Function at 0x41e880
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2180
call fcn.0042a300
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x548]
mov esi, 0x10
lea edi, [esp + 0x552]
lea ebx, [esp + 0x562]
mov dword [esp + 0x51c], eax
mov eax, 0x28
mov dword [esp + 0x518], eax
lea eax, [esp + 0x572]
mov dword [esp + 0x514], eax
mov eax, 0xc8
mov dword [esp + 0x510], eax
lea eax, [esp + 0x59a]
mov dword [esp + 0x50c], eax
mov eax, 0x20a
mov dword [esp + 0x508], eax
lea eax, [esp + 0x662]
mov dword [esp + 0x504], eax
lea eax, [esp + 0xa76]
mov dword [esp + 0x500], eax
lea eax, [esp + 0xc80]
mov dword [esp + 0x4fc], eax
lea eax, [esp + 0xe8a]
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0x1094]
mov dword [esp + 0x4f4], eax
lea eax, [esp + 0x129e]
mov dword [esp + 0x4f0], eax
lea eax, [esp + 0x14a8]
mov dword [esp + 0x4ec], eax
lea eax, [esp + 0x16b2]
mov dword [esp + 0x4e8], eax
lea eax, [esp + 0x18bc]
mov dword [esp + 0x4e4], eax
lea eax, [esp + 0x1ac6]
mov dword [esp + 0x4e0], eax
lea eax, [esp + 0x1cd0]
mov dword [esp + 0x4dc], eax
lea eax, [esp + 0x1eda]
mov dword [esp + 0x4d8], eax
mov eax, 0x3c
mov dword [esp + 0x4d4], eax
lea eax, [esp + 0x2120]
mov dword [esp + 0x2164], 0
mov dword [esp + 0x2160], 0
mov dword [esp + 0x215c], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x4d0], ebx
mov dword [esp + 0x4cc], ecx
mov dword [esp + 0x4c8], edx
mov dword [esp + 0x4c4], esi
mov dword [esp + 0x4c0], edi
call fcn.0042a330
mov dword [esp + 0x20e4], 0
mov eax, dword [esp + 0x4d8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4e8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4ec]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4f0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4f8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x4fc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x500]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x504]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042a330
mov eax, dword [esp + 0x50c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0042a330
mov eax, dword [esp + 0x514]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0042a330
mov eax, dword [esp + 0x4d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0042a330
mov eax, dword [esp + 0x4c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0042a330
mov eax, dword [esp + 0x4c8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0042a330
mov dword [esp + 0x52c], 0
mov dword [esp + 0x528], 0xffffffff
call fcn.0041e100
mov dword [esp + 0x216c], eax
mov dword [esp + 0x520], 0xde87c859
mov eax, dword [esp + 0x520]
mov ecx, eax
sub ecx, 0x79d63962
mov dword [esp + 0x4bc], eax
mov dword [esp + 0x4b8], ecx
jg 0x41fdfd
jmp 0x41ec87
mov eax, dword [esp + 0x4bc]
sub eax, 0x73d49c77
mov dword [esp + 0x4b4], eax
jg 0x41fddf
jmp 0x41eca5
mov eax, dword [esp + 0x4bc]
sub eax, 0x7311dc54
mov dword [esp + 0x4b0], eax
jg 0x41fdc1
jmp 0x41ecc3
mov eax, dword [esp + 0x4bc]
sub eax, 0x6fdf03af
mov dword [esp + 0x4ac], eax
jg 0x41fda3
jmp 0x41ece1
mov eax, dword [esp + 0x4bc]
sub eax, 0x6a160d52
mov dword [esp + 0x4a8], eax
jg 0x41fd85
jmp 0x41ecff
mov eax, dword [esp + 0x4bc]
sub eax, 0x68c04dfb
mov dword [esp + 0x4a4], eax
jg 0x41fd67
jmp 0x41ed1d
mov eax, dword [esp + 0x4bc]
sub eax, 0x679f1f86
mov dword [esp + 0x4a0], eax
jg 0x41fd49
jmp 0x41ed3b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6627bcb7
mov dword [esp + 0x49c], eax
jg 0x41fd2b
jmp 0x41ed59
mov eax, dword [esp + 0x4bc]
sub eax, 0x6589415c
mov dword [esp + 0x498], eax
jg 0x41fd0d
jmp 0x41ed77
mov eax, dword [esp + 0x4bc]
sub eax, 0x6206db83
mov dword [esp + 0x494], eax
jg 0x41fcef
jmp 0x41ed95
mov eax, dword [esp + 0x4bc]
sub eax, 0x6192dcba
mov dword [esp + 0x490], eax
jg 0x41fcd1
jmp 0x41edb3
mov eax, dword [esp + 0x4bc]
sub eax, 0x5baa14a2
mov dword [esp + 0x48c], eax
jg 0x41fcb3
jmp 0x41edd1
mov eax, dword [esp + 0x4bc]
sub eax, 0x587d0224
mov dword [esp + 0x488], eax
jg 0x41fc95
jmp 0x41edef
mov eax, dword [esp + 0x4bc]
sub eax, 0x543dce4a
mov dword [esp + 0x484], eax
jg 0x41fc77
jmp 0x41ee0d
mov eax, dword [esp + 0x4bc]
sub eax, 0x50db167f
mov dword [esp + 0x480], eax
jg 0x41fc59
jmp 0x41ee2b
mov eax, dword [esp + 0x4bc]
sub eax, 0x505d1c40
mov dword [esp + 0x47c], eax
jg 0x41fc3b
jmp 0x41ee49
mov eax, dword [esp + 0x4bc]
sub eax, 0x4ba9f8aa
mov dword [esp + 0x478], eax
jg 0x41fc1d
jmp 0x41ee67
mov eax, dword [esp + 0x4bc]
sub eax, 0x4b48cf9b
mov dword [esp + 0x474], eax
jg 0x41fbff
jmp 0x41ee85
mov eax, dword [esp + 0x4bc]
sub eax, 0x4aabd2df
mov dword [esp + 0x470], eax
jg 0x41fbe1
jmp 0x41eea3
mov eax, dword [esp + 0x4bc]
sub eax, 0x87328057
mov dword [esp + 0x46c], eax
jg 0x41eedf
jmp 0x41eec1
mov eax, dword [esp + 0x4bc]
sub eax, 0x86e3b1d7
mov dword [esp + 0x468], eax
je 0x421ad2
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x8af51826
mov dword [esp + 0x464], eax
jg 0x41ef1b
jmp 0x41eefd
mov eax, dword [esp + 0x4bc]
sub eax, 0x87328058
mov dword [esp + 0x460], eax
je 0x42008e
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x8bcef214
mov dword [esp + 0x45c], eax
jg 0x41ef57
jmp 0x41ef39
mov eax, dword [esp + 0x4bc]
sub eax, 0x8af51827
mov dword [esp + 0x458], eax
je 0x42189f
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x8f04a2b8
mov dword [esp + 0x454], eax
jg 0x41ef93
jmp 0x41ef75
mov eax, dword [esp + 0x4bc]
sub eax, 0x8bcef215
mov dword [esp + 0x450], eax
je 0x421be3
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x990f6f10
mov dword [esp + 0x44c], eax
jg 0x41efcf
jmp 0x41efb1
mov eax, dword [esp + 0x4bc]
sub eax, 0x8f04a2b9
mov dword [esp + 0x448], eax
je 0x421ee9
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x9f1ee0ac
mov dword [esp + 0x444], eax
jg 0x41f00b
jmp 0x41efed
mov eax, dword [esp + 0x4bc]
sub eax, 0x990f6f11
mov dword [esp + 0x440], eax
je 0x421ddf
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xa292a160
mov dword [esp + 0x43c], eax
jg 0x41f047
jmp 0x41f029
mov eax, dword [esp + 0x4bc]
sub eax, 0x9f1ee0ad
mov dword [esp + 0x438], eax
je 0x420141
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xa88e9dc5
mov dword [esp + 0x434], eax
jg 0x41f083
jmp 0x41f065
mov eax, dword [esp + 0x4bc]
sub eax, 0xa292a161
mov dword [esp + 0x430], eax
je 0x420023
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xac5a4762
mov dword [esp + 0x42c], eax
jg 0x41f0bf
jmp 0x41f0a1
mov eax, dword [esp + 0x4bc]
sub eax, 0xa88e9dc6
mov dword [esp + 0x428], eax
je 0x421ae2
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xae306f13
mov dword [esp + 0x424], eax
jg 0x41f0fb
jmp 0x41f0dd
mov eax, dword [esp + 0x4bc]
sub eax, 0xac5a4763
mov dword [esp + 0x420], eax
je 0x421b86
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xb8ec8e93
mov dword [esp + 0x41c], eax
jg 0x41f137
jmp 0x41f119
mov eax, dword [esp + 0x4bc]
sub eax, 0xae306f14
mov dword [esp + 0x418], eax
je 0x421470
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xb903901e
mov dword [esp + 0x414], eax
jg 0x41f173
jmp 0x41f155
mov eax, dword [esp + 0x4bc]
sub eax, 0xb8ec8e94
mov dword [esp + 0x410], eax
je 0x4218da
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xbb77e2c9
mov dword [esp + 0x40c], eax
jg 0x41f1af
jmp 0x41f191
mov eax, dword [esp + 0x4bc]
sub eax, 0xb903901f
mov dword [esp + 0x408], eax
je 0x4213dd
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xc079fb16
mov dword [esp + 0x404], eax
jg 0x41f1eb
jmp 0x41f1cd
mov eax, dword [esp + 0x4bc]
sub eax, 0xbb77e2ca
mov dword [esp + 0x400], eax
je 0x421cd8
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xc3331983
mov dword [esp + 0x3fc], eax
jg 0x41f227
jmp 0x41f209
mov eax, dword [esp + 0x4bc]
sub eax, 0xc079fb17
mov dword [esp + 0x3f8], eax
je 0x421c0c
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xc537c0bc
mov dword [esp + 0x3f4], eax
jg 0x41f263
jmp 0x41f245
mov eax, dword [esp + 0x4bc]
sub eax, 0xc3331984
mov dword [esp + 0x3f0], eax
je 0x421aaf
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xc7a89e36
mov dword [esp + 0x3ec], eax
jg 0x41f29f
jmp 0x41f281
mov eax, dword [esp + 0x4bc]
sub eax, 0xc537c0bd
mov dword [esp + 0x3e8], eax
je 0x421c40
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xc7d2cd37
mov dword [esp + 0x3e4], eax
jg 0x41f2db
jmp 0x41f2bd
mov eax, dword [esp + 0x4bc]
sub eax, 0xc7a89e37
mov dword [esp + 0x3e0], eax
je 0x4216ca
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xcac048bb
mov dword [esp + 0x3dc], eax
jg 0x41f317
jmp 0x41f2f9
mov eax, dword [esp + 0x4bc]
sub eax, 0xc7d2cd38
mov dword [esp + 0x3d8], eax
je 0x420391
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xcddf5352
mov dword [esp + 0x3d4], eax
jg 0x41f353
jmp 0x41f335
mov eax, dword [esp + 0x4bc]
sub eax, 0xcac048bc
mov dword [esp + 0x3d0], eax
je 0x42208b
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xd8226430
mov dword [esp + 0x3cc], eax
jg 0x41f38f
jmp 0x41f371
mov eax, dword [esp + 0x4bc]
sub eax, 0xcddf5353
mov dword [esp + 0x3c8], eax
je 0x42032b
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xde87c858
mov dword [esp + 0x3c4], eax
jg 0x41f3cb
jmp 0x41f3ad
mov eax, dword [esp + 0x4bc]
sub eax, 0xd8226431
mov dword [esp + 0x3c0], eax
je 0x4217bc
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xe03e16e0
mov dword [esp + 0x3bc], eax
jg 0x41f407
jmp 0x41f3e9
mov eax, dword [esp + 0x4bc]
sub eax, 0xde87c859
mov dword [esp + 0x3b8], eax
je 0x41fe20
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xe2164890
mov dword [esp + 0x3b4], eax
jg 0x41f443
jmp 0x41f425
mov eax, dword [esp + 0x4bc]
sub eax, 0xe03e16e1
mov dword [esp + 0x3b0], eax
je 0x421727
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xe239b21b
mov dword [esp + 0x3ac], eax
jg 0x41f47f
jmp 0x41f461
mov eax, dword [esp + 0x4bc]
sub eax, 0xe2164891
mov dword [esp + 0x3a8], eax
je 0x42187c
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xe8c74c21
mov dword [esp + 0x3a4], eax
jg 0x41f4bb
jmp 0x41f49d
mov eax, dword [esp + 0x4bc]
sub eax, 0xe239b21c
mov dword [esp + 0x3a0], eax
je 0x42197b
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xea37e560
mov dword [esp + 0x39c], eax
jg 0x41f4f7
jmp 0x41f4d9
mov eax, dword [esp + 0x4bc]
sub eax, 0xe8c74c22
mov dword [esp + 0x398], eax
je 0x421c2f
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xf06a300d
mov dword [esp + 0x394], eax
jg 0x41f533
jmp 0x41f515
mov eax, dword [esp + 0x4bc]
sub eax, 0xea37e561
mov dword [esp + 0x390], eax
je 0x421b5d
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x41ce1ad3
mov dword [esp + 0x38c], eax
jg 0x41fbc3
jmp 0x41f551
mov eax, dword [esp + 0x4bc]
sub eax, 0x41c04c41
mov dword [esp + 0x388], eax
jg 0x41fba5
jmp 0x41f56f
mov eax, dword [esp + 0x4bc]
sub eax, 0x418a7924
mov dword [esp + 0x384], eax
jg 0x41fb87
jmp 0x41f58d
mov eax, dword [esp + 0x4bc]
sub eax, 0x3d875072
mov dword [esp + 0x380], eax
jg 0x41fb69
jmp 0x41f5ab
mov eax, dword [esp + 0x4bc]
sub eax, 0x3a75df56
mov dword [esp + 0x37c], eax
jg 0x41fb4b
jmp 0x41f5c9
mov eax, dword [esp + 0x4bc]
sub eax, 0x360a9e14
mov dword [esp + 0x378], eax
jg 0x41fb2d
jmp 0x41f5e7
mov eax, dword [esp + 0x4bc]
sub eax, 0x332326a0
mov dword [esp + 0x374], eax
jg 0x41fb0f
jmp 0x41f605
mov eax, dword [esp + 0x4bc]
sub eax, 0x2f0bda3e
mov dword [esp + 0x370], eax
jg 0x41faf1
jmp 0x41f623
mov eax, dword [esp + 0x4bc]
sub eax, 0x2ce6bceb
mov dword [esp + 0x36c], eax
jg 0x41fad3
jmp 0x41f641
mov eax, dword [esp + 0x4bc]
sub eax, 0x2a024eef
mov dword [esp + 0x368], eax
jg 0x41fab5
jmp 0x41f65f
mov eax, dword [esp + 0x4bc]
sub eax, 0x29c096d8
mov dword [esp + 0x364], eax
jg 0x41fa97
jmp 0x41f67d
mov eax, dword [esp + 0x4bc]
sub eax, 0x2420d0ad
mov dword [esp + 0x360], eax
jg 0x41fa79
jmp 0x41f69b
mov eax, dword [esp + 0x4bc]
sub eax, 0x223630cc
mov dword [esp + 0x35c], eax
jg 0x41fa5b
jmp 0x41f6b9
mov eax, dword [esp + 0x4bc]
sub eax, 0x1a2ada04
mov dword [esp + 0x358], eax
jg 0x41fa3d
jmp 0x41f6d7
mov eax, dword [esp + 0x4bc]
sub eax, 0x18bb17d7
mov dword [esp + 0x354], eax
jg 0x41fa1f
jmp 0x41f6f5
mov eax, dword [esp + 0x4bc]
sub eax, 0x1465c202
mov dword [esp + 0x350], eax
jg 0x41fa01
jmp 0x41f713
mov eax, dword [esp + 0x4bc]
sub eax, 0x14234ec3
mov dword [esp + 0x34c], eax
jg 0x41f9e3
jmp 0x41f731
mov eax, dword [esp + 0x4bc]
sub eax, 0x102e288c
mov dword [esp + 0x348], eax
jg 0x41f9c5
jmp 0x41f74f
mov eax, dword [esp + 0x4bc]
sub eax, 0xf373cc0
mov dword [esp + 0x344], eax
jg 0x41f9a7
jmp 0x41f76d
mov eax, dword [esp + 0x4bc]
sub eax, 0xbcfbbc6
mov dword [esp + 0x340], eax
jg 0x41f989
jmp 0x41f78b
mov eax, dword [esp + 0x4bc]
sub eax, 0xadd3325
mov dword [esp + 0x33c], eax
jg 0x41f96b
jmp 0x41f7a9
mov eax, dword [esp + 0x4bc]
sub eax, 0x5d793d6
mov dword [esp + 0x338], eax
jg 0x41f94d
jmp 0x41f7c7
mov eax, dword [esp + 0x4bc]
sub eax, 0x3eb67f6
mov dword [esp + 0x334], eax
jg 0x41f92f
jmp 0x41f7e5
mov eax, dword [esp + 0x4bc]
sub eax, 0x2b58cc7
mov dword [esp + 0x330], eax
jg 0x41f911
jmp 0x41f803
mov eax, dword [esp + 0x4bc]
sub eax, 0x185f9
mov dword [esp + 0x32c], eax
jg 0x41f8f3
jmp 0x41f821
mov eax, dword [esp + 0x4bc]
sub eax, 0xfdace5f2
mov dword [esp + 0x328], eax
jg 0x41f8d5
jmp 0x41f83f
mov eax, dword [esp + 0x4bc]
sub eax, 0xf7dab86f
mov dword [esp + 0x324], eax
jg 0x41f8b7
jmp 0x41f85d
mov eax, dword [esp + 0x4bc]
sub eax, 0xf06a300e
mov dword [esp + 0x320], eax
je 0x422026
jmp 0x41f87b
mov eax, dword [esp + 0x4bc]
sub eax, 0xf0728645
mov dword [esp + 0x31c], eax
je 0x41ffcb
jmp 0x41f899
mov eax, dword [esp + 0x4bc]
sub eax, 0xf1180cb4
mov dword [esp + 0x318], eax
je 0x421bd2
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xf7dab870
mov dword [esp + 0x314], eax
je 0x421ba9
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xfdace5f3
mov dword [esp + 0x310], eax
je 0x420062
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x185fa
mov dword [esp + 0x30c], eax
je 0x42036f
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x2b58cc8
mov dword [esp + 0x308], eax
je 0x421e17
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x3eb67f7
mov dword [esp + 0x304], eax
je 0x421938
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x5d793d7
mov dword [esp + 0x300], eax
je 0x420380
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xadd3326
mov dword [esp + 0x2fc], eax
je 0x4203a1
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xbcfbbc7
mov dword [esp + 0x2f8], eax
je 0x421c6a
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0xf373cc1
mov dword [esp + 0x2f4], eax
je 0x421494
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x102e288d
mov dword [esp + 0x2f0], eax
je 0x420151
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x14234ec4
mov dword [esp + 0x2ec], eax
je 0x41ff7e
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x1465c203
mov dword [esp + 0x2e8], eax
je 0x421ce9
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x18bb17d8
mov dword [esp + 0x2e4], eax
je 0x421d08
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x1a2ada05
mov dword [esp + 0x2e0], eax
je 0x420512
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x223630cd
mov dword [esp + 0x2dc], eax
je 0x42196a
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x2420d0ae
mov dword [esp + 0x2d8], eax
je 0x42007d
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x29c096d9
mov dword [esp + 0x2d4], eax
je 0x42003e
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x2a024ef0
mov dword [esp + 0x2d0], eax
je 0x422016
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x2ce6bcec
mov dword [esp + 0x2cc], eax
je 0x421dcf
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x2f0bda3f
mov dword [esp + 0x2c8], eax
je 0x421c8b
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x332326a1
mov dword [esp + 0x2c4], eax
je 0x4216db
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x360a9e15
mov dword [esp + 0x2c0], eax
je 0x421ef9
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x3a75df57
mov dword [esp + 0x2bc], eax
je 0x421c7a
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x3d875073
mov dword [esp + 0x2b8], eax
je 0x41feb8
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x418a7925
mov dword [esp + 0x2b4], eax
je 0x421717
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x41c04c42
mov dword [esp + 0x2b0], eax
je 0x421949
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x41ce1ad4
mov dword [esp + 0x2ac], eax
je 0x422006
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x4aabd2e0
mov dword [esp + 0x2a8], eax
je 0x41ffa8
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x4b48cf9c
mov dword [esp + 0x2a4], eax
je 0x4214cf
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x4ba9f8ab
mov dword [esp + 0x2a0], eax
je 0x41ff6d
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x505d1c41
mov dword [esp + 0x29c], eax
je 0x421e4f
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x50db1680
mov dword [esp + 0x298], eax
je 0x41fe61
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x543dce4b
mov dword [esp + 0x294], eax
je 0x421d17
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x587d0225
mov dword [esp + 0x290], eax
je 0x421cc8
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x5baa14a3
mov dword [esp + 0x28c], eax
je 0x41fff7
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6192dcbb
mov dword [esp + 0x288], eax
je 0x421429
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6206db84
mov dword [esp + 0x284], eax
je 0x4213cc
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6589415d
mov dword [esp + 0x280], eax
je 0x41fe46
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6627bcb8
mov dword [esp + 0x27c], eax
je 0x4217cd
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x679f1f87
mov dword [esp + 0x278], eax
je 0x421781
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x68c04dfc
mov dword [esp + 0x274], eax
je 0x421419
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6a160d53
mov dword [esp + 0x270], eax
je 0x42204f
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x6fdf03b0
mov dword [esp + 0x26c], eax
je 0x421b4c
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x7311dc55
mov dword [esp + 0x268], eax
je 0x421d32
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x73d49c78
mov dword [esp + 0x264], eax
je 0x420536
jmp 0x41fe1b
mov eax, dword [esp + 0x4bc]
sub eax, 0x79d63963
mov dword [esp + 0x260], eax
je 0x42195a
jmp 0x41fe1b
jmp 0x422096
mov eax, 0x50db1680
mov ecx, 0x6589415d
mov edx, dword [esp + 0x216c]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x2168], 0xffffffff
mov dword [esp + 0x520], 0xbb77e2ca
jmp 0x422096
mov eax, 0x104
lea ecx, [esp + 0xc80]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x25c], eax
call fcn.00407cd0
lea ecx, [esp + 0x52c]
mov dword [esp + 0x544], eax
mov dword [esp], ecx
call fcn.0041bf70
mov ecx, 0x29c096d9
mov edx, 0x3d875073
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x104
lea ecx, [esp + 0x14a8]
lea edx, [esp + 0xc80]
mov esi, dword [esp + 0x544]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x258], eax
call fcn.00408480
lea ecx, [esp + 0x14a8]
mov dword [esp + 0x530], eax
mov eax, dword [esp + 0x530]
add eax, 0x4076085e
sub eax, 4
sub eax, 0x4076085e
mov word [esp + eax*2 + 0x14a8], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0xa292a161
mov edx, 0x4ba9f8ab
mov dword [esp + 0x2160], eax
cmp dword [esp + 0x2160], 0
cmovne ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x14234ec4
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x4aabd2e0
cmp eax, 0xb7
sete dl
and dl, 1
mov byte [esp + 0x2173], dl
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x5baa14a3
mov ecx, 0xf0728645
mov dl, byte [esp + 0x2173]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [esp + 0x2160]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x520], 0x5baa14a3
mov dword [esp + 0x254], eax
jmp 0x422096
mov eax, dword [esp + 0x2160]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x520], 0xa292a161
mov dword [esp + 0x250], eax
jmp 0x422096
mov dword [esp + 0x2168], 0
mov dword [esp + 0x520], 0xbb77e2ca
jmp 0x422096
mov eax, 0x2420d0ae
mov ecx, 0xfdace5f3
cmp dword [esp + 0x52c], 6
cmovb eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x2168], 0xffffffff
mov dword [esp + 0x520], 0xbb77e2ca
jmp 0x422096
mov eax, 0x87328058
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, esp
lea ecx, [esp + 0xa76]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc80]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1ac6]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x24c], eax
mov dword [esp + 0x248], edx
call fcn.00409b40
mov ecx, esp
mov edx, dword [esp + 0x248]
mov dword [ecx], edx
mov dword [esp + 0x244], eax
call fcn.00408a90
mov dword [esp + 0x538], eax
mov eax, esp
mov dword [eax], 0
call fcn.004220a0
mov dword [esp + 0x240], edx
mov dword [esp + 0x23c], eax
call fcn.00405d10
mov ecx, dword [esp + 0x23c]
imul ecx, eax
mov dword [esp], ecx
call fcn.0042ac76
mov eax, 0x9f1ee0ad
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0x102e288d
jmp 0x422096
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x14a8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x238], eax
mov dword [esp + 0x234], ecx
call fcn.00407920
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x129e]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x230], eax
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x228], edx
call fcn.00407920
mov ecx, 0x104
lea edx, [esp + 0x14a8]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x224], eax
mov dword [esp + 0x220], ecx
call fcn.0040acf0
lea eax, [esp + 0x14a8]
mov dword [esp], eax
call fcn.00408a90
mov ecx, 0x104
lea edx, [esp + 0x129e]
lea esi, [esp + 0x1ac6]
mov dword [esp + 0x524], eax
mov eax, dword [esp + 0x538]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x21c], ecx
call fcn.00408090
lea ecx, [esp + 0x129e]
mov edx, 0x104
lea esi, [esp + 0x14a8]
mov edi, dword [esp + 0x524]
mov ebx, dword [esp + 0x538]
sub edx, 0xa4195341
sub edx, ebx
add edx, 0xa4195341
mov ebx, dword [esp + 0x538]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x218], eax
call fcn.00408090
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x129e]
mov edi, 0x104
mov ebx, dword [esp + 0x538]
sub edi, 0x1c9dccba
sub edi, ebx
add edi, 0x1c9dccba
mov ebx, dword [esp + 0x524]
add edi, 0x61f2fb86
sub edi, ebx
sub edi, 0x61f2fb86
mov ebx, dword [esp + 0x538]
shl ebx, 1
add esi, ebx
mov ebx, dword [esp + 0x524]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x214], eax
mov dword [esp + 0x210], edx
call fcn.00408090
mov dword [esp + 0x520], 0xcddf5353
mov dword [esp + 0x20c], eax
jmp 0x422096
lea eax, [esp + 0xa76]
lea ecx, [esp + 0x129e]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0x185fa
mov edx, 0x102e288d
cmp eax, 0
cmove ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x5d793d7
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0xc7d2cd38
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0xadd3326
jmp 0x422096
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x18bc]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x208], eax
mov dword [esp + 0x204], ecx
call fcn.00407920
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x16b2]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x200], eax
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x1f8], edx
call fcn.00407920
mov ecx, 0x104
lea edx, [esp + 0x18bc]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f0], ecx
call fcn.0040acf0
mov eax, 0x104
lea ecx, [esp + 0x16b2]
lea edx, [esp + 0x1ac6]
mov esi, dword [esp + 0x538]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1ec], eax
call fcn.00408090
lea ecx, [esp + 0x18bc]
mov dword [esp], ecx
mov dword [esp + 0x1e8], eax
call fcn.00408a90
lea ecx, [esp + 0x16b2]
mov edx, 0x104
lea esi, [esp + 0x18bc]
mov edi, dword [esp + 0x538]
sub edx, 0x8c72bbbf
sub edx, edi
add edx, 0x8c72bbbf
mov edi, dword [esp + 0x538]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.00408090
lea ecx, [esp + 0x16b2]
mov edx, dword [0x47e9c0]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x1e4], eax
call edx
sub esp, 8
mov dword [esp + 0x215c], eax
mov dword [esp + 0x520], 0x1a2ada05
jmp 0x422096
mov eax, 0x73d49c78
mov ecx, 0xadd3326
cmp dword [esp + 0x215c], 0
cmove eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [0x47e9b4]
mov ecx, dword [0x47e7ec]
mov edx, dword [0x47e814]
mov esi, dword [esp + 0x215c]
mov edi, esp
lea ebx, [esp + 0x211c]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e7fc]
mov esi, dword [0x47e814]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1e0], eax
lea eax, [esp + 0x2118]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e800]
mov esi, dword [0x47e814]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1dc], eax
lea eax, [esp + 0x2114]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e7ec]
mov esi, dword [0x47e810]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1d8], eax
lea eax, [esp + 0x2110]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e7e0]
mov esi, dword [0x47e820]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1d4], eax
lea eax, [esp + 0x210c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e7ec]
mov esi, dword [0x47e824]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1d0], eax
lea eax, [esp + 0x2108]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e830]
mov esi, dword [0x47e828]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1cc], eax
lea eax, [esp + 0x2104]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e82c]
mov esi, dword [0x47e828]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1c8], eax
lea eax, [esp + 0x2100]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b4]
mov edx, dword [0x47e82c]
mov esi, dword [0x47e814]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [esp + 0x1c4], eax
lea eax, [esp + 0x20fc]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x47e9b0]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x1c0], eax
call ecx
sub esp, 4
mov dword [esp + 0x1bc], eax
call fcn.0042ac53
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
mov eax, esp
lea edx, [esp + 0x59a]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
mov dword [esp + 0x1b8], edx
call fcn.0042b608
mov ecx, esp
mov edx, dword [esp + 0x1b8]
mov dword [ecx], edx
mov dword [esp + 0x1b4], eax
call fcn.00408a90
mov dword [esp + 0x544], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x544], edx
mov word [esp + eax*2 + 0x59a], 0x2e
mov eax, dword [esp + 0x544]
lea eax, [esp + eax*2 + 0x59a]
mov dword [esp + 0x1b0], eax
call fcn.0042ac53
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x1b0]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0042b608
mov ecx, esp
mov edx, dword [esp + 0x1b8]
mov dword [ecx], edx
mov dword [esp + 0x1ac], eax
call fcn.00408a90
mov dword [esp + 0x544], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x544], ecx
mov word [esp + eax*2 + 0x59a], 0x2e
mov eax, dword [esp + 0x544]
lea eax, [esp + eax*2 + 0x59a]
mov dword [esp + 0x1a8], eax
call fcn.0042ac53
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x1a8]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0042b608
mov ecx, esp
mov edx, dword [esp + 0x1b8]
mov dword [ecx], edx
mov dword [esp + 0x1a4], eax
call fcn.00408a90
mov dword [esp + 0x544], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x544], ecx
mov word [esp + eax*2 + 0x59a], 0x2e
mov eax, dword [esp + 0x544]
lea eax, [esp + eax*2 + 0x59a]
mov dword [esp + 0x1a0], eax
call fcn.0042ac53
and eax, 0xc
mov ecx, esp
mov edx, dword [esp + 0x1a0]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0042b608
mov ecx, esp
mov edx, dword [esp + 0x1b8]
mov dword [ecx], edx
mov dword [esp + 0x19c], eax
call fcn.00408a90
mov dword [esp + 0x544], eax
mov eax, dword [0x435150]
movzx eax, byte [eax]
mov dword [esp + 0x540], eax
not eax
mov ecx, dword [0x435150]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x53c], eax
mov ecx, dword [0x435150]
mov edx, dword [esp + 0x540]
lea edx, [ecx + edx + 2]
inc ecx
mov esi, esp
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], edx
mov dword [esi + 8], ecx
lea eax, [esp + 0x562]
mov dword [esi], eax
mov dword [esi + 4], 0x10
call fcn.004066e0
mov eax, dword [0x47e9ac]
mov ecx, dword [0x47e808]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x20f8], eax
mov eax, dword [0x47e9a4]
xor ecx, ecx
mov edx, dword [0x47e838]
mov esi, dword [0x47e7e8]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x59a]
mov edx, dword [0x47e9a0]
mov esi, dword [0x47e804]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x198], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x18bc]
mov edx, dword [0x47e9a0]
mov esi, dword [0x47e7ec]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x194], eax
call edx
sub esp, 0xc
mov ecx, dword [0x47e99c]
mov edx, dword [0x47e7e4]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0x190], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x562]
mov edx, dword [0x47e998]
mov esi, dword [0x47e834]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x18c], eax
call edx
sub esp, 0x10
mov ecx, dword [0x47e9ac]
mov edx, dword [0x47e80c]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x188], eax
call ecx
sub esp, 8
mov dword [esp + 0x20f4], eax
mov eax, dword [0x47e994]
mov ecx, dword [esp + 0x2110]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2110]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x184], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x2108]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x180], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2108]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x17c], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e9a8]
mov edx, dword [esp + 0x20f4]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x178], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x2118]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x174], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2118]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x170], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x2114]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x16c], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2114]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x168], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x211c]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x164], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x160], eax
call ecx
sub esp, 8
mov dword [esp + 0x15c], eax
call fcn.0042ac53
lea ecx, [esp + 0x1eda]
mov edx, 5
xor esi, esi
mov dword [esp + 0x158], edx
mov edx, esi
mov esi, dword [esp + 0x158]
div esi
mov eax, dword [edx*4 + 0x435154]
mov dword [esp + 0x20e4], eax
mov eax, dword [esp + 0x20e4]
movzx eax, word [eax]
mov dword [esp + 0x540], eax
mov eax, dword [esp + 0x540]
sub eax, 0x43efa2c3
add eax, 1
add eax, 0x43efa2c3
mov edx, dword [esp + 0x20e4]
shl eax, 1
add edx, eax
movzx eax, word [edx]
mov dword [esp + 0x53c], eax
mov eax, dword [esp + 0x53c]
mov edx, dword [esp + 0x20e4]
mov edi, dword [esp + 0x540]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [esp + 0x20e4]
add edi, 2
mov ebx, dword [esp + 0x540]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00406cb0
mov eax, 0x104
lea ecx, [esp + 0x1094]
lea edx, [esp + 0x1eda]
mov esi, dword [esp + 0x540]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x154], eax
call fcn.00408090
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1094]
mov edi, 0x44581d21
mov ebx, dword [esp + 0x540]
add edi, 0x104
sub edi, ebx
sub edi, 0x44581d21
mov ebx, dword [esp + 0x540]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x150], eax
mov dword [esp + 0x14c], edx
call fcn.00408090
mov ecx, 0x104
lea edx, [esp + 0xe8a]
lea esi, [esp + 0x1eda]
mov edi, dword [esp + 0x540]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], ecx
call fcn.00408090
lea ecx, str.32.exe
mov edx, 6
lea esi, [esp + 0xe8a]
mov edi, 0
mov ebx, dword [esp + 0x540]
sub edi, ebx
add edi, 0x104
mov ebx, dword [esp + 0x540]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x140], eax
mov dword [esp + 0x13c], edx
call fcn.00408090
mov ecx, 0x10
lea edx, [esp + 0x552]
mov esi, dword [0x435168]
movzx esi, byte [esi]
mov dword [esp + 0x540], esi
mov esi, dword [esp + 0x540]
add esi, 0x44aae4c4
add esi, 1
sub esi, 0x44aae4c4
mov edi, dword [0x435168]
movzx esi, byte [edi + esi]
mov dword [esp + 0x53c], esi
mov esi, dword [esp + 0x53c]
mov edi, dword [0x435168]
add edi, dword [esp + 0x540]
add edi, 2
mov ebx, dword [0x435168]
add ebx, 1
mov dword [esp], edx
mov dword [esp + 4], 0x10
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x138], eax
mov dword [esp + 0x134], ecx
call fcn.004066e0
mov eax, dword [0x47e9ac]
mov ecx, dword [0x47e814]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x1094]
mov dword [esp + 0x20f0], eax
mov eax, dword [0x47e9a0]
mov edx, dword [0x47e7ec]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0xe8a]
mov edx, dword [0x47e9a0]
mov esi, dword [0x47e7f4]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x130], eax
call edx
sub esp, 0xc
mov ecx, dword [0x47e9a0]
mov edx, dword [0x47e7f0]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [esp + 0x12c], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x552]
mov edx, dword [0x47e998]
mov esi, dword [0x47e82c]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x128], eax
call edx
sub esp, 0x10
mov ecx, dword [0x47e9ac]
mov edx, dword [0x47e818]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x124], eax
call ecx
sub esp, 8
mov dword [esp + 0x20ec], eax
mov eax, dword [0x47e9a0]
mov ecx, dword [0x47e7ec]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x4943a8
call eax
sub esp, 0xc
mov ecx, dword [0x47e9a8]
mov edx, dword [esp + 0x20ec]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x120], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x572]
mov edx, 0
mov esi, dword [0x43516c]
movzx esi, word [esi]
mov dword [esp + 0x540], esi
mov esi, dword [esp + 0x540]
sub edx, 1
sub esi, edx
mov edx, dword [0x43516c]
movzx edx, word [edx + esi*2]
mov dword [esp + 0x53c], edx
mov edx, dword [esp + 0x53c]
mov esi, dword [0x43516c]
mov edi, dword [esp + 0x540]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x43516c]
add edi, 2
mov ebx, dword [esp + 0x540]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x11c], eax
call fcn.00406cb0
mov eax, dword [0x47e9ac]
mov ecx, dword [0x47e81c]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x572]
mov dword [esp + 0x20e8], eax
mov eax, dword [0x47e9a0]
mov edx, dword [0x47e7ec]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x129e]
mov edx, dword [0x47e9a0]
mov esi, dword [0x47e7f8]
mov edi, dword [esp + 0x215c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x118], eax
call edx
sub esp, 0xc
mov ecx, dword [0x47e9a8]
mov edx, dword [esp + 0x20e8]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x114], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e9a8]
mov edx, dword [esp + 0x20f0]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x110], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x10c], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x211c]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x108], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x2104]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x104], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x2100]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x100], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2100]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xfc], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x2104]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf8], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e994]
mov edx, dword [esp + 0x210c]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf4], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e990]
mov edx, dword [esp + 0x210c]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf0], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e9a8]
mov edx, dword [esp + 0x20f8]
mov esi, dword [esp + 0x215c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xec], eax
call ecx
sub esp, 8
mov ecx, dword [0x47e9b8]
mov edx, dword [esp + 0x215c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0xe8], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x662]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0xe4], eax
call fcn.0040b5f0
lea eax, [esp + 0x662]
mov ecx, dword [0x47e9f8]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov ecx, 0x6192dcbb
mov edx, 0x6206db84
mov dword [esp + 0x2164], eax
cmp dword [esp + 0x2164], 0
cmove ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0xb903901f
mov dword [esp + 0x520], eax
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0xe0], eax
call fcn.0041be30
mov eax, 0x68c04dfc
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, dword [esp + 0x2164]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0x4b48cf9c
mov edx, 0xae306f14
mov dword [esp + 0x534], eax
cmp dword [esp + 0x534], 0
cmovne ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x4b48cf9c
mov ecx, 0xf373cc1
cmp dword [esp + 0x534], 0x80
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0xdc], eax
call fcn.0041be30
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x86c]
lea esi, [0x4943ac]
mov dword [esp + 0x2120], 0x3c
mov dword [esp + 0x2124], 0x40
mov dword [esp + 0x2128], 0
mov dword [esp + 0x212c], esi
mov dword [esp + 0x2138], 0
mov dword [esp + 0x2140], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ecx
call fcn.00407920
mov ecx, 0x104
lea edx, [0x4943b6]
mov esi, 3
lea edi, [esp + 0x86c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xc8], esi
call fcn.00408090
lea ecx, [esp + 0x16b2]
mov dword [esp], ecx
mov dword [esp + 0xc4], eax
call fcn.00408a90
mov ecx, 0x101
lea edx, [esp + 0x86c]
lea esi, [esp + 0x16b2]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xc0], ecx
call fcn.00408090
lea ecx, [esp + 0x1cd0]
mov edx, 0
mov esi, dword [0x435170]
movzx esi, word [esi]
mov dword [esp + 0x540], esi
mov esi, dword [esp + 0x540]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x435170]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x53c], edx
mov edx, dword [esp + 0x53c]
mov esi, dword [0x435170]
mov edi, dword [esp + 0x540]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x435170]
add edi, 2
mov ebx, dword [esp + 0x540]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xbc], eax
call fcn.00406cb0
lea eax, [esp + 0x14a8]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0xe03e16e1
mov edx, 0xc7a89e37
mov dword [esp + 0x2160], eax
cmp dword [esp + 0x2160], 0
cmove ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x332326a1
mov dword [esp + 0x520], eax
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0xb8], eax
call fcn.0041be30
mov eax, 0x418a7925
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
lea eax, [esp + 0x86c]
lea ecx, [esp + 0x1cd0]
mov dword [esp + 0x2130], ecx
mov dword [esp + 0x2134], eax
mov dword [esp + 0x213c], 0
mov eax, dword [0x47e9c8]
mov ecx, esp
lea edx, [esp + 0x2120]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0xd8226431
mov edx, 0x679f1f87
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0xb4], eax
call fcn.0041be30
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, 0x6627bcb8
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x47e9c4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xb0], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1094]
mov dword [esp + 0x2130], ecx
mov dword [esp + 0x2134], 0
mov dword [esp + 0x213c], 1
mov ecx, dword [0x47e9c8]
mov edx, esp
lea esi, [esp + 0x2120]
mov dword [edx], esi
mov dword [esp + 0xac], eax
call ecx
sub esp, 4
mov ecx, 0xe2164891
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x2174], bl
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0xb8ec8e94
mov ecx, 0x8af51827
mov dl, byte [esp + 0x2174]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0xa8], eax
call fcn.0041be30
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2160]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0xa4], eax
call ecx
sub esp, 8
mov ecx, 0x223630cd
mov edx, 0x3eb67f7
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0x41c04c42
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0x79d63963
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, 0xe239b21c
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x86c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ecx
call fcn.00407920
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0x86c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], esi
call fcn.00408090
lea ecx, [esp + 0x16b2]
mov dword [esp], ecx
mov dword [esp + 0x8c], eax
call fcn.00408a90
mov ecx, 0xfe
lea edx, [esp + 0x86c]
lea esi, [esp + 0x16b2]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x88], ecx
call fcn.00408090
lea ecx, [esp + 0x86c]
lea edx, [esp + 0x1cd0]
mov dword [esp + 0x2130], edx
mov dword [esp + 0x2134], ecx
mov dword [esp + 0x213c], 0
mov ecx, dword [0x47e9c8]
mov edx, esp
lea esi, [esp + 0x2120]
mov dword [edx], esi
mov dword [esp + 0x84], eax
call ecx
sub esp, 4
mov ecx, 0xc3331984
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x2175], bl
mov dword [esp + 0x520], ecx
jmp 0x422096
mov eax, 0xa88e9dc6
mov ecx, 0x86e3b1d7
mov dl, byte [esp + 0x2175]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0x6fdf03b0
jmp 0x422096
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x47e9c4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x80], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x528], 1
mov dword [esp + 0x520], 0x6fdf03b0
mov dword [esp + 0x7c], eax
jmp 0x422096
mov eax, 0xea37e561
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0xac5a4763
cmp dword [esp + 0x2160], 0
setne cl
and cl, 1
mov byte [esp + 0x2176], cl
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0xf1180cb4
mov ecx, 0xf7dab870
mov dl, byte [esp + 0x2176]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [esp + 0x2160]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x520], 0xf1180cb4
mov dword [esp + 0x78], eax
jmp 0x422096
mov eax, 0x8bcef215
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0xc079fb17
cmp dword [esp + 0x2164], 0
setne cl
and cl, 1
mov byte [esp + 0x2177], cl
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0x3a75df57
mov ecx, 0xe8c74c22
mov dl, byte [esp + 0x2177]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0xc537c0bd
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [esp + 0x2164]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xbcfbbc7
mov dword [esp + 0x520], ecx
mov dword [esp + 0x74], eax
jmp 0x422096
mov dword [esp + 0x520], 0x3a75df57
jmp 0x422096
mov eax, 0x2f0bda3f
mov dword [esp + 0x520], eax
jmp 0x422096
lea eax, [esp + 0x16b2]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x70], eax
call fcn.0041e7b0
mov eax, 0x587d0225
mov ecx, dword [esp + 0x528]
mov dword [esp + 0x2168], ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov dword [esp + 0x520], 0xbb77e2ca
jmp 0x422096
mov eax, 0x1465c203
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, 0x18bb17d8
mov ecx, dword [esp + 0x2168]
mov dword [esp + 0x2178], ecx
mov dword [esp + 0x520], eax
jmp 0x422096
mov eax, dword [esp + 0x2178]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 0x520], 0x14234ec4
mov dword [esp + 0x6c], eax
jmp 0x422096
mov eax, esp
lea ecx, [esp + 0xa76]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc80]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1ac6]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], edx
call fcn.00409b40
mov ecx, esp
mov edx, dword [esp + 0x64]
mov dword [ecx], edx
mov dword [esp + 0x60], eax
call fcn.00408a90
mov dword [esp + 0x538], eax
mov eax, esp
mov dword [eax], 0
call fcn.004220a0
mov dword [esp + 0x5c], edx
mov dword [esp + 0x58], eax
call fcn.00405d10
mov ecx, dword [esp + 0x58]
imul ecx, eax
mov dword [esp], ecx
call fcn.0042ac76
mov dword [esp + 0x520], 0x87328058
jmp 0x422096
mov dword [esp + 0x520], 0x5d793d7
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0x54], eax
call fcn.0041be30
mov dword [esp + 0x520], 0xb903901f
jmp 0x422096
lea eax, [esp + 0x129e]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa76]
mov dword [esp], ecx
mov dword [esp + 0x50], eax
call fcn.0041be30
mov dword [esp + 0x520], 0x332326a1
jmp 0x422096
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x47e9c4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x4c], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1094]
mov dword [esp + 0x2130], ecx
mov dword [esp + 0x2134], 0
mov dword [esp + 0x213c], 1
mov ecx, dword [0x47e9c8]
mov edx, esp
lea esi, [esp + 0x2120]
mov dword [edx], esi
mov dword [esp + 0x48], eax
call ecx
sub esp, 4
mov dword [esp + 0x520], 0x6627bcb8
mov dword [esp + 0x44], eax
jmp 0x422096
mov dword [esp + 0x520], 0x41c04c42
jmp 0x422096
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x86c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], ecx
call fcn.00407920
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0x86c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], esi
call fcn.00408090
lea ecx, [esp + 0x16b2]
mov dword [esp], ecx
mov dword [esp + 0x2c], eax
call fcn.00408a90
mov ecx, 0xfe
lea edx, [esp + 0x86c]
lea esi, [esp + 0x16b2]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x28], ecx
call fcn.00408090
lea ecx, [esp + 0x86c]
lea edx, [esp + 0x1cd0]
mov dword [esp + 0x2130], edx
mov dword [esp + 0x2134], ecx
mov dword [esp + 0x213c], 0
mov ecx, dword [0x47e9c8]
mov edx, esp
lea esi, [esp + 0x2120]
mov dword [edx], esi
mov dword [esp + 0x24], eax
call ecx
sub esp, 4
mov dword [esp + 0x520], 0xe239b21c
mov dword [esp + 0x20], eax
jmp 0x422096
mov dword [esp + 0x520], 0xea37e561
jmp 0x422096
mov dword [esp + 0x520], 0x8bcef215
jmp 0x422096
mov eax, dword [esp + 0x2164]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x520], 0xc537c0bd
mov dword [esp + 0x1c], eax
jmp 0x422096
lea eax, [esp + 0x16b2]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x18], eax
call fcn.0041e7b0
mov eax, dword [esp + 0x528]
mov dword [esp + 0x2168], eax
mov dword [esp + 0x520], 0x2f0bda3f
jmp 0x422096
mov dword [esp + 0x520], 0x1465c203
jmp 0x41ec5f