Function at 0x44b130
Capabilities:
Accept command line arguments
Copy file
Delete file
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2678
call fcn.0041aba0
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x82a]
mov esi, 0x10
lea edi, [esp + 0x834]
lea ebx, [esp + 0x844]
mov dword [esp + 0x79c], eax
mov eax, 0x28
mov dword [esp + 0x798], eax
lea eax, [esp + 0x854]
mov dword [esp + 0x794], eax
mov eax, 0xc8
mov dword [esp + 0x790], eax
lea eax, [esp + 0x87c]
mov dword [esp + 0x78c], eax
mov eax, 0x20a
mov dword [esp + 0x788], eax
lea eax, [esp + 0x944]
mov dword [esp + 0x784], eax
lea eax, [esp + 0xd58]
mov dword [esp + 0x780], eax
lea eax, [esp + 0xf62]
mov dword [esp + 0x77c], eax
lea eax, [esp + 0x116c]
mov dword [esp + 0x778], eax
lea eax, [esp + 0x1376]
mov dword [esp + 0x774], eax
lea eax, [esp + 0x1580]
mov dword [esp + 0x770], eax
lea eax, [esp + 0x178a]
mov dword [esp + 0x76c], eax
lea eax, [esp + 0x1994]
mov dword [esp + 0x768], eax
lea eax, [esp + 0x1b9e]
mov dword [esp + 0x764], eax
lea eax, [esp + 0x1da8]
mov dword [esp + 0x760], eax
lea eax, [esp + 0x1fb2]
mov dword [esp + 0x75c], eax
lea eax, [esp + 0x21bc]
mov dword [esp + 0x758], eax
lea eax, [esp + 0x23c6]
mov dword [esp + 0x754], eax
mov eax, 0x3c
mov dword [esp + 0x750], eax
lea eax, [esp + 0x2610]
mov dword [esp + 0x265c], 0
mov dword [esp + 0x2658], 0
mov dword [esp + 0x2654], 0
mov dword [esp + 0x2650], 0
mov dword [esp + 0x264c], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x74c], ebx
mov dword [esp + 0x748], ecx
mov dword [esp + 0x744], edx
mov dword [esp + 0x740], esi
mov dword [esp + 0x73c], edi
call fcn.0041aad0
mov dword [esp + 0x25d4], 0
mov dword [esp + 0x25d0], 0
mov eax, dword [esp + 0x754]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x758]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x75c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x760]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x764]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x768]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x76c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x770]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x774]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x778]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x77c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x780]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x784]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041aad0
mov eax, dword [esp + 0x78c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0041aad0
mov eax, dword [esp + 0x794]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0041aad0
mov eax, dword [esp + 0x74c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041aad0
mov eax, dword [esp + 0x73c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041aad0
mov eax, dword [esp + 0x744]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0041aad0
mov dword [esp + 0x814], 0
mov dword [esp + 0x810], 0
mov dword [esp + 0x804], 0
mov dword [esp + 0x800], 0xffffffff
call fcn.00443c10
mov dword [esp + 0x2664], eax
mov dword [esp + 0x7a0], 0x545bcc4c
mov eax, dword [esp + 0x7a0]
mov ecx, eax
sub ecx, 0x81dfba28
mov dword [esp + 0x738], eax
mov dword [esp + 0x734], ecx
jg 0x44b5b9
jmp 0x44b59b
mov eax, dword [esp + 0x738]
sub eax, 0x804d34d6
mov dword [esp + 0x730], eax
je 0x44d205
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x8359ef22
mov dword [esp + 0x72c], eax
jg 0x44b5f5
jmp 0x44b5d7
mov eax, dword [esp + 0x738]
sub eax, 0x81dfba29
mov dword [esp + 0x728], eax
je 0x44f6bb
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x904029d6
mov dword [esp + 0x724], eax
jg 0x44b631
jmp 0x44b613
mov eax, dword [esp + 0x738]
sub eax, 0x8359ef23
mov dword [esp + 0x720], eax
je 0x44e9a3
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x907ddb31
mov dword [esp + 0x71c], eax
jg 0x44b66d
jmp 0x44b64f
mov eax, dword [esp + 0x738]
sub eax, 0x904029d7
mov dword [esp + 0x718], eax
je 0x44f71d
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9265d3e8
mov dword [esp + 0x714], eax
jg 0x44b6a9
jmp 0x44b68b
mov eax, dword [esp + 0x738]
sub eax, 0x907ddb32
mov dword [esp + 0x710], eax
je 0x44f091
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x92a6a0f3
mov dword [esp + 0x70c], eax
jg 0x44b6e5
jmp 0x44b6c7
mov eax, dword [esp + 0x738]
sub eax, 0x9265d3e9
mov dword [esp + 0x708], eax
je 0x44d3b6
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x952fe49c
mov dword [esp + 0x704], eax
jg 0x44b721
jmp 0x44b703
mov eax, dword [esp + 0x738]
sub eax, 0x92a6a0f4
mov dword [esp + 0x700], eax
je 0x450a71
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x96492c8d
mov dword [esp + 0x6fc], eax
jg 0x44b75d
jmp 0x44b73f
mov eax, dword [esp + 0x738]
sub eax, 0x952fe49d
mov dword [esp + 0x6f8], eax
je 0x4509d7
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9809ebfb
mov dword [esp + 0x6f4], eax
jg 0x44b799
jmp 0x44b77b
mov eax, dword [esp + 0x738]
sub eax, 0x96492c8e
mov dword [esp + 0x6f0], eax
je 0x44d624
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9b529b9b
mov dword [esp + 0x6ec], eax
jg 0x44b7d5
jmp 0x44b7b7
mov eax, dword [esp + 0x738]
sub eax, 0x9809ebfc
mov dword [esp + 0x6e8], eax
je 0x44f72c
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9c034ab3
mov dword [esp + 0x6e4], eax
jg 0x44b811
jmp 0x44b7f3
mov eax, dword [esp + 0x738]
sub eax, 0x9b529b9c
mov dword [esp + 0x6e0], eax
je 0x44db2c
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9cc7b809
mov dword [esp + 0x6dc], eax
jg 0x44b84d
jmp 0x44b82f
mov eax, dword [esp + 0x738]
sub eax, 0x9c034ab4
mov dword [esp + 0x6d8], eax
je 0x44d7a3
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x9e220048
mov dword [esp + 0x6d4], eax
jg 0x44b889
jmp 0x44b86b
mov eax, dword [esp + 0x738]
sub eax, 0x9cc7b80a
mov dword [esp + 0x6d0], eax
je 0x44eea2
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xa2960066
mov dword [esp + 0x6cc], eax
jg 0x44b8c5
jmp 0x44b8a7
mov eax, dword [esp + 0x738]
sub eax, 0x9e220049
mov dword [esp + 0x6c8], eax
je 0x44ee67
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xa353c19b
mov dword [esp + 0x6c4], eax
jg 0x44b901
jmp 0x44b8e3
mov eax, dword [esp + 0x738]
sub eax, 0xa2960067
mov dword [esp + 0x6c0], eax
je 0x44f5ef
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xa5969069
mov dword [esp + 0x6bc], eax
jg 0x44b93d
jmp 0x44b91f
mov eax, dword [esp + 0x738]
sub eax, 0xa353c19c
mov dword [esp + 0x6b8], eax
je 0x44db50
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xa88abf37
mov dword [esp + 0x6b4], eax
jg 0x44b979
jmp 0x44b95b
mov eax, dword [esp + 0x738]
sub eax, 0xa596906a
mov dword [esp + 0x6b0], eax
je 0x44f2c4
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xaa54a272
mov dword [esp + 0x6ac], eax
jg 0x44b9b5
jmp 0x44b997
mov eax, dword [esp + 0x738]
sub eax, 0xa88abf38
mov dword [esp + 0x6a8], eax
je 0x44d4de
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0xaa79995d
mov dword [esp + 0x6a4], eax
jg 0x44b9f1
jmp 0x44b9d3
mov eax, dword [esp + 0x738]
sub eax, 0xaa54a273
mov dword [esp + 0x6a0], eax
je 0x44d143
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7fefa0ae
mov dword [esp + 0x69c], eax
jg 0x44d0e9
jmp 0x44ba0f
mov eax, dword [esp + 0x738]
sub eax, 0x7fe1a4c7
mov dword [esp + 0x698], eax
jg 0x44d0cb
jmp 0x44ba2d
mov eax, dword [esp + 0x738]
sub eax, 0x7c75c75c
mov dword [esp + 0x694], eax
jg 0x44d0ad
jmp 0x44ba4b
mov eax, dword [esp + 0x738]
sub eax, 0x7c544aca
mov dword [esp + 0x690], eax
jg 0x44d08f
jmp 0x44ba69
mov eax, dword [esp + 0x738]
sub eax, 0x7a54abb9
mov dword [esp + 0x68c], eax
jg 0x44d071
jmp 0x44ba87
mov eax, dword [esp + 0x738]
sub eax, 0x7877eea6
mov dword [esp + 0x688], eax
jg 0x44d053
jmp 0x44baa5
mov eax, dword [esp + 0x738]
sub eax, 0x76201096
mov dword [esp + 0x684], eax
jg 0x44d035
jmp 0x44bac3
mov eax, dword [esp + 0x738]
sub eax, 0x738adf34
mov dword [esp + 0x680], eax
jg 0x44d017
jmp 0x44bae1
mov eax, dword [esp + 0x738]
sub eax, 0x6c287255
mov dword [esp + 0x67c], eax
jg 0x44cff9
jmp 0x44baff
mov eax, dword [esp + 0x738]
sub eax, 0x693f9cb3
mov dword [esp + 0x678], eax
jg 0x44cfdb
jmp 0x44bb1d
mov eax, dword [esp + 0x738]
sub eax, 0x68c287e0
mov dword [esp + 0x674], eax
jg 0x44cfbd
jmp 0x44bb3b
mov eax, dword [esp + 0x738]
sub eax, 0x68132721
mov dword [esp + 0x670], eax
jg 0x44cf9f
jmp 0x44bb59
mov eax, dword [esp + 0x738]
sub eax, 0x665c1c71
mov dword [esp + 0x66c], eax
jg 0x44cf81
jmp 0x44bb77
mov eax, dword [esp + 0x738]
sub eax, 0x647bd69a
mov dword [esp + 0x668], eax
jg 0x44cf63
jmp 0x44bb95
mov eax, dword [esp + 0x738]
sub eax, 0x646eff84
mov dword [esp + 0x664], eax
jg 0x44cf45
jmp 0x44bbb3
mov eax, dword [esp + 0x738]
sub eax, 0x62a25d04
mov dword [esp + 0x660], eax
jg 0x44cf27
jmp 0x44bbd1
mov eax, dword [esp + 0x738]
sub eax, 0x61e3a693
mov dword [esp + 0x65c], eax
jg 0x44cf09
jmp 0x44bbef
mov eax, dword [esp + 0x738]
sub eax, 0x6179da94
mov dword [esp + 0x658], eax
jg 0x44ceeb
jmp 0x44bc0d
mov eax, dword [esp + 0x738]
sub eax, 0x609fd3ff
mov dword [esp + 0x654], eax
jg 0x44cecd
jmp 0x44bc2b
mov eax, dword [esp + 0x738]
sub eax, 0x5fa69133
mov dword [esp + 0x650], eax
jg 0x44ceaf
jmp 0x44bc49
mov eax, dword [esp + 0x738]
sub eax, 0x5e3fc973
mov dword [esp + 0x64c], eax
jg 0x44ce91
jmp 0x44bc67
mov eax, dword [esp + 0x738]
sub eax, 0x5df59a4e
mov dword [esp + 0x648], eax
jg 0x44ce73
jmp 0x44bc85
mov eax, dword [esp + 0x738]
sub eax, 0x5d0c02bc
mov dword [esp + 0x644], eax
jg 0x44ce55
jmp 0x44bca3
mov eax, dword [esp + 0x738]
sub eax, 0x59440d6e
mov dword [esp + 0x640], eax
jg 0x44ce37
jmp 0x44bcc1
mov eax, dword [esp + 0x738]
sub eax, 0x545bcc4b
mov dword [esp + 0x63c], eax
jg 0x44ce19
jmp 0x44bcdf
mov eax, dword [esp + 0x738]
sub eax, 0x53715a8d
mov dword [esp + 0x638], eax
jg 0x44cdfb
jmp 0x44bcfd
mov eax, dword [esp + 0x738]
sub eax, 0x52701bd1
mov dword [esp + 0x634], eax
jg 0x44cddd
jmp 0x44bd1b
mov eax, dword [esp + 0x738]
sub eax, 0x50580e35
mov dword [esp + 0x630], eax
jg 0x44cdbf
jmp 0x44bd39
mov eax, dword [esp + 0x738]
sub eax, 0x4f635ce0
mov dword [esp + 0x62c], eax
jg 0x44cda1
jmp 0x44bd57
mov eax, dword [esp + 0x738]
sub eax, 0x4e52e31f
mov dword [esp + 0x628], eax
jg 0x44cd83
jmp 0x44bd75
mov eax, dword [esp + 0x738]
sub eax, 0x49c08a08
mov dword [esp + 0x624], eax
jg 0x44cd65
jmp 0x44bd93
mov eax, dword [esp + 0x738]
sub eax, 0x462265d9
mov dword [esp + 0x620], eax
jg 0x44cd47
jmp 0x44bdb1
mov eax, dword [esp + 0x738]
sub eax, 0x4408e0d2
mov dword [esp + 0x61c], eax
jg 0x44cd29
jmp 0x44bdcf
mov eax, dword [esp + 0x738]
sub eax, 0x42092088
mov dword [esp + 0x618], eax
jg 0x44cd0b
jmp 0x44bded
mov eax, dword [esp + 0x738]
sub eax, 0x412556fa
mov dword [esp + 0x614], eax
jg 0x44cced
jmp 0x44be0b
mov eax, dword [esp + 0x738]
sub eax, 0x3eed7f5c
mov dword [esp + 0x610], eax
jg 0x44cccf
jmp 0x44be29
mov eax, dword [esp + 0x738]
sub eax, 0x3a1c7f42
mov dword [esp + 0x60c], eax
jg 0x44ccb1
jmp 0x44be47
mov eax, dword [esp + 0x738]
sub eax, 0x38f44436
mov dword [esp + 0x608], eax
jg 0x44cc93
jmp 0x44be65
mov eax, dword [esp + 0x738]
sub eax, 0x33a9b392
mov dword [esp + 0x604], eax
jg 0x44cc75
jmp 0x44be83
mov eax, dword [esp + 0x738]
sub eax, 0x3162384f
mov dword [esp + 0x600], eax
jg 0x44cc57
jmp 0x44bea1
mov eax, dword [esp + 0x738]
sub eax, 0x2d0fd880
mov dword [esp + 0x5fc], eax
jg 0x44cc39
jmp 0x44bebf
mov eax, dword [esp + 0x738]
sub eax, 0x28ccfcf0
mov dword [esp + 0x5f8], eax
jg 0x44cc1b
jmp 0x44bedd
mov eax, dword [esp + 0x738]
sub eax, 0x28707cef
mov dword [esp + 0x5f4], eax
jg 0x44cbfd
jmp 0x44befb
mov eax, dword [esp + 0x738]
sub eax, 0x2702d308
mov dword [esp + 0x5f0], eax
jg 0x44cbdf
jmp 0x44bf19
mov eax, dword [esp + 0x738]
sub eax, 0x2347a1b0
mov dword [esp + 0x5ec], eax
jg 0x44cbc1
jmp 0x44bf37
mov eax, dword [esp + 0x738]
sub eax, 0x230e8529
mov dword [esp + 0x5e8], eax
jg 0x44cba3
jmp 0x44bf55
mov eax, dword [esp + 0x738]
sub eax, 0x22fc82f9
mov dword [esp + 0x5e4], eax
jg 0x44cb85
jmp 0x44bf73
mov eax, dword [esp + 0x738]
sub eax, 0x21aa9ca8
mov dword [esp + 0x5e0], eax
jg 0x44cb67
jmp 0x44bf91
mov eax, dword [esp + 0x738]
sub eax, 0x20167d29
mov dword [esp + 0x5dc], eax
jg 0x44cb49
jmp 0x44bfaf
mov eax, dword [esp + 0x738]
sub eax, 0x1fdefc1a
mov dword [esp + 0x5d8], eax
jg 0x44cb2b
jmp 0x44bfcd
mov eax, dword [esp + 0x738]
sub eax, 0x1e4e980c
mov dword [esp + 0x5d4], eax
jg 0x44cb0d
jmp 0x44bfeb
mov eax, dword [esp + 0x738]
sub eax, 0x1bbf2396
mov dword [esp + 0x5d0], eax
jg 0x44caef
jmp 0x44c009
mov eax, dword [esp + 0x738]
sub eax, 0x195ec79f
mov dword [esp + 0x5cc], eax
jg 0x44cad1
jmp 0x44c027
mov eax, dword [esp + 0x738]
sub eax, 0x13c381b3
mov dword [esp + 0x5c8], eax
jg 0x44cab3
jmp 0x44c045
mov eax, dword [esp + 0x738]
sub eax, 0x139c58a2
mov dword [esp + 0x5c4], eax
jg 0x44ca95
jmp 0x44c063
mov eax, dword [esp + 0x738]
sub eax, 0x139c58a3
mov dword [esp + 0x464], eax
je 0x44d2b9
mov eax, dword [esp + 0x738]
sub eax, 0x13c381b4
mov dword [esp + 0x460], eax
je 0x44f62d
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x195ec7a0
mov dword [esp + 0x45c], eax
je 0x44d9b8
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x1bbf2397
mov dword [esp + 0x458], eax
je 0x44f081
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x1e4e980d
mov dword [esp + 0x454], eax
je 0x44ef75
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x1fdefc1b
mov dword [esp + 0x450], eax
je 0x44d154
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x20167d2a
mov dword [esp + 0x44c], eax
je 0x44f148
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x21aa9ca9
mov dword [esp + 0x448], eax
je 0x44ea81
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x22fc82fa
mov dword [esp + 0x444], eax
je 0x44eaa5
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x230e852a
mov dword [esp + 0x440], eax
je 0x44fa11
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x2347a1b1
mov dword [esp + 0x43c], eax
je 0x44f025
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x2702d309
mov dword [esp + 0x438], eax
je 0x450aaa
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x28707cf0
mov dword [esp + 0x434], eax
je 0x44f5cb
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x28ccfcf1
mov dword [esp + 0x430], eax
je 0x44ef17
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x2d0fd881
mov dword [esp + 0x42c], eax
je 0x44f4e1
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x31623850
mov dword [esp + 0x428], eax
je 0x44f698
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x33a9b393
mov dword [esp + 0x424], eax
je 0x44f58e
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x38f44437
mov dword [esp + 0x420], eax
je 0x44d69b
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x3a1c7f43
mov dword [esp + 0x41c], eax
je 0x44ea01
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x3eed7f5d
mov dword [esp + 0x418], eax
je 0x44f7b4
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x412556fb
mov dword [esp + 0x414], eax
je 0x44ef3a
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x42092089
mov dword [esp + 0x410], eax
je 0x45080f
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x4408e0d3
mov dword [esp + 0x40c], eax
je 0x44d672
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x462265da
mov dword [esp + 0x408], eax
je 0x44d635
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x49c08a09
mov dword [esp + 0x404], eax
je 0x44d26f
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x4e52e320
mov dword [esp + 0x400], eax
je 0x44f89c
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x4f635ce1
mov dword [esp + 0x3fc], eax
je 0x44f600
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x50580e36
mov dword [esp + 0x3f8], eax
je 0x44ed6e
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x52701bd2
mov dword [esp + 0x3f4], eax
je 0x44ee44
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x53715a8e
mov dword [esp + 0x3f0], eax
je 0x44f014
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x545bcc4c
mov dword [esp + 0x3ec], eax
je 0x44d10c
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x59440d6f
mov dword [esp + 0x3e8], eax
je 0x44f413
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x5d0c02bd
mov dword [esp + 0x3e4], eax
je 0x44f871
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x5df59a4f
mov dword [esp + 0x3e0], eax
je 0x44ed36
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x5e3fc974
mov dword [esp + 0x3dc], eax
je 0x44f138
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x5fa69134
mov dword [esp + 0x3d8], eax
je 0x44d953
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x609fd400
mov dword [esp + 0x3d4], eax
je 0x44db61
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x6179da95
mov dword [esp + 0x3d0], eax
je 0x44f57d
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x61e3a694
mov dword [esp + 0x3cc], eax
je 0x44ea12
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x62a25d05
mov dword [esp + 0x3c8], eax
je 0x44f6dd
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x646eff85
mov dword [esp + 0x3c4], eax
je 0x44d6f0
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x647bd69b
mov dword [esp + 0x3c0], eax
je 0x44f403
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x665c1c72
mov dword [esp + 0x3bc], eax
je 0x44d5d5
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x68132722
mov dword [esp + 0x3b8], eax
je 0x44db1c
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x68c287e1
mov dword [esp + 0x3b4], eax
je 0x44d9a7
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x693f9cb4
mov dword [esp + 0x3b0], eax
je 0x44ed5d
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x6c287256
mov dword [esp + 0x3ac], eax
je 0x44f6cc
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x738adf35
mov dword [esp + 0x3a8], eax
je 0x44d651
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x76201097
mov dword [esp + 0x3a4], eax
je 0x44d55a
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7877eea7
mov dword [esp + 0x3a0], eax
je 0x44d393
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7a54abba
mov dword [esp + 0x39c], eax
je 0x44d2ca
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7c544acb
mov dword [esp + 0x398], eax
je 0x44f4d0
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7c75c75d
mov dword [esp + 0x394], eax
je 0x44d175
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7fe1a4c8
mov dword [esp + 0x390], eax
je 0x44f159
jmp 0x44d107
mov eax, dword [esp + 0x738]
sub eax, 0x7fefa0af
mov dword [esp + 0x38c], eax
je 0x44d164
jmp 0x44d107
jmp 0x450b0c
mov eax, 0x7fefa0af
mov ecx, 0xbea7287
mov edx, dword [esp + 0x2664]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x1fdefc1b
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xecf26820
jmp 0x450b0c
mov eax, 0x7c75c75d
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x104
lea ecx, [esp + 0xf62]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x388], eax
call fcn.004290d0
mov dword [esp + 0x824], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, str..exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041b393
lea ecx, [0x52b2aa]
mov dword [esp + 0x25d0], eax
mov eax, dword [esp + 0x25d0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041b393
mov ecx, 0x804d34d6
mov dword [0x528984], eax
cmp dword [0x528984], 0
setne dl
and dl, 1
mov byte [esp + 0x266a], dl
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0xaa79995e
mov ecx, 0xd7b56f53
mov dl, byte [esp + 0x266a]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x139c58a3
mov ecx, 0xf9665459
mov edx, dword [0x528984]
movzx edx, word [edx]
movzx esi, word [0x52b2aa]
cmp edx, esi
cmove eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
lea eax, [esp + 0x7d8]
mov ecx, dword [0x4e7488]
movzx ecx, word [ecx]
mov dword [esp + 0x7d4], ecx
mov ecx, dword [esp + 0x7d4]
mov edx, dword [0x4e7488]
movzx ecx, word [edx + ecx*2 + 2]
mov dword [esp + 0x7d0], ecx
mov ecx, dword [esp + 0x7d0]
mov edx, dword [0x4e7488]
mov esi, dword [esp + 0x7d4]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4e7488]
add esi, 2
mov edi, dword [esp + 0x7d4]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0042f4e0
lea eax, [esp + 0x7d8]
mov dword [esp], eax
call fcn.00434890
lea ecx, [esp + 0x7d8]
mov edx, dword [0x528984]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004417d0
mov ecx, 0x7877eea7
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x266b], bl
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0x9265d3e9
mov ecx, 0xeb6f8b4b
mov dl, byte [esp + 0x266b]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov dword [esp + 0x2660], 0
mov dword [esp + 0x7a0], 0x904029d7
jmp 0x450b0c
lea eax, [esp + 0x1994]
mov dword [esp], eax
call fcn.00434890
mov ecx, 0x104
lea edx, [esp + 0x1580]
lea esi, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x378], ecx
call fcn.0042fe80
lea eax, [esp + 0x1580]
mov dword [esp], eax
call fcn.00454500
mov eax, dword [esp + 0x2654]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0x8e8dc36
mov dword [esp + 0x374], eax
jmp 0x450b0c
lea eax, [0x528988]
mov ecx, 0x104
lea edx, [esp + 0xf62]
mov esi, dword [esp + 0x824]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x370], ecx
call fcn.00434260
mov dword [esp + 0x7a0], 0x8e8dc36
mov dword [esp + 0x36c], eax
jmp 0x450b0c
lea eax, [0x528988]
mov ecx, 0x104
lea edx, [esp + 0xf62]
mov esi, dword [esp + 0x824]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x364], ecx
call fcn.00434260
mov dword [esp + 0x7a0], 0x96492c8e
mov dword [esp + 0x360], eax
jmp 0x450b0c
mov eax, 0x462265da
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x738adf35
mov dword [esp + 0x2660], 0
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0x904029d7
jmp 0x450b0c
mov eax, 0x38f44437
cmp dword [esp + 0x804], 6
setb cl
and cl, 1
mov byte [esp + 0x266c], cl
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x646eff85
mov ecx, 0xfc7cc01d
mov dl, byte [esp + 0x266c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, esp
lea ecx, [esp + 0xd58]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xf62]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
inc eax
mov dword [esp + 0x81c], eax
mov eax, esp
lea ecx, [esp + 0x1fb2]
mov dword [eax], ecx
mov dword [eax + 4], 0x104
mov dword [esp + 0x35c], ecx
call fcn.0042faa0
mov ecx, esp
mov edx, dword [esp + 0x35c]
mov dword [ecx], edx
mov dword [esp + 0x358], eax
call fcn.00434890
mov dword [esp + 0x818], eax
mov eax, esp
mov dword [eax], 0
call fcn.00450b20
mov dword [esp + 0x354], edx
mov dword [esp + 0x350], eax
call fcn.004286a0
mov ecx, dword [esp + 0x350]
imul ecx, eax
mov dword [esp], ecx
call fcn.0041b140
mov dword [esp + 0x7a0], 0x9c034ab4
jmp 0x450b0c
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x34c], eax
mov dword [esp + 0x348], ecx
call fcn.00452cd0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x178a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x344], eax
mov dword [esp + 0x340], ecx
mov dword [esp + 0x33c], edx
call fcn.00452cd0
mov ecx, 0x104
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x338], eax
mov dword [esp + 0x334], ecx
call fcn.00442220
lea eax, [esp + 0x1994]
mov dword [esp], eax
call fcn.00434890
mov ecx, 0x104
lea edx, [esp + 0x178a]
lea esi, [esp + 0x1fb2]
mov dword [esp + 0x7cc], eax
mov eax, dword [esp + 0x818]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x330], ecx
call fcn.00434260
lea ecx, [esp + 0x178a]
mov edx, 0x104
lea esi, [esp + 0x1994]
mov edi, dword [esp + 0x7cc]
sub edx, dword [esp + 0x818]
mov ebx, dword [esp + 0x818]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x32c], eax
call fcn.00434260
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x178a]
mov edi, 0x104
sub edi, dword [esp + 0x818]
sub edi, dword [esp + 0x7cc]
mov ebx, dword [esp + 0x818]
shl ebx, 1
add esi, ebx
mov ebx, dword [esp + 0x7cc]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x328], eax
mov dword [esp + 0x324], edx
call fcn.00434260
mov dword [esp + 0x7a0], 0x5fa69134
mov dword [esp + 0x320], eax
jmp 0x450b0c
lea eax, [esp + 0xd58]
lea ecx, [esp + 0x178a]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0xb25949b5
mov edx, 0x9c034ab4
cmp eax, 0
cmove ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0x195ec7a0
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1da8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x31c], eax
mov dword [esp + 0x318], ecx
call fcn.00452cd0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1b9e]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x314], eax
mov dword [esp + 0x310], ecx
mov dword [esp + 0x30c], edx
call fcn.00452cd0
mov ecx, 0x104
lea edx, [esp + 0x1da8]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x308], eax
mov dword [esp + 0x304], ecx
call fcn.00442220
mov eax, 0x104
lea ecx, [esp + 0x1b9e]
lea edx, [esp + 0x1fb2]
mov esi, dword [esp + 0x818]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x300], eax
call fcn.00434260
lea ecx, [esp + 0x1da8]
mov dword [esp], ecx
mov dword [esp + 0x2fc], eax
call fcn.00434890
lea ecx, [esp + 0x1b9e]
mov edx, 0x104
lea esi, [esp + 0x1da8]
sub edx, dword [esp + 0x818]
mov edi, dword [esp + 0x818]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.00434260
lea ecx, [esp + 0x1b9e]
mov edx, dword [0x529ce0]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x2f8], eax
call edx
sub esp, 8
mov ecx, 0x68132722
mov dword [esp + 0x264c], eax
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov dword [esp + 0x7a0], 0x9b529b9c
jmp 0x450b0c
mov eax, 0xa353c19c
mov ecx, 0x68c287e1
cmp dword [esp + 0x264c], 0
cmove eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x609fd400
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [0x529cd4]
mov ecx, dword [0x529aec]
mov edx, dword [0x529b14]
mov esi, dword [esp + 0x264c]
mov edi, esp
lea ebx, [esp + 0x260c]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529afc]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2f4], eax
lea eax, [esp + 0x2608]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b00]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2f0], eax
lea eax, [esp + 0x2604]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529aec]
mov esi, dword [0x529b10]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2ec], eax
lea eax, [esp + 0x2600]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529ae0]
mov esi, dword [0x529b20]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2e8], eax
lea eax, [esp + 0x25fc]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529aec]
mov esi, dword [0x529b24]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2e4], eax
lea eax, [esp + 0x25f8]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b30]
mov esi, dword [0x529b28]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2e0], eax
lea eax, [esp + 0x25f4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b2c]
mov esi, dword [0x529b28]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2dc], eax
lea eax, [esp + 0x25f0]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b2c]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x2d8], eax
lea eax, [esp + 0x25ec]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd0]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x2d4], eax
call ecx
sub esp, 4
mov dword [esp + 0x2d0], eax
call fcn.0041b11d
and eax, 0xf
mov ecx, esp
lea edx, [esp + 0x87c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
mov dword [esp + 0x2cc], edx
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x2cc]
mov dword [ecx], edx
mov dword [esp + 0x2c8], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0x2c4], eax
call fcn.0041b11d
and eax, 1
mov ecx, esp
mov edx, dword [esp + 0x2c4]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x2cc]
mov dword [ecx], edx
mov dword [esp + 0x2c0], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0x2bc], eax
call fcn.0041b11d
and eax, 5
mov ecx, esp
mov edx, dword [esp + 0x2bc]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x2cc]
mov dword [ecx], edx
mov dword [esp + 0x2b8], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0x2b4], eax
call fcn.0041b11d
and eax, 0xc
mov ecx, esp
mov edx, dword [esp + 0x2b4]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x2cc]
mov dword [ecx], edx
mov dword [esp + 0x2b0], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov eax, dword [0x4e748c]
movzx eax, byte [eax]
mov dword [esp + 0x7c8], eax
mov ecx, dword [0x4e748c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x7c4], eax
mov ecx, dword [0x4e748c]
mov edx, dword [esp + 0x7c8]
lea esi, [ecx + edx + 2]
inc ecx
mov edi, esp
mov dword [edi + 0x10], eax
mov dword [edi + 0xc], esi
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
lea eax, [esp + 0x844]
mov dword [edi], eax
call fcn.00447030
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b08]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x25e8], eax
mov eax, dword [0x529cc4]
xor ecx, ecx
mov edx, dword [0x529b38]
mov esi, dword [0x529ae8]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x87c]
mov edx, dword [0x529cc0]
mov esi, dword [0x529b04]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x2ac], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x1da8]
mov edx, dword [0x529cc0]
mov esi, dword [0x529aec]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x2a8], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cbc]
mov edx, dword [0x529ae4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0x2a4], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x844]
mov edx, dword [0x529cb8]
mov esi, dword [0x529b34]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x2a0], eax
call edx
sub esp, 0x10
mov ecx, dword [0x529ccc]
mov edx, dword [0x529b0c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x29c], eax
call ecx
sub esp, 8
mov dword [esp + 0x25e4], eax
mov eax, dword [0x529cb4]
mov ecx, dword [esp + 0x2600]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2600]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x298], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x294], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x290], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x28c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x2608]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x288], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2608]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x284], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x2604]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x280], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2604]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x27c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x260c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x278], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25ec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x274], eax
call ecx
sub esp, 8
mov dword [esp + 0x270], eax
call fcn.0041b11d
lea ecx, [esp + 0x23c6]
mov edx, 5
xor esi, esi
mov dword [esp + 0x26c], edx
mov edx, esi
mov esi, dword [esp + 0x26c]
div esi
mov eax, dword [edx*4 + 0x4e7490]
mov dword [esp + 0x25d4], eax
mov eax, dword [esp + 0x25d4]
movzx eax, word [eax]
mov dword [esp + 0x820], eax
mov eax, dword [esp + 0x25d4]
movzx eax, word [eax]
mov dword [esp + 0x7c0], eax
mov eax, dword [esp + 0x7c0]
mov edx, dword [esp + 0x25d4]
movzx eax, word [edx + eax*2 + 2]
mov dword [esp + 0x7bc], eax
mov eax, dword [esp + 0x7bc]
mov edx, dword [esp + 0x25d4]
mov edi, dword [esp + 0x7c0]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [esp + 0x25d4]
add edi, 2
mov ebx, dword [esp + 0x7c0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.0042f4e0
mov eax, 0x104
lea ecx, [esp + 0x1376]
lea edx, [esp + 0x23c6]
mov esi, dword [esp + 0x820]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x268], eax
call fcn.00434260
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1376]
mov edi, 0x104
sub edi, dword [esp + 0x820]
mov ebx, dword [esp + 0x820]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x264], eax
mov dword [esp + 0x260], edx
call fcn.00434260
mov ecx, 0x104
lea edx, [esp + 0x116c]
lea esi, [esp + 0x23c6]
mov edi, dword [esp + 0x820]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x25c], eax
mov dword [esp + 0x258], ecx
call fcn.00434260
lea ecx, str.32.exe
mov edx, 6
lea esi, [esp + 0x116c]
mov edi, 0x104
sub edi, dword [esp + 0x820]
mov ebx, dword [esp + 0x820]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x254], eax
mov dword [esp + 0x250], edx
call fcn.00434260
lea ecx, [esp + 0x834]
mov edx, dword [0x4e74a4]
movzx edx, byte [edx]
mov dword [esp + 0x7b8], edx
mov edx, dword [esp + 0x7b8]
mov esi, dword [0x4e74a4]
movzx edx, byte [esi + edx + 1]
mov dword [esp + 0x7b4], edx
mov edx, dword [esp + 0x7b4]
mov esi, dword [0x4e74a4]
add esi, dword [esp + 0x7b8]
add esi, 2
mov edi, dword [0x4e74a4]
add edi, 1
mov ebx, dword [esp + 0x7b8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x24c], eax
call fcn.00447030
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b14]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x1376]
mov dword [esp + 0x25e0], eax
mov eax, dword [0x529cc0]
mov edx, dword [0x529aec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x116c]
mov edx, dword [0x529cc0]
mov esi, dword [0x529af4]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x248], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cc0]
mov edx, dword [0x529af0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [esp + 0x244], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x834]
mov edx, dword [0x529cb8]
mov esi, dword [0x529b2c]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x240], eax
call edx
sub esp, 0x10
mov ecx, dword [0x529ccc]
mov edx, dword [0x529b18]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x23c], eax
call ecx
sub esp, 8
mov dword [esp + 0x25dc], eax
mov eax, dword [0x529cc0]
mov ecx, dword [0x529aec]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x52b2ae
call eax
sub esp, 0xc
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25dc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x238], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x854]
mov edx, dword [0x4e74a8]
movzx edx, word [edx]
mov dword [esp + 0x7b0], edx
mov edx, dword [esp + 0x7b0]
mov esi, dword [0x4e74a8]
movzx edx, word [esi + edx*2 + 2]
mov dword [esp + 0x7ac], edx
mov edx, dword [esp + 0x7ac]
mov esi, dword [0x4e74a8]
mov edi, dword [esp + 0x7b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4e74a8]
add edi, 2
mov ebx, dword [esp + 0x7b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x234], eax
call fcn.0042f4e0
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b1c]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x854]
mov dword [esp + 0x25d8], eax
mov eax, dword [0x529cc0]
mov edx, dword [0x529aec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x178a]
mov edx, dword [0x529cc0]
mov esi, dword [0x529af8]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x230], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25d8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x22c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x228], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25ec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x224], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x260c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x220], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x21c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x218], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x214], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x210], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25fc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x20c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25fc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x208], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x204], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cd8]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x200], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x944]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0x1fc], eax
call fcn.00442df0
lea eax, [esp + 0x944]
mov ecx, dword [0x529d24]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov ecx, 0x8359ef23
mov dword [esp + 0x2658], eax
cmp dword [esp + 0x2658], 0
sete al
and al, 1
mov byte [esp + 0x266d], al
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0x3a1c7f43
mov ecx, 0xd192a51d
mov dl, byte [esp + 0x266d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x61e3a694
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0xbc7b3697
mov dword [esp + 0x80c], eax
cmp dword [esp + 0x80c], 0
setne dl
and dl, 1
mov byte [esp + 0x266e], dl
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0xbd54300a
mov ecx, 0x22fc82fa
cmp dword [esp + 0x80c], 0x80
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x1f4], eax
call fcn.00434f20
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
mov eax, dword [0x528984]
mov dword [esp], eax
call fcn.00434890
shl eax, 1
mov dword [esp + 0x814], eax
mov dword [esp + 0x7a0], 0x693f9cb4
jmp 0x450b0c
mov eax, 0x50580e36
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
lea eax, [esp + 0x1994]
mov ecx, dword [esp + 0x81c]
add ecx, 4
add ecx, 4
mov edx, dword [esp + 0x814]
add edx, 4
add ecx, edx
mov dword [esp + 0x810], ecx
mov dword [esp], eax
call fcn.00434890
mov ecx, 0x104
lea edx, [esp + 0x1580]
lea esi, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], ecx
call fcn.0042fe80
lea eax, [esp + 0x1580]
mov ecx, dword [0x529d0c]
mov edx, dword [esp + 0x810]
mov esi, esp
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 4
mov dword [esi + 4], 0
mov dword [esi], 0xffffffff
call ecx
sub esp, 0x18
mov ecx, 0x52701bd2
mov dword [esp + 0x2650], eax
cmp dword [esp + 0x2650], 0
sete bl
and bl, 1
mov byte [esp + 0x266f], bl
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov eax, 0x9cc7b80a
mov ecx, 0x9e220049
mov dl, byte [esp + 0x266f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x1c8], eax
call fcn.00434f20
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
mov eax, 0x6a9a094
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x1e4e980d
mov ecx, 0x412556fb
mov dl, byte [esp + 0x2670]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x1c4], eax
call fcn.00434f20
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
lea eax, [esp + 0xd58]
mov ecx, dword [esp + 0x810]
mov edx, dword [esp + 0x265c]
mov dword [edx], ecx
mov ecx, dword [esp + 0x81c]
mov edx, dword [esp + 0x265c]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x81c]
mov edx, dword [esp + 0x81c]
mov esi, dword [esp + 0x265c]
add esi, 8
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00434260
mov ecx, 0x907ddb32
mov edx, 0x53715a8e
mov esi, dword [esp + 0x814]
mov edi, dword [esp + 0x265c]
mov ebx, dword [esp + 0x81c]
add ebx, 8
mov dword [edi + ebx], esi
cmp dword [0x528984], 0
cmovne ecx, edx
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x1c0], eax
jmp 0x450b0c
mov eax, 0x2347a1b1
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [esp + 0x814]
mov ecx, dword [0x528984]
mov edx, dword [esp + 0x814]
mov esi, dword [esp + 0x265c]
mov edi, dword [esp + 0x81c]
add edi, 8
add edi, 4
add esi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00434260
mov ecx, 0x1bbf2397
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x1bc], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0x907ddb32
jmp 0x450b0c
lea eax, [esp + 0xb4e]
lea ecx, [esp + 0x21bc]
mov dword [esp + 0x2620], ecx
mov dword [esp + 0x2624], eax
mov dword [esp + 0x262c], 0
mov eax, dword [0x529ce8]
mov ecx, esp
lea edx, [esp + 0x2610]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0x20167d2a
mov edx, 0xaa830a86
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
mov eax, 0x7fe1a4c8
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x529ce4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x1b4], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1376]
mov dword [esp + 0x2620], ecx
mov dword [esp + 0x2624], 0
mov dword [esp + 0x262c], 1
mov ecx, dword [0x529ce8]
mov edx, esp
lea esi, [esp + 0x2610]
mov dword [edx], esi
mov dword [esp + 0x1b0], eax
call ecx
sub esp, 4
mov ecx, 0xb8a2524e
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x2671], bl
mov dword [esp + 0x7a0], ecx
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xe6f2100d
jmp 0x450b0c
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x529ce4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x184], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x800], 1
mov dword [esp + 0x7a0], 0xe6f2100d
mov dword [esp + 0x180], eax
jmp 0x450b0c
mov eax, 0x2d0fd881
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0xd01f826b
cmp dword [esp + 0x2650], 0
setne cl
and cl, 1
mov byte [esp + 0x2672], cl
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x33a9b393
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [esp + 0x2654]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x3f8a56b
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x174], eax
jmp 0x450b0c
mov eax, 0xd1a3fb68
mov ecx, 0xa2960067
cmp dword [esp + 0x2658], 0
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x4f635ce1
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x13c381b4
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x170], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xd1a3fb68
jmp 0x450b0c
mov eax, 0xe36c06e2
mov ecx, 0x81dfba29
mov dl, byte [esp + 0x2673]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x6c287256
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov eax, 0x62a25d05
mov dword [esp + 0x7a0], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xecf26820
jmp 0x450b0c
mov eax, dword [esp + 0x2660]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x7a0], 0xaa54a273
jmp 0x450b0c
lea eax, [esp + 0x7d8]
mov ecx, dword [0x4e7488]
movzx ecx, word [ecx]
mov dword [esp + 0x7d4], ecx
mov ecx, dword [esp + 0x7d4]
mov word [esp + edx*8], fs
pop es
add byte [eax], al
mov edx, dword [0x4e7488]
movzx ecx, word [edx + ecx*2 + 2]
mov dword [esp + 0x7d0], ecx
mov ecx, dword [esp + 0x7d0]
mov edx, dword [0x4e7488]
mov esi, dword [esp + 0x7d4]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4e7488]
add esi, 2
mov edi, dword [esp + 0x7d4]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0042f4e0
lea eax, [esp + 0x7d8]
mov dword [esp], eax
call fcn.00434890
lea ecx, [esp + 0x7d8]
mov edx, dword [0x528984]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004417d0
mov dword [esp + 0x7a0], 0x7a54abba
mov dword [esp + 0x164], eax
jmp 0x450b0c
mov dword [esp + 0x2660], 0
mov dword [esp + 0x7a0], 0x462265da
jmp 0x450b0c
mov dword [esp + 0x7a0], 0xe826444c
jmp 0x450b0c
mov eax, dword [0x529cd4]
mov ecx, dword [0x529aec]
mov edx, dword [0x529b14]
mov esi, dword [esp + 0x264c]
mov edi, esp
lea ebx, [esp + 0x260c]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529afc]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x138], eax
lea eax, [esp + 0x2608]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b00]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x134], eax
lea eax, [esp + 0x2604]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529aec]
mov esi, dword [0x529b10]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x130], eax
lea eax, [esp + 0x2600]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529ae0]
mov esi, dword [0x529b20]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x12c], eax
lea eax, [esp + 0x25fc]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529aec]
mov esi, dword [0x529b24]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x128], eax
lea eax, [esp + 0x25f8]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b30]
mov esi, dword [0x529b28]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x124], eax
lea eax, [esp + 0x25f4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b2c]
mov esi, dword [0x529b28]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x120], eax
lea eax, [esp + 0x25f0]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd4]
mov edx, dword [0x529b2c]
mov esi, dword [0x529b14]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [esp + 0x11c], eax
lea eax, [esp + 0x25ec]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x529cd0]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x118], eax
call ecx
sub esp, 4
mov dword [esp + 0x114], eax
call fcn.0041b11d
and eax, 0xf
mov ecx, esp
lea edx, [esp + 0x87c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
mov dword [esp + 0x110], edx
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x110]
mov dword [ecx], edx
mov dword [esp + 0x10c], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0x108], eax
call fcn.0041b11d
and eax, 1
mov ecx, esp
mov edx, dword [esp + 0x108]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x110]
mov dword [ecx], edx
mov dword [esp + 0x104], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0x100], eax
call fcn.0041b11d
and eax, 5
mov ecx, esp
mov edx, dword [esp + 0x100]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x110]
mov dword [ecx], edx
mov dword [esp + 0xfc], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x824], ecx
mov word [esp + eax*2 + 0x87c], 0x2e
mov eax, dword [esp + 0x824]
lea eax, [esp + eax*2 + 0x87c]
mov dword [esp + 0xf8], eax
call fcn.0041b11d
and eax, 0xc
mov ecx, esp
mov edx, dword [esp + 0xf8]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041b62a
mov ecx, esp
mov edx, dword [esp + 0x110]
mov dword [ecx], edx
mov dword [esp + 0xf4], eax
call fcn.00434890
mov dword [esp + 0x824], eax
mov eax, dword [0x4e748c]
movzx eax, byte [eax]
mov dword [esp + 0x7c8], eax
mov ecx, dword [0x4e748c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x7c4], eax
mov ecx, dword [0x4e748c]
mov edx, dword [esp + 0x7c8]
lea esi, [ecx + edx + 2]
inc ecx
mov edi, esp
mov dword [edi + 0x10], eax
mov dword [edi + 0xc], esi
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
lea eax, [esp + 0x844]
mov dword [edi], eax
call fcn.00447030
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b08]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x25e8], eax
mov eax, dword [0x529cc4]
xor ecx, ecx
mov edx, dword [0x529b38]
mov esi, dword [0x529ae8]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x87c]
mov edx, dword [0x529cc0]
mov esi, dword [0x529b04]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0xf0], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x1da8]
mov edx, dword [0x529cc0]
mov esi, dword [0x529aec]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0xec], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cbc]
mov edx, dword [0x529ae4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0xe8], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x844]
mov edx, dword [0x529cb8]
mov esi, dword [0x529b34]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0xe4], eax
call edx
sub esp, 0x10
mov ecx, dword [0x529ccc]
mov edx, dword [0x529b0c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xe0], eax
call ecx
sub esp, 8
mov dword [esp + 0x25e4], eax
mov eax, dword [0x529cb4]
mov ecx, dword [esp + 0x2600]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2600]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xdc], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xd8], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xd4], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xd0], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x2608]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xcc], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2608]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xc8], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x2604]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xc4], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x2604]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xc0], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x260c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xbc], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25ec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xb8], eax
call ecx
sub esp, 8
mov dword [esp + 0xb4], eax
call fcn.0041b11d
lea ecx, [esp + 0x23c6]
mov edx, 5
xor esi, esi
mov dword [esp + 0xb0], edx
mov edx, esi
mov esi, dword [esp + 0xb0]
div esi
mov eax, dword [edx*4 + 0x4e7490]
mov dword [esp + 0x25d4], eax
mov eax, dword [esp + 0x25d4]
movzx eax, word [eax]
mov dword [esp + 0x820], eax
mov eax, dword [esp + 0x25d4]
movzx eax, word [eax]
mov dword [esp + 0x7c0], eax
mov eax, dword [esp + 0x7c0]
mov edx, dword [esp + 0x25d4]
movzx eax, word [edx + eax*2 + 2]
mov dword [esp + 0x7bc], eax
mov eax, dword [esp + 0x7bc]
mov edx, dword [esp + 0x25d4]
mov edi, dword [esp + 0x7c0]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [esp + 0x25d4]
add edi, 2
mov ebx, dword [esp + 0x7c0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.0042f4e0
mov eax, 0x104
lea ecx, [esp + 0x1376]
lea edx, [esp + 0x23c6]
mov esi, dword [esp + 0x820]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0xac], eax
call fcn.00434260
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1376]
mov edi, 0x104
mov ebx, dword [esp + 0x820]
sub edi, ebx
mov ebx, dword [esp + 0x820]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edx
call fcn.00434260
mov ecx, 0x104
lea edx, [esp + 0x116c]
lea esi, [esp + 0x23c6]
mov edi, dword [esp + 0x820]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ecx
call fcn.00434260
lea ecx, str.32.exe
mov edx, 6
lea esi, [esp + 0x116c]
mov edi, 0x104
mov ebx, dword [esp + 0x820]
sub edi, ebx
mov ebx, dword [esp + 0x820]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
call fcn.00434260
lea ecx, [esp + 0x834]
mov edx, dword [0x4e74a4]
movzx edx, byte [edx]
mov dword [esp + 0x7b8], edx
mov edx, dword [esp + 0x7b8]
mov esi, dword [0x4e74a4]
movzx edx, byte [esi + edx + 1]
mov dword [esp + 0x7b4], edx
mov edx, dword [esp + 0x7b4]
mov esi, dword [0x4e74a4]
add esi, dword [esp + 0x7b8]
add esi, 2
mov edi, dword [0x4e74a4]
add edi, 1
mov ebx, dword [esp + 0x7b8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x90], eax
call fcn.00447030
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b14]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x1376]
mov dword [esp + 0x25e0], eax
mov eax, dword [0x529cc0]
mov edx, dword [0x529aec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x116c]
mov edx, dword [0x529cc0]
mov esi, dword [0x529af4]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x8c], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cc0]
mov edx, dword [0x529af0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [esp + 0x88], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x834]
mov edx, dword [0x529cb8]
mov esi, dword [0x529b2c]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x84], eax
call edx
sub esp, 0x10
mov ecx, dword [0x529ccc]
mov edx, dword [0x529b18]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x80], eax
call ecx
sub esp, 8
mov dword [esp + 0x25dc], eax
mov eax, dword [0x529cc0]
mov ecx, dword [0x529aec]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x52b2ae
call eax
sub esp, 0xc
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25dc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x7c], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x854]
mov edx, dword [0x4e74a8]
movzx edx, word [edx]
mov dword [esp + 0x7b0], edx
mov edx, dword [esp + 0x7b0]
mov esi, dword [0x4e74a8]
movzx edx, word [esi + edx*2 + 2]
mov dword [esp + 0x7ac], edx
mov edx, dword [esp + 0x7ac]
mov esi, dword [0x4e74a8]
mov edi, dword [esp + 0x7b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4e74a8]
add edi, 2
mov ebx, dword [esp + 0x7b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x78], eax
call fcn.0042f4e0
mov eax, dword [0x529ccc]
mov ecx, dword [0x529b1c]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x854]
mov dword [esp + 0x25d8], eax
mov eax, dword [0x529cc0]
mov edx, dword [0x529aec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x178a]
mov edx, dword [0x529cc0]
mov esi, dword [0x529af8]
mov edi, dword [esp + 0x264c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x74], eax
call edx
sub esp, 0xc
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25d8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x70], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x6c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25ec]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x68], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x260c]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x64], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x60], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25f0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x5c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f0]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x58], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25f4]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x54], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb4]
mov edx, dword [esp + 0x25fc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x50], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cb0]
mov edx, dword [esp + 0x25fc]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x4c], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cc8]
mov edx, dword [esp + 0x25e8]
mov esi, dword [esp + 0x264c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x48], eax
call ecx
sub esp, 8
mov ecx, dword [0x529cd8]
mov edx, dword [esp + 0x264c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x44], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x944]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0x40], eax
call fcn.00442df0
lea eax, [esp + 0x944]
mov ecx, dword [0x529d24]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov dword [esp + 0x2658], eax
mov dword [esp + 0x7a0], 0x609fd400
jmp 0x450b0c
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov dword [esp + 0x80c], eax
mov dword [esp + 0x7a0], 0x61e3a694
jmp 0x450b0c
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x529ce4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x30], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1376]
mov dword [esp + 0x2620], ecx
mov dword [esp + 0x2624], 0
mov dword [esp + 0x262c], 1
mov ecx, dword [0x529ce8]
mov edx, esp
lea esi, [esp + 0x2610]
mov dword [edx], esi
mov dword [esp + 0x2c], eax
call ecx
sub esp, 4
mov dword [esp + 0x7a0], 0x7fe1a4c8
mov dword [esp + 0x28], eax
jmp 0x450b0c
mov dword [esp + 0x7a0], 0x2d0fd881
jmp 0x450b0c
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0x4f635ce1
mov dword [esp + 0x20], eax
jmp 0x450b0c
jmp 0x44b573