Function at 0x41013e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x24c
mov eax, 0x424b4c
call fcn.004231c0
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x23c], ebx
call fcn.004071a4
mov dword [ebp - 0x240], eax
push 3
lea eax, [ebp - 0x220]
mov dword [ebp - 4], 1
push 0x42de90
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.Version
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 2
call fcn.0040c4ad
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 4]
cmp byte [eax + 0x600], bl
je 0x41021c
call fcn.0040117a
mov eax, dword [eax + 4]
add eax, 0x600
jmp 0x410221
mov eax, 0x42a2c0
push eax
lea eax, [ebp - 0x220]
push 0x42de9c
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.ToolVer
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 4
call fcn.0040c4ad
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
lea ecx, [ebp - 0x220]
mov eax, dword [eax + 4]
push dword [eax + 0x5d4]
call fcn.0040655d
mov dword [ebp - 0x244], 2
push ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x230]
push dword [ebp - 0x220]
mov edx, SysReAllocString
call fcn.0041929e
pop ecx
pop ecx
mov dword [ebp - 0x244], 6
push str.AppName
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 7
call fcn.0040c4ad
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x230]
push eax
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov ecx, eax
call fcn.00401cd8
push eax
mov edi, 0x42aa64
push edi
lea eax, [ebp - 0x230]
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.AppVer
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 9
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 4]
push dword [eax + 0x3c]
lea eax, [ebp - 0x230]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.ErrAdd
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xb
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
call fcn.00405a56
mov esi, eax
push str.ModuleName
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xd
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov ecx, dword [eax + 0x2c]
sub ecx, 0x10
call fcn.00406bb4
mov dword [ebp - 0x244], 0xe
lea esi, [eax + 0x10]
mov dword [ebp - 0x230], esi
push str.ModBaseAddr
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xf
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x230]
push eax
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 1
call fcn.0040188c
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x248]
push eax
lea edx, [ebp - 0x224]
lea ecx, [ebp - 0x220]
call fcn.004159cd
push dword [ebp - 0x220]
lea eax, [ebp - 0x230]
push edi
push eax
call fcn.00415ace
add esp, 0x14
mov esi, eax
push str.OSID
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x11
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
push dword [ebp - 0x224]
lea eax, [ebp - 0x230]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.OSMajVer
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x13
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
push dword [ebp - 0x248]
lea eax, [ebp - 0x248]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.OSMinVer
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x15
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x248]
lea ecx, [ecx - 0x10]
call fcn.0040188c
push dword [ebp - 0x228]
lea eax, [ebp - 0x228]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.OSBuildNo
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x17
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040f76a
call fcn.0041baab
push eax
lea eax, [ebp - 0x228]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push 0x42defc
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x19
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 4]
push dword [eax + 0x1c]
lea eax, [ebp - 0x228]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push 0x42df00
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1b
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov ecx, dword [eax + 0x1c]
sub ecx, 0x10
call fcn.00406bb4
lea esi, [eax + 0x10]
mov dword [ebp - 0x244], 0x1e
mov dword [ebp - 0x228], esi
push 0x42df04
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1d
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x228]
push eax
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 1
call fcn.0040188c
push 3
mov edi, 0x42df14
lea eax, [ebp - 0x228]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push 0x42df10
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1f
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
push ebx
lea eax, [ebp - 0x228]
push edi
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.UserAction
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x21
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 4]
push dword [eax + 0x2c]
lea eax, [ebp - 0x228]
push 0x42aa64
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.LCID
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x23
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
lea ecx, [ebp - 0x228]
mov eax, dword [eax + 4]
add eax, 0x55c
push eax
call fcn.0040655d
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
push 0x3e
pop edi
mov dword [ebp - 0x244], edi
mov esi, dword [ecx + 4]
call fcn.0040188c
test esi, esi
jle 0x410b77
call fcn.0040117a
lea ecx, [ebp - 0x220]
mov eax, dword [eax + 4]
add eax, 0x55c
push eax
call fcn.0040655d
push 0x7e
pop edi
mov dword [ebp - 0x244], edi
push ecx
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x224]
push dword [ebp - 0x220]
push 0x3c
pop edx
call fcn.0041929e
pop ecx
pop ecx
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov esi, dword [ebp - 0x224]
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x228], eax
test eax, eax
je 0x410b6b
cmp dword [esi - 4], 1
jle 0x410af7
push eax
lea ecx, [ebp - 0x224]
call fcn.00406918
mov esi, dword [ebp - 0x224]
mov eax, dword [ebp - 0x228]
push eax
mov edx, esi
lea ecx, [ebp - 0x248]
call fcn.0041578d
mov edi, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x230]
mov dword [esp], str.Account
call fcn.0040c4ad
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push edi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x248]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov edi, dword [ebp - 0x244]
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 1
call fcn.0040188c
cmp dword [0x437e9c], 0
je 0x410c38
push 0x20a
lea eax, [ebp - 0x21c]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x21c]
call fcn.00415a5d
test eax, eax
je 0x410c38
push ecx
lea eax, [ebp - 0x21c]
mov edx, SysReAllocString
push eax
lea ecx, [ebp - 0x230]
call fcn.0041929e
pop ecx
or edi, 0x80
pop ecx
mov dword [ebp - 0x244], edi
push str.HostName
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x2a
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x230]
push eax
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x248], edi
call fcn.0040f596
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x254]
cmp dword [eax - 0xc], 0
je 0x410d1b
push ecx
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x224]
call fcn.0041929e
pop ecx
pop ecx
mov byte [ebp - 4], 0x2d
mov esi, dword [ebp - 0x224]
cmp dword [esi - 4], 1
mov edi, dword [esi - 0xc]
jle 0x410c96
push edi
lea ecx, [ebp - 0x224]
call fcn.00406918
mov esi, dword [ebp - 0x224]
push edi
mov edx, esi
lea ecx, [ebp - 0x228]
call fcn.0041578d
mov edi, eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x220]
mov dword [esp], str.Contact
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push edi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 0x2c
call fcn.0040188c
mov edi, dword [ebp - 0x244]
jmp 0x410da7
call fcn.0040117a
mov eax, dword [eax + 4]
test byte [eax + 4], 2
je 0x410da7
mov esi, str.a999_20
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
push eax
mov edx, esi
lea ecx, [ebp - 0x228]
call fcn.0041578d
pop ecx
pop ecx
mov esi, eax
push str.Contact
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x30
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 8]
test eax, eax
je 0x410db8
mov eax, dword [eax + 4]
jmp 0x410dba
mov eax, ebx
push eax
lea eax, [ebp - 0x228]
push 0x42aa64
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.Ext1
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x32
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 8]
test eax, eax
je 0x410e42
mov eax, dword [eax + 8]
jmp 0x410e44
mov eax, ebx
push eax
lea eax, [ebp - 0x228]
push 0x42aa64
push eax
call fcn.00415ace
add esp, 0xc
mov esi, eax
push str.Ext2
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x34
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push esi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
call fcn.0040117a
mov eax, dword [eax + 8]
test eax, eax
je 0x410ecc
add eax, 0xc
jmp 0x410ed1
mov eax, 0x42b7cc
push eax
lea ecx, [ebp - 0x250]
call fcn.0040655d
or edi, 0x100
mov dword [ebp - 0x244], edi
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x250]
cmp dword [eax - 0xc], 0
je 0x410fac
push ecx
push eax
mov edx, 0x200
lea ecx, [ebp - 0x224]
call fcn.0041929e
pop ecx
pop ecx
mov byte [ebp - 4], 0x37
mov esi, dword [ebp - 0x224]
cmp dword [esi - 4], 1
mov edi, dword [esi - 0xc]
jle 0x410f36
push edi
lea ecx, [ebp - 0x224]
call fcn.00406918
mov esi, dword [ebp - 0x224]
push edi
mov edx, esi
lea ecx, [ebp - 0x228]
call fcn.0041578d
mov edi, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x220]
mov dword [esp], str.Ext3
call fcn.0040c4ad
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x240]
call fcn.00412fcf
mov ecx, dword [ebp - 0x238]
push edi
add ecx, 0x14
call fcn.0040607e
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x228]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [esi - 0x10]
call fcn.0040188c
mov byte [ebp - 4], 0x3a
call fcn.00401b0a
mov edi, dword [ebp - 0x24c]
mov ecx, edi
push eax
call fcn.00401564
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x248]
or eax, 0x101
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x240]
mov esi, dword [eax]
cmp esi, eax
je 0x41107b
test ebx, ebx
je 0x411005
push 0x42ddec
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
pop ecx
push eax
push 0x42ddec
mov ecx, edi
call fcn.00406e0d
push dword [esi + 0x10]
mov ecx, edi
call fcn.00412ea7
push 0x42dbcc
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
pop ecx
push eax
push 0x42dbcc
mov ecx, edi
call fcn.00406e0d
mov eax, dword [esi + 0x14]
mov ecx, edi
push dword [eax - 0xc]
push eax
call fcn.00406e0d
mov eax, dword [esi + 8]
inc ebx
cmp byte [eax + 0xd], 0
je 0x411059
mov eax, dword [esi + 4]
jmp 0x41104f
cmp esi, dword [eax + 8]
jne 0x411055
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x411045
mov esi, eax
jmp 0x41106f
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x41106f
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x411063
cmp esi, dword [ebp - 0x240]
jne 0x410fe8
mov edx, dword [edi]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.00419201
mov esi, dword [ebp - 0x24c]
push esi
push str.cmd3:_s
push 0x426ad8
call fcn.00419776
add esp, 0x10
lea ecx, [esi - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x250]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x254]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x258]
push ecx
push dword [ecx]
lea ecx, [ebp - 0x240]
push eax
call fcn.004069d6
mov ecx, dword [ebp - 0x240]
push 0x18
pop edx
call fcn.004082f6
mov eax, edi
call fcn.0042316a
ret 4