Function at 0x40c540
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4293e5
mov eax, dword fs:[0]
push eax
sub esp, 0x568
mov eax, dword [0x436038]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x168], ebx
cmp dword [ebx + 0x10], 0
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x16c], ecx
je 0x40da90
mov edi, dword [eax]
mov edx, dword [eax + 4]
cmp edi, edx
je 0x40da90
sub edx, edi
mov eax, 0x4ec4ec4f
imul edx
xor ecx, ecx
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
je 0x40da90
lea eax, [edi + 0x64]
nop
cmp byte [eax], 0
jne 0x40c5d2
inc ecx
add eax, 0x68
cmp ecx, esi
jb 0x40c5c0
jmp 0x40da90
push ebx
lea eax, [ebp - 0x60]
push eax
call fcn.0040e3b0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x24]
call fcn.00404ab0
xorps xmm0, xmm0
lea eax, [ebp - 0x24]
movlpd qword [ebp - 0x38], xmm0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov byte [ebp - 0x34], 0
test eax, eax
jne 0x40c625
xor al, al
jmp 0x40c643
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x40c63d
cmp eax, 0x80
je 0x40c63d
xor al, al
jmp 0x40c643
mov byte [ebp - 0x20], 1
mov al, 1
mov byte [ebp - 0x151], al
mov byte [ebp - 0x34], al
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x152]
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x152], 0
push eax
push ebx
call fcn.0040dc80
test al, al
jne 0x40c6ad
cmp byte [ebp - 0x152], al
je 0x40c6ad
cmp dword [ebx + 0x14], 8
mov eax, ebx
jb 0x40c6a6
mov eax, dword [ebx]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor al, al
xor ebx, ebx
mov byte [ebp - 0x152], al
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x164], ebx
mov ecx, dword [eax + 4]
mov edi, dword [eax]
sub ecx, edi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d981
imul esi, ebx, 0x68
add esi, edi
cmp byte [esi + 0x64], 0
je 0x40cd56
mov edi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x158], ecx
mov eax, 0x4ec4ec4f
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
sub ecx, edi
mov dword [ebp - 0x160], ebx
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40c778
nop dword [eax + eax]
add edi, ebx
mov ecx, esi
cmp dword [esi + 0x14], 8
jb 0x40c72c
mov ecx, dword [esi]
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x40c736
mov eax, dword [edi]
push ecx
push eax
call fcn.00422b77
add esp, 8
test eax, eax
je 0x40c776
mov ecx, dword [ebp - 0x18]
mov eax, 0x4ec4ec4f
mov edi, dword [ebp - 0x1c]
add ebx, 0x68
inc dword [ebp - 0x158]
sub ecx, edi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x158], eax
jb 0x40c720
mov ebx, dword [ebp - 0x160]
jmp 0x40c778
mov ebx, edi
test ebx, ebx
jne 0x40c981
xor eax, eax
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
mov byte [ebp - 4], 4
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 5
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov byte [ebp - 4], 6
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
movlpd qword [ebp - 0x78], xmm0
movlpd qword [ebp - 0x70], xmm0
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x64], al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x18]
push ecx
cmp dword [ebp - 0x14], eax
je 0x40c834
mov ecx, eax
call fcn.0040c390
mov edx, dword [ebp - 0x18]
add edx, 0x68
mov dword [ebp - 0x18], edx
jmp 0x40c840
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040f5b0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x4ec4ec4f
sub edx, ecx
imul edx
lea ebx, [ecx - 0x68]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x68
add ebx, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x40c8a2
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c898
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push edx
push ecx
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x9c]
cmp edx, 8
jb 0x40c903
mov ecx, dword [ebp - 0xb0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c8f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push edx
push ecx
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xb4]
cmp edx, 8
jb 0x40c964
mov ecx, dword [ebp - 0xc8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c95a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push edx
push ecx
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
push ebx
lea ecx, [ebp - 0x130]
call fcn.004037a0
mov byte [ebp - 4], 0xb
lea edi, [ebx + 0x18]
push edi
lea ecx, [ebp - 0x118]
call fcn.004037a0
mov byte [ebp - 4], 0xc
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0x100]
call fcn.004037a0
mov byte [ebp - 4], 0xd
mov eax, dword [ebx + 0x48]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebx + 0x4c]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x174], eax
mov eax, dword [ebx + 0x50]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebx + 0x54]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x17c], eax
mov eax, dword [ebx + 0x58]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebx + 0x5c]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x188], eax
mov al, byte [ebx + 0x64]
mov byte [ebp - 0xcc], al
mov byte [ebp - 4], 0xe
cmp ebx, esi
je 0x40ca46
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x40ca3b
mov eax, dword [esi]
