Function at 0x40ef70
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb0
call fcn.00412f90
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea esi, [esp + 0xdd6]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea edi, [esp + 0x5ae]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413740
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00413740
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040ebb0
mov dword [esp + 0x1ca8], eax
mov dword [esp + 0x54], 0x743e5e04
jmp 0x40f300
mov dword [esp + 0x54], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x85b66176
jg 0x40f340
cmp eax, 0x81d76025
jne 0x40f300
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x5bcc8b9a
je 0x40f2f3
mov eax, 0x85b66177
jmp 0x40f2f3
cmp eax, 0x7b575d5f
jg 0x40f440
cmp eax, 0x7a54e7ba
jg 0x40f450
cmp eax, 0x76ec3d73
jg 0x40f47b
cmp eax, 0x743e5e03
jg 0x40f4a6
cmp eax, 0x731f963d
jg 0x40f4ce
cmp eax, 0x70ce9fa5
jg 0x40f5ab
cmp eax, 0x647e00be
jg 0x40f5c3
cmp eax, 0x62f99d65
jg 0x40f61a
cmp eax, 0x5e66e6ac
jg 0x40f76c
cmp eax, 0x5bcc8b99
jg 0x40f7cf
cmp eax, 0x5491a3e2
jg 0x40f7e7
cmp eax, 0x5333657b
jg 0x40f80a
cmp eax, 0x4e5c8b8e
jg 0x40f88c
cmp eax, 0x375ed508
jg 0x40f8cd
cmp eax, 0x36ffc651
jg 0x40f954
cmp eax, 0x345e89f5
jg 0x40f964
cmp eax, 0x1d171f6a
jg 0x40f974
cmp eax, 0x172b5e65
jg 0x40f984
cmp eax, 0x9e0558a
jg 0x40f9cd
cmp eax, 0x85f8f5ce
jg 0x40fabc
cmp eax, 0x85b66177
jne 0x40f300
mov dword [esp + 0x54], 0x731f963e
jmp 0x40f300
cmp eax, 0x7b575d60
jne 0x40f300
jmp 0x40fd88
cmp eax, 0x7a54e7bb
jne 0x40f300
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x5491a3e3
jmp 0x40f300
cmp eax, 0x76ec3d74
jne 0x40f300
mov eax, dword [esp + 0x1ca0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xe28b6723
jmp 0x40f300
cmp eax, 0x743e5e04
jne 0x40f300
mov eax, 0x9e0cfeb3
cmp dword [esp + 0x1ca8], 0
js 0x40f4c5
mov eax, 0x172b5e66
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0x731f963e
jne 0x40f300
mov edi, esi
lea esi, [esp + 0x13f4]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
lea ebx, [esp + 0x11ea]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00405c50
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404050
mov dword [esp], esi
call fcn.004047b0
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, edi
lea edi, [esp + 0x5ae]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404050
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [0x4c8c8c]
sub esp, 8
mov dword [esp + 0x1c98], eax
mov dword [esp + 0x54], 0xe0366b0a
jmp 0x40f300
cmp eax, 0x70ce9fa6
jne 0x40f300
mov dword [esp + 0x54], 0xc93ac7e7
jmp 0x40f300
cmp eax, 0x647e00bf
jne 0x40f300
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
call ebx
sub esp, 8
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call ebx
sub esp, 8
test eax, eax
mov eax, 0xf36426d3
jne 0x40f611
mov eax, 0x89b3062c
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0x62f99d66
jne 0x40f300
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x4302d0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], ebx
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x4302da
mov dword [esp + 4], 0x104
call fcn.00404050
lea eax, [esp + 0x11ea]
mov ebx, eax
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404050
mov eax, dword [0x47e154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47e154]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47e154]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
lea ebx, [esp + 0x1808]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.00402ee0
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c9c], eax
mov ecx, 0x7b575d60
test eax, eax
je 0x40f763
mov ecx, 0xc575cc42
mov dword [esp + 0x54], ecx
jmp 0x40f300
cmp eax, 0x5e66e6ad
jne 0x40f300
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8c90]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0xc93ac7e7
jmp 0x40f300
cmp eax, 0x5bcc8b9a
jne 0x40f300
mov dword [esp + 0x54], 0x977eb768
jmp 0x40f300
cmp eax, 0x5491a3e3
jne 0x40f300
mov dword [esp + 0x1ca4], 0
mov dword [esp + 0x54], 0x36ffc652
jmp 0x40f300
cmp eax, 0x5333657c
jne 0x40f300
mov dword [esp + 8], edi
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00405260
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.00410b10
mov ebx, eax
call fcn.00402140
imul eax, ebx
mov dword [esp], eax
call fcn.004138d2
mov dword [esp + 0x54], 0x5bcc8b9a
jmp 0x40f300
cmp eax, 0x4e5c8b8f
jne 0x40f300
mov eax, dword [esp + 0x1ca0]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0xd724fe6d
test eax, eax
jne 0x40f8c4
mov ecx, 0x62f99d66
mov dword [esp + 0x54], ecx
jmp 0x40f300
cmp eax, 0x375ed509
jne 0x40f300
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404450
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c9c], eax
mov ecx, 0xabbe291c
test eax, eax
jne 0x40f94b
mov ecx, 0x5491a3e3
mov dword [esp + 0x54], ecx
jmp 0x40f300
cmp eax, 0x36ffc652
jne 0x40f300
jmp 0x410af3
cmp eax, 0x345e89f6
jne 0x40f300
jmp 0x40fd88
cmp eax, 0x1d171f6b
jne 0x40f300
jmp 0x40fd88
cmp eax, 0x172b5e66
jne 0x40f300
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403f20
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040e140
test eax, eax
mov eax, 0x375ed509
jne 0x40f9c4
mov eax, 0x8d26226e
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0x9e0558b
jne 0x40f300
lea ebx, [esp + 0xfe0]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00405c50
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404050
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404050
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x58]
sub ecx, edx
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404050
mov dword [esp + 0x54], 0x977eb768
jmp 0x40f300
cmp eax, 0x88d036ba
jg 0x40fad3
cmp eax, 0x85f8f5cf
jne 0x40f300
jmp 0x40fd88
cmp eax, 0x89b3062b
jg 0x40faea
cmp eax, 0x88d036bb
jne 0x40f300
jmp 0x40fd2c
cmp eax, 0x89d6baf9
jg 0x40fbc5
cmp eax, 0x89b3062c
jne 0x40f300
lea eax, [esp + 0x3a4]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], ebx
mov esi, ebx
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404050
lea eax, [esp + 0x11ea]
mov ebx, eax
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404050
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], esi
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c8c94]
sub esp, 4
cmp eax, 1
mov eax, 0x70ce9fa6
jne 0x40fbb5
mov eax, 0x5e66e6ad
mov dword [esp + 0x54], eax
lea esi, [esp + 0xdd6]
jmp 0x40f300
cmp eax, 0x8d26226d
jg 0x40fbf4
cmp eax, 0x89d6bafa
jne 0x40f300
mov eax, 0x76ec3d74
cmp dword [esp + 0x1ca0], 0
jne 0x40fbeb
mov eax, 0xe28b6723
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0x977eb767
jg 0x40fc20
cmp eax, 0x8d26226e
jne 0x40f300
mov eax, 0x88d036bb
cmp dword [esp + 0x60], 6
jb 0x40fc17
mov eax, 0x5333657c
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0x9e0cfeb2
jg 0x40fd1a
cmp eax, 0x977eb768
jne 0x40f300
lea ebx, [esp + 0xfe0]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403bd0
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00405c50
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404050
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404050
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x58]
sub ecx, edx
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404050
mov dword [esp + 0x54], 0xc377eb7f
jmp 0x40f300
cmp eax, 0xabbe291b
jg 0x40fd44
cmp eax, 0x9e0cfeb3
jne 0x40f300
mov dword [esp + 0x1ca4], 0xffffffff
mov dword [esp + 0x54], 0x36ffc652
jmp 0x40f300
cmp eax, 0xc34f5522
jg 0x40fd76
cmp eax, 0xabbe291c
jne 0x40f300
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xca6ef1fe
je 0x40fd6d
mov eax, 0x7a54e7bb
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xc377eb7e
jg 0x40fda9
cmp eax, 0xc34f5523
jne 0x40f300
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040e060
mov dword [esp + 0x54], 0xc93ac7e7
jmp 0x40f300
cmp eax, 0xc44dd1f9
jg 0x40fdc8
cmp eax, 0xc377eb7f
jne 0x40f300
mov dword [esp + 0x54], 0x81d76025
jmp 0x40f300
cmp eax, 0xc575cc41
jg 0x40fe70
cmp eax, 0xc44dd1fa
jne 0x40f300
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8c90]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c8c94]
sub esp, 4
cmp eax, 1
mov eax, 0x85f8f5cf
jne 0x40fe67
mov eax, 0x647e00bf
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xc825d6d8
jg 0x40fed4
cmp eax, 0xc575cc42
jne 0x40f300
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c8c94]
sub esp, 4
cmp eax, 1
mov eax, 0x345e89f6
jne 0x40fecb
mov eax, 0xc44dd1fa
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xc93ac7e6
jg 0x40ff06
cmp eax, 0xc825d6d9
jne 0x40f300
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x89d6bafa
jmp 0x40f300
cmp eax, 0xca6ef1fd
jg 0x40ff35
cmp eax, 0xc93ac7e7
jne 0x40f300
mov eax, 0xc825d6d9
cmp dword [esp + 0x1c9c], 0
jne 0x40ff2c
mov eax, 0x89d6bafa
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xd724fe6c
jg 0x40ff67
cmp eax, 0xca6ef1fe
jne 0x40f300
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x7a54e7bb
jmp 0x40f300
cmp eax, 0xe0366b09
jg 0x40ff96
cmp eax, 0xd724fe6d
jne 0x40f300
mov eax, 0xc34f5523
cmp dword [esp + 0x68], 0x80
jne 0x40ff8d
mov eax, 0x62f99d66
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xe28b6722
jg 0x40ffc5
cmp eax, 0xe0366b0a
jne 0x40f300
mov eax, 0x731f963e
cmp dword [esp + 0x1c98], 0
je 0x40ffbc
mov eax, 0xf36a250b
mov dword [esp + 0x54], eax
jmp 0x40f300
cmp eax, 0xe28b6723
je 0x40ffe0
cmp eax, 0xf36426d3
jne 0x410010
mov dword [esp + 0x54], 0xc93ac7e7
jmp 0x40f300
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040ef50
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0x36ffc652
jmp 0x40f300
cmp eax, 0xf36a250b
jne 0x40f300
mov eax, dword [0x4c8ac0]
mov ecx, dword [0x4c8ae8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c54]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8ad0]
mov ecx, dword [0x4c8ae8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c50]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8ad4]
mov ecx, dword [0x4c8ae8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8ac0]
mov ecx, dword [0x4c8ae4]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c48]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8ab4]
mov ecx, dword [0x4c8af4]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c44]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8ac0]
mov ecx, dword [0x4c8af8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c40]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8b04]
mov ecx, dword [0x4c8afc]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c3c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8b00]
mov ecx, dword [0x4c8afc]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c38]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [0x4c8b00]
mov ecx, dword [0x4c8ae8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c34]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c8c80]
sub esp, 0x18
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [0x4c8c7c]
sub esp, 4
call fcn.004138af
and eax, 0xf
lea ebx, [esp + 0xd2]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414264
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.004138af
and eax, 1
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414264
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.004138af
and eax, 5
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414264
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.004138af
and eax, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414264
mov dword [esp], ebx
call fcn.004047b0
mov dword [esp + 0x78], eax
mov eax, dword [0x47e134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47e134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47e134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402910
mov eax, dword [0x4c8adc]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c78]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x4c8b0c]
mov ecx, dword [0x4c8abc]
mov edx, dword [esp + 0x1c98]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c8c70]
sub esp, 0x10
mov eax, dword [0x4c8ad8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8ac0]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8ab8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c8c68]
sub esp, 0xc
mov eax, dword [0x4c8b08]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8c64]
sub esp, 0x10
mov eax, dword [0x4c8ae0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c78]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c74]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
call fcn.004138af
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x47e138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea edi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402ee0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404050
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404050
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0x9c2]
mov dword [esp], ebx
mov edi, ebx
mov dword [esp + 4], 0x104
call fcn.00404050
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404050
mov eax, dword [0x47e14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47e14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47e14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402910
mov eax, dword [0x4c8ae8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c78]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x4c8ac0]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8ac8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8ac4]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8b00]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8c64]
sub esp, 0x10
mov eax, dword [0x4c8aec]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c78]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x4c8ac0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4302cc
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c74]
sub esp, 8
mov eax, dword [0x47e150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47e150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47e150]
mov edx, dword [esp + 0x74]
lea edi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402ee0
mov eax, dword [0x4c8af0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c78]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x4c8ac0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [0x4c8acc]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c6c]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c74]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c74]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c60]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c5c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8c74]
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [0x4c8c84]
sub esp, 4
lea eax, [esp + 0x19a]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x20a
call fcn.004060b0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8cc4]
sub esp, 0xc
mov dword [esp + 0x1ca0], eax
mov ecx, 0x1d171f6b
test eax, eax
je 0x410ae3
mov ecx, 0x4e5c8b8f
mov dword [esp + 0x54], ecx
lea edi, [esp + 0x5ae]
jmp 0x40f300
mov eax, dword [esp + 0x1ca4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret