Function at 0x4190d0
Capabilities:
Check for peb beingdebugged flag
Check if file exists
Check mutex on windows
Contain obfuscated stackstrings
Create process on windows
Delete file
Get number of processors
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509698
mov eax, dword fs:[0]
push eax
mov eax, 0x4580
call fcn.004641e0
mov eax, dword [0x5635bc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x43c8], ecx
mov dword [ebp - 4], 0
push 0x512f04
call fcn.00410940
mov ecx, eax
call fcn.0040c260
mov eax, dword [ebp - 0x43c8]
mov cl, byte [eax + 0x28]
mov byte [ebp - 0x665], cl
mov edx, dword [ebp - 0x43c8]
mov byte [edx + 0x30], 0
mov word [ebp - 0x234], 0
push 0x206
push 0
lea eax, [ebp - 0x232]
push eax
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x45c], 0
push 0x206
push 0
lea ecx, [ebp - 0x45a]
push ecx
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x8b4], 0
push 0x206
push 0
lea edx, [ebp - 0x8b2]
push edx
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x664], 0
push 0x206
push 0
lea eax, [ebp - 0x662]
push eax
call fcn.00462540
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x664]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea edx, [ebp - 0x664]
push edx
call fcn.0040c580
add esp, 8
mov word [eax + 2], 0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0046439f
add esp, 8
lea edx, [ebp - 0x664]
push edx
lea eax, [ebp - 0x45c]
push eax
call fcn.0046439f
add esp, 8
lea ecx, [ebp - 0x3fd0]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409c30
mov dword [ebp - 0x43cc], eax
mov edx, dword [ebp - 0x43cc]
mov dword [ebp - 0x43d0], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x43d0]
push eax
lea ecx, [ebp + 0x18]
call fcn.00403a60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3fd0]
call fcn.00401cc0
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x419274
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401cc0
jmp 0x41de0b
lea ecx, [ebp - 0x250]
call fcn.00403a10
mov byte [ebp - 4], 2
lea edx, [ebp - 0x68c]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.00449b10
jmp 0x4192a8
push 0
lea eax, [ebp - 0x3fd8]
push eax
lea ecx, [ebp - 0x68c]
call fcn.00420e10
lea ecx, [ebp - 0x3fe0]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.00420d90
push eax
lea ecx, [ebp - 0x68c]
call fcn.00428520
movzx edx, al
test edx, edx
je 0x41b759
lea eax, [ebp - 0x8bc]
push eax
lea ecx, [ebp - 0x68c]
call fcn.00415620
add eax, 0x1c
mov ecx, eax
call fcn.0043ebf0
jmp 0x419300
push 0
lea ecx, [ebp - 0x3fe8]
push ecx
lea ecx, [ebp - 0x8bc]
call fcn.00420e50
lea edx, [ebp - 0x3ff0]
push edx
lea ecx, [ebp - 0x68c]
call fcn.00415620
add eax, 0x1c
mov ecx, eax
call fcn.0040e370
push eax
lea ecx, [ebp - 0x8bc]
call fcn.00428520
movzx eax, al
test eax, eax
je 0x41b754
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
push eax
lea ecx, [ebp - 0x1818]
call fcn.00403a30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x38
push eax
lea ecx, [ebp - 0x1c28]
call fcn.00403a30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x98
push eax
lea ecx, [ebp - 0x17fc]
call fcn.00403a30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0xb4
push eax
lea ecx, [ebp - 0x19c8]
call fcn.00403a30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0xd0
push eax
lea ecx, [ebp - 0x1c80]
call fcn.00403a30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
push eax
lea ecx, [ebp - 0x1e88]
call fcn.00403a30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x7c
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00403a30
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x288
push eax
lea ecx, [ebp - 0x1e6c]
call fcn.00403a30
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x26c
push eax
lea ecx, [ebp - 0x984]
call fcn.00403a30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x1c
push eax
lea ecx, [ebp - 0x1c64]
call fcn.00403a30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x2a4
push eax
lea ecx, [ebp - 0xdec]
call fcn.00403a30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x2dc
push eax
lea ecx, [ebp - 0x1e20]
call fcn.00403a30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
mov cl, byte [eax + 0x58]
mov byte [ebp - 0x1ca1], cl
push 0x512f28
lea edx, [ebp - 0x1818]
push edx
call fcn.00407e50
add esp, 8
movzx eax, al
test eax, eax
jne 0x419545
push 0x512f38
lea ecx, [ebp - 0x1818]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
jne 0x419545
push 0x512f44
lea eax, [ebp - 0x1818]
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x419545
push 0x512f50
lea edx, [ebp - 0x1818]
push edx
call fcn.00407e50
add esp, 8
movzx eax, al
test eax, eax
jne 0x419545
push 0x512f60
lea ecx, [ebp - 0x1818]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x4195fe
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
jne 0x419618
mov byte [ebp - 0x1ca1], 1
movzx ecx, byte [ebp - 0x1ca1]
test ecx, ecx
jne 0x4196e0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ff4], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x43d4], eax
lea eax, [ebp - 0x1ca0]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041e040
mov dword [ebp - 0x43d8], eax
mov byte [ebp - 4], 0xf
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ff8], esp
lea edx, [ebp - 0x1ca0]
push edx
call fcn.00403a30
mov dword [ebp - 0x43dc], eax
lea eax, [ebp - 0x1c0c]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041df40
mov dword [ebp - 0x43e0], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x108
push eax
lea ecx, [ebp - 0xdd0]
call fcn.00403a30
mov byte [ebp - 4], 0x11
push 0x512f68
lea ecx, [ebp - 0x1818]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
jne 0x4197de
push 0x512f74
lea eax, [ebp - 0x1818]
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x4197de
push 0x512f88
lea edx, [ebp - 0x1818]
push edx
call fcn.00407e50
add esp, 8
movzx eax, al
test eax, eax
jne 0x4197de
push str.bdgj
lea ecx, [ebp - 0x1818]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x4197ee
push 0x512fa8
lea ecx, [ebp - 0x1c0c]
call fcn.00403a80
lea eax, [ebp - 0x1c0c]
push eax
lea ecx, [ebp - 0xdd0]
call fcn.00404390
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x140
push eax
lea ecx, [ebp - 0xdd0]
call fcn.00404390
lea ecx, [ebp - 0xdd0]
push ecx
lea ecx, [ebp - 0x250]
call fcn.00403a60
lea edx, [ebp - 0x1bf0]
push edx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x12
push 0x512fac
lea ecx, [ebp - 0x1bf0]
call fcn.00403ab0
push 0x512fb8
lea ecx, [ebp - 0x1bf0]
call fcn.00403ab0
lea eax, [ebp - 0x1e50]
push eax
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x13
push 0x512fd0
lea ecx, [ebp - 0x1e50]
call fcn.00403ab0
lea ecx, [ebp - 0xdd0]
push ecx
lea ecx, [ebp - 0x1e50]
call fcn.00404390
lea ecx, [ebp - 0x1818]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4014]
call fcn.00401c80
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x4014]
push edx
lea eax, [ebp - 0x8f8]
push eax
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4014]
call fcn.00401cc0
mov dword [ebp - 0x1e34], 0
mov dword [ebp - 0x1c84], 0
mov dword [ebp - 0x20e8], 0
jmp 0x41990d
mov ecx, dword [ebp - 0x20e8]
add ecx, 1
mov dword [ebp - 0x20e8], ecx
cmp dword [ebp - 0x20e8], 0x40
jge 0x419991
call fcn.00410940
mov ecx, eax
call fcn.0040a1b0
mov dword [ebp - 0x20ec], eax
lea ecx, [ebp - 0x8f8]
call fcn.00403a00
push eax
mov edx, dword [ebp - 0x20e8]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x20ec]
lea ecx, [eax + edx + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x41998c
mov edx, dword [ebp - 0x20e8]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x20ec]
mov ecx, dword [eax + edx + 0x64]
mov dword [ebp - 0x1e34], ecx
mov edx, dword [ebp - 0x20e8]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x20ec]
mov ecx, dword [ebp - 0x1e34]
add ecx, dword [eax + edx + 0x68]
mov dword [ebp - 0x1c84], ecx
jmp 0x419991
jmp 0x4198fe
lea ecx, [ebp - 0x1e50]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4030]
call fcn.00401c80
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0x4030]
push edx
lea eax, [ebp - 0x19ac]
push eax
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4030]
call fcn.00401cc0
lea ecx, [ebp - 0x1bf0]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x404c]
call fcn.00401c80
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x404c]
push ecx
lea edx, [ebp - 0x20c8]
push edx
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x404c]
call fcn.00401cc0
lea eax, [ebp - 0x1e50]
push eax
lea ecx, [ebp - 0x1964]
call fcn.00403a30
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1c84]
push ecx
lea edx, [ebp - 0x1e34]
push edx
lea ecx, [ebp - 0x20c8]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x19ac]
call fcn.00403a00
push eax
call fcn.00410940
mov ecx, eax
call fcn.0040a1d0
mov word [ebp - 0x20ac], 0
push 0x206
push 0
lea eax, [ebp - 0x20aa]
push eax
call fcn.00462540
add esp, 0xfffffff0
mov ecx, 7
lea esi, [ebp - 0xdd0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push 0x512fdc
lea ecx, [ebp - 0x20ac]
push ecx
call fcn.004654fb
add esp, 0x24
lea ecx, [ebp - 0x17e0]
call fcn.00403a10
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x1e50]
push edx
lea ecx, [ebp - 0x17e0]
call fcn.00403a60
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0xec
push eax
lea ecx, [ebp - 0x1c48]
call fcn.00403a30
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x419b11
push 0x512fe4
lea eax, [ebp - 0x17fc]
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x419c6f
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
movzx edx, byte [ebp - 0x1ca1]
test edx, edx
jne 0x419ded
mov ecx, dword [ebp + 0x10]
call fcn.00414b80
cmp eax, 1
jbe 0x419ded
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
push 0x513000
lea ecx, [ebp - 0x17e0]
call fcn.00403ab0
push 0x513004
lea eax, [ebp - 0x1c80]
push eax
call fcn.004218b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x419e2a
lea edx, [ebp - 0x1c80]
push edx
lea ecx, [ebp - 0x17e0]
call fcn.00404390
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call fcn.004628d7
add esp, 4
test eax, eax
jne 0x419fa4
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x41b754
mov word [ebp - 0xdb4], 0
push 0x206
push 0
lea eax, [ebp - 0xdb2]
push eax
call fcn.00462540
add esp, 0xc
push 0x513008
push 0x51301c
lea ecx, [ebp - 0xdb4]
push ecx
call fcn.004654fb
add esp, 0xc
lea edx, [ebp - 0xdb4]
push edx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x1948], eax
push 0x3e8
mov eax, dword [ebp - 0x1948]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x968], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4050], esp
lea edx, [ebp - 0x984]
push edx
call fcn.00403a30
mov dword [ebp - 0x43e4], eax
mov eax, dword [ebp - 0x43e4]
mov dword [ebp - 0x43e8], eax
mov byte [ebp - 4], 0x20
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4054], esp
lea edx, [ebp - 0x1e20]
push edx
call fcn.00403a30
mov dword [ebp - 0x43ec], eax
mov eax, dword [ebp - 0x43ec]
mov dword [ebp - 0x43f0], eax
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4058], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x43f4], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x43f5], al
mov al, byte [ebp - 0x43f5]
mov byte [ebp - 0x1dfd], al
movzx ecx, byte [ebp - 0x1dfd]
test ecx, ecx
je 0x41a262
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41a0dd
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x513024
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov edx, dword [ebp - 0x1948]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
mov eax, dword [ebp - 0x1948]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x1ca8], 3
push 0x44
push 0
lea ecx, [ebp - 0x1dfc]
push ecx
call fcn.00462540
add esp, 0xc
mov dword [ebp - 0x1dfc], 0x44
push 0x10
push 0
lea edx, [ebp - 0x1990]
push edx
call fcn.00462540
add esp, 0xc
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
push 0x513028
lea eax, [ebp - 0x17c4]
push eax
call fcn.004654fb
add esp, 0xc
lea ecx, [ebp - 0x1990]
push ecx
lea edx, [ebp - 0x1dfc]
push edx
push 0
push 0
push 0
push 1
push 0
push 0
lea eax, [ebp - 0x17c4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x1e30], eax
cmp dword [ebp - 0x1e30], 0
jne 0x41a46d
mov dword [ebp - 0x1ca8], 0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x41b754
mov dword [ebp - 0x1ca8], 2
lea ecx, [ebp - 0xdb4]
push ecx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x1948], eax
cmp dword [ebp - 0x1ca8], 2
jne 0x41a4c7
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41a4c7
push 0x513030
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov eax, dword [ebp - 0x1948]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x32
mov ecx, dword [ebp - 0x1990]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x8dc], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x405c], esp
lea edx, [ebp - 0x984]
push edx
call fcn.00403a30
mov dword [ebp - 0x43fc], eax
mov eax, dword [ebp - 0x43fc]
mov dword [ebp - 0x4400], eax
mov byte [ebp - 4], 0x22
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4060], esp
lea edx, [ebp - 0x1e20]
push edx
call fcn.00403a30
mov dword [ebp - 0x4404], eax
mov eax, dword [ebp - 0x4404]
mov dword [ebp - 0x4408], eax
mov byte [ebp - 4], 0x23
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4064], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x440c], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x440d], al
mov al, byte [ebp - 0x440d]
mov byte [ebp - 0x1835], al
mov byte [ebp - 0x1c29], 0
cmp dword [ebp - 0x8dc], 0
jne 0x41a77f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4068], esp
lea edx, [ebp - 0x984]
push edx
call fcn.00403a30
mov dword [ebp - 0x4414], eax
mov eax, dword [ebp - 0x4414]
mov dword [ebp - 0x4418], eax
mov byte [ebp - 4], 0x24
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x406c], esp
lea edx, [ebp - 0x1e20]
push edx
call fcn.00403a30
mov dword [ebp - 0x441c], eax
mov eax, dword [ebp - 0x441c]
mov dword [ebp - 0x4420], eax
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4070], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x4424], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x4425], al
mov al, byte [ebp - 0x4425]
mov byte [ebp - 0x2301], al
movzx ecx, byte [ebp - 0x2301]
test ecx, ecx
je 0x41a644
mov dword [ebp - 0x1ca8], 1
jmp 0x41a64e
mov dword [ebp - 0x1ca8], 0
mov word [ebp - 0x22fc], 0
push 0x206
push 0
lea edx, [ebp - 0x22fa]
push edx
call fcn.00462540
add esp, 0xc
push 0x513034
push 0x513048
lea eax, [ebp - 0x22fc]
push eax
call fcn.004654fb
add esp, 0xc
lea ecx, [ebp - 0x22fc]
push ecx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x2300], eax
push 0x3e8
mov edx, dword [ebp - 0x2300]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x20f0], eax
cmp dword [ebp - 0x20f0], 0x102
je 0x41a77a
cmp dword [ebp - 0x1ca8], 0
jne 0x41a700
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
je 0x41a6fe
push 0x513050
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41a76d
cmp dword [ebp - 0x1ca8], 2
jne 0x41a725
push 0x513054
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41a76d
cmp dword [ebp - 0x1ca8], 3
jne 0x41a74a
push 0x513058
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41a76d
cmp dword [ebp - 0x1ca8], 1
jne 0x41a76d
push 0x51305c
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov ecx, dword [ebp - 0x2300]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41ab8d
cmp dword [ebp - 0x8dc], 0
je 0x41a9db
movzx edx, byte [ebp - 0x1835]
test edx, edx
jne 0x41a9db
cmp dword [ebp - 0x8dc], 0
jne 0x41a892
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4074], esp
lea eax, [ebp - 0x984]
push eax
call fcn.00403a30
mov dword [ebp - 0x442c], eax
mov ecx, dword [ebp - 0x442c]
mov dword [ebp - 0x4430], ecx
mov byte [ebp - 4], 0x26
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4078], esp
lea edx, [ebp - 0x1e20]
push edx
call fcn.00403a30
mov dword [ebp - 0x4434], eax
mov eax, dword [ebp - 0x4434]
mov dword [ebp - 0x4438], eax
mov byte [ebp - 4], 0x27
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x407c], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x443c], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x443d], al
mov al, byte [ebp - 0x443d]
mov byte [ebp - 0x1835], al
push 0x513060
lea ecx, [ebp - 0x1c48]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x41a862
mov byte [ebp - 0x1835], 1
movzx eax, byte [ebp - 0x1835]
test eax, eax
je 0x41a87e
mov dword [ebp - 0x1ca8], 1
jmp 0x41a9db
mov dword [ebp - 0x1ca8], 0
jmp 0x41a9db
push 0x4e20
mov ecx, dword [ebp - 0x1990]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 0
je 0x41a8c3
cmp dword [ebp - 0x8dc], 0x102
jne 0x41a9d6
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4080], esp
lea edx, [ebp - 0x984]
push edx
call fcn.00403a30
mov dword [ebp - 0x4444], eax
mov eax, dword [ebp - 0x4444]
mov dword [ebp - 0x4448], eax
mov byte [ebp - 4], 0x28
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4084], esp
lea edx, [ebp - 0x1e20]
push edx
call fcn.00403a30
mov dword [ebp - 0x444c], eax
mov eax, dword [ebp - 0x444c]
mov dword [ebp - 0x4450], eax
mov byte [ebp - 4], 0x29
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4088], esp
lea edx, [ebp - 0x1818]
push edx
call fcn.00403a30
mov dword [ebp - 0x4454], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x4455], al
mov al, byte [ebp - 0x4455]
mov byte [ebp - 0x2519], al
push 0x513064
lea ecx, [ebp - 0x1c48]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x41a97d
mov byte [ebp - 0x2519], 1
movzx eax, byte [ebp - 0x2519]
test eax, eax
je 0x41a996
mov dword [ebp - 0x1ca8], 1
jmp 0x41a9db
mov dword [ebp - 0x2520], 0
lea ecx, [ebp - 0x2520]
push ecx
mov edx, dword [ebp - 0x198c]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [ebp - 0x2520], 0x103
jne 0x41a9cc
mov dword [ebp - 0x1ca8], 2
jmp 0x41a9d6
mov dword [ebp - 0x1ca8], 0
jmp 0x41a77f
mov word [ebp - 0x2514], 0
push 0x206
push 0
lea eax, [ebp - 0x2512]
push eax
call fcn.00462540
add esp, 0xc
push 0x513068
push 0x51307c
lea ecx, [ebp - 0x2514]
push ecx
call fcn.004654fb
add esp, 0xc
lea edx, [ebp - 0x2514]
push edx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x2518], eax
push 0x3e8
mov eax, dword [ebp - 0x2518]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x2308], eax
movzx ecx, byte [ebp - 0x1835]
test ecx, ecx
je 0x41aa5a
mov dword [ebp - 0x1ca8], 1
cmp dword [ebp - 0x1ca8], 0
jne 0x41aa95
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41aa90
push 0x513084
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ab66
cmp dword [ebp - 0x1ca8], 2
jne 0x41aad0
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
je 0x41aacb
push 0x513088
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ab66
cmp dword [ebp - 0x1ca8], 3
jne 0x41ab08
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx ecx, al
test ecx, ecx
je 0x41ab06
push 0x51308c
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ab66
cmp dword [ebp - 0x1ca8], 1
jne 0x41ab66
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41ab66
push 0x513090
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
call fcn.00410940
mov ecx, eax
call fcn.00409b30
mov dword [ebp - 0x2524], eax
mov eax, dword [ebp - 0x2524]
add eax, 1
push eax
call fcn.00410940
mov ecx, eax
call fcn.00409b10
mov ecx, dword [ebp - 0x2518]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x1990]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x198c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41abb5
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x513094
lea ecx, [ebp - 0x8bc]
call fcn.00406fb0
add eax, 0x5c
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41ad3a
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
mov word [ebp - 0xbac], 0
push 0x206
push 0
lea edx, [ebp - 0xbaa]
push edx
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x1bd4], 0
push 0x206
push 0
lea eax, [ebp - 0x1bd2]
push eax
call fcn.00462540
add esp, 0xc
mov word [ebp - 0xff4], 0
push 0x206
push 0
lea ecx, [ebp - 0xff2]
push ecx
call fcn.00462540
add esp, 0xc
push 0x513098
lea ecx, [ebp - 0x1834]
call fcn.00401c80
mov byte [ebp - 4], 0x2a
push 0x51309c
push 0x5130b4
lea edx, [ebp - 0x664]
push edx
push 0x5130c0
lea eax, [ebp - 0xbac]
push eax
call fcn.004654fb
add esp, 0x14
lea ecx, [ebp - 0x40a4]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov dword [ebp - 0x445c], eax
mov edx, dword [ebp - 0x445c]
mov dword [ebp - 0x4460], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x4460]
push eax
lea ecx, [ebp - 0x1bf0]
call fcn.00403a60
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x40a4]
call fcn.00401cc0
push 0x5130d0
lea ecx, [ebp - 0x1bf0]
call fcn.00403ab0
push 0x5130dc
lea ecx, [ebp - 0x1bf0]
call fcn.00403ab0
push 0x5130f4
lea ecx, [ebp - 0x40c0]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov dword [ebp - 0x4464], eax
mov edx, dword [ebp - 0x4464]
mov dword [ebp - 0x4468], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x4468]
push eax
lea ecx, [ebp - 0x40dc]
push ecx
call fcn.004042c0
add esp, 0xc
mov dword [ebp - 0x446c], eax
mov edx, dword [ebp - 0x446c]
mov dword [ebp - 0x4470], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x4470]
push eax
lea ecx, [ebp - 0x1e50]
call fcn.00403a60
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x40dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x40c0]
call fcn.00401cc0
push 0x513100
lea ecx, [ebp - 0x1e50]
call fcn.00403ab0
push 0x513118
lea ecx, [ebp - 0x8f8]
call fcn.00408d50
mov dword [ebp - 0x2528], 0
jmp 0x41aeff
mov ecx, dword [ebp - 0x2528]
add ecx, 1
mov dword [ebp - 0x2528], ecx
cmp dword [ebp - 0x2528], 0x40
jge 0x41af83
call fcn.00410940
mov ecx, eax
call fcn.0040a1b0
mov dword [ebp - 0x252c], eax
lea ecx, [ebp - 0x8f8]
call fcn.00403a00
push eax
mov edx, dword [ebp - 0x2528]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x252c]
lea ecx, [eax + edx + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x41af7e
mov edx, dword [ebp - 0x2528]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x252c]
mov ecx, dword [eax + edx + 0x64]
mov dword [ebp - 0x1e34], ecx
mov edx, dword [ebp - 0x2528]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x252c]
mov ecx, dword [ebp - 0x1e34]
add ecx, dword [eax + edx + 0x68]
mov dword [ebp - 0x1c84], ecx
jmp 0x41af83
jmp 0x41aef0
lea ecx, [ebp - 0x1e50]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x40f8]
call fcn.00401c80
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x40f8]
push edx
lea eax, [ebp - 0x4114]
push eax
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x4474], eax
mov ecx, dword [ebp - 0x4474]
mov dword [ebp - 0x4478], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x4478]
push edx
lea ecx, [ebp - 0x19ac]
call fcn.004039e0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4114]
call fcn.00401c50
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x40f8]
call fcn.00401cc0
lea ecx, [ebp - 0x1bf0]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401c80
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x4130]
push eax
lea ecx, [ebp - 0x414c]
push ecx
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x447c], eax
mov edx, dword [ebp - 0x447c]
mov dword [ebp - 0x4480], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x4480]
push eax
lea ecx, [ebp - 0x20c8]
call fcn.004039e0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x414c]
call fcn.00401c50
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4130]
call fcn.00401cc0
lea ecx, [ebp - 0x1c84]
push ecx
lea edx, [ebp - 0x1e34]
push edx
lea ecx, [ebp - 0x20c8]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x19ac]
call fcn.00403a00
push eax
call fcn.00410940
mov ecx, eax
call fcn.0040a1d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4150], esp
lea eax, [ebp - 0x1818]
push eax
call fcn.00403a30
mov dword [ebp - 0x4484], eax
mov ecx, dword [ebp - 0x4484]
mov dword [ebp - 0x4488], ecx
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x1ea4]
push edx
call fcn.00410940
mov byte [ebp - 4], 0x2a
mov ecx, eax
call fcn.00409d80
mov dword [ebp - 0x448c], eax
mov byte [ebp - 4], 0x33
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4154], esp
lea eax, [ebp - 0x1818]
push eax
call fcn.00403a30
mov dword [ebp - 0x4490], eax
mov ecx, dword [ebp - 0x4490]
mov dword [ebp - 0x4494], ecx
mov byte [ebp - 4], 0x34
lea edx, [ebp - 0x1980]
push edx
call fcn.00410940
mov byte [ebp - 4], 0x33
mov ecx, eax
call fcn.00409e60
mov dword [ebp - 0x4498], eax
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x9a0]
push eax
call fcn.00410940
mov ecx, eax
call fcn.00409c30
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x19ac]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x4170]
call fcn.00401c10
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x4170]
push ecx
lea edx, [ebp - 0x418c]
push edx
call fcn.0043a510
add esp, 8
mov dword [ebp - 0x449c], eax
mov eax, dword [ebp - 0x449c]
mov dword [ebp - 0x44a0], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x44a0]
push ecx
lea ecx, [ebp - 0x1834]
call fcn.00404390
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x418c]
call fcn.00401cc0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x4170]
call fcn.00401c50
push 0x513124
lea ecx, [ebp - 0x1834]
call fcn.00403ab0
push 0x51312c
lea edx, [ebp - 0x1bd4]
push edx
call fcn.0046439f
add esp, 8
lea ecx, [ebp - 0x1818]
call fcn.00401cf0
push eax
lea eax, [ebp - 0x1bd4]
push eax
call fcn.00464375
add esp, 8
push 0x51314c
lea ecx, [ebp - 0x1bd4]
push ecx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x1c28]
call fcn.00401cf0
push eax
lea edx, [ebp - 0x1bd4]
push edx
call fcn.00464375
add esp, 8
push 0x513150
lea eax, [ebp - 0x1bd4]
push eax
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x9a0]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x1bd4]
push ecx
call fcn.00464375
add esp, 8
push 0x513154
lea edx, [ebp - 0x1bd4]
push edx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x1e6c]
call fcn.00401cf0
push eax
lea eax, [ebp - 0x1bd4]
push eax
call fcn.00464375
add esp, 8
push 0x513158
lea ecx, [ebp - 0x1bd4]
push ecx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x984]
call fcn.00401cf0
push eax
lea edx, [ebp - 0x1bd4]
push edx
call fcn.00464375
add esp, 8
lea eax, [ebp - 0x1bd4]
push eax
lea ecx, [ebp - 0x1834]
call fcn.00403ab0
lea ecx, [ebp - 0x1834]
call fcn.00401cf0
push eax
call fcn.00438cd0
add esp, 4
lea ecx, [ebp - 0x1964]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41b316
lea ecx, [ebp - 0x1964]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00410940
mov ecx, eax
call fcn.0040c020
movzx ecx, al
test ecx, ecx
je 0x41b351
lea ecx, [ebp - 0x17e0]
call fcn.00401cf0
push eax
call fcn.0043a300
add esp, 4
lea ecx, [ebp - 0x1834]
call fcn.00401cf0
push eax
call fcn.0043a300
add esp, 4
mov edx, dword [ebp - 0x43c8]
mov byte [edx + 0x30], 1
mov byte [ebp - 0x1944], 0
push 0x103
push 0
lea eax, [ebp - 0x1943]
push eax
call fcn.00462540
add esp, 0xc
mov byte [ebp - 0x1db4], 0
push 0x103
push 0
lea ecx, [ebp - 0x1db3]
push ecx
call fcn.00462540
add esp, 0xc
push 0
call fcn.0041de50
add esp, 4
mov dword [ebp - 0x1e2c], eax
mov dword [ebp - 0x1e28], edx
lea edx, [ebp - 0x1e2c]
push edx
call fcn.0041de30
add esp, 4
mov dword [ebp - 0x1e24], eax
mov byte [ebp - 0x964], 0
push 0x63
push 0
lea eax, [ebp - 0x963]
push eax
call fcn.00462540
add esp, 0xc
mov ecx, dword [ebp - 0x1e24]
push ecx
push 0x51315c
push 0x64
lea edx, [ebp - 0x964]
push edx
call fcn.00466661
add esp, 0x10
lea eax, [ebp - 0x964]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00401c10
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x8d8]
call fcn.00420d30
cmp eax, 8
jb 0x41b470
push 6
push 2
lea ecx, [ebp - 0x41a8]
push ecx
lea ecx, [ebp - 0x8d8]
call fcn.00420d50
mov dword [ebp - 0x44a4], eax
mov edx, dword [ebp - 0x44a4]
mov dword [ebp - 0x44a8], edx
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x44a8]
push eax
mov ecx, dword [ebp - 0x43c8]
add ecx, 0x114
call fcn.004039e0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x41a8]
call fcn.00401c50
push 0x20
push 0
mov ecx, dword [ebp - 0x43c8]
add ecx, 0xf1
push ecx
call fcn.00462540
add esp, 0xc
mov edx, dword [ebp - 0x1e28]
push edx
mov eax, dword [ebp - 0x1e2c]
push eax
push 0x51316c
lea ecx, [ebp - 0x1944]
push ecx
call fcn.00465a6f
add esp, 0x10
lea ecx, [ebp - 0x1818]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x41c4]
call fcn.00401c80
mov byte [ebp - 4], 0x3b
lea edx, [ebp - 0x41c4]
push edx
lea eax, [ebp - 0x41e0]
push eax
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x44ac], eax
mov ecx, dword [ebp - 0x44ac]
mov dword [ebp - 0x44b0], ecx
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x44b0]
push edx
lea eax, [ebp - 0x1db4]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.00420410
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x41e0]
call fcn.00401c50
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x41c4]
call fcn.00401cc0
mov ecx, dword [ebp - 0x43c8]
add ecx, 0xf1
push ecx
call fcn.00465a6a
add esp, 4
mov dword [ebp - 0x1e04], eax
mov edx, dword [ebp - 0x1e04]
add edx, 1
mov dword [ebp - 0x1e04], edx
push 0xa
lea eax, [ebp - 0x1db4]
push eax
mov ecx, dword [ebp - 0x1e04]
push ecx
call fcn.004ee339
add esp, 0xc
push 0x20
push 0
mov edx, dword [ebp - 0x43c8]
add edx, 0xf1
push edx
call fcn.00462540
add esp, 0xc
lea eax, [ebp - 0x1db4]
push eax
lea ecx, [ebp - 0x1944]
push ecx
mov edx, dword [ebp - 0x8b8]
push edx
mov eax, dword [ebp - 0x8bc]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041fe90
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x8d8]
call fcn.00401c50
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x9a0]
call fcn.00401cc0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1980]
call fcn.00401cc0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1ea4]
call fcn.00401cc0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1834]
call fcn.00401cc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c48]
call fcn.00401cc0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x17e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1964]
call fcn.00401cc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x20c8]
call fcn.00401c50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x19ac]
call fcn.00401c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f8]
call fcn.00401c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e50]
call fcn.00401cc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bf0]
call fcn.00401cc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdd0]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c0c]
call fcn.00401cc0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1ca0]
call fcn.00401cc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e20]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdec]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c64]
call fcn.00401cc0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x984]
call fcn.00401cc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e6c]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20e4]
call fcn.00401cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e88]
call fcn.00401cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c80]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19c8]
call fcn.00401cc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17fc]
call fcn.00401cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c28]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1818]
call fcn.00401cc0
jmp 0x4192ec
jmp 0x419294
lea ecx, [ebp - 0x41e8]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.00449b10
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x68c], edx
mov dword [ebp - 0x688], eax
jmp 0x41b78f
push 0
lea ecx, [ebp - 0x41f0]
push ecx
lea ecx, [ebp - 0x68c]
call fcn.00420e10
lea edx, [ebp - 0x41f8]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.00420d90
push eax
lea ecx, [ebp - 0x68c]
call fcn.00428520
movzx eax, al
test eax, eax
je 0x41dc85
lea ecx, [ebp - 0x2534]
push ecx
lea ecx, [ebp - 0x68c]
call fcn.00415620
add eax, 0x1c
mov ecx, eax
call fcn.0043ebf0
jmp 0x41b7e7
push 0
lea edx, [ebp - 0x4200]
push edx
lea ecx, [ebp - 0x2534]
call fcn.00420e50
lea eax, [ebp - 0x4208]
push eax
lea ecx, [ebp - 0x68c]
call fcn.00415620
add eax, 0x1c
mov ecx, eax
call fcn.0040e370
push eax
lea ecx, [ebp - 0x2534]
call fcn.00428520
movzx ecx, al
test ecx, ecx
je 0x41dc80
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
push eax
lea ecx, [ebp - 0x34b0]
call fcn.00403a30
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x38
push eax
lea ecx, [ebp - 0x38c0]
call fcn.00403a30
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x98
push eax
lea ecx, [ebp - 0x3494]
call fcn.00403a30
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0xb4
push eax
lea ecx, [ebp - 0x3664]
call fcn.00403a30
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0xd0
push eax
lea ecx, [ebp - 0x38fc]
call fcn.00403a30
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
push eax
lea ecx, [ebp - 0x3b00]
call fcn.00403a30
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x7c
push eax
lea ecx, [ebp - 0x3b70]
call fcn.00403a30
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x288
push eax
lea ecx, [ebp - 0x3ae4]
call fcn.00403a30
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x26c
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00403a30
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x2dc
push eax
lea ecx, [ebp - 0x3a98]
call fcn.00403a30
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
mov dl, byte [eax + 0x58]
mov byte [ebp - 0x391d], dl
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
jne 0x41b97d
mov byte [ebp - 0x391d], 1
movzx ecx, byte [ebp - 0x391d]
test ecx, ecx
jne 0x41ba27
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
push str.bdws
lea edx, [ebp - 0x34b0]
push edx
call fcn.004218b0
add esp, 8
movzx eax, al
test eax, eax
je 0x41bb9b
push str.bdsd
lea ecx, [ebp - 0x34b0]
push ecx
call fcn.004218b0
add esp, 8
movzx edx, al
test edx, edx
je 0x41bb9b
push str.360safe
lea eax, [ebp - 0x34b0]
push eax
call fcn.004218b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41bb9b
push str.360sd
lea edx, [ebp - 0x34b0]
push edx
call fcn.004218b0
add esp, 8
movzx eax, al
test eax, eax
je 0x41bb9b
push str.duba
lea ecx, [ebp - 0x34b0]
push ecx
call fcn.004218b0
add esp, 8
movzx edx, al
test edx, edx
je 0x41bb9b
push 0x5131b0
lea eax, [ebp - 0x34b0]
push eax
call fcn.004218b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41bb9b
push 0x5131c0
lea edx, [ebp - 0x34b0]
push edx
call fcn.004218b0
add esp, 8
movzx eax, al
test eax, eax
je 0x41bb9b
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x420c], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x44b4], eax
lea eax, [ebp - 0x391c]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041e040
mov dword [ebp - 0x44b8], eax
mov byte [ebp - 4], 0x47
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4210], esp
lea edx, [ebp - 0x391c]
push edx
call fcn.00403a30
mov dword [ebp - 0x44bc], eax
lea eax, [ebp - 0x38a4]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041df40
mov dword [ebp - 0x44c0], eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x108
push eax
lea ecx, [ebp - 0x2a80]
call fcn.00403a30
mov byte [ebp - 4], 0x49
push str.kwyy
lea ecx, [ebp - 0x34b0]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
jne 0x41bc7e
push str.bdbrowser
lea eax, [ebp - 0x34b0]
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x41bc7e
push str.jzbrowser
lea edx, [ebp - 0x34b0]
push edx
call fcn.00407e50
add esp, 8
movzx eax, al
test eax, eax
je 0x41bc8e
push 0x5131fc
lea ecx, [ebp - 0x38a4]
call fcn.00403a80
lea ecx, [ebp - 0x3b54]
call fcn.00403a10
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x38a4]
push ecx
lea ecx, [ebp - 0x2a64]
call fcn.00403a30
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00403a10
mov byte [ebp - 4], 0x4c
push 0x513200
lea edx, [ebp - 0x34b0]
push edx
call fcn.00407e50
add esp, 8
movzx eax, al
test eax, eax
je 0x41bd29
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x108
push eax
lea ecx, [ebp - 0x2a48]
call fcn.00403a60
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x140
push eax
lea ecx, [ebp - 0x2a48]
call fcn.00404390
lea ecx, [ebp - 0x2a48]
push ecx
lea ecx, [ebp - 0x2a80]
call fcn.00403a60
jmp 0x41bd69
lea edx, [ebp - 0x38a4]
push edx
lea ecx, [ebp - 0x2a80]
call fcn.00404390
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x140
push eax
lea ecx, [ebp - 0x2a80]
call fcn.00404390
lea eax, [ebp - 0x2a80]
push eax
lea ecx, [ebp - 0x250]
call fcn.00403a60
lea ecx, [ebp - 0x3478]
call fcn.00403a10
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x4e
push 0x513208
lea ecx, [ebp - 0x3888]
call fcn.00403ab0
push 0x513214
lea ecx, [ebp - 0x3888]
call fcn.00403ab0
lea edx, [ebp - 0x3ac8]
push edx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x4f
push 0x51322c
lea ecx, [ebp - 0x3ac8]
call fcn.00403ab0
lea eax, [ebp - 0x2a80]
push eax
lea ecx, [ebp - 0x3ac8]
call fcn.00404390
lea ecx, [ebp - 0x34b0]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x422c]
call fcn.00401c80
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x422c]
push ecx
lea edx, [ebp - 0x2570]
push edx
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x422c]
call fcn.00401cc0
mov dword [ebp - 0x3aac], 0
mov dword [ebp - 0x3900], 0
mov dword [ebp - 0x3b74], 0
jmp 0x41be57
mov eax, dword [ebp - 0x3b74]
add eax, 1
mov dword [ebp - 0x3b74], eax
cmp dword [ebp - 0x3b74], 0x40
jge 0x41bedb
call fcn.00410940
mov ecx, eax
call fcn.0040a1b0
mov dword [ebp - 0x3b78], eax
lea ecx, [ebp - 0x2570]
call fcn.00403a00
push eax
mov ecx, dword [ebp - 0x3b74]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x3b78]
lea eax, [edx + ecx + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x41bed6
mov ecx, dword [ebp - 0x3b74]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x3b78]
mov eax, dword [edx + ecx + 0x64]
mov dword [ebp - 0x3aac], eax
mov ecx, dword [ebp - 0x3b74]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x3b78]
mov eax, dword [ebp - 0x3aac]
add eax, dword [edx + ecx + 0x68]
mov dword [ebp - 0x3900], eax
jmp 0x41bedb
jmp 0x41be48
lea ecx, [ebp - 0x3ac8]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4248]
call fcn.00401c80
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x4248]
push ecx
lea edx, [ebp - 0x3648]
push edx
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x4248]
call fcn.00401cc0
lea ecx, [ebp - 0x3888]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4264]
call fcn.00401c80
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x4264]
push eax
lea ecx, [ebp - 0x3b38]
push ecx
call fcn.0043a630
add esp, 8
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x4264]
call fcn.00401cc0
lea edx, [ebp - 0x3ac8]
push edx
lea ecx, [ebp - 0x3600]
call fcn.00403a30
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x3900]
push eax
lea ecx, [ebp - 0x3aac]
push ecx
lea ecx, [ebp - 0x3b38]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x3648]
call fcn.00403a00
push eax
call fcn.00410940
mov ecx, eax
call fcn.0040a1d0
lea edx, [ebp - 0x3ac8]
push edx
lea ecx, [ebp - 0x3478]
call fcn.00403a60
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0xec
push eax
lea ecx, [ebp - 0x38e0]
call fcn.00403a30
mov byte [ebp - 4], 0x5a
mov byte [ebp - 0x35e1], 0
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41c011
push str.UpUtility.exe
lea eax, [ebp - 0x3494]
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c17e
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
movzx edx, byte [ebp - 0x391d]
test edx, edx
jne 0x41c30b
mov ecx, dword [ebp + 0x10]
call fcn.00414b80
cmp eax, 1
jbe 0x41c30b
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
push 0x513254
lea ecx, [ebp - 0x3478]
call fcn.00403ab0
push 0x513258
lea eax, [ebp - 0x38fc]
push eax
call fcn.004218b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c348
lea edx, [ebp - 0x38fc]
push edx
lea ecx, [ebp - 0x3478]
call fcn.00404390
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call fcn.004628d7
add esp, 4
test eax, eax
jne 0x41c4d1
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41dc80
mov word [ebp - 0x2a2c], 0
push 0x206
push 0
lea eax, [ebp - 0x2a2a]
push eax
call fcn.00462540
add esp, 0xc
push 0x51325c
push 0x513270
lea ecx, [ebp - 0x2a2c]
push ecx
call fcn.004654fb
add esp, 0xc
lea edx, [ebp - 0x2a2c]
push edx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x35e0], eax
push 0x3e8
mov eax, dword [ebp - 0x35e0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x25e0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4268], esp
lea edx, [ebp - 0x25fc]
push edx
call fcn.00403a30
mov dword [ebp - 0x44c4], eax
mov eax, dword [ebp - 0x44c4]
mov dword [ebp - 0x44c8], eax
mov byte [ebp - 4], 0x5b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x426c], esp
lea edx, [ebp - 0x3a98]
push edx
call fcn.00403a30
mov dword [ebp - 0x44cc], eax
mov eax, dword [ebp - 0x44cc]
mov dword [ebp - 0x44d0], eax
mov byte [ebp - 4], 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4270], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x44d4], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x44d5], al
mov al, byte [ebp - 0x44d5]
mov byte [ebp - 0x3a75], al
movzx ecx, byte [ebp - 0x3a75]
test ecx, ecx
je 0x41c79e
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41c60a
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x513278
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov edx, dword [ebp - 0x35e0]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
mov eax, dword [ebp - 0x35e0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x3924], 3
push 0x44
push 0
lea ecx, [ebp - 0x3a74]
push ecx
call fcn.00462540
add esp, 0xc
mov dword [ebp - 0x3a74], 0x44
push 0x10
push 0
lea edx, [ebp - 0x362c]
push edx
call fcn.00462540
add esp, 0xc
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
push 0x51327c
lea eax, [ebp - 0x345c]
push eax
call fcn.004654fb
add esp, 0xc
lea ecx, [ebp - 0x362c]
push ecx
lea edx, [ebp - 0x3a74]
push edx
push 0
push 0
push 0
push 1
push 0
push 0
lea eax, [ebp - 0x345c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x3aa8], eax
cmp dword [ebp - 0x3aa8], 0
jne 0x41c9b8
mov dword [ebp - 0x3924], 0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41dc80
mov dword [ebp - 0x3924], 2
lea ecx, [ebp - 0x2a2c]
push ecx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x35e0], eax
cmp dword [ebp - 0x3924], 2
jne 0x41ca12
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41ca12
push 0x513284
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov eax, dword [ebp - 0x35e0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xa
mov ecx, dword [ebp - 0x362c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x2554], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4274], esp
lea edx, [ebp - 0x25fc]
push edx
call fcn.00403a30
mov dword [ebp - 0x44dc], eax
mov eax, dword [ebp - 0x44dc]
mov dword [ebp - 0x44e0], eax
mov byte [ebp - 4], 0x5d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4278], esp
lea edx, [ebp - 0x3a98]
push edx
call fcn.00403a30
mov dword [ebp - 0x44e4], eax
mov eax, dword [ebp - 0x44e4]
mov dword [ebp - 0x44e8], eax
mov byte [ebp - 4], 0x5e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x427c], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x44ec], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x44ed], al
mov al, byte [ebp - 0x44ed]
mov byte [ebp - 0x34cd], al
mov byte [ebp - 0x38c1], 0
cmp dword [ebp - 0x2554], 0
jne 0x41ccca
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4280], esp
lea edx, [ebp - 0x25fc]
push edx
call fcn.00403a30
mov dword [ebp - 0x44f4], eax
mov eax, dword [ebp - 0x44f4]
mov dword [ebp - 0x44f8], eax
mov byte [ebp - 4], 0x5f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4284], esp
lea edx, [ebp - 0x3a98]
push edx
call fcn.00403a30
mov dword [ebp - 0x44fc], eax
mov eax, dword [ebp - 0x44fc]
mov dword [ebp - 0x4500], eax
mov byte [ebp - 4], 0x60
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4288], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x4504], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x4505], al
mov al, byte [ebp - 0x4505]
mov byte [ebp - 0x3d89], al
movzx ecx, byte [ebp - 0x3d89]
test ecx, ecx
je 0x41cb8f
mov dword [ebp - 0x3924], 1
jmp 0x41cb99
mov dword [ebp - 0x3924], 0
mov word [ebp - 0x3d84], 0
push 0x206
push 0
lea edx, [ebp - 0x3d82]
push edx
call fcn.00462540
add esp, 0xc
push 0x513288
push 0x51329c
lea eax, [ebp - 0x3d84]
push eax
call fcn.004654fb
add esp, 0xc
lea ecx, [ebp - 0x3d84]
push ecx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x3d88], eax
push 0x3e8
mov edx, dword [ebp - 0x3d88]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3b7c], eax
cmp dword [ebp - 0x3b7c], 0x102
je 0x41ccc5
cmp dword [ebp - 0x3924], 0
jne 0x41cc4b
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
je 0x41cc49
push str.023100
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ccb8
cmp dword [ebp - 0x3924], 2
jne 0x41cc70
push 0x5132a8
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ccb8
cmp dword [ebp - 0x3924], 3
jne 0x41cc95
push 0x5132ac
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41ccb8
cmp dword [ebp - 0x3924], 1
jne 0x41ccb8
push 0x5132b0
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
mov ecx, dword [ebp - 0x3d88]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41d0d8
cmp dword [ebp - 0x2554], 0
je 0x41cf26
movzx edx, byte [ebp - 0x34cd]
test edx, edx
jne 0x41cf26
cmp dword [ebp - 0x2554], 0
jne 0x41cddd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x428c], esp
lea eax, [ebp - 0x25fc]
push eax
call fcn.00403a30
mov dword [ebp - 0x450c], eax
mov ecx, dword [ebp - 0x450c]
mov dword [ebp - 0x4510], ecx
mov byte [ebp - 4], 0x61
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4290], esp
lea edx, [ebp - 0x3a98]
push edx
call fcn.00403a30
mov dword [ebp - 0x4514], eax
mov eax, dword [ebp - 0x4514]
mov dword [ebp - 0x4518], eax
mov byte [ebp - 4], 0x62
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4294], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x451c], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x451d], al
mov al, byte [ebp - 0x451d]
mov byte [ebp - 0x34cd], al
push 0x5132b4
lea ecx, [ebp - 0x38e0]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x41cdad
mov byte [ebp - 0x34cd], 1
movzx eax, byte [ebp - 0x34cd]
test eax, eax
je 0x41cdc9
mov dword [ebp - 0x3924], 1
jmp 0x41cf26
mov dword [ebp - 0x3924], 0
jmp 0x41cf26
push 0x4e20
mov ecx, dword [ebp - 0x362c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x2554], eax
cmp dword [ebp - 0x2554], 0
je 0x41ce0e
cmp dword [ebp - 0x2554], 0x102
jne 0x41cf21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4298], esp
lea edx, [ebp - 0x25fc]
push edx
call fcn.00403a30
mov dword [ebp - 0x4524], eax
mov eax, dword [ebp - 0x4524]
mov dword [ebp - 0x4528], eax
mov byte [ebp - 4], 0x63
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x429c], esp
lea edx, [ebp - 0x3a98]
push edx
call fcn.00403a30
mov dword [ebp - 0x452c], eax
mov eax, dword [ebp - 0x452c]
mov dword [ebp - 0x4530], eax
mov byte [ebp - 4], 0x64
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x42a0], esp
lea edx, [ebp - 0x34b0]
push edx
call fcn.00403a30
mov dword [ebp - 0x4534], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43c8]
call fcn.00420660
mov byte [ebp - 0x4535], al
mov al, byte [ebp - 0x4535]
mov byte [ebp - 0x3fa1], al
push 0x5132b8
lea ecx, [ebp - 0x38e0]
push ecx
call fcn.00407e50
add esp, 8
movzx edx, al
test edx, edx
je 0x41cec8
mov byte [ebp - 0x3fa1], 1
movzx eax, byte [ebp - 0x3fa1]
test eax, eax
je 0x41cee1
mov dword [ebp - 0x3924], 1
jmp 0x41cf26
mov dword [ebp - 0x3fa8], 0
lea ecx, [ebp - 0x3fa8]
push ecx
mov edx, dword [ebp - 0x3628]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [ebp - 0x3fa8], 0x103
jne 0x41cf17
mov dword [ebp - 0x3924], 2
jmp 0x41cf21
mov dword [ebp - 0x3924], 0
jmp 0x41ccca
mov word [ebp - 0x3f9c], 0
push 0x206
push 0
lea eax, [ebp - 0x3f9a]
push eax
call fcn.00462540
add esp, 0xc
push 0x5132bc
push 0x5132d0
lea ecx, [ebp - 0x3f9c]
push ecx
call fcn.004654fb
add esp, 0xc
lea edx, [ebp - 0x3f9c]
push edx
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x3fa0], eax
push 0x3e8
mov eax, dword [ebp - 0x3fa0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3d90], eax
movzx ecx, byte [ebp - 0x34cd]
test ecx, ecx
je 0x41cfa5
mov dword [ebp - 0x3924], 1
cmp dword [ebp - 0x3924], 0
jne 0x41cfe0
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41cfdb
push str.02310_
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41d0b1
cmp dword [ebp - 0x3924], 2
jne 0x41d01b
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx eax, al
test eax, eax
je 0x41d016
push 0x5132dc
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41d0b1
cmp dword [ebp - 0x3924], 3
jne 0x41d053
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx ecx, al
test ecx, ecx
je 0x41d051
push 0x5132e0
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
jmp 0x41d0b1
cmp dword [ebp - 0x3924], 1
jne 0x41d0b1
call fcn.00410940
mov ecx, eax
call fcn.00409b70
movzx edx, al
test edx, edx
je 0x41d0b1
push 0x5132e4
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
mov ecx, eax
call fcn.00403a80
call fcn.00410940
mov ecx, eax
call fcn.00409b30
mov dword [ebp - 0x3fac], eax
mov eax, dword [ebp - 0x3fac]
add eax, 1
push eax
call fcn.00410940
mov ecx, eax
call fcn.00409b10
mov ecx, dword [ebp - 0x3fa0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x362c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3628]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41d100
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x5132e8
lea ecx, [ebp - 0x2534]
call fcn.00406fb0
add eax, 0x5c
push eax
call fcn.00407e50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41d2bc
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41d14f
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
mov word [ebp - 0x2824], 0
push 0x206
push 0
lea edx, [ebp - 0x2822]
push edx
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x386c], 0
push 0x206
push 0
lea eax, [ebp - 0x386a]
push eax
call fcn.00462540
add esp, 0xc
mov word [ebp - 0x2c8c], 0
push 0x206
push 0
lea ecx, [ebp - 0x2c8a]
push ecx
call fcn.00462540
add esp, 0xc
push 0x5132ec
lea ecx, [ebp - 0x34cc]
call fcn.00401c80
mov byte [ebp - 4], 0x65
push 0x5132f0
push 0x513308
lea edx, [ebp - 0x664]
push edx
push 0x513314
lea eax, [ebp - 0x2824]
push eax
call fcn.004654fb
add esp, 0x14
lea ecx, [ebp - 0x42bc]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov dword [ebp - 0x453c], eax
mov edx, dword [ebp - 0x453c]
mov dword [ebp - 0x4540], edx
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x4540]
push eax
lea ecx, [ebp - 0x3888]
call fcn.00403a60
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x42bc]
call fcn.00401cc0
push 0x513324
lea ecx, [ebp - 0x3888]
call fcn.00403ab0
push 0x513330
lea ecx, [ebp - 0x3888]
call fcn.00403ab0
push 0x513348
lea ecx, [ebp - 0x42d8]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov dword [ebp - 0x4544], eax
mov edx, dword [ebp - 0x4544]
mov dword [ebp - 0x4548], edx
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x4548]
push eax
lea ecx, [ebp - 0x42f4]
push ecx
call fcn.004042c0
add esp, 0xc
mov dword [ebp - 0x454c], eax
mov edx, dword [ebp - 0x454c]
mov dword [ebp - 0x4550], edx
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0x4550]
push eax
lea ecx, [ebp - 0x3ac8]
call fcn.00403a60
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x42f4]
call fcn.00401cc0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x42d8]
call fcn.00401cc0
push 0x513354
lea ecx, [ebp - 0x3ac8]
call fcn.00403ab0
push 0x51336c
lea ecx, [ebp - 0x2570]
call fcn.00408d50
mov dword [ebp - 0x3fb0], 0
jmp 0x41d481
mov ecx, dword [ebp - 0x3fb0]
add ecx, 1
mov dword [ebp - 0x3fb0], ecx
cmp dword [ebp - 0x3fb0], 0x40
jge 0x41d505
call fcn.00410940
mov ecx, eax
call fcn.0040a1b0
mov dword [ebp - 0x3fb4], eax
lea ecx, [ebp - 0x2570]
call fcn.00403a00
push eax
mov edx, dword [ebp - 0x3fb0]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x3fb4]
lea ecx, [eax + edx + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x41d500
mov edx, dword [ebp - 0x3fb0]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x3fb4]
mov ecx, dword [eax + edx + 0x64]
mov dword [ebp - 0x3aac], ecx
mov edx, dword [ebp - 0x3fb0]
imul edx, edx, 0x48
mov eax, dword [ebp - 0x3fb4]
mov ecx, dword [ebp - 0x3aac]
add ecx, dword [eax + edx + 0x68]
mov dword [ebp - 0x3900], ecx
jmp 0x41d505
jmp 0x41d472
lea ecx, [ebp - 0x3ac8]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4310]
call fcn.00401c80
mov byte [ebp - 4], 0x69
lea edx, [ebp - 0x4310]
push edx
lea eax, [ebp - 0x432c]
push eax
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x4554], eax
mov ecx, dword [ebp - 0x4554]
mov dword [ebp - 0x4558], ecx
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0x4558]
push edx
lea ecx, [ebp - 0x3648]
call fcn.004039e0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x432c]
call fcn.00401c50
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x4310]
call fcn.00401cc0
lea ecx, [ebp - 0x3888]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x4348]
call fcn.00401c80
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x4348]
push eax
lea ecx, [ebp - 0x4364]
push ecx
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x455c], eax
mov edx, dword [ebp - 0x455c]
mov dword [ebp - 0x4560], edx
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0x4560]
push eax
lea ecx, [ebp - 0x3b38]
call fcn.004039e0
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x4364]
call fcn.00401c50
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x4348]
call fcn.00401cc0
lea ecx, [ebp - 0x3900]
push ecx
lea edx, [ebp - 0x3aac]
push edx
lea ecx, [ebp - 0x3b38]
call fcn.00403a00
push eax
lea ecx, [ebp - 0x3648]
call fcn.00403a00
push eax
call fcn.00410940
mov ecx, eax
call fcn.0040a1d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4368], esp
lea eax, [ebp - 0x34b0]
push eax
call fcn.00403a30
mov dword [ebp - 0x4564], eax
mov ecx, dword [ebp - 0x4564]
mov dword [ebp - 0x4568], ecx
mov byte [ebp - 4], 0x6d
lea edx, [ebp - 0x3b1c]
push edx
call fcn.00410940
mov byte [ebp - 4], 0x65
mov ecx, eax
call fcn.00409d80
mov dword [ebp - 0x456c], eax
mov byte [ebp - 4], 0x6e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x436c], esp
lea eax, [ebp - 0x34b0]
push eax
call fcn.00403a30
mov dword [ebp - 0x4570], eax
mov ecx, dword [ebp - 0x4570]
mov dword [ebp - 0x4574], ecx
mov byte [ebp - 4], 0x6f
lea edx, [ebp - 0x361c]
push edx
call fcn.00410940
mov byte [ebp - 4], 0x6e
mov ecx, eax
call fcn.00409e60
mov dword [ebp - 0x4578], eax
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x2618]
push eax
call fcn.00410940
mov ecx, eax
call fcn.00409c30
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x3ac8]
push ecx
lea ecx, [ebp - 0x34cc]
call fcn.00404390
push 0x513378
lea ecx, [ebp - 0x34cc]
call fcn.00403ab0
push str.UpInstallData
lea edx, [ebp - 0x386c]
push edx
call fcn.0046439f
add esp, 8
lea ecx, [ebp - 0x34b0]
call fcn.00401cf0
push eax
lea eax, [ebp - 0x386c]
push eax
call fcn.00464375
add esp, 8
push 0x5133a0
lea ecx, [ebp - 0x386c]
push ecx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x38c0]
call fcn.00401cf0
push eax
lea edx, [ebp - 0x386c]
push edx
call fcn.00464375
add esp, 8
push 0x5133a4
lea eax, [ebp - 0x386c]
push eax
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x2618]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x386c]
push ecx
call fcn.00464375
add esp, 8
push 0x5133a8
lea edx, [ebp - 0x386c]
push edx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x3ae4]
call fcn.00401cf0
push eax
lea eax, [ebp - 0x386c]
push eax
call fcn.00464375
add esp, 8
push 0x5133ac
lea ecx, [ebp - 0x386c]
push ecx
call fcn.00464375
add esp, 8
lea ecx, [ebp - 0x25fc]
call fcn.00401cf0
push eax
lea edx, [ebp - 0x386c]
push edx
call fcn.00464375
add esp, 8
lea eax, [ebp - 0x386c]
push eax
lea ecx, [ebp - 0x34cc]
call fcn.00403ab0
lea ecx, [ebp - 0x34cc]
call fcn.00401cf0
push eax
call fcn.00438cd0
add esp, 4
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41d833
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00410940
mov ecx, eax
call fcn.0040c020
movzx ecx, al
test ecx, ecx
je 0x41d86e
lea ecx, [ebp - 0x3478]
call fcn.00401cf0
push eax
call fcn.0043a300
add esp, 4
lea ecx, [ebp - 0x34cc]
call fcn.00401cf0
push eax
call fcn.0043a300
add esp, 4
mov edx, dword [ebp - 0x43c8]
mov byte [edx + 0x30], 1
mov byte [ebp - 0x35dc], 0
push 0x103
push 0
lea eax, [ebp - 0x35db]
push eax
call fcn.00462540
add esp, 0xc
mov byte [ebp - 0x3a2c], 0
push 0x103
push 0
lea ecx, [ebp - 0x3a2b]
push ecx
call fcn.00462540
add esp, 0xc
push 0
call fcn.0041de50
add esp, 4
mov dword [ebp - 0x3aa4], eax
mov dword [ebp - 0x3aa0], edx
lea edx, [ebp - 0x3aa4]
push edx
call fcn.0041de30
add esp, 4
mov dword [ebp - 0x3a9c], eax
mov byte [ebp - 0x25dc], 0
push 0x63
push 0
lea eax, [ebp - 0x25db]
push eax
call fcn.00462540
add esp, 0xc
mov ecx, dword [ebp - 0x3a9c]
push ecx
push 0x5133b0
push 0x64
lea edx, [ebp - 0x25dc]
push edx
call fcn.00466661
add esp, 0x10
lea eax, [ebp - 0x25dc]
push eax
lea ecx, [ebp - 0x2550]
call fcn.00401c10
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x2550]
call fcn.00420d30
cmp eax, 8
jb 0x41d98d
push 6
push 2
lea ecx, [ebp - 0x4388]
push ecx
lea ecx, [ebp - 0x2550]
call fcn.00420d50
mov dword [ebp - 0x457c], eax
mov edx, dword [ebp - 0x457c]
mov dword [ebp - 0x4580], edx
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0x4580]
push eax
mov ecx, dword [ebp - 0x43c8]
add ecx, 0x114
call fcn.004039e0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x4388]
call fcn.00401c50
push 0x20
push 0
mov ecx, dword [ebp - 0x43c8]
add ecx, 0xf1
push ecx
call fcn.00462540
add esp, 0xc
mov edx, dword [ebp - 0x3aa0]
push edx
mov eax, dword [ebp - 0x3aa4]
push eax
push 0x5133c0
lea ecx, [ebp - 0x35dc]
push ecx
call fcn.00465a6f
add esp, 0x10
lea ecx, [ebp - 0x34b0]
call fcn.00401cf0
push eax
lea ecx, [ebp - 0x43a4]
call fcn.00401c80
mov byte [ebp - 4], 0x74
lea edx, [ebp - 0x43a4]
push edx
lea eax, [ebp - 0x43c0]
push eax
call fcn.0043a630
add esp, 8
mov dword [ebp - 0x4584], eax
mov ecx, dword [ebp - 0x4584]
mov dword [ebp - 0x4588], ecx
mov byte [ebp - 4], 0x75
mov edx, dword [ebp - 0x4588]
push edx
lea eax, [ebp - 0x3a2c]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.00420410
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x43c0]
call fcn.00401c50
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x43a4]
call fcn.00401cc0
mov ecx, dword [ebp - 0x43c8]
add ecx, 0xf1
push ecx
call fcn.00465a6a
add esp, 4
mov dword [ebp - 0x3a7c], eax
mov edx, dword [ebp - 0x3a7c]
add edx, 1
mov dword [ebp - 0x3a7c], edx
push 0xa
lea eax, [ebp - 0x3a2c]
push eax
mov ecx, dword [ebp - 0x3a7c]
push ecx
call fcn.004ee339
add esp, 0xc
push 0x20
push 0
mov edx, dword [ebp - 0x43c8]
add edx, 0xf1
push edx
call fcn.00462540
add esp, 0xc
lea eax, [ebp - 0x3a2c]
push eax
lea ecx, [ebp - 0x35dc]
push ecx
mov edx, dword [ebp - 0x2530]
push edx
mov eax, dword [ebp - 0x2534]
push eax
mov ecx, dword [ebp - 0x43c8]
call fcn.0041fe90
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x2550]
call fcn.00401c50
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x2618]
call fcn.00401cc0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x361c]
call fcn.00401cc0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x3b1c]
call fcn.00401cc0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x34cc]
call fcn.00401cc0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x38e0]
call fcn.00401cc0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3600]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b38]
call fcn.00401c50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3648]
call fcn.00401c50
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2570]
call fcn.00401c50
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3ac8]
call fcn.00401cc0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3888]
call fcn.00401cc0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3478]
call fcn.00401cc0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2a48]
call fcn.00401cc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2a64]
call fcn.00401cc0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3b54]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2a80]
call fcn.00401cc0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x391c]
call fcn.00401cc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a98]
call fcn.00401cc0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x25fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3ae4]
call fcn.00401cc0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b70]
call fcn.00401cc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3b00]
call fcn.00401cc0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x38fc]
call fcn.00401cc0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3664]
call fcn.00401cc0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3494]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x38c0]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34b0]
call fcn.00401cc0
jmp 0x41b7d3
jmp 0x41b77b
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x76
push 0x5133c4
lea ecx, [ebp - 0x6a8]
call fcn.00403ab0
lea edx, [ebp - 0x6a8]
push edx
lea ecx, [ebp - 0x684]
call fcn.00403a30
mov byte [ebp - 4], 0x77
push 0x5133d0
lea ecx, [ebp - 0x6a8]
call fcn.00403ab0
lea ecx, [ebp - 0x6a8]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41dd02
lea ecx, [ebp - 0x6a8]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x43c8]
movzx ecx, byte [eax + 0x30]
test ecx, ecx
je 0x41dd31
mov ecx, dword [ebp - 0x43c8]
call fcn.0041f970
mov ecx, dword [ebp - 0x43c8]
call fcn.0041f3d0
mov ecx, dword [ebp - 0x43c8]
call fcn.0041e470
push 1
mov ecx, dword [ebp + 0x34]
call fcn.00433c10
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x43c4], esp
push 0x5133e8
call fcn.00401c80
mov dword [ebp - 0x458c], eax
mov ecx, dword [ebp + 0x34]
call fcn.00433b70
mov ecx, dword [ebp - 0x43c8]
call fcn.0041df10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x2c]
push edx
call fcn.00410940
mov ecx, eax
call fcn.00409f40
mov byte [ebp - 4], 0x78
push 0x5133f0
lea ecx, [ebp - 0x2c]
call fcn.00403ab0
push 0x5133fc
lea ecx, [ebp - 0x2c]
call fcn.00403ab0
lea ecx, [ebp - 0x2c]
call fcn.00401cf0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41ddc3
lea ecx, [ebp - 0x2c]
call fcn.00401cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x2c]
call fcn.00401cc0
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x684]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6a8]
call fcn.00401cc0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x250]
call fcn.00401cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00401cc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046252a
mov esp, ebp
pop ebp
ret 0x30