Function at 0x406b20
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x540
mov eax, dword [0x42f00c]
xor eax, ebp
test cl, cl
mov dword [esp + 0x538], eax
je 0x406f0e
mov esi, edx
mov dword [esp + 0x24], 0
push 0x40
call fcn.00426cac
add esp, 4
lea ebx, [esp + 0x448]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esp + 0x20], eax
mov ecx, ebx
push 1
push 1
push esi
call fcn.00416ea0
lea edi, [esp + 0x20]
mov ecx, ebx
mov edx, edi
push 0
call fcn.00405fe0
add esp, 4
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esp + 0x40], 0x15
mov dword [esp + 0x44], 0x1f
mov ebx, eax
mov dword [eax + 0x10], 0x6f467374
mov dword [eax + 0xc], 0x726f7065
mov dword [eax + 8], 0x52676e69
mov dword [eax + 4], 0x646e6553
mov dword [eax], 0x706f7453
mov word [eax + 0x14], 0x72
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea edx, [esp + 0x520]
mov ecx, edi
push eax
call fcn.00411e90
add esp, 4
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x520]
push 0x20
push ebx
call fcn.00426ce1
add esp, 8
cmp esi, edi
je 0x406e28
mov eax, 7
mov ecx, 0xf
add eax, 0xfffffff9
adc ecx, 0xffffffff
mov dword [esp + 0x530], eax
mov dword [esp + 0x534], ecx
mov byte [esp + 0x520], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esp + 0x530], 0x15
mov dword [esp + 0x534], 0x1f
lea edi, [esp + 0x30]
mov dword [eax + 0x10], 0x6f467374
mov dword [eax + 0xc], 0x726f7065
mov dword [eax + 8], 0x52676e69
mov dword [eax + 4], 0x646e6553
mov dword [eax], 0x706f7453
mov word [eax + 0x14], 0x72
mov dword [esp + 0x520], eax
lea eax, [esp + 0x520]
lea ecx, [esp + 0x20]
mov edx, edi
push eax
call fcn.0041b740
add esp, 4
mov ebx, dword [esp + 0x30]
lea esi, [esp + 0x4f0]
mov edx, 0x42f4f4
mov ecx, esi
add ebx, 0x28
push 0x42ae1b
call fcn.004086d0
add esp, 4
mov ecx, esi
push str.EndOfLife
call fcn.00403a20
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x518], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x510], xmm1
movsd qword [esp + 0x508], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esp + 0x508]
push ebx
push eax
push edi
call fcn.00403960
add esp, 0xc
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x406d41
mov ecx, dword [esp + 0x508]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408039
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x504]
mov dword [esp + 0x518], 0
mov dword [esp + 0x51c], 0xf
mov byte [esp + 0x508], 0
cmp eax, 0x10
jb 0x406d8b
mov ecx, dword [esp + 0x4f0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408056
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x534]
cmp eax, 0x10
jb 0x406db7
mov ecx, dword [esp + 0x520]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408073
push esi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esp + 0x30]
xor edx, edx
push 0
call fcn.00406810
add esp, 4
cmp dword [eax + 0x50], 0
mov esi, eax
je 0x406dee
mov ecx, esi
push 1
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
push 0x42b279
push eax
call fcn.00406640
add esp, 8
mov ecx, esi
call fcn.004068d0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [esi + eax]
push 1
call dword [eax]
mov eax, dword [esp + 0x44]
cmp eax, 0x10
jb 0x406e24
mov ecx, dword [esp + 0x30]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408090
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov edi, dword [esp + 0x20]
mov eax, 7
mov esi, 0xf
lea ebx, [esp + 0x30]
lea ecx, [esp + 0x20]
lea edx, [esp + 0x520]
lea eax, [eax + 2]
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], 0x65647261
mov dword [esp + 0x30], 0x63736944
mov word [esp + 0x38], 0x64
push ebx
call fcn.00411e90
add esp, 4
cmp dword [esp + 0x520], edi
je 0x406f60
lea esi, [esp + 0x4a8]
mov ecx, esi
call fcn.00417680
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
lea ecx, [esp + 0x20]
call fcn.00405580
mov esi, dword [0x42f558]
cmp dword [0x42f55c], 0xf
mov dword [esp + 0x440], 0
mov dword [esp + 0x444], 0
jbe 0x4075f1
mov ebx, dword [0x42f548]
cmp esi, 0x10
jae 0x4075ff
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
lea ecx, [esp + 0x430]
mov edi, 0xf
movsd qword [esp + 0x438], xmm1
movsd qword [esp + 0x430], xmm0
mov dword [esp + 0x440], esi
mov dword [esp + 0x444], 0xf
jmp 0x407653
mov eax, 7
mov ecx, 0xf
lea edx, [esp + 0x30]
add eax, 0xfffffff9
adc ecx, 0xffffffff
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov ecx, 1
mov byte [esp + 0x30], 0
call fcn.004082f0
mov eax, dword [esp + 0x44]
cmp eax, 0x10
jb 0x407fec
mov ecx, dword [esp + 0x30]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408002
push esi
push ecx
jmp 0x407fe4
mov eax, 7
mov dword [esp + 0x44], esi
lea ecx, [esp + 0x20]
lea edx, [esp + 0x520]
mov dword [esp + 0x40], eax
mov dword [esp + 0x33], 0x44496873
mov dword [esp + 0x30], 0x73617243
mov byte [esp + 0x37], 0
push ebx
call fcn.00411e90
add esp, 4
cmp dword [esp + 0x520], edi
je 0x406e79
lea esi, [esp + 0x30]
mov edx, 0x42f4f4
mov ecx, esi
push 0x42ae1b
call fcn.004086d0
add esp, 4
mov ecx, esi
push str.submitted
call fcn.00403a20
movsd xmm0, qword [eax + 0x10]
mov edi, 0xf
movsd qword [esp + 0x530], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x528], xmm1
movsd qword [esp + 0x520], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x44]
cmp eax, 0x10
jb 0x40702c
mov ecx, dword [esp + 0x30]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408151
push esi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esp + 0x520]
call fcn.00411f10
test al, al
je 0x407552
mov eax, 7
lea esi, [esp + 0x30]
mov dword [esp + 0x504], edi
lea ecx, [esp + 0x20]
mov dword [esp + 0x500], eax
lea eax, [esp + 0x4f0]
mov dword [esp + 0x4f3], 0x44496873
mov dword [esp + 0x4f0], 0x73617243
mov byte [esp + 0x4f7], 0
mov edx, esi
push eax
call fcn.0041b740
add esp, 4
mov edi, dword [esp + 0x30]
lea ebx, [esp + 0x430]
lea edx, [esp + 0x520]
mov ecx, ebx
add edi, 0x28
push 0x42ae1b
call fcn.004086d0
add esp, 4
push edi
push ebx
push esi
call fcn.00403960
add esp, 0xc
mov ecx, esi
push str..txt
call fcn.00403a20
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x518], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x510], xmm1
movsd qword [esp + 0x508], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x44]
cmp eax, 0x10
jb 0x407126
mov ecx, dword [esp + 0x30]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408190
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x444]
mov edi, 0xf
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0xf
mov byte [esp + 0x30], 0
cmp eax, 0x10
jb 0x40716c
mov ecx, dword [esp + 0x430]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4081ad
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x504]
cmp eax, 0x10
jb 0x407198
mov ecx, dword [esp + 0x4f0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4081cf
push esi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esp + 0x508]
xor edx, edx
push 0
call fcn.00406810
add esp, 4
cmp dword [eax + 0x50], 0
je 0x407556
mov dword [esp], eax
mov eax, 7
mov ebx, 0xf
mov dword [esp + 0x504], edi
lea ecx, [esp + 0x20]
lea edx, [esp + 0x30]
mov dword [esp + 0x500], eax
lea eax, [esp + 0x4f0]
mov dword [esp + 0x4f3], 0x44496873
mov dword [esp + 0x4f0], 0x73617243
mov byte [esp + 0x4f7], 0
push eax
call fcn.0041b740
add esp, 4
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x3c], 0x10
lea edi, [eax + 0x28]
jb 0x407215
mov edi, dword [edi]
mov eax, 7
mov dword [esp + 0x444], ebx
lea ebx, [esp + 0x30]
mov ecx, 0x42f4ec
mov dword [esp + 0x440], eax
lea eax, [esp + 0x430]
mov dword [esp + 0x433], 0x44496873
mov dword [esp + 0x430], 0x73617243
mov byte [esp + 0x437], 0
mov edx, ebx
push eax
call fcn.0041b740
add esp, 4
mov eax, dword [esp + 0x30]
mov esi, dword [esp]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x407273
mov eax, dword [eax]
push edi
push eax
push 0x400
push ebx
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esp + 0x444]
cmp eax, 0x10
jb 0x4072af
mov ecx, dword [esp + 0x430]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40820e
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x504]
cmp eax, 0x10
jb 0x4072db
mov ecx, dword [esp + 0x4f0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40822e
push edi
push ecx
call fcn.00426ce1
add esp, 8
push ebx
push esi
call fcn.00406640
add esp, 8
push 0x42b279
push eax
call fcn.00406640
add esp, 8
mov eax, 0xf
mov ebx, 7
mov edi, esi
lea esi, [esp + 0x4f0]
lea ecx, [esp + 0x20]
lea edx, [esp + 0x430]
mov dword [esp + 0x504], eax
mov dword [esp + 0x500], ebx
mov dword [esp + 0x4f3], 0x4c525577
mov dword [esp + 0x4f0], 0x77656956
mov byte [esp + 0x4f7], 0
push esi
call fcn.00411e90
add esp, 4
mov eax, dword [esp + 0x430]
cmp eax, dword [esp + 0x20]
je 0x4074b5
mov dword [esp + 0x500], ebx
lea ebx, [esp + 0x430]
mov eax, 0xf
lea ecx, [esp + 0x20]
mov dword [esp + 0x504], eax
mov dword [esp + 0x4f3], 0x4c525577
mov dword [esp + 0x4f0], 0x77656956
mov byte [esp + 0x4f7], 0
mov edx, ebx
push esi
call fcn.0041b740
add esp, 4
mov eax, dword [esp + 0x430]
cmp dword [eax + 0x3c], 0x10
lea edi, [eax + 0x28]
jb 0x4073b0
mov edi, dword [edi]
mov esi, dword [esp]
mov eax, 7
mov ecx, 0xf
lea edx, [esp + 0x28]
lea eax, [eax + 8]
mov dword [esp + 0x444], ecx
mov ecx, 0x42f4ec
mov dword [esp + 0x440], eax
mov dword [esp + 0x43b], 0x4c525573
mov dword [esp + 0x438], 0x736c6961
mov dword [esp + 0x434], 0x74654468
mov dword [esp + 0x430], 0x73617243
mov byte [esp + 0x43f], 0
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esp + 0x28]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x407423
mov eax, dword [eax]
lea ebx, [esp + 0x30]
push edi
push eax
push 0x400
push ebx
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esp + 0x444]
cmp eax, 0x10
jb 0x407463
mov ecx, dword [esp + 0x430]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408263
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x504]
cmp eax, 0x10
jb 0x40748f
mov ecx, dword [esp + 0x4f0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408283
push edi
push ecx
call fcn.00426ce1
add esp, 8
push ebx
push esi
call fcn.00406640
add esp, 8
push 0x42b279
push eax
call fcn.00406640
add esp, 8
mov edi, esi
mov ebx, 7
lea esi, [esp + 0x4f0]
mov ecx, edi
call fcn.004068d0
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
mov eax, 0xf
mov dword [esp + 0x500], ebx
lea ecx, [esp + 0x20]
lea edx, [esp + 0x430]
mov dword [esp + 0x504], eax
mov dword [esp + 0x4f3], 0x44496873
mov dword [esp + 0x4f0], 0x73617243
mov byte [esp + 0x4f7], 0
push esi
call fcn.0041b740
add esp, 4
mov edx, dword [esp + 0x430]
xor ecx, ecx
add edx, 0x28
call fcn.004082f0
mov eax, dword [esp + 0x504]
cmp eax, 0x10
jb 0x40754e
mov ecx, dword [esp + 0x4f0]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x40824a
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov bl, 1
jmp 0x407568
xor ebx, ebx
jmp 0x407594
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov ecx, eax
mov eax, dword [eax + edx]
add ecx, edx
push 1
call dword [eax]
xor ebx, ebx
mov eax, dword [esp + 0x51c]
cmp eax, 0x10
jb 0x407594
mov ecx, dword [esp + 0x508]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4081f1
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esp + 0x534]
cmp eax, 0x10
jb 0x4075c0
mov ecx, dword [esp + 0x520]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408173
push esi
push ecx
call fcn.00426ce1
add esp, 8
lea esi, [esp + 0x4a8]
mov ecx, esi
call fcn.00417680
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
lea ecx, [esp + 0x20]
call fcn.00405580
test bl, bl
je 0x406e98
call fcn.004069b0
jmp 0x407fec
mov ebx, 0x42f548
cmp esi, 0x10
jb 0x406ed0
mov eax, esi
mov edi, 0x7fffffff
or eax, 0xf
cmp eax, 0x7fffffff
cmovb edi, eax
cmp edi, 0xfff
jae 0x40811c
lea eax, [edi + 1]
push eax
call fcn.00426cac
add esp, 4
lea ecx, [esi + 1]
mov dword [esp + 0x430], eax
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0x440], esi
mov dword [esp + 0x444], edi
mov ecx, dword [esp + 0x430]
mov edx, esi
push 2
call fcn.0041c6d0
add esp, 4
cmp eax, 2
jl 0x407fcb
lea esi, [esp + 0x430]
mov ecx, esi
push 0
push eax
call fcn.004082b0
lea edi, [esp + 0x520]
mov edx, esi
mov ecx, edi
call fcn.004129a0
lea esi, [esp + 0x508]
push str..dmp
push edi
push esi
call fcn.004011e0
add esp, 0xc
cmp dword [esp + 0x51c], 7
jbe 0x4076b0
mov esi, dword [esp + 0x508]
lea eax, [esp + 0x30]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x407f19
xor ebx, ebx
xor edi, edi
mov dword [esp], 0
jmp 0x4077d0
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407870
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407c23
add eax, 0x23
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x407919
add eax, 0x23
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00426cac
add esp, 4
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
mov eax, dword [esp + 0x448]
mov ecx, dword [esp + 0x44c]
jmp 0x4079be
add eax, 0x23
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x407a4e
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jae 0x4082a3
add ecx, 0x23
jmp 0x407bdf
mov eax, 0xffffffff
jmp 0x407994
xor eax, eax
jmp 0x407919
xor esi, esi
jmp 0x4079b6
xor eax, eax
jmp 0x407a4e
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov dword [esp + 0x44c], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x448], eax
push 0x42b65c
lea eax, [esp + 0x524]
push eax
lea esi, [esp + 0x4f8]
push esi
call fcn.004011e0
add esp, 0xc
mov ecx, esi
lea eax, [esp + 0x5c]
push eax
call fcn.00401140
movsd xmm0, qword [eax + 0x10]
lea ecx, [esp + 0x450]
movsd qword [ecx + 0x10], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [ecx + 8], xmm1
movsd qword [ecx], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], 0
mov ecx, dword [esp + 0x504]
cmp ecx, 8
jb 0x40787a
mov eax, dword [esp + 0x4f0]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4076d9
push edx
push eax
call fcn.00426ce1
add esp, 8
mov eax, dword [esp]
cmp eax, ebx
je 0x407950
mov eax, dword [esp + 4]
mov dword [esp + 0xc], ebx
mov dword [ebx], eax
mov eax, dword [esp + 8]
mov dword [ebx + 4], eax
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
lea eax, [esp + 0x450]
mov ebx, dword [esp + 0x460]
cmp dword [esp + 0x464], 7
mov ecx, eax
jbe 0x4078c5
mov ecx, dword [esp + 0x450]
mov eax, dword [esp + 0xc]
cmp ebx, 7
lea eax, [eax + 8]
jbe 0x407b20
mov esi, ebx
mov dword [esp + 8], eax
mov eax, 0x7ffffffe
or esi, 7
cmp esi, 0x7ffffffe
cmovae esi, eax
mov eax, esi
inc eax
js 0x407b58
lea eax, [esi + esi + 2]
cmp eax, 0x1000
mov dword [esp + 4], ecx
jae 0x407717
test eax, eax
je 0x4077b2
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esp + 8]
mov dword [ecx], eax
lea ecx, [ebx + ebx + 2]
push ecx
push dword [esp + 8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], ebx
mov ebx, eax
mov dword [eax + 0x1c], esi
add ebx, 0x20
jmp 0x407c00
sub eax, edi
mov edx, ebx
mov ecx, 0x7ffffff
mov ebx, eax
mov dword [esp + 0x14], eax
sub edx, edi
sar ebx, 5
sar edx, 5
mov eax, ebx
inc edx
shr eax, 1
mov dword [esp + 0xc], edx
sub ecx, eax
cmp ebx, ecx
ja 0x407983
mov ecx, dword [esp + 0xc]
add eax, ebx
cmp eax, ecx
cmovb eax, ecx
mov edx, eax
cmp edx, 0x7ffffff
ja 0x4077a8
mov eax, edx
shl eax, 5
cmp eax, 0x1000
mov dword [esp + 0x1c], edx
jae 0x40773b
test eax, eax
je 0x4077b9
push eax
call fcn.00426cac
add esp, 4
mov esi, eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
shl ebx, 5
mov dword [esi + ebx], eax
mov dword [esi + ebx + 4], ecx
mov dword [esi + ebx + 0x18], 0
mov dword [esi + ebx + 0x1c], 0
lea eax, [esp + 0x450]
mov ecx, dword [esp + 0x460]
cmp dword [esp + 0x464], 7
mov edx, eax
jbe 0x4079f9
mov edx, dword [esp + 0x450]
lea eax, [esi + ebx + 8]
cmp ecx, 7
jbe 0x407b3c
mov ebx, ecx
mov dword [esp + 8], eax
mov eax, 0x7ffffffe
or ebx, 7
cmp ebx, 0x7ffffffe
cmovae ebx, eax
mov eax, ebx
inc eax
js 0x407b62
lea eax, [ebx + ebx + 2]
cmp eax, 0x1000
mov dword [esp + 4], ecx
mov dword [esp + 0x18], edx
jae 0x40776b
test eax, eax
je 0x4077c0
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esp + 8]
mov dword [ecx], eax
mov ecx, dword [esp + 4]
lea ecx, [ecx + ecx + 2]
push ecx
push dword [esp + 0x1c]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
add esp, 0xc
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ebx
mov ebx, dword [esp]
cmp edi, ebx
je 0x407af6
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [edi + eax]
mov edx, dword [edi + eax + 4]
mov dword [esi + eax], ecx
mov dword [esi + eax + 4], edx
mov dword [esi + eax + 0x18], 0
mov dword [esi + eax + 0x1c], 0
lea ecx, [edi + eax + 0x20]
movsd xmm0, qword [edi + eax + 0x18]
movsd qword [esi + eax + 0x18], xmm0
movsd xmm0, qword [edi + eax + 8]
movsd xmm1, qword [edi + eax + 0x10]
movsd qword [esi + eax + 0x10], xmm1
movsd qword [esi + eax + 8], xmm0
mov dword [edi + eax + 0x18], 0
mov dword [edi + eax + 0x1c], 7
mov word [edi + eax + 8], 0
add eax, 0x20
cmp ecx, ebx
jne 0x407a90
mov ebx, edi
test ebx, ebx
je 0x407be9
mov eax, dword [esp]
cmp ebx, eax
jne 0x407b90
sub eax, ebx
mov edi, ebx
mov ecx, eax
cmp ecx, 0x1000
jb 0x407bdd
jmp 0x40778f
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
mov esi, 7
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
jmp 0x407931
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
mov ebx, 7
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
jmp 0x407a72
mov eax, 0xffffffff
jmp 0x4078f9
mov eax, 0xffffffff
jmp 0x407a2a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407ba7
mov ecx, dword [ebx + 0x1c]
cmp ecx, 8
jb 0x407bb1
mov eax, dword [ebx + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407b6c
push edx
push eax
call fcn.00426ce1
add esp, 8
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 7
mov word [ebx + 8], 0
add ebx, 0x20
cmp dword [esp], ebx
jne 0x407b90
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1000
jae 0x40778f
mov eax, edi
push ecx
push eax
call fcn.00426ce1
add esp, 8
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
mov edi, esi
shl ebx, 5
shl eax, 5
add ebx, esi
add eax, esi
mov dword [esp], eax
mov ecx, dword [esp + 0x464]
cmp ecx, 8
jb 0x407c2d
mov eax, dword [esp + 0x450]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4076f8
push edx
push eax
call fcn.00426ce1
add esp, 8
lea eax, [esp + 0x30]
push eax
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4077d0
mov esi, ebx
mov ecx, edi
mov edx, ebx
sub esi, edi
sar esi, 5
push esi
call fcn.0041e510
add esp, 4
cmp esi, 0xb
jae 0x407d30
jmp 0x407e8d
lea eax, [ebx - 0x18]
cmp esi, 8
jae 0x407d5f
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
lea eax, [esp + 0x448]
movsd qword [esp + 0x450], xmm1
movsd qword [esp + 0x448], xmm0
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], 7
jmp 0x407dd1
mov eax, 0xffffffff
cmp eax, 0x1000
jb 0x407d92
add eax, 0x23
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x407d9f
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407e2f
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407e70
xor eax, eax
jmp 0x407d9f
mov dword [esp + 0x458], 0
mov dword [esp + 0x45c], 0
mov esi, dword [ebx - 8]
cmp dword [ebx - 4], 7
jbe 0x407c70
mov eax, dword [ebx - 0x18]
cmp esi, 8
jb 0x407c7c
mov dword [esp + 0xc], ebx
mov ebx, esi
mov dword [esp + 4], eax
mov eax, 0x7ffffffe
or ebx, 7
cmp ebx, 0x7ffffffe
cmovae ebx, eax
mov eax, ebx
inc eax
js 0x407cb5
lea eax, [ebx + ebx + 2]
cmp eax, 0x1000
jae 0x407cc5
test eax, eax
je 0x407d27
push eax
call fcn.00426cac
add esp, 4
lea ecx, [esi + esi + 2]
mov dword [esp + 0x448], eax
push ecx
push dword [esp + 8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], ebx
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [esp + 0x458]
lea esi, [esp + 0x448]
mov ecx, esi
add edx, 0xfffffffc
push 6
push str..extra
push 4
call fcn.0041dda0
add esp, 0xc
cmp dword [esp + 0x45c], 7
jbe 0x407e0d
mov esi, dword [esp + 0x448]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebx - 4]
cmp ecx, 8
jb 0x407e39
mov eax, dword [ebx - 0x18]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407ce9
push edx
push eax
call fcn.00426ce1
add esp, 8
mov dword [ebx - 8], 0
mov dword [ebx - 4], 7
mov word [ebx - 0x18], 0
mov ecx, dword [esp + 0x45c]
cmp ecx, 8
jb 0x407e7a
mov eax, dword [esp + 0x448]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407d08
push edx
push eax
call fcn.00426ce1
add esp, 8
add ebx, 0xffffffe0
mov eax, ebx
sub eax, edi
sar eax, 5
cmp eax, 0xa
ja 0x407d30
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x407f19
cmp edi, ebx
je 0x407efc
mov esi, edi
jmp 0x407ec0
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407ed7
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x407ee1
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407ea3
push edx
push eax
call fcn.00426ce1
add esp, 8
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], 0
add esi, 0x20
cmp ebx, esi
jne 0x407ec0
mov ecx, dword [esp]
sub ecx, edi
cmp ecx, 0x1000
jae 0x408138
mov eax, edi
push ecx
push eax
call fcn.00426ce1
add esp, 8
mov ecx, dword [esp + 0x51c]
mov esi, 0xf
mov edi, 7
cmp ecx, 8
jb 0x407f50
mov eax, dword [esp + 0x508]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4080ad
push edx
push eax
call fcn.00426ce1
add esp, 8
mov ecx, dword [esp + 0x534]
cmp ecx, 8
jb 0x407f7d
mov eax, dword [esp + 0x520]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4080d6
push edx
push eax
call fcn.00426ce1
add esp, 8
add edi, 0xfffffff9
lea edx, [esp + 0x30]
mov ecx, 1
adc esi, 0xffffffff
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov byte [esp + 0x30], 0
call fcn.004082f0
mov eax, dword [esp + 0x44]
cmp eax, 0x10
jb 0x407fc4
mov ecx, dword [esp + 0x30]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x4080ff
push esi
push ecx
call fcn.00426ce1
add esp, 8
mov edi, dword [esp + 0x444]
cmp edi, 0x10
jb 0x407fec
mov eax, dword [esp + 0x430]
lea edx, [edi + 1]
cmp edx, 0x1000
jae 0x40801f
push edx
push eax
call fcn.00426ce1
add esp, 8
mov ecx, dword [esp + 0x538]
xor ecx, ebp
call fcn.00427650
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406f59
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x4082a3
add edi, 0x24
mov eax, ecx
mov edx, edi
jmp 0x407fe2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406d37
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406d81
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406dad
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406e1a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
mov esi, 0xf
mov edi, 7
add ecx, 0x25
mov edx, ecx
jmp 0x407f46
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4082a3
add ecx, ecx
mov esi, 0xf
mov edi, 7
add ecx, 0x25
mov edx, ecx
jmp 0x407f73
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407fba
lea eax, [edi + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x407629
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jae 0x4082a3
add ecx, 0x23
jmp 0x407f0f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x407022
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x4075b6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x40711c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x407162
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x40718e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x40758a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
mov esi, dword [esp]
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4072a5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
mov esi, dword [esp]
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x4072d1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407544
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
mov esi, dword [esp]
add eax, 0x24
mov ecx, edx
lea ebx, [esp + 0x30]
mov edi, eax
jmp 0x407459
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x4082a3
mov esi, dword [esp]
add eax, 0x24
mov ecx, edx
lea ebx, [esp + 0x30]
mov edi, eax
jmp 0x407485
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3