Function at 0x4087a0
Capabilities:
Create thread
Delete file
Get common file path
Get file attributes
Persist via run registry key
Query environment variable
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
mov eax, 0x1320
call fcn.00427d90
mov esi, esp
mov dword [esi + 0xc], ecx
mov eax, dword [0x42f00c]
xor eax, ebp
mov dword [esi + 0x1318], eax
mov eax, 0x12
mov dword [esi + 0x10], edx
mov dword [0x42f53c], edx
mov dword [esi + 0x164], 0x1f
lea eax, [eax + 0xb]
mov dword [esi + 0x160], eax
push 0x20
call fcn.00426cac
add esp, 4
lea ebx, [esi + 0x150]
lea ecx, [esi + 0x138]
mov dword [eax + 0x18], 0x494d4255
mov dword [eax + 0x14], 0x535f4f54
mov dword [eax + 0x10], 0x55415f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov word [eax + 0x1c], 0x54
mov dword [esi + 0x150], eax
mov edx, ebx
call fcn.00411450
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408869
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x409833
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x148], 0
mov dword [esi + 0x12fc], 0xf
mov dword [esi + 0x12f8], 0
mov byte [esi + 0x12e8], 0
setne byte [0x42f540]
push 0x104
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x408c85
push 0x2e
push ebx
call sub.VCRUNTIME140.dll_wcsrchr
add esp, 8
test eax, eax
je 0x408c85
push str..ini
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
add esp, 8
mov dword [esi + 0x1314], 7
mov dword [esi + 0x1310], 0
mov word [esi + 0x1300], 0
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
add esp, 4
mov edi, eax
cmp eax, 7
jbe 0x40891c
sub esp, 0xc
mov al, byte [esi + 0x40]
lea ecx, [esi + 0x1300]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], edi
mov dword [esp + 8], eax
call section..text
jmp 0x408941
mov eax, edi
mov dword [esi + 0x1310], edi
lea ecx, [esi + 0x1300]
add eax, edi
push eax
push ebx
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov word [esi + edi*2 + 0x1300], 0
lea ecx, [esi + 0x40]
lea edx, [esi + 0x1300]
call fcn.00412590
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x408979
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x4098a9
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov ecx, dword [esi + 0x1314]
movsd xmm0, qword [esi + 0x50]
movsd xmm2, qword [esi + 0x40]
movsd xmm1, qword [esi + 0x48]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0xf
mov byte [esi + 0x40], 0
cmp ecx, 8
movsd qword [esi + 0x12f8], xmm0
movsd qword [esi + 0x12f0], xmm1
movsd qword [esi + 0x12e8], xmm2
jb 0x4089dd
mov eax, dword [esi + 0x1300]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40988a
push edx
push eax
call fcn.00426ce1
add esp, 8
lea ecx, [esi + 0x12e8]
xor edx, edx
xor ebx, ebx
call fcn.00406540
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x408a2b
mov ecx, edi
mov edx, 0x42f4ec
push 1
call fcn.00405fe0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403d60
mov bl, 1
test eax, eax
jne 0x408a2b
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
test bl, bl
je 0x408c85
push str.MOZ_CRASHREPORTER_STRINGS_OVERRIDE
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov bl, 1
test eax, eax
je 0x408c87
cmp byte [eax], 0
mov ecx, eax
je 0x408c87
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x14], ecx
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
cmp eax, 0xf
jbe 0x40986d
test ebx, ebx
js 0x41140b
mov dword [esi + 0x1c], ebx
or ebx, 0xf
js 0x4109d7
cmp ebx, 0x16
mov eax, 0x16
cmova eax, ebx
mov dword [esi + 0x18], eax
inc eax
cmp eax, 0x1000
jae 0x40b199
push eax
call fcn.00426cac
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x1c]
mov eax, dword [esi + 0x18]
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], eax
push ebx
push dword [esi + 0x14]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x40], edi
lea edi, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, edi
call fcn.004129a0
cmp dword [esi + 0x164], 7
jbe 0x408b08
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov ebx, eax
cmp ecx, 8
jb 0x408b3c
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40b1e2
push edx
push eax
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x408b60
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40b201
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp ebx, 0xffffffff
je 0x408f8a
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push dword [esi + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
cmp eax, 0xf
jbe 0x40af28
test ebx, ebx
js 0x41140b
mov dword [esi + 0x1c], ebx
or ebx, 0xf
js 0x410cbe
cmp ebx, 0x16
mov eax, 0x16
cmova eax, ebx
mov dword [esi + 0x18], eax
inc eax
cmp eax, 0x1000
jae 0x40dcda
push eax
call fcn.00426cac
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x1c]
mov eax, dword [esi + 0x18]
mov dword [esi + 0x160], ebx
mov dword [esi + 0x164], eax
push ebx
push dword [esi + 0x14]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x150], edi
lea ecx, [esi + 0x150]
xor edx, edx
mov bl, 1
call fcn.00406540
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x408c49
mov ecx, edi
mov edx, 0x42f4ec
push 1
call fcn.00405fe0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403d60
test eax, eax
jne 0x408c49
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408c87
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dd14
push edi
push ecx
call fcn.00426ce1
add esp, 8
jmp 0x408c87
xor ebx, ebx
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x408cb1
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x409850
push edi
push ecx
call fcn.00426ce1
add esp, 8
test bl, bl
je 0x408e06
lea ebx, [esi + 0x150]
mov edx, 0x429664
mov ecx, ebx
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429668
call fcn.00419d50
mov ecx, ebx
mov edx, 0x42966c
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429670
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429674
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429678
call fcn.00419d50
mov ecx, ebx
mov edx, 0x42967c
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429680
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429684
call fcn.00419d50
mov ecx, ebx
mov edx, 0x429688
call fcn.00419d50
mov dword [esi + 0x150], 8
mov dword [esi + 0x154], 0x20
push ebx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push str.Msftedit.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp dword [esi + 0xc], 2
jl 0x408d9e
mov eax, dword [esi + 0x10]
mov edi, dword [eax + 4]
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [0x42f55c]
cmp ecx, eax
jae 0x409802
sub esp, 0xc
mov cl, byte [esi + 0x150]
mov byte [esp + 4], cl
mov ecx, 0x42f548
mov dword [esp + 8], edi
mov dword [esp], eax
call fcn.00405360
mov eax, dword [0x42f558]
mov ecx, 0x1f
test eax, eax
mov dword [esi + 0xc], eax
je 0x408ea3
cmp dword [0x42f55c], 0xf
mov dword [esi + 0x130], 0
mov dword [esi + 0x134], 0
jbe 0x408f91
mov eax, dword [0x42f548]
cmp dword [esi + 0xc], 0xf
ja 0x408fa0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov edi, 0xf
movsd qword [esi + 0x128], xmm1
movsd qword [esi + 0x120], xmm0
jmp 0x408fe6
push 0x20
call fcn.00426cac
add esp, 4
lea ecx, [esi + 0x150]
mov dword [esi + 0x160], 0x1c
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0x18], 0x2e6e6f69
mov dword [eax + 0x14], 0x74617275
mov dword [eax + 0x10], 0x6769666e
mov dword [eax + 0xc], 0x6f632064
mov dword [eax + 8], 0x61657220
mov dword [eax + 4], 0x74276e64
mov dword [eax], 0x6c756f43
mov byte [eax + 0x1c], 0
mov dword [esi + 0x150], eax
call fcn.00405890
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ae63
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x40ae59
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jb 0x40aee6
jmp 0x41143c
cmp byte [0x42f540], 0
jne 0x40ae63
mov eax, 0x12
mov dword [esi + 0x164], ecx
add eax, 2
mov dword [esi + 0x160], eax
push 0x20
call fcn.00426cac
add esp, 4
mov dword [eax + 0x10], 0x746c7561
mov dword [eax + 0xc], 0x66654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x14], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42f4ec
push eax
call fcn.0041b740
add esp, 4
mov edx, dword [esi + 0x40]
lea edi, [esi + 0x40]
mov ecx, edi
add edx, 0x28
call fcn.004129a0
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x408f4b
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40b251
push ebx
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x54], 7
jbe 0x408f54
mov edi, dword [esi + 0x40]
push 0x10
push 0x42b4c0
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x40ae63
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40b232
push edx
push eax
jmp 0x40ae5b
mov bl, 1
jmp 0x408c87
mov eax, 0x42f548
cmp dword [esi + 0xc], 0xf
jbe 0x408de3
mov ecx, dword [esi + 0xc]
mov edi, 0x7fffffff
mov dword [esi + 0x10], eax
or ecx, 0xf
cmp ecx, 0x7fffffff
cmovb edi, ecx
cmp edi, 0xfff
jae 0x40b0c6
lea eax, [edi + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x120], eax
inc ecx
push ecx
push dword [esi + 0x10]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xc]
cmp edi, 0xf
mov dword [esi + 0x130], eax
mov dword [esi + 0x134], edi
jbe 0x409002
mov edi, dword [esi + 0x120]
jmp 0x409008
lea edi, [esi + 0x120]
cmp dword [esi + 0xc], 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0
ja 0x409042
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov ecx, 0xf
movsd qword [esi + 0x158], xmm1
movsd qword [esi + 0x150], xmm0
jmp 0x409088
mov eax, dword [esi + 0xc]
mov ecx, 0x7fffffff
or eax, 0xf
cmp eax, 0x7fffffff
cmovb ecx, eax
cmp ecx, 0xfff
mov dword [esi + 0x10], ecx
jae 0x40b0e2
lea eax, [ecx + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x150], eax
inc ecx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
mov dword [esi + 0x38], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], ecx
push 0x18
mov edi, ecx
call fcn.00426cac
mov ecx, edi
add esp, 4
mov edi, eax
lea edx, [eax + 0x18]
cmp ecx, 0xf
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], eax
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [esi + 0x38], edx
jbe 0x4090e1
mov ebx, dword [esi + 0x150]
cmp dword [esi + 0xc], 0xf
ja 0x409100
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov ebx, 0xf
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
jmp 0x40914e
mov eax, dword [esi + 0xc]
mov ecx, 0x7fffffff
mov dword [esi + 0x10], edx
or eax, 0xf
cmp eax, 0x7fffffff
cmovb ecx, eax
cmp ecx, 0xfff
mov dword [esi + 0x14], ecx
jae 0x40b0fe
lea eax, [ecx + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [edi], eax
inc ecx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [esi + 0x164]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov eax, dword [esi + 0xc]
cmp ecx, 0x10
mov dword [esi + 0x34], edx
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], ebx
jb 0x40917e
mov eax, dword [esi + 0x150]
lea edx, [ecx + 1]
cmp edx, 0x1000
jae 0x4098c6
push edx
push eax
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], eax
mov byte [esi + 0x150], 0
push 0x30
call fcn.00426cac
add esp, 4
mov edi, eax
mov dword [esi + 0x160], 0x22
mov dword [esi + 0x164], 0x2f
push 0x22
push str.MOZ_CRASHREPORTER_DUMP_ALL_THREADS
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + 0x22], 0
mov dword [esi + 0x150], edi
lea edi, [esi + 0x150]
lea ecx, [esi + 0x108]
mov edx, edi
call fcn.00411450
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x409211
mov ecx, dword [esi + 0x150]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x4098e3
push ebx
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x118], 0
je 0x409285
mov eax, 0xf
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x30]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x6c6c
mov dword [esi + 0x150], 0x75662d2d
mov byte [esi + 0x156], 0
push edi
push dword [esi + 0x30]
call fcn.0041cb10
add esp, 8
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x409285
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40b08c
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x20
call fcn.00426cac
add esp, 4
lea edi, [esi + 0x150]
lea edx, [esi + 0x40]
mov dword [esi + 0x50], 0x11
mov dword [esi + 0x54], 0x1f
mov dword [eax + 0xc], 0x657a796c
mov dword [eax + 8], 0x616e612d
mov dword [eax + 4], 0x706d7564
mov dword [eax], 0x696e696d
mov word [eax + 0x10], 0x72
mov dword [esi + 0x40], eax
mov ecx, edi
call fcn.00411b40
lea edx, [esi + 0x30]
mov ecx, edi
push 1
call fcn.004115a0
add esp, 4
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40931d
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x409900
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
jb 0x40935c
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40991d
push edi
push ecx
call fcn.00426ce1
add esp, 8
lea edi, [esi + 0x150]
mov edx, 0x42964c
mov ecx, edi
call fcn.00411cb0
mov eax, dword [0x42f574]
cmp eax, 0x10
jb 0x409397
mov ecx, dword [0x42f560]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40993a
push ebx
push ecx
call fcn.00426ce1
add esp, 8
movsd xmm0, qword [esi + 0x160]
movsd xmm2, qword [esi + 0x150]
movsd xmm1, qword [esi + 0x158]
movsd qword [0x42f570], xmm0
movsd qword [0x42f568], xmm1
movsd qword [0x42f560], xmm2
cmp dword [0x42f570], 0
je 0x40967d
mov ecx, edi
mov edx, 0x42f560
call fcn.004129a0
cmp dword [esi + 0x164], 7
jbe 0x4093ef
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov edi, eax
cmp ecx, 8
jb 0x409423
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40b06d
push edx
push eax
call fcn.00426ce1
add esp, 8
cmp edi, 0xffffffff
je 0x4096be
lea edi, [esi + 0x150]
mov edx, str..memory.json.gz
mov ecx, edi
call fcn.00411cb0
mov eax, dword [0x42f58c]
cmp eax, 0x10
jb 0x409467
mov ecx, dword [0x42f578]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40b139
push ebx
push ecx
call fcn.00426ce1
add esp, 8
movsd xmm0, qword [esi + 0x160]
movsd xmm2, qword [esi + 0x150]
movsd xmm1, qword [esi + 0x158]
mov ecx, edi
mov edx, 0x42f578
movsd qword [0x42f588], xmm0
movsd qword [0x42f580], xmm1
movsd qword [0x42f578], xmm2
call fcn.004129a0
cmp dword [esi + 0x164], 7
jbe 0x4094b2
mov edi, dword [esi + 0x150]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esi + 0x164]
mov edi, eax
cmp ecx, 8
jb 0x4094e6
mov eax, dword [esi + 0x150]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x40b11a
push edx
push eax
call fcn.00426ce1
add esp, 8
cmp edi, 0xffffffff
jne 0x40950b
cmp dword [0x42f58c], 0xf
mov eax, 0x42f578
jbe 0x4094fe
mov eax, dword [0x42f578]
mov dword [0x42f588], 0
mov byte [eax], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
push 0x40
call fcn.00426cac
add esp, 4
mov ecx, 0x42f560
xor edx, edx
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi + 0x28], eax
xor ebx, ebx
call fcn.00406540
cmp dword [eax + 0x5c], 0
mov edi, eax
je 0x40957f
lea edx, [esi + 0x28]
mov ecx, edi
push 1
call fcn.00405fe0
add esp, 4
lea ecx, [edi + 0x10]
call fcn.00403d60
mov bl, 1
test eax, eax
jne 0x40957f
mov eax, dword [edi]
mov eax, dword [eax + 4]
lea ecx, [edi + eax]
mov eax, dword [edi + eax + 0xc]
or eax, 2
push 0
push eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
test bl, bl
je 0x40975d
mov edi, 0xf
lea ebx, [esi + 0x150]
mov dword [esi + 0x160], 0xb
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], edi
mov dword [esi + 0x157], 0x656d614e
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov byte [esi + 0x15b], 0
push ebx
call fcn.00411e90
add esp, 4
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x28]
je 0x4097ba
mov dword [esi + 0x164], edi
mov dword [esi + 0x160], 0xb
mov dword [esi + 0x157], 0x656d614e
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov byte [esi + 0x15b], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
push ebx
call fcn.0041b740
add esp, 4
mov ebx, dword [esi + 0x40]
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0
mov eax, dword [ebx + 0x38]
cmp dword [ebx + 0x3c], 0xf
jbe 0x409957
mov ebx, dword [ebx + 0x28]
cmp eax, 0xf
ja 0x409963
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov edi, 0xf
movsd qword [esi + 0x48], xmm1
movsd qword [esi + 0x40], xmm0
jmp 0x4099a3
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x11
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x746e656d
mov dword [eax + 8], 0x75677241
mov dword [eax + 4], 0x64614272
mov dword [eax], 0x6f727245
mov word [eax + 0x10], 0x73
jmp 0x409702
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x14
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0x10], 0x73747369
mov dword [eax + 0xc], 0x7845656c
mov dword [eax + 8], 0x69466172
mov dword [eax + 4], 0x74784572
mov dword [eax], 0x6f727245
mov byte [eax + 0x14], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42f4ec
push eax
call fcn.0041b740
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405890
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ae0b
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40b0a9
push edi
push ecx
call fcn.00426ce1
add esp, 8
jmp 0x40ae0b
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x6461
mov dword [eax + 0xc], 0x6552656c
mov dword [eax + 8], 0x69466172
mov dword [eax + 4], 0x74784572
mov dword [eax], 0x6f727245
mov byte [eax + 0x12], 0
mov dword [esi + 0x150], eax
lea eax, [esi + 0x150]
lea edx, [esi + 0x40]
mov ecx, 0x42f4ec
push eax
jmp 0x40adc6
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x12
mov dword [esi + 0x164], 0x1f
mov word [eax + 0x10], 0x656d
mov dword [eax + 0xc], 0x614e7463
mov dword [eax + 8], 0x75646f72
mov dword [eax + 4], 0x506f4e72
mov dword [eax], 0x6f727245
mov byte [eax + 0x12], 0
jmp 0x40adb7
cmp ecx, 0xf
mov ecx, 0x42f548
jbe 0x409812
mov ecx, dword [0x42f548]
mov dword [0x42f558], eax
push eax
push edi
push ecx
mov dword [esi + 0xc], eax
mov edi, ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esi + 0xc]
mov byte [edi + eax], 0
jmp 0x408d9e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40885f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408ca7
mov dword [esi + 0x50], ebx
push ebx
push dword [esi + 0x14]
lea eax, [esi + 0x40]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx + 0x40], 0
jmp 0x408ae9
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41143c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x4089d3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40896f
mov edx, ecx
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x41143c
add edx, 0x24
mov eax, ecx
jmp 0x409174
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x409207
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409313
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409352
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x40938d
add ebx, 0x28
cmp eax, 0xf
jbe 0x409660
mov dword [esi + 0xc], eax
or eax, 0xf
mov edi, 0x7fffffff
cmp eax, 0x7fffffff
cmovb edi, eax
cmp edi, 0xfff
jae 0x40e08a
lea eax, [edi + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x40], eax
inc ecx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0xc]
add esp, 0xc
mov dword [esi + 0x50], eax
mov eax, dword [esi + 0x164]
lea ebx, [esi + 0x150]
mov dword [esi + 0x54], edi
cmp eax, 0x10
jb 0x4099d9
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dd33
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x28]
lea edx, [esi + 0x1300]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x726f
mov dword [esi + 0x150], 0x646e6556
mov byte [esi + 0x156], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x1300]
mov dword [esi + 0x1310], 0
mov dword [esi + 0x1314], 0
mov ebx, dword [edi + 0x38]
cmp dword [edi + 0x3c], 0xf
jbe 0x409a65
mov edi, dword [edi + 0x28]
cmp ebx, 0xf
ja 0x409a6d
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov eax, 0xf
movsd qword [esi + 0x1308], xmm1
movsd qword [esi + 0x1300], xmm0
jmp 0x409ab1
add edi, 0x28
cmp ebx, 0xf
jbe 0x409a45
mov eax, ebx
mov ecx, 0x7fffffff
or eax, 0xf
cmp eax, 0x7fffffff
cmovb ecx, eax
cmp ecx, 0xfff
mov dword [esi + 0xc], ecx
jae 0x40e0a6
lea eax, [ecx + 1]
push eax
call fcn.00426cac
add esp, 4
lea ecx, [ebx + 1]
mov dword [esi + 0x1300], eax
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xc]
mov dword [esi + 0x1310], ebx
mov dword [esi + 0x1314], eax
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x409aed
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dd56
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov ebx, dword [esi + 0x1310]
test ebx, ebx
jne 0x409b52
mov ecx, dword [esi + 0x1314]
cmp ecx, 7
jae 0x40b21e
mov eax, ecx
shr eax, 1
mov edx, eax
xor edx, 0x7fffffff
cmp ecx, edx
ja 0x410fde
add eax, ecx
mov edi, 0xf
cmp eax, 0xf
cmovbe eax, edi
inc eax
push eax
call fcn.00426cac
add esp, 4
mov dword [esi + 0x1310], 7
mov dword [esi + 0x1314], edi
mov dword [eax + 3], 0x616c6c69
mov dword [eax], 0x697a6f4d
mov byte [eax + 7], 0
mov dword [esi + 0x1300], eax
cmp dword [esi + 0x1314], 0xf
jbe 0x40e016
mov edi, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], eax
mov byte [esi + 0x12e8], 0
push 0x20
call fcn.00426cac
add esp, 4
lea ebx, [esi + 0x12e8]
mov dword [esi + 0x12f8], 0x18
mov dword [esi + 0x12fc], 0x1f
mov dword [eax + 0x14], 0x656c7469
mov dword [eax + 0x10], 0x54726f64
mov dword [eax + 0xc], 0x6e655672
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x18], 0
mov dword [esi + 0x12e8], eax
lea edx, [esi + 0x150]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x150]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x409bfd
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x409c3d
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dd73
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], eax
mov byte [esi + 0x12e8], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12f8], 0x12
mov dword [esi + 0x12fc], 0x1f
mov word [eax + 0x10], 0x656c
mov dword [eax + 0xc], 0x74695472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x12], 0
mov dword [esi + 0x12e8], eax
lea edx, [esi + 0x12d0]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12d0]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40af4e
sub esp, 0xc
mov al, byte [esi + 0x12d0]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12fc]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x409d30
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dd90
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
lea edx, [esi + 0x12e8]
mov dword [esi + 0x12e0], 0x1e
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x1c], 0x3274
mov dword [eax + 0x18], 0x78655472
mov dword [eax + 0x14], 0x6f727245
mov dword [eax + 0x10], 0x74637564
mov dword [eax + 0xc], 0x6f725072
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x1e], 0
mov dword [esi + 0x12d0], eax
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12e8]
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], 0
mov edx, dword [edi + 0x38]
cmp dword [edi + 0x3c], 0xf
jbe 0x409e09
mov edi, dword [edi + 0x28]
cmp edx, 0xf
ja 0x409e11
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov ebx, 0xf
movsd qword [esi + 0x12f0], xmm1
movsd qword [esi + 0x12e8], xmm0
jmp 0x409e56
add edi, 0x28
cmp edx, 0xf
jbe 0x409de9
mov eax, edx
mov ebx, 0x7fffffff
mov dword [esi + 0xc], edx
or eax, 0xf
cmp eax, 0x7fffffff
cmovb ebx, eax
cmp ebx, 0xfff
jae 0x40e0c2
lea eax, [ebx + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x12e8], eax
inc ecx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esi + 0xc]
add esp, 0xc
mov eax, dword [esi + 0x12e4]
mov dword [esi + 0x12f8], edx
mov dword [esi + 0x12fc], ebx
cmp eax, 0x10
jb 0x409e98
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ddb3
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov edx, dword [esi + 0x12f8]
mov ebx, dword [esi + 0x12fc]
cmp ebx, 0xf
lea edi, [esi + 0x12e8]
jbe 0x409ea9
mov edi, dword [esi + 0x12e8]
mov ecx, edi
mov dword [esi + 0xc], edx
push 2
push 0
call fcn.0041c930
add esp, 8
cmp eax, 0xffffffff
lea ebx, [esi + 0x12d0]
je 0x40a0ba
mov edx, dword [esi + 0xc]
add eax, 2
mov ecx, edi
push 2
push eax
call fcn.0041c930
add esp, 8
cmp eax, 0xffffffff
je 0x40a0ba
cmp dword [esi + 0x54], 0xf
jbe 0x40b191
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12e0], 0x1e
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x1c], 0x3274
mov dword [eax + 0x18], 0x78655472
mov dword [eax + 0x14], 0x6f727245
mov dword [eax + 0x10], 0x74637564
mov dword [eax + 0xc], 0x6f725072
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x1e], 0
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x409f91
mov eax, dword [eax]
push 0x42a13f
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x14
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x409fd6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e10d
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12e0], 0x16
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x14], 0x7478
mov dword [eax + 0x10], 0x6554726f
mov dword [eax + 0xc], 0x72724572
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x16], 0
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40b1b9
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jae 0x40a19f
jmp 0x40a1be
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12e0], 0x16
mov dword [esi + 0x12e4], 0x1f
mov word [eax + 0x14], 0x7478
mov dword [eax + 0x10], 0x6554726f
mov dword [eax + 0xc], 0x72724572
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov byte [eax + 0x16], 0
mov dword [esi + 0x12d0], eax
lea eax, [esi + 0x12d0]
mov ecx, 0x42f4ec
lea edx, [esi + 0x12b8]
push eax
call fcn.0041b740
add esp, 4
mov ecx, dword [esi + 0x12b8]
lea eax, [esi + 0x12e8]
lea edi, [ecx + 0x28]
cmp eax, edi
je 0x40a194
mov ebx, dword [esi + 0x12f8]
cmp dword [esi + 0x12fc], 0xf
jbe 0x40a168
mov eax, dword [esi + 0x12e8]
mov edx, dword [ecx + 0x3c]
cmp edx, ebx
jae 0x40b173
sub esp, 0xc
mov cl, byte [esi + 0x12b8]
mov byte [esp + 4], cl
mov ecx, edi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.00405360
lea ebx, [esi + 0x12d0]
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a1be
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ddd0
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40aef2
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12e0], 0x1d
mov dword [esi + 0x12e4], 0x1f
mov dword [eax + 0x18], 0x74786554
mov dword [eax + 0x14], 0x6e6f6974
mov dword [eax + 0x10], 0x70697263
mov dword [eax + 0xc], 0x73654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov word [eax + 0x1c], 0x32
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a266
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a2a6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ddf3
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], eax
mov byte [esi + 0x12d0], 0
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x12e0], 0x1d
mov dword [esi + 0x12e4], 0x1f
mov dword [eax + 0x18], 0x74786554
mov dword [eax + 0x14], 0x6e6f6974
mov dword [eax + 0x10], 0x70697263
mov dword [eax + 0xc], 0x73654472
mov dword [eax + 8], 0x6574726f
mov dword [eax + 4], 0x70655268
mov dword [eax], 0x73617243
mov word [eax + 0x1c], 0x32
mov dword [esi + 0x12d0], eax
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40af77
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a3aa
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40de16
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x1314], 0xf
jbe 0x40aefa
mov edi, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12db], 0x74726f70
mov dword [esi + 0x12d8], 0x70655264
mov dword [esi + 0x12d4], 0x6e65536b
mov dword [esi + 0x12d0], 0x63656843
mov byte [esi + 0x12df], 0
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a426
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a466
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40de39
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12db], 0x74726f70
mov dword [esi + 0x12d8], 0x70655264
mov dword [esi + 0x12d4], 0x6e65536b
mov dword [esi + 0x12d0], 0x63656843
mov byte [esi + 0x12df], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40afa0
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a538
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40de5c
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x1314], 0xf
jbe 0x40af05
mov edi, dword [esi + 0x1300]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12db], 0x6c69616d
mov dword [esi + 0x12d8], 0x6d45776f
mov dword [esi + 0x12d4], 0x6c6c416b
mov dword [esi + 0x12d0], 0x63656843
mov byte [esi + 0x12df], 0
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a5b4
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a5f4
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40de7f
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xf
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12db], 0x6c69616d
mov dword [esi + 0x12d8], 0x6d45776f
mov dword [esi + 0x12d4], 0x6c6c416b
mov dword [esi + 0x12d0], 0x63656843
mov byte [esi + 0x12df], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40afc9
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a6c6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dea2
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40af10
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 7
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d3], 0x74726174
mov dword [esi + 0x12d0], 0x74736552
mov byte [esi + 0x12d7], 0
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a728
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a768
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dec5
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 7
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d3], 0x74726174
mov dword [esi + 0x12d0], 0x74736552
mov byte [esi + 0x12d7], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40aff2
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a826
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dee8
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40af18
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 5
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74697551
mov word [esi + 0x12d4], 0x32
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a880
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40a8c0
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40df0b
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 5
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov dword [esi + 0x12d0], 0x74697551
mov word [esi + 0x12d4], 0x32
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40b01b
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
lea ebx, [esi + 0x12d0]
cmp eax, 0x10
jb 0x40a976
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40df2e
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x54], 0xf
jbe 0x40af20
mov edi, dword [esi + 0x40]
mov eax, 0xf
mov dword [esi + 0x12e0], 0xe
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov word [esi + 0x12dc], 0x6566
mov dword [esi + 0x12d8], 0x694c664f
mov dword [esi + 0x12d4], 0x646e4572
mov dword [esi + 0x12d0], 0x6f727245
mov byte [esi + 0x12de], 0
push ebx
call fcn.0041b740
add esp, 4
mov eax, dword [esi + 0x12b8]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x40a9eb
mov eax, dword [eax]
push edi
push eax
push 0x1000
lea eax, [esi + 0x150]
push eax
call fcn.00405fa0
add esp, 0x10
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40aa2b
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40df51
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x12e0], 0xe
lea edx, [esi + 0x12b8]
mov ecx, 0x42f4ec
mov dword [esi + 0x12e4], eax
mov word [esi + 0x12dc], 0x6566
mov dword [esi + 0x12d8], 0x694c664f
mov dword [esi + 0x12d4], 0x646e4572
mov dword [esi + 0x12d0], 0x6f727245
mov byte [esi + 0x12de], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x12b8]
lea eax, [edi + 0x28]
mov dword [esi + 0xc], eax
lea eax, [esi + 0x150]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x3c]
cmp eax, ebx
jae 0x40b044
sub esp, 0xc
mov al, byte [esi + 0x12b8]
mov byte [esp + 4], al
lea eax, [esi + 0x150]
mov dword [esp], ebx
mov ecx, dword [esi + 0xc]
mov dword [esp + 8], eax
call fcn.00405360
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40aaf6
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40df74
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40ab20
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40df91
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x1314]
cmp eax, 0x10
jb 0x40ab4a
mov ecx, dword [esi + 0x1300]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dfae
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40ab6e
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40dfcb
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov edi, 0xf
lea ebx, [esi + 0x150]
mov dword [esi + 0x160], 9
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], edi
mov dword [esi + 0x154], 0x52557265
mov dword [esi + 0x150], 0x76726553
mov word [esi + 0x158], 0x4c
push ebx
call fcn.00411e90
add esp, 4
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x28]
je 0x40ad7a
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], 0
mov byte [esi + 0x40], 0
push 0x30
call fcn.00426cac
add esp, 4
lea ecx, [esi + 0x150]
lea edx, [esi + 0x40]
mov dword [esi + 0x50], 0x20
mov dword [esi + 0x54], 0x2f
mov dword [eax + 0x1c], 0x59524f54
mov dword [eax + 0x18], 0x43455249
mov dword [eax + 0x14], 0x445f4154
mov dword [eax + 0x10], 0x41445f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov byte [eax + 0x20], 0
mov dword [esi + 0x40], eax
call fcn.00411450
mov eax, dword [0x42f508]
cmp eax, 0x10
jb 0x40ac5c
mov ecx, dword [0x42f4f4]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e02c
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
movsd xmm0, qword [esi + 0x160]
movsd xmm2, qword [esi + 0x150]
movsd xmm1, qword [esi + 0x158]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
movsd qword [0x42f504], xmm0
movsd qword [0x42f4fc], xmm1
movsd qword [0x42f4f4], xmm2
jb 0x40accb
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e049
push edi
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [0x42f504], 0
jne 0x40b68d
mov eax, 0xf
mov dword [esi + 0x160], 0xb
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
lea eax, [esi + 0x150]
mov dword [esi + 0x157], 0x656d614e
mov dword [esi + 0x154], 0x4e746375
mov dword [esi + 0x150], 0x646f7250
mov byte [esi + 0x15b], 0
push eax
call fcn.0041b740
add esp, 4
mov ebx, dword [esi + 0x40]
mov dword [esi + 0x12f8], 0
mov dword [esi + 0x12fc], 0
mov eax, dword [ebx + 0x38]
cmp dword [ebx + 0x3c], 0xf
jbe 0x40b26e
mov ebx, dword [ebx + 0x28]
cmp eax, 0xf
ja 0x40b27a
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov edi, 0xf
movsd qword [esi + 0x12f0], xmm1
movsd qword [esi + 0x12e8], xmm0
jmp 0x40b2bd
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x10
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x4c525572
mov dword [eax + 8], 0x65767265
mov dword [eax + 4], 0x536f4e72
mov dword [eax], 0x6f727245
mov byte [eax + 0x10], 0
lea edx, [esi + 0x40]
mov ecx, 0x42f4ec
mov dword [esi + 0x150], eax
push ebx
call fcn.0041b740
add esp, 4
mov ecx, dword [esi + 0x40]
add ecx, 0x28
call fcn.00405890
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40ae03
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40b156
push edi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esi + 0x28]
call fcn.00405580
mov eax, dword [esi + 0x11c]
cmp eax, 0x10
jb 0x40ae35
mov ecx, dword [esi + 0x108]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40aeb8
push edi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esi + 0x30]
call fcn.0041ca50
mov eax, dword [esi + 0x134]
cmp eax, 0x10
jb 0x40ae63
mov ecx, dword [esi + 0x120]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40aed5
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x14c]
cmp eax, 0x10
jb 0x40ae89
mov ecx, dword [esi + 0x138]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40ae9e
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov ecx, dword [esi + 0x1318]
xor ecx, ebp
call fcn.00427650
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x411442
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ae7f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x411442
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ae2b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x411442
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ae59
lea edi, [esi + 0x40]
jmp 0x40a1cb
lea edi, [esi + 0x1300]
jmp 0x40a3bd
lea edi, [esi + 0x1300]
jmp 0x40a54b
lea edi, [esi + 0x40]
jmp 0x40a6d3
lea edi, [esi + 0x40]
jmp 0x40a833
lea edi, [esi + 0x40]
jmp 0x40a983
mov dword [esi + 0x160], ebx
lea eax, [esi + 0x150]
push ebx
push dword [esi + 0x14]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx + 0x150], 0
jmp 0x408bfd
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40af58
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x409d00
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40af81
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a37a
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40afaa
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a508
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40afd3
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a696
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40affc
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a7f6
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40b025
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a946
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40b04e
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40aacc
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41143c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x409419
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40927b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40974e
lea eax, [edi + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x408fcf
lea eax, [ecx + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x409070
lea eax, [ecx + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x409131
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41143c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x4094dc
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x40945d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40adf9
cmp edx, 0x10
jb 0x40b17a
mov edi, dword [edi]
mov dword [ecx + 0x38], ebx
push ebx
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a18e
lea edi, [esi + 0x40]
jmp 0x409ef2
add dword [esi + 0x18], 0x24
push dword [esi + 0x18]
call fcn.00426cac
add esp, 4
lea edi, [eax + 0x23]
mov dword [esi + 0x18], ebx
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x408ac9
mov ecx, dword [esi + 0xc]
cmp eax, 0x10
jb 0x40b1c3
mov ecx, dword [ecx]
mov dword [edi + 0x38], ebx
push ebx
lea eax, [esi + 0x150]
push eax
mov edi, ecx
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
jmp 0x40a0a0
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41143c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x408b32
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x408b56
cmp ecx, 0xf
jbe 0x40dfe8
mov eax, dword [esi + 0x1300]
jmp 0x40dfee
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x41143c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x408f83
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x408f41
add ebx, 0x28
cmp eax, 0xf
jbe 0x40ad57
mov dword [esi + 0xc], eax
or eax, 0xf
mov edi, 0x7fffffff
cmp eax, 0x7fffffff
cmovb edi, eax
cmp edi, 0xfff
jae 0x410b62
lea eax, [edi + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x12e8], eax
inc ecx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0xc]
add esp, 0xc
mov dword [esi + 0x12f8], eax
mov eax, dword [esi + 0x164]
lea ebx, [esi + 0x150]
mov dword [esi + 0x12fc], edi
cmp eax, 0x10
jb 0x40b2f9
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e5df
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x160], 6
lea ecx, [esi + 0x28]
lea edx, [esi + 0x40]
mov dword [esi + 0x164], eax
mov word [esi + 0x154], 0x726f
mov dword [esi + 0x150], 0x646e6556
mov byte [esi + 0x156], 0
push ebx
call fcn.0041b740
add esp, 4
mov edi, dword [esi + 0x40]
mov dword [esi + 0x12e0], 0
mov dword [esi + 0x12e4], 0
mov eax, dword [edi + 0x38]
cmp dword [edi + 0x3c], 0xf
jbe 0x40b37f
mov edi, dword [edi + 0x28]
cmp eax, 0xf
ja 0x40b387
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
mov ebx, 0xf
movsd qword [esi + 0x12d8], xmm1
movsd qword [esi + 0x12d0], xmm0
jmp 0x40b3ca
add edi, 0x28
cmp eax, 0xf
jbe 0x40b35f
mov dword [esi + 0xc], eax
or eax, 0xf
mov ebx, 0x7fffffff
cmp eax, 0x7fffffff
cmovb ebx, eax
cmp ebx, 0xfff
jae 0x410b7e
lea eax, [ebx + 1]
push eax
call fcn.00426cac
add esp, 4
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x12d0], eax
inc ecx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0xc]
add esp, 0xc
mov dword [esi + 0x12e0], eax
mov eax, dword [esi + 0x164]
mov dword [esi + 0x12e4], ebx
lea ebx, [esi + 0x150]
cmp eax, 0x10
jb 0x40b406
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e602
push edi
push ecx
call fcn.00426ce1
add esp, 8
push 0x208
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push ebx
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
lea edi, [esi + 0x40]
js 0x40b51a
cmp dword [esi + 0x12e0], 0
je 0x40b47c
lea eax, [esi + 0x40]
mov dword [esi + 0x12b8], 0x207
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x40bb67
cmp dword [0x42f508], 0xf
mov eax, 0x42f4f4
jbe 0x40b55a
mov eax, dword [0x42f4f4]
mov dword [0x42f504], 0
mov byte [eax], 0
jmp 0x40b62c
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40b656
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e625
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40b680
mov ecx, 0x42f4f4
call fcn.00411f10
test al, al
je 0x40ba8f
lea edi, [esi + 0x40]
mov edx, 0x42f4f4
mov ecx, edi
push 0x42ae1b
call fcn.004086d0
add esp, 4
mov ecx, edi
push str.submit.log
call fcn.00403a20
movsd xmm0, qword [eax + 0x10]
movsd qword [esi + 0x160], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x158], xmm1
movsd qword [esi + 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esi + 0x54]
cmp eax, 0x10
jb 0x40b71d
mov ecx, dword [esi + 0x40]
lea ebx, [eax + 1]
cmp ebx, 0x1000
jae 0x40e19b
push ebx
push ecx
call fcn.00426ce1
add esp, 8
cmp dword [esi + 0x164], 0xf
jbe 0x40bed1
mov ecx, dword [esi + 0x150]
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0xc], ecx
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ebx, eax
cmp eax, 0xf
jbe 0x40dcfa
test ebx, ebx
js 0x41140b
mov dword [esi + 0x14], ebx
or ebx, 0xf
js 0x411195
cmp ebx, 0x16
mov eax, 0x16
cmova eax, ebx
mov dword [esi + 0x10], eax
inc eax
cmp eax, 0x1000
jae 0x40e15c
push eax
call fcn.00426cac
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], eax
push ebx
push dword [esi + 0xc]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
mov dword [esi + 0x40], edi
lea ecx, [esi + 0x40]
mov edx, 1
push 0
call fcn.00406810
add esp, 4
mov edi, eax
mov eax, dword [0x42f544]
cmp eax, edi
je 0x40b7e3
test eax, eax
je 0x40b7e3
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
lea ecx, [eax + edx]
mov eax, dword [eax + edx]
push 1
call dword [eax]
mov eax, dword [esi + 0x54]
mov dword [0x42f544], edi
cmp eax, 0x10
jb 0x40b80d
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e1b8
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x164]
cmp eax, 0x10
jb 0x40b837
mov ecx, dword [esi + 0x150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e1d5
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x30
call fcn.00426cac
add esp, 4
mov dword [esi + 0x50], 0x22
mov edi, eax
mov dword [esi + 0x54], 0x2f
push 0x22
push str.MOZ_CRASHREPORTER_EVENTS_DIRECTORY
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [esi + 0x150]
lea edx, [esi + 0x40]
mov byte [edi + 0x22], 0
mov dword [esi + 0x40], edi
call fcn.00411450
mov eax, dword [0x42f520]
cmp eax, 0x10
jb 0x40b8b2
mov ecx, dword [0x42f50c]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e1f2
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
movsd xmm0, qword [esi + 0x160]
movsd xmm2, qword [esi + 0x150]
movsd xmm1, qword [esi + 0x158]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
movsd qword [0x42f51c], xmm0
movsd qword [0x42f514], xmm1
movsd qword [0x42f50c], xmm2
jb 0x40b921
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e20f
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, 0xf
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], eax
mov byte [esi + 0x40], 0
push 0x30
call fcn.00426cac
add esp, 4
lea ebx, [esi + 0x150]
lea edx, [esi + 0x40]
mov dword [esi + 0x50], 0x20
mov dword [esi + 0x54], 0x2f
mov dword [eax + 0x1c], 0x59524f54
mov dword [eax + 0x18], 0x43455249
mov dword [eax + 0x14], 0x445f474e
mov dword [eax + 0x10], 0x49505f52
mov dword [eax + 0xc], 0x4554524f
mov dword [eax + 8], 0x50455248
mov dword [eax + 4], 0x53415243
mov dword [eax], 0x5f5a4f4d
mov byte [eax + 0x20], 0
mov dword [esi + 0x40], eax
mov ecx, ebx
call fcn.00411450
mov eax, dword [0x42f538]
cmp eax, 0x10
jb 0x40b9c3
mov ecx, dword [0x42f524]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e22c
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x54]
movsd xmm0, qword [esi + 0x160]
movsd xmm2, qword [esi + 0x150]
movsd xmm1, qword [esi + 0x158]
mov dword [esi + 0x160], 0
mov dword [esi + 0x164], 0xf
mov byte [esi + 0x150], 0
cmp eax, 0x10
movsd qword [0x42f534], xmm0
movsd qword [0x42f52c], xmm1
movsd qword [0x42f524], xmm2
jb 0x40ba32
mov ecx, dword [esi + 0x40]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e24f
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov edi, 0xf
mov dword [esi + 0x100], 0
mov dword [esi + 0xe8], 0
mov dword [esi + 0x104], edi
mov dword [esi + 0xec], edi
mov byte [esi + 0xf0], 0
mov byte [esi + 0xd8], 0
push 0x17
push 0x42b27a
push 0x42b27a
push 0x42b27a
push 0
call sub.nss3.dll_NSS_Initialize
add esp, 0x14
test eax, eax
je 0x40bad8
mov dword [esi + 0x1314], edi
jmp 0x40bd15
push 0x20
call fcn.00426cac
add esp, 4
mov dword [esi + 0x160], 0x13
mov dword [eax + 0xf], 0x68746150
mov dword [esi + 0x164], 0x1f
mov dword [eax + 0xc], 0x5073676e
mov dword [eax + 8], 0x69747465
mov dword [eax + 4], 0x536f4e72
mov dword [eax], 0x6f727245
mov byte [eax + 0x13], 0
jmp 0x4097a0
push 4
call sub.nss3.dll_HASH_Create
add esp, 4
test eax, eax
je 0x40bd04
lea eax, [esi + 0x1300]
lea ecx, [esi + 0x12b8]
push ecx
push ebx
push eax
push 0
push str.AppData
push dword [esi + 0x40]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [esi + 0xc], eax
push dword [esi + 0x40]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esi + 0x12b8]
test al, 1
jne 0x40b547
cmp dword [esi + 0xc], 0
jne 0x40b547
cmp dword [esi + 0x1300], 1
jne 0x40b547
test eax, eax
jne 0x40b430
jmp 0x40b547
lea ecx, [esi + 0x150]
jmp 0x40b730
mov dword [esi + 0xd8], ebx
mov bl, 1
jmp 0x40d6eb
lea ecx, [esi + 0x12a0]
call fcn.0041ca50
mov eax, dword [esi + 0x12e4]
cmp eax, 0x10
jb 0x40d720
mov ecx, dword [esi + 0x12d0]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x410c11
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov eax, dword [esi + 0x12fc]
cmp eax, 0x10
jb 0x40d74a
mov ecx, dword [esi + 0x12e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x410c2e
push edi
push ecx
call fcn.00426ce1
add esp, 8
mov dword [esi + 0x40], 0x429704
mov eax, dword [esi + 0x58]
cmp eax, 0x10
jb 0x40d775
mov ecx, dword [esi + 0x44]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x410c4b
push edi
push ecx
call fcn.00426ce1
add esp, 8
lea ecx, [esi + 0x1300]
call fcn.00421710
mov eax, dword [esi + 0x1164]
cmp eax, 0x10
jb 0x40d7aa
mov ecx, dword [esi + 0x1150]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40e4da
mov eax, dword [esi + 0x117c]
cmp eax, 0x10
jb 0x40d7d4
add dword [esi + 0x18], 0x24
push dword [esi + 0x18]
call fcn.00426cac
add esp, 4
lea edi, [eax + 0x23]
mov dword [esi + 0x18], ebx
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x408bd4
mov dword [esi + 0x50], ebx
push ebx
push dword [esi + 0xc]
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + ebx + 0x40], 0
jmp 0x40b7b3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov bl, 1
mov edi, eax
jmp 0x408c79
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x4099cf
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409add
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409c33
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409d26
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x409e82
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a1b4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a29c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a3a0
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a45c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a52e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a5ea
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a6bc
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a75e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a81c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a8b6
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40a96c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x40aa21
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40aaec
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ab16
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ab40
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ab64
lea eax, [esi + 0x1300]
mov dword [esi + 0x1310], 7
mov dword [eax + 3], 0x616c6c69
mov dword [eax], 0x697a6f4d
mov byte [eax + 7], 0
cmp dword [esi + 0x1314], 0xf
ja 0x409b5f
lea edi, [esi + 0x1300]
jmp 0x409b65
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40ac52
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40acc1
lea eax, [edi + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40998e
lea eax, [ecx + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x409a9a
lea eax, [ebx + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x409e3e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x12d0]
mov edi, eax
jmp 0x409fcc
add dword [esi + 0x10], 0x24
push dword [esi + 0x10]
call fcn.00426cac
add esp, 4
lea edi, [eax + 0x23]
mov dword [esi + 0x10], ebx
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x40b793
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov ebx, eax
jmp 0x40b713
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b803
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b82d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b8a8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40b917
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b9b9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b2ef
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
lea ebx, [esi + 0x150]
mov edi, eax
jmp 0x40b3fc
mov dword [esi + 0x18], 0x80000023
mov ebx, 0x7fffffff
jmp 0x40b19d
lea eax, [edi + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40b2a5
lea eax, [ebx + 0x24]
push eax
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x40b3b2
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40d716
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x40d740
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x41143c
mov dword [esi + 0x18], 0x80000023
mov ebx, 0x7fffffff
jmp 0x40dcde
push 0x80000023
call fcn.00426cac
add esp, 4
mov ecx, eax
lea eax, [eax + 0x23]
mov edi, 0x7fffffff
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x409b2b
mov dword [esi + 0x10], 0x80000023
mov ebx, 0x7fffffff
jmp 0x40e160
push ecx
push eax
call fcn.00426ce1
add esp, 8
jmp 0x40d6df
call fcn.00401130
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x41143c
mov ecx, edi
mov eax, edx
add ecx, 0x24
jmp 0x4113c2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3