Function at 0x407828
Capabilities:
Contain obfuscated stackstrings
Print debug messages
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x804
push edi
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x4f4], 1
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0x390], 1
mov byte [ebp - 0x180], 0x25
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x510], 1
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 0x520], 0x69
mov dword [ebp - 0x324], 1
mov byte [ebp - 0x340], 0x22
mov byte [ebp - 0x2f8], 0x64
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x508], 1
mov byte [ebp - 0x17f], 0x73
mov dword [ebp - 0x380], 1
mov byte [ebp - 0x2f7], 0x61
mov byte [ebp - 0x2f6], 0x74
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x73c], eax
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x63c]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x37c], 0
mov byte [ebp - 0x2f5], 0x61
mov dword [ebp - 0x2e8], 1
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
mov dword [ebp - 0x30c], ecx
mov byte [ebp - 0x17e], 0x5c
mov dword [ebp - 0x630], 1
mov byte [ebp - 0x2f4], 0x2e
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x744], eax
mov edx, dword [ebp - 0x744]
mov dword [ebp - 0x308], edx
mov dword [ebp - 0x2bc], 0
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x2e4], 1
mov byte [ebp - 0x51f], 0x6e
mov byte [ebp - 0x17d], 0x54
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x378], 1
mov edx, dword [ebp - 0x3a4]
sub edx, dword [ebp - 0x38c]
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x358]
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x360]
mov byte [ecx], 0
mov dword [ebp - 0x2e0], 1
mov byte [ebp - 0x2f3], 0x63
mov byte [ebp - 0x2f2], 0x61
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x750], eax
mov edx, dword [ebp - 0x750]
mov dword [ebp - 0x388], edx
mov dword [ebp - 0x118], 0
mov byte [ebp - 0x17c], 0x4d
mov eax, dword [ebp - 0x308]
mov byte [eax], 0
mov ecx, dword [ebp - 0x388]
mov dword [ebp - 0x3a0], ecx
mov edx, dword [ebp - 0x3a4]
add edx, dword [ebp - 0x2a0]
mov dword [ebp - 0x2b4], edx
mov byte [ebp - 0x17b], 0x50
mov dword [ebp - 0x354], 0
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x158], 1
mov byte [ebp - 0x2f1], 0x62
mov dword [ebp - 0x128], 1
mov byte [ebp - 0x33f], 0x25
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x4c8], 0
mov byte [ebp - 0x51e], 0x73
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x34c], 0
cmp dword [ebp - 0x2a4], 0
jne 0x407b9d
mov ecx, dword [ebp - 0x388]
mov dl, byte [ebp - 0x368]
mov byte [ecx], dl
mov eax, dword [ebp - 0x388]
mov cl, byte [ebp - 0x2bc]
mov byte [eax + 1], cl
mov byte [ebp - 0x2f0], 0
mov edx, dword [ebp - 0x12c]
mov byte [edx], 0
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x314], 0
mov byte [ebp - 0x33e], 0x73
mov ecx, dword [ebp - 0x158]
sub ecx, dword [ebp - 0x138]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2c4], 0
jmp 0x407c11
mov edx, dword [ebp - 0x2c4]
add edx, 1
mov dword [ebp - 0x2c4], edx
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x2e8]
jge 0x407c2e
mov ecx, dword [ebp - 0x308]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407c02
mov edx, dword [ebp - 0x374]
sub edx, 3
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x2b4]
sub eax, 3
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x3a0]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x4f0], 0
jmp 0x407c74
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
mov eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x510]
jge 0x407c91
mov ecx, dword [ebp - 0x12c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407c65
mov byte [ebp - 0x17a], 0x5f
mov dword [ebp - 0x310], 0
mov edx, dword [ebp - 0x4e4]
add edx, dword [ebp - 0x320]
mov dword [ebp - 0x4fc], edx
mov byte [ebp - 0x150], 0x65
mov byte [ebp - 0x51d], 0x74
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x348], 0
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x4f0], ecx
mov dword [ebp - 0x4f8], 0
mov byte [ebp - 0x33d], 0x5c
mov byte [ebp - 0x51c], 0x61
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x75c], eax
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x398], edx
mov byte [ebp - 0x51b], 0x6c
mov eax, dword [ebp - 0x4e8]
mov byte [eax], 0
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x2ac], ecx
mov edx, dword [ebp - 0x30c]
mov byte [edx], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x62c]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x350]
mov byte [edx], 0
mov eax, dword [ebp - 0x510]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x768]
mov dword [ebp - 0x154], ecx
mov byte [ebp - 0x298], 0x65
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x76c], eax
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x4ec], edx
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x158]
add ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2c0], 0
jmp 0x407e18
mov edx, dword [ebp - 0x2c0]
add edx, 1
mov dword [ebp - 0x2c0], edx
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0x2ec]
jge 0x407e35
mov ecx, dword [ebp - 0x30c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407e09
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x2d0], 0
mov byte [ebp - 0x33c], 0x69
cmp dword [ebp - 0x34c], 0
jne 0x407e76
mov edx, dword [ebp - 0x62c]
mov al, byte [ebp - 0x508]
mov byte [edx], al
mov ecx, dword [ebp - 0x62c]
mov dl, byte [ebp - 0x36c]
mov byte [ecx + 1], dl
mov byte [ebp - 0x179], 0x25
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x51a], 0x6c
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], 0
mov edx, dword [ebp - 0x31c]
mov byte [edx], 0
mov dword [ebp - 0x514], 0
jmp 0x407ebd
mov eax, dword [ebp - 0x514]
add eax, 1
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0x630]
jge 0x407eda
mov edx, dword [ebp - 0x31c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407eae
mov eax, dword [ebp - 0x2d4]
sub eax, 3
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x2dc]
add ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x4f0], 0
jmp 0x407f16
mov edx, dword [ebp - 0x4f0]
add edx, 1
mov dword [ebp - 0x4f0], edx
mov eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x510]
jge 0x407f50
mov ecx, dword [ebp - 0x12c]
add ecx, dword [ebp - 0x4f0]
mov edx, dword [ebp - 0x4f0]
mov eax, dword [ebp - 0x154]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407f07
mov byte [ebp - 0x178], 0x64
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x297], 0x72
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x158]
mov dword [ebp - 0x108], ecx
mov byte [ebp - 0x519], 0x2e
mov byte [ebp - 0x518], 0x62
mov edx, dword [ebp - 0x398]
mov byte [edx], 0
mov dword [ebp - 0x638], 0
jmp 0x407fac
mov eax, dword [ebp - 0x638]
add eax, 1
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x638]
cmp ecx, dword [ebp - 0x324]
jge 0x407fc9
mov edx, dword [ebp - 0x360]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x407f9d
mov byte [ebp - 0x177], 0x25
mov eax, dword [ebp - 0x2ac]
mov byte [eax], 0
mov byte [ebp - 0x14f], 0x72
mov byte [ebp - 0x33b], 0x6e
mov ecx, dword [ebp - 0x2e8]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x774], eax
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x118], edx
mov byte [ebp - 0x33a], 0x73
mov eax, dword [ebp - 0x2ec]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x114], ecx
mov byte [ebp - 0x517], 0x61
mov byte [ebp - 0x4e0], 0x65
mov byte [ebp - 0x339], 0x74
mov dword [ebp - 0x124], 0
mov byte [ebp - 0x4df], 0x72
mov byte [ebp - 0x338], 0x61
mov byte [ebp - 0x516], 0x74
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x130], 0
jmp 0x40808f
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x15c]
jge 0x4080ac
mov ecx, dword [ebp - 0x16c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408080
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x130], edx
mov byte [ebp - 0x296], 0x72
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x4cc]
mov byte [ecx], 0
mov byte [ebp - 0x4de], 0x72
mov dword [ebp - 0x160], 0
jmp 0x4080f6
mov edx, dword [ebp - 0x160]
add edx, 1
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x170]
jge 0x408113
mov ecx, dword [ebp - 0x4cc]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x4080e7
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x514], eax
mov byte [ebp - 0x295], 0
mov byte [ebp - 0x176], 0x64
mov byte [ebp - 0x175], 0
cmp dword [ebp - 0x634], 0
jne 0x408166
mov ecx, dword [ebp - 0x4ec]
mov dl, byte [ebp - 0x390]
mov byte [ecx], dl
mov eax, dword [ebp - 0x4ec]
mov cl, byte [ebp - 0x314]
mov byte [eax + 1], cl
mov edx, dword [ebp - 0x50c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 0x4c4], 0x41
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x160], ecx
mov byte [ebp - 0x337], 0x6c
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x780], eax
mov edx, dword [ebp - 0x780]
mov dword [ebp - 0x39c], edx
mov eax, dword [ebp - 0x170]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x4d4], ecx
mov edx, dword [ebp - 0x318]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [ebp - 0x336], 0x6c
mov byte [ebp - 0x4c3], 0x4c
mov byte [ebp - 0x4c2], 0x4c
mov dword [ebp - 0x164], 0
mov byte [ebp - 0x335], 0x2e
mov byte [ebp - 0x334], 0x62
cmp dword [ebp - 0x39c], 0
jne 0x408239
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [ebp - 0x515], 0
mov dword [ebp - 0x35c], 0
jmp 0x40825b
mov ecx, dword [ebp - 0x35c]
add ecx, 1
mov dword [ebp - 0x35c], ecx
mov edx, dword [ebp - 0x35c]
cmp edx, dword [ebp - 0x378]
jge 0x408278
mov eax, dword [ebp - 0x4e8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40824c
mov byte [ebp - 0x333], 0x61
mov ecx, dword [ebp - 0x378]
mov dword [ebp - 0x35c], ecx
cmp dword [ebp - 0x39c], 0
je 0x4082b1
mov edx, dword [ebp - 0x39c]
mov byte [edx], 0x61
mov eax, dword [ebp - 0x39c]
mov byte [eax + 1], 0x62
mov ecx, dword [ebp - 0x39c]
mov byte [ecx + 2], 0
mov edx, dword [ebp - 0x324]
shl edx, 2
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x37c], eax
mov byte [ebp - 0x14e], 0x72
mov byte [ebp - 0x4dd], 0
mov byte [ebp - 0x332], 0x74
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x2c4], 0
jmp 0x408319
mov ecx, dword [ebp - 0x2c4]
add ecx, 1
mov dword [ebp - 0x2c4], ecx
mov edx, dword [ebp - 0x2c4]
cmp edx, dword [ebp - 0x2e8]
jge 0x408353
mov eax, dword [ebp - 0x308]
add eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x118]
mov cl, byte [edx + ecx*4]
mov byte [eax], cl
mov edx, dword [ebp - 0x308]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40830a
mov byte [ebp - 0x4c1], 0x55
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x628], eax
mov byte [ebp - 0x331], 0x22
mov dword [ebp - 0x4d0], 0
mov ecx, dword [ebp - 0x630]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x78c]
mov dword [ebp - 0x354], edx
mov byte [ebp - 0x330], 0x20
mov byte [ebp - 0x32f], 0x22
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x144], eax
mov byte [ebp - 0x32e], 0x25
mov byte [ebp - 0x32d], 0x73
mov byte [ebp - 0x32c], 0x22
mov dword [ebp - 0x2c0], 0
jmp 0x4083f5
mov ecx, dword [ebp - 0x2c0]
add ecx, 1
mov dword [ebp - 0x2c0], ecx
mov edx, dword [ebp - 0x2c0]
cmp edx, dword [ebp - 0x2ec]
jge 0x40842f
mov eax, dword [ebp - 0x30c]
add eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x114]
mov cl, byte [edx + ecx*4]
mov byte [eax], cl
mov edx, dword [ebp - 0x30c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x4083e6
cmp dword [ebp - 0x39c], 0
je 0x408445
mov eax, dword [ebp - 0x39c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [ebp - 0x4c0], 0x53
mov dword [ebp - 0x514], 0
jmp 0x408467
mov ecx, dword [ebp - 0x514]
add ecx, 1
mov dword [ebp - 0x514], ecx
mov edx, dword [ebp - 0x514]
cmp edx, dword [ebp - 0x630]
jge 0x4084a1
mov eax, dword [ebp - 0x31c]
add eax, dword [ebp - 0x514]
mov ecx, dword [ebp - 0x514]
mov edx, dword [ebp - 0x354]
mov cl, byte [edx + ecx*4]
mov byte [eax], cl
mov edx, dword [ebp - 0x31c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408458
mov byte [ebp - 0x32b], 0
mov byte [ebp - 0x4bf], 0x45
mov eax, dword [ebp - 0x378]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x4f8], ecx
mov byte [ebp - 0x4be], 0x52
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x798], eax
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x384], edx
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x4bd], 0x53
mov ecx, dword [ebp - 0x15c]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7a0], eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x4c8], edx
mov dword [ebp - 0x130], 0
jmp 0x408558
mov eax, dword [ebp - 0x130]
add eax, 1
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [ebp - 0x15c]
jge 0x408592
mov edx, dword [ebp - 0x16c]
add edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x4c8]
mov al, byte [ecx + eax*4]
mov byte [edx], al
mov ecx, dword [ebp - 0x16c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408549
mov dword [ebp - 0x364], 0
jmp 0x4085ad
mov edx, dword [ebp - 0x364]
add edx, 1
mov dword [ebp - 0x364], edx
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x380]
jge 0x4085ca
mov ecx, dword [ebp - 0x398]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40859e
mov dword [ebp - 0x35c], 0
jmp 0x4085e5
mov edx, dword [ebp - 0x35c]
add edx, 1
mov dword [ebp - 0x35c], edx
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x378]
jge 0x40861f
mov ecx, dword [ebp - 0x4e8]
add ecx, dword [ebp - 0x35c]
mov edx, dword [ebp - 0x35c]
mov eax, dword [ebp - 0x4f8]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x4e8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x4085d6
mov byte [ebp - 0x4bc], 0x50
cmp dword [ebp - 0x310], 0
jne 0x40864c
mov ecx, dword [ebp - 0x500]
mov dl, byte [ebp - 0x4f4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x500]
mov cl, byte [ebp - 0x348]
mov byte [eax + 1], cl
mov byte [ebp - 0x14d], 0
mov dword [ebp - 0x2b8], 0
jmp 0x40866e
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x2e0]
jge 0x40868b
mov ecx, dword [ebp - 0x350]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40865f
mov dword [ebp - 0x3a8], 0
jmp 0x4086a6
mov edx, dword [ebp - 0x3a8]
add edx, 1
mov dword [ebp - 0x3a8], edx
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x29c]
jge 0x4086c3
mov ecx, dword [ebp - 0x2ac]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408697
mov byte [ebp - 0x4bb], 0x52
cmp dword [ebp - 0x384], 0
jne 0x4086e0
lea edx, [ebp - 0x4e0]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x288], 1
mov byte [ebp - 0x4ba], 0x4f
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x2a8], ecx
mov byte [ebp - 0x4b9], 0x46
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x638], 0
jmp 0x408748
mov eax, dword [ebp - 0x638]
add eax, 1
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x638]
cmp ecx, dword [ebp - 0x324]
jge 0x408782
mov edx, dword [ebp - 0x360]
add edx, dword [ebp - 0x638]
mov eax, dword [ebp - 0x638]
mov ecx, dword [ebp - 0x37c]
mov al, byte [ecx + eax*4]
mov byte [edx], al
mov ecx, dword [ebp - 0x360]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408739
mov byte [ebp - 0x4b8], 0x49
mov edx, dword [ebp - 0x29c]
mov dword [ebp - 0x3a8], edx
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x29c]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7a8], eax
mov edx, dword [ebp - 0x7a8]
mov dword [ebp - 0x2d0], edx
mov byte [ebp - 0x4b7], 0x4c
mov dword [ebp - 0x11c], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x4b6], 0x45
mov byte [ebp - 0x4b5], 0
mov dword [ebp - 0x160], 0
jmp 0x40881b
mov ecx, dword [ebp - 0x160]
add ecx, 1
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x160]
cmp edx, dword [ebp - 0x170]
jge 0x408855
mov eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x4d4]
mov cl, byte [edx + ecx*4]
mov byte [eax], cl
mov edx, dword [ebp - 0x4cc]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40880c
call fcn.00409d72
test eax, eax
jne 0x4089a6
mov dword [ebp - 0x640], 1
mov byte [ebp - 0x658], 0x65
or eax, 0xffffffff
jmp 0x40954d
cmp dword [ebp - 0x344], 0
je 0x408aa5
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x674], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7bc], eax
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp - 0x680], ecx
mov edx, dword [ebp - 0x680]
mov dword [ebp - 0x660], edx
cmp dword [ebp - 0x66c], 0
jne 0x408a29
mov eax, dword [ebp - 0x680]
mov cl, byte [ebp - 0x67c]
mov byte [eax], cl
mov edx, dword [ebp - 0x680]
mov al, byte [ebp - 0x674]
mov byte [edx + 1], al
mov ecx, dword [ebp - 0x660]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x678], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7c0], eax
mov edx, dword [ebp - 0x7c0]
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x670], 0
jne 0x408a98
mov ecx, dword [ebp - 0x664]
mov dl, byte [ebp - 0x684]
mov byte [ecx], dl
mov eax, dword [ebp - 0x664]
mov cl, byte [ebp - 0x678]
mov byte [eax + 1], cl
mov edx, dword [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x3a8], 0
jmp 0x408ac0
mov eax, dword [ebp - 0x3a8]
add eax, 1
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [ebp - 0x29c]
jge 0x408afa
mov edx, dword [ebp - 0x2ac]
add edx, dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x2d0]
mov al, byte [ecx + eax*4]
mov byte [edx], al
mov ecx, dword [ebp - 0x2ac]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408ab1
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x140], edx
call section..text
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x134], 0
jne 0x408b2d
lea ecx, [ebp - 0x150]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x384], 0
je 0x408b53
mov edx, dword [ebp - 0x384]
mov byte [edx], 0x61
mov eax, dword [ebp - 0x384]
mov byte [eax + 1], 0x62
mov ecx, dword [ebp - 0x384]
mov byte [ecx + 2], 0
call dword [0x40c834]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
add esp, 4
mov byte [ebp - 0x624], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x623]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x13c], 0
lea edx, [ebp - 0x624]
push edx
push 0x104
call dword [0x40c844]
mov dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x384], 0
je 0x408bb8
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x164], 0
jne 0x408bde
mov ecx, dword [ebp - 0x120]
mov dl, byte [ebp - 0x504]
mov byte [ecx], dl
mov eax, dword [ebp - 0x120]
mov cl, byte [ebp - 0x4b4]
mov byte [eax + 1], cl
cmp dword [ebp - 0x4b0], 0
jne 0x408c04
mov edx, dword [ebp - 0x144]
mov al, byte [ebp - 0x128]
mov byte [edx], al
mov ecx, dword [ebp - 0x144]
mov dl, byte [ebp - 0x4d0]
mov byte [ecx + 1], dl
mov eax, dword [ebp - 0x2a8]
mov byte [eax], 0
mov byte [ebp - 0x4ac], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x4ab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [ebp - 0x10c], 0
jne 0x408c4c
mov ecx, dword [ebp - 0x2d8]
mov dl, byte [ebp - 0x2c8]
mov byte [ecx], dl
mov eax, dword [ebp - 0x2d8]
mov cl, byte [ebp - 0x124]
mov byte [eax + 1], cl
push 0x104
lea edx, [ebp - 0x4ac]
push edx
push 0
call dword [0x40c848]
mov byte [ebp - 0x104], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x103]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call dword [sym.imp.MSVCRT.dll_rand]
push eax
call dword [sym.imp.MSVCRT.dll_rand]
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call dword [sym.imp.MSVCRT.dll_getenv]
add esp, 4
push eax
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x104]
push eax
call dword [0x40c850]
add esp, 0x14
mov ecx, dword [ebp - 0x140]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0
lea edx, [ebp - 0x104]
push edx
call dword [0x40c830]
lea eax, [ebp - 0x104]
push eax
call dword [0x40c820]
test eax, eax
jne 0x408d78
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x694], 0
mov byte [ebp - 0x6a8], 0x65
mov dword [ebp - 0x698], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x68c]
mov dword [ebp - 0x690], edx
cmp dword [ebp - 0x694], 0
jne 0x408d60
mov eax, dword [ebp - 0x68c]
mov cl, byte [ebp - 0x688]
mov byte [eax], cl
mov edx, dword [ebp - 0x68c]
mov al, byte [ebp - 0x698]
mov byte [edx + 1], al
mov byte [ebp - 0x6a7], 0x72
mov byte [ebp - 0x6a6], 0x72
mov eax, 0xfffffffe
jmp 0x40954d
cmp dword [ebp - 0x4fc], 0
je 0x408f71
mov dword [ebp - 0x6c8], 1
mov dword [ebp - 0x6c0], 1
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7cc], eax
mov edx, dword [ebp - 0x7cc]
mov dword [ebp - 0x6ac], edx
mov dword [ebp - 0x6b0], 0
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6ac]
mov byte [ecx], 0
mov dword [ebp - 0x6b8], 0
mov edx, dword [ebp - 0x6b4]
mov byte [edx], 0
mov dword [ebp - 0x6bc], 0
jmp 0x408e12
mov eax, dword [ebp - 0x6bc]
add eax, 1
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
cmp ecx, dword [ebp - 0x6c0]
jge 0x408e2f
mov edx, dword [ebp - 0x6ac]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408e03
mov dword [ebp - 0x6c4], 0
jmp 0x408e4a
mov eax, dword [ebp - 0x6c4]
add eax, 1
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
cmp ecx, dword [ebp - 0x6c8]
jge 0x408e67
mov edx, dword [ebp - 0x6b4]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408e3b
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c8]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x6b8], edx
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6c0]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7d8], eax
mov edx, dword [ebp - 0x7d8]
mov dword [ebp - 0x6b0], edx
mov dword [ebp - 0x6bc], 0
jmp 0x408ee2
mov eax, dword [ebp - 0x6bc]
add eax, 1
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
cmp ecx, dword [ebp - 0x6c0]
jge 0x408f1c
mov edx, dword [ebp - 0x6ac]
add edx, dword [ebp - 0x6bc]
mov eax, dword [ebp - 0x6bc]
mov ecx, dword [ebp - 0x6b0]
mov al, byte [ecx + eax*4]
mov byte [edx], al
mov ecx, dword [ebp - 0x6ac]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408ed3
mov dword [ebp - 0x6c4], 0
jmp 0x408f37
mov edx, dword [ebp - 0x6c4]
add edx, 1
mov dword [ebp - 0x6c4], edx
mov eax, dword [ebp - 0x6c4]
cmp eax, dword [ebp - 0x6c8]
jge 0x408f71
mov ecx, dword [ebp - 0x6b4]
add ecx, dword [ebp - 0x6c4]
mov edx, dword [ebp - 0x6c4]
mov eax, dword [ebp - 0x6b8]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x6b4]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408f28
mov dword [ebp - 0x394], 0
jmp 0x408f8c
mov ecx, dword [ebp - 0x394]
add ecx, 1
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x394]
cmp edx, dword [ebp - 0x288]
jge 0x408fa9
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x408f7d
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x304], ecx
mov edx, dword [ebp - 0x304]
mov dword [ebp - 0x110], edx
push 1
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x4ac]
push ecx
call fcn.00401180
add esp, 0xc
and eax, 0xff
test eax, eax
jne 0x409088
mov dword [ebp - 0x6ec], 1
mov byte [ebp - 0x6e8], 0x65
mov byte [ebp - 0x6e7], 0x72
mov dword [ebp - 0x6d4], 0
mov byte [ebp - 0x6e6], 0x72
mov dword [ebp - 0x6d8], 0
mov byte [ebp - 0x6e5], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7e0], eax
mov edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d4], 0
jne 0x40907e
mov ecx, dword [ebp - 0x6cc]
mov dl, byte [ebp - 0x6ec]
mov byte [ecx], dl
mov eax, dword [ebp - 0x6cc]
mov cl, byte [ebp - 0x6d8]
mov byte [eax + 1], cl
mov eax, 0xfffffffd
jmp 0x40954d
cmp dword [ebp - 0x108], 0
je 0x409215
mov dword [ebp - 0x6f4], 1
mov byte [ebp - 0x70c], 0x65
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x6f8], eax
mov byte [ebp - 0x70b], 0x72
mov dword [ebp - 0x6fc], 0
mov byte [ebp - 0x70a], 0x72
mov byte [ebp - 0x709], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x700], ecx
cmp dword [ebp - 0x700], 0
jne 0x409113
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x6f8]
mov byte [eax], 0
cmp dword [ebp - 0x700], 0
je 0x409142
mov ecx, dword [ebp - 0x700]
mov byte [ecx], 0x61
mov edx, dword [ebp - 0x700]
mov byte [edx + 1], 0x62
mov eax, dword [ebp - 0x700]
mov byte [eax + 2], 0
cmp dword [ebp - 0x700], 0
je 0x409158
mov ecx, dword [ebp - 0x700]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x6f0], 0
jmp 0x409173
mov edx, dword [ebp - 0x6f0]
add edx, 1
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6f0]
cmp eax, dword [ebp - 0x6f4]
jge 0x409190
mov ecx, dword [ebp - 0x6f8]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x409164
mov edx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6f4]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x6f0], 0
jmp 0x4091db
mov edx, dword [ebp - 0x6f0]
add edx, 1
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6f0]
cmp eax, dword [ebp - 0x6f4]
jge 0x409215
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x6fc]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x6f8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x4091cc
mov ecx, dword [ebp - 0x2e0]
shl ecx, 2
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7f4], eax
mov edx, dword [ebp - 0x7f4]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x11c], 0
jne 0x40925f
mov eax, dword [ebp - 0x304]
mov cl, byte [ebp - 0x2e4]
mov byte [eax], cl
mov edx, dword [ebp - 0x304]
mov al, byte [ebp - 0x13c]
mov byte [edx + 1], al
push 2
lea ecx, [ebp - 0x520]
push ecx
lea edx, [ebp - 0x4ac]
push edx
call fcn.00401180
add esp, 0xc
and eax, 0xff
test eax, eax
jne 0x409355
mov dword [ebp - 0x720], 1
mov dword [ebp - 0x72c], 0
mov byte [ebp - 0x71c], 0x65
mov dword [ebp - 0x730], 0
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x728], ecx
mov byte [ebp - 0x71b], 0x72
mov byte [ebp - 0x71a], 0x72
mov byte [ebp - 0x719], 0
cmp dword [ebp - 0x72c], 0
jne 0x40930c
mov edx, dword [ebp - 0x724]
mov al, byte [ebp - 0x720]
mov byte [edx], al
mov ecx, dword [ebp - 0x724]
mov dl, byte [ebp - 0x730]
mov byte [ecx + 1], dl
mov eax, dword [ebp - 0x728]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x14
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp - 0x710], ecx
cmp dword [ebp - 0x710], 0
jne 0x40934b
lea edx, [ebp - 0x71c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 0xfffffffd
jmp 0x40954d
mov dword [ebp - 0x2b8], 0
jmp 0x409370
mov ecx, dword [ebp - 0x2b8]
add ecx, 1
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x2b8]
cmp edx, dword [ebp - 0x2e0]
jge 0x4093aa
mov eax, dword [ebp - 0x350]
add eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp - 0x370]
mov cl, byte [edx + ecx*4]
mov byte [eax], cl
mov edx, dword [ebp - 0x350]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x409361
mov eax, dword [ebp - 0x2fc]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x364], ecx
lea edx, [ebp - 0x4ac]
push edx
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x340]
push ecx
lea edx, [ebp - 0x284]
push edx
call dword [0x40c850]
add esp, 0x10
mov eax, dword [ebp - 0x380]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x134], 0
je 0x409432
mov edx, dword [ebp - 0x134]
mov byte [edx], 0x61
mov eax, dword [ebp - 0x134]
mov byte [eax + 1], 0x62
mov ecx, dword [ebp - 0x134]
mov byte [ecx + 2], 0
mov dword [ebp - 0x364], 0
jmp 0x40944d
mov edx, dword [ebp - 0x364]
add edx, 1
mov dword [ebp - 0x364], edx
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x380]
jge 0x409487
mov ecx, dword [ebp - 0x398]
add ecx, dword [ebp - 0x364]
mov edx, dword [ebp - 0x364]
mov eax, dword [ebp - 0x28c]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x398]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40943e
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x394], ecx
lea edx, [ebp - 0x624]
push edx
call dword [0x40c820]
mov eax, dword [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0
lea ecx, [ebp - 0x284]
push ecx
call dword [0x40c840]
cmp dword [ebp - 0x134], 0
je 0x4094d2
mov edx, dword [ebp - 0x134]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x288]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x394], 0
jmp 0x409511
mov edx, dword [ebp - 0x394]
add edx, 1
mov dword [ebp - 0x394], edx
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x288]
jge 0x40954b
mov ecx, dword [ebp - 0x2a8]
add ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x2cc]
mov dl, byte [eax + edx*4]
mov byte [ecx], dl
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x409502
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret 0x10