Function at 0x411160
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a88
call fcn.00417020
mov dword [esp + 0x1a74], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea eax, [esp + 0x17f2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x15e8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea edi, [esp + 0xfca]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea esi, [esp + 0xbb6]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea ebx, [esp + 0x9ac]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417890
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00417890
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.00410970
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0xe3e3ca6
jmp 0x4114c0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x5e306228
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x727a2673
jg 0x411530
cmp eax, 0x718e36cf
jg 0x411540
cmp eax, 0x6e5e782d
jg 0x411569
cmp eax, 0x6ae5322c
jg 0x41158e
cmp eax, 0x6731bae4
jg 0x4115c2
cmp eax, 0x61bde3cf
jg 0x4115d2
cmp eax, 0x5eff00bf
jg 0x411668
cmp eax, 0x81283d0b
jg 0x411680
cmp eax, 0x8098082d
jne 0x4114c0
mov dword [esp + 0x48], 0x40f5c291
jmp 0x4114c0
cmp eax, 0x727a2674
jne 0x4114c0
jmp 0x41149f
cmp eax, 0x718e36d0
jne 0x4114c0
mov al, byte [esp + 0x1a80]
test al, al
mov eax, 0xd9c5c8b1
jne 0x411560
mov eax, 0x6e5e782e
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0x6e5e782e
jne 0x4114c0
mov eax, 0x727a2674
cmp dword [esp + 0x54], 6
jb 0x411585
mov eax, 0xf8bf9fe2
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0x6ae5322d
jne 0x4114c0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.004110f0
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0x8e81a06
jmp 0x4114c0
cmp eax, 0x6731bae5
jne 0x4114c0
jmp 0x41149f
cmp eax, 0x61bde3d0
jne 0x4114c0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x1a48], ebx
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a83]
mov dword [esp + 0x48], 0xda37ee9c
jmp 0x4114c0
cmp eax, 0x5eff00c0
jne 0x4114c0
mov dword [esp + 0x48], 0xbba50241
jmp 0x4114c0
cmp eax, 0x82c3f613
jg 0x4116aa
cmp eax, 0x81283d0c
jne 0x4114c0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x82c3f614
jmp 0x4114c0
cmp eax, 0x8a2927da
jg 0x4116c9
cmp eax, 0x82c3f614
jne 0x4114c0
mov dword [esp + 0x48], 0x5e306228
jmp 0x4114c0
cmp eax, 0x97fdbd6c
jg 0x41175f
cmp eax, 0x8a2927db
jne 0x4114c0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x1a48], ebx
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
mov dword [esp + 0x48], 0x61bde3d0
jmp 0x4114c0
cmp eax, 0x9c711f0c
jg 0x41186a
cmp eax, 0x97fdbd6d
jne 0x4114c0
mov ebx, esi
lea esi, [esp + 0xdc0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00405420
mov dword [esp], esi
call fcn.00404bf0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, ebx
lea ebx, [esp + 0x9ac]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404700
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
mov edx, 0x9a5f39af
sub edx, eax
sub edx, ecx
add edx, 0x65a0c755
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404700
mov dword [esp + 0x48], 0xc08f1f41
jmp 0x4114c0
cmp eax, 0x9e9d2b24
jg 0x411889
cmp eax, 0x9c711f0d
jne 0x4114c0
mov dword [esp + 0x48], 0x3073bb45
jmp 0x4114c0
cmp eax, 0xa0dec427
jg 0x4118b3
cmp eax, 0x9e9d2b25
jne 0x4114c0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0x265fe5c7
jmp 0x4114c0
cmp eax, 0xacbbc34f
jg 0x4118d2
cmp eax, 0xa0dec428
jne 0x4114c0
mov dword [esp + 0x48], 0x61bde3d0
jmp 0x4114c0
cmp eax, 0xb527010d
jg 0x4118f1
cmp eax, 0xacbbc350
jne 0x4114c0
mov dword [esp + 0x48], 0x8e81a06
jmp 0x4114c0
cmp eax, 0xb5b73b4c
jg 0x411910
cmp eax, 0xb527010e
jne 0x4114c0
mov dword [esp + 0x48], 0x46c3386a
jmp 0x4114c0
cmp eax, 0xb7f7a04d
jg 0x41193b
cmp eax, 0xb5b73b4d
jne 0x4114c0
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040fbb0
mov dword [esp + 0x48], 0x59efe037
jmp 0x4114c0
cmp eax, 0xba653c1c
jg 0x4125e8
cmp eax, 0xb7f7a04e
jne 0x4114c0
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cbc]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cc0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd0]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8ca0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce0]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a24]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cf0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a18]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4c8e50]
sub esp, 4
call fcn.004179ff
and eax, 0xf
lea ecx, [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
and eax, 1
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
and eax, 5
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
mov eax, dword [0x4c6e84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4c6e84]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402720
mov eax, dword [0x4c8cc8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4c8cf8]
mov ecx, dword [0x4c8ca8]
mov edx, dword [esp + 0x1a74]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c8e44]
sub esp, 0x10
mov eax, dword [0x4c8cc4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8ca4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c8e3c]
sub esp, 0xc
mov eax, dword [0x4c8cf4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8ccc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
call fcn.004179ff
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4c6e88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov dword [esp], eax
call fcn.00402e40
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404700
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404700
mov eax, dword [0x4c6e9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402720
mov eax, dword [0x4c8cd4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x7a2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb0]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cec]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x74]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8cd8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x421520
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [0x4c6ea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4c6ea0]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea0]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov dword [esp], eax
call fcn.00402e40
mov eax, dword [0x4c8cdc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x94]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4c8e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x421524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42152e
mov dword [esp + 4], 0x104
call fcn.00404700
mov dword [esp], edi
call fcn.00404bf0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404700
mov eax, dword [0x4c6ea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6ea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea4]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov dword [esp], eax
call fcn.00402e40
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
lea eax, [esp + 0x184]
mov dword [esp + 0x1a4c], eax
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a82]
mov dword [esp + 0x48], 0xefc29beb
jmp 0x4114c0
cmp eax, 0xbba50240
jg 0x412612
cmp eax, 0xba653c1d
jne 0x4114c0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x81283d0c
jmp 0x4114c0
cmp eax, 0xc08f1f40
jg 0x41267c
cmp eax, 0xbba50241
jne 0x4114c0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0xf93257c1
jmp 0x4114c0
cmp eax, 0xc0efac5b
jg 0x41278c
cmp eax, 0xc08f1f41
jne 0x4114c0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405420
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404700
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
lea edx, [esp + eax*2 + 0xbb6]
lea edx, [edx + ecx*2]
neg ecx
sub ecx, eax
add ecx, 0x104
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404700
mov dword [esp + 0x48], 0xf1182698
jmp 0x4114c0
cmp eax, 0xce9f3b6d
jg 0x412877
cmp eax, 0xc0efac5c
jne 0x4114c0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405420
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404700
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.00404bf0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404700
mov dword [esp], edi
mov dword [esp + 4], 0
call dword [0x4c8e60]
sub esp, 8
mov dword [esp + 0x1a74], eax
mov dword [esp + 0x48], 0x9c711f0d
jmp 0x4114c0
cmp eax, 0xd45ddcdc
jg 0x412896
cmp eax, 0xce9f3b6e
jne 0x4114c0
mov dword [esp + 0x48], 0x59efe037
jmp 0x4114c0
cmp eax, 0xd90acd00
jg 0x4128b5
cmp eax, 0xd45ddcdd
jne 0x4114c0
mov dword [esp + 0x48], 0xb7f7a04e
jmp 0x4114c0
cmp eax, 0xd9c5c8b0
jg 0x4128cc
cmp eax, 0xd90acd01
jne 0x4114c0
jmp 0x413756
cmp eax, 0xda37ee9b
jg 0x4128eb
cmp eax, 0xd9c5c8b1
jne 0x4114c0
mov dword [esp + 0x48], 0x265fe5c7
jmp 0x4114c0
cmp eax, 0xe57c5907
jg 0x41291b
cmp eax, 0xda37ee9c
jne 0x4114c0
mov al, byte [esp + 0x1a83]
test al, al
mov eax, 0xd90acd01
jne 0x412912
mov eax, 0xffe79b04
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0xe6a42a39
jg 0x41293a
cmp eax, 0xe57c5908
jne 0x4114c0
mov dword [esp + 0x48], 0x38a15af
jmp 0x4114c0
cmp eax, 0xefc29bea
jg 0x4135e5
cmp eax, 0xe6a42a3a
jne 0x4114c0
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cbc]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cc0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd0]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8ca0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce0]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a24]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cf0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a18]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a74]
lea eax, [esp + 0x1a14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4c8e50]
sub esp, 4
call fcn.004179ff
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea eax, [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
and eax, 1
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
and eax, 5
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x64], edx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.004179ff
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004183b4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x64], eax
mov eax, dword [0x4c6e84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6e84]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402720
mov eax, dword [0x4c8cc8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4c8cf8]
mov ecx, dword [0x4c8ca8]
mov edx, dword [esp + 0x1a74]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c8e44]
sub esp, 0x10
mov eax, dword [0x4c8cc4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8ca4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c8e3c]
sub esp, 0xc
mov eax, dword [0x4c8cf4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8ccc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
call fcn.004179ff
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4c6e88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [esp + 0x19fc]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov dword [esp], eax
call fcn.00402e40
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404700
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404700
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404700
mov eax, dword [0x4c6e9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402720
mov eax, dword [0x4c8cd4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x7a2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb0]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cec]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x74]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8cd8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x421520
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [0x4c6ea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6ea0]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea0]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov dword [esp], eax
call fcn.00402e40
mov eax, dword [0x4c8cdc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x94]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4c8e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x421524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42152e
mov dword [esp + 4], 0x104
call fcn.00404700
mov dword [esp], edi
call fcn.00404bf0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404700
mov eax, dword [0x4c6ea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6ea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea4]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov dword [esp], eax
call fcn.00402e40
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
lea eax, [esp + 0x184]
mov dword [esp + 0x1a4c], eax
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
mov dword [esp + 0x48], 0xb7f7a04e
jmp 0x4114c0
cmp eax, 0xf1182697
jg 0x413615
cmp eax, 0xefc29beb
jne 0x4114c0
mov al, byte [esp + 0x1a82]
test al, al
mov eax, 0xf8df4ab0
jne 0x41360c
mov eax, 0xa0dec428
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0xf1962ea1
jg 0x413634
cmp eax, 0xf1182698
jne 0x4114c0
mov dword [esp + 0x48], 0xe57c5908
jmp 0x4114c0
cmp eax, 0xf8bf9fe1
jg 0x413664
cmp eax, 0xf1962ea2
jne 0x4114c0
mov al, byte [esp + 0x1a81]
test al, al
mov eax, 0x40f5c291
jne 0x41365b
mov eax, 0xb527010e
