Function at 0x435b70
Capabilities:
Accept command line arguments
Link many functions at runtime
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43b176
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x438
call fcn.0040bb80
and eax, 0x800000ff
jns 0x435ba1
dec eax
or eax, 0xffffff00
inc eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
add eax, 0x400
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00406100
add esp, 4
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xa4]
call fcn.004023d0
mov dword [ebp - 4], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38c], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3a8], eax
push 0xae1170
lea ecx, [ebp - 0x88]
push ecx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3ac], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], 0
jmp 0x435c37
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0x88]
call fcn.00401f20
cmp dword [ebp - 0x18], eax
jae 0x435f5a
cmp dword [ebp - 0x18], 2
jne 0x435c77
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 4
jne 0x435ca3
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 6
jne 0x435ccf
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 9
jne 0x435cfb
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0xc
jne 0x435d27
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0xe
jne 0x435d53
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x12
jne 0x435d7f
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x16
jne 0x435dab
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x17
jne 0x435dd7
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x1a
jne 0x435e03
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x1b
jne 0x435e2f
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x1d
jne 0x435e5b
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x20
jne 0x435e87
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x21
jne 0x435eb3
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x23
jne 0x435edc
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x26
jne 0x435f05
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x28
jne 0x435f2e
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435f55
cmp dword [ebp - 0x18], 0x29
jne 0x435f55
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xa4]
call fcn.004020d0
jmp 0x435c2e
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov byte [ebp - 0xd], 1
lea ecx, [ebp - 0xa4]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jne 0x435fde
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp - 0x2f8]
push ecx
call fcn.00406480
add esp, 4
mov dl, byte [ebp - 0xd]
mov byte [ebp - 0x4d], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x4d]
jmp 0x438e9e
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x2ac]
add ecx, 0x400
push ecx
mov edx, dword [ebp - 0x40]
push edx
push 0
call dword [ebp - 0x2fc]
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
movzx edx, word [ecx]
cmp edx, 0x5a4d
jne 0x438e4a
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x48], ecx
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov edx, dword [ebp - 0x48]
cmp dword [edx], 0x4550
jne 0x438e44
push 0x44
push 0
lea eax, [ebp - 0x444]
push eax
call fcn.00408660
add esp, 0xc
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
push 0x10
push 0
lea ecx, [ebp - 0x2a4]
push ecx
call fcn.00408660
add esp, 0xc
lea ecx, [ebp - 0x128]
call fcn.004023d0
mov byte [ebp - 4], 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3b0], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3b4], eax
push 0xae1154
lea edx, [ebp - 0x10c]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3b8], eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], 0
jmp 0x436113
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x10c]
call fcn.00401f20
cmp dword [ebp - 0x28], eax
jae 0x4363de
cmp dword [ebp - 0x28], 2
jne 0x436153
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 4
jne 0x43617f
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 6
jne 0x4361ab
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 9
jne 0x4361d7
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0xc
jne 0x436203
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0xe
jne 0x43622f
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x12
jne 0x43625b
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x16
jne 0x436287
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x17
jne 0x4362b3
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x1a
jne 0x4362df
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x1b
jne 0x43630b
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x1d
jne 0x436337
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x20
jne 0x436360
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x21
jne 0x436389
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x23
jne 0x4363b2
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x4363d9
cmp dword [ebp - 0x28], 0x26
jne 0x4363d9
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x128]
call fcn.004020d0
jmp 0x43610a
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x128]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jne 0x43647c
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
push ecx
call fcn.00406480
add esp, 4
mov dl, byte [ebp - 0xd]
mov byte [ebp - 0x4e], dl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x4e]
jmp 0x438e9e
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x1d0]
call fcn.004023d0
mov byte [ebp - 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3bc], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3c0], eax
push 0xae118c
lea ecx, [ebp - 0x1b4]
push ecx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3c4], eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x30], 0
jmp 0x4364e2
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
lea ecx, [ebp - 0x1b4]
call fcn.00401f20
cmp dword [ebp - 0x30], eax
jae 0x436755
cmp dword [ebp - 0x30], 2
jne 0x436522
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 4
jne 0x43654e
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 6
jne 0x43657a
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 9
jne 0x4365a6
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0xc
jne 0x4365d2
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0xe
jne 0x4365fe
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x12
jne 0x43662a
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x16
jne 0x436656
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x17
jne 0x436682
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x1a
jne 0x4366ae
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x1b
jne 0x4366d7
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x1d
jne 0x436700
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x20
jne 0x436729
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x436750
cmp dword [ebp - 0x30], 0x21
jne 0x436750
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x1b4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004020d0
jmp 0x4364d9
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x1d0]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x436815
mov byte [ebp - 0xd], 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x304], ecx
mov edx, dword [ebp - 0x304]
push edx
call fcn.00406480
add esp, 4
mov al, byte [ebp - 0xd]
mov byte [ebp - 0x4f], al
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x4f]
jmp 0x438e9e
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x30c], ecx
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x240]
call fcn.004023d0
mov byte [ebp - 4], 6
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3cc], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3d0], eax
push 0xae1218
lea edx, [ebp - 0x224]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x34], 0
jmp 0x436889
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x224]
call fcn.00401f20
cmp dword [ebp - 0x34], eax
jae 0x436afc
cmp dword [ebp - 0x34], 2
jne 0x4368c9
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 4
jne 0x4368f5
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 6
jne 0x436921
mov edx, dword [ebp - 0x34]
push edx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 9
jne 0x43694d
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0xc
jne 0x436979
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0xe
jne 0x4369a5
mov edx, dword [ebp - 0x34]
push edx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x12
jne 0x4369d1
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x16
jne 0x4369fd
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x17
jne 0x436a29
mov edx, dword [ebp - 0x34]
push edx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x1a
jne 0x436a55
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x1b
jne 0x436a7e
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x1d
jne 0x436aa7
mov edx, dword [ebp - 0x34]
push edx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x20
jne 0x436ad0
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436af7
cmp dword [ebp - 0x34], 0x21
jne 0x436af7
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x240]
call fcn.004020d0
jmp 0x436880
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x240]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jne 0x436bda
mov byte [ebp - 0xd], 0
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x308], edx
mov eax, dword [ebp - 0x308]
push eax
call fcn.00406480
add esp, 4
mov cl, byte [ebp - 0xd]
mov byte [ebp - 0x50], cl
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x50]
jmp 0x438e9e
mov edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x334], edx
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x444]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_GetCommandLineW]
push eax
mov edx, dword [ebp - 0x40]
push edx
call dword [ebp - 0x30c]
test eax, eax
je 0x438de4
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
mov dword [ebp - 0xb0], 0
lea ecx, [ebp - 0x198]
call fcn.004023d0
mov byte [ebp - 4], 8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3d8], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3dc], eax
push 0xae1234
lea edx, [ebp - 0x17c]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c], 0
jmp 0x436c88
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x17c]
call fcn.00401f20
cmp dword [ebp - 0x2c], eax
jae 0x436f53
cmp dword [ebp - 0x2c], 2
jne 0x436cc8
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 4
jne 0x436cf4
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 6
jne 0x436d20
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 9
jne 0x436d4c
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0xc
jne 0x436d78
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0xe
jne 0x436da4
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x12
jne 0x436dd0
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x16
jne 0x436dfc
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x17
jne 0x436e28
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x1a
jne 0x436e54
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x1b
jne 0x436e80
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x1d
jne 0x436eac
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x20
jne 0x436ed5
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x21
jne 0x436efe
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x23
jne 0x436f27
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436f4e
cmp dword [ebp - 0x2c], 0x26
jne 0x436f4e
mov ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x198]
call fcn.004020d0
jmp 0x436c7f
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x198]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jne 0x43704f
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x310], eax
mov ecx, dword [ebp - 0x310]
push ecx
call fcn.00406480
add esp, 4
mov dl, byte [ebp - 0xd]
mov byte [ebp - 0x51], dl
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x51]
jmp 0x438e9e
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x314], eax
push 4
push 0x1000
push 0x14
push 0
call dword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov dword [ebp - 0x4c], eax
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0xf
and ecx, 0xfffffff0
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x4c]
mov dword [edx], 0x10007
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [ebp - 0x314]
test eax, eax
je 0x438d98
lea ecx, [ebp - 0xf0]
call fcn.004023d0
mov byte [ebp - 4], 0xa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3e4], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3e8], eax
push 0xae1138
lea edx, [ebp - 0xd4]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14], 0
jmp 0x437105
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xd4]
call fcn.00401f20
cmp dword [ebp - 0x14], eax
jae 0x437480
cmp dword [ebp - 0x14], 2
jne 0x437145
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 4
jne 0x437171
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 6
jne 0x43719d
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 9
jne 0x4371c9
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0xc
jne 0x4371f5
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0xe
jne 0x437221
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x12
jne 0x43724d
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x16
jne 0x437279
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x17
jne 0x4372a5
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x1a
jne 0x4372d1
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x1b
jne 0x4372fd
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x1d
jne 0x437329
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x20
jne 0x437355
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x21
jne 0x437381
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x23
jne 0x4373ad
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x26
jne 0x4373d9
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x28
jne 0x437402
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x29
jne 0x43742b
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x2a
jne 0x437454
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x43747b
cmp dword [ebp - 0x14], 0x2f
jne 0x43747b
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0xf0]
call fcn.004020d0
jmp 0x4370fc
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x144]
call fcn.004023d0
mov byte [ebp - 4], 0xc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3f0], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3f4], eax
push 0xae111c
lea edx, [ebp - 0x160]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1c], 0
jmp 0x4374e8
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x160]
call fcn.00401f20
cmp dword [ebp - 0x1c], eax
jae 0x43780b
cmp dword [ebp - 0x1c], 2
jne 0x437528
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 4
jne 0x437554
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 6
jne 0x437580
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 9
jne 0x4375ac
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0xc
jne 0x4375d8
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0xe
jne 0x437604
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x12
jne 0x437630
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x16
jne 0x43765c
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x17
jne 0x437688
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x1a
jne 0x4376b4
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x1b
jne 0x4376e0
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x1d
jne 0x43770c
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x20
jne 0x437738
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x21
jne 0x437764
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x23
jne 0x43778d
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x26
jne 0x4377b6
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x28
jne 0x4377df
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x437806
cmp dword [ebp - 0x1c], 0x29
jne 0x437806
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x160]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x144]
call fcn.004020d0
jmp 0x4374df
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x144]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jne 0x437943
mov byte [ebp - 0xd], 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x318]
push edx
call fcn.00406480
add esp, 4
mov al, byte [ebp - 0xd]
mov byte [ebp - 0x52], al
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x52]
jmp 0x438e9e
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0xac], ecx
lea ecx, [ebp - 0x208]
call fcn.004023d0
mov byte [ebp - 4], 0xe
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3fc], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x400], eax
push 0xae11a8
lea edx, [ebp - 0x1ec]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x20], 0
jmp 0x4379a9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1ec]
call fcn.00401f20
cmp dword [ebp - 0x20], eax
jae 0x437ca0
cmp dword [ebp - 0x20], 2
jne 0x4379e9
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 4
jne 0x437a15
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 6
jne 0x437a41
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 9
jne 0x437a6d
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0xc
jne 0x437a99
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0xe
jne 0x437ac5
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x12
jne 0x437af1
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x16
jne 0x437b1d
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x17
jne 0x437b49
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x1a
jne 0x437b75
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x1b
jne 0x437ba1
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x1d
jne 0x437bcd
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x20
jne 0x437bf9
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x21
jne 0x437c22
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x23
jne 0x437c4b
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x26
jne 0x437c74
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x437c9b
cmp dword [ebp - 0x20], 0x28
jne 0x437c9b
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x208]
call fcn.004020d0
jmp 0x4379a0
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x208]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x437df6
mov byte [ebp - 0xd], 0
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x31c], edx
mov eax, dword [ebp - 0x31c]
push eax
call fcn.00406480
add esp, 4
mov cl, byte [ebp - 0xd]
mov byte [ebp - 0x53], cl
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ec]
call fcn.00402160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x208]
call fcn.00402160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x53]
jmp 0x438e9e
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0x328], edx
lea ecx, [ebp - 0x278]
call fcn.004023d0
mov byte [ebp - 4], 0x10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x384], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x388], eax
push 0xae10e4
lea eax, [ebp - 0x25c]
push eax
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x24], 0
jmp 0x437e5c
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x25c]
call fcn.00401f20
cmp dword [ebp - 0x24], eax
jae 0x438127
cmp dword [ebp - 0x24], 2
jne 0x437e9c
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 4
jne 0x437ec8
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 6
jne 0x437ef4
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 9
jne 0x437f20
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0xc
jne 0x437f4c
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0xe
jne 0x437f78
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x12
jne 0x437fa4
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x16
jne 0x437fd0
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x17
jne 0x437ffc
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x1a
jne 0x438028
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x1b
jne 0x438054
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x1d
jne 0x438080
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x20
jne 0x4380a9
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x21
jne 0x4380d2
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x23
jne 0x4380fb
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x438122
cmp dword [ebp - 0x24], 0x26
jne 0x438122
mov edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0x25c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x278]
call fcn.004020d0
jmp 0x437e53
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x278]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jne 0x43829b
mov byte [ebp - 0xd], 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x320]
push edx
call fcn.00406480
add esp, 4
mov al, byte [ebp - 0xd]
mov byte [ebp - 0x57], al
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x25c]
call fcn.00402160
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
call fcn.00402160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ec]
call fcn.00402160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x208]
call fcn.00402160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x57]
jmp 0x438e9e
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x338], ecx
lea ecx, [ebp - 0x2f4]
call fcn.004023d0
mov byte [ebp - 4], 0x12
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x390], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x394], eax
push 0xae1090
lea edx, [ebp - 0x2d8]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x398], eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x38], 0
jmp 0x438301
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x2d8]
call fcn.00401f20
cmp dword [ebp - 0x38], eax
jae 0x43851c
cmp dword [ebp - 0x38], 2
jne 0x438341
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 4
jne 0x43836d
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 6
jne 0x438399
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 9
jne 0x4383c5
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0xc
jne 0x4383f1
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0xe
jne 0x43841d
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x12
jne 0x438449
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x16
jne 0x438475
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x17
jne 0x43849e
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x1a
jne 0x4384c7
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x1b
jne 0x4384f0
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x438517
cmp dword [ebp - 0x38], 0x1d
jne 0x438517
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x2d8]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x2f4]
call fcn.004020d0
jmp 0x4382f8
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
lea ecx, [ebp - 0x2f4]
call fcn.00401f40
push eax
call fcn.00438eb0
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jne 0x4386ae
mov byte [ebp - 0xd], 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x324], ecx
mov edx, dword [ebp - 0x324]
push edx
call fcn.00406480
add esp, 4
mov al, byte [ebp - 0xd]
mov byte [ebp - 0x54], al
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2d8]
call fcn.00402160
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f4]
call fcn.00402160
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x25c]
call fcn.00402160
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
call fcn.00402160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ec]
call fcn.00402160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x208]
call fcn.00402160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x54]
jmp 0x438e9e
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x33c], ecx
push 0
push 4
lea edx, [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa4]
add ecx, 8
push ecx
mov edx, dword [ebp - 0x2a4]
push edx
call dword [ebp - 0x328]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax + 0x34]
jne 0x438b18
lea ecx, [ebp - 0x360]
call fcn.004023d0
mov byte [ebp - 4], 0x14
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x39c], esp
push 0xae11fc
call fcn.00402420
mov dword [ebp - 0x3a0], eax
push 0xae10c8
lea edx, [ebp - 0x37c]
push edx
call fcn.0043a910
add esp, 0x24
mov dword [ebp - 0x3a4], eax
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x3c], 0
jmp 0x43874b
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x37c]
call fcn.00401f20
cmp dword [ebp - 0x3c], eax
jae 0x4388e2
cmp dword [ebp - 0x3c], 2
jne 0x43878b
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 4
jne 0x4387b7
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 6
jne 0x4387e3
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 9
jne 0x43880f
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx edx, byte [eax]
sub edx, 1
push edx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 0xc
jne 0x43883b
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx ecx, byte [eax]
add ecx, 1
push ecx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 0xe
jne 0x438864
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx eax, byte [eax]
sub eax, 1
push eax
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 0x12
jne 0x43888d
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx edx, byte [eax]
add edx, 1
push edx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 0x16
jne 0x4388b6
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx ecx, byte [eax]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x4388dd
cmp dword [ebp - 0x3c], 0x17
jne 0x4388dd
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x37c]
call fcn.00402050
movsx eax, byte [eax]
add eax, 1
push eax
lea ecx, [ebp - 0x360]
call fcn.004020d0
jmp 0x438742
lea ecx, [ebp - 0x360]
call fcn.00401f40
push eax
call dword [0xae1084]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jne 0x43891b
lea ecx, [ebp - 0x360]
call fcn.00401f40
push eax
call dword [0xae108c]
mov dword [ebp - 0xb4], eax
lea ecx, [ebp - 0xf0]
call fcn.00401f40
push eax
mov ecx, dword [ebp - 0xb4]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jne 0x438acc
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
call dword [ebp - 0x294]
mov byte [ebp - 0xd], 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x32c], ecx
mov edx, dword [ebp - 0x32c]
push edx
call fcn.00406480
add esp, 4
mov al, byte [ebp - 0xd]
mov byte [ebp - 0x55], al
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x37c]
call fcn.00402160
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x360]
call fcn.00402160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2d8]
call fcn.00402160
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f4]
call fcn.00402160
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x25c]
call fcn.00402160
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
call fcn.00402160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ec]
call fcn.00402160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x208]
call fcn.00402160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x55]
jmp 0x438e9e
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x330], ecx
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov edx, dword [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x2a4]
push eax
call dword [ebp - 0x330]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x37c]
call fcn.00402160
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x360]
call fcn.00402160
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov dword [ebp - 0x64], 0
cmp dword [ebp - 0x64], 0x3000
je 0x438b41
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
jmp 0x438b2d
push 0x40
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [ebp - 0x334]
mov dword [ebp - 0x6c], eax
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
cmp dword [ebp - 0x6c], 0
je 0x438cee
push 0
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + 0x54]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp - 0x2a4]
push eax
call dword [ebp - 0xac]
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0xf8
je 0x438bc4
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
jmp 0x438bb0
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 0x28
je 0x438bdc
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
jmp 0x438bcb
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x68], 0
jmp 0x438bf5
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x48]
movzx edx, word [ecx + 6]
cmp dword [ebp - 0x68], edx
jge 0x438c7b
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
add edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x60]
add edx, eax
mov dword [ebp - 0xa8], edx
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x44], edx
push 0
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp + 8]
add eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x6c]
add edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x2a4]
push eax
call dword [ebp - 0xac]
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x60]
mov dword [ebp - 0x44], ecx
jmp 0x438bec
push 0
push 4
mov edx, dword [ebp - 0x48]
add edx, 0x34
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa4]
add ecx, 8
push ecx
mov edx, dword [ebp - 0x2a4]
push edx
call dword [ebp - 0xac]
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x6c]
add ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xb0], ecx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [ebp - 0x338]
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov edx, dword [ebp - 0x2a0]
push edx
call dword [ebp - 0x33c]
jmp 0x438d00
push 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [ebp - 0x294]
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2d8]
call fcn.00402160
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f4]
call fcn.00402160
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x25c]
call fcn.00402160
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
call fcn.00402160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ec]
call fcn.00402160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x208]
call fcn.00402160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x144]
call fcn.00402160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
call fcn.00402160
jmp 0x438dc4
cmp dword [ebp - 0xb0], 0xa
jge 0x438dc0
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
jmp 0x43705b
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x17c]
call fcn.00402160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x198]
call fcn.00402160
jmp 0x438de8
mov byte [ebp - 0xd], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x224]
call fcn.00402160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.00402160
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b4]
call fcn.00402160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00402160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.00402160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.00402160
jmp 0x438e48
mov byte [ebp - 0xd], 0
jmp 0x438e4e
mov byte [ebp - 0xd], 0
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x340], eax
mov ecx, dword [ebp - 0x340]
push ecx
call fcn.00406480
add esp, 4
mov dl, byte [ebp - 0xd]
mov byte [ebp - 0x56], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.00402160
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402160
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret