Function at 0x40d370
Capabilities:
Check os version
Contain obfuscated stackstrings
Create thread
Delete file
Get common file path
Get file attributes
Persist via run registry key
Query environment variable
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
mov eax, 0x13b0
call fcn.0041ed80
mov ebx, edx
mov dword [esp + 4], ecx
mov eax, dword [0x43000c]
xor eax, ebp
mov dword [esp + 0x13a8], eax
mov dword [0x430560], edx
lea esi, [esp + 0x1a0]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov dword [esp + 8], str.MOZ_CRASHREPORTER_AUTO_SUBMIT
mov dword [esp], 0x1d
mov ecx, esi
call fcn.00401250
lea ecx, [esp + 0x188]
mov edx, esi
call fcn.00416540
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40d40f
mov ecx, dword [esp + 0x1a0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x41527d
push edi
push ecx
call fcn.0041dcce
add esp, 8
xor eax, eax
cmp dword [esp + 0x198], eax
setne byte [0x430564]
mov edi, 0xf
mov dword [esp + 0x1384], edi
mov dword [esp + 0x1380], eax
mov byte [esp + 0x1370], 0
push 0x104
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x40d4be
push 0x2e
push esi
call sub.VCRUNTIME140.dll_wcsrchr
add esp, 8
test eax, eax
je 0x40d4be
push str..ini
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
add esp, 8
mov dword [esp + 0x13a4], 7
mov dword [esp + 0x13a0], 0
mov word [esp + 0x1390], 0
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov edi, eax
cmp eax, 7
ja 0x40d4d3
lea eax, [esp + 0x1390]
mov dword [eax + 0x10], edi
mov ecx, edi
add ecx, edi
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esp + edi*2 + 0x1390], 0
jmp 0x40d4fb
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
jb 0x40d607
jmp 0x40d5e7
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esp + 0x139c]
call fcn.0041fa30
lea ecx, [esp + 0x90]
lea edx, [esp + 0x1390]
call fcn.00417440
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
jb 0x40d53a
mov ecx, dword [esp + 0x1370]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x415315
push edi
push ecx
call fcn.0041dcce
add esp, 8
movsd xmm0, qword [esp + 0xa0]
movsd qword [esp + 0x1380], xmm0
movups xmm0, xmmword [esp + 0x90]
movaps xmmword [esp + 0x1370], xmm0
mov ecx, dword [esp + 0x13a4]
cmp ecx, 8
jb 0x40d58b
mov eax, dword [esp + 0x1390]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x4152f6
push edx
push eax
call fcn.0041dcce
add esp, 8
mov dword [esp + 8], ebx
lea ecx, [esp + 0x1370]
xor edx, edx
inc edx
call fcn.0040a940
mov ebx, eax
mov eax, dword [eax + 0x5c]
mov dword [esp + 0xc], eax
test eax, eax
jne 0x40d6b0
mov eax, dword [ebx]
mov eax, dword [eax + 4]
mov edi, ebx
add edi, eax
mov eax, dword [ebx + eax]
mov ebx, dword [eax]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push 1
call ebx
cmp dword [esp + 0xc], 0
jne 0x40d6ee
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
mov edi, 0xf
jb 0x40d607
mov ecx, dword [esp + 0x1370]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4152d4
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x1a0]
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov dword [esp + 8], str.Couldnt_read_configuration.
mov dword [esp], 0x1c
mov ecx, esi
call fcn.00401250
mov ecx, esi
call fcn.0040a160
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40d66e
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4152b7
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x19c]
cmp eax, 0x10
jb 0x40d69a
mov ecx, dword [esp + 0x188]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41529a
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov ecx, dword [esp + 0x13a8]
xor ecx, ebp
call fcn.0041e640
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, ebx
mov edx, 0x4304f4
push 1
call fcn.0040a4c0
add esp, 4
lea ecx, [ebx + 0x10]
call fcn.004208e0
test eax, eax
jne 0x40d5af
mov eax, dword [ebx]
mov eax, dword [eax + 4]
lea ecx, [ebx + eax]
mov eax, dword [ebx + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
jmp 0x40d5af
push str.MOZ_CRASHREPORTER_STRINGS_OVERRIDE
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
test eax, eax
mov ebx, 0xf
je 0x40d91a
mov edi, eax
cmp byte [eax], 0
je 0x40d91a
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, edi
mov edi, eax
cmp eax, 0xf
mov dword [esp + 0xc], ecx
jbe 0x40d767
sub esp, 0xc
mov al, byte [esp + 0x1ac]
mov byte [esp + 4], al
mov dword [esp + 8], ecx
mov dword [esp], edi
lea ecx, [esp + 0x9c]
call fcn.00401250
jmp 0x40d788
mov dword [esp + 0xa0], edi
push edi
push ecx
lea eax, [esp + 0x98]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esp + edi + 0x90], 0
lea edx, [esp + 0x90]
mov ecx, esi
call fcn.004178b0
cmp dword [esp + 0x1b4], 7
jbe 0x40d7a7
mov esi, dword [esp + 0x1a0]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov ecx, dword [esp + 0x1b4]
cmp ecx, 8
mov edi, dword [esp + 0xc]
jb 0x40d7e3
mov eax, dword [esp + 0x1a0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x415402
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40d813
mov ecx, dword [esp + 0x90]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x415426
push edi
push ecx
call fcn.0041dcce
add esp, 8
mov edi, dword [esp + 0xc]
cmp esi, 0xffffffff
je 0x40d91a
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b0], 0
mov byte [esp + 0x1a0], 0
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov esi, eax
cmp eax, 0xf
jbe 0x40d869
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
lea ecx, [esp + 0x1ac]
call fcn.00401250
jmp 0x40d886
lea eax, [esp + 0x1a0]
mov dword [eax + 0x10], esi
push esi
push edi
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esp + esi + 0x1a0], 0
lea ecx, [esp + 0x1a0]
xor edx, edx
inc edx
call fcn.0040a940
mov esi, eax
cmp dword [eax + 0x5c], 0
je 0x40d8d2
mov ecx, esi
mov edx, 0x4304f4
push 1
call fcn.0040a4c0
add esp, 4
lea ecx, [esi + 0x10]
call fcn.004208e0
test eax, eax
jne 0x40d8d2
mov eax, dword [esi]
mov eax, dword [eax + 4]
lea ecx, [esi + eax]
mov eax, dword [esi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [esi]
mov eax, dword [eax + 4]
mov edi, esi
add edi, eax
mov eax, dword [esi + eax]
mov esi, dword [eax]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
push 1
call esi
mov eax, dword [esp + 0x1b4]
cmp eax, 0x10
jb 0x40d91a
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415448
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
mov edi, dword [esp + 8]
jb 0x40d94a
mov ecx, dword [esp + 0x1370]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4153c2
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x1a0]
mov ecx, esi
mov edx, 0x42a514
call fcn.00421830
mov ecx, esi
mov edx, 0x42a518
call fcn.00421830
mov ecx, esi
mov edx, 0x42a51c
call fcn.00421830
mov ecx, esi
mov edx, 0x42a520
call fcn.00421830
mov ecx, esi
mov edx, 0x42a524
call fcn.00421830
mov ecx, esi
mov edx, 0x42a528
call fcn.00421830
mov ecx, esi
mov edx, 0x42a52c
call fcn.00421830
mov ecx, esi
mov edx, 0x42a530
call fcn.00421830
mov dword [esi], 8
mov dword [esi + 4], 0x20
push esi
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push str.Msftedit.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp dword [esp + 4], 1
jle 0x40da36
mov ebx, dword [edi + 4]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [0x430580]
cmp eax, edi
jae 0x40da0f
sub esp, 0xc
mov al, byte [esp + 0x1ac]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, 0x43056c
call fcn.00401250
jmp 0x40da36
mov ecx, 0x43056c
cmp eax, 0xf
jbe 0x40da1f
mov ecx, dword [0x43056c]
mov dword [0x43057c], edi
push edi
push ebx
push ecx
mov ebx, ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + edi], 0
mov edi, dword [0x43057c]
test edi, edi
jne 0x40daaa
cmp byte [0x430564], 0
jne 0x40d66e
mov ecx, esi
mov edx, str.CrashReporterDefault
call fcn.004177d0
cmp dword [esp + 0x1b4], 7
jbe 0x40da6a
mov esi, dword [esp + 0x1a0]
push 0x10
push 0x42cb20
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x1b4]
cmp ecx, 8
jb 0x40d66e
mov eax, dword [esp + 0x1a0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x4153e3
push edx
push eax
jmp 0x40d666
mov ebx, 0x43056c
cmp dword [0x430580], 0xf
jbe 0x40dabe
mov ebx, dword [0x43056c]
cmp edi, 0xf
ja 0x40f294
movups xmm0, xmmword [ebx]
movaps xmmword [esp + 0x170], xmm0
mov esi, 0xf
cmp esi, 0xf
jbe 0x40dae5
mov ebx, dword [esp + 0x170]
jmp 0x40daec
lea ebx, [esp + 0x170]
xor eax, eax
mov dword [esp + 0x180], edi
mov dword [esp + 0x184], esi
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], eax
cmp edi, 0xf
ja 0x40f2d5
movups xmm0, xmmword [ebx]
movaps xmmword [esp + 0x1a0], xmm0
mov esi, 0xf
lea ebx, [esp + 0x1b8]
mov dword [ebx - 8], edi
mov dword [ebx - 4], esi
xor eax, eax
lea ecx, [esp + 0x64]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea esi, [esp + 0x1a0]
mov edx, esi
push ebx
call fcn.00422220
add esp, 4
mov eax, dword [esi + 0x14]
cmp eax, 0x10
mov ebx, 0xf
jb 0x40db7d
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415465
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x1a0]
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov dword [esp + 8], str.MOZ_CRASHREPORTER_DUMP_ALL_THREADS
mov dword [esp], 0x22
mov ecx, esi
call fcn.00401250
lea ecx, [esp + 0x158]
mov edx, esi
call fcn.00416540
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40dbeb
mov ecx, dword [esp + 0x1a0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x415487
push edi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [esp + 0x168], 0
je 0x40dc66
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b0], 6
mov dword [esp + 0x1a0], 0x75662d2d
mov word [esp + 0x1a4], 0x6c6c
mov byte [esp + 0x1a6], 0
lea ecx, [esp + 0x64]
lea edx, [esp + 0x90]
push esi
push dword [ecx]
call fcn.00422280
add esp, 8
mov eax, dword [esp + 0x1b4]
cmp eax, 0x10
jb 0x40dc66
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41556d
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea edi, [esp + 0x90]
mov dword [edi + 0x14], ebx
mov dword [edi + 0x10], 0
mov byte [edi], 0
sub esp, 0xc
lea esi, [esp + 0x1ac]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.minidump_analyzer
mov dword [esp], 0x11
mov ecx, edi
call fcn.00401250
mov ecx, esi
mov edx, edi
call fcn.00416d20
lea edx, [esp + 0x64]
mov ecx, esi
push 1
call fcn.00416690
add esp, 4
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40dce1
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4154a9
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0xf
mov byte [esp + 0x1a0], 0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40dd2b
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4154cb
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x1a0]
mov ecx, esi
mov edx, 0x42a4fc
call fcn.00416fa0
mov eax, dword [0x430598]
cmp eax, 0x10
jb 0x40dd6e
mov ecx, dword [0x430584]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x4154ed
push edi
push ecx
call fcn.0041dcce
add esp, 8
lea edi, [esp + 0x90]
movsd xmm0, qword [esp + 0x1b0]
movsd qword [0x430594], xmm0
movups xmm0, xmmword [esp + 0x1a0]
movups xmmword [0x430584], xmm0
cmp dword [0x430594], 0
jne 0x40ddcf
lea esi, [esp + 0x1a0]
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x9c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorBadArguments
mov dword [esp], 0x11
jmp 0x40de60
mov ecx, esi
mov edx, 0x430584
call fcn.004178b0
cmp dword [esp + 0x1b4], 7
jbe 0x40ddec
mov esi, dword [esp + 0x1a0]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov ecx, dword [esp + 0x1b4]
cmp ecx, 8
jb 0x40de24
mov eax, dword [esp + 0x1a0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x415549
push edx
push eax
call fcn.0041dcce
add esp, 8
cmp esi, 0xffffffff
jne 0x40deb2
lea esi, [esp + 0x1a0]
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x9c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorExtraFileExists
mov dword [esp], 0x14
mov ecx, esi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, edi
push esi
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
add ecx, 0x28
call fcn.0040a160
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x40f5b0
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41552c
push esi
push ecx
call fcn.0041dcce
add esp, 8
jmp 0x40f5b0
lea esi, [esp + 0x1a0]
mov ecx, esi
mov edx, str..memory.json.gz
call fcn.00416fa0
mov eax, dword [0x4305b0]
cmp eax, 0x10
jb 0x40def2
mov ebx, edi
mov ecx, dword [0x43059c]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x4155ae
push edi
push ecx
call fcn.0041dcce
add esp, 8
mov edi, ebx
movsd xmm0, qword [esp + 0x1b0]
movsd qword [0x4305ac], xmm0
movups xmm0, xmmword [esp + 0x1a0]
movups xmmword [0x43059c], xmm0
mov ecx, esi
mov edx, 0x43059c
call fcn.004178b0
cmp dword [esp + 0x1b4], 7
jbe 0x40df2f
mov esi, dword [esp + 0x1a0]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov ecx, dword [esp + 0x1b4]
cmp ecx, 8
jb 0x40df67
mov eax, dword [esp + 0x1a0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x41558f
push edx
push eax
call fcn.0041dcce
add esp, 8
cmp esi, 0xffffffff
jne 0x40df8c
mov eax, 0x43059c
cmp dword [0x4305b0], 0xf
jbe 0x40df7f
mov eax, dword [0x43059c]
mov dword [0x4305ac], 0
mov byte [eax], 0
mov dword [esp + 4], edi
lea ebx, [esp + 0x48]
mov ecx, ebx
push 0
call fcn.00407050
xor edx, edx
inc edx
mov ecx, 0x430584
mov dword [esp + 0xc], edx
call fcn.0040a940
mov edi, eax
cmp dword [eax + 0x5c], 0
jne 0x40dfba
xor ebx, ebx
jmp 0x40dfe9
lea esi, [esp + 0x1a0]
mov ecx, esi
call fcn.0041f1d0
push 0
push ebx
push edi
push esi
call fcn.00426820
add esp, 0x10
mov ebx, eax
mov dword [esi], 0x42a680
lea ecx, [esp + 0x1a8]
call fcn.004010b0
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov esi, edi
add esi, eax
mov eax, dword [edi + eax]
mov edi, dword [eax]
mov ecx, edi
call dword [section..00cfg]
mov ecx, esi
push 1
call edi
test bl, bl
je 0x40e1e7
lea ecx, [esp + 0x48]
push 0x42be49
call fcn.00427540
lea esi, [esp + 0x1a0]
test al, al
je 0x40e21a
lea edi, [esp + 0x48]
mov ecx, edi
push 0x4305b8
push 0x42be49
push esi
call fcn.00427330
mov ecx, esi
lea eax, [esp + 0x90]
push eax
call fcn.00404660
mov ecx, esi
call fcn.004010b0
lea ebx, [esp + 0x1390]
mov ecx, ebx
push 0x42c223
call fcn.00401600
mov ecx, edi
push ebx
push 0x42b318
push esi
call fcn.00427330
mov ecx, esi
lea edi, [esp + 0x1370]
push edi
call fcn.00404660
mov ecx, esi
call fcn.004010b0
cmp dword [esp + 0x1384], 0xf
jbe 0x40e09e
mov edi, dword [esp + 0x1370]
lea ebx, [esp + 0x1350]
mov eax, 0xf
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
sub esp, 0xc
lea esi, [esp + 0x1ac]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterVendorTitle
mov dword [esp], 0x18
mov ecx, ebx
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push ebx
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40e0fa
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1364]
cmp eax, 0x10
jb 0x40e13d
mov ecx, dword [esp + 0x1350]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415612
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1364], eax
mov dword [esp + 0x1360], 0
mov byte [esp + 0x1350], 0
sub esp, 0xc
lea esi, [esp + 0x133c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterTitle
mov dword [esp], 0x12
lea edi, [esp + 0x135c]
mov ecx, edi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov dword [esp + 0x10], esi
mov edi, dword [esi]
lea ebx, [edi + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov esi, eax
mov eax, dword [edi + 0x3c]
cmp eax, esi
jae 0x40e274
sub esp, 0xc
mov al, byte [esp + 0x133c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], esi
mov ecx, ebx
call fcn.00401250
jmp 0x40e296
lea esi, [esp + 0x1a0]
mov eax, 0xf
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x9c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorExtraFileRead
jmp 0x40e244
mov eax, 0xf
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x9c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorNoProductName
mov dword [esp], 0x12
mov ecx, esi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, edi
push esi
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
add ecx, 0x28
call fcn.0040a160
mov eax, dword [esi + 0x14]
jmp 0x40f582
cmp eax, 0x10
jae 0x4155e8
mov dword [edi + 0x38], esi
push esi
lea eax, [esp + 0x1a4]
push eax
push ebx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebx + esi], 0
mov eax, dword [esp + 0x1364]
cmp eax, 0x10
jb 0x40e2c2
mov ecx, dword [esp + 0x1350]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41562f
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
xor edi, edi
mov dword [esp + 0x1340], edi
mov byte [esp + 0x1330], 0
sub esp, 0xc
lea esi, [esp + 0x131c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterProductErrorText2
mov dword [esp], 0x1e
lea ebx, [esp + 0x133c]
mov ecx, ebx
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push ebx
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
mov dword [esp + 0x1360], edi
mov dword [esp + 0x1364], edi
mov esi, dword [ebx + 0x38]
cmp dword [ebx + 0x3c], 0xf
jbe 0x40e33a
mov ebx, dword [ebx + 0x28]
jmp 0x40e33d
add ebx, 0x28
cmp esi, 0xf
ja 0x40ffa0
movups xmm0, xmmword [ebx]
movaps xmmword [esp + 0x1350], xmm0
mov edi, 0xf
mov dword [esp + 0x1360], esi
mov dword [esp + 0x1364], edi
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e39e
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41564c
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov esi, dword [esp + 0x1360]
mov edi, dword [esp + 0x1364]
cmp edi, 0xf
lea edi, [esp + 0x1350]
jbe 0x40e3b1
mov edi, dword [esp + 0x1350]
mov ecx, edi
mov edx, esi
push 0
call fcn.00428dd0
add esp, 4
cmp eax, 0xffffffff
je 0x40e3d9
add eax, 2
mov ecx, edi
mov edx, esi
push eax
call fcn.00428dd0
add esp, 4
cmp eax, 0xffffffff
jne 0x40e442
lea esi, [esp + 0x1330]
mov eax, 0xf
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x131c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterErrorText
mov dword [esp], 0x16
mov ecx, esi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, edi
push esi
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
add ecx, 0x28
lea eax, [esp + 0x1350]
push eax
call fcn.00420b70
mov eax, dword [esi + 0x14]
jmp 0x40e5d3
cmp dword [esp + 0xa4], 0xf
jbe 0x40e457
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0
mov byte [esp + 0x1330], 0
sub esp, 0xc
lea esi, [esp + 0x131c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterProductErrorText2
mov dword [esp], 0x1e
lea edi, [esp + 0x133c]
mov ecx, edi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40e4c0
mov eax, dword [eax]
push 0x42b276
push dword [esp + 8]
push eax
push 0x1000
lea eax, [esp + 0x1b0]
push eax
call fcn.00420b20
add esp, 0x14
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e50b
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4158fb
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0
mov byte [esp + 0x1330], 0
sub esp, 0xc
lea esi, [esp + 0x131c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterErrorText
mov dword [esp], 0x16
lea edi, [esp + 0x133c]
mov ecx, edi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40e5aa
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40e5cc
cmp eax, 0x10
jae 0x41586d
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e5f8
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415669
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [esp + 0xa4], 0xf
jbe 0x40e60b
mov edi, dword [esp + 0x90]
jmp 0x40e612
lea edi, [esp + 0x90]
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0
mov byte [esp + 0x1330], 0
sub esp, 0xc
lea esi, [esp + 0x131c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterDescriptionText2
mov dword [esp], 0x1d
lea ebx, [esp + 0x133c]
mov ecx, ebx
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push ebx
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40e67b
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e6be
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415686
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0
mov byte [esp + 0x1330], 0
sub esp, 0xc
lea esi, [esp + 0x131c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.CrashReporterDescriptionText2
mov dword [esp], 0x1d
lea edi, [esp + 0x133c]
mov ecx, edi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40e75d
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40e77f
cmp eax, 0x10
jae 0x4155ef
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e7ab
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4156a3
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [esp + 0x1384], 0xf
jbe 0x40e7be
mov edi, dword [esp + 0x1370]
jmp 0x40e7c5
lea edi, [esp + 0x1370]
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0xf
mov dword [esp + 0x1330], 0x63656843
mov dword [esp + 0x1334], 0x6e65536b
mov dword [esp + 0x1338], 0x70655264
mov dword [esp + 0x133b], 0x74726f70
mov byte [esp + 0x133f], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40e83b
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e87e
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4156c0
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0xf
mov dword [esp + 0x1330], 0x63656843
mov dword [esp + 0x1334], 0x6e65536b
mov dword [esp + 0x1338], 0x70655264
mov dword [esp + 0x133b], 0x74726f70
mov byte [esp + 0x133f], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40e92a
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40e94c
cmp eax, 0x10
jae 0x4155f6
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40e978
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4156dd
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [esp + 0xa4], 0xf
jbe 0x40e98b
mov edi, dword [esp + 0x90]
jmp 0x40e992
lea edi, [esp + 0x90]
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 7
mov dword [esp + 0x1330], 0x74736552
mov dword [esp + 0x1333], 0x74726174
mov byte [esp + 0x1337], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40e9f2
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40ea35
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4156fa
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 7
mov dword [esp + 0x1330], 0x74736552
mov dword [esp + 0x1333], 0x74726174
mov byte [esp + 0x1337], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40eacb
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40eaed
cmp eax, 0x10
jae 0x4155fd
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40eb19
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415717
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [esp + 0xa4], 0xf
jbe 0x40eb2c
mov edi, dword [esp + 0x90]
jmp 0x40eb33
lea edi, [esp + 0x90]
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 5
mov dword [esp + 0x1330], 0x74697551
mov word [esp + 0x1334], 0x32
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40eb8a
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40ebcd
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415734
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 5
mov dword [esp + 0x1330], 0x74697551
mov word [esp + 0x1334], 0x32
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40ec5a
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40ec7c
cmp eax, 0x10
jae 0x415604
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40eca8
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415751
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov edi, dword [esp + 0x90]
mov ebx, dword [esp + 0xa4]
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0xe
mov dword [esp + 0x1330], 0x6f727245
mov dword [esp + 0x1334], 0x646e4572
mov dword [esp + 0x1338], 0x694c664f
mov word [esp + 0x133c], 0x6566
mov byte [esp + 0x133e], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
lea eax, [ecx + 0x28]
cmp dword [ecx + 0x3c], 0x10
jb 0x40ed2b
mov eax, dword [eax]
cmp ebx, 0xf
lea ecx, [esp + 0x90]
cmova ecx, edi
push ecx
push eax
push 0x1000
lea eax, [esp + 0x1ac]
push eax
call fcn.00420b20
add esp, 0x10
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40ed7b
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41576e
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0xf
mov dword [esp + 0x1344], eax
mov dword [esp + 0x1340], 0xe
mov dword [esp + 0x1330], 0x6f727245
mov dword [esp + 0x1334], 0x646e4572
mov dword [esp + 0x1338], 0x694c664f
mov word [esp + 0x133c], 0x6566
mov byte [esp + 0x133e], 0
lea esi, [esp + 0x1310]
mov ecx, 0x4304f4
mov edx, esi
lea eax, [esp + 0x1330]
push eax
call fcn.00421b60
add esp, 4
mov dword [esp + 0x18], esi
mov ebx, dword [esi]
lea esi, [ebx + 0x28]
lea eax, [esp + 0x1a0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x3c]
cmp eax, edi
jae 0x40ee2a
sub esp, 0xc
mov al, byte [esp + 0x131c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, esi
call fcn.00401250
jmp 0x40ee4c
cmp eax, 0x10
jae 0x41560b
mov dword [ebx + 0x38], edi
push edi
lea eax, [esp + 0x1a4]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1344]
cmp eax, 0x10
jb 0x40ee78
mov ecx, dword [esp + 0x1330]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41578b
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1364]
cmp eax, 0x10
jb 0x40eea4
mov ecx, dword [esp + 0x1350]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4157a8
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
jb 0x40eed0
mov ecx, dword [esp + 0x1370]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4157c5
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x1390]
mov dword [esp + 8], ecx
call fcn.004010b0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40ef0c
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4157e2
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x48]
push 0x42c34c
call fcn.00427540
test al, al
je 0x40f251
lea edi, [esp + 0x90]
mov eax, 0xf
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], 0
mov byte [edi], 0
sub esp, 0xc
lea esi, [esp + 0x1ac]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.MOZ_CRASHREPORTER_DATA_DIRECTORY
mov dword [esp], 0x20
mov ecx, edi
call fcn.00401250
mov ecx, esi
mov dword [esp + 4], edi
mov edx, edi
call fcn.00416540
mov eax, dword [0x43052c]
cmp eax, 0x10
jb 0x40ef97
mov ecx, dword [0x430518]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415833
push esi
push ecx
call fcn.0041dcce
add esp, 8
movsd xmm0, qword [esp + 0x1b0]
movsd qword [0x430528], xmm0
movups xmm0, xmmword [esp + 0x1a0]
movups xmmword [0x430518], xmm0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40efe3
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415850
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [0x430528], 0
jne 0x40f453
mov ebx, 0x4305b8
lea esi, [esp + 0x48]
mov ecx, esi
push ebx
push 0x42be49
lea edi, [esp + 0x1a8]
push edi
call fcn.00427330
lea eax, [esp + 0x1370]
mov ecx, edi
push eax
call fcn.00404660
mov ecx, edi
call fcn.004010b0
mov ecx, esi
push ebx
push 0x42b318
push edi
call fcn.00427330
lea eax, [esp + 0x1350]
mov ecx, edi
push eax
call fcn.00404660
mov ecx, edi
call fcn.004010b0
push 0x208
push 0
push edi
call sub.VCRUNTIME140.dll_memset
sub esp, 8
mov dword [esp + 0x10], edi
movaps xmm0, xmmword [0x42a1d0]
movups xmmword [esp], xmm0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x40f110
mov dword [esp + 0x1330], 0x207
lea eax, [esp + 0x90]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40f316
lea eax, [esp + 0x1330]
lea ecx, [esp + 0x1390]
push eax
lea eax, [esp + 0x1a4]
push eax
push ecx
push 0
push str.AppData
push dword [esp + 0xa4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov esi, eax
push dword [esp + 0x90]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x40f316
cmp dword [esp + 0x1390], 1
jne 0x40f316
mov eax, dword [esp + 0x1330]
test eax, eax
je 0x40f316
and eax, 1
jne 0x40f316
cmp dword [esp + 0x1360], 0
je 0x40f17a
lea esi, [esp + 0x90]
lea edx, [esp + 0x1350]
mov ecx, esi
call fcn.004178b0
cmp dword [esi + 0x14], 7
jbe 0x40f13c
mov esi, dword [esp + 0x90]
push esi
lea eax, [esp + 0x1a4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esp + 0xa4]
cmp ecx, 8
jb 0x40f17a
mov eax, dword [esp + 0x90]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x415b34
push edx
push eax
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x90]
lea edx, [esp + 0x1370]
mov ecx, esi
call fcn.004178b0
cmp dword [esi + 0x14], 7
jbe 0x40f19c
mov esi, dword [esp + 0x90]
push esi
lea eax, [esp + 0x1a4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esp + 0xa4]
cmp ecx, 8
jb 0x40f1da
mov eax, dword [esp + 0x90]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x415952
push edx
push eax
call fcn.0041dcce
add esp, 8
push str.Crash_Reports
lea esi, [esp + 0x1a4]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov eax, 7
mov dword [esp + 0x13a4], eax
mov dword [esp + 0x13a0], 0
mov word [esp + 0x1390], 0
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov esi, eax
cmp eax, 7
ja 0x40f33b
lea eax, [esp + 0x1390]
mov dword [eax + 0x10], esi
mov ecx, esi
add ecx, esi
push ecx
lea ecx, [esp + 0x1a4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esp + esi*2 + 0x1390], 0
jmp 0x40f363
mov eax, 0xf
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], 0
mov byte [esp + 0x1a0], 0
sub esp, 0xc
lea esi, [esp + 0x9c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorNoServerURL
mov dword [esp], 0x10
jmp 0x40f553
mov esi, edi
or esi, 0xf
mov eax, 0x7fffffff
cmp esi, eax
cmovae esi, eax
cmp esi, 0xfff
jae 0x413953
lea eax, [esi + 1]
push eax
call fcn.0041dc99
add esp, 4
mov dword [esp + 0x170], eax
lea ecx, [edi + 1]
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x40dad7
mov esi, edi
or esi, 0xf
mov eax, 0x7fffffff
cmp esi, eax
cmovae esi, eax
cmp esi, 0xfff
jae 0x41396f
lea eax, [esi + 1]
push eax
call fcn.0041dc99
add esp, 4
mov dword [esp + 0x1a0], eax
lea ecx, [edi + 1]
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x40db23
mov eax, 0x430518
cmp dword [0x43052c], 0xf
jbe 0x40f329
mov eax, dword [0x430518]
mov dword [0x430528], 0
mov byte [eax], 0
jmp 0x40f3ee
sub esp, 0xc
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
lea eax, [esp + 0x1ac]
mov dword [esp + 8], eax
mov dword [esp], esi
lea ecx, [esp + 0x139c]
call fcn.0041fa30
lea ecx, [esp + 0x90]
lea edx, [esp + 0x1390]
call fcn.00417440
mov eax, dword [0x43052c]
cmp eax, 0x10
jb 0x40f39f
mov ecx, dword [0x430518]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415b17
push esi
push ecx
call fcn.0041dcce
add esp, 8
movsd xmm0, qword [esp + 0xa0]
movsd qword [0x430528], xmm0
movups xmm0, xmmword [esp + 0x90]
movups xmmword [0x430518], xmm0
mov ecx, dword [esp + 0x13a4]
cmp ecx, 8
jb 0x40f3ee
mov eax, dword [esp + 0x1390]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x415971
push edx
push eax
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1364]
cmp eax, 0x10
jb 0x40f41a
mov ecx, dword [esp + 0x1350]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415918
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1384]
cmp eax, 0x10
jb 0x40f446
mov ecx, dword [esp + 0x1370]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415935
push esi
push ecx
call fcn.0041dcce
add esp, 8
cmp dword [0x430528], 0
je 0x40f515
mov ecx, 0x430518
call fcn.00417140
test al, al
je 0x40f515
mov eax, 0xf
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov ebx, dword [0x430528]
lea eax, [ebx + 1]
mov ecx, 0xf
cmp eax, 0x10
jae 0x4157ff
mov eax, 0x430518
cmp dword [0x43052c], 0xf
jbe 0x40f4ae
mov eax, dword [0x430518]
cmp ecx, ebx
jb 0x40faba
mov dword [esp + 0xa0], ebx
cmp ecx, 0xf
jbe 0x40f4cd
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
push ebx
push eax
mov esi, dword [esp + 0xc]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx], 0
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
cmp ecx, eax
je 0x40fae4
lea edx, [eax + 1]
mov dword [esp + 0xa0], edx
cmp ecx, 0xf
jbe 0x40f601
mov ecx, dword [esp + 0x90]
jmp 0x40f608
mov eax, 0xf
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], 0
mov byte [esp + 0x1a0], 0
sub esp, 0xc
lea esi, [esp + 0x9c]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorNoSettingsPath
mov dword [esp], 0x13
lea edi, [esp + 0x1ac]
mov ecx, edi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, esi
push edi
call fcn.00421b60
add esp, 4
mov ecx, dword [esi]
add ecx, 0x28
call fcn.0040a160
mov eax, dword [esp + 0x1b4]
cmp eax, 0x10
jb 0x40f5a7
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4155cb
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x48]
call fcn.004010b0
mov eax, dword [esp + 0x16c]
cmp eax, 0x10
jb 0x40f5dc
mov ecx, dword [esp + 0x158]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x41550f
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x64]
call fcn.00402ef0
mov eax, dword [esp + 0x184]
cmp eax, 0x10
jb 0x40d66e
mov ecx, dword [esp + 0x170]
jmp 0x40d655
lea ecx, [esp + 0x90]
mov word [ecx + eax], 0x5c
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov eax, ecx
sub eax, esi
cmp eax, 0xa
jb 0x40fb15
lea eax, [esp + 0x90]
lea edx, [esi + 0xa]
mov dword [eax + 0x10], edx
mov edi, eax
cmp ecx, 0xf
jbe 0x40f644
mov edi, dword [esp + 0x90]
lea ecx, [esp + 0xa0]
lea edx, [esp + 0xa4]
mov word [edi + esi + 8], 0x676f
mov dword [edi + esi + 4], 0x6c2e7469
mov dword [edi + esi], 0x6d627573
mov byte [edi + esi + 0xa], 0
xor esi, esi
mov dword [esp + 0x1b0], esi
mov dword [esp + 0x1b4], esi
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x1b0], xmm0
movups xmm0, xmmword [eax]
movaps xmmword [esp + 0x1a0], xmm0
mov dword [ecx], esi
mov dword [edx], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40f6cd
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415990
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x1a0]
mov edx, 8
call fcn.00419b20
mov ecx, dword [0x430568]
mov dword [0x430568], eax
test ecx, ecx
je 0x40f708
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea esi, [ecx + eax]
mov eax, dword [ecx + eax]
mov edi, dword [eax]
mov ecx, edi
call dword [section..00cfg]
mov ecx, esi
push 1
call edi
mov eax, dword [esp + 0x1b4]
cmp eax, 0x10
jb 0x40f734
mov ecx, dword [esp + 0x1a0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4159ad
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x90]
mov eax, 0xf
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x1ac]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.MOZ_CRASHREPORTER_EVENTS_DIRECTORY
mov dword [esp], 0x22
mov ecx, esi
call fcn.00401250
mov ecx, edi
mov edx, esi
call fcn.00416540
mov eax, dword [0x430544]
cmp eax, 0x10
jb 0x40f7a5
mov ecx, dword [0x430530]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4159ca
push esi
push ecx
call fcn.0041dcce
add esp, 8
movsd xmm0, qword [esp + 0x1b0]
movsd qword [0x430540], xmm0
movups xmm0, xmmword [esp + 0x1a0]
movups xmmword [0x430530], xmm0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40f7f1
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4159e7
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea edi, [esp + 0x90]
mov eax, 0xf
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], 0
mov byte [edi], 0
sub esp, 0xc
lea esi, [esp + 0x1ac]
mov al, byte [esi]
mov byte [esp + 4], al
mov dword [esp + 8], str.MOZ_CRASHREPORTER_PING_DIRECTORY
mov dword [esp], 0x20
mov ecx, edi
call fcn.00401250
mov dword [esp + 0x28], esi
mov ecx, esi
mov dword [esp + 0x14], edi
mov edx, edi
call fcn.00416540
mov eax, dword [0x43055c]
cmp eax, 0x10
jb 0x40f86a
mov ecx, dword [0x430548]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415a04
push esi
push ecx
call fcn.0041dcce
add esp, 8
movsd xmm0, qword [esp + 0x1b0]
movsd qword [0x430558], xmm0
movups xmm0, xmmword [esp + 0x1a0]
movups xmmword [0x430548], xmm0
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x40f8b6
mov ecx, dword [esp + 0x90]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415a21
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, 0x42c8fb
push 0x17
push eax
push eax
push eax
push 0
call sub.nss3.dll_NSS_Initialize
add esp, 0x14
test eax, eax
jne 0x40f8e4
push 4
call sub.nss3.dll_HASH_Create
add esp, 4
mov dword [esp + 4], eax
test eax, eax
jne 0x40fa8c
mov eax, 0xf
mov dword [esp + 0x154], eax
mov dword [esp + 0x150], 0
mov byte [esp + 0x140], 0
xor eax, eax
mov dword [esp + 0x138], eax
mov ecx, 0xf
mov dword [esp + 0x13c], ecx
mov byte [esp + 0x128], 0
lea esi, [esp + 0x70]
mov ecx, esi
push eax
call fcn.00407050
lea ecx, [esp + 0x48]
push esi
push 0x42a545
push 0x42a534
call fcn.00427390
test al, al
je 0x4117f2
lea eax, [esp + 0x1260]
mov ecx, esi
push eax
call fcn.00404660
lea ecx, [esp + 0x48]
push esi
push 0x42a558
push 0x42a546
call fcn.00427390
test al, al
je 0x4117c6
lea eax, [esp + 0x1248]
mov ecx, esi
mov dword [esp + 4], eax
push eax
call fcn.00404660
lea ecx, [esp + 0x48]
push esi
push 0x42a56b
push 0x42a559
call fcn.00427390
test al, al
je 0x41179a
lea eax, [esp + 0x1230]
lea ecx, [esp + 0x70]
push eax
call fcn.00404660
lea esi, [esp + 0x48]
mov ecx, esi
push 0x42c412
push 0x42c40b
call fcn.004016f0
lea edx, [esp + 0x1218]
mov ecx, eax
mov dword [esp + 0x20], edx
push edx
call fcn.00404660
mov ecx, esi
push 0x42b7a9
push str.ReleaseChannel
call fcn.004016f0
lea edx, [esp + 0x1200]
mov ecx, eax
mov dword [esp + 0x1c], edx
push edx
call fcn.00404660
mov ecx, esi
push 0x42be54
push 0x42be49
call fcn.004016f0
lea edx, [esp + 0x11e8]
mov ecx, eax
mov dword [esp + 0x30], edx
push edx
call fcn.00404660
mov ecx, esi
push 0x42b687
push 0x42b680
call fcn.004016f0
lea edx, [esp + 0x11d0]
mov ecx, eax
mov dword [esp + 0x24], edx
push edx
call fcn.00404660
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jns 0x40fe6f
mov eax, 0xf
mov dword [esp + 0x11cc], eax
mov dword [esp + 0x11c8], 0
mov byte [esp + 0x11b8], 0
jmp 0x40fffe
push dword [esp + 4]
call sub.nss3.dll_HASH_Begin
add esp, 4
mov ecx, 0x43056c
mov edx, 0x20
call fcn.0040a940
mov edi, eax
cmp dword [eax + 0x5c], 0
jne 0x40fb4e
mov bl, 1
jmp 0x40fbbd
sub esp, 0x10
mov cl, byte [esp + 0x13a0]
mov byte [esp + 4], cl
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp], ebx
lea ecx, [esp + 0xa0]
call fcn.00403930
jmp 0x40f4e0
sub esp, 0x10
mov al, byte [esp + 0x13a0]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0xa0]
call fcn.00403930
jmp 0x40f60e
sub esp, 0x10
mov al, byte [esp + 0x13a0]
mov byte [esp + 4], al
mov eax, 0xa
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str.submit.log
lea ecx, [esp + 0xa0]
call fcn.00403930
lea ecx, [eax + 0x10]
lea edx, [eax + 0x14]
jmp 0x40f66d
lea esi, [esp + 0x1a0]
mov ecx, edi
push 0
push 0x1000
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::bad_void_const]
mov ebx, eax
test al, al
jne 0x40fb99
push dword [edi + 8]
push esi
push dword [esp + 0xc]
call sub.nss3.dll_HASH_Update
add esp, 0xc
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
je 0x40fb55
lea ecx, [edi + 0x10]
call fcn.004208e0
test eax, eax
jne 0x40fbbd
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov esi, edi
add esi, eax
mov eax, dword [edi + eax]
mov edi, dword [eax]
mov ecx, edi
call dword [section..00cfg]
mov ecx, esi
push 1
call edi
lea esi, [esp + 0x1370]
mov dword [esi], 0
lea eax, [esp + 0x90]
push 0x20
push esi
push eax
mov edi, dword [esp + 0x10]
push edi
call sub.nss3.dll_HASH_End
add esp, 0x10
mov esi, dword [esi]
push edi
call sub.nss3.dll_HASH_Destroy
add esp, 4
test bl, bl
jne 0x40f8e4
cmp esi, 0x20
jne 0x40f8e4
lea esi, [esp + 0x1f0]
mov dword [esi - 0x50], 0x42a5c0
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::ios_base::constructor_void_]
mov dword [esi], 0x42a10c
mov eax, dword [esi - 0x50]
mov eax, dword [eax + 4]
mov ecx, 0x42a5bc
mov dword [esp + eax + 0x1a0], ecx
mov eax, dword [esi - 0x50]
mov eax, dword [eax + 4]
lea ecx, [eax - 0x50]
mov dword [esp + eax + 0x19c], ecx
lea ebx, [esp + 0x1a4]
mov eax, dword [ebx - 4]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x1a0], 0x42a5f0
mov eax, dword [ebx - 4]
mov eax, dword [eax + 4]
lea ecx, [eax - 8]
mov dword [esp + eax + 0x19c], ecx
mov eax, dword [ebx - 4]
lea edi, [esp + 0x1a0]
mov ecx, dword [eax + 4]
add ecx, edi
xor esi, esi
push esi
push ebx
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::init_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov ecx, 0x42a5bc
mov dword [esp + eax + 0x1a0], ecx
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [eax - 0x50]
mov dword [esp + eax + 0x19c], ecx
mov ecx, ebx
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [edi + 4], 0x42a580
mov dword [edi + 0x3c], esi
mov dword [edi + 0x40], 4
push 0
push 2
lea eax, [esp + 0x1398]
push eax
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__
add esp, 0xc
mov eax, dword [esp + 0x139c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1390]
mov ebx, dword [esp + 0x1398]
mov eax, dword [esp + 0x1a0]
mov edi, dword [eax + 4]
lea eax, [esp + 0x1a0]
add edi, eax
call dword [section..00cfg]
push dword [esp + 4]
push ebx
push edi
call ecx
add esp, 0xc
mov eax, dword [esp + 0x1a0]
mov eax, dword [eax + 4]
mov byte [esp + eax + 0x1e0], 0x30
mov eax, dword [esp + 0x1a0]
mov eax, dword [eax + 4]
mov ecx, dword [esp + eax + 0x1b4]
mov edx, 0xfffff1ff
and ecx, edx
or ecx, 0x800
mov dword [esp + eax + 0x1b4], ecx
movzx eax, byte [esp + esi + 0x90]
lea ecx, [esp + 0x1a0]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
inc esi
cmp esi, 0x20
jne 0x40fcd2
lea eax, [esp + 0x140]
lea ecx, [esp + 0x1a4]
push eax
call fcn.00403c90
mov eax, dword [esp + 0x1a0]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x1a0], 0x42a5bc
mov eax, dword [esp + 0x1a0]
mov eax, dword [eax + 4]
lea ecx, [eax - 0x50]
mov dword [esp + eax + 0x19c], ecx
mov dword [esp + 0x1a4], 0x42a580
test byte [esp + 0x1e0], 1
je 0x40fe0b
mov eax, dword [esp + 0x1c4]
mov eax, dword [eax]
test eax, eax
je 0x415cb8
lea ecx, [esp + 0x1f0]
add ecx, 0xffffffe4
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [esp + 0x1b0]
mov ecx, dword [ecx]
sub eax, ecx
cmp eax, 0x1000
jae 0x415cd0
push eax
push ecx
call fcn.0041dcce
add esp, 8
lea esi, [esp + 0x1f0]
lea ecx, [esi - 0x4c]
mov eax, dword [esp + 0x1b0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [esp + 0x1c0]
mov dword [eax], edx
mov eax, dword [esp + 0x1d0]
mov dword [eax], edx
mov eax, dword [esp + 0x1b4]
mov dword [eax], edx
mov eax, dword [esp + 0x1c4]
mov dword [eax], edx
mov eax, dword [esp + 0x1d4]
mov dword [eax], edx
mov dword [esp + 0x1dc], edx
and byte [esp + 0x1e0], 0xfe
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
jmp 0x40f903
movzx eax, word [esp + 0x96]
and eax, 0xfff
or eax, 0x4000
mov word [esp + 0x96], ax
movzx ecx, byte [esp + 0x98]
and ecx, 0x3f
or ecx, 0x80
mov byte [esp + 0x98], cl
xor edx, edx
lea edi, [esp + 0x1a0]
mov dword [edi + 0x21], edx
mov dword [edi + 0x1d], edx
xorps xmm0, xmm0
movaps xmmword [edi + 0x10], xmm0
movaps xmmword [edi], xmm0
movzx edx, byte [esp + 0x9f]
mov dword [esp + 0x34], edx
movzx esi, byte [esp + 0x9e]
movzx edx, byte [esp + 0x9d]
mov dword [esp + 0x44], edx
movzx ebx, byte [esp + 0x9c]
movzx edx, byte [esp + 0x9b]
mov dword [esp + 0x40], edx
movzx edx, byte [esp + 0x9a]
mov dword [esp + 0x3c], edx
movzx edx, byte [esp + 0x99]
mov dword [esp + 0x38], edx
movzx edx, word [esp + 0x94]
mov dword [esp + 0x2c], edx
push dword [esp + 0x34]
push esi
push dword [esp + 0x4c]
push ebx
push dword [esp + 0x50]
push dword [esp + 0x50]
push dword [esp + 0x50]
push ecx
push eax
push dword [esp + 0x50]
push dword [esp + 0xb8]
push str._08x__04x__04x__02x_02x__02x_02x_02x_02x_02x_02x
push 0x25
mov ebx, edi
push edi
call fcn.004024d0
add esp, 0x38
mov ecx, 0xf
mov dword [esp + 0x11cc], ecx
xor ecx, ecx
mov dword [esp + 0x11c8], ecx
mov byte [esp + 0x11b8], 0
cmp eax, 0x24
jne 0x40fffe
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov esi, eax
cmp eax, 0xf
jbe 0x40ffe1
sub esp, 0xc
mov al, byte [esp + 0x139c]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], esi
lea ecx, [esp + 0x11c4]
call fcn.00401250
jmp 0x40fffe
mov edi, esi
or edi, 0xf
mov eax, 0x7fffffff
cmp edi, eax
cmovae edi, eax
cmp edi, 0xfff
jae 0x415261
lea eax, [edi + 1]
push eax
call fcn.0041dc99
add esp, 4
mov dword [esp + 0x1350], eax
lea ecx, [esi + 1]
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x40e356
lea eax, [esp + 0x11b8]
mov dword [eax + 0x10], esi
push esi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esp + esi + 0x11b8], 0
mov eax, 0xf
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], 1
mov word [esp + 0x1a0], 0x34
mov dword [esp + 0x128c], eax
mov dword [esp + 0x1288], 0
mov byte [esp + 0x1278], 0
mov ebx, dword [esp + 0x1258]
lea ecx, [ebx + 0x12]
mov eax, 0xf
cmp ecx, 0x10
jae 0x415c3b
cmp dword [esp + 0x125c], 0xf
jbe 0x410066
mov ecx, dword [esp + 0x1248]
mov dword [esp + 4], ecx
cmp eax, ebx
jb 0x41102e
mov dword [esp + 0x1288], ebx
cmp eax, 0xf
jbe 0x410083
mov esi, dword [esp + 0x1278]
jmp 0x41008a
lea esi, [esp + 0x1278]
push ebx
push dword [esp + 8]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx], 0
mov eax, dword [esp + 0x1288]
mov ecx, dword [esp + 0x128c]
mov edx, ecx
sub edx, eax
cmp edx, 0x12
jb 0x41105c
lea edx, [eax + 0x12]
mov dword [esp + 0x1288], edx
cmp ecx, 0xf
jbe 0x4100cf
mov ecx, dword [esp + 0x1278]
jmp 0x4100d6
lea ecx, [esp + 0x1278]
movups xmm0, xmmword [str._submit_telemetry_]
movups xmmword [ecx + eax], xmm0
mov word [ecx + eax + 0x10], 0x2f79
mov byte [ecx + eax + 0x12], 0
mov eax, dword [esp + 0x11c8]
cmp dword [esp + 0x11cc], 0xf
jbe 0x410107
sub esp, 0x10
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov dword [esp], ebx
lea ecx, [esp + 0x1288]
call fcn.00403930
jmp 0x41009c
sub esp, 0x10
mov al, byte [esp + 0x9c]
mov byte [esp + 4], al
mov eax, 0x12
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], str._submit_telemetry_
lea ecx, [esp + 0x1288]
call fcn.00403930
jmp 0x4100ed
mov eax, dword [esp + 0x125c]
cmp eax, 0x10
jb 0x4117c6
mov ecx, dword [esp + 0x1248]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415d08
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x1274]
cmp eax, 0x10
jb 0x4117f2
mov ecx, dword [esp + 0x1260]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415b53
push esi
push ecx
call fcn.0041dcce
add esp, 8
lea ecx, [esp + 0x70]
call fcn.004010b0
cmp dword [0x430540], 0
je 0x411b22
lea ecx, [esp + 0x1370]
mov dword [esp + 4], ecx
call fcn.0041a7c0
mov eax, 0xf
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], 0
mov byte [esp + 0x1a0], 0
mov ebx, dword [0x430540]
lea eax, [ebx + 1]
mov ecx, 0xf
cmp eax, 0x10
jae 0x415874
mov eax, 0x430530
cmp dword [0x430544], 0xf
jbe 0x411861
mov eax, dword [0x430530]
cmp ecx, ebx
jb 0x41231b
mov dword [esp + 0x1b0], ebx
cmp ecx, 0xf
jbe 0x411880
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0x28], ecx
push ebx
push eax
mov esi, dword [esp + 0x30]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx], 0
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1b4]
cmp ecx, eax
je 0x412345
lea edx, [eax + 1]
mov dword [esp + 0x1b0], edx
cmp ecx, 0xf
jbe 0x4118c1
mov ecx, dword [esp + 0x1a0]
jmp 0x4118c8
lea ecx, [esp + 0x1a0]
mov word [ecx + eax], 0x5c
mov eax, dword [esp + 0x1380]
cmp dword [esp + 0x1384], 0xf
jbe 0x4118ea
mov ecx, dword [esp + 0x1370]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1b4]
mov esi, edx
sub esi, ecx
cmp esi, eax
jb 0x412376
lea edi, [esp + 0x1a0]
lea ebx, [ecx + eax]
mov dword [edi + 0x10], ebx
mov esi, edi
cmp edx, 0xf
jbe 0x41191f
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x1b0]
mov dword [esp + 0x28], edx
lea edx, [esp + 0x1b4]
mov dword [esp + 0x14], edx
add ecx, esi
push eax
push dword [esp + 8]
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx], 0
xor ebx, ebx
mov dword [esp + 0x1360], ebx
mov dword [esp + 0x1364], ebx
movsd xmm0, qword [edi + 0x10]
movsd qword [esp + 0x1360], xmm0
movups xmm0, xmmword [edi]
movaps xmmword [esp + 0x1350], xmm0
mov eax, dword [esp + 0x28]
mov dword [eax], ebx
mov eax, dword [esp + 0x14]
mov dword [eax], 0xf
mov byte [edi], 0
mov eax, dword [esp + 0x1b4]
cmp eax, 0x10
jb 0x4119b1
lea esi, [esp + 0x1a0]
mov ecx, esi
mov edx, 0x43056c
call fcn.004178b0
cmp dword [esi + 0x14], 7
jbe 0x411b42
mov esi, dword [esp + 0x1a0]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov ecx, dword [esp + 0x1b4]
cmp ecx, 8
jb 0x411b7a
mov eax, dword [esp + 0x1a0]
lea edx, [ecx + ecx]
add edx, 2
cmp edx, 0x1000
jae 0x4158dc
push edx
push eax
call fcn.0041dcce
add esp, 8
cmp esi, 0xffffffff
jne 0x411bf0
lea esi, [esp + 0x1a0]
mov eax, 0xf
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], 0
mov byte [esi], 0
sub esp, 0xc
lea edi, [esp + 0x9c]
mov al, byte [edi]
mov byte [esp + 4], al
mov dword [esp + 8], str.ErrorDumpFileExists
mov dword [esp], 0x13
mov ecx, esi
call fcn.00401250
mov ecx, 0x4304f4
mov edx, edi
push esi
call fcn.00421b60
add esp, 4
mov ecx, dword [edi]
add ecx, 0x28
call fcn.0040a160
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x414f55
mov ecx, dword [esp + 0x1a0]
jmp 0x414f3c
mov eax, 0xf
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], 0
mov byte [esp + 0x1a0], 0
mov edi, dword [0x430528]
lea eax, [edi + 1]
mov ecx, 0xf
cmp eax, 0x10
jae 0x4158a8
mov eax, 0x430518
cmp dword [0x43052c], 0xf
jbe 0x411c39
mov eax, dword [0x430518]
cmp ecx, edi
jb 0x4123b4
mov dword [esp + 0x1b0], edi
cmp ecx, 0xf
jbe 0x411fe9
mov esi, dword [esp + 0x1a0]
jmp 0x411ff0
lea esi, [esp + 0x1a0]
push edi
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1b4]
cmp ecx, eax
je 0x4123de
lea edx, [eax + 1]
mov dword [esp + 0x1b0], edx
cmp ecx, 0xf
jbe 0x41202d
mov ecx, dword [esp + 0x1a0]
jmp 0x412034
lea ecx, [esp + 0x1a0]
mov word [ecx + eax], 0x5c
mov esi, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1b4]
mov eax, ecx
sub eax, esi
cmp eax, 7
jb 0x41240f
sub esp, 0x10
mov cl, byte [esp + 0xa0]
mov byte [esp + 4], cl
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp], ebx
lea ecx, [esp + 0x1b0]
call fcn.00403930
jmp 0x411893
sub esp, 0x10
mov al, byte [esp + 0xa0]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0x1b0]
call fcn.00403930
jmp 0x4118ce
sub esp, 0x10
mov cl, byte [esp + 0xa0]
mov byte [esp + 4], cl
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 8], ecx
mov dword [esp], eax
lea ecx, [esp + 0x1b0]
call fcn.00403930
mov edi, eax
add eax, 0x10
mov dword [esp + 0x28], eax
lea eax, [edi + 0x14]
mov dword [esp + 0x14], eax
jmp 0x411949
sub esp, 0x10
mov cl, byte [esp + 0xa0]
mov byte [esp + 4], cl
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [esp + 0x1b0]
call fcn.00403930
jmp 0x411fff
sub esp, 0x10
mov al, byte [esp + 0xa0]
mov byte [esp + 4], al
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp], eax
mov dword [esp + 8], 0x42c24e
lea ecx, [esp + 0x1b0]
call fcn.00403930
jmp 0x41203a
lea eax, [esi + 0x24]
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40f2bb
lea eax, [esi + 0x24]
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40f2fc
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415a3e
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x13c]
cmp eax, 0x10
jb 0x414f81
mov ecx, dword [esp + 0x128]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x415a5b
push esi
push ecx
call fcn.0041dcce
add esp, 8
mov eax, dword [esp + 0x154]
cmp eax, 0x10
jb 0x40f5a7
mov ecx, dword [esp + 0x140]
jmp 0x40f58e
lea eax, [edi + 0x24]
push eax
call fcn.0041dc99
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40ffc7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40d405
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40d690
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40d664
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov edi, 0xf
jmp 0x40d5fd
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40d581
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40d530
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov edi, dword [esp + 8]
jmp 0x40d940
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40daa3
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov ebx, 0xf
jmp 0x40d7d9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40d805
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40d910
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40db73
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40dbe1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40dcd7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40dd21
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40dd5d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f5d2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40dea3
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
mov ebx, 0xf
jmp 0x40de1a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
mov ebx, 0xf
jmp 0x40dc5c
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40df5d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x40dee6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f59d
mov ebx, dword [ebx]
jmp 0x40e27d
mov esi, dword [esi]
jmp 0x40e766
mov esi, dword [esi]
jmp 0x40e933
mov esi, dword [esi]
jmp 0x40ead4
mov esi, dword [esi]
jmp 0x40ec63
mov esi, dword [esi]
jmp 0x40ee33
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e133
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e2b8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e386
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e5ee
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e6b4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e7a1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e874
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e96e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ea2b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40eb0f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ebc3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ec9e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ed71
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ee6e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ee9a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40eec6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ef02
sub esp, 8
mov cl, byte [esp + 0x1398]
mov byte [esp + 4], cl
mov dword [esp], eax
lea esi, [esp + 0x98]
mov ecx, esi
call fcn.0041fdc0
mov dword [esi + 0x10], 0
mov ebx, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x40f49b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40ef8d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40efd9
mov esi, dword [esi]
jmp 0x40e5b3
sub esp, 8
mov cl, byte [esp + 0x98]
mov byte [esp + 4], cl
mov dword [esp], eax
lea edi, [esp + 0x1a8]
mov ecx, edi
call fcn.0041fdc0
mov dword [edi + 0x10], 0
mov ebx, dword [0x430540]
mov ecx, dword [edi + 0x14]
jmp 0x41184e
sub esp, 8
mov cl, byte [esp + 0x98]
mov byte [esp + 4], cl
mov dword [esp], eax
lea esi, [esp + 0x1a8]
mov ecx, esi
call fcn.0041fdc0
mov dword [esi + 0x10], 0
mov edi, dword [0x430528]
mov ecx, dword [esi + 0x14]
jmp 0x411c26
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x411b70
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40e501
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f410
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f43c
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40f1d0
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40f3e4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f6c3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f72a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f79b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f7e7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f860
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f8ac
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x414f4b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x414f77
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x40f395
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x416532
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40f170
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x4117e8
sub esp, 8
mov al, byte [esp + 0x94]
mov byte [esp + 4], al
mov dword [esp], ecx
lea esi, [esp + 0x1280]
mov ecx, esi
call fcn.0041fdc0
mov dword [esi + 0x10], 0
mov ebx, dword [esp + 0x1258]
mov eax, dword [esi + 0x14]
jmp 0x410051
mov eax, dword [esp + 0x1c0]
mov eax, dword [eax]
lea ecx, [esp + 0x1f0]
add ecx, 0xffffffe0
jmp 0x40fde7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x23
mov ecx, edx
jmp 0x40fe01
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x416532
add eax, 0x24
mov esi, eax
mov ecx, edx
jmp 0x4117bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3