Function at 0x40d0f0
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1ca8
call fcn.00412d10
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c54], 0
mov dword [esp + 0x1c50], 0
mov dword [esp + 0x1c14], 0
lea eax, [esp + 0x1a0a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x1800]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x15f6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x13ec]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x11e2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0xfd8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0xdce]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea ebx, [esp + 0xbc4]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x9ba]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x7b0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x5a6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0x192]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412ba0
lea eax, [esp + 0xca]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00412ba0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov word [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0xffffffff
call fcn.0040cbb0
mov dword [esp + 0x1ca0], eax
lea esi, [esp + 0x1c50]
lea edi, [esp + 0x39c]
mov dword [esp + 0x4c], 0x127641fa
jmp 0x40d480
mov dword [esp + 0x4c], eax
nop
mov eax, dword [esp + 0x4c]
cmp eax, 0x9799608a
jg 0x40d520
cmp eax, 0x8780711d
jne 0x40d480
mov eax, dword [esp + 0x1c88]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c4a3c]
sub esp, 0x10
mov dword [esp + 0x1c60], ebx
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c6c], 1
mov dword [esp], esi
call dword [0x4c4a40]
sub esp, 4
cmp eax, 1
mov eax, 0xfbcfe295
jne 0x40d47b
mov eax, 0xb0d46b8b
jmp 0x40d47b
cmp eax, 0xa9952d35
jg 0x40d580
cmp eax, 0x9799608b
jne 0x40d480
lea eax, [esp + 0x1800]
mov dword [esp + 0x1c60], eax
mov dword [esp + 0x1c64], edi
mov dword [esp + 0x1c6c], 0
mov dword [esp], esi
call dword [0x4c4a40]
sub esp, 4
cmp eax, 1
mov eax, 0xfe6aebf0
jne 0x40d56d
mov eax, 0x8780711d
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x7d4f3a8f
jg 0x40d694
cmp eax, 0x7af7c546
jg 0x40d6ac
cmp eax, 0x6fcbaad8
jg 0x40d742
cmp eax, 0x6c4a7c06
jg 0x40d767
cmp eax, 0x60f04ce3
jg 0x40d777
cmp eax, 0x5ed20dbe
jg 0x40d787
cmp eax, 0x4ff86356
jg 0x40d7b2
cmp eax, 0xaa6aea5f
jg 0x40d7c2
cmp eax, 0xa9952d36
jne 0x40d480
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403290
lea eax, [esp + 0x11e2]
mov dword [esp], eax
call fcn.00403700
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11e2]
mov dword [esp + 8], eax
lea eax, [esp + 0x3a8]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00403290
lea eax, [esp + 0x1800]
mov dword [esp + 0x1c60], eax
mov dword [esp + 0x1c64], edi
mov dword [esp + 0x1c6c], 0
mov dword [esp], esi
call dword [0x4c4a40]
sub esp, 4
cmp eax, 1
mov eax, 0x3093b0f2
jne 0x40d68b
mov eax, 0x1bb72273
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x7d4f3a90
jne 0x40d480
mov dword [esp + 0x4c], 0x1bd693
jmp 0x40d480
cmp eax, 0x7af7c547
jne 0x40d480
mov esi, ebx
mov ebx, edi
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b0]
mov dword [esp + 8], eax
lea eax, [esp + 0xfd8]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004034d0
mov dword [esp + 0x5c], eax
mov word [esp + eax*2 + 0xfd0], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c94], eax
mov ecx, 0x4abd7a9e
test eax, eax
jne 0x40d72e
mov ecx, 0xb6baa74d
mov dword [esp + 0x4c], ecx
mov edi, ebx
mov ebx, esi
lea esi, [esp + 0x1c50]
jmp 0x40d480
cmp eax, 0x6fcbaad9
jne 0x40d480
mov eax, 0x1cc0ae2d
cmp dword [esp + 0x58], 6
jb 0x40d75e
mov eax, 0xd57ec589
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x6c4a7c07
jne 0x40d480
jmp 0x40de19
cmp eax, 0x60f04ce4
jne 0x40d480
jmp 0x40de97
cmp eax, 0x5ed20dbf
jne 0x40d480
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x4c], 0xaa6aea60
jmp 0x40d480
cmp eax, 0x4ff86357
jne 0x40d480
jmp 0x40de97
cmp eax, 0xb0d46b8a
jg 0x40d804
cmp eax, 0xaa6aea60
jne 0x40d480
lea eax, [esp + 0x11e2]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040d0d0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c9c], eax
mov dword [esp + 0x4c], 0xbaf9adb
jmp 0x40d480
cmp eax, 0xb205f043
jg 0x40d863
cmp eax, 0xb0d46b8b
jne 0x40d480
mov eax, dword [esp + 0x1c88]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
test eax, eax
mov eax, 0x3feca061
jne 0x40d85a
mov eax, 0xa9952d36
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0xb6baa74c
jg 0x40d987
cmp eax, 0xb205f044
jne 0x40d480
lea eax, [esp + 0xfd8]
mov dword [esp], eax
mov esi, eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
lea eax, [esp + 0xdce]
mov ebx, edi
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404800
mov dword [esp], esi
call fcn.00403700
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15f6]
mov dword [esp + 8], eax
mov dword [esp], edi
mov edi, ebx
lea ebx, [esp + 0xbc4]
lea esi, [esp + 0x1c50]
mov dword [esp + 4], 0x104
call fcn.00403290
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x64]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdce]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfd8]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403290
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x50]
mov edx, 0x82587761
sub edx, eax
sub edx, ecx
add edx, 0x7da789a3
lea eax, [esp + eax*2 + 0xdce]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403290
mov dword [esp + 0x4c], 0xee0a31ca
jmp 0x40d480
cmp eax, 0xb83bd274
jg 0x40d9b1
cmp eax, 0xb6baa74d
jne 0x40d480
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x4c], 0xbaf9adb
jmp 0x40d480
cmp eax, 0xd223be35
jg 0x40da01
cmp eax, 0xb83bd275
jne 0x40d480
lea eax, [esp + 0x7b0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fc0
mov dword [esp + 0x70], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.0040bf30
test eax, eax
mov eax, 0x7af7c547
jne 0x40d9f8
mov eax, 0x6fcbaad9
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0xd57ec588
jg 0x40da33
cmp eax, 0xd223be36
jne 0x40d480
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x4c], 0x26fa2a5f
jmp 0x40d480
cmp eax, 0xdf1fa46f
jg 0x40dad0
cmp eax, 0xd57ec589
jne 0x40d480
lea eax, [esp + 0x5a6]
mov dword [esp + 8], eax
lea eax, [esp + 0x7b0]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15f6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403e10
lea eax, [esp + 0x15f6]
mov dword [esp], eax
call fcn.00403700
mov dword [esp + 0x64], eax
mov dword [esp], 0
call fcn.0040eba0
mov dword [esp + 0x48], eax
call fcn.00402050
imul eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00412d5e
mov dword [esp + 0x4c], 0xb205f044
jmp 0x40d480
cmp eax, 0xe5686864
jg 0x40daff
cmp eax, 0xdf1fa470
jne 0x40d480
mov eax, 0x60f04ce4
cmp dword [esp + 0x60], 0x80
jne 0x40daf6
mov eax, 0x3499555c
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0xec56d219
jg 0x40db2e
cmp eax, 0xe5686865
jne 0x40d480
mov eax, 0x1bd693
cmp dword [esp + 0x1c90], 0
je 0x40db25
mov eax, 0x3b9f7828
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0xee0a31c9
jg 0x40db76
cmp eax, 0xec56d21a
jne 0x40d480
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x60], eax
mov ecx, 0xdf1fa470
test eax, eax
jne 0x40db6d
mov ecx, 0x3499555c
mov dword [esp + 0x4c], ecx
jmp 0x40d480
cmp eax, 0xfbcfe294
jg 0x40dbc5
cmp eax, 0xee0a31ca
jne 0x40d480
lea eax, [esp + 0xdce]
mov dword [esp + 4], eax
lea eax, [esp + 0x5a6]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xb205f044
je 0x40dbbc
mov eax, 0x7d4f3a90
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0xfe6aebef
jg 0x40dbdc
cmp eax, 0xfbcfe295
jne 0x40d480
jmp 0x40de97
cmp eax, 0x1bd692
jg 0x40dbf3
cmp eax, 0xfe6aebf0
jne 0x40d480
jmp 0x40de97
cmp eax, 0x4eb7283
jg 0x40dcf3
cmp eax, 0x1bd693
jne 0x40d480
lea eax, [esp + 0x13ec]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
lea eax, [esp + 0x11e2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
lea eax, [esp + 0x13ec]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404800
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15f6]
mov dword [esp + 8], eax
lea eax, [esp + 0x11e2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403290
lea eax, [esp + 0x13ec]
mov dword [esp], eax
call fcn.00403700
mov ecx, dword [esp + 0x64]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11e2]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13ec]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403290
lea eax, [esp + 0x11e2]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4c4a38]
sub esp, 8
mov dword [esp + 0x1c90], eax
mov dword [esp + 0x4c], 0xe5686865
jmp 0x40d480
cmp eax, 0xbaf9ada
jg 0x40dd25
cmp eax, 0x4eb7284
jne 0x40d480
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x4c], 0xb6baa74d
jmp 0x40d480
cmp eax, 0x127641f9
jg 0x40dd3c
cmp eax, 0xbaf9adb
jne 0x40d480
jmp 0x40eb8c
cmp eax, 0x1a69a365
jg 0x40dd6b
cmp eax, 0x127641fa
jne 0x40d480
mov eax, 0x6c4a7c07
cmp dword [esp + 0x1ca0], 0
js 0x40dd62
mov eax, 0xb83bd275
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x1bb72272
jg 0x40dd9d
cmp eax, 0x1a69a366
jne 0x40d480
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x4c], 0x4eb7284
jmp 0x40d480
cmp eax, 0x1cc0ae2c
jg 0x40de07
cmp eax, 0x1bb72273
jne 0x40d480
mov eax, dword [esp + 0x1c88]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c4a3c]
sub esp, 0x10
mov dword [esp + 0x54], 1
mov dword [esp + 0x4c], 0x4a8bdf83
jmp 0x40d480
cmp eax, 0x26fa0dfb
jg 0x40de31
cmp eax, 0x1cc0ae2d
jne 0x40d480
mov dword [esp + 0x1c9c], 0xffffffff
mov dword [esp + 0x4c], 0xbaf9adb
jmp 0x40d480
cmp eax, 0x4abd7a9d
jg 0x40dec6
cmp eax, 0x4a8bdf82
jg 0x40def1
cmp eax, 0x3feca060
jg 0x40df19
cmp eax, 0x3b9f7827
jg 0x40df31
cmp eax, 0x3499555b
jg 0x40ea24
cmp eax, 0x26fa0dfc
je 0x40de97
cmp eax, 0x26fa2a5f
jne 0x40eb74
mov eax, 0x5ed20dbf
cmp dword [esp + 0x1c98], 0
jne 0x40de8e
mov eax, 0xaa6aea60
mov dword [esp + 0x4c], eax
jmp 0x40d480
lea eax, [esp + 0xdce]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x5a6]
mov dword [esp], eax
call fcn.0040be50
mov dword [esp + 0x4c], 0x4a8bdf83
jmp 0x40d480
cmp eax, 0x4abd7a9e
jne 0x40d480
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0x1a69a366
je 0x40dee8
mov eax, 0x4eb7284
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x4a8bdf83
jne 0x40d480
mov eax, 0xd223be36
cmp dword [esp + 0x1c94], 0
jne 0x40df10
mov eax, 0x26fa2a5f
mov dword [esp + 0x4c], eax
jmp 0x40d480
cmp eax, 0x3feca061
jne 0x40d480
mov dword [esp + 0x4c], 0x4a8bdf83
jmp 0x40d480
cmp eax, 0x3b9f7828
jne 0x40d480
mov eax, dword [0x4c486c]
mov ecx, dword [0x4c4894]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c4c]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c487c]
mov ecx, dword [0x4c4894]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c48]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c4880]
mov ecx, dword [0x4c4894]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c44]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c486c]
mov ecx, dword [0x4c4890]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c40]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c4860]
mov ecx, dword [0x4c48a0]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c3c]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c486c]
mov ecx, dword [0x4c48a4]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c38]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c48b0]
mov ecx, dword [0x4c48a8]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c34]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c48ac]
mov ecx, dword [0x4c48a8]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c30]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [0x4c48ac]
mov ecx, dword [0x4c4894]
mov edx, dword [esp + 0x1c90]
lea edi, [esp + 0x1c2c]
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c4a2c]
sub esp, 0x18
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
call dword [0x4c4a28]
sub esp, 4
call fcn.00412d3b
and eax, 0xf
lea edi, [esp + 0xca]
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004136f0
mov dword [esp], edi
call fcn.00403700
mov dword [esp + 0x70], eax
lea ecx, [eax + 1]
mov dword [esp + 0x70], ecx
mov word [esp + eax*2 + 0xca], 0x2e
mov eax, dword [esp + 0x70]
lea esi, [esp + eax*2 + 0xca]
call fcn.00412d3b
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004136f0
mov dword [esp], edi
call fcn.00403700
mov dword [esp + 0x70], eax
lea ecx, [eax + 1]
mov dword [esp + 0x70], ecx
mov word [esp + eax*2 + 0xca], 0x2e
mov eax, dword [esp + 0x70]
lea esi, [esp + eax*2 + 0xca]
call fcn.00412d3b
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004136f0
mov dword [esp], edi
call fcn.00403700
mov dword [esp + 0x70], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x70], edx
mov word [esp + eax*2 + 0xca], 0x2e
mov eax, dword [esp + 0x70]
lea esi, [esp + eax*2 + 0xca]
call fcn.00412d3b
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004136f0
mov dword [esp], edi
call fcn.00403700
mov dword [esp + 0x70], eax
mov eax, dword [0x47c134]
movzx eax, byte [eax]
mov dword [esp + 0x6c], eax
mov ecx, dword [0x47c134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x68], eax
mov ecx, dword [0x47c134]
mov edx, dword [esp + 0x6c]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x90]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402450
mov eax, dword [0x4c4888]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a24]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x4c48b8]
mov ecx, dword [0x4c4868]
mov edx, dword [esp + 0x1c90]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c4a1c]
sub esp, 0x10
mov eax, dword [0x4c4884]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c486c]
mov ecx, dword [esp + 0x1c90]
lea edx, [esp + 0x13ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c4864]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c4a14]
sub esp, 0xc
mov eax, dword [0x4c48b4]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c4a10]
sub esp, 0x10
mov eax, dword [0x4c488c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a24]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a20]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
call fcn.00412d3b
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x47c138]
mov dword [esp + 0x1c14], eax
movzx eax, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x1c14]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x1c14]
mov edx, dword [esp + 0x6c]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a0a]
mov esi, eax
mov dword [esp], esi
call fcn.00402870
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403290
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbc4]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403290
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea edi, [esp + 0x9ba]
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00403290
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ba]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403290
mov eax, dword [0x47c14c]
movzx eax, byte [eax]
mov dword [esp + 0x6c], eax
mov ecx, dword [0x47c14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x68], eax
mov ecx, dword [0x47c14c]
mov edx, dword [esp + 0x6c]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x80]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402450
mov eax, dword [0x4c4894]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a24]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x4c486c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c4874]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c4870]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c48ac]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c4a10]
sub esp, 0x10
mov eax, dword [0x4c4898]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a24]
sub esp, 8
mov dword [esp + 0x1c1c], eax
mov eax, dword [0x4c486c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4302d4
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [esp + 0x1c1c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a20]
sub esp, 8
mov eax, dword [0x47c150]
movzx eax, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, dword [0x47c150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x68], eax
mov ecx, dword [0x47c150]
mov edx, dword [esp + 0x6c]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa0]
mov esi, eax
mov dword [esp], esi
call fcn.00402870
mov eax, dword [0x4c489c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a24]
sub esp, 8
mov dword [esp + 0x1c18], eax
mov eax, dword [0x4c486c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [0x4c4878]
mov ecx, dword [esp + 0x1c90]
lea edx, [esp + 0xdce]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a18]
sub esp, 0xc
mov eax, dword [esp + 0x1c18]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a20]
sub esp, 8
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a20]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a0c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a08]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c4a20]
sub esp, 8
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
call dword [0x4c4a30]
sub esp, 4
lea eax, [esp + 0x192]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x20a
call fcn.00404b60
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c4a70]
sub esp, 0xc
mov dword [esp + 0x1c98], eax
mov ecx, 0x26fa0dfc
test eax, eax
je 0x40ea0d
mov ecx, 0xec56d21a
mov dword [esp + 0x4c], ecx
lea edi, [esp + 0x39c]
lea esi, [esp + 0x1c50]
jmp 0x40d480
cmp eax, 0x3499555c
jne 0x40d480
mov dword [esp + 0x1c50], 0x3c
mov dword [esp + 0x1c54], 0x40
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c5c], 0x4302d8
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c70], 0
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f10
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x4302e2
mov dword [esp + 4], 0x104
call fcn.00403290
lea eax, [esp + 0x11e2]
mov dword [esp], eax
mov esi, eax
call fcn.00403700
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3a2]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00403290
mov eax, dword [0x47c154]
movzx eax, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, dword [0x47c154]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x68], eax
mov ecx, dword [0x47c154]
mov edx, dword [esp + 0x6c]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1800]
mov dword [esp], eax
call fcn.00402870
lea eax, [esp + 0xfd8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c94], eax
mov ecx, 0x4ff86357
test eax, eax
je 0x40eb64
mov ecx, 0x9799608b
mov dword [esp + 0x4c], ecx
lea esi, [esp + 0x1c50]
jmp 0x40d480
cmp eax, 0x3093b0f2
jne 0x40d480
mov dword [esp + 0x4c], 0x4a8bdf83
jmp 0x40d480
mov eax, dword [esp + 0x1c9c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret