Function at 0x43efc0
Capabilities:
Create directory
Delete file
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60f9a8
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x685680]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x8c], edi
mov dword [ebp - 4], 4
mov eax, dword [edi + 8]
or esi, 0xffffffff
cmp dword [eax - 0xc], 0
je 0x4428c3
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x90], eax
lea eax, [edi + 0x64]
push eax
mov byte [ebp - 4], 5
push dword [edi + 0xc]
lea eax, [ebp - 0x90]
push 0x651db4
push eax
call fcn.00402f20
mov ebx, dword [ebp - 0x90]
add esp, 0x10
push ebx
call dword [0x6905e0]
test eax, eax
jne 0x43f05b
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 6
push dword [ebp + 0x10]
lea eax, [ebp - 0x88]
push ebx
push str._s_s.xml
push eax
call fcn.00402f20
mov eax, dword [ebp + 0x18]
add eax, 0xfffffff0
push eax
call fcn.0040a5a0
lea esi, [eax + 0x10]
add esp, 0x14
mov dword [ebp - 0x9c], esi
mov byte [ebp - 4], 7
cmp dword [esi - 0xc], 0
jl 0x43f0db
push str.SEARCH_TERM
push esi
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x43f0db
sub eax, esi
test eax, eax
jle 0x43f0db
push str.searchTerms
push str.SEARCH_TERM
lea ecx, [ebp - 0x9c]
call fcn.0040a890
jmp 0x43f0ed
push 0xd
push str.searchTerms
lea ecx, [ebp - 0x9c]
call fcn.0043aa90
mov eax, dword [ebp + 0x20]
add eax, 0xfffffff0
push eax
call fcn.0040a5a0
lea esi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xa0], esi
mov byte [ebp - 4], 8
cmp dword [esi - 0xc], 0
jl 0x43f13e
push str.SEARCH_TERM
push esi
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x43f13e
sub eax, esi
test eax, eax
jle 0x43f13e
push str.searchTerms
push str.SEARCH_TERM
lea ecx, [ebp - 0xa0]
call fcn.0040a890
jmp 0x43f150
push 0xd
push str.searchTerms
lea ecx, [ebp - 0xa0]
call fcn.0043aa90
mov eax, dword [ebp - 0x9c]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0xa8], eax
call fcn.0040a5a0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x84], eax
push str.amp_
push 0x6516c8
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 9
call fcn.0040a890
mov eax, dword [ebp - 0xa0]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0xa4], eax
call fcn.0040a5a0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x94], eax
push str.amp_
push 0x6516c8
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xa
call fcn.0040a890
push dword [ebp + 0x10]
lea esi, [edi + 0x914]
push str.short
mov ecx, esi
mov dword [ebp - 0x3c], esi
call fcn.0040a890
push dword [ebp + 0x10]
mov ecx, esi
push str.description
call fcn.0040a890
mov esi, dword [ebp - 0x84]
push esi
push str.searchlink
lea ecx, [edi + 0x914]
call fcn.0040a890
push dword [ebp + 0x14]
lea ecx, [edi + 0x914]
push str.domain
call fcn.0040a890
push dword [ebp - 0x94]
lea ecx, [edi + 0x914]
push str.sugglink
call fcn.0040a890
push dword [ebp + 0x1c]
lea ecx, [edi + 0x914]
push str.suggdomain
call fcn.0040a890
push dword [edi + 0x918]
lea ecx, [edi + 0x914]
push str.image
call fcn.0040a890
mov edi, dword [ebp - 0x88]
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
mov dword [ebp - 0x74], edx
cmp edx, 0xffffffff
je 0x43f299
mov eax, dword [ebp - 0x3c]
push 0
mov ecx, dword [eax]
lea eax, [ebp - 0x18]
push eax
push dword [ecx - 0xc]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x74]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x8c]
push 0
push 0
push 3
push 0
push 0
push SysReAllocStringLen
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x78], eax
cmp eax, 0xffffffff
je 0x442805
push 0
push eax
mov dword [ebp - 0x38], 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
lea ecx, [eax + 1]
push ecx
mov dword [ebp - 0x3c], eax
call fcn.004b998e
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x3c]
push 0
lea edx, [ebp - 0x38]
push edx
push eax
push ecx
push dword [ebp - 0x78]
mov dword [ebp - 0x74], ecx
mov byte [ecx + eax], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x43f311
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x442805
push 0x6508f0
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], 0
call fcn.0042ea30
mov byte [ebp - 4], 0xb
mov esi, dword [ebp - 0x74]
push esi
lea eax, [ebp - 0x64]
push 0x6516cc
push eax
call fcn.00402f20
add esp, 0xc
push esi
call fcn.004b9997
add esp, 4
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x68], eax
push 0x75
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x68]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x68]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x50], eax
push 0x75
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xd
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x50]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x50]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x43f746
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x50]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x43f722
mov ebx, dword [ebp - 0x50]
mov eax, dword [ebx - 0xc]
mov dword [ebp - 0x3c], eax
lea edi, [eax + 1]
test edi, edi
jns 0x43f760
push 0x80070057
call fcn.00403360
mov eax, dword [ebx - 8]
mov esi, 1
mov ecx, esi
sub ecx, dword [ebx - 4]
sub eax, edi
or eax, ecx
jge 0x43f77f
push edi
lea ecx, [ebp - 0x50]
call fcn.00403150
mov ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov byte [eax + ebx], 0x22
cmp edi, dword [ebx - 8]
jg 0x43f756
mov dword [ebx - 0xc], edi
mov byte [edi + ebx], 0
mov eax, dword [ebx - 0xc]
mov dword [ebp - 0x3c], eax
lea edi, [eax + 1]
test edi, edi
jns 0x43f7a9
push 0x80070057
call fcn.00403360
mov eax, dword [ebx - 8]
mov ecx, esi
sub ecx, dword [ebx - 4]
sub eax, edi
or eax, ecx
jge 0x43f7c3
push edi
lea ecx, [ebp - 0x50]
call fcn.00403150
mov ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov byte [eax + ebx], 0x29
cmp edi, dword [ebx - 8]
jg 0x43f756
mov dword [ebx - 0xc], edi
mov byte [edi + ebx], 0
mov eax, dword [ebx - 0xc]
mov dword [ebp - 0x3c], eax
lea edi, [eax + 1]
test edi, edi
jns 0x43f7ed
push 0x80070057
call fcn.00403360
mov eax, dword [ebx - 8]
mov ecx, esi
sub ecx, dword [ebx - 4]
sub eax, edi
or eax, ecx
jge 0x43f807
push edi
lea ecx, [ebp - 0x50]
call fcn.00403150
mov ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov byte [eax + ebx], 0x3b
cmp edi, dword [ebx - 8]
jg 0x43f756
mov dword [ebx - 0xc], edi
mov byte [edi + ebx], 0
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
mov byte [ebp - 4], 0xe
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f84f
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f86c
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x62
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f89d
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f8ba
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x72
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f8eb
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f908
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x6f
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f939
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f956
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x77
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f987
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f9a4
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x73
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43f9d5
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43f9f2
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x65
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43fa23
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43fa40
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x72
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x74], eax
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x43fa71
push 0x80070057
call fcn.00403360
mov eax, dword [edi - 8]
mov ecx, esi
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x43fa8e
push edx
lea ecx, [ebp - 0x78]
call fcn.00403150
mov edi, dword [ebp - 0x78]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov byte [eax + edi], 0x2e
cmp edx, dword [edi - 8]
jg 0x43f756
mov dword [edi - 0xc], edx
mov byte [edx + edi], 0
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x3c], ecx
inc ecx
mov dword [ebp - 0x70], ecx
jns 0x43fad2
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0x70]
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x43faef
push dword [ebp - 0x70]
lea ecx, [ebp - 0x4c]
call fcn.00403150
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3c]
mov byte [ecx + eax], 0x75
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], ecx
mov byte [ecx + eax], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x3c], ecx
inc ecx
mov dword [ebp - 0x70], ecx
jns 0x43fb1f
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0x70]
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x43fb3c
push dword [ebp - 0x70]
lea ecx, [ebp - 0x4c]
call fcn.00403150
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3c]
mov byte [ecx + eax], 0x73
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], ecx
mov byte [ecx + eax], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x7c], ecx
inc ecx
jns 0x43fb69
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
mov ebx, dword [ebp - 0x50]
mov edx, esi
mov esi, dword [ebp - 0x7c]
sub edx, dword [eax - 4]
inc esi
sub ecx, esi
or ecx, edx
jge 0x43fb8a
push esi
lea ecx, [ebp - 0x4c]
call fcn.00403150
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x7c]
mov byte [ecx + eax], 0x65
cmp esi, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], esi
push 0x72
lea ecx, [ebp - 0x4c]
mov byte [esi + eax], 0
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x4c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x43fd91
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x4c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x43fd65
push 0x22
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x29
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0xd
lea ecx, [ebp - 0x4c]
call fcn.00406890
push 0xa
lea ecx, [ebp - 0x4c]
call fcn.00406890
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x43fea9
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jl 0x43feb2
push ecx
push eax
call fcn.005ce5b0
mov esi, eax
add esp, 8
test esi, esi
je 0x43fea9
mov eax, dword [ebp - 0x64]
sub esi, eax
mov dword [ebp - 0x74], esi
cmp esi, 0xffffffff
je 0x43feac
test esi, esi
js 0x43fe22
cmp esi, dword [eax - 0xc]
jg 0x43fe22
add eax, esi
push 0x652b9c
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x43fe22
sub eax, dword [ebp - 0x64]
jmp 0x43fe25
or eax, 0xffffffff
sub eax, esi
mov dword [ebp - 0x3c], eax
add eax, 0xffffffcf
push eax
lea eax, [esi + 0x2f]
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x7c], 0
call fcn.0042ec50
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x7c]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov dword [ebp - 0x80], eax
call fcn.0040a5a0
mov ecx, dword [ebp - 0x8c]
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00444c30
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x74]
inc eax
push eax
push esi
lea ecx, [ebp - 0x64]
call fcn.0042eb10
push ebx
push esi
lea ecx, [ebp - 0x64]
call fcn.00449e10
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x80]
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43ff05
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x43ff05
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jge 0x43feb7
or ecx, 0xffffffff
jmp 0x43fed1
push edi
push eax
call fcn.005ce5b0
mov ecx, eax
mov eax, dword [ebp - 0x64]
add esp, 8
test ecx, ecx
jne 0x43fecf
or ecx, 0xffffffff
jmp 0x43fed1
sub ecx, eax
test ecx, ecx
js 0x43fef3
cmp ecx, dword [eax - 0xc]
jg 0x43fef3
add eax, ecx
push 0x652ba0
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x43fef3
sub eax, dword [ebp - 0x64]
jmp 0x43fef6
or eax, 0xffffffff
push dword [ebp - 0x4c]
add eax, 2
push eax
lea ecx, [ebp - 0x64]
call fcn.00449e10
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push 0x75
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x31
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x70]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x70]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x6c], eax
push 0x75
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x12
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x31
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x6c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x6c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x44023c
nop
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x6c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x440210
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x3c], ecx
lea esi, [ecx + 1]
test esi, esi
jns 0x440256
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x440273
push esi
lea ecx, [ebp - 0x6c]
call fcn.00403150
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x3c]
mov byte [eax + ecx], 0x22
cmp esi, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], esi
push 0x29
lea ecx, [ebp - 0x6c]
mov byte [eax + esi], 0
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x6c]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x5c], eax
push 0x75
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x31
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x5c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x44045f
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x5c]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x440433
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x3c], ecx
inc ecx
mov dword [ebp - 0x60], ecx
jns 0x440478
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0x60]
mov esi, 1
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x44049a
push dword [ebp - 0x60]
lea ecx, [ebp - 0x5c]
call fcn.00403150
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x3c]
mov byte [eax + ecx], 0x22
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x74], ecx
lea edx, [ecx + 1]
mov dword [ebp - 0x3c], edx
test edx, edx
jns 0x4404ce
push 0x80070057
call fcn.00403360
mov ecx, dword [eax - 8]
sub esi, dword [eax - 4]
sub ecx, edx
or ecx, esi
jge 0x4404e9
push edx
lea ecx, [ebp - 0x5c]
call fcn.00403150
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x74]
mov byte [eax + ecx], 0x29
cmp edx, dword [eax - 8]
jg 0x43f756
mov dword [eax - 0xc], edx
push 0x3b
lea ecx, [ebp - 0x5c]
mov byte [eax + edx], 0
call fcn.00406890
push 0xd
lea ecx, [ebp - 0x5c]
call fcn.00406890
push 0xa
lea ecx, [ebp - 0x5c]
call fcn.00406890
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x440580
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jl 0x440589
push ecx
push eax
call fcn.005ce5b0
mov esi, eax
add esp, 8
test esi, esi
je 0x440580
mov eax, dword [ebp - 0x64]
sub esi, eax
cmp esi, 0xffffffff
je 0x440583
test esi, esi
js 0x44056a
cmp esi, dword [eax - 0xc]
jg 0x44056a
add eax, esi
push 0x652b9c
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x44056a
sub eax, dword [ebp - 0x64]
jmp 0x44056d
or eax, 0xffffffff
sub eax, esi
inc eax
push eax
push esi
lea ecx, [ebp - 0x64]
call fcn.0042eb10
push dword [ebp - 0x6c]
push esi
jmp 0x4405d4
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jge 0x44058e
or ecx, 0xffffffff
jmp 0x4405a8
push edi
push eax
call fcn.005ce5b0
mov ecx, eax
mov eax, dword [ebp - 0x64]
add esp, 8
test ecx, ecx
jne 0x4405a6
or ecx, 0xffffffff
jmp 0x4405a8
sub ecx, eax
test ecx, ecx
js 0x4405ca
cmp ecx, dword [eax - 0xc]
jg 0x4405ca
add eax, ecx
push 0x652ba0
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x4405ca
sub eax, dword [ebp - 0x64]
jmp 0x4405cd
or eax, 0xffffffff
push dword [ebp - 0x5c]
add eax, 2
push eax
lea ecx, [ebp - 0x64]
call fcn.00449e10
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x60], eax
push 0x75
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x14
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x45
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x60]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x60]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
push 0x75
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x45
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x58]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x44099e
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x58]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x440972
push 0x22
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x29
lea ecx, [ebp - 0x58]
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x58]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
push 0x75
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x16
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x45
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x54]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x440bc3
test esi, esi
js 0x43f756
cmp esi, ecx
jg 0x43f756
mov al, byte [esi + eax]
mov byte [ebp - 0x3c], al
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x54]
call fcn.00406890
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x440b97
push 0x22
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x29
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0xd
lea ecx, [ebp - 0x54]
call fcn.00406890
push 0xa
lea ecx, [ebp - 0x54]
call fcn.00406890
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x440c57
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jl 0x440c60
push ecx
push eax
call fcn.005ce5b0
mov esi, eax
add esp, 8
test esi, esi
je 0x440c57
mov eax, dword [ebp - 0x64]
sub esi, eax
cmp esi, 0xffffffff
je 0x440c5a
test esi, esi
js 0x440c41
cmp esi, dword [eax - 0xc]
jg 0x440c41
add eax, esi
push 0x652b9c
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x440c41
sub eax, dword [ebp - 0x64]
jmp 0x440c44
or eax, 0xffffffff
sub eax, esi
inc eax
push eax
push esi
lea ecx, [ebp - 0x64]
call fcn.0042eb10
push dword [ebp - 0x58]
push esi
jmp 0x440cab
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jge 0x440c65
or ecx, 0xffffffff
jmp 0x440c7f
push edi
push eax
call fcn.005ce5b0
mov ecx, eax
mov eax, dword [ebp - 0x64]
add esp, 8
test ecx, ecx
jne 0x440c7d
or ecx, 0xffffffff
jmp 0x440c7f
sub ecx, eax
test ecx, ecx
js 0x440ca1
cmp ecx, dword [eax - 0xc]
jg 0x440ca1
add eax, ecx
push 0x652ba0
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x440ca1
sub eax, dword [ebp - 0x64]
jmp 0x440ca4
or eax, 0xffffffff
push dword [ebp - 0x54]
add eax, 2
push eax
lea ecx, [ebp - 0x64]
call fcn.00449e10
cmp dword [ebp + 8], 0
je 0x4414fe
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x44], eax
push 0x75
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x44]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x48], eax
push 0x75
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x18
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x29
lea ecx, [ebp - 0x48]
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x48]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
push 0x75
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x19
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x28
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x5f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x29
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x3b
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0xd
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0xa
lea ecx, [ebp - 0x40]
call fcn.00406890
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x441442
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jl 0x44144b
push esi
push eax
call fcn.005ce5b0
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x441442
mov eax, dword [ebp - 0x64]
sub ecx, eax
mov dword [ebp - 0x7c], ecx
cmp ecx, 0xffffffff
je 0x441445
test ecx, ecx
js 0x44142a
cmp ecx, dword [eax - 0xc]
jg 0x44142a
add eax, ecx
push 0x652b9c
push eax
call fcn.005ce5b0
mov ecx, dword [ebp - 0x7c]
add esp, 8
test eax, eax
je 0x44142a
sub eax, dword [ebp - 0x64]
jmp 0x44142d
or eax, 0xffffffff
sub eax, ecx
inc eax
push eax
push ecx
lea ecx, [ebp - 0x64]
call fcn.0042eb10
push dword [ebp - 0x48]
push dword [ebp - 0x7c]
jmp 0x441496
mov eax, dword [ebp - 0x64]
cmp dword [eax - 0xc], 0
jge 0x441450
or ecx, 0xffffffff
jmp 0x44146a
push edi
push eax
call fcn.005ce5b0
mov ecx, eax
mov eax, dword [ebp - 0x64]
add esp, 8
test ecx, ecx
jne 0x441468
or ecx, 0xffffffff
jmp 0x44146a
sub ecx, eax
test ecx, ecx
js 0x44148c
cmp ecx, dword [eax - 0xc]
jg 0x44148c
add eax, ecx
push 0x652ba0
push eax
call fcn.005ce5b0
add esp, 8
test eax, eax
je 0x44148c
sub eax, dword [ebp - 0x64]
jmp 0x44148f
or eax, 0xffffffff
push dword [ebp - 0x40]
add eax, 2
push eax
lea ecx, [ebp - 0x64]
call fcn.00449e10
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4414bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4414e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x16
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4414fe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
call fcn.004476b0
mov esi, dword [ebp - 0x8c]
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x64]
push 0
mov edx, dword [ecx - 0xc]
lea ebx, [ebp - 0x1c]
push ebx
push edx
push ecx
push eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x1c], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, dword [ebp - 0x50]
test eax, eax
jne 0x4415bb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x3c]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x3c]
lea eax, [ebp - 0x7c]
push 0x6516cc
push eax
call fcn.00402f20
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
add esp, 0xc
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4415bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x1b
push dword [esi + 0x1c]
lea eax, [ebp - 0x7c]
push dword [esi + 0xc]
push 0x651db4
push eax
call fcn.00402f20
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
push eax
call fcn.0040a5a0
lea esi, [eax + 0x10]
add esp, 0x14
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x1c
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
push 0x42
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x49
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x49
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x46
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x78
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x76
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x76
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x49
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6b
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x46
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x66
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x78
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6d
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x77
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x70
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x20
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x64
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x69
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x79
lea ecx, [ebp - 0x40]
call fcn.00406890
push 0x2e
lea ecx, [ebp - 0x40]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x44], eax
push 0x7b
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1e
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x5b
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x67
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6f
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x62
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6c
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x5d
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x3a
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x7b
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x63
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x75
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x72
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x65
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x6e
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x74
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x3a
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov edx, dword [eax - 0xc]
mov dword [ebp - 0x48], ecx
test edx, edx
jle 0x442433
test ecx, ecx
js 0x43f756
cmp ecx, edx
jg 0x43f756
mov al, byte [ecx + eax]
mov byte [ebp - 0x74], al
push dword [ebp - 0x74]
lea ecx, [ebp - 0x44]
call fcn.00406890
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp + 0x10]
inc ecx
mov edx, dword [eax - 0xc]
mov dword [ebp - 0x48], ecx
cmp ecx, edx
jl 0x442401
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x2c
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x61
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x73
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x68
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x22
lea ecx, [ebp - 0x44]
call fcn.00406890
push 0x3a
lea ecx, [ebp - 0x44]
call fcn.00406890
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x8c]
mov byte [ebp - 4], 0x1f
push dword [ebp - 0x40]
push esi
push dword [eax + 0x10]
lea eax, [ebp - 0x48]
push 0x652ba4
push eax
call fcn.00402f20
mov eax, dword [ebp - 0x48]
push ecx
mov esi, esp
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [eax], 0
jne 0x4424df
xor edx, edx
jmp 0x4424f1
mov edx, eax
lea ecx, [edx + 1]
mov dword [ebp - 0x74], ecx
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4424e7
sub edx, dword [ebp - 0x74]
push edx
push eax
mov ecx, esi
call fcn.00403850
lea ecx, [ebp - 0x34]
call fcn.004a72d0
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x20], 0x10
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x64]
push str._s__s_
push eax
call fcn.00402f20
add esp, 0x28
lea ecx, [ebp - 0x98]
push 0x6508f0
mov dword [ebp - 0x98], 0
call fcn.0042ea30
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x20], 0x10
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x98]
push 0x6516cc
push eax
call fcn.00402f20
mov esi, dword [ebp - 0x7c]
add esp, 0xc
push esi
call dword [0x6905e0]
push 0
push 0x80
test eax, eax
je 0x442592
push 5
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
mov dword [ebp - 0x74], edx
jmp 0x4425a9
push 1
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x80], 0xffffffff
jne 0x442982
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x98]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4425d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x20], 0x10
jb 0x4425e8
push dword [ebp - 0x34]
call fcn.004b9997
add esp, 4
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov dword [ebp - 0x20], 0xf
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x34], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44261b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44263c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44265d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x3c]
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44267b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x16
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44269b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4426bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4426db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4426fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44271b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44273b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44275b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44277b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0xd
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442798
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0xc
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4427b5
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4427d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x4427f3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x88]
mov esi, dword [ebp - 0x84]
mov ebx, dword [ebp - 0x90]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x94]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442829
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442849
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
mov byte [ebp - 4], 7
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442869
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa8]
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442889
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 5
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4428a6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 4
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4428c3
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4428e3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp + 0x14]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442903
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp + 0x18]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442923
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp + 0x1c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442943
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x442964
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005cd355
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x64]
push 0
mov ecx, dword [eax - 0xc]
lea esi, [ebp - 0x1c]
push esi
push ecx
push eax
push edx
mov dword [ebp - 0x1c], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x442a13
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x18]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x22
push dword [ebp - 0x18]
lea eax, [ebp - 0x80]
push 0x6516cc
push eax
call fcn.00402f20
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
add esp, 0xc
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442a13
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x74]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x686984]
mov ecx, 0x686984
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x8c]
mov byte [ebp - 4], 0x23
push dword [eax + 0x20]
push dword [eax + 0xc]
lea eax, [ebp - 0x74]
push 0x651db4
push eax
call fcn.00402f20
mov esi, dword [ebp - 0x74]
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x21
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442a7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x98]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442a9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x20], 0x10
jb 0x442aae
push dword [ebp - 0x34]
call fcn.004b9997
add esp, 4
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov dword [ebp - 0x20], 0xf
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x34], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442ae0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b20
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x3c]
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b5d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b7d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442b9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442bbd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442bdd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442bfd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442c1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442c3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0xd
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442c5a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0xc
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442c77
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442c97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442cb7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x94]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442cda
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442cfd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
mov byte [ebp - 4], 7
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442d1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa8]
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442d3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x442d60
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x90]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4428c3
mov ecx, dword [edx]
push edx
jmp 0x4428be