push dword [esi + 0x10]
mov ecx, ebx
push eax
call fcn.004032a0
lea eax, [esi + 0x18]
cmp edi, eax
je 0x40ca62
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x40ca57
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edi
call fcn.004032a0
lea eax, [esi + 0x30]
lea edx, [ebx + 0x30]
cmp edx, eax
je 0x40ca81
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x40ca76
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edx
call fcn.004032a0
mov eax, dword [esi + 0x48]
lea ecx, [ebp - 0x130]
cmp dword [ebp - 0x11c], 8
mov dword [ebx + 0x48], eax
mov eax, dword [esi + 0x4c]
mov dword [ebx + 0x4c], eax
mov eax, dword [esi + 0x50]
mov dword [ebx + 0x50], eax
mov eax, dword [esi + 0x54]
mov dword [ebx + 0x54], eax
mov eax, dword [esi + 0x58]
mov dword [ebx + 0x58], eax
mov eax, dword [esi + 0x5c]
mov dword [ebx + 0x5c], eax
mov eax, dword [esi + 0x60]
mov dword [ebx + 0x60], eax
mov al, byte [esi + 0x64]
mov esi, ebx
mov byte [ebx + 0x64], al
mov eax, dword [ebp - 0x130]
cmovae ecx, eax
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x18c], eax
jb 0x40cad7
mov esi, dword [ebx]
mov eax, dword [ebp - 0x100]
mov edx, dword [ebx + 0x10]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x160], eax
cmp edx, dword [ebp - 0x120]
jne 0x40cc10
test edx, edx
je 0x40cb2b
sub esi, ecx
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x40cc18
add ecx, 2
sub edx, 1
jne 0x40cb10
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x104], 8
lea ecx, [ebp - 0x118]
mov esi, edi
cmovae ecx, eax
cmp dword [edi + 0x14], 8
jb 0x40cb45
mov esi, dword [edi]
mov edx, dword [edi + 0x10]
cmp edx, dword [ebp - 0x108]
jne 0x40cc18
test edx, edx
je 0x40cb75
sub esi, ecx
nop word [eax + eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x40cc18
add ecx, 2
sub edx, 1
jne 0x40cb60
mov eax, dword [ebp - 0x170]
cmp dword [ebx + 0x48], eax
jne 0x40cc18
mov eax, dword [ebp - 0x174]
cmp dword [ebx + 0x4c], eax
jne 0x40cc18
mov eax, dword [ebp - 0x178]
cmp dword [ebx + 0x50], eax
jne 0x40cc18
mov eax, dword [ebp - 0x17c]
cmp dword [ebx + 0x54], eax
jne 0x40cc18
mov eax, dword [ebp - 0x180]
cmp dword [ebx + 0x58], eax
jne 0x40cc18
mov eax, dword [ebp - 0x184]
mov edi, dword [ebp - 0x158]
cmp dword [ebx + 0x5c], eax
jne 0x40cc1e
cmp dword [ebp - 0xec], 8
lea ecx, [ebp - 0x100]
lea esi, [ebx + 0x30]
cmovae ecx, edi
cmp dword [ebx + 0x44], 8
jb 0x40cbe1
mov esi, dword [ebx + 0x30]
mov edx, dword [ebx + 0x40]
cmp edx, dword [ebp - 0xf0]
jne 0x40cc1e
test edx, edx
je 0x40cc03
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x40cc1e
add ecx, 2
sub edx, 1
jne 0x40cbf2
mov eax, dword [ebp - 0x188]
cmp dword [ebx + 0x60], eax
je 0x40cc29
jmp 0x40cc1e
mov edi, dword [ebp - 0x100]
jmp 0x40cc1e
mov edi, dword [ebp - 0x158]
mov byte [ebp - 0x152], 1
mov byte [ebx + 0x64], 1
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xec]
cmp eax, 8
jb 0x40cc67
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x40cc5d
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push ecx
push edi
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x104]
cmp eax, 8
jb 0x40ccc8
mov edx, dword [ebp - 0x160]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ccbe
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push ecx
push edx
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 7
mov word [ebp - 0x118], ax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x11c]
cmp eax, 8
jb 0x40cd29
mov edx, dword [ebp - 0x18c]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40cd1f
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push ecx
push edx
call fcn.00416d7e
add esp, 8
mov ebx, dword [ebp - 0x164]
xor eax, eax
mov word [ebp - 0x130], ax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov edi, dword [eax]
jmp 0x40cd5c
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 4]
inc ebx
sub ecx, edi
mov dword [ebp - 0x164], ebx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x40c6e1
cmp byte [ebp - 0x152], 0
je 0x40d981
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18]
je 0x40d981
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 0x12
mov eax, 0x4ec4ec4f
mov edi, dword [ebp - 0x18]
mov ecx, edi
mov esi, dword [ebp - 0x1c]
sub ecx, esi
imul ecx
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, dword [ebp - 0x30]
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jbe 0x40ce13
cmp ebx, 0x418937
ja 0x40dab0
push ebx
lea ecx, [ebp - 0x30]
call fcn.0040ed40
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp - 0x158], 0
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d0ba
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
mov eax, dword [esi + ecx + 0x60]
lea ebx, [esi + ecx]
cmp eax, 1
je 0x40ce5a
cmp eax, 2
je 0x40ce5a
cmp eax, 3
jne 0x40d081
push 0x280
xorps xmm0, xmm0
mov dword [ebp - 0x574], 0
lea eax, [ebp - 0x570]
movlpd qword [ebp - 0x1a8], xmm0
push 0
push eax
movlpd qword [ebp - 0x1a0], xmm0
movlpd qword [ebp - 0x198], xmm0
mov dword [ebp - 0x190], 0
call fcn.00417c20
push 0x100
lea eax, [ebp - 0x2f0]
push 0
push eax
call fcn.00417c20
push 0x48
lea eax, [ebp - 0x1f0]
push 0
push eax
call fcn.00417c20
mov eax, dword [ebp - 0x2c]
add esp, 0x24
cmp dword [ebp - 0x28], eax
je 0x40cee7
mov ecx, 0xfa
lea esi, [ebp - 0x574]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x2c]
add edx, 0x3e8
mov dword [ebp - 0x2c], edx
jmp 0x40cefa
lea ecx, [ebp - 0x574]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0040f3d0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov eax, 0x10624dd3
sub edx, ecx
imul edx
lea edi, [ecx - 0x3e8]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
add edi, eax
push 0x280
push 0
mov dword [ebp - 0x160], edi
lea esi, [edi + 4]
mov dword [edi], 0x23ab45db
push esi
call fcn.00417c20
push 0x100
add edi, 0x284
push 0
push edi
call fcn.00417c20
mov eax, dword [ebp - 0x160]
push 0x48
add eax, 0x384
push 0
push eax
mov dword [ebp - 0x164], eax
call fcn.00417c20
add esp, 0x24
cmp dword [ebx + 0x10], 0x13f
ja 0x40cf92
cmp dword [ebx + 0x14], 8
mov ecx, ebx
jb 0x40cf7e
mov ecx, dword [ebx]
sub esi, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + esi - 2], ax
test ax, ax
jne 0x40cf80
jmp 0x40cfab
cmp dword [ebx + 0x14], 8
mov eax, ebx
jb 0x40cf9c
mov eax, dword [ebx]
push 0x13e
push eax
push esi
call fcn.0041a33a
add esp, 0xc
cmp dword [ebx + 0x28], 0x7f
ja 0x40cfd2
cmp dword [ebx + 0x2c], 8
lea ecx, [ebx + 0x18]
jb 0x40cfbc
mov ecx, dword [ecx]
sub edi, ecx
nop
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + edi - 2], ax
test ax, ax
jne 0x40cfc0
jmp 0x40cfe9
cmp dword [ebx + 0x2c], 8
lea eax, [ebx + 0x18]
jb 0x40cfdd
mov eax, dword [eax]
push 0x7e
push eax
push edi
call fcn.0041a33a
add esp, 0xc
cmp dword [ebx + 0x40], 0x23
ja 0x40d014
cmp dword [ebx + 0x44], 8
lea ecx, [ebx + 0x30]
jb 0x40cffa
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x164]
sub edx, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x40d002
jmp 0x40d030
cmp dword [ebx + 0x44], 8
lea eax, [ebx + 0x30]
jb 0x40d01f
mov eax, dword [eax]
push 0x23
push eax
push dword [ebp - 0x164]
call fcn.0041a33a
add esp, 0xc
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebx + 0x48]
mov dword [ecx + 0x3cc], eax
mov eax, dword [ebx + 0x4c]
mov dword [ecx + 0x3d0], eax
mov eax, dword [ebx + 0x50]
mov dword [ecx + 0x3d4], eax
mov eax, dword [ebx + 0x54]
mov dword [ecx + 0x3d8], eax
mov eax, dword [ebx + 0x58]
mov dword [ecx + 0x3dc], eax
mov eax, dword [ebx + 0x5c]
mov dword [ecx + 0x3e0], eax
mov eax, dword [ebx + 0x60]
mov dword [ecx + 0x3e4], eax
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x15c]
mov ebx, dword [ebp - 0x158]
add ecx, 0x68
mov dword [ebp - 0x15c], ecx
mov eax, 0x4ec4ec4f
mov ecx, edi
inc ebx
sub ecx, esi
mov dword [ebp - 0x158], ebx
imul ecx
mov ecx, dword [ebp - 0x15c]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x40ce40
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x2c]
jne 0x40d200
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d12a
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x40d10b
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dab5
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d1a7
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d151
nop dword [eax]
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d140
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x40d188
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40daba
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40d1c6
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d1c2
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d1e6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00403240
jmp 0x40da90
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x150]
call fcn.00413730
mov ecx, dword [ebp - 0x2c]
mov eax, 0x10624dd3
mov esi, dword [ebp - 0x30]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0x44]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
push ecx
lea ecx, [ebp - 0x150]
push eax
push esi
call fcn.004137b0
test al, al
jne 0x40d3b0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44]
call fcn.0040a280
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d2db
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x40d2bc
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dabf
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d357
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d301
nop dword [eax]
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d2f0
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x40d338
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dac4
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40d376
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d372
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d396
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00403240
jmp 0x40da90
mov ebx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x40]
cmp ebx, edi
jne 0x40d500
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44]
call fcn.0040a280
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d42e
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x40d40f
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dac9
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d4a7
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d451
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d440
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x40d488
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dace
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40d4c6
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d4c2
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d4e6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00403240
jmp 0x40da90
mov eax, dword [ebp - 0x168]
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x40d510
mov ecx, dword [eax]
push ecx
push 0x80
push 4
push ecx
push 0
mov edx, 0x40000000
call fcn.004076f0
mov esi, eax
add esp, 0x14
cmp esi, 0xffffffff
je 0x40d533
test esi, esi
jne 0x40d5a2
push ecx
mov ecx, dword [ebp - 0x168]
push 0x430e60
call fcn.00403fb0
cmp eax, 0xffffffff
je 0x40d5a2
mov esi, dword [ebp - 0x168]
mov ecx, esi
push eax
push 0
lea eax, [ebp - 0x148]
push eax
call fcn.00403f10
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x148]
call fcn.00403bc0
cmp dword [esi + 0x14], 8
jb 0x40d577
mov esi, dword [esi]
push ecx
push 0x80
push 4
push ecx
push 0
mov edx, 0x40000000
mov ecx, esi
call fcn.004076f0
add esp, 0x14
mov esi, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x148]
call fcn.00403240
cmp esi, 0xffffffff
je 0x40d83f
test esi, esi
je 0x40d83f
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push eax
sub edi, ebx
push edi
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x48], edi
jne 0x40d76e
mov edi, dword [ebp - 0x16c]
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.0040a1c0
mov ecx, dword [edi + 4]
mov eax, 0x4ec4ec4f
mov esi, dword [edi]
xor ebx, ebx
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d64b
xor edi, edi
nop
mov eax, dword [ebp - 0x16c]
lea edi, [edi + 0x68]
mov byte [esi + edi - 4], 0
inc ebx
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x40d620
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44]
call fcn.0040a280
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d6bb
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x40d69c
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dad3
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d713
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d6e1
nop dword [eax]
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d6d0
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.0040f1b0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40d732
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d72e
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d752
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00402f90
mov al, 1
jmp 0x40da92
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44]
call fcn.0040a280
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d7b7
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.0040f080
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d813
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d7e1
nop dword [eax]
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d7d0
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.0040f1b0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.004036d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.00404a60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00402f90
jmp 0x40da90
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44]
call fcn.0040a280
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x40d8af
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x40d890
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dad8
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d928
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d8d2
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d8c1
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x40d909
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dadd
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40d947
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d943
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40d967
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00403240
jmp 0x40da90
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x40d9fa
mov edi, dword [ebp - 0x18]
cmp esi, edi
je 0x40d9a4
mov ecx, esi
call fcn.0040c260
add esi, 0x68
cmp esi, edi
jne 0x40d993
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x40d9db
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dae2
push ecx
push esi
call fcn.00416d7e
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x40da19
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40da15
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40da39
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x40da7c
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40da72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dae7
push edx
push ecx
call fcn.00416d7e
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00416858
mov esp, ebp
pop ebp
ret 0xc
call fcn.00404620
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
call fcn.0041a2ea
int3