Function at 0x401ffc
Capabilities:
Delete file
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400c
push edi
lea edi, [ebp - 0x400c]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x402025
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x4047eb
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x402199
push eax
push edi
call fcn.00404cdd
cmp eax, 1
jne 0x402059
mov dword [edi], 0x4050de
jmp 0x40208a
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x402197
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea ecx, [ecx + 4]
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x402197
lea edx, [ebp - 0x3dac]
push edx
lea edx, [ebp - 0x3dfc]
push edx
lea edx, [ebp - 0x3e4c]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x402197
lea ecx, [ebp - 0x3e4c]
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0x3dfc]
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
jmp 0x4021d9
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x4047eb
mov dword [ebp - 0x2b48], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea ecx, [ecx + 2]
push ecx
push eax
lea edx, [ebp - 0x3d5c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x2b44], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40223f
cmp eax, 0xb
jne 0x402354
mov byte [ebp - 0x630], 0x29
mov byte [ebp - 0x62f], 2
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 2
lea edx, [ebp - 0x630]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x4022be
push 0
push 0xa0d3123
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x402354
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0x624], esp
push 0x706870
push 0x2e747365
push 0x745f3374
push 0x63655f69
push 0x68706c65
push 0x645f6874
push 0x6f72776e
push 0x656b2f74
push 0x7365742f
lea edx, [ebp - 0x62c]
push edx
lea edx, [ebp - 0x3c62]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0x624]
call fcn.00405c02
mov dword [ebp - 0x2b44], eax
add esp, 0x24
add esp, 0xc
test eax, eax
jne 0x402354
mov byte [ebp - 0x62e], 0x2a
mov byte [ebp - 0x62d], 0xa
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xa
lea edx, [ebp - 0x62e]
push edx
call dword [ebx + 0x40]
mov dword [ebp - 0x2b44], 0
cmp dword [esi + 0x270], 0x6e656b24
jne 0x4023d6
cmp dword [esi + 0x274], 0x746f7277
jne 0x4023d6
cmp dword [esi + 0x278], 0x24393968
jne 0x4023d6
cmp dword [esi + 0x27c], 0x706c6544
jne 0x4023d6
cmp dword [esi + 0x280], 0x45206968
jne 0x4023d6
cmp dword [esi + 0x284], 0x5b335443
jne 0x4023d6
cmp dword [esi + 0x288], 0x33373033
jne 0x4023d6
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x4023d6
cmp word [esi + 0x290], 0x4e41
jne 0x4023d6
cmp byte [esi + 0x292], 0
je 0x402482
cmp dword [esi + 0x270], 0x6e656b24
jne 0x4047e3
cmp dword [esi + 0x274], 0x746f7277
jne 0x4047e3
cmp dword [esi + 0x278], 0x54282468
jne 0x4047e3
cmp dword [esi + 0x27c], 0x29545345
jne 0x4047e3
cmp dword [esi + 0x280], 0x706c6544
jne 0x4047e3
cmp dword [esi + 0x284], 0x45206968
jne 0x4047e3
cmp dword [esi + 0x288], 0x5b335443
jne 0x4047e3
cmp dword [esi + 0x28c], 0x33373033
jne 0x4047e3
cmp dword [esi + 0x290], 0x43205d6b
jne 0x4047e3
cmp word [esi + 0x294], 0x4e41
jne 0x4047e3
cmp byte [esi + 0x296], 0
jne 0x4047e3
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40251d
cmp dword [esi + 0x14], 0x10000
jbe 0x4024cd
mov ecx, dword [esi + 0x20]
mov eax, dword [ecx + 0x10000]
mov dword [ebp - 0x980], eax
mov eax, dword [ecx + 0x10004]
mov dword [ebp - 0x97c], eax
mov eax, dword [ecx + 0x10008]
mov dword [ebp - 0x978], eax
mov eax, dword [ecx + 0x1000c]
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x950], 0x240000
mov dword [ebp - 0x94c], 0x2ff000
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x402578
mov dword [ebp - 0x950], 0x240000
mov dword [ebp - 0x94c], 0x2ff000
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x40259b
cmp eax, 0xa
je 0x40259b
cmp eax, 0xb
je 0x40259b
cmp eax, 0x17
je 0x40259b
cmp eax, 0x18
jne 0x4046e6
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4025c9
mov dword [ebp - 0x2b44], 1
jmp 0x4046e6
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4025f6
mov dword [ebp - 0x2b44], 1
jmp 0x4046d0
mov dword [ebp - 0x2b38], 0xf900da18
mov dword [ebp - 0x2b34], 0xf9da18
mov dword [ebp - 0x988], 0
mov byte [ebp - 0xb0a], 0
mov byte [ebp - 0xaca], 0
push 0
push 0
push 4
push 0
push 0x140
push 0
push 6
push 0
push 0
push 4
push 0
push 0x140
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x140
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x620], esp
mov eax, dword [ebp - 0x2b34]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x2b38]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x620]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x402693
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x40276e
mov eax, dword [ebp - 0x2b38]
mov dword [ebp - 0x2b30], eax
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x4026e7
cmp eax, 0xffffffff
jne 0x4026f3
mov dword [ebp - 0x2b44], 1
jmp 0x40276e
cmp byte [ebp - 0x1b26], 0x50
je 0x40276e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40274c
xor eax, eax
jmp 0x402756
cmp eax, 0x20
jbe 0x402756
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4027fc
mov dword [ebp - 0x2b2c], 0x951a
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x4027b6
cmp eax, 0xffffffff
jne 0x4027c2
mov dword [ebp - 0x2b44], 1
jmp 0x4027fc
cmp byte [ebp - 0x1b26], 0x5a
jne 0x4027fc
sub eax, 5
xor ecx, ecx
cmp ecx, 0x40
jae 0x4027f4
cmp ecx, eax
jae 0x4027f4
mov dl, byte [ebp + ecx - 0x1b25]
cmp dl, 0
je 0x4027f4
cmp dl, 0xff
je 0x4027f4
mov byte [ebp + ecx - 0xb0a], dl
inc ecx
jmp 0x4027d0
mov byte [ebp + ecx - 0xb0a], 0
cmp dword [ebp - 0x2b44], 0
jne 0x40288a
mov dword [ebp - 0x2b2c], 0x901a
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402844
cmp eax, 0xffffffff
jne 0x402850
mov dword [ebp - 0x2b44], 1
jmp 0x40288a
cmp byte [ebp - 0x1b26], 0x5a
jne 0x40288a
sub eax, 5
xor ecx, ecx
cmp ecx, 0x40
jae 0x402882
cmp ecx, eax
jae 0x402882
mov dl, byte [ebp + ecx - 0x1b25]
cmp dl, 0
je 0x402882
cmp dl, 0xff
je 0x402882
mov byte [ebp + ecx - 0xaca], dl
inc ecx
jmp 0x40285e
mov byte [ebp + ecx - 0xaca], 0
cmp dword [ebp - 0x2b44], 0
jne 0x402938
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x402938
lea ecx, [ebp - 0xb0a]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0xaca]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x40294c
cmp eax, 0xa
jne 0x4046d0
cmp dword [ebp - 0x2b44], 0
jne 0x402a1b
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402994
cmp eax, 0xffffffff
jne 0x4029a0
mov dword [ebp - 0x2b44], 1
jmp 0x402a1b
cmp byte [ebp - 0x1b26], 0x50
je 0x402a1b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4029f9
xor eax, eax
jmp 0x402a03
cmp eax, 0x20
jbe 0x402a03
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402bdf
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x127
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402a6d
cmp eax, 0xffffffff
jne 0x402a7c
mov dword [ebp - 0x2b44], 1
jmp 0x402bdf
cmp byte [ebp - 0x1b26], 0x7f
jne 0x402b62
cmp byte [ebp - 0x1b24], 0x36
jne 0x402aa7
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a32
jmp 0x402ae9
cmp byte [ebp - 0x1b24], 0x37
jne 0x402ac9
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a32
jmp 0x402ae9
cmp byte [ebp - 0x1b24], 0x22
jne 0x402ae9
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a32
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402b3b
xor eax, eax
jmp 0x402b45
cmp eax, 0x20
jbe 0x402b45
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x402bdf
cmp byte [ebp - 0x1b26], 0x67
je 0x402bdf
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402bbd
xor eax, eax
jmp 0x402bc7
cmp eax, 0x20
jbe 0x402bc7
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402e16
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa0c], 0x4000600
mov dword [ebp - 0xa08], 0x6000400
mov dword [ebp - 0xa04], 0xa1f455b4
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x402ca2
push 0
push 0xa0d3223
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x402e16
mov dword [ebp - 0x2b2c], 0x227
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402ce9
cmp eax, 0xffffffff
jne 0x402cf8
mov dword [ebp - 0x2b44], 1
jmp 0x402e16
cmp byte [ebp - 0x1b26], 0x7f
jne 0x402d9b
cmp byte [ebp - 0x1b24], 0x36
je 0x402d17
cmp byte [ebp - 0x1b24], 0x37
jne 0x402d27
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x402a32
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402d77
xor eax, eax
jmp 0x402d81
cmp eax, 0x20
jbe 0x402d81
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x402e16
cmp byte [ebp - 0x1b26], 0x67
je 0x402e16
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402df4
xor eax, eax
jmp 0x402dfe
cmp eax, 0x20
jbe 0x402dfe
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402ee5
mov dword [ebp - 0x2b2c], 0x8910
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402e5e
cmp eax, 0xffffffff
jne 0x402e6a
mov dword [ebp - 0x2b44], 1
jmp 0x402ee5
cmp byte [ebp - 0x1b26], 0x50
je 0x402ee5
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402ec3
xor eax, eax
jmp 0x402ecd
cmp eax, 0x20
jbe 0x402ecd
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402fb4
mov dword [ebp - 0x2b2c], 0x10211
lea edx, [ebp - 0x2b30]
push edx
push 7
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x402f2d
cmp eax, 0xffffffff
jne 0x402f39
mov dword [ebp - 0x2b44], 1
jmp 0x402fb4
cmp byte [ebp - 0x1b26], 0x51
je 0x402fb4
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402f92
xor eax, eax
jmp 0x402f9c
cmp eax, 0x20
jbe 0x402f9c
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4031d1
mov dword [ebp - 0x2b3c], 0
cmp dword [ebp - 0x2b3c], 2
jae 0x403191
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x327
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x40301d
cmp eax, 0xffffffff
jne 0x40302c
mov dword [ebp - 0x2b44], 1
jmp 0x40318f
cmp byte [ebp - 0x1b26], 0x7f
jne 0x403112
cmp byte [ebp - 0x1b24], 0x36
jne 0x403057
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fe2
jmp 0x403099
cmp byte [ebp - 0x1b24], 0x37
jne 0x403079
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fe2
jmp 0x403099
cmp byte [ebp - 0x1b24], 0x22
jne 0x403099
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fe2
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4030eb
xor eax, eax
jmp 0x4030f5
cmp eax, 0x20
jbe 0x4030f5
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x40318f
cmp byte [ebp - 0x1b26], 0x67
je 0x40318f
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40316d
xor eax, eax
jmp 0x403177
cmp eax, 0x20
jbe 0x403177
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x4031d1
push 0
push 0xa0d244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403445
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
cmp dword [ebp - 0x2b3c], 0
jne 0x403231
mov dword [ebp - 0xa88], 3
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xa00], eax
jmp 0x40323b
mov dword [ebp - 0xa88], 2
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x4032bb
push 0
push 0xa0d3323
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403445
mov dword [ebp - 0x2b2c], 0x427
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403302
cmp eax, 0xffffffff
jne 0x403311
mov dword [ebp - 0x2b44], 1
jmp 0x403445
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4033ca
cmp byte [ebp - 0x1b24], 0x36
je 0x403330
cmp byte [ebp - 0x1b24], 0x37
jne 0x403342
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x402a32
cmp byte [ebp - 0x1b24], 0x35
jne 0x403356
inc dword [ebp - 0x2b3c]
jmp 0x402fcb
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4033a6
xor eax, eax
jmp 0x4033b0
cmp eax, 0x20
jbe 0x4033b0
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x403445
cmp byte [ebp - 0x1b26], 0x67
je 0x403445
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403423
xor eax, eax
jmp 0x40342d
cmp eax, 0x20
jbe 0x40342d
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x403766
cmp dword [ebp - 0x2b44], 0
jne 0x403766
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x96c], 0
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x4034ce
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0x96c], eax
inc dword [ebp - 0x970]
jmp 0x40349a
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0x96c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0x96c], 0
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
push dword [esi + 0x28]
push 0xff
push eax
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x968], 0
cmp dword [ebp - 0x970], 0x32
jae 0x403716
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x403716
mov eax, dword [ebp + edx - 0x950]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp + edx - 0x94c]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp + edx - 0x948]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x40370b
sub ecx, eax
cmp ecx, 0x80
jbe 0x4035ce
mov ecx, pe_nt_image_headers32
mov dword [ebp - 0x954], ecx
mov byte [ebp - 0x2b2c], 0x23
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b2a], ah
mov byte [ebp - 0x2b29], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], al
mov byte [ebp - 0x2b28], cl
lea edx, [ebp - 0x2b30]
push edx
push 9
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x40362d
cmp eax, 0xffffffff
jne 0x40363c
mov dword [ebp - 0x2b44], 1
jmp 0x403709
cmp byte [ebp - 0x1b26], 0x63
je 0x4036b9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403695
xor eax, eax
jmp 0x40369f
cmp eax, 0x20
jbe 0x40369f
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x403709
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x4036d7
mov dword [ebp - 0x968], eax
call fcn.00404951
mov eax, dword [esi + 0x24]
add eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x954]
push ecx
lea edx, [ebp - 0x1b25]
push edx
push eax
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x954]
add dword [ebp - 0x964], ecx
jmp 0x4035ab
jmp 0x403716
inc dword [ebp - 0x970]
jmp 0x40355a
cmp dword [ebp - 0x2b44], 0
je 0x40373f
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x24], 0
jmp 0x403766
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4046d0
cmp dword [ebp - 0x2b44], 0
jne 0x403851
mov dword [ebp - 0x2b2c], 0x8510
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x4037bd
cmp eax, 0xffffffff
jne 0x4037cc
mov dword [ebp - 0x2b44], 1
jmp 0x403851
cmp byte [ebp - 0x1b26], 0x50
je 0x403851
push 0x203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c244544
push 0x4f4d5f47
push 0x4e494d4d
push 0x4152474f
push 0x52505f54
push 0x45535f54
push 0x4f4e5f4e
push 0x41435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40382f
xor eax, eax
jmp 0x403839
cmp eax, 0x20
jbe 0x403839
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403a56
push 0xa
push 1
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
jne 0x4038c3
push 0
push 0xa0d3423
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a56
mov dword [ebp - 0x994], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x98c], eax
push dword [ebp - 0x994]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
jne 0x403940
push 0
push 0xa0d3523
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a56
mov dword [ebp - 0x990], eax
cmp byte [eax + 3], 8
je 0x4039a0
push 0
push 0xa0d3623
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a4a
mov ecx, dword [ebp - 0x98c]
mov eax, dword [ecx + eax - 4]
mov dword [ebp - 0x984], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x988], eax
push dword [ebp - 0x984]
push eax
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
call dword [ebx + 0x4c]
test eax, eax
jne 0x403a2a
push 0
push 0xa0d3723
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a4a
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], 0xa0000000
push dword [ebp - 0x990]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x2b44], 0
jne 0x403d55
mov byte [ebp - 0x2b2c], 0x34
mov eax, dword [ebp - 0x964]
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b29], ah
mov byte [ebp - 0x2b28], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], ah
mov byte [ebp - 0x2b2a], al
mov eax, dword [ebp - 0x960]
sub eax, dword [ebp - 0x964]
dec eax
mov byte [ebp - 0x2b26], ah
mov byte [ebp - 0x2b25], al
shr eax, 0x10
mov byte [ebp - 0x2b27], al
lea edx, [ebp - 0x2b30]
push edx
push 0xc
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403ae4
cmp eax, 0xffffffff
jne 0x403af3
mov dword [ebp - 0x2b44], 1
jmp 0x403d55
cmp byte [ebp - 0x1b26], 0x74
je 0x403b73
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403b4c
xor eax, eax
jmp 0x403b56
cmp eax, 0x20
jbe 0x403b56
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x403d55
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x403c96
sub ecx, eax
cmp ecx, 0x80
jbe 0x403b96
mov ecx, pe_nt_image_headers32
mov dword [ebp - 0x958], ecx
add eax, dword [ebp - 0x988]
mov byte [ebp - 0x2b2c], 0x36
push ecx
push eax
lea edx, [ebp - 0x2b2b]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x958]
lea edx, [ebp - 0x2b30]
push edx
lea edx, [ecx + 5]
push edx
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403bf4
cmp eax, 0xffffffff
jne 0x403c03
mov dword [ebp - 0x2b44], 1
jmp 0x403c91
cmp byte [ebp - 0x1b26], 0x76
je 0x403c80
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403c5c
xor eax, eax
jmp 0x403c66
cmp eax, 0x20
jbe 0x403c66
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x403c91
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x403b73
jmp 0x403d55
mov byte [ebp - 0x2b2c], 0x37
lea edx, [ebp - 0x2b30]
push edx
push 5
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403cce
cmp eax, 0xffffffff
jne 0x403cda
mov dword [ebp - 0x2b44], 1
jmp 0x403d55
cmp byte [ebp - 0x1b26], 0x77
je 0x403d55
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403d33
xor eax, eax
jmp 0x403d3d
cmp eax, 0x20
jbe 0x403d3d
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x988], 0
je 0x403d6a
push dword [ebp - 0x988]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebp - 0x2b44], 0
jne 0x403e39
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403db2
cmp eax, 0xffffffff
jne 0x403dbe
mov dword [ebp - 0x2b44], 1
jmp 0x403e39
cmp byte [ebp - 0x1b26], 0x50
je 0x403e39
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403e17
xor eax, eax
jmp 0x403e21
cmp eax, 0x20
jbe 0x403e21
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403ffd
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x127
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x403e8b
cmp eax, 0xffffffff
jne 0x403e9a
mov dword [ebp - 0x2b44], 1
jmp 0x403ffd
cmp byte [ebp - 0x1b26], 0x7f
jne 0x403f80
cmp byte [ebp - 0x1b24], 0x36
jne 0x403ec5
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e50
jmp 0x403f07
cmp byte [ebp - 0x1b24], 0x37
jne 0x403ee7
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e50
jmp 0x403f07
cmp byte [ebp - 0x1b24], 0x22
jne 0x403f07
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e50
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403f59
xor eax, eax
jmp 0x403f63
cmp eax, 0x20
jbe 0x403f63
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x403ffd
cmp byte [ebp - 0x1b26], 0x67
je 0x403ffd
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403fdb
xor eax, eax
jmp 0x403fe5
cmp eax, 0x20
jbe 0x403fe5
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x404234
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa0c], 0x4000600
mov dword [ebp - 0xa08], 0x6000400
mov dword [ebp - 0xa04], 0xa1f455b4
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x4040c0
push 0
push 0xa0d3823
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x404234
mov dword [ebp - 0x2b2c], 0x227
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x404107
cmp eax, 0xffffffff
jne 0x404116
mov dword [ebp - 0x2b44], 1
jmp 0x404234
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4041b9
cmp byte [ebp - 0x1b24], 0x36
je 0x404135
cmp byte [ebp - 0x1b24], 0x37
jne 0x404145
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x403e50
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x404195
xor eax, eax
jmp 0x40419f
cmp eax, 0x20
jbe 0x40419f
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x404234
cmp byte [ebp - 0x1b26], 0x67
je 0x404234
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x404212
xor eax, eax
jmp 0x40421c
cmp eax, 0x20
jbe 0x40421c
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x404303
mov dword [ebp - 0x2b2c], 0x8910
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x40427c
cmp eax, 0xffffffff
jne 0x404288
mov dword [ebp - 0x2b44], 1
jmp 0x404303
cmp byte [ebp - 0x1b26], 0x50
je 0x404303
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4042e1
xor eax, eax
jmp 0x4042eb
cmp eax, 0x20
jbe 0x4042eb
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4043f7
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x2b2c], 0xba
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x404370
cmp eax, 0xffffffff
jne 0x40437c
mov dword [ebp - 0x2b44], 1
jmp 0x4043f7
cmp byte [ebp - 0x1b26], 0xfa
je 0x4043f7
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4043d5
xor eax, eax
jmp 0x4043df
cmp eax, 0x20
jbe 0x4043df
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4046a0
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x96c], 0
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x40444c
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0x96c], eax
inc dword [ebp - 0x970]
jmp 0x404418
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0x96c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x968], 0
cmp dword [ebp - 0x970], 0x32
jae 0x4046a0
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x4046a0
mov eax, dword [ebp + edx - 0x950]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp + edx - 0x94c]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp + edx - 0x948]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x404695
sub ecx, eax
cmp ecx, 0x10
jbe 0x404518
mov ecx, 0x10
mov dword [ebp - 0x958], ecx
mov byte [ebp - 0x2b2c], 0x3d
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b2a], ah
mov byte [ebp - 0x2b29], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], al
mov byte [ebp - 0x2b28], cl
mov eax, dword [ebp - 0x964]
add eax, dword [esi + 0x20]
push ecx
push eax
lea edx, [ebp - 0x2b27]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x958]
lea edx, [ebp - 0x2b30]
push edx
lea edx, [ecx + 9]
push edx
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.004049a0
test eax, eax
je 0x40459a
cmp eax, 0xffffffff
jne 0x4045a6
mov dword [ebp - 0x2b44], 1
jmp 0x4045e7
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4045e7
cmp byte [ebp - 0x1b24], 0x74
jne 0x4045e7
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x4045d6
mov dword [ebp - 0x968], eax
call fcn.00404951
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x4044f8
cmp byte [ebp - 0x1b26], 0x7d
jne 0x404621
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x40460e
mov dword [ebp - 0x968], eax
call fcn.00404951
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x4044f8
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x404671
xor eax, eax
jmp 0x40467b
cmp eax, 0x20
jbe 0x40467b
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b81
mov dword [ebp - 0x2b44], 1
jmp 0x4046a0
inc dword [ebp - 0x970]
jmp 0x4044a7
cmp dword [ebp - 0x2b44], 0
jne 0x4046d0
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x4047e3
cmp dword [ebp - 0x2b44], 0
jne 0x4047e3
xor eax, eax
pushal
cmp dword [esi + 0x14], 0x2ff000
jae 0x404718
mov dword [esp + 0x1c], 3
jmp 0x404756
mov edi, dword [esi + 0x20]
mov ecx, 0x240000
xor edx, edx
cmp ecx, 0x2feffc
jae 0x404736
mov eax, dword [edi + ecx]
bswap eax
xor edx, eax
add ecx, 4
jmp 0x404722
xor edx, 0xa5a5a5a5
mov eax, dword [edi + 0x2feffc]
bswap eax
cmp eax, edx
je 0x404756
mov dword [edi + 0x2feffc], edx
mov dword [esp + 0x1c], 1
popal
test eax, eax
jne 0x404784
push 0xa
push 0xd244449
push 0x4c41565f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x4047e3
cmp eax, 1
jne 0x4047b7
push 0xa
push 0xd244445
push 0x54434552
push 0x524f435f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
jmp 0x4047e3
push 0xa
push 0xd24444e
push 0x554f465f
push 0x544f4e5f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcd4], 0
je 0x40492b
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcd4], 0
je 0x404832
push dword [ebx + 0xcd4]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcd4], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xacc]
push edx
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61c]
push edx
lea edx, [ebx + 0xacc]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x40492b
lea edx, [ebx + 0xacc]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 4], esp
push 0x706870
push 0x2e747365
push 0x745f3374
push 0x63655f69
push 0x68706c65
push 0x645f6874
push 0x6f72776e
push 0x656b2f74
push 0x7365742f
lea edx, [ebp - 0x20c]
push edx
lea edx, [ebp - 0x61c]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 4]
call fcn.004062d6
add esp, 0x24
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8