Function at 0x41df00
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2178
call fcn.0042ad40
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x540]
mov esi, 0x10
lea edi, [esp + 0x54a]
lea ebx, [esp + 0x55a]
mov dword [esp + 0x514], eax
mov eax, 0x28
mov dword [esp + 0x510], eax
lea eax, [esp + 0x56a]
mov dword [esp + 0x50c], eax
mov eax, 0xc8
mov dword [esp + 0x508], eax
lea eax, [esp + 0x592]
mov dword [esp + 0x504], eax
mov eax, 0x20a
mov dword [esp + 0x500], eax
lea eax, [esp + 0x65a]
mov dword [esp + 0x4fc], eax
lea eax, [esp + 0xa6e]
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0xc78]
mov dword [esp + 0x4f4], eax
lea eax, [esp + 0xe82]
mov dword [esp + 0x4f0], eax
lea eax, [esp + 0x108c]
mov dword [esp + 0x4ec], eax
lea eax, [esp + 0x1296]
mov dword [esp + 0x4e8], eax
lea eax, [esp + 0x14a0]
mov dword [esp + 0x4e4], eax
lea eax, [esp + 0x16aa]
mov dword [esp + 0x4e0], eax
lea eax, [esp + 0x18b4]
mov dword [esp + 0x4dc], eax
lea eax, [esp + 0x1abe]
mov dword [esp + 0x4d8], eax
lea eax, [esp + 0x1cc8]
mov dword [esp + 0x4d4], eax
lea eax, [esp + 0x1ed2]
mov dword [esp + 0x4d0], eax
mov eax, 0x3c
mov dword [esp + 0x4cc], eax
lea eax, [esp + 0x2118]
mov dword [esp + 0x215c], 0
mov dword [esp + 0x2158], 0
mov dword [esp + 0x2154], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x4c8], ebx
mov dword [esp + 0x4c4], ecx
mov dword [esp + 0x4c0], edx
mov dword [esp + 0x4bc], esi
mov dword [esp + 0x4b8], edi
call fcn.0042adb0
mov dword [esp + 0x20dc], 0
mov eax, dword [esp + 0x4d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4d4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4d8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4e8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4ec]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4f0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4f8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x4fc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0042adb0
mov eax, dword [esp + 0x504]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0042adb0
mov eax, dword [esp + 0x50c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0042adb0
mov eax, dword [esp + 0x4c8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0042adb0
mov eax, dword [esp + 0x4b8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0042adb0
mov eax, dword [esp + 0x4c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0042adb0
mov dword [esp + 0x524], 0
mov dword [esp + 0x520], 0xffffffff
call fcn.0041d670
mov dword [esp + 0x2164], eax
mov dword [esp + 0x518], 0xac27d17f
mov eax, dword [esp + 0x518]
mov ecx, eax
sub ecx, 0x8928c8e0
mov dword [esp + 0x4b4], eax
mov dword [esp + 0x4b0], ecx
jg 0x41e325
jmp 0x41e307
mov eax, dword [esp + 0x4b4]
sub eax, 0x80ec500c
mov dword [esp + 0x4ac], eax
je 0x420dc0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x9150eb22
mov dword [esp + 0x4a8], eax
jg 0x41e361
jmp 0x41e343
mov eax, dword [esp + 0x4b4]
sub eax, 0x8928c8e1
mov dword [esp + 0x4a4], eax
je 0x4212d0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x937722ca
mov dword [esp + 0x4a0], eax
jg 0x41e39d
jmp 0x41e37f
mov eax, dword [esp + 0x4b4]
sub eax, 0x9150eb23
mov dword [esp + 0x49c], eax
je 0x41f6b0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x7f128b46
mov dword [esp + 0x498], eax
jg 0x41f47d
jmp 0x41e3bb
mov eax, dword [esp + 0x4b4]
sub eax, 0x7db8392d
mov dword [esp + 0x494], eax
jg 0x41f45f
jmp 0x41e3d9
mov eax, dword [esp + 0x4b4]
sub eax, 0x94a778df
mov dword [esp + 0x490], eax
jg 0x41e415
jmp 0x41e3f7
mov eax, dword [esp + 0x4b4]
sub eax, 0x937722cb
mov dword [esp + 0x48c], eax
je 0x41f549
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x9d4cf1f1
mov dword [esp + 0x488], eax
jg 0x41e451
jmp 0x41e433
mov eax, dword [esp + 0x4b4]
sub eax, 0x94a778e0
mov dword [esp + 0x484], eax
je 0x420dfc
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x9fc77506
mov dword [esp + 0x480], eax
jg 0x41e48d
jmp 0x41e46f
mov eax, dword [esp + 0x4b4]
sub eax, 0x9d4cf1f2
mov dword [esp + 0x47c], eax
je 0x42135e
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xa395f7e8
mov dword [esp + 0x478], eax
jg 0x41e4c9
jmp 0x41e4ab
mov eax, dword [esp + 0x4b4]
sub eax, 0x9fc77507
mov dword [esp + 0x474], eax
je 0x41f7cc
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xa4bd8af9
mov dword [esp + 0x470], eax
jg 0x41e505
jmp 0x41e4e7
mov eax, dword [esp + 0x4b4]
sub eax, 0xa395f7e9
mov dword [esp + 0x46c], eax
je 0x41f6ff
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xac27d17e
mov dword [esp + 0x468], eax
jg 0x41e541
jmp 0x41e523
mov eax, dword [esp + 0x4b4]
sub eax, 0xa4bd8afa
mov dword [esp + 0x464], eax
je 0x42133f
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xbe540fa0
mov dword [esp + 0x460], eax
jg 0x41e57d
jmp 0x41e55f
mov eax, dword [esp + 0x4b4]
sub eax, 0xac27d17f
mov dword [esp + 0x45c], eax
je 0x41f4a0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc06ca12d
mov dword [esp + 0x458], eax
jg 0x41e5b9
jmp 0x41e59b
mov eax, dword [esp + 0x4b4]
sub eax, 0xbe540fa1
mov dword [esp + 0x454], eax
je 0x420b79
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc18aff43
mov dword [esp + 0x450], eax
jg 0x41e5f5
jmp 0x41e5d7
mov eax, dword [esp + 0x4b4]
sub eax, 0xc06ca12e
mov dword [esp + 0x44c], eax
je 0x421238
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc6ace225
mov dword [esp + 0x448], eax
jg 0x41e631
jmp 0x41e613
mov eax, dword [esp + 0x4b4]
sub eax, 0xc18aff44
mov dword [esp + 0x444], eax
je 0x42179e
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc6d219b6
mov dword [esp + 0x440], eax
jg 0x41e66d
jmp 0x41e64f
mov eax, dword [esp + 0x4b4]
sub eax, 0xc6ace226
mov dword [esp + 0x43c], eax
je 0x420fd1
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc9568bb1
mov dword [esp + 0x438], eax
jg 0x41e6a9
jmp 0x41e68b
mov eax, dword [esp + 0x4b4]
sub eax, 0xc6d219b7
mov dword [esp + 0x434], eax
je 0x41f6c0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xcb8989fe
mov dword [esp + 0x430], eax
jg 0x41e6e5
jmp 0x41e6c7
mov eax, dword [esp + 0x4b4]
sub eax, 0xc9568bb2
mov dword [esp + 0x42c], eax
je 0x421071
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xcd6e82be
mov dword [esp + 0x428], eax
jg 0x41e721
jmp 0x41e703
mov eax, dword [esp + 0x4b4]
sub eax, 0xcb8989ff
mov dword [esp + 0x424], eax
je 0x420ad5
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xcee202e6
mov dword [esp + 0x420], eax
jg 0x41e75d
jmp 0x41e73f
mov eax, dword [esp + 0x4b4]
sub eax, 0xcd6e82bf
mov dword [esp + 0x41c], eax
je 0x41fa4f
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xcfc3b843
mov dword [esp + 0x418], eax
jg 0x41e799
jmp 0x41e77b
mov eax, dword [esp + 0x4b4]
sub eax, 0xcee202e7
mov dword [esp + 0x414], eax
je 0x41fc17
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xd12d4f11
mov dword [esp + 0x410], eax
jg 0x41e7d5
jmp 0x41e7b7
mov eax, dword [esp + 0x4b4]
sub eax, 0xcfc3b844
mov dword [esp + 0x40c], eax
je 0x420f95
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xd7f91eb2
mov dword [esp + 0x408], eax
jg 0x41e811
jmp 0x41e7f3
mov eax, dword [esp + 0x4b4]
sub eax, 0xd12d4f12
mov dword [esp + 0x404], eax
je 0x420e1d
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xe3df473e
mov dword [esp + 0x400], eax
jg 0x41e84d
jmp 0x41e82f
mov eax, dword [esp + 0x4b4]
sub eax, 0xd7f91eb3
mov dword [esp + 0x3fc], eax
je 0x4212c0
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xe6cc0ba1
mov dword [esp + 0x3f8], eax
jg 0x41e889
jmp 0x41e86b
mov eax, dword [esp + 0x4b4]
sub eax, 0xe3df473f
mov dword [esp + 0x3f4], eax
je 0x41f9c2
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xe9d3352a
mov dword [esp + 0x3f0], eax
jg 0x41e8c5
jmp 0x41e8a7
mov eax, dword [esp + 0x4b4]
sub eax, 0xe6cc0ba2
mov dword [esp + 0x3ec], eax
je 0x420ae6
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xeb606806
mov dword [esp + 0x3e8], eax
jg 0x41e901
jmp 0x41e8e3
mov eax, dword [esp + 0x4b4]
sub eax, 0xe9d3352b
mov dword [esp + 0x3e4], eax
je 0x4211ad
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xec287a82
mov dword [esp + 0x3e0], eax
jg 0x41e93d
jmp 0x41e91f
mov eax, dword [esp + 0x4b4]
sub eax, 0xeb606807
mov dword [esp + 0x3dc], eax
je 0x4216f1
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xee863c40
mov dword [esp + 0x3d8], eax
jg 0x41e979
jmp 0x41e95b
mov eax, dword [esp + 0x4b4]
sub eax, 0xec287a83
mov dword [esp + 0x3d4], eax
je 0x420b32
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xf54bf8bb
mov dword [esp + 0x3d0], eax
jg 0x41e9b5
jmp 0x41e997
mov eax, dword [esp + 0x4b4]
sub eax, 0xee863c41
mov dword [esp + 0x3cc], eax
je 0x41fa3f
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xf57e9d33
mov dword [esp + 0x3c8], eax
jg 0x41e9f1
jmp 0x41e9d3
mov eax, dword [esp + 0x4b4]
sub eax, 0xf54bf8bc
mov dword [esp + 0x3c4], eax
je 0x420daf
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xf75da90c
mov dword [esp + 0x3c0], eax
jg 0x41ea2d
jmp 0x41ea0f
mov eax, dword [esp + 0x4b4]
sub eax, 0xf57e9d34
mov dword [esp + 0x3bc], eax
je 0x41f683
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xf878fec9
mov dword [esp + 0x3b8], eax
jg 0x41ea69
jmp 0x41ea4b
mov eax, dword [esp + 0x4b4]
sub eax, 0xf75da90d
mov dword [esp + 0x3b4], eax
je 0x420eda
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xfa44273a
mov dword [esp + 0x3b0], eax
jg 0x41eaa5
jmp 0x41ea87
mov eax, dword [esp + 0x4b4]
sub eax, 0xf878feca
mov dword [esp + 0x3ac], eax
je 0x41f621
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xfaa99697
mov dword [esp + 0x3a8], eax
jg 0x41eae1
jmp 0x41eac3
mov eax, dword [esp + 0x4b4]
sub eax, 0xfa44273b
mov dword [esp + 0x3a4], eax
je 0x41f4c6
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0xffb5d4e8
mov dword [esp + 0x3a0], eax
jg 0x41eb1d
jmp 0x41eaff
mov eax, dword [esp + 0x4b4]
sub eax, 0xfaa99698
mov dword [esp + 0x39c], eax
je 0x41fa1c
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x18624f7
mov dword [esp + 0x398], eax
jg 0x41eb59
jmp 0x41eb3b
mov eax, dword [esp + 0x4b4]
sub eax, 0xffb5d4e9
mov dword [esp + 0x394], eax
je 0x420e0c
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x20f68fa
mov dword [esp + 0x390], eax
jg 0x41eb95
jmp 0x41eb77
mov eax, dword [esp + 0x4b4]
sub eax, 0x18624f8
mov dword [esp + 0x38c], eax
je 0x420e7c
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x3f0b01d
mov dword [esp + 0x388], eax
jg 0x41ebd1
jmp 0x41ebb3
mov eax, dword [esp + 0x4b4]
sub eax, 0x20f68fb
mov dword [esp + 0x384], eax
je 0x421636
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x4e82de2
mov dword [esp + 0x380], eax
jg 0x41ec0d
jmp 0x41ebef
mov eax, dword [esp + 0x4b4]
sub eax, 0x3f0b01e
mov dword [esp + 0x37c], eax
je 0x421061
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5923d82
mov dword [esp + 0x378], eax
jg 0x41ec49
jmp 0x41ec2b
mov eax, dword [esp + 0x4b4]
sub eax, 0x4e82de3
mov dword [esp + 0x374], eax
je 0x4216a1
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x96f772e
mov dword [esp + 0x370], eax
jg 0x41ec85
jmp 0x41ec67
mov eax, dword [esp + 0x4b4]
sub eax, 0x5923d83
mov dword [esp + 0x36c], eax
je 0x41f9b2
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x133d3cdd
mov dword [esp + 0x368], eax
jg 0x41ecc1
jmp 0x41eca3
mov eax, dword [esp + 0x4b4]
sub eax, 0x96f772f
mov dword [esp + 0x364], eax
je 0x42131e
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x14c892ff
mov dword [esp + 0x360], eax
jg 0x41ecfd
jmp 0x41ecdf
mov eax, dword [esp + 0x4b4]
sub eax, 0x133d3cde
mov dword [esp + 0x35c], eax
je 0x420b55
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x1b745aa8
mov dword [esp + 0x358], eax
jg 0x41ed39
jmp 0x41ed1b
mov eax, dword [esp + 0x4b4]
sub eax, 0x14c89300
mov dword [esp + 0x354], eax
je 0x421261
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x1cb3faba
mov dword [esp + 0x350], eax
jg 0x41ed75
jmp 0x41ed57
mov eax, dword [esp + 0x4b4]
sub eax, 0x1b745aa9
mov dword [esp + 0x34c], eax
je 0x421669
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x23ef70a4
mov dword [esp + 0x348], eax
jg 0x41edb1
jmp 0x41ed93
mov eax, dword [esp + 0x4b4]
sub eax, 0x1cb3fabb
mov dword [esp + 0x344], eax
je 0x4212e1
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x2c1a0f3e
mov dword [esp + 0x340], eax
jg 0x41eded
jmp 0x41edcf
mov eax, dword [esp + 0x4b4]
sub eax, 0x23ef70a5
mov dword [esp + 0x33c], eax
je 0x42136d
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x323149ba
mov dword [esp + 0x338], eax
jg 0x41ee29
jmp 0x41ee0b
mov eax, dword [esp + 0x4b4]
sub eax, 0x2c1a0f3f
mov dword [esp + 0x334], eax
je 0x41f672
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x32802cbd
mov dword [esp + 0x330], eax
jg 0x41ee65
jmp 0x41ee47
mov eax, dword [esp + 0x4b4]
sub eax, 0x323149bb
mov dword [esp + 0x32c], eax
je 0x421729
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x3a200409
mov dword [esp + 0x328], eax
jg 0x41eea1
jmp 0x41ee83
mov eax, dword [esp + 0x4b4]
sub eax, 0x32802cbe
mov dword [esp + 0x324], eax
je 0x421296
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x3b1e2148
mov dword [esp + 0x320], eax
jg 0x41eedd
jmp 0x41eebf
mov eax, dword [esp + 0x4b4]
sub eax, 0x3a20040a
mov dword [esp + 0x31c], eax
je 0x42140d
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x3d8f9799
mov dword [esp + 0x318], eax
jg 0x41ef19
jmp 0x41eefb
mov eax, dword [esp + 0x4b4]
sub eax, 0x3b1e2149
mov dword [esp + 0x314], eax
je 0x421739
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x3ddcac94
mov dword [esp + 0x310], eax
jg 0x41ef55
jmp 0x41ef37
mov eax, dword [esp + 0x4b4]
sub eax, 0x3d8f979a
mov dword [esp + 0x30c], eax
je 0x420a9a
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x425c5730
mov dword [esp + 0x308], eax
jg 0x41ef91
jmp 0x41ef73
mov eax, dword [esp + 0x4b4]
sub eax, 0x3ddcac95
mov dword [esp + 0x304], eax
je 0x421762
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x45eb0cf4
mov dword [esp + 0x300], eax
jg 0x41efcd
jmp 0x41efaf
mov eax, dword [esp + 0x4b4]
sub eax, 0x425c5731
mov dword [esp + 0x2fc], eax
je 0x41f4e1
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x48f7f7ec
mov dword [esp + 0x2f8], eax
jg 0x41f009
jmp 0x41efeb
mov eax, dword [esp + 0x4b4]
sub eax, 0x45eb0cf5
mov dword [esp + 0x2f4], eax
je 0x41f5fe
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x4eea839a
mov dword [esp + 0x2f0], eax
jg 0x41f045
jmp 0x41f027
mov eax, dword [esp + 0x4b4]
sub eax, 0x48f7f7ed
mov dword [esp + 0x2ec], eax
je 0x421214
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x51634a14
mov dword [esp + 0x2e8], eax
jg 0x41f081
jmp 0x41f063
mov eax, dword [esp + 0x4b4]
sub eax, 0x4eea839b
mov dword [esp + 0x2e4], eax
je 0x42119d
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5234d1f5
mov dword [esp + 0x2e0], eax
jg 0x41f0bd
jmp 0x41f09f
mov eax, dword [esp + 0x4b4]
sub eax, 0x51634a15
mov dword [esp + 0x2dc], eax
je 0x4215ec
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x559f5799
mov dword [esp + 0x2d8], eax
jg 0x41f0f9
jmp 0x41f0db
mov eax, dword [esp + 0x4b4]
sub eax, 0x5234d1f6
mov dword [esp + 0x2d4], eax
je 0x41f6db
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5709072c
mov dword [esp + 0x2d0], eax
jg 0x41f135
jmp 0x41f117
mov eax, dword [esp + 0x4b4]
sub eax, 0x559f579a
mov dword [esp + 0x2cc], eax
je 0x420bb4
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x57d938d5
mov dword [esp + 0x2c8], eax
jg 0x41f171
jmp 0x41f153
mov eax, dword [esp + 0x4b4]
sub eax, 0x5709072d
mov dword [esp + 0x2c4], eax
je 0x42103f
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5a8b78dd
mov dword [esp + 0x2c0], eax
jg 0x41f1ad
jmp 0x41f18f
mov eax, dword [esp + 0x4b4]
sub eax, 0x57d938d6
mov dword [esp + 0x2bc], eax
je 0x421626
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5aff014a
mov dword [esp + 0x2b8], eax
jg 0x41f1e9
jmp 0x41f1cb
mov eax, dword [esp + 0x4b4]
sub eax, 0x5a8b78de
mov dword [esp + 0x2b4], eax
je 0x42132e
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x5d6d04ec
mov dword [esp + 0x2b0], eax
jg 0x41f225
jmp 0x41f207
mov eax, dword [esp + 0x4b4]
sub eax, 0x5aff014b
mov dword [esp + 0x2ac], eax
je 0x41fbf4
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x607361af
mov dword [esp + 0x2a8], eax
jg 0x41f261
jmp 0x41f243
mov eax, dword [esp + 0x4b4]
sub eax, 0x5d6d04ed
mov dword [esp + 0x2a4], eax
je 0x41f7dd
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x6463ea91
mov dword [esp + 0x2a0], eax
jg 0x41f29d
jmp 0x41f27f
mov eax, dword [esp + 0x4b4]
sub eax, 0x607361b0
mov dword [esp + 0x29c], eax
je 0x421436
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x65413f01
mov dword [esp + 0x298], eax
jg 0x41f2d9
jmp 0x41f2bb
mov eax, dword [esp + 0x4b4]
sub eax, 0x6463ea92
mov dword [esp + 0x294], eax
je 0x421285
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x6595ab07
mov dword [esp + 0x290], eax
jg 0x41f315
jmp 0x41f2f7
mov eax, dword [esp + 0x4b4]
sub eax, 0x65413f02
mov dword [esp + 0x28c], eax
je 0x41fbba
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x6b46a9a0
mov dword [esp + 0x288], eax
jg 0x41f351
jmp 0x41f333
mov eax, dword [esp + 0x4b4]
sub eax, 0x6595ab08
mov dword [esp + 0x284], eax
je 0x41f71a
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x74a595b1
mov dword [esp + 0x280], eax
jg 0x41f38d
jmp 0x41f36f
mov eax, dword [esp + 0x4b4]
sub eax, 0x6b46a9a1
mov dword [esp + 0x27c], eax
je 0x41f646
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x77bac40d
mov dword [esp + 0x278], eax
jg 0x41f3c9
jmp 0x41f3ab
mov eax, dword [esp + 0x4b4]
sub eax, 0x74a595b2
mov dword [esp + 0x274], eax
je 0x41f9d3
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x7ab13b97
mov dword [esp + 0x270], eax
jg 0x41f405
jmp 0x41f3e7
mov eax, dword [esp + 0x4b4]
sub eax, 0x77bac40e
mov dword [esp + 0x26c], eax
je 0x41fbcb
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x7ab13b98
mov dword [esp + 0x268], eax
je 0x421050
jmp 0x41f423
mov eax, dword [esp + 0x4b4]
sub eax, 0x7ad2868f
mov dword [esp + 0x264], eax
je 0x420fe1
jmp 0x41f441
mov eax, dword [esp + 0x4b4]
sub eax, 0x7ae7d9f4
mov dword [esp + 0x260], eax
je 0x41f538
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x7db8392e
mov dword [esp + 0x25c], eax
je 0x420e9f
jmp 0x41f49b
mov eax, dword [esp + 0x4b4]
sub eax, 0x7f128b47
mov dword [esp + 0x258], eax
je 0x420f84
jmp 0x41f49b
jmp 0x4217a9
mov eax, 0x425c5731
mov ecx, 0xfa44273b
mov edx, dword [esp + 0x2164]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x2160], 0xffffffff
mov dword [esp + 0x518], 0x5a8b78de
jmp 0x4217a9
mov eax, 0x104
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x254], eax
call fcn.00407cd0
lea ecx, [esp + 0x524]
mov dword [esp + 0x53c], eax
mov dword [esp], ecx
call fcn.0041b9d0
mov ecx, 0x5234d1f6
mov edx, 0x7ae7d9f4
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0x937722cb
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x104
lea ecx, [esp + 0x14a0]
lea edx, [esp + 0xc78]
mov esi, dword [esp + 0x53c]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x250], eax
call fcn.00408680
lea ecx, [esp + 0x14a0]
mov dword [esp + 0x528], eax
mov eax, dword [esp + 0x528]
sub eax, 0xf7d71e49
sub eax, 4
mov word [esp + eax*2 - 0x1051aece], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x45eb0cf5
mov dword [esp + 0x2158], eax
cmp dword [esp + 0x2158], 0
setne bl
and bl, 1
mov byte [esp + 0x216b], bl
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0xc6d219b7
mov ecx, 0xf878feca
mov dl, byte [esp + 0x216b]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x2c1a0f3f
mov edx, 0x6b46a9a1
cmp eax, 0xb7
cmove ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x518], 0x2c1a0f3f
mov dword [esp + 0x24c], eax
jmp 0x4217a9
mov eax, 0xf57e9d34
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x9150eb23
mov dword [esp + 0x518], ecx
mov dword [esp + 0x248], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0xc6d219b7
jmp 0x4217a9
mov dword [esp + 0x2160], 0
mov dword [esp + 0x518], 0x5a8b78de
jmp 0x4217a9
mov eax, 0x6595ab08
mov ecx, 0xa395f7e9
cmp dword [esp + 0x524], 6
cmovb eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x2160], 0xffffffff
mov dword [esp + 0x518], 0x5a8b78de
jmp 0x4217a9
mov eax, esp
lea ecx, [esp + 0xa6e]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xc78]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
mov ecx, esp
lea edx, [esp + 0x1abe]
mov dword [ecx], edx
mov dword [ecx + 4], 0x104
mov dword [esp + 0x244], eax
mov dword [esp + 0x240], edx
call fcn.00409c50
mov ecx, esp
mov edx, dword [esp + 0x240]
mov dword [ecx], edx
mov dword [esp + 0x23c], eax
call fcn.00408a50
mov dword [esp + 0x530], eax
mov eax, esp
mov dword [eax], 0
call fcn.004217b0
mov dword [esp + 0x238], edx
mov dword [esp + 0x234], eax
call fcn.00406020
mov ecx, dword [esp + 0x234]
imul ecx, eax
mov dword [esp], ecx
call fcn.0042b6f6
mov dword [esp + 0x518], 0x9fc77507
jmp 0x4217a9
mov eax, 0x5d6d04ed
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x14a0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x230], eax
mov dword [esp + 0x22c], ecx
call fcn.00407bc0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1296]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x228], eax
mov dword [esp + 0x224], ecx
mov dword [esp + 0x220], edx
call fcn.00407bc0
mov ecx, 0x104
lea edx, [esp + 0x14a0]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x21c], eax
mov dword [esp + 0x218], ecx
call fcn.0040ab00
lea eax, [esp + 0x14a0]
mov dword [esp], eax
call fcn.00408a50
mov ecx, 0x104
lea edx, [esp + 0x1296]
lea esi, [esp + 0x1abe]
mov dword [esp + 0x51c], eax
mov eax, dword [esp + 0x530]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x214], ecx
call fcn.004080a0
lea ecx, [esp + 0x1296]
mov edx, 0
lea esi, [esp + 0x14a0]
mov edi, dword [esp + 0x51c]
mov ebx, dword [esp + 0x530]
sub edx, ebx
add edx, 0x104
mov ebx, dword [esp + 0x530]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x210], eax
call fcn.004080a0
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1296]
mov edi, 0x6afe33c2
mov ebx, dword [esp + 0x530]
add edi, 0x104
sub edi, ebx
sub edi, 0x6afe33c2
mov ebx, dword [esp + 0x51c]
sub edi, 0xe9929bb6
sub edi, ebx
add edi, 0xe9929bb6
mov ebx, dword [esp + 0x530]
shl ebx, 1
add esi, ebx
mov ebx, dword [esp + 0x51c]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x20c], eax
mov dword [esp + 0x208], edx
call fcn.004080a0
mov ecx, 0x5923d83
mov dword [esp + 0x518], ecx
mov dword [esp + 0x204], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0xe3df473f
jmp 0x4217a9
mov eax, 0x74a595b2
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0xa6e]
lea ecx, [esp + 0x1296]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0xfaa99698
cmp eax, 0
sete bl
and bl, 1
mov byte [esp + 0x216c], bl
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0xee863c41
mov ecx, 0x9fc77507
mov dl, byte [esp + 0x216c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0xcd6e82bf
jmp 0x4217a9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x200], eax
mov dword [esp + 0x1fc], ecx
call fcn.00407bc0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x16aa]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x1f8], eax
mov dword [esp + 0x1f4], ecx
mov dword [esp + 0x1f0], edx
call fcn.00407bc0
mov ecx, 0x104
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1e8], ecx
call fcn.0040ab00
mov eax, 0x104
lea ecx, [esp + 0x16aa]
lea edx, [esp + 0x1abe]
mov esi, dword [esp + 0x530]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1e4], eax
call fcn.004080a0
lea ecx, [esp + 0x18b4]
mov dword [esp], ecx
mov dword [esp + 0x1e0], eax
call fcn.00408a50
lea ecx, [esp + 0x16aa]
mov edx, 0
lea esi, [esp + 0x18b4]
mov edi, dword [esp + 0x530]
sub edx, edi
add edx, 0x104
mov edi, dword [esp + 0x530]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.004080a0
lea ecx, [esp + 0x16aa]
mov edx, dword [0x4bd388]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x1dc], eax
call edx
sub esp, 8
mov dword [esp + 0x2154], eax
mov dword [esp + 0x518], 0x65413f02
jmp 0x4217a9
mov eax, 0x77bac40e
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x5aff014b
cmp dword [esp + 0x2154], 0
sete cl
and cl, 1
mov byte [esp + 0x216d], cl
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0xcee202e7
mov ecx, 0xcd6e82bf
mov dl, byte [esp + 0x216d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [0x4bd37c]
mov ecx, dword [0x4bd1b4]
mov edx, dword [0x4bd1dc]
mov esi, dword [esp + 0x2154]
mov edi, esp
lea ebx, [esp + 0x2114]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1c4]
mov esi, dword [0x4bd1dc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1d8], eax
lea eax, [esp + 0x2110]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1c8]
mov esi, dword [0x4bd1dc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1d4], eax
lea eax, [esp + 0x210c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1b4]
mov esi, dword [0x4bd1d8]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1d0], eax
lea eax, [esp + 0x2108]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1a8]
mov esi, dword [0x4bd1e8]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1cc], eax
lea eax, [esp + 0x2104]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1b4]
mov esi, dword [0x4bd1ec]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1c8], eax
lea eax, [esp + 0x2100]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1f8]
mov esi, dword [0x4bd1f0]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1c4], eax
lea eax, [esp + 0x20fc]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1f4]
mov esi, dword [0x4bd1f0]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1c0], eax
lea eax, [esp + 0x20f8]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd37c]
mov edx, dword [0x4bd1f4]
mov esi, dword [0x4bd1dc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [esp + 0x1bc], eax
lea eax, [esp + 0x20f4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x4bd378]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x1b8], eax
call ecx
sub esp, 4
mov dword [esp + 0x1b4], eax
call fcn.0042b6d3
and eax, 0xf
mov ecx, esp
lea edx, [esp + 0x592]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
mov dword [esp + 0x1b0], edx
call fcn.0042c088
mov ecx, esp
mov edx, dword [esp + 0x1b0]
mov dword [ecx], edx
mov dword [esp + 0x1ac], eax
call fcn.00408a50
mov dword [esp + 0x53c], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x53c], ecx
mov word [esp + eax*2 + 0x592], 0x2e
mov eax, dword [esp + 0x53c]
lea eax, [esp + eax*2 + 0x592]
mov dword [esp + 0x1a8], eax
call fcn.0042b6d3
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x1a8]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0042c088
mov ecx, esp
mov edx, dword [esp + 0x1b0]
mov dword [ecx], edx
mov dword [esp + 0x1a4], eax
call fcn.00408a50
mov dword [esp + 0x53c], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x53c], ecx
mov word [esp + eax*2 + 0x592], 0x2e
mov eax, dword [esp + 0x53c]
lea eax, [esp + eax*2 + 0x592]
mov dword [esp + 0x1a0], eax
call fcn.0042b6d3
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x1a0]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0042c088
mov ecx, esp
mov edx, dword [esp + 0x1b0]
mov dword [ecx], edx
mov dword [esp + 0x19c], eax
call fcn.00408a50
mov dword [esp + 0x53c], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x53c], ecx
mov word [esp + eax*2 + 0x592], 0x2e
mov eax, dword [esp + 0x53c]
lea eax, [esp + eax*2 + 0x592]
mov dword [esp + 0x198], eax
call fcn.0042b6d3
and eax, 0xc
mov ecx, esp
mov edx, dword [esp + 0x198]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0042c088
mov ecx, esp
mov edx, dword [esp + 0x1b0]
mov dword [ecx], edx
mov dword [esp + 0x194], eax
call fcn.00408a50
mov dword [esp + 0x53c], eax
mov eax, dword [0x484150]
movzx eax, byte [eax]
mov dword [esp + 0x538], eax
mov ecx, dword [0x484150]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x534], eax
mov ecx, dword [0x484150]
mov edx, dword [esp + 0x538]
lea edx, [ecx + edx + 2]
inc ecx
mov esi, esp
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], edx
mov dword [esi + 8], ecx
lea eax, [esp + 0x55a]
mov dword [esi], eax
mov dword [esi + 4], 0x10
call fcn.00406960
mov eax, dword [0x4bd374]
mov ecx, dword [0x4bd1d0]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x20f0], eax
mov eax, dword [0x4bd36c]
xor ecx, ecx
mov edx, dword [0x4bd200]
mov esi, dword [0x4bd1b0]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x592]
mov edx, dword [0x4bd368]
mov esi, dword [0x4bd1cc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x190], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x18b4]
mov edx, dword [0x4bd368]
mov esi, dword [0x4bd1b4]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x18c], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4bd364]
mov edx, dword [0x4bd1ac]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0x188], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x55a]
mov edx, dword [0x4bd360]
mov esi, dword [0x4bd1fc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x184], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4bd374]
mov edx, dword [0x4bd1d4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x180], eax
call ecx
sub esp, 8
mov dword [esp + 0x20ec], eax
mov eax, dword [0x4bd35c]
mov ecx, dword [esp + 0x2108]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x2108]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x17c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x2100]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x178], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x2100]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x174], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd370]
mov edx, dword [esp + 0x20ec]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x170], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x2110]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x16c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x2110]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x168], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x210c]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x164], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x210c]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x160], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x2114]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x15c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x20f4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x158], eax
call ecx
sub esp, 8
mov dword [esp + 0x154], eax
call fcn.0042b6d3
lea ecx, [esp + 0x1ed2]
mov edx, 0
mov esi, 5
xor edi, edi
mov dword [esp + 0x150], edx
mov edx, edi
div esi
mov eax, dword [edx*4 + 0x484154]
mov dword [esp + 0x20dc], eax
mov eax, dword [esp + 0x20dc]
movzx eax, word [eax]
mov dword [esp + 0x538], eax
mov eax, dword [esp + 0x538]
mov edx, dword [esp + 0x150]
sub edx, 1
sub eax, edx
mov edx, dword [esp + 0x20dc]
movzx eax, word [edx + eax*2]
mov dword [esp + 0x534], eax
mov eax, dword [esp + 0x534]
mov edx, dword [esp + 0x20dc]
mov esi, dword [esp + 0x538]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [esp + 0x20dc]
add esi, 2
mov edi, dword [esp + 0x538]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00406f00
mov eax, 0x104
lea ecx, [esp + 0x108c]
lea edx, [esp + 0x1ed2]
mov esi, dword [esp + 0x538]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x14c], eax
call fcn.004080a0
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x108c]
mov edi, 0
mov ebx, dword [esp + 0x538]
sub edi, ebx
add edi, 0x104
mov ebx, dword [esp + 0x538]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], edx
call fcn.004080a0
mov ecx, 0x104
lea edx, [esp + 0xe82]
lea esi, [esp + 0x1ed2]
mov edi, dword [esp + 0x538]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x140], eax
mov dword [esp + 0x13c], ecx
call fcn.004080a0
lea ecx, str.32.exe
mov edx, 6
lea esi, [esp + 0xe82]
mov edi, 0
mov ebx, dword [esp + 0x538]
sub edi, ebx
add edi, 0x104
mov ebx, dword [esp + 0x538]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x138], eax
mov dword [esp + 0x134], edx
call fcn.004080a0
mov ecx, 0x10
lea edx, [esp + 0x54a]
mov esi, dword [0x484168]
movzx esi, byte [esi]
mov dword [esp + 0x538], esi
mov esi, dword [esp + 0x538]
add esi, 0xe7cd748e
add esi, 1
sub esi, 0xe7cd748e
mov edi, dword [0x484168]
movzx esi, byte [edi + esi]
mov dword [esp + 0x534], esi
mov esi, dword [esp + 0x534]
mov edi, dword [0x484168]
add edi, dword [esp + 0x538]
add edi, 2
mov ebx, dword [0x484168]
add ebx, 1
mov dword [esp], edx
mov dword [esp + 4], 0x10
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x130], eax
mov dword [esp + 0x12c], ecx
call fcn.00406960
mov eax, dword [0x4bd374]
mov ecx, dword [0x4bd1dc]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x108c]
mov dword [esp + 0x20e8], eax
mov eax, dword [0x4bd368]
mov edx, dword [0x4bd1b4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0xe82]
mov edx, dword [0x4bd368]
mov esi, dword [0x4bd1bc]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x128], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4bd368]
mov edx, dword [0x4bd1b8]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [esp + 0x124], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x54a]
mov edx, dword [0x4bd360]
mov esi, dword [0x4bd1f4]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x120], eax
call edx
sub esp, 0x10
mov ecx, dword [0x4bd374]
mov edx, dword [0x4bd1e0]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x11c], eax
call ecx
sub esp, 8
mov dword [esp + 0x20e4], eax
mov eax, dword [0x4bd368]
mov ecx, dword [0x4bd1b4]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x4483a0
call eax
sub esp, 0xc
mov ecx, dword [0x4bd370]
mov edx, dword [esp + 0x20e4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x118], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x56a]
mov edx, 0
mov esi, dword [0x48416c]
movzx esi, word [esi]
mov dword [esp + 0x538], esi
mov esi, dword [esp + 0x538]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x48416c]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x534], edx
mov edx, dword [esp + 0x534]
mov esi, dword [0x48416c]
mov edi, dword [esp + 0x538]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x48416c]
add edi, 2
mov ebx, dword [esp + 0x538]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x114], eax
call fcn.00406f00
mov eax, dword [0x4bd374]
mov ecx, dword [0x4bd1e4]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x56a]
mov dword [esp + 0x20e0], eax
mov eax, dword [0x4bd368]
mov edx, dword [0x4bd1b4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x1296]
mov edx, dword [0x4bd368]
mov esi, dword [0x4bd1c0]
mov edi, dword [esp + 0x2154]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x110], eax
call edx
sub esp, 0xc
mov ecx, dword [0x4bd370]
mov edx, dword [esp + 0x20e0]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x10c], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd370]
mov edx, dword [esp + 0x20e8]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x108], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x20f4]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x104], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x2114]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x100], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xfc], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x20f8]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf8], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x20f8]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf4], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x20fc]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xf0], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd35c]
mov edx, dword [esp + 0x2104]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xec], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd358]
mov edx, dword [esp + 0x2104]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xe8], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd370]
mov edx, dword [esp + 0x20f0]
mov esi, dword [esp + 0x2154]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0xe4], eax
call ecx
sub esp, 8
mov ecx, dword [0x4bd380]
mov edx, dword [esp + 0x2154]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0xe0], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x65a]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0xdc], eax
call fcn.0040b270
lea eax, [esp + 0x65a]
mov ecx, dword [0x4bd3c0]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov ecx, 0xcb8989ff
mov edx, 0x3d8f979a
mov dword [esp + 0x215c], eax
cmp dword [esp + 0x215c], 0
cmove ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0xd8], eax
call fcn.0041b890
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, 0xe6cc0ba2
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [esp + 0x215c]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0xec287a83
mov dword [esp + 0x52c], eax
cmp dword [esp + 0x52c], 0
setne dl
and dl, 1
mov byte [esp + 0x216e], dl
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0x559f579a
mov ecx, 0x133d3cde
mov dl, byte [esp + 0x216e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x559f579a
mov ecx, 0xbe540fa1
cmp dword [esp + 0x52c], 0x80
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0xd4], eax
call fcn.0041b890
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x864]
lea esi, [0x4483a4]
mov dword [esp + 0x2118], 0x3c
mov dword [esp + 0x211c], 0x40
mov dword [esp + 0x2120], 0
mov dword [esp + 0x2124], esi
mov dword [esp + 0x2130], 0
mov dword [esp + 0x2138], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], ecx
call fcn.00407bc0
mov ecx, 0x104
lea edx, [0x4483ae]
mov esi, 3
lea edi, [esp + 0x864]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], esi
call fcn.004080a0
lea ecx, [esp + 0x16aa]
mov dword [esp], ecx
mov dword [esp + 0xbc], eax
call fcn.00408a50
mov ecx, 0x101
lea edx, [esp + 0x864]
lea esi, [esp + 0x16aa]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xb8], ecx
call fcn.004080a0
lea ecx, [esp + 0x1cc8]
mov edx, 0
mov esi, dword [0x484170]
movzx esi, word [esi]
mov dword [esp + 0x538], esi
mov esi, dword [esp + 0x538]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x484170]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x534], edx
mov edx, dword [esp + 0x534]
mov esi, dword [0x484170]
mov edi, dword [esp + 0x538]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x484170]
add edi, 2
mov ebx, dword [esp + 0x538]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xb4], eax
call fcn.00406f00
lea eax, [esp + 0x14a0]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0xffb5d4e9
mov edx, 0xf54bf8bc
mov dword [esp + 0x2158], eax
cmp dword [esp + 0x2158], 0
cmove ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0x80ec500c
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0xb0], eax
call fcn.0041b890
mov eax, 0x94a778e0
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, 0xd12d4f12
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x864]
lea ecx, [esp + 0x1cc8]
mov dword [esp + 0x2128], ecx
mov dword [esp + 0x212c], eax
mov dword [esp + 0x2134], 0
mov eax, dword [0x4bd390]
mov ecx, esp
lea edx, [esp + 0x2118]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0x18624f8
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x216f], bl
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0xf75da90d
mov ecx, 0x7db8392e
mov dl, byte [esp + 0x216f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0xac], eax
call fcn.0041b890
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, dword [esp + 0x2150]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4bd38c]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xa8], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x108c]
mov dword [esp + 0x2128], ecx
mov dword [esp + 0x212c], 0
mov dword [esp + 0x2134], 1
mov ecx, dword [0x4bd390]
mov edx, esp
lea esi, [esp + 0x2118]
mov dword [edx], esi
mov dword [esp + 0xa4], eax
call ecx
sub esp, 4
mov ecx, 0x7ad2868f
mov edx, 0x7f128b47
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0xcfc3b844
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0xa0], eax
call fcn.0041b890
mov eax, 0xc6ace226
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, dword [esp + 0x2150]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2158]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x9c], eax
call ecx
sub esp, 8
mov ecx, 0xc9568bb2
mov edx, 0x5709072d
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov eax, 0x7ab13b98
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x3f0b01e
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x864]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ecx
call fcn.00407bc0
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0x864]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], esi
call fcn.004080a0
lea ecx, [esp + 0x16aa]
mov dword [esp], ecx
mov dword [esp + 0x84], eax
call fcn.00408a50
mov ecx, 0xfe
lea edx, [esp + 0x864]
lea esi, [esp + 0x16aa]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x80], ecx
call fcn.004080a0
lea ecx, [esp + 0x864]
lea edx, [esp + 0x1cc8]
mov dword [esp + 0x2128], edx
mov dword [esp + 0x212c], ecx
mov dword [esp + 0x2134], 0
mov ecx, dword [0x4bd390]
mov edx, esp
lea esi, [esp + 0x2118]
mov dword [edx], esi
mov dword [esp + 0x7c], eax
call ecx
sub esp, 4
mov ecx, 0xe9d3352b
mov edx, 0x4eea839b
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x518], ecx
jmp 0x4217a9
mov dword [esp + 0x518], 0x48f7f7ed
jmp 0x4217a9
mov eax, dword [esp + 0x2150]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x4bd38c]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0x78], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x520], 1
mov dword [esp + 0x518], 0x48f7f7ed
mov dword [esp + 0x74], eax
jmp 0x4217a9
mov eax, 0x14c89300
mov ecx, 0xc06ca12e
cmp dword [esp + 0x2158], 0
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x518], 0x14c89300
mov dword [esp + 0x70], eax
jmp 0x4217a9
mov eax, 0x8928c8e1
mov ecx, 0x6463ea92
cmp dword [esp + 0x215c], 0
cmovne eax, ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x32802cbe
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [esp + 0x215c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xd7f91eb3
mov dword [esp + 0x518], ecx
mov dword [esp + 0x6c], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x8928c8e1
jmp 0x4217a9
mov eax, 0x1cb3fabb
mov dword [esp + 0x518], eax
jmp 0x4217a9
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x68], eax
call fcn.0041dee0
mov eax, 0x96f772f
mov ecx, dword [esp + 0x520]
mov dword [esp + 0x2160], ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x5a8b78de
jmp 0x4217a9
mov eax, 0xa4bd8afa
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, 0x9d4cf1f2
mov ecx, dword [esp + 0x2160]
mov dword [esp + 0x2170], ecx
mov dword [esp + 0x518], eax
jmp 0x4217a9
mov eax, dword [esp + 0x2170]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0x104
lea ecx, [esp + 0x14a0]
lea edx, [esp + 0xc78]
mov esi, dword [esp + 0x53c]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x64], eax
call fcn.00408680
lea ecx, [esp + 0x14a0]
mov dword [esp + 0x528], eax
mov eax, dword [esp + 0x528]
sub eax, 0xbabf36d4
sub eax, 4
add eax, 0xbabf36d4
shl eax, 1
mov edx, ecx
add edx, eax
mov word [edx], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov dword [esp + 0x2158], eax
mov dword [esp + 0x518], 0x937722cb
jmp 0x4217a9
mov eax, dword [esp + 0x2158]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x518], 0xf57e9d34
mov dword [esp + 0x60], eax
jmp 0x4217a9
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x14a0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ecx
call fcn.00407bc0
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1296]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], edx
call fcn.00407bc0
mov ecx, 0x104
lea edx, [esp + 0x14a0]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ecx
call fcn.0040ab00
lea eax, [esp + 0x14a0]
mov dword [esp], eax
call fcn.00408a50
mov ecx, 0x104
lea edx, [esp + 0x1296]
lea esi, [esp + 0x1abe]
mov dword [esp + 0x51c], eax
mov eax, dword [esp + 0x530]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x40], ecx
call fcn.004080a0
lea ecx, [esp + 0x1296]
mov edx, 0xace98ed1
lea esi, [esp + 0x14a0]
mov edi, dword [esp + 0x51c]
mov ebx, dword [esp + 0x530]
add edx, 0x104
sub edx, ebx
sub edx, 0xace98ed1
mov ebx, dword [esp + 0x530]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x3c], eax
call fcn.004080a0
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1296]
mov edi, 0x1f6c1b7e
mov ebx, dword [esp + 0x530]
add edi, 0x104
sub edi, ebx
sub edi, 0x1f6c1b7e
mov ebx, dword [esp + 0x51c]
add edi, 0xe4324e33
sub edi, ebx
sub edi, 0xe4324e33
mov ebx, dword [esp + 0x530]
shl ebx, 1
add esi, ebx
mov ebx, dword [esp + 0x51c]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], edx
call fcn.004080a0
mov dword [esp + 0x518], 0x5d6d04ed
mov dword [esp + 0x30], eax
jmp 0x4217a9
lea eax, [esp + 0xa6e]
lea ecx, [esp + 0x1296]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov dword [esp + 0x518], 0x74a595b2
mov dword [esp + 0x2c], eax
jmp 0x4217a9
mov dword [esp + 0x518], 0x77bac40e
jmp 0x4217a9
mov eax, dword [esp + 0x215c]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov dword [esp + 0x52c], eax
mov dword [esp + 0x518], 0xe6cc0ba2
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0x28], eax
call fcn.0041b890
mov dword [esp + 0x518], 0x80ec500c
jmp 0x4217a9
lea eax, [esp + 0x864]
lea ecx, [esp + 0x1cc8]
mov dword [esp + 0x2128], ecx
mov dword [esp + 0x212c], eax
mov dword [esp + 0x2134], 0
mov eax, dword [0x4bd390]
mov ecx, esp
lea edx, [esp + 0x2118]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x518], 0xd12d4f12
mov dword [esp + 0x24], eax
jmp 0x4217a9
lea eax, [esp + 0x1296]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xa6e]
mov dword [esp], ecx
mov dword [esp + 0x20], eax
call fcn.0041b890
mov dword [esp + 0x518], 0xcfc3b844
jmp 0x4217a9
mov dword [esp + 0x518], 0x7ab13b98
jmp 0x4217a9
mov eax, dword [esp + 0x215c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x518], 0x32802cbe
mov dword [esp + 0x1c], eax
jmp 0x4217a9
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0x18], eax
call fcn.0041dee0
mov eax, dword [esp + 0x520]
mov dword [esp + 0x2160], eax
mov dword [esp + 0x518], 0x1cb3fabb
jmp 0x4217a9
mov dword [esp + 0x518], 0xa4bd8afa
jmp 0x41e2df