404f99
cmp dword [esi + 0x27c], 0x69726573
jne 0x404f99
cmp dword [esi + 0x280], 0x42207365
jne 0x404f99
cmp dword [esi + 0x284], 0x6863736f
jne 0x404f99
cmp dword [esi + 0x288], 0x616c5320
jne 0x404f99
cmp dword [esi + 0x28c], 0x72286576
jne 0x404f99
cmp dword [esi + 0x290], 0x69617065
jne 0x404f99
cmp dword [esi + 0x294], 0x43202972
jne 0x404f99
cmp word [esi + 0x298], 0x4e41
jne 0x404f99
cmp byte [esi + 0x29a], 0
jne 0x404f99
push 0x3252213
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x404fa3
cmp eax, 0xffffffff
jne 0x404fb2
mov dword [ebp - 0x2c7c], 1
jmp 0x405034
cmp byte [ebp - 0x2c73], 0x62
jne 0x405034
sub eax, 8
xor ecx, ecx
cmp ecx, eax
jae 0x404fde
cmp ecx, 0x3f
jae 0x404fde
mov al, byte [ebp + ecx - 0x2c70]
test al, al
je 0x404fde
mov byte [ebp + ecx - 0x1a58], al
inc ecx
jmp 0x404fc0
mov byte [ebp + ecx - 0x1a58], 0
lea eax, [ebp - 0x1a58]
push 0xa0d
push 0x7325203a
push 0x65636e65
push 0x72656665
push 0x72206d61
push 0x72676f72
push 0x50202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x40548a
cmp dword [esi + 0x270], 0x776d6224
jne 0x4050c7
cmp dword [esi + 0x274], 0x305f655f
jne 0x4050c7
cmp dword [esi + 0x278], 0x2d452435
jne 0x4050c7
cmp dword [esi + 0x27c], 0x69726573
jne 0x4050c7
cmp dword [esi + 0x280], 0x42207365
jne 0x4050c7
cmp dword [esi + 0x284], 0x6863736f
jne 0x4050c7
cmp dword [esi + 0x288], 0x73614d20
jne 0x4050c7
cmp dword [esi + 0x28c], 0x28726574
jne 0x4050c7
cmp dword [esi + 0x290], 0x656e7574
jne 0x4050c7
cmp dword [esi + 0x294], 0x41432029
jne 0x4050c7
cmp word [esi + 0x298], 0x4e
je 0x4051ef
cmp dword [esi + 0x270], 0x776d6224
jne 0x40515b
cmp dword [esi + 0x274], 0x305f655f
jne 0x40515b
cmp dword [esi + 0x278], 0x2d452436
jne 0x40515b
cmp dword [esi + 0x27c], 0x69726573
jne 0x40515b
cmp dword [esi + 0x280], 0x42207365
jne 0x40515b
cmp dword [esi + 0x284], 0x6863736f
jne 0x40515b
cmp dword [esi + 0x288], 0x73614d20
jne 0x40515b
cmp dword [esi + 0x28c], 0x28726574
jne 0x40515b
cmp dword [esi + 0x290], 0x636f7473
jne 0x40515b
cmp dword [esi + 0x294], 0x4320296b
jne 0x40515b
cmp word [esi + 0x298], 0x4e41
jne 0x40515b
cmp byte [esi + 0x29a], 0
je 0x4051ef
cmp dword [esi + 0x270], 0x776d6224
jne 0x40521e
cmp dword [esi + 0x274], 0x305f655f
jne 0x40521e
cmp dword [esi + 0x278], 0x2d452437
jne 0x40521e
cmp dword [esi + 0x27c], 0x69726573
jne 0x40521e
cmp dword [esi + 0x280], 0x42207365
jne 0x40521e
cmp dword [esi + 0x284], 0x6863736f
jne 0x40521e
cmp dword [esi + 0x288], 0x73614d20
jne 0x40521e
cmp dword [esi + 0x28c], 0x28726574
jne 0x40521e
cmp dword [esi + 0x290], 0x61706572
jne 0x40521e
cmp dword [esi + 0x294], 0x20297269
jne 0x40521e
cmp dword [esi + 0x298], 0x4e4143
jne 0x40521e
push 0x4252212
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x4052a3
cmp dword [esi + 0x274], 0x305f655f
jne 0x4052a3
cmp dword [esi + 0x278], 0x2d452438
jne 0x4052a3
cmp dword [esi + 0x27c], 0x69726573
jne 0x4052a3
cmp dword [esi + 0x280], 0x42207365
jne 0x4052a3
cmp dword [esi + 0x284], 0x6863736f
jne 0x4052a3
cmp dword [esi + 0x288], 0x616c5320
jne 0x4052a3
cmp dword [esi + 0x28c], 0x74286576
jne 0x4052a3
cmp dword [esi + 0x290], 0x29656e75
jne 0x4052a3
cmp dword [esi + 0x294], 0x4e414320
jne 0x4052a3
cmp byte [esi + 0x298], 0
je 0x4053c5
cmp dword [esi + 0x270], 0x776d6224
jne 0x405329
cmp dword [esi + 0x274], 0x305f655f
jne 0x405329
cmp dword [esi + 0x278], 0x2d452439
jne 0x405329
cmp dword [esi + 0x27c], 0x69726573
jne 0x405329
cmp dword [esi + 0x280], 0x42207365
jne 0x405329
cmp dword [esi + 0x284], 0x6863736f
jne 0x405329
cmp dword [esi + 0x288], 0x616c5320
jne 0x405329
cmp dword [esi + 0x28c], 0x73286576
jne 0x405329
cmp dword [esi + 0x290], 0x6b636f74
jne 0x405329
cmp dword [esi + 0x294], 0x41432029
jne 0x405329
cmp word [esi + 0x298], 0x4e
je 0x4053c5
cmp dword [esi + 0x270], 0x776d6224
jne 0x4053f4
cmp dword [esi + 0x274], 0x315f655f
jne 0x4053f4
cmp dword [esi + 0x278], 0x2d452430
jne 0x4053f4
cmp dword [esi + 0x27c], 0x69726573
jne 0x4053f4
cmp dword [esi + 0x280], 0x42207365
jne 0x4053f4
cmp dword [esi + 0x284], 0x6863736f
jne 0x4053f4
cmp dword [esi + 0x288], 0x616c5320
jne 0x4053f4
cmp dword [esi + 0x28c], 0x72286576
jne 0x4053f4
cmp dword [esi + 0x290], 0x69617065
jne 0x4053f4
cmp dword [esi + 0x294], 0x43202972
jne 0x4053f4
cmp word [esi + 0x298], 0x4e41
jne 0x4053f4
cmp byte [esi + 0x29a], 0
jne 0x4053f4
push 0x4252213
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x4053fe
cmp eax, 0xffffffff
jne 0x40540d
mov dword [ebp - 0x2c7c], 1
jmp 0x40548a
cmp byte [ebp - 0x2c73], 0x62
jne 0x40548a
sub eax, 8
xor ecx, ecx
cmp ecx, eax
jae 0x405439
cmp ecx, 0x3f
jae 0x405439
mov al, byte [ebp + ecx - 0x2c70]
test al, al
je 0x405439
mov byte [ebp + ecx - 0x1a18], al
inc ecx
jmp 0x40541b
mov byte [ebp + ecx - 0x1a18], 0
lea eax, [ebp - 0x1a18]
push 0xa0d73
push 0x25203a65
push 0x636e6572
push 0x65666572
push 0x20617461
push 0x44202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x405951
cmp dword [esi + 0x270], 0x776d6224
jne 0x40551d
cmp dword [esi + 0x274], 0x305f655f
jne 0x40551d
cmp dword [esi + 0x278], 0x2d452435
jne 0x40551d
cmp dword [esi + 0x27c], 0x69726573
jne 0x40551d
cmp dword [esi + 0x280], 0x42207365
jne 0x40551d
cmp dword [esi + 0x284], 0x6863736f
jne 0x40551d
cmp dword [esi + 0x288], 0x73614d20
jne 0x40551d
cmp dword [esi + 0x28c], 0x28726574
jne 0x40551d
cmp dword [esi + 0x290], 0x656e7574
jne 0x40551d
cmp dword [esi + 0x294], 0x41432029
jne 0x40551d
cmp word [esi + 0x298], 0x4e
je 0x405645
cmp dword [esi + 0x270], 0x776d6224
jne 0x4055b1
cmp dword [esi + 0x274], 0x305f655f
jne 0x4055b1
cmp dword [esi + 0x278], 0x2d452436
jne 0x4055b1
cmp dword [esi + 0x27c], 0x69726573
jne 0x4055b1
cmp dword [esi + 0x280], 0x42207365
jne 0x4055b1
cmp dword [esi + 0x284], 0x6863736f
jne 0x4055b1
cmp dword [esi + 0x288], 0x73614d20
jne 0x4055b1
cmp dword [esi + 0x28c], 0x28726574
jne 0x4055b1
cmp dword [esi + 0x290], 0x636f7473
jne 0x4055b1
cmp dword [esi + 0x294], 0x4320296b
jne 0x4055b1
cmp word [esi + 0x298], 0x4e41
jne 0x4055b1
cmp byte [esi + 0x29a], 0
je 0x405645
cmp dword [esi + 0x270], 0x776d6224
jne 0x405674
cmp dword [esi + 0x274], 0x305f655f
jne 0x405674
cmp dword [esi + 0x278], 0x2d452437
jne 0x405674
cmp dword [esi + 0x27c], 0x69726573
jne 0x405674
cmp dword [esi + 0x280], 0x42207365
jne 0x405674
cmp dword [esi + 0x284], 0x6863736f
jne 0x405674
cmp dword [esi + 0x288], 0x73614d20
jne 0x405674
cmp dword [esi + 0x28c], 0x28726574
jne 0x405674
cmp dword [esi + 0x290], 0x61706572
jne 0x405674
cmp dword [esi + 0x294], 0x20297269
jne 0x405674
cmp dword [esi + 0x298], 0x4e4143
jne 0x405674
push 0x40912
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x4056f9
cmp dword [esi + 0x274], 0x305f655f
jne 0x4056f9
cmp dword [esi + 0x278], 0x2d452438
jne 0x4056f9
cmp dword [esi + 0x27c], 0x69726573
jne 0x4056f9
cmp dword [esi + 0x280], 0x42207365
jne 0x4056f9
cmp dword [esi + 0x284], 0x6863736f
jne 0x4056f9
cmp dword [esi + 0x288], 0x616c5320
jne 0x4056f9
cmp dword [esi + 0x28c], 0x74286576
jne 0x4056f9
cmp dword [esi + 0x290], 0x29656e75
jne 0x4056f9
cmp dword [esi + 0x294], 0x4e414320
jne 0x4056f9
cmp byte [esi + 0x298], 0
je 0x40581b
cmp dword [esi + 0x270], 0x776d6224
jne 0x40577f
cmp dword [esi + 0x274], 0x305f655f
jne 0x40577f
cmp dword [esi + 0x278], 0x2d452439
jne 0x40577f
cmp dword [esi + 0x27c], 0x69726573
jne 0x40577f
cmp dword [esi + 0x280], 0x42207365
jne 0x40577f
cmp dword [esi + 0x284], 0x6863736f
jne 0x40577f
cmp dword [esi + 0x288], 0x616c5320
jne 0x40577f
cmp dword [esi + 0x28c], 0x73286576
jne 0x40577f
cmp dword [esi + 0x290], 0x6b636f74
jne 0x40577f
cmp dword [esi + 0x294], 0x41432029
jne 0x40577f
cmp word [esi + 0x298], 0x4e
je 0x40581b
cmp dword [esi + 0x270], 0x776d6224
jne 0x40584a
cmp dword [esi + 0x274], 0x315f655f
jne 0x40584a
cmp dword [esi + 0x278], 0x2d452430
jne 0x40584a
cmp dword [esi + 0x27c], 0x69726573
jne 0x40584a
cmp dword [esi + 0x280], 0x42207365
jne 0x40584a
cmp dword [esi + 0x284], 0x6863736f
jne 0x40584a
cmp dword [esi + 0x288], 0x616c5320
jne 0x40584a
cmp dword [esi + 0x28c], 0x72286576
jne 0x40584a
cmp dword [esi + 0x290], 0x69617065
jne 0x40584a
cmp dword [esi + 0x294], 0x43202972
jne 0x40584a
cmp word [esi + 0x298], 0x4e41
jne 0x40584a
cmp byte [esi + 0x29a], 0
jne 0x40584a
push 0x40913
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x405854
cmp eax, 0xffffffff
jne 0x405863
mov dword [ebp - 0x2c7c], 1
jmp 0x405951
cmp byte [ebp - 0x2c73], 0x49
jne 0x405951
cmp eax, 8
jbe 0x405951
sub eax, 8
xor ecx, ecx
cmp ecx, eax
jae 0x40589c
cmp ecx, 0x10
jae 0x40589c
mov al, byte [ebp + ecx - 0x2c70]
test al, al
je 0x40589c
mov byte [ebp + ecx - 0x19d8], al
inc ecx
jmp 0x40587e
mov byte [ebp + ecx - 0x19d8], 0
sub eax, 0x10
xor ecx, ecx
cmp ecx, eax
jae 0x4058c7
cmp ecx, 0x10
jae 0x4058c7
mov al, byte [ebp + ecx - 0x2c60]
test al, al
je 0x4058c7
mov byte [ebp + ecx - 0x1998], al
inc ecx
jmp 0x4058a9
mov byte [ebp + ecx - 0x1998], 0
lea eax, [ebp - 0x19d8]
push 0xa
push 0xd732520
push 0x3a62696c
push 0x61632034
push 0x30202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
lea eax, [ebp - 0x1998]
push 0xa
push 0xd732520
push 0x3a62696c
push 0x61632034
push 0x30202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x405dfc
mov dword [ebp - 0x2d84], 0xf
cmp dword [esi + 0x270], 0x776d6224
jne 0x4059ee
cmp dword [esi + 0x274], 0x305f655f
jne 0x4059ee
cmp dword [esi + 0x278], 0x2d452435
jne 0x4059ee
cmp dword [esi + 0x27c], 0x69726573
jne 0x4059ee
cmp dword [esi + 0x280], 0x42207365
jne 0x4059ee
cmp dword [esi + 0x284], 0x6863736f
jne 0x4059ee
cmp dword [esi + 0x288], 0x73614d20
jne 0x4059ee
cmp dword [esi + 0x28c], 0x28726574
jne 0x4059ee
cmp dword [esi + 0x290], 0x656e7574
jne 0x4059ee
cmp dword [esi + 0x294], 0x41432029
jne 0x4059ee
cmp word [esi + 0x298], 0x4e
je 0x405b16
cmp dword [esi + 0x270], 0x776d6224
jne 0x405a82
cmp dword [esi + 0x274], 0x305f655f
jne 0x405a82
cmp dword [esi + 0x278], 0x2d452436
jne 0x405a82
cmp dword [esi + 0x27c], 0x69726573
jne 0x405a82
cmp dword [esi + 0x280], 0x42207365
jne 0x405a82
cmp dword [esi + 0x284], 0x6863736f
jne 0x405a82
cmp dword [esi + 0x288], 0x73614d20
jne 0x405a82
cmp dword [esi + 0x28c], 0x28726574
jne 0x405a82
cmp dword [esi + 0x290], 0x636f7473
jne 0x405a82
cmp dword [esi + 0x294], 0x4320296b
jne 0x405a82
cmp word [esi + 0x298], 0x4e41
jne 0x405a82
cmp byte [esi + 0x29a], 0
je 0x405b16
cmp dword [esi + 0x270], 0x776d6224
jne 0x405b45
cmp dword [esi + 0x274], 0x305f655f
jne 0x405b45
cmp dword [esi + 0x278], 0x2d452437
jne 0x405b45
cmp dword [esi + 0x27c], 0x69726573
jne 0x405b45
cmp dword [esi + 0x280], 0x42207365
jne 0x405b45
cmp dword [esi + 0x284], 0x6863736f
jne 0x405b45
cmp dword [esi + 0x288], 0x73614d20
jne 0x405b45
cmp dword [esi + 0x28c], 0x28726574
jne 0x405b45
cmp dword [esi + 0x290], 0x61706572
jne 0x405b45
cmp dword [esi + 0x294], 0x20297269
jne 0x405b45
cmp dword [esi + 0x298], 0x4e4143
jne 0x405b45
push 0x60912
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x405bca
cmp dword [esi + 0x274], 0x305f655f
jne 0x405bca
cmp dword [esi + 0x278], 0x2d452438
jne 0x405bca
cmp dword [esi + 0x27c], 0x69726573
jne 0x405bca
cmp dword [esi + 0x280], 0x42207365
jne 0x405bca
cmp dword [esi + 0x284], 0x6863736f
jne 0x405bca
cmp dword [esi + 0x288], 0x616c5320
jne 0x405bca
cmp dword [esi + 0x28c], 0x74286576
jne 0x405bca
cmp dword [esi + 0x290], 0x29656e75
jne 0x405bca
cmp dword [esi + 0x294], 0x4e414320
jne 0x405bca
cmp byte [esi + 0x298], 0
je 0x405cec
cmp dword [esi + 0x270], 0x776d6224
jne 0x405c50
cmp dword [esi + 0x274], 0x305f655f
jne 0x405c50
cmp dword [esi + 0x278], 0x2d452439
jne 0x405c50
cmp dword [esi + 0x27c], 0x69726573
jne 0x405c50
cmp dword [esi + 0x280], 0x42207365
jne 0x405c50
cmp dword [esi + 0x284], 0x6863736f
jne 0x405c50
cmp dword [esi + 0x288], 0x616c5320
jne 0x405c50
cmp dword [esi + 0x28c], 0x73286576
jne 0x405c50
cmp dword [esi + 0x290], 0x6b636f74
jne 0x405c50
cmp dword [esi + 0x294], 0x41432029
jne 0x405c50
cmp word [esi + 0x298], 0x4e
je 0x405cec
cmp dword [esi + 0x270], 0x776d6224
jne 0x405d1b
cmp dword [esi + 0x274], 0x315f655f
jne 0x405d1b
cmp dword [esi + 0x278], 0x2d452430
jne 0x405d1b
cmp dword [esi + 0x27c], 0x69726573
jne 0x405d1b
cmp dword [esi + 0x280], 0x42207365
jne 0x405d1b
cmp dword [esi + 0x284], 0x6863736f
jne 0x405d1b
cmp dword [esi + 0x288], 0x616c5320
jne 0x405d1b
cmp dword [esi + 0x28c], 0x72286576
jne 0x405d1b
cmp dword [esi + 0x290], 0x69617065
jne 0x405d1b
cmp dword [esi + 0x294], 0x43202972
jne 0x405d1b
cmp word [esi + 0x298], 0x4e41
jne 0x405d1b
cmp byte [esi + 0x29a], 0
jne 0x405d1b
push 0x60913
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 7
push eax
push 0xfa0
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp eax, 0
je 0x405d25
cmp eax, 0xffffffff
jne 0x405d34
mov dword [ebp - 0x2c7c], 1
jmp 0x405dfc
cmp byte [ebp - 0x2c73], 0x7f
jne 0x405d57
cmp byte [ebp - 0x2c71], 0x22
jne 0x405d57
dec dword [ebp - 0x2d84]
jne 0x405968
jmp 0x405dfc
cmp byte [ebp - 0x2c73], 0x49
jne 0x405dfc
mov eax, dword [ebp - 0x2c70]
bswap eax
push 0xa
push 0xd58382e
push 0x25203a6d
push 0x6172676f
push 0x7250204e
push 0x56432036
push 0x30202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp - 0x2c6c]
bswap eax
push 0xa0d
push 0x58382e25
push 0x203a6174
push 0x6144204e
push 0x56432036
push 0x30202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c7c], 0
jne 0x406201
mov dword [ebp - 0x1958], 0
cmp dword [ebp - 0x1958], 4
jae 0x406201
imul ecx, dword [ebp - 0x1958], 0x40
cmp byte [ebp + ecx - 0x1bd8], 0
je 0x4061f6
mov eax, dword [ebp - 0x1958]
inc eax
push 0xa0d20
push 0x3a642520
push 0x7972746e
push 0x45204649
push 0x41202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul ecx, dword [ebp - 0x1958], 0x40
movzx edx, byte [ebp + ecx - 0x1bcf]
movzx eax, byte [ebp + ecx - 0x1bcd]
movzx ecx, byte [ebp + ecx - 0x1bce]
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d78
push 0x322e2530
push 0x32203a67
push 0x6e696d6d
push 0x6172676f
push 0x72702066
push 0x6f206574
push 0x61442020
push eax
push ecx
push edx
lea eax, [esp + 0xc]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x40
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul ecx, dword [ebp - 0x1958], 0x40
movzx eax, word [ebp + ecx - 0x1bc8]
xchg ah, al
mov ecx, dword [ebp + ecx - 0x1bcc]
bswap ecx
push 0
push 0xa0d5834
push 0x2e255838
push 0x2e25203a
push 0x7265626d
push 0x756e206e
push 0x6f697461
push 0x63696669
push 0x746e6564
push 0x6920796c
push 0x626d6573
push 0x73412020
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x40
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul ecx, dword [ebp - 0x1958], 0x40
movzx eax, word [ebp + ecx - 0x1bc2]
xchg ah, al
mov ecx, dword [ebp + ecx - 0x1bc6]
bswap ecx
push 0xa
push 0xd58342e
push 0x2558382e
push 0x25203a72
push 0x65626d75
push 0x6e206572
push 0x61777466
push 0x6f532020
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul ecx, dword [ebp - 0x1958], 0x40
movzx eax, word [ebp + ecx - 0x1bbc]
xchg ah, al
