Function at 0x40cb20
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x120
mov esi, esp
mov dword [esi + 0x58], 0x42202670
jmp 0x40cb60
mov eax, dword [esi + 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x58], 0xfd8a019c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x58]
cmp eax, 0x6c4e8606
jg 0x40cc00
cmp eax, 0x65fc4871
jg 0x40cc10
cmp eax, 0x63dd1ad4
jg 0x40d127
cmp eax, 0x5e99b57c
jg 0x40d14e
cmp eax, 0x580ff73e
jg 0x40d165
cmp eax, 0x5160f379
jg 0x40d175
cmp eax, 0x8a827d91
jg 0x40d18c
cmp eax, 0x893c13d1
jne 0x40cb60
mov eax, dword [esi + 0xb4]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0xdc]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x70]
mov dword [eax + 0x1c], 0
mov eax, dword [0x46799c]
mov ecx, dword [esi + 0x70]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
mov eax, 0xfa1d5cf2
jne 0x40cbf8
mov eax, 0x8d5a55c1
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x6c4e8607
jne 0x40cb60
jmp 0x40cb3d
cmp eax, 0x65fc4872
jne 0x40cb60
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x2c], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x24], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x20], esp
mov eax, 0x3c
call fcn.00411ea0
mov ecx, esp
and ecx, 0xfffffff8
mov esp, ecx
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov edx, esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 8], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xc], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x10], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x14], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x18], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x1c], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x28], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x30], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x34], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x38], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x3c], esp
mov eax, 0x20c
call fcn.00411ea0
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0x40], esp
mov eax, 0xc8
call fcn.00411ea0
mov dword [esi + 0x4c], esp
mov eax, 0x28
call fcn.00411ea0
mov edi, esp
mov eax, 0x10
call fcn.00411ea0
mov ebx, esp
mov eax, 0x10
call fcn.00411ea0
mov dword [esi + 0x50], esp
mov eax, 0xc
call fcn.00411ea0
mov dword [esi + 0x54], esp
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x48], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x44], esp
mov eax, 4
call fcn.00411ea0
mov eax, dword [esi + 0x2c]
mov dword [eax], 0
mov eax, dword [esi + 0x24]
mov dword [eax], 0
mov eax, dword [esi + 0x20]
mov dword [eax], 0
mov dword [ecx + 0x38], 0
mov dword [ecx + 0x34], 0
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x20], 0
mov dword [ecx + 0x1c], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov dword [edx], 0
sub esp, 0xc
mov eax, dword [esi + 8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0xc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x10]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x14]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x18]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x1c]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x28]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x30]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x34]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x38]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x3c]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x40]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x4c]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 0
mov dword [edi], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0
mov eax, dword [esi + 0x50]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0x54]
mov word [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0x48]
mov dword [eax], 0
mov eax, dword [esi + 0x44]
mov dword [eax], 0xffffffff
call fcn.0040c750
mov dword [esi + 0x58], 0x9953cae6
jmp 0x40cb60
cmp eax, 0x63dd1ad5
jne 0x40cb60
mov al, byte [esi + 0x11b]
test al, al
mov eax, 0x8bd3000
jne 0x40d146
mov eax, 0xe2aa454f
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x5e99b57d
jne 0x40cb60
mov dword [esi + 0x58], 0xf5f4630f
jmp 0x40cb60
cmp eax, 0x580ff73f
jne 0x40cb60
jmp 0x40f3b8
cmp eax, 0x5160f37a
jne 0x40cb60
mov dword [esi + 0x58], 0xfa739295
jmp 0x40cb60
cmp eax, 0x8d5a55c0
jg 0x40d1ce
cmp eax, 0x8a827d92
jne 0x40cb60
mov eax, dword [esi + 0xc0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.0040cb00
mov eax, dword [esi + 0x110]
mov eax, dword [eax]
mov ecx, dword [esi + 0x60]
mov dword [ecx], eax
mov dword [esi + 0x58], 0x580ff73f
jmp 0x40cb60
cmp eax, 0x8f901437
jg 0x40d26d
cmp eax, 0x8d5a55c1
jne 0x40cb60
mov eax, dword [esi + 0x70]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x467998]
mov eax, dword [esi + 0xcc]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x70]
mov dword [eax + 0x14], 0
mov eax, dword [esi + 0x70]
mov dword [eax + 0x1c], 1
mov eax, dword [0x46799c]
mov ecx, dword [esi + 0x70]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
mov eax, 0xc8d16e8a
jne 0x40d265
mov eax, 0x8f901438
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x95dff8bc
jg 0x40d2c7
cmp eax, 0x8f901438
jne 0x40cb60
mov eax, dword [esi + 0x70]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
call edi
mov eax, dword [esi + 0x68]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call edi
test eax, eax
mov eax, 0xd2fb6a82
jne 0x40d2bf
mov eax, 0x13590282
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x97ca7cba
jg 0x40d2de
cmp eax, 0x95dff8bd
jne 0x40cb60
jmp 0x40de9a
cmp eax, 0x9953cae5
jg 0x40d2fc
cmp eax, 0x97ca7cbb
jne 0x40cb60
mov dword [esi + 0x58], 0xf8f351d8
jmp 0x40cb60
cmp eax, 0xa22434ea
jg 0x40d925
cmp eax, 0x9953cae6
jne 0x40cb60
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x60], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x64], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x68], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x6c], esp
mov eax, 0x3c
call fcn.00411ea0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x70], eax
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x74], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x78], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x7c], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x80], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x84], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x88], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x8c], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x90], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x94], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x98], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x9c], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xa0], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xa4], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xa8], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xac], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xb0], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xb4], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xb8], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xbc], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xc0], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xc4], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xc8], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xcc], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xd0], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xd4], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xd8], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xdc], esp
mov eax, 0x20c
call fcn.00411ea0
mov dword [esi + 0xe0], esp
mov eax, 0xc8
call fcn.00411ea0
mov dword [esi + 0xe4], esp
mov eax, 0x28
call fcn.00411ea0
mov dword [esi + 0xe8], esp
mov eax, 0x10
call fcn.00411ea0
mov dword [esi + 0xec], esp
mov eax, 0x10
call fcn.00411ea0
mov dword [esi + 0xf0], esp
mov eax, 0xc
call fcn.00411ea0
mov edi, esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xf4], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xf8], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0xfc], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x100], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x104], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x108], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x10c], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x110], esp
mov eax, 4
call fcn.00411ea0
mov dword [esi + 0x114], esp
mov eax, dword [esi + 0x64]
mov dword [eax], 0
mov eax, dword [esi + 0x68]
mov dword [eax], 0
mov eax, dword [esi + 0x6c]
mov dword [eax], 0
mov eax, dword [esi + 0x70]
mov dword [eax + 0x38], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xac]
mov dword [eax], 0
mov eax, dword [esi + 0xb0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xb4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xb8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xbc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xc0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xc4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xc8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xcc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xd0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xd4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xe0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xe4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00412680
add esp, 0xc
mov eax, dword [esi + 0xe8]
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xec]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xf0]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov word [edi + 8], 0
mov dword [edi + 4], 0
mov dword [edi], 0
mov eax, dword [esi + 0x10c]
mov dword [eax], 0
mov eax, dword [esi + 0x110]
mov dword [eax], 0xffffffff
call fcn.0040c750
test eax, eax
sets byte [esi + 0x119]
mov dword [esi + 0x58], 0xdb0b2f47
jmp 0x40cb60
cmp eax, 0xb650ffd9
jg 0x40d949
cmp eax, 0xa22434eb
jne 0x40cb60
mov eax, dword [esi + 0x10c]
mov dword [esi + 0x58], 0x314c8ec5
jmp 0x40cb60
cmp eax, 0xb737b7ca
jg 0x40d978
cmp eax, 0xb650ffda
jne 0x40cb60
mov eax, dword [esi + 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x58], 0x4c2fe6c9
jmp 0x40cb60
cmp eax, 0xb8486136
jg 0x40da5d
cmp eax, 0xb737b7cb
jne 0x40cb60
mov eax, dword [esi + 0xdc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xdc]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xc0]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xc0]
mov edx, dword [esi + 0xdc]
add edx, 0xc
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0xfe
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xb4]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0xdc]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x70]
mov dword [eax + 0x1c], 0
mov eax, dword [0x46799c]
mov ecx, dword [esi + 0x70]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [esi + 0x58], 0xb8486137
jmp 0x40cb60
cmp eax, 0xc0f49e69
jg 0x40db4c
cmp eax, 0xb8486137
jne 0x40cb60
mov eax, dword [esi + 0xdc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xdc]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xc0]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xc0]
mov edx, dword [esi + 0xdc]
add edx, 0xc
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0xfe
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xb4]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0xdc]
mov ecx, dword [esi + 0x70]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x70]
mov dword [eax + 0x1c], 0
mov eax, dword [0x46799c]
mov ecx, dword [esi + 0x70]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
setne byte [esi + 0x11b]
mov dword [esi + 0x58], 0x63dd1ad5
jmp 0x40cb60
cmp eax, 0xc317242f
jg 0x40db7e
cmp eax, 0xc0f49e6a
jne 0x40cb60
mov ecx, dword [esi + 0x104]
mov eax, 0x3c3bbf21
cmp dword [ecx], 0x80
jne 0x40db76
mov eax, 0x30bb573b
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xc66f509e
jg 0x40db95
cmp eax, 0xc3172430
jne 0x40cb60
jmp 0x40de9a
cmp eax, 0xc8d16e89
jg 0x40dc43
cmp eax, 0xc66f509f
jne 0x40cb60
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
mov ecx, dword [esi + 0xd4]
mov edx, dword [esi + 0xc4]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403500
add esp, 0x10
mov ecx, dword [esi + 0x108]
mov dword [ecx], eax
mov eax, dword [esi + 0x108]
mov eax, dword [eax]
mov ecx, dword [esi + 0xc4]
mov word [ecx + eax*2 - 8], 0
mov eax, dword [esi + 0xc4]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [esi + 0x68]
mov dword [ecx], eax
mov ecx, dword [esi + 0x68]
mov eax, 0xe91ef19a
cmp dword [ecx], 0
jne 0x40dc3b
mov eax, 0x31ac0abc
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xce185a87
jg 0x40dc5a
cmp eax, 0xc8d16e8a
jne 0x40cb60
jmp 0x40de9a
cmp eax, 0xcf735236
jg 0x40dc89
cmp eax, 0xce185a88
jne 0x40cb60
mov eax, dword [esi + 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [esi + 0x58], 0x4dd3ab3b
jmp 0x40cb60
cmp eax, 0xd2fb6a81
jg 0x40dcb4
cmp eax, 0xcf735237
jne 0x40cb60
mov al, byte [esi + 0x5f]
test al, al
mov eax, 0x9953cae6
jne 0x40dcac
mov eax, 0x65fc4872
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xd784ee81
jg 0x40dcd2
cmp eax, 0xd2fb6a82
jne 0x40cb60
mov dword [esi + 0x58], 0x1c1b1369
jmp 0x40cb60
cmp eax, 0xdb0b2f46
jg 0x40dce9
cmp eax, 0xd784ee82
jne 0x40cb60
jmp 0x40e28c
cmp eax, 0xe2aa454e
jg 0x40dd17
cmp eax, 0xdb0b2f47
jne 0x40cb60
mov al, byte [esi + 0x119]
test al, al
mov eax, 0x8a3c311
jne 0x40dd0f
mov eax, 0x40f0ae8c
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xe91ef199
jg 0x40dd83
cmp eax, 0xe2aa454f
jne 0x40cb60
mov eax, dword [esi + 0x70]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x467998]
mov eax, dword [esi + 0x110]
mov dword [eax], 1
mov dword [esi + 0x58], 0x1c1b1369
jmp 0x40cb60
cmp eax, 0xf037c289
jg 0x40ddb4
cmp eax, 0xe91ef19a
jne 0x40cb60
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xce185a88
je 0x40ddac
mov eax, 0x4dd3ab3b
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xf21e7e53
jg 0x40de04
cmp eax, 0xf037c28a
jne 0x40cb60
mov eax, dword [esi + 0x64]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [esi + 0x104]
mov dword [ecx], eax
mov ecx, dword [esi + 0x104]
mov eax, 0xc0f49e6a
cmp dword [ecx], 0
jne 0x40ddfc
mov eax, 0x30bb573b
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0xf5f4630e
jg 0x40de48
cmp eax, 0xf21e7e54
jne 0x40cb60
mov eax, dword [esi + 0xc8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.0040b010
add esp, 4
mov dword [esi + 0x58], 0xc6fabbd
jmp 0x40cb60
cmp eax, 0xf8f351d7
jg 0x40de6a
cmp eax, 0xf5f4630f
jne 0x40cb60
mov byte [esi + 0x5f], 1
mov dword [esi + 0x58], 0xcf735237
jmp 0x40cb60
cmp eax, 0xfa1d5cf1
jg 0x40de88
cmp eax, 0xf8f351d8
jne 0x40cb60
mov dword [esi + 0x58], 0x1c1b1369
jmp 0x40cb60
cmp eax, 0xfa739294
jg 0x40decc
cmp eax, 0xfa1d5cf2
jne 0x40cb60
mov eax, dword [esi + 0xc8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.0040b010
add esp, 4
mov dword [esi + 0x58], 0x1c1b1369
jmp 0x40cb60
cmp eax, 0xfcfb9a4b
jg 0x40dff6
cmp eax, 0xfa739295
jne 0x40cb60
mov eax, dword [esi + 0xbc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xc0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xbc]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004043b0
add esp, 8
mov eax, dword [esi + 0x100]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb8]
mov edx, dword [esi + 0xc0]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xbc]
mov edx, dword [esi + 0x100]
mov edi, 0x104
sub edi, dword [edx]
mov edx, dword [esi + 0xc0]
mov ebx, dword [esi + 0x100]
mov ebx, dword [ebx]
lea edx, [edx + ebx*2]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], edx
call fcn.00403370
add esp, 0x10
mov eax, dword [0x467994]
mov ecx, dword [esi + 0xc0]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
mov ecx, dword [esi + 0x6c]
mov dword [ecx], eax
mov dword [esi + 0x58], 0x31b3142c
jmp 0x40cb60
cmp eax, 0xfd8a019b
jg 0x40e163
cmp eax, 0xfcfb9a4c
jne 0x40cb60
mov eax, dword [esi + 0xc4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xc8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xc4]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004043b0
add esp, 8
mov eax, dword [esi + 0xc4]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0x114]
mov dword [ecx], eax
mov eax, dword [esi + 0x100]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb8]
mov edx, dword [esi + 0xc8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0x114]
mov eax, dword [eax]
mov ecx, dword [esi + 0xc4]
mov edx, dword [esi + 0x100]
mov edi, 0x104
sub edi, dword [edx]
mov edx, dword [esi + 0xc8]
mov ebx, dword [esi + 0x100]
mov ebx, dword [ebx]
lea edx, [edx + ebx*2]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], edx
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0x100]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0x114]
sub ecx, dword [eax]
mov eax, dword [esi + 0xc8]
mov edx, dword [esi + 0x100]
mov edx, dword [edx]
lea eax, [eax + edx*2]
mov edx, dword [esi + 0x114]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403370
add esp, 0x10
mov dword [esi + 0x58], 0x167190d7
jmp 0x40cb60
cmp eax, 0x6bf45ec
jg 0x40e181
cmp eax, 0xfd8a019c
jne 0x40cb60
mov dword [esi + 0x58], 0x31ac0abc
jmp 0x40cb60
cmp eax, 0x8a3c310
jg 0x40e231
cmp eax, 0x6bf45ed
jne 0x40cb60
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xd4]
sub esp, 0x10
mov dword [esp + 8], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov eax, dword [esi + 0xb8]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403dc0
add esp, 8
mov eax, dword [esi + 0xb8]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0x100]
mov dword [ecx], eax
sub esp, 4
mov dword [esp], 0
call fcn.0040f3d0
add esp, 4
mov edi, eax
call fcn.00402400
imul eax, edi
sub esp, 4
mov dword [esp], eax
call fcn.00412812
add esp, 4
mov dword [esi + 0x58], 0xfcfb9a4c
jmp 0x40cb60
cmp eax, 0x4dd3ab3a
jg 0x40e2a1
cmp eax, 0x4dae28ec
jg 0x40e2b8
cmp eax, 0x4c2fe6c8
jg 0x40e2cf
cmp eax, 0x4220266f
jg 0x40e2f4
cmp eax, 0x40f0ae8b
jg 0x40e30b
cmp eax, 0x3c3bbf20
jg 0x40e364
cmp eax, 0x3b30e3c0
jg 0x40e37b
cmp eax, 0x8bd2fff
jg 0x40e3a3
cmp eax, 0x8a3c311
jne 0x40cb60
mov eax, dword [esi + 0x60]
mov dword [eax], 0xffffffff
mov dword [esi + 0x58], 0x580ff73f
jmp 0x40cb60
cmp eax, 0x4dd3ab3b
jne 0x40cb60
mov dword [esi + 0x58], 0x6c4e8607
jmp 0x40cb60
cmp eax, 0x4dae28ed
jne 0x40cb60
mov dword [esi + 0x58], 0x1c1b1369
jmp 0x40cb60
cmp eax, 0x4c2fe6c9
jne 0x40cb60
mov ecx, dword [esi + 0x64]
mov eax, 0x3b30e3c1
cmp dword [ecx], 0
jne 0x40e2ec
mov eax, 0x8a827d92
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x42202670
jne 0x40cb60
mov dword [esi + 0x58], 0xf5f4630f
jmp 0x40cb60
cmp eax, 0x40f0ae8c
jne 0x40cb60
mov eax, dword [esi + 0xd4]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403240
add esp, 8
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
mov eax, dword [esi + 0x10c]
sub esp, 4
mov dword [esp], eax
call fcn.0040b2b0
add esp, 4
test eax, eax
mov eax, 0xc66f509f
jne 0x40e35c
mov eax, 0x17d67e4d
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x3c3bbf21
jne 0x40cb60
mov dword [esi + 0x58], 0xc6fabbd
jmp 0x40cb60
cmp eax, 0x3b30e3c1
jne 0x40cb60
mov eax, dword [esi + 0x64]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x58], 0x8a827d92
jmp 0x40cb60
cmp eax, 0xa76a72a
jg 0x40e3c1
cmp eax, 0x8bd3000
jne 0x40cb60
mov dword [esi + 0x58], 0x97ca7cbb
jmp 0x40cb60
cmp eax, 0xc6fabbc
jg 0x40f03a
cmp eax, 0xa76a72b
jne 0x40cb60
mov eax, dword [0x467988]
mov ecx, dword [0x4677c8]
mov edx, dword [0x4677f0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x74]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x4677d8]
mov edx, dword [0x4677f0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x78]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x4677dc]
mov edx, dword [0x4677f0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x7c]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x4677c8]
mov edx, dword [0x4677ec]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x80]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x4677bc]
mov edx, dword [0x4677fc]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x84]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x4677c8]
mov edx, dword [0x467800]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x88]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x46780c]
mov edx, dword [0x467804]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x8c]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x467808]
mov edx, dword [0x467804]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x90]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467988]
mov ecx, dword [0x467808]
mov edx, dword [0x4677f0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x94]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call eax
mov eax, dword [0x467984]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
mov edi, dword [esi + 0xe4]
call fcn.004127ef
and eax, 0xf
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004131a4
add esp, 0xc
mov eax, dword [esi + 0xe4]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xf4]
mov dword [edx], ecx
mov ecx, dword [esi + 0xe4]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xe4]
mov ecx, dword [esi + 0xf4]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.004127ef
and eax, 1
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004131a4
add esp, 0xc
mov eax, dword [esi + 0xe4]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xf4]
mov dword [edx], ecx
mov ecx, dword [esi + 0xe4]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xe4]
mov ecx, dword [esi + 0xf4]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.004127ef
and eax, 5
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004131a4
add esp, 0xc
mov eax, dword [esi + 0xe4]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xf4]
mov dword [edx], ecx
mov ecx, dword [esi + 0xe4]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xe4]
mov ecx, dword [esi + 0xf4]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.004127ef
and eax, 0xc
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004131a4
add esp, 0xc
mov eax, dword [esi + 0xe4]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
mov eax, dword [0x41c134]
movzx eax, byte [eax]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [0x41c134]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [0x41c134]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x41c134]
inc edx
mov edi, dword [esi + 0xec]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402740
add esp, 0x14
mov eax, dword [0x467980]
mov ecx, dword [0x4677e4]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x98]
mov dword [ecx], eax
mov eax, dword [0x467978]
mov ecx, dword [0x467814]
mov edx, dword [0x4677c4]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xe4]
mov edx, dword [0x4677e0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xbc]
mov edx, dword [0x4677c8]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467970]
mov ecx, dword [0x4677c0]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], 1
call eax
mov eax, dword [0x46796c]
mov ecx, dword [esi + 0xec]
mov edx, dword [0x467810]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0x10
call eax
mov eax, dword [0x467980]
mov ecx, dword [0x4677e8]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x9c]
mov dword [ecx], eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x88]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x88]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x46797c]
mov ecx, dword [esi + 0x9c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x78]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x78]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x7c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x7c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x74]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x94]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
call fcn.004127ef
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41c138]
mov ecx, dword [esi + 0xac]
mov dword [ecx], eax
mov eax, dword [esi + 0xac]
mov eax, dword [eax]
movzx eax, word [eax]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea ecx, [ecx + edx*2 + 4]
mov edx, dword [esi + 0xac]
mov edx, dword [edx]
add edx, 2
mov edi, dword [esi + 0xf8]
mov edi, dword [edi]
mov ebx, dword [esi + 0xb0]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00402c80
add esp, 0x14
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb0]
mov edx, dword [esi + 0xcc]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xf8]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0xcc]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb0]
mov edx, dword [esi + 0xd0]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xf8]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0xd0]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403370
add esp, 0x10
mov eax, dword [0x41c14c]
movzx eax, byte [eax]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [0x41c14c]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [0x41c14c]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x41c14c]
inc edx
mov edi, dword [esi + 0xf0]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402740
add esp, 0x14
mov eax, dword [0x467980]
mov ecx, dword [0x4677f0]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0xa0]
mov dword [ecx], eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xcc]
mov edx, dword [0x4677c8]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xd0]
mov edx, dword [0x4677d0]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467974]
mov ecx, dword [0x4677cc]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], str.Microsoft
call eax
mov eax, dword [0x46796c]
mov ecx, dword [esi + 0xf0]
mov edx, dword [0x467808]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0x10
call eax
mov eax, dword [0x467980]
mov ecx, dword [0x4677f4]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0xa4]
mov dword [ecx], eax
mov eax, dword [0x467974]
mov ecx, dword [0x4677c8]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], 0x47d2f8
call eax
mov eax, dword [0x46797c]
mov ecx, dword [esi + 0xa4]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [str._vgKB]
movzx eax, word [eax]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [str._vgKB]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [str._vgKB]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea ecx, [ecx + edx*2 + 4]
mov edx, dword [str._vgKB]
add edx, 2
mov edi, dword [esi + 0xf8]
mov edi, dword [edi]
mov ebx, dword [esi + 0xe8]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00402c80
add esp, 0x14
mov eax, dword [0x467980]
mov ecx, dword [0x4677f8]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0xa8]
mov dword [ecx], eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xe8]
mov edx, dword [0x4677c8]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467974]
mov ecx, dword [esi + 0xc8]
mov edx, dword [0x4677d4]
mov edi, dword [esi + 0x6c]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x46797c]
mov ecx, dword [esi + 0xa8]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x46797c]
mov ecx, dword [esi + 0xa0]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x94]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x74]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x8c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x90]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x90]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x8c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467968]
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467964]
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x46797c]
mov ecx, dword [esi + 0x98]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x6c]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x46798c]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
mov eax, dword [esi + 0xe0]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404620
add esp, 8
mov eax, dword [0x4679cc]
mov ecx, dword [esi + 0xe0]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov ecx, dword [esi + 0x64]
mov dword [ecx], eax
mov ecx, dword [esi + 0x64]
mov eax, 0x95dff8bd
cmp dword [ecx], 0
je 0x40f032
mov eax, 0xf037c28a
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x13590281
jg 0x40f07e
cmp eax, 0xc6fabbd
jne 0x40cb60
mov eax, dword [esi + 0xc8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.0040b010
add esp, 4
mov dword [esi + 0x58], 0x4dae28ed
jmp 0x40cb60
cmp eax, 0x14aad115
jg 0x40f09c
cmp eax, 0x13590282
jne 0x40cb60
mov dword [esi + 0x58], 0xb8486137
jmp 0x40cb60
cmp eax, 0x167190d6
jg 0x40f0ca
cmp eax, 0x14aad116
jne 0x40cb60
mov al, byte [esi + 0x11a]
test al, al
mov eax, 0xd784ee82
jne 0x40f0c2
mov eax, 0x6bf45ed
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x17d67e4c
jg 0x40f116
cmp eax, 0x167190d7
jne 0x40cb60
mov eax, dword [esi + 0xc8]
mov ecx, dword [esi + 0xd8]
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
mov eax, 0xfcfb9a4c
je 0x40f10e
mov eax, 0x5160f37a
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x1b1e9d63
jg 0x40f134
cmp eax, 0x17d67e4d
jne 0x40cb60
mov dword [esi + 0x58], 0x314c8ec5
jmp 0x40cb60
cmp eax, 0x1c1b1368
jg 0x40f152
cmp eax, 0x1b1e9d64
jne 0x40cb60
mov dword [esi + 0x58], 0x97ca7cbb
jmp 0x40cb60
cmp eax, 0x2cc3c3c8
jg 0x40f17e
cmp eax, 0x1c1b1369
jne 0x40cb60
mov ecx, dword [esi + 0x68]
mov eax, 0xb650ffda
cmp dword [ecx], 0
jne 0x40f176
mov eax, 0x4c2fe6c9
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x30bb573a
jg 0x40f1ad
cmp eax, 0x2cc3c3c9
jne 0x40cb60
mov eax, dword [esi + 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x58], 0x6c4e8607
jmp 0x40cb60
cmp eax, 0x314c8ec4
jg 0x40f352
cmp eax, 0x30bb573b
jne 0x40cb60
mov eax, dword [esi + 0x70]
mov dword [eax], 0x3c
mov eax, dword [esi + 0x70]
mov dword [eax + 4], 0x40
mov eax, dword [esi + 0x70]
mov dword [eax + 8], 0
mov eax, dword [esi + 0x70]
mov dword [eax + 0xc], 0x47d2fc
mov eax, dword [esi + 0x70]
mov dword [eax + 0x18], 0
mov eax, dword [esi + 0x70]
mov dword [eax + 0x20], 0
mov eax, dword [esi + 0xdc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403140
add esp, 0xc
mov eax, dword [esi + 0xdc]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47d306
mov dword [esp + 4], 0x104
call fcn.00403370
add esp, 0x10
mov eax, dword [esi + 0xc0]
sub esp, 4
mov dword [esp], eax
call fcn.00403830
add esp, 4
mov ecx, dword [esi + 0xc0]
mov edx, dword [esi + 0xdc]
add edx, 6
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x101
call fcn.00403370
add esp, 0x10
mov eax, dword [0x41c154]
movzx eax, word [eax]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov eax, dword [esi + 0xf8]
mov eax, dword [eax]
mov ecx, dword [0x41c154]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [0x41c154]
mov edx, dword [esi + 0xf8]
mov edx, dword [edx]
lea ecx, [ecx + edx*2 + 4]
mov edx, dword [0x41c154]
add edx, 2
mov edi, dword [esi + 0xf8]
mov edi, dword [edi]
mov ebx, dword [esi + 0xb4]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00402c80
add esp, 0x14
mov eax, dword [esi + 0xc4]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [esi + 0x68]
mov dword [ecx], eax
mov ecx, dword [esi + 0x68]
mov eax, 0xc3172430
cmp dword [ecx], 0
je 0x40f34a
mov eax, 0x893c13d1
mov dword [esi + 0x58], eax
jmp 0x40cb60
cmp eax, 0x314c8ec5
je 0x40f375
cmp eax, 0x31ac0abc
jne 0x40f393
mov eax, dword [esi + 0x60]
mov dword [eax], 0
mov dword [esi + 0x58], 0x580ff73f
jmp 0x40cb60
mov eax, dword [esi + 0x10c]
cmp dword [eax], 6
setb al
mov byte [esi + 0x11a], al
mov dword [esi + 0x58], 0x14aad116
jmp 0x40cb60
cmp eax, 0x31b3142c
jne 0x40cb60
mov ecx, dword [esi + 0x6c]
mov eax, 0xfa739295
cmp dword [ecx], 0
je 0x40f3b0
mov eax, 0xa76a72b
mov dword [esi + 0x58], eax
jmp 0x40cb60
mov eax, dword [esi + 0x60]
mov eax, dword [eax]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret