Function at 0x401870
Capabilities:
Enumerate processes
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x40620d
push eax
mov dword fs:[0], esp
sub esp, 0xa04
push esi
call fcn.00401580
call fcn.00401580
mov esi, 0x3e8
nop
call fcn.00401560
sub esi, 1
jne 0x4018a0
mov dword [ebp - 0x14], 0x58
mov dword [ebp - 0x10], 0x2e
mov dword [ebp - 0x18], 0x1b
mov eax, dword [ebp - 0x10]
push ebx
cmp dword [ebp - 0x14], eax
jle 0x4019d1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jle 0x4019d1
mov ecx, dword [ebp - 0x14]
mov esi, 0x3e8
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
call fcn.00401560
sub esi, 1
jne 0x401945
mov eax, dword [ebp - 0x18]
mov ebx, 1
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
call fcn.00401830
test eax, eax
jne 0x4041cb
jmp 0x401e48
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jg 0x401b1e
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jle 0x401b1e
mov ecx, dword [ebp - 0x18]
mov ebx, 1
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
mov ecx, ebx
sub ecx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
add esi, ecx
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
nop word [eax + eax]
call fcn.00401560
sub esi, ebx
jne 0x401b10
jmp 0x401d8a
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jg 0x401c6e
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jg 0x401c6e
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
call fcn.00401580
mov ecx, dword [ebp - 0x18]
mov ebx, 1
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov ecx, ebx
mov esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
nop dword [eax]
call fcn.00401560
sub esi, ebx
jne 0x401c60
jmp 0x401d8a
mov ecx, dword [ebp - 0x18]
mov ebx, 1
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
mov ecx, ebx
sub ecx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
add esi, ecx
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
call fcn.00401580
mov esi, 0x3e8
nop dword [eax]
call fcn.00401560
sub esi, 1
jne 0x401e50
mov dword [ebp - 0x14], 0x19
mov dword [ebp - 0x10], 0xa
mov dword [ebp - 0x18], 7
call fcn.00401580
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jle 0x403d4b
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jle 0x403d4b
mov ecx, dword [ebp - 0x14]
mov esi, 0x3e8
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
nop dword [eax]
call fcn.00401560
sub esi, 1
jne 0x401f00
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
call fcn.00401580
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push 0x40725c
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x48]
call fcn.00404270
cmp dword [ebp + 8], 1
mov dword [ebp - 4], 0
jl 0x4041cb
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [sym.imp.VCRUNTIME140.dll_strrchr]
push 0x5c
push dword [esi]
call edi
mov edx, eax
add esp, 8
test edx, edx
jne 0x4020e9
push 0x2f
push dword [esi]
call edi
mov edx, eax
add esp, 8
test edx, edx
jne 0x4020e9
mov edx, dword [esi]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4020e0
jmp 0x4020f7
inc edx
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4020f0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x48]
call fcn.00404460
push str.Jzstnf.jcj
lea ecx, [ebp - 0xd8]
call fcn.00404270
lea edx, [ebp - 0xd8]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.00401750
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x402163
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402159
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
cmp dword [ebp - 0x34], 0xf
lea ecx, [ebp - 0x48]
mov esi, dword [ebp - 0x20]
lea edx, [ebp - 0x30]
cmova ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x1c], 0xf
mov dword [ebp - 0xc8], 0
cmova edx, dword [ebp - 0x30]
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp esi, dword [ebp - 0x38]
jne 0x4041d0
sub esi, 4
jb 0x4021b6
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4021bb
add edx, 4
add ecx, 4
sub esi, 4
jae 0x4021a5
cmp esi, 0xfffffffc
je 0x4021ef
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x4021e8
cmp esi, 0xfffffffd
je 0x4021ef
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x4021e8
cmp esi, 0xfffffffe
je 0x4021ef
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x4021e8
cmp esi, 0xffffffff
je 0x4021ef
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x4021ef
sbb eax, eax
or eax, 1
jmp 0x4021f1
xor eax, eax
test eax, eax
jne 0x4041d0
lea ecx, [ebp - 0x48]
call fcn.004016c0
cmp dword [ebp - 0x34], 0xf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x30]
cmova eax, dword [ebp - 0x48]
mov byte [eax], 0
call fcn.004016c0
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0xf0]
cmova eax, dword [ebp - 0x30]
push str.mfwwd_otmsxts
mov byte [eax], 0
call fcn.00404270
lea edx, [ebp - 0xf0]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x90]
call fcn.00401750
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xdc]
cmp ecx, 0xf
jbe 0x402296
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40228c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.otms
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.00404270
lea edx, [ebp - 0x108]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x78]
call fcn.00401750
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0xf
jbe 0x402311
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402307
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.username
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
lea ecx, [ebp - 0xa8]
push eax
call fcn.00404270
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
cmp dword [ebp - 0x7c], 0xf
lea edx, [ebp - 0xa8]
mov ebx, dword [ebp - 0x94]
cmova ecx, dword [ebp - 0x90]
cmp ebx, 0xf
mov eax, dword [ebp - 0xa8]
mov esi, dword [ebp - 0x98]
cmova edx, eax
cmp esi, dword [ebp - 0x80]
jne 0x4023df
mov edi, esi
sub edi, 4
jb 0x402396
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40239b
add edx, 4
add ecx, 4
sub edi, 4
jae 0x402385
cmp edi, 0xfffffffc
je 0x4023cf
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x4023c8
cmp edi, 0xfffffffd
je 0x4023cf
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x4023c8
cmp edi, 0xfffffffe
je 0x4023cf
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x4023c8
cmp edi, 0xffffffff
je 0x4023cf
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x4023cf
sbb eax, eax
or eax, 1
jmp 0x4023d1
xor eax, eax
test eax, eax
je 0x4041cb
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x64], 0xf
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0xa8]
cmova ecx, dword [ebp - 0x78]
cmp ebx, 0xf
cmova edx, eax
cmp esi, dword [ebp - 0x68]
jne 0x402454
sub esi, 4
jb 0x402411
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x402416
add edx, 4
add ecx, 4
sub esi, 4
jae 0x402400
cmp esi, 0xfffffffc
je 0x40244a
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x402443
cmp esi, 0xfffffffd
je 0x40244a
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x402443
cmp esi, 0xfffffffe
je 0x40244a
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x402443
cmp esi, 0xffffffff
je 0x40244a
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x40244a
sbb eax, eax
or eax, 1
jmp 0x40244c
xor eax, eax
test eax, eax
je 0x4041cb
lea ecx, [ebp - 0x78]
call fcn.004016c0
cmp dword [ebp - 0x64], 0xf
lea eax, [ebp - 0x78]
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x90]
cmova eax, dword [ebp - 0x78]
mov byte [eax], 0
call fcn.004016c0
cmp dword [ebp - 0x7c], 0xf
lea eax, [ebp - 0x90]
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0xa8]
cmova eax, dword [ebp - 0x90]
mov byte [eax], 0
call fcn.004016c0
cmp dword [ebp - 0x94], 0xf
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x98], 0
lea ecx, [ebp - 0x120]
cmova eax, dword [ebp - 0xa8]
push str.tqqdigl.jcj
mov byte [eax], 0
call fcn.00404270
lea edx, [ebp - 0x120]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5b8]
call fcn.00401750
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0xf
jbe 0x402526
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40251c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.nif.jcj
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
call fcn.00404270
lea edx, [ebp - 0x138]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5a0]
call fcn.00401750
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x124]
cmp ecx, 0xf
jbe 0x4025a4
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40259a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.nif64.jcj
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00404270
lea edx, [ebp - 0x150]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x588]
call fcn.00401750
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0xf
jbe 0x402622
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402618
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.wfifwj2.jcj
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00404270
lea edx, [ebp - 0x168]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x570]
call fcn.00401750
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x154]
cmp ecx, 0xf
jbe 0x4026a0
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402696
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.hzyyjw.jcj
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00404270
lea edx, [ebp - 0x180]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x558]
call fcn.00401750
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x16c]
cmp ecx, 0xf
jbe 0x40271e
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402714
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.c64igl.jcj
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00404270
lea edx, [ebp - 0x198]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x540]
call fcn.00401750
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x40279c
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402792
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.c32igl.jcj
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
call fcn.00404270
lea edx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x528]
call fcn.00401750
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x19c]
cmp ecx, 0xf
jbe 0x40281a
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402810
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.c96igl.jcj
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
call fcn.00404270
lea edx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x510]
call fcn.00401750
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1b4]
cmp ecx, 0xf
jbe 0x402898
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40288e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.ujxyzint.jcj
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 0xf
mov byte [ebp - 0x1c8], 0
call fcn.00404270
lea edx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4f8]
call fcn.00401750
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1cc]
cmp ecx, 0xf
jbe 0x402916
mov edx, dword [ebp - 0x1e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40290c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.Yfxprlw.jcj
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
call fcn.00404270
lea edx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x4e0]
call fcn.00401750
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x1e4]
cmp ecx, 0xf
jbe 0x402994
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40298a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.UwthjxxMfhpjw.jcj
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
call fcn.00404270
lea edx, [ebp - 0x210]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4c8]
call fcn.00401750
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x1fc]
cmp ecx, 0xf
jbe 0x402a12
mov edx, dword [ebp - 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402a08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.Uwthrts.jcj
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
call fcn.00404270
lea edx, [ebp - 0x228]
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4b0]
call fcn.00401750
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x214]
cmp ecx, 0xf
jbe 0x402a90
mov edx, dword [ebp - 0x228]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402a86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.Uwthrts64.jcj
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
call fcn.00404270
lea edx, [ebp - 0x240]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x498]
call fcn.00401750
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x402b0e
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402b04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.Uwthrts64f.jcj
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
call fcn.00404270
lea edx, [ebp - 0x258]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x480]
call fcn.00401750
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x244]
cmp ecx, 0xf
jbe 0x402b8c
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402b82
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.kniiqjw.jcj
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
call fcn.00404270
lea edx, [ebp - 0x270]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x468]
call fcn.00401750
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x25c]
cmp ecx, 0xf
jbe 0x402c0a
mov edx, dword [ebp - 0x270]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402c00
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.kfpjsjy.jcj
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0xf
mov byte [ebp - 0x270], 0
call fcn.00404270
lea edx, [ebp - 0x288]
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x450]
call fcn.00401750
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x402c88
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402c7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.izruhfu.jcj
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
call fcn.00404270
lea edx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x438]
call fcn.00401750
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x28c]
cmp ecx, 0xf
jbe 0x402d06
mov edx, dword [ebp - 0x2a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402cfc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.bnwjxmfwp.jcj
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
call fcn.00404270
lea edx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x420]
call fcn.00401750
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x2a4]
cmp ecx, 0xf
jbe 0x402d84
mov edx, dword [ebp - 0x2b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402d7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.agtcxjwanhj.jcj
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
call fcn.00404270
lea edx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x408]
call fcn.00401750
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 0xf
jbe 0x402e02
mov edx, dword [ebp - 0x2d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402df8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.aryttqxi.jcj
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
call fcn.00404270
lea edx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x3f0]
call fcn.00401750
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x2d4]
cmp ecx, 0xf
jbe 0x402e80
mov edx, dword [ebp - 0x2e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402e76
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.arbfwjzxjw.jcj
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
call fcn.00404270
lea edx, [ebp - 0x300]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x3d8]
call fcn.00401750
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x2ec]
cmp ecx, 0xf
jbe 0x402efe
mov edx, dword [ebp - 0x300]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402ef4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.arbfwjxjwanhj.jcj
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
call fcn.00404270
lea edx, [ebp - 0x318]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x3c0]
call fcn.00401750
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x304]
cmp ecx, 0xf
jbe 0x402f7c
mov edx, dword [ebp - 0x318]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402f72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.arbfwjywfd.jcj
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0xf
mov byte [ebp - 0x318], 0
call fcn.00404270
lea edx, [ebp - 0x330]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3a8]
call fcn.00401750
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x31c]
cmp ecx, 0xf
jbe 0x402ffa
mov edx, dword [ebp - 0x330]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402ff0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
push str.vjrz_lf.jcj
lea ecx, [ebp - 0x348]
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
call fcn.00404270
lea edx, [ebp - 0x348]
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x390]
call fcn.00401750
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x334]
cmp ecx, 0xf
jbe 0x403078
mov edx, dword [ebp - 0x348]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40306e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
push 0x228
lea eax, [ebp - 0x7e0]
mov byte [ebp - 4], 0x51
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0xa10], 0x22c
push 0x228
lea eax, [ebp - 0xa0c]
mov dword [ebp - 0x18], ebx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x7e4]
mov ecx, 0x8b
lea esi, [ebp - 0xa10]
lea edi, [ebp - 0x7e4]
rep movsd dword es:[edi], dword [esi]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x4041cb
nop word [eax + eax]
lea esi, [ebp - 0x5b8]
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xc0]
call fcn.00404370
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xc0]
cmp dword [ebp - 0xac], 0xf
mov eax, dword [ebp - 0xb0]
cmova ecx, dword [ebp - 0xc0]
seta bl
add eax, ecx
test bl, bl
lea ecx, [ebp - 0xc0]
cmovne ecx, dword [ebp - 0xc0]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x378]
call fcn.00404800
cmp dword [eax + 0x14], 7
jbe 0x403174
mov eax, dword [eax]
lea ecx, [ebp - 0x7c0]
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov ecx, dword [ebp - 0x364]
add esp, 8
mov edi, eax
cmp ecx, 7
jbe 0x4031c7
mov edx, dword [ebp - 0x378]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4031bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4037d3
push ecx
push edx
call fcn.00404ff0
add esp, 8
xor eax, eax
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 7
mov word [ebp - 0x378], ax
test edi, edi
je 0x4041cb
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0xac]
cmp edx, 0xf
jbe 0x40322a
mov eax, dword [ebp - 0xc0]
inc edx
mov ecx, eax
cmp edx, 0x1000
jb 0x403220
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
add ecx, 0xfffffffc
cmp ecx, 0x1f
ja 0x4037d3
push edx
push eax
call fcn.00404ff0
add esp, 8
add esi, 0x18
lea eax, [ebp - 0x378]
cmp esi, eax
jne 0x403120
mov ebx, dword [ebp - 0x18]
lea eax, [ebp - 0x7e4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x403110
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x14], 0x19
mov dword [ebp - 0x10], 0xa
mov dword [ebp - 0x18], 7
cmp dword [ebp - 0x14], 0
jne 0x403507
mov ecx, dword [ebp - 0x14]
mov esi, 0x3e8
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
call fcn.00401560
sub esi, 1
jne 0x4032e7
mov eax, dword [ebp - 0x18]
mov edi, 1
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
call fcn.00401580
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x403ad6
cmp dword [ebp - 0x18], 0
je 0x4037fa
mov ecx, dword [ebp - 0x18]
mov edi, 1
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
push str.H:BnsitbxXdxyjr32hzwq.jcj
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x360]
call fcn.00404270
lea edx, [ebp - 0x360]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x60]
call fcn.00401750
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x34c]
cmp ecx, 0xf
jbe 0x403640
mov edx, dword [ebp - 0x360]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403636
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4037d3
push ecx
push edx
call fcn.00404ff0
add esp, 8
cmp dword [ebp - 0x4c], 0xf
lea edx, [ebp - 0x60]
push dword [ebp - 0x50]
cmova edx, dword [ebp - 0x60]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0xf
mov byte [ebp - 0x360], 0
call fcn.00404ad0
add esp, 4
lea ecx, [ebp - 0x60]
call fcn.004016c0
cmp dword [ebp - 0x4c], 0xf
lea eax, [ebp - 0x60]
mov dword [ebp - 0x50], 0
mov ecx, edi
cmova eax, dword [ebp - 0x60]
mov byte [eax], 0
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
call fcn.00401560
sub esi, 1
jne 0x4036e6
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0xf
jbe 0x4037e3
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4037d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4037d9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
jmp 0x403b1b
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jg 0x403946
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jg 0x403946
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
call fcn.00401580
mov ecx, dword [ebp - 0x18]
mov edi, 1
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov ecx, edi
mov esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
call fcn.00401560
sub esi, edi
jne 0x403938
jmp 0x403a62
mov ecx, dword [ebp - 0x18]
mov edi, 1
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
mov ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
add esi, ecx
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
mov ecx, edi
mov esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
push 0x404220
push 0x18
push 0x18
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
sub eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
sub edi, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add ecx, edi
imul eax, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x5b8]
push eax
call fcn.00404ed6
mov ecx, dword [ebp - 0x94]
cmp ecx, 0xf
jbe 0x403c37
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403c2d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov ecx, dword [ebp - 0x64]
cmp ecx, 0xf
jbe 0x403c6b
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403c61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
pop edi
cmp ecx, 0xf
jbe 0x403cb5
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403cab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp ecx, 0xf
jbe 0x403cfa
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403cf0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d36
push ecx
push edx
call fcn.00404ff0
add esp, 8
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
cmp ecx, 0xf
jbe 0x4041a5
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403d3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403d3c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404ff0
add esp, 8
jmp 0x4041a5
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jg 0x403e8f
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jle 0x403e8f
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
nop
call fcn.00401560
sub esi, 1
jne 0x403e80
jmp 0x4040ee
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jg 0x403fd7
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10], eax
jg 0x403fd7
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
call fcn.00401580
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
mov ecx, ebx
sub ecx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
add esi, ecx
cdq
idiv esi
mov eax, dword [ebp - 0x14]
mov esi, 0x3e8
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
call fcn.00401560
sub esi, 1
jne 0x403fc8
jmp 0x4040ee
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
inc ecx
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add esi, ecx
imul eax, dword [ebp - 0x10]
cdq
idiv esi
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
imul eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, dword [ebp - 0x10]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x10]
sub eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
add esi, ecx
cdq
idiv esi
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
inc ecx
cdq
idiv ecx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
inc ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
sub ebx, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add ecx, ebx
imul eax, dword [ebp - 0x10]
cdq
idiv ecx
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x14], eax
mov esi, 0x3e8
pop ebx
nop dword [eax + eax]
call fcn.00401560
sub esi, 1
jne 0x4041b0
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
call fcn.004013b0
lea ecx, [ebp - 0x30]
call fcn.004016c0
lea ecx, [ebp - 0x30]
call fcn.00404200
lea ecx, [ebp - 0x48]
call fcn.004016c0
lea ecx, [ebp - 0x48]
call fcn.00404200
call fcn.004013b0
int3