Function at 0x40c530
Capabilities:
Check for time delay via gettickcount
Delete file
Get common file path
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x14a4]
mov eax, 0x14a4
call fcn.00414840
push 0xffffffffffffffff
push 0x426490
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x42d2ec]
xor eax, ebp
mov dword [ebp + 0x14a0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x14ac]
mov byte [ebp - 0x15], 0
call fcn.00407c60
push 0x7d0
push 0x42e760
push 0x16
mov eax, dword [0x42f4ec]
push eax
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
call edi
push 0x42e760
push 0x7d0
lea ecx, [ebp + 0x190]
push ecx
call fcn.00413690
add esp, 0xc
push 0x208
push 0x442288
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call ebx
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 4], 0
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov dword [ebp - 4], 0xffffffff
push 0x12c
push 0
push 0x42f4e0
call fcn.00412dc0
add esp, 0xc
mov dword [0x42f4ec], esi
push str.exepress_class
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
mov esi, eax
test esi, esi
je 0x40c66c
push 0x7d0
push 0x42e760
push 0x19
mov edx, dword [0x42f4ec]
push edx
call edi
push 0x40
push 0x42fbb6
push 0x42e760
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x14a0]
xor ecx, ebp
call fcn.00412c09
add ebp, 0x14a4
mov esp, ebp
pop ebp
ret 0x10
push str.exepress_class
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x14], eax
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
mov esi, dword [sym.imp.USER32.dll_SetCursor]
call esi
mov edi, eax
call fcn.00406590
mov dword [0x42f174], eax
push edi
call esi
cmp dword [0x42f174], 0
jne 0x40c773
mov byte [ebp + 0x960], 0
call fcn.00402010
cmp eax, 6
jne 0x40c6d6
lea eax, [ebp + 0x190]
push eax
push 0x7d0
lea ecx, [ebp + 0x960]
push ecx
jmp 0x40c6e8
call fcn.00402020
push eax
push 0x7d0
lea edx, [ebp + 0x960]
push edx
call fcn.00413690
add esp, 0xc
mov dword [ebp - 4], 2
push 0x442288
call fcn.0040e950
push eax
lea eax, [ebp + 0x1130]
push eax
call fcn.00407bc0
push 0x15
call fcn.00401020
push eax
lea ecx, [ebp + 0x1130]
push ecx
call fcn.00407be0
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp byte [0x42f608], 0
jne 0x40c74d
push 0x10
lea edx, [ebp + 0x1130]
push edx
lea eax, [ebp + 0x960]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
jmp 0x40c645
cmp byte [0x42fb52], 0
je 0x40c8d2
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
push ecx
push str._u_u_u_u
push 0x42fb52
call fcn.0041481f
add esp, 0x18
cmp eax, 4
je 0x40c7f3
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40c7da
push 0x12010
push 0x42fbb6
push 0x1a
call fcn.00401020
add esp, 4
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
jmp 0x40c645
xor eax, eax
mov dword [ebp + 0x16c], eax
mov dword [ebp + 0x170], eax
mov dword [ebp + 0x174], eax
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, dword [ebp - 0x1c]
mov dword [ebp + 0x178], ecx
mov edx, eax
xor edx, dword [ebp - 0x34]
sub edx, 1
mov dword [ebp + 0x17c], edx
xor eax, dword [ebp - 0x38]
sub eax, 0x76c
mov dword [ebp + 0x180], eax
mov dword [ebp + 0x18c], 0xffffffff
lea eax, [ebp + 0x16c]
push eax
call fcn.004147aa
mov edi, eax
mov esi, edx
lea ecx, [ebp - 0x30]
push ecx
call fcn.004144bb
add esp, 8
mov eax, dword [ebp - 0x2c]
cmp eax, esi
jl 0x40c886
mov ecx, dword [ebp - 0x30]
jg 0x40c867
cmp ecx, edi
jbe 0x40c886
sub ecx, edi
sbb eax, esi
mov dword [ebp - 0x3c], eax
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 7
jle 0x40c8d2
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40c8b9
push 0x12010
push 0x42fbb6
push 0x2a
call fcn.00401020
add esp, 4
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
jmp 0x40c645
test dword [0x4330b8], 0x2000000
je 0x40c954
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
lea eax, [ebp - 0x1c]
push eax
push str.IsWow64Process
push str.Kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call fcn.00412430
add esp, 0xc
cmp dword [ebp - 0x1c], esi
je 0x40c954
lea ecx, [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1c]
test eax, eax
je 0x40c954
cmp dword [ebp - 0x20], esi
je 0x40c954
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40c74d
push 0x12010
push 0x42fbb6
push 0x26
call fcn.00401020
add esp, 4
push eax
push esi
jmp 0x40c747
test dword [0x4330b8], 0x4000000
je 0x40c9e7
push 0x104
lea eax, [ebp + 0x50]
push eax
push 0
call ebx
lea ecx, [ebp - 0x16]
push ecx
lea edx, [ebp + 0x1298]
push edx
lea eax, [ebp + 0x50]
push eax
call fcn.0040f860
add esp, 8
push eax
push 0
call fcn.0040f740
add esp, 0xc
test al, al
jne 0x40c9cf
cmp byte [0x42f608], al
jne 0x40c9bd
push 0x134
push 0x42fbb6
push 0x427a18
push 0
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
call edi
cmp eax, 6
je 0x40c9ed
mov ecx, dword [0x42f604]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x40c74d
cmp byte [ebp - 0x16], 0
jne 0x40c9e7
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x40c74d
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
test dword [0x4330b8], 0x400000
je 0x40ca39
call fcn.00406db0
test al, al
je 0x40ca39
mov eax, dword [0x42f604]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40c74d
push 0x12040
push 0x42fbb6
push 0x14
call fcn.00401020
add esp, 4
push eax
push 0
call edi
jmp 0x40c74d
test dword [0x4330b8], 0x80000
je 0x40caa5
call fcn.00410750
test eax, eax
jne 0x40caa5
mov ecx, dword [0x42f604]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40ca7d
push 0x12010
push 0x42fbb6
push 0x13
call fcn.00401020
add esp, 4
push eax
push 0
call edi
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x42f65c]
cmp ax, 0xffff
je 0x40cbe4
test al, 1
je 0x40caca
call fcn.0040fb20
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 2
je 0x40cae0
call fcn.0040f9b0
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 4
je 0x40caf6
call fcn.0040fa70
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 8
je 0x40cb0c
call fcn.0040f910
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 0x10
je 0x40cb22
call fcn.0040fbd0
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 0x20
je 0x40cb38
call fcn.004109f0
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, 0x40
je 0x40cb4e
call fcn.00410af0
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test al, al
jns 0x40cb64
call fcn.0040fd40
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test eax, 0x100
je 0x40cb79
call fcn.0040fef0
test eax, eax
jne 0x40cbe4
mov eax, dword [0x42f65c]
test eax, 0x200
je 0x40cb89
call fcn.0040fe10
test eax, eax
jne 0x40cbe4
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0x42f666
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x40cbc6
cmp byte [0x42f608], 0
jne 0x40ca7d
push 0x12010
push 0x42fbb6
push 0x42f666
jmp 0x40ca79
cmp byte [0x42f608], 0
jne 0x40ca7d
push 0x12010
push 0x42fbb6
push 0x26
jmp 0x40ca70
test dword [0x4330b8], 0x20000
je 0x40cf06
cmp byte [0x441d00], 0
je 0x40cf06
xor esi, esi
mov dword [ebp - 4], 4
push esi
push 0x441d00
mov eax, dword [0x42f174]
push eax
call fcn.00402120
add esp, 0xc
mov edi, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], 0xffffffff
test edi, edi
jne 0x40cc70
mov ecx, dword [0x42f604]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40c74d
push 0x12010
push 0x42fbb6
push 0x4279c8
jmp 0x40c745
cmp byte [0x441e04], 0
je 0x40ccaa
mov dword [ebp - 4], 6
push 0
push 0x441e04
mov edx, dword [0x42f174]
push edx
call fcn.00402120
add esp, 0xc
mov esi, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x40cd63
lea ecx, [ebp + 0x50]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [ebp + 0x139c]
push edx
push 0
push 0x4279c4
lea eax, [ebp + 0x50]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
call ebx
lea ecx, [ebp + 0x139c]
push ecx
push 0x104
push 0x42f390
call fcn.00413690
push edi
lea edx, [ebp + 0x139c]
push edx
call fcn.00406d40
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
test esi, esi
je 0x40cd9b
lea eax, [ebp + 0x139c]
push eax
xor edi, edi
push edi
push 0x4279c0
lea ecx, [ebp + 0x50]
push ecx
call ebx
lea edx, [ebp + 0x139c]
push edx
push 0x104
push 0x42f288
call fcn.00413690
push esi
lea eax, [ebp + 0x139c]
push eax
call fcn.00406d40
add esp, 0x14
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x40cdb4
mov eax, dword [0x42f604]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40cd8f
push 0x12010
push 0x42fbb6
push 0x427968
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x40c74d
push 0x427964
push 0x104
push 0x42f288
call fcn.00413690
add esp, 0xc
xor edi, edi
push 0x42f390
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x42f38c], eax
cmp eax, edi
jne 0x40ce1a
mov ecx, dword [0x42f604]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40cdf4
push 0x12010
push 0x42fbb6
push 0x427918
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x42f390
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
cmp byte [0x42f288], 0
je 0x40c74d
push 0x42f288
call esi
jmp 0x40c74d
push str.EXEpressExtension
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42f4c4], eax
cmp eax, edi
jne 0x40ce8d
mov edx, dword [0x42f604]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x42f608], 0
jne 0x40ce5b
push 0x12010
push 0x42fbb6
push 0x4278b8
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x42f38c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x42f390
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
cmp byte [0x42f288], 0
je 0x40c74d
push 0x42f288
call esi
jmp 0x40c74d
mov dword [0x42f494], 0x30
mov dword [0x42f49c], edi
mov dword [0x42f4c0], 0x406b90
mov dword [0x42f4a4], 0x442288
mov cl, byte [0x42f288]
neg cl
sbb ecx, ecx
and ecx, 0x42f288
mov dword [0x42f4a8], ecx
mov dword [0x42f4a0], 0x42fbb6
mov dword [0x42f4b8], edi
mov dword [0x42f4b4], edi
mov dword [0x42f4b0], edi
mov dword [0x42f4ac], edi
mov dword [0x42f498], 0x3e8
call fcn.00406c30
test eax, eax
jne 0x40c9d5
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x42f604]
test eax, eax
je 0x40cf3d
nop
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x42f600]
cmp eax, 0x3e8
ja 0x40cf38
push 0
call fcn.0040f420
add esp, 4
mov eax, dword [0x42f604]
test eax, eax
jne 0x40cf10
jmp 0x40cf3d
mov eax, dword [0x42f604]
test byte [0x4330bc], 4
je 0x40cf6a
push 0x35
call fcn.00401020
add esp, 4
push eax
push 0x415
mov eax, dword [0x42f604]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x40cf81
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
test eax, eax
je 0x40cf77
push eax
call ebx
mov dword [0x42f604], 0
test dword [0x4330b8], 0x400
je 0x40cfa6
mov ecx, dword [0x441650]
push ecx
push 0x441654
push 0x42fbb6
call fcn.00401db0
add esp, 0xc
test dword [0x4330b8], 0x4000
je 0x40cfe3
push 0
push 0x441bf8
mov edx, dword [0x42f174]
push edx
call fcn.00402120
add esp, 0xc
mov esi, eax
test esi, esi
je 0x40cfe3
push esi
call fcn.00407410
add esp, 4
mov dword [0x441cfc], eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x4330b8]
test eax, 0x8000000
je 0x40d030
mov dword [0x441f0c], 1
test eax, 0x10000000
je 0x40d03d
push 0
push 0x441f10
mov eax, dword [0x42f174]
push eax
call fcn.00402120
add esp, 0xc
mov esi, eax
test esi, esi
je 0x40d030
push esi
call fcn.00407410
add esp, 4
mov dword [0x442014], eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [0x441f0c], 0
je 0x40d0f8
push 0x150
push 0
lea ecx, [ebp + 4]
push ecx
call fcn.00412dc0
add esp, 0xc
mov dword [ebp], 0x154
push 0
lea edx, [ebp]
push edx
push 0
push 0x29
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov ecx, 0xf
lea esi, [ebp + 0x118]
lea edi, [ebp + 0x154]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x164], 0x2bc
push 0x20
push 0x2c
call fcn.00401020
add esp, 4
push eax
lea eax, [ebp + 0x170]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
lea ecx, [eax*4]
sub ecx, eax
neg ecx
add ecx, ecx
add ecx, ecx
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp + 0x154], ecx
lea edx, [ebp + 0x154]
push edx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [0x42f4e0], eax
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
test byte [0x4330bc], 4
je 0x40d217
test dword [0x4330b8], 0x2000
je 0x40d1b5
mov eax, dword [0x4417c0]
sub eax, 0
je 0x40d13e
sub eax, 2
je 0x40d137
sub eax, 1
je 0x40d130
mov esi, 0x80000001
jmp 0x40d143
mov esi, 0x80000003
jmp 0x40d143
mov esi, 0x80000002
jmp 0x40d143
mov esi, 0x80000000
push 0x104
push 0
lea eax, [ebp + 0x139c]
push eax
call fcn.00412dc0
push 0x104
lea ecx, [ebp + 0x139c]
push ecx
push 0x4418c8
push 0x4417c4
push esi
call fcn.0040d6c0
add esp, 0x20
test eax, eax
je 0x40d1cf
cmp byte [ebp + 0x139c], 0
je 0x40d1cf
lea edx, [ebp + 0x139c]
push edx
push 0x104
push 0x42fbf8
call fcn.00413690
push 0x42fbf8
call fcn.0040e9f0
push 0x42f630
mov eax, dword [0x42f174]
push eax
call fcn.00405080
add esp, 0x18
push 0
call fcn.0040bba0
mov dword [0x42f610], eax
push 0
call fcn.00409b20
add esp, 8
xor esi, esi
jmp 0x40d249
test dword [0x4330b8], 0x200000
je 0x40d1b5
cmp byte [0x42f608], 0
jne 0x40d1ff
push 0x10
push 0x42fbb6
push 0xb
call fcn.00401020
add esp, 4
push eax
mov ecx, dword [0x42f604]
push ecx
call edi
mov edx, dword [0x42f604]
push edx
call ebx
mov dword [0x42f604], 0
jmp 0x40c643
call fcn.00412bd0
mov dword [0x42f4dc], eax
push 0x42f630
xor esi, esi
push esi
call fcn.0040c110
add esp, 8
mov eax, dword [0x42f4dc]
cmp eax, esi
je 0x40d249
push eax
call fcn.00412b30
add esp, 4
mov dword [0x42f4dc], esi
mov eax, dword [0x42f604]
cmp eax, esi
je 0x40d25b
push eax
call ebx
mov dword [0x42f604], esi
cmp byte [0x42f614], 0
je 0x40d290
cmp byte [0x42f608], 0
jne 0x40d395
push 0x30
push 0x42fbb6
push 0x12
call fcn.00401020
add esp, 4
push eax
mov eax, dword [0x42f604]
push eax
call edi
jmp 0x40d395
call fcn.00402010
cmp eax, esi
je 0x40d30a
cmp eax, 0xb
je 0x40d395
mov byte [0x442288], 0
mov eax, dword [0x42f174]
add eax, 0x24
cmp byte [eax], 0
je 0x40d2d0
push eax
push 0x11
call fcn.00401020
add esp, 4
push eax
push 0x442288
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
call fcn.00402020
push eax
push 0x442288
call fcn.00407c00
add esp, 8
cmp byte [0x42f608], 0
jne 0x40d395
push 0x10
push 0x42fbb6
push 0x442288
mov ecx, dword [0x42f604]
push ecx
call edi
jmp 0x40d395
cmp dword [0x42f610], 1
jne 0x40d32a
call fcn.004052f0
cmp byte [0x430610], 0
je 0x40d32a
push esi
call fcn.00408b70
add esp, 4
movzx edx, byte [0x42f5fc]
push edx
mov eax, dword [0x42f610]
push eax
push esi
call fcn.00407240
add esp, 0xc
cmp byte [0x42f5fc], 0
je 0x40d383
cmp byte [0x42f608], 0
jne 0x40d383
cmp byte [0x42fa4e], 0
jne 0x40d383
push 0x134
push 0x42fbb6
push 0x25
call fcn.00401020
add esp, 4
push eax
mov ecx, dword [0x42f00c]
push ecx
call edi
cmp eax, 6
jne 0x40d383
mov byte [ebp - 0x15], 1
mov eax, dword [0x42f00c]
cmp eax, esi
je 0x40d395
push eax
call ebx
mov dword [0x42f00c], esi
mov eax, dword [0x42f4e0]
cmp eax, esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x40d3a7
push eax
call esi
mov eax, dword [0x441cfc]
test eax, eax
je 0x40d3b3
push eax
call esi
mov eax, dword [0x442014]
test eax, eax
je 0x40d3bf
push eax
call esi
call fcn.00406b80
test eax, eax
je 0x40d3f2
mov edx, dword [0x42f38c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x42f390
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
cmp byte [0x42f288], 0
je 0x40d3f2
push 0x42f288
call esi
mov eax, dword [0x42f174]
push eax
call fcn.00405c70
add esp, 4
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x15], 0
je 0x40c643
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov esi, eax
call edi
sub eax, esi
cmp eax, 0x3e8
ja 0x40d443
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
call edi
sub eax, esi
cmp eax, 0x3e8
jbe 0x40d430
call fcn.00410530
jmp 0x40c643