Function at 0x401dfd
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3224
push edi
lea edi, [ebp - 0x3224]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x401e26
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x404e53
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x401fa3
push eax
push edi
call fcn.004052e6
cmp eax, 1
jne 0x401e5a
mov dword [edi], 0x4056e7
jmp 0x401e8b
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x401fa1
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3168]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3168]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x401fa1
lea edx, [ebp - 0x2fc4]
push edx
lea edx, [ebp - 0x3014]
push edx
lea edx, [ebp - 0x3064]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x401fa1
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3064]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3168]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3168]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3014]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3168]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3168]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x401fe3
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x404e53
mov dword [ebp - 0x2d7c], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x2f74]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x2c6c], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402049
cmp eax, 0xb
jne 0x40215e
mov byte [ebp - 0x6ee], 0x29
mov byte [ebp - 0x6ed], 2
push 0xfa
lea edx, [ebp - 0x2e7a]
push edx
push 2
lea edx, [ebp - 0x6ee]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x4020c6
push 0xa0d31
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x2c6c], 1
jmp 0x40215e
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0x6e2], esp
push 0x70
push 0x68702e74
push 0x7365745f
push 0x6e61635f
push 0x39306337
push 0x31636465
push 0x5f6d6361
push 0x5f757a75
push 0x73692f74
push 0x7365742f
lea edx, [ebp - 0x6ea]
push edx
lea edx, [ebp - 0x2e7a]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0x6e2]
call fcn.00406236
mov dword [ebp - 0x2c6c], eax
add esp, 0x28
add esp, 0xc
test eax, eax
jne 0x40215e
mov byte [ebp - 0x6ec], 0x2a
mov byte [ebp - 0x6eb], 0xa
push 0xfa
lea edx, [ebp - 0x2e7a]
push edx
push 0xa
lea edx, [ebp - 0x6ec]
push edx
call dword [ebx + 0x40]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4023ba
cmp dword [esi + 0x270], 0x75736924
jne 0x4021da
cmp dword [esi + 0x274], 0x3139757a
jne 0x4021da
cmp dword [esi + 0x278], 0x4d434124
jne 0x4021da
cmp dword [esi + 0x27c], 0x43444520
jne 0x4021da
cmp dword [esi + 0x280], 0x30433731
jne 0x4021da
cmp dword [esi + 0x284], 0x35315b39
jne 0x4021da
cmp dword [esi + 0x288], 0x5d6b3430
jne 0x4021da
cmp dword [esi + 0x28c], 0x4e414320
jne 0x4021da
cmp byte [esi + 0x290], 0
je 0x402286
cmp dword [esi + 0x270], 0x75736924
jne 0x4023ba
cmp dword [esi + 0x274], 0x3139757a
jne 0x4023ba
cmp dword [esi + 0x278], 0x45542824
jne 0x4023ba
cmp dword [esi + 0x27c], 0x41295453
jne 0x4023ba
cmp dword [esi + 0x280], 0x45204d43
jne 0x4023ba
cmp dword [esi + 0x284], 0x37314344
jne 0x4023ba
cmp dword [esi + 0x288], 0x5b393043
jne 0x4023ba
cmp dword [esi + 0x28c], 0x34303531
jne 0x4023ba
cmp dword [esi + 0x290], 0x43205d6b
jne 0x4023ba
cmp word [esi + 0x294], 0x4e41
jne 0x4023ba
cmp byte [esi + 0x296], 0
jne 0x4023ba
mov dword [ebp - 0xc26], section..code
mov dword [ebp - 0xc22], 0
mov dword [ebp - 0xc1e], 0x3c
push 0x320
push 0
lea edx, [ebp - 0xbfe]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0x8de], 0x21
mov dword [ebp - 0xc32], 0
mov ecx, dword [ebp - 0xc32]
cmp ecx, dword [ebp - 0xc1e]
jae 0x4023ba
mov eax, dword [ebp - 0xc22]
lea eax, [eax + ecx]
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0xc1e]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x40231c
cmp ecx, 0xf0
jae 0x40231c
mov eax, dword [ebp - 0xc26]
add eax, dword [ebp - 0xc32]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0x8d8], al
inc ecx
jmp 0x4022f7
mov dword [ebp - 0xc2e], ecx
add ecx, 4
mov byte [ebp - 0x8dd], cl
push 0xfa
lea edx, [ebp - 0x2e7a]
push edx
push 0xf6
lea edx, [ebp - 0x8de]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x40238a
push 0xa0d
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x2c6c], 1
jmp 0x4023ba
mov eax, dword [ebp - 0xc2e]
mov ecx, dword [ebp - 0xc32]
add dword [ebp - 0xc32], eax
push eax
lea edx, [ebp - 0x2e7a]
push edx
lea edx, [ebp + ecx - 0xbfe]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x4022cc
mov dword [ebp - 0x2c6c], 0
cmp dword [esi + 0x270], 0x75736924
jne 0x402431
cmp dword [esi + 0x274], 0x3139757a
jne 0x402431
cmp dword [esi + 0x278], 0x4d434124
jne 0x402431
cmp dword [esi + 0x27c], 0x43444520
jne 0x402431
cmp dword [esi + 0x280], 0x30433731
jne 0x402431
cmp dword [esi + 0x284], 0x35315b39
jne 0x402431
cmp dword [esi + 0x288], 0x5d6b3430
jne 0x402431
cmp dword [esi + 0x28c], 0x4e414320
jne 0x402431
cmp byte [esi + 0x290], 0
je 0x4024dd
cmp dword [esi + 0x270], 0x75736924
jne 0x404e4b
cmp dword [esi + 0x274], 0x3139757a
jne 0x404e4b
cmp dword [esi + 0x278], 0x45542824
jne 0x404e4b
cmp dword [esi + 0x27c], 0x41295453
jne 0x404e4b
cmp dword [esi + 0x280], 0x45204d43
jne 0x404e4b
cmp dword [esi + 0x284], 0x37314344
jne 0x404e4b
cmp dword [esi + 0x288], 0x5b393043
jne 0x404e4b
cmp dword [esi + 0x28c], 0x34303531
jne 0x404e4b
cmp dword [esi + 0x290], 0x43205d6b
jne 0x404e4b
cmp word [esi + 0x294], 0x4e41
jne 0x404e4b
cmp byte [esi + 0x296], 0
jne 0x404e4b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4024f1
cmp eax, 0xb
jne 0x404188
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40251f
mov dword [ebp - 0x2c6c], 1
jmp 0x404188
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40254c
mov dword [ebp - 0x2c6c], 1
jmp 0x404188
mov dword [ebp - 0xc3e], 0xe3070000
mov dword [ebp - 0xc3a], 0xeb070000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x6de], esp
mov eax, dword [ebp - 0xc3a]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0xc3e]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x6de]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4025c8
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x40261d
push 0
push 0
push 0
push 0x40
push 0
push 5
push 0xeb050000
push 0
push 4
push 0
push 0x40
push 0
push 5
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 5
push 1
push 1
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x40261d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x402672
push 0
push 0
push 0
push 0x40
push 0
push 5
push 0x1010000
push 0
push 4
push 0
push 0x40
push 0
push 5
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 5
push 1
push 1
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x402672
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x4026ca
push 0
push 0
push 0
push 0x40
push 0
push 5
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 5
push 0xf8ffffff
push 0
push 4
push 0
push 0x40
push 0
push 5
push 1
push 1
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x4026ca
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x402722
push 0
push 0
push 0
push 0x40
push 0
push 5
push 0x60000
push 0
push 4
push 0
push 0x40
push 0
push 5
push 0x80ffffff
push 0
push 4
push 0
push 0x40
push 0
push 5
push 1
push 1
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x402722
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x4027df
mov eax, dword [ebp - 0xc3e]
mov dword [ebp - 0x2c68], eax
mov dword [ebp - 0x2c64], 0x3e
lea edx, [ebp - 0x2c68]
push edx
push 5
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x40276f
mov dword [ebp - 0x2c6c], 1
jmp 0x4027df
lea edx, [ebp - 0x1c62]
push edx
push 0xfa
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x402795
mov dword [ebp - 0x2c6c], 1
jmp 0x4027df
test eax, eax
jne 0x4027d1
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x4027df
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x40276f
cmp dword [ebp - 0x2c6c], 0
jne 0x402924
mov dword [ebp - 0x2c64], 0xcb1a
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402823
mov dword [ebp - 0x2c6c], 1
jmp 0x402924
lea edx, [ebp - 0x1c62]
push edx
push 0xfa
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x40284c
mov dword [ebp - 0x2c6c], 1
jmp 0x402924
test eax, eax
jne 0x40288b
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x402924
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x402823
cmp byte [ebp - 0x1c5e], 0x7e
je 0x402823
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x402924
cmp byte [ebp - 0x1c5e], 0x5a
je 0x4028c2
mov dword [ebp - 0x6f2], 0
jmp 0x4028d0
mov eax, dword [ebp - 0x1c5c]
bswap eax
mov dword [ebp - 0x6f2], eax
push 0xa
push 0xd58382e
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push dword [ebp - 0x6f2]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3168]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x34
lea edx, [ebp - 0x3168]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x404172
cmp dword [ebp - 0x2c6c], 0
jne 0x40297c
push 0x3e
push 0xe3070000
push 0
push 5
push 0
push 0x40
push 0
push 6
push 0x1194
push 0
push 0
mov dword [ebp - 0x6da], esp
push 0
push dword [ebp - 0x6da]
push 6
call dword [edi]
add esp, 0x2c
cmp eax, 0xffffffff
jne 0x40297c
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x4029c8
push 0x803e
push 0x11010000
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0xbb8
push 1
push 0
mov dword [ebp - 0x6d6], esp
push 0
push dword [ebp - 0x6d6]
push 6
call dword [edi]
add esp, 0x2c
cmp eax, 0xffffffff
jne 0x4029c8
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x402ab1
mov dword [ebp - 0xc42], 3
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x20210fe
lea edx, [ebp - 0x2c68]
push edx
push 8
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402a23
mov dword [ebp - 0x2c6c], 1
jmp 0x402ab1
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x402a49
mov dword [ebp - 0x2c6c], 1
jmp 0x402ab1
test eax, eax
jne 0x402a85
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x402ab1
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x402a23
cmp byte [ebp - 0x1c5e], 0x7e
je 0x402a23
cmp byte [ebp - 0x1c5e], 0x50
je 0x402ab1
dec dword [ebp - 0xc42]
jne 0x4029df
cmp dword [ebp - 0x2c6c], 0
jne 0x402b60
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x2f3]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402ad0
mov dword [ebp - 0x2c68], 0x11010000
mov dword [ebp - 0x2c64], 0x310
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402b2e
mov dword [ebp - 0x2c6c], 1
jmp 0x402b60
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x557]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402b40
cmp dword [ebp - 0x2c6c], 0
jne 0x402c0f
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x557]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402b7f
mov dword [ebp - 0x2c68], 0x11010000
mov dword [ebp - 0x2c64], 0x285
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402bdd
mov dword [ebp - 0x2c6c], 1
jmp 0x402c0f
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x3ea]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402bef
cmp dword [ebp - 0x2c6c], 0
jne 0x402d8a
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x3ea]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402c2e
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x28fe
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402c92
mov dword [ebp - 0x2c6c], 1
jmp 0x402d8a
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x402cbb
mov dword [ebp - 0x2c6c], 1
jmp 0x402d8a
test eax, eax
jne 0x402cfa
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x402d8a
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x402c92
cmp byte [ebp - 0x1c5e], 0x7e
je 0x402c92
cmp byte [ebp - 0x1c5e], 0x68
je 0x402d8a
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402d6c
xor eax, eax
jmp 0x402d76
cmp eax, 0x20
jbe 0x402d76
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x402e0b
push 4
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x2c68], 0x11010000
mov dword [ebp - 0x2c64], 0x10328
lea edx, [ebp - 0x2c68]
push edx
push 7
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402dd9
mov dword [ebp - 0x2c6c], 1
jmp 0x402e0b
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x63d]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402deb
cmp dword [ebp - 0x2c6c], 0
jne 0x402f86
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x63d]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402e2a
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0xa2fe
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x402e8e
mov dword [ebp - 0x2c6c], 1
jmp 0x402f86
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x402eb7
mov dword [ebp - 0x2c6c], 1
jmp 0x402f86
test eax, eax
jne 0x402ef6
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x402f86
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x402e8e
cmp byte [ebp - 0x1c5e], 0x7e
je 0x402e8e
cmp byte [ebp - 0x1c5e], 0xe2
je 0x402f86
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402f68
xor eax, eax
jmp 0x402f72
cmp eax, 0x20
jbe 0x402f72
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403101
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x104]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0xa
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x402fa5
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x1a5fe
lea edx, [ebp - 0x2c68]
push edx
push 7
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403009
mov dword [ebp - 0x2c6c], 1
jmp 0x403101
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x403032
mov dword [ebp - 0x2c6c], 1
jmp 0x403101
test eax, eax
jne 0x403071
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403101
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403009
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403009
cmp byte [ebp - 0x1c5e], 0xe5
je 0x403101
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4030e3
xor eax, eax
jmp 0x4030ed
cmp eax, 0x20
jbe 0x4030ed
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x40317b
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x236]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0xa
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x40311c
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x3a5fe
lea edx, [ebp - 0x2c68]
push edx
push 7
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x40317b
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x4031ff
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x2f0]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0xa
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403196
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x3a502fe
mov dword [ebp - 0x2c60], 0
lea edx, [ebp - 0x2c68]
push edx
push 0xc
push 0x1f4
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x4031ff
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403442
mov dword [ebp - 0xc36], 0
mov eax, dword [ebp - 0xc3e]
mov dword [ebp - 0x2c68], eax
mov dword [ebp - 0x2c64], 0x127
mov dword [ebp - 0x2d74], 0x20
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403263
mov dword [ebp - 0x2c6c], 1
jmp 0x403442
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x40328c
mov dword [ebp - 0x2c6c], 1
jmp 0x403442
test eax, eax
jne 0x4032cb
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403442
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403263
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403263
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x4033c7
cmp byte [ebp - 0x1c5c], 0x36
jne 0x403311
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2d74]
jne 0x403236
jmp 0x403353
cmp byte [ebp - 0x1c5c], 0x37
jne 0x403333
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2d74]
jne 0x403236
jmp 0x403353
cmp byte [ebp - 0x1c5c], 0x22
jne 0x403353
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2d74]
jne 0x403236
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4033a7
xor eax, eax
jmp 0x4033b1
cmp eax, 0x20
jbe 0x4033b1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
jmp 0x403442
cmp byte [ebp - 0x1c5e], 0x67
je 0x403442
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403424
xor eax, eax
jmp 0x40342e
cmp eax, 0x20
jbe 0x40342e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403796
cmp byte [ebp - 0x1c5c], 0
je 0x403796
cmp byte [ebp - 0x1c5b], 0
je 0x403796
push 0xe9de
push 0xd0cac9bf
push 0xb4b29992
push 0x84828173
push 0x6c483e28
push 0x1400b0c2
mov byte [ebp - 0x7e8], 0x20
mov byte [ebp - 0x7e7], 0xf4
mov eax, dword [ebp - 0xc36]
movzx eax, byte [esp + eax]
mov dword [ebp - 0x7e6], eax
mov al, byte [ebp - 0x1c5c]
mov byte [ebp - 0x7e2], al
mov al, byte [ebp - 0x1c5b]
mov byte [ebp - 0x7e1], al
add esp, 0x18
push 0xfa
lea edx, [ebp - 0x2e7a]
push edx
push 0xf6
lea edx, [ebp - 0x7e8]
push edx
call dword [ebx + 0x40]
cmp eax, 2
je 0x403523
push 0xa0d
push 0x32232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x2c6c], 1
jmp 0x403796
mov dword [ebp - 0x2c64], 0x227
mov al, byte [ebp - 0x2e7a]
mov byte [ebp - 0x2c62], al
mov al, byte [ebp - 0x2e79]
mov byte [ebp - 0x2c61], al
lea edx, [ebp - 0x2c68]
push edx
push 8
push 0x1f4
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403572
mov dword [ebp - 0x2c6c], 1
jmp 0x403796
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x40359b
mov dword [ebp - 0x2c6c], 1
jmp 0x403796
test eax, eax
jne 0x4035da
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403796
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403572
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403572
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x40371d
cmp byte [ebp - 0x1c5c], 0x35
jne 0x403658
mov dword [ebp - 0x2d74], 0x20
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x9c4]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x64
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403623
inc dword [ebp - 0xc36]
cmp dword [ebp - 0xc36], 0x16
jl 0x403236
jmp 0x4036ab
cmp byte [ebp - 0x1c5c], 0x36
je 0x40366a
cmp byte [ebp - 0x1c5c], 0x37
jne 0x4036ab
mov dword [ebp - 0x2d74], 0x20
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x9c4]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403686
jmp 0x403236
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4036fd
xor eax, eax
jmp 0x403707
cmp eax, 0x20
jbe 0x403707
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
jmp 0x403796
cmp byte [ebp - 0x1c5e], 0x67
je 0x403796
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403778
xor eax, eax
jmp 0x403782
cmp eax, 0x20
jbe 0x403782
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403dea
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0xc1a], 0
mov dword [ebp - 0xc16], 0
cmp dword [ebp - 0xc16], 0x20
jae 0x403819
imul ecx, dword [ebp - 0xc16], 0x10
mov eax, dword [ebp + ecx - 0xbfa]
sub eax, dword [ebp + ecx - 0xbfe]
test eax, eax
je 0x403819
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0xc1a], eax
inc dword [ebp - 0xc16]
jmp 0x4037dc
mov eax, dword [ebp - 0xc1a]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xc2a], 0
mov dword [ebp - 0xc16], 0
cmp dword [ebp - 0xc16], 0x32
jae 0x403dea
imul ecx, dword [ebp - 0xc16], 0x10
mov eax, dword [ebp + ecx - 0xbfa]
mov dword [ebp - 0xc0e], eax
sub eax, dword [ebp + ecx - 0xbfe]
test eax, eax
je 0x403dea
mov eax, dword [ebp + ecx - 0xbfe]
mov dword [ebp - 0xc12], eax
mov eax, dword [ebp + ecx - 0xbf6]
mov dword [ebp - 0xc0a], eax
mov eax, dword [ebp + ecx - 0xbf2]
mov dword [ebp - 0xc06], eax
mov byte [ebp - 0x2c64], 0x34
mov eax, dword [ebp - 0xc0e]
sub eax, dword [ebp - 0xc12]
mov byte [ebp - 0x2c61], ah
mov byte [ebp - 0x2c60], al
shr eax, 0x10
mov byte [ebp - 0x2c63], ah
mov byte [ebp - 0x2c62], al
push 0x10
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea edx, [ebp - 0x2c68]
push edx
push 9
push 0x7d0
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x40392e
mov dword [ebp - 0x2c6c], 1
jmp 0x403a3c
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x403957
mov dword [ebp - 0x2c6c], 1
jmp 0x403a3c
test eax, eax
jne 0x403996
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403a3c
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x40392e
cmp byte [ebp - 0x1c5e], 0x7e
je 0x40392e
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x4039c3
cmp byte [ebp - 0x1c5c], 0x78
je 0x40392e
cmp byte [ebp - 0x1c5e], 0x74
je 0x403a3c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403a1e
xor eax, eax
jmp 0x403a28
cmp eax, 0x20
jbe 0x403a28
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403bbd
mov dword [ebp - 0x2c64], 0x8036
mov eax, dword [ebp - 0xc12]
add eax, dword [ebp - 0xc0a]
mov byte [ebp - 0x2c60], ah
mov byte [ebp - 0x2c5f], al
shr eax, 0x10
mov byte [ebp - 0x2c62], ah
mov byte [ebp - 0x2c61], al
push 0xc
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea edx, [ebp - 0x2c68]
push edx
push 0xa
push 0x7d0
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403aaf
mov dword [ebp - 0x2c6c], 1
jmp 0x403bbd
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x403ad8
mov dword [ebp - 0x2c6c], 1
jmp 0x403bbd
test eax, eax
jne 0x403b17
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403bbd
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403aaf
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403aaf
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x403b44
cmp byte [ebp - 0x1c5c], 0x78
je 0x403aaf
cmp byte [ebp - 0x1c5e], 0x76
je 0x403bbd
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403b9f
xor eax, eax
jmp 0x403ba9
cmp eax, 0x20
jbe 0x403ba9
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x403dea
mov eax, dword [ebp - 0xc12]
mov ecx, dword [ebp - 0xc0e]
cmp eax, ecx
jae 0x403ddf
mov dword [ebp - 0x2c64], 0x36
sub ecx, eax
cmp ecx, dword [ebp - 0xc06]
jbe 0x403bf8
mov ecx, dword [ebp - 0xc06]
mov dword [ebp - 0xc02], ecx
add eax, dword [ebp - 0xc0a]
mov byte [ebp - 0x2c60], ah
mov byte [ebp - 0x2c5f], al
shr eax, 0x10
mov byte [ebp - 0x2c62], ah
mov byte [ebp - 0x2c61], al
mov eax, dword [ebp - 0xc12]
add eax, dword [esi + 0x20]
push ecx
push eax
lea edx, [ebp - 0x2c5e]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x64]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0xa
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403c49
mov ecx, dword [ebp - 0xc02]
lea edx, [ebp - 0x2c68]
push edx
lea edx, [ecx + 0xa]
push edx
push 0x7d0
push 0x40
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403c9e
mov dword [ebp - 0x2c6c], 1
jmp 0x403ddd
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x403cc7
mov dword [ebp - 0x2c6c], 1
jmp 0x403ddd
test eax, eax
jne 0x403d06
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403ddd
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403c9e
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403c9e
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x403d33
cmp byte [ebp - 0x1c5c], 0x78
je 0x403c9e
cmp byte [ebp - 0x1c5e], 0x76
je 0x403dae
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403d8e
xor eax, eax
jmp 0x403d98
cmp eax, 0x20
jbe 0x403d98
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
jmp 0x403ddd
mov eax, dword [ebp - 0xc12]
and eax, 0xfffff800
cmp eax, dword [ebp - 0xc2a]
je 0x403dcc
mov dword [ebp - 0xc2a], eax
call fcn.00404fbb
mov ecx, dword [ebp - 0xc02]
add dword [ebp - 0xc12], ecx
jmp 0x403bca
jmp 0x403dea
inc dword [ebp - 0xc16]
jmp 0x403874
cmp dword [ebp - 0x2c6c], 0
jne 0x403f91
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x17c]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x14
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403e09
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0x20fe
mov dword [ebp - 0x2d74], 3
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x7d0
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x403e77
mov dword [ebp - 0x2c6c], 1
jmp 0x403f91
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x403ea0
mov dword [ebp - 0x2c6c], 1
jmp 0x403f91
test eax, eax
jne 0x403ee7
dec dword [ebp - 0x2d74]
jne 0x403e47
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x403f91
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x403e77
cmp byte [ebp - 0x1c5e], 0x7e
je 0x403e77
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x403f18
cmp byte [ebp - 0x1c5c], 0x78
je 0x403e77
cmp byte [ebp - 0x1c5e], 0x60
je 0x403f91
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403f73
xor eax, eax
jmp 0x403f7d
cmp eax, 0x20
jbe 0x403f7d
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x404122
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x569]
mov dword [ebp - 0x2d78], eax
lea edx, [ebp - 0x1c62]
push edx
push 0x32
push 6
push 0
call fcn.004050b9
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x2d78]
jl 0x403fb0
mov dword [ebp - 0x2c68], 0x1010000
mov dword [ebp - 0x2c64], 0xa2fe
lea edx, [ebp - 0x2c68]
push edx
push 6
push 0x7d0
push 0xc0
push 6
push 0
call fcn.0040500a
cmp eax, 0xffffffff
jne 0x404014
mov dword [ebp - 0x2c6c], 1
jmp 0x404122
lea edx, [ebp - 0x1c62]
push edx
push 0x7d0
push 6
push 0
call fcn.004050b9
cmp eax, 0xffffffff
jne 0x40403d
mov dword [ebp - 0x2c6c], 1
jmp 0x404122
test eax, eax
jne 0x40407c
push 0
push 0xa0d2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2c6c], 1
jmp 0x404122
mov eax, dword [ebp - 0xc3a]
cmp eax, dword [ebp - 0x1c62]
jne 0x404014
cmp byte [ebp - 0x1c5e], 0x7e
je 0x404014
cmp byte [ebp - 0x1c5e], 0x7f
jne 0x4040a9
cmp byte [ebp - 0x1c5c], 0x78
je 0x404014
cmp byte [ebp - 0x1c5e], 0xe2
je 0x404122
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1c62]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404104
xor eax, eax
jmp 0x40410e
cmp eax, 0x20
jbe 0x40410e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0040518d
mov dword [ebp - 0x2c6c], 1
cmp dword [ebp - 0x2c6c], 0
jne 0x404152
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0
lea edx, [esp + 4]
push edx
push 7
call dword [edi]
add esp, 4
push 1
push 0
lea edx, [esp + 4]
push edx
push 7
call dword [edi]
add esp, 4
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x404e4b
mov eax, 3
pushal
mov dword [ebp - 0x2c6c], 0
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x20]
cmp ebx, 0x24
jbe 0x404671
cmp dword [edi + ebx - 4], 0xcafeaffe
jne 0x404669
cmp dword [edi + ebx - 8], 0xfadecafe
jne 0x404669
push ebx
xor ecx, ecx
inc ecx
movzx eax, word [edi + ebx - 0x1c]
cmp ebx, 0x3c
jbe 0x4041fc
cmp eax, ecx
je 0x4041fc
inc ecx
sub ebx, 0x20
cmp dword [edi + ebx - 4], 0xcafeaffe
jne 0x4041fc
cmp dword [edi + ebx - 8], 0xfadecafe
je 0x4041d6
cmp eax, ecx
jne 0x404668
movzx eax, word [edi + ebx - 0x1c]
mov dword [ebp - 0x6d2], eax
mov dword [ebp - 0x6ce], 0
mov ecx, dword [ebp - 0x6ce]
cmp ecx, dword [ebp - 0x6d2]
jae 0x404665
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
cmp dword [edi + ecx + 8], 0x1000
jne 0x40439f
mov eax, dword [edi + ecx - 0x10]
mov edx, dword [edi + ecx - 0xc]
cmp eax, 0x80400000
jae 0x40425c
cmp eax, 0x80000000
jb 0x40425c
sub eax, 0x80000000
jmp 0x404299
cmp eax, 0x80a00000
jae 0x404271
cmp eax, 0x80800000
jb 0x404271
sub eax, 0x80600000
jmp 0x404299
cmp eax, 0x81180000
jae 0x404286
cmp eax, 0x81000000
jb 0x404286
sub eax, 0x80c00000
jmp 0x404299
cmp eax, 0x84380000
jae 0x404299
cmp eax, 0x84002000
jb 0x404299
sub eax, 0x83c00000
cmp edx, 0x80400000
jae 0x4042b1
cmp edx, 0x80000000
jb 0x4042b1
sub edx, 0x80000000
jmp 0x4042f7
cmp edx, 0x80a00000
jae 0x4042c9
cmp edx, 0x80800000
jb 0x4042c9
sub edx, 0x80600000
jmp 0x4042f7
cmp edx, 0x81180000
jae 0x4042e1
cmp edx, 0x81000000
jb 0x4042e1
sub edx, 0x80c00000
jmp 0x4042f7
cmp edx, 0x84380000
jae 0x4042f7
cmp edx, 0x84002000
jb 0x4042f7
sub edx, 0x83c00000
dec edx
and edx, 0xfffffffc
push edx
push eax
push edi
call fcn.0040510a
mov ecx, dword [ebp - 0x6ce]
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
mov ecx, dword [edi + ecx - 0xc]
dec ecx
and ecx, 0xfffffffc
cmp ecx, 0x80400000
jae 0x40432f
cmp ecx, 0x80000000
jb 0x40432f
sub ecx, 0x80000000
jmp 0x404375
cmp ecx, 0x80a00000
jae 0x404347
cmp ecx, 0x80800000
jb 0x404347
sub ecx, 0x80600000
jmp 0x404375
cmp ecx, 0x81180000
jae 0x40435f
cmp ecx, 0x81000000
jb 0x40435f
sub ecx, 0x80c00000
jmp 0x404375
cmp ecx, 0x84380000
jae 0x404375
cmp ecx, 0x84002000
jb 0x404375
sub ecx, 0x83c00000
cmp dword [edi + ecx], eax
jne 0x40438f
cmp dword [esp + 0x20], 3
jne 0x40465a
mov dword [esp + 0x20], 0
jmp 0x40439a
mov dword [esp + 0x20], 1
mov dword [edi + ecx], eax
jmp 0x40465a
cmp dword [edi + ecx + 8], 0x1001
jne 0x4044cc
mov eax, dword [edi + ecx - 8]
sub eax, dword [edi + ecx - 4]
mov dword [ebp - 0x6ca], eax
mov edx, dword [edi + ecx - 0xc]
mov ecx, dword [edi + ecx - 0x10]
cmp ecx, 0x80400000
jae 0x4043db
cmp ecx, 0x80000000
jb 0x4043db
sub ecx, 0x80000000
jmp 0x404421
cmp ecx, 0x80a00000
jae 0x4043f3
cmp ecx, 0x80800000
jb 0x4043f3
sub ecx, 0x80600000
jmp 0x404421
cmp ecx, 0x81180000
jae 0x40440b
cmp ecx, 0x81000000
jb 0x40440b
sub ecx, 0x80c00000
jmp 0x404421
cmp ecx, 0x84380000
jae 0x404421
cmp ecx, 0x84002000
jb 0x404421
sub ecx, 0x83c00000
cmp edx, 0x80400000
jae 0x404439
cmp edx, 0x80000000
jb 0x404439
sub edx, 0x80000000
jmp 0x40447f
cmp edx, 0x80a00000
jae 0x404451
cmp edx, 0x80800000
jb 0x404451
sub edx, 0x80600000
jmp 0x40447f
cmp edx, 0x81180000
jae 0x404469
cmp edx, 0x81000000
jb 0x404469
sub edx, 0x80c00000
jmp 0x40447f
cmp edx, 0x84380000
jae 0x40447f
cmp edx, 0x84002000
jb 0x40447f
sub edx, 0x83c00000
add edx, 3
and edx, 0xfffffffc
cmp ecx, edx
jae 0x404497
mov eax, dword [edi + ecx]
add dword [ebp - 0x6ca], eax
add ecx, 4
jmp 0x404485
cmp dword [ebp - 0x6ca], 0
jne 0x4044b5
cmp dword [esp + 0x20], 3
jne 0x40465a
mov dword [esp + 0x20], 0
jmp 0x4044c7
mov dword [esp + 0x20], 1
sub eax, dword [ebp - 0x6ca]
mov dword [edi + edx - 4], eax
jmp 0x40465a
cmp dword [edi + ecx + 8], 0x1010
jne 0x40465a
mov eax, dword [edi + ecx - 4]
sub eax, dword [edi + ecx - 8]
mov dword [ebp - 0x6ca], eax
mov edx, dword [edi + ecx - 0xc]
mov ecx, dword [edi + ecx - 0x10]
cmp ecx, 0x80400000
jae 0x404508
cmp ecx, 0x80000000
jb 0x404508
sub ecx, 0x80000000
jmp 0x40454e
cmp ecx, 0x80a00000
jae 0x404520
cmp ecx, 0x80800000
jb 0x404520
sub ecx, 0x80600000
jmp 0x40454e
cmp ecx, 0x81180000
jae 0x404538
cmp ecx, 0x81000000
jb 0x404538
sub ecx, 0x80c00000
jmp 0x40454e
cmp ecx, 0x84380000
jae 0x40454e
cmp ecx, 0x84002000
jb 0x40454e
sub ecx, 0x83c00000
cmp edx, 0x80400000
jae 0x404566
cmp edx, 0x80000000
jb 0x404566
sub edx, 0x80000000
jmp 0x4045ac
cmp edx, 0x80a00000
jae 0x40457e
cmp edx, 0x80800000
jb 0x40457e
sub edx, 0x80600000
jmp 0x4045ac
cmp edx, 0x81180000
jae 0x404596
cmp edx, 0x81000000
jb 0x404596
sub edx, 0x80c00000
jmp 0x4045ac
cmp edx, 0x84380000
jae 0x4045ac
cmp edx, 0x84002000
jb 0x4045ac
sub edx, 0x83c00000
add edx, 3
and edx, 0xfffffffc
sub edx, 4
cmp ecx, edx
jae 0x4045c8
movzx eax, word [edi + ecx]
sub dword [ebp - 0x6ca], eax
add ecx, 2
jmp 0x4045b5
mov ecx, dword [ebp - 0x6ce]
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
mov ecx, dword [edi + ecx - 0xc]
cmp ecx, 0x80400000
jae 0x4045f0
cmp ecx, 0x80000000
jb 0x4045f0
sub ecx, 0x80000000
jmp 0x404636
cmp ecx, 0x80a00000
jae 0x404608
cmp ecx, 0x80800000
jb 0x404608
sub ecx, 0x80600000
jmp 0x404636
cmp ecx, 0x81180000
jae 0x404620
cmp ecx, 0x81000000
jb 0x404620
sub ecx, 0x80c00000
jmp 0x404636
cmp ecx, 0x84380000
jae 0x404636
cmp ecx, 0x84002000
jb 0x404636
sub ecx, 0x83c00000
add ecx, 3
and ecx, 0xfffffffc
mov eax, dword [edi + ecx - 4]
cmp eax, dword [ebp - 0x6ca]
je 0x40465a
mov dword [esp + 0x20], 1
mov eax, dword [ebp - 0x6ca]
mov dword [edi + ecx - 4], eax
inc dword [ebp - 0x6ce]
jmp 0x404219
pop eax
jmp 0x404669
pop ebx
sub ebx, 4
jmp 0x4041ad
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x20]
mov dword [ebp - 0x62a], 0xffffffff
mov dword [ebp - 0x626], 0xffffffff
cmp ebx, 0x24
jbe 0x404909
mov eax, dword [edi + ebx - 8]
xor eax, 0xffffffff
cmp eax, dword [edi + ebx - 4]
jne 0x40478d
mov eax, dword [edi + ebx - 0x10]
mov ecx, dword [edi + ebx - 0xc]
cmp eax, 0x80400000
jae 0x4046c2
cmp eax, 0x80000000
jb 0x4046c2
sub eax, 0x80000000
jmp 0x4046ff
cmp eax, 0x80a00000
jae 0x4046d7
cmp eax, 0x80800000
jb 0x4046d7
sub eax, 0x80600000
jmp 0x4046ff
cmp eax, 0x81180000
jae 0x4046ec
cmp eax, 0x81000000
jb 0x4046ec
sub eax, 0x80c00000
jmp 0x4046ff
cmp eax, 0x84380000
jae 0x4046ff
cmp eax, 0x84002000
jb 0x4046ff
sub eax, 0x83c00000
cmp ecx, 0x80400000
jae 0x404717
cmp ecx, 0x80000000
jb 0x404717
sub ecx, 0x80000000
jmp 0x40475d
cmp ecx, 0x80a00000
jae 0x40472f
cmp ecx, 0x80800000
jb 0x40472f
sub ecx, 0x80600000
jmp 0x40475d
cmp ecx, 0x81180000
jae 0x404747
cmp ecx, 0x81000000
jb 0x404747
sub ecx, 0x80c00000
jmp 0x40475d
cmp ecx, 0x84380000
jae 0x40475d
cmp ecx, 0x84002000
jb 0x40475d
sub ecx, 0x83c00000
add ecx, 3
and ecx, 0xfffffffc
cmp eax, ecx
jae 0x40478d
cmp ecx, dword [esi + 0x14]
jae 0x40478d
mov eax, dword [ebp - 0x626]
sub eax, ebx
cmp eax, 0x10
je 0x40477f
mov dword [ebp - 0x62a], ebx
mov dword [ebp - 0x626], ebx
sub ebx, 0x10
jmp 0x40468b
cmp dword [ebp - 0x62a], 0xffffffff
je 0x404901
mov eax, dword [ebp - 0x62a]
sub eax, ebx
cmp eax, 0x40
jb 0x4048f7
mov eax, dword [ebp - 0x626]
cmp eax, dword [ebp - 0x62a]
ja 0x4048f7
mov ecx, dword [edi + eax - 0x10]
mov edx, dword [edi + eax - 0xc]
cmp ecx, 0x80400000
jae 0x4047dd
cmp ecx, 0x80000000
jb 0x4047dd
sub ecx, 0x80000000
jmp 0x404823
cmp ecx, 0x80a00000
jae 0x4047f5
cmp ecx, 0x80800000
jb 0x4047f5
sub ecx, 0x80600000
jmp 0x404823
cmp ecx, 0x81180000
jae 0x40480d
cmp ecx, 0x81000000
jb 0x40480d
sub ecx, 0x80c00000
jmp 0x404823
cmp ecx, 0x84380000
jae 0x404823
cmp ecx, 0x84002000
jb 0x404823
sub ecx, 0x83c00000
cmp edx, 0x80400000
jae 0x40483b
cmp edx, 0x80000000
jb 0x40483b
sub edx, 0x80000000
jmp 0x404881
cmp edx, 0x80a00000
jae 0x404853
cmp edx, 0x80800000
jb 0x404853
sub edx, 0x80600000
jmp 0x404881
cmp edx, 0x81180000
jae 0x40486b
cmp edx, 0x81000000
jb 0x40486b
sub edx, 0x80c00000
jmp 0x404881
cmp edx, 0x84380000
jae 0x404881
cmp edx, 0x84002000
jb 0x404881
sub edx, 0x83c00000
add edx, 3
and edx, 0xfffffffc
mov dword [ebp - 0x622], 0
cmp ecx, edx
jae 0x4048a4
movzx eax, word [edi + ecx]
add dword [ebp - 0x622], eax
add ecx, 2
jmp 0x404891
mov eax, dword [ebp - 0x626]
mov ecx, dword [ebp - 0x622]
cmp ecx, dword [edi + eax - 8]
je 0x4048cc
cmp dword [edi + eax - 8], 0xcafeaffe
je 0x4048cc
mov dword [esp + 0x20], 1
mov dword [edi + eax - 8], ecx
xor ecx, 0xffffffff
cmp ecx, dword [edi + eax - 4]
je 0x4048eb
cmp dword [edi + eax - 4], 0x35015001
je 0x4048eb
mov dword [esp + 0x20], 1
mov dword [edi + eax - 4], ecx
add dword [ebp - 0x626], 0x10
jmp 0x4047ab
mov dword [ebp - 0x62a], 0xffffffff
sub ebx, 4
jmp 0x40468b
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x20]
cmp ebx, 0x24
jbe 0x404dd3
cmp dword [edi + ebx - 4], 0xcafeaffe
jne 0x404dcb
cmp dword [edi + ebx - 8], 0xfadecafe
jne 0x404dcb
push ebx
xor ecx, ecx
inc ecx
movzx eax, word [edi + ebx - 0x1c]
cmp ebx, 0x3c
jbe 0x40495e
cmp eax, ecx
je 0x40495e
inc ecx
sub ebx, 0x20
cmp dword [edi + ebx - 4], 0xcafeaffe
jne 0x40495e
cmp dword [edi + ebx - 8], 0xfadecafe
je 0x404938
cmp eax, ecx
jne 0x404dca
movzx eax, word [edi + ebx - 0x1c]
mov dword [ebp - 0x6d2], eax
mov dword [ebp - 0x6ce], 0
mov ecx, dword [ebp - 0x6ce]
cmp ecx, dword [ebp - 0x6d2]
jae 0x404dc7
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
cmp dword [edi + ecx + 8], 0x1000
jne 0x404b01
mov eax, dword [edi + ecx - 0x10]
mov edx, dword [edi + ecx - 0xc]
cmp eax, 0x80400000
jae 0x4049be
cmp eax, 0x80000000
jb 0x4049be
sub eax, 0x80000000
jmp 0x4049fb
cmp eax, 0x80a00000
jae 0x4049d3
cmp eax, 0x80800000
jb 0x4049d3
sub eax, 0x80600000
jmp 0x4049fb
cmp eax, 0x81180000
jae 0x4049e8
cmp eax, 0x81000000
jb 0x4049e8
sub eax, 0x80c00000
jmp 0x4049fb
cmp eax, 0x84380000
jae 0x4049fb
cmp eax, 0x84002000
jb 0x4049fb
sub eax, 0x83c00000
cmp edx, 0x80400000
jae 0x404a13
cmp edx, 0x80000000
jb 0x404a13
sub edx, 0x80000000
jmp 0x404a59
cmp edx, 0x80a00000
jae 0x404a2b
cmp edx, 0x80800000
jb 0x404a2b
sub edx, 0x80600000
jmp 0x404a59
cmp edx, 0x81180000
jae 0x404a43
cmp edx, 0x81000000
jb 0x404a43
sub edx, 0x80c00000
jmp 0x404a59
cmp edx, 0x84380000
jae 0x404a59
cmp edx, 0x84002000
jb 0x404a59
sub edx, 0x83c00000
dec edx
and edx, 0xfffffffc
push edx
push eax
push edi
call fcn.0040510a
mov ecx, dword [ebp - 0x6ce]
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
mov ecx, dword [edi + ecx - 0xc]
dec ecx
and ecx, 0xfffffffc
cmp ecx, 0x80400000
jae 0x404a91
cmp ecx, 0x80000000
jb 0x404a91
sub ecx, 0x80000000
jmp 0x404ad7
cmp ecx, 0x80a00000
jae 0x404aa9
cmp ecx, 0x80800000
jb 0x404aa9
sub ecx, 0x80600000
jmp 0x404ad7
cmp ecx, 0x81180000
jae 0x404ac1
cmp ecx, 0x81000000
jb 0x404ac1
sub ecx, 0x80c00000
jmp 0x404ad7
cmp ecx, 0x84380000
jae 0x404ad7
cmp ecx, 0x84002000
jb 0x404ad7
sub ecx, 0x83c00000
cmp dword [edi + ecx], eax
jne 0x404af1
cmp dword [esp + 0x20], 3
jne 0x404dbc
mov dword [esp + 0x20], 0
jmp 0x404afc
mov dword [esp + 0x20], 1
mov dword [edi + ecx], eax
jmp 0x404dbc
cmp dword [edi + ecx + 8], 0x1001
jne 0x404c2e
mov eax, dword [edi + ecx - 8]
sub eax, dword [edi + ecx - 4]
mov dword [ebp - 0x6ca], eax
mov edx, dword [edi + ecx - 0xc]
mov ecx, dword [edi + ecx - 0x10]
cmp ecx, 0x80400000
jae 0x404b3d
cmp ecx, 0x80000000
jb 0x404b3d
sub ecx, 0x80000000
jmp 0x404b83
cmp ecx, 0x80a00000
jae 0x404b55
cmp ecx, 0x80800000
jb 0x404b55
sub ecx, 0x80600000
jmp 0x404b83
cmp ecx, 0x81180000
jae 0x404b6d
cmp ecx, 0x81000000
jb 0x404b6d
sub ecx, 0x80c00000
jmp 0x404b83
cmp ecx, 0x84380000
jae 0x404b83
cmp ecx, 0x84002000
jb 0x404b83
sub ecx, 0x83c00000
cmp edx, 0x80400000
jae 0x404b9b
cmp edx, 0x80000000
jb 0x404b9b
sub edx, 0x80000000
jmp 0x404be1
cmp edx, 0x80a00000
jae 0x404bb3
cmp edx, 0x80800000
jb 0x404bb3
sub edx, 0x80600000
jmp 0x404be1
cmp edx, 0x81180000
jae 0x404bcb
cmp edx, 0x81000000
jb 0x404bcb
sub edx, 0x80c00000
jmp 0x404be1
cmp edx, 0x84380000
jae 0x404be1
cmp edx, 0x84002000
jb 0x404be1
sub edx, 0x83c00000
add edx, 3
and edx, 0xfffffffc
cmp ecx, edx
jae 0x404bf9
mov eax, dword [edi + ecx]
add dword [ebp - 0x6ca], eax
add ecx, 4
jmp 0x404be7
cmp dword [ebp - 0x6ca], 0
jne 0x404c17
cmp dword [esp + 0x20], 3
jne 0x404dbc
mov dword [esp + 0x20], 0
jmp 0x404c29
mov dword [esp + 0x20], 1
sub eax, dword [ebp - 0x6ca]
mov dword [edi + edx - 4], eax
jmp 0x404dbc
cmp dword [edi + ecx + 8], 0x1010
jne 0x404dbc
mov eax, dword [edi + ecx - 4]
sub eax, dword [edi + ecx - 8]
mov dword [ebp - 0x6ca], eax
mov edx, dword [edi + ecx - 0xc]
mov ecx, dword [edi + ecx - 0x10]
cmp ecx, 0x80400000
jae 0x404c6a
cmp ecx, 0x80000000
jb 0x404c6a
sub ecx, 0x80000000
jmp 0x404cb0
cmp ecx, 0x80a00000
jae 0x404c82
cmp ecx, 0x80800000
jb 0x404c82
sub ecx, 0x80600000
jmp 0x404cb0
cmp ecx, 0x81180000
jae 0x404c9a
cmp ecx, 0x81000000
jb 0x404c9a
sub ecx, 0x80c00000
jmp 0x404cb0
cmp ecx, 0x84380000
jae 0x404cb0
cmp ecx, 0x84002000
jb 0x404cb0
sub ecx, 0x83c00000
cmp edx, 0x80400000
jae 0x404cc8
cmp edx, 0x80000000
jb 0x404cc8
sub edx, 0x80000000
jmp 0x404d0e
cmp edx, 0x80a00000
jae 0x404ce0
cmp edx, 0x80800000
jb 0x404ce0
sub edx, 0x80600000
jmp 0x404d0e
cmp edx, 0x81180000
jae 0x404cf8
cmp edx, 0x81000000
jb 0x404cf8
sub edx, 0x80c00000
jmp 0x404d0e
cmp edx, 0x84380000
jae 0x404d0e
cmp edx, 0x84002000
jb 0x404d0e
sub edx, 0x83c00000
add edx, 3
and edx, 0xfffffffc
sub edx, 4
cmp ecx, edx
jae 0x404d2a
movzx eax, word [edi + ecx]
sub dword [ebp - 0x6ca], eax
add ecx, 2
jmp 0x404d17
mov ecx, dword [ebp - 0x6ce]
imul ecx, ecx, 0x20
lea ecx, [ecx + ebx]
mov ecx, dword [edi + ecx - 0xc]
cmp ecx, 0x80400000
jae 0x404d52
cmp ecx, 0x80000000
jb 0x404d52
sub ecx, 0x80000000
jmp 0x404d98
cmp ecx, 0x80a00000
jae 0x404d6a
cmp ecx, 0x80800000
jb 0x404d6a
sub ecx, 0x80600000
jmp 0x404d98
cmp ecx, 0x81180000
jae 0x404d82
cmp ecx, 0x81000000
jb 0x404d82
sub ecx, 0x80c00000
jmp 0x404d98
cmp ecx, 0x84380000
jae 0x404d98
cmp ecx, 0x84002000
jb 0x404d98
sub ecx, 0x83c00000
add ecx, 3
and ecx, 0xfffffffc
mov eax, dword [edi + ecx - 4]
cmp eax, dword [ebp - 0x6ca]
je 0x404dbc
mov dword [esp + 0x20], 1
mov eax, dword [ebp - 0x6ca]
mov dword [edi + ecx - 4], eax
inc dword [ebp - 0x6ce]
jmp 0x40497b
pop eax
jmp 0x404dcb
pop ebx
sub ebx, 4
jmp 0x40490f
popal
test eax, eax
jne 0x404dfa
push 0xa0d
push 0x2444494c
push 0x41565f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x404e4b
cmp eax, 1
jne 0x404e26
push 0xa0d
push 0x24444554
push 0x43455252
push 0x4f435f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x404e4b
push 0xa0d
push 0x24444e55
push 0x4f465f54
push 0x4f4e5f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcd4], 0
je 0x404f95
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcd4], 0
je 0x404e9a
push dword [ebx + 0xcd4]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcd4], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xacc]
push edx
lea edx, [ebp - 0x61e]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61e]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61e]
push edx
lea edx, [ebx + 0xacc]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x404f95
lea edx, [ebx + 0xacc]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61e]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20e]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61e]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20e]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 6], esp
push 0x70
push 0x68702e74
push 0x7365745f
push 0x6e61635f
push 0x39306337
push 0x31636465
push 0x5f6d6361
push 0x5f757a75
push 0x73692f74
push 0x7365742f
lea edx, [ebp - 0x20e]
push edx
lea edx, [ebp - 0x61e]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 6]
call fcn.0040690a
add esp, 0x28
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8