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0x5e306227
jg 0x41377e
cmp eax, 0x5dd58008
jg 0x41378e
cmp eax, 0x5ac67d83
jg 0x4137f1
cmp eax, 0x59efe036
jg 0x413828
cmp eax, 0x55ed586f
jg 0x413856
cmp eax, 0x4d9ebac9
jg 0x41386e
cmp eax, 0x46c33869
jg 0x413886
cmp eax, 0x40f5c290
jg 0x41389e
cmp eax, 0x40b35986
jg 0x4138b6
cmp eax, 0x36ebdc82
jg 0x4138ce
cmp eax, 0x3073bb44
jg 0x413952
cmp eax, 0x265fe5c6
jg 0x41397a
cmp eax, 0x1be35b5e
jg 0x41399d
cmp eax, 0x120aca40
jg 0x4139b5
cmp eax, 0xe3e3ca5
jg 0x413a39
cmp eax, 0xa1088d3
jg 0x413a61
cmp eax, 0x8e81a05
jg 0x413a79
cmp eax, 0x38a15ae
jg 0x413aad
cmp eax, 0xffe79b03
jg 0x413aee
cmp eax, 0xfd482ee8
jg 0x413bd2
cmp eax, 0xf8bf9fe2
je 0x413cb2
cmp eax, 0xf8df4ab0
jne 0x413cec
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040fad0
mov dword [esp + 0x48], 0xacbbc350
jmp 0x4114c0
cmp eax, 0x5e306228
jne 0x4114c0
jmp 0x413d04
cmp eax, 0x5dd58009
jne 0x4114c0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0xbba50241
jmp 0x4114c0
cmp eax, 0x5ac67d84
jne 0x4114c0
mov dword [esp + 4], esi
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
mov dword [esp + 0x48], 0x38a15af
jmp 0x4114c0
cmp eax, 0x59efe037
jne 0x4114c0
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040fbb0
test eax, eax
setne byte [esp + 0x1a80]
mov dword [esp + 0x48], 0x718e36d0
jmp 0x4114c0
cmp eax, 0x55ed5870
jne 0x4114c0
mov dword [esp + 0x48], 0x81283d0c
jmp 0x4114c0
cmp eax, 0x4d9ebaca
jne 0x4114c0
mov dword [esp + 0x48], 0x5e306228
jmp 0x4114c0
cmp eax, 0x46c3386a
jne 0x4114c0
mov dword [esp + 0x48], 0xc0efac5c
jmp 0x4114c0
cmp eax, 0x40f5c291
jne 0x4114c0
mov dword [esp + 0x48], 0xc08f1f41
jmp 0x4114c0
cmp eax, 0x40b35987
jne 0x4114c0
mov dword [esp + 0x48], 0x36ebdc83
jmp 0x4114c0
cmp eax, 0x36ebdc83
jne 0x4114c0
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404220
lea eax, [esp + 0x13de]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00413d20
mov dword [esp], eax
call fcn.00417a22
mov dword [esp + 0x48], 0x8098082d
jmp 0x4114c0
cmp eax, 0x3073bb45
jne 0x4114c0
mov eax, 0x46c3386a
cmp dword [esp + 0x1a74], 0
je 0x413971
mov eax, 0xd45ddcdd
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0x265fe5c7
jne 0x4114c0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0x1be35b5f
jmp 0x4114c0
cmp eax, 0x1be35b5f
jne 0x4114c0
mov dword [esp + 0x48], 0x5e306228
jmp 0x4114c0
cmp eax, 0x120aca41
jne 0x4114c0
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404220
lea eax, [esp + 0x13de]
mov dword [esp], eax
call fcn.00404bf0
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00413d20
mov dword [esp], eax
call fcn.00417a22
mov dword [esp + 0x48], 0x36ebdc83
jmp 0x4114c0
cmp eax, 0xe3e3ca6
jne 0x4114c0
mov eax, 0x6731bae5
cmp dword [esp + 0x1a7c], 0
js 0x413a58
mov eax, 0xce9f3b6e
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0xa1088d4
jne 0x4114c0
mov dword [esp + 0x48], 0xacbbc350
jmp 0x4114c0
cmp eax, 0x8e81a06
jne 0x4114c0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.004110f0
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0x4d9ebaca
jmp 0x4114c0
cmp eax, 0x38a15af
jne 0x4114c0
mov dword [esp + 4], esi
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
sete byte [esp + 0x1a81]
mov dword [esp + 0x48], 0xf1962ea2
jmp 0x4114c0
cmp eax, 0xffe79b04
jne 0x4114c0
mov ebx, esi
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404700
mov dword [esp], edi
call fcn.00404bf0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404700
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], esi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
mov eax, 0xa1088d4
jne 0x413bc0
mov eax, 0x5eff00c0
mov dword [esp + 0x48], eax
mov esi, ebx
lea ebx, [esp + 0x9ac]
jmp 0x4114c0
cmp eax, 0xfd482ee9
jne 0x4114c0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405420
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404700
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.00404bf0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404700
mov dword [esp], edi
mov dword [esp + 4], 0
call dword [0x4c8e60]
sub esp, 8
mov dword [esp + 0x1a74], eax
mov dword [esp + 0x48], 0xc0efac5c
jmp 0x4114c0
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0x40b35987
jne 0x413ce3
mov eax, 0x55ed5870
mov dword [esp + 0x48], eax
jmp 0x4114c0
cmp eax, 0xf93257c1
jne 0x4114c0
mov dword [esp + 0x48], 0xacbbc350
jmp 0x4114c0
mov eax, dword [esp + 0x1a78]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret