Function at 0x40d013
Capabilities:
Download url
Read file on windows
Receive data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
or dword [0x413528], 0xffffffff
sub esp, 0x18
mov dword [0x413534], 0x413140
push ebx
xor ebx, ebx
xor eax, eax
push esi
push edi
mov dword [0x413538], ebx
mov esi, 0x412960
mov dword [0x413530], ebx
mov edi, ebx
mov word [0x413140], ax
mov dword [0x41353c], esi
movsx eax, word [edi*2 + 0x401f58]
mov dword [ebp - 4], eax
test eax, eax
jne 0x40d142
cmp dword [0x413528], eax
jge 0x40d08a
call fcn.0040bb96
mov esi, dword [0x41353c]
mov ecx, eax
mov dword [0x413528], ecx
test ecx, ecx
jns 0x40d08a
mov dword [0x413528], ebx
movsx edx, word [edi*2 + 0x4027e8]
test edx, edx
je 0x40d10c
mov ecx, dword [0x413528]
add edx, ecx
cmp edx, 0x11d
ja 0x40d10c
movsx eax, word [edx*2 + 0x4024f8]
cmp eax, ecx
jne 0x40d10c
mov ecx, dword [0x413534]
cmp ecx, 0x413526
jae 0x40dcfd
movzx eax, word [edx*2 + 0x402108]
add esi, 4
or dword [0x413528], 0xffffffff
push 2
pop edx
add ecx, edx
movsx edi, ax
cmp dword [0x413530], 0
mov dword [0x413534], ecx
mov dword [0x41353c], esi
mov word [ecx], ax
mov eax, dword [0x413540]
mov dword [esi], eax
jle 0x40d052
dec dword [0x413530]
jmp 0x40d052
movsx edx, word [edi*2 + 0x402348]
test edx, edx
je 0x40d172
mov ecx, dword [0x413528]
add edx, ecx
cmp edx, 0x11d
ja 0x40d172
movsx eax, word [edx*2 + 0x4024f8]
cmp eax, ecx
jne 0x40d172
lfence
movsx eax, word [edx*2 + 0x402108]
mov dword [ebp - 4], eax
movsx ebx, word [eax*2 + 0x402a00]
mov edx, esi
mov ecx, ebx
add eax, 0xfffffff7
shl ecx, 2
sub edx, ecx
mov dword [ebp - 0x18], ecx
mov edx, dword [edx + 4]
mov dword [0x41352c], edx
cmp eax, 0x4e
ja case.0x40d16b.11
jmp dword [eax*4 + 0x40dd07]
cmp dword [0x413530], 0
jne 0x40d181
inc dword [0x413538]
cmp dword [0x413530], 3
jge 0x40d221
push 2
mov dword [0x413530], 3
pop edx
mov eax, dword [0x413534]
movsx eax, word [eax]
movsx eax, word [eax*2 + 0x4027e8]
test eax, eax
je 0x40d1c7
mov ecx, 0x100
add eax, ecx
cmp eax, 0x11d
ja 0x40d1c7
cmp word [eax*2 + 0x4024f8], cx
je 0x40d1ea
mov ecx, dword [0x413534]
cmp ecx, 0x413140
jbe 0x40dcfd
sub dword [0x413534], edx
sub esi, 4
mov dword [0x41353c], esi
jmp 0x40d19b
mov ecx, dword [0x413534]
cmp ecx, 0x413526
jae 0x40dcfd
movzx eax, word [eax*2 + 0x402108]
add ecx, edx
add esi, 4
movsx edi, ax
mov dword [0x413534], ecx
mov word [ecx], ax
mov eax, dword [0x413540]
mov dword [esi], eax
jmp 0x40d04c
cmp dword [0x413528], 0
je 0x40dcfd
or dword [0x413528], 0xffffffff
jmp 0x40d052
xor eax, eax
inc eax
mov dword [0x413550], eax
mov dword [0x413564], eax
mov dword [0x41354c], eax
jmp case.0x40d16b.11
xor eax, eax
inc eax
mov dword [0x413568], eax
jmp 0x40d242
mov edx, dword [esi]
push 4
pop eax
push 2
mov dword [0x413550], eax
mov dword [0x413564], eax
mov dword [0x41352c], edx
pop eax
jmp 0x40d247
xor ecx, ecx
mov edx, ecx
jmp 0x40d25d
mov ecx, dword [esi]
push 5
pop eax
mov dword [0x413550], eax
mov dword [0x413564], eax
mov dword [0x41354c], 3
call fcn.00407d5e
jmp 0x40db55
mov ecx, dword [esi]
call fcn.00408246
jmp case.0x40d16b.11
mov edx, dword [esi - 4]
mov ecx, dword [esi - 0x1c]
push 0xffffffffffffffff
call fcn.00407c08
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x1c]
jmp 0x40db4b
mov ecx, dword [esi - 4]
lea edx, [ebp - 8]
call fcn.0040b42e
mov ecx, dword [0x41353c]
mov edx, eax
push dword [ebp - 8]
mov ecx, dword [ecx - 0x1c]
call fcn.00407c08
mov ecx, dword [0x41353c]
mov dword [0x41352c], eax
mov ecx, dword [ecx - 4]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x1c]
jmp 0x40db50
xor edi, edi
push edi
push edi
push 0x412670
push dword [esi - 4]
push edi
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
je 0x40d329
push edi
push edi
push edi
push 0x700
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
push 0x4014e0
push 0x412670
call dword [sym.imp.msvcrt.dll__wfopen]
mov dword [0x41288c], eax
pop ecx
pop ecx
test eax, eax
jne 0x40d357
push edi
push edi
push edi
push 0x700
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
push eax
call dword [sym.imp.msvcrt.dll__fileno]
push eax
call dword [sym.imp.msvcrt.dll__filelength]
mov esi, eax
pop ecx
pop ecx
cmp esi, 0xffffffff
jne 0x40d37c
push edi
push edi
push edi
push 0x700
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, esi
call fcn.0040e04f
push dword [0x41288c]
mov edi, eax
push esi
push 1
push edi
call dword [sym.imp.msvcrt.dll_fread]
add esp, 0x10
inc eax
cmp eax, esi
jge 0x40d3ad
xor eax, eax
push eax
push eax
push eax
push 0x700
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
push dword [0x41288c]
call dword [sym.imp.msvcrt.dll_feof]
pop ecx
test eax, eax
jne 0x40d3df
push dword [0x41288c]
call dword [sym.imp.msvcrt.dll_ferror]
pop ecx
test eax, eax
je 0x40d3df
xor eax, eax
push eax
push eax
push eax
push 0x700
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
push dword [0x41288c]
call dword [sym.imp.msvcrt.dll_fclose]
pop ecx
xor ecx, ecx
mov edx, edi
mov dword [0x41288c], ecx
mov ecx, dword [0x41353c]
push esi
mov ecx, dword [ecx - 0x1c]
call fcn.00407c08
mov ecx, dword [0x41353c]
mov dword [0x41352c], eax
mov ecx, dword [ecx - 0x1c]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 4]
jmp 0x40db50
mov ecx, dword [esi - 0xc]
mov edx, 0x4015d8
push 0xffffffffffffffff
call fcn.00407c08
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0xc]
jmp 0x40db4b
mov dword [0x40f05c], 1
jmp case.0x40d16b.11
mov dword [0x40f05c], 0x10
jmp case.0x40d16b.11
push 2
pop eax
mov dword [0x40f05c], eax
jmp case.0x40d16b.11
mov dword [0x40f05c], 3
jmp case.0x40d16b.11
mov dword [0x40f05c], 5
jmp case.0x40d16b.11
mov dword [0x40f05c], 7
jmp case.0x40d16b.11
mov dword [0x40f05c], 0xa
jmp case.0x40d16b.11
mov dword [0x40f05c], 0xe
jmp case.0x40d16b.11
mov edx, dword [esi]
mov dword [0x41352c], edx
jmp case.0x40d16b.11
push 0x10
pop ecx
call fcn.0040e04f
xor ecx, ecx
mov dword [0x41352c], eax
inc ecx
call fcn.00407da5
mov edx, dword [0x41352c]
mov ecx, eax
mov dword [edx], ecx
jmp 0x40d4ea
lea ecx, [ecx + 4]
cmp dword [ecx], 0
jne 0x40d4e7
mov esi, dword [0x41353c]
xor ecx, ecx
xor eax, eax
cmp dword [esi - 0xc], ecx
jmp 0x40d536
push 0x10
pop ecx
call fcn.0040e04f
push 2
mov dword [0x41352c], eax
pop eax
mov ecx, eax
call fcn.00407da5
mov edx, dword [0x41352c]
mov ecx, eax
mov dword [edx], ecx
jmp 0x40d524
lea ecx, [ecx + 4]
cmp dword [ecx], 0
jne 0x40d521
mov esi, dword [0x41353c]
xor ecx, ecx
xor eax, eax
cmp dword [esi - 4], ecx
setne al
mov dword [0x413550], 6
mov dword [0x413564], 3
mov dword [0x41354c], 1
lea eax, [eax*4 + 1]
mov dword [edx + 4], eax
jmp case.0x40d16b.11
push 0x10
pop ecx
call fcn.0040e04f
mov esi, dword [0x41353c]
mov edx, eax
xor eax, eax
mov dword [0x413550], 7
xor ecx, ecx
cmp dword [esi - 4], ecx
setne al
lea eax, [eax*4 + 2]
mov dword [edx + 4], eax
mov dword [0x41352c], edx
mov dword [0x413564], 6
mov dword [0x41354c], 4
jmp case.0x40d16b.11
mov edx, dword [esi]
mov dword [0x413550], 8
jmp 0x40d594
mov eax, dword [esi - 8]
xor edi, edi
mov ecx, dword [eax]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x40d5cb
sub ecx, edx
mov edx, dword [esi]
sar ecx, 1
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
cmp ax, di
jne 0x40d5df
sub edx, esi
lea esi, [ecx + 0xa]
sar edx, 1
add esi, edx
lea ecx, [esi + esi]
call fcn.0040e04f
mov edi, eax
mov eax, dword [0x41353c]
push dword [eax]
mov eax, dword [eax - 8]
push dword [eax]
push 0x401e74
push esi
push edi
call dword [sym.imp.msvcrt.dll_swprintf_s]
mov eax, dword [0x41353c]
add esp, 0x14
mov ecx, dword [eax - 8]
mov ecx, dword [ecx]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx]
call fcn.0040e0b1
mov esi, dword [0x41353c]
mov dword [0x413550], 9
mov eax, dword [esi - 8]
mov dword [eax], edi
mov edx, dword [esi - 8]
jmp 0x40d594
push 0x10
pop ecx
call fcn.0040e04f
mov esi, dword [0x41353c]
mov edx, eax
xor eax, eax
mov dword [0x41352c], edx
xor ecx, ecx
cmp dword [esi - 0x10], ecx
setne al
lea eax, [eax*4 + 3]
mov dword [edx + 4], eax
mov eax, dword [esi]
mov dword [edx + 8], eax
mov eax, dword [esi - 8]
mov dword [edx], eax
jmp case.0x40d16b.11
mov edx, dword [esi - 4]
jmp 0x40d4bb
mov ecx, dword [esi]
call fcn.0040dfee
mov ecx, dword [0x41353c]
mov ecx, dword [ecx]
jmp 0x40db4b
mov ecx, dword [esi]
call fcn.0040dfee
mov edx, eax
mov dword [0x41352c], edx
jmp 0x40db5b
cmp dword [0x412918], 0x64
jne 0x40d726
mov edx, dword [0x412924]
mov ecx, dword [0x412920]
lea edx, [edx + 4]
call fcn.0040e079
mov dword [0x412920], eax
test eax, eax
jne 0x40d6f2
push 0x401e84
call dword [sym.imp.msvcrt.dll_perror]
mov eax, dword [0x412920]
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_LocalSize]
mov ecx, dword [0x41291c]
mov dword [0x412924], eax
imul eax, ecx, 0x190
add eax, dword [0x412920]
inc ecx
xor edi, edi
mov dword [0x412928], eax
mov dword [0x41291c], ecx
mov dword [0x412918], edi
jmp 0x40d728
xor edi, edi
mov eax, dword [0x412928]
push 0x10
pop ecx
mov dword [eax], edi
call fcn.0040e04f
mov esi, dword [0x41353c]
mov edx, eax
xor eax, eax
mov dword [0x412918], edi
mov dword [0x41291c], edi
mov dword [0x412928], edi
cmp dword [esi - 0xc], edi
mov dword [0x412924], edi
setne al
mov dword [0x413550], 0xa
lea eax, [eax*4 + 4]
mov dword [edx + 4], eax
mov eax, dword [0x412920]
mov dword [edx], eax
mov dword [0x412920], edi
jmp 0x40d594
cmp dword [0x412924], 0
jne 0x40d7b6
mov ecx, 0x190
call fcn.0040e04f
push eax
mov dword [0x412920], eax
call dword [sym.imp.KERNEL32.dll_LocalSize]
inc dword [0x41291c]
mov dword [0x412924], eax
mov eax, dword [0x412920]
jmp 0x40d808
cmp dword [0x412918], 0x64
jne 0x40d819
mov edx, dword [0x412924]
mov ecx, dword [0x412920]
lea edx, [edx + 0x190]
call fcn.0040e079
push eax
mov dword [0x412920], eax
call dword [sym.imp.KERNEL32.dll_LocalSize]
mov ecx, dword [0x41291c]
mov dword [0x412924], eax
imul eax, ecx, 0x190
add eax, dword [0x412920]
inc ecx
mov dword [0x41291c], ecx
xor ecx, ecx
mov dword [0x412918], ecx
mov edx, dword [0x41352c]
mov esi, dword [0x41353c]
mov dword [0x412928], eax
mov ecx, dword [0x412928]
mov eax, dword [esi]
add dword [0x412928], 4
inc dword [0x412918]
mov dword [ecx], eax
mov dword [0x413550], 0xb
mov dword [0x413564], 7
mov dword [0x41354c], 5
jmp case.0x40d16b.11
xor ecx, ecx
inc ecx
call fcn.00407da5
mov esi, eax
xor edi, edi
mov ecx, dword [esi]
mov dword [0x41352c], ecx
cmp dword [esi + 4], edi
je 0x40d880
push edi
push edi
push edi
push 0x800
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, dword [ecx + 4]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x1c]
call fcn.0040dfee
mov ecx, dword [0x41352c]
mov dword [ecx + 4], eax
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x1c]
call fcn.0040e0b1
push 0xc
pop ecx
call fcn.0040e04f
mov ecx, 0x401ea4
mov dword [esi], eax
call fcn.0040dfee
mov ecx, dword [esi]
push 4
mov dword [ecx + 4], eax
mov eax, dword [esi]
pop ecx
mov dword [eax], edi
call fcn.0040e04f
mov ecx, dword [esi]
mov dword [ecx + 8], eax
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov dword [eax], edi
call fcn.00407fd3
jmp 0x40db55
xor edi, edi
cmp dword [esi - 0x10], edi
je 0x40d98d
xor ecx, ecx
inc ecx
call fcn.00407da5
mov esi, eax
mov ecx, dword [esi]
mov dword [0x41352c], ecx
cmp dword [esi + 4], edi
je 0x40d920
push edi
push edi
push edi
push 0x800
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, dword [ecx + 4]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040dfee
mov ecx, dword [0x41352c]
mov dword [ecx + 4], eax
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040e0b1
push 0xc
pop ecx
call fcn.0040e04f
mov ecx, 0x401ea4
mov dword [esi], eax
call fcn.0040dfee
mov ecx, dword [esi]
push 4
mov dword [ecx + 4], eax
mov eax, dword [esi]
pop ecx
mov dword [eax], edi
call fcn.0040e04f
mov ecx, dword [esi]
mov dword [ecx + 8], eax
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov dword [eax], edi
call fcn.00407fd3
mov edx, dword [0x41352c]
jmp 0x40d9ca
push 0xc
pop ecx
call fcn.0040e04f
mov ecx, dword [0x41353c]
mov dword [0x41352c], eax
mov dword [eax + 8], edi
mov ecx, dword [ecx - 0x18]
call fcn.0040dfee
mov ecx, dword [0x41352c]
mov dword [ecx + 4], eax
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040e0b1
mov edx, dword [0x41352c]
mov dword [edx], edi
or dword [edx], 1
jmp 0x40db5b
xor edi, edi
cmp dword [esi - 0x10], edi
je 0x40da75
xor ecx, ecx
inc ecx
call fcn.00407da5
mov esi, eax
mov ecx, dword [esi]
mov dword [0x41352c], ecx
cmp dword [esi + 4], edi
je 0x40da08
push edi
push edi
push edi
push 0x800
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, dword [ecx + 4]
call fcn.0040e0b1
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040dfee
mov ecx, dword [0x41352c]
mov dword [ecx + 4], eax
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040e0b1
push 0xc
pop ecx
call fcn.0040e04f
mov ecx, 0x401ea4
mov dword [esi], eax
call fcn.0040dfee
mov ecx, dword [esi]
push 4
mov dword [ecx + 4], eax
mov eax, dword [esi]
pop ecx
mov dword [eax], edi
call fcn.0040e04f
mov ecx, dword [esi]
mov dword [ecx + 8], eax
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 8]
mov dword [eax], edi
call fcn.00407fd3
mov edx, dword [0x41352c]
jmp 0x40dab2
push 0xc
pop ecx
call fcn.0040e04f
mov ecx, dword [0x41353c]
mov dword [0x41352c], eax
mov dword [eax + 8], edi
mov ecx, dword [ecx - 0x18]
call fcn.0040dfee
mov ecx, dword [0x41352c]
mov dword [ecx + 4], eax
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 0x18]
call fcn.0040e0b1
mov edx, dword [0x41352c]
mov dword [edx], edi
push 2
pop eax
or dword [edx], eax
jmp 0x40db5b
xor ecx, ecx
mov edx, ecx
jmp 0x40d4bb
xor edx, edx
inc edx
jmp 0x40d4bb
xor eax, eax
push eax
push eax
push eax
push 0x601
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, dword [esi - 4]
call fcn.0040dfee
jmp 0x40db42
mov ecx, dword [esi - 4]
lea edx, [ebp - 0x10]
call fcn.0040b42e
mov esi, eax
test esi, esi
jne 0x40db06
push 0x401eb0
call dword [sym.imp.msvcrt.dll_perror]
pop ecx
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.0040df3f
test eax, eax
jns 0x40db38
push 0x401ecc
call dword [sym.imp.msvcrt.dll_perror]
pop ecx
xor eax, eax
push eax
push eax
push eax
push 0xb00
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov ecx, esi
call fcn.0040e0b1
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x41353c]
mov ecx, dword [ecx - 4]
mov dword [0x41352c], eax
call fcn.0040e0b1
mov edx, dword [0x41352c]
mov esi, dword [0x41353c]
mov ecx, dword [0x413534]
lea eax, [ebx + ebx]
sub esi, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 4]
mov dword [0x413534], ecx
mov dword [0x41353c], esi
movsx ebx, word [ecx]
movsx edi, word [eax*2 + 0x402738]
test ebx, ebx
jne 0x40dbe9
test edi, edi
jne 0x40dbe9
push 2
pop eax
add ecx, eax
add esi, 4
mov edi, eax
mov dword [0x413534], ecx
mov dword [0x41353c], esi
mov word [ecx], ax
mov dword [esi], edx
cmp dword [0x413528], ebx
jge 0x40dbd3
call fcn.0040bb96
mov esi, dword [0x41353c]
mov ecx, eax
mov dword [0x413528], ecx
test ecx, ecx
jns 0x40dbd5
mov dword [0x413528], ebx
jmp 0x40dbd5
xor ebx, ebx
cmp dword [0x413528], 0
jne 0x40d052
xor eax, eax
jmp 0x40dd00
movsx ecx, word [edi*2 + 0x401ef0]
test ecx, ecx
je 0x40dc15
add ecx, ebx
cmp ecx, 0x11d
ja 0x40dc15
movsx eax, word [ecx*2 + 0x4024f8]
cmp eax, ebx
jne 0x40dc15
movzx eax, word [ecx*2 + 0x402108]
jmp 0x40dc1d
movzx eax, word [edi*2 + 0x402998]
mov ecx, dword [0x413534]
cmp ecx, 0x413526
jae 0x40dcfd
push 2
pop ebx
add ecx, ebx
movsx edi, ax
add esi, 4
mov dword [0x413534], ecx
xor ebx, ebx
mov word [ecx], ax
mov dword [esi], edx
jmp 0x40d04c
xor ebx, ebx
inc ebx
mov ecx, ebx
call fcn.00407da5
mov ecx, eax
xor edx, edx
mov dword [0x413558], ecx
jmp 0x40dc65
lea ecx, [ecx + 4]
cmp dword [ecx], edx
jne 0x40dc62
mov eax, dword [0x41353c]
push 2
pop esi
mov dword [0x413550], esi
mov eax, dword [eax - 8]
mov dword [0x41355c], eax
mov eax, dword [0x413560]
mov dword [0x413564], esi
mov dword [0x41354c], ebx
test eax, eax
jne 0x40dc9c
mov dword [0x413560], ebx
jmp 0x40dcae
cmp eax, esi
jne 0x40dcae
push edx
push edx
push edx
push 0xd00
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov eax, esi
jmp 0x40dd00
mov eax, dword [esi - 8]
xor ecx, ecx
push 3
mov dword [0x41355c], eax
inc ecx
mov eax, dword [0x413560]
mov dword [0x41354c], ecx
pop ebx
mov dword [0x413550], ebx
mov dword [0x413564], ebx
test eax, eax
jne 0x40dce5
push 2
pop eax
mov dword [0x413560], eax
jmp 0x40dcf9
cmp eax, ecx
jne 0x40dcf9
xor eax, eax
push eax
push eax
push eax
push 0xd00
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_RaiseException]
mov eax, ebx
jmp 0x40dd00
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret