Function at 0x41d980
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2168
call fcn.0043c5e0
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x530]
mov esi, 0x10
lea edi, [esp + 0x53a]
lea ebx, [esp + 0x54a]
mov dword [esp + 0x504], eax
mov eax, 0x28
mov dword [esp + 0x500], eax
lea eax, [esp + 0x55a]
mov dword [esp + 0x4fc], eax
mov eax, 0xc8
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0x582]
mov dword [esp + 0x4f4], eax
mov eax, 0x20a
mov dword [esp + 0x4f0], eax
lea eax, [esp + 0x64a]
mov dword [esp + 0x4ec], eax
lea eax, [esp + 0xa5e]
mov dword [esp + 0x4e8], eax
lea eax, [esp + 0xc68]
mov dword [esp + 0x4e4], eax
lea eax, [esp + 0xe72]
mov dword [esp + 0x4e0], eax
lea eax, [esp + 0x107c]
mov dword [esp + 0x4dc], eax
lea eax, [esp + 0x1286]
mov dword [esp + 0x4d8], eax
lea eax, [esp + 0x1490]
mov dword [esp + 0x4d4], eax
lea eax, [esp + 0x169a]
mov dword [esp + 0x4d0], eax
lea eax, [esp + 0x18a4]
mov dword [esp + 0x4cc], eax
lea eax, [esp + 0x1aae]
mov dword [esp + 0x4c8], eax
lea eax, [esp + 0x1cb8]
mov dword [esp + 0x4c4], eax
lea eax, [esp + 0x1ec2]
mov dword [esp + 0x4c0], eax
mov eax, 0x3c
mov dword [esp + 0x4bc], eax
lea eax, [esp + 0x2108]
mov dword [esp + 0x214c], 0
mov dword [esp + 0x2148], 0
mov dword [esp + 0x2144], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x4b8], ebx
mov dword [esp + 0x4b4], ecx
mov dword [esp + 0x4b0], edx
mov dword [esp + 0x4ac], esi
mov dword [esp + 0x4a8], edi
call fcn.0043c610
mov dword [esp + 0x20cc], 0
mov eax, dword [esp + 0x4c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4c4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4c8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4cc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4d4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4d8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4e8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4ec]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0043c610
mov eax, dword [esp + 0x4f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0043c610
mov eax, dword [esp + 0x4fc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0043c610
mov eax, dword [esp + 0x4b8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0043c610
mov eax, dword [esp + 0x4a8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0043c610
mov eax, dword [esp + 0x4b0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0043c610
mov dword [esp + 0x514], 0
mov dword [esp + 0x510], 0xffffffff
call fcn.0041d140
mov dword [esp + 0x2154], eax
mov dword [esp + 0x508], 0x3c319c90
mov eax, dword [esp + 0x508]
mov ecx, eax
sub ecx, 0x84ea420f
mov dword [esp + 0x4a4], eax
mov dword [esp + 0x4a0], ecx
jg 0x41dda5
jmp 0x41dd87
mov eax, dword [esp + 0x4a4]
sub eax, 0x8056fe62
mov dword [esp + 0x49c], eax
je 0x420c57
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x875fbc10
mov dword [esp + 0x498], eax
jg 0x41dde1
jmp 0x41ddc3
mov eax, dword [esp + 0x4a4]
sub eax, 0x84ea4210
mov dword [esp + 0x494], eax
je 0x41f0c3
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x7dfb0ee9
mov dword [esp + 0x490], eax
jg 0x41ee49
jmp 0x41ddff
mov eax, dword [esp + 0x4a4]
sub eax, 0x7d1a7cc1
mov dword [esp + 0x48c], eax
jg 0x41ee2b
jmp 0x41de1d
mov eax, dword [esp + 0x4a4]
sub eax, 0x7ad124d9
mov dword [esp + 0x488], eax
jg 0x41ee0d
jmp 0x41de3b
mov eax, dword [esp + 0x4a4]
sub eax, 0x7626d9e8
mov dword [esp + 0x484], eax
jg 0x41edef
jmp 0x41de59
mov eax, dword [esp + 0x4a4]
sub eax, 0x747f8419
mov dword [esp + 0x480], eax
jg 0x41edd1
jmp 0x41de77
mov eax, dword [esp + 0x4a4]
sub eax, 0x72af7136
mov dword [esp + 0x47c], eax
jg 0x41edb3
jmp 0x41de95
mov eax, dword [esp + 0x4a4]
sub eax, 0x7192610f
mov dword [esp + 0x478], eax
jg 0x41ed95
jmp 0x41deb3
mov eax, dword [esp + 0x4a4]
sub eax, 0x70a5ecff
mov dword [esp + 0x474], eax
jg 0x41ed77
jmp 0x41ded1
mov eax, dword [esp + 0x4a4]
sub eax, 0x6e857ccf
mov dword [esp + 0x470], eax
jg 0x41ed59
jmp 0x41deef
mov eax, dword [esp + 0x4a4]
sub eax, 0x6ae0819a
mov dword [esp + 0x46c], eax
jg 0x41ed3b
jmp 0x41df0d
mov eax, dword [esp + 0x4a4]
sub eax, 0x6974f5ad
mov dword [esp + 0x468], eax
jg 0x41ed1d
jmp 0x41df2b
mov eax, dword [esp + 0x4a4]
sub eax, 0x87975eb1
mov dword [esp + 0x464], eax
jg 0x41df67
jmp 0x41df49
mov eax, dword [esp + 0x4a4]
sub eax, 0x875fbc11
mov dword [esp + 0x460], eax
je 0x420639
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x8a27ad27
mov dword [esp + 0x45c], eax
jg 0x41dfa3
jmp 0x41df85
mov eax, dword [esp + 0x4a4]
sub eax, 0x87975eb2
mov dword [esp + 0x458], eax
je 0x41f20f
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x8b5dd7bf
mov dword [esp + 0x454], eax
jg 0x41dfdf
jmp 0x41dfc1
mov eax, dword [esp + 0x4a4]
sub eax, 0x8a27ad28
mov dword [esp + 0x450], eax
je 0x420cb6
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x8e9d5fd8
mov dword [esp + 0x44c], eax
jg 0x41e01b
jmp 0x41dffd
mov eax, dword [esp + 0x4a4]
sub eax, 0x8b5dd7c0
mov dword [esp + 0x448], eax
je 0x420f21
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x91fdffa5
mov dword [esp + 0x444], eax
jg 0x41e057
jmp 0x41e039
mov eax, dword [esp + 0x4a4]
sub eax, 0x8e9d5fd9
mov dword [esp + 0x440], eax
je 0x421182
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x973abd50
mov dword [esp + 0x43c], eax
jg 0x41e093
jmp 0x41e075
mov eax, dword [esp + 0x4a4]
sub eax, 0x91fdffa6
mov dword [esp + 0x438], eax
je 0x420aa1
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x97bc0e27
mov dword [esp + 0x434], eax
jg 0x41e0cf
jmp 0x41e0b1
mov eax, dword [esp + 0x4a4]
sub eax, 0x973abd51
mov dword [esp + 0x430], eax
je 0x41f0fd
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x9d47f207
mov dword [esp + 0x42c], eax
jg 0x41e10b
jmp 0x41e0ed
mov eax, dword [esp + 0x4a4]
sub eax, 0x97bc0e28
mov dword [esp + 0x428], eax
je 0x420629
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xa70cd09f
mov dword [esp + 0x424], eax
jg 0x41e147
jmp 0x41e129
mov eax, dword [esp + 0x4a4]
sub eax, 0x9d47f208
mov dword [esp + 0x420], eax
je 0x41ef1a
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xa973b6a6
mov dword [esp + 0x41c], eax
jg 0x41e183
jmp 0x41e165
mov eax, dword [esp + 0x4a4]
sub eax, 0xa70cd0a0
mov dword [esp + 0x418], eax
je 0x420cea
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x68dd52bd
mov dword [esp + 0x414], eax
jg 0x41ecff
jmp 0x41e1a1
mov eax, dword [esp + 0x4a4]
sub eax, 0x68d08c1e
mov dword [esp + 0x410], eax
jg 0x41ece1
jmp 0x41e1bf
mov eax, dword [esp + 0x4a4]
sub eax, 0x681bce36
mov dword [esp + 0x40c], eax
jg 0x41ecc3
jmp 0x41e1dd
mov eax, dword [esp + 0x4a4]
sub eax, 0x6782bb48
mov dword [esp + 0x408], eax
jg 0x41eca5
jmp 0x41e1fb
mov eax, dword [esp + 0x4a4]
sub eax, 0x63d1c78e
mov dword [esp + 0x404], eax
jg 0x41ec87
jmp 0x41e219
mov eax, dword [esp + 0x4a4]
sub eax, 0x630ae585
mov dword [esp + 0x400], eax
jg 0x41ec69
jmp 0x41e237
mov eax, dword [esp + 0x4a4]
sub eax, 0x61e1524e
mov dword [esp + 0x3fc], eax
jg 0x41ec4b
jmp 0x41e255
mov eax, dword [esp + 0x4a4]
sub eax, 0x585c407e
mov dword [esp + 0x3f8], eax
jg 0x41ec2d
jmp 0x41e273
mov eax, dword [esp + 0x4a4]
sub eax, 0x525f0e31
mov dword [esp + 0x3f4], eax
jg 0x41ec0f
jmp 0x41e291
mov eax, dword [esp + 0x4a4]
sub eax, 0x4d5b1062
mov dword [esp + 0x3f0], eax
jg 0x41ebf1
jmp 0x41e2af
mov eax, dword [esp + 0x4a4]
sub eax, 0x474fcc34
mov dword [esp + 0x3ec], eax
jg 0x41ebd3
jmp 0x41e2cd
mov eax, dword [esp + 0x4a4]
sub eax, 0x46d5c413
mov dword [esp + 0x3e8], eax
jg 0x41ebb5
jmp 0x41e2eb
mov eax, dword [esp + 0x4a4]
sub eax, 0x3d711008
mov dword [esp + 0x3e4], eax
jg 0x41eb97
jmp 0x41e309
mov eax, dword [esp + 0x4a4]
sub eax, 0x3cd60c05
mov dword [esp + 0x3e0], eax
jg 0x41eb79
jmp 0x41e327
mov eax, dword [esp + 0x4a4]
sub eax, 0x3c319c8f
mov dword [esp + 0x3dc], eax
jg 0x41eb5b
jmp 0x41e345
mov eax, dword [esp + 0x4a4]
sub eax, 0x39cce7da
mov dword [esp + 0x3d8], eax
jg 0x41eb3d
jmp 0x41e363
mov eax, dword [esp + 0x4a4]
sub eax, 0x3636e366
mov dword [esp + 0x3d4], eax
jg 0x41eb1f
jmp 0x41e381
mov eax, dword [esp + 0x4a4]
sub eax, 0x32969981
mov dword [esp + 0x3d0], eax
jg 0x41eb01
jmp 0x41e39f
mov eax, dword [esp + 0x4a4]
sub eax, 0x326c1a1d
mov dword [esp + 0x3cc], eax
jg 0x41eae3
jmp 0x41e3bd
mov eax, dword [esp + 0x4a4]
sub eax, 0x212c1989
mov dword [esp + 0x3c8], eax
jg 0x41eac5
jmp 0x41e3db
mov eax, dword [esp + 0x4a4]
sub eax, 0x1db0f9ad
mov dword [esp + 0x3c4], eax
jg 0x41eaa7
jmp 0x41e3f9
mov eax, dword [esp + 0x4a4]
sub eax, 0x1c79b4f5
mov dword [esp + 0x3c0], eax
jg 0x41ea89
jmp 0x41e417
mov eax, dword [esp + 0x4a4]
sub eax, 0x1b42fe82
mov dword [esp + 0x3bc], eax
jg 0x41ea6b
jmp 0x41e435
mov eax, dword [esp + 0x4a4]
sub eax, 0x13511230
mov dword [esp + 0x3b8], eax
jg 0x41ea4d
jmp 0x41e453
mov eax, dword [esp + 0x4a4]
sub eax, 0x119cebd8
mov dword [esp + 0x3b4], eax
jg 0x41ea2f
jmp 0x41e471
mov eax, dword [esp + 0x4a4]
sub eax, 0x9fd007d
mov dword [esp + 0x3b0], eax
jg 0x41ea11
jmp 0x41e48f
mov eax, dword [esp + 0x4a4]
sub eax, 0x78a8940
mov dword [esp + 0x3ac], eax
jg 0x41e9f3
jmp 0x41e4ad
mov eax, dword [esp + 0x4a4]
sub eax, 0x5c2d2db
mov dword [esp + 0x3a8], eax
jg 0x41e9d5
jmp 0x41e4cb
mov eax, dword [esp + 0x4a4]
sub eax, 0x401f167
mov dword [esp + 0x3a4], eax
jg 0x41e9b7
jmp 0x41e4e9
mov eax, dword [esp + 0x4a4]
sub eax, 0x157855
mov dword [esp + 0x3a0], eax
jg 0x41e999
jmp 0x41e507
mov eax, dword [esp + 0x4a4]
sub eax, 0xfc8fda32
mov dword [esp + 0x39c], eax
jg 0x41e97b
jmp 0x41e525
mov eax, dword [esp + 0x4a4]
sub eax, 0xf776d566
mov dword [esp + 0x398], eax
jg 0x41e95d
jmp 0x41e543
mov eax, dword [esp + 0x4a4]
sub eax, 0xed6304e0
mov dword [esp + 0x394], eax
jg 0x41e93f
jmp 0x41e561
mov eax, dword [esp + 0x4a4]
sub eax, 0xe783170d
mov dword [esp + 0x390], eax
jg 0x41e921
jmp 0x41e57f
mov eax, dword [esp + 0x4a4]
sub eax, 0xde2b8a37
mov dword [esp + 0x38c], eax
jg 0x41e903
jmp 0x41e59d
mov eax, dword [esp + 0x4a4]
sub eax, 0xdddde073
mov dword [esp + 0x388], eax
jg 0x41e8e5
jmp 0x41e5bb
mov eax, dword [esp + 0x4a4]
sub eax, 0xdd47ebd9
mov dword [esp + 0x384], eax
jg 0x41e8c7
jmp 0x41e5d9
mov eax, dword [esp + 0x4a4]
sub eax, 0xdc81ddfd
mov dword [esp + 0x380], eax
jg 0x41e8a9
jmp 0x41e5f7
mov eax, dword [esp + 0x4a4]
sub eax, 0xdaf3a3f9
mov dword [esp + 0x37c], eax
jg 0x41e88b
jmp 0x41e615
mov eax, dword [esp + 0x4a4]
sub eax, 0xd78e8b9b
mov dword [esp + 0x378], eax
jg 0x41e86d
jmp 0x41e633
mov eax, dword [esp + 0x4a4]
sub eax, 0xd591efc6
mov dword [esp + 0x374], eax
jg 0x41e84f
jmp 0x41e651
mov eax, dword [esp + 0x4a4]
sub eax, 0xd3a0ea29
mov dword [esp + 0x370], eax
jg 0x41e831
jmp 0x41e66f
mov eax, dword [esp + 0x4a4]
sub eax, 0xcdd59683
mov dword [esp + 0x36c], eax
jg 0x41e813
jmp 0x41e68d
mov eax, dword [esp + 0x4a4]
sub eax, 0xccdac5cc
mov dword [esp + 0x368], eax
jg 0x41e7f5
jmp 0x41e6ab
mov eax, dword [esp + 0x4a4]
sub eax, 0xcc36d7ff
mov dword [esp + 0x364], eax
jg 0x41e7d7
jmp 0x41e6c9
mov eax, dword [esp + 0x4a4]
sub eax, 0xc584417b
mov dword [esp + 0x360], eax
jg 0x41e7b9
jmp 0x41e6e7
mov eax, dword [esp + 0x4a4]
sub eax, 0xbc2695a9
mov dword [esp + 0x35c], eax
jg 0x41e79b
jmp 0x41e705
mov eax, dword [esp + 0x4a4]
sub eax, 0xb492b151
mov dword [esp + 0x358], eax
jg 0x41e77d
mov eax, dword [esp + 0x4a4]
sub eax, 0xbc2695aa
mov dword [esp + 0x344], eax
je 0x41f5f3
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xc584417c
mov dword [esp + 0x340], eax
je 0x420a08
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xcc36d800
mov dword [esp + 0x33c], eax
je 0x41f461
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xccdac5cd
mov dword [esp + 0x338], eax
je 0x420be0
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xcdd59684
mov dword [esp + 0x334], eax
je 0x4211ba
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xd3a0ea2a
mov dword [esp + 0x330], eax
je 0x420590
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xd591efc7
mov dword [esp + 0x32c], eax
je 0x420c8c
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xd78e8b9c
mov dword [esp + 0x328], eax
je 0x41f02b
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xdaf3a3fa
mov dword [esp + 0x324], eax
je 0x420d7f
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xdc81ddfe
mov dword [esp + 0x320], eax
je 0x4205dc
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xdd47ebda
mov dword [esp + 0x31c], eax
je 0x42086c
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xdddde074
mov dword [esp + 0x318], eax
je 0x41f050
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xde2b8a38
mov dword [esp + 0x314], eax
je 0x4211e3
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xe783170e
mov dword [esp + 0x310], eax
je 0x420f6b
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xed6304e1
mov dword [esp + 0x30c], eax
je 0x41f120
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xf776d567
mov dword [esp + 0x308], eax
je 0x41f3e4
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0xfc8fda33
mov dword [esp + 0x304], eax
je 0x4208b9
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x157856
mov dword [esp + 0x300], eax
je 0x420923
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x401f168
mov dword [esp + 0x2fc], eax
je 0x41f008
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x5c2d2dc
mov dword [esp + 0x2f8], eax
je 0x420bf0
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x78a8941
mov dword [esp + 0x2f4], eax
je 0x420fb3
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x9fd007e
mov dword [esp + 0x2f0], eax
je 0x41f43e
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x119cebd9
mov dword [esp + 0x2ec], eax
je 0x420d8e
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x13511231
mov dword [esp + 0x2e8], eax
je 0x420e84
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x1b42fe83
mov dword [esp + 0x2e4], eax
je 0x41f0a8
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x1c79b4f6
mov dword [esp + 0x2e0], eax
je 0x4205b9
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x1db0f9ae
mov dword [esp + 0x2dc], eax
je 0x42095e
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x212c198a
mov dword [esp + 0x2d8], eax
je 0x41f5e2
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x326c1a1e
mov dword [esp + 0x2d4], eax
je 0x41f3f5
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x32969982
mov dword [esp + 0x2d0], eax
je 0x41eead
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x3636e367
mov dword [esp + 0x2cc], eax
je 0x41f0d4
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x39cce7db
mov dword [esp + 0x2c8], eax
je 0x420d13
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x3c319c90
mov dword [esp + 0x2c4], eax
je 0x41ee6c
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x3cd60c06
mov dword [esp + 0x2c0], eax
je 0x41f13b
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x3d711009
mov dword [esp + 0x2bc], eax
je 0x42087d
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x46d5c414
mov dword [esp + 0x2b8], eax
je 0x420d4f
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x474fcc35
mov dword [esp + 0x2b4], eax
je 0x420f7b
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x4d5b1063
mov dword [esp + 0x2b0], eax
je 0x4205ed
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x525f0e32
mov dword [esp + 0x2ac], eax
je 0x420cc6
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x585c407f
mov dword [esp + 0x2a8], eax
je 0x4208c9
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x61e1524f
mov dword [esp + 0x2a4], eax
je 0x41ef3d
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x630ae586
mov dword [esp + 0x2a0], eax
je 0x41eebe
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x63d1c78f
mov dword [esp + 0x29c], eax
je 0x42064a
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x6782bb49
mov dword [esp + 0x298], eax
je 0x420a43
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x681bce37
mov dword [esp + 0x294], eax
je 0x41f471
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x68d08c1f
mov dword [esp + 0x290], eax
je 0x41ef4e
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x68dd52be
mov dword [esp + 0x28c], eax
je 0x41f07c
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x6974f5ae
mov dword [esp + 0x288], eax
je 0x41f1ff
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x6ae0819b
mov dword [esp + 0x284], eax
je 0x42057f
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x6e857cd0
mov dword [esp + 0x280], eax
je 0x420d60
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x70a5ed00
mov dword [esp + 0x27c], eax
je 0x41f14c
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x71926110
mov dword [esp + 0x278], eax
je 0x420538
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x72af7137
mov dword [esp + 0x274], eax
je 0x41ee92
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x747f841a
mov dword [esp + 0x270], eax
je 0x420c7b
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x7626d9e9
mov dword [esp + 0x26c], eax
je 0x420e74
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x7ad124da
mov dword [esp + 0x268], eax
je 0x420849
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x7d1a7cc2
mov dword [esp + 0x264], eax
je 0x420ab1
jmp 0x41ee67
mov eax, dword [esp + 0x4a4]
sub eax, 0x7dfb0eea
mov dword [esp + 0x260], eax
je 0x4204fd
jmp 0x41ee67
jmp 0x4211ee
mov eax, 0x32969982
mov ecx, 0x72af7137
mov edx, dword [esp + 0x2154]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x2150], 0xffffffff
mov dword [esp + 0x508], 0x46d5c414
jmp 0x4211ee
mov eax, 0x630ae586
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x104
lea ecx, [esp + 0xc68]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x25c], eax
call fcn.00407f00
lea ecx, [esp + 0x514]
mov dword [esp + 0x52c], eax
mov dword [esp], ecx
call fcn.0041b690
mov ecx, 0x9d47f208
cmp eax, 0
setne dl
and dl, 1
mov byte [esp + 0x2159], dl
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, 0x84ea4210
mov ecx, 0x61e1524f
mov dl, byte [esp + 0x2159]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x68d08c1f
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x104
lea ecx, [esp + 0x1490]
lea edx, [esp + 0xc68]
mov esi, dword [esp + 0x52c]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x258], eax
call fcn.00408860
lea ecx, [esp + 0x1490]
mov dword [esp + 0x518], eax
mov eax, dword [esp + 0x518]
add eax, 0x4dae85eb
sub eax, 4
sub eax, 0x4dae85eb
mov word [esp + eax*2 + 0x1490], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x401f168
mov dword [esp + 0x2148], eax
cmp dword [esp + 0x2148], 0
setne bl
and bl, 1
mov byte [esp + 0x215a], bl
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, 0x1b42fe83
mov ecx, 0xd78e8b9c
mov dl, byte [esp + 0x215a]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x68dd52be
mov edx, 0xdddde074
cmp eax, 0xb7
cmove ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, dword [esp + 0x2148]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x508], 0x68dd52be
mov dword [esp + 0x254], eax
jmp 0x4211ee
mov eax, dword [esp + 0x2148]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x508], 0x1b42fe83
mov dword [esp + 0x250], eax
jmp 0x4211ee
mov dword [esp + 0x2150], 0
mov dword [esp + 0x508], 0x46d5c414
jmp 0x4211ee
mov eax, 0x3636e367
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x973abd51
cmp dword [esp + 0x514], 6
setb cl
and cl, 1
mov byte [esp + 0x215b], cl
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x3cd60c06
mov ecx, 0xed6304e1
mov dl, byte [esp + 0x215b]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x2150], 0xffffffff
mov dword [esp + 0x508], 0x46d5c414
jmp 0x4211ee
mov eax, 0x70a5ed00
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, esp
lea ecx, [esp + 0xa5e]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc68]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1aae]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x24c], eax
mov dword [esp + 0x248], edx
call fcn.0040a280
mov ecx, esp
mov edx, dword [esp + 0x248]
mov dword [ecx], edx
mov dword [esp + 0x244], eax
call fcn.00409070
mov dword [esp + 0x520], eax
mov eax, esp
mov dword [eax], 0
call fcn.00421200
mov dword [esp + 0x240], edx
mov dword [esp + 0x23c], eax
call fcn.00405e00
mov ecx, dword [esp + 0x23c]
imul ecx, eax
mov dword [esp], ecx
call fcn.0043cf56
mov eax, 0x6974f5ae
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x87975eb2
jmp 0x4211ee
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1490]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x238], eax
mov dword [esp + 0x234], ecx
call fcn.00407df0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1286]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x230], eax
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x228], edx
call fcn.00407df0
mov ecx, 0x104
lea edx, [esp + 0x1490]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x224], eax
mov dword [esp + 0x220], ecx
call fcn.0040b680
lea eax, [esp + 0x1490]
mov dword [esp], eax
call fcn.00409070
mov ecx, 0x104
lea edx, [esp + 0x1286]
lea esi, [esp + 0x1aae]
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0x520]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x21c], ecx
call fcn.00408300
lea ecx, [esp + 0x1286]
mov edx, 0x104
lea esi, [esp + 0x1490]
mov edi, dword [esp + 0x50c]
mov ebx, dword [esp + 0x520]
sub edx, 0x90c14b66
sub edx, ebx
add edx, 0x90c14b66
mov ebx, dword [esp + 0x520]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x218], eax
call fcn.00408300
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1286]
mov edi, 0
mov ebx, 0xce25a50a
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x520]
add ebx, 0x104
sub ebx, eax
sub ebx, 0xce25a50a
mov eax, dword [esp + 0x50c]
sub edi, eax
add ebx, edi
mov eax, dword [esp + 0x520]
shl eax, 1
add esi, eax
mov eax, dword [esp + 0x50c]
shl eax, 1
add esi, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x210], edx
call fcn.00408300
mov dword [esp + 0x508], 0xf776d567
mov dword [esp + 0x20c], eax
jmp 0x4211ee
mov eax, 0x326c1a1e
mov dword [esp + 0x508], eax
jmp 0x4211ee
lea eax, [esp + 0xa5e]
lea ecx, [esp + 0x1286]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0x9fd007e
cmp eax, 0
sete bl
and bl, 1
mov byte [esp + 0x215c], bl
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, 0xcc36d800
mov ecx, 0x87975eb2
mov dl, byte [esp + 0x215c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x681bce37
jmp 0x4211ee
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x18a4]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x208], eax
mov dword [esp + 0x204], ecx
call fcn.00407df0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x169a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x200], eax
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x1f8], edx
call fcn.00407df0
mov ecx, 0x104
lea edx, [esp + 0x18a4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f0], ecx
call fcn.0040b680
mov eax, 0x104
lea ecx, [esp + 0x169a]
lea edx, [esp + 0x1aae]
mov esi, dword [esp + 0x520]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1ec], eax
call fcn.00408300
lea ecx, [esp + 0x18a4]
mov dword [esp], ecx
mov dword [esp + 0x1e8], eax
call fcn.00409070
lea ecx, [esp + 0x169a]
mov edx, 0x104
lea esi, [esp + 0x18a4]
mov edi, dword [esp + 0x520]
sub edx, 0x1a6aac
sub edx, edi
add edx, 0x1a6aac
mov edi, dword [esp + 0x520]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.00408300
lea ecx, [esp + 0x169a]
mov edx, dword [0x4d85f4]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x1e4], eax
call edx
sub esp, 8
mov dword [esp + 0x2144], eax
mov dword [esp + 0x508], 0x212c198a
jmp 0x4211ee
mov eax, 0xbc2695aa
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0xb492b152
cmp dword [esp + 0x2144], 0
sete cl
and cl, 1
mov byte [esp + 0x215d], cl
mov dword [esp + 0x508], eax
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0xdc], eax
call fcn.0041b2f0
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, dword [esp + 0x214c]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0x875fbc11
mov edx, 0x6ae0819b
mov dword [esp + 0x51c], eax
cmp dword [esp + 0x51c], 0
cmovne ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, 0xd3a0ea2a
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x1c79b4f6
cmp dword [esp + 0x51c], 0x80
setne cl
and cl, 1
mov byte [esp + 0x215e], cl
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x875fbc11
mov ecx, 0xdc81ddfe
mov dl, byte [esp + 0x215e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x4d5b1063
mov dword [esp + 0x508], eax
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0xd8], eax
call fcn.0041b2f0
mov eax, 0x97bc0e28
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, 0x63d1c78f
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x854]
lea esi, [0x447620]
mov dword [esp + 0x2108], 0x3c
mov dword [esp + 0x210c], 0x40
mov dword [esp + 0x2110], 0
mov dword [esp + 0x2114], esi
mov dword [esp + 0x2120], 0
mov dword [esp + 0x2128], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd0], ecx
call fcn.00407df0
mov ecx, 0x104
lea edx, [0x44762a]
mov esi, 3
lea edi, [esp + 0x854]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0xcc], eax
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xc4], esi
call fcn.00408300
lea ecx, [esp + 0x169a]
mov dword [esp], ecx
mov dword [esp + 0xc0], eax
call fcn.00409070
mov ecx, 0x101
lea edx, [esp + 0x854]
lea esi, [esp + 0x169a]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xbc], ecx
call fcn.00408300
lea ecx, [esp + 0x1cb8]
mov edx, 0
mov esi, dword [0x492170]
movzx esi, word [esi]
mov dword [esp + 0x528], esi
mov esi, dword [esp + 0x528]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x492170]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x524], edx
mov edx, dword [esp + 0x524]
mov esi, dword [0x492170]
mov edi, dword [esp + 0x528]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x492170]
add edi, 2
mov ebx, dword [esp + 0x528]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xb8], eax
call fcn.00406f80
lea eax, [esp + 0x1490]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x7ad124da
mov dword [esp + 0x2148], eax
cmp dword [esp + 0x2148], 0
sete al
and al, 1
mov byte [esp + 0x215f], al
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov eax, 0x585c407f
mov ecx, 0xdd47ebda
mov dl, byte [esp + 0x215f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0x3d711009
mov dword [esp + 0x508], eax
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0xb4], eax
call fcn.0041b2f0
mov eax, 0xfc8fda33
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
lea eax, [esp + 0x854]
lea ecx, [esp + 0x1cb8]
mov dword [esp + 0x2118], ecx
mov dword [esp + 0x211c], eax
mov dword [esp + 0x2124], 0
mov eax, dword [0x4d85fc]
mov ecx, esp
lea edx, [esp + 0x2108]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0x1db0f9ae
mov edx, 0x157856
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0xb0], eax
call fcn.0041b2f0
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4d85f8]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xac], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x107c]
mov dword [esp + 0x2118], ecx
mov dword [esp + 0x211c], 0
mov dword [esp + 0x2124], 1
mov ecx, dword [0x4d85fc]
mov edx, esp
lea esi, [esp + 0x2108]
mov dword [edx], esi
mov dword [esp + 0xa8], eax
call ecx
sub esp, 4
mov ecx, 0x6782bb49
mov edx, 0xc584417c
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0xa4], eax
call fcn.0041b2f0
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2148]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0xa0], eax
call ecx
sub esp, 8
mov ecx, 0x7d1a7cc2
mov edx, 0x91fdffa6
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x854]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x9c], eax
mov dword [esp + 0x98], ecx
call fcn.00407df0
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0x854]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], esi
call fcn.00408300
lea ecx, [esp + 0x169a]
mov dword [esp], ecx
mov dword [esp + 0x88], eax
call fcn.00409070
mov ecx, 0xfe
lea edx, [esp + 0x854]
lea esi, [esp + 0x169a]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x84], ecx
call fcn.00408300
lea ecx, [esp + 0x854]
lea edx, [esp + 0x1cb8]
mov dword [esp + 0x2118], edx
mov dword [esp + 0x211c], ecx
mov dword [esp + 0x2124], 0
mov ecx, dword [0x4d85fc]
mov edx, esp
lea esi, [esp + 0x2108]
mov dword [edx], esi
mov dword [esp + 0x80], eax
call ecx
sub esp, 4
mov ecx, 0x5c2d2dc
mov edx, 0xccdac5cd
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x508], ecx
jmp 0x4211ee
mov dword [esp + 0x508], 0x8056fe62
jmp 0x4211ee
mov eax, dword [esp + 0x2140]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4d85f8]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x7c], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x510], 1
mov dword [esp + 0x508], 0x8056fe62
mov dword [esp + 0x78], eax
jmp 0x4211ee
mov eax, 0x525f0e32
mov ecx, 0x747f841a
cmp dword [esp + 0x2148], 0
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0xd591efc7
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, dword [esp + 0x2148]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x8a27ad28
mov dword [esp + 0x508], ecx
mov dword [esp + 0x74], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x525f0e32
jmp 0x4211ee
mov eax, 0x39cce7db
mov ecx, 0xa70cd0a0
cmp dword [esp + 0x214c], 0
cmovne eax, ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, dword [esp + 0x214c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x508], 0x39cce7db
mov dword [esp + 0x70], eax
jmp 0x4211ee
lea eax, [esp + 0x169a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x6c], eax
call fcn.0041d960
mov eax, dword [esp + 0x510]
mov dword [esp + 0x2150], eax
mov dword [esp + 0x508], 0x46d5c414
jmp 0x4211ee
mov eax, 0x6e857cd0
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, 0xdaf3a3fa
mov ecx, dword [esp + 0x2150]
mov dword [esp + 0x2160], ecx
mov dword [esp + 0x508], eax
jmp 0x4211ee
mov eax, dword [esp + 0x2160]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0x104
lea ecx, [esp + 0xc68]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x68], eax
call fcn.00407f00
lea ecx, [esp + 0x514]
mov dword [esp + 0x52c], eax
mov dword [esp], ecx
call fcn.0041b690
mov dword [esp + 0x508], 0x630ae586
mov dword [esp + 0x64], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x3636e367
jmp 0x4211ee
mov eax, esp
lea ecx, [esp + 0xa5e]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc68]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1aae]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], edx
call fcn.0040a280
mov ecx, esp
mov edx, dword [esp + 0x58]
mov dword [ecx], edx
mov dword [esp + 0x54], eax
call fcn.00409070
mov dword [esp + 0x520], eax
mov eax, esp
mov dword [eax], 0
call fcn.00421200
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], eax
call fcn.00405e00
mov ecx, dword [esp + 0x4c]
imul ecx, eax
mov dword [esp], ecx
call fcn.0043cf56
mov dword [esp + 0x508], 0x70a5ed00
jmp 0x4211ee
lea eax, [esp + 0xa5e]
lea ecx, [esp + 0x1286]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov dword [esp + 0x508], 0x326c1a1e
mov dword [esp + 0x48], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0xd3a0ea2a
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0x44], eax
call fcn.0041b2f0
mov dword [esp + 0x508], 0x4d5b1063
jmp 0x4211ee
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x854]
lea esi, [0x447620]
mov dword [esp + 0x2108], 0x3c
mov dword [esp + 0x210c], 0x40
mov dword [esp + 0x2110], 0
mov dword [esp + 0x2114], esi
mov dword [esp + 0x2120], 0
mov dword [esp + 0x2128], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], ecx
call fcn.00407df0
mov ecx, 0x104
lea edx, [0x44762a]
mov esi, 3
lea edi, [esp + 0x854]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], esi
call fcn.00408300
lea ecx, [esp + 0x169a]
mov dword [esp], ecx
mov dword [esp + 0x2c], eax
call fcn.00409070
mov ecx, 0x101
lea edx, [esp + 0x854]
lea esi, [esp + 0x169a]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x28], ecx
call fcn.00408300
lea ecx, [esp + 0x1cb8]
mov edx, 0
mov esi, dword [0x492170]
movzx esi, word [esi]
mov dword [esp + 0x528], esi
mov esi, dword [esp + 0x528]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x492170]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x524], edx
mov edx, dword [esp + 0x524]
mov esi, dword [0x492170]
mov edi, dword [esp + 0x528]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x492170]
add edi, 2
mov ebx, dword [esp + 0x528]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], eax
call fcn.00406f80
lea eax, [esp + 0x1490]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov dword [esp + 0x2148], eax
mov dword [esp + 0x508], 0x63d1c78f
jmp 0x4211ee
lea eax, [esp + 0x1286]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa5e]
mov dword [esp], ecx
mov dword [esp + 0x20], eax
call fcn.0041b2f0
mov dword [esp + 0x508], 0x3d711009
jmp 0x4211ee
mov eax, dword [esp + 0x2148]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x508], 0xd591efc7
mov dword [esp + 0x1c], eax
jmp 0x4211ee
mov dword [esp + 0x508], 0x6e857cd0
jmp 0x41dd5f