Function at 0x40f930
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Copy file
Create directory
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53505b
mov eax, dword fs:[0]
push eax
mov eax, 0x1a94
call fcn.0051c1e0
mov eax, dword [0x595834]
xor eax, ebp
mov dword [ebp - 0x48], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x19b0], ecx
push 0x200
push 0x598fb0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp dword [0x59e358], 2
jne 0x4108fe
mov eax, dword [ebp - 0x19b0]
mov ecx, dword [eax + 0x48]
movsx edx, byte [ecx + 1]
cmp edx, 0x78
jne 0x4108fe
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x85c], 0
push 0x3ff
push 0
lea eax, [ebp - 0x85b]
push eax
call fcn.0051ab50
add esp, 0xc
mov byte [ebp - 0x44c], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x44b]
push ecx
call fcn.0051ab50
add esp, 0xc
lea edx, [ebp - 0x85c]
push edx
push str.tc_CurrentSite
push str.Software_tc_make
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c6a0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40fa09
mov byte [ebp - 0x85c], 0
lea eax, [ebp - 0x85c]
push eax
lea ecx, [ebp - 0xc68]
call fcn.00401c80
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x85c]
push ecx
push str.tc_Dst
push str.Software_tc_make
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c6a0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x40fb36
mov byte [ebp - 0x85c], 0
push 0
call fcn.0051b02c
add esp, 4
mov dword [ebp - 0x16f4], eax
mov dword [ebp - 0x16f0], edx
mov edx, dword [ebp - 0x16f4]
mov dword [ebp - 0x1634], edx
mov eax, dword [ebp - 0x16f0]
mov dword [ebp - 0x1630], eax
push str._Y__m__d
lea ecx, [ebp - 0x1638]
push ecx
lea ecx, [ebp - 0x1634]
call fcn.0040bbe0
mov dword [ebp - 0x19b4], eax
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x19b8]
push eax
push str._fileserver_test_
lea ecx, [ebp - 0x163c]
push ecx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19bc], eax
mov edx, dword [ebp - 0x19bc]
mov dword [ebp - 0x16f8], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x16f8]
push eax
mov ecx, 0x599234
call fcn.0040a5d0
mov byte [ebp - 4], 3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x163c]
call fcn.0041b810
mov byte [ebp - 4], 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1638]
call fcn.0041b810
mov ecx, dword [0x599234]
push ecx
push str.tc_Dst
push str.Software_tc_make
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040d690
add esp, 0x10
jmp 0x40fc7a
push 0
call fcn.0051b02c
add esp, 4
mov dword [ebp - 0x1708], eax
mov dword [ebp - 0x1704], edx
mov edx, dword [ebp - 0x1708]
mov dword [ebp - 0x1644], edx
mov eax, dword [ebp - 0x1704]
mov dword [ebp - 0x1640], eax
push str._Y__m__d
lea ecx, [ebp - 0x1648]
push ecx
lea ecx, [ebp - 0x1644]
call fcn.0040bbe0
mov dword [ebp - 0x19c0], eax
mov edx, dword [ebp - 0x19c0]
mov dword [ebp - 0x19c4], edx
mov byte [ebp - 4], 5
push 0x54bc58
lea ecx, [ebp - 0x164c]
call fcn.00401c80
mov dword [ebp - 0x19c8], eax
mov eax, dword [ebp - 0x19c8]
mov dword [ebp - 0x19cc], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x19cc]
push ecx
lea edx, [ebp - 0x85c]
push edx
lea eax, [ebp - 0x1650]
push eax
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19d0], eax
mov ecx, dword [ebp - 0x19d0]
mov dword [ebp - 0x19d4], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x19c4]
push edx
mov eax, dword [ebp - 0x19d4]
push eax
lea ecx, [ebp - 0x1654]
push ecx
call fcn.0040a2f0
add esp, 0xc
mov dword [ebp - 0x19d8], eax
mov edx, dword [ebp - 0x19d8]
mov dword [ebp - 0x1714], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1714]
push eax
mov ecx, 0x599234
call fcn.0040a5d0
mov byte [ebp - 4], 9
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1654]
call fcn.0041b810
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1650]
call fcn.0041b810
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x164c]
call fcn.0041b810
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1648]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x165c]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x1728], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1728]
mov edx, dword [ecx]
mov dword [ebp - 0x172c], edx
lea eax, [ebp - 0x85c]
push eax
push str.TC_SETUP
mov ecx, dword [ebp - 0x172c]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c6a0
add esp, 0x10
xor edx, edx
cmp eax, 0xffffffff
sete dl
mov byte [ebp - 0x1655], dl
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x165c]
call fcn.0041b810
movzx eax, byte [ebp - 0x1655]
test eax, eax
je 0x40fd0c
mov byte [ebp - 0x85c], 0
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x1660]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19e0], eax
mov eax, dword [ebp - 0x19e0]
mov dword [ebp - 0x1734], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1734]
mov edx, dword [ecx]
mov dword [ebp - 0x1738], edx
push 0
push str.TC_SETUP64
mov eax, dword [ebp - 0x1738]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1660]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x1664]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x1740], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1740]
mov edx, dword [ecx]
mov dword [ebp - 0x1744], edx
push 0
push str.TC_SETUPPer
mov eax, dword [ebp - 0x1744]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0xc74], eax
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1664]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x1668]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19e8], eax
mov eax, dword [ebp - 0x19e8]
mov dword [ebp - 0x174c], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x174c]
mov edx, dword [ecx]
mov dword [ebp - 0x1750], edx
push 0
push str.TC_SETUPUAC
mov eax, dword [ebp - 0x1750]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0x454], eax
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1668]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x166c]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
mov dword [ebp - 0x1758], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1758]
mov edx, dword [ecx]
mov dword [ebp - 0x175c], edx
push 0
push str.TC_Stealth
mov eax, dword [ebp - 0x175c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0xc6c], eax
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x166c]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x1670]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19f0], eax
mov eax, dword [ebp - 0x19f0]
mov dword [ebp - 0x1764], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1764]
mov edx, dword [ecx]
mov dword [ebp - 0x1768], edx
push 0
push str.TC_bRemote
mov eax, dword [ebp - 0x1768]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0x450], eax
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1670]
call fcn.0041b810
lea ecx, [ebp - 0xc68]
push ecx
push str.Software_tc_make_
lea edx, [ebp - 0x1674]
push edx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x1770], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x1770]
mov edx, dword [ecx]
mov dword [ebp - 0x1774], edx
push 0
push str.TC_SETUPLang
mov eax, dword [ebp - 0x1774]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c620
add esp, 0x10
mov dword [ebp - 0xc70], eax
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1674]
call fcn.0041b810
mov byte [ebp - 0xc64], 0
push 0x3ff
push 0
lea ecx, [ebp - 0xc63]
push ecx
call fcn.0051ab50
add esp, 0xc
lea edx, [ebp - 0xc68]
push edx
push str.Software_tc_make_
lea eax, [ebp - 0x167c]
push eax
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19f8], eax
mov ecx, dword [ebp - 0x19f8]
mov dword [ebp - 0x177c], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x177c]
mov eax, dword [edx]
mov dword [ebp - 0x1780], eax
lea ecx, [ebp - 0xc64]
push ecx
push str.TC_makeName
mov edx, dword [ebp - 0x1780]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c6a0
add esp, 0x10
xor ecx, ecx
cmp eax, 0xffffffff
sete cl
mov byte [ebp - 0x1675], cl
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x167c]
call fcn.0041b810
movzx edx, byte [ebp - 0x1675]
test edx, edx
je 0x41006a
mov byte [ebp - 0xc64], 0
lea eax, [ebp - 0xc68]
push eax
push str.Software_tc_make_
lea ecx, [ebp - 0x1684]
push ecx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov edx, dword [ebp - 0x19fc]
mov dword [ebp - 0x1788], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x1788]
mov ecx, dword [eax]
mov dword [ebp - 0x178c], ecx
lea edx, [ebp - 0x44c]
push edx
push str.TC_TCServer
mov eax, dword [ebp - 0x178c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040c6a0
add esp, 0x10
xor ecx, ecx
cmp eax, 0xffffffff
sete cl
mov byte [ebp - 0x167d], cl
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1684]
call fcn.0041b810
movzx edx, byte [ebp - 0x167d]
test edx, edx
je 0x4100fc
mov byte [ebp - 0x44c], 0
push 0x54c2a8
lea ecx, [ebp - 0x458]
call fcn.00401c80
mov byte [ebp - 4], 0x1f
push 0x546f7e
push str..exe
lea ecx, [ebp - 0x458]
call fcn.00409e50
cmp dword [ebp - 0xc6c], 0
je 0x41013a
mov dword [ebp - 0x1a00], 0x54c29c
jmp 0x410144
mov dword [ebp - 0x1a00], 0x546f7e
cmp dword [ebp - 0xc74], 0
je 0x410159
mov dword [ebp - 0x1a04], 0x54c290
jmp 0x410163
mov dword [ebp - 0x1a04], 0x546f7e
cmp dword [ebp - 0x450], 0
je 0x410178
mov dword [ebp - 0x1a08], 0x54c288
jmp 0x410182
mov dword [ebp - 0x1a08], 0x546f7e
cmp dword [ebp - 0x454], 0
je 0x410197
mov dword [ebp - 0x1a0c], str.Uac
jmp 0x4101a1
mov dword [ebp - 0x1a0c], 0x546f7e
push 0
call fcn.0051b02c
add esp, 4
mov dword [ebp - 0x17e4], eax
mov dword [ebp - 0x17e0], edx
mov eax, dword [ebp - 0x17e4]
mov dword [ebp - 0x168c], eax
mov ecx, dword [ebp - 0x17e0]
mov dword [ebp - 0x1688], ecx
push str._Y__m__d__H__M__S
lea edx, [ebp - 0x1690]
push edx
lea ecx, [ebp - 0x168c]
call fcn.0040bbe0
mov dword [ebp - 0x1a10], eax
mov eax, dword [ebp - 0x1a10]
mov dword [ebp - 0x1a14], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x1a04]
push ecx
lea ecx, [ebp - 0x1694]
call fcn.00401c80
mov dword [ebp - 0x1a18], eax
mov edx, dword [ebp - 0x1a18]
mov dword [ebp - 0x1a1c], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x1a08]
push eax
lea ecx, [ebp - 0x1698]
call fcn.00401c80
mov dword [ebp - 0x1a20], eax
mov ecx, dword [ebp - 0x1a20]
mov dword [ebp - 0x1a24], ecx
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0xc64]
push edx
lea ecx, [ebp - 0x169c]
call fcn.00401c80
mov dword [ebp - 0x1a28], eax
mov eax, dword [ebp - 0x1a28]
mov dword [ebp - 0x1a2c], eax
mov byte [ebp - 4], 0x23
push 0x54c268
mov ecx, dword [ebp - 0x1a2c]
push ecx
lea edx, [ebp - 0x16a0]
push edx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a30], eax
mov eax, dword [ebp - 0x1a30]
mov dword [ebp - 0x1a34], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xc68]
push ecx
mov edx, dword [ebp - 0x1a34]
push edx
lea eax, [ebp - 0x16a4]
push eax
call fcn.0040a2f0
add esp, 0xc
mov dword [ebp - 0x1a38], eax
mov ecx, dword [ebp - 0x1a38]
mov dword [ebp - 0x1a3c], ecx
mov byte [ebp - 4], 0x25
push 0x54c268
mov edx, dword [ebp - 0x1a3c]
push edx
lea eax, [ebp - 0x16a8]
push eax
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a40], eax
mov ecx, dword [ebp - 0x1a40]
mov dword [ebp - 0x1a44], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x1a0c]
push edx
mov eax, dword [ebp - 0x1a44]
push eax
lea ecx, [ebp - 0x16ac]
push ecx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a48], eax
mov edx, dword [ebp - 0x1a48]
mov dword [ebp - 0x1a4c], edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x1a24]
push eax
mov ecx, dword [ebp - 0x1a4c]
push ecx
lea edx, [ebp - 0x16b0]
push edx
call fcn.0040a2f0
add esp, 0xc
mov dword [ebp - 0x1a50], eax
mov eax, dword [ebp - 0x1a50]
mov dword [ebp - 0x1a54], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x1a1c]
push ecx
mov edx, dword [ebp - 0x1a54]
push edx
lea eax, [ebp - 0x16b4]
push eax
call fcn.0040a2f0
add esp, 0xc
mov dword [ebp - 0x1a58], eax
mov ecx, dword [ebp - 0x1a58]
mov dword [ebp - 0x1a5c], ecx
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x44c]
push edx
mov eax, dword [ebp - 0x1a5c]
push eax
lea ecx, [ebp - 0x16b8]
push ecx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a60], eax
mov edx, dword [ebp - 0x1a60]
mov dword [ebp - 0x1a64], edx
mov byte [ebp - 4], 0x2a
push 0x54c268
mov eax, dword [ebp - 0x1a64]
push eax
lea ecx, [ebp - 0x16bc]
push ecx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a68], eax
mov edx, dword [ebp - 0x1a68]
mov dword [ebp - 0x1a6c], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x1a14]
push eax
mov ecx, dword [ebp - 0x1a6c]
push ecx
lea edx, [ebp - 0x16c0]
push edx
call fcn.0040a2f0
add esp, 0xc
mov dword [ebp - 0x1a70], eax
mov eax, dword [ebp - 0x1a70]
mov dword [ebp - 0x1a74], eax
mov byte [ebp - 4], 0x2c
push str._Ver
mov ecx, dword [ebp - 0x1a74]
push ecx
lea edx, [ebp - 0x16c4]
push edx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a78], eax
mov eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a7c], eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x85c]
push ecx
mov edx, dword [ebp - 0x1a7c]
push edx
lea eax, [ebp - 0x16c8]
push eax
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a80], eax
mov ecx, dword [ebp - 0x1a80]
mov dword [ebp - 0x1a84], ecx
mov byte [ebp - 4], 0x2e
push 0x54c25c
mov edx, dword [ebp - 0x1a84]
push edx
lea eax, [ebp - 0x16cc]
push eax
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a88], eax
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp - 0x1a8c], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x1a00]
push edx
mov eax, dword [ebp - 0x1a8c]
push eax
lea ecx, [ebp - 0x16d0]
push ecx
call fcn.00411600
add esp, 0xc
mov dword [ebp - 0x1a90], eax
mov edx, dword [ebp - 0x1a90]
mov dword [ebp - 0x1a94], edx
mov byte [ebp - 4], 0x30
push str..exe
mov eax, dword [ebp - 0x1a94]
push eax
lea ecx, [ebp - 0xc78]
push ecx
call fcn.00411600
add esp, 0xc
mov byte [ebp - 4], 0x33
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x16d0]
call fcn.0041b810
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x16cc]
call fcn.0041b810
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x16c8]
call fcn.0041b810
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x16c4]
call fcn.0041b810
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x16c0]
call fcn.0041b810
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x16bc]
call fcn.0041b810
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x16b8]
call fcn.0041b810
mov byte [ebp - 4], 0x41
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x16b4]
call fcn.0041b810
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x16b0]
call fcn.0041b810
mov byte [ebp - 4], 0x45
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x16ac]
call fcn.0041b810
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x16a8]
call fcn.0041b810
mov byte [ebp - 4], 0x49
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x16a4]
call fcn.0041b810
mov byte [ebp - 4], 0x4b
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x16a0]
call fcn.0041b810
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x169c]
call fcn.0041b810
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x1698]
call fcn.0041b810
mov byte [ebp - 4], 0x51
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1694]
call fcn.0041b810
mov byte [ebp - 4], 0x53
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1690]
call fcn.0041b810
mov edx, dword [0x599234]
sub edx, 0x10
mov dword [ebp - 0x185c], edx
mov eax, dword [ebp - 0x185c]
push eax
call fcn.0040a760
add esp, 4
mov dword [ebp - 0x1860], eax
mov ecx, dword [ebp - 0x1860]
add ecx, 0x10
mov dword [ebp - 0x40], ecx
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 0x55
push 0
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xc78]
push eax
push 0x54bc58
lea ecx, [ebp - 0x16d4]
push ecx
call fcn.0040a3d0
add esp, 0xc
mov dword [ebp - 0x1a98], eax
mov edx, dword [ebp - 0x1a98]
mov dword [ebp - 0x186c], edx
mov byte [ebp - 4], 0x56
mov eax, dword [ebp - 0x186c]
mov ecx, dword [eax]
mov edx, dword [ecx - 0xc]
mov dword [ebp - 0x1864], edx
mov eax, dword [ebp - 0x186c]
mov ecx, dword [eax]
mov dword [ebp - 0x1868], ecx
mov edx, dword [ebp - 0x1864]
push edx
mov eax, dword [ebp - 0x1868]
push eax
lea ecx, [ebp - 0x40]
call fcn.00411a30
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x16d4]
call fcn.0041b810
lea ecx, [ebp - 0x860]
call fcn.0040a830
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1880], ecx
push 0
mov edx, dword [ebp - 0x1880]
push edx
push 0x598fb0
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x4107ef
mov eax, dword [ebp - 0x40]
push eax
push 0x54c234
lea ecx, [ebp - 0x860]
push ecx
call fcn.0040bd30
add esp, 0xc
push 0
push 0
mov edx, dword [ebp - 0x860]
push edx
call fcn.00429c0a
mov dword [ebp - 0x16d8], 0
mov byte [ebp - 4], 0x59
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x860]
call fcn.0041b810
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x40]
call fcn.0041b810
mov byte [ebp - 4], 0x5b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xc78]
call fcn.0041b810
mov byte [ebp - 4], 0x5c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x458]
call fcn.0041b810
mov dword [ebp - 4], 0x5d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc68]
call fcn.0041b810
mov eax, dword [ebp - 0x16d8]
jmp 0x410bb0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0040cde0
mov eax, dword [ebp - 0x40]
push eax
push 0x54c234
lea ecx, [ebp - 0x860]
push ecx
call fcn.0040bd30
add esp, 0xc
push ecx
mov edx, esp
mov dword [ebp - 0x16dc], esp
mov dword [ebp - 0x18b0], edx
mov eax, dword [ebp - 0x860]
sub eax, 0x10
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
push ecx
call fcn.0040a760
add esp, 4
mov dword [ebp - 0x189c], eax
mov edx, dword [ebp - 0x189c]
add edx, 0x10
mov eax, dword [ebp - 0x18b0]
mov dword [eax], edx
mov byte [ebp - 4], 0x5e
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x1a9c], ecx
mov byte [ebp - 4], 0x5f
mov byte [ebp - 4], 0x58
call fcn.0040f880
add esp, 4
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x16e0], 0
mov byte [ebp - 4], 0x60
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x860]
call fcn.0041b810
mov byte [ebp - 4], 0x61
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x40]
call fcn.0041b810
mov byte [ebp - 4], 0x62
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xc78]
call fcn.0041b810
mov byte [ebp - 4], 0x63
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x458]
call fcn.0041b810
mov dword [ebp - 4], 0x64
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc68]
call fcn.0041b810
mov eax, dword [ebp - 0x16e0]
jmp 0x410bb0
push 1
lea edx, [ebp - 0x3c]
push edx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push 1
push 0
push 1
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0xc
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 0
push str.GlobalTC_SETUP
lea ecx, [ebp - 0x16e4]
call fcn.00401c80
mov dword [ebp - 0x1aa0], eax
mov eax, dword [ebp - 0x1aa0]
mov dword [ebp - 0x1924], eax
mov dword [ebp - 4], 0x65
mov ecx, dword [ebp - 0x1924]
mov edx, dword [ecx]
mov dword [ebp - 0x1928], edx
mov eax, dword [ebp - 0x1928]
push eax
push 0
lea ecx, [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x66
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16e4]
call fcn.0041b810
mov dword [ebp - 0x28], 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4109ba
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x24], 0
je 0x4109ca
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp dword [ebp - 0x28], 0
je 0x4109d7
xor eax, eax
jmp 0x410bb0
call fcn.0040bf20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.0040c0b0
add esp, 4
mov dword [0x5991f8], eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x10], 0xff
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [ebp - 0x19b0]
call fcn.00427670
push 0
call fcn.0042b188
add esp, 4
push 0x54c1f0
mov ecx, dword [ebp - 0x19b0]
call fcn.0042a685
cmp dword [0x59e358], 2
je 0x410a42
call fcn.0040eec0
movzx ecx, al
test ecx, ecx
je 0x410a8d
push 0
lea ecx, [ebp - 0x1254]
call fcn.00411c50
mov dword [ebp - 4], 0x67
mov edx, dword [ebp - 0x19b0]
lea eax, [ebp - 0x1254]
mov dword [edx + 0x20], eax
lea ecx, [ebp - 0x1254]
call fcn.0041dd3d
mov dword [ebp - 0xc7c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1254]
call fcn.00410c90
jmp 0x410bae
mov dword [ebp - 0x1258], 0
push 0x54c1dc
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x1258], 0
jne 0x410ac6
push 0x54c1dc
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x1258], 0
je 0x410b57
push 1
push 1
push 0x13d4
mov ecx, dword [ebp - 0x1258]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [ebp - 0x125c], 0
jmp 0x410b04
mov edx, dword [ebp - 0x125c]
add edx, 1
mov dword [ebp - 0x125c], edx
cmp dword [ebp - 0x125c], 0x258
jge 0x410b57
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x54c1dc
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x1258], 0
jne 0x410b4a
push 0x54c1dc
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x1258], 0
jne 0x410b55
jmp 0x410b57
jmp 0x410af5
call fcn.0040ef60
movzx eax, byte [0x5991fc]
test eax, eax
je 0x410b6e
call fcn.0040def0
jmp 0x410bae
push 0
lea ecx, [ebp - 0x162c]
call fcn.00408de0
mov dword [ebp - 4], 0x68
mov ecx, dword [ebp - 0x19b0]
lea edx, [ebp - 0x162c]
mov dword [ecx + 0x20], edx
lea ecx, [ebp - 0x162c]
call fcn.0041dd3d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x162c]
call fcn.00409040
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x48]
xor ecx, ebp
call fcn.0051a243
mov esp, ebp
pop ebp
ret