mov ecx, dword [ebp + ecx - 0x1bc0]
bswap ecx
push 0xa
push 0xd58342e
push 0x2558382e
push 0x25203a6c
push 0x61766f72
push 0x70706120
push 0x65707974
push 0x20726f20
push 0x6e6f6974
push 0x616c7567
push 0x65722074
push 0x73756168
push 0x78452020
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x44
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul ecx, dword [ebp - 0x1958], 0x40
mov ecx, dword [ebp + ecx - 0x1bba]
bswap ecx
shr ecx, 8
push 0xa0d58
push 0x362e2520
push 0x3a726562
push 0x6d756e20
push 0x72656c61
push 0x65442020
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul edx, dword [ebp - 0x1958], 0x40
xor ecx, ecx
cmp ecx, 5
jae 0x4060b3
lea eax, [ebp + edx - 0x1bb7]
mov al, byte [eax + ecx]
test al, al
je 0x4060b3
mov byte [ebp + ecx - 0x1954], al
inc ecx
jmp 0x406096
mov byte [ebp + ecx - 0x1954], 0
lea eax, [ebp - 0x1954]
push 0xa0d
push 0x7325203a
push 0x72657473
push 0x65542020
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x1c
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul edx, dword [ebp - 0x1958], 0x40
xor ecx, ecx
cmp ecx, 0xc
jae 0x40611b
lea eax, [ebp + edx - 0x1bb1]
mov al, byte [eax + ecx]
test al, al
je 0x40611b
mov byte [ebp + ecx - 0x1914], al
inc ecx
jmp 0x4060fe
mov byte [ebp + ecx - 0x1914], 0
lea eax, [ebp - 0x1914]
push 0xa
push 0xd732520
push 0x3a646e61
push 0x7473206d
push 0x6172676f
push 0x72502020
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
imul edx, dword [ebp - 0x1958], 0x40
xor ecx, ecx
cmp ecx, 0xa
jae 0x40618e
lea eax, [ebp + edx - 0x1ba5]
mov al, byte [eax + ecx]
test al, al
je 0x40618e
cmp al, 0xff
je 0x40618e
mov byte [ebp + ecx - 0x18d4], al
inc ecx
jmp 0x40616d
mov byte [ebp + ecx - 0x18d4], 0
xor ecx, ecx
cmp ecx, 7
jae 0x4061b9
lea eax, [ebp + edx - 0x1bd7]
mov al, byte [eax + ecx]
test al, al
je 0x4061b9
cmp al, 0xff
je 0x4061b9
mov byte [ebp + ecx - 0x18ca], al
inc ecx
jmp 0x406198
mov byte [ebp + ecx - 0x18ca], 0
lea eax, [ebp - 0x18d4]
push 0xa0d73
push 0x25203a4e
push 0x49562020
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x18
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x1958]
jmp 0x405e13
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x40621a
cmp eax, 0x1a
je 0x40621a
cmp eax, 0xe
jne 0x4065b5
cmp dword [ebp - 0x2c7c], 0
jne 0x4065b5
mov dword [ebp - 0x188c], 0xffffffff
push 0xa
push 2
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x406271
mov dword [ebp - 0x1894], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x1890], eax
push dword [ebp - 0x1894]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x406271
mov dword [ebp - 0x188c], eax
test eax, eax
jne 0x4062c7
push 0xa0d32
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x2c7c], 1
jmp 0x406548
mov edx, dword [ebp - 0x188c]
push dword [edx + 4]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x1874], eax
mov ecx, dword [ebp - 0x188c]
mov edx, dword [ecx + 4]
add ecx, dword [ecx]
add ecx, 0xc
push edx
push ecx
push eax
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov edx, dword [ebp - 0x1874]
cmp byte [edx + 3], 8
je 0x406356
push 0xa0d34
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x2c7c], 1
jmp 0x40653c
mov ecx, dword [ebp - 0x188c]
mov ecx, dword [ecx + 4]
lea ecx, [ecx + edx - 4]
mov ecx, dword [ecx]
mov dword [ebp - 0x186c], ecx
push dword [ebp - 0x186c]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x1870], eax
mov ecx, dword [ebp - 0x188c]
push dword [ebp - 0x186c]
push eax
push dword [ecx + 4]
push dword [ebp - 0x1874]
call dword [ebx + 0x4c]
test eax, eax
jne 0x4063ee
push 0xa0d35
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x2c7c], 1
jmp 0x406530
push 0x10
push 0
lea edx, [ebp - 0x1732]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0x1958], 0
cmp dword [ebp - 0x1958], 4
jae 0x406481
imul ecx, dword [ebp - 0x1958], 0x40
cmp byte [ebp + ecx - 0x1bd8], 0
je 0x406479
push 0
push 0x58342e25
push 0x58382e25
movzx eax, word [ebp + ecx - 0x1bc8]
xchg ah, al
mov ecx, dword [ebp + ecx - 0x1bcc]
bswap ecx
push eax
push ecx
lea edx, [esp + 8]
push edx
lea edx, [ebp - 0x1772]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x10
add esp, 0xc
lea edx, [ebp - 0x1772]
push edx
call fcn.004071d3
imul ecx, dword [ebp - 0x1958], 4
mov dword [ebp + ecx - 0x1732], eax
inc dword [ebp - 0x1958]
jmp 0x40640c
xor ecx, ecx
mov edx, dword [ebp - 0x1870]
cmp ecx, dword [ebp - 0x186c]
jae 0x406530
mov eax, dword [edx + ecx]
cmp eax, dword [ebp - 0x1732]
je 0x4064bd
cmp eax, dword [ebp - 0x172e]
je 0x4064bd
cmp eax, dword [ebp - 0x172a]
je 0x4064bd
cmp eax, dword [ebp - 0x1726]
je 0x4064bd
add ecx, 8
jmp 0x406489
mov eax, dword [edx + ecx + 4]
mov dword [ebp - 0x1722], eax
mov edx, dword [ebp - 0x188c]
mov eax, dword [edx]
add eax, dword [edx + 4]
mov ecx, dword [edx + 8]
lea edx, [edx + eax + 0xc]
mov dword [ebp - 0x1888], edx
mov dword [ebp - 0x1884], ecx
mov dword [ebp - 0x1880], 0
mov edx, dword [ebp - 0x1880]
cmp edx, dword [ebp - 0x1884]
jae 0x406530
add edx, dword [ebp - 0x1888]
mov eax, dword [edx + 4]
cmp eax, dword [ebp - 0x1722]
je 0x406524
mov edx, dword [ebp - 0x1880]
add edx, dword [ebp - 0x1888]
mov edx, dword [edx]
add dword [ebp - 0x1880], edx
jmp 0x4064ef
mov edx, dword [ebp - 0x1880]
mov dword [ebp - 0x187c], edx
push dword [ebp - 0x1870]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
push dword [ebp - 0x1874]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebp - 0x188c], 0xffffffff
je 0x40655d
push dword [ebp - 0x1894]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x187c], 0xffffffff
jne 0x4065b5
push 0
push 0xa0d3120
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202455
push 0x43455f44
push 0x4554524f
push 0x50505553
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2c7c], 1
cmp dword [ebp - 0x446], 0xffffffff
je 0x4065ca
push dword [ebp - 0x446]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x406af5
cmp dword [ebp - 0x2c7c], 0
jne 0x406af5
cmp dword [esi + 0x270], 0x776d6224
jne 0x40666c
cmp dword [esi + 0x274], 0x305f655f
jne 0x40666c
cmp dword [esi + 0x278], 0x2d452435
jne 0x40666c
cmp dword [esi + 0x27c], 0x69726573
jne 0x40666c
cmp dword [esi + 0x280], 0x42207365
jne 0x40666c
cmp dword [esi + 0x284], 0x6863736f
jne 0x40666c
cmp dword [esi + 0x288], 0x73614d20
jne 0x40666c
cmp dword [esi + 0x28c], 0x28726574
jne 0x40666c
cmp dword [esi + 0x290], 0x656e7574
jne 0x40666c
cmp dword [esi + 0x294], 0x41432029
jne 0x40666c
cmp word [esi + 0x298], 0x4e
je 0x406794
cmp dword [esi + 0x270], 0x776d6224
jne 0x406700
cmp dword [esi + 0x274], 0x305f655f
jne 0x406700
cmp dword [esi + 0x278], 0x2d452436
jne 0x406700
cmp dword [esi + 0x27c], 0x69726573
jne 0x406700
cmp dword [esi + 0x280], 0x42207365
jne 0x406700
cmp dword [esi + 0x284], 0x6863736f
jne 0x406700
cmp dword [esi + 0x288], 0x73614d20
jne 0x406700
cmp dword [esi + 0x28c], 0x28726574
jne 0x406700
cmp dword [esi + 0x290], 0x636f7473
jne 0x406700
cmp dword [esi + 0x294], 0x4320296b
jne 0x406700
cmp word [esi + 0x298], 0x4e41
jne 0x406700
cmp byte [esi + 0x29a], 0
je 0x406794
cmp dword [esi + 0x270], 0x776d6224
jne 0x4067c8
cmp dword [esi + 0x274], 0x305f655f
jne 0x4067c8
cmp dword [esi + 0x278], 0x2d452437
jne 0x4067c8
cmp dword [esi + 0x27c], 0x69726573
jne 0x4067c8
cmp dword [esi + 0x280], 0x42207365
jne 0x4067c8
cmp dword [esi + 0x284], 0x6863736f
jne 0x4067c8
cmp dword [esi + 0x288], 0x73614d20
jne 0x4067c8
cmp dword [esi + 0x28c], 0x28726574
jne 0x4067c8
cmp dword [esi + 0x290], 0x61706572
jne 0x4067c8
cmp dword [esi + 0x294], 0x20297269
jne 0x4067c8
cmp dword [esi + 0x298], 0x4e4143
jne 0x4067c8
push 0xff
push 0xff021812
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 9
push eax
push 0x2710
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
cmp dword [esi + 0x270], 0x776d6224
jne 0x40684d
cmp dword [esi + 0x274], 0x305f655f
jne 0x40684d
cmp dword [esi + 0x278], 0x2d452438
jne 0x40684d
cmp dword [esi + 0x27c], 0x69726573
jne 0x40684d
cmp dword [esi + 0x280], 0x42207365
jne 0x40684d
cmp dword [esi + 0x284], 0x6863736f
jne 0x40684d
cmp dword [esi + 0x288], 0x616c5320
jne 0x40684d
cmp dword [esi + 0x28c], 0x74286576
jne 0x40684d
cmp dword [esi + 0x290], 0x29656e75
jne 0x40684d
cmp dword [esi + 0x294], 0x4e414320
jne 0x40684d
cmp byte [esi + 0x298], 0
je 0x406973
cmp dword [esi + 0x270], 0x776d6224
jne 0x4068d3
cmp dword [esi + 0x274], 0x305f655f
jne 0x4068d3
cmp dword [esi + 0x278], 0x2d452439
jne 0x4068d3
cmp dword [esi + 0x27c], 0x69726573
jne 0x4068d3
cmp dword [esi + 0x280], 0x42207365
jne 0x4068d3
cmp dword [esi + 0x284], 0x6863736f
jne 0x4068d3
cmp dword [esi + 0x288], 0x616c5320
jne 0x4068d3
cmp dword [esi + 0x28c], 0x73286576
jne 0x4068d3
cmp dword [esi + 0x290], 0x6b636f74
jne 0x4068d3
cmp dword [esi + 0x294], 0x41432029
jne 0x4068d3
cmp word [esi + 0x298], 0x4e
je 0x406973
cmp dword [esi + 0x270], 0x776d6224
jne 0x4069a7
cmp dword [esi + 0x274], 0x315f655f
jne 0x4069a7
cmp dword [esi + 0x278], 0x2d452430
jne 0x4069a7
cmp dword [esi + 0x27c], 0x69726573
jne 0x4069a7
cmp dword [esi + 0x280], 0x42207365
jne 0x4069a7
cmp dword [esi + 0x284], 0x6863736f
jne 0x4069a7
cmp dword [esi + 0x288], 0x616c5320
jne 0x4069a7
cmp dword [esi + 0x28c], 0x72286576
jne 0x4069a7
cmp dword [esi + 0x290], 0x69617065
jne 0x4069a7
cmp dword [esi + 0x294], 0x43202972
jne 0x4069a7
cmp word [esi + 0x298], 0x4e41
jne 0x4069a7
cmp byte [esi + 0x29a], 0
jne 0x4069a7
push 0xff
push 0xff021813
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 9
push eax
push 0x2710
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 0xc
test eax, eax
je 0x4069b0
cmp eax, 0xffffffff
jne 0x4069bf
mov dword [ebp - 0x2c7c], 1
jmp 0x406af5
cmp byte [ebp - 0x2c73], 0x58
je 0x406a3d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x406a1a
xor eax, eax
jmp 0x406a24
cmp eax, 0x20
jbe 0x406a24
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x406af5
movzx eax, byte [ebp - 0x2c72]
mov dword [ebp - 0x16], eax
push 0xa
push 0xd642520
push 0x3a24544e
push 0x554f435f
push 0x43544424
push dword [ebp - 0x16]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x12], 0
mov ecx, dword [ebp - 0x12]
cmp ecx, dword [ebp - 0x16]
jae 0x406af5
imul ecx, ecx, 3
movzx eax, byte [ebp + ecx - 0x2c71]
mov dword [ebp - 0xe], eax
movzx eax, byte [ebp + ecx - 0x2c70]
mov dword [ebp - 0xa], eax
movzx eax, byte [ebp + ecx - 0x2c6f]
mov dword [ebp - 6], eax
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e255832
push 0x2e252020
push dword [ebp - 6]
push dword [ebp - 0xa]
push dword [ebp - 0xe]
lea eax, [esp + 0xc]
push eax
lea edx, [ebp - 0x3178]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3178]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x12]
jmp 0x406a86
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x406f9e
cmp dword [ebp - 0x2c7c], 0
jne 0x406f9e
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
cmp dword [esi + 0x270], 0x776d6224
jne 0x406bb9
cmp dword [esi + 0x274], 0x305f655f
jne 0x406bb9
cmp dword [esi + 0x278], 0x2d452435
jne 0x406bb9
cmp dword [esi + 0x27c], 0x69726573
jne 0x406bb9
cmp dword [esi + 0x280], 0x42207365
jne 0x406bb9
cmp dword [esi + 0x284], 0x6863736f
jne 0x406bb9
cmp dword [esi + 0x288], 0x73614d20
jne 0x406bb9
cmp dword [esi + 0x28c], 0x28726574
jne 0x406bb9
cmp dword [esi + 0x290], 0x656e7574
jne 0x406bb9
cmp dword [esi + 0x294], 0x41432029
jne 0x406bb9
cmp word [esi + 0x298], 0x4e
je 0x406ce1
cmp dword [esi + 0x270], 0x776d6224
jne 0x406c4d
cmp dword [esi + 0x274], 0x305f655f
jne 0x406c4d
cmp dword [esi + 0x278], 0x2d452436
jne 0x406c4d
cmp dword [esi + 0x27c], 0x69726573
jne 0x406c4d
cmp dword [esi + 0x280], 0x42207365
jne 0x406c4d
cmp dword [esi + 0x284], 0x6863736f
jne 0x406c4d
cmp dword [esi + 0x288], 0x73614d20
jne 0x406c4d
cmp dword [esi + 0x28c], 0x28726574
jne 0x406c4d
cmp dword [esi + 0x290], 0x636f7473
jne 0x406c4d
cmp dword [esi + 0x294], 0x4320296b
jne 0x406c4d
cmp word [esi + 0x298], 0x4e41
jne 0x406c4d
cmp byte [esi + 0x29a], 0
je 0x406ce1
cmp dword [esi + 0x270], 0x776d6224
jne 0x406d10
cmp dword [esi + 0x274], 0x305f655f
jne 0x406d10
cmp dword [esi + 0x278], 0x2d452437
jne 0x406d10
cmp dword [esi + 0x27c], 0x69726573
jne 0x406d10
cmp dword [esi + 0x280], 0x42207365
jne 0x406d10
cmp dword [esi + 0x284], 0x6863736f
jne 0x406d10
cmp dword [esi + 0x288], 0x73614d20
jne 0x406d10
cmp dword [esi + 0x28c], 0x28726574
jne 0x406d10
cmp dword [esi + 0x290], 0x61706572
jne 0x406d10
cmp dword [esi + 0x294], 0x20297269
jne 0x406d10
cmp dword [esi + 0x298], 0x4e4143
jne 0x406d10
push 0xffff1412
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0x2710
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
cmp dword [esi + 0x270], 0x776d6224
jne 0x406d95
cmp dword [esi + 0x274], 0x305f655f
jne 0x406d95
cmp dword [esi + 0x278], 0x2d452438
jne 0x406d95
cmp dword [esi + 0x27c], 0x69726573
jne 0x406d95
cmp dword [esi + 0x280], 0x42207365
jne 0x406d95
cmp dword [esi + 0x284], 0x6863736f
jne 0x406d95
cmp dword [esi + 0x288], 0x616c5320
jne 0x406d95
cmp dword [esi + 0x28c], 0x74286576
jne 0x406d95
cmp dword [esi + 0x290], 0x29656e75
jne 0x406d95
cmp dword [esi + 0x294], 0x4e414320
jne 0x406d95
cmp byte [esi + 0x298], 0
je 0x406eb7
cmp dword [esi + 0x270], 0x776d6224
jne 0x406e1b
cmp dword [esi + 0x274], 0x305f655f
jne 0x406e1b
cmp dword [esi + 0x278], 0x2d452439
jne 0x406e1b
cmp dword [esi + 0x27c], 0x69726573
jne 0x406e1b
cmp dword [esi + 0x280], 0x42207365
jne 0x406e1b
cmp dword [esi + 0x284], 0x6863736f
jne 0x406e1b
cmp dword [esi + 0x288], 0x616c5320
jne 0x406e1b
cmp dword [esi + 0x28c], 0x73286576
jne 0x406e1b
cmp dword [esi + 0x290], 0x6b636f74
jne 0x406e1b
cmp dword [esi + 0x294], 0x41432029
jne 0x406e1b
cmp word [esi + 0x298], 0x4e
je 0x406eb7
cmp dword [esi + 0x270], 0x776d6224
jne 0x406ee6
cmp dword [esi + 0x274], 0x315f655f
jne 0x406ee6
cmp dword [esi + 0x278], 0x2d452430
jne 0x406ee6
cmp dword [esi + 0x27c], 0x69726573
jne 0x406ee6
cmp dword [esi + 0x280], 0x42207365
jne 0x406ee6
cmp dword [esi + 0x284], 0x6863736f
jne 0x406ee6
cmp dword [esi + 0x288], 0x616c5320
jne 0x406ee6
cmp dword [esi + 0x28c], 0x72286576
jne 0x406ee6
cmp dword [esi + 0x290], 0x69617065
jne 0x406ee6
cmp dword [esi + 0x294], 0x43202972
jne 0x406ee6
cmp word [esi + 0x298], 0x4e41
jne 0x406ee6
cmp byte [esi + 0x29a], 0
jne 0x406ee6
push 0xffff1413
push 0xf1060000
lea eax, [ebp - 0x2c78]
push esp
push 8
push eax
push 0x2710
push 0xbb8
push 0xc0
push 6
push 0
call fcn.00406ff2
add esp, 8
test eax, eax
je 0x406eef
cmp eax, 0xffffffff
jne 0x406efe
mov dword [ebp - 0x2c7c], 1
jmp 0x406f9e
cmp byte [ebp - 0x2c73], 0x54
je 0x406f79
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c78]
mov edx, esp
cmp eax, 0xffffffff
jne 0x406f59
xor eax, eax
jmp 0x406f63
cmp eax, 0x20
jbe 0x406f63
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004074d6
mov dword [ebp - 0x2c7c], 1
jmp 0x406f9e
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
push 0
push 0
push 3
call dword [edi]
pop edi
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
leave
ret 8