Function at 0x40ad20
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x560
mov eax, dword [0x43000c]
xor eax, ebp
mov dword [esp + 0x558], eax
mov eax, 0xf
test cl, cl
jne 0x40ad9c
lea esi, [esp + 0x40]
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
xor ecx, ecx
inc ecx
mov edx, esi
call fcn.0040ce90
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40ad86
mov ecx, dword [esp + 0x40]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cafd
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov ecx, dword [esp + 0x558]
xor ecx, ebp
call fcn.0041e640
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, edx
xor eax, eax
lea esi, [esp + 0x30]
mov dword [esi + 4], eax
push 0x40
call fcn.0041dc99
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
xor eax, eax
inc eax
lea ebx, [esp + 0x460]
mov ecx, ebx
push eax
push eax
push edi
call fcn.00420c60
mov ecx, ebx
mov edx, esi
xor edi, edi
push edi
call fcn.0040a4c0
add esp, 4
lea ebx, [esp + 0x40]
mov eax, 0xf
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x10], edi
mov byte [ebx], 0
sub esp, 0xc
lea edi, [esp + 0x54c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.StopSendingReportsFor
mov dword [esp], 0x15
mov ecx, ebx
call fcn.00401250
mov ecx, esi
mov edx, edi
push ebx
call fcn.00420bf0
add esp, 4
mov ecx, dword [esi]
mov esi, dword [edi]
mov eax, dword [ebx + 0x14]
cmp eax, 0x10
jb 0x40ae56
mov ebx, ecx
mov ecx, dword [esp + 0x40]
lea edx, [eax + 1]
cmp edx, 0x1000
jae 0x40cb81
push edx
push ecx
call fcn.0041dcce
add esp, 8
mov ecx, ebx
cmp esi, ecx
mov ebx, ecx
je 0x40b1af
mov eax, 0xf
mov dword [esp + 0x554], eax
xor ebx, ebx
mov dword [esp + 0x550], ebx
mov byte [esp + 0x540], bl
sub esp, 0xc
lea esi, [esp + 0x52c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.StopSendingReportsFor
mov dword [esp], 0x15
mov ecx, edi
call fcn.00401250
lea ecx, [esp + 0x30]
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov dword [esp + 0xc], esi
mov eax, dword [esi]
mov dword [esp + 8], eax
mov eax, 0xf
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], ebx
mov byte [esp + 0x508], bl
mov edi, dword [0x430528]
lea eax, [edi + 1]
mov ecx, 0xf
cmp eax, 0x10
jae 0x40cb4d
mov eax, 0x430518
cmp dword [0x43052c], 0xf
jbe 0x40aeff
mov eax, dword [0x430518]
cmp ecx, edi
jb 0x40b310
mov dword [esp + 0x518], edi
cmp ecx, 0xf
jbe 0x40af1c
mov esi, dword [esp + 0x508]
jmp 0x40af23
lea esi, [esp + 0x508]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x518]
mov ecx, dword [esp + 0x51c]
cmp ecx, eax
je 0x40b33a
lea edx, [eax + 1]
mov dword [esp + 0x518], edx
cmp ecx, 0xf
jbe 0x40af60
mov ecx, dword [esp + 0x508]
jmp 0x40af67
lea ecx, [esp + 0x508]
mov word [ecx + eax], 0x5c
mov edi, dword [esp + 0x518]
mov ecx, dword [esp + 0x51c]
mov eax, ecx
sub eax, edi
cmp eax, 9
jb 0x40b36b
lea eax, [esp + 0x508]
lea edx, [edi + 9]
mov dword [eax + 0x10], edx
mov esi, eax
cmp ecx, 0xf
jbe 0x40afa3
mov esi, dword [esp + 0x508]
lea ecx, [esp + 0x518]
lea edx, [esp + 0x51c]
mov dword [esi + edi + 4], 0x66694c66
mov dword [esi + edi], 0x4f646e45
mov word [esi + edi + 8], 0x65
xor esi, esi
mov dword [esp + 0x530], esi
mov dword [esp + 0x534], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x530], xmm0
movups xmm0, xmmword [eax]
movaps xmmword [esp + 0x520], xmm0
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov ebx, dword [esp + 8]
mov eax, dword [ebx + 0x38]
cmp dword [ebx + 0x3c], 0xf
jbe 0x40b00d
mov ebx, dword [ebx + 0x28]
jmp 0x40b010
add ebx, 0x28
mov ecx, dword [esp + 0x530]
mov edx, dword [esp + 0x534]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x40b3a4
lea esi, [ecx + eax]
mov dword [esp + 0x530], esi
lea edi, [esp + 0x520]
cmp edx, 0xf
jbe 0x40b047
mov edi, dword [esp + 0x520]
add ecx, edi
push eax
push ebx
push ecx
call sub.VCRUNTIME140.dll_memmove
lea edx, [esp + 0x53c]
add esp, 0xc
mov byte [edi + esi], 0
lea esi, [esp + 0x534]
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xc]
movsd xmm0, qword [ecx + 0x10]
movsd qword [esp + 0x50], xmm0
movups xmm0, xmmword [ecx]
movaps xmmword [esp + 0x40], xmm0
mov dword [edx], eax
mov dword [esi], 0xf
mov byte [ecx], 0
mov eax, dword [esp + 0x534]
cmp eax, 0x10
jb 0x40b0be
mov ecx, dword [esp + 0x520]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cbc1
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov dword [esp + 0x530], 0
mov dword [esp + 0x534], 0xf
mov byte [esp + 0x520], 0
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40b108
mov ecx, dword [esp + 0x508]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cbde
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x554]
cmp eax, 0x10
jb 0x40b134
mov ecx, dword [esp + 0x540]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cbfb
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x40]
mov edx, 0x10
call fcn.00419b20
mov esi, eax
cmp dword [eax + 0x50], 0
je 0x40b169
mov ecx, esi
push 1
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
push 0x42c8f8
push eax
call fcn.00406e10
add esp, 8
mov ecx, esi
call fcn.00420d70
mov eax, dword [esi]
mov eax, dword [eax + 4]
mov edi, esi
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x40b1ab
mov ecx, dword [esp + 0x40]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cc18
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov ebx, dword [esp + 0x30]
mov eax, 0xf
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], 9
mov dword [esp + 0x40], 0x63736944
mov dword [esp + 0x44], 0x65647261
mov word [esp + 0x48], 0x64
lea ecx, [esp + 0x30]
lea esi, [esp + 0x540]
mov edx, esi
lea eax, [esp + 0x40]
push eax
call fcn.00420bf0
add esp, 4
mov dword [esp + 0xc], esi
mov esi, dword [esi]
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x40b21d
mov ecx, dword [esp + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cba4
push edi
push ecx
call fcn.0041dcce
add esp, 8
cmp esi, ebx
je 0x40b3d8
xor ebx, ebx
mov eax, dword [esp + 0x460]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x460], 0x42a574
mov eax, dword [esp + 0x460]
mov eax, dword [eax + 4]
lea ecx, [eax - 0x60]
mov dword [esp + eax + 0x45c], ecx
mov dword [esp + 0x470], 0x42a580
test byte [esp + 0x4ac], 1
je 0x40b2a4
mov eax, dword [esp + 0x490]
mov eax, dword [eax]
test eax, eax
je 0x40cb1a
lea ecx, [esp + 0x460]
add ecx, 0x40
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [esp + 0x47c]
mov ecx, dword [ecx]
sub eax, ecx
cmp eax, 0x1000
jae 0x40cb32
push eax
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x4c0]
lea ecx, [esp + 0x470]
mov eax, dword [ecx + 0xc]
xor edi, edi
mov dword [eax], edi
mov eax, dword [ecx + 0x1c]
mov dword [eax], edi
mov eax, dword [ecx + 0x2c]
mov dword [eax], edi
mov eax, dword [ecx + 0x10]
mov dword [eax], edi
mov eax, dword [ecx + 0x20]
mov dword [eax], edi
mov eax, dword [ecx + 0x30]
mov dword [eax], edi
mov dword [ecx + 0x38], edi
and byte [ecx + 0x3c], 0xfe
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 4]
call fcn.004063a0
push 0x40
push esi
call fcn.0041dcce
add esp, 8
test bl, bl
je 0x40b4d9
call fcn.0040aba0
jmp 0x40ad86
sub esp, 0x10
mov cl, byte [esp + 0x450]
mov byte [esp + 4], cl
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esp + 0x518]
call fcn.00403930
jmp 0x40af32
sub esp, 0x10
mov al, byte [esp + 0x450]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0x518]
call fcn.00403930
jmp 0x40af6d
sub esp, 0x10
mov al, byte [esp + 0x450]
mov byte [esp + 4], al
mov eax, 9
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str.EndOfLife
lea ecx, [esp + 0x518]
call fcn.00403930
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x40afc7
sub esp, 0x10
mov cl, byte [esp + 0x450]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], eax
lea ecx, [esp + 0x530]
call fcn.00403930
lea edx, [eax + 0x10]
mov dword [esp + 0xc], eax
lea esi, [eax + 0x14]
jmp 0x40b066
mov eax, 0xf
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], 7
mov dword [esp + 0x40], 0x73617243
mov dword [esp + 0x43], 0x44496873
mov byte [esp + 0x47], 0
lea ecx, [esp + 0x30]
lea esi, [esp + 0x540]
mov edx, esi
lea eax, [esp + 0x40]
push eax
call fcn.00420bf0
add esp, 4
mov esi, dword [esi]
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x40b440
mov ecx, dword [esp + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cc66
push edi
push ecx
call fcn.0041dcce
add esp, 8
cmp esi, ebx
je 0x40b225
mov eax, 0xf
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
mov edi, dword [0x430528]
lea eax, [edi + 1]
mov ecx, 0xf
cmp eax, 0x10
jae 0x40cc35
mov eax, 0x430518
cmp dword [0x43052c], 0xf
jbe 0x40b488
mov eax, dword [0x430518]
cmp ecx, edi
jb 0x40b690
mov dword [esp + 0x50], edi
lea esi, [esp + 0x40]
cmp ecx, 0xf
jbe 0x40b4a1
mov esi, dword [esp + 0x40]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
cmp ecx, eax
je 0x40b6b7
lea edx, [eax + 1]
mov dword [esp + 0x50], edx
cmp ecx, 0xf
jbe 0x40b57f
mov ecx, dword [esp + 0x40]
jmp 0x40b583
mov dword [esp + 0x450], edi
mov dword [esp + 0x454], edi
mov eax, dword [0x43057c]
mov esi, 0x43056c
cmp dword [0x430580], 0xf
jbe 0x40b500
mov esi, dword [0x43056c]
cmp eax, 0xf
ja 0x40c5e6
movups xmm0, xmmword [esi]
movaps xmmword [esp + 0x440], xmm0
mov ebx, 0xf
lea edi, [esp + 0x440]
mov dword [edi + 0x10], eax
mov esi, ebx
mov dword [edi + 0x14], ebx
mov ecx, edi
mov ebx, eax
call fcn.00428830
cmp eax, 2
jl 0x40c395
mov edx, eax
sub edx, ebx
jbe 0x40b678
mov dword [esp + 8], eax
mov ecx, esi
sub ecx, ebx
cmp ecx, edx
jae 0x40b71b
sub esp, 0x10
mov cl, byte [esp + 0x50]
mov byte [esp + 4], cl
mov dword [esp + 8], edx
mov dword [esp], edx
mov dword [esp + 0xc], 0
lea ecx, [esp + 0x450]
call fcn.004049e0
jmp 0x40b835
lea ecx, [esp + 0x40]
mov word [ecx + eax], 0x5c
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov eax, ecx
sub eax, esi
cmp eax, 9
jb 0x40b6e5
lea eax, [esp + 0x40]
lea edx, [esi + 9]
mov dword [eax + 0x10], edx
mov edi, eax
cmp ecx, 0xf
jbe 0x40b5b3
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x50]
lea edx, [esp + 0x54]
mov dword [edi + esi + 4], 0x65747469
mov dword [edi + esi], 0x6d627573
mov word [edi + esi + 8], 0x64
xor esi, esi
mov dword [esp + 0x550], esi
mov dword [esp + 0x554], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x550], xmm0
movups xmm0, xmmword [eax]
movaps xmmword [esp + 0x540], xmm0
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x40b62b
mov ecx, dword [esp + 0x40]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40ccde
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x540]
mov ecx, esi
call fcn.00417140
test al, al
jne 0x40b73b
xor ebx, ebx
mov eax, dword [esp + 0x554]
cmp eax, 0x10
jb 0x40b227
mov ecx, dword [esp + 0x540]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40ccfb
push esi
push ecx
call fcn.0041dcce
add esp, 8
jmp 0x40b227
cmp esi, 0xf
jbe 0x40b684
mov edi, dword [esp + 0x440]
mov dword [esp + 0x450], eax
jmp 0x40b831
sub esp, 0x10
mov cl, byte [esp + 0x530]
mov byte [esp + 4], cl
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esp + 0x50]
call fcn.00403930
jmp 0x40b4b0
sub esp, 0x10
mov al, byte [esp + 0x530]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0x50]
call fcn.00403930
jmp 0x40b589
sub esp, 0x10
mov al, byte [esp + 0x530]
mov byte [esp + 4], al
mov eax, 9
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str.submitted
lea ecx, [esp + 0x50]
call fcn.00403930
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x40b5d1
mov eax, dword [esp + 8]
mov dword [esp + 0x450], eax
cmp esi, 0xf
jbe 0x40b818
mov edi, dword [esp + 0x440]
jmp 0x40b81f
lea eax, [esp + 0x508]
mov ecx, 0xf
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], 7
mov dword [eax], 0x73617243
mov dword [eax + 3], 0x44496873
xor ebx, ebx
mov byte [eax + 7], bl
lea ecx, [esp + 0x30]
lea edi, [esp + 0x440]
mov edx, edi
push eax
call fcn.00421b60
add esp, 4
mov eax, dword [edi]
mov dword [esp + 8], eax
mov eax, 0xf
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], 0
mov byte [edi], bl
mov ebx, dword [esp + 0x550]
lea ecx, [ebx + 1]
mov eax, 0xf
cmp ecx, 0x10
jae 0x40cd35
cmp dword [esp + 0x554], 0xf
jbe 0x40b7b9
mov esi, dword [esp + 0x540]
cmp eax, ebx
jb 0x40c62d
mov dword [esp + 0x450], ebx
cmp eax, 0xf
jbe 0x40b7d4
mov edi, dword [esp + 0x440]
push ebx
push esi
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
mov eax, dword [esp + 0x450]
mov ecx, dword [esp + 0x454]
cmp ecx, eax
je 0x40c654
lea edx, [eax + 1]
mov dword [esp + 0x450], edx
cmp ecx, 0xf
jbe 0x40c3bb
mov ecx, dword [esp + 0x440]
jmp 0x40c3c2
lea edi, [esp + 0x440]
add ebx, edi
push edx
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 8]
mov byte [edi + eax], 0
lea edx, [esp + 0x440]
lea ecx, [esp + 0x540]
call fcn.004178b0
lea esi, [esp + 0x520]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
mov edi, dword [esp + 0x550]
lea eax, [edi + 6]
mov ecx, esi
push eax
call fcn.00404cc0
cmp dword [esp + 0x554], 7
jbe 0x40b889
mov eax, dword [esp + 0x540]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x530]
mov ecx, dword [esp + 0x534]
mov edx, ecx
sub edx, eax
cmp edx, edi
jb 0x40b8d0
lea ebx, [eax + edi]
mov dword [esp + 0x530], ebx
cmp ecx, 7
jbe 0x40b8b5
mov esi, dword [esp + 0x520]
lea eax, [esi + eax*2]
add edi, edi
push edi
push dword [esp + 0x10]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [esi + ebx*2], 0
jmp 0x40b8f6
sub esp, 0x10
mov al, byte [esp + 0x50]
mov byte [esp + 4], al
mov dword [esp + 0xc], edi
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esp + 0x530]
call fcn.0041fc90
mov eax, dword [esp + 0x530]
mov ecx, dword [esp + 0x534]
mov edx, ecx
sub edx, eax
cmp edx, 6
jb 0x40b94c
lea edx, [eax + 6]
mov dword [esp + 0x530], edx
cmp ecx, 7
jbe 0x40b925
mov ecx, dword [esp + 0x520]
jmp 0x40b92c
lea ecx, [esp + 0x520]
mov edx, dword [0x42cb64]
mov dword [ecx + eax*2 + 8], edx
movsd xmm0, qword [str..dmp]
movsd qword [ecx + eax*2], xmm0
mov word [ecx + eax*2 + 0xc], 0
jmp 0x40b977
sub esp, 0x10
mov al, byte [esp + 0x50]
mov byte [esp + 4], al
mov eax, 6
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str..dmp
lea ecx, [esp + 0x530]
call fcn.0041fc90
cmp dword [esp + 0x534], 7
jbe 0x40b98a
mov eax, dword [esp + 0x520]
jmp 0x40b991
lea eax, [esp + 0x520]
lea ecx, [esp + 0x40]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
je 0x40c2e1
mov dword [esp + 0xc], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x464], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x460], eax
mov eax, 7
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], 0
mov word [esp + 0x508], 0
mov eax, dword [esp + 0x550]
inc eax
lea ecx, [esp + 0x508]
push eax
call fcn.00404cc0
cmp dword [esp + 0x554], 7
lea eax, [esp + 0x540]
jbe 0x40ba26
mov eax, dword [esp + 0x540]
mov ecx, dword [esp + 0x550]
mov edx, dword [esp + 0x518]
mov ebx, dword [esp + 0x51c]
mov esi, ebx
sub esi, edx
cmp esi, ecx
mov dword [esp + 8], edi
jb 0x40ba80
lea esi, [edx + ecx]
mov dword [esp + 0x518], esi
lea edi, [esp + 0x508]
cmp ebx, 7
jbe 0x40ba64
mov edi, dword [esp + 0x508]
lea edx, [edi + edx*2]
add ecx, ecx
push ecx
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [edi + esi*2], 0
mov edi, dword [esp + 8]
jmp 0x40baa2
sub esp, 0x10
mov dl, byte [esp + 0x48]
mov byte [esp + 4], dl
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
mov dword [esp], ecx
lea ecx, [esp + 0x518]
call fcn.0041fc90
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x518]
mov ecx, dword [esp + 0x51c]
cmp ecx, eax
je 0x40bae4
lea edx, [eax + 1]
mov dword [esp + 0x518], edx
lea edx, [esp + 0x508]
cmp ecx, 7
jbe 0x40bad5
mov edx, dword [esp + 0x508]
mov word [edx + eax*2], 0x5c
mov word [edx + eax*2 + 2], 0
jmp 0x40bb0d
sub esp, 0x10
mov al, byte [esp + 0x48]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42cc88
lea ecx, [esp + 0x518]
call fcn.0041fc90
lea eax, [esp + 0x6c]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov ecx, dword [esp + 0x518]
mov edx, dword [esp + 0x51c]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x40bb82
lea esi, [ecx + eax]
mov dword [esp + 0x518], esi
lea edi, [esp + 0x508]
cmp edx, 7
jbe 0x40bb4d
mov edi, dword [esp + 0x508]
lea ecx, [edi + ecx*2]
add eax, eax
push eax
lea eax, [esp + 0x70]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov word [edi + esi*2], 0
lea eax, [esp + 0x508]
lea ecx, [esp + 0x51c]
lea edx, [esp + 0x518]
mov edi, dword [esp + 8]
jmp 0x40bbae
sub esp, 0x10
mov cl, byte [esp + 0x48]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
lea ecx, [esp + 0x7c]
mov dword [esp + 8], ecx
mov dword [esp], eax
lea ecx, [esp + 0x518]
call fcn.0041fc90
lea edx, [eax + 0x10]
lea ecx, [eax + 0x14]
movsd xmm0, qword [eax + 0x10]
lea esi, [esp + 0x468]
movsd qword [esi + 0x10], xmm0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
mov dword [edx], 0
mov dword [ecx], 7
mov word [eax], 0
mov ecx, dword [esp + 0x51c]
cmp ecx, 8
jb 0x40bc05
mov eax, dword [esp + 0x508]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40bfd1
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x40bc9c
mov eax, dword [esp + 0x14]
mov dword [ebx], eax
mov eax, dword [esp + 0x18]
mov dword [ebx + 4], eax
xor eax, eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
cmp dword [esp + 0x47c], 7
lea ebx, [esp + 0x468]
jbe 0x40bc3e
mov ebx, dword [esp + 0x468]
mov eax, dword [esp + 0x10]
add eax, 8
mov edi, dword [esp + 0x478]
cmp edi, 7
jbe 0x40bd0c
mov dword [esp + 0x14], eax
mov esi, edi
or esi, 7
mov eax, 0x7ffffffe
cmp esi, eax
cmovae esi, eax
lea eax, [esi + esi]
cmp esi, 0x7ff
jae 0x40bf7d
add eax, 2
push eax
call fcn.0041dc99
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
lea ecx, [edi + edi]
add ecx, 2
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x40bd17
mov ebx, eax
sub ebx, edi
mov edi, ebx
sar edi, 5
lea edx, [edi + 1]
mov eax, edi
shr eax, 1
mov ecx, 0x7ffffff
sub ecx, eax
add eax, edi
cmp eax, edx
cmovb eax, edx
cmp edi, ecx
cmova eax, edx
mov esi, eax
shl esi, 5
mov ecx, 0x7ffffff
cmp eax, ecx
mov dword [esp + 0x2c], esi
mov eax, esi
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0x1000
mov dword [esp + 0x10], edx
jb 0x40bd2d
sub eax, 0xffffffdd
cmovae eax, ecx
push eax
call fcn.0041dc99
add esp, 4
lea edx, [eax + 0x23]
and edx, 0xffffffe0
mov dword [edx - 4], eax
mov eax, dword [esp + 0x460]
mov ecx, dword [esp + 0x464]
jmp 0x40bd48
movups xmm0, xmmword [ebx]
movups xmmword [eax], xmm0
mov esi, 7
mov ebx, dword [esp + 0x10]
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x1c], esi
add ebx, 0x20
mov edi, dword [esp + 8]
jmp 0x40bf32
test eax, eax
je 0x40bd3e
push eax
call fcn.0041dc99
add esp, 4
mov edx, eax
jmp 0x40bd40
xor edx, edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shl edi, 5
mov dword [edx + edi + 4], ecx
mov dword [edx + edi], eax
xor eax, eax
mov dword [edx + edi + 0x18], eax
mov dword [edx + edi + 0x1c], eax
mov ecx, dword [esp + 0x478]
cmp dword [esp + 0x47c], 7
lea eax, [esp + 0x468]
jbe 0x40bd7b
mov eax, dword [esp + 0x468]
mov dword [esp + 0x14], edx
add edx, edi
add edx, 8
cmp ecx, 7
mov dword [esp + 0x1c], ebx
jbe 0x40bde9
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], ecx
mov esi, ecx
or esi, 7
mov eax, 0x7ffffffe
cmp esi, eax
cmovae esi, eax
lea eax, [esi + esi]
cmp esi, 0x7ff
jae 0x40bfa7
add eax, 2
push eax
call fcn.0041dc99
add esp, 4
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov ebx, dword [esp + 0x18]
lea ecx, [ebx + ebx]
add ecx, 2
push ecx
push dword [esp + 0x2c]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, ebx
add esp, 0xc
mov ebx, dword [esp + 0x1c]
jmp 0x40bdf4
movups xmm0, xmmword [eax]
movups xmmword [edx], xmm0
mov esi, 7
mov eax, dword [esp + 0x14]
add eax, edi
add eax, 0x18
mov dword [eax], ecx
mov dword [eax + 4], esi
mov eax, dword [esp + 0xc]
mov edi, eax
cmp dword [esp + 8], eax
je 0x40be71
mov dword [esp + 0xc], eax
xor eax, eax
xor edi, edi
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 8]
add ecx, eax
add ecx, 0x20
mov edx, dword [ecx - 0x20]
mov esi, dword [ecx - 0x1c]
mov dword [ebx + eax + 4], esi
mov dword [ebx + eax], edx
mov dword [ebx + eax + 0x18], edi
mov dword [ebx + eax + 0x1c], edi
movsd xmm0, qword [ecx - 8]
movsd qword [ebx + eax + 0x18], xmm0
movups xmm0, xmmword [ecx - 0x18]
movups xmmword [ebx + eax + 8], xmm0
mov dword [ecx - 8], edi
mov dword [ecx - 4], 7
mov word [ecx - 0x18], 0
add eax, 0x20
cmp ecx, dword [esp + 0xc]
jne 0x40be1a
mov edi, dword [esp + 8]
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x1c]
test edi, edi
mov esi, dword [esp + 0x14]
je 0x40bf1d
cmp edi, eax
je 0x40bf0b
mov ecx, dword [edi + 0x1c]
cmp ecx, 8
jb 0x40beac
mov eax, dword [edi + 8]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40bec9
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0xc]
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 7
mov word [edi + 8], 0
add edi, 0x20
cmp eax, edi
jne 0x40be85
jmp 0x40bee9
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov esi, dword [esp + 0x14]
jmp 0x40be9e
cmp ebx, 0x1000
jb 0x40bf0f
mov ecx, dword [esp + 8]
mov eax, dword [ecx - 4]
sub ecx, eax
add ecx, 0xfffffffc
cmp ecx, 0x20
jae 0x40ce7d
add ebx, 0x23
jmp 0x40bf13
xor ebx, ebx
jmp 0x40bf13
mov eax, dword [esp + 8]
push ebx
push eax
call fcn.0041dcce
add esp, 8
mov ebx, dword [esp + 0x10]
shl ebx, 5
add ebx, esi
mov ecx, dword [esp + 0x2c]
add ecx, esi
mov dword [esp + 0xc], ecx
mov edi, esi
mov ecx, dword [esp + 0x47c]
cmp ecx, 8
jb 0x40bf61
mov eax, dword [esp + 0x468]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40bff8
push edx
push eax
call fcn.0041dcce
add esp, 8
lea eax, [esp + 0x40]
push eax
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40b9b6
jmp 0x40c017
add eax, 0x25
cmp esi, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40bc83
add eax, 0x25
cmp esi, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40bdc3
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov edi, dword [esp + 8]
mov ebx, dword [esp + 0x10]
jmp 0x40bbfb
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40bf57
mov esi, ebx
sub esi, edi
mov ecx, edi
mov edi, esi
sar edi, 5
mov dword [esp + 8], ecx
mov edx, ebx
push edi
call fcn.0041c540
add esp, 4
cmp edi, 0xb
jb 0x40c230
add ebx, 0xffffffe8
add esi, 0xffffffe0
lea edi, [esp + 0x460]
xor eax, eax
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], eax
cmp dword [ebx + 0x14], 7
mov eax, ebx
jbe 0x40c061
mov eax, dword [ebx]
mov dword [esp + 0x10], ebx
mov ebx, dword [ebx + 0x10]
cmp ebx, 8
jb 0x40c0d4
mov dword [esp + 0x14], eax
mov edi, ebx
or edi, 7
mov eax, 0x7ffffffe
cmp edi, eax
cmovae edi, eax
lea eax, [edi + edi]
cmp edi, 0x7ff
jae 0x40c1af
add eax, 2
push eax
call fcn.0041dc99
add esp, 4
mov dword [esp + 0x460], eax
lea ecx, [ebx + ebx]
add ecx, 2
push ecx
push dword [esp + 0x18]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0x470], ebx
mov dword [esp + 0x474], edi
mov eax, dword [esp + 0x460]
lea edi, [esp + 0x460]
jmp 0x40c0f3
movups xmm0, xmmword [eax]
movaps xmmword [esp + 0x460], xmm0
mov dword [esp + 0x470], ebx
mov dword [esp + 0x474], 7
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [esp + 0x470]
add edx, 0xfffffffc
mov ecx, edi
push 6
push str..extra
push 4
call fcn.00422560
add esp, 0xc
cmp dword [esp + 0x474], 7
mov eax, edi
mov ebx, dword [esp + 0x10]
jbe 0x40c12e
mov eax, dword [esp + 0x460]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebx + 0x14]
cmp ecx, 8
jb 0x40c15b
mov eax, dword [ebx]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40c1d9
push edx
push eax
call fcn.0041dcce
add esp, 8
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 7
mov word [ebx], 0
mov ecx, dword [esp + 0x474]
cmp ecx, 8
jb 0x40c199
mov eax, dword [esp + 0x460]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40c203
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, esi
sar eax, 5
add ebx, 0xffffffe0
add esi, 0xffffffe0
cmp eax, 0xa
ja 0x40c047
jmp 0x40c22d
add eax, 0x25
cmp edi, 0x7fffffee
mov ecx, 0xffffffff
cmovae eax, ecx
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40c09b
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
lea edi, [esp + 0x460]
mov ebx, dword [esp + 0x10]
jmp 0x40c151
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
lea edi, [esp + 0x460]
mov ebx, dword [esp + 0x10]
jmp 0x40c18f
add ebx, 0x18
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esp + 8]
test edi, edi
je 0x40c2e1
cmp edi, ebx
mov eax, dword [esp + 0xc]
je 0x40c2b4
mov esi, edi
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x40c277
mov eax, dword [esi + 8]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40c294
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0xc]
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], 0
add esi, 0x20
cmp ebx, esi
jne 0x40c250
jmp 0x40c2b4
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov edi, dword [esp + 8]
jmp 0x40c269
sub eax, edi
cmp eax, 0x1000
jb 0x40c2d7
mov ecx, eax
mov eax, dword [edi - 4]
sub edi, eax
add edi, 0xfffffffc
cmp edi, 0x20
jae 0x40ce7d
add ecx, 0x23
mov edi, eax
mov eax, ecx
push eax
push edi
call fcn.0041dcce
add esp, 8
mov ecx, dword [esp + 0x534]
cmp ecx, 8
mov eax, 0xf
jb 0x40c31a
mov eax, dword [esp + 0x520]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40cca0
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov ecx, dword [esp + 0x554]
cmp ecx, 8
jb 0x40c34e
mov eax, dword [esp + 0x540]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x40ccbf
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, 0xf
lea esi, [esp + 0x40]
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
xor ecx, ecx
inc ecx
mov edx, esi
call fcn.0040ce90
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40c38e
mov ecx, dword [esp + 0x40]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cd18
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov esi, dword [esp + 0x454]
cmp esi, 0x10
jb 0x40ad86
mov eax, dword [esp + 0x440]
lea edx, [esi + 1]
cmp edx, 0x1000
jae 0x40cc83
push edx
push eax
jmp 0x40ad7e
lea ecx, [esp + 0x440]
mov word [ecx + eax], 0x5c
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 0x38]
cmp dword [ecx + 0x3c], 0xf
jbe 0x40c3da
mov ecx, dword [ecx + 0x28]
jmp 0x40c3dd
add ecx, 0x28
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x450]
mov edx, dword [esp + 0x454]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x40c682
lea esi, [esp + 0x440]
lea edi, [ecx + eax]
mov dword [esi + 0x10], edi
mov ebx, esi
cmp edx, 0xf
jbe 0x40c416
mov ebx, dword [esp + 0x440]
lea edx, [esp + 0x450]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x454]
mov dword [esp + 0x14], edx
add ecx, ebx
push eax
push dword [esp + 0xc]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
movsd xmm0, qword [esi + 0x10]
movsd qword [esp + 0x50], xmm0
movups xmm0, xmmword [esi]
movaps xmmword [esp + 0x40], xmm0
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [eax], 0xf
mov byte [esi], 0
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov eax, ecx
sub eax, esi
cmp eax, 4
jb 0x40c6bd
lea eax, [esp + 0x40]
lea edx, [esi + 4]
mov dword [eax + 0x10], edx
mov edi, eax
cmp ecx, 0xf
jbe 0x40c49a
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x50]
lea edx, [esp + 0x54]
mov dword [edi + esi], 0x7478742e
mov byte [edi + esi + 4], 0
xor esi, esi
mov dword [esp + 0x530], esi
mov dword [esp + 0x534], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x530], xmm0
movups xmm0, xmmword [eax]
movaps xmmword [esp + 0x520], xmm0
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x40c508
mov ecx, dword [esp + 0x40]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cd69
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0xf
mov byte [esp + 0x40], 0
mov eax, dword [esp + 0x454]
cmp eax, 0x10
jb 0x40c549
mov ecx, dword [esp + 0x440]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cd86
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40c575
mov ecx, dword [esp + 0x508]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cda3
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x520]
mov edx, 0x10
call fcn.00419b20
mov esi, eax
cmp dword [eax + 0x50], 0
setne bl
jne 0x40c6f0
mov eax, dword [esi]
mov eax, dword [eax + 4]
mov edi, esi
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, dword [esp + 0x534]
cmp eax, 0x10
jb 0x40b643
mov ecx, dword [esp + 0x520]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40cdc0
push esi
push ecx
call fcn.0041dcce
add esp, 8
jmp 0x40b643
mov edi, eax
mov ecx, eax
or ecx, 0xf
mov eax, 0x7fffffff
cmp ecx, eax
cmovae ecx, eax
mov ebx, ecx
cmp ecx, 0xfff
jae 0x40cae1
lea eax, [ebx + 1]
push eax
call fcn.0041dc99
add esp, 4
mov dword [esp + 0x440], eax
lea ecx, [edi + 1]
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, edi
add esp, 0xc
jmp 0x40b519
sub esp, 0x10
mov al, byte [esp + 0x48]
mov byte [esp + 4], al
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp], ebx
lea ecx, [esp + 0x450]
call fcn.00403930
jmp 0x40b7e3
sub esp, 0x10
mov al, byte [esp + 0x48]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0x450]
call fcn.00403930
jmp 0x40c3c8
sub esp, 0x10
mov cl, byte [esp + 0x48]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 8], ecx
mov dword [esp], eax
lea ecx, [esp + 0x450]
call fcn.00403930
mov esi, eax
add eax, 0x10
mov dword [esp + 0x10], eax
lea eax, [esi + 0x14]
mov dword [esp + 0x14], eax
jmp 0x40c440
sub esp, 0x10
mov al, byte [esp + 0x48]
mov byte [esp + 4], al
mov eax, 4
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str..txt
lea ecx, [esp + 0x50]
call fcn.00403930
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x40c4ae
mov eax, 0xf
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], 7
mov dword [esp + 0x508], 0x73617243
mov dword [esp + 0x50b], 0x44496873
mov byte [esp + 0x50f], 0
lea ecx, [esp + 0x30]
lea edi, [esp + 0x40]
mov edx, edi
lea eax, [esp + 0x508]
push eax
call fcn.00421b60
add esp, 4
mov eax, dword [edi]
lea ecx, [eax + 0x28]
mov dword [esp + 8], ecx
cmp dword [eax + 0x3c], 0x10
jb 0x40c758
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov dword [esp + 8], eax
lea eax, [esp + 0x440]
mov ecx, 0xf
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], 7
mov dword [eax], 0x73617243
mov dword [eax + 3], 0x44496873
mov byte [eax + 7], 0
lea edi, [esp + 0x40]
mov ecx, 0x4304f4
mov edx, edi
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40c7a0
mov eax, dword [eax]
push dword [esp + 8]
push eax
push 0x400
lea eax, [esp + 0x4c]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x454]
cmp eax, 0x10
jb 0x40c7e3
mov ecx, dword [esp + 0x440]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cddd
push edi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40c80f
mov ecx, dword [esp + 0x508]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40cdfa
push edi
push ecx
call fcn.0041dcce
add esp, 8
lea eax, [esp + 0x40]
push eax
push esi
call fcn.00406e10
add esp, 8
push 0x42c8f8
push eax
call fcn.00406e10
add esp, 8
mov eax, 0xf
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], 7
mov dword [esp + 0x508], 0x77656956
mov dword [esp + 0x50b], 0x4c525577
mov byte [esp + 0x50f], 0
lea edi, [esp + 0x30]
lea edx, [esp + 0x440]
mov ecx, edi
lea eax, [esp + 0x508]
push eax
call fcn.00420bf0
add esp, 4
mov eax, dword [edi]
mov dword [esp + 8], eax
lea eax, [esp + 0x440]
mov edi, dword [eax]
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40c8b8
mov ecx, dword [esp + 0x508]
lea edx, [eax + 1]
cmp edx, 0x1000
jae 0x40ce13
push edx
push ecx
call fcn.0041dcce
add esp, 8
cmp edi, dword [esp + 8]
je 0x40ca2b
mov eax, 0xf
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], 7
mov dword [esp + 0x508], 0x77656956
mov dword [esp + 0x50b], 0x4c525577
mov byte [esp + 0x50f], 0
lea ecx, [esp + 0x30]
lea edi, [esp + 0x440]
mov edx, edi
lea eax, [esp + 0x508]
push eax
call fcn.00421b60
add esp, 4
mov eax, dword [edi]
lea ecx, [eax + 0x28]
mov dword [esp + 8], ecx
cmp dword [eax + 0x3c], 0x10
jb 0x40c92d
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov eax, 0xf
mov dword [esp + 0x454], eax
mov dword [esp + 0x450], 0xf
mov dword [esp + 0x440], 0x73617243
mov dword [esp + 0x444], 0x74654468
mov dword [esp + 0x448], 0x736c6961
mov dword [esp + 0x44b], 0x4c525573
mov byte [esp + 0x44f], 0
lea edi, [esp + 0x38]
mov ecx, 0x4304f4
mov edx, edi
lea eax, [esp + 0x440]
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40c9a0
mov eax, dword [eax]
push dword [esp + 8]
push eax
push 0x400
lea eax, [esp + 0x4c]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x454]
cmp eax, 0x10
jb 0x40c9e3
mov ecx, dword [esp + 0x440]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ce4b
push edi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40ca0f
mov ecx, dword [esp + 0x508]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ce64
push edi
push ecx
call fcn.0041dcce
add esp, 8
lea eax, [esp + 0x40]
push eax
push esi
call fcn.00406e10
add esp, 8
push 0x42c8f8
push eax
call fcn.00406e10
add esp, 8
mov ecx, esi
call fcn.00420d70
mov eax, dword [esi]
mov eax, dword [eax + 4]
mov edi, esi
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, 0xf
mov dword [esp + 0x51c], eax
mov dword [esp + 0x518], 7
mov dword [esp + 0x508], 0x73617243
mov dword [esp + 0x50b], 0x44496873
mov byte [esp + 0x50f], 0
lea ecx, [esp + 0x30]
lea esi, [esp + 0x440]
mov edx, esi
lea eax, [esp + 0x508]
push eax
call fcn.00421b60
add esp, 4
mov edx, dword [esi]
add edx, 0x28
xor ecx, ecx
call fcn.0040ce90
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x40c5b1
mov ecx, dword [esp + 0x508]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40ce32
push esi
push ecx
call fcn.0041dcce
add esp, 8
jmp 0x40c5b1
lea eax, [ebx + 0x24]
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40c611
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ad7c
mov eax, dword [esp + 0x48c]
mov eax, dword [eax]
lea ecx, [esp + 0x460]
add ecx, 0x3c
jmp 0x40b280
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x23
mov ecx, edx
jmp 0x40b29a
sub esp, 8
mov cl, byte [esp + 0x448]
mov byte [esp + 4], cl
mov dword [esp], eax
lea esi, [esp + 0x510]
mov ecx, esi
call fcn.0041fdc0
mov dword [esi + 0x10], 0
mov edi, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x40aeec
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
mov dword [esp + 0xc], edx
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edx, eax
mov ecx, dword [esp + 0xc]
jmp 0x40ae4a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40b213
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b0b4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b0fe
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b12a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b1a1
sub esp, 8
mov cl, byte [esp + 0x528]
mov byte [esp + 4], cl
mov dword [esp], eax
lea esi, [esp + 0x48]
mov ecx, esi
call fcn.0041fdc0
mov dword [esi + 0x10], 0
mov edi, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x40b475
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40b436
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x40ce7d
add esi, 0x24
mov edx, esi
mov eax, ecx
jmp 0x40c3b4
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40c30b
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x40ce7d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40c33f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b621
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40b669
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40c384
sub esp, 8
mov al, byte [esp + 0x40]
mov byte [esp + 4], al
mov dword [esp], ecx
lea ebx, [esp + 0x448]
mov ecx, ebx
call fcn.0041fdc0
mov dword [ebx + 0x10], 0
mov eax, ebx
mov ebx, dword [esp + 0x550]
mov eax, dword [eax + 0x14]
jmp 0x40b7a8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40c4fe
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40c53f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40c56b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40c5d7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40c7d9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40c805
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
mov dword [esp + 0x10], edx
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edx, eax
mov ecx, dword [esp + 0x10]
jmp 0x40c8ae
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40cad2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40c9d9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40ce7d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40ca05
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3