Function at 0x41f410
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2158
call fcn.0043da50
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x528]
mov esi, 0x10
lea edi, [esp + 0x532]
lea ebx, [esp + 0x542]
mov dword [esp + 0x4fc], eax
mov eax, 0x28
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0x552]
mov dword [esp + 0x4f4], eax
mov eax, 0xc8
mov dword [esp + 0x4f0], eax
lea eax, [esp + 0x57a]
mov dword [esp + 0x4ec], eax
mov eax, 0x20a
mov dword [esp + 0x4e8], eax
lea eax, [esp + 0x642]
mov dword [esp + 0x4e4], eax
lea eax, [esp + 0xa56]
mov dword [esp + 0x4e0], eax
lea eax, [esp + 0xc60]
mov dword [esp + 0x4dc], eax
lea eax, [esp + 0xe6a]
mov dword [esp + 0x4d8], eax
lea eax, [esp + 0x1074]
mov dword [esp + 0x4d4], eax
lea eax, [esp + 0x127e]
mov dword [esp + 0x4d0], eax
lea eax, [esp + 0x1488]
mov dword [esp + 0x4cc], eax
lea eax, [esp + 0x1692]
mov dword [esp + 0x4c8], eax
lea eax, [esp + 0x189c]
mov dword [esp + 0x4c4], eax
lea eax, [esp + 0x1aa6]
mov dword [esp + 0x4c0], eax
lea eax, [esp + 0x1cb0]
mov dword [esp + 0x4bc], eax
lea eax, [esp + 0x1eba]
mov dword [esp + 0x4b8], eax
mov eax, 0x3c
mov dword [esp + 0x4b4], eax
lea eax, [esp + 0x2100]
mov dword [esp + 0x2144], 0
mov dword [esp + 0x2140], 0
mov dword [esp + 0x213c], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x4b0], ebx
mov dword [esp + 0x4ac], ecx
mov dword [esp + 0x4a8], edx
mov dword [esp + 0x4a4], esi
mov dword [esp + 0x4a0], edi
call fcn.0043da80
mov dword [esp + 0x20c4], 0
mov eax, dword [esp + 0x4b8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4bc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4c4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4c8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4cc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4d4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4d8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043da80
mov eax, dword [esp + 0x4ec]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0043da80
mov eax, dword [esp + 0x4f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0043da80
mov eax, dword [esp + 0x4b0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0043da80
mov eax, dword [esp + 0x4a0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0043da80
mov eax, dword [esp + 0x4a8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0043da80
mov dword [esp + 0x50c], 0
mov dword [esp + 0x508], 0xffffffff
call fcn.0041ee60
mov dword [esp + 0x214c], eax
mov dword [esp + 0x500], 0x7fb7d0ed
mov eax, dword [esp + 0x500]
mov ecx, eax
sub ecx, 0x7fb7d0ec
mov dword [esp + 0x49c], eax
mov dword [esp + 0x498], ecx
jg 0x420825
jmp 0x41f817
mov eax, dword [esp + 0x49c]
sub eax, 0x7d553f7e
mov dword [esp + 0x494], eax
jg 0x420807
jmp 0x41f835
mov eax, dword [esp + 0x49c]
sub eax, 0x7ca06cc1
mov dword [esp + 0x490], eax
jg 0x4207e9
jmp 0x41f853
mov eax, dword [esp + 0x49c]
sub eax, 0x7bdde0a2
mov dword [esp + 0x48c], eax
jg 0x4207cb
jmp 0x41f871
mov eax, dword [esp + 0x49c]
sub eax, 0x85f3a038
mov dword [esp + 0x488], eax
jg 0x41f8ad
jmp 0x41f88f
mov eax, dword [esp + 0x49c]
sub eax, 0x85aedcad
mov dword [esp + 0x484], eax
je 0x420d92
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x86d1c6c8
mov dword [esp + 0x480], eax
jg 0x41f8e9
jmp 0x41f8cb
mov eax, dword [esp + 0x49c]
sub eax, 0x85f3a039
mov dword [esp + 0x47c], eax
je 0x420a5c
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x8c80ac52
mov dword [esp + 0x478], eax
jg 0x41f925
jmp 0x41f907
mov eax, dword [esp + 0x49c]
sub eax, 0x86d1c6c9
mov dword [esp + 0x474], eax
je 0x422354
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x92084e18
mov dword [esp + 0x470], eax
jg 0x41f961
jmp 0x41f943
mov eax, dword [esp + 0x49c]
sub eax, 0x8c80ac53
mov dword [esp + 0x46c], eax
je 0x422667
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x9410753b
mov dword [esp + 0x468], eax
jg 0x41f99d
jmp 0x41f97f
mov eax, dword [esp + 0x49c]
sub eax, 0x92084e19
mov dword [esp + 0x464], eax
je 0x420b79
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x94e44307
mov dword [esp + 0x460], eax
jg 0x41f9d9
jmp 0x41f9bb
mov eax, dword [esp + 0x49c]
sub eax, 0x9410753c
mov dword [esp + 0x45c], eax
je 0x4224de
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x95d4e0c3
mov dword [esp + 0x458], eax
jg 0x41fa15
jmp 0x41f9f7
mov eax, dword [esp + 0x49c]
sub eax, 0x94e44308
mov dword [esp + 0x454], eax
je 0x420db3
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x965b4900
mov dword [esp + 0x450], eax
jg 0x41fa51
jmp 0x41fa33
mov eax, dword [esp + 0x49c]
sub eax, 0x95d4e0c4
mov dword [esp + 0x44c], eax
je 0x4225b7
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x98ddf186
mov dword [esp + 0x448], eax
jg 0x41fa8d
jmp 0x41fa6f
mov eax, dword [esp + 0x49c]
sub eax, 0x965b4901
mov dword [esp + 0x444], eax
je 0x42288e
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x9a1a6b11
mov dword [esp + 0x440], eax
jg 0x41fac9
jmp 0x41faab
mov eax, dword [esp + 0x49c]
sub eax, 0x98ddf187
mov dword [esp + 0x43c], eax
je 0x42256d
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x9facf71b
mov dword [esp + 0x438], eax
jg 0x41fb05
jmp 0x41fae7
mov eax, dword [esp + 0x49c]
sub eax, 0x9a1a6b12
mov dword [esp + 0x434], eax
je 0x420a4b
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xa0b94140
mov dword [esp + 0x430], eax
jg 0x41fb41
jmp 0x41fb23
mov eax, dword [esp + 0x49c]
sub eax, 0x9facf71c
mov dword [esp + 0x42c], eax
je 0x420919
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xa4789995
mov dword [esp + 0x428], eax
jg 0x41fb7d
jmp 0x41fb5f
mov eax, dword [esp + 0x49c]
sub eax, 0xa0b94141
mov dword [esp + 0x424], eax
je 0x422128
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xa91828c1
mov dword [esp + 0x420], eax
jg 0x41fbb9
jmp 0x41fb9b
mov eax, dword [esp + 0x49c]
sub eax, 0xa4789996
mov dword [esp + 0x41c], eax
je 0x4208f6
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xb97abbe3
mov dword [esp + 0x418], eax
jg 0x41fbf5
jmp 0x41fbd7
mov eax, dword [esp + 0x49c]
sub eax, 0xa91828c2
mov dword [esp + 0x414], eax
je 0x4226a7
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xc2a3b316
mov dword [esp + 0x410], eax
jg 0x41fc31
jmp 0x41fc13
mov eax, dword [esp + 0x49c]
sub eax, 0xb97abbe4
mov dword [esp + 0x40c], eax
je 0x420f1f
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xc2a6da84
mov dword [esp + 0x408], eax
jg 0x41fc6d
jmp 0x41fc4f
mov eax, dword [esp + 0x49c]
sub eax, 0xc2a3b317
mov dword [esp + 0x404], eax
je 0x421e4c
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xc30750b0
mov dword [esp + 0x400], eax
jg 0x41fca9
jmp 0x41fc8b
mov eax, dword [esp + 0x49c]
sub eax, 0xc2a6da85
mov dword [esp + 0x3fc], eax
je 0x420ac7
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xcaa34a96
mov dword [esp + 0x3f8], eax
jg 0x41fce5
jmp 0x41fcc7
mov eax, dword [esp + 0x49c]
sub eax, 0xc30750b1
mov dword [esp + 0x3f4], eax
je 0x422606
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xd89f4e44
mov dword [esp + 0x3f0], eax
jg 0x41fd21
jmp 0x41fd03
mov eax, dword [esp + 0x49c]
sub eax, 0xcaa34a97
mov dword [esp + 0x3ec], eax
je 0x4222d6
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xd94a4ef0
mov dword [esp + 0x3e8], eax
jg 0x41fd5d
jmp 0x41fd3f
mov eax, dword [esp + 0x49c]
sub eax, 0xd89f4e45
mov dword [esp + 0x3e4], eax
je 0x422344
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xdc1805fc
mov dword [esp + 0x3e0], eax
jg 0x41fd99
jmp 0x41fd7b
mov eax, dword [esp + 0x49c]
sub eax, 0xd94a4ef1
mov dword [esp + 0x3dc], eax
je 0x420a88
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xdce5a9ca
mov dword [esp + 0x3d8], eax
jg 0x41fdd5
jmp 0x41fdb7
mov eax, dword [esp + 0x49c]
sub eax, 0xdc1805fd
mov dword [esp + 0x3d4], eax
je 0x421e11
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xde8836da
mov dword [esp + 0x3d0], eax
jg 0x41fe11
jmp 0x41fdf3
mov eax, dword [esp + 0x49c]
sub eax, 0xdce5a9cb
mov dword [esp + 0x3cc], eax
je 0x42262a
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xe353a4ac
mov dword [esp + 0x3c8], eax
jg 0x41fe4d
jmp 0x41fe2f
mov eax, dword [esp + 0x49c]
sub eax, 0xde8836db
mov dword [esp + 0x3c4], eax
je 0x420aac
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xe8521966
mov dword [esp + 0x3c0], eax
jg 0x41fe89
jmp 0x41fe6b
mov eax, dword [esp + 0x49c]
sub eax, 0xe353a4ad
mov dword [esp + 0x3bc], eax
je 0x420889
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xf0299b8b
mov dword [esp + 0x3b8], eax
jg 0x41fec5
jmp 0x41fea7
mov eax, dword [esp + 0x49c]
sub eax, 0xe8521967
mov dword [esp + 0x3b4], eax
je 0x42287e
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xf0b248f3
mov dword [esp + 0x3b0], eax
jg 0x41ff01
jmp 0x41fee3
mov eax, dword [esp + 0x49c]
sub eax, 0xf0299b8c
mov dword [esp + 0x3ac], eax
je 0x4226c6
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xf40ee4d6
mov dword [esp + 0x3a8], eax
jg 0x41ff3d
jmp 0x41ff1f
mov eax, dword [esp + 0x49c]
sub eax, 0xf0b248f4
mov dword [esp + 0x3a4], eax
je 0x420d4e
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xfa94751a
mov dword [esp + 0x3a0], eax
jg 0x41ff79
jmp 0x41ff5b
mov eax, dword [esp + 0x49c]
sub eax, 0xf40ee4d7
mov dword [esp + 0x39c], eax
je 0x422656
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xfe8c7a16
mov dword [esp + 0x398], eax
jg 0x41ffb5
jmp 0x41ff97
mov eax, dword [esp + 0x49c]
sub eax, 0xfa94751b
mov dword [esp + 0x394], eax
je 0x4221cf
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xff140a42
mov dword [esp + 0x390], eax
jg 0x41fff1
jmp 0x41ffd3
mov eax, dword [esp + 0x49c]
sub eax, 0xfe8c7a17
mov dword [esp + 0x38c], eax
je 0x4228c6
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x8f5a2a9
mov dword [esp + 0x388], eax
jg 0x42002d
jmp 0x42000f
mov eax, dword [esp + 0x49c]
sub eax, 0xff140a43
mov dword [esp + 0x384], eax
je 0x420f69
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0xca78620
mov dword [esp + 0x380], eax
jg 0x420069
jmp 0x42004b
mov eax, dword [esp + 0x49c]
sub eax, 0x8f5a2aa
mov dword [esp + 0x37c], eax
je 0x4225da
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x14657057
mov dword [esp + 0x378], eax
jg 0x4200a5
jmp 0x420087
mov eax, dword [esp + 0x49c]
sub eax, 0xca78621
mov dword [esp + 0x374], eax
je 0x421ef2
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x24aeda23
mov dword [esp + 0x370], eax
jg 0x4200e1
jmp 0x4200c3
mov eax, dword [esp + 0x49c]
sub eax, 0x14657058
mov dword [esp + 0x36c], eax
je 0x420f2f
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x267bdb81
mov dword [esp + 0x368], eax
jg 0x42011d
jmp 0x4200ff
mov eax, dword [esp + 0x49c]
sub eax, 0x24aeda24
mov dword [esp + 0x364], eax
je 0x42089a
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x269336bb
mov dword [esp + 0x360], eax
jg 0x420159
jmp 0x42013b
mov eax, dword [esp + 0x49c]
sub eax, 0x267bdb82
mov dword [esp + 0x35c], eax
je 0x420da2
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x26ebe2ac
mov dword [esp + 0x358], eax
jg 0x420195
jmp 0x420177
mov eax, dword [esp + 0x49c]
sub eax, 0x269336bc
mov dword [esp + 0x354], eax
je 0x4224ee
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x3086b471
mov dword [esp + 0x350], eax
jg 0x4201d1
jmp 0x4201b3
mov eax, dword [esp + 0x49c]
sub eax, 0x26ebe2ad
mov dword [esp + 0x34c], eax
je 0x422182
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x315d5d8a
mov dword [esp + 0x348], eax
jg 0x42020d
jmp 0x4201ef
mov eax, dword [esp + 0x49c]
sub eax, 0x3086b472
mov dword [esp + 0x344], eax
je 0x42086e
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x357318bb
mov dword [esp + 0x340], eax
jg 0x420249
jmp 0x42022b
mov eax, dword [esp + 0x49c]
sub eax, 0x315d5d8b
mov dword [esp + 0x33c], eax
je 0x422a82
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x358b008b
mov dword [esp + 0x338], eax
jg 0x420285
jmp 0x420267
mov eax, dword [esp + 0x49c]
sub eax, 0x357318bc
mov dword [esp + 0x334], eax
je 0x420a78
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x38c7db9e
mov dword [esp + 0x330], eax
jg 0x4202c1
jmp 0x4202a3
mov eax, dword [esp + 0x49c]
sub eax, 0x358b008c
mov dword [esp + 0x32c], eax
je 0x4222e6
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x3b5c1bfb
mov dword [esp + 0x328], eax
jg 0x4202fd
jmp 0x4202df
mov eax, dword [esp + 0x49c]
sub eax, 0x38c7db9f
mov dword [esp + 0x324], eax
je 0x422a0b
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x3b95e7db
mov dword [esp + 0x320], eax
jg 0x420339
jmp 0x42031b
mov eax, dword [esp + 0x49c]
sub eax, 0x3b5c1bfc
mov dword [esp + 0x31c], eax
je 0x4224cd
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x418bdf6f
mov dword [esp + 0x318], eax
jg 0x420375
jmp 0x420357
mov eax, dword [esp + 0x49c]
sub eax, 0x3b95e7dc
mov dword [esp + 0x314], eax
je 0x4221df
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x43c7ea55
mov dword [esp + 0x310], eax
jg 0x4203b1
jmp 0x420393
mov eax, dword [esp + 0x49c]
sub eax, 0x418bdf70
mov dword [esp + 0x30c], eax
je 0x422289
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x4480bef3
mov dword [esp + 0x308], eax
jg 0x4203ed
jmp 0x4203cf
mov eax, dword [esp + 0x49c]
sub eax, 0x43c7ea56
mov dword [esp + 0x304], eax
je 0x42272b
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x450ac19e
mov dword [esp + 0x300], eax
jg 0x420429
jmp 0x42040b
mov eax, dword [esp + 0x49c]
sub eax, 0x4480bef4
mov dword [esp + 0x2fc], eax
je 0x42258e
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x4a2f259f
mov dword [esp + 0x2f8], eax
jg 0x420465
jmp 0x420447
mov eax, dword [esp + 0x49c]
sub eax, 0x450ac19f
mov dword [esp + 0x2f4], eax
je 0x420a1f
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x4b1970dc
mov dword [esp + 0x2f0], eax
jg 0x4204a1
jmp 0x420483
mov eax, dword [esp + 0x49c]
sub eax, 0x4a2f25a0
mov dword [esp + 0x2ec], eax
je 0x422193
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x4e126aa6
mov dword [esp + 0x2e8], eax
jg 0x4204dd
jmp 0x4204bf
mov eax, dword [esp + 0x49c]
sub eax, 0x4b1970dd
mov dword [esp + 0x2e4], eax
je 0x421e93
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x4ffbd00f
mov dword [esp + 0x2e0], eax
jg 0x420519
jmp 0x4204fb
mov eax, dword [esp + 0x49c]
sub eax, 0x4e126aa7
mov dword [esp + 0x2dc], eax
je 0x4220ed
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x57a84ec1
mov dword [esp + 0x2d8], eax
jg 0x420555
jmp 0x420537
mov eax, dword [esp + 0x49c]
sub eax, 0x4ffbd010
mov dword [esp + 0x2d4], eax
je 0x422365
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x5c22cfe4
mov dword [esp + 0x2d0], eax
jg 0x420591
jmp 0x420573
mov eax, dword [esp + 0x49c]
sub eax, 0x57a84ec2
mov dword [esp + 0x2cc], eax
je 0x4224bc
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x615c923f
mov dword [esp + 0x2c8], eax
jg 0x4205cd
jmp 0x4205af
mov eax, dword [esp + 0x49c]
sub eax, 0x5c22cfe5
mov dword [esp + 0x2c4], eax
je 0x422a92
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x69cf70fd
mov dword [esp + 0x2c0], eax
jg 0x420609
jmp 0x4205eb
mov eax, dword [esp + 0x49c]
sub eax, 0x615c9240
mov dword [esp + 0x2bc], eax
je 0x42229a
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x6a0773a3
mov dword [esp + 0x2b8], eax
jg 0x420645
jmp 0x420627
mov eax, dword [esp + 0x49c]
sub eax, 0x69cf70fe
mov dword [esp + 0x2b4], eax
je 0x422710
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x6be93723
mov dword [esp + 0x2b0], eax
jg 0x420681
jmp 0x420663
mov eax, dword [esp + 0x49c]
sub eax, 0x6a0773a4
mov dword [esp + 0x2ac], eax
je 0x4224ff
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x6dd68ee1
mov dword [esp + 0x2a8], eax
jg 0x4206bd
jmp 0x42069f
mov eax, dword [esp + 0x49c]
sub eax, 0x6be93724
mov dword [esp + 0x2a4], eax
je 0x4228fe
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x72d10c49
mov dword [esp + 0x2a0], eax
jg 0x4206f9
jmp 0x4206db
mov eax, dword [esp + 0x49c]
sub eax, 0x6dd68ee2
mov dword [esp + 0x29c], eax
je 0x420f8c
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x77fce351
mov dword [esp + 0x298], eax
jg 0x420735
jmp 0x420717
mov eax, dword [esp + 0x49c]
sub eax, 0x72d10c4a
mov dword [esp + 0x294], eax
je 0x4209f3
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7b2b3f74
mov dword [esp + 0x290], eax
jg 0x420771
jmp 0x420753
mov eax, dword [esp + 0x49c]
sub eax, 0x77fce352
mov dword [esp + 0x28c], eax
je 0x422499
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7b2b3f75
mov dword [esp + 0x288], eax
je 0x42257d
jmp 0x42078f
mov eax, dword [esp + 0x49c]
sub eax, 0x7b499076
mov dword [esp + 0x284], eax
je 0x420f40
jmp 0x4207ad
mov eax, dword [esp + 0x49c]
sub eax, 0x7b4af5bd
mov dword [esp + 0x280], eax
je 0x4209ce
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7bdde0a3
mov dword [esp + 0x27c], eax
je 0x421eb7
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7ca06cc2
mov dword [esp + 0x278], eax
je 0x4226b7
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7d553f7f
mov dword [esp + 0x274], eax
je 0x422a1b
jmp 0x420843
mov eax, dword [esp + 0x49c]
sub eax, 0x7fb7d0ed
mov dword [esp + 0x270], eax
je 0x420848
jmp 0x420843
jmp 0x422ac9
mov eax, 0xe353a4ad
mov ecx, 0x3086b472
mov edx, dword [esp + 0x214c]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x2148], 0xffffffff
mov dword [esp + 0x500], 0x7ca06cc2
jmp 0x422ac9
mov eax, 0x24aeda24
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x104
lea ecx, [esp + 0xc60]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x26c], eax
call fcn.00408330
lea ecx, [esp + 0x50c]
mov dword [esp + 0x524], eax
mov dword [esp], ecx
call fcn.0041cf40
mov ecx, 0xa4789996
cmp eax, 0
setne dl
and dl, 1
mov byte [esp + 0x2150], dl
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, 0xd94a4ef1
mov ecx, 0x9facf71c
mov dl, byte [esp + 0x2150]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x104
lea ecx, [esp + 0x1488]
lea edx, [esp + 0xc60]
mov esi, dword [esp + 0x524]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x268], eax
call fcn.00408b90
lea ecx, [esp + 0x1488]
mov dword [esp + 0x510], eax
mov eax, dword [esp + 0x510]
add eax, 0xb01aae96
sub eax, 4
sub eax, 0xb01aae96
mov word [esp + eax*2 + 0x1488], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x9a1a6b12
mov edx, 0x7b4af5bd
mov dword [esp + 0x2140], eax
cmp dword [esp + 0x2140], 0
cmovne ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x450ac19f
mov edx, 0x72d10c4a
cmp eax, 0xb7
cmove ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x500], 0x450ac19f
mov dword [esp + 0x264], eax
jmp 0x422ac9
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x500], 0x9a1a6b12
mov dword [esp + 0x260], eax
jmp 0x422ac9
mov eax, 0x85f3a039
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x357318bc
mov dword [esp + 0x2148], 0
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7ca06cc2
jmp 0x422ac9
mov eax, 0xc2a6da85
mov ecx, 0xde8836db
cmp dword [esp + 0x50c], 6
cmovb eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x2148], 0xffffffff
mov dword [esp + 0x500], 0x7ca06cc2
jmp 0x422ac9
mov eax, esp
lea ecx, [esp + 0xa56]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc60]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1aa6]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x25c], eax
mov dword [esp + 0x258], edx
call fcn.0040a230
mov ecx, esp
mov edx, dword [esp + 0x258]
mov dword [ecx], edx
mov dword [esp + 0x254], eax
call fcn.004090e0
mov dword [esp + 0x518], eax
mov eax, esp
mov dword [eax], 0
call fcn.00422ad0
mov dword [esp + 0x250], edx
mov dword [esp + 0x24c], eax
call fcn.004059e0
mov ecx, dword [esp + 0x24c]
imul ecx, eax
mov dword [esp], ecx
call fcn.0043e3c6
mov dword [esp + 0x500], 0x92084e19
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1488]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x248], eax
mov dword [esp + 0x244], ecx
call fcn.00407ed0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x127e]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x240], eax
mov dword [esp + 0x23c], ecx
mov dword [esp + 0x238], edx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [esp + 0x1488]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x234], eax
mov dword [esp + 0x230], ecx
call fcn.0040b290
lea eax, [esp + 0x1488]
mov dword [esp], eax
call fcn.004090e0
mov ecx, 0x104
lea edx, [esp + 0x127e]
lea esi, [esp + 0x1aa6]
mov dword [esp + 0x504], eax
mov eax, dword [esp + 0x518]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x22c], ecx
call fcn.004086f0
lea ecx, [esp + 0x127e]
mov edx, 0xf62ef5f9
lea esi, [esp + 0x1488]
mov edi, dword [esp + 0x504]
mov ebx, dword [esp + 0x518]
add edx, 0x104
sub edx, ebx
sub edx, 0xf62ef5f9
mov ebx, dword [esp + 0x518]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x228], eax
call fcn.004086f0
lea ecx, [0x448600]
mov edx, 4
lea esi, [esp + 0x127e]
mov edi, 0
mov ebx, 0x104
mov dword [esp + 0x224], eax
mov eax, dword [esp + 0x518]
sub ebx, 0x41399f79
sub ebx, eax
add ebx, 0x41399f79
mov eax, dword [esp + 0x504]
sub edi, eax
add ebx, edi
mov eax, dword [esp + 0x518]
shl eax, 1
add esi, eax
mov eax, dword [esp + 0x504]
shl eax, 1
add esi, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x220], edx
call fcn.004086f0
mov dword [esp + 0x500], 0xf0b248f4
mov dword [esp + 0x21c], eax
jmp 0x422ac9
lea eax, [esp + 0xa56]
lea ecx, [esp + 0x127e]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0x85aedcad
mov edx, 0x92084e19
cmp eax, 0
cmove ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov dword [esp + 0x500], 0x267bdb82
jmp 0x422ac9
mov eax, 0x94e44308
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x189c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x218], eax
mov dword [esp + 0x214], ecx
call fcn.00407ed0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1692]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x210], eax
mov dword [esp + 0x20c], ecx
mov dword [esp + 0x208], edx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [esp + 0x189c]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x204], eax
mov dword [esp + 0x200], ecx
call fcn.0040b290
mov eax, 0x104
lea ecx, [esp + 0x1692]
lea edx, [esp + 0x1aa6]
mov esi, dword [esp + 0x518]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1fc], eax
call fcn.004086f0
lea ecx, [esp + 0x189c]
mov dword [esp], ecx
mov dword [esp + 0x1f8], eax
call fcn.004090e0
lea ecx, [esp + 0x1692]
mov edx, 0
lea esi, [esp + 0x189c]
mov edi, dword [esp + 0x518]
sub edx, edi
add edx, 0x104
mov edi, dword [esp + 0x518]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.004086f0
lea ecx, [esp + 0x1692]
mov edx, dword [0x4d97a8]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x1f4], eax
call edx
sub esp, 8
mov ecx, 0xb97abbe4
mov dword [esp + 0x213c], eax
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov dword [esp + 0x500], 0x14657058
jmp 0x422ac9
mov eax, 0x7b499076
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0xff140a43
cmp dword [esp + 0x213c], 0
sete cl
and cl, 1
mov byte [esp + 0x2151], cl
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x6dd68ee2
mov ecx, 0x267bdb82
mov dl, byte [esp + 0x2151]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, dword [0x4d979c]
mov ecx, dword [0x4d95d4]
mov edx, dword [0x4d95fc]
mov esi, dword [esp + 0x213c]
mov edi, esp
lea ebx, [esp + 0x20fc]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d95e4]
mov esi, dword [0x4d95fc]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1f0], eax
lea eax, [esp + 0x20f8]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d95e8]
mov esi, dword [0x4d95fc]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1ec], eax
lea eax, [esp + 0x20f4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d95d4]
mov esi, dword [0x4d95f8]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1e8], eax
lea eax, [esp + 0x20f0]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d95c8]
mov esi, dword [0x4d9608]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1e4], eax
lea eax, [esp + 0x20ec]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d95d4]
mov esi, dword [0x4d960c]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1e0], eax
lea eax, [esp + 0x20e8]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d9618]
mov esi, dword [0x4d9610]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1dc], eax
lea eax, [esp + 0x20e4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d9614]
mov esi, dword [0x4d9610]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1d8], eax
lea eax, [esp + 0x20e0]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4d979c]
mov edx, dword [0x4d9614]
mov esi, dword [0x4d95fc]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [esp + 0x1d4], eax
lea eax, [esp + 0x20dc]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x4d9798]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x1d0], eax
call ecx
sub esp, 4
mov dword [esp + 0x1cc], eax
call fcn.0043e3a3
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
mov eax, esp
lea edx, [esp + 0x57a]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
mov dword [esp + 0x1c8], edx
call fcn.0043ed58
mov ecx, esp
mov edx, dword [esp + 0x1c8]
mov dword [ecx], edx
mov dword [esp + 0x1c4], eax
call fcn.004090e0
mov dword [esp + 0x524], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x524], ecx
mov word [esp + eax*2 + 0x57a], 0x2e
mov eax, dword [esp + 0x524]
lea eax, [esp + eax*2 + 0x57a]
mov dword [esp + 0x1c0], eax
call fcn.0043e3a3
and eax, 1
mov ecx, esp
mov edx, dword [esp + 0x1c0]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0043ed58
mov ecx, esp
mov edx, dword [esp + 0x1c8]
mov dword [ecx], edx
mov dword [esp + 0x1bc], eax
call fcn.004090e0
mov dword [esp + 0x524], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x524], ecx
mov word [esp + eax*2 + 0x57a], 0x2e
mov eax, dword [esp + 0x524]
lea eax, [esp + eax*2 + 0x57a]
mov dword [esp + 0x1b8], eax
call fcn.0043e3a3
and eax, 5
mov ecx, esp
mov edx, dword [esp + 0x1b8]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0043ed58
mov ecx, esp
mov edx, dword [esp + 0x1c8]
mov dword [ecx], edx
mov dword [esp + 0x1b4], eax
call fcn.004090e0
mov dword [esp + 0x524], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x524], ecx
mov word [esp + eax*2 + 0x57a], 0x2e
mov eax, dword [esp + 0x524]
lea eax, [esp + eax*2 + 0x57a]
mov dword [esp + 0x1b0], eax
call fcn.0043e3a3
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x1b0]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0043ed58
mov ecx, esp
mov edx, dword [esp + 0x1c8]
mov dword [ecx], edx
mov dword [esp + 0x1ac], eax
call fcn.004090e0
mov dword [esp + 0x524], eax
mov eax, dword [0x493150]
movzx eax, byte [eax]
mov dword [esp + 0x520], eax
mov ecx, dword [0x493150]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x51c], eax
mov ecx, dword [0x493150]
mov edx, dword [esp + 0x520]
lea edx, [ecx + edx + 2]
inc ecx
mov esi, esp
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], edx
mov dword [esi + 8], ecx
lea eax, [esp + 0x542]
mov dword [esi], eax
mov dword [esi + 4], 0x10
call fcn.004063b0
mov eax, dword [0x4d9794]
mov ecx, dword [0x4d95f0]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x20d8], eax
mov eax, dword [0x4d978c]
xor ecx, ecx
mov edx, dword [0x4d9620]
mov esi, dword [0x4d95d0]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x57a]
mov edx, dword [0x4d9788]
mov esi, dword [0x4d95ec]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x1a8], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x189c]
mov edx, dword [0x4d9788]
mov esi, dword [0x4d95d4]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x1a4], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4d9784]
mov edx, dword [0x4d95cc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0x1a0], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x542]
mov edx, dword [0x4d9780]
mov esi, dword [0x4d961c]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x19c], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4d9794]
mov edx, dword [0x4d95f4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x198], eax
call ecx
sub esp, 8
mov dword [esp + 0x20d4], eax
mov eax, dword [0x4d977c]
mov ecx, dword [esp + 0x20f0]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20f0]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x194], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20e8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x190], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20e8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x18c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9790]
mov edx, dword [esp + 0x20d4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x188], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20f8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x184], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20f8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x180], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20f4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x17c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20f4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x178], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x174], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20dc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x170], eax
call ecx
sub esp, 8
mov dword [esp + 0x16c], eax
call fcn.0043e3a3
lea ecx, [esp + 0x1eba]
mov edx, 5
xor esi, esi
mov dword [esp + 0x168], edx
mov edx, esi
mov esi, dword [esp + 0x168]
div esi
mov eax, dword [edx*4 + 0x493154]
mov dword [esp + 0x20c4], eax
mov eax, dword [esp + 0x20c4]
movzx eax, word [eax]
mov dword [esp + 0x520], eax
mov eax, dword [esp + 0x520]
sub eax, 0xb6eadf80
add eax, 1
add eax, 0xb6eadf80
mov edx, dword [esp + 0x20c4]
shl eax, 1
add edx, eax
movzx eax, word [edx]
mov dword [esp + 0x51c], eax
mov eax, dword [esp + 0x51c]
mov edx, dword [esp + 0x20c4]
mov edi, dword [esp + 0x520]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [esp + 0x20c4]
add edi, 2
mov ebx, dword [esp + 0x520]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00406af0
mov eax, 0x104
lea ecx, [esp + 0x1074]
lea edx, [esp + 0x1eba]
mov esi, dword [esp + 0x520]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x164], eax
call fcn.004086f0
lea ecx, [0x448600]
mov edx, 4
lea esi, [esp + 0x1074]
mov edi, 0x7427161a
mov ebx, dword [esp + 0x520]
add edi, 0x104
sub edi, ebx
sub edi, 0x7427161a
mov ebx, dword [esp + 0x520]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x160], eax
mov dword [esp + 0x15c], edx
call fcn.004086f0
mov ecx, 0x104
lea edx, [esp + 0xe6a]
lea esi, [esp + 0x1eba]
mov edi, dword [esp + 0x520]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x158], eax
mov dword [esp + 0x154], ecx
call fcn.004086f0
lea ecx, [0x44860a]
mov edx, 6
lea esi, [esp + 0xe6a]
mov edi, 0x33e7355e
mov ebx, dword [esp + 0x520]
add edi, 0x104
sub edi, ebx
sub edi, 0x33e7355e
mov ebx, dword [esp + 0x520]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x150], eax
mov dword [esp + 0x14c], edx
call fcn.004086f0
mov ecx, 0x10
lea edx, [esp + 0x532]
mov esi, dword [0x493168]
movzx esi, byte [esi]
mov dword [esp + 0x520], esi
mov esi, dword [esp + 0x520]
sub esi, 0x95ce209c
mov edi, dword [0x493168]
movzx esi, byte [edi + esi - 0x6a31df63]
mov dword [esp + 0x51c], esi
mov esi, dword [esp + 0x51c]
mov edi, dword [0x493168]
add edi, dword [esp + 0x520]
add edi, 2
mov ebx, dword [0x493168]
add ebx, 1
mov dword [esp], edx
mov dword [esp + 4], 0x10
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], ecx
call fcn.004063b0
mov eax, dword [0x4d9794]
mov ecx, dword [0x4d95fc]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x1074]
mov dword [esp + 0x20d0], eax
mov eax, dword [0x4d9788]
mov edx, dword [0x4d95d4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0xe6a]
mov edx, dword [0x4d9788]
mov esi, dword [0x4d95dc]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x140], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4d9788]
mov edx, dword [0x4d95d8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 0x448618
mov dword [esp + 0x13c], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x532]
mov edx, dword [0x4d9780]
mov esi, dword [0x4d9614]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x138], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4d9794]
mov edx, dword [0x4d9600]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x134], eax
call ecx
sub esp, 8
mov dword [esp + 0x20cc], eax
mov eax, dword [0x4d9788]
mov ecx, dword [0x4d95d4]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x44862c
call eax
sub esp, 0xc
mov ecx, dword [0x4d9790]
mov edx, dword [esp + 0x20cc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x130], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x552]
mov edx, 0
mov esi, dword [0x49316c]
movzx esi, word [esi]
mov dword [esp + 0x520], esi
mov esi, dword [esp + 0x520]
sub edx, 1
sub esi, edx
mov edx, dword [0x49316c]
movzx edx, word [edx + esi*2]
mov dword [esp + 0x51c], edx
mov edx, dword [esp + 0x51c]
mov esi, dword [0x49316c]
mov edi, dword [esp + 0x520]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x49316c]
add edi, 2
mov ebx, dword [esp + 0x520]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x12c], eax
call fcn.00406af0
mov eax, dword [0x4d9794]
mov ecx, dword [0x4d9604]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x552]
mov dword [esp + 0x20c8], eax
mov eax, dword [0x4d9788]
mov edx, dword [0x4d95d4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x127e]
mov edx, dword [0x4d9788]
mov esi, dword [0x4d95e0]
mov edi, dword [esp + 0x213c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x128], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4d9790]
mov edx, dword [esp + 0x20c8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x124], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9790]
mov edx, dword [esp + 0x20d0]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x120], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20dc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x11c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x118], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20e4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x114], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20e0]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x110], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20e0]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x10c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20e4]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x108], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d977c]
mov edx, dword [esp + 0x20ec]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x104], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9778]
mov edx, dword [esp + 0x20ec]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x100], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d9790]
mov edx, dword [esp + 0x20d8]
mov esi, dword [esp + 0x213c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xfc], eax
call ecx
sub esp, 8
mov ecx, dword [0x4d97a0]
mov edx, dword [esp + 0x213c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0xf8], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x642]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0xf4], eax
call fcn.0040b8d0
lea eax, [esp + 0x642]
mov ecx, dword [0x4d97e0]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov ecx, 0xc2a3b317
mov edx, 0xdc1805fd
mov dword [esp + 0x2144], eax
cmp dword [esp + 0x2144], 0
cmove ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0xf0], eax
call fcn.0041cba0
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, dword [esp + 0x2144]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0xca78621
mov edx, 0x4b1970dd
mov dword [esp + 0x514], eax
cmp dword [esp + 0x514], 0
cmovne ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, 0xca78621
mov ecx, 0x7bdde0a3
cmp dword [esp + 0x514], 0x80
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0xec], eax
call fcn.0041cba0
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x84c]
lea esi, [0x448630]
mov dword [esp + 0x2100], 0x3c
mov dword [esp + 0x2104], 0x40
mov dword [esp + 0x2108], 0
mov dword [esp + 0x210c], esi
mov dword [esp + 0x2118], 0
mov dword [esp + 0x2120], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], ecx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [0x44863a]
mov esi, 3
lea edi, [esp + 0x84c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0xe0], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd8], esi
call fcn.004086f0
lea ecx, [esp + 0x1692]
mov dword [esp], ecx
mov dword [esp + 0xd4], eax
call fcn.004090e0
mov ecx, 0x101
lea edx, [esp + 0x84c]
lea esi, [esp + 0x1692]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xd0], ecx
call fcn.004086f0
lea ecx, [esp + 0x1cb0]
mov edx, 0
mov esi, dword [0x493170]
movzx esi, word [esi]
mov dword [esp + 0x520], esi
mov esi, dword [esp + 0x520]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x493170]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x51c], edx
mov edx, dword [esp + 0x51c]
mov esi, dword [0x493170]
mov edi, dword [esp + 0x520]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x493170]
add edi, 2
mov ebx, dword [esp + 0x520]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xcc], eax
call fcn.00406af0
lea eax, [esp + 0x1488]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0xa0b94141
mov edx, 0x4e126aa7
mov dword [esp + 0x2140], eax
cmp dword [esp + 0x2140], 0
cmove ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0xc8], eax
call fcn.0041cba0
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
lea eax, [esp + 0x84c]
lea ecx, [esp + 0x1cb0]
mov dword [esp + 0x2110], ecx
mov dword [esp + 0x2114], eax
mov dword [esp + 0x211c], 0
mov eax, dword [0x4d97b0]
mov ecx, esp
lea edx, [esp + 0x2100]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0x3b95e7dc
mov edx, 0x26ebe2ad
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, 0x4a2f25a0
mov dword [esp + 0x500], eax
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0xc4], eax
call fcn.0041cba0
mov eax, 0xfa94751b
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, dword [esp + 0x2138]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4d97ac]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xc0], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1074]
mov dword [esp + 0x2110], ecx
mov dword [esp + 0x2114], 0
mov dword [esp + 0x211c], 1
mov ecx, dword [0x4d97b0]
mov edx, esp
lea esi, [esp + 0x2100]
mov dword [edx], esi
mov dword [esp + 0xbc], eax
call ecx
sub esp, 4
mov ecx, 0x358b008c
mov edx, 0x418bdf70
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, 0x615c9240
mov dword [esp + 0x500], eax
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0xb8], eax
call fcn.0041cba0
mov eax, 0xcaa34a97
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, dword [esp + 0x2138]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2140]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0xb4], eax
call ecx
sub esp, 8
mov ecx, 0x86d1c6c9
mov edx, 0xd89f4e45
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, 0x4ffbd010
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x84c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], ecx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [0x448642]
mov esi, 6
lea edi, [esp + 0x84c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa0], esi
call fcn.004086f0
lea ecx, [esp + 0x1692]
mov dword [esp], ecx
mov dword [esp + 0x9c], eax
call fcn.004090e0
mov ecx, 0xfe
lea edx, [esp + 0x84c]
lea esi, [esp + 0x1692]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x98], ecx
call fcn.004086f0
lea ecx, [esp + 0x84c]
lea edx, [esp + 0x1cb0]
mov dword [esp + 0x2110], edx
mov dword [esp + 0x2114], ecx
mov dword [esp + 0x211c], 0
mov ecx, dword [0x4d97b0]
mov edx, esp
lea esi, [esp + 0x2100]
mov dword [edx], esi
mov dword [esp + 0x94], eax
call ecx
sub esp, 4
mov ecx, 0x77fce352
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x2152], bl
mov dword [esp + 0x500], ecx
jmp 0x422ac9
mov eax, 0x269336bc
mov ecx, 0x57a84ec2
mov dl, byte [esp + 0x2152]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x3b5c1bfc
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x9410753c
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, 0x6a0773a4
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, dword [esp + 0x2138]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4d97ac]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x90], eax
call ecx
sub esp, 0x10
mov ecx, 0x98ddf187
mov dword [esp + 0x508], 1
mov dword [esp + 0x500], ecx
mov dword [esp + 0x8c], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b2b3f75
jmp 0x422ac9
mov eax, 0x4480bef4
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0x95d4e0c4
cmp dword [esp + 0x2140], 0
setne cl
and cl, 1
mov byte [esp + 0x2153], cl
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, 0xc30750b1
mov ecx, 0x8f5a2aa
mov dl, byte [esp + 0x2153]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x500], 0xc30750b1
mov dword [esp + 0x88], eax
jmp 0x422ac9
mov eax, 0xf40ee4d7
mov ecx, 0xdce5a9cb
cmp dword [esp + 0x2144], 0
cmovne eax, ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov eax, dword [esp + 0x2144]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x500], 0xf40ee4d7
mov dword [esp + 0x84], eax
jmp 0x422ac9
mov eax, 0x8c80ac53
mov dword [esp + 0x500], eax
jmp 0x422ac9
lea eax, [esp + 0x1692]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x80], eax
call fcn.0041f3f0
mov eax, 0xa91828c2
mov ecx, dword [esp + 0x508]
mov dword [esp + 0x2148], ecx
mov dword [esp + 0x500], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x7ca06cc2
jmp 0x422ac9
mov eax, dword [esp + 0x2148]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0x104
lea ecx, [esp + 0xc60]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x7c], eax
call fcn.00408330
lea ecx, [esp + 0x50c]
mov dword [esp + 0x524], eax
mov dword [esp], ecx
call fcn.0041cf40
mov dword [esp + 0x500], 0x24aeda24
mov dword [esp + 0x78], eax
jmp 0x422ac9
mov dword [esp + 0x2148], 0
mov dword [esp + 0x500], 0x85f3a039
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x189c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], ecx
call fcn.00407ed0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1692]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [esp + 0x189c]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], ecx
call fcn.0040b290
mov eax, 0x104
lea ecx, [esp + 0x1692]
lea edx, [esp + 0x1aa6]
mov esi, dword [esp + 0x518]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x58], eax
call fcn.004086f0
lea ecx, [esp + 0x189c]
mov dword [esp], ecx
mov dword [esp + 0x54], eax
call fcn.004090e0
lea ecx, [esp + 0x1692]
mov edx, 0xb8560d9c
lea esi, [esp + 0x189c]
mov edi, dword [esp + 0x518]
add edx, 0x104
sub edx, edi
sub edx, 0xb8560d9c
mov edi, dword [esp + 0x518]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.004086f0
lea ecx, [esp + 0x1692]
mov edx, dword [0x4d97a8]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x50], eax
call edx
sub esp, 8
mov dword [esp + 0x213c], eax
mov dword [esp + 0x500], 0x94e44308
jmp 0x422ac9
mov dword [esp + 0x500], 0x7b499076
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0x4c], eax
call fcn.0041cba0
mov dword [esp + 0x500], 0x4a2f25a0
jmp 0x422ac9
lea eax, [esp + 0x127e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa56]
mov dword [esp], ecx
mov dword [esp + 0x48], eax
call fcn.0041cba0
mov dword [esp + 0x500], 0x615c9240
jmp 0x422ac9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x84c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
call fcn.00407ed0
mov ecx, 0x104
lea edx, [0x448642]
mov esi, 6
lea edi, [esp + 0x84c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], esi
call fcn.004086f0
lea ecx, [esp + 0x1692]
mov dword [esp], ecx
mov dword [esp + 0x30], eax
call fcn.004090e0
mov ecx, 0xfe
lea edx, [esp + 0x84c]
lea esi, [esp + 0x1692]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x2c], ecx
call fcn.004086f0
lea ecx, [esp + 0x84c]
lea edx, [esp + 0x1cb0]
mov dword [esp + 0x2110], edx
mov dword [esp + 0x2114], ecx
mov dword [esp + 0x211c], 0
mov ecx, dword [0x4d97b0]
mov edx, esp
lea esi, [esp + 0x2100]
mov dword [edx], esi
mov dword [esp + 0x28], eax
call ecx
sub esp, 4
mov dword [esp + 0x500], 0x4ffbd010
mov dword [esp + 0x24], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x3b5c1bfc
jmp 0x422ac9
mov eax, dword [esp + 0x2138]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4d97ac]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x20], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x508], 1
mov dword [esp + 0x500], 0x6a0773a4
mov dword [esp + 0x1c], eax
jmp 0x422ac9
mov dword [esp + 0x500], 0x4480bef4
jmp 0x422ac9
lea eax, [esp + 0x1692]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x18], eax
call fcn.0041f3f0
mov eax, dword [esp + 0x508]
mov dword [esp + 0x2148], eax
mov dword [esp + 0x500], 0x8c80ac53
jmp 0x41f7ef