Function at 0x409d70
Capabilities:
Check if file exists
Create directory
Encode data using xor
Get common file path
Get file attributes
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c9ecd
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x790
mov eax, dword [0x4f2480]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x628], edx
mov esi, ecx
mov edi, dword [ebx + 0x10]
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x624], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x634], 0
cmp dword [edi + 0x14], 0xf
mov dword [ebp - 0x62c], eax
mov eax, edi
jbe 0x409de2
mov eax, dword [edi]
cmp dword [esi + 0x14], 0xf
jbe 0x409dea
mov ecx, dword [esi]
push dword [edi + 0x10]
mov edx, dword [esi + 0x10]
push eax
call fcn.00424dd0
add esp, 8
test al, al
jne 0x40bf21
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x409e0b
mov ecx, dword [edi]
mov edx, dword [edi + 0x10]
push 0
push 0x4e72c2
call fcn.00424dd0
add esp, 8
test al, al
jne 0x40bf21
call fcn.004a3c14
cmp dword [esi + 0x14], 0xf
mov ecx, eax
mov dword [ebp - 0x63c], ecx
mov eax, esi
mov dword [ebp - 0x620], esi
jbe 0x409e48
mov eax, dword [esi]
mov dword [ebp - 0x620], eax
mov dword [ecx], 0
lea ecx, [ebp - 0x630]
push 0xa
push ecx
push eax
call fcn.004a7e7b
mov ecx, dword [ebp - 0x620]
add esp, 0xc
mov dword [ebp - 0x634], eax
cmp ecx, dword [ebp - 0x630]
je 0x40bf41
mov eax, dword [ebp - 0x63c]
cmp dword [eax], 0x22
je 0x40bf4b
call fcn.004a3c14
cmp dword [edi + 0x14], 0xf
mov ecx, eax
mov dword [ebp - 0x640], ecx
mov eax, edi
mov dword [ebp - 0x620], edi
jbe 0x409eaa
mov eax, dword [edi]
mov dword [ebp - 0x620], eax
mov dword [ecx], 0
lea ecx, [ebp - 0x63c]
push 0xa
push ecx
push eax
call fcn.004a7e7b
mov ecx, dword [ebp - 0x620]
add esp, 0xc
mov edx, eax
cmp ecx, dword [ebp - 0x63c]
je 0x40bf55
mov eax, dword [ebp - 0x640]
cmp dword [eax], 0x22
je 0x40bf5f
cmp dword [ebp - 0x634], edx
jg 0x40bf21
xorps xmm0, xmm0
mov byte [ebp - 0x4ac], 0
movups xmmword [ebp - 0x558], xmm0
xor ecx, ecx
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ecx + 0x4e7b58]
xor al, 0x5a
mov byte [ebp + ecx - 0x558], al
inc ecx
cmp ecx, 0xf
jb 0x409f10
movups xmm0, xmmword [0x4e7b68]
xor eax, eax
mov byte [ebp - 0x549], 0
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xor ecx, ecx
xorps xmm1, xmm0
mov word [ebp - 0x494], ax
movups xmmword [ebp - 0x4a4], xmm1
lea edx, [eax + 2]
mov al, byte [ecx + 0x4e7b78]
lea ecx, [ecx + 1]
xor al, 0x5a
mov byte [ebp + ecx - 0x495], al
sub edx, 1
jne 0x409f52
push 0x4e7b7c
lea ecx, [ebp - 0x618]
mov byte [ebp - 0x492], dl
call fcn.00415a20
xorps xmm0, xmm0
mov byte [ebp - 0x4c4], 0
movq qword [ebp - 0x548], xmm0
xor ecx, ecx
mov dword [ebp - 0x540], 0
mov word [ebp - 0x53c], 0
mov byte [ebp - 0x53a], 0
nop dword [eax]
mov al, byte [ecx + 0x4e7ba4]
xor al, 0x5a
mov byte [ebp + ecx - 0x548], al
inc ecx
cmp ecx, 0xe
jb 0x409fb0
movaps xmm2, xmmword [str.ZZZZZZZZZZZZZZZZ]
lea ecx, [ebp - 0x5f0]
xorps xmm0, xmm0
mov byte [ebp - 0x53a], 0
movlpd qword [ebp - 0x504], xmm0
movlpd qword [ebp - 0x4fc], xmm0
movups xmm0, xmmword [0x4e7bb4]
push 0x4e7bc8
mov byte [ebp - 0x619], 0xe4
xorps xmm2, xmm0
mov byte [ebp - 0x4f3], 0
call fcn.00415a20
movaps xmm3, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm0, xmm0
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xor eax, eax
movlpd qword [ebp - 0x488], xmm0
xor ecx, ecx
movlpd qword [ebp - 0x480], xmm0
movups xmm0, xmmword [str.Automatic_Update]
mov byte [ebp - 0x478], 0
lea edx, [eax + 0xa]
mov word [ebp - 0x55c], ax
xorps xmm3, xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x564], xmm0
movups xmm0, xmmword [str.Your_current_version_is]
xorps xmm1, xmm0
movups xmmword [ebp - 0x574], xmm1
nop word [eax + eax]
mov al, byte [ecx + 0x4e7c14]
lea ecx, [ecx + 1]
xor al, 0x5a
mov byte [ebp + ecx - 0x565], al
sub edx, 1
jne 0x40a070
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm0, xmm0
xor eax, eax
movlpd qword [ebp - 0x44c], xmm0
movups xmm0, xmmword [0x4e7c20]
mov byte [ebp - 0x55a], dl
xor ecx, ecx
mov word [ebp - 0x444], ax
xorps xmm1, xmm0
mov byte [ebp - 0x442], al
movups xmmword [ebp - 0x45c], xmm1
lea edx, [eax + 0xb]
mov al, byte [ecx + 0x4e7c30]
lea ecx, [ecx + 1]
xor al, 0x5a
mov byte [ebp + ecx - 0x44d], al
sub edx, 1
jne 0x40a0c4
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm0, xmm0
movlpd qword [ebp - 0x588], xmm0
xor eax, eax
movups xmm0, xmmword [0x4e7c40]
mov byte [ebp - 0x441], dl
xor ecx, ecx
mov word [ebp - 0x580], ax
xorps xmm0, xmm1
lea edx, [eax + 0xa]
movups xmmword [ebp - 0x5c8], xmm0
movups xmm0, xmmword [0x4e7c50]
xorps xmm0, xmm1
movups xmmword [ebp - 0x5b8], xmm0
movups xmm0, xmmword [0x4e7c60]
xorps xmm0, xmm1
movups xmmword [ebp - 0x5a8], xmm0
movups xmm0, xmmword [0x4e7c70]
xorps xmm0, xmm1
movups xmmword [ebp - 0x598], xmm0
mov al, byte [ecx + 0x4e7c80]
lea ecx, [ecx + 1]
xor al, 0x5a
mov byte [ebp + ecx - 0x589], al
sub edx, 1
jne 0x40a145
xorps xmm0, xmm0
mov byte [ebp - 0x57e], dl
movups xmmword [ebp - 0x520], xmm0
mov dword [ebp - 0x510], edx
mov dword [ebp - 0x50c], 0xf
mov byte [ebp - 0x520], dl
mov dword [ebp - 4], edx
movups xmmword [ebp - 0x538], xmm0
mov dword [ebp - 0x528], edx
mov dword [ebp - 0x524], 0xf
mov byte [ebp - 0x538], dl
mov byte [ebp - 4], 1
mov eax, dword [0x4f5a7c]
cmp eax, 2
jne 0x40a4b2
xor eax, eax
nop word [eax + eax]
xor byte [ebp + eax - 0x548], 0x5a
inc eax
cmp eax, 0xe
jb 0x40a1c0
mov al, byte [ebp - 0x619]
movaps xmm0, xmmword [str.ZZZZZZZZZZZZZZZZ]
xor al, 0x5a
xorps xmm0, xmm2
mov byte [ebp - 0x4f4], al
movaps xmm2, xmmword [str.ZZZZZZZZZZZZZZZZ]
xor eax, eax
movups xmmword [ebp - 0x504], xmm0
nop word [eax + eax]
movups xmm0, xmmword [ebp + eax - 0x5f0]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x5f0], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x40a200
cmp eax, 0x27
jae 0x40a231
xor byte [ebp + eax - 0x5f0], 0x5a
inc eax
cmp eax, 0x27
jb 0x40a223
lea ecx, [ebp - 0x548]
mov dword [ebp - 0x4cc], 0xd384d4d7
mov dword [ebp - 0x4c8], 0xc2d0fcb8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a250
sub ecx, edx
mov eax, closesocket
mov edx, dword [esi + 0x10]
sub eax, edx
cmp eax, ecx
jb 0x40bf69
cmp dword [esi + 0x14], 0xf
jbe 0x40a273
mov esi, dword [esi]
push edx
push esi
push ecx
lea eax, [ebp - 0x548]
push eax
push ecx
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x4f0]
call fcn.0041f0f0
lea eax, [ebp - 0x504]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x4f0]
call fcn.00418190
mov dword [ebp - 0x430], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x42c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x440], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x430], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea edx, [ebp - 0x440]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x474]
call fcn.0041be60
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.00418190
mov edi, 0x1c
mov dword [ebp - 0x620], edi
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x50c]
movq qword [ebp - 0x638], xmm1
movups xmmword [ebp - 0x4b8], xmm0
cmp ecx, 0xf
jbe 0x40a392
mov edx, dword [ebp - 0x520]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a379
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf6e
push ecx
push edx
call fcn.0049d99f
movups xmm0, xmmword [ebp - 0x4b8]
add esp, 8
movq xmm1, qword [ebp - 0x638]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x460]
movq qword [ebp - 0x510], xmm1
movups xmmword [ebp - 0x520], xmm0
cmp ecx, 0xf
jbe 0x40a3df
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a3d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf6e
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
cmp ecx, 0xf
jbe 0x40a438
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a42e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf6e
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
cmp ecx, 0xf
jbe 0x40a491
mov edx, dword [ebp - 0x4f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a487
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf6e
push ecx
push edx
call fcn.0049d99f
add esp, 8
lea ecx, [ebp - 0x4cc]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a4a0
lea eax, [ebp - 0x4cc]
jmp 0x40aafd
cmp eax, 3
jne 0x40a7f4
movups xmm0, xmmword [ebp - 0x574]
mov eax, 0x10
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm1, xmm0
movups xmmword [ebp - 0x574], xmm1
nop dword [eax + eax]
xor byte [ebp + eax - 0x574], 0x5a
inc eax
cmp eax, 0x1a
jb 0x40a4e0
movups xmm0, xmmword [ebp - 0x45c]
mov eax, 0x10
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm1, xmm0
movups xmmword [ebp - 0x45c], xmm1
nop dword [eax + eax]
xor byte [ebp + eax - 0x45c], 0x5a
inc eax
cmp eax, 0x1b
jb 0x40a510
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
mov eax, 0x40
movups xmm0, xmmword [ebp - 0x5c8]
xorps xmm0, xmm1
movups xmmword [ebp - 0x5c8], xmm0
movups xmm0, xmmword [ebp - 0x5b8]
xorps xmm0, xmm1
movups xmmword [ebp - 0x5b8], xmm0
movups xmm0, xmmword [ebp - 0x5a8]
xorps xmm0, xmm1
movups xmmword [ebp - 0x5a8], xmm0
movups xmm0, xmmword [ebp - 0x598]
xorps xmm0, xmm1
movups xmmword [ebp - 0x598], xmm0
nop
xor byte [ebp + eax - 0x5c8], 0x5a
inc eax
cmp eax, 0x4a
jb 0x40a570
movaps xmm0, xmmword [str.ZZZZZZZZZZZZZZZZ]
lea ecx, [ebp - 0x574]
xorps xmm0, xmm3
lea edx, [ecx + 1]
movups xmmword [ebp - 0x488], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a598
sub ecx, edx
mov eax, closesocket
mov edx, dword [esi + 0x10]
sub eax, edx
cmp eax, ecx
jb 0x40bf73
cmp dword [esi + 0x14], 0xf
jbe 0x40a5bb
mov esi, dword [esi]
push edx
push esi
push ecx
lea eax, [ebp - 0x574]
push eax
push ecx
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x4f0]
call fcn.0041f0f0
lea eax, [ebp - 0x45c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x4f0]
call fcn.00418190
mov dword [ebp - 0x430], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x42c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x440], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x430], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea edx, [ebp - 0x440]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x474]
call fcn.0041be60
add esp, 4
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 7
push ecx
mov ecx, eax
call fcn.00418190
mov edi, 0x9800
mov dword [ebp - 0x620], edi
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x50c]
movq qword [ebp - 0x638], xmm1
movups xmmword [ebp - 0x4b8], xmm0
cmp ecx, 0xf
jbe 0x40a6da
mov edx, dword [ebp - 0x520]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a6c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf78
push ecx
push edx
call fcn.0049d99f
movups xmm0, xmmword [ebp - 0x4b8]
add esp, 8
movq xmm1, qword [ebp - 0x638]
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x460]
movq qword [ebp - 0x510], xmm1
movups xmmword [ebp - 0x520], xmm0
cmp ecx, 0xf
jbe 0x40a727
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a71d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf78
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
cmp ecx, 0xf
jbe 0x40a780
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a776
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf78
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
cmp ecx, 0xf
jbe 0x40a7d9
mov edx, dword [ebp - 0x4f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a7cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf78
push ecx
push edx
call fcn.0049d99f
add esp, 8
lea ecx, [ebp - 0x488]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a7e2
lea eax, [ebp - 0x488]
jmp 0x40aafd
xor eax, eax
nop word [eax + eax]
xor byte [ebp + eax - 0x558], 0x5a
inc eax
cmp eax, 0xf
jb 0x40a800
movups xmm0, xmmword [ebp - 0x4a4]
mov eax, 0x10
movaps xmm1, xmmword [str.ZZZZZZZZZZZZZZZZ]
xorps xmm1, xmm0
movups xmmword [ebp - 0x4a4], xmm1
nop dword [eax + eax]
xor byte [ebp + eax - 0x4a4], 0x5a
inc eax
cmp eax, 0x12
jb 0x40a830
movaps xmm2, xmmword [str.ZZZZZZZZZZZZZZZZ]
xor eax, eax
nop word [eax + eax]
movups xmm0, xmmword [ebp + eax - 0x618]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x618], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x40a850
cmp eax, 0x27
jae 0x40a881
xor byte [ebp + eax - 0x618], 0x5a
inc eax
cmp eax, 0x27
jb 0x40a873
lea ecx, [ebp - 0x558]
mov dword [ebp - 0x4b4], 0xafb6d4d7
mov dword [ebp - 0x4b0], 0xc2d0fcb8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a8a0
sub ecx, edx
mov eax, closesocket
mov edx, dword [esi + 0x10]
sub eax, edx
cmp eax, ecx
jb 0x40bf7d
cmp dword [esi + 0x14], 0xf
jbe 0x40a8c3
mov esi, dword [esi]
push edx
push esi
push ecx
lea eax, [ebp - 0x558]
push eax
push ecx
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x4f0]
call fcn.0041f0f0
lea eax, [ebp - 0x4a4]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x4f0]
call fcn.00418190
mov dword [ebp - 0x430], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x42c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x440], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x430], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea edx, [ebp - 0x440]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x474]
call fcn.0041be60
add esp, 4
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0xa
push ecx
mov ecx, eax
call fcn.00418190
mov edi, 0x700
mov dword [ebp - 0x620], edi
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x50c]
movq qword [ebp - 0x638], xmm1
movups xmmword [ebp - 0x4d0], xmm0
cmp ecx, 0xf
jbe 0x40a9e2
mov edx, dword [ebp - 0x520]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a9c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf82
push ecx
push edx
call fcn.0049d99f
movups xmm0, xmmword [ebp - 0x4d0]
add esp, 8
movq xmm1, qword [ebp - 0x638]
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x460]
movq qword [ebp - 0x510], xmm1
movups xmmword [ebp - 0x520], xmm0
cmp ecx, 0xf
jbe 0x40aa2f
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40aa25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf82
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
cmp ecx, 0xf
jbe 0x40aa88
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40aa7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf82
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
cmp ecx, 0xf
jbe 0x40aae1
mov edx, dword [ebp - 0x4f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40aad7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf82
push ecx
push edx
call fcn.0049d99f
add esp, 8
lea ecx, [ebp - 0x4b4]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40aaf0
lea eax, [ebp - 0x4b4]
sub ecx, edx
push ecx
push eax
lea ecx, [ebp - 0x538]
call fcn.0041a8d0
cmp dword [ebp - 0x50c], 0xf
lea ecx, [ebp - 0x520]
push 0x41
cmova ecx, dword [ebp - 0x520]
lea eax, [ebp - 0x538]
cmp dword [ebp - 0x524], 0xf
cmova eax, dword [ebp - 0x538]
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, eax
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x40ab93
push 0x4e7b28
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x40ab93
push eax
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp esi, 1
jne 0x40bf87
mov esi, dword [ebp - 0x624]
mov eax, esi
cmp dword [esi + 0x14], 0xf
jbe 0x40abac
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x40b2fc
cmp dword [esi + 0x14], 0xf
jbe 0x40abc4
mov esi, dword [esi]
sub esp, 0xc
lea ecx, [ebp - 0xd0]
push esi
call fcn.004157b0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0xd4], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x74], 0
je 0x40b288
push ecx
lea ecx, [ebp - 0x6f0]
call fcn.00416b70
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x6e0]
call fcn.00416ea0
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x6f0]
call fcn.00416870
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.0041a050
test eax, eax
jne 0x40ac78
mov eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0xd0]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00402db0
sub esp, 8
lea eax, [ebp - 0x474]
lea ecx, [ebp - 0x7a0]
push eax
call fcn.00416960
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
push 0x7c
lea edx, [ebp - 0x440]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x7a0]
call fcn.00421bb0
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x40b1d9
xorps xmm0, xmm0
mov dword [ebp - 0x4c8], 0
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x4c4], 0
movups xmmword [ebp - 0x4d8], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ad03
sub ecx, edx
lea eax, [ebp - 0x428]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4d8]
call fcn.0041d510
push 0
push 0
push 0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x4d8]
cmp dword [ebp - 0x4c4], 7
mov edi, dword [ebp - 0x4c8]
cmova eax, dword [ebp - 0x4d8]
push 0
push edi
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [esi + 1]
push ecx
call fcn.0049da05
add esp, 4
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x4c4], 7
lea ecx, [ebp - 0x4d8]
cmova ecx, dword [ebp - 0x4d8]
push 0
push 0
push esi
push eax
push edi
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x630]
xorps xmm0, xmm0
mov ecx, edx
mov byte [edx + esi], 0
movups xmmword [ebp - 0x4c0], xmm0
mov dword [ebp - 0x4b0], 0
lea esi, [ecx + 1]
mov dword [ebp - 0x4ac], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40adc0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4c0]
call fcn.0041dad0
mov edi, dword [ebp - 0x620]
push dword [ebp - 0x630]
or edi, 0x40000
call fcn.0049da00
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4c0]
mov esi, dword [ebp - 0x4ac]
mov eax, esi
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 1
jb 0x40ae37
cmp esi, 0xf
lea eax, [edx + 1]
mov dword [ebp - 0x4b0], eax
cmova ecx, dword [ebp - 0x4c0]
mov al, byte [0x4e79a8]
mov byte [ecx + edx], al
lea eax, [ebp - 0x4c0]
mov byte [ecx + edx + 1], 0
jmp 0x40ae52
push 1
push 0x4e79a8
mov byte [ebp - 0x624], 0
push dword [ebp - 0x624]
push 1
call fcn.0041d970
mov dword [ebp - 0x47c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x48c], xmm0
mov dword [ebp - 0x478], 0
or edi, 0x10000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x48c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x47c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x440]
cmp dword [ebp - 0x42c], 0xf
mov eax, dword [ebp - 0x478]
cmova edx, dword [ebp - 0x440]
mov esi, dword [ebp - 0x47c]
sub eax, esi
mov ecx, dword [ebp - 0x430]
push ecx
push edx
cmp ecx, eax
ja 0x40af0a
cmp dword [ebp - 0x478], 0xf
lea eax, [ecx + esi]
mov dword [ebp - 0x47c], eax
lea eax, [ebp - 0x48c]
cmova eax, dword [ebp - 0x48c]
add esi, eax
push esi
call fcn.0049f5a0
mov eax, dword [ebp - 0x430]
add esp, 0xc
mov byte [eax + esi], 0
lea eax, [ebp - 0x48c]
jmp 0x40af23
mov byte [ebp - 0x624], 0
push dword [ebp - 0x624]
push ecx
lea ecx, [ebp - 0x48c]
call fcn.0041d970
mov dword [ebp - 0x448], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x444], 0
or edi, 0x20000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x458], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x448], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x478]
cmp ecx, 0xf
jbe 0x40afad
mov edx, dword [ebp - 0x48c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40afa3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf8e
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0xf
mov byte [ebp - 0x48c], 0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4ac]
cmp ecx, 0xf
jbe 0x40b006
mov edx, dword [ebp - 0x4c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40affc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf8e
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4ac], 0xf
mov byte [ebp - 0x4c0], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c4]
cmp ecx, 7
jbe 0x40b065
mov edx, dword [ebp - 0x4d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b05b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf8e
push ecx
push edx
call fcn.0049d99f
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x444], 0xf
mov word [ebp - 0x4d8], ax
lea eax, [ebp - 0x458]
cmova eax, dword [ebp - 0x458]
push eax
mov dword [ebp - 0x4c4], 7
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x40b19b
lea ecx, [ebp - 0x5c8]
call fcn.00415de0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x458]
cmp dword [ebp - 0x444], 0xf
mov eax, dword [ebp - 0x448]
cmova ecx, dword [ebp - 0x458]
add eax, ecx
push eax
push ecx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x5c8]
call fcn.00419ba0
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0x16
or edi, 0x180000
call fcn.00415d20
lea edx, [ebp - 0x624]
lea ecx, [ebp - 0x48c]
call fcn.00408240
mov ecx, dword [ebp - 0x478]
mov byte [ebp - 0x619], al
cmp ecx, 7
jbe 0x40b157
mov edx, dword [ebp - 0x48c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b147
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf93
push ecx
push edx
call fcn.0049d99f
mov al, byte [ebp - 0x619]
add esp, 8
test al, al
je 0x40b19b
push dword [ebp - 0x624]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x624], eax
test eax, eax
je 0x40b19b
push 1
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x624]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x40b19b
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x444]
cmp ecx, 0xf
jbe 0x40b1d9
mov edx, dword [ebp - 0x458]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b1cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf93
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x42c]
cmp eax, 0xf
jbe 0x40b219
mov edx, dword [ebp - 0x440]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b20f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf98
push ecx
push edx
call fcn.0049d99f
add esp, 8
lea ecx, [ebp - 0x7a0]
call fcn.004047e0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x460]
cmp ecx, 0xf
jbe 0x40b262
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b258
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf98
push ecx
push edx
call fcn.0049d99f
add esp, 8
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
call fcn.004047e0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0xd4], eax
lea ecx, [ebp - 0xc0]
call fcn.004156c0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0xd4], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x60], vtable.std::ios_base.0
call fcn.004892f5
add esp, 4
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x628]
lea ecx, [ebp - 0x458]
call fcn.00405d80
mov esi, eax
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x19
call fcn.00409700
push esi
push eax
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x1a
call fcn.0041eae0
or edi, 0x20
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x460]
cmp ecx, 7
jbe 0x40b37c
mov edx, dword [ebp - 0x474]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b372
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf9d
push ecx
push edx
call fcn.0049d99f
add esp, 8
xor eax, eax
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 7
mov word [ebp - 0x474], ax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x444]
cmp ecx, 7
jbe 0x40b3dd
mov edx, dword [ebp - 0x458]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b3d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bf9d
push ecx
push edx
call fcn.0049d99f
add esp, 8
xor eax, eax
mov dword [ebp - 0x448], 0
cmp dword [ebp - 0x4dc], 7
mov word [ebp - 0x458], ax
lea eax, [ebp - 0x4f0]
cmova eax, dword [ebp - 0x4f0]
or edi, 0x40
push 0x104
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x444], 7
push eax
call fcn.004aceba
add esp, 0xc
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x440], xmm0
test eax, eax
je 0x40b46a
lea ecx, [ebp - 0x220]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b451
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
jmp 0x40b471
push 0
push 0x4e7428
lea ecx, [ebp - 0x440]
call fcn.0041d510
lea edx, [ebp - 0x628]
lea ecx, [ebp - 0x440]
call fcn.00408240
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 0x619], al
cmp ecx, 7
jbe 0x40b4d9
mov edx, dword [ebp - 0x440]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b4c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
mov al, byte [ebp - 0x619]
add esp, 8
test al, al
je 0x40b51d
push dword [ebp - 0x628]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x628], eax
test eax, eax
je 0x40b51d
push 1
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x628]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x40b51d
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x42c], 0
movups xmmword [ebp - 0x440], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b544
sub ecx, edx
lea eax, [ebp - 0x428]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x440]
call fcn.0041d510
push 0x17
push str.qianniaodun_restart.exe
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x1e
call fcn.0041b8a0
mov dword [ebp - 0x498], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x4a8], xmm0
mov dword [ebp - 0x494], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x80
movups xmmword [ebp - 0x4a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x498], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x42c]
cmp ecx, 7
jbe 0x40b60e
mov edx, dword [ebp - 0x440]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b604
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfa2
push ecx
push edx
call fcn.0049d99f
add esp, 8
xor eax, eax
mov dword [ebp - 0x430], 0
cmp dword [ebp - 0x494], 7
mov word [ebp - 0x440], ax
lea eax, [ebp - 0x4a8]
cmova eax, dword [ebp - 0x4a8]
push eax
mov dword [ebp - 0x42c], 7
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x40b9c3
xorps xmm0, xmm0
mov dword [ebp - 0x464], 0
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x460], 0
movups xmmword [ebp - 0x474], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b676
sub ecx, edx
lea eax, [ebp - 0x428]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x474]
call fcn.0041d510
push 0xb
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x474]
or edi, 1
push 0x4e79ec
mov dword [ebp - 0x634], edi
call fcn.0041b8a0
mov dword [ebp - 0x448], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x444], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x2002
push ecx
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x620], edi
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x448], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x458]
cmp dword [ebp - 0x444], 7
cmova eax, dword [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x40b731
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebp - 0x620]
test al, 2
je 0x40b7a7
mov ecx, dword [ebp - 0x444]
and eax, 0xfffffffd
mov dword [ebp - 0x620], eax
cmp ecx, 7
jbe 0x40b78a
mov edx, dword [ebp - 0x458]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b77a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfa7
push ecx
push edx
call fcn.0049d99f
mov eax, dword [ebp - 0x620]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 7
mov word [ebp - 0x458], cx
mov dword [ebp - 4], 0x20
test al, 1
je 0x40b7f2
mov ecx, dword [ebp - 0x460]
cmp ecx, 7
jbe 0x40b7f2
mov edx, dword [ebp - 0x474]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b7e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfa7
push ecx
push edx
call fcn.0049d99f
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x47c], 0
push 0x30
movups xmmword [ebp - 0x48c], xmm0
mov dword [ebp - 0x478], 0
call fcn.0049d9d0
movups xmm0, xmmword [str.http:__www.aqianniao.com_test_restart1.exe]
mov ecx, eax
mov dword [ebp - 0x47c], 0x2a
mov dword [ebp - 0x48c], ecx
add esp, 4
mov dword [ebp - 0x478], 0x2f
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x4e7ccc]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x4e7cdc]
movq qword [ecx + 0x20], xmm0
mov ax, word [0x4e7ce4]
mov word [ecx + 0x28], ax
mov byte [ecx + 0x2a], 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x4a8]
cmp dword [ebp - 0x494], 7
mov edi, dword [ebp - 0x498]
cmova eax, dword [ebp - 0x4a8]
push 0
push edi
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [esi + 1]
push ecx
call fcn.0049da05
add esp, 4
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x494], 7
lea ecx, [ebp - 0x4a8]
cmova ecx, dword [ebp - 0x4a8]
push 0
push 0
push esi
push eax
push edi
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, dword [ebp - 0x628]
xorps xmm0, xmm0
mov ecx, edi
mov byte [edi + esi], 0
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x448], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x444], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b900
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x458]
call fcn.0041dad0
push edi
call fcn.0049da00
add esp, 4
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x48c]
call fcn.00409500
mov ecx, dword [ebp - 0x444]
cmp ecx, 0xf
jbe 0x40b96a
mov edx, dword [ebp - 0x458]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b960
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfac
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0xf
mov byte [ebp - 0x458], 0
cmp ecx, 0xf
jbe 0x40b9c3
mov edx, dword [ebp - 0x48c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b9b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfac
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ax, word [0x4e7cf0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x508], xmm0
mov dword [ebp - 0x4f8], 0xa
movq xmm0, qword [str.._temp.zip]
mov dword [ebp - 0x4f4], 0xf
movq qword [ebp - 0x508], xmm0
mov word [ebp - 0x500], ax
mov byte [ebp - 0x4fe], 0
mov ecx, dword [ebp - 0x62c]
lea edx, [ebp - 0x508]
mov byte [ebp - 4], 0x23
call fcn.00408c50
test al, al
je 0x40bdcb
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
lea eax, [ebp - 0x490]
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x40ba6a
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x490]
push eax
call edi
lea eax, [ebp - 0x490]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [ebp - 0x490]
push eax
call esi
test eax, eax
jne 0x40ba41
movq xmm0, qword [str.._TempFolder]
mov eax, dword [0x4e7cfc]
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 0xc
mov dword [ebp - 0x42c], 0xf
movq qword [ebp - 0x440], xmm0
mov dword [ebp - 0x438], eax
mov byte [ebp - 0x434], 0
mov ax, word [0x4e7d0c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x458], xmm0
mov word [ebp - 0x450], ax
movq xmm0, qword [str.qianniaodun]
mov al, byte [0x4e7d0e]
mov dword [ebp - 0x448], 0xb
mov dword [ebp - 0x444], 0xf
movq qword [ebp - 0x458], xmm0
mov byte [ebp - 0x44e], al
mov byte [ebp - 0x44d], 0
xorps xmm0, xmm0
mov dword [ebp - 0x464], 0
movups xmmword [ebp - 0x474], xmm0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
lea eax, [ebp - 0x474]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x508]
call fcn.00405f60
mov byte [ebp - 4], 0x25
add esp, 8
mov ecx, dword [ebp - 0x460]
mov byte [ebp - 0x619], al
cmp ecx, 0xf
jbe 0x40bb86
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bb7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfb1
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x444]
cmp ecx, 0xf
jbe 0x40bbc4
mov edx, dword [ebp - 0x458]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bbba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfb1
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0xf
mov byte [ebp - 0x458], 0
cmp ecx, 0xf
jbe 0x40bc1d
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bc13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bfb1
push ecx
push edx
call fcn.0049d99f
add esp, 8
cmp byte [ebp - 0x619], 0
jne 0x40bfb6
mov ecx, dword [ebp - 0x4f4]
cmp ecx, 0xf
jbe 0x40bc64
mov edx, dword [ebp - 0x508]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bc5a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0xf
mov byte [ebp - 0x508], 0
cmp ecx, 7
jbe 0x40bcbf
mov edx, dword [ebp - 0x4a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40bcb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x4dc]
xor eax, eax
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x494], 7
mov word [ebp - 0x4a8], ax
cmp ecx, 7
jbe 0x40bd1c
mov edx, dword [ebp - 0x4f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40bd12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x524]
xor eax, eax
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 7
mov word [ebp - 0x4f0], ax
cmp ecx, 0xf
jbe 0x40bd73
mov edx, dword [ebp - 0x538]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bd69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 0xf
mov byte [ebp - 0x538], 0
cmp ecx, 0xf
jbe 0x40bf21
mov edx, dword [ebp - 0x520]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bf17
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
jmp 0x40bf17
mov ecx, dword [ebp - 0x4f4]
cmp ecx, 0xf
jbe 0x40be05
mov edx, dword [ebp - 0x508]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bdfb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0xf
mov byte [ebp - 0x508], 0
cmp ecx, 7
jbe 0x40be60
mov edx, dword [ebp - 0x4a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40be56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x4dc]
xor eax, eax
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x494], 7
mov word [ebp - 0x4a8], ax
cmp ecx, 7
jbe 0x40bebd
mov edx, dword [ebp - 0x4f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40beb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
push ecx
push edx
call fcn.0049d99f
add esp, 8
mov ecx, dword [ebp - 0x524]
xor eax, eax
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 7
mov word [ebp - 0x4f0], ax
cmp ecx, 0xf
jbe 0x40bd73
mov edx, dword [ebp - 0x538]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bd69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c068
jmp 0x40bd69
push ecx
push edx
call fcn.0049d99f
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0049d991
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push str.invalid_stoi_argument
call fcn.00484e7d
push str.stoi_argument_out_of_range
call fcn.00484ebd
push str.invalid_stoi_argument
call fcn.00484e7d
push str.stoi_argument_out_of_range
call fcn.00484ebd
call fcn.00401350
call fcn.004a2f76
call fcn.00401350
call fcn.004a2f76
call fcn.00401350
call fcn.004a2f76
push 0
call fcn.004ad8c4
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
call fcn.004a2f76
lea ecx, [ebp - 0x508]
call fcn.004180d0
push eax
call fcn.004ad094
add esp, 4
lea ecx, [ebp - 0x474]
call fcn.00409940
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x27
call fcn.0041c8a0
test al, al
je 0x40c061
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x458]
call fcn.00417dc0
push str.qianniaodun_restart.exe
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x440]
call fcn.0041bfa0
add esp, 4
lea edx, [ebp - 0x474]
mov byte [ebp - 4], 0x29
mov ecx, eax
call fcn.00408ef0
lea ecx, [ebp - 0x440]
mov byte [ebp - 0x619], al
call fcn.00417cd0
lea ecx, [ebp - 0x458]
call fcn.00417cd0
cmp byte [ebp - 0x619], 0
jne 0x40c056
push str.._TempFolder
call fcn.004ad094
add esp, 4
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call fcn.004ad8c4
call fcn.004a2f76
int3