Function at 0x401ffc
Capabilities:
Delete file
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400c
push edi
lea edi, [ebp - 0x400c]
push 1
call dword [ebx + 0x44]
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0xe
je 0x402025
call dword [ebx + 0x3c]
cmp eax, 1
jne 0x4047e6
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x402199
push eax
push edi
call fcn.00404cd8
cmp eax, 1
jne 0x402059
mov dword [edi], 0x4050d9
jmp 0x40208a
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x402197
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea ecx, [ecx + 4]
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x402197
lea edx, [ebp - 0x3dac]
push edx
lea edx, [ebp - 0x3dfc]
push edx
lea edx, [ebp - 0x3e4c]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x402197
lea ecx, [ebp - 0x3e4c]
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0x3dfc]
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
jmp 0x4021d9
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x4047e6
mov dword [ebp - 0x2b48], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea ecx, [ecx + 2]
push ecx
push eax
lea edx, [ebp - 0x3d5c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x2b44], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40223f
cmp eax, 0xb
jne 0x402354
mov byte [ebp - 0x630], 0x29
mov byte [ebp - 0x62f], 2
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 2
lea edx, [ebp - 0x630]
push edx
call dword [ebx + 0x40]
cmp eax, 8
je 0x4022be
push 0
push 0xa0d3123
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x402354
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0x624], esp
push 0x706870
push 0x2e747365
push 0x745f3374
push 0x63655f69
push 0x68706c65
push 0x645f6874
push 0x6f72776e
push 0x656b2f74
push 0x7365742f
lea edx, [ebp - 0x62c]
push edx
lea edx, [ebp - 0x3c62]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 0x624]
call fcn.00405bfd
mov dword [ebp - 0x2b44], eax
add esp, 0x24
add esp, 0xc
test eax, eax
jne 0x402354
mov byte [ebp - 0x62e], 0x2a
mov byte [ebp - 0x62d], 0xa
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xa
lea edx, [ebp - 0x62e]
push edx
call dword [ebx + 0x40]
mov dword [ebp - 0x2b44], 0
cmp dword [esi + 0x270], 0x6e656b24
jne 0x4023d6
cmp dword [esi + 0x274], 0x746f7277
jne 0x4023d6
cmp dword [esi + 0x278], 0x24393968
jne 0x4023d6
cmp dword [esi + 0x27c], 0x706c6544
jne 0x4023d6
cmp dword [esi + 0x280], 0x45206968
jne 0x4023d6
cmp dword [esi + 0x284], 0x5b335443
jne 0x4023d6
cmp dword [esi + 0x288], 0x33373033
jne 0x4023d6
cmp dword [esi + 0x28c], 0x43205d6b
jne 0x4023d6
cmp word [esi + 0x290], 0x4e41
jne 0x4023d6
cmp byte [esi + 0x292], 0
je 0x402482
cmp dword [esi + 0x270], 0x6e656b24
jne 0x4047de
cmp dword [esi + 0x274], 0x746f7277
jne 0x4047de
cmp dword [esi + 0x278], 0x54282468
jne 0x4047de
cmp dword [esi + 0x27c], 0x29545345
jne 0x4047de
cmp dword [esi + 0x280], 0x706c6544
jne 0x4047de
cmp dword [esi + 0x284], 0x45206968
jne 0x4047de
cmp dword [esi + 0x288], 0x5b335443
jne 0x4047de
cmp dword [esi + 0x28c], 0x33373033
jne 0x4047de
cmp dword [esi + 0x290], 0x43205d6b
jne 0x4047de
cmp word [esi + 0x294], 0x4e41
jne 0x4047de
cmp byte [esi + 0x296], 0
jne 0x4047de
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x40251d
cmp dword [esi + 0x14], 0x10000
jbe 0x4024cd
mov ecx, dword [esi + 0x20]
mov eax, dword [ecx + 0x10000]
mov dword [ebp - 0x980], eax
mov eax, dword [ecx + 0x10004]
mov dword [ebp - 0x97c], eax
mov eax, dword [ecx + 0x10008]
mov dword [ebp - 0x978], eax
mov eax, dword [ecx + 0x1000c]
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x950], 0x240000
mov dword [ebp - 0x94c], 0x2ff000
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x402578
mov dword [ebp - 0x950], 0x240000
mov dword [ebp - 0x94c], 0x2ff000
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402596
cmp eax, 0xb
je 0x402596
cmp eax, 0x17
je 0x402596
cmp eax, 0x18
jne 0x4046e1
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4025c4
mov dword [ebp - 0x2b44], 1
jmp 0x4046e1
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4025f1
mov dword [ebp - 0x2b44], 1
jmp 0x4046cb
mov dword [ebp - 0x2b38], 0xf900da18
mov dword [ebp - 0x2b34], 0xf9da18
mov dword [ebp - 0x988], 0
mov byte [ebp - 0xb0a], 0
mov byte [ebp - 0xaca], 0
push 0
push 0
push 4
push 0
push 0x140
push 0
push 6
push 0
push 0
push 4
push 0
push 0x140
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x140
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 0x620], esp
mov eax, dword [ebp - 0x2b34]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x2b38]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 0x620]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40268e
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402769
mov eax, dword [ebp - 0x2b38]
mov dword [ebp - 0x2b30], eax
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x4026e2
cmp eax, 0xffffffff
jne 0x4026ee
mov dword [ebp - 0x2b44], 1
jmp 0x402769
cmp byte [ebp - 0x1b26], 0x50
je 0x402769
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402747
xor eax, eax
jmp 0x402751
cmp eax, 0x20
jbe 0x402751
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4027f7
mov dword [ebp - 0x2b2c], 0x951a
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x4027b1
cmp eax, 0xffffffff
jne 0x4027bd
mov dword [ebp - 0x2b44], 1
jmp 0x4027f7
cmp byte [ebp - 0x1b26], 0x5a
jne 0x4027f7
sub eax, 5
xor ecx, ecx
cmp ecx, 0x40
jae 0x4027ef
cmp ecx, eax
jae 0x4027ef
mov dl, byte [ebp + ecx - 0x1b25]
cmp dl, 0
je 0x4027ef
cmp dl, 0xff
je 0x4027ef
mov byte [ebp + ecx - 0xb0a], dl
inc ecx
jmp 0x4027cb
mov byte [ebp + ecx - 0xb0a], 0
cmp dword [ebp - 0x2b44], 0
jne 0x402885
mov dword [ebp - 0x2b2c], 0x901a
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x40283f
cmp eax, 0xffffffff
jne 0x40284b
mov dword [ebp - 0x2b44], 1
jmp 0x402885
cmp byte [ebp - 0x1b26], 0x5a
jne 0x402885
sub eax, 5
xor ecx, ecx
cmp ecx, 0x40
jae 0x40287d
cmp ecx, eax
jae 0x40287d
mov dl, byte [ebp + ecx - 0x1b25]
cmp dl, 0
je 0x40287d
cmp dl, 0xff
je 0x40287d
mov byte [ebp + ecx - 0xaca], dl
inc ecx
jmp 0x402859
mov byte [ebp + ecx - 0xaca], 0
cmp dword [ebp - 0x2b44], 0
jne 0x402933
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x402933
lea ecx, [ebp - 0xb0a]
push 0xa0d73
push 0x25203a24
push 0x5245424d
push 0x554e5f54
push 0x5241505f
push 0x45524157
push 0x54464f53
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0xaca]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3f50]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3f50]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x402947
cmp eax, 0xa
jne 0x4046cb
cmp dword [ebp - 0x2b44], 0
jne 0x402a16
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x40298f
cmp eax, 0xffffffff
jne 0x40299b
mov dword [ebp - 0x2b44], 1
jmp 0x402a16
cmp byte [ebp - 0x1b26], 0x50
je 0x402a16
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4029f4
xor eax, eax
jmp 0x4029fe
cmp eax, 0x20
jbe 0x4029fe
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402bda
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x127
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x402a68
cmp eax, 0xffffffff
jne 0x402a77
mov dword [ebp - 0x2b44], 1
jmp 0x402bda
cmp byte [ebp - 0x1b26], 0x7f
jne 0x402b5d
cmp byte [ebp - 0x1b24], 0x36
jne 0x402aa2
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a2d
jmp 0x402ae4
cmp byte [ebp - 0x1b24], 0x37
jne 0x402ac4
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a2d
jmp 0x402ae4
cmp byte [ebp - 0x1b24], 0x22
jne 0x402ae4
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402a2d
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402b36
xor eax, eax
jmp 0x402b40
cmp eax, 0x20
