Function at 0x431060
Capabilities:
Accept command line arguments
Copy file
Delete file
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2680
call fcn.0041e5a0
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x82a]
mov esi, 0x10
lea edi, [esp + 0x834]
lea ebx, [esp + 0x844]
mov dword [esp + 0x79c], eax
mov eax, 0x28
mov dword [esp + 0x798], eax
lea eax, [esp + 0x854]
mov dword [esp + 0x794], eax
mov eax, 0xc8
mov dword [esp + 0x790], eax
lea eax, [esp + 0x87c]
mov dword [esp + 0x78c], eax
mov eax, 0x20a
mov dword [esp + 0x788], eax
lea eax, [esp + 0x944]
mov dword [esp + 0x784], eax
lea eax, [esp + 0xd58]
mov dword [esp + 0x780], eax
lea eax, [esp + 0xf62]
mov dword [esp + 0x77c], eax
lea eax, [esp + 0x116c]
mov dword [esp + 0x778], eax
lea eax, [esp + 0x1376]
mov dword [esp + 0x774], eax
lea eax, [esp + 0x1580]
mov dword [esp + 0x770], eax
lea eax, [esp + 0x178a]
mov dword [esp + 0x76c], eax
lea eax, [esp + 0x1994]
mov dword [esp + 0x768], eax
lea eax, [esp + 0x1b9e]
mov dword [esp + 0x764], eax
lea eax, [esp + 0x1da8]
mov dword [esp + 0x760], eax
lea eax, [esp + 0x1fb2]
mov dword [esp + 0x75c], eax
lea eax, [esp + 0x21bc]
mov dword [esp + 0x758], eax
lea eax, [esp + 0x23c6]
mov dword [esp + 0x754], eax
mov eax, 0x3c
mov dword [esp + 0x750], eax
lea eax, [esp + 0x2610]
mov dword [esp + 0x2660], 0
mov dword [esp + 0x265c], 0
mov dword [esp + 0x2658], 0
mov dword [esp + 0x2654], 0
mov dword [esp + 0x2650], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x74c], ebx
mov dword [esp + 0x748], ecx
mov dword [esp + 0x744], edx
mov dword [esp + 0x740], esi
mov dword [esp + 0x73c], edi
call fcn.0041e4d0
mov dword [esp + 0x25d4], 0
mov dword [esp + 0x25d0], 0
mov eax, dword [esp + 0x754]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x758]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x75c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x760]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x764]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x768]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x76c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x770]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x774]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x778]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x77c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x780]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x784]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e4d0
mov eax, dword [esp + 0x78c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0041e4d0
mov eax, dword [esp + 0x794]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0041e4d0
mov eax, dword [esp + 0x74c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e4d0
mov eax, dword [esp + 0x73c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e4d0
mov eax, dword [esp + 0x744]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0041e4d0
mov dword [esp + 0x814], 0
mov dword [esp + 0x810], 0
mov dword [esp + 0x804], 0
mov dword [esp + 0x800], 0xffffffff
call fcn.0043e370
mov dword [esp + 0x2668], eax
mov dword [esp + 0x7a0], 0x10939dad
mov eax, dword [esp + 0x7a0]
mov ecx, eax
sub ecx, 0x7d746c82
mov dword [esp + 0x738], eax
mov dword [esp + 0x734], ecx
jg 0x43339d
jmp 0x4314cb
mov eax, dword [esp + 0x738]
sub eax, 0x8406fd7a
mov dword [esp + 0x730], eax
jg 0x431507
jmp 0x4314e9
mov eax, dword [esp + 0x738]
sub eax, 0x82553d93
mov dword [esp + 0x72c], eax
je 0x4337da
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x87e27f90
mov dword [esp + 0x728], eax
jg 0x431543
jmp 0x431525
mov eax, dword [esp + 0x738]
sub eax, 0x8406fd7b
mov dword [esp + 0x724], eax
je 0x43555c
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x8a51d68b
mov dword [esp + 0x720], eax
jg 0x43157f
jmp 0x431561
mov eax, dword [esp + 0x738]
sub eax, 0x87e27f91
mov dword [esp + 0x71c], eax
je 0x433c5e
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x7adc926a
mov dword [esp + 0x718], eax
jg 0x43337f
jmp 0x43159d
mov eax, dword [esp + 0x738]
sub eax, 0x8bc0721d
mov dword [esp + 0x714], eax
jg 0x4315d9
jmp 0x4315bb
mov eax, dword [esp + 0x738]
sub eax, 0x8a51d68c
mov dword [esp + 0x710], eax
je 0x435326
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x8eac7d49
mov dword [esp + 0x70c], eax
jg 0x431615
jmp 0x4315f7
mov eax, dword [esp + 0x738]
sub eax, 0x8bc0721e
mov dword [esp + 0x708], eax
je 0x433e34
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x922c9f2d
mov dword [esp + 0x704], eax
jg 0x431651
jmp 0x431633
mov eax, dword [esp + 0x738]
sub eax, 0x8eac7d4a
mov dword [esp + 0x700], eax
je 0x433497
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x932d3ad2
mov dword [esp + 0x6fc], eax
jg 0x43168d
jmp 0x43166f
mov eax, dword [esp + 0x738]
sub eax, 0x922c9f2e
mov dword [esp + 0x6f8], eax
je 0x435a02
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x9ba50aa0
mov dword [esp + 0x6f4], eax
jg 0x4316c9
jmp 0x4316ab
mov eax, dword [esp + 0x738]
sub eax, 0x932d3ad3
mov dword [esp + 0x6f0], eax
je 0x4350b9
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x9d8bb5c6
mov dword [esp + 0x6ec], eax
jg 0x431705
jmp 0x4316e7
mov eax, dword [esp + 0x738]
sub eax, 0x9ba50aa1
mov dword [esp + 0x6e8], eax
je 0x434d4a
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x9e68a81b
mov dword [esp + 0x6e4], eax
jg 0x431741
jmp 0x431723
mov eax, dword [esp + 0x738]
sub eax, 0x9d8bb5c7
mov dword [esp + 0x6e0], eax
je 0x435d02
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0xa47a6c00
mov dword [esp + 0x6dc], eax
jg 0x43177d
jmp 0x43175f
mov eax, dword [esp + 0x738]
sub eax, 0x9e68a81c
mov dword [esp + 0x6d8], eax
je 0x4334ba
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0xa506500e
mov dword [esp + 0x6d4], eax
jg 0x4317b9
jmp 0x43179b
mov eax, dword [esp + 0x738]
sub eax, 0xa47a6c01
mov dword [esp + 0x6d0], eax
je 0x4333f6
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0xa6185bc3
mov dword [esp + 0x6cc], eax
jg 0x4317f5
jmp 0x4317d7
mov eax, dword [esp + 0x738]
sub eax, 0xa506500f
mov dword [esp + 0x6c8], eax
je 0x435b85
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x79373f0f
mov dword [esp + 0x6c4], eax
jg 0x433361
jmp 0x431813
mov eax, dword [esp + 0x738]
sub eax, 0x78de3f07
mov dword [esp + 0x6c0], eax
jg 0x433343
jmp 0x431831
mov eax, dword [esp + 0x738]
sub eax, 0x7890b94c
mov dword [esp + 0x6bc], eax
jg 0x433325
jmp 0x43184f
mov eax, dword [esp + 0x738]
sub eax, 0x76e36eea
mov dword [esp + 0x6b8], eax
jg 0x433307
jmp 0x43186d
mov eax, dword [esp + 0x738]
sub eax, 0x753c6a9d
mov dword [esp + 0x6b4], eax
jg 0x4332e9
jmp 0x43188b
mov eax, dword [esp + 0x738]
sub eax, 0x74d06840
mov dword [esp + 0x6b0], eax
jg 0x4332cb
jmp 0x4318a9
mov eax, dword [esp + 0x738]
sub eax, 0x73c7c647
mov dword [esp + 0x6ac], eax
jg 0x4332ad
jmp 0x4318c7
mov eax, dword [esp + 0x738]
sub eax, 0x738d5800
mov dword [esp + 0x6a8], eax
jg 0x43328f
jmp 0x4318e5
mov eax, dword [esp + 0x738]
sub eax, 0x7054b8f6
mov dword [esp + 0x6a4], eax
jg 0x433271
jmp 0x431903
mov eax, dword [esp + 0x738]
sub eax, 0x675b314e
mov dword [esp + 0x6a0], eax
jg 0x433253
jmp 0x431921
mov eax, dword [esp + 0x738]
sub eax, 0x65829ad1
mov dword [esp + 0x69c], eax
jg 0x433235
jmp 0x43193f
mov eax, dword [esp + 0x738]
sub eax, 0x654b7034
mov dword [esp + 0x698], eax
jg 0x433217
jmp 0x43195d
mov eax, dword [esp + 0x738]
sub eax, 0x63df1aba
mov dword [esp + 0x694], eax
jg 0x4331f9
jmp 0x43197b
mov eax, dword [esp + 0x738]
sub eax, 0x63473b10
mov dword [esp + 0x690], eax
jg 0x4331db
jmp 0x431999
mov eax, dword [esp + 0x738]
sub eax, 0x628445a4
mov dword [esp + 0x68c], eax
jg 0x4331bd
jmp 0x4319b7
mov eax, dword [esp + 0x738]
sub eax, 0x6161ee8b
mov dword [esp + 0x688], eax
jg 0x43319f
jmp 0x4319d5
mov eax, dword [esp + 0x738]
sub eax, 0x60b17f7c
mov dword [esp + 0x684], eax
jg 0x433181
jmp 0x4319f3
mov eax, dword [esp + 0x738]
sub eax, 0x5e99f377
mov dword [esp + 0x680], eax
jg 0x433163
jmp 0x431a11
mov eax, dword [esp + 0x738]
sub eax, 0x5c468400
mov dword [esp + 0x67c], eax
jg 0x433145
jmp 0x431a2f
mov eax, dword [esp + 0x738]
sub eax, 0x5aff059e
mov dword [esp + 0x678], eax
jg 0x433127
jmp 0x431a4d
mov eax, dword [esp + 0x738]
sub eax, 0x5accad29
mov dword [esp + 0x674], eax
jg 0x433109
jmp 0x431a6b
mov eax, dword [esp + 0x738]
sub eax, 0x59f3c9fe
mov dword [esp + 0x670], eax
jg 0x4330eb
jmp 0x431a89
mov eax, dword [esp + 0x738]
sub eax, 0x561553de
mov dword [esp + 0x66c], eax
jg 0x4330cd
jmp 0x431aa7
mov eax, dword [esp + 0x738]
sub eax, 0x536fdde2
mov dword [esp + 0x668], eax
jg 0x4330af
jmp 0x431ac5
mov eax, dword [esp + 0x738]
sub eax, 0x526ae31d
mov dword [esp + 0x664], eax
jg 0x433091
jmp 0x431ae3
mov eax, dword [esp + 0x738]
sub eax, 0x4e7a66d4
mov dword [esp + 0x660], eax
jg 0x433073
jmp 0x431b01
mov eax, dword [esp + 0x738]
sub eax, 0x4d3fbcb6
mov dword [esp + 0x65c], eax
jg 0x433055
jmp 0x431b1f
mov eax, dword [esp + 0x738]
sub eax, 0x4a9a197e
mov dword [esp + 0x658], eax
jg 0x433037
jmp 0x431b3d
mov eax, dword [esp + 0x738]
sub eax, 0x45a47eb2
mov dword [esp + 0x654], eax
jg 0x433019
jmp 0x431b5b
mov eax, dword [esp + 0x738]
sub eax, 0x44ca4f8c
mov dword [esp + 0x650], eax
jg 0x432ffb
jmp 0x431b79
mov eax, dword [esp + 0x738]
sub eax, 0x448a4bc5
mov dword [esp + 0x64c], eax
jg 0x432fdd
jmp 0x431b97
mov eax, dword [esp + 0x738]
sub eax, 0x43d6d50f
mov dword [esp + 0x648], eax
jg 0x432fbf
jmp 0x431bb5
mov eax, dword [esp + 0x738]
sub eax, 0x435ba709
mov dword [esp + 0x644], eax
jg 0x432fa1
jmp 0x431bd3
mov eax, dword [esp + 0x738]
sub eax, 0x40038b49
mov dword [esp + 0x640], eax
jg 0x432f83
jmp 0x431bf1
mov eax, dword [esp + 0x738]
sub eax, 0x3dfd29f6
mov dword [esp + 0x63c], eax
jg 0x432f65
jmp 0x431c0f
mov eax, dword [esp + 0x738]
sub eax, 0x3bcf9bb0
mov dword [esp + 0x638], eax
jg 0x432f47
jmp 0x431c2d
mov eax, dword [esp + 0x738]
sub eax, 0x3b6aee1f
mov dword [esp + 0x634], eax
jg 0x432f29
jmp 0x431c4b
mov eax, dword [esp + 0x738]
sub eax, 0x3b0c98a7
mov dword [esp + 0x630], eax
jg 0x432f0b
jmp 0x431c69
mov eax, dword [esp + 0x738]
sub eax, 0x3ac93d57
mov dword [esp + 0x62c], eax
jg 0x432eed
jmp 0x431c87
mov eax, dword [esp + 0x738]
sub eax, 0x39f98562
mov dword [esp + 0x628], eax
jg 0x432ecf
jmp 0x431ca5
mov eax, dword [esp + 0x738]
sub eax, 0x369fdde5
mov dword [esp + 0x624], eax
jg 0x432eb1
jmp 0x431cc3
mov eax, dword [esp + 0x738]
sub eax, 0x367f077c
mov dword [esp + 0x620], eax
jg 0x432e93
jmp 0x431ce1
mov eax, dword [esp + 0x738]
sub eax, 0x3396f60b
mov dword [esp + 0x61c], eax
jg 0x432e75
jmp 0x431cff
mov eax, dword [esp + 0x738]
sub eax, 0x332fb5bd
mov dword [esp + 0x618], eax
jg 0x432e57
jmp 0x431d1d
mov eax, dword [esp + 0x738]
sub eax, 0x2d7c023c
mov dword [esp + 0x614], eax
jg 0x432e39
jmp 0x431d3b
mov eax, dword [esp + 0x738]
sub eax, 0x2b6ae8d9
mov dword [esp + 0x610], eax
jg 0x432e1b
jmp 0x431d59
mov eax, dword [esp + 0x738]
sub eax, 0x2b50a6d6
mov dword [esp + 0x60c], eax
jg 0x432dfd
jmp 0x431d77
mov eax, dword [esp + 0x738]
sub eax, 0x29b3eb28
mov dword [esp + 0x608], eax
jg 0x432ddf
jmp 0x431d95
mov eax, dword [esp + 0x738]
sub eax, 0x2746fb46
mov dword [esp + 0x604], eax
jg 0x432dc1
jmp 0x431db3
mov eax, dword [esp + 0x738]
sub eax, 0x26f6a76f
mov dword [esp + 0x600], eax
jg 0x432da3
jmp 0x431dd1
mov eax, dword [esp + 0x738]
sub eax, 0x25315ff3
mov dword [esp + 0x5fc], eax
jg 0x432d85
jmp 0x431def
mov eax, dword [esp + 0x738]
sub eax, 0x24628715
mov dword [esp + 0x5f8], eax
jg 0x432d67
jmp 0x431e0d
mov eax, dword [esp + 0x738]
sub eax, 0x2274d9a7
mov dword [esp + 0x5f4], eax
jg 0x432d49
jmp 0x431e2b
mov eax, dword [esp + 0x738]
sub eax, 0x1e8c86aa
mov dword [esp + 0x5f0], eax
jg 0x432d2b
jmp 0x431e49
mov eax, dword [esp + 0x738]
sub eax, 0x1b66452a
mov dword [esp + 0x5ec], eax
jg 0x432d0d
jmp 0x431e67
mov eax, dword [esp + 0x738]
sub eax, 0x1af23b5e
mov dword [esp + 0x5e8], eax
jg 0x432cef
jmp 0x431e85
mov eax, dword [esp + 0x738]
sub eax, 0x1af23b5f
mov dword [esp + 0x3f8], eax
je 0x435264
mov eax, dword [esp + 0x738]
sub eax, 0x1b66452b
mov dword [esp + 0x3f4], eax
je 0x435a51
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x1e8c86ab
mov dword [esp + 0x3f0], eax
je 0x43599c
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x2274d9a8
mov dword [esp + 0x3ec], eax
je 0x4363c9
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x24628716
mov dword [esp + 0x3e8], eax
je 0x435979
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x25315ff4
mov dword [esp + 0x3e4], eax
je 0x435a25
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x26f6a770
mov dword [esp + 0x3e0], eax
je 0x435bb4
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x2746fb47
mov dword [esp + 0x3dc], eax
je 0x435023
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x29b3eb29
mov dword [esp + 0x3d8], eax
je 0x43392b
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x2b50a6d7
mov dword [esp + 0x3d4], eax
je 0x43563f
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x2b6ae8da
mov dword [esp + 0x3d0], eax
je 0x4359c8
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x2d7c023d
mov dword [esp + 0x3cc], eax
je 0x435882
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x332fb5be
mov dword [esp + 0x3c8], eax
je 0x43569c
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3396f60c
mov dword [esp + 0x3c4], eax
je 0x433902
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x367f077d
mov dword [esp + 0x3c0], eax
je 0x43395e
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x369fdde6
mov dword [esp + 0x3bc], eax
je 0x435d12
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x39f98563
mov dword [esp + 0x3b8], eax
je 0x435be2
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3ac93d58
mov dword [esp + 0x3b4], eax
je 0x435b62
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3b0c98a8
mov dword [esp + 0x3b0], eax
je 0x436113
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3b6aee20
mov dword [esp + 0x3ac], eax
je 0x436695
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3bcf9bb1
mov dword [esp + 0x3a8], eax
je 0x433407
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x3dfd29f7
mov dword [esp + 0x3a4], eax
je 0x434e01
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x40038b4a
mov dword [esp + 0x3a0], eax
je 0x433a23
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x435ba70a
mov dword [esp + 0x39c], eax
je 0x435207
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x43d6d510
mov dword [esp + 0x398], eax
je 0x43505e
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x448a4bc6
mov dword [esp + 0x394], eax
je 0x43548e
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x44ca4f8d
mov dword [esp + 0x390], eax
je 0x435733
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x45a47eb3
mov dword [esp + 0x38c], eax
je 0x43547e
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x4a9a197f
mov dword [esp + 0x388], eax
je 0x4362da
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x4d3fbcb7
mov dword [esp + 0x384], eax
je 0x4352c8
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x4e7a66d5
mov dword [esp + 0x380], eax
je 0x4365eb
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x526ae31e
mov dword [esp + 0x37c], eax
je 0x433727
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x536fdde3
mov dword [esp + 0x378], eax
je 0x436103
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x561553df
mov dword [esp + 0x374], eax
je 0x4354fe
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x59f3c9ff
mov dword [esp + 0x370], eax
je 0x433c1a
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x5accad2a
mov dword [esp + 0x36c], eax
je 0x433633
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x5aff059f
mov dword [esp + 0x368], eax
je 0x435913
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x5c468401
mov dword [esp + 0x364], eax
je 0x43384a
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x5e99f378
mov dword [esp + 0x360], eax
je 0x435253
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x60b17f7d
mov dword [esp + 0x35c], eax
je 0x4337ea
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x6161ee8c
mov dword [esp + 0x358], eax
je 0x436519
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x628445a5
mov dword [esp + 0x354], eax
je 0x4358ef
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x63473b11
mov dword [esp + 0x350], eax
je 0x435dc5
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x63df1abb
mov dword [esp + 0x34c], eax
je 0x433877
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x654b7035
mov dword [esp + 0x348], eax
je 0x433ca1
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x65829ad2
mov dword [esp + 0x344], eax
je 0x434d0f
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x675b314f
mov dword [esp + 0x340], eax
je 0x435710
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x7054b8f7
mov dword [esp + 0x33c], eax
je 0x4352eb
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x738d5801
mov dword [esp + 0x338], eax
je 0x435950
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x73c7c648
mov dword [esp + 0x334], eax
je 0x433c90
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x74d06841
mov dword [esp + 0x330], eax
je 0x433e5d
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x753c6a9e
mov dword [esp + 0x32c], eax
je 0x433a44
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x76e36eeb
mov dword [esp + 0x328], eax
je 0x435743
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x7890b94d
mov dword [esp + 0x324], eax
je 0x435092
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x78de3f08
mov dword [esp + 0x320], eax
je 0x43354b
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x79373f10
mov dword [esp + 0x31c], eax
je 0x435f94
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x7adc926b
mov dword [esp + 0x318], eax
je 0x435abf
jmp 0x4333bb
mov eax, dword [esp + 0x738]
sub eax, 0x7d746c83
mov dword [esp + 0x314], eax
je 0x4351d3
jmp 0x4333bb
jmp 0x4366c2
mov eax, 0x3bcf9bb1
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x104
lea ecx, [esp + 0xf62]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x310], eax
call fcn.00428580
mov dword [esp + 0x824], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, str..exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ed91
lea ecx, [0x45b060]
mov dword [esp + 0x25d0], eax
mov eax, dword [esp + 0x25d0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ed91
mov ecx, 0x8eac7d4a
mov dword [0x52c984], eax
cmp dword [0x52c984], 0
setne dl
and dl, 1
mov byte [esp + 0x266c], dl
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov eax, 0xefd8e4a9
mov ecx, 0x9e68a81c
mov dl, byte [esp + 0x266c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0
mov ecx, 0x28
lea edx, [esp + 0x7d8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esp + 0x30c], eax
mov dword [esp + 0x308], ecx
call fcn.0041e4d0
mov dword [esp + 0x7a0], 0xdb1bf008
jmp 0x4366c2
lea eax, [esp + 0x7d8]
mov ecx, dword [0x4eb48c]
movzx ecx, word [ecx]
mov dword [esp + 0x7d4], ecx
mov ecx, dword [esp + 0x7d4]
sub ecx, 0xf5ca39fb
mov edx, dword [0x4eb48c]
movzx ecx, word [edx + ecx*2 - 0x146b8c08]
mov dword [esp + 0x7d0], ecx
mov ecx, dword [esp + 0x7d0]
mov edx, dword [0x4eb48c]
mov esi, dword [esp + 0x7d4]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4eb48c]
add esi, 2
mov edi, dword [esp + 0x7d4]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00427c80
lea eax, [esp + 0x7d8]
mov dword [esp], eax
call fcn.00447800
lea ecx, [esp + 0x7d8]
mov edx, dword [0x52c984]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004538d0
mov ecx, 0xfb4409a0
mov edx, 0x5accad2a
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov dword [esp + 0x7a0], 0xefd8e4a9
jmp 0x4366c2
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x60b17f7d
mov edx, 0xa6185bc4
cmp eax, 0xb7
cmove ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov dword [esp + 0x7a0], 0xcc1d915e
jmp 0x4366c2
lea eax, [0x52c988]
mov ecx, 0x104
lea edx, [esp + 0xf62]
mov esi, dword [esp + 0x824]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x2f8], ecx
call fcn.004528e0
mov dword [esp + 0x7a0], 0xcc1d915e
mov dword [esp + 0x2f4], eax
jmp 0x4366c2
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x63df1abb
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x2f0], eax
jmp 0x4366c2
mov dword [esp + 0x7a0], 0xa771e45
jmp 0x4366c2
mov eax, 0x29b3eb29
cmp dword [esp + 0x804], 6
setb cl
and cl, 1
mov byte [esp + 0x266d], cl
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x367f077d
mov ecx, 0xfbbe113a
mov dl, byte [esp + 0x266d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0xbac63204
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov dword [esp + 0x7a0], 0xf84a2c59
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x2d4], eax
mov dword [esp + 0x2d0], ecx
call fcn.0042c9a0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x178a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x2cc], eax
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2c4], edx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x2c0], eax
mov dword [esp + 0x2bc], ecx
call fcn.0042e500
lea eax, [esp + 0x1994]
mov dword [esp], eax
call fcn.00447800
mov ecx, 0x104
lea edx, [esp + 0x178a]
lea esi, [esp + 0x1fb2]
mov dword [esp + 0x7cc], eax
mov eax, dword [esp + 0x818]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x2b8], ecx
call fcn.004528e0
lea ecx, [esp + 0x178a]
mov edx, 0
lea esi, [esp + 0x1994]
mov edi, dword [esp + 0x7cc]
mov ebx, dword [esp + 0x818]
sub edx, ebx
add edx, 0x104
mov ebx, dword [esp + 0x818]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x2b4], eax
call fcn.004528e0
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x178a]
mov edi, 0
mov ebx, dword [esp + 0x818]
mov dword [esp + 0x2b0], eax
mov eax, edi
sub eax, ebx
add eax, 0x104
mov ebx, dword [esp + 0x7cc]
sub edi, ebx
add eax, edi
mov edi, dword [esp + 0x818]
shl edi, 1
add esi, edi
mov edi, dword [esp + 0x7cc]
shl edi, 1
add esi, edi
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x2ac], edx
call fcn.004528e0
mov ecx, 0xd0d2c961
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0x2a8], eax
jmp 0x4366c2
lea eax, [esp + 0xd58]
lea ecx, [esp + 0x178a]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0x87e27f91
mov edx, 0xf84a2c59
cmp eax, 0
cmove ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov eax, 0xfcf728e5
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x654b7035
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1da8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x2a4], eax
mov dword [esp + 0x2a0], ecx
call fcn.0042c9a0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1b9e]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x29c], eax
mov dword [esp + 0x298], ecx
mov dword [esp + 0x294], edx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, [esp + 0x1da8]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x290], eax
mov dword [esp + 0x28c], ecx
call fcn.0042e500
mov eax, 0x104
lea ecx, [esp + 0x1b9e]
lea edx, [esp + 0x1fb2]
mov esi, dword [esp + 0x818]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x288], eax
call fcn.004528e0
lea ecx, [esp + 0x1da8]
mov dword [esp], ecx
mov dword [esp + 0x284], eax
call fcn.00447800
lea ecx, [esp + 0x1b9e]
mov edx, 0x104
lea esi, [esp + 0x1da8]
mov edi, dword [esp + 0x818]
sub edx, 0xb21a9c3d
sub edx, edi
add edx, 0xb21a9c3d
mov edi, dword [esp + 0x818]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.004528e0
lea ecx, [esp + 0x1b9e]
mov edx, dword [0x52dce0]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x280], eax
call edx
sub esp, 8
mov ecx, 0x9788703
mov dword [esp + 0x2650], eax
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov eax, 0x74d06841
cmp dword [esp + 0x2650], 0
sete cl
and cl, 1
mov byte [esp + 0x266e], cl
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0xad041be1
mov ecx, 0x73c7c648
mov dl, byte [esp + 0x266e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x180], eax
call fcn.004491b0
mov dword [esp + 0x7a0], 0x628445a5
jmp 0x4366c2
mov eax, dword [esp + 0x265c]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0xae62b1cc
mov edx, 0xa94f00f0
mov dword [esp + 0x80c], eax
cmp dword [esp + 0x80c], 0
cmovne ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xb4e]
lea esi, str.open
mov dword [esp + 0x2610], 0x3c
mov dword [esp + 0x2614], 0x40
mov dword [esp + 0x2618], 0
mov dword [esp + 0x261c], esi
mov dword [esp + 0x2628], 0
mov dword [esp + 0x2630], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x178], eax
mov dword [esp + 0x174], ecx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, [0x45af30]
mov esi, 3
lea edi, [esp + 0xb4e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x170], eax
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x168], esi
call fcn.004528e0
lea ecx, [esp + 0x1b9e]
mov dword [esp], ecx
mov dword [esp + 0x164], eax
call fcn.00447800
mov ecx, 0x101
lea edx, [esp + 0xb4e]
lea esi, [esp + 0x1b9e]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x160], ecx
call fcn.004528e0
lea ecx, [esp + 0x21bc]
mov edx, 0
mov esi, dword [0x4eb4b0]
movzx esi, word [esi]
mov dword [esp + 0x7a8], esi
mov esi, dword [esp + 0x7a8]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x4eb4b0]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x7a4], edx
mov edx, dword [esp + 0x7a4]
mov esi, dword [0x4eb4b0]
mov edi, dword [esp + 0x7a8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4eb4b0]
add edi, 2
mov ebx, dword [esp + 0x7a8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x15c], eax
call fcn.00427c80
lea eax, [esp + 0x1994]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0xf4893177
mov dword [esp + 0x2658], eax
cmp dword [esp + 0x2658], 0
sete al
and al, 1
mov byte [esp + 0x266f], al
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x158], eax
call fcn.004491b0
mov dword [esp + 0x7a0], 0x628445a5
jmp 0x4366c2
mov eax, 0x932d3ad3
mov ecx, 0x7890b94d
mov edx, dword [esp + 0x81c]
shl edx, 1
mov dword [esp + 0x81c], edx
cmp dword [0x52c984], 0
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [0x52c984]
mov dword [esp], eax
call fcn.00447800
shl eax, 1
mov dword [esp + 0x814], eax
mov dword [esp + 0x7a0], 0x932d3ad3
jmp 0x4366c2
mov eax, 0xe531a602
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x5e99f378
mov ecx, 0x1415988f
mov dl, byte [esp + 0x2670]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x150], eax
call fcn.004491b0
mov eax, 0xcffd26ec
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x1af23b5f
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x8a51d68c
mov ecx, 0x7054b8f7
mov dl, byte [esp + 0x2671]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x14c], eax
call fcn.004491b0
mov dword [esp + 0x7a0], 0x628445a5
jmp 0x4366c2
lea eax, [esp + 0xd58]
mov ecx, dword [esp + 0x810]
mov edx, dword [esp + 0x2660]
mov dword [edx], ecx
mov ecx, dword [esp + 0x81c]
mov edx, dword [esp + 0x2660]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x81c]
mov edx, dword [esp + 0x81c]
mov esi, dword [esp + 0x2660]
add esi, 8
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004528e0
mov ecx, 0x448a4bc6
mov edx, 0xbb16293d
mov esi, 0
mov edi, dword [esp + 0x814]
mov ebx, dword [esp + 0x2660]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x81c]
mov dword [esp + 0x144], eax
mov eax, esi
sub eax, 8
mov dword [esp + 0x140], eax
mov eax, esi
mov dword [esp + 0x13c], ecx
mov ecx, dword [esp + 0x144]
sub eax, ecx
mov ecx, dword [esp + 0x140]
add ecx, eax
sub esi, ecx
mov dword [ebx + esi], edi
cmp dword [0x52c984], 0
mov eax, dword [esp + 0x13c]
cmovne eax, edx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov dword [esp + 0x7a0], 0x448a4bc6
jmp 0x4366c2
mov eax, 0xaf7f0993
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x8406fd7b
mov ecx, 0xf24c7dd8
mov dl, byte [esp + 0x2672]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0xa8df2be6
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0xeac2e6d4
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0xf635a1d6
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x76e36eeb
mov ecx, 0x44ca4f8d
mov dl, byte [esp + 0x2674]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov dword [esp + 0x7a0], 0x628445a5
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xb4e]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x120], eax
mov dword [esp + 0x11c], ecx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0xb4e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x118], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x110], esi
call fcn.004528e0
lea ecx, [esp + 0x1b9e]
mov dword [esp], ecx
mov dword [esp + 0x10c], eax
call fcn.00447800
mov ecx, 0xfe
lea edx, [esp + 0xb4e]
lea esi, [esp + 0x1b9e]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x108], ecx
call fcn.004528e0
lea ecx, [esp + 0xb4e]
lea edx, [esp + 0x21bc]
mov dword [esp + 0x2620], edx
mov dword [esp + 0x2624], ecx
mov dword [esp + 0x262c], 0
mov ecx, dword [0x52dce8]
mov edx, esp
lea esi, [esp + 0x2610]
mov dword [edx], esi
mov dword [esp + 0x104], eax
call ecx
sub esp, 4
mov ecx, 0x2d7c023d
mov edx, 0xb0ef8c9b
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x7a0], ecx
jmp 0x4366c2
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x52dce4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x100], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x800], 1
mov dword [esp + 0x7a0], 0x628445a5
mov dword [esp + 0xfc], eax
jmp 0x4366c2
mov eax, 0xe78e381f
mov ecx, 0x5aff059f
cmp dword [esp + 0x2660], 0
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [0x52dd04]
mov ecx, dword [esp + 0x2660]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0xe78e381f
mov dword [esp + 0xf8], eax
jmp 0x4366c2
mov eax, 0x24628716
cmp dword [esp + 0x2654], 0
setne cl
and cl, 1
mov byte [esp + 0x2675], cl
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x2b6ae8da
mov ecx, 0x1e8c86ab
mov dl, byte [esp + 0x2675]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [esp + 0x2654]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0x2b6ae8da
mov dword [esp + 0xf4], eax
jmp 0x4366c2
mov eax, 0xb0f1a357
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x1b66452b
mov ecx, 0x25315ff4
mov dl, byte [esp + 0x2676]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [esp + 0x2658]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0x1b66452b
mov dword [esp + 0xf0], eax
jmp 0x4366c2
mov eax, 0xc66b4558
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [esp + 0x265c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xd205170f
mov dword [esp + 0x7a0], ecx
mov dword [esp + 0xec], eax
jmp 0x4366c2
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, 0xa506500f
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, dword [esp + 0x800]
mov dword [esp + 0x2664], eax
mov dword [esp + 0x7a0], 0xb1b8520
jmp 0x4366c2
mov eax, 0x9bab77e
mov ecx, dword [esp + 0x2664]
mov dword [esp + 0x2678], ecx
mov dword [esp + 0x7a0], eax
jmp 0x4366c2
mov eax, 0x104
lea ecx, [esp + 0xf62]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0xe4], eax
call fcn.00428580
mov dword [esp + 0x824], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, str..exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ed91
lea ecx, [0x45b060]
mov dword [esp + 0x25d0], eax
mov eax, dword [esp + 0x25d0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ed91
mov dword [0x52c984], eax
mov dword [esp + 0x7a0], 0x3bcf9bb1
jmp 0x4366c2
mov dword [esp + 0x7a0], 0x3396f60c
jmp 0x4366c2
mov eax, esp
lea ecx, [esp + 0xd58]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xf62]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
inc eax
mov dword [esp + 0x81c], eax
mov eax, esp
lea ecx, [esp + 0x1fb2]
mov dword [eax], ecx
mov dword [eax + 4], 0x104
mov dword [esp + 0xd4], ecx
call fcn.00401210
mov ecx, esp
mov edx, dword [esp + 0xd4]
mov dword [ecx], edx
mov dword [esp + 0xd0], eax
call fcn.00447800
mov dword [esp + 0x818], eax
mov eax, esp
mov dword [eax], 0
call fcn.004041a0
mov dword [esp + 0xcc], edx
mov dword [esp + 0xc8], eax
call fcn.00441f00
mov ecx, dword [esp + 0xc8]
imul ecx, eax
mov dword [esp], ecx
call fcn.0041eb3e
mov dword [esp + 0x7a0], 0xbac63204
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc0], ecx
call fcn.0042c9a0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x178a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], edx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], ecx
call fcn.0042e500
lea eax, [esp + 0x1994]
mov dword [esp], eax
call fcn.00447800
mov ecx, 0x104
lea edx, [esp + 0x178a]
lea esi, [esp + 0x1fb2]
mov dword [esp + 0x7cc], eax
mov eax, dword [esp + 0x818]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xa8], ecx
call fcn.004528e0
lea ecx, [esp + 0x178a]
mov edx, 0
lea esi, [esp + 0x1994]
mov edi, dword [esp + 0x7cc]
mov ebx, dword [esp + 0x818]
sub edx, ebx
add edx, 0x104
mov ebx, dword [esp + 0x818]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0xa4], eax
call fcn.004528e0
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x178a]
mov edi, 0
mov ebx, 0x8f2b3dc6
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x818]
add ebx, 0x104
sub ebx, eax
sub ebx, 0x8f2b3dc6
mov eax, dword [esp + 0x7cc]
sub edi, eax
add ebx, edi
mov eax, dword [esp + 0x818]
shl eax, 1
add esi, eax
mov eax, dword [esp + 0x7cc]
shl eax, 1
add esi, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x9c], edx
call fcn.004528e0
mov dword [esp + 0x7a0], 0x753c6a9e
mov dword [esp + 0x98], eax
jmp 0x4366c2
mov dword [esp + 0x7a0], 0xfcf728e5
jmp 0x4366c2
mov dword [esp + 0x7a0], 0x8bc0721e
jmp 0x4366c2
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xb4e]
lea esi, str.open
mov dword [esp + 0x2610], 0x3c
mov dword [esp + 0x2614], 0x40
mov dword [esp + 0x2618], 0
mov dword [esp + 0x261c], esi
mov dword [esp + 0x2628], 0
mov dword [esp + 0x2630], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
call fcn.0042c9a0
mov ecx, 0x104
lea edx, [0x45af30]
mov esi, 3
lea edi, [esp + 0xb4e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], esi
call fcn.004528e0
lea ecx, [esp + 0x1b9e]
mov dword [esp], ecx
mov dword [esp + 0x58], eax
call fcn.00447800
mov ecx, 0x101
lea edx, [esp + 0xb4e]
lea esi, [esp + 0x1b9e]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x54], ecx
call fcn.004528e0
lea ecx, [esp + 0x21bc]
mov edx, 0
mov esi, dword [0x4eb4b0]
movzx esi, word [esi]
mov dword [esp + 0x7a8], esi
mov esi, dword [esp + 0x7a8]
sub edx, 1
sub esi, edx
mov edx, dword [0x4eb4b0]
movzx edx, word [edx + esi*2]
mov dword [esp + 0x7a4], edx
mov edx, dword [esp + 0x7a4]
mov esi, dword [0x4eb4b0]
mov edi, dword [esp + 0x7a8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4eb4b0]
add edi, 2
mov ebx, dword [esp + 0x7a8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x50], eax
call fcn.00427c80
lea eax, [esp + 0x1994]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov dword [esp + 0x2658], eax
mov dword [esp + 0x7a0], 0x3dfd29f7
jmp 0x4366c2
lea eax, [esp + 0x1994]
mov ecx, 0
mov edx, 0x9d02e4c3
mov esi, 4
mov edi, dword [esp + 0x81c]
sub esi, 0x419002
add esi, edi
add esi, 0x419002
mov edi, ecx
sub edi, 4
mov ebx, ecx
sub ebx, esi
add edi, ebx
mov esi, ecx
sub esi, edi
mov edi, dword [esp + 0x814]
add edx, 4
add edx, edi
sub edx, 0x9d02e4c3
mov edi, ecx
sub edi, esi
mov esi, ecx
sub esi, edx
add edi, esi
sub ecx, edi
mov dword [esp + 0x810], ecx
mov dword [esp], eax
call fcn.00447800
mov ecx, 0x104
lea edx, [esp + 0x1580]
lea esi, [esp + 0x1994]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x4c], ecx
call fcn.0042f0d0
lea eax, [esp + 0x1580]
mov ecx, dword [0x52dd0c]
mov edx, dword [esp + 0x810]
mov esi, esp
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 4
mov dword [esi + 4], 0
mov dword [esi], 0xffffffff
call ecx
sub esp, 0x18
mov dword [esp + 0x2654], eax
mov dword [esp + 0x7a0], 0xe531a602
jmp 0x4366c2
lea eax, [esp + 0x178a]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xd58]
mov dword [esp], ecx
mov dword [esp + 0x48], eax
call fcn.004491b0
mov dword [esp + 0x7a0], 0x435ba70a
jmp 0x4366c2
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x52dce4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x30], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1376]
mov dword [esp + 0x2620], ecx
mov dword [esp + 0x2624], 0
mov dword [esp + 0x262c], 1
mov ecx, dword [0x52dce8]
mov edx, esp
lea esi, [esp + 0x2610]
mov dword [edx], esi
mov dword [esp + 0x2c], eax
call ecx
sub esp, 4
mov dword [esp + 0x7a0], 0xa8df2be6
mov dword [esp + 0x28], eax
jmp 0x4366c2
mov eax, dword [esp + 0x2648]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2658]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x20], eax
call ecx
sub esp, 8
mov dword [esp + 0x7a0], 0xf635a1d6
mov dword [esp + 0x1c], eax
jmp 0x4366c2
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov dword [esp + 0x7a0], 0x3ac93d58
jmp 0x4366c2
jmp 0x4314a3