Function at 0x4281d0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xd60
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x24]
mov edx, dword [ebp + 0x20]
mov esi, dword [ebp + 0x1c]
mov edi, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp + 0x10]
call fcn.00429920
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], esi
call fcn.00429930
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0xb90]
mov dword [ebp - 0x2c], edx
mov esi, dword [ebp - 0xb94]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x70], 0
mov edi, esp
lea ebx, [ebp - 0x27a]
mov dword [edi], ebx
mov dword [edi + 8], 0x20a
call fcn.00429940
call fcn.00418ad0
mov eax, esp
lea ecx, [ebp - 0x484]
mov dword [eax], ecx
mov dword [eax + 8], 0x20a
mov dword [eax + 4], 0
call fcn.00429950
call fcn.00418ad0
mov eax, esp
lea ecx, [ebp - 0x68e]
mov dword [eax], ecx
mov dword [eax + 8], 0x20a
mov dword [eax + 4], 0
mov dword [ebp - 0xb9c], ecx
call fcn.00418ad0
mov eax, esp
lea ecx, [ebp - 0x6f2]
mov dword [eax], ecx
call fcn.00429960
mov dword [eax + 4], 0
call fcn.00418ad0
mov eax, esp
lea ecx, [ebp - 0x8fc]
mov dword [eax], ecx
mov dword [eax + 8], 0x20a
mov dword [eax + 4], 0
call fcn.00418ad0
mov eax, esp
lea ecx, [ebp - 0xb06]
call fcn.00429970
call fcn.00429980
mov dword [eax + 4], 0
call fcn.00418ad0
call fcn.00429990
mov dword [ebp - 0xb10], 0
mov dword [ebp - 0xb14], 0
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0xb1c], 0
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0xb24], 0
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb2c], 0
mov dword [ebp - 0xb30], 0
mov dword [ebp - 0xb34], 0
call fcn.004299a0
mov dword [ebp - 0xb3c], 0
mov dword [ebp - 0xb40], 0
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0xb48], 0
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0xb50], 0
mov eax, esp
mov ecx, dword [ebp - 0xb9c]
mov dword [eax], ecx
mov dword [eax + 4], 0x104
call fcn.0044ad10
call fcn.004299b0
mov eax, dword [ebp - 0x30]
mov ecx, esi
mov ecx, esp
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb9c]
call fcn.004299c0
mov dword [ecx + 0xc], 0
mov dword [ecx + 4], 0x104
mov ecx, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call ecx
sub esp, 0x10
mov ecx, 0xe1b7c90
sub ecx, eax
mov eax, 0xe1b7c91
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov eax, esp
mov ecx, dword [ebp - 0xb98]
call fcn.004299d0
mov dword [eax + 4], 0x104
call fcn.00432fa0
mov ecx, esp
call fcn.004299e0
mov dword [ecx], edx
mov dword [ebp - 0xba0], eax
call fcn.00454e60
mov dword [ebp - 0xb5c], eax
mov eax, esp
mov dword [eax], 0
call fcn.00436410
call fcn.004299f0
mov dword [ebp - 0xba8], eax
call fcn.004389d0
call fcn.00429a00
imul ecx, eax
mov dword [esp], ecx
call fcn.00419334
mov dword [ebp - 0xb84], 0x2a3f105a
mov eax, dword [ebp - 0xb84]
mov ecx, eax
sub ecx, 0x68ebda22
mov dword [ebp - 0xbac], eax
mov dword [ebp - 0xbb0], ecx
jg 0x428604
jmp 0x42849c
mov eax, dword [ebp - 0xbac]
sub eax, 0x2a3f1059
mov dword [ebp - 0xbb4], eax
jg 0x4285e8
jmp 0x4284b8
mov eax, dword [ebp - 0xbac]
sub eax, 0xd8a6042f
mov dword [ebp - 0xbb8], eax
jg 0x4285cd
jmp 0x4284d4
mov eax, dword [ebp - 0xbac]
sub eax, 0x890c110d
mov dword [ebp - 0xbbc], eax
jg 0x42850c
jmp 0x4284f0
mov eax, dword [ebp - 0xbac]
sub eax, 0x8168f5fc
mov dword [ebp - 0xbc0], eax
je 0x428886
jmp 0x428621
call fcn.00429a10
sub eax, 0xacd4baac
mov dword [ebp - 0xbc4], eax
jg 0x4285b1
jmp 0x428527
mov eax, dword [ebp - 0xbac]
sub eax, 0xa70045a4
call fcn.00429a20
jg 0x428595
jmp 0x428542
mov eax, dword [ebp - 0xbac]
sub eax, 0x890c110e
mov dword [ebp - 0xbcc], eax
je 0x4297b9
jmp 0x42855e
mov eax, dword [ebp - 0xbac]
sub eax, 0x8c58d8cb
mov dword [ebp - 0xbd0], eax
je 0x42882e
jmp 0x42857a
mov eax, dword [ebp - 0xbac]
sub eax, 0x9a3f2fcb
call fcn.00429a30
je 0x428a0f
jmp 0x428621
mov eax, dword [ebp - 0xbac]
sub eax, 0xa70045a5
mov dword [ebp - 0xbd8], eax
je 0x428876
jmp 0x428621
mov eax, dword [ebp - 0xbac]
sub eax, 0xacd4baad
mov dword [ebp - 0xbdc], eax
je 0x4289f0
jmp 0x428621
call fcn.00429a40
sub eax, 0xd8a60430
mov dword [ebp - 0xbe0], eax
je 0x4289e1
jmp 0x428621
mov eax, dword [ebp - 0xbac]
sub eax, 0x2a3f105a
mov dword [ebp - 0xbe4], eax
je 0x428626
jmp 0x428621
mov eax, dword [ebp - 0xbac]
add eax, 0x971425dd
mov dword [ebp - 0xbe8], eax
je 0x428867
jmp 0x428621
jmp 0x429919
mov eax, 0
mov ecx, 0x4f92d8
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 4
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf0], ecx
call fcn.004421e0
mov ecx, 0
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [ebp - 0xbf4], eax
call fcn.00429a50
call fcn.004421e0
mov ecx, 0
mov edx, dword [ebp - 0x24]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 0x79780bd2
add esi, edx
mov edx, ecx
sub edx, esi
add edx, 0x16e1ccfa
sub edx, 1
sub edx, 0x16e1ccfa
add ecx, 0x8687f42e
add edx, ecx
mov ecx, dword [ebp - 0x28]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [ebp - 0xbfc], eax
call fcn.0042be70
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.00454e60
mov ecx, 0x104
lea edx, [ebp - 0x484]
call fcn.00429a60
mov eax, dword [ebp - 0xb5c]
mov esi, dword [ebp - 0x20]
mov dword [esp], esi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [ebp - 0xc00], ecx
call fcn.00454830
mov ecx, 0x104
mov edx, 0x4f9300
mov edx, dword [edx]
mov esi, dword [ebp - 0xb60]
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0xb5c]
mov dword [ebp - 0xc04], eax
mov eax, edx
add eax, 0x75de48a3
sub eax, ebx
add eax, 0x8a21b75d
sub edx, eax
sub ecx, edx
mov eax, dword [ebp - 0x20]
call fcn.00429a70
shl edx, 1
add eax, edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
call fcn.00454830
lea ecx, str..exe
mov edx, 0x4f92dc
mov edx, dword [edx]
mov esi, 0
mov edi, 0x104
call fcn.00429a80
sub edi, 0x59f810cd
sub edi, 0x88d22fa0
add edi, 0x59f810cd
mov dword [ebp - 0xc08], eax
mov eax, 0x40000
mov eax, esi
sub eax, ebx
add edi, eax
sub edi, 0xcb3c0898
sub edi, 0x772dd060
add edi, 0xcb3c0898
call fcn.00429a90
mov ebx, eax
mov ebx, esi
sub ebx, edi
mov edi, esi
sub edi, 0xad9fc1bf
add ebx, edi
mov edi, esi
sub edi, ebx
add edi, 0xe8c195dd
sub edi, eax
sub edi, 0xe8c195dd
sub esi, 0xad9fc1bf
add edi, esi
call fcn.00429aa0
call fcn.00429ab0
shl esi, 1
add eax, esi
mov esi, dword [ebp - 0xb60]
shl esi, 1
add eax, esi
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
call fcn.00429ac0
call fcn.00454830
mov dword [ebp - 0xb84], 0x8c58d8cb
call fcn.00429ad0
jmp 0x429919
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00429ae0
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0x68ebda23
mov edx, 0x2a3f105a
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0xb84], ecx
jmp 0x429919
mov dword [ebp - 0xb84], 0xa70045a5
jmp 0x429919
mov eax, 0x8168f5fc
mov dword [ebp - 0xb84], eax
jmp 0x429919
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x27a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc18], ecx
call fcn.004421e0
mov ecx, 0
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc20], ecx
call fcn.004421e0
mov ecx, 0x104
lea edx, [ebp - 0x27a]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc28], ecx
call fcn.0042be70
mov eax, 0x9bf2f846
pushfd
xor eax, 0x9bf2f942
popfd
lea ecx, [ebp - 0x484]
mov edx, dword [ebp - 0xb5c]
mov esi, dword [ebp - 0x18]
mov dword [esp], esi
mov dword [esp + 4], 0x104
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [ebp - 0xc2c], eax
call fcn.00454830
lea ecx, [ebp - 0x27a]
mov dword [esp], ecx
mov dword [ebp - 0xc30], eax
call fcn.00454e60
mov ecx, 0x104
mov edx, 0
lea esi, [ebp - 0x27a]
mov edi, dword [ebp - 0xb5c]
sub edx, 0x6eb2cce4
sub edx, edi
sub edx, 0x914d331c
sub ecx, 0x302cfb72
add ecx, edx
add ecx, 0x302cfb72
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp - 0xb5c]
shl edi, 1
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.00454830
mov ecx, dword [0x4f7d98]
mov edx, dword [ebp - 0x18]
mov esi, esp
call fcn.00429af0
mov dword [esi + 4], 0
call fcn.00429b00
call ecx
sub esp, 8
mov ecx, 0xd8a60430
mov dword [ebp - 0x34], eax
call fcn.00429b10
jmp 0x429919
mov dword [ebp - 0xb84], 0xacd4baad
jmp 0x429919
mov eax, 0x9a3f2fcb
mov ecx, 0xa70045a5
cmp dword [ebp - 0x34], 0
cmove eax, ecx
mov dword [ebp - 0xb84], eax
jmp 0x429919
call fcn.00429b20
mov ecx, dword [0x4f7aec]
mov edx, dword [0x4f7b14]
call fcn.00429b30
mov edi, esp
lea ebx, [ebp - 0x38]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
call fcn.00429b40
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7afc]
mov esi, dword [0x4f7b14]
call fcn.00429b50
mov ebx, esp
mov dword [ebp - 0xc38], eax
lea eax, [ebp - 0x3c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7b00]
mov esi, dword [0x4f7b14]
mov edi, dword [ebp - 0x34]
mov ebx, esp
call fcn.00429b60
lea eax, [ebp - 0x40]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
call fcn.00429b70
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
call fcn.00429b80
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
call fcn.00429b90
mov esi, dword [0x4f7b10]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebp - 0xc40], eax
lea eax, [ebp - 0x44]
call fcn.00429ba0
call fcn.00429bb0
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7ae0]
mov esi, dword [0x4f7b20]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebp - 0xc44], eax
lea eax, [ebp - 0x48]
mov dword [ebx + 0x14], eax
call fcn.00429bc0
call fcn.00429bd0
call fcn.00429be0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7aec]
mov esi, dword [0x4f7b24]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebp - 0xc48], eax
lea eax, [ebp - 0x4c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call fcn.00429bf0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7b30]
mov esi, dword [0x4f7b28]
mov edi, dword [ebp - 0x34]
mov ebx, 7
mov ebx, esp
call fcn.00429c00
lea eax, [ebp - 0x50]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7b2c]
call fcn.00429c10
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebp - 0xc50], eax
lea eax, [ebp - 0x54]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
call fcn.00429c20
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d8c]
mov edx, dword [0x4f7b2c]
mov esi, dword [0x4f7b14]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebp - 0xc54], eax
lea eax, [ebp - 0x58]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x4f7d88]
mov edx, dword [ebp - 0x34]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0xc58], eax
call ecx
sub esp, 4
call fcn.00429c30
call fcn.0042f090
mov dword [ebp - 0xc60], eax
call fcn.00419311
mov ecx, eax
not ecx
and eax, 0xd719458b
mov edx, ecx
and edx, 0x28e6ba74
add eax, edx
xor eax, 0x28e6ba7b
and ecx, 0xfffffff0
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x410f7a90
and eax, 0xbef0856f
add ecx, eax
xor ecx, 0xbef0856f
mov eax, ecx
mov eax, esp
lea edx, [ebp - 0x6f2]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.00429c40
call fcn.00419344
mov ecx, esp
mov edx, dword [ebp - 0xc64]
mov dword [ecx], edx
call fcn.00429c50
call fcn.00454e60
mov dword [ebp - 0xb54], eax
mov ecx, 0x11ea0e2f
sub ecx, eax
mov edx, 0x11ea0e30
sub edx, ecx
mov dword [ebp - 0xb54], edx
mov word [ebp + eax*2 - 0x6f2], 0x2e
call fcn.00429c60
lea eax, [ebp + eax*2 - 0x6f2]
call fcn.00429c70
call fcn.00419311
mov ecx, eax
not ecx
mov edx, 0x7ffff
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
add edx, eax
mov eax, edx
xor eax, ecx
and eax, edx
mov ecx, esp
mov edx, dword [ebp - 0xc6c]
mov dword [ecx + 4], edx
call fcn.00429c80
mov dword [ecx + 8], 0xa
call fcn.00419344
mov ecx, esp
mov edx, dword [ebp - 0xc64]
mov dword [ecx], edx
mov dword [ebp - 0xc70], eax
call fcn.00454e60
mov dword [ebp - 0xb54], eax
mov ecx, 0xe220a842
sub ecx, eax
mov edx, 0xe220a843
sub edx, ecx
mov dword [ebp - 0xb54], edx
mov word [ebp + eax*2 - 0x6f2], 0x2e
mov eax, dword [ebp - 0xb54]
lea eax, [ebp + eax*2 - 0x6f2]
call fcn.00429c90
call fcn.00419311
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffa
and eax, 5
add edx, eax
mov eax, edx
xor eax, ecx
and eax, edx
mov ecx, esp
mov edx, dword [ebp - 0xc74]
mov dword [ecx + 4], edx
call fcn.00429ca0
mov dword [ecx + 8], 0xa
call fcn.00419344
mov edx, ecx
mov ecx, esp
mov edx, dword [ebp - 0xc64]
mov dword [ecx], edx
mov dword [ebp - 0xc78], eax
call fcn.00454e60
mov dword [ebp - 0xb54], eax
mov ecx, eax
inc ecx
call fcn.00429cb0
mov word [ebp + eax*2 - 0x6f2], 0x2e
mov eax, dword [ebp - 0xb54]
lea eax, [ebp + eax*2 - 0x6f2]
mov dword [ebp - 0xc7c], eax
call fcn.00419311
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffff3
and eax, 0xc
add edx, eax
mov eax, edx
xor eax, ecx
and eax, edx
mov edx, 4
mov ecx, esp
mov edx, dword [ebp - 0xc7c]
call fcn.00429cc0
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.00419344
mov ecx, esp
mov edx, dword [ebp - 0xc64]
mov dword [ecx], edx
mov dword [ebp - 0xc80], eax
call fcn.00454e60
call fcn.00429cd0
mov eax, dword [0x4e94d0]
movzx eax, byte [eax]
mov dword [ebp - 0xb64], eax
call fcn.00429ce0
movzx eax, byte [eax + ecx + 1]
mov dword [ebp - 0xb68], eax
call fcn.00429cf0
mov edx, dword [ebp - 0xb64]
lea esi, [ecx + edx + 2]
inc ecx
mov edi, esp
mov dword [edi + 0x10], eax
mov dword [edi + 0xc], esi
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
lea eax, [ebp - 0xb40]
call fcn.00429d00
call fcn.0043af30
mov eax, dword [0x4f7d84]
call fcn.00429d10
mov edx, dword [ebp - 0x34]
mov esi, esp
mov dword [esi + 4], ecx
call fcn.00429d20
call eax
sub esp, 8
mov dword [ebp - 0x5c], eax
call fcn.00429d30
xor ecx, ecx
mov edx, dword [0x4f7b38]
mov esi, dword [0x4f7ae8]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
call fcn.00429d40
call fcn.00429d50
call eax
sub esp, 0x10
lea ecx, [ebp - 0x6f2]
mov edx, dword [0x4f7d78]
call fcn.00429d60
mov edi, dword [ebp - 0x34]
mov ebx, 0xff
mov ebx, esp
mov dword [ebx + 8], ecx
call fcn.00429d70
mov dword [ebx], edi
call fcn.00429d80
call edx
sub esp, 0xc
lea ecx, [ebp - 0x27a]
call fcn.00429d90
call fcn.00429da0
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
call fcn.00429db0
mov dword [ebp - 0xc88], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4f7d74]
mov edx, dword [0x4f7ae4]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [ebp - 0xc8c], eax
call ecx
sub esp, 0xc
lea ecx, [ebp - 0xb40]
mov edx, dword [0x4f7d70]
mov esi, dword [0x4f7b34]
mov edi, dword [ebp - 0x34]
mov ebx, esp
call fcn.00429dc0
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [ebp - 0xc90], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4f7d84]
mov edx, dword [0x4f7b0c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
call fcn.00429dd0
call ecx
sub esp, 8
mov dword [ebp - 0x60], eax
mov eax, dword [0x4f7d6c]
call fcn.00429de0
mov edx, dword [ebp - 0x34]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
call fcn.00429df0
call fcn.00429e00
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xc98], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x4c]
call fcn.00429e10
mov edi, esp
call fcn.00429e20
mov dword [edi], esi
call fcn.00429e30
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
call fcn.00429e40
mov dword [ebp - 0xca0], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d80]
mov edx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x34]
mov edi, esp
call fcn.00429e50
call fcn.00429e60
mov dword [ebp - 0xca4], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
call fcn.00429e70
mov dword [ebp - 0xca8], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xcac], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x34]
mov edi, esp
call fcn.00429e80
mov dword [edi], esi
mov dword [ebp - 0xcb0], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
call fcn.00429e90
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xcb8], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
call fcn.00429ea0
call fcn.00429eb0
mov edi, esp
mov dword [edi + 4], edx
call fcn.00429ec0
mov dword [ebp - 0xcbc], eax
call ecx
sub esp, 8
mov dword [ebp - 0xcc0], eax
call fcn.00419311
lea ecx, [ebp - 0xb06]
mov edx, 0x85c6e71b
mov esi, 5
xor edi, edi
mov dword [ebp - 0xcc4], edx
mov edx, edi
div esi
mov eax, dword [edx*4 + 0x4e94d4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xb6c]
mov edx, dword [ebp - 0xcc4]
add edx, 0
sub edx, 1
sub edx, 0x85c6e71b
sub eax, 0xb3a43b98
sub eax, edx
add eax, 0xb3a43b98
call fcn.00429ed0
shl eax, 1
add edx, eax
movzx eax, word [edx]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0xb70]
mov edx, dword [ebp - 0x70]
mov esi, dword [ebp - 0xb6c]
shl esi, 1
add edx, esi
add edx, 4
call fcn.00429ee0
add esi, 2
mov edi, dword [ebp - 0xb6c]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00453dd0
mov eax, 0x104
lea ecx, [ebp - 0xb06]
mov edx, dword [ebp - 0xb58]
call fcn.00429ef0
mov dword [esp], esi
mov dword [esp + 4], 0x104
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [ebp - 0xcc8], eax
call fcn.00454830
lea ecx, str..exe
mov edx, 4
mov esi, 0x4f92ec
mov esi, dword [esi]
mov edi, 0x104
call fcn.00429f00
sub edi, 0xd37a45bf
sub edi, 0xbd8008a0
add edi, 0xd37a45bf
sub edi, 0x6d92edc9
sub edi, ebx
add edi, 0x6d92edc9
sub esi, 0xbd8008a0
sub edi, esi
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0xb58]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [ebp - 0xccc], eax
mov dword [ebp - 0xcd0], edx
call fcn.00454830
mov ecx, 0x104
lea edx, [ebp - 0x8fc]
lea esi, [ebp - 0xb06]
mov edi, dword [ebp - 0xb58]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
call fcn.00429f10
call fcn.00429f20
call fcn.00454830
lea ecx, str.32.exe
mov edx, 6
lea esi, [ebp - 0x8fc]
mov edi, 0x4f92e4
mov edi, dword [edi]
call fcn.00429f30
add edi, 0x104
add edi, 0x506be443
sub edi, 0x8ed9be31
add edi, 0xdfc8e79d
sub edi, ebx
sub edi, 0xdfc8e79d
sub edi, 0xa1c544fb
add edi, 0xaf941bbd
sub edi, 0x5e3abb05
mov ebx, dword [ebp - 0xb58]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [ebp - 0xcdc], eax
mov dword [ebp - 0xce0], edx
call fcn.00454830
lea ecx, [ebp - 0xb50]
mov edx, 0
call fcn.00429f40
movzx esi, byte [esi]
mov dword [ebp - 0xb74], esi
mov esi, dword [ebp - 0xb74]
add esi, 0xff5051c4
sub esi, 0xca81bd39
sub esi, 0xff5051c4
add esi, 0xe8379e7d
add esi, 1
add esi, 0x17c86183
add edx, 0x357e42c7
sub esi, edx
mov edx, dword [0x4e94e8]
movzx edx, byte [edx + esi]
mov dword [ebp - 0xb78], edx
mov edx, dword [ebp - 0xb78]
mov esi, dword [0x4e94e8]
add esi, dword [ebp - 0xb74]
sub esi, 0xfffffffe
mov edi, dword [0x4e94e8]
add edi, 1
mov ebx, dword [ebp - 0xb74]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0xce4], eax
call fcn.0043af30
mov eax, dword [0x4f7d84]
call fcn.00429f50
call fcn.00429f60
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [ebp - 0x64], eax
mov eax, dword [0x4f7d78]
call fcn.00429f70
mov edx, dword [0x4f7aec]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [ebp - 0x8fc]
mov edx, dword [0x4f7d78]
mov esi, dword [0x4f7af4]
mov edi, dword [ebp - 0x34]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
call fcn.00429f80
mov dword [ebp - 0xce8], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4f7d78]
mov edx, dword [0x4f7af0]
mov esi, dword [ebp - 0x34]
mov edi, esp
call fcn.00429f90
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [ebp - 0xcec], eax
call ecx
sub esp, 0xc
lea ecx, [ebp - 0xb50]
mov edx, dword [0x4f7d70]
call fcn.00429fa0
mov edi, dword [ebp - 0x34]
mov ebx, 0x7fff
mov ebx, esp
call fcn.00429fb0
call fcn.00429fc0
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [ebp - 0xcf0], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4f7d84]
call fcn.00429fd0
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xcf4], eax
call ecx
sub esp, 8
mov dword [ebp - 0x68], eax
mov eax, dword [0x4f7d78]
mov ecx, dword [0x4f7aec]
call fcn.00429fe0
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x4f9304
call eax
sub esp, 0xc
mov ecx, dword [0x4f7d80]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
call fcn.00429ff0
mov dword [ebp - 0xcf8], eax
call ecx
sub esp, 8
lea ecx, [ebp - 0xb30]
mov edx, 0
mov esi, dword [0x4e94ec]
movzx esi, word [esi]
mov dword [ebp - 0xb7c], esi
mov esi, dword [ebp - 0xb7c]
sub esi, 0x30a12d15
sub esi, 0x61d2bca8
add esi, 0x30a12d15
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
add edx, 0x53fdb887
add edx, 0x61d2bca8
add edx, 0xac024779
mov esi, dword [0x4e94ec]
movzx edx, word [esi + edx*2]
call fcn.0042a000
mov edx, dword [ebp - 0xb80]
mov esi, dword [0x4e94ec]
mov edi, dword [ebp - 0xb7c]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4e94ec]
sub edi, 0xfffffffe
mov ebx, dword [ebp - 0xb7c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0xcfc], eax
call fcn.00453dd0
call fcn.0042a010
mov ecx, dword [0x4f7b1c]
mov edx, dword [ebp - 0x34]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [ebp - 0xb30]
mov dword [ebp - 0x6c], eax
call fcn.0042a020
mov edx, dword [0x4f7aec]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 8], ecx
call fcn.0042a030
mov dword [edi], esi
call eax
sub esp, 0xc
call fcn.0042a040
mov edx, dword [ebp - 0x20]
mov esi, dword [0x4f7af8]
mov edi, dword [ebp - 0x34]
mov ebx, ecx
mov ebx, esp
call fcn.0042a050
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebp - 0xd00], eax
call ecx
sub esp, 0xc
call fcn.0042a060
mov edx, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd04], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d80]
mov edx, dword [ebp - 0x64]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd08], eax
call ecx
sub esp, 8
call fcn.0042a070
mov edx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd0c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x38]
call fcn.0042a080
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd10], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd14], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
call fcn.0042a090
mov dword [ebp - 0xd18], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
call fcn.0042a0a0
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd20], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d6c]
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x34]
mov edi, esp
call fcn.0042a0b0
mov dword [edi], esi
mov dword [ebp - 0xd24], eax
call ecx
sub esp, 8
mov ecx, dword [0x4f7d68]
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [ebp - 0xd28], eax
call ecx
sub esp, 8
call fcn.0042a0c0
mov edx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x34]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
call fcn.0042a0d0
call ecx
sub esp, 8
mov ecx, dword [0x4f7d90]
mov edx, dword [ebp - 0x34]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0xd30], eax
call ecx
add esp, 0xd5c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x27a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0xd34], eax
mov dword [ebp - 0xd38], ecx
call fcn.004421e0
mov ecx, 0x4f92f8
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x14]
call fcn.0042a0e0
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [ebp - 0xd3c], eax
mov dword [ebp - 0xd40], ecx
call fcn.004421e0
mov ecx, 0x104
lea edx, [ebp - 0x27a]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [ebp - 0xd44], eax
mov dword [ebp - 0xd48], ecx
call fcn.0042be70
mov eax, 0x104
lea ecx, [ebp - 0x484]
mov edx, dword [ebp - 0xb5c]
mov esi, dword [ebp - 0x18]
mov dword [esp], esi
mov dword [esp + 4], 0x104
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0042a0f0
call fcn.00454830
lea ecx, [ebp - 0x27a]
mov dword [esp], ecx
mov dword [ebp - 0xd50], eax
call fcn.00454e60
mov ecx, 0
lea edx, [ebp - 0x27a]
mov esi, dword [ebp - 0xb5c]
mov edi, ecx
sub edi, 0x104
mov ebx, ecx
sub ebx, 0x5265ee50
add edi, ebx
sub ecx, edi
add ecx, 0x531bc8b
sub ecx, esi
sub ecx, 0x531bc8b
add ecx, 0xc6af309c
sub ecx, 0x5265ee50
add ecx, 0x3950cf64
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0xb5c]
shl edi, 1
add esi, edi
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00454830
mov ecx, dword [0x4f7d98]
mov edx, dword [ebp - 0x18]
mov esi, esp
mov dword [esi], edx
call fcn.0042a100
mov dword [ebp - 0xd54], eax
call ecx
sub esp, 8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xb84], 0x8168f5fc
jmp 0x428477