Function at 0x41b6d0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8521
mov eax, dword fs:[0]
push eax
sub esp, 0x674
mov eax, dword [0x51f164]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
xor edi, edi
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x418], edi
mov dword [ebp - 4], edi
push 0x8003
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 2
push 0x4ffba0
lea ecx, [ebp + 8]
call fcn.00438860
cmp dword [ebp + 0x1c], 8
lea ecx, [ebp - 0x35c]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x4b4], eax
cmp eax, 0xffffffff
jne 0x41b7eb
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x41b794
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b78a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e06b
push edx
push ecx
call fcn.004913bc
add esp, 8
mov edx, dword [ebp + 0x34]
xor eax, eax
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
cmp edx, 8
jb 0x41e015
mov ecx, dword [ebp + 0x20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b7dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e06b
push edx
push ecx
call fcn.004913bc
add esp, 8
jmp 0x41e015
mov ecx, dword [ebp + 0x18]
lea eax, [ebp + 8]
dec ecx
mov dword [ebp - 0x30], 0xf
cmp dword [ebp + 0x1c], 8
mov dword [ebp + 0x18], ecx
cmovae eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x44], dl
mov word [eax + ecx*2], dx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], dl
xor eax, eax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x330]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x450]
call fcn.0043a2d0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
add esp, 4
cmp ecx, eax
je 0x41b8c8
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x41b896
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b886
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e070
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x42c]
add esp, 8
mov dword [ebp - 0x1c], 0
xor ecx, ecx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], cx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41b908
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b8fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e070
push edx
push ecx
call fcn.004913bc
add esp, 8
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x680]
call fcn.0043a2d0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 6
or esi, 1
cmp dword [0x51fc5c], 8
mov eax, 0x51fc48
push dword [0x51fc58]
cmovae eax, dword [0x51fc48]
push eax
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x42c], esi
call fcn.00438860
mov dword [ebp - 0x4a0], 0
xor ecx, ecx
mov dword [ebp - 0x49c], 0
or edi, 0x80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0x36
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x4b0]
or esi, 2
push str.Local_SettingsApplication_DataMicrosoftCredentials
mov dword [ebp - 0x420], esi
call fcn.00438860
xor ecx, ecx
or edi, 0x100
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x668], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x658], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov eax, dword [ebp - 0x42c]
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], 8
or eax, 6
cmp dword [ebp - 0x654], 8
mov esi, dword [ebp - 0x1c]
movd edx, xmm1
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
cmovae ecx, edx
mov dword [ebp - 0x428], edx
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x658]
jne 0x41ba8d
test esi, esi
je 0x41ba75
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41ba8d
add ecx, 2
sub esi, 1
jne 0x41ba46
mov edx, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41c55e
mov edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x450]
call fcn.0043a2d0
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 9
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 8
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.00438860
mov dword [ebp - 0x488], 0
xor ecx, ecx
mov dword [ebp - 0x484], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x498], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x488], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x42c]
lea ecx, [ebp - 0x498]
mov eax, esi
mov dword [ebp - 4], 0xa
push 0x27
or eax, 0x18
push str.Application_DataMicrosoftCredentials
mov dword [ebp - 0x420], eax
call fcn.00438860
xor ecx, ecx
or edi, 0x600
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4cc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4bc], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x4cc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x38
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x438], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4bc]
jne 0x41bbf3
test esi, esi
je 0x41c548
sub edx, ecx
nop word [eax + eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bbf3
add ecx, 2
sub esi, 1
jne 0x41bbd0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.UsersAll_UsersMicrosoftWindowsCaches
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5bc]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xc
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bc37
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bc83
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bc83
add ecx, 2
sub esi, 1
jne 0x41bc60
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.ProgramData
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x650]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xd
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bcc9
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bd15
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bd15
add ecx, 2
sub esi, 1
jne 0x41bcf2
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Recovery
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x638]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xe
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bd5b
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bda7
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bda7
add ecx, 2
sub esi, 1
jne 0x41bd84
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.ProgramDataMicrosoft
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x620]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xf
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x200
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bded
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41be39
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41be39
add ecx, 2
sub esi, 1
jne 0x41be16
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Windows
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x608]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0x10
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x400
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x430], eax
jb 0x41be85
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bed3
test esi, esi
je 0x41c548
sub edx, ecx
nop
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bed3
add ecx, 2
sub esi, 1
jne 0x41beb0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5f0]
call fcn.0043a2d0
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x11
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x800
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.00438860
mov dword [ebp - 0x470], 0
xor ecx, ecx
mov dword [ebp - 0x46c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x480], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x470], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x480]
mov eax, esi
mov dword [ebp - 4], 0x12
push 0x28
or eax, 0x1800
push str.Local_SettingsTemporary_Internet_Files
mov dword [ebp - 0x420], eax
call fcn.00438860
xor ecx, ecx
or edi, 0x1800
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4e4], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4d4], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x4e4]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x3800
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x4e4], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
mov dword [ebp - 0x430], eax
cmp esi, dword [ebp - 0x4d4]
jne 0x41c043
test esi, esi
je 0x41c548
sub edx, ecx
nop dword [eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41c043
add ecx, 2
sub esi, 1
jne 0x41c020
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5d8]
call fcn.0043a2d0
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x14
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x4000
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.00438860
mov dword [ebp - 0x458], 0
xor ecx, ecx
mov dword [ebp - 0x454], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x468], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x458], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x468]
mov eax, esi
mov dword [ebp - 4], 0x15
push 0xb
or eax, 0xc000
push str.Start_Menu
mov dword [ebp - 0x420], eax
call fcn.00438860
xor ecx, ecx
or edi, 0x6000
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4fc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4ec], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x4fc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x1c000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x4fc], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4ec]
jne 0x41c1aa
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c1aa
add ecx, 2
sub esi, 1
jne 0x41c187
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Documents_and_SettingsAll_UsersStart_Menu
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x58c]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x17
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x20000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c1f0
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c243
test esi, esi
je 0x41c548
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c243
add ecx, 2
sub esi, 1
jne 0x41c220
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.WINDOWS
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x574]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x18
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c289
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c2d5
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c2d5
add ecx, 2
sub esi, 1
jne 0x41c2b2
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.Boot
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x55c]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x19
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c31b
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c367
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c367
add ecx, 2
sub esi, 1
jne 0x41c344
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.System_Volume_Information
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x544]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x1a
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x434], eax
jb 0x41c3b3
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c403
test esi, esi
je 0x41c548
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c403
add ecx, 2
sub esi, 1
jne 0x41c3e0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str._skips.txt
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.0043a2d0
add esp, 4
mov dword [ebp - 0x42c], eax
sub esp, 0x18
mov dword [ebp - 4], 0x1b
mov esi, dword [ebp - 0x418]
lea eax, [ebp - 0x2c]
mov ecx, esp
or esi, 0x200000
mov dword [ebp - 0x420], esi
push eax
call fcn.00431a30
lea ecx, [ebp - 0x514]
call fcn.00418a30
add esp, 0x18
mov edx, eax
mov esi, dword [ebp - 0x42c]
mov ecx, esi
mov eax, dword [ebp - 0x434]
mov dword [ebp - 4], 0x1c
or eax, 0x600000
mov dword [ebp - 0x418], eax
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x420], eax
jb 0x41c484
mov ecx, dword [esi]
cmp dword [edx + 0x14], 8
mov esi, edx
jb 0x41c48e
mov esi, dword [edx]
mov edi, dword [ebp - 0x42c]
mov edx, dword [edx + 0x10]
cmp edx, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c4d3
test edx, edx
je 0x41c548
sub esi, ecx
nop dword [eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x41c4d3
add ecx, 2
sub edx, 1
jne 0x41c4b0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
push str.UsersDefault_ntuser.dat
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x52c]
call fcn.0043a2d0
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x418]
mov ecx, edx
or eax, 0x800000
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x418], eax
cmp dword [edx + 0x14], 8
jb 0x41c50c
mov ecx, dword [edx]
mov edi, dword [ebp - 0x434]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c557
test esi, esi
je 0x41c548
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c551
add ecx, 2
sub esi, 1
jne 0x41c531
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c55e
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 0
test eax, 0x800000
je 0x41c5d3
mov edx, dword [ebp - 0x518]
and eax, 0xff7fffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c5b6
mov ecx, dword [ebp - 0x52c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c5a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], cx
mov dword [ebp - 4], 0x1b
test eax, 0x400000
je 0x41c64f
mov edx, dword [ebp - 0x500]
and eax, 0xffbfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c632
mov ecx, dword [ebp - 0x514]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c622
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], cx
mov dword [ebp - 4], 0x1a
test eax, 0x200000
je 0x41c6cb
mov edx, dword [ebp - 0x590]
and eax, 0xffdfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c6ae
mov ecx, dword [ebp - 0x5a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c69e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], cx
mov dword [ebp - 4], 0x19
test eax, 0x100000
je 0x41c747
mov edx, dword [ebp - 0x530]
and eax, 0xffefffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c72a
mov ecx, dword [ebp - 0x544]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c71a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], cx
mov dword [ebp - 4], 0x18
test eax, 0x80000
je 0x41c7c3
mov edx, dword [ebp - 0x548]
and eax, 0xfff7ffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c7a6
mov ecx, dword [ebp - 0x55c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c796
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], cx
mov dword [ebp - 4], 0x17
test eax, 0x40000
je 0x41c83f
mov edx, dword [ebp - 0x560]
and eax, 0xfffbffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c822
mov ecx, dword [ebp - 0x574]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c812
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], cx
mov dword [ebp - 4], 0x16
test eax, 0x20000
je 0x41c8bb
mov edx, dword [ebp - 0x578]
and eax, 0xfffdffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c89e
mov ecx, dword [ebp - 0x58c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c88e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], cx
mov dword [ebp - 4], 0x15
test eax, 0x10000
je 0x41c91a
mov ecx, dword [ebp - 0x4e8]
and eax, 0xfffeffff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c91a
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c90a
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push ecx
push edx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x14
test eax, 0x8000
je 0x41c996
mov edx, dword [ebp - 0x454]
and eax, 0xffff7fff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c979
mov ecx, dword [ebp - 0x468]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c969
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], cx
mov dword [ebp - 4], 0x13
test eax, 0x4000
je 0x41ca12
mov edx, dword [ebp - 0x5c4]
and eax, 0xffffbfff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c9f5
mov ecx, dword [ebp - 0x5d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c9e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 7
mov word [ebp - 0x5d8], cx
mov dword [ebp - 4], 0x12
test eax, 0x2000
je 0x41ca71
mov ecx, dword [ebp - 0x4d0]
and eax, 0xffffdfff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41ca71
mov edx, dword [ebp - 0x4e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41ca61
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push ecx
push edx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x11
test eax, 0x1000
je 0x41caed
mov edx, dword [ebp - 0x46c]
and eax, 0xffffefff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cad0
mov ecx, dword [ebp - 0x480]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cac0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], cx
mov dword [ebp - 4], 0x10
test eax, 0x800
je 0x41cb69
mov edx, dword [ebp - 0x5dc]
and eax, 0xfffff7ff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cb4c
mov ecx, dword [ebp - 0x5f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cb3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x5dc], 7
mov word [ebp - 0x5f0], cx
mov dword [ebp - 4], 0xf
test eax, 0x400
je 0x41cbe5
mov edx, dword [ebp - 0x5f4]
and eax, 0xfffffbff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cbc8
mov ecx, dword [ebp - 0x608]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cbb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 7
mov word [ebp - 0x608], cx
mov dword [ebp - 4], 0xe
test eax, 0x200
je 0x41cc61
mov edx, dword [ebp - 0x60c]
and eax, 0xfffffdff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cc44
mov ecx, dword [ebp - 0x620]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cc34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x60c], 7
mov word [ebp - 0x620], cx
mov dword [ebp - 4], 0xd
test eax, 0x100
je 0x41ccdd
mov edx, dword [ebp - 0x624]
and eax, 0xfffffeff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41ccc0
mov ecx, dword [ebp - 0x638]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ccb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 7
mov word [ebp - 0x638], cx
mov dword [ebp - 4], 0xc
test al, al
jns 0x41cd56
mov edx, dword [ebp - 0x63c]
and eax, 0xffffff7f
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cd39
mov ecx, dword [ebp - 0x650]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cd29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 7
mov word [ebp - 0x650], cx
mov dword [ebp - 4], 0xb
test al, 0x40
je 0x41cdcd
mov edx, dword [ebp - 0x5a8]
and eax, 0xffffffbf
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cdb0
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cda0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 7
mov word [ebp - 0x5bc], cx
mov dword [ebp - 4], 0xa
test al, 0x20
je 0x41ce27
mov ecx, dword [ebp - 0x4b8]
and eax, 0xffffffdf
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41ce27
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41ce17
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push ecx
push edx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 9
test al, 0x10
je 0x41ce9e
mov edx, dword [ebp - 0x484]
and eax, 0xffffffef
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41ce81
mov ecx, dword [ebp - 0x498]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ce71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], cx
mov dword [ebp - 4], 8
test al, 8
je 0x41cf15
mov edx, dword [ebp - 0x43c]
and eax, 0xfffffff7
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cef8
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cee8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], cx
mov dword [ebp - 4], 7
test al, 4
je 0x41cf6f
mov ecx, dword [ebp - 0x654]
and eax, 0xfffffffb
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41cf6f
mov edx, dword [ebp - 0x428]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41cf5f
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push ecx
push edx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 6
test al, 2
je 0x41cfe6
mov edx, dword [ebp - 0x49c]
and eax, 0xfffffffd
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cfc9
mov ecx, dword [ebp - 0x4b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cfb9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], cx
mov dword [ebp - 4], 5
test al, 1
je 0x41d03a
mov edx, dword [ebp - 0x66c]
and eax, 0xfffffffe
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41d03a
mov ecx, dword [ebp - 0x680]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d030
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e075
push edx
push ecx
call fcn.004913bc
add esp, 8
cmp byte [ebp - 0x421], 0
jne 0x41d3bf
cmp byte [0x5200e8], 1
jne 0x41d06e
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.00431a30
call fcn.00418b10
add esp, 0x18
cmp al, 1
je 0x41d3bf
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41d3ca
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
lea eax, [ebp - 0x330]
push 0x4ffed8
push eax
call esi
test eax, eax
je 0x41d3bf
push 0x4ffedc
lea eax, [ebp - 0x330]
push eax
call esi
test eax, eax
je 0x41d3bf
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41d3ca
mov al, byte [0x5200e9]
test al, al
je 0x41d0d9
cmp al, 1
jne 0x41d38d
cmp byte [0x5200ef], al
jne 0x41d38d
push 0xb8
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.004a9100
push 0x4ffee4
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x450]
call fcn.0043a2d0
add esp, 0x10
sub esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x414]
push 0x20
push eax
call fcn.00434290
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41d15b
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d151
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e07a
push edx
push ecx
call fcn.004913bc
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x43c], 7
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x408], 6
je 0x41d29c
push 0xb0
lea eax, [ebp - 0x10c]
push 0
push eax
call fcn.004a9100
push 0x4ffee4
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x5bc]
call fcn.0043a2d0
add esp, 0x10
sub esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10c]
push eax
call fcn.00432610
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x5a8]
cmp edx, 8
jb 0x41d20f
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d205
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e07f
push edx
push ecx
call fcn.004913bc
add esp, 8
push dword [0x51fd10]
xor eax, eax
mov dword [ebp - 0x5ac], 0
cmp dword [0x51fd14], 8
lea ecx, [ebp - 0x10c]
mov edx, 0x51fd00
mov dword [ebp - 0x5a8], 7
cmovae edx, dword [0x51fd00]
mov word [ebp - 0x5bc], ax
call fcn.0043f960
add esp, 4
lea ecx, [ebp - 0x108]
call fcn.00437be0
test eax, eax
jne 0x41d28d
mov eax, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
call fcn.0040ad70
cmp dword [ebp - 0x3b8], 0
lea esi, [ebp - 0x404]
jne 0x41d2af
xor esi, esi
jmp 0x41d2d6
lea ecx, [ebp - 0x404]
call fcn.004380c0
push dword [ebp - 0x3b8]
xor ecx, ecx
test al, al
cmove esi, ecx
call fcn.004b252a
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
push 2
push 0
lea ecx, [ebp - 0x404]
call fcn.00438190
test esi, esi
jne 0x41d313
mov eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x414]
push esi
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x418], eax
lea ecx, [ebp - 0x404]
call fcn.00434f40
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x418], eax
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0x23
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0047943f
add esp, 4
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
mov dword [ebp - 0x428], esp
push eax
call fcn.00431a30
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.00431a30
mov byte [ebp - 4], 5
call fcn.0041b6d0
add esp, 0x30
mov esi, dword [ebp - 0x418]
jmp 0x41dfc6
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
mov esi, dword [ebp - 0x1c]
mov edx, esi
cmovae ecx, dword [ebp - 0x2c]
push 5
push str.__ID_
push 0
call fcn.0043c060
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41ddf9
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
push 6
cmovae ecx, dword [ebp - 0x2c]
mov edx, esi
push 0x4ff924
push 0
call fcn.0043c060
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41ddf9
lea ecx, [esi - 4]
mov dword [ebp - 0x4ec], 0
xor eax, eax
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
cmp esi, ecx
jb 0x41e084
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.004373b0
or edi, 0x8000
mov dword [ebp - 0x41c], edi
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x4fc]
mov esi, dword [ebp - 0x418]
or esi, 0x1000000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x4ec], 4
jne 0x41d4cc
mov ecx, str..exe
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d4cc
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d4b0
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 7
mov word [ebp - 0x4e4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e089
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.004373b0
or edi, 0x10000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x4e4]
or esi, 0x2000000
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x4d4], 4
jne 0x41d57d
mov ecx, str..dll
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d57d
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d561
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e08e
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.004373b0
or edi, 0x20000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x4cc]
or esi, 0x4000000
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x4bc], 4
jne 0x41d62e
mov ecx, str..msi
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d62e
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d612
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e093
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x52c]
call fcn.004373b0
or edi, 0x40000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0x52c]
or esi, 0x8000000
cmp dword [ebp - 0x518], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x51c], 4
jne 0x41d6df
mov ecx, str..log
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d6df
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d6c3
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e098
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x514]
call fcn.004373b0
or edi, 0x80000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x29
lea eax, [ebp - 0x514]
or esi, 0x10000000
cmp dword [ebp - 0x500], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x514]
cmp dword [ebp - 0x504], 4
jne 0x41d790
mov ecx, str..lnk
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d790
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d774
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e09d
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.004373b0
or edi, 0x100000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2a
lea eax, [ebp - 0x5a4]
or esi, 0x20000000
cmp dword [ebp - 0x590], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x594], 4
jne 0x41d841
mov ecx, str..ini
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d841
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d825
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0a2
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x544]
call fcn.004373b0
or edi, 0x200000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0x544]
or esi, 0x40000000
cmp dword [ebp - 0x530], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x544]
cmp dword [ebp - 0x534], 4
jne 0x41d8f2
mov ecx, str..ico
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d8f2
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d8d6
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0a7
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x55c]
call fcn.004373b0
or edi, 0x400000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2c
lea edi, [ebp - 0x55c]
or esi, 0x80000000
cmp dword [ebp - 0x548], 8
mov dword [ebp - 0x420], esi
cmovae edi, dword [ebp - 0x55c]
cmp dword [ebp - 0x54c], 4
jne 0x41d997
mov ecx, str..cmd
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41d997
add ecx, 2
sub edx, 1
jne 0x41d981
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0ac
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x574]
call fcn.004373b0
mov dword [ebp - 4], 0x2d
lea edi, [ebp - 0x574]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x800001
cmp dword [ebp - 0x560], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x574]
cmp dword [ebp - 0x564], 4
mov dword [ebp - 0x418], ecx
jne 0x41da3c
mov ecx, str..bat
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41da3c
add ecx, 2
sub edx, 1
jne 0x41da26
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0b1
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x58c]
call fcn.004373b0
mov dword [ebp - 4], 0x2e
lea edi, [ebp - 0x58c]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x1000002
cmp dword [ebp - 0x578], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x58c]
cmp dword [ebp - 0x57c], 4
mov dword [ebp - 0x418], ecx
jne 0x41dae6
mov ecx, str..scr
mov edx, 4
sub edi, ecx
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41dae6
add ecx, 2
sub edx, 1
jne 0x41dad0
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0b6
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x468]
call fcn.004373b0
mov dword [ebp - 4], 0x2f
lea edi, [ebp - 0x468]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x2000004
cmp dword [ebp - 0x454], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x468]
cmp dword [ebp - 0x458], 4
mov dword [ebp - 0x418], ecx
jne 0x41db8b
mov ecx, str..cpl
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41db8b
add ecx, 2
sub edx, 1
jne 0x41db75
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0bb
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x480]
call fcn.004373b0
mov dword [ebp - 4], 0x30
lea eax, [ebp - 0x480]
mov edi, dword [ebp - 0x41c]
or edi, 0x4000008
cmp dword [ebp - 0x46c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x480]
cmp dword [ebp - 0x470], 4
mov dword [ebp - 0x418], edi
jne 0x41dc3c
mov ecx, str..icl
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41dc3c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41dc20
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0c0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x498]
call fcn.004373b0
mov dword [ebp - 4], 0x31
lea eax, [ebp - 0x498]
or edi, 0x8000010
cmp dword [ebp - 0x484], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x498]
cmp dword [ebp - 0x488], 4
mov dword [ebp - 0x418], edi
jne 0x41dcec
mov ecx, str._Enc
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41dcec
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41dcd0
jmp 0x41ddff
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], dx
lea ecx, [eax - 3]
cmp eax, ecx
jb 0x41e0c5
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 3
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.004373b0
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0x4b0]
or edi, 0x10000020
cmp dword [ebp - 0x49c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x4a0], 3
mov dword [ebp - 0x418], edi
jne 0x41dd9c
mov ecx, 0x4fc018
mov edx, 3
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41dd9c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41dd80
jmp 0x41ddff
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0x450]
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
add eax, 0xfffffffc
mov dword [ebp - 0x43c], 7
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00438820
or edi, 0x20000040
lea ecx, [ebp - 0x450]
mov edx, 0x51fdb8
mov dword [ebp - 0x41c], edi
call fcn.0043ae00
test al, al
jne 0x41ddff
mov byte [ebp - 0x421], al
jmp 0x41de06
mov esi, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
mov eax, dword [ebp - 0x41c]
test al, 0x40
je 0x41de2a
and eax, 0xffffffbf
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x20
je 0x41de48
and eax, 0xffffffdf
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x10
je 0x41de66
and eax, 0xffffffef
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 8
je 0x41de84
and eax, 0xfffffff7
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 4
je 0x41dea2
and eax, 0xfffffffb
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 2
je 0x41dec0
and eax, 0xfffffffd
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 1
je 0x41ded8
and eax, 0xfffffffe
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
test esi, esi
jns 0x41deed
lea ecx, [ebp - 0x55c]
and esi, 0x7fffffff
call fcn.004049c0
test esi, 0x40000000
je 0x41df06
lea ecx, [ebp - 0x544]
and esi, 0xbfffffff
call fcn.004049c0
test esi, 0x20000000
je 0x41df1f
lea ecx, [ebp - 0x5a4]
and esi, 0xdfffffff
call fcn.004049c0
test esi, 0x10000000
je 0x41df38
lea ecx, [ebp - 0x514]
and esi, 0xefffffff
call fcn.004049c0
test esi, 0x8000000
je 0x41df51
lea ecx, [ebp - 0x52c]
and esi, 0xf7ffffff
call fcn.004049c0
test esi, 0x4000000
je 0x41df6a
lea ecx, [ebp - 0x4cc]
and esi, 0xfbffffff
call fcn.004049c0
test esi, 0x2000000
je 0x41df83
lea ecx, [ebp - 0x4e4]
and esi, 0xfdffffff
call fcn.004049c0
mov dword [ebp - 4], 5
test esi, 0x1000000
je 0x41dfa3
lea ecx, [ebp - 0x4fc]
and esi, 0xfeffffff
call fcn.004049c0
cmp byte [ebp - 0x421], 0
jne 0x41dfc0
lea ecx, [ebp - 0x2c]
call fcn.004171d0
cmp al, 1
je 0x41dfc0
lea ecx, [ebp - 0x2c]
call fcn.0040f630
mov edi, dword [ebp - 0x41c]
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41b831
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x2c]
call fcn.004049c0
lea ecx, [ebp - 0x5c]
call fcn.00432220
lea ecx, [ebp - 0x44]
call fcn.00432220
lea ecx, [ebp + 8]
call fcn.004049c0
lea ecx, [ebp + 0x20]
call fcn.004049c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490d3b
mov esp, ebp
pop ebp
ret
call fcn.004b58b2
call fcn.004b58b2
call fcn.004b58b2
call fcn.004b58b2
call fcn.004b58b2
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
call fcn.00438810
int3