Function at 0x405532
Capabilities:
Get file size
Get graphical window text
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290c
push edi
lea edi, [ebp - 0x290c]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x40555b
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x411386
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4056d8
push eax
push edi
call fcn.0041488e
cmp eax, 1
jne 0x40558f
mov dword [edi], 0x414c8f
jmp 0x4055c0
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4056d6
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4056d6
lea edx, [ebp - 0x26ac]
push edx
lea edx, [ebp - 0x26fc]
push edx
lea edx, [ebp - 0x709]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4056d6
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x709]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x26fc]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x405718
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x411386
mov dword [ebp - 0x2460], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x265c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x2354], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xc
jne 0x4058e0
cmp dword [ebp - 0x2354], 0
jne 0x4058e0
mov dword [ebp - 0x75], ebx
mov dword [ebp - 0x71], 0
mov dword [ebp - 0x6d], 0
push 0
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_EnableWindow]
push 0x53
push 0x530041
push 0x4c0043
push 0x5f0057
push 0x4f0044
push 0x4e0049
push 0x57005f
push 0x530045
push 0x520055
push 0x540041
push 0x450046
push 0x5f004d
push 0x4f0052
mov dword [ebp - 0x9d], 0
mov dword [ebp - 0x99], 0x41424e
mov dword [ebp - 0x95], 0
mov dword [ebp - 0x91], 0
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [ebp - 0x8d], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.DLL_LoadIconA]
mov dword [ebp - 0x89], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.DLL_LoadCursorA]
mov dword [ebp - 0x85], eax
mov dword [ebp - 0x81], 0x10
mov dword [ebp - 0x7d], 0
mov dword [ebp - 0x79], esp
lea edx, [ebp - 0x9d]
push edx
call dword [sym.imp.USER32.DLL_RegisterClassW]
lea edx, [ebp - 0x75]
push edx
push dword [ebp - 0x8d]
push 0
push dword [ebx + 0x8ac]
push 0
push 0
push 0
push 0
push 0x100c0000
push 0
lea edx, [esp + 0x28]
push edx
push pe_nt_image_headers32
call dword [sym.imp.USER32.DLL_CreateWindowExW]
add esp, 0x34
test eax, eax
je 0x4058b5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [esp + 0xc]
push edx
call dword [sym.imp.USER32.DLL_GetMessageA]
test eax, eax
je 0x4058b2
push esp
call dword [sym.imp.USER32.DLL_TranslateMessage]
push esp
call dword [sym.imp.USER32.DLL_DispatchMessageA]
jmp 0x40588d
add esp, 0x1c
push 1
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_EnableWindow]
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_SetForegroundWindow]
cmp dword [ebp - 0x6d], 0
je 0x4058e0
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.0041485d
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x405aa2
mov byte [ebp - 0x165], 0
cmp dword [esi + 0x50], 1
jne 0x405aa2
mov byte [ebp - 0x125], 0x3a
mov byte [ebp - 0x124], 2
push 0xfa
lea edx, [ebp - 0x2562]
push edx
push 2
lea edx, [ebp - 0x125]
push edx
call dword [ebx + 0x40]
cmp eax, 0x10
je 0x40597c
push 0
push 0xa0d3123
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2354], 1
jmp 0x4059ed
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov ecx, esp
push 0
push 0x7068702e
push 0x6e61635f
push 0x326e6567
push 0x5f6f736e
push 0x65642f39
push 0x36656c75
push 0x646f6d2f
push 0x73656c75
push 0x646f6d2f
push 1
lea edx, [ebp - 0x165]
push edx
lea edx, [ebp - 0x121]
push edx
lea edx, [ebp - 0x2562]
push edx
push dword [esi + 0x54]
lea edx, [esp + 0x14]
push edx
push ecx
call fcn.0041270e
add esp, 0x28
add esp, 0xc
mov dword [ebp - 0x2354], eax
cmp dword [ebp - 0x2354], 0
jne 0x405a8f
mov byte [ebp - 0x123], 0x3b
mov byte [ebp - 0x122], 0x82
push 0xfa
lea edx, [ebp - 0x2562]
push edx
push 0x82
lea edx, [ebp - 0x123]
push edx
call dword [ebx + 0x40]
cmp eax, 0x10
je 0x405a79
push 0
push 0xa0d3223
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2354], 1
jmp 0x405a8f
push 0x10
lea edx, [ebp - 0x2562]
push edx
lea edx, [esi + 0x5c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x2354], 0
jne 0x405aa2
push dword [esi + 0x14]
push 0
call fcn.00413300
cmp dword [esi + 0x270], 0x39366d24
jne 0x405b10
cmp dword [esi + 0x274], 0x2432315f
jne 0x405b10
cmp dword [esi + 0x278], 0x7373694e
jne 0x405b10
cmp dword [esi + 0x27c], 0x53206e61
jne 0x405b10
cmp dword [esi + 0x280], 0x35323748
jne 0x405b10
cmp dword [esi + 0x284], 0x315b3133
jne 0x405b10
cmp dword [esi + 0x288], 0x6b303832
jne 0x405b10
cmp dword [esi + 0x28c], 0x4143205d
jne 0x405b10
cmp word [esi + 0x290], 0x4e
je 0x405b9e
cmp dword [esi + 0x270], 0x39366d24
jne 0x40624e
cmp dword [esi + 0x274], 0x2433315f
jne 0x40624e
cmp dword [esi + 0x278], 0x7373694e
jne 0x40624e
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40624e
cmp dword [esi + 0x280], 0x35323748
jne 0x40624e
cmp dword [esi + 0x284], 0x315b3033
jne 0x40624e
cmp dword [esi + 0x288], 0x6b303832
jne 0x40624e
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40624e
cmp word [esi + 0x290], 0x4e
jne 0x40624e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x405bb7
cmp eax, 0x17
je 0x405bb7
cmp eax, 0x18
jne 0x40624e
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x405be5
mov dword [ebp - 0x2354], 1
jmp 0x40624e
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x405c12
mov dword [ebp - 0x2354], 1
jmp 0x406238
push 0x9d070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xbd070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x405c68
mov dword [ebp - 0x2354], 1
jmp 0x406238
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x405e54
cmp dword [ebp - 0x2354], 0
jne 0x405d6c
push 0x8321
push 0x9d070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x405cb7
cmp eax, 0xffffffff
jne 0x405cc6
mov dword [ebp - 0x2354], 1
jmp 0x405d6c
cmp byte [ebp - 0x214c], 0x61
jne 0x405d6c
sub eax, 6
xor ecx, ecx
cmp ecx, 0x3f
jae 0x405d10
cmp ecx, eax
jae 0x405d10
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0x60
jbe 0x405cf2
cmp dl, 0x7b
jb 0x405d06
cmp dl, 0x40
jbe 0x405cfc
cmp dl, 0x5b
jb 0x405d06
cmp dl, 0x2f
jbe 0x405d10
cmp dl, 0x3a
jae 0x405d10
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x405cd8
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x405d6c
lea eax, [ebp - 0x92a]
push 0
push 0xa0d7325
push 0x203a7265
push 0x626d756e
push 0x20747261
push 0x70205543
push 0x45202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x405e54
push 0x8421
push 0x9d070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x405dab
cmp eax, 0xffffffff
jne 0x405dba
mov dword [ebp - 0x2354], 1
jmp 0x405e54
cmp byte [ebp - 0x214c], 0x61
jne 0x405e54
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x405e04
cmp ecx, eax
jae 0x405e04
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0x60
jbe 0x405de6
cmp dl, 0x7b
jb 0x405dfa
cmp dl, 0x40
jbe 0x405df0
cmp dl, 0x5b
jb 0x405dfa
cmp dl, 0x2f
jbe 0x405e04
cmp dl, 0x3a
jae 0x405e04
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x405dcc
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x405e54
lea eax, [ebp - 0x92a]
push 0xa0d
push 0x7325203a
push 0x746e6564
push 0x69202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
je 0x405e68
cmp eax, 0x18
jne 0x405f2d
cmp dword [ebp - 0x2354], 0
jne 0x405f2d
push 0xc010
push 0x9d070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x405ea8
cmp eax, 0xffffffff
jne 0x405eb4
mov dword [ebp - 0x2354], 1
jmp 0x405f2d
cmp byte [ebp - 0x214c], 0x50
je 0x405f2d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x405f0f
xor eax, eax
jmp 0x405f19
cmp eax, 0x20
jbe 0x405f19
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x406108
cmp dword [ebp - 0x2354], 0
jne 0x406108
push 0xff0219
push 0x9d070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x405f7b
cmp eax, 0xffffffff
jne 0x405f8a
mov dword [ebp - 0x2354], 1
jmp 0x406108
cmp byte [ebp - 0x214c], 0x59
je 0x406008
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x405fe5
xor eax, eax
jmp 0x405fef
cmp eax, 0x20
jbe 0x405fef
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x406108
sub eax, 7
shr eax, 2
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x406108
shl ecx, 2
movzx eax, byte [ebp + ecx - 0x2149]
mov dword [ebp - 0x93a], eax
movzx eax, byte [ebp + ecx - 0x2148]
mov dword [ebp - 0x936], eax
movzx eax, byte [ebp + ecx - 0x2147]
mov dword [ebp - 0x932], eax
movzx eax, byte [ebp + ecx - 0x2146]
mov dword [ebp - 0x92e], eax
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push dword [ebp - 0x93a]
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x40605e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x406228
cmp dword [ebp - 0x2354], 0
jne 0x406228
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xffffff14
push 0x9d070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0xbb8
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x406179
cmp eax, 0xffffffff
jne 0x406188
mov dword [ebp - 0x2354], 1
jmp 0x406228
cmp byte [ebp - 0x214c], 0x54
je 0x406203
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4061e3
xor eax, eax
jmp 0x4061ed
cmp eax, 0x20
jbe 0x4061ed
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x406228
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x406b12
cmp dword [esi + 0x274], 0x2432305f
jne 0x406b12
cmp dword [esi + 0x278], 0x6f6e6948
jne 0x406b12
cmp dword [esi + 0x27c], 0x37485320
jne 0x406b12
cmp dword [esi + 0x280], 0x33343532
jne 0x406b12
cmp dword [esi + 0x284], 0x3430325b
jne 0x406b12
cmp dword [esi + 0x288], 0x205d6b38
jne 0x406b12
cmp dword [esi + 0x28c], 0x4e4143
jne 0x406b12
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4062e7
cmp eax, 0x17
je 0x4062e7
cmp eax, 0x18
jne 0x406b12
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x406315
mov dword [ebp - 0x2354], 1
jmp 0x406b12
push 0
push 0x1f
push 0
push 0x1e
push 1
push 0x8000
push 0
push 3
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x24
cmp eax, 0xffffffff
jne 0x40634a
mov dword [ebp - 0x2354], 1
jmp 0x406afc
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4063a0
mov dword [ebp - 0x2354], 1
jmp 0x406afc
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x40682e
cmp dword [ebp - 0x2354], 0
jne 0x406490
push 0x811a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4063ef
cmp eax, 0xffffffff
jne 0x4063fe
mov dword [ebp - 0x2354], 1
jmp 0x406490
cmp byte [ebp - 0x214c], 0x5a
jne 0x406490
sub eax, 6
xor ecx, ecx
cmp ecx, 0x3f
jae 0x406434
cmp ecx, eax
jae 0x406434
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0
je 0x406434
cmp dl, 0xff
je 0x406434
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x406410
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x406490
lea eax, [ebp - 0x92a]
push 0
push 0xa0d7325
push 0x203a7265
push 0x626d756e
push 0x20747261
push 0x70205543
push 0x45202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40657c
push 0x4da9
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4064d0
cmp eax, 0xffffffff
jne 0x4064df
mov dword [ebp - 0x2354], 1
jmp 0x40657c
cmp byte [ebp - 0x214c], 0xe9
jne 0x40657c
sub eax, 6
xor ecx, ecx
cmp ecx, 0x427c0000
jae 0x406518
cmp ecx, eax
jae 0x406518
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0
je 0x406518
cmp dl, 0xff
je 0x406518
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x4064f1
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x40657c
lea eax, [ebp - 0x92a]
push 0xa0d
push 0x7325203a
push 0x6e6f6974
push 0x61636966
push 0x69737361
push 0x6c632065
push 0x63697665
push 0x44202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x406663
push 0x57a9
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4065bc
cmp eax, 0xffffffff
jne 0x4065cb
mov dword [ebp - 0x2354], 1
jmp 0x406663
cmp byte [ebp - 0x214c], 0xe9
jne 0x406663
sub eax, 6
xor ecx, ecx
cmp ecx, 0x427c0000
jae 0x406604
cmp ecx, eax
jae 0x406604
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0
je 0x406604
cmp dl, 0xff
je 0x406604
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x4065dd
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x406663
lea eax, [ebp - 0x92a]
push 0xa0d73
push 0x25203a6d
push 0x6172676f
push 0x72702055
push 0x43452066
push 0x6f204e49
push 0x50202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x406756
push 0x58a9
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4066a3
cmp eax, 0xffffffff
jne 0x4066b2
mov dword [ebp - 0x2354], 1
jmp 0x406756
cmp byte [ebp - 0x214c], 0xe9
jne 0x406756
sub eax, 6
xor ecx, ecx
cmp ecx, 0x427c0000
jae 0x4066eb
cmp ecx, eax
jae 0x4066eb
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0
je 0x4066eb
cmp dl, 0xff
je 0x4066eb
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x4066c4
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x406756
lea eax, [ebp - 0x92a]
push 0xa
push 0xd732520
push 0x3a676e69
push 0x6d6d6172
push 0x676f7250
push 0x20554345
push 0x20666f20
push 0x65746164
push 0x20747361
push 0x4c202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x38
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40682e
push 0x4ea9
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x406796
cmp eax, 0xffffffff
jne 0x4067a5
mov dword [ebp - 0x2354], 1
jmp 0x40682e
cmp byte [ebp - 0x214c], 0xe9
jne 0x40682e
sub eax, 6
xor ecx, ecx
cmp ecx, 0x427c0000
jae 0x4067de
cmp ecx, eax
jae 0x4067de
mov dl, byte [ebp + ecx - 0x214a]
cmp dl, 0
je 0x4067de
cmp dl, 0xff
je 0x4067de
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x4067b7
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x40682e
lea eax, [ebp - 0x92a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x4069cf
cmp dword [ebp - 0x2354], 0
jne 0x4069cf
push 0x8213
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40687d
cmp eax, 0xffffffff
jne 0x40688c
mov dword [ebp - 0x2354], 1
jmp 0x4069cf
cmp byte [ebp - 0x214c], 0x53
je 0x40690a
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4068e7
xor eax, eax
jmp 0x4068f1
cmp eax, 0x20
jbe 0x4068f1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x4069cf
movzx eax, byte [ebp - 0x214b]
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x4069cf
shl ecx, 1
movzx eax, byte [ebp + ecx - 0x214a]
mov dword [ebp - 0x93a], eax
movzx eax, byte [ebp + ecx - 0x2149]
mov dword [ebp - 0x936], eax
push 0xa0d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x936]
push dword [ebp - 0x93a]
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x1c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x406961
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x406aec
cmp dword [ebp - 0x2354], 0
jne 0x406aec
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0x14
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 5
push eax
push 0xbb8
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x406a3d
cmp eax, 0xffffffff
jne 0x406a4c
mov dword [ebp - 0x2354], 1
jmp 0x406aec
cmp byte [ebp - 0x214c], 0x54
je 0x406ac7
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x406aa7
xor eax, eax
jmp 0x406ab1
cmp eax, 0x20
jbe 0x406ab1
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x406aec
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x406e26
cmp dword [esi + 0x274], 0x2431305f
jne 0x406e26
cmp dword [esi + 0x278], 0x68696144
jne 0x406e26
cmp dword [esi + 0x27c], 0x75737461
jne 0x406e26
cmp dword [esi + 0x280], 0x37485320
jne 0x406e26
cmp dword [esi + 0x284], 0x31333532
jne 0x406e26
cmp dword [esi + 0x288], 0x3832315b
jne 0x406e26
cmp dword [esi + 0x28c], 0x205d6b30
jne 0x406e26
cmp dword [esi + 0x290], 0x4e4143
jne 0x406e26
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x406e26
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x406bdf
mov dword [ebp - 0x2354], 1
jmp 0x406e26
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x406c0c
mov dword [ebp - 0x2354], 1
jmp 0x406e10
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x406c62
mov dword [ebp - 0x2354], 1
jmp 0x406e10
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x406e00
cmp dword [ebp - 0x2354], 0
jne 0x406e00
push 0x13
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 5
push eax
push 0x1f4
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x406cae
cmp eax, 0xffffffff
jne 0x406cbd
mov dword [ebp - 0x2354], 1
jmp 0x406e00
cmp byte [ebp - 0x214c], 0x53
je 0x406d3b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x406d18
xor eax, eax
jmp 0x406d22
cmp eax, 0x20
jbe 0x406d22
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x406e00
movzx eax, byte [ebp - 0x214b]
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x406e00
shl ecx, 1
movzx eax, byte [ebp + ecx - 0x214a]
mov dword [ebp - 0x93a], eax
movzx eax, byte [ebp + ecx - 0x2149]
mov dword [ebp - 0x936], eax
push 0xa0d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x936]
push dword [ebp - 0x93a]
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x1c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x406d92
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x406e93
cmp dword [esi + 0x274], 0x2437315f
jne 0x406e93
cmp dword [esi + 0x278], 0x766c6f56
jne 0x406e93
cmp dword [esi + 0x27c], 0x4853206f
jne 0x406e93
cmp dword [esi + 0x280], 0x34353237
jne 0x406e93
cmp dword [esi + 0x284], 0x30325b33
jne 0x406e93
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x406e93
cmp dword [esi + 0x28c], 0x4e414320
jne 0x406e93
cmp byte [esi + 0x290], 0
je 0x406f20
cmp dword [esi + 0x270], 0x39366d24
jne 0x407b2f
cmp dword [esi + 0x274], 0x2438315f
jne 0x407b2f
cmp dword [esi + 0x278], 0x766c6f56
jne 0x407b2f
cmp dword [esi + 0x27c], 0x4853206f
jne 0x407b2f
cmp dword [esi + 0x280], 0x34353237
jne 0x407b2f
cmp dword [esi + 0x284], 0x38335b36
jne 0x407b2f
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x407b2f
cmp dword [esi + 0x28c], 0x4e414320
jne 0x407b2f
cmp byte [esi + 0x290], 0
jne 0x407b2f
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x406f39
cmp eax, 0x17
je 0x406f39
cmp eax, 0x18
jne 0x407b2f
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x406f67
mov dword [ebp - 0x2354], 1
jmp 0x407b2f
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x406f94
mov dword [ebp - 0x2354], 1
jmp 0x407b19
mov dword [ebp - 0x501], 0
mov dword [ebp - 0x4fd], 0
cmp dword [ebp - 0x4fd], 0
jne 0x406fc7
mov dword [ebp - 0xcd2], 0xe0070000
mov dword [ebp - 0xcce], 0xe8070000
jmp 0x406fdb
mov dword [ebp - 0xcd2], 0x30070000
mov dword [ebp - 0xcce], 0x30060000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x59], esp
mov eax, dword [ebp - 0xcce]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0xcd2]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x59]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x407042
mov dword [ebp - 0x2354], 1
jmp 0x407b19
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x407670
mov dword [ebp - 0x92a], 0
mov dword [ebp - 0x8ea], 0
mov dword [ebp - 0x8aa], 0
mov dword [ebp - 0x86a], 0
cmp dword [ebp - 0x2354], 0
jne 0x407100
mov eax, dword [ebp - 0xcd2]
mov dword [ebp - 0x2350], eax
mov dword [ebp - 0x234c], 0x110
lea edx, [ebp - 0x2350]
push edx
push 6
push 0x12c
push 0x40
push 6
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x4070c2
mov dword [ebp - 0x2354], 1
jmp 0x407100
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x4070e8
mov dword [ebp - 0x2354], 1
jmp 0x407100
test eax, eax
jne 0x407100
cmp dword [ebp - 0x4fd], 1
jae 0x407100
inc dword [ebp - 0x4fd]
jmp 0x406fa8
cmp dword [ebp - 0x2354], 0
jne 0x4071f7
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x234c], 0xb0f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40714e
cmp eax, 0xffffffff
jne 0x40715d
mov dword [ebp - 0x2354], 1
jmp 0x4071f7
cmp byte [ebp - 0x214c], 0x62
jne 0x4071f7
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x407193
cmp ecx, eax
jae 0x407193
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x407193
cmp dl, 0xff
je 0x407193
mov byte [ebp + ecx - 0x92a], dl
inc ecx
jmp 0x40716f
mov byte [ebp + ecx - 0x92a], 0
cmp byte [ebp - 0x92a], 0
je 0x4071ed
lea eax, [ebp - 0x92a]
push 0xa0d
push 0x7325203a
push 0x24545241
push 0x505f454e
push 0x49474e45
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x501], 1
cmp dword [ebp - 0x2354], 0
jne 0x4072f2
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x234c], 0xa5f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407245
cmp eax, 0xffffffff
jne 0x407254
mov dword [ebp - 0x2354], 1
jmp 0x4072f2
cmp byte [ebp - 0x214c], 0x62
jne 0x4072f2
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x40728a
cmp ecx, eax
jae 0x40728a
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x40728a
cmp dl, 0xff
je 0x40728a
mov byte [ebp + ecx - 0x8ea], dl
inc ecx
jmp 0x407266
mov byte [ebp + ecx - 0x8ea], 0
cmp byte [ebp - 0x8ea], 0
je 0x4072e8
lea eax, [ebp - 0x8ea]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0x8ea]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov dword [ebp - 0x501], 1
cmp dword [ebp - 0x2354], 0
jne 0x4073ee
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x234c], 0xa2f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407340
cmp eax, 0xffffffff
jne 0x40734f
mov dword [ebp - 0x2354], 1
jmp 0x4073ee
cmp byte [ebp - 0x214c], 0x62
jne 0x4073ee
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x407385
cmp ecx, eax
jae 0x407385
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x407385
cmp dl, 0xff
je 0x407385
mov byte [ebp + ecx - 0x8aa], dl
inc ecx
jmp 0x407361
mov byte [ebp + ecx - 0x8aa], 0
cmp byte [ebp - 0x8aa], 0
je 0x4073e4
lea eax, [ebp - 0x8aa]
push 0xa0d
push 0x7325203a
push 0x65726177
push 0x74666f73
push 0x20726569
push 0x6c707075
push 0x53202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x501], 1
cmp dword [ebp - 0x2354], 0
jne 0x4074e5
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x234c], 0x94f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40743c
cmp eax, 0xffffffff
jne 0x40744b
mov dword [ebp - 0x2354], 1
jmp 0x4074e5
cmp byte [ebp - 0x214c], 0x62
jne 0x4074e5
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x407481
cmp ecx, eax
jae 0x407481
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x407481
cmp dl, 0xff
je 0x407481
mov byte [ebp + ecx - 0x86a], dl
inc ecx
jmp 0x40745d
mov byte [ebp + ecx - 0x86a], 0
cmp byte [ebp - 0x86a], 0
je 0x4074db
lea eax, [ebp - 0x86a]
push 0xa0d73
push 0x25203a65
push 0x646f6320
push 0x6c65646f
push 0x6d207261
push 0x43202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x501], 1
cmp dword [ebp - 0x2354], 0
jne 0x4075d2
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x234c], 0x90f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407533
cmp eax, 0xffffffff
jne 0x407542
mov dword [ebp - 0x2354], 1
jmp 0x4075d2
cmp byte [ebp - 0x214c], 0x62
jne 0x4075d2
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x407578
cmp ecx, eax
jae 0x407578
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x407578
cmp dl, 0xff
je 0x407578
mov byte [ebp + ecx - 0x82a], dl
inc ecx
jmp 0x407554
mov byte [ebp + ecx - 0x82a], 0
cmp byte [ebp - 0x82a], 0
je 0x4075c8
lea eax, [ebp - 0x82a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x501], 1
cmp dword [ebp - 0x2354], 0
jne 0x407670
cmp dword [ebp - 0x501], 0
jne 0x407670
cmp dword [ebp - 0x4fd], 1
jae 0x407600
inc dword [ebp - 0x4fd]
jmp 0x406fa8
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x407652
xor eax, eax
jmp 0x40765c
cmp eax, 0x20
jbe 0x40765c
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
je 0x407684
cmp eax, 0x18
jne 0x40780e
cmp dword [ebp - 0x2354], 0
jne 0x407749
push 0x110
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4076c4
cmp eax, 0xffffffff
jne 0x4076d0
mov dword [ebp - 0x2354], 1
jmp 0x407749
cmp byte [ebp - 0x214c], 0x50
je 0x407749
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40772b
xor eax, eax
jmp 0x407735
cmp eax, 0x20
jbe 0x407735
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40780e
push 0x310
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407789
cmp eax, 0xffffffff
jne 0x407795
mov dword [ebp - 0x2354], 1
jmp 0x40780e
cmp byte [ebp - 0x214c], 0x50
je 0x40780e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4077f0
xor eax, eax
jmp 0x4077fa
cmp eax, 0x20
jbe 0x4077fa
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x4079e9
cmp dword [ebp - 0x2354], 0
jne 0x4079e9
push 0x8f0219
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40785c
cmp eax, 0xffffffff
jne 0x40786b
mov dword [ebp - 0x2354], 1
jmp 0x4079e9
cmp byte [ebp - 0x214c], 0x59
je 0x4078e9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4078c6
xor eax, eax
jmp 0x4078d0
cmp eax, 0x20
jbe 0x4078d0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x4079e9
sub eax, 7
shr eax, 2
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x4079e9
shl ecx, 2
movzx eax, byte [ebp + ecx - 0x2149]
mov dword [ebp - 0x93a], eax
movzx eax, byte [ebp + ecx - 0x2148]
mov dword [ebp - 0x936], eax
movzx eax, byte [ebp + ecx - 0x2147]
mov dword [ebp - 0x932], eax
movzx eax, byte [ebp + ecx - 0x2146]
mov dword [ebp - 0x92e], eax
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push dword [ebp - 0x93a]
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x40793f
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x407b09
cmp dword [ebp - 0x2354], 0
jne 0x407b09
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xffffff14
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x3e8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407a5a
cmp eax, 0xffffffff
jne 0x407a69
mov dword [ebp - 0x2354], 1
jmp 0x407b09
cmp byte [ebp - 0x214c], 0x54
je 0x407ae4
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x407ac4
xor eax, eax
jmp 0x407ace
cmp eax, 0x20
jbe 0x407ace
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x407b09
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x407ba9
cmp dword [esi + 0x274], 0x2437305f
jne 0x407ba9
cmp dword [esi + 0x278], 0x647a614d
jne 0x407ba9
cmp dword [esi + 0x27c], 0x6b732061
jne 0x407ba9
cmp dword [esi + 0x280], 0x53204179
jne 0x407ba9
cmp dword [esi + 0x284], 0x35323748
jne 0x407ba9
cmp dword [esi + 0x288], 0x315b3133
jne 0x407ba9
cmp dword [esi + 0x28c], 0x6b303832
jne 0x407ba9
cmp dword [esi + 0x290], 0x4143205d
jne 0x407ba9
cmp word [esi + 0x294], 0x4e
je 0x407d13
cmp dword [esi + 0x270], 0x39366d24
jne 0x407c23
cmp dword [esi + 0x274], 0x2438305f
jne 0x407c23
cmp dword [esi + 0x278], 0x647a614d
jne 0x407c23
cmp dword [esi + 0x27c], 0x6b732061
jne 0x407c23
cmp dword [esi + 0x280], 0x53204179
jne 0x407c23
cmp dword [esi + 0x284], 0x35323748
jne 0x407c23
cmp dword [esi + 0x288], 0x325b3334
jne 0x407c23
cmp dword [esi + 0x28c], 0x6b383430
jne 0x407c23
cmp dword [esi + 0x290], 0x4143205d
jne 0x407c23
cmp word [esi + 0x294], 0x4e
je 0x407d13
cmp dword [esi + 0x270], 0x39366d24
jne 0x407c99
cmp dword [esi + 0x274], 0x2439305f
jne 0x407c99
cmp dword [esi + 0x278], 0x647a614d
jne 0x407c99
cmp dword [esi + 0x27c], 0x6b732061
jne 0x407c99
cmp dword [esi + 0x280], 0x53204479
jne 0x407c99
cmp dword [esi + 0x284], 0x35323748
jne 0x407c99
cmp dword [esi + 0x288], 0x325b3334
jne 0x407c99
cmp dword [esi + 0x28c], 0x6b383430
jne 0x407c99
cmp dword [esi + 0x290], 0x4143205d
jne 0x407c99
cmp word [esi + 0x294], 0x4e
je 0x407d13
cmp dword [esi + 0x270], 0x39366d24
jne 0x407d2b
cmp dword [esi + 0x274], 0x2430315f
jne 0x407d2b
cmp dword [esi + 0x278], 0x647a614d
jne 0x407d2b
cmp dword [esi + 0x27c], 0x6b732061
jne 0x407d2b
cmp dword [esi + 0x280], 0x53204479
jne 0x407d2b
cmp dword [esi + 0x284], 0x35323748
jne 0x407d2b
cmp dword [esi + 0x288], 0x335b3634
jne 0x407d2b
cmp dword [esi + 0x28c], 0x6b303438
jne 0x407d2b
cmp dword [esi + 0x290], 0x4143205d
jne 0x407d2b
cmp word [esi + 0x294], 0x4e
jne 0x407d2b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x407d2b
push 0x7e8
push 0x7e0
call dword [ebx + 0x54]
cmp dword [esi + 0x270], 0x39366d24
jne 0x407d99
cmp dword [esi + 0x274], 0x2434315f
jne 0x407d99
cmp dword [esi + 0x278], 0x61627553
jne 0x407d99
cmp dword [esi + 0x27c], 0x53207572
jne 0x407d99
cmp dword [esi + 0x280], 0x35323748
jne 0x407d99
cmp dword [esi + 0x284], 0x315b3133
jne 0x407d99
cmp dword [esi + 0x288], 0x6b303832
jne 0x407d99
cmp dword [esi + 0x28c], 0x4143205d
jne 0x407d99
cmp word [esi + 0x290], 0x4e
je 0x407e46
cmp dword [esi + 0x270], 0x39366d24
jne 0x4083d4
cmp dword [esi + 0x274], 0x2435315f
jne 0x4083d4
cmp dword [esi + 0x278], 0x61627553
jne 0x4083d4
cmp dword [esi + 0x27c], 0x44207572
jne 0x4083d4
cmp dword [esi + 0x280], 0x65736569
jne 0x4083d4
cmp dword [esi + 0x284], 0x4853206c
jne 0x4083d4
cmp dword [esi + 0x288], 0x34353237
jne 0x4083d4
cmp dword [esi + 0x28c], 0x30325b33
jne 0x4083d4
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x4083d4
cmp dword [esi + 0x294], 0x4e414320
jne 0x4083d4
cmp byte [esi + 0x298], 0
jne 0x4083d4
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x4083d4
mov dword [ebp - 0xcd2], 0xe0070000
mov dword [ebp - 0xcce], 0xe8070000
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x407e97
mov dword [ebp - 0x2354], 1
jmp 0x4083d4
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x407ec4
mov dword [ebp - 0x2354], 1
jmp 0x4083be
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x55], esp
mov eax, dword [ebp - 0xcce]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0xcd2]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x55]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x407f2b
mov dword [ebp - 0x2354], 1
jmp 0x4083be
mov eax, dword [ebp - 0xcd2]
mov dword [ebp - 0x2350], eax
mov dword [ebp - 0x234c], 0x409
lea edx, [ebp - 0x2350]
push edx
push 6
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x407f70
cmp eax, 0xffffffff
jne 0x407f7f
mov dword [ebp - 0x2354], 1
jmp 0x408001
cmp byte [ebp - 0x214c], 0x49
jne 0x408001
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x407fb1
cmp ecx, eax
jae 0x407fb1
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x407fb1
cmp dl, 0xff
je 0x407fb1
mov byte [ebp + ecx - 0x7aa], dl
inc ecx
jmp 0x407f8d
mov byte [ebp + ecx - 0x7aa], 0
cmp byte [ebp - 0x7aa], 0
je 0x408001
lea ecx, [ebp - 0x7aa]
push 0xa0d
push 0x7325203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40809f
mov dword [ebp - 0x234c], 0x409
lea edx, [ebp - 0x2350]
push edx
push 6
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x408047
cmp eax, 0xffffffff
jne 0x408053
mov dword [ebp - 0x2354], 1
jmp 0x40809f
cmp byte [ebp - 0x214c], 0x49
jne 0x40809f
mov eax, dword [ebp - 0x2149]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x408152
mov dword [ebp - 0x234c], 0x82f122
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4080e5
cmp eax, 0xffffffff
jne 0x4080f1
mov dword [ebp - 0x2354], 1
jmp 0x408152
cmp byte [ebp - 0x214c], 0x62
jne 0x408152
mov eax, dword [ebp - 0x2149]
bswap eax
movzx ecx, byte [ebp - 0x2145]
push 0xa0d58
push 0x322e2558
push 0x382e2520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
push eax
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x408229
mov dword [ebp - 0x234c], 0x209
lea edx, [ebp - 0x2350]
push edx
push 6
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x408198
cmp eax, 0xffffffff
jne 0x4081a7
mov dword [ebp - 0x2354], 1
jmp 0x408229
cmp byte [ebp - 0x214c], 0x49
jne 0x408229
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x4081d9
cmp ecx, eax
jae 0x4081d9
mov dl, byte [ebp + ecx - 0x2149]
cmp dl, 0
je 0x4081d9
cmp dl, 0xff
je 0x4081d9
mov byte [ebp + ecx - 0x82a], dl
inc ecx
jmp 0x4081b5
mov byte [ebp + ecx - 0x82a], 0
cmp byte [ebp - 0x82a], 0
je 0x408229
lea ecx, [ebp - 0x82a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4082d9
mov dword [ebp - 0x234c], 0xe51022
lea edx, [ebp - 0x2350]
push edx
push 7
lea edx, [ebp - 0x2150]
push edx
push 0xbb8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40826f
cmp eax, 0xffffffff
jne 0x40827b
mov dword [ebp - 0x2354], 1
jmp 0x4082d9
cmp byte [ebp - 0x214c], 0x62
jne 0x4082d9
movzx eax, byte [ebp - 0x2148]
mov ah, byte [ebp - 0x2149]
mov ecx, eax
shl ecx, 1
push 0xa0d29
push 0x58342e25
push 0x28642520
push 0x3a726574
push 0x656d6f64
push 0x4f202445
push 0x4d495424
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4083ae
mov dword [ebp - 0x234c], 0xaa
lea edx, [ebp - 0x2350]
push edx
push 5
push 0x12c
push 0x40
push 6
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40831d
mov dword [ebp - 0x2354], 1
jmp 0x4083ae
lea edx, [ebp - 0x2150]
push edx
push 0x1f4
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x408343
mov dword [ebp - 0x2354], 1
jmp 0x4083ae
test eax, eax
jne 0x408373
push 0xa0d
push 0x6f736e65
push 0x44203a24
push 0x45505954
push 0x5f554345
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x4083ae
push 0
push 0xa0d2969
push 0x68636174
push 0x69482824
push 0x45505954
push 0x5f554345
push 0x5f474e4f
push 0x52575f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x2c
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x409223
cmp dword [esi + 0x274], 0x2431315f
jne 0x409223
cmp dword [esi + 0x278], 0x7374694d
jne 0x409223
cmp dword [esi + 0x27c], 0x73696275
jne 0x409223
cmp dword [esi + 0x280], 0x53206968
jne 0x409223
cmp dword [esi + 0x284], 0x35323748
jne 0x409223
cmp dword [esi + 0x288], 0x325b3334
jne 0x409223
cmp dword [esi + 0x28c], 0x6b383430
jne 0x409223
cmp dword [esi + 0x290], 0x4143205d
jne 0x409223
cmp word [esi + 0x294], 0x4e
jne 0x409223
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x40848b
cmp eax, 0x17
je 0x40848b
cmp eax, 0x18
jne 0x409223
cmp dword [ebp - 0x2354], 0
jne 0x409223
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4084c6
mov dword [ebp - 0x2354], 1
jmp 0x409223
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4084f3
mov dword [ebp - 0x2354], 1
jmp 0x40920d
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x408549
mov dword [ebp - 0x2354], 1
jmp 0x40920d
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x4089bd
push 0x871a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x258
push 0x1f4
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40858b
cmp eax, 0xffffffff
jne 0x40859a
mov dword [ebp - 0x2354], 1
jmp 0x4086a2
cmp byte [ebp - 0x214c], 0x5a
je 0x408618
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4085f5
xor eax, eax
jmp 0x4085ff
cmp eax, 0x20
jbe 0x4085ff
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x4086a2
sub eax, 0x10
xor ecx, ecx
cmp ecx, 0x104
jae 0x40864e
cmp ecx, eax
jae 0x40864e
cmp byte [ebp + ecx - 0x2140], 0
je 0x40864e
cmp byte [ebp + ecx - 0x2140], 0x20
je 0x40864e
mov dl, byte [ebp + ecx - 0x2140]
mov byte [ebp + ecx - 0x8ea], dl
inc ecx
jmp 0x40861d
mov byte [ebp + ecx - 0x8ea], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x408666
cmp eax, 0xa
jne 0x4086a2
lea ecx, [ebp - 0x8ea]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x408826
push 0x9c1a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x258
push 0x1f4
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x4086e2
cmp eax, 0xffffffff
jne 0x4086f1
mov dword [ebp - 0x2354], 1
jmp 0x408826
cmp byte [ebp - 0x214c], 0x5a
jne 0x408826
sub eax, 0xf
xor ecx, ecx
cmp ecx, 0x104
jae 0x408734
cmp ecx, eax
jae 0x408734
cmp byte [ebp + ecx - 0x2141], 0
je 0x408734
cmp byte [ebp + ecx - 0x2141], 0x20
je 0x408734
mov dl, byte [ebp + ecx - 0x2141]
mov byte [ebp + ecx - 0x7ea], dl
inc ecx
jmp 0x408703
mov byte [ebp + ecx - 0x7ea], 0
lea ecx, [ebp - 0x7ea]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
push 0
push 0xa0d5832
push 0x2e255832
push 0x2e255832
push 0x2e25203a
push 0x244c4143
push 0x24202445
push 0x4d495424
movzx eax, byte [ebp - 0x2142]
push eax
movzx eax, byte [ebp - 0x2143]
push eax
movzx eax, byte [ebp - 0x2144]
push eax
lea eax, [esp + 0xc]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x34
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
push 0x58322e
push 0x2558322e
push 0x2558322e
push 0x255f7325
movzx eax, byte [ebp - 0x2142]
push eax
movzx eax, byte [ebp - 0x2143]
push eax
movzx eax, byte [ebp - 0x2144]
push eax
lea edx, [ebp - 0x7ea]
push edx
lea edx, [esp + 0x10]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x18
add esp, 0x10
cmp dword [ebp - 0x2354], 0
jne 0x4088e4
push 0x971a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x258
push 0x1f4
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x408866
cmp eax, 0xffffffff
jne 0x408872
mov dword [ebp - 0x2354], 1
jmp 0x4088e4
cmp byte [ebp - 0x214c], 0x5a
jne 0x4088e4
push 0
push 0xa0d5832
push 0x2e255832
push 0x2e255832
push 0x2e255832
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
movzx eax, byte [ebp - 0x2147]
push eax
movzx eax, byte [ebp - 0x2148]
push eax
movzx eax, byte [ebp - 0x2149]
push eax
movzx eax, byte [ebp - 0x214a]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x3c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4089bd
push 0x901a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x258
push 0x1f4
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x408924
cmp eax, 0xffffffff
jne 0x408933
mov dword [ebp - 0x2354], 1
jmp 0x4089bd
cmp byte [ebp - 0x214c], 0x5a
jne 0x4089bd
sub eax, 6
xor ecx, ecx
cmp ecx, 0x104
jae 0x408976
cmp ecx, eax
jae 0x408976
cmp byte [ebp + ecx - 0x214a], 0
je 0x408976
cmp byte [ebp + ecx - 0x214a], 0x20
je 0x408976
mov dl, byte [ebp + ecx - 0x214a]
mov byte [ebp + ecx - 0x82a], dl
inc ecx
jmp 0x408945
mov byte [ebp + ecx - 0x82a], 0
lea ecx, [ebp - 0x82a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x408cc2
push 0x9210
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x64
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x4089fb
cmp eax, 0xffffffff
jne 0x408a07
mov dword [ebp - 0x2354], 1
jmp 0x408a80
cmp byte [ebp - 0x214c], 0x50
je 0x408a80
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x408a62
xor eax, eax
jmp 0x408a6c
cmp eax, 0x20
jbe 0x408a6c
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x408cc2
push 0xff0018
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x1388
push 0x1f4
push 0x40
push 6
push 0
call fcn.0041231c
je 0x408abd
cmp eax, 0xffffffff
jne 0x408acc
mov dword [ebp - 0x2354], 1
jmp 0x408cc2
cmp byte [ebp - 0x214c], 0x7f
jne 0x408b4a
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x408b27
xor eax, eax
jmp 0x408b31
cmp eax, 0x20
jbe 0x408b31
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x408cc2
pushal
movzx eax, byte [ebp - 0x214b]
mov dword [ebp - 0x942], eax
push 0xa
push 0xd642520
push 0x3a24544e
push 0x554f435f
push 0x43544424
push dword [ebp - 0x942]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
push 0x5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
mov dword [ebp - 0x51], esp
push 0x5832
push 0x2e252d58
push 0x322e2558
push 0x322e2542
mov dword [ebp - 0x4d], esp
push 0x5832
push 0x2e252d58
push 0x322e2558
push 0x322e2543
mov dword [ebp - 0x49], esp
push 0x5832
push 0x2e252d58
push 0x322e2558
push 0x322e2555
mov dword [ebp - 0x45], esp
push 0xa0d73
push 0x25207325
mov dword [ebp - 0x41], esp
lea esi, [ebp - 0x214a]
xor edi, edi
cmp edi, dword [ebp - 0x942]
jae 0x408cb2
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi]
lea ecx, [ebp - 0x76a]
cmp eax, 0xd0
jb 0x408c3c
sub eax, 0xc0
push eax
push dword [ebp - 0x45]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
jmp 0x408c79
cmp eax, 0xc0
jb 0x408c55
sub eax, 0xb0
push eax
push dword [ebp - 0x49]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
jmp 0x408c79
cmp eax, 0xb0
jb 0x408c6e
sub eax, 0xa0
push eax
push dword [ebp - 0x4d]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
jmp 0x408c79
push eax
push dword [ebp - 0x51]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x76a]
push 0
push 0xa0d7325
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x14
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
add esi, 3
inc edi
jmp 0x408c04
add esp, 8
add esp, 0x10
add esp, 0x10
add esp, 0x10
add esp, 0x10
popal
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x4091fd
push 0xa
push 0xd244354
push 0x445f4553
push 0x41524524
push esp
call dword [ebx + 0x30]
add esp, 0x10
push 0x24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x3d], esp
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x39], esp
push 0
push 0
push 0
push 0
push 0
push 6
push 1
push 0xc8
push 0
mov dword [ebp - 0x35], esp
push 0xff14
push 0
push 0
push 7
push 0
push 0x40
push 0
push 6
push 0x64
push 0
mov dword [ebp - 0x31], esp
push 0x8110
push 0
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x64
push 0
mov dword [ebp - 0x2d], esp
push 0x9210
push 0
push 0
push 6
push 0
push 0x40
push 0
push 6
push 0x64
push 0
mov dword [ebp - 0x29], esp
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x25], esp
push 0
push 0
mov dword [ebp - 0x21], esp
push 0x798
push 0x790
push 0x7d0
push 0x7d8
push 0x6b4
push 0x6bc
push 0x660
push 0x668
push 0x788
push 0x780
push 0x794
push 0x79c
push 0x769
push 0x761
push 0x6b2
push 0x6ba
push 0x7b9
push 0x7b1
push 0x7b5
push 0x7bd
push 0x658
push 0x650
push 0x648
push 0x640
push 0x728
push 0x720
push 0x790
push 0x798
push 0x7f8
push 0x7f0
push 0x7d8
push 0x7d0
push 0x6b0
push 0x6b8
push 0x7a8
push 0x7a0
push 0x6e8
push 0x6e0
push 0x6e0
push 0x6e8
push 0x600
push 0x608
push 0x688
push 0x680
push 0x7b6
push 0x7be
push 0x622
push 0x62a
push 0x77b
push 0x773
push 0x6a0
push 0x6a8
push 0x784
push 0x78c
push 0x620
push 0x628
push 0x7e1
push 0x7e9
push 0x7e0
push 0x7e8
mov dword [ebp - 0x1d], esp
xor esi, esi
cmp esi, 0xf0
jae 0x4091d0
push 0
push dword [ebp - 0x21]
push 5
call dword [edi]
mov eax, dword [esp + esi]
mov ecx, eax
shr ecx, 0x10
mov edx, dword [ebp - 0x25]
mov byte [edx + 0x40], ch
mov byte [edx + 0x41], cl
mov byte [edx + 0x42], ah
mov byte [edx + 0x43], al
mov eax, dword [esp + esi + 4]
mov ecx, eax
shr ecx, 0x10
mov edx, dword [ebp - 0x25]
mov byte [edx + 0x5c], ch
mov byte [edx + 0x5d], cl
mov byte [edx + 0x5e], ah
mov byte [edx + 0x5f], al
mov edx, dword [ebp - 0x29]
mov byte [edx + 0x20], ch
mov byte [edx + 0x21], cl
mov byte [edx + 0x22], ah
mov byte [edx + 0x23], al
mov edx, dword [ebp - 0x31]
mov byte [edx + 0x20], ch
mov byte [edx + 0x21], cl
mov byte [edx + 0x22], ah
mov byte [edx + 0x23], al
mov edx, dword [ebp - 0x2d]
mov byte [edx + 0x20], ch
mov byte [edx + 0x21], cl
mov byte [edx + 0x22], ah
mov byte [edx + 0x23], al
push 0
push dword [ebp - 0x25]
push 4
call dword [edi]
push 0
push dword [ebp - 0x29]
push 0xe
call dword [edi]
cmp eax, 0xffffffff
jne 0x408fb3
mov dword [ebp - 0x2354], 1
jmp 0x4091c8
mov dword [ebp - 0x245c], 3
lea edx, [ebp - 0x2150]
push edx
push dword [ebp - 0x35]
push 0xf
call dword [edi]
cmp eax, 0xffffffff
jne 0x408fdf
mov dword [ebp - 0x2354], 1
jmp 0x4091c8
cmp eax, 4
jae 0x408ffa
cmp dword [ebp - 0x245c], 0
je 0x408ff5
dec dword [ebp - 0x245c]
jmp 0x408fbd
jmp 0x4091c8
cmp byte [ebp - 0x214c], 0x7f
jne 0x40901d
cmp byte [ebp - 0x214a], 0x78
jne 0x409018
mov dword [ebp - 0x245c], 3
jmp 0x408fbd
jmp 0x4091c8
cmp byte [ebp - 0x214c], 0x50
jne 0x4091c8
push 0
push dword [ebp - 0x31]
push 0xe
call dword [edi]
cmp eax, 0xffffffff
jne 0x409047
mov dword [ebp - 0x2354], 1
jmp 0x4090f9
mov dword [ebp - 0x245c], 3
lea edx, [ebp - 0x2150]
push edx
push dword [ebp - 0x35]
push 0xf
call dword [edi]
cmp eax, 0xffffffff
jne 0x409070
mov dword [ebp - 0x2354], 1
jmp 0x4090d1
cmp eax, 4
jae 0x409094
cmp dword [ebp - 0x245c], 0
jne 0x40908a
mov dword [ebp - 0x2354], 1
jmp 0x409092
dec dword [ebp - 0x245c]
jmp 0x409051
jmp 0x4090d1
cmp byte [ebp - 0x214c], 0x7f
jne 0x4090be
cmp byte [ebp - 0x214a], 0x78
jne 0x4090b2
mov dword [ebp - 0x245c], 3
jmp 0x409051
mov dword [ebp - 0x2354], 1
jmp 0x4090d1
cmp byte [ebp - 0x214c], 0x54
je 0x4090d1
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
je 0x4090f9
lea ecx, [ebp - 0x2150]
mov edx, dword [ebp - 0x2464]
movzx edx, byte [ebp + edx - 0x2562]
push ecx
push eax
push dword [ebp - 0x39]
push edx
call fcn.004124fd
push 0
push dword [ebp - 0x2d]
push 0xe
call dword [edi]
cmp eax, 0xffffffff
jne 0x409116
mov dword [ebp - 0x2354], 1
jmp 0x4091c8
mov dword [ebp - 0x245c], 3
lea edx, [ebp - 0x2150]
push edx
push dword [ebp - 0x35]
push 0xf
call dword [edi]
cmp eax, 0xffffffff
jne 0x40913f
mov dword [ebp - 0x2354], 1
jmp 0x4091a0
cmp eax, 4
jae 0x409163
cmp dword [ebp - 0x245c], 0
jne 0x409159
mov dword [ebp - 0x2354], 1
jmp 0x409161
dec dword [ebp - 0x245c]
jmp 0x409120
jmp 0x4091a0
cmp byte [ebp - 0x214c], 0x7f
jne 0x40918d
cmp byte [ebp - 0x214a], 0x78
jne 0x409181
mov dword [ebp - 0x245c], 3
jmp 0x409120
mov dword [ebp - 0x2354], 1
jmp 0x4091a0
cmp byte [ebp - 0x214c], 0x50
je 0x4091a0
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
je 0x4091c8
lea ecx, [ebp - 0x2150]
mov edx, dword [ebp - 0x2464]
movzx edx, byte [ebp + edx - 0x2562]
push ecx
push eax
push dword [ebp - 0x39]
push edx
call fcn.004124fd
add esi, 8
jmp 0x408f1c
cmp dword [ebp - 0x2354], 0
jne 0x4091df
push dword [ebp - 0x3d]
call dword [ebx + 0x30]
add esp, 0xf0
add esp, 8
add esp, 0x60
add esp, 0x28
add esp, 0x28
add esp, 0x28
add esp, 0x24
add esp, 0x34
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x409eb8
cmp dword [esi + 0x274], 0x2433305f
jne 0x409eb8
cmp dword [esi + 0x278], 0x6e757948
jne 0x409eb8
cmp dword [esi + 0x27c], 0x20696164
jne 0x409eb8
cmp dword [esi + 0x280], 0x32374853
jne 0x409eb8
cmp dword [esi + 0x284], 0x5b363435
jne 0x409eb8
cmp dword [esi + 0x288], 0x30343833
jne 0x409eb8
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x409eb8
cmp word [esi + 0x290], 0x4e41
jne 0x409eb8
cmp byte [esi + 0x292], 0
jne 0x409eb8
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x409eb8
mov byte [ebp - 0x74a], 0
mov byte [ebp - 0x709], 0
mov byte [ebp - 0x6c8], 0
mov byte [ebp - 0x687], 0
mov byte [ebp - 0x646], 0
mov byte [ebp - 0x605], 0
mov byte [ebp - 0x5c4], 0
mov byte [ebp - 0x583], 0
mov byte [ebp - 0x542], 0
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40933b
mov dword [ebp - 0x2354], 1
jmp 0x409eb8
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x409368
mov dword [ebp - 0x2354], 1
jmp 0x409ea2
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4093be
mov dword [ebp - 0x2354], 1
jmp 0x409ea2
cmp dword [ebp - 0x2354], 0
jne 0x409482
push 0x110
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x4093fd
cmp eax, 0xffffffff
jne 0x409409
mov dword [ebp - 0x2354], 1
jmp 0x409482
cmp byte [ebp - 0x214c], 0x50
je 0x409482
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x409464
xor eax, eax
jmp 0x40946e
cmp eax, 0x20
jbe 0x40946e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x409546
push 0x310
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x4094c1
cmp eax, 0xffffffff
jne 0x4094cd
mov dword [ebp - 0x2354], 1
jmp 0x409546
cmp byte [ebp - 0x214c], 0x50
je 0x409546
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x409528
xor eax, eax
jmp 0x409532
cmp eax, 0x20
jbe 0x409532
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40962d
push 0x94f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409585
cmp eax, 0xffffffff
jne 0x409594
mov dword [ebp - 0x2354], 1
jmp 0x40962d
cmp byte [ebp - 0x214c], 0x62
jne 0x40962d
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x4095c9
cmp ecx, eax
jae 0x4095c9
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x4095c9
cmp dl, 0xff
je 0x4095c9
mov byte [ebp + ecx - 0x687], dl
inc ecx
jmp 0x4095a6
mov byte [ebp + ecx - 0x687], 0
cmp byte [ebp - 0x687], 0
je 0x40962d
lea ecx, [ebp - 0x687]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409707
push 0x89f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40966c
cmp eax, 0xffffffff
jne 0x40967b
mov dword [ebp - 0x2354], 1
jmp 0x409707
cmp byte [ebp - 0x214c], 0x62
jne 0x409707
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x4096b0
cmp ecx, eax
jae 0x4096b0
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x4096b0
cmp dl, 0xff
je 0x4096b0
mov byte [ebp + ecx - 0x5c4], dl
inc ecx
jmp 0x40968d
mov byte [ebp + ecx - 0x5c4], 0
cmp byte [ebp - 0x5c4], 0
je 0x409707
lea ecx, [ebp - 0x5c4]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4097ee
push 0x92f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409746
cmp eax, 0xffffffff
jne 0x409755
mov dword [ebp - 0x2354], 1
jmp 0x4097ee
cmp byte [ebp - 0x214c], 0x62
jne 0x4097ee
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x40978a
cmp ecx, eax
jae 0x40978a
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40978a
cmp dl, 0xff
je 0x40978a
mov byte [ebp + ecx - 0x6c8], dl
inc ecx
jmp 0x409767
mov byte [ebp + ecx - 0x6c8], 0
cmp byte [ebp - 0x6c8], 0
je 0x4097ee
lea ecx, [ebp - 0x6c8]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x44524148
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4098c8
push 0x91f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40982d
cmp eax, 0xffffffff
jne 0x40983c
mov dword [ebp - 0x2354], 1
jmp 0x4098c8
cmp byte [ebp - 0x214c], 0x62
jne 0x4098c8
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x409871
cmp ecx, eax
jae 0x409871
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x409871
cmp dl, 0xff
je 0x409871
mov byte [ebp + ecx - 0x709], dl
inc ecx
jmp 0x40984e
mov byte [ebp + ecx - 0x709], 0
cmp byte [ebp - 0x709], 0
je 0x4098c8
lea ecx, [ebp - 0x709]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5748
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x4099c8
push 0x98f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409907
cmp eax, 0xffffffff
jne 0x409916
mov dword [ebp - 0x2354], 1
jmp 0x4099c8
cmp byte [ebp - 0x214c], 0x62
jne 0x4099c8
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x40994b
cmp ecx, eax
jae 0x40994b
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40994b
cmp dl, 0xff
je 0x40994b
mov byte [ebp + ecx - 0x646], dl
inc ecx
jmp 0x409928
mov byte [ebp + ecx - 0x646], 0
cmp byte [ebp - 0x646], 0
je 0x4099c8
lea ecx, [ebp - 0x646]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f4c
push 0x41495245
push 0x535f5245
push 0x54534554
push 0x5f524f5f
push 0x45444f43
push 0x5f504f48
push 0x535f5249
push 0x41504552
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x44
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409a77
push 0x99f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409a07
cmp eax, 0xffffffff
jne 0x409a13
mov dword [ebp - 0x2354], 1
jmp 0x409a77
cmp byte [ebp - 0x214c], 0x62
jne 0x409a77
cmp dword [ebp - 0x2149], 0
je 0x409a77
mov ecx, dword [ebp - 0x2149]
bswap ecx
push 0xa
push 0xd58382e
push 0x25203a24
push 0x45544144
push 0x5f474e49
push 0x4d4d4152
push 0x474f5250
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409b4f
push 0x80f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409ab6
cmp eax, 0xffffffff
jne 0x409ac5
mov dword [ebp - 0x2354], 1
jmp 0x409b4f
cmp byte [ebp - 0x214c], 0x62
jne 0x409b4f
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x409afa
cmp ecx, eax
jae 0x409afa
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x409afa
cmp dl, 0xff
je 0x409afa
mov byte [ebp + ecx - 0x605], dl
inc ecx
jmp 0x409ad7
mov byte [ebp + ecx - 0x605], 0
cmp byte [ebp - 0x605], 0
je 0x409b4f
lea ecx, [ebp - 0x605]
push 0xa0d73
push 0x25203a24
push 0x45505954
push 0x5f554345
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409c1b
push 0x8cf122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409b8e
cmp eax, 0xffffffff
jne 0x409b9d
mov dword [ebp - 0x2354], 1
jmp 0x409c1b
cmp byte [ebp - 0x214c], 0x62
jne 0x409c1b
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x409bce
cmp ecx, eax
jae 0x409bce
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x409bce
cmp dl, 0xff
je 0x409bce
mov byte [ebp + ecx - 0x583], dl
inc ecx
jmp 0x409bab
mov byte [ebp + ecx - 0x583], 0
cmp byte [ebp - 0x583], 0
je 0x409c1b
lea ecx, [ebp - 0x583]
push 0xa
push 0xd732520
push 0x3a244e53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409d04
push 0xa0f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409c5a
cmp eax, 0xffffffff
jne 0x409c69
mov dword [ebp - 0x2354], 1
jmp 0x409d04
cmp byte [ebp - 0x214c], 0x62
jne 0x409d04
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x409c9e
cmp ecx, eax
jae 0x409c9e
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x409c9e
cmp dl, 0xff
je 0x409c9e
mov byte [ebp + ecx - 0x542], dl
inc ecx
jmp 0x409c7b
mov byte [ebp + ecx - 0x542], 0
cmp byte [ebp - 0x542], 0
je 0x409d04
lea ecx, [ebp - 0x542]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x4954414d
push 0x524f464e
push 0x495f5245
push 0x44414f4c
push 0x544f4f42
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x34
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409dd3
push 0x90f122
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409d43
cmp eax, 0xffffffff
jne 0x409d52
mov dword [ebp - 0x2354], 1
jmp 0x409dd3
cmp byte [ebp - 0x214c], 0x62
jne 0x409dd3
sub eax, 7
xor ecx, ecx
cmp ecx, 0x40
jae 0x409d83
cmp ecx, eax
jae 0x409d83
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x409d83
cmp dl, 0xff
je 0x409d83
mov byte [ebp + ecx - 0x74a], dl
inc ecx
jmp 0x409d60
mov byte [ebp + ecx - 0x74a], 0
cmp byte [ebp - 0x74a], 0
je 0x409dd3
lea ecx, [ebp - 0x74a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x409e92
push 0x3ed22
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x409e12
cmp eax, 0xffffffff
jne 0x409e1e
mov dword [ebp - 0x2354], 1
jmp 0x409e92
cmp byte [ebp - 0x214c], 0x62
jne 0x409e92
cmp eax, 0x39
jbe 0x409e92
mov eax, dword [ebp - 0x211b]
bswap eax
mov ecx, 0x3e8
xor edx, edx
div ecx
push 0
push 0xa0d6d6b
push 0x64252e64
push 0x25203a68
push 0x74676e65
push 0x4c206e65
push 0x76697244
push 0x20656761
push 0x7265766f
push 0x43202445
push 0x4d495424
push edx
push eax
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x3c
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a6f0
cmp dword [esi + 0x274], 0x2436315f
jne 0x40a6f0
cmp dword [esi + 0x278], 0x757a7553
jne 0x40a6f0
cmp dword [esi + 0x27c], 0x5320696b
jne 0x40a6f0
cmp dword [esi + 0x280], 0x35323748
jne 0x40a6f0
cmp dword [esi + 0x284], 0x315b3033
jne 0x40a6f0
cmp dword [esi + 0x288], 0x6b303832
jne 0x40a6f0
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40a6f0
cmp word [esi + 0x290], 0x4e
jne 0x40a6f0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x409f5f
cmp eax, 0x17
je 0x409f5f
cmp eax, 0x18
jne 0x40a6f0
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x409f8d
mov dword [ebp - 0x2354], 1
jmp 0x40a6f0
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x409fba
mov dword [ebp - 0x2354], 1
jmp 0x40a6da
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40a010
mov dword [ebp - 0x2354], 1
jmp 0x40a6da
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x40a36e
mov byte [ebp - 0x687], 0
mov byte [ebp - 0x5c4], 0
mov byte [ebp - 0x6c8], 0
cmp dword [ebp - 0x2354], 0
jne 0x40a11b
push 0x8a1a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a073
cmp eax, 0xffffffff
jne 0x40a082
mov dword [ebp - 0x2354], 1
jmp 0x40a11b
cmp byte [ebp - 0x214c], 0x5a
jne 0x40a11b
sub eax, 6
xor ecx, ecx
cmp ecx, 0x40
jae 0x40a0b7
cmp ecx, eax
jae 0x40a0b7
mov dl, byte [ebp + ecx - 0x214a]
test dl, dl
je 0x40a0b7
cmp dl, 0xff
je 0x40a0b7
mov byte [ebp + ecx - 0x687], dl
inc ecx
jmp 0x40a094
mov byte [ebp + ecx - 0x687], 0
cmp byte [ebp - 0x687], 0
je 0x40a11b
lea ecx, [ebp - 0x687]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40a1b8
push 0x8d1a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a15a
cmp eax, 0xffffffff
jne 0x40a166
mov dword [ebp - 0x2354], 1
jmp 0x40a1b8
cmp byte [ebp - 0x214c], 0x5a
jne 0x40a1b8
movzx ecx, word [ebp - 0x214a]
xchg ch, cl
push 0xa
push 0xd642520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40a29f
push 0x8e1a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a1f7
cmp eax, 0xffffffff
jne 0x40a206
mov dword [ebp - 0x2354], 1
jmp 0x40a29f
cmp byte [ebp - 0x214c], 0x5a
jne 0x40a29f
sub eax, 6
xor ecx, ecx
cmp ecx, 0x40
jae 0x40a23b
cmp ecx, eax
jae 0x40a23b
mov dl, byte [ebp + ecx - 0x214a]
test dl, dl
je 0x40a23b
cmp dl, 0xff
je 0x40a23b
mov byte [ebp + ecx - 0x6c8], dl
inc ecx
jmp 0x40a218
mov byte [ebp + ecx - 0x6c8], 0
cmp byte [ebp - 0x6c8], 0
je 0x40a29f
lea ecx, [ebp - 0x6c8]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x44524148
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40a36e
push 0x901a
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x7d0
push 0x7d0
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a2de
cmp eax, 0xffffffff
jne 0x40a2ed
mov dword [ebp - 0x2354], 1
jmp 0x40a36e
cmp byte [ebp - 0x214c], 0x5a
jne 0x40a36e
sub eax, 6
xor ecx, ecx
cmp ecx, 0x40
jae 0x40a31e
cmp ecx, eax
jae 0x40a31e
mov dl, byte [ebp + ecx - 0x214a]
test dl, dl
je 0x40a31e
cmp dl, 0xff
je 0x40a31e
mov byte [ebp + ecx - 0x74a], dl
inc ecx
jmp 0x40a2fb
mov byte [ebp + ecx - 0x74a], 0
cmp byte [ebp - 0x74a], 0
je 0x40a36e
lea ecx, [ebp - 0x74a]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x40a555
cmp dword [ebp - 0x2354], 0
jne 0x40a555
push 0xff0018
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
je 0x40a3ba
cmp eax, 0xffffffff
jne 0x40a3c9
mov dword [ebp - 0x2354], 1
jmp 0x40a555
cmp byte [ebp - 0x214c], 0x58
je 0x40a447
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40a424
xor eax, eax
jmp 0x40a42e
cmp eax, 0x20
jbe 0x40a42e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40a555
movzx eax, byte [ebp - 0x214b]
mov dword [ebp - 0x942], eax
mov dword [ebp - 0x93e], 0
push 0xa
push 0xd642520
push 0x3a24544e
push 0x554f435f
push 0x43544424
push dword [ebp - 0x942]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x40a555
imul ecx, ecx, 3
movzx eax, byte [ebp + ecx - 0x214a]
cmp eax, 0xa0
jb 0x40a506
and eax, 0xf
shl eax, 8
mov al, byte [ebp + ecx - 0x2149]
movzx ecx, byte [ebp + ecx - 0x2148]
push 0
push 0xa0d5832
push 0x2e252d58
push 0x342e2555
push ecx
push eax
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40a54a
shl eax, 8
mov al, byte [ebp + ecx - 0x2149]
movzx ecx, byte [ebp + ecx - 0x2148]
push 0
push 0xa0d5832
push 0x2e252d58
push 0x342e2550
push ecx
push eax
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x40a499
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x40a6ca
cmp dword [ebp - 0x2354], 0
jne 0x40a69c
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0
push 0
lea edx, [esp + 4]
push edx
push 0xa
call dword [edi]
push 0
lea edx, [esp + 4]
push edx
push 0xb
call dword [edi]
add esp, 4
push 0xffffff14
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a5c9
cmp eax, 0xffffffff
jne 0x40a5d8
mov dword [ebp - 0x2354], 1
jmp 0x40a69c
cmp byte [ebp - 0x214c], 0x54
je 0x40a69c
push 0xff14
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40a617
cmp eax, 0xffffffff
jne 0x40a623
mov dword [ebp - 0x2354], 1
jmp 0x40a69c
cmp byte [ebp - 0x214c], 0x54
je 0x40a69c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40a67e
xor eax, eax
jmp 0x40a688
cmp eax, 0x20
jbe 0x40a688
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40a6ca
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a768
cmp dword [esi + 0x274], 0x2433305f
jne 0x40a768
cmp dword [esi + 0x278], 0x6e757948
jne 0x40a768
cmp dword [esi + 0x27c], 0x20696164
jne 0x40a768
cmp dword [esi + 0x280], 0x32374853
jne 0x40a768
cmp dword [esi + 0x284], 0x5b363435
jne 0x40a768
cmp dword [esi + 0x288], 0x30343833
jne 0x40a768
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x40a768
cmp word [esi + 0x290], 0x4e41
jne 0x40a768
cmp byte [esi + 0x292], 0
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a7d5
cmp dword [esi + 0x274], 0x2434305f
jne 0x40a7d5
cmp dword [esi + 0x278], 0x7a757349
jne 0x40a7d5
cmp dword [esi + 0x27c], 0x48532075
jne 0x40a7d5
cmp dword [esi + 0x280], 0x34353237
jne 0x40a7d5
cmp dword [esi + 0x284], 0x38335b36
jne 0x40a7d5
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40a7d5
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40a7d5
cmp byte [esi + 0x290], 0
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a84f
cmp dword [esi + 0x274], 0x2437305f
jne 0x40a84f
cmp dword [esi + 0x278], 0x647a614d
jne 0x40a84f
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40a84f
cmp dword [esi + 0x280], 0x53204179
jne 0x40a84f
cmp dword [esi + 0x284], 0x35323748
jne 0x40a84f
cmp dword [esi + 0x288], 0x315b3133
jne 0x40a84f
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40a84f
cmp dword [esi + 0x290], 0x4143205d
jne 0x40a84f
cmp word [esi + 0x294], 0x4e
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a8c9
cmp dword [esi + 0x274], 0x2438305f
jne 0x40a8c9
cmp dword [esi + 0x278], 0x647a614d
jne 0x40a8c9
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40a8c9
cmp dword [esi + 0x280], 0x53204179
jne 0x40a8c9
cmp dword [esi + 0x284], 0x35323748
jne 0x40a8c9
cmp dword [esi + 0x288], 0x325b3334
jne 0x40a8c9
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40a8c9
cmp dword [esi + 0x290], 0x4143205d
jne 0x40a8c9
cmp word [esi + 0x294], 0x4e
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a943
cmp dword [esi + 0x274], 0x2439305f
jne 0x40a943
cmp dword [esi + 0x278], 0x647a614d
jne 0x40a943
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40a943
cmp dword [esi + 0x280], 0x53204479
jne 0x40a943
cmp dword [esi + 0x284], 0x35323748
jne 0x40a943
cmp dword [esi + 0x288], 0x325b3334
jne 0x40a943
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40a943
cmp dword [esi + 0x290], 0x4143205d
jne 0x40a943
cmp word [esi + 0x294], 0x4e
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40a9bd
cmp dword [esi + 0x274], 0x2430315f
jne 0x40a9bd
cmp dword [esi + 0x278], 0x647a614d
jne 0x40a9bd
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40a9bd
cmp dword [esi + 0x280], 0x53204479
jne 0x40a9bd
cmp dword [esi + 0x284], 0x35323748
jne 0x40a9bd
cmp dword [esi + 0x288], 0x335b3634
jne 0x40a9bd
cmp dword [esi + 0x28c], 0x6b303438
jne 0x40a9bd
cmp dword [esi + 0x290], 0x4143205d
jne 0x40a9bd
cmp word [esi + 0x294], 0x4e
je 0x40aa4b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40b0db
cmp dword [esi + 0x274], 0x2435305f
jne 0x40b0db
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40b0db
cmp dword [esi + 0x27c], 0x53206174
jne 0x40b0db
cmp dword [esi + 0x280], 0x35323748
jne 0x40b0db
cmp dword [esi + 0x284], 0x325b3334
jne 0x40b0db
cmp dword [esi + 0x288], 0x6b383430
jne 0x40b0db
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40b0db
cmp word [esi + 0x290], 0x4e
jne 0x40b0db
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
je 0x40aa5f
cmp eax, 0x18
jne 0x40b0db
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40aa8d
mov dword [ebp - 0x2354], 1
jmp 0x40b0db
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40aaba
mov dword [ebp - 0x2354], 1
jmp 0x40b0c5
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40ab10
mov dword [ebp - 0x2354], 1
jmp 0x40b0c5
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
je 0x40ab24
cmp eax, 0x18
jne 0x40acae
cmp dword [ebp - 0x2354], 0
jne 0x40abe9
push 0x110
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40ab64
cmp eax, 0xffffffff
jne 0x40ab70
mov dword [ebp - 0x2354], 1
jmp 0x40abe9
cmp byte [ebp - 0x214c], 0x50
je 0x40abe9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40abcb
xor eax, eax
jmp 0x40abd5
cmp eax, 0x20
jbe 0x40abd5
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40acae
push 0x310
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40ac29
cmp eax, 0xffffffff
jne 0x40ac35
mov dword [ebp - 0x2354], 1
jmp 0x40acae
cmp byte [ebp - 0x214c], 0x50
je 0x40acae
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40ac90
xor eax, eax
jmp 0x40ac9a
cmp eax, 0x20
jbe 0x40ac9a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x40af95
cmp dword [ebp - 0x2354], 0
jne 0x40af95
push 0x8f0219
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40acfc
cmp eax, 0xffffffff
jne 0x40ad0b
mov dword [ebp - 0x2354], 1
jmp 0x40af95
cmp byte [ebp - 0x214c], 0x59
je 0x40ad89
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40ad66
xor eax, eax
jmp 0x40ad70
cmp eax, 0x20
jbe 0x40ad70
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40af95
sub eax, 7
shr eax, 2
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x40af95
shl ecx, 2
movzx eax, byte [ebp + ecx - 0x2148]
mov dword [ebp - 0x936], eax
movzx eax, byte [ebp + ecx - 0x2147]
mov dword [ebp - 0x932], eax
movzx eax, byte [ebp + ecx - 0x2146]
mov dword [ebp - 0x92e], eax
movzx eax, byte [ebp + ecx - 0x2149]
cmp eax, 0xd0
jb 0x40ae84
sub eax, 0xc0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2555
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40af8a
cmp eax, 0xc0
jb 0x40aee2
sub eax, 0xb0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2543
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40af8a
cmp eax, 0xb0
jb 0x40af3d
sub eax, 0xa0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2542
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40af8a
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x40addf
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x40b0b5
cmp dword [ebp - 0x2354], 0
jne 0x40b0b5
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xffffff14
push 0xe0070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x3e8
push 0x12c
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40b006
cmp eax, 0xffffffff
jne 0x40b015
mov dword [ebp - 0x2354], 1
jmp 0x40b0b5
cmp byte [ebp - 0x214c], 0x54
je 0x40b090
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40b070
xor eax, eax
jmp 0x40b07a
cmp eax, 0x20
jbe 0x40b07a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40b0b5
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ba49
cmp dword [esi + 0x274], 0x2439315f
jne 0x40ba49
cmp dword [esi + 0x278], 0x647a614d
jne 0x40ba49
cmp dword [esi + 0x27c], 0x43542061
jne 0x40ba49
cmp dword [esi + 0x280], 0x4853204d
jne 0x40ba49
cmp dword [esi + 0x284], 0x33353237
jne 0x40ba49
cmp dword [esi + 0x288], 0x32315b31
jne 0x40ba49
cmp dword [esi + 0x28c], 0x5d6b3038
jne 0x40ba49
cmp dword [esi + 0x290], 0x4e414320
jne 0x40ba49
cmp byte [esi + 0x294], 0
jne 0x40ba49
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x40b191
cmp eax, 0x17
je 0x40b191
cmp eax, 0x18
jne 0x40ba49
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40b1bf
mov dword [ebp - 0x2354], 1
jmp 0x40ba49
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40b1ec
mov dword [ebp - 0x2354], 1
jmp 0x40ba33
push 0xe1070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe9070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40b242
mov dword [ebp - 0x2354], 1
jmp 0x40ba33
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x40b61c
cmp dword [ebp - 0x2354], 0
jne 0x40b294
push 0x20222
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
je 0x40b28a
cmp eax, 0xffffffff
jne 0x40b294
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40b371
push 0x13f122
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40b2d3
cmp eax, 0xffffffff
jne 0x40b2e2
mov dword [ebp - 0x2354], 1
jmp 0x40b371
cmp byte [ebp - 0x214c], 0x62
jne 0x40b371
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40b317
cmp ecx, eax
jae 0x40b317
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40b317
cmp dl, 0xff
je 0x40b317
mov byte [ebp + ecx - 0x1e5], dl
inc ecx
jmp 0x40b2f4
mov byte [ebp + ecx - 0x1e5], 0
cmp byte [ebp - 0x1e5], 0
je 0x40b371
lea ecx, [ebp - 0x1e5]
push 0xa0d
push 0x7325203a
push 0x31207265
push 0x626d756e
push 0x2074696e
push 0x55202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40b44e
push 0x12f122
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40b3b0
cmp eax, 0xffffffff
jne 0x40b3bf
mov dword [ebp - 0x2354], 1
jmp 0x40b44e
cmp byte [ebp - 0x214c], 0x62
jne 0x40b44e
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40b3f4
cmp ecx, eax
jae 0x40b3f4
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40b3f4
cmp dl, 0xff
je 0x40b3f4
mov byte [ebp + ecx - 0x1a5], dl
inc ecx
jmp 0x40b3d1
mov byte [ebp + ecx - 0x1a5], 0
cmp byte [ebp - 0x1a5], 0
je 0x40b44e
lea ecx, [ebp - 0x1a5]
push 0xa0d
push 0x7325203a
push 0x32207265
push 0x626d756e
push 0x2074696e
push 0x55202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40b535
push 0x88f122
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40b48d
cmp eax, 0xffffffff
jne 0x40b49c
mov dword [ebp - 0x2354], 1
jmp 0x40b535
cmp byte [ebp - 0x214c], 0x62
jne 0x40b535
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40b4d1
cmp ecx, eax
jae 0x40b4d1
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40b4d1
cmp dl, 0xff
je 0x40b4d1
mov byte [ebp + ecx - 0x687], dl
inc ecx
jmp 0x40b4ae
mov byte [ebp + ecx - 0x687], 0
cmp byte [ebp - 0x687], 0
je 0x40b535
lea ecx, [ebp - 0x687]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2354], 0
jne 0x40b61c
push 0x11f122
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40b574
cmp eax, 0xffffffff
jne 0x40b583
mov dword [ebp - 0x2354], 1
jmp 0x40b61c
cmp byte [ebp - 0x214c], 0x62
jne 0x40b61c
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40b5b8
cmp ecx, eax
jae 0x40b5b8
mov dl, byte [ebp + ecx - 0x2149]
test dl, dl
je 0x40b5b8
cmp dl, 0xff
je 0x40b5b8
mov byte [ebp + ecx - 0x6c8], dl
inc ecx
jmp 0x40b595
mov byte [ebp + ecx - 0x6c8], 0
cmp byte [ebp - 0x6c8], 0
je 0x40b61c
lea ecx, [ebp - 0x6c8]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x44524148
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x40b903
cmp dword [ebp - 0x2354], 0
jne 0x40b903
push 0x8f0219
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.0041231c
test eax, eax
je 0x40b66a
cmp eax, 0xffffffff
jne 0x40b679
mov dword [ebp - 0x2354], 1
jmp 0x40b903
cmp byte [ebp - 0x214c], 0x59
je 0x40b6f7
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40b6d4
xor eax, eax
jmp 0x40b6de
cmp eax, 0x20
jbe 0x40b6de
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40b903
sub eax, 7
shr eax, 2
mov dword [ebp - 0x942], eax
push 0
push 0xa0d6425
push 0x203a2454
push 0x4e554f43
push 0x5f435444
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x93e], 0
mov ecx, dword [ebp - 0x93e]
cmp ecx, dword [ebp - 0x942]
jae 0x40b903
shl ecx, 2
movzx eax, byte [ebp + ecx - 0x2148]
mov dword [ebp - 0x936], eax
movzx eax, byte [ebp + ecx - 0x2147]
mov dword [ebp - 0x932], eax
movzx eax, byte [ebp + ecx - 0x2146]
mov dword [ebp - 0x92e], eax
movzx eax, byte [ebp + ecx - 0x2149]
cmp eax, 0xd0
jb 0x40b7f2
sub eax, 0xc0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2555
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40b8f8
cmp eax, 0xc0
jb 0x40b850
sub eax, 0xb0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2543
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40b8f8
cmp eax, 0xb0
jb 0x40b8ab
sub eax, 0xa0
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2542
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40b8f8
push 0xa
push 0xd58322e
push 0x252d5832
push 0x2e252d58
push 0x322e2558
push 0x322e2550
push dword [ebp - 0x92e]
push dword [ebp - 0x932]
push dword [ebp - 0x936]
push eax
lea eax, [esp + 0x10]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
inc dword [ebp - 0x93e]
jmp 0x40b74d
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x40ba23
cmp dword [ebp - 0x2354], 0
jne 0x40ba23
push 0
push 0xa0d2443
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0xffffff14
push 0xe1070000
lea eax, [ebp - 0x2150]
push esp
push 8
push eax
push 0x7d0
push 0xbb8
push 0x40
push 6
push 0
call fcn.0041231c
cmp eax, 0
je 0x40b974
cmp eax, 0xffffffff
jne 0x40b983
mov dword [ebp - 0x2354], 1
jmp 0x40ba23
cmp byte [ebp - 0x214c], 0x54
je 0x40b9fe
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40b9de
xor eax, eax
jmp 0x40b9e8
cmp eax, 0x20
jbe 0x40b9e8
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40ba23
push 0xa0d24
push 0x4b4f5f43
push 0x54445f45
push 0x53415245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bab6
cmp dword [esi + 0x274], 0x2438315f
jne 0x40bab6
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40bab6
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40bab6
cmp dword [esi + 0x280], 0x34353237
jne 0x40bab6
cmp dword [esi + 0x284], 0x38335b36
jne 0x40bab6
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40bab6
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40bab6
cmp byte [esi + 0x290], 0
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bb23
cmp dword [esi + 0x274], 0x2437315f
jne 0x40bb23
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40bb23
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40bb23
cmp dword [esi + 0x280], 0x34353237
jne 0x40bb23
cmp dword [esi + 0x284], 0x30325b33
jne 0x40bb23
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x40bb23
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40bb23
cmp byte [esi + 0x290], 0
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bb9d
cmp dword [esi + 0x274], 0x2439305f
jne 0x40bb9d
cmp dword [esi + 0x278], 0x647a614d
jne 0x40bb9d
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40bb9d
cmp dword [esi + 0x280], 0x53204479
jne 0x40bb9d
cmp dword [esi + 0x284], 0x35323748
jne 0x40bb9d
cmp dword [esi + 0x288], 0x325b3334
jne 0x40bb9d
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40bb9d
cmp dword [esi + 0x290], 0x4143205d
jne 0x40bb9d
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bc17
cmp dword [esi + 0x274], 0x2430315f
jne 0x40bc17
cmp dword [esi + 0x278], 0x647a614d
jne 0x40bc17
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40bc17
cmp dword [esi + 0x280], 0x53204479
jne 0x40bc17
cmp dword [esi + 0x284], 0x35323748
jne 0x40bc17
cmp dword [esi + 0x288], 0x335b3634
jne 0x40bc17
cmp dword [esi + 0x28c], 0x6b303438
jne 0x40bc17
cmp dword [esi + 0x290], 0x4143205d
jne 0x40bc17
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bc9c
cmp dword [esi + 0x274], 0x2435315f
jne 0x40bc9c
cmp dword [esi + 0x278], 0x61627553
jne 0x40bc9c
cmp dword [esi + 0x27c], 0x44207572
jne 0x40bc9c
cmp dword [esi + 0x280], 0x65736569
jne 0x40bc9c
cmp dword [esi + 0x284], 0x4853206c
jne 0x40bc9c
cmp dword [esi + 0x288], 0x34353237
jne 0x40bc9c
cmp dword [esi + 0x28c], 0x30325b33
jne 0x40bc9c
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x40bc9c
cmp dword [esi + 0x294], 0x4e414320
jne 0x40bc9c
cmp byte [esi + 0x298], 0
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bd14
cmp dword [esi + 0x274], 0x2433305f
jne 0x40bd14
cmp dword [esi + 0x278], 0x6e757948
jne 0x40bd14
cmp dword [esi + 0x27c], 0x20696164
jne 0x40bd14
cmp dword [esi + 0x280], 0x32374853
jne 0x40bd14
cmp dword [esi + 0x284], 0x5b363435
jne 0x40bd14
cmp dword [esi + 0x288], 0x30343833
jne 0x40bd14
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x40bd14
cmp word [esi + 0x290], 0x4e41
jne 0x40bd14
cmp byte [esi + 0x292], 0
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bd84
cmp dword [esi + 0x274], 0x2431305f
jne 0x40bd84
cmp dword [esi + 0x278], 0x68696144
jne 0x40bd84
cmp dword [esi + 0x27c], 0x75737461
jne 0x40bd84
cmp dword [esi + 0x280], 0x37485320
jne 0x40bd84
cmp dword [esi + 0x284], 0x31333532
jne 0x40bd84
cmp dword [esi + 0x288], 0x3832315b
jne 0x40bd84
cmp dword [esi + 0x28c], 0x205d6b30
jne 0x40bd84
cmp dword [esi + 0x290], 0x4e4143
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bde8
cmp dword [esi + 0x274], 0x2432305f
jne 0x40bde8
cmp dword [esi + 0x278], 0x6f6e6948
jne 0x40bde8
cmp dword [esi + 0x27c], 0x37485320
jne 0x40bde8
cmp dword [esi + 0x280], 0x33343532
jne 0x40bde8
cmp dword [esi + 0x284], 0x3430325b
jne 0x40bde8
cmp dword [esi + 0x288], 0x205d6b38
jne 0x40bde8
cmp dword [esi + 0x28c], 0x4e4143
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40be55
cmp dword [esi + 0x274], 0x2434305f
jne 0x40be55
cmp dword [esi + 0x278], 0x7a757349
jne 0x40be55
cmp dword [esi + 0x27c], 0x48532075
jne 0x40be55
cmp dword [esi + 0x280], 0x34353237
jne 0x40be55
cmp dword [esi + 0x284], 0x38335b36
jne 0x40be55
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40be55
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40be55
cmp byte [esi + 0x290], 0
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bec3
cmp dword [esi + 0x274], 0x2435305f
jne 0x40bec3
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40bec3
cmp dword [esi + 0x27c], 0x53206174
jne 0x40bec3
cmp dword [esi + 0x280], 0x35323748
jne 0x40bec3
cmp dword [esi + 0x284], 0x325b3334
jne 0x40bec3
cmp dword [esi + 0x288], 0x6b383430
jne 0x40bec3
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40bec3
cmp word [esi + 0x290], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bf3d
cmp dword [esi + 0x274], 0x2436305f
jne 0x40bf3d
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40bf3d
cmp dword [esi + 0x27c], 0x41206174
jne 0x40bf3d
cmp dword [esi + 0x280], 0x53204d43
jne 0x40bf3d
cmp dword [esi + 0x284], 0x35323748
jne 0x40bf3d
cmp dword [esi + 0x288], 0x315b3133
jne 0x40bf3d
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40bf3d
cmp dword [esi + 0x290], 0x4143205d
jne 0x40bf3d
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40bfb7
cmp dword [esi + 0x274], 0x2437305f
jne 0x40bfb7
cmp dword [esi + 0x278], 0x647a614d
jne 0x40bfb7
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40bfb7
cmp dword [esi + 0x280], 0x53204179
jne 0x40bfb7
cmp dword [esi + 0x284], 0x35323748
jne 0x40bfb7
cmp dword [esi + 0x288], 0x315b3133
jne 0x40bfb7
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40bfb7
cmp dword [esi + 0x290], 0x4143205d
jne 0x40bfb7
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c031
cmp dword [esi + 0x274], 0x2438305f
jne 0x40c031
cmp dword [esi + 0x278], 0x647a614d
jne 0x40c031
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40c031
cmp dword [esi + 0x280], 0x53204179
jne 0x40c031
cmp dword [esi + 0x284], 0x35323748
jne 0x40c031
cmp dword [esi + 0x288], 0x325b3334
jne 0x40c031
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40c031
cmp dword [esi + 0x290], 0x4143205d
jne 0x40c031
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c09f
cmp dword [esi + 0x274], 0x2432315f
jne 0x40c09f
cmp dword [esi + 0x278], 0x7373694e
jne 0x40c09f
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40c09f
cmp dword [esi + 0x280], 0x35323748
jne 0x40c09f
cmp dword [esi + 0x284], 0x315b3133
jne 0x40c09f
cmp dword [esi + 0x288], 0x6b303832
jne 0x40c09f
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40c09f
cmp word [esi + 0x290], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c10d
cmp dword [esi + 0x274], 0x2433315f
jne 0x40c10d
cmp dword [esi + 0x278], 0x7373694e
jne 0x40c10d
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40c10d
cmp dword [esi + 0x280], 0x35323748
jne 0x40c10d
cmp dword [esi + 0x284], 0x315b3033
jne 0x40c10d
cmp dword [esi + 0x288], 0x6b303832
jne 0x40c10d
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40c10d
cmp word [esi + 0x290], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c17b
cmp dword [esi + 0x274], 0x2434315f
jne 0x40c17b
cmp dword [esi + 0x278], 0x61627553
jne 0x40c17b
cmp dword [esi + 0x27c], 0x53207572
jne 0x40c17b
cmp dword [esi + 0x280], 0x35323748
jne 0x40c17b
cmp dword [esi + 0x284], 0x315b3133
jne 0x40c17b
cmp dword [esi + 0x288], 0x6b303832
jne 0x40c17b
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40c17b
cmp word [esi + 0x290], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c1e9
cmp dword [esi + 0x274], 0x2436315f
jne 0x40c1e9
cmp dword [esi + 0x278], 0x757a7553
jne 0x40c1e9
cmp dword [esi + 0x27c], 0x5320696b
jne 0x40c1e9
cmp dword [esi + 0x280], 0x35323748
jne 0x40c1e9
cmp dword [esi + 0x284], 0x315b3033
jne 0x40c1e9
cmp dword [esi + 0x288], 0x6b303832
jne 0x40c1e9
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40c1e9
cmp word [esi + 0x290], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c263
cmp dword [esi + 0x274], 0x2431315f
jne 0x40c263
cmp dword [esi + 0x278], 0x7374694d
jne 0x40c263
cmp dword [esi + 0x27c], 0x73696275
jne 0x40c263
cmp dword [esi + 0x280], 0x53206968
jne 0x40c263
cmp dword [esi + 0x284], 0x35323748
jne 0x40c263
cmp dword [esi + 0x288], 0x325b3334
jne 0x40c263
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40c263
cmp dword [esi + 0x290], 0x4143205d
jne 0x40c263
cmp word [esi + 0x294], 0x4e
je 0x40c300
cmp dword [esi + 0x270], 0x39366d24
jne 0x41116e
cmp dword [esi + 0x274], 0x2439315f
jne 0x41116e
cmp dword [esi + 0x278], 0x647a614d
jne 0x41116e
cmp dword [esi + 0x27c], 0x43542061
jne 0x41116e
cmp dword [esi + 0x280], 0x4853204d
jne 0x41116e
cmp dword [esi + 0x284], 0x33353237
jne 0x41116e
cmp dword [esi + 0x288], 0x32315b31
jne 0x41116e
cmp dword [esi + 0x28c], 0x5d6b3038
jne 0x41116e
cmp dword [esi + 0x290], 0x4e414320
jne 0x41116e
cmp byte [esi + 0x294], 0
jne 0x41116e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40c36e
mov ecx, dword [esi + 0x20]
cmp dword [ecx], 0
je 0x40c31b
cmp dword [ecx], 0xff
jne 0x40c35b
push 0xa
push 0xd245441
push 0x4d524f46
push 0x5f454c49
push 0x465f4d4f
push 0x525f4445
push 0x54524f50
push 0x5055534e
push 0x555f524f
push 0x52524524
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40c36e
push dword [esi + 0x14]
push 0
call fcn.00413300
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c493
cmp dword [esi + 0x274], 0x2438315f
jne 0x40c493
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40c493
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40c493
cmp dword [esi + 0x280], 0x34353237
jne 0x40c493
cmp dword [esi + 0x284], 0x38335b36
jne 0x40c493
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40c493
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40c493
cmp byte [esi + 0x290], 0
jne 0x40c493
mov dword [ebp - 0xcd2], 0xf110ea1f
mov dword [ebp - 0xcce], 0x10f1ea1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40c447
cmp eax, 0xb
jne 0x40c465
mov dword [ebp - 0x112c], 0x4011c0
mov dword [ebp - 0x1128], 0x1c0
mov dword [ebp - 0x1124], 0x2a0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40c475
cmp eax, 0x15
jne 0x40c493
mov dword [ebp - 0x112c], 0x4015c0
mov dword [ebp - 0x1128], 0x5c0
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c5b8
cmp dword [esi + 0x274], 0x2437315f
jne 0x40c5b8
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40c5b8
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40c5b8
cmp dword [esi + 0x280], 0x34353237
jne 0x40c5b8
cmp dword [esi + 0x284], 0x30325b33
jne 0x40c5b8
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x40c5b8
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40c5b8
cmp byte [esi + 0x290], 0
jne 0x40c5b8
mov dword [ebp - 0xcd2], 0xf110ea1f
mov dword [ebp - 0xcce], 0x10f1ea1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40c56c
cmp eax, 0xb
jne 0x40c58a
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40c59a
cmp eax, 0x15
jne 0x40c5b8
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c6ee
cmp dword [esi + 0x274], 0x2439305f
jne 0x40c6ee
cmp dword [esi + 0x278], 0x647a614d
jne 0x40c6ee
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40c6ee
cmp dword [esi + 0x280], 0x53204479
jne 0x40c6ee
cmp dword [esi + 0x284], 0x35323748
jne 0x40c6ee
cmp dword [esi + 0x288], 0x325b3334
jne 0x40c6ee
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40c6ee
cmp dword [esi + 0x290], 0x4143205d
jne 0x40c6ee
cmp word [esi + 0x294], 0x4e
jne 0x40c6ee
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40c6a2
cmp eax, 0xb
jne 0x40c6c0
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40c6d0
cmp eax, 0x15
jne 0x40c6ee
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c824
cmp dword [esi + 0x274], 0x2430315f
jne 0x40c824
cmp dword [esi + 0x278], 0x647a614d
jne 0x40c824
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40c824
cmp dword [esi + 0x280], 0x53204479
jne 0x40c824
cmp dword [esi + 0x284], 0x35323748
jne 0x40c824
cmp dword [esi + 0x288], 0x335b3634
jne 0x40c824
cmp dword [esi + 0x28c], 0x6b303438
jne 0x40c824
cmp dword [esi + 0x290], 0x4143205d
jne 0x40c824
cmp word [esi + 0x294], 0x4e
jne 0x40c824
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40c7d8
cmp eax, 0xb
jne 0x40c7f6
mov dword [ebp - 0x112c], 0x4011c0
mov dword [ebp - 0x1128], 0x1c0
mov dword [ebp - 0x1124], 0x2a0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40c806
cmp eax, 0x15
jne 0x40c824
mov dword [ebp - 0x112c], 0x4015c0
mov dword [ebp - 0x1128], 0x5c0
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40c969
cmp dword [esi + 0x274], 0x2435315f
jne 0x40c969
cmp dword [esi + 0x278], 0x61627553
jne 0x40c969
cmp dword [esi + 0x27c], 0x44207572
jne 0x40c969
cmp dword [esi + 0x280], 0x65736569
jne 0x40c969
cmp dword [esi + 0x284], 0x4853206c
jne 0x40c969
cmp dword [esi + 0x288], 0x34353237
jne 0x40c969
cmp dword [esi + 0x28c], 0x30325b33
jne 0x40c969
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x40c969
cmp dword [esi + 0x294], 0x4e414320
jne 0x40c969
cmp byte [esi + 0x298], 0
jne 0x40c969
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40c91d
cmp eax, 0xb
jne 0x40c93b
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40c94b
cmp eax, 0x15
jne 0x40c969
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ca9d
cmp dword [esi + 0x274], 0x2433305f
jne 0x40ca9d
cmp dword [esi + 0x278], 0x6e757948
jne 0x40ca9d
cmp dword [esi + 0x27c], 0x20696164
jne 0x40ca9d
cmp dword [esi + 0x280], 0x32374853
jne 0x40ca9d
cmp dword [esi + 0x284], 0x5b363435
jne 0x40ca9d
cmp dword [esi + 0x288], 0x30343833
jne 0x40ca9d
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x40ca9d
cmp word [esi + 0x290], 0x4e41
jne 0x40ca9d
cmp byte [esi + 0x292], 0
jne 0x40ca9d
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40ca51
cmp eax, 0xb
jne 0x40ca6f
mov dword [ebp - 0x112c], 0x4011c0
mov dword [ebp - 0x1128], 0x1c0
mov dword [ebp - 0x1124], 0x2a0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40ca7f
cmp eax, 0x15
jne 0x40ca9d
mov dword [ebp - 0x112c], 0x4015c0
mov dword [ebp - 0x1128], 0x5c0
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40cbc5
cmp dword [esi + 0x274], 0x2431305f
jne 0x40cbc5
cmp dword [esi + 0x278], 0x68696144
jne 0x40cbc5
cmp dword [esi + 0x27c], 0x75737461
jne 0x40cbc5
cmp dword [esi + 0x280], 0x37485320
jne 0x40cbc5
cmp dword [esi + 0x284], 0x31333532
jne 0x40cbc5
cmp dword [esi + 0x288], 0x3832315b
jne 0x40cbc5
cmp dword [esi + 0x28c], 0x205d6b30
jne 0x40cbc5
cmp dword [esi + 0x290], 0x4e4143
jne 0x40cbc5
mov dword [ebp - 0xcd2], 0xfeffff1f
mov dword [ebp - 0xcce], 0xffffff1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40cb79
cmp eax, 0xb
jne 0x40cb97
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40cba7
cmp eax, 0x15
jne 0x40cbc5
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40cc29
cmp dword [esi + 0x274], 0x2432305f
jne 0x40cc29
cmp dword [esi + 0x278], 0x6f6e6948
jne 0x40cc29
cmp dword [esi + 0x27c], 0x37485320
jne 0x40cc29
cmp dword [esi + 0x280], 0x33343532
jne 0x40cc29
cmp dword [esi + 0x284], 0x3430325b
jne 0x40cc29
cmp dword [esi + 0x288], 0x205d6b38
jne 0x40cc29
cmp dword [esi + 0x28c], 0x4e4143
je 0x40ccc7
cmp dword [esi + 0x270], 0x39366d24
jne 0x40cd5f
cmp dword [esi + 0x274], 0x2431315f
jne 0x40cd5f
cmp dword [esi + 0x278], 0x7374694d
jne 0x40cd5f
cmp dword [esi + 0x27c], 0x73696275
jne 0x40cd5f
cmp dword [esi + 0x280], 0x53206968
jne 0x40cd5f
cmp dword [esi + 0x284], 0x35323748
jne 0x40cd5f
cmp dword [esi + 0x288], 0x325b3334
jne 0x40cd5f
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40cd5f
cmp dword [esi + 0x290], 0x4143205d
jne 0x40cd5f
cmp word [esi + 0x294], 0x4e
jne 0x40cd5f
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40cd13
cmp eax, 0xb
jne 0x40cd31
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40cd41
cmp eax, 0x15
jne 0x40cd5f
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ce84
cmp dword [esi + 0x274], 0x2434305f
jne 0x40ce84
cmp dword [esi + 0x278], 0x7a757349
jne 0x40ce84
cmp dword [esi + 0x27c], 0x48532075
jne 0x40ce84
cmp dword [esi + 0x280], 0x34353237
jne 0x40ce84
cmp dword [esi + 0x284], 0x38335b36
jne 0x40ce84
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40ce84
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40ce84
cmp byte [esi + 0x290], 0
jne 0x40ce84
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40ce38
cmp eax, 0xb
jne 0x40ce56
mov dword [ebp - 0x112c], 0x4011c0
mov dword [ebp - 0x1128], 0x1c0
mov dword [ebp - 0x1124], 0x2a0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40ce66
cmp eax, 0x15
jne 0x40ce84
mov dword [ebp - 0x112c], 0x4015c0
mov dword [ebp - 0x1128], 0x5c0
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40cfaa
cmp dword [esi + 0x274], 0x2435305f
jne 0x40cfaa
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40cfaa
cmp dword [esi + 0x27c], 0x53206174
jne 0x40cfaa
cmp dword [esi + 0x280], 0x35323748
jne 0x40cfaa
cmp dword [esi + 0x284], 0x325b3334
jne 0x40cfaa
cmp dword [esi + 0x288], 0x6b383430
jne 0x40cfaa
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40cfaa
cmp word [esi + 0x290], 0x4e
jne 0x40cfaa
mov dword [ebp - 0xcd2], 0xfe030000
mov dword [ebp - 0xcce], 0xfd030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40cf5e
cmp eax, 0xb
jne 0x40cf7c
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40cf8c
cmp eax, 0x15
jne 0x40cfaa
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d0e0
cmp dword [esi + 0x274], 0x2436305f
jne 0x40d0e0
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40d0e0
cmp dword [esi + 0x27c], 0x41206174
jne 0x40d0e0
cmp dword [esi + 0x280], 0x53204d43
jne 0x40d0e0
cmp dword [esi + 0x284], 0x35323748
jne 0x40d0e0
cmp dword [esi + 0x288], 0x315b3133
jne 0x40d0e0
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40d0e0
cmp dword [esi + 0x290], 0x4143205d
jne 0x40d0e0
cmp word [esi + 0x294], 0x4e
jne 0x40d0e0
mov dword [ebp - 0xcd2], 0xfa030000
mov dword [ebp - 0xcce], 0xf9030000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d094
cmp eax, 0xb
jne 0x40d0b2
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d0c2
cmp eax, 0x15
jne 0x40d0e0
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d216
cmp dword [esi + 0x274], 0x2437305f
jne 0x40d216
cmp dword [esi + 0x278], 0x647a614d
jne 0x40d216
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40d216
cmp dword [esi + 0x280], 0x53204179
jne 0x40d216
cmp dword [esi + 0x284], 0x35323748
jne 0x40d216
cmp dword [esi + 0x288], 0x315b3133
jne 0x40d216
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40d216
cmp dword [esi + 0x290], 0x4143205d
jne 0x40d216
cmp word [esi + 0x294], 0x4e
jne 0x40d216
mov dword [ebp - 0xcd2], 0x12060000
mov dword [ebp - 0xcce], 0x11060000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d1ca
cmp eax, 0xb
jne 0x40d1e8
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d1f8
cmp eax, 0x15
jne 0x40d216
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d34c
cmp dword [esi + 0x274], 0x2438305f
jne 0x40d34c
cmp dword [esi + 0x278], 0x647a614d
jne 0x40d34c
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40d34c
cmp dword [esi + 0x280], 0x53204179
jne 0x40d34c
cmp dword [esi + 0x284], 0x35323748
jne 0x40d34c
cmp dword [esi + 0x288], 0x325b3334
jne 0x40d34c
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40d34c
cmp dword [esi + 0x290], 0x4143205d
jne 0x40d34c
cmp word [esi + 0x294], 0x4e
jne 0x40d34c
mov dword [ebp - 0xcd2], 0x12060000
mov dword [ebp - 0xcce], 0x11060000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d300
cmp eax, 0xb
jne 0x40d31e
mov dword [ebp - 0x112c], section..code
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0x1c0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d32e
cmp eax, 0x15
jne 0x40d34c
mov dword [ebp - 0x112c], 0x401700
mov dword [ebp - 0x1128], 0x700
mov dword [ebp - 0x1124], 0x100
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d472
cmp dword [esi + 0x274], 0x2432315f
jne 0x40d472
cmp dword [esi + 0x278], 0x7373694e
jne 0x40d472
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40d472
cmp dword [esi + 0x280], 0x35323748
jne 0x40d472
cmp dword [esi + 0x284], 0x315b3133
jne 0x40d472
cmp dword [esi + 0x288], 0x6b303832
jne 0x40d472
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40d472
cmp word [esi + 0x290], 0x4e
jne 0x40d472
mov dword [ebp - 0xcd2], 0xffffff1f
mov dword [ebp - 0xcce], 0xfeffff1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d426
cmp eax, 0xb
jne 0x40d444
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d454
cmp eax, 0x15
jne 0x40d472
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d598
cmp dword [esi + 0x274], 0x2433315f
jne 0x40d598
cmp dword [esi + 0x278], 0x7373694e
jne 0x40d598
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40d598
cmp dword [esi + 0x280], 0x35323748
jne 0x40d598
cmp dword [esi + 0x284], 0x315b3033
jne 0x40d598
cmp dword [esi + 0x288], 0x6b303832
jne 0x40d598
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40d598
cmp word [esi + 0x290], 0x4e
jne 0x40d598
mov dword [ebp - 0xcd2], 0xfdffff1f
mov dword [ebp - 0xcce], 0xfcffff1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d54c
cmp eax, 0xb
jne 0x40d56a
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d57a
cmp eax, 0x15
jne 0x40d598
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d6be
cmp dword [esi + 0x274], 0x2434315f
jne 0x40d6be
cmp dword [esi + 0x278], 0x61627553
jne 0x40d6be
cmp dword [esi + 0x27c], 0x53207572
jne 0x40d6be
cmp dword [esi + 0x280], 0x35323748
jne 0x40d6be
cmp dword [esi + 0x284], 0x315b3133
jne 0x40d6be
cmp dword [esi + 0x288], 0x6b303832
jne 0x40d6be
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40d6be
cmp word [esi + 0x290], 0x4e
jne 0x40d6be
mov dword [ebp - 0xcd2], 0xffffff1f
mov dword [ebp - 0xcce], 0xfeffff1f
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d672
cmp eax, 0xb
jne 0x40d690
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d6a0
cmp eax, 0x15
jne 0x40d6be
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d7e4
cmp dword [esi + 0x274], 0x2436315f
jne 0x40d7e4
cmp dword [esi + 0x278], 0x757a7553
jne 0x40d7e4
cmp dword [esi + 0x27c], 0x5320696b
jne 0x40d7e4
cmp dword [esi + 0x280], 0x35323748
jne 0x40d7e4
cmp dword [esi + 0x284], 0x315b3033
jne 0x40d7e4
cmp dword [esi + 0x288], 0x6b303832
jne 0x40d7e4
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40d7e4
cmp word [esi + 0x290], 0x4e
jne 0x40d7e4
mov dword [ebp - 0xcd2], 0xfeff0f00
mov dword [ebp - 0xcce], 0x21000000
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d798
cmp eax, 0xb
jne 0x40d7b6
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d7c6
cmp eax, 0x15
jne 0x40d7e4
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
cmp dword [esi + 0x270], 0x39366d24
jne 0x40d919
cmp dword [esi + 0x274], 0x2439315f
jne 0x40d919
cmp dword [esi + 0x278], 0x647a614d
jne 0x40d919
cmp dword [esi + 0x27c], 0x43542061
jne 0x40d919
cmp dword [esi + 0x280], 0x4853204d
jne 0x40d919
cmp dword [esi + 0x284], 0x33353237
jne 0x40d919
cmp dword [esi + 0x288], 0x32315b31
jne 0x40d919
cmp dword [esi + 0x28c], 0x5d6b3038
jne 0x40d919
cmp dword [esi + 0x290], 0x4e414320
jne 0x40d919
cmp byte [esi + 0x294], 0
jne 0x40d919
mov dword [ebp - 0xcd2], 0xfeff0f00
mov dword [ebp - 0xcce], 0xfdff0f00
mov dword [ebp - 0xcca], 0x4157de
mov dword [ebp - 0xcc6], 0xfff84300
mov dword [ebp - 0xcc2], 0
mov dword [ebp - 0xcbe], 0xb30
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d8cd
cmp eax, 0xb
jne 0x40d8eb
mov dword [ebp - 0x112c], 0x401460
mov dword [ebp - 0x1128], 0x460
mov dword [ebp - 0x1124], 0x160
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
je 0x40d8fb
cmp eax, 0x15
jne 0x40d919
mov dword [ebp - 0x112c], 0x4016c0
mov dword [ebp - 0x1128], 0x6c0
mov dword [ebp - 0x1124], 0x40
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40d9a5
mov edx, dword [esi + 0x20]
mov eax, dword [ebp - 0xcce]
mov ecx, dword [ebp - 0xcd2]
cmp eax, dword [edx + 0xc]
je 0x40d94e
cmp dword [edx + 0xc], 0x13060000
je 0x40d94e
cmp dword [edx + 0xc], 0x10f1eb1f
jne 0x40d965
cmp ecx, dword [edx + 0x14]
je 0x40d9a5
cmp dword [edx + 0x14], 0x14060000
je 0x40d9a5
cmp dword [edx + 0x14], 0xf110eb1f
je 0x40d9a5
push 0xa
push 0xd245441
push 0x4d524f46
push 0x5f454c49
push 0x465f4d4f
push 0x525f4445
push 0x54524f50
push 0x5055534e
push 0x555f524f
push 0x52524524
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x2354], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40d9c3
cmp eax, 0xb
je 0x40d9c3
cmp eax, 0x14
je 0x40d9c3
cmp eax, 0x15
jne 0x40dae1
cmp dword [ebp - 0x2354], 0
jne 0x40dae1
push 0x320
push 0
lea edx, [ebp - 0x1118]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0xdf8], 0x21
mov dword [ebp - 0x1120], 0
mov ecx, dword [ebp - 0x1120]
cmp ecx, dword [ebp - 0x1124]
jae 0x40dae1
mov eax, dword [ebp - 0x1128]
lea eax, [eax + ecx]
mov dword [ebp - 0xdf6], eax
mov edx, dword [ebp - 0x1124]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x40da48
cmp ecx, 0xf0
jae 0x40da48
mov eax, dword [ebp - 0x112c]
add eax, dword [ebp - 0x1120]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0xdf2], al
inc ecx
jmp 0x40da23
mov dword [ebp - 0x111c], ecx
add ecx, 4
mov byte [ebp - 0xdf7], cl
push 0xfa
lea edx, [ebp - 0x2562]
push edx
push 0xf6
lea edx, [ebp - 0xdf8]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x40dab1
push 0xa0d24
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2354], 1
jmp 0x40dae1
mov eax, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x1120]
add dword [ebp - 0x1120], eax
push eax
lea edx, [ebp - 0x2562]
push edx
lea edx, [ebp + ecx - 0x1118]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x40d9f8
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x15
jne 0x40dd69
cmp dword [ebp - 0x2354], 0
jne 0x40dd69
mov dword [ebp - 0xcfe], 0
mov dword [ebp - 0xd02], 0
mov dword [ebp - 0xcba], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40db60
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40db60
add dword [ebp - 0xcfe], eax
mov eax, dword [ebp + ecx - 0x1118]
add eax, dword [ebp + ecx - 0x1114]
cmp eax, dword [ebp - 0xcba]
jbe 0x40db58
mov dword [ebp - 0xcba], eax
inc dword [ebp - 0xd02]
jmp 0x40db1b
shl dword [ebp - 0xcba], 1
mov byte [ebp - 0xca6], 0
push 0x4c
push 0
lea edx, [ebp - 0xba2]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
push 0
mov dword [ebp - 0x19], esp
push 0x6e6962
mov dword [ebp - 0x15], esp
push 0
push 0x2a2e2a
push 0x73656c
push 0x6966206c
push 0x6c41006e
push 0x69622e2a
push 0x656c69
push 0x66207972
push 0x616e6942
mov dword [ebp - 0x11], esp
mov dword [ebp - 0xba2], 0x4c
mov eax, dword [ebx + 0x8ac]
mov dword [ebp - 0xb9e], eax
mov dword [ebp - 0xb8a], 1
mov eax, dword [ebp - 0x11]
mov dword [ebp - 0xb96], eax
lea eax, [ebp - 0xca6]
mov dword [ebp - 0xb86], eax
mov dword [ebp - 0xb82], 0x104
mov eax, dword [ebp - 0x19]
mov dword [ebp - 0xb76], eax
mov dword [ebp - 0xb72], eax
mov eax, dword [ebp - 0x15]
mov dword [ebp - 0xb66], eax
mov dword [ebp - 0xb6e], 0x1800
lea edx, [ebp - 0xba2]
push edx
call dword [sym.imp.COMDLG32.DLL_GetOpenFileNameA]
add esp, 0x24
add esp, 4
add esp, 4
test eax, eax
jne 0x40dc45
mov dword [ebp - 0x2354], 1
jmp 0x40dd69
push 0
push pe_nt_image_headers32
push 3
push 0
push 1
push 0x80000000
lea edx, [ebp - 0xca6]
push edx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
cmp eax, 0xffffffff
jne 0x40dcb7
lea eax, [ebp - 0xca6]
push 0xa0d
push 0x7325203a
push 0x24454c49
push 0x465f474e
push 0x494e4550
push 0x4f5f524f
push 0x52524524
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x40dd69
mov dword [ebp - 0xcb6], eax
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
cmp eax, dword [ebp - 0xcba]
je 0x40dd29
push 0xa
push 0xd245345
push 0x54594224
push 0x20642520
push 0x3a244542
push 0x5f545355
push 0x4d5f455a
push 0x49535f45
push 0x4c494624
push dword [ebp - 0xcba]
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x2354], 1
jmp 0x40dd5d
mov eax, dword [ebp - 0xcba]
mov dword [esi + 0x38], eax
mov dword [esi + 0x34], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x30], eax
push 0
lea edx, [ebp - 0xcb2]
push edx
push dword [ebp - 0xcba]
push eax
push dword [ebp - 0xcb6]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push dword [ebp - 0xcb6]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40dd87
cmp eax, 0xb
je 0x40dd87
cmp eax, 0x14
je 0x40dd87
cmp eax, 0x15
jne 0x41116e
cmp dword [ebp - 0x2354], 0
jne 0x41116e
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40ddc2
mov dword [ebp - 0x2354], 1
jmp 0x41116e
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40ddef
mov dword [ebp - 0x2354], 1
jmp 0x41116e
mov dword [ebp - 0xa1], 0
mov dword [ebp - 0x2150], 0
mov dword [ebp - 0x214c], 0
mov dword [ebp - 0x2148], 1
mov dword [ebp - 0x2144], 5
mov dword [ebp - 0x2140], 0
mov dword [ebp - 0x213c], 0x40
mov dword [ebp - 0x2138], 0
mov dword [ebp - 0x2134], 4
mov dword [ebp - 0x2130], 0
mov dword [ebp - 0x212c], 0xffffffff
mov dword [ebp - 0x2128], 5
mov dword [ebp - 0x2124], 0
mov dword [ebp - 0x2120], 0x40
mov dword [ebp - 0x211c], 0
mov dword [ebp - 0x2118], 4
mov dword [ebp - 0x2114], 0
mov eax, dword [ebp - 0xcce]
mov dword [ebp - 0x2110], eax
mov dword [ebp - 0x210c], 0
mov dword [ebp - 0x2108], 0
mov dword [ebp - 0x2104], 0
mov dword [ebp - 0x2100], 0
mov dword [ebp - 0x20fc], 0
mov dword [ebp - 0x20f8], 0
test dword [ebp - 0xcd2], 0xf8ffff
je 0x40df01
or dword [ebp - 0x213c], 0x100
or dword [ebp - 0x2120], 0x100
push 0
lea edx, [ebp - 0x2150]
push edx
push 4
call dword [edi]
cmp eax, 0xffffffff
jne 0x40df22
mov dword [ebp - 0x2354], 1
jmp 0x41116e
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40df48
mov dword [ebp - 0x2354], 1
jmp 0x40df4c
test eax, eax
jne 0x40df22
cmp dword [ebp - 0x2354], 0
jne 0x40e01b
mov eax, dword [ebp - 0xcd2]
mov dword [ebp - 0xb56], eax
mov dword [ebp - 0x4f9], 0
mov dword [ebp - 0xb52], 0xef
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40dfaa
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40dfc6
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40dfd7
mov dword [ebp - 0x2354], 1
jmp 0x40e01b
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40dffd
mov dword [ebp - 0x2354], 1
jmp 0x40e01b
test eax, eax
je 0x40e01b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x40e016
cmp eax, 0x14
je 0x40e016
cmp eax, 0x15
jne 0x40e01b
jmp 0x40eb5f
cmp dword [ebp - 0x2354], 0
jne 0x40e0b4
push 0x24
push 0x474e494e
push 0x52415724
lea edx, [ebp - 0x2850]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0xc
push 0
push 0x244e4f5f
push 0x48435449
push 0x57535f44
push 0x4e415f48
push 0x5355505f
push 0x46464f5f
push 0x4e4f4954
push 0x494e4749
push 0x5f484354
push 0x49575324
lea edx, [ebp - 0xb4a]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0x2c
push 0
lea edx, [ebp - 0x2850]
push edx
lea edx, [ebp - 0xb4a]
push edx
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_MessageBoxW]
mov eax, dword [ebp - 0xcd2]
mov dword [ebp - 0xb56], eax
mov dword [ebp - 0xb52], 0x21002
mov dword [ebp - 0xb4e], 0
mov dword [ebp - 0x1130], 0x10
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e105
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x258
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e121
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x258
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e135
mov dword [ebp - 0x2354], 1
jmp 0x40e2d6
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40e15e
mov dword [ebp - 0x2354], 1
jmp 0x40e2d6
cmp eax, 0xffffffff
jne 0x40e172
mov dword [ebp - 0x2354], 1
jmp 0x40e2d6
test eax, eax
jne 0x40e25d
dec dword [ebp - 0x1130]
jne 0x40e0de
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x40e19b
cmp eax, 0x14
je 0x40e19b
cmp eax, 0x15
jne 0x40e1f5
inc dword [ebp - 0xa1]
cmp dword [ebp - 0xa1], 1
jne 0x40e1d3
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
mov dword [ebp - 0xcd2], 0x14060000
mov dword [ebp - 0xcce], 0x13060000
jmp 0x40ddf9
cmp dword [ebp - 0xa1], 2
jne 0x40e1f5
mov dword [ebp - 0xcd2], 0xf110eb1f
mov dword [ebp - 0xcce], 0x10f1eb1f
jmp 0x40ddf9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e23d
xor eax, eax
jmp 0x40e247
cmp eax, 0x20
jbe 0x40e247
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40e2d6
cmp byte [ebp - 0x214b], 0x50
je 0x40e2d6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e2b8
xor eax, eax
jmp 0x40e2c2
cmp eax, 0x20
jbe 0x40e2c2
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40e491
mov eax, dword [ebp - 0xcd2]
mov dword [ebp - 0xb56], eax
mov dword [ebp - 0xb52], 0xbc07
mov eax, dword [ebp - 0xcc6]
mov byte [ebp - 0xb4e], ah
mov byte [ebp - 0xb4d], al
shr eax, 0x10
mov byte [ebp - 0xb50], ah
mov byte [ebp - 0xb4f], al
mov eax, dword [ebp - 0xcbe]
mov byte [ebp - 0xb4c], ah
mov byte [ebp - 0xb4b], al
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e353
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x12c
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e36f
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x12c
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e383
mov dword [ebp - 0x2354], 1
jmp 0x40e491
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40e3ac
mov dword [ebp - 0x2354], 1
jmp 0x40e491
test eax, eax
jne 0x40e418
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e3f8
xor eax, eax
jmp 0x40e402
cmp eax, 0x20
jbe 0x40e402
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40e491
cmp byte [ebp - 0x214b], 0xfc
je 0x40e491
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e473
xor eax, eax
jmp 0x40e47d
cmp eax, 0x20
jbe 0x40e47d
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40e58f
push 0xa0d24
push 0x544f4f42
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x10
mov eax, dword [ebp - 0xcbe]
shl eax, 0xd
and eax, 0xffff0000
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov ecx, dword [ebp - 0xcc2]
cmp ecx, dword [ebp - 0xcbe]
jae 0x40e58f
add ecx, dword [ebp - 0xcca]
mov eax, dword [ecx]
mov dword [ebp - 0xb52], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xb4e], eax
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e551
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e56d
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e57e
mov dword [ebp - 0x2354], 1
jmp 0x40e58f
add dword [ebp - 0xcc2], 8
call fcn.004122cd
jmp 0x40e505
cmp dword [ebp - 0x2354], 0
jne 0x40e5ad
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp dword [ebp - 0x2354], 0
jne 0x40e733
mov dword [ebp - 0xb52], 0xbd01
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e5f5
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e611
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e625
mov dword [ebp - 0x2354], 1
jmp 0x40e733
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40e64e
mov dword [ebp - 0x2354], 1
jmp 0x40e733
test eax, eax
jne 0x40e6ba
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e69a
xor eax, eax
jmp 0x40e6a4
cmp eax, 0x20
jbe 0x40e6a4
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40e733
cmp byte [ebp - 0x214c], 0
je 0x40e733
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e715
xor eax, eax
jmp 0x40e71f
cmp eax, 0x20
jbe 0x40e71f
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40e8b9
mov dword [ebp - 0xb52], 0xcb20
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e77b
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e797
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e7ab
mov dword [ebp - 0x2354], 1
jmp 0x40e8b9
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40e7d4
mov dword [ebp - 0x2354], 1
jmp 0x40e8b9
test eax, eax
jne 0x40e840
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e820
xor eax, eax
jmp 0x40e82a
cmp eax, 0x20
jbe 0x40e82a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40e8b9
cmp byte [ebp - 0x214c], 0x20
je 0x40e8b9
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e89b
xor eax, eax
jmp 0x40e8a5
cmp eax, 0x20
jbe 0x40e8a5
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40ea3f
mov dword [ebp - 0xb52], 0xcc20
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40e901
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40e91d
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40e931
mov dword [ebp - 0x2354], 1
jmp 0x40ea3f
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40e95a
mov dword [ebp - 0x2354], 1
jmp 0x40ea3f
test eax, eax
jne 0x40e9c6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40e9a6
xor eax, eax
jmp 0x40e9b0
cmp eax, 0x20
jbe 0x40e9b0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40ea3f
cmp byte [ebp - 0x214c], 0
je 0x40ea3f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40ea21
xor eax, eax
jmp 0x40ea2b
cmp eax, 0x20
jbe 0x40ea2b
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
cmp dword [ebp - 0x2354], 0
jne 0x40eb96
mov dword [ebp - 0x4f9], 0
mov dword [ebp - 0xb52], 0xef
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40ea91
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40eaad
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40eac1
mov dword [ebp - 0x2354], 1
jmp 0x40eb96
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40eaea
mov dword [ebp - 0x2354], 1
jmp 0x40eb96
test eax, eax
jne 0x40eb5f
cmp dword [ebp - 0x4f9], 0
jne 0x40eb5d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40eb3f
xor eax, eax
jmp 0x40eb49
cmp eax, 0x20
jbe 0x40eb49
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40eb96
mov ecx, dword [ebp - 0x4f9]
push 8
lea edx, [ebp - 0x214c]
push edx
lea edx, [ebp + ecx - 0x4f5]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
add dword [ebp - 0x4f9], 8
cmp dword [ebp - 0x4f9], 0x100
jl 0x40eac1
cmp dword [ebp - 0x2354], 0
jne 0x40f63e
mov byte [ebp - 0x3f5], 0
cmp dword [ebp - 0x4f9], 8
jb 0x40f63e
mov eax, dword [ebp - 0x4f2]
mov dword [ebp - 0x3f5], eax
movzx eax, byte [ebp - 0x4ee]
mov dword [ebp - 0x3f1], eax
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ec40
cmp dword [esi + 0x274], 0x2431305f
jne 0x40ec40
cmp dword [esi + 0x278], 0x68696144
jne 0x40ec40
cmp dword [esi + 0x27c], 0x75737461
jne 0x40ec40
cmp dword [esi + 0x280], 0x37485320
jne 0x40ec40
cmp dword [esi + 0x284], 0x31333532
jne 0x40ec40
cmp dword [esi + 0x288], 0x3832315b
jne 0x40ec40
cmp dword [esi + 0x28c], 0x205d6b30
jne 0x40ec40
cmp dword [esi + 0x290], 0x4e4143
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ecba
cmp dword [esi + 0x274], 0x2436305f
jne 0x40ecba
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40ecba
cmp dword [esi + 0x27c], 0x41206174
jne 0x40ecba
cmp dword [esi + 0x280], 0x53204d43
jne 0x40ecba
cmp dword [esi + 0x284], 0x35323748
jne 0x40ecba
cmp dword [esi + 0x288], 0x315b3133
jne 0x40ecba
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40ecba
cmp dword [esi + 0x290], 0x4143205d
jne 0x40ecba
cmp word [esi + 0x294], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ed34
cmp dword [esi + 0x274], 0x2437305f
jne 0x40ed34
cmp dword [esi + 0x278], 0x647a614d
jne 0x40ed34
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40ed34
cmp dword [esi + 0x280], 0x53204179
jne 0x40ed34
cmp dword [esi + 0x284], 0x35323748
jne 0x40ed34
cmp dword [esi + 0x288], 0x315b3133
jne 0x40ed34
cmp dword [esi + 0x28c], 0x6b303832
jne 0x40ed34
cmp dword [esi + 0x290], 0x4143205d
jne 0x40ed34
cmp word [esi + 0x294], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40eda2
cmp dword [esi + 0x274], 0x2432315f
jne 0x40eda2
cmp dword [esi + 0x278], 0x7373694e
jne 0x40eda2
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40eda2
cmp dword [esi + 0x280], 0x35323748
jne 0x40eda2
cmp dword [esi + 0x284], 0x315b3133
jne 0x40eda2
cmp dword [esi + 0x288], 0x6b303832
jne 0x40eda2
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40eda2
cmp word [esi + 0x290], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ee10
cmp dword [esi + 0x274], 0x2433315f
jne 0x40ee10
cmp dword [esi + 0x278], 0x7373694e
jne 0x40ee10
cmp dword [esi + 0x27c], 0x53206e61
jne 0x40ee10
cmp dword [esi + 0x280], 0x35323748
jne 0x40ee10
cmp dword [esi + 0x284], 0x315b3033
jne 0x40ee10
cmp dword [esi + 0x288], 0x6b303832
jne 0x40ee10
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40ee10
cmp word [esi + 0x290], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40ee7e
cmp dword [esi + 0x274], 0x2434315f
jne 0x40ee7e
cmp dword [esi + 0x278], 0x61627553
jne 0x40ee7e
cmp dword [esi + 0x27c], 0x53207572
jne 0x40ee7e
cmp dword [esi + 0x280], 0x35323748
jne 0x40ee7e
cmp dword [esi + 0x284], 0x315b3133
jne 0x40ee7e
cmp dword [esi + 0x288], 0x6b303832
jne 0x40ee7e
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40ee7e
cmp word [esi + 0x290], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40eeec
cmp dword [esi + 0x274], 0x2436315f
jne 0x40eeec
cmp dword [esi + 0x278], 0x757a7553
jne 0x40eeec
cmp dword [esi + 0x27c], 0x5320696b
jne 0x40eeec
cmp dword [esi + 0x280], 0x35323748
jne 0x40eeec
cmp dword [esi + 0x284], 0x315b3033
jne 0x40eeec
cmp dword [esi + 0x288], 0x6b303832
jne 0x40eeec
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40eeec
cmp word [esi + 0x290], 0x4e
je 0x40ef89
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f006
cmp dword [esi + 0x274], 0x2439315f
jne 0x40f006
cmp dword [esi + 0x278], 0x647a614d
jne 0x40f006
cmp dword [esi + 0x27c], 0x43542061
jne 0x40f006
cmp dword [esi + 0x280], 0x4853204d
jne 0x40f006
cmp dword [esi + 0x284], 0x33353237
jne 0x40f006
cmp dword [esi + 0x288], 0x32315b31
jne 0x40f006
cmp dword [esi + 0x28c], 0x5d6b3038
jne 0x40f006
cmp dword [esi + 0x290], 0x4e414320
jne 0x40f006
cmp byte [esi + 0x294], 0
jne 0x40f006
cmp dword [ebp - 0x3f5], 0x33353237
jne 0x40efa7
cmp byte [ebp - 0x3f1], 0x30
je 0x40f006
cmp byte [ebp - 0x3f1], 0x31
je 0x40f006
lea ecx, [ebp - 0x3f5]
push 0
push 0xa0d2973
push 0x25282024
push 0x45505954
push 0x5f554345
push 0x5f474e4f
push 0x52575f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x34
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
mov dword [ebp - 0x2354], 1
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f073
cmp dword [esi + 0x274], 0x2437315f
jne 0x40f073
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40f073
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40f073
cmp dword [esi + 0x280], 0x34353237
jne 0x40f073
cmp dword [esi + 0x284], 0x30325b33
jne 0x40f073
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x40f073
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40f073
cmp byte [esi + 0x290], 0
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f0ed
cmp dword [esi + 0x274], 0x2439305f
jne 0x40f0ed
cmp dword [esi + 0x278], 0x647a614d
jne 0x40f0ed
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40f0ed
cmp dword [esi + 0x280], 0x53204479
jne 0x40f0ed
cmp dword [esi + 0x284], 0x35323748
jne 0x40f0ed
cmp dword [esi + 0x288], 0x325b3334
jne 0x40f0ed
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40f0ed
cmp dword [esi + 0x290], 0x4143205d
jne 0x40f0ed
cmp word [esi + 0x294], 0x4e
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f172
cmp dword [esi + 0x274], 0x2435315f
jne 0x40f172
cmp dword [esi + 0x278], 0x61627553
jne 0x40f172
cmp dword [esi + 0x27c], 0x44207572
jne 0x40f172
cmp dword [esi + 0x280], 0x65736569
jne 0x40f172
cmp dword [esi + 0x284], 0x4853206c
jne 0x40f172
cmp dword [esi + 0x288], 0x34353237
jne 0x40f172
cmp dword [esi + 0x28c], 0x30325b33
jne 0x40f172
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x40f172
cmp dword [esi + 0x294], 0x4e414320
jne 0x40f172
cmp byte [esi + 0x298], 0
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f1d6
cmp dword [esi + 0x274], 0x2432305f
jne 0x40f1d6
cmp dword [esi + 0x278], 0x6f6e6948
jne 0x40f1d6
cmp dword [esi + 0x27c], 0x37485320
jne 0x40f1d6
cmp dword [esi + 0x280], 0x33343532
jne 0x40f1d6
cmp dword [esi + 0x284], 0x3430325b
jne 0x40f1d6
cmp dword [esi + 0x288], 0x205d6b38
jne 0x40f1d6
cmp dword [esi + 0x28c], 0x4e4143
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f244
cmp dword [esi + 0x274], 0x2435305f
jne 0x40f244
cmp dword [esi + 0x278], 0x6f62754b
jne 0x40f244
cmp dword [esi + 0x27c], 0x53206174
jne 0x40f244
cmp dword [esi + 0x280], 0x35323748
jne 0x40f244
cmp dword [esi + 0x284], 0x325b3334
jne 0x40f244
cmp dword [esi + 0x288], 0x6b383430
jne 0x40f244
cmp dword [esi + 0x28c], 0x4143205d
jne 0x40f244
cmp word [esi + 0x290], 0x4e
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f2be
cmp dword [esi + 0x274], 0x2438305f
jne 0x40f2be
cmp dword [esi + 0x278], 0x647a614d
jne 0x40f2be
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40f2be
cmp dword [esi + 0x280], 0x53204179
jne 0x40f2be
cmp dword [esi + 0x284], 0x35323748
jne 0x40f2be
cmp dword [esi + 0x288], 0x325b3334
jne 0x40f2be
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40f2be
cmp dword [esi + 0x290], 0x4143205d
jne 0x40f2be
cmp word [esi + 0x294], 0x4e
je 0x40f358
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f3cc
cmp dword [esi + 0x274], 0x2431315f
jne 0x40f3cc
cmp dword [esi + 0x278], 0x7374694d
jne 0x40f3cc
cmp dword [esi + 0x27c], 0x73696275
jne 0x40f3cc
cmp dword [esi + 0x280], 0x53206968
jne 0x40f3cc
cmp dword [esi + 0x284], 0x35323748
jne 0x40f3cc
cmp dword [esi + 0x288], 0x325b3334
jne 0x40f3cc
cmp dword [esi + 0x28c], 0x6b383430
jne 0x40f3cc
cmp dword [esi + 0x290], 0x4143205d
jne 0x40f3cc
cmp word [esi + 0x294], 0x4e
jne 0x40f3cc
cmp dword [ebp - 0x3f5], 0x34353237
jne 0x40f36d
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f439
cmp dword [esi + 0x274], 0x2438315f
jne 0x40f439
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40f439
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40f439
cmp dword [esi + 0x280], 0x34353237
jne 0x40f439
cmp dword [esi + 0x284], 0x38335b36
jne 0x40f439
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40f439
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40f439
cmp byte [esi + 0x290], 0
je 0x40f5b8
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f4b3
cmp dword [esi + 0x274], 0x2430315f
jne 0x40f4b3
cmp dword [esi + 0x278], 0x647a614d
jne 0x40f4b3
cmp dword [esi + 0x27c], 0x6b732061
jne 0x40f4b3
cmp dword [esi + 0x280], 0x53204479
jne 0x40f4b3
cmp dword [esi + 0x284], 0x35323748
jne 0x40f4b3
cmp dword [esi + 0x288], 0x335b3634
jne 0x40f4b3
cmp dword [esi + 0x28c], 0x6b303438
jne 0x40f4b3
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f52b
cmp dword [esi + 0x274], 0x2433305f
jne 0x40f52b
cmp dword [esi + 0x278], 0x6e757948
jne 0x40f52b
cmp dword [esi + 0x27c], 0x20696164
jne 0x40f52b
cmp dword [esi + 0x280], 0x32374853
jne 0x40f52b
cmp dword [esi + 0x284], 0x5b363435
jne 0x40f52b
cmp dword [esi + 0x288], 0x30343833
jne 0x40f52b
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f63e
cmp dword [esi + 0x274], 0x2434305f
jne 0x40f63e
cmp dword [esi + 0x278], 0x7a757349
jne 0x40f63e
cmp dword [esi + 0x27c], 0x48532075
jne 0x40f63e
cmp dword [esi + 0x280], 0x34353237
jne 0x40f63e
cmp dword [esi + 0x284], 0x38335b36
jne 0x40f63e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x40fc07
cmp dword [ebp - 0x2354], 0
jne 0x40fc07
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
mov dword [ebp - 0xce6], 0
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40f6de
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40f6de
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0xce6], eax
inc dword [ebp - 0xd02]
jmp 0x40f6a8
mov eax, dword [ebp - 0xce6]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xcae], 0
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40f96e
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40f96e
mov dword [ebp - 0xcde], eax
mov eax, dword [ebp + ecx - 0x1118]
mov dword [ebp - 0xce2], eax
add dword [ebp - 0xcde], eax
mov eax, dword [ebp + ecx - 0x110c]
mov dword [ebp - 0xcda], eax
mov eax, dword [ebp - 0xce2]
mov ecx, dword [ebp - 0xcde]
cmp eax, ecx
jae 0x40f963
sub ecx, eax
cmp ecx, 0x100
jbe 0x40f7a5
mov ecx, 0x100
mov dword [ebp - 0xcaa], ecx
add eax, dword [ebp - 0xcda]
mov byte [ebp - 0xb52], 0x23
mov byte [ebp - 0xb4f], ah
mov byte [ebp - 0xb4e], al
shr eax, 0x10
mov byte [ebp - 0xb51], ah
mov byte [ebp - 0xb50], al
mov byte [ebp - 0xb4c], ch
mov byte [ebp - 0xb4b], cl
shr ecx, 0x10
mov byte [ebp - 0xb4d], cl
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40f80f
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40f82b
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40f83f
mov dword [ebp - 0x2354], 1
jmp 0x40f961
mov dword [ebp - 0x3e9], 0
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40f872
mov dword [ebp - 0x2354], 1
jmp 0x40f929
test eax, eax
jne 0x40f8de
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x40f8be
xor eax, eax
jmp 0x40f8c8
cmp eax, 0x20
jbe 0x40f8c8
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x40f929
mov eax, dword [ebp - 0xcaa]
mov ecx, dword [ebp - 0x3e9]
sub eax, ecx
cmp eax, 8
jbe 0x40f8f6
mov eax, 8
add dword [ebp - 0x3e9], eax
add ecx, dword [esi + 0x24]
add ecx, dword [ebp - 0xce2]
push eax
lea edx, [ebp - 0x214c]
push edx
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp - 0x3e9]
cmp eax, dword [ebp - 0xcaa]
jb 0x40f849
cmp dword [ebp - 0x2354], 0
jne 0x40f961
mov eax, dword [ebp - 0xce2]
and eax, 0xfffff800
cmp eax, dword [ebp - 0xcae]
je 0x40f950
mov dword [ebp - 0xcae], eax
call fcn.004122cd
mov ecx, dword [ebp - 0x3e9]
add dword [ebp - 0xce2], ecx
jmp 0x40f782
jmp 0x40f96e
inc dword [ebp - 0xd02]
jmp 0x40f739
cmp dword [ebp - 0x2354], 0
jne 0x40fbfe
cmp dword [esi + 0x270], 0x39366d24
jne 0x40f9f4
cmp dword [esi + 0x274], 0x2434305f
jne 0x40f9f4
cmp dword [esi + 0x278], 0x7a757349
jne 0x40f9f4
cmp dword [esi + 0x27c], 0x48532075
jne 0x40f9f4
cmp dword [esi + 0x280], 0x34353237
jne 0x40f9f4
cmp dword [esi + 0x284], 0x38335b36
jne 0x40f9f4
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40f9f4
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40f9f4
cmp byte [esi + 0x290], 0
jne 0x40f9f4
push dword [esi + 0x2c]
push dword [esi + 0x24]
call fcn.004113e2
jmp 0x40fae2
cmp dword [esi + 0x270], 0x39366d24
jne 0x40fa5d
cmp dword [esi + 0x274], 0x2437315f
jne 0x40fa5d
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40fa5d
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40fa5d
cmp dword [esi + 0x280], 0x34353237
jne 0x40fa5d
cmp dword [esi + 0x284], 0x30325b33
jne 0x40fa5d
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x40fa5d
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40fa5d
cmp byte [esi + 0x290], 0
je 0x40fac6
cmp dword [esi + 0x270], 0x39366d24
jne 0x40fad5
cmp dword [esi + 0x274], 0x2438315f
jne 0x40fad5
cmp dword [esi + 0x278], 0x766c6f56
jne 0x40fad5
cmp dword [esi + 0x27c], 0x4853206f
jne 0x40fad5
cmp dword [esi + 0x280], 0x34353237
jne 0x40fad5
cmp dword [esi + 0x284], 0x38335b36
jne 0x40fad5
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x40fad5
cmp dword [esi + 0x28c], 0x4e414320
jne 0x40fad5
cmp byte [esi + 0x290], 0
jne 0x40fad5
push 1
push dword [esi + 0x2c]
push dword [esi + 0x24]
call fcn.00411fe7
jmp 0x40fae2
push 1
push dword [esi + 0x2c]
push dword [esi + 0x24]
call fcn.004114dd
test eax, eax
jne 0x40fb12
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x40fbfc
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0xa0d
push 0x24455059
push 0x545f4d55
push 0x534b4345
push 0x48435f4e
push 0x574f4e4b
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
cmp dword [ebp - 0x2354], 0
jne 0x40fbfc
push 0x24
push 0x474e494e
push 0x52415724
lea edx, [ebp - 0x2850]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0xc
push 0x24
push 0x45505954
push 0x5f4d5553
push 0x4b434548
push 0x435f4e57
push 0x4f4e4b4e
push 0x555f524f
push 0x52524524
lea edx, [ebp - 0xb4a]
push edx
lea edx, [esp + 4]
push edx
push dword [ebx + 0x184]
call dword [ebx + 0x2c]
add esp, 0x20
push 0
lea edx, [ebp - 0x2850]
push edx
lea edx, [ebp - 0xb4a]
push edx
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_MessageBoxW]
jmp 0x40fc07
lea edx, [esi + 0x24]
push edx
call fcn.0041262e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x410380
cmp dword [ebp - 0x2354], 0
jne 0x40fd8b
push 0x200
push 0
lea edx, [ebp - 0x3e5]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40fc86
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40fc86
mov ecx, dword [ebp + ecx - 0x1118]
add ecx, dword [esi + 0x20]
push eax
push ecx
call fcn.0041228b
imul ecx, dword [ebp - 0xd02], 8
mov dword [ebp + ecx - 0x3e1], eax
inc dword [ebp - 0xd02]
jmp 0x40fc44
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40fd8b
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40fd8b
mov dword [ebp - 0xb52], 0x33
mov dword [ebp - 0xb4e], 0
mov eax, dword [ebp - 0xd02]
mov byte [ebp - 0xb51], al
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40fcfa
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40fd16
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40fd27
mov dword [ebp - 0x2354], 1
jmp 0x40fd8b
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40fd4d
mov dword [ebp - 0x2354], 1
jmp 0x40fd8b
test eax, eax
jne 0x40fd5d
mov dword [ebp - 0x2354], 1
jmp 0x40fd8b
mov eax, dword [ebp - 0x2148]
bswap eax
imul ecx, dword [ebp - 0xd02], 8
cmp dword [ebp + ecx - 0x3e1], eax
je 0x40fd80
mov dword [ebp + ecx - 0x3e5], 1
inc dword [ebp - 0xd02]
jmp 0x40fc90
cmp dword [ebp - 0x2354], 0
jne 0x410380
push 0
push 0xa0d244b
push 0x4f5f4d4f
push 0x525f5946
push 0x49524556
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov dword [ebp - 0xcfe], 0
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x40fe0d
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x40fe0d
imul ecx, dword [ebp - 0xd02], 8
cmp dword [ebp + ecx - 0x3e5], 1
jne 0x40fe05
add dword [ebp - 0xcfe], eax
inc dword [ebp - 0xd02]
jmp 0x40fdd3
cmp dword [ebp - 0xcfe], 0
jne 0x40fe47
push 0xa
push 0xd244c41
push 0x4349544e
push 0x4544495f
push 0x4552415f
push 0x41544144
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
jmp 0x410380
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov eax, dword [ebp - 0xcfe]
and eax, 0xffff00
shl eax, 8
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x4102d0
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x4102d0
mov dword [ebp - 0xcf6], eax
mov eax, dword [ebp + ecx - 0x1118]
mov dword [ebp - 0xcfa], eax
add dword [ebp - 0xcf6], eax
mov eax, dword [ebp + ecx - 0x1110]
mov dword [ebp - 0xcee], eax
imul ecx, dword [ebp - 0xd02], 8
cmp dword [ebp + ecx - 0x3e5], 1
jne 0x4102bc
mov dword [ebp - 0xb52], 0x24
mov dword [ebp - 0xb4e], 0
mov eax, dword [ebp - 0xd02]
mov byte [ebp - 0xb51], al
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x40ff67
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x40ff83
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x40ff97
mov dword [ebp - 0x2354], 1
jmp 0x410046
lea edx, [ebp - 0x2150]
push edx
push 0x7d0
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x40ffc0
mov dword [ebp - 0x2354], 1
jmp 0x410046
test eax, eax
jne 0x41002c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41000c
xor eax, eax
jmp 0x410016
cmp eax, 0x20
jbe 0x410016
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x410046
cmp byte [ebp - 0x214c], 0
je 0x40ff97
cmp byte [ebp - 0x214c], 8
je 0x40ff97
cmp dword [ebp - 0x2354], 0
jne 0x4102bc
mov dword [ebp - 0xb52], 0x25
mov dword [ebp - 0xb4e], 0
mov eax, dword [ebp - 0xd02]
mov byte [ebp - 0xb51], al
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x41009a
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x4100b6
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x4100ca
mov dword [ebp - 0x2354], 1
jmp 0x4102bc
lea edx, [ebp - 0x2150]
push edx
push 0xc8
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x4100f3
mov dword [ebp - 0x2354], 1
jmp 0x4102bc
test eax, eax
jne 0x410162
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41013f
xor eax, eax
jmp 0x410149
cmp eax, 0x20
jbe 0x410149
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x4102bc
mov eax, dword [ebp - 0xcfa]
cmp eax, dword [ebp - 0xcf6]
jae 0x4102bc
mov dword [ebp - 0x3e9], 0
mov ecx, dword [ebp - 0x3e9]
cmp ecx, 0x100
jae 0x410211
add ecx, dword [ebp - 0xcfa]
add ecx, dword [esi + 0x20]
push 8
push ecx
lea edx, [ebp - 0xb52]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x4101d3
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x4101ef
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x410200
mov dword [ebp - 0x2354], 1
jmp 0x41020c
add dword [ebp - 0x3e9], 8
jmp 0x41017e
lea edx, [ebp - 0x2150]
push edx
push 0x7d0
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x41023a
mov dword [ebp - 0x2354], 1
jmp 0x4102bc
test eax, eax
jne 0x4102a6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x410286
mov ecx, dword [ebp - 0x3e9]
add dword [ebp - 0xcfa], ecx
call fcn.004122cd
jmp 0x410162
cmp dword [ebp - 0x2354], 0
jne 0x4102d0
inc dword [ebp - 0xd02]
jmp 0x40fec2
cmp dword [ebp - 0x2354], 0
jne 0x410350
cmp dword [esi + 0x50], 1
jne 0x410350
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov ecx, esp
push 0
push 0x7068702e
push 0x6e61635f
push 0x326e6567
push 0x5f6f736e
push 0x65642f39
push 0x36656c75
push 0x646f6d2f
push 0x73656c75
push 0x646f6d2f
push 0
lea edx, [ebp - 0x165]
push edx
lea edx, [ebp - 0x121]
push edx
lea edx, [ebp - 0x2562]
push edx
push dword [esi + 0x54]
lea edx, [esp + 0x14]
push edx
push ecx
call fcn.0041270e
add esp, 0x28
add esp, 0xc
mov dword [ebp - 0x2354], eax
cmp dword [ebp - 0x2354], 0
jne 0x410380
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x14
jne 0x410b0a
cmp dword [ebp - 0x2354], 0
jne 0x410b0a
push 0xa
push 0xd244d4f
push 0x52504545
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov dword [ebp - 0xce6], 0
mov dword [ebp - 0xd02], 0
mov dword [ebp - 0xcba], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x410433
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x410433
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0xce6], eax
mov eax, dword [ebp + ecx - 0x1118]
add eax, dword [ebp + ecx - 0x1114]
cmp eax, dword [ebp - 0xcba]
jbe 0x41042b
mov dword [ebp - 0xcba], eax
inc dword [ebp - 0xd02]
jmp 0x4103e1
mov eax, dword [ebp - 0xce6]
shl eax, 0x11
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0xcba]
shl eax, 1
mov dword [esi + 0x38], eax
mov dword [esi + 0x34], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x30], eax
mov dword [ebp - 0xcae], 0
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x4108ec
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x4108ec
mov dword [ebp - 0xcde], eax
mov eax, dword [ebp + ecx - 0x1118]
mov dword [ebp - 0xce2], eax
add dword [ebp - 0xcde], eax
mov eax, dword [ebp + ecx - 0x110c]
mov dword [ebp - 0xcda], eax
mov eax, dword [ebp - 0xce2]
cmp eax, dword [ebp - 0xcde]
jae 0x4106d1
mov ecx, 0x200
mov dword [ebp - 0xcaa], ecx
mov dword [ebp - 0xb52], 0xee
mov dword [ebp - 0xb4e], 0
add eax, dword [ebp - 0xcda]
mov byte [ebp - 0xb4f], ah
mov byte [ebp - 0xb4e], al
shr eax, 0x10
mov byte [ebp - 0xb51], ah
mov byte [ebp - 0xb50], al
mov byte [ebp - 0xb4c], ch
mov byte [ebp - 0xb4b], cl
shr ecx, 0x10
mov byte [ebp - 0xb4d], cl
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x41057f
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x41059b
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x4105af
mov dword [ebp - 0x2354], 1
jmp 0x4106d1
mov dword [ebp - 0x3e9], 0
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x4105e2
mov dword [ebp - 0x2354], 1
jmp 0x410699
test eax, eax
jne 0x41064e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41062e
xor eax, eax
jmp 0x410638
cmp eax, 0x20
jbe 0x410638
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x410699
mov eax, dword [ebp - 0xcaa]
mov ecx, dword [ebp - 0x3e9]
sub eax, ecx
cmp eax, 8
jbe 0x410666
mov eax, 8
add dword [ebp - 0x3e9], eax
add ecx, dword [esi + 0x30]
add ecx, dword [ebp - 0xce2]
push eax
lea edx, [ebp - 0x214c]
push edx
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp - 0x3e9]
cmp eax, dword [ebp - 0xcaa]
jb 0x4105b9
cmp dword [ebp - 0x2354], 0
jne 0x4106d1
mov eax, dword [ebp - 0xce2]
and eax, 0xfffff800
cmp eax, dword [ebp - 0xcae]
je 0x4106c0
mov dword [ebp - 0xcae], eax
call fcn.004122cd
mov ecx, dword [ebp - 0xcaa]
add dword [ebp - 0xce2], ecx
jmp 0x4104f1
cmp dword [ebp - 0x2354], 0
jne 0x4108d8
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1118]
mov dword [ebp - 0xce2], eax
mov eax, dword [ebp - 0xce2]
cmp eax, dword [ebp - 0xcde]
jae 0x4108d8
mov ecx, 0x200
mov dword [ebp - 0xcaa], ecx
mov dword [ebp - 0xb52], 0xd0
mov dword [ebp - 0xb4e], 0
add eax, dword [ebp - 0xcda]
mov byte [ebp - 0xb4f], ah
mov byte [ebp - 0xb4e], al
shr eax, 0x10
mov byte [ebp - 0xb51], ah
mov byte [ebp - 0xb50], al
mov byte [ebp - 0xb4c], ch
mov byte [ebp - 0xb4b], cl
shr ecx, 0x10
mov byte [ebp - 0xb4d], cl
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x410780
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x41079c
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x4107b0
mov dword [ebp - 0x2354], 1
jmp 0x4108d8
mov dword [ebp - 0x3e9], 0
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x4107e3
mov dword [ebp - 0x2354], 1
jmp 0x4108a0
test eax, eax
jne 0x41084f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41082f
xor eax, eax
jmp 0x410839
cmp eax, 0x20
jbe 0x410839
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x4108a0
mov eax, dword [ebp - 0xcaa]
mov ecx, dword [ebp - 0x3e9]
sub eax, ecx
cmp eax, 8
jbe 0x410867
mov eax, 8
add dword [ebp - 0x3e9], eax
add ecx, dword [esi + 0x30]
add ecx, dword [ebp - 0xce2]
add ecx, dword [ebp - 0xcba]
push eax
lea edx, [ebp - 0x214c]
push edx
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp - 0x3e9]
cmp eax, dword [ebp - 0xcaa]
jb 0x4107ba
cmp dword [ebp - 0x2354], 0
jne 0x4108d8
mov eax, dword [ebp - 0xce2]
and eax, 0xfffff800
cmp eax, dword [ebp - 0xcae]
je 0x4108c7
mov dword [ebp - 0xcae], eax
call fcn.004122cd
mov ecx, dword [ebp - 0xcaa]
add dword [ebp - 0xce2], ecx
jmp 0x4106f2
cmp dword [ebp - 0x2354], 0
jne 0x4108ec
inc dword [ebp - 0xd02]
jmp 0x4104a8
cmp dword [ebp - 0x2354], 0
jne 0x410b01
mov dword [ebp - 0xce2], 0
mov edx, dword [esi + 0x30]
mov ecx, dword [ebp - 0xce2]
mov eax, dword [ebp - 0xcba]
cmp ecx, eax
jae 0x41092b
lea eax, [eax + ecx]
cmp byte [edx + eax], 0
je 0x41092b
mov byte [edx + ecx], 0x3f
inc dword [ebp - 0xce2]
jmp 0x410906
push 0
push 0xa0d244b
push 0x4f5f4d4f
push 0x52504545
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov byte [ebp - 0xca6], 0
push 0x4c
push 0
lea edx, [ebp - 0xba2]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
push 0
mov dword [ebp - 0xd], esp
push 0x6e6962
mov dword [ebp - 9], esp
push 0
push 0x2a2e2a
push 0x73656c
push 0x6966206c
push 0x6c41006e
push 0x69622e2a
push 0x656c69
push 0x66207972
push 0x616e6942
mov dword [ebp - 5], esp
mov dword [ebp - 0xba2], 0x4c
mov eax, dword [ebx + 0x8ac]
mov dword [ebp - 0xb9e], eax
mov dword [ebp - 0xb8a], 1
mov eax, dword [ebp - 5]
mov dword [ebp - 0xb96], eax
lea eax, [ebp - 0xca6]
mov dword [ebp - 0xb86], eax
mov dword [ebp - 0xb82], 0x104
mov eax, dword [ebp - 0xd]
mov dword [ebp - 0xb76], eax
mov dword [ebp - 0xb72], eax
mov eax, dword [ebp - 9]
mov dword [ebp - 0xb66], eax
mov dword [ebp - 0xb6e], 2
lea edx, [ebp - 0xba2]
push edx
call dword [sym.imp.COMDLG32.DLL_GetSaveFileNameA]
add esp, 0x24
add esp, 4
add esp, 4
test eax, eax
je 0x410b01
push 0
push pe_nt_image_headers32
push 2
push 0
push 0
push 0x40000000
lea edx, [ebp - 0xca6]
push edx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
cmp eax, 0xffffffff
jne 0x410a9a
lea eax, [ebp - 0xca6]
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f474e49
push 0x54414552
push 0x435f524f
push 0x52524524
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
jmp 0x410b01
mov dword [ebp - 0xcb6], eax
push 0
lea edx, [ebp - 0xcb2]
push edx
push dword [esi + 0x38]
push dword [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.DLL_WriteFile]
push dword [ebp - 0xcb6]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea eax, [ebp - 0xca6]
push 0xa0d
push 0x7325203a
push 0x24444556
push 0x41535f45
push 0x4c494624
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2850]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2850]
push edx
call dword [ebx + 0x30]
lea edx, [esi + 0x30]
push edx
call fcn.0041262e
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x15
jne 0x4110ef
cmp dword [ebp - 0x2354], 0
jne 0x4110b1
mov dword [ebp - 0xcfe], 0
mov dword [ebp - 0xd02], 0
mov dword [ebp - 0xcba], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x410b96
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x410b96
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0xcfe], eax
mov eax, dword [ebp + ecx - 0x1118]
add eax, dword [ebp + ecx - 0x1114]
cmp eax, dword [ebp - 0xcba]
jbe 0x410b8e
mov dword [ebp - 0xcba], eax
inc dword [ebp - 0xd02]
jmp 0x410b44
push 0xa
push 0xd244d4f
push 0x52504545
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp - 0xcfe]
shl eax, 8
and eax, 0xffff0000
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0xd02], 0
cmp dword [ebp - 0xd02], 0x32
jae 0x4110b1
imul ecx, dword [ebp - 0xd02], 0x10
mov eax, dword [ebp + ecx - 0x1114]
test eax, eax
je 0x4110b1
mov dword [ebp - 0xcf6], eax
mov dword [ebp - 0xcf2], eax
mov eax, dword [ebp + ecx - 0x1118]
mov dword [ebp - 0xcfa], eax
add dword [ebp - 0xcf6], eax
add dword [ebp - 0xcf2], eax
mov eax, dword [ebp + ecx - 0x1110]
mov dword [ebp - 0xcee], eax
mov dword [ebp - 0xb52], 0xd1
mov dword [ebp - 0xb4e], 0
mov eax, dword [ebp - 0xd02]
mov byte [ebp - 0xb51], al
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x410caf
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x410ccb
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x410cdf
mov dword [ebp - 0x2354], 1
jmp 0x410d8e
lea edx, [ebp - 0x2150]
push edx
push 0x7d0
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x410d08
mov dword [ebp - 0x2354], 1
jmp 0x410d8e
test eax, eax
jne 0x410d74
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x410d54
xor eax, eax
jmp 0x410d5e
cmp eax, 0x20
jbe 0x410d5e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004124fd
mov dword [ebp - 0x2354], 1
jmp 0x410d8e
cmp byte [ebp - 0x214c], 0
je 0x410cdf
cmp byte [ebp - 0x214c], 8
je 0x410cdf
cmp dword [ebp - 0x2354], 0
jne 0x4110b1
mov edx, dword [esi + 0x30]
mov ecx, dword [ebp - 0xcfa]
cmp ecx, dword [ebp - 0xcf2]
jae 0x410dc0
add ecx, dword [ebp - 0xcba]
cmp byte [edx + ecx], 0
je 0x410dc0
inc dword [ebp - 0xcfa]
jmp 0x410d9e
mov ecx, dword [ebp - 0xcfa]
cmp ecx, dword [ebp - 0xcf2]
jae 0x411098
inc ecx
mov dword [ebp - 0xcf6], ecx
mov ecx, dword [ebp - 0xcf6]
cmp ecx, dword [ebp - 0xcf2]
jae 0x410dfb
add ecx, dword [ebp - 0xcba]
cmp byte [edx + ecx], 0
jne 0x410dfb
inc dword [ebp - 0xcf6]
jmp 0x410dd9
mov eax, dword [ebp - 0xcfa]
mov ecx, dword [ebp - 0xcf6]
cmp eax, ecx
jae 0x411098
sub ecx, eax
cmp ecx, 0x100
jbe 0x410e1e
mov ecx, 0x100
mov dword [ebp - 0x3ed], ecx
mov byte [ebp - 0xb52], 0xd2
add eax, dword [ebp - 0xcee]
mov byte [ebp - 0xb4f], ah
mov byte [ebp - 0xb4e], al
shr eax, 0x10
mov byte [ebp - 0xb51], ah
mov byte [ebp - 0xb50], al
mov byte [ebp - 0xb4c], ch
mov byte [ebp - 0xb4b], cl
shr ecx, 0x10
mov byte [ebp - 0xb4d], cl
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x410e88
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x410ea4
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x410eb8
mov dword [ebp - 0x2354], 1
jmp 0x411098
lea edx, [ebp - 0x2150]
push edx
push 0x12c
push 5
push 0
call fcn.004124ac
cmp eax, 0xffffffff
jne 0x410ee1
mov dword [ebp - 0x2354], 1
jmp 0x411098
test eax, eax
jne 0x410f50
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2150]
mov edx, esp
cmp eax, 0xffffffff
jne 0x410f2d
mov dword [ebp - 0x3e9], 0
mov ecx, dword [ebp - 0x3e9]
cmp ecx, dword [ebp - 0x3ed]
jae 0x410fed
mov ecx, dword [ebp - 0xcfa]
cmp ecx, dword [ebp - 0xcf2]
jb 0x4110b1
inc dword [ebp - 0xd02]
jmp 0x410c13
cmp dword [ebp - 0x2354], 0
jne 0x4110e6
push 0
push 0xa0d244b
push 0x4f5f4d4f
push 0x52504545
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
lea edx, [esi + 0x30]
push edx
call fcn.0041262e
cmp dword [ebp - 0x2354], 0
jne 0x41115e
mov dword [ebp - 0xb52], 0xe1
mov dword [ebp - 0xb4e], 0
test dword [ebp - 0xcd2], 0xf8ffff
jne 0x411133
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x40
push 5
push 0
call fcn.00412350
jmp 0x41114f
lea edx, [ebp - 0xb56]
push edx
push 0xc
push 0x320
push 0x140
push 5
push 0
call fcn.00412350
cmp eax, 0xffffffff
jne 0x41115e
mov dword [ebp - 0x2354], 1
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x41137e
cmp dword [esi + 0x270], 0x39366d24
jne 0x4111f8
cmp dword [esi + 0x274], 0x2434305f
jne 0x4111f8
cmp dword [esi + 0x278], 0x7a757349
jne 0x4111f8
cmp dword [esi + 0x27c], 0x48532075
jne 0x4111f8
cmp dword [esi + 0x280], 0x34353237
jne 0x4111f8
cmp dword [esi + 0x284], 0x38335b36
jne 0x4111f8
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x4111f8
cmp dword [esi + 0x28c], 0x4e414320
jne 0x4111f8
cmp byte [esi + 0x290], 0
jne 0x4111f8
push 1
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.004113e2
jmp 0x411307
cmp dword [esi + 0x270], 0x39366d24
jne 0x411261
cmp dword [esi + 0x274], 0x2437315f
jne 0x411261
cmp dword [esi + 0x278], 0x766c6f56
jne 0x411261
cmp dword [esi + 0x27c], 0x4853206f
jne 0x411261
cmp dword [esi + 0x280], 0x34353237
jne 0x411261
cmp dword [esi + 0x284], 0x30325b33
jne 0x411261
cmp dword [esi + 0x288], 0x5d6b3834
jne 0x411261
cmp dword [esi + 0x28c], 0x4e414320
jne 0x411261
cmp byte [esi + 0x290], 0
je 0x4112ce
cmp dword [esi + 0x270], 0x39366d24
jne 0x4112fa
cmp dword [esi + 0x274], 0x2438315f
jne 0x4112fa
cmp dword [esi + 0x278], 0x766c6f56
jne 0x4112fa
cmp dword [esi + 0x27c], 0x4853206f
jne 0x4112fa
cmp dword [esi + 0x280], 0x34353237
jne 0x4112fa
cmp dword [esi + 0x284], 0x38335b36
jne 0x4112fa
cmp dword [esi + 0x288], 0x5d6b3034
jne 0x4112fa
cmp dword [esi + 0x28c], 0x4e414320
jne 0x4112fa
cmp byte [esi + 0x290], 0
jne 0x4112fa
push 0x4113ac
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.00412656
cmp eax, 0xffffffff
je 0x4112eb
mov edx, dword [esi + 0x20]
mov byte [edx + eax + 0xd], 1
push 1
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.00411fe7
jmp 0x411307
push 1
push dword [esi + 0x14]
push dword [esi + 0x20]
call fcn.004114dd
test eax, eax
jne 0x41132d
push 0xa0d
push 0x2444494c
push 0x41565f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x14
jmp 0x41137e
cmp eax, 1
jne 0x411359
push 0xa0d
push 0x24444554
push 0x43455252
push 0x4f435f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x41137e
push 0xa0d
push 0x24444e55
push 0x4f465f54
push 0x4f4e5f4d
push 0x55534b43
push 0x45484324
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8