jbe 0x402b40
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x402bda
cmp byte [ebp - 0x1b26], 0x67
je 0x402bda
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402bb8
xor eax, eax
jmp 0x402bc2
cmp eax, 0x20
jbe 0x402bc2
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402e11
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa0c], 0x4000600
mov dword [ebp - 0xa08], 0x6000400
mov dword [ebp - 0xa04], 0xa1f455b4
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x402c9d
push 0
push 0xa0d3223
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x402e11
mov dword [ebp - 0x2b2c], 0x227
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x402ce4
cmp eax, 0xffffffff
jne 0x402cf3
mov dword [ebp - 0x2b44], 1
jmp 0x402e11
cmp byte [ebp - 0x1b26], 0x7f
jne 0x402d96
cmp byte [ebp - 0x1b24], 0x36
je 0x402d12
cmp byte [ebp - 0x1b24], 0x37
jne 0x402d22
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x402a2d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402d72
xor eax, eax
jmp 0x402d7c
cmp eax, 0x20
jbe 0x402d7c
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x402e11
cmp byte [ebp - 0x1b26], 0x67
je 0x402e11
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402def
xor eax, eax
jmp 0x402df9
cmp eax, 0x20
jbe 0x402df9
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402ee0
mov dword [ebp - 0x2b2c], 0x8910
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x402e59
cmp eax, 0xffffffff
jne 0x402e65
mov dword [ebp - 0x2b44], 1
jmp 0x402ee0
cmp byte [ebp - 0x1b26], 0x50
je 0x402ee0
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402ebe
xor eax, eax
jmp 0x402ec8
cmp eax, 0x20
jbe 0x402ec8
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x402faf
mov dword [ebp - 0x2b2c], 0x10211
lea edx, [ebp - 0x2b30]
push edx
push 7
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x402f28
cmp eax, 0xffffffff
jne 0x402f34
mov dword [ebp - 0x2b44], 1
jmp 0x402faf
cmp byte [ebp - 0x1b26], 0x51
je 0x402faf
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x402f8d
xor eax, eax
jmp 0x402f97
cmp eax, 0x20
jbe 0x402f97
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4031cc
mov dword [ebp - 0x2b3c], 0
cmp dword [ebp - 0x2b3c], 2
jae 0x40318c
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x327
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403018
cmp eax, 0xffffffff
jne 0x403027
mov dword [ebp - 0x2b44], 1
jmp 0x40318a
cmp byte [ebp - 0x1b26], 0x7f
jne 0x40310d
cmp byte [ebp - 0x1b24], 0x36
jne 0x403052
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fdd
jmp 0x403094
cmp byte [ebp - 0x1b24], 0x37
jne 0x403074
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fdd
jmp 0x403094
cmp byte [ebp - 0x1b24], 0x22
jne 0x403094
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x402fdd
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4030e6
xor eax, eax
jmp 0x4030f0
cmp eax, 0x20
jbe 0x4030f0
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x40318a
cmp byte [ebp - 0x1b26], 0x67
je 0x40318a
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403168
xor eax, eax
jmp 0x403172
cmp eax, 0x20
jbe 0x403172
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x4031cc
push 0
push 0xa0d244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x28
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403440
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
cmp dword [ebp - 0x2b3c], 0
jne 0x40322c
mov dword [ebp - 0xa88], 3
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xa00], eax
jmp 0x403236
mov dword [ebp - 0xa88], 2
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x4032b6
push 0
push 0xa0d3323
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403440
mov dword [ebp - 0x2b2c], 0x427
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x4032fd
cmp eax, 0xffffffff
jne 0x40330c
mov dword [ebp - 0x2b44], 1
jmp 0x403440
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4033c5
cmp byte [ebp - 0x1b24], 0x36
je 0x40332b
cmp byte [ebp - 0x1b24], 0x37
jne 0x40333d
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x402a2d
cmp byte [ebp - 0x1b24], 0x35
jne 0x403351
inc dword [ebp - 0x2b3c]
jmp 0x402fc6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4033a1
xor eax, eax
jmp 0x4033ab
cmp eax, 0x20
jbe 0x4033ab
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x403440
cmp byte [ebp - 0x1b26], 0x67
je 0x403440
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40341e
xor eax, eax
jmp 0x403428
cmp eax, 0x20
jbe 0x403428
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x403761
cmp dword [ebp - 0x2b44], 0
jne 0x403761
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x96c], 0
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x4034c9
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0x96c], eax
inc dword [ebp - 0x970]
jmp 0x403495
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0x96c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0x96c], 0
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
push dword [esi + 0x28]
push 0xff
push eax
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x968], 0
cmp dword [ebp - 0x970], 0x32
jae 0x403711
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x403711
mov eax, dword [ebp + edx - 0x950]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp + edx - 0x94c]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp + edx - 0x948]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x403706
sub ecx, eax
cmp ecx, 0x80
jbe 0x4035c9
mov ecx, pe_nt_image_headers32
mov dword [ebp - 0x954], ecx
mov byte [ebp - 0x2b2c], 0x23
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b2a], ah
mov byte [ebp - 0x2b29], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], al
mov byte [ebp - 0x2b28], cl
lea edx, [ebp - 0x2b30]
push edx
push 9
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403628
cmp eax, 0xffffffff
jne 0x403637
mov dword [ebp - 0x2b44], 1
jmp 0x403704
cmp byte [ebp - 0x1b26], 0x63
je 0x4036b4
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403690
xor eax, eax
jmp 0x40369a
cmp eax, 0x20
jbe 0x40369a
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x403704
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x4036d2
mov dword [ebp - 0x968], eax
call fcn.0040494c
mov eax, dword [esi + 0x24]
add eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x954]
push ecx
lea edx, [ebp - 0x1b25]
push edx
push eax
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x954]
add dword [ebp - 0x964], ecx
jmp 0x4035a6
jmp 0x403711
inc dword [ebp - 0x970]
jmp 0x403555
cmp dword [ebp - 0x2b44], 0
je 0x40373a
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x24], 0
jmp 0x403761
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4046cb
cmp dword [ebp - 0x2b44], 0
jne 0x40384c
mov dword [ebp - 0x2b2c], 0x8510
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x4037b8
cmp eax, 0xffffffff
jne 0x4037c7
mov dword [ebp - 0x2b44], 1
jmp 0x40384c
cmp byte [ebp - 0x1b26], 0x50
je 0x40384c
push 0x203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c244544
push 0x4f4d5f47
push 0x4e494d4d
push 0x4152474f
push 0x52505f54
push 0x45535f54
push 0x4f4e5f4e
push 0x41435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40382a
xor eax, eax
jmp 0x403834
cmp eax, 0x20
jbe 0x403834
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403a51
push 0xa
push 1
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
jne 0x4038be
push 0
push 0xa0d3423
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a51
mov dword [ebp - 0x994], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x98c], eax
push dword [ebp - 0x994]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
jne 0x40393b
push 0
push 0xa0d3523
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a51
mov dword [ebp - 0x990], eax
cmp byte [eax + 3], 8
je 0x40399b
push 0
push 0xa0d3623
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a45
mov ecx, dword [ebp - 0x98c]
mov eax, dword [ecx + eax - 4]
mov dword [ebp - 0x984], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x988], eax
push dword [ebp - 0x984]
push eax
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
call dword [ebx + 0x4c]
test eax, eax
jne 0x403a25
push 0
push 0xa0d3723
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x403a45
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], 0xa0000000
push dword [ebp - 0x990]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
cmp dword [ebp - 0x2b44], 0
jne 0x403d50
mov byte [ebp - 0x2b2c], 0x34
mov eax, dword [ebp - 0x964]
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b29], ah
mov byte [ebp - 0x2b28], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], ah
mov byte [ebp - 0x2b2a], al
mov eax, dword [ebp - 0x960]
sub eax, dword [ebp - 0x964]
dec eax
mov byte [ebp - 0x2b26], ah
mov byte [ebp - 0x2b25], al
shr eax, 0x10
mov byte [ebp - 0x2b27], al
lea edx, [ebp - 0x2b30]
push edx
push 0xc
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403adf
cmp eax, 0xffffffff
jne 0x403aee
mov dword [ebp - 0x2b44], 1
jmp 0x403d50
cmp byte [ebp - 0x1b26], 0x74
je 0x403b6e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403b47
xor eax, eax
jmp 0x403b51
cmp eax, 0x20
jbe 0x403b51
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x403d50
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x403c91
sub ecx, eax
cmp ecx, 0x80
jbe 0x403b91
mov ecx, pe_nt_image_headers32
mov dword [ebp - 0x958], ecx
add eax, dword [ebp - 0x988]
mov byte [ebp - 0x2b2c], 0x36
push ecx
push eax
lea edx, [ebp - 0x2b2b]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x958]
lea edx, [ebp - 0x2b30]
push edx
lea edx, [ecx + 5]
push edx
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403bef
cmp eax, 0xffffffff
jne 0x403bfe
mov dword [ebp - 0x2b44], 1
jmp 0x403c8c
cmp byte [ebp - 0x1b26], 0x76
je 0x403c7b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403c57
xor eax, eax
jmp 0x403c61
cmp eax, 0x20
jbe 0x403c61
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x403c8c
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x403b6e
jmp 0x403d50
mov byte [ebp - 0x2b2c], 0x37
lea edx, [ebp - 0x2b30]
push edx
push 5
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403cc9
cmp eax, 0xffffffff
jne 0x403cd5
mov dword [ebp - 0x2b44], 1
jmp 0x403d50
cmp byte [ebp - 0x1b26], 0x77
je 0x403d50
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403d2e
xor eax, eax
jmp 0x403d38
cmp eax, 0x20
jbe 0x403d38
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x988], 0
je 0x403d65
push dword [ebp - 0x988]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebp - 0x2b44], 0
jne 0x403e34
mov dword [ebp - 0x2b2c], 0x8110
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403dad
cmp eax, 0xffffffff
jne 0x403db9
mov dword [ebp - 0x2b44], 1
jmp 0x403e34
cmp byte [ebp - 0x1b26], 0x50
je 0x403e34
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403e12
xor eax, eax
jmp 0x403e1c
cmp eax, 0x20
jbe 0x403e1c
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x403ff8
mov dword [ebp - 0x2b40], 0x20
mov dword [ebp - 0x2b2c], 0x127
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x403e86
cmp eax, 0xffffffff
jne 0x403e95
mov dword [ebp - 0x2b44], 1
jmp 0x403ff8
cmp byte [ebp - 0x1b26], 0x7f
jne 0x403f7b
cmp byte [ebp - 0x1b24], 0x36
jne 0x403ec0
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e4b
jmp 0x403f02
cmp byte [ebp - 0x1b24], 0x37
jne 0x403ee2
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e4b
jmp 0x403f02
cmp byte [ebp - 0x1b24], 0x22
jne 0x403f02
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2b40]
jne 0x403e4b
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403f54
xor eax, eax
jmp 0x403f5e
cmp eax, 0x20
jbe 0x403f5e
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x403ff8
cmp byte [ebp - 0x1b26], 0x67
je 0x403ff8
push 0
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x4524202c
push 0x244e4f49
push 0x54415a49
push 0x524f4854
push 0x55415f54
push 0x53455551
push 0x45525f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x403fd6
xor eax, eax
jmp 0x403fe0
cmp eax, 0x20
jbe 0x403fe0
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x40422f
mov byte [ebp - 0xa8a], 0x20
mov byte [ebp - 0xa89], 0xf4
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa0c], 0x4000600
mov dword [ebp - 0xa08], 0x6000400
mov dword [ebp - 0xa04], 0xa1f455b4
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xa84], eax
push 0xfa
lea edx, [ebp - 0x3c62]
push edx
push 0xf6
lea edx, [ebp - 0xa8a]
push edx
call dword [ebx + 0x40]
cmp eax, 4
je 0x4040bb
push 0
push 0xa0d3823
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x2b44], 1
jmp 0x40422f
mov dword [ebp - 0x2b2c], 0x227
mov eax, dword [ebp - 0x3c62]
mov dword [ebp - 0x2b2a], eax
lea edx, [ebp - 0x2b30]
push edx
push 0xa
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x404102
cmp eax, 0xffffffff
jne 0x404111
mov dword [ebp - 0x2b44], 1
jmp 0x40422f
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4041b4
cmp byte [ebp - 0x1b24], 0x36
je 0x404130
cmp byte [ebp - 0x1b24], 0x37
jne 0x404140
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x403e4b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x404190
xor eax, eax
jmp 0x40419a
cmp eax, 0x20
jbe 0x40419a
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x40422f
cmp byte [ebp - 0x1b26], 0x67
je 0x40422f
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c244e
push 0x4f495441
push 0x5a49524f
push 0x48545541
push 0x5f4b4345
push 0x48435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40420d
xor eax, eax
jmp 0x404217
cmp eax, 0x20
jbe 0x404217
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4042fe
mov dword [ebp - 0x2b2c], 0x8910
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x404277
cmp eax, 0xffffffff
jne 0x404283
mov dword [ebp - 0x2b44], 1
jmp 0x4042fe
cmp byte [ebp - 0x1b26], 0x50
je 0x4042fe
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4042dc
xor eax, eax
jmp 0x4042e6
cmp eax, 0x20
jbe 0x4042e6
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x4043f2
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
mov dword [ebp - 0x2b2c], 0xba
lea edx, [ebp - 0x2b30]
push edx
push 6
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x40436b
cmp eax, 0xffffffff
jne 0x404377
mov dword [ebp - 0x2b44], 1
jmp 0x4043f2
cmp byte [ebp - 0x1b26], 0xfa
je 0x4043f2
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x4043d0
xor eax, eax
jmp 0x4043da
cmp eax, 0x20
jbe 0x4043da
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
cmp dword [ebp - 0x2b44], 0
jne 0x40469b
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x96c], 0
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x404447
add eax, 0x7ff
and eax, 0xfffff800
shr eax, 0xb
add dword [ebp - 0x96c], eax
inc dword [ebp - 0x970]
jmp 0x404413
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0x96c]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov dword [ebp - 0x970], 0
mov dword [ebp - 0x968], 0
cmp dword [ebp - 0x970], 0x32
jae 0x40469b
imul edx, dword [ebp - 0x970], 0x10
mov eax, dword [ebp + edx - 0x94c]
sub eax, dword [ebp + edx - 0x950]
test eax, eax
je 0x40469b
mov eax, dword [ebp + edx - 0x950]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp + edx - 0x94c]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp + edx - 0x948]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x964]
mov ecx, dword [ebp - 0x960]
cmp eax, ecx
jae 0x404690
sub ecx, eax
cmp ecx, 0x10
jbe 0x404513
mov ecx, 0x10
mov dword [ebp - 0x958], ecx
mov byte [ebp - 0x2b2c], 0x3d
add eax, dword [ebp - 0x95c]
mov byte [ebp - 0x2b2a], ah
mov byte [ebp - 0x2b29], al
shr eax, 0x10
mov byte [ebp - 0x2b2b], al
mov byte [ebp - 0x2b28], cl
mov eax, dword [ebp - 0x964]
add eax, dword [esi + 0x20]
push ecx
push eax
lea edx, [ebp - 0x2b27]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov ecx, dword [ebp - 0x958]
lea edx, [ebp - 0x2b30]
push edx
lea edx, [ecx + 9]
push edx
lea edx, [ebp - 0x1b2a]
push edx
push 0xbb8
push 0x12c
push 0x140
push 6
push 0
call fcn.0040499b
test eax, eax
je 0x404595
cmp eax, 0xffffffff
jne 0x4045a1
mov dword [ebp - 0x2b44], 1
jmp 0x4045e2
cmp byte [ebp - 0x1b26], 0x7f
jne 0x4045e2
cmp byte [ebp - 0x1b24], 0x74
jne 0x4045e2
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x4045d1
mov dword [ebp - 0x968], eax
call fcn.0040494c
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x4044f3
cmp byte [ebp - 0x1b26], 0x7d
jne 0x40461c
mov eax, dword [ebp - 0x964]
and eax, 0xfffff800
cmp eax, dword [ebp - 0x968]
je 0x404609
mov dword [ebp - 0x968], eax
call fcn.0040494c
mov ecx, dword [ebp - 0x958]
add dword [ebp - 0x964], ecx
jmp 0x4044f3
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1b2a]
cmp eax, 0xffffffff
jne 0x40466c
xor eax, eax
jmp 0x404676
cmp eax, 0x20
jbe 0x404676
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.00404b7c
mov dword [ebp - 0x2b44], 1
jmp 0x40469b
inc dword [ebp - 0x970]
jmp 0x4044a2
cmp dword [ebp - 0x2b44], 0
jne 0x4046cb
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x54495257
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x4047de
cmp dword [ebp - 0x2b44], 0
jne 0x4047de
xor eax, eax
pushal
cmp dword [esi + 0x14], 0x2ff000
jae 0x404713
mov dword [esp + 0x1c], 3
jmp 0x404751
mov edi, dword [esi + 0x20]
mov ecx, 0x240000
xor edx, edx
cmp ecx, 0x2feffc
jae 0x404731
mov eax, dword [edi + ecx]
bswap eax
xor edx, eax
add ecx, 4
jmp 0x40471d
xor edx, 0xa5a5a5a5
mov eax, dword [edi + 0x2feffc]
bswap eax
cmp eax, edx
je 0x404751
mov dword [edi + 0x2feffc], edx
mov dword [esp + 0x1c], 1
popal
test eax, eax
jne 0x40477f
push 0xa
push 0xd244449
push 0x4c41565f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
jmp 0x4047de
cmp eax, 1
jne 0x4047b2
push 0xa
push 0xd244445
push 0x54434552
push 0x524f435f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
jmp 0x4047de
push 0xa
push 0xd24444e
push 0x554f465f
push 0x544f4e5f
push 0x4d55534b
push 0x43454843
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
push 0
push 0
push 3
call dword [edi]
cmp dword [ebx + 0xcd4], 0
je 0x404926
push 0x3e6c
push 0x6d74682f
push 0x3c3e7964
push 0x6f622f3c
push esp
call dword [ebx + 0x38]
add esp, 0x10
cmp dword [ebx + 0xcd4], 0
je 0x40482d
push dword [ebx + 0xcd4]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebx + 0xcd4], 0
push 0x7a
push 0x67002e
lea edx, [ebx + 0xacc]
push edx
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
push esp
lea edx, [ebp - 0x61c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
add esp, 8
lea edx, [ebp - 0x61c]
push edx
lea edx, [ebx + 0xacc]
push edx
call dword [ebx + 0x48]
test eax, eax
je 0x404926
lea edx, [ebx + 0xacc]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
push 0
push 0
push eax
lea edx, [ebp - 0x20c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x61c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.shlwapi.dll_PathStripPathA]
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 4], esp
push 0x706870
push 0x2e747365
push 0x745f3374
push 0x63655f69
push 0x68706c65
push 0x645f6874
push 0x6f72776e
push 0x656b2f74
push 0x7365742f
lea edx, [ebp - 0x20c]
push edx
lea edx, [ebp - 0x61c]
push edx
lea edx, [esp + 8]
push edx
push dword [ebp - 4]
call fcn.004062d1
add esp, 0x24
add esp, 0xc
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8