Function at 0x410280
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a88
call fcn.00415c30
mov dword [esp + 0x1a74], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea esi, [esp + 0x17f2]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x15e8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea ebx, [esp + 0xfca]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004164a0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004164a0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.0040fc60
mov dword [esp + 0x1a7c], eax
lea edi, [esp + 0x18a]
mov dword [esp + 0x48], 0x36266c7f
jmp 0x4105d0
mov dword [esp + 0x48], 0xa3c0eb8b
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x86191d59
jg 0x4105f0
cmp eax, 0x8607292e
jne 0x4105d0
jmp 0x4105c6
cmp eax, 0x8902fd18
jg 0x410610
cmp eax, 0x86191d5a
jne 0x4105d0
mov dword [esp + 0x48], 0xaa02ebf
jmp 0x4105d0
cmp eax, 0x8b4692f3
jg 0x410628
cmp eax, 0x8902fd19
jne 0x4105d0
mov dword [esp + 0x48], 0x7fbc41a2
jmp 0x4105d0
cmp eax, 0x8dad5bf4
jg 0x410650
cmp eax, 0x8b4692f4
jne 0x4105d0
mov eax, 0xe3e0dc04
cmp dword [esp + 0x1a74], 0
je 0x41064a
mov eax, 0xb495cc9e
mov dword [esp + 0x48], eax
jmp 0x4105d0
cmp eax, 0x8e03cbd8
jg 0x41067a
cmp eax, 0x8dad5bf5
jne 0x4105d0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x8e03cbd9
jmp 0x4105d0
cmp eax, 0x8e96428c
jg 0x4106a4
cmp eax, 0x8e03cbd9
jne 0x4105d0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x8607292e
jmp 0x4105d0
cmp eax, 0x993734c6
jg 0x4106c3
cmp eax, 0x8e96428d
jne 0x4105d0
mov dword [esp + 0x48], 0x4be8956f
jmp 0x4105d0
cmp eax, 0xa3c0eb8a
jg 0x4106fe
cmp eax, 0x993734c7
jne 0x4105d0
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410260
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0xa3c0eb8b
jmp 0x4105d0
cmp eax, 0xa451c16f
jg 0x410715
cmp eax, 0xa3c0eb8b
jne 0x4105d0
jmp 0x411ea2
cmp eax, 0xa5b22f77
jg 0x410734
cmp eax, 0xa451c170
jne 0x4105d0
mov dword [esp + 0x48], 0x454b519f
jmp 0x4105d0
cmp eax, 0xa77f22f6
jg 0x410753
cmp eax, 0xa5b22f78
jne 0x4105d0
mov dword [esp + 0x48], 0xbbe4e82c
jmp 0x4105d0
cmp eax, 0xaef399a6
jg 0x410772
cmp eax, 0xa77f22f7
jne 0x4105d0
mov dword [esp + 0x48], 0x7fbc41a2
jmp 0x4105d0
cmp eax, 0xb495cc9d
jg 0x4107be
cmp eax, 0xaef399a7
jne 0x4105d0
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0xc01048e8
jne 0x4107b5
mov eax, 0x7c2c4a36
mov dword [esp + 0x48], eax
jmp 0x4105d0
cmp eax, 0xb912a92c
jg 0x4113a3
cmp eax, 0xb495cc9e
jne 0x4105d0
mov eax, dword [0x4cbcac]
mov ecx, dword [0x4cbcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a34]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcbc]
mov ecx, dword [0x4cbcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a30]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcc0]
mov ecx, dword [0x4cbcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a2c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcac]
mov ecx, dword [0x4cbcd0]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a28]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbca0]
mov ecx, dword [0x4cbce0]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a24]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcac]
mov ecx, dword [0x4cbce4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a20]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcf0]
mov ecx, dword [0x4cbce8]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a1c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcec]
mov ecx, dword [0x4cbce8]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a18]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [0x4cbcec]
mov ecx, dword [0x4cbcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a14]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4cbe54]
sub esp, 0x18
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cbe50]
sub esp, 4
call fcn.0041660f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea ebx, [esp + 0xbc]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00416fc4
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
mov edi, esi
lea esi, [esp + eax*2 + 0xbc]
call fcn.0041660f
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00416fc4
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea esi, [esp + eax*2 + 0xbc]
call fcn.0041660f
and eax, 5
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416fc4
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea esi, [esp + eax*2 + 0xbc]
call fcn.0041660f
and eax, 0xc
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416fc4
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0x64], eax
mov eax, dword [0x4c9e8c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c9e8c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c9e8c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x84]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402680
mov eax, dword [0x4cbcc8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4cbcf8]
mov ecx, dword [0x4cbca8]
mov edx, dword [esp + 0x1a74]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4cbe44]
sub esp, 0x10
mov eax, dword [0x4cbcc4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
lea ebx, [esp + 0xfca]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbcac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbca4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4cbe3c]
sub esp, 0xc
mov eax, dword [0x4cbcf4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cbe38]
sub esp, 0x10
mov eax, dword [0x4cbccc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
call fcn.0041660f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4c9e90]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov esi, edi
mov dword [esp], esi
call fcn.00402990
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404110
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x4204f4
call fcn.00404110
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x7a2]
mov edi, esi
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404110
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404110
mov eax, dword [0x4c9ea4]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c9ea4]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c9ea4]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x74]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402680
mov eax, dword [0x4cbcd4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4cbcac]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x9ac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbcb4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
lea edi, [esp + 0x94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbcb0]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbcec]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cbe38]
sub esp, 0x10
mov eax, dword [0x4cbcd8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4cbcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x420520
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe48]
sub esp, 8
mov eax, dword [0x4c9ea8]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c9ea8]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c9ea8]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.00402990
mov eax, dword [0x4cbcdc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4cbcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [0x4cbcb8]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cbe48]
sub esp, 8
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cbe58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x420524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea edi, [esp + 0x184]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42052e
mov dword [esp + 4], 0x104
call fcn.00404110
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404110
mov eax, dword [0x4c9eac]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c9eac]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c9eac]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov esi, eax
mov dword [esp], esi
call fcn.00402990
mov dword [esp + 0x1a48], esi
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cbe68]
sub esp, 4
cmp eax, 1
mov eax, 0xa8ad36d
jne 0x41138c
mov eax, 0x4cd842ac
mov dword [esp + 0x48], eax
lea esi, [esp + 0x17f2]
lea edi, [esp + 0x18a]
jmp 0x4105d0
cmp eax, 0xbbe4e82b
jg 0x41148e
cmp eax, 0xb912a92d
jne 0x4105d0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404110
mov dword [esp], ebx
call fcn.004046e0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404110
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cbe68]
sub esp, 4
cmp eax, 1
mov eax, 0x3cce3835
jne 0x41147e
mov eax, 0x377a68e2
mov dword [esp + 0x48], eax
lea edi, [esp + 0x18a]
jmp 0x4105d0
cmp eax, 0xbc64e51a
jg 0x4114cf
cmp eax, 0xbbe4e82c
jne 0x4105d0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040ea80
mov dword [esp + 0x48], 0xdd2282ec
jmp 0x4105d0
cmp eax, 0xc01048e7
jg 0x4114ee
cmp eax, 0xbc64e51b
jne 0x4105d0
mov dword [esp + 0x48], 0xa3c0eb8b
jmp 0x4105d0
cmp eax, 0xc1f6a5dd
jg 0x41157d
cmp eax, 0xc01048e8
jne 0x4105d0
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403dc0
lea eax, [esp + 0x13de]
mov dword [esp], eax
call fcn.004046e0
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00411ec0
mov dword [esp], eax
call fcn.00416632
mov dword [esp + 0x48], 0xa451c170
jmp 0x4105d0
cmp eax, 0xc5d9cc84
jg 0x4115a7
cmp eax, 0xc1f6a5de
jne 0x4105d0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0xef49710
jmp 0x4105d0
cmp eax, 0xcbc1ef44
jg 0x4115c6
cmp eax, 0xc5d9cc85
jne 0x4105d0
mov dword [esp + 0x48], 0x8b4692f4
jmp 0x4105d0
cmp eax, 0xcec24a9c
jg 0x411615
cmp eax, 0xcbc1ef45
jne 0x4105d0
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
sete byte [esp + 0x1a83]
mov dword [esp + 0x48], 0x5bf990db
jmp 0x4105d0
cmp eax, 0xdd2282eb
jg 0x41163f
cmp eax, 0xcec24a9d
jne 0x4105d0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0xa3c0eb8b
jmp 0x4105d0
cmp eax, 0xdd9308c4
jg 0x41165e
cmp eax, 0xdd2282ec
jne 0x4105d0
mov dword [esp + 0x48], 0x993734c7
jmp 0x4105d0
cmp eax, 0xe3e0dc03
jg 0x41167d
cmp eax, 0xdd9308c5
jne 0x4105d0
mov dword [esp + 0x48], 0x993734c7
jmp 0x4105d0
cmp eax, 0xf1d610cf
jg 0x41169c
cmp eax, 0xe3e0dc04
jne 0x4105d0
mov dword [esp + 0x48], 0x52856ad8
jmp 0x4105d0
cmp eax, 0xfcbcc6da
jg 0x4116d0
cmp eax, 0xf1d610d0
jne 0x4105d0
mov ecx, edi
mov al, byte [esp + 0x1a82]
test al, al
mov eax, 0xcec24a9d
jne 0x4116c5
mov eax, 0xaef399a7
mov dword [esp + 0x48], eax
mov edi, ecx
jmp 0x4105d0
mov ecx, edi
cmp eax, 0x25ecf7f
jg 0x4117bf
cmp eax, 0xfcbcc6db
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404d20
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404110
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.004046e0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404110
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [0x4cbe60]
sub esp, 8
mov dword [esp + 0x1a74], eax
mov dword [esp + 0x48], 0x52856ad8
jmp 0x4105d0
cmp eax, 0xa8ad36c
jg 0x411806
cmp eax, 0x25ecf80
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
mov dword [esp + 0x48], 0xcbc1ef45
jmp 0x4105d0
cmp eax, 0xaa02ebe
jg 0x411849
cmp eax, 0xa8ad36d
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040ea80
mov dword [esp + 0x48], 0x993734c7
jmp 0x4105d0
cmp eax, 0xef4970f
jg 0x41186a
cmp eax, 0xaa02ebf
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x48], 0xcbc1ef45
jmp 0x4105d0
cmp eax, 0x334146c2
jg 0x411896
cmp eax, 0xef49710
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0xbc64e51b
jmp 0x4105d0
cmp eax, 0x36266c7e
jg 0x4118d9
cmp eax, 0x334146c3
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040ea80
mov dword [esp + 0x48], 0xbbe4e82c
jmp 0x4105d0
cmp eax, 0x377a68e1
jg 0x41190c
cmp eax, 0x36266c7f
mov edi, ecx
jne 0x4105d0
mov ecx, edi
mov eax, 0x53c92a93
cmp dword [esp + 0x1a7c], 0
js 0x4116c5
mov eax, 0x50e3d5ad
jmp 0x4116c5
cmp eax, 0x3cce3834
jg 0x411978
cmp eax, 0x377a68e2
mov edi, ecx
jne 0x4105d0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cbe64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0x993734c7
jmp 0x4105d0
cmp eax, 0x454b519e
jg 0x411999
cmp eax, 0x3cce3835
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x48], 0x4be8956f
jmp 0x4105d0
cmp eax, 0x4be8956e
jg 0x411abe
cmp eax, 0x454b519f
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404d20
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.004046e0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404110
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404110
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
mov edx, 0xdd51570f
sub edx, eax
sub edx, ecx
add edx, 0x22aea9f5
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x4204f4
call fcn.00404110
mov dword [esp + 0x48], 0x86191d5a
jmp 0x4105d0
cmp eax, 0x4cd842ab
jg 0x411adf
cmp eax, 0x4be8956f
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x48], 0xdd9308c5
jmp 0x4105d0
cmp eax, 0x50e3d5ac
jg 0x411b89
cmp eax, 0x4cd842ac
mov edi, ecx
jne 0x4105d0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cbe64]
sub esp, 0x10
lea eax, [esp + 0x9ac]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cbe68]
sub esp, 4
cmp eax, 1
mov eax, 0xa5b22f78
jne 0x41147e
mov eax, 0xb912a92d
jmp 0x41147e
cmp eax, 0x52856ad7
jg 0x411bc0
cmp eax, 0x50e3d5ad
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040ed10
test eax, eax
mov eax, 0x7fb408e7
jne 0x41147e
mov eax, 0xa77f22f7
jmp 0x41147e
cmp eax, 0x53c92a92
jg 0x411cad
cmp eax, 0x52856ad8
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404d20
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404110
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.004046e0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404110
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [0x4cbe60]
sub esp, 8
mov dword [esp + 0x1a74], eax
mov dword [esp + 0x48], 0xc5d9cc85
jmp 0x4105d0
cmp eax, 0x5bf990da
jg 0x411cce
cmp eax, 0x53c92a93
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x48], 0x8e03cbd9
jmp 0x4105d0
cmp eax, 0x6073b55a
jg 0x411d02
cmp eax, 0x5bf990db
mov edi, ecx
jne 0x4105d0
mov ecx, edi
mov al, byte [esp + 0x1a83]
test al, al
mov eax, 0xa451c170
jne 0x4116c5
mov eax, 0x6073b55b
jmp 0x4116c5
cmp eax, 0x63a2c7e3
jg 0x411d23
cmp eax, 0x6073b55b
mov edi, ecx
jne 0x4105d0
mov dword [esp + 0x48], 0xe3e0dc04
jmp 0x4105d0
cmp eax, 0x7c2c4a35
jg 0x411e42
cmp eax, 0x63a2c7e4
mov edi, ecx
jne 0x4105d0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004037e0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404d20
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.004046e0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404110
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404110
mov eax, dword [esp + 0x58]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x4c]
sub ecx, edx
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x4204f4
call fcn.00404110
mov dword [esp + 0x48], 0x454b519f
jmp 0x4105d0
cmp eax, 0x7c2c4a36
je 0x411e5f
cmp eax, 0x7fb408e7
jne 0x411e79
mov dword [esp + 0x48], 0xef49710
mov edi, ecx
jmp 0x4105d0
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0xa3c0eb8b
mov edi, ecx
jmp 0x4105d0
cmp eax, 0x7fbc41a2
mov edi, ecx
jne 0x4105d0
cmp dword [esp + 0x54], 6
setb al
mov byte [esp + 0x1a82], al
mov dword [esp + 0x48], 0xf1d610d0
jmp 0x4105d0
mov eax, dword [esp + 0x1a78]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret