Function at 0x401f3e
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2484
push edi
lea edi, [ebp - 0x2484]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x401f67
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x405474
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4020e4
push eax
push edi
call fcn.00405a6b
cmp eax, 1
jne 0x401f9b
mov dword [edi], 0x405e6c
jmp 0x401fcc
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4020e2
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x23c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x23c8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4020e2
lea edx, [ebp - 0x2224]
push edx
lea edx, [ebp - 0x2274]
push edx
lea edx, [ebp - 0x22c4]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4020e2
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x22c4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x23c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x23c8]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2274]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x23c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x23c8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402124
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x405474
mov dword [ebp - 0x1fd8], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x21d4]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x1ec8], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40218f
cmp eax, 0xb
je 0x40218f
cmp eax, 0x2e
jne 0x40229d
mov byte [ebp - 0xea0], 0x29
mov byte [ebp - 0xe9f], 2
push 0xfa
lea edx, [ebp - 0x20da]
push edx
push 2
lea edx, [ebp - 0xea0]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x40220c
push 0xa0d31
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x1ec8], 1
jmp 0x40229d
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0xe94], esp
push 0x706870
push 0x2e747365
push 0x745f656e
push 0x696c6b5f
push 0x656b6962
push 0x5f61646e
push 0x6f682f74
push 0x7365742f
lea edx, [ebp - 0xe9c]
push edx
lea edx, [ebp - 0x20da]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0xe94]
call fcn.004069af
mov dword [ebp - 0x1ec8], eax
add esp, 0x20
add esp, 0xc
test eax, eax
jne 0x40229d
mov byte [ebp - 0xe9e], 0x2a
mov byte [ebp - 0xe9d], 0xa
push 0xfa
lea edx, [ebp - 0x20da]
push edx
push 0xa
lea edx, [ebp - 0xe9e]
push edx
call dword [ebx + 0x40]
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x402352
cmp dword [esi + 0x274], 0x625f6164
jne 0x402352
cmp dword [esi + 0x278], 0x37656b69
jne 0x402352
cmp dword [esi + 0x27c], 0x24315f36
jne 0x402352
cmp dword [esi + 0x280], 0x5232334d
jne 0x402352
cmp dword [esi + 0x284], 0x2f36355b
jne 0x402352
cmp dword [esi + 0x288], 0x2f383231
jne 0x402352
cmp dword [esi + 0x28c], 0x2f323931
jne 0x402352
cmp dword [esi + 0x290], 0x2f363532
jne 0x402352
cmp dword [esi + 0x294], 0x2f343833
jne 0x402352
cmp dword [esi + 0x298], 0x6b323135
jne 0x402352
cmp dword [esi + 0x29c], 0x2d4b205d
jne 0x402352
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x402352
cmp byte [esi + 0x2a4], 0
je 0x402528
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x402426
cmp dword [esi + 0x274], 0x625f6164
jne 0x402426
cmp dword [esi + 0x278], 0x37656b69
jne 0x402426
cmp dword [esi + 0x27c], 0x24315f36
jne 0x402426
cmp dword [esi + 0x280], 0x53455428
jne 0x402426
cmp dword [esi + 0x284], 0x334d2954
jne 0x402426
cmp dword [esi + 0x288], 0x355b5232
jne 0x402426
cmp dword [esi + 0x28c], 0x32312f36
jne 0x402426
cmp dword [esi + 0x290], 0x39312f38
jne 0x402426
cmp dword [esi + 0x294], 0x35322f32
jne 0x402426
cmp dword [esi + 0x298], 0x38332f36
jne 0x402426
cmp dword [esi + 0x29c], 0x31352f34
jne 0x402426
cmp dword [esi + 0x2a0], 0x205d6b32
jne 0x402426
cmp dword [esi + 0x2a4], 0x696c2d4b
jne 0x402426
cmp word [esi + 0x2a8], 0x656e
jne 0x402426
cmp byte [esi + 0x2aa], 0
je 0x402528
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x40248a
cmp dword [esi + 0x274], 0x625f6164
jne 0x40248a
cmp dword [esi + 0x278], 0x37656b69
jne 0x40248a
cmp dword [esi + 0x27c], 0x24325f36
jne 0x40248a
cmp dword [esi + 0x280], 0x5b433852
jne 0x40248a
cmp dword [esi + 0x284], 0x5d6b3639
jne 0x40248a
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x40248a
cmp dword [esi + 0x28c], 0x656e69
je 0x402528
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x40546c
cmp dword [esi + 0x274], 0x625f6164
jne 0x40546c
cmp dword [esi + 0x278], 0x37656b69
jne 0x40546c
cmp dword [esi + 0x27c], 0x24325f36
jne 0x40546c
cmp dword [esi + 0x280], 0x53455428
jne 0x40546c
cmp dword [esi + 0x284], 0x38522954
jne 0x40546c
cmp dword [esi + 0x288], 0x36395b43
jne 0x40546c
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x40546c
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x40546c
cmp word [esi + 0x294], 0x65
jne 0x40546c
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x402551
cmp eax, 0x2e
jne 0x402904
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x402606
cmp dword [esi + 0x274], 0x625f6164
jne 0x402606
cmp dword [esi + 0x278], 0x37656b69
jne 0x402606
cmp dword [esi + 0x27c], 0x24315f36
jne 0x402606
cmp dword [esi + 0x280], 0x5232334d
jne 0x402606
cmp dword [esi + 0x284], 0x2f36355b
jne 0x402606
cmp dword [esi + 0x288], 0x2f383231
jne 0x402606
cmp dword [esi + 0x28c], 0x2f323931
jne 0x402606
cmp dword [esi + 0x290], 0x2f363532
jne 0x402606
cmp dword [esi + 0x294], 0x2f343833
jne 0x402606
cmp dword [esi + 0x298], 0x6b323135
jne 0x402606
cmp dword [esi + 0x29c], 0x2d4b205d
jne 0x402606
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x402606
cmp byte [esi + 0x2a4], 0
je 0x402702
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x4027c0
cmp dword [esi + 0x274], 0x625f6164
jne 0x4027c0
cmp dword [esi + 0x278], 0x37656b69
jne 0x4027c0
cmp dword [esi + 0x27c], 0x24315f36
jne 0x4027c0
cmp dword [esi + 0x280], 0x53455428
jne 0x4027c0
cmp dword [esi + 0x284], 0x334d2954
jne 0x4027c0
cmp dword [esi + 0x288], 0x355b5232
jne 0x4027c0
cmp dword [esi + 0x28c], 0x32312f36
jne 0x4027c0
cmp dword [esi + 0x290], 0x39312f38
jne 0x4027c0
cmp dword [esi + 0x294], 0x35322f32
jne 0x4027c0
cmp dword [esi + 0x298], 0x38332f36
jne 0x4027c0
cmp dword [esi + 0x29c], 0x31352f34
jne 0x4027c0
cmp dword [esi + 0x2a0], 0x205d6b32
jne 0x4027c0
cmp dword [esi + 0x2a4], 0x696c2d4b
jne 0x4027c0
cmp word [esi + 0x2a8], 0x656e
jne 0x4027c0
cmp byte [esi + 0x2aa], 0
jne 0x4027c0
cmp dword [ebp - 0x1ec8], 0
jne 0x4027c0
cmp dword [esi + 0x14], 0xe000
je 0x4027c0
cmp dword [esi + 0x14], 0x20000
je 0x4027c0
cmp dword [esi + 0x14], 0x30000
je 0x4027c0
cmp dword [esi + 0x14], 0x40000
je 0x4027c0
cmp dword [esi + 0x14], 0x60000
je 0x4027c0
cmp dword [esi + 0x14], 0x80000
je 0x4027c0
push 0xa0d24
push 0x53455459
push 0x42242038
push 0x38323432
push 0x352f3631
push 0x32333933
push 0x2f343431
push 0x3236322f
push 0x38303636
push 0x39312f32
push 0x37303133
push 0x312f3434
push 0x33373520
push 0x3a244542
push 0x5f545355
push 0x4d5f455a
push 0x49535f45
push 0x4c494624
push esp
call dword [ebx + 0x30]
add esp, 0x48
mov dword [ebp - 0x1ec8], 1
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x402824
cmp dword [esi + 0x274], 0x625f6164
jne 0x402824
cmp dword [esi + 0x278], 0x37656b69
jne 0x402824
cmp dword [esi + 0x27c], 0x24325f36
jne 0x402824
cmp dword [esi + 0x280], 0x5b433852
jne 0x402824
cmp dword [esi + 0x284], 0x5d6b3639
jne 0x402824
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x402824
cmp dword [esi + 0x28c], 0x656e69
je 0x4028b2
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x402904
cmp dword [esi + 0x274], 0x625f6164
jne 0x402904
cmp dword [esi + 0x278], 0x37656b69
jne 0x402904
cmp dword [esi + 0x27c], 0x24325f36
jne 0x402904
cmp dword [esi + 0x280], 0x53455428
jne 0x402904
cmp dword [esi + 0x284], 0x38522954
jne 0x402904
cmp dword [esi + 0x288], 0x36395b43
jne 0x402904
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x402904
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x402904
cmp word [esi + 0x294], 0x65
jne 0x402904
cmp dword [ebp - 0x1ec8], 0
jne 0x402904
cmp dword [esi + 0x14], 0x18000
je 0x402904
push 0
push 0xa0d2453
push 0x45545942
push 0x24203430
push 0x33383920
push 0x3a244542
push 0x5f545355
push 0x4d5f455a
push 0x49535f45
push 0x4c494624
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x1ec8], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40291d
cmp eax, 0xb
je 0x40291d
cmp eax, 0x2e
jne 0x404fcc
cmp dword [ebp - 0x1ec8], 0
jne 0x404fcc
push 0x28a0
push 0x1200
push 3
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402958
mov dword [ebp - 0x1ec8], 1
jmp 0x404fcc
push 0xbb
push 0x15
push 0x3e
push 0x14
push 0xcb
push 0x13
push 0
push 0x20
push 0
push 0x16
push 0
push 0x21
push 1
push 3
push 0
push 0xc
push 0x6e
push 0xa
push 0x28
push 7
push 0
push 0xa
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x4029ac
mov dword [ebp - 0x1ec8], 1
jmp 0x404fb6
push 0
push 0
push 0
push 0
push 0
push 0
push 0x30000
push 0
push 0x100
push 0
push 0
push 0
push 0x300
push 0
push 1
push 0
push 0
push 0
push 3
push 1
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x58
cmp eax, 0xffffffff
jne 0x402a01
mov dword [ebp - 0x1ec8], 1
jmp 0x404fb6
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402a15
cmp eax, 0xb
jne 0x402f6e
push 0
push 0xa0d2446
push 0x464f5f4e
push 0x4f495449
push 0x4e47495f
push 0x4e525554
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
push 0x24
push 0x474e494e
push 0x52415724
lea edx, [ebp - 0xe8c]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0xc
push 0x244646
push 0x4f5f4e4f
push 0x4954494e
push 0x47495f4e
push 0x52555424
lea edx, [ebp - 0x23c8]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0x14
push 0
lea edx, [ebp - 0xe8c]
push edx
lea edx, [ebp - 0x23c8]
push edx
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_MessageBoxW]
cmp dword [ebp - 0x1ec8], 0
jne 0x402ba9
mov dword [ebp - 0xea4], 0x100
push 0xff
push esp
push 1
push 0x3e8
push 0
push 3
push 0
call fcn.0040571c
add esp, 4
cmp eax, 0xffffffff
jne 0x402af8
mov dword [ebp - 0x1ec8], 1
jmp 0x402ba9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 3
push 0
call fcn.00405878
cmp eax, 0xffffffff
jne 0x402b1e
mov dword [ebp - 0x1ec8], 1
jmp 0x402ba9
test eax, eax
je 0x402ba9
push 0xeb
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0xea4]
jne 0x402ac9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402b8b
xor eax, eax
jmp 0x402b95
cmp eax, 0x20
jbe 0x402b95
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
push 0xa0d
push 0x2453444e
push 0x4f434553
push 0x5f30315f
push 0x524f465f
push 0x54494157
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0xe90], 0x28
push 0x270000
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0xfa
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0
push 0
push 0x405
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
dec dword [ebp - 0xe90]
jne 0x402c24
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0xa0d24
push 0x4e4f5f4e
push 0x4f495449
push 0x4e47495f
push 0x4e525554
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0x244e
push 0x4f5f4e4f
push 0x4954494e
push 0x47495f4e
push 0x52555424
lea edx, [ebp - 0x23c8]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0x14
push 0
lea edx, [ebp - 0xe8c]
push edx
lea edx, [ebp - 0x23c8]
push edx
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_MessageBoxW]
cmp dword [ebp - 0x1ec8], 0
jne 0x402d3a
mov dword [ebp - 0x1fd0], 0x100
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
push 0x28a0
push 0x1200
push 3
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402d3a
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402d92
push 0xbb
push 0x15
push 0x3e
push 0x14
push 0xcb
push 0x13
push 0
push 0x20
push 0
push 0x16
push 0
push 0x21
push 1
push 3
push 0
push 0xc
push 0x6e
push 0xa
push 0x28
push 7
push 0
push 0xa
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x402d92
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402deb
push 0
push 0
push 0
push 0
push 0
push 0
push 0x30000
push 0
push 0x100
push 0
push 0
push 0
push 0x300
push 0
push 1
push 0
push 0
push 0
push 3
push 1
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x58
cmp eax, 0xffffffff
jne 0x402deb
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402ebd
push 0
push esp
push 1
push 0x6e
push 0
push 3
push 0
call fcn.0040571c
add esp, 4
cmp eax, 0xffffffff
jne 0x402e21
mov dword [ebp - 0x1ec8], 1
jmp 0x402ebd
lea edx, [ebp - 0x1ec4]
push edx
push 0xc8
push 3
push 0
call fcn.00405878
cmp eax, 0xffffffff
jne 0x402e47
mov dword [ebp - 0x1ec8], 1
jmp 0x402ebd
test eax, eax
jne 0x402ebd
dec dword [ebp - 0x1fd0]
jne 0x402ceb
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402e9f
xor eax, eax
jmp 0x402ea9
cmp eax, 0x20
jbe 0x402ea9
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402eeb
push 0
push 3
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402eeb
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402f29
push 0x8c7204fe
push 0
push 4
push 0
push 0
push 0
push 3
push 0
lea edx, [ebp - 0x1ec4]
push edx
lea edx, [esp + 4]
push edx
push 0xd
call dword [edi]
add esp, 0x20
cmp eax, 0xffffffff
jne 0x402f29
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x402f6e
push 0x99
push 0xf0000572
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x402f64
cmp eax, 0xffffffff
jne 0x402f6e
mov dword [ebp - 0x1ec8], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x403a8c
cmp dword [ebp - 0x1ec8], 0
jne 0x402fc7
push 0x436f48
push 0x6f6c6c65
push 0x48e00b27
push esp
push 0xb
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x402fbd
cmp eax, 0xffffffff
jne 0x402fc7
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x403011
push 0x22756f
push 0x59657241
push 0x77e00b27
push esp
push 0xb
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403007
cmp eax, 0xffffffff
jne 0x403011
mov dword [ebp - 0x1ec8], 1
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x4030c6
cmp dword [esi + 0x274], 0x625f6164
jne 0x4030c6
cmp dword [esi + 0x278], 0x37656b69
jne 0x4030c6
cmp dword [esi + 0x27c], 0x24315f36
jne 0x4030c6
cmp dword [esi + 0x280], 0x5232334d
jne 0x4030c6
cmp dword [esi + 0x284], 0x2f36355b
jne 0x4030c6
cmp dword [esi + 0x288], 0x2f383231
jne 0x4030c6
cmp dword [esi + 0x28c], 0x2f323931
jne 0x4030c6
cmp dword [esi + 0x290], 0x2f363532
jne 0x4030c6
cmp dword [esi + 0x294], 0x2f343833
jne 0x4030c6
cmp dword [esi + 0x298], 0x6b323135
jne 0x4030c6
cmp dword [esi + 0x29c], 0x2d4b205d
jne 0x4030c6
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x4030c6
cmp byte [esi + 0x2a4], 0
je 0x4031c2
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x40353d
cmp dword [esi + 0x274], 0x625f6164
jne 0x40353d
cmp dword [esi + 0x278], 0x37656b69
jne 0x40353d
cmp dword [esi + 0x27c], 0x24315f36
jne 0x40353d
cmp dword [esi + 0x280], 0x53455428
jne 0x40353d
cmp dword [esi + 0x284], 0x334d2954
jne 0x40353d
cmp dword [esi + 0x288], 0x355b5232
jne 0x40353d
cmp dword [esi + 0x28c], 0x32312f36
jne 0x40353d
cmp dword [esi + 0x290], 0x39312f38
jne 0x40353d
cmp dword [esi + 0x294], 0x35322f32
jne 0x40353d
cmp dword [esi + 0x298], 0x38332f36
jne 0x40353d
cmp dword [esi + 0x29c], 0x31352f34
jne 0x40353d
cmp dword [esi + 0x2a0], 0x205d6b32
jne 0x40353d
cmp dword [esi + 0x2a4], 0x696c2d4b
jne 0x40353d
cmp word [esi + 0x2a8], 0x656e
jne 0x40353d
cmp byte [esi + 0x2aa], 0
jne 0x40353d
cmp dword [ebp - 0x1ec8], 0
jne 0x403241
push 0x14
push 0x4dffc00
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x4031ff
cmp eax, 0xffffffff
jne 0x40320b
mov dword [ebp - 0x1ec8], 1
jmp 0x403241
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x403241
mov dword [esi + 0x14], 0xe000
mov dword [ebp - 0xc84], 0x401024
mov dword [ebp - 0xc80], 0x24
mov dword [ebp - 0xc7c], 0x10
jmp 0x4034c3
cmp dword [ebp - 0x1ec8], 0
jne 0x4032c3
push 0xf3
push 0x4fffc01
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403281
cmp eax, 0xffffffff
jne 0x40328d
mov dword [ebp - 0x1ec8], 1
jmp 0x4032c3
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x4032c3
mov dword [esi + 0x14], 0x20000
mov dword [ebp - 0xc84], 0x401048
mov dword [ebp - 0xc80], 0x48
mov dword [ebp - 0xc7c], 0x10
jmp 0x4034c3
cmp dword [ebp - 0x1ec8], 0
jne 0x403345
push 0xf2
push 0x4fffc02
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403303
cmp eax, 0xffffffff
jne 0x40330f
mov dword [ebp - 0x1ec8], 1
jmp 0x403345
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x403345
mov dword [esi + 0x14], 0x30000
mov dword [ebp - 0xc84], 0x40106c
mov dword [ebp - 0xc80], 0x6c
mov dword [ebp - 0xc7c], 0x10
jmp 0x4034c3
cmp dword [ebp - 0x1ec8], 0
jne 0x4033c7
push 0xf1
push 0x4fffc03
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403385
cmp eax, 0xffffffff
jne 0x403391
mov dword [ebp - 0x1ec8], 1
jmp 0x4033c7
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x4033c7
mov dword [esi + 0x14], 0x40000
mov dword [ebp - 0xc84], 0x401090
mov dword [ebp - 0xc80], 0x90
mov dword [ebp - 0xc7c], 0x10
jmp 0x4034c3
cmp dword [ebp - 0x1ec8], 0
jne 0x403446
push 0xef
push 0x4fffc05
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403407
cmp eax, 0xffffffff
jne 0x403413
mov dword [ebp - 0x1ec8], 1
jmp 0x403446
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x403446
mov dword [esi + 0x14], 0x60000
mov dword [ebp - 0xc84], 0x4010b4
mov dword [ebp - 0xc80], 0xb4
mov dword [ebp - 0xc7c], 0x10
jmp 0x4034c3
cmp dword [ebp - 0x1ec8], 0
jne 0x4034c3
push 0xed
push 0x4fffc07
push 0x9008282
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403486
cmp eax, 0xffffffff
jne 0x403492
mov dword [ebp - 0x1ec8], 1
jmp 0x4034c3
cmp dword [ebp - 0x1ec0], 0xaaaaaaaa
jne 0x4034c3
mov dword [esi + 0x14], 0x80000
mov dword [ebp - 0xc84], 0x4010d8
mov dword [ebp - 0xc80], 0xd8
mov dword [ebp - 0xc7c], 0x10
cmp dword [ebp - 0x1ec8], 0
jne 0x40353d
cmp dword [esi + 0x14], 0xe000
je 0x40353d
cmp dword [esi + 0x14], 0x20000
je 0x40353d
cmp dword [esi + 0x14], 0x30000
je 0x40353d
cmp dword [esi + 0x14], 0x40000
je 0x40353d
cmp dword [esi + 0x14], 0x60000
je 0x40353d
cmp dword [esi + 0x14], 0x80000
je 0x40353d
push 0
push 0xa0d2455
push 0x43455f44
push 0x4554524f
push 0x50505553
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x1ec8], 1
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x40359d
cmp dword [esi + 0x274], 0x625f6164
jne 0x40359d
cmp dword [esi + 0x278], 0x37656b69
jne 0x40359d
cmp dword [esi + 0x27c], 0x24325f36
jne 0x40359d
cmp dword [esi + 0x280], 0x5b433852
jne 0x40359d
cmp dword [esi + 0x284], 0x5d6b3639
jne 0x40359d
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x40359d
cmp dword [esi + 0x28c], 0x656e69
je 0x40361b
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x403640
cmp dword [esi + 0x274], 0x625f6164
jne 0x403640
cmp dword [esi + 0x278], 0x37656b69
jne 0x403640
cmp dword [esi + 0x27c], 0x24325f36
jne 0x403640
cmp dword [esi + 0x280], 0x53455428
jne 0x403640
cmp dword [esi + 0x284], 0x38522954
jne 0x403640
cmp dword [esi + 0x288], 0x36395b43
jne 0x403640
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x403640
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x403640
cmp word [esi + 0x294], 0x65
jne 0x403640
mov dword [esi + 0x14], 0x18000
mov dword [ebp - 0xc84], 0x401000
mov dword [ebp - 0xc80], 0
mov dword [ebp - 0xc7c], 0x10
cmp dword [ebp - 0x1ec8], 0
jne 0x403774
push 0x200
push 0
lea edx, [ebp - 0xb32]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0xc28], 0x21
mov dword [ebp - 0xc78], 0
mov ecx, dword [ebp - 0xc78]
cmp ecx, dword [ebp - 0xc7c]
jae 0x403774
mov eax, dword [ebp - 0xc80]
lea eax, [eax + ecx]
mov dword [ebp - 0xc26], eax
mov edx, dword [ebp - 0xc7c]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x4036c5
cmp ecx, 0xf0
jae 0x4036c5
mov eax, dword [ebp - 0xc84]
add eax, dword [ebp - 0xc78]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0xc22], al
inc ecx
jmp 0x4036a0
mov dword [ebp - 0xc74], ecx
add ecx, 4
mov byte [ebp - 0xc27], cl
push 0xfa
lea edx, [ebp - 0x20da]
push edx
push 0xf6
lea edx, [ebp - 0xc28]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x403744
push 0
push 0xa0d3220
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x1ec8], 1
jmp 0x403774
mov eax, dword [ebp - 0xc74]
mov ecx, dword [ebp - 0xc78]
add dword [ebp - 0xc78], eax
push eax
lea edx, [ebp - 0x20da]
push edx
lea edx, [ebp + ecx - 0xb32]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x403675
cmp dword [ebp - 0x1ec8], 0
jne 0x403a8c
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
mov dword [ebp - 0xc6c], 0
mov dword [ebp - 0xc70], 0
cmp dword [ebp - 0xc70], 0x20
jae 0x4037ff
imul ecx, dword [ebp - 0xc70], 0x10
mov eax, dword [ebp + ecx - 0xb2e]
sub eax, dword [ebp + ecx - 0xb32]
test eax, eax
je 0x4037ff
add dword [ebp - 0xc6c], eax
inc dword [ebp - 0xc70]
jmp 0x4037cf
mov eax, dword [ebp - 0xc6c]
shl eax, 7
and eax, 0xffff0000
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xc54], 0
mov dword [ebp - 0xc50], 0
mov dword [ebp - 0xc70], 0
cmp dword [ebp - 0xc70], 0x20
jae 0x403a51
imul ecx, dword [ebp - 0xc70], 0x10
mov eax, dword [ebp + ecx - 0xb2e]
sub eax, dword [ebp + ecx - 0xb32]
test eax, eax
je 0x403a51
mov eax, dword [ebp + ecx - 0xb32]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp + ecx - 0xb2e]
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp + ecx - 0xb2a]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp + ecx - 0xb26]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc68]
mov ecx, dword [ebp - 0xc64]
cmp eax, ecx
jae 0x403a46
sub ecx, eax
cmp ecx, dword [ebp - 0xc5c]
jbe 0x4038eb
mov ecx, dword [ebp - 0xc5c]
mov dword [ebp - 0xc58], ecx
push 0
push 0
push 0x9008282
add eax, dword [ebp - 0xc60]
mov byte [esp + 5], al
mov byte [esp + 6], ah
shr eax, 0x10
mov byte [esp + 4], al
mov byte [esp + 7], cl
xor ecx, ecx
xor edx, edx
cmp ecx, 8
jae 0x403925
movzx eax, byte [esp + ecx]
add edx, eax
inc ecx
jmp 0x403917
not edx
inc edx
mov byte [esp + 8], dl
push esp
push 9
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x403954
cmp eax, 0xffffffff
jne 0x403963
mov dword [ebp - 0x1ec8], 1
jmp 0x403a44
cmp byte [ebp - 0x1ec1], al
jne 0x403976
cmp word [ebp - 0x1ec4], 0x9292
je 0x4039e8
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4039c8
xor eax, eax
jmp 0x4039d2
cmp eax, 0x20
jbe 0x4039d2
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
jmp 0x403a44
mov eax, dword [ebp - 0xc68]
add eax, dword [esi + 0x24]
mov ecx, dword [ebp - 0xc58]
add dword [ebp - 0xc68], ecx
add dword [ebp - 0xc54], ecx
push ecx
lea edx, [ebp - 0x1ec0]
push edx
push eax
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp - 0xc54]
sub eax, dword [ebp - 0xc50]
cmp eax, 0x200
jb 0x403a37
call fcn.00405699
add dword [ebp - 0xc50], 0x200
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x4038c7
jmp 0x403a51
inc dword [ebp - 0xc70]
jmp 0x403869
cmp dword [ebp - 0x1ec8], 0
jne 0x403a83
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x403a8c
lea edx, [esi + 0x24]
push edx
call fcn.004059fa
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x403aa0
cmp eax, 0x2e
jne 0x403cfa
cmp dword [ebp - 0x1ec8], 0
jne 0x403cfa
cmp dword [esi + 0x14], 0xe000
jne 0x403ad9
mov dword [ebp - 0xc84], 0x401034
mov dword [ebp - 0xc80], 0x34
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x18000
jne 0x403b05
mov dword [ebp - 0xc84], 0x401010
mov dword [ebp - 0xc80], 0x10
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x20000
jne 0x403b31
mov dword [ebp - 0xc84], 0x401058
mov dword [ebp - 0xc80], 0x58
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x30000
jne 0x403b5a
mov dword [ebp - 0xc84], 0x40107c
mov dword [ebp - 0xc80], 0x7c
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x40000
jne 0x403b83
mov dword [ebp - 0xc84], 0x4010a0
mov dword [ebp - 0xc80], 0xa0
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x60000
jne 0x403bac
mov dword [ebp - 0xc84], 0x4010c4
mov dword [ebp - 0xc80], 0xc4
mov dword [ebp - 0xc7c], 0x14
jmp 0x403bd3
cmp dword [esi + 0x14], 0x80000
jne 0x403bd3
mov dword [ebp - 0xc84], 0x4010e8
mov dword [ebp - 0xc80], 0xe8
mov dword [ebp - 0xc7c], 0x14
push 0x280
push 0
lea edx, [ebp - 0x932]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0xc28], 0x21
mov dword [ebp - 0xc78], 0
mov ecx, dword [ebp - 0xc78]
cmp ecx, dword [ebp - 0xc7c]
jae 0x403cfa
mov eax, dword [ebp - 0xc80]
lea eax, [eax + ecx]
mov dword [ebp - 0xc26], eax
mov edx, dword [ebp - 0xc7c]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x403c4b
cmp ecx, 0xf0
jae 0x403c4b
mov eax, dword [ebp - 0xc84]
add eax, dword [ebp - 0xc78]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0xc22], al
inc ecx
jmp 0x403c26
mov dword [ebp - 0xc74], ecx
add ecx, 4
mov byte [ebp - 0xc27], cl
push 0xfa
lea edx, [ebp - 0x20da]
push edx
push 0xf6
lea edx, [ebp - 0xc28]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x403cca
push 0
push 0xa0d3320
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x1ec8], 1
jmp 0x403cfa
mov eax, dword [ebp - 0xc74]
mov ecx, dword [ebp - 0xc78]
add dword [ebp - 0xc78], eax
push eax
lea edx, [ebp - 0x20da]
push edx
lea edx, [ebp + ecx - 0x932]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x403bfb
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x403e97
cmp dword [ebp - 0x1ec8], 0
jne 0x403dd0
push 0x944d4750
push 0x201087d
push esp
push 8
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x403d48
cmp eax, 0xffffffff
jne 0x403d54
mov dword [ebp - 0x1ec8], 1
jmp 0x403dd0
cmp dword [ebp - 0x1ec4], 0x2050d
je 0x403dd0
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403db2
xor eax, eax
jmp 0x403dbc
cmp eax, 0x20
jbe 0x403dbc
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x403e97
push 0xbb49462d
push 0x301087d
push esp
push 8
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x403e0f
cmp eax, 0xffffffff
jne 0x403e1b
mov dword [ebp - 0x1ec8], 1
jmp 0x403e97
cmp dword [ebp - 0x1ec4], 0x3050d
je 0x403e97
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403e79
xor eax, eax
jmp 0x403e83
cmp eax, 0x20
jbe 0x403e83
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x403eab
cmp eax, 0x2e
jne 0x404fa6
cmp dword [ebp - 0x1ec8], 0
jne 0x403ed9
push 0
push 3
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x403ed9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x403fa7
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x403f20
cmp eax, 0xffffffff
jne 0x403f2c
mov dword [ebp - 0x1ec8], 1
jmp 0x403fa7
cmp word [ebp - 0x1ec4], 0x50e
je 0x403fa7
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403f89
xor eax, eax
jmp 0x403f93
cmp eax, 0x20
jbe 0x403f93
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404089
push 0x2af8
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a
push 0x201057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x403fee
cmp eax, 0xffffffff
jne 0x403ffd
mov dword [ebp - 0x1ec8], 1
jmp 0x404089
cmp dword [ebp - 0x1ec4], 0xe02070e
je 0x404233
cmp dword [ebp - 0x1ec4], 0x2070e
je 0x404089
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40406b
xor eax, eax
jmp 0x404075
cmp eax, 0x20
jbe 0x404075
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404158
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x770000
push 0x301077e
push esp
push 7
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x4040d0
cmp eax, 0xffffffff
jne 0x4040dc
mov dword [ebp - 0x1ec8], 1
jmp 0x404158
cmp dword [ebp - 0x1ec4], 0x3050e
je 0x404158
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40413a
xor eax, eax
jmp 0x404144
cmp eax, 0x20
jbe 0x404144
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404226
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x40419f
cmp eax, 0xffffffff
jne 0x4041ab
mov dword [ebp - 0x1ec8], 1
jmp 0x404226
cmp word [ebp - 0x1ec4], 0x50e
je 0x404226
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404208
xor eax, eax
jmp 0x404212
cmp eax, 0x20
jbe 0x404212
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x4042fa
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x6effff
push 0xff000000
push 0xb010b7e
push esp
push 0xb
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 0xc
test eax, eax
je 0x404272
cmp eax, 0xffffffff
jne 0x40427e
mov dword [ebp - 0x1ec8], 1
jmp 0x4042fa
cmp dword [ebp - 0x1ec4], 0xb050e
je 0x4042fa
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4042dc
xor eax, eax
jmp 0x4042e6
cmp eax, 0x20
jbe 0x4042e6
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x4043c8
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x404341
cmp eax, 0xffffffff
jne 0x40434d
mov dword [ebp - 0x1ec8], 1
jmp 0x4043c8
cmp word [ebp - 0x1ec4], 0x50e
je 0x4043c8
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4043aa
xor eax, eax
jmp 0x4043b4
cmp eax, 0x20
jbe 0x4043b4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404497
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0xdb9001
push 0xe01077e
push esp
push 7
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x40440f
cmp eax, 0xffffffff
jne 0x40441b
mov dword [ebp - 0x1ec8], 1
jmp 0x404497
cmp dword [ebp - 0x1ec4], 0xe00e040e
je 0x404497
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404479
xor eax, eax
jmp 0x404483
cmp eax, 0x20
jbe 0x404483
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404566
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7901
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x4044de
cmp eax, 0xffffffff
jne 0x4044ea
mov dword [ebp - 0x1ec8], 1
jmp 0x404566
cmp dword [ebp - 0x1ec4], 0x1060e
je 0x404566
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404548
xor eax, eax
jmp 0x404552
cmp eax, 0x20
jbe 0x404552
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404635
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x78ff
push 0x401067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x4045ad
cmp eax, 0xffffffff
jne 0x4045b9
mov dword [ebp - 0x1ec8], 1
jmp 0x404635
cmp dword [ebp - 0x1ec4], 0x4050e
je 0x404635
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404617
xor eax, eax
jmp 0x404621
cmp eax, 0x20
jbe 0x404621
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404703
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x40467c
cmp eax, 0xffffffff
jne 0x404688
mov dword [ebp - 0x1ec8], 1
jmp 0x404703
cmp word [ebp - 0x1ec4], 0x50e
je 0x404703
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4046e5
xor eax, eax
jmp 0x4046ef
cmp eax, 0x20
jbe 0x4046ef
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x4048ad
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0xea4], 0x200
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x77
push 0x501057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x404776
cmp eax, 0xffffffff
jne 0x404785
mov dword [ebp - 0x1ec8], 1
jmp 0x4048ad
cmp word [ebp - 0x1ec4], 0x50e
je 0x404802
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x24524f52
push 0x52455f4d
push 0x4f525f47
push 0x4e495341
push 0x52455f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4047df
xor eax, eax
jmp 0x4047e9
cmp eax, 0x20
jbe 0x4047e9
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
jmp 0x4048ad
cmp byte [ebp - 0x1ec1], 0
je 0x404886
dec dword [ebp - 0xea4]
jne 0x40473f
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x24524f52
push 0x52455f4d
push 0x4f525f47
push 0x4e495341
push 0x52455f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404866
xor eax, eax
jmp 0x404870
cmp eax, 0x20
jbe 0x404870
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
jmp 0x4048ad
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
cmp dword [ebp - 0x1ec8], 0
jne 0x40497b
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
test eax, eax
je 0x4048f4
cmp eax, 0xffffffff
jne 0x404900
mov dword [ebp - 0x1ec8], 1
jmp 0x40497b
cmp word [ebp - 0x1ec4], 0x50e
je 0x40497b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40495d
xor eax, eax
jmp 0x404967
cmp eax, 0x20
jbe 0x404967
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
cmp dword [ebp - 0x1ec8], 0
jne 0x404d78
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0xc6c], 0
mov dword [ebp - 0xc70], 0
cmp dword [ebp - 0xc70], 0x20
jae 0x4049f1
imul ecx, dword [ebp - 0xc70], 0x14
mov eax, dword [ebp + ecx - 0x92e]
sub eax, dword [ebp + ecx - 0x932]
test eax, eax
je 0x4049f1
add dword [ebp - 0xc6c], eax
inc dword [ebp - 0xc70]
jmp 0x4049c1
mov eax, dword [ebp - 0xc6c]
shl eax, 7
and eax, 0xffff0000
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xc54], 0
mov dword [ebp - 0xc50], 0
mov dword [ebp - 0xc2c], 0
mov dword [ebp - 0xc70], 0
cmp dword [ebp - 0xc70], 0x20
jae 0x404d78
imul ecx, dword [ebp - 0xc70], 0x14
mov eax, dword [ebp + ecx - 0x92e]
sub eax, dword [ebp + ecx - 0x932]
test eax, eax
je 0x404d78
mov eax, dword [ebp + ecx - 0x932]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp + ecx - 0x92e]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp + ecx - 0x92a]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp + ecx - 0x926]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp + ecx - 0x922]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc4c]
mov ecx, dword [ebp - 0xc48]
cmp eax, ecx
jae 0x404d6d
sub ecx, eax
cmp ecx, dword [ebp - 0xc40]
jbe 0x404af4
mov ecx, dword [ebp - 0xc40]
mov dword [ebp - 0xc38], ecx
mov byte [ebp - 0x6b2], 0x7e
lea edx, [ecx + 0xb]
mov byte [ebp - 0x6b1], dl
mov byte [ebp - 0x6b0], 1
mov byte [ebp - 0x6af], 6
add eax, dword [ebp - 0xc44]
mov edx, eax
shr edx, 4
mov byte [ebp - 0x6ae], dh
mov byte [ebp - 0x6ad], dl
mov edx, eax
add edx, ecx
mov eax, edx
add eax, dword [ebp - 0xc44]
cmp eax, dword [ebp - 0xc48]
jne 0x404b55
mov byte [ebp + ecx - 0x6ac], 0
mov byte [ebp + ecx - 0x6ab], 0
jmp 0x404b66
shr edx, 4
mov byte [ebp + ecx - 0x6ac], dh
mov byte [ebp + ecx - 0x6ab], dl
lea eax, [ecx + 4]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0xc4c]
add eax, dword [esi + 0x20]
push ecx
push eax
lea edx, [ebp - 0x6ac]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
xor ecx, ecx
xor edx, edx
cmp ecx, dword [ebp - 0xc34]
jae 0x404ba3
movzx eax, byte [ebp + ecx - 0x6ae]
add edx, eax
inc ecx
jmp 0x404b8e
not edx
inc edx
mov ecx, dword [ebp - 0xc38]
mov byte [ebp + ecx - 0x6aa], dh
mov byte [ebp + ecx - 0x6a9], dl
lea eax, [ecx + 0xa]
mov dword [ebp - 0xc30], eax
xor ecx, ecx
xor edx, edx
cmp ecx, dword [ebp - 0xc30]
jae 0x404bdc
movzx eax, byte [ebp + ecx - 0x6b2]
add edx, eax
inc ecx
jmp 0x404bc7
not edx
inc edx
mov ecx, dword [ebp - 0xc38]
mov byte [ebp + ecx - 0x6a8], dl
lea edx, [ebp - 0x6b2]
push edx
lea edx, [ecx + 0xb]
push edx
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
test eax, eax
je 0x404c19
cmp eax, 0xffffffff
jne 0x404c28
mov dword [ebp - 0x1ec8], 1
jmp 0x404d6b
cmp dword [ebp - 0x1ec4], 0x206050e
je 0x404cb9
cmp dword [ebp - 0x1ec4], 0x6050e
je 0x404cb9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1ec4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x404c96
xor eax, eax
jmp 0x404ca0
cmp eax, 0x20
jbe 0x404ca0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004058c9
mov dword [ebp - 0x1ec8], 1
jmp 0x404d6b
test dword [ebp - 0xc2c], 1
je 0x404d24
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
cmp dword [ebp - 0xc3c], 1
jne 0x404cfe
push 0x75
push 0x701057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
jmp 0x404d24
push 0x74
push 0x801057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
inc dword [ebp - 0xc2c]
mov ecx, dword [ebp - 0xc38]
add dword [ebp - 0xc4c], ecx
add dword [ebp - 0xc54], ecx
mov eax, dword [ebp - 0xc54]
sub eax, dword [ebp - 0xc50]
cmp eax, 0x200
jb 0x404d5e
call fcn.00405699
add dword [ebp - 0xc50], 0x200
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x404ad0
jmp 0x404d78
inc dword [ebp - 0xc70]
jmp 0x404a65
cmp dword [ebp - 0x1ec8], 0
jne 0x404db2
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404de9
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x73
push 0x901057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404e23
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404e5a
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x72
push 0xa01057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404e94
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404ecb
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x70
push 0xc01057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404f05
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404f3c
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x6f
push 0xd01057e
push esp
push 5
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404f76
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x7a00
push 0x101067e
push esp
push 6
lea edx, [ebp - 0x1ec4]
push edx
push 0x6e
push 0x6e
push 0x200
push 3
push 0
call fcn.004056e8
add esp, 8
cmp dword [ebp - 0x1ec8], 0
jne 0x404fa6
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x40546c
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x405090
cmp dword [esi + 0x274], 0x625f6164
jne 0x405090
cmp dword [esi + 0x278], 0x37656b69
jne 0x405090
cmp dword [esi + 0x27c], 0x24315f36
jne 0x405090
cmp dword [esi + 0x280], 0x5232334d
jne 0x405090
cmp dword [esi + 0x284], 0x2f36355b
jne 0x405090
cmp dword [esi + 0x288], 0x2f383231
jne 0x405090
cmp dword [esi + 0x28c], 0x2f323931
jne 0x405090
cmp dword [esi + 0x290], 0x2f363532
jne 0x405090
cmp dword [esi + 0x294], 0x2f343833
jne 0x405090
cmp dword [esi + 0x298], 0x6b323135
jne 0x405090
cmp dword [esi + 0x29c], 0x2d4b205d
jne 0x405090
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x405090
cmp byte [esi + 0x2a4], 0
je 0x40518c
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x4052ae
cmp dword [esi + 0x274], 0x625f6164
jne 0x4052ae
cmp dword [esi + 0x278], 0x37656b69
jne 0x4052ae
cmp dword [esi + 0x27c], 0x24315f36
jne 0x4052ae
cmp dword [esi + 0x280], 0x53455428
jne 0x4052ae
cmp dword [esi + 0x284], 0x334d2954
jne 0x4052ae
cmp dword [esi + 0x288], 0x355b5232
jne 0x4052ae
cmp dword [esi + 0x28c], 0x32312f36
jne 0x4052ae
cmp dword [esi + 0x290], 0x39312f38
jne 0x4052ae
cmp dword [esi + 0x294], 0x35322f32
jne 0x4052ae
cmp dword [esi + 0x298], 0x38332f36
jne 0x4052ae
cmp dword [esi + 0x29c], 0x31352f34
jne 0x4052ae
cmp dword [esi + 0x2a0], 0x205d6b32
jne 0x4052ae
cmp dword [esi + 0x2a4], 0x696c2d4b
jne 0x4052ae
cmp word [esi + 0x2a8], 0x656e
jne 0x4052ae
cmp byte [esi + 0x2aa], 0
jne 0x4052ae
xor eax, eax
pushal
mov dword [ebp - 0x627], 0xffffffff
mov dword [ebp - 0x623], 0xffffffff
push 0x4055d5
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.00405a22
cmp eax, 0xffffffff
je 0x4051be
mov dword [ebp - 0x627], eax
push 0x40562f
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.00405a22
cmp eax, 0xffffffff
je 0x4051d9
mov dword [ebp - 0x623], eax
cmp dword [ebp - 0x627], 0xffffffff
jne 0x4051eb
cmp dword [ebp - 0x623], 0xffffffff
je 0x40522e
xor ecx, ecx
xor edx, edx
cmp ecx, dword [esi + 0x14]
jae 0x4051ff
mov eax, dword [esi + 0x20]
mov al, byte [eax + ecx]
add edx, eax
inc ecx
jmp 0x4051ef
and edx, 0xff
cmp edx, 0
jne 0x405214
mov dword [esp + 0x1c], 0
jmp 0x40522c
mov ecx, dword [esi + 0x20]
add ecx, dword [esi + 0x14]
sub ecx, 0xc
movzx eax, byte [ecx]
sub eax, edx
mov byte [ecx], al
mov dword [esp + 0x1c], 1
jmp 0x405236
mov dword [esp + 0x1c], 3
popal
test eax, eax
jne 0x40525d
push 0xa0d
push 0x2444494c
push 0x41565f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x4052ae
cmp eax, 1
jne 0x405289
push 0xa0d
push 0x24444554
push 0x43455252
push 0x4f435f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x4052ae
push 0xa0d
push 0x24444e55
push 0x4f465f54
push 0x4f4e5f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x405312
cmp dword [esi + 0x274], 0x625f6164
jne 0x405312
cmp dword [esi + 0x278], 0x37656b69
jne 0x405312
cmp dword [esi + 0x27c], 0x24325f36
jne 0x405312
cmp dword [esi + 0x280], 0x5b433852
jne 0x405312
cmp dword [esi + 0x284], 0x5d6b3639
jne 0x405312
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x405312
cmp dword [esi + 0x28c], 0x656e69
je 0x4053b0
cmp dword [esi + 0x270], 0x6e6f6824
jne 0x40546c
cmp dword [esi + 0x274], 0x625f6164
jne 0x40546c
cmp dword [esi + 0x278], 0x37656b69
jne 0x40546c
cmp dword [esi + 0x27c], 0x24325f36
jne 0x40546c
cmp dword [esi + 0x280], 0x53455428
jne 0x40546c
cmp dword [esi + 0x284], 0x38522954
jne 0x40546c
cmp dword [esi + 0x288], 0x36395b43
jne 0x40546c
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x40546c
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x40546c
cmp word [esi + 0x294], 0x65
jne 0x40546c
xor eax, eax
pushal
xor ecx, ecx
xor edx, edx
cmp ecx, dword [esi + 0x14]
jae 0x4053c7
mov eax, dword [esi + 0x20]
mov al, byte [eax + ecx]
add edx, eax
inc ecx
jmp 0x4053b7
and edx, 0xff
cmp edx, 0
jne 0x4053dc
mov dword [esp + 0x1c], 0
jmp 0x4053f4
mov ecx, dword [esi + 0x20]
add ecx, dword [esi + 0x14]
sub ecx, 0xc
movzx eax, byte [ecx]
sub eax, edx
mov byte [ecx], al
mov dword [esp + 0x1c], 1
popal
test eax, eax
jne 0x40541b
push 0xa0d
push 0x2444494c
push 0x41565f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x40546c
cmp eax, 1
jne 0x405447
push 0xa0d
push 0x24444554
push 0x43455252
push 0x4f435f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x40546c
push 0xa0d
push 0x24444e55
push 0x4f465f54
push 0x4f4e5f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcec], 0
je 0x4055af
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcec], 0
je 0x4054bb
push dword [ebx + 0xcec]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcec], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xae4]
push edx
lea edx, [ebp - 0x61f]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61f]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61f]
push edx
lea edx, [ebx + 0xae4]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x4055af
lea edx, [ebx + 0xae4]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61f]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20f]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61f]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20f]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 7], esp
push 0x706870
push 0x2e747365
push 0x745f656e
push 0x696c6b5f
push 0x656b6962
push 0x5f61646e
push 0x6f682f74
push 0x7365742f
lea edx, [ebp - 0x20f]
push edx
lea edx, [ebp - 0x61f]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 7]
call fcn.00407083
add esp, 0x20
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8