Function at 0x411680
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb8
call fcn.004192b0
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea ebx, [esp + 0xdd6]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea esi, [esp + 0x7b8]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea edi, [esp + 0x5ae]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00419a60
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00419a60
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.00411050
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0xb2b2c32c
jmp 0x411a20
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x75734ff1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x7f15d2df
jg 0x411a50
cmp eax, 0x79310a1a
jg 0x411a60
cmp eax, 0x82d0f33c
jg 0x411a71
cmp eax, 0x80f6c41c
jne 0x411a20
mov dword [esp + 0x54], 0xacfaa410
jmp 0x411a20
cmp eax, 0x7f15d2e0
jne 0x411a20
jmp 0x411a03
cmp eax, 0x79310a1b
jne 0x411a20
mov dword [esp + 0x54], 0x1c41c53c
jmp 0x411a20
cmp eax, 0x8ff6f972
jg 0x411aae
cmp eax, 0x82d0f33d
jne 0x411a20
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xc48134fa
je 0x411aa5
mov eax, 0x80f6c41c
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x93d0a261
jg 0x411af7
cmp eax, 0x8ff6f973
jne 0x411a20
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00403f70
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040fdf0
test eax, eax
setne byte [esp + 0x1caa]
mov dword [esp + 0x54], 0x3c40bdad
jmp 0x411a20
cmp eax, 0x75734ff0
jg 0x411c6f
cmp eax, 0x7558bbc4
jg 0x411c92
cmp eax, 0x7384dfd2
jg 0x411d1c
cmp eax, 0x72dbb2a8
jg 0x411d34
cmp eax, 0x6dae0b27
jg 0x411d57
cmp eax, 0x6a98049c
jg 0x411eb8
cmp eax, 0x603e19d8
jg 0x411ee1
cmp eax, 0x5e9a1b9c
jg 0x411ef9
cmp eax, 0x5aad9b83
jg 0x411fd6
cmp eax, 0x59d5a1d4
jg 0x411fee
cmp eax, 0x4d6e87f6
jg 0x412019
cmp eax, 0x4c8c089a
jg 0x412031
cmp eax, 0x4bfb3e34
jg 0x412049
cmp eax, 0x47038f92
jg 0x412074
cmp eax, 0x45205648
jg 0x41209d
cmp eax, 0x4030010c
jg 0x4120c5
cmp eax, 0x3d7fa02d
jg 0x4120dd
cmp eax, 0x3c40bdac
jg 0x4120f5
cmp eax, 0x39cd69ce
jg 0x41211e
cmp eax, 0x37b84636
jg 0x412147
cmp eax, 0x372f2abe
jg 0x412172
cmp eax, 0x2f8a6e44
jg 0x412182
cmp eax, 0x28d28e77
jg 0x4121ad
cmp eax, 0x2847d399
jg 0x4121d9
cmp eax, 0x2603becf
jg 0x4121fc
cmp eax, 0x2430891d
jg 0x412214
cmp eax, 0x22020b5a
jg 0x412224
cmp eax, 0x1d4bd84c
jg 0x41224c
cmp eax, 0x1c41c53b
jg 0x41226f
cmp eax, 0x18aad2c9
jg 0x412297
cmp eax, 0x15c17dd7
jg 0x4122af
cmp eax, 0x93e8c0c7
jg 0x412dbe
cmp eax, 0x93d0a262
jne 0x411a20
mov dword [esp + 0x54], 0x603e19d9
jmp 0x411a20
cmp eax, 0x75734ff1
jne 0x411a20
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0xf0bd8614
jmp 0x411a20
cmp eax, 0x7558bbc5
jne 0x411a20
mov dword [esp + 8], edi
mov dword [esp], esi
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov edi, ebx
mov ebx, esi
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00405360
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.00414420
mov esi, eax
call fcn.00402a10
imul eax, esi
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x5ae]
mov dword [esp], eax
call fcn.00419bf2
mov dword [esp + 0x54], 0xc48134fa
jmp 0x411a20
cmp eax, 0x7384dfd3
jne 0x411a20
mov dword [esp + 0x54], 0x75734ff1
jmp 0x411a20
cmp eax, 0x72dbb2a9
jne 0x411a20
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x1d4bd84d
jmp 0x411a20
cmp eax, 0x6dae0b28
jne 0x411a20
mov edi, ebx
mov ebx, esi
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x43b54c
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], esi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x43b556
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x11ea]
mov esi, eax
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404100
mov eax, dword [0x436ebc]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436ebc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436ebc]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.004035a0
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x2430891e
test eax, eax
je 0x411ea4
mov ecx, 0xcadbd6bc
mov dword [esp + 0x54], ecx
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x5ae]
jmp 0x411a20
cmp eax, 0x6a98049d
jne 0x411a20
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0x3d7fa02e
jne 0x411ed8
mov eax, 0x9999c718
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x603e19d9
jne 0x411a20
mov dword [esp + 0x54], 0x1c41c53c
jmp 0x411a20
cmp eax, 0x5e9a1b9d
jne 0x411a20
lea eax, [esp + 0x3a4]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x11ea]
mov edi, ebx
mov ebx, esi
mov esi, eax
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x5ae]
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404100
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4390c8]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1cae]
mov dword [esp + 0x54], 0x93e8c0c8
jmp 0x411a20
cmp eax, 0x5aad9b84
jne 0x411a20
mov dword [esp + 0x54], 0x15c17dd8
jmp 0x411a20
cmp eax, 0x59d5a1d5
jne 0x411a20
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xedddf99d
jmp 0x411a20
cmp eax, 0x4d6e87f7
jne 0x411a20
mov dword [esp + 0x54], 0x37b84637
jmp 0x411a20
cmp eax, 0x4c8c089b
jne 0x411a20
mov dword [esp + 0x54], 0x59d5a1d5
jmp 0x411a20
cmp eax, 0x4bfb3e35
jne 0x411a20
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xcde00c63
je 0x41206b
mov eax, 0x2f8a6e45
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x47038f93
jne 0x411a20
mov al, byte [esp + 0x1cac]
test al, al
mov eax, 0x372f2abf
jne 0x412094
mov eax, 0x6dae0b28
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x45205649
jne 0x411a20
cmp dword [esp + 0x68], 0x80
setne byte [esp + 0x1cac]
mov dword [esp + 0x54], 0x47038f93
jmp 0x411a20
cmp eax, 0x4030010d
jne 0x411a20
mov dword [esp + 0x54], 0xa8048ccd
jmp 0x411a20
cmp eax, 0x3d7fa02e
jne 0x411a20
mov dword [esp + 0x54], 0x28d28e78
jmp 0x411a20
cmp eax, 0x3c40bdad
jne 0x411a20
mov al, byte [esp + 0x1caa]
test al, al
mov eax, 0xc3fef354
jne 0x412115
mov eax, 0xaf4c0c59
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x39cd69cf
jne 0x411a20
mov al, byte [esp + 0x1caf]
test al, al
mov eax, 0x4c8c089b
jne 0x41213e
mov eax, 0x399e0e2
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x37b84637
jne 0x411a20
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x93d0a262
jmp 0x411a20
cmp eax, 0x372f2abf
jne 0x411a20
jmp 0x4135df
cmp eax, 0x2f8a6e45
jne 0x411a20
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x2847d39a
jmp 0x411a20
cmp eax, 0x28d28e78
jne 0x411a20
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040fd10
mov dword [esp + 0x54], 0xe018c81c
jmp 0x411a20
cmp eax, 0x2847d39a
jne 0x411a20
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0xe9e9b6fe
jmp 0x411a20
cmp eax, 0x2603bed0
jne 0x411a20
mov dword [esp + 0x54], 0x8ff6f973
jmp 0x411a20
cmp eax, 0x2430891e
jne 0x411a20
jmp 0x4135df
cmp eax, 0x22020b5b
jne 0x411a20
mov eax, 0x4d6e87f7
cmp dword [esp + 0x1c98], 0
jne 0x412243
mov eax, 0x603e19d9
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x1d4bd84d
jne 0x411a20
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x1111b3c3
jmp 0x411a20
cmp eax, 0x1c41c53c
jne 0x411a20
cmp dword [esp + 0x1c9c], 0
setne byte [esp + 0x1caf]
mov dword [esp + 0x54], 0x39cd69cf
jmp 0x411a20
cmp eax, 0x18aad2ca
jne 0x411a20
mov dword [esp + 0x54], 0x45205649
jmp 0x411a20
cmp eax, 0x15c17dd8
jne 0x411a20
mov eax, dword [0x438eec]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c54]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438efc]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c50]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f00]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c4c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438eec]
mov ecx, dword [0x438f10]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c48]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438ee0]
mov ecx, dword [0x438f20]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c44]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438eec]
mov ecx, dword [0x438f24]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c40]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f30]
mov ecx, dword [0x438f28]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c3c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f2c]
mov ecx, dword [0x438f28]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c38]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f2c]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4390b0]
sub esp, 4
call fcn.00419bcf
and eax, 0xf
lea ecx, [esp + 0xd2]
mov esi, ecx
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea esi, [esp + eax*2 + 0xd2]
call fcn.00419bcf
and eax, 1
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
lea esi, [esp + 0xd2]
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00419bcf
and eax, 5
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea esi, [esp + eax*2 + 0xd2]
call fcn.00419bcf
and eax, 0xc
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004047c0
mov dword [esp + 0x78], eax
mov eax, dword [0x436e9c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436e9c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x98]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00403110
mov eax, dword [0x438f08]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x438f38]
mov ecx, dword [0x438ee8]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4390a4]
sub esp, 0x10
mov eax, dword [0x438f04]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ee4]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x43909c]
sub esp, 0xc
mov eax, dword [0x438f34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x439098]
sub esp, 0x10
mov eax, dword [0x438f0c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
call fcn.00419bcf
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x436ea0]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov esi, eax
mov dword [esp], esi
call fcn.004035a0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x9c2]
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404100
mov eax, dword [0x436eb4]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436eb4]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436eb4]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x88]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00403110
mov eax, dword [0x438f14]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef4]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438f2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x439098]
sub esp, 0x10
mov eax, dword [0x438f18]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x43b548
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [0x436eb8]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436eb8]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436eb8]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
lea esi, [esp + 0x7b8]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.004035a0
mov eax, dword [0x438f1c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef8]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4390b8]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00406480
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4390f0]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
test eax, eax
sete byte [esp + 0x1cab]
mov dword [esp + 0x54], 0x6a98049d
jmp 0x411a20
cmp eax, 0x951795b1
jg 0x412dee
cmp eax, 0x93e8c0c8
jne 0x411a20
mov al, byte [esp + 0x1cae]
test al, al
mov eax, 0xce855f9c
jne 0x412de5
mov eax, 0xd58bb53b
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x95b06b40
jg 0x412e21
cmp eax, 0x951795b2
jne 0x411a20
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040fd10
mov dword [esp + 0x54], 0x28d28e78
jmp 0x411a20
cmp eax, 0x96f03947
jg 0x412e4e
cmp eax, 0x95b06b41
jne 0x411a20
mov eax, dword [esp + 0x1ca0]
mov dword [esp + 0x1cb0], eax
mov dword [esp + 0x54], 0x809e29
jmp 0x411a20
cmp eax, 0x98e35dbb
jg 0x412e6d
cmp eax, 0x96f03948
jne 0x411a20
mov dword [esp + 0x54], 0x1d4bd84d
jmp 0x411a20
cmp eax, 0x9999c717
jg 0x412e84
cmp eax, 0x98e35dbc
jne 0x411a20
jmp 0x4135df
cmp eax, 0x9c8c03af
jg 0x412ecc
cmp eax, 0x9999c718
jne 0x411a20
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0xe9330e39
test eax, eax
jne 0x412ec3
mov ecx, 0x6dae0b28
mov dword [esp + 0x54], ecx
jmp 0x411a20
cmp eax, 0xa350ec18
jg 0x412eeb
cmp eax, 0x9c8c03b0
jne 0x411a20
mov dword [esp + 0x54], 0xf63b6d5d
jmp 0x411a20
cmp eax, 0xa8048ccc
jg 0x412f0a
cmp eax, 0xa350ec19
jne 0x411a20
mov dword [esp + 0x54], 0x22020b5b
jmp 0x411a20
cmp eax, 0xa8908eee
jg 0x412f29
cmp eax, 0xa8048ccd
jne 0x411a20
mov dword [esp + 0x54], 0xa350ec19
jmp 0x411a20
cmp eax, 0xacfaa40f
jg 0x412f48
cmp eax, 0xa8908eef
jne 0x411a20
mov dword [esp + 0x54], 0xa8048ccd
jmp 0x411a20
cmp eax, 0xad678b8e
jg 0x413040
cmp eax, 0xacfaa410
jne 0x411a20
mov ebx, esi
lea esi, [esp + 0x13f4]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov edi, eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00406010
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404100
mov dword [esp], esi
call fcn.004047c0
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, ebx
lea ebx, [esp + 0xdd6]
lea edi, [esp + 0x5ae]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404100
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4390c0]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0xc5be1399
jmp 0x411a20
cmp eax, 0xaf4c0c58
jg 0x41309f
cmp eax, 0xad678b8f
jne 0x411a20
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
test eax, eax
setne byte [esp + 0x1cad]
mov dword [esp + 0x54], 0x1d71299
jmp 0x411a20
cmp eax, 0xb2b2c32b
jg 0x4130cb
cmp eax, 0xaf4c0c59
jne 0x411a20
mov eax, 0x7384dfd3
cmp dword [esp + 0x60], 6
jb 0x4130c2
mov eax, 0x7558bbc5
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0xbc9e4ddd
jg 0x4130fa
cmp eax, 0xb2b2c32c
jne 0x411a20
mov eax, 0x96f03948
cmp dword [esp + 0x1ca4], 0
js 0x4130f1
mov eax, 0x2603bed0
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0xbf213997
jg 0x413139
cmp eax, 0xbc9e4dde
jne 0x411a20
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00403f70
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040fdf0
mov dword [esp + 0x54], 0x8ff6f973
jmp 0x411a20
cmp eax, 0xc3fef353
jg 0x413158
cmp eax, 0xbf213998
jne 0x411a20
mov dword [esp + 0x54], 0xad678b8f
jmp 0x411a20
cmp eax, 0xc48134f9
jg 0x4131e7
cmp eax, 0xc3fef354
jne 0x411a20
mov edi, ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov ebx, esi
lea eax, [esp + 0xfe0]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404360
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x4bfb3e35
test eax, eax
jne 0x411ea4
mov ecx, 0x2847d39a
jmp 0x411ea4
cmp eax, 0xc5be1398
jg 0x4132f0
cmp eax, 0xc48134fa
jne 0x411a20
mov edi, ebx
mov ebx, esi
lea esi, [esp + 0xfe0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00406010
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x5ae]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404100
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x58]
sub ecx, edx
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov dword [esp + 0x54], 0x82d0f33d
jmp 0x411a20
cmp eax, 0xcadbd6bb
jg 0x41331f
cmp eax, 0xc5be1399
jne 0x411a20
mov eax, 0xacfaa410
cmp dword [esp + 0x1c94], 0
je 0x413316
mov eax, 0x5aad9b84
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0xcc2e39ad
jg 0x413383
cmp eax, 0xcadbd6bc
jne 0x411a20
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4390c8]
sub esp, 4
cmp eax, 1
mov eax, 0xe6ce8b7a
jne 0x41337a
mov eax, 0x145affd3
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0xcd77a6d0
jg 0x4133a2
cmp eax, 0xcc2e39ae
jne 0x411a20
mov dword [esp + 0x54], 0x5e9a1b9d
jmp 0x411a20
cmp eax, 0xcde00c62
jg 0x41340c
cmp eax, 0xcd77a6d1
jne 0x411a20
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4390c4]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0xfea67d0b
jmp 0x411a20
cmp eax, 0xce855f9b
jg 0x41343e
cmp eax, 0xcde00c63
jne 0x411a20
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x2f8a6e45
jmp 0x411a20
cmp eax, 0xd43c625d
jg 0x41345d
cmp eax, 0xce855f9c
jne 0x411a20
mov dword [esp + 0x54], 0x9c8c03b0
jmp 0x411a20
cmp eax, 0xd58bb53a
jg 0x4134b2
cmp eax, 0xd43c625e
jne 0x411a20
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x54], 0xad678b8f
jmp 0x411a20
cmp eax, 0xe018c81b
jg 0x4134d1
cmp eax, 0xd58bb53b
jne 0x411a20
mov dword [esp + 0x54], 0xcd77a6d1
jmp 0x411a20
cmp eax, 0xe07b8c7b
jg 0x4134f0
cmp eax, 0xe018c81c
jne 0x411a20
mov dword [esp + 0x54], 0x22020b5b
jmp 0x411a20
cmp eax, 0xe6ce8b79
jg 0x4135cd
cmp eax, 0xe07b8c7c
jne 0x411a20
lea eax, [esp + 0x3a4]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e80
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x11ea]
mov edi, ebx
mov ebx, esi
mov esi, eax
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x5ae]
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404100
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4390c8]
sub esp, 4
mov dword [esp + 0x54], 0x5e9a1b9d
jmp 0x411a20
cmp eax, 0xe88299ed
jg 0x413600
cmp eax, 0xe6ce8b7a
jne 0x411a20
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040fd10
mov dword [esp + 0x54], 0x22020b5b
jmp 0x411a20
cmp eax, 0xe9330e38
jg 0x413632
cmp eax, 0xe88299ee
jne 0x411a20
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x59d5a1d5
jmp 0x411a20
cmp eax, 0xe9e9b6fd
jg 0x413651
cmp eax, 0xe9330e39
jne 0x411a20
mov dword [esp + 0x54], 0x45205649
jmp 0x411a20
cmp eax, 0xedddf99c
jg 0x413670
cmp eax, 0xe9e9b6fe
jne 0x411a20
mov dword [esp + 0x54], 0x95b06b41
jmp 0x411a20
cmp eax, 0xf0bd8613
jg 0x41368f
cmp eax, 0xedddf99d
jne 0x411a20
mov dword [esp + 0x54], 0x399e0e2
jmp 0x411a20
cmp eax, 0xf63b6d5c
jg 0x4136ae
cmp eax, 0xf0bd8614
jne 0x411a20
mov dword [esp + 0x54], 0xe9e9b6fe
jmp 0x411a20
cmp eax, 0xfaa4132b
jg 0x4136cd
cmp eax, 0xf63b6d5d
jne 0x411a20
mov dword [esp + 0x54], 0x22020b5b
jmp 0x411a20
cmp eax, 0xfea67d0a
jg 0x4141dd
cmp eax, 0xfaa4132c
jne 0x411a20
mov eax, dword [0x438eec]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c54]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438efc]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c50]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f00]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c4c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438eec]
mov ecx, dword [0x438f10]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c48]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438ee0]
mov ecx, dword [0x438f20]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c44]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438eec]
mov ecx, dword [0x438f24]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c40]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f30]
mov ecx, dword [0x438f28]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c3c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f2c]
mov ecx, dword [0x438f28]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c38]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [0x438f2c]
mov ecx, dword [0x438f14]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4390b4]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4390b0]
sub esp, 4
call fcn.00419bcf
and eax, 0xf
lea ecx, [esp + 0xd2]
mov esi, ecx
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea esi, [esp + eax*2 + 0xd2]
call fcn.00419bcf
and eax, 1
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
lea esi, [esp + 0xd2]
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00419bcf
and eax, 5
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
mov dword [esp], esi
call fcn.004047c0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea esi, [esp + eax*2 + 0xd2]
call fcn.00419bcf
and eax, 0xc
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.0041a584
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004047c0
mov dword [esp + 0x78], eax
mov eax, dword [0x436e9c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436e9c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x98]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00403110
mov eax, dword [0x438f08]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x438f38]
mov ecx, dword [0x438ee8]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4390a4]
sub esp, 0x10
mov eax, dword [0x438f04]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ee4]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x43909c]
sub esp, 0xc
mov eax, dword [0x438f34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x439098]
sub esp, 0x10
mov eax, dword [0x438f0c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
call fcn.00419bcf
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x436ea0]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov esi, eax
mov dword [esp], esi
call fcn.004035a0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x9c2]
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404100
mov eax, dword [0x436eb4]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436eb4]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436eb4]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x88]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00403110
mov eax, dword [0x438f14]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef4]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438f2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x439098]
sub esp, 0x10
mov eax, dword [0x438f18]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x43b548
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [0x436eb8]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x436eb8]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x436eb8]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
lea esi, [esp + 0x7b8]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.004035a0
mov eax, dword [0x438f1c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390ac]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x438eec]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [0x438ef8]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a0]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439094]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x439090]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4390a8]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4390b8]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00406480
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4390f0]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov dword [esp + 0x54], 0x15c17dd8
jmp 0x411a20
cmp eax, 0x809e28
jg 0x4141fc
cmp eax, 0xfea67d0b
jne 0x411a20
mov dword [esp + 0x54], 0x22020b5b
jmp 0x411a20
cmp eax, 0x1d71298
jg 0x414213
cmp eax, 0x809e29
jne 0x411a20
jmp 0x41440d
cmp eax, 0x28cb827
jg 0x414243
cmp eax, 0x1d71299
jne 0x411a20
mov al, byte [esp + 0x1cad]
test al, al
mov eax, 0xa8908eef
jne 0x41423a
mov eax, 0xcc2e39ae
mov dword [esp + 0x54], eax
jmp 0x411a20
cmp eax, 0x399e0e1
jg 0x414275
cmp eax, 0x28cb828
jne 0x411a20
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x37b84637
jmp 0x411a20
cmp eax, 0x8210fba
jg 0x4142b7
cmp eax, 0x399e0e2
jne 0x411a20
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00411660
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0xe9e9b6fe
jmp 0x411a20
cmp eax, 0x1111b3c2
jg 0x4142d6
cmp eax, 0x8210fbb
jne 0x411a20
mov dword [esp + 0x54], 0x95b06b41
jmp 0x411a20
cmp eax, 0x1143eaca
jg 0x4142f5
cmp eax, 0x1111b3c3
jne 0x411a20
mov dword [esp + 0x54], 0xe9e9b6fe
jmp 0x411a20
cmp eax, 0x1143eacb
je 0x41439d
cmp eax, 0x145affd3
jne 0x4143f5
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4390c4]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4390c8]
sub esp, 4
cmp eax, 1
mov eax, 0x98e35dbc
jne 0x414394
mov eax, 0xbf213998
mov dword [esp + 0x54], eax
jmp 0x411a20
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4390c4]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0xcd77a6d1
jmp 0x411a20
cmp eax, 0x14691d8d
jne 0x411a20
mov dword [esp + 0x54], 0x9c8c03b0
jmp 0x411a20
mov eax, dword [esp + 0x1cb0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret