Function at 0x407120
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54b5fb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x8b8
mov eax, dword [0x599690]
xor eax, ebp
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x804], ecx
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x804]
call fcn.0040a050
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x700], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042e8c2
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042e8c2
mov byte [ebp - 4], 2
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x14c], 0
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x188]
call fcn.0040a2e0
mov byte [ebp - 4], 3
push 0x57610c
lea ecx, [ebp - 0x188]
call fcn.00409ec0
lea ecx, [ebp - 0x6c0]
call fcn.004090e0
lea ecx, [ebp - 0x148]
call fcn.004090e0
lea edx, [ebp - 0x6c0]
push edx
push 0
lea ecx, [ebp + 8]
call fcn.00403660
push eax
call fcn.0042f0df
mov dword [ebp - 0x594], eax
lea eax, [ebp - 0x148]
push eax
push 0
lea ecx, [ebp - 0x188]
call fcn.00403660
push eax
call fcn.0042f0df
mov dword [ebp - 0x184], eax
push 0x574df3
lea ecx, [ebp - 0x180]
call fcn.00404510
mov byte [ebp - 4], 4
cmp dword [ebp - 0x594], 1
jne 0x4075a4
cmp dword [ebp - 0x184], 0
je 0x407484
push 0
push 0x4002
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x407305
mov dword [ebp - 0x150], 0
mov byte [ebp - 0x79e], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x79e]
jmp 0x4090bb
mov dword [ebp - 0x150], 0
push 0x40
push 0
lea ecx, [ebp - 0x748]
push ecx
call fcn.00523530
add esp, 0xc
push 0x40
lea edx, [ebp - 0x748]
push edx
lea ecx, [ebp - 0x16c]
call fcn.0042ea19
mov dword [ebp - 0x754], eax
push 0x576114
lea eax, [ebp - 0x748]
push eax
call fcn.00521c52
add esp, 8
mov dword [ebp - 0x74c], eax
push 0x576118
push 0
call fcn.00521c52
add esp, 8
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x74c], 0
je 0x40737d
cmp dword [ebp - 0x750], 0
jne 0x407389
mov dword [ebp - 0x150], 0
jmp 0x4073f8
mov ecx, dword [ebp - 0x74c]
push ecx
call fcn.00521bd4
add esp, 4
mov dword [ebp - 0x6fc], eax
mov edx, dword [ebp - 0x750]
push edx
call fcn.00521bd4
add esp, 4
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x6fc]
cdq
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], edx
mov eax, dword [ebp - 0x80c]
cmp eax, dword [ebp - 0x6a8]
jne 0x4073ee
mov ecx, dword [ebp - 0x808]
cmp ecx, dword [ebp - 0x6a4]
jne 0x4073ee
mov dword [ebp - 0x150], 2
jmp 0x4073f8
mov dword [ebp - 0x150], 1
push 0
push 0x8002
lea ecx, [ebp + 8]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x6e8]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x40747f
mov byte [ebp - 0x79f], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x79f]
jmp 0x4090bb
jmp 0x40759f
mov dword [ebp - 0x150], 0
push 0
push 0x5002
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x407518
mov byte [ebp - 0x7a0], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a0]
jmp 0x4090bb
push 0
push 0x9002
lea ecx, [ebp + 8]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x6e8]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x40759f
mov byte [ebp - 0x7a1], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a1]
jmp 0x4090bb
jmp 0x4076e4
push 0
push 0x9002
lea ecx, [ebp + 8]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x6e8]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x40762b
mov byte [ebp - 0x7a2], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a2]
jmp 0x4090bb
cmp dword [ebp - 0x184], 0
je 0x40765a
push 0
push 0x4002
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
jmp 0x40767e
push 0
push 0x5002
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042e8da
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
jne 0x4076e4
mov byte [ebp - 0x7a3], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a3]
jmp 0x4090bb
mov edx, dword [ebp - 0x700]
push edx
mov eax, dword [ebp - 0x6ec]
push eax
mov ecx, dword [ebp - 0x6fc]
push ecx
mov edx, dword [ebp - 0x14c]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
cmp eax, 0x80004004
jne 0x407772
mov byte [ebp - 0x7a4], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a4]
jmp 0x4090bb
cmp dword [ebp - 0x150], 2
jne 0x4077d8
mov byte [ebp - 0x7a5], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7a5]
jmp 0x4090bb
push 0x574e0e
lea ecx, [ebp - 0x158]
call fcn.00404510
mov byte [ebp - 4], 5
mov dword [ebp - 0x6f8], 0x57611c
mov dword [ebp - 0x6c4], str.HTTP_1.1
mov ecx, dword [ebp - 0x6f8]
push ecx
lea ecx, [ebp - 0x158]
call fcn.004044f0
push 0x57612c
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov edx, dword [ebp - 0x804]
add edx, 0x18
push edx
lea ecx, [ebp - 0x158]
call fcn.0040a1b0
push 0x576130
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov eax, dword [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push 0x576134
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.Host:
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov ecx, dword [ebp - 0x804]
add ecx, 0x14
push ecx
lea ecx, [ebp - 0x158]
call fcn.0040a1b0
push 0x576140
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.Accept:___r_n
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.Referer:
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov edx, dword [ebp - 0x804]
add edx, 0x64
push edx
lea ecx, [ebp - 0x158]
call fcn.0040a1b0
push 0x576160
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov eax, dword [ebp - 0x804]
add eax, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x7ac], esp
push eax
call fcn.0040a2e0
mov dword [ebp - 0x810], eax
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x804]
call fcn.00406c10
mov dword [ebp - 0x814], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c]
call fcn.00409e50
movzx edx, al
test edx, edx
jne 0x407958
push str.Cookie:
lea ecx, [ebp - 0x158]
call fcn.00409ec0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x158]
call fcn.0040a1b0
push 0x576170
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.00409ec0
mov dword [ebp - 0x170], str.Mozilla_4.0__compatible__MSIE_5.00__Windows_98___r_n
mov ecx, dword [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x158]
call fcn.00409ec0
cmp dword [ebp - 0x150], 1
jne 0x4079f3
push 0x574e0f
lea ecx, [ebp - 0x758]
call fcn.00404510
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14c]
push edx
push str.Range:_bytes_d__r_n
lea eax, [ebp - 0x758]
push eax
call fcn.00409f90
add esp, 0xc
lea ecx, [ebp - 0x758]
push ecx
lea ecx, [ebp - 0x158]
call fcn.0040a1b0
push 0
mov eax, dword [ebp - 0x14c]
cdq
push edx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.0042eb68
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x758]
call fcn.004049f0
push str.Pragma:_no_cache_r_n
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.Cache_Control:_no_cache_r_n
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push str.Connection:_Close_r_n
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push 0x576210
lea ecx, [ebp - 0x158]
call fcn.00409ec0
push 0
lea ecx, [ebp - 0x158]
call fcn.004036a0
push eax
lea ecx, [ebp - 0x158]
call fcn.004065e0
push eax
mov ecx, dword [ebp - 0x804]
add ecx, 0x1c
mov edx, dword [ebp - 0x804]
mov eax, dword [edx + 0x1c]
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x190], eax
lea ecx, [ebp - 0x158]
call fcn.004036a0
cmp dword [ebp - 0x190], eax
je 0x407af5
mov byte [ebp - 0x7ad], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7ad]
jmp 0x4090bb
mov dword [ebp - 0x6f4], 0x3ff
mov dword [ebp - 0x704], 0
mov byte [ebp - 0x176], 0
push 0x574e3d
lea ecx, [ebp - 0x18]
call fcn.00404510
mov byte [ebp - 4], 8
mov dword [ebp - 0x18c], 0
push 0x574e3e
lea ecx, [ebp - 0x17c]
call fcn.00404510
mov byte [ebp - 4], 9
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x174], 0
mov byte [ebp - 0x6d1], 0
push 0x400
call fcn.00422360
add esp, 4
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x14], eax
push 0x574e3f
lea ecx, [ebp - 0x6f0]
call fcn.00404510
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x6d0], 0xffffffff
mov byte [ebp - 0x6c9], 0
mov ecx, 1
test ecx, ecx
je 0x408927
mov edx, dword [ebp - 0x6d0]
cmp edx, dword [ebp - 0x174]
jl 0x407bc2
jmp 0x408927
push 0x400
push 0
lea eax, [ebp - 0x590]
push eax
call fcn.00523530
add esp, 0xc
push 0xa
mov ecx, dword [ebp - 0x6f4]
push ecx
lea edx, [ebp - 0x590]
push edx
mov ecx, dword [ebp - 0x804]
add ecx, 0x1c
call fcn.00411bc0
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0
jg 0x407c11
mov byte [ebp - 0x6c9], 1
jmp 0x408927
movzx eax, byte [ebp - 0x176]
test eax, eax
jne 0x4086cc
mov ecx, dword [ebp - 0x704]
mov byte [ebp + ecx - 0x590], 0
lea edx, [ebp - 0x590]
push edx
lea ecx, [ebp - 0x18]
call fcn.00409ec0
push 0
push 0x576214
lea ecx, [ebp - 0x18]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
je 0x4086c7
mov byte [ebp - 0x176], 1
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x7b8]
push ecx
lea ecx, [ebp - 0x18]
call fcn.004096b0
mov dword [ebp - 0x818], eax
mov edx, dword [ebp - 0x818]
mov dword [ebp - 0x81c], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x81c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.0040a050
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7b8]
call fcn.004049f0
push str._r_n_r_n
lea ecx, [ebp - 0x590]
push ecx
call fcn.00409e30
add esp, 8
mov dword [ebp - 0x778], eax
mov edx, dword [ebp - 0x778]
lea eax, [ebp - 0x590]
sub edx, eax
mov dword [ebp - 0x77c], edx
mov ecx, dword [ebp - 0x704]
sub ecx, dword [ebp - 0x77c]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x77c]
lea eax, [ebp + edx - 0x58c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.005281c0
add esp, 0xc
mov edx, dword [ebp - 0x704]
sub edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x154]
lea ecx, [eax + edx - 4]
mov dword [ebp - 0x154], ecx
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x6d0], edx
push 0
push 0x576224
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x764]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.004096b0
mov byte [ebp - 4], 0xc
push 0
lea ecx, [ebp - 0x764]
call fcn.00403660
mov dword [ebp - 0x76c], eax
push 0x576228
mov edx, dword [ebp - 0x76c]
push edx
call fcn.00521c52
add esp, 8
mov dword [ebp - 0x774], eax
push 0x57622c
push 0
call fcn.00521c52
add esp, 8
mov dword [ebp - 0x760], eax
push 0x576230
push 0
call fcn.00521c52
add esp, 8
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x760], 0
je 0x408533
mov dword [ebp - 0x820], 0x576234
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x824]
mov dl, byte [ecx]
mov byte [ebp - 0x825], dl
mov eax, dword [ebp - 0x820]
cmp dl, byte [eax]
jne 0x407e40
cmp byte [ebp - 0x825], 0
je 0x407e34
mov ecx, dword [ebp - 0x824]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x826], dl
mov eax, dword [ebp - 0x820]
cmp dl, byte [eax + 1]
jne 0x407e40
add dword [ebp - 0x824], 2
add dword [ebp - 0x820], 2
cmp byte [ebp - 0x826], 0
jne 0x407de2
mov dword [ebp - 0x82c], 0
jmp 0x407e4b
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x82c], ecx
mov edx, dword [ebp - 0x82c]
mov dword [ebp - 0x830], edx
cmp dword [ebp - 0x830], 0
je 0x408218
mov dword [ebp - 0x834], 0x576238
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x838]
mov dl, byte [ecx]
mov byte [ebp - 0x839], dl
mov eax, dword [ebp - 0x834]
cmp dl, byte [eax]
jne 0x407ed8
cmp byte [ebp - 0x839], 0
je 0x407ecc
mov ecx, dword [ebp - 0x838]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x83a], dl
mov eax, dword [ebp - 0x834]
cmp dl, byte [eax + 1]
jne 0x407ed8
add dword [ebp - 0x838], 2
add dword [ebp - 0x834], 2
cmp byte [ebp - 0x83a], 0
jne 0x407e7a
mov dword [ebp - 0x840], 0
jmp 0x407ee3
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x840], ecx
mov edx, dword [ebp - 0x840]
mov dword [ebp - 0x844], edx
cmp dword [ebp - 0x844], 0
je 0x408218
mov byte [ebp - 0x6d1], 1
mov dword [ebp - 0x848], 0x57623c
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x84c]
mov dl, byte [ecx]
mov byte [ebp - 0x84d], dl
mov eax, dword [ebp - 0x848]
cmp dl, byte [eax]
jne 0x407f77
cmp byte [ebp - 0x84d], 0
je 0x407f6b
mov ecx, dword [ebp - 0x84c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x84e], dl
mov eax, dword [ebp - 0x848]
cmp dl, byte [eax + 1]
jne 0x407f77
add dword [ebp - 0x84c], 2
add dword [ebp - 0x848], 2
cmp byte [ebp - 0x84e], 0
jne 0x407f19
mov dword [ebp - 0x854], 0
jmp 0x407f82
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x854]
mov dword [ebp - 0x858], edx
cmp dword [ebp - 0x858], 0
je 0x408033
mov dword [ebp - 0x85c], 0x576240
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
mov dl, byte [ecx]
mov byte [ebp - 0x861], dl
mov eax, dword [ebp - 0x85c]
cmp dl, byte [eax]
jne 0x40800f
cmp byte [ebp - 0x861], 0
je 0x408003
mov ecx, dword [ebp - 0x860]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x862], dl
mov eax, dword [ebp - 0x85c]
cmp dl, byte [eax + 1]
jne 0x40800f
add dword [ebp - 0x860], 2
add dword [ebp - 0x85c], 2
cmp byte [ebp - 0x862], 0
jne 0x407fb1
mov dword [ebp - 0x868], 0
jmp 0x40801a
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x868], ecx
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], edx
cmp dword [ebp - 0x86c], 0
jne 0x408213
push 0
push str.Location:
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
lea ecx, [ebp - 0x17c]
call fcn.004036a0
sub eax, dword [ebp - 0x18c]
sub eax, 0xa
push eax
lea eax, [ebp - 0x780]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00409630
mov byte [ebp - 4], 0xd
push 0
push 0x576250
lea ecx, [ebp - 0x780]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
mov byte [ebp - 0x175], 1
mov ecx, dword [ebp - 0x18c]
sub ecx, 1
push ecx
lea edx, [ebp - 0x788]
push edx
lea ecx, [ebp - 0x780]
call fcn.004096b0
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0x7bc], esp
lea eax, [ebp - 0x788]
push eax
call fcn.0040a2e0
mov dword [ebp - 0x870], eax
mov ecx, dword [ebp - 0x804]
call fcn.00406850
push ecx
mov ecx, esp
mov dword [ebp - 0x7c0], esp
lea edx, [ebp + 8]
push edx
call fcn.0040a2e0
mov dword [ebp - 0x874], eax
lea eax, [ebp - 0x784]
push eax
mov ecx, dword [ebp - 0x804]
call fcn.00407020
mov dword [ebp - 0x878], eax
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x7c4], esp
lea edx, [ebp - 0x788]
push edx
call fcn.0040a2e0
mov dword [ebp - 0x87c], eax
lea eax, [ebp - 0x78c]
push eax
mov ecx, dword [ebp - 0x804]
call fcn.00406ed0
mov dword [ebp - 0x880], eax
mov byte [ebp - 4], 0x10
push 0x576254
lea ecx, [ebp - 0x784]
push ecx
lea edx, [ebp - 0x7c8]
push edx
call fcn.00409d80
add esp, 0xc
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x888], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x78c]
push ecx
mov edx, dword [ebp - 0x888]
push edx
lea eax, [ebp - 0x7cc]
push eax
call fcn.00409730
add esp, 0xc
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x890], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x890]
push edx
lea ecx, [ebp + 8]
call fcn.0040a050
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x7cc]
call fcn.004049f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x7c8]
call fcn.004049f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x78c]
call fcn.004049f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x784]
call fcn.004049f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x788]
call fcn.004049f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x780]
call fcn.004049f0
jmp 0x408531
push str.Content_Disposition:
lea ecx, [ebp - 0x790]
call fcn.00404510
mov byte [ebp - 4], 0x13
push 0
lea ecx, [ebp - 0x790]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
je 0x40851b
lea ecx, [ebp - 0x790]
call fcn.004036a0
mov esi, eax
lea ecx, [ebp - 0x17c]
call fcn.004036a0
sub eax, dword [ebp - 0x18c]
sub eax, esi
push eax
lea eax, [ebp - 0x794]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00409630
mov byte [ebp - 4], 0x14
push 0
push 0x576270
lea ecx, [ebp - 0x794]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
je 0x40850c
mov ecx, dword [ebp - 0x18c]
sub ecx, 1
push ecx
lea edx, [ebp - 0x7d0]
push edx
lea ecx, [ebp - 0x794]
call fcn.004096b0
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x898], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x898]
push ecx
lea ecx, [ebp - 0x794]
call fcn.0040a050
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7d0]
call fcn.004049f0
push str.filename
lea ecx, [ebp - 0x790]
call fcn.004044f0
push 0
lea ecx, [ebp - 0x790]
call fcn.004065e0
push eax
lea ecx, [ebp - 0x794]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
je 0x40850c
lea ecx, [ebp - 0x790]
call fcn.004036a0
mov esi, eax
lea ecx, [ebp - 0x794]
call fcn.004036a0
sub eax, dword [ebp - 0x18c]
sub eax, esi
push eax
lea edx, [ebp - 0x7d4]
push edx
lea ecx, [ebp - 0x794]
call fcn.00409630
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x8a0]
push ecx
lea ecx, [ebp - 0x794]
call fcn.0040a050
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7d4]
call fcn.004049f0
push 0x576280
lea ecx, [ebp - 0x794]
call fcn.00409470
push 0
push 0x576284
lea ecx, [ebp - 0x794]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
je 0x40850c
mov edx, dword [ebp - 0x18c]
push edx
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x794]
call fcn.004096b0
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x8a8]
push edx
lea ecx, [ebp - 0x794]
call fcn.0040a050
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7d8]
call fcn.004049f0
push ecx
mov ecx, esp
mov dword [ebp - 0x7dc], esp
lea eax, [ebp + 8]
push eax
call fcn.0040a2e0
mov dword [ebp - 0x8ac], eax
lea ecx, [ebp - 0x798]
push ecx
mov ecx, dword [ebp - 0x804]
call fcn.00407020
mov dword [ebp - 0x8b0], eax
mov byte [ebp - 4], 0x18
push 0x576288
lea edx, [ebp - 0x798]
push edx
lea eax, [ebp - 0x7e0]
push eax
call fcn.00409d80
add esp, 0xc
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], ecx
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x794]
push edx
mov eax, dword [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00409730
add esp, 0xc
mov dword [ebp - 0x8bc], eax
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x8c0]
push eax
mov ecx, dword [ebp - 0x804]
add ecx, 4
call fcn.0040a050
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x7e4]
call fcn.004049f0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x7e0]
call fcn.004049f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x798]
call fcn.004049f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x794]
call fcn.004049f0
mov byte [ebp - 0x6d1], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x790]
call fcn.004049f0
jmp 0x40853a
mov byte [ebp - 0x6d1], 1
movzx ecx, byte [ebp - 0x6d1]
test ecx, ecx
je 0x408559
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x764]
call fcn.004049f0
jmp 0x408927
push 0
push 0x57628c
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jge 0x408595
mov byte [ebp - 0x6d1], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x764]
call fcn.004049f0
jmp 0x408927
mov edx, dword [ebp - 0x18c]
push edx
push 0x57629c
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 0xffffffff
jne 0x4085e9
mov eax, dword [ebp - 0x18c]
push eax
push 0x5762a0
lea ecx, [ebp - 0x17c]
call fcn.00403d90
mov dword [ebp - 0x75c], eax
lea ecx, [ebp - 0x17c]
call fcn.004036a0
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x75c]
sub ecx, dword [ebp - 0x18c]
sub ecx, 0xf
push ecx
mov edx, dword [ebp - 0x18c]
add edx, 0xf
push edx
lea eax, [ebp - 0x770]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00409550
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x770]
call fcn.004093b0
lea ecx, [ebp - 0x770]
call fcn.00409320
push 0
lea ecx, [ebp - 0x770]
call fcn.00403660
push eax
call fcn.00521bbe
add esp, 4
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x150], 0
jne 0x408662
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x6fc], ecx
jmp 0x4086a9
cmp dword [ebp - 0x150], 1
jne 0x4086a9
mov edx, dword [ebp - 0x174]
add edx, dword [ebp - 0x14c]
cmp edx, dword [ebp - 0x6fc]
je 0x4086a9
mov byte [ebp - 0x6d1], 1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x770]
call fcn.004049f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x764]
call fcn.004049f0
jmp 0x408927
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x770]
call fcn.004049f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x764]
call fcn.004049f0
jmp 0x407ba2
mov eax, dword [ebp - 0x704]
add eax, dword [ebp - 0x154]
cmp eax, 0x400
jle 0x408807
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x704]
lea eax, [edx + ecx - 0x400]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x704]
sub ecx, dword [ebp - 0x79c]
push ecx
lea edx, [ebp - 0x590]
push edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x154]
push eax
call fcn.005281c0
add esp, 0xc
push 0x400
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x6e8]
call fcn.0042ea8f
lea ecx, [ebp - 0x6e8]
call fcn.0042ec63
mov edx, dword [ebp - 0x14c]
add edx, 0x400
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x6fc]
push ecx
push 0x5762a4
lea edx, [ebp - 0x6f0]
push edx
call fcn.00409f90
add esp, 0x10
lea ecx, [ebp - 0x16c]
call fcn.00409c50
lea ecx, [ebp - 0x6f0]
call fcn.004036a0
push eax
push 0
lea ecx, [ebp - 0x6f0]
call fcn.00403660
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042ea8f
lea ecx, [ebp - 0x16c]
call fcn.0042ec63
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x79c]
push eax
mov ecx, dword [ebp - 0x704]
lea edx, [ebp + ecx - 0x590]
sub edx, dword [ebp - 0x79c]
push edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x154]
push eax
call fcn.005281c0
add esp, 0xc
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x154], ecx
mov edx, dword [ebp - 0x6d0]
add edx, dword [ebp - 0x704]
mov dword [ebp - 0x6d0], edx
jmp 0x40884b
mov eax, dword [ebp - 0x704]
push eax
lea ecx, [ebp - 0x590]
push ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x154]
push edx
call fcn.005281c0
add esp, 0xc
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x704]
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x6d0]
add ecx, dword [ebp - 0x704]
mov dword [ebp - 0x6d0], ecx
mov edx, dword [ebp - 0x700]
push edx
mov eax, dword [ebp - 0x6ec]
push eax
mov ecx, dword [ebp - 0x6fc]
push ecx
mov edx, dword [ebp - 0x14c]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
cmp eax, 0x80004004
jne 0x408922
mov byte [ebp - 0x7e5], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7e5]
jmp 0x4090bb
jmp 0x407ba2
movzx ecx, byte [ebp - 0x6c9]
test ecx, ecx
je 0x4089d8
mov byte [ebp - 0x7e6], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7e6]
jmp 0x4090bb
movzx edx, byte [ebp - 0x6d1]
test edx, edx
je 0x408d57
cmp dword [ebp - 0x150], 1
je 0x4089ff
movzx eax, byte [ebp - 0x175]
test eax, eax
je 0x408d57
lea ecx, [ebp - 0x16c]
call fcn.0042ec8e
lea ecx, [ebp - 0x6e8]
call fcn.0042ec8e
mov ecx, dword [ebp - 0x804]
call fcn.004065e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x804]
movzx edx, byte [ecx + 8]
test edx, edx
jne 0x408cb5
mov ecx, dword [ebp - 0x804]
call fcn.00406bf0
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax + 0xc]
push ecx
push 1
mov ecx, dword [ebp - 0x804]
call fcn.00406a30
movzx edx, al
test edx, edx
jne 0x408b1a
mov byte [ebp - 0x7e7], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7e7]
jmp 0x4090bb
mov eax, dword [ebp - 0x804]
mov byte [eax + 8], 1
mov ecx, dword [ebp + 0xc]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7ec], esp
lea edx, [ebp + 8]
push edx
call fcn.0040a2e0
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x804]
call fcn.00407120
mov byte [ebp - 0x8c5], al
mov al, byte [ebp - 0x8c5]
mov byte [ebp - 0x79d], al
movzx ecx, byte [ebp - 0x79d]
test ecx, ecx
jne 0x408c0e
mov byte [ebp - 0x7ed], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7ed]
jmp 0x4090bb
mov dl, byte [ebp - 0x79d]
mov byte [ebp - 0x7ee], dl
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7ee]
jmp 0x4090bb
mov byte [ebp - 0x7ef], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7ef]
jmp 0x4090bb
movzx eax, byte [ebp - 0x6d1]
test eax, eax
jne 0x408d6f
cmp dword [ebp - 0x6d0], 0xffffffff
jne 0x408e29
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7f4], ecx
mov edx, dword [ebp - 0x7f4]
push edx
call fcn.0042236b
add esp, 4
mov byte [ebp - 0x7f5], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7f5]
jmp 0x4090bb
mov eax, dword [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x6e8]
call fcn.0042ea8f
lea ecx, [ebp - 0x6e8]
call fcn.0042ec63
lea ecx, [ebp - 0x6e8]
call fcn.0042ec8e
mov edx, dword [ebp - 0x14c]
add edx, dword [ebp - 0x154]
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x700]
push eax
mov ecx, dword [ebp - 0x6ec]
push ecx
mov edx, dword [ebp - 0x6fc]
push edx
mov eax, dword [ebp - 0x14c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax + 0x18]
call ecx
cmp eax, 0x80004004
jne 0x408f3e
mov byte [ebp - 0x7f6], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7f6]
jmp 0x4090bb
mov edx, dword [ebp - 0x14c]
push edx
mov eax, dword [ebp - 0x6fc]
push eax
push str._d_d
lea ecx, [ebp - 0x6f0]
push ecx
call fcn.00409f90
add esp, 0x10
lea ecx, [ebp - 0x16c]
call fcn.00409c50
lea ecx, [ebp - 0x6f0]
call fcn.004036a0
push eax
push 0
lea ecx, [ebp - 0x6f0]
call fcn.00403660
push eax
lea ecx, [ebp - 0x16c]
call fcn.0042ea8f
lea ecx, [ebp - 0x16c]
call fcn.0042ec63
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7fc], edx
mov eax, dword [ebp - 0x7fc]
push eax
call fcn.0042236b
add esp, 4
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x804]
add ecx, 4
call fcn.00409e50
movzx ecx, al
test ecx, ecx
jne 0x408fec
mov ecx, dword [ebp - 0x804]
add ecx, 4
call fcn.004065e0
push eax
mov ecx, dword [ebp - 0x804]
call fcn.004065e0
push eax
call fcn.0042f55f
lea ecx, [ebp - 0x16c]
call fcn.0042ec8e
lea ecx, [ebp - 0x188]
call fcn.004065e0
push eax
call fcn.0042f587
jmp 0x409017
mov dword [ebp - 4], 0xa
mov byte [ebp - 0x7fd], 1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.004049f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.004049f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004049f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
call fcn.004049f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004049f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004049f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.004049f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.0042ed0a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e8]
call fcn.0042ed0a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004049f0
mov al, byte [ebp - 0x7fd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.00520c7a
mov esp, ebp
pop ebp
ret 8