Function at 0x410c10
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a98
call fcn.00416a40
mov dword [esp + 0x1a80], 0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x1a74], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a04], 0
lea eax, [esp + 0x17fa]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x15f0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x13e6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x11dc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea edi, [esp + 0xfd2]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0xdc8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x9b4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x7aa]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x5a0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0x396]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004172b0
lea eax, [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004172b0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov word [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0xffffffff
call fcn.00410500
mov dword [esp + 0x1a88], eax
lea ebx, [esp + 0x1a40]
mov dword [esp + 0x50], 0x1b7dc05d
jmp 0x410f80
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410bf0
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1a84], eax
mov dword [esp + 0x50], 0x6e73033e
mov eax, dword [esp + 0x50]
cmp eax, 0x72334171
jg 0x410fa0
cmp eax, 0x898685d2
jg 0x410fb0
cmp eax, 0x86515300
jne 0x410f80
jmp 0x4121c3
cmp eax, 0x72334172
jne 0x410f80
jmp 0x410f5c
cmp eax, 0x91d1586d
jg 0x410fc3
cmp eax, 0x898685d3
jne 0x410f80
jmp 0x411f0b
cmp eax, 0x975d5352
jg 0x411045
cmp eax, 0x91d1586e
jne 0x410f80
lea eax, [esp + 0x396]
mov dword [esp + 8], eax
lea eax, [esp + 0x5a0]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13e6]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004040d0
mov dword [esp], esi
call fcn.00404920
mov dword [esp + 0x60], eax
mov dword [esp], 0
call fcn.00412710
mov dword [esp], eax
call fcn.00417442
mov dword [esp + 0x50], 0xdb28e584
jmp 0x410f80
cmp eax, 0x6e73033d
jg 0x41108c
cmp eax, 0x6bed8fef
jg 0x4110c0
cmp eax, 0x62dbed94
jg 0x411108
cmp eax, 0x5df24bfe
jg 0x411120
cmp eax, 0x98f6c142
jg 0x411138
cmp eax, 0x975d5353
jne 0x410f80
mov dword [esp + 0x50], 0x6bed8ff0
jmp 0x410f80
cmp eax, 0x6e73033e
jne 0x410f80
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410bf0
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1a84], eax
mov dword [esp + 0x50], 0xfbaa3e7f
jmp 0x410f80
cmp eax, 0x6bed8ff0
jne 0x410f80
lea eax, [esp + 0xbbe]
mov dword [esp + 4], eax
lea eax, [esp + 0x396]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xdb28e584
je 0x4110ff
mov eax, 0xab7f0951
mov dword [esp + 0x50], eax
jmp 0x410f80
cmp eax, 0x62dbed95
jne 0x410f80
mov dword [esp + 0x50], 0xbaed6660
jmp 0x410f80
cmp eax, 0x5df24bff
jne 0x410f80
mov dword [esp + 0x50], 0x30002746
jmp 0x410f80
cmp eax, 0xab7f0950
jg 0x411d26
cmp eax, 0x98f6c143
jne 0x410f80
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a3c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcbc]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a38]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcc0]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd0]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a30]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdca0]
mov ecx, dword [0x4cdce0]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a2c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdce4]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a28]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcf0]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a24]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a20]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a80]
lea esi, [esp + 0x1a1c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [esp + 0x1a80]
mov dword [esp], eax
call dword [0x4cde50]
sub esp, 4
call fcn.0041741f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea eax, [esp + 0xc4]
mov ebx, eax
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00417dd4
mov dword [esp], ebx
call fcn.00404920
mov dword [esp + 0x6c], eax
lea ecx, [eax + 1]
mov dword [esp + 0x6c], ecx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea esi, [esp + eax*2 + 0xc4]
call fcn.0041741f
and eax, 1
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00417dd4
mov dword [esp], ebx
call fcn.00404920
mov dword [esp + 0x6c], eax
lea ecx, [eax + 1]
mov dword [esp + 0x6c], ecx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea esi, [esp + eax*2 + 0xc4]
call fcn.0041741f
and eax, 5
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00417dd4
mov dword [esp], ebx
call fcn.00404920
mov dword [esp + 0x6c], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x6c], edx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea esi, [esp + eax*2 + 0xc4]
call fcn.0041741f
and eax, 0xc
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00417dd4
mov dword [esp], ebx
call fcn.00404920
mov dword [esp + 0x6c], eax
mov eax, dword [0x4cbe84]
movzx eax, byte [eax]
mov dword [esp + 0x68], eax
not eax
mov ecx, dword [0x4cbe84]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4cbe84]
mov edx, dword [esp + 0x68]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x8c]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402880
mov eax, dword [0x4cdcc8]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a18], eax
mov eax, dword [0x4cdcf8]
mov ecx, dword [0x4cdca8]
mov edx, dword [esp + 0x1a80]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4cde44]
sub esp, 0x10
mov eax, dword [0x4cdcc4]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a80]
lea edx, [esp + 0x11dc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdca4]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4cde3c]
sub esp, 0xc
mov eax, dword [0x4cdcf4]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdccc]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a14], eax
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a38]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a38]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a3c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
call fcn.0041741f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cbe88]
mov dword [esp + 0x1a04], eax
movzx eax, word [eax]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x1a04]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x1a04]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17fa]
mov esi, eax
mov dword [esp], esi
call fcn.00402c70
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x9b4]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004045c0
mov eax, dword [esp + 0x68]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9b4]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004045c0
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x7aa]
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004045c0
mov eax, dword [esp + 0x68]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7aa]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.004045c0
mov eax, dword [0x4cbe9c]
movzx eax, byte [eax]
mov dword [esp + 0x68], eax
not eax
mov ecx, dword [0x4cbe9c]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4cbe9c]
mov edx, dword [esp + 0x68]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x7c]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402880
mov eax, dword [0x4cdcd4]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb4]
mov ecx, dword [esp + 0x1a80]
lea edx, [esp + 0x7aa]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb0]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcec]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdcd8]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x421518
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [str._v_S_n]
movzx eax, word [eax]
mov dword [esp + 0x68], eax
mov ecx, dword [str._v_S_n]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x64], eax
mov ecx, dword [str._v_S_n]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x9c]
mov esi, eax
mov dword [esp], esi
call fcn.00402c70
mov eax, dword [0x4cdcdc]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb8]
mov ecx, dword [esp + 0x1a80]
lea edx, [esp + 0xbbe]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a3c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a80]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a80]
mov dword [esp], eax
call dword [0x4cde58]
sub esp, 4
mov dword [esp + 0x1a40], 0x3c
mov dword [esp + 0x1a44], 0x40
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a4c], 0x42151c
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a60], 0
lea eax, [esp + 0x18c]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x421526
mov dword [esp + 4], 0x104
call fcn.004045c0
mov dword [esp], edi
call fcn.00404920
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x192]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.004045c0
mov eax, dword [0x4cbea4]
movzx eax, word [eax]
mov dword [esp + 0x68], eax
mov ecx, dword [0x4cbea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4cbea4]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
lea esi, [esp + 0x15f0]
mov ebx, esi
lea esi, [esp + 0x1a40]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.00402c70
mov dword [esp + 0x1a50], ebx
lea eax, [esp + 0x18c]
mov dword [esp + 0x1a54], eax
mov dword [esp + 0x1a5c], 0
mov dword [esp], esi
mov ebx, esi
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
mov eax, 0x45d136b7
jne 0x411d1d
mov eax, 0xf58de1ea
mov dword [esp + 0x50], eax
jmp 0x410f80
cmp eax, 0x58d68448
jg 0x411dc2
cmp eax, 0x57751743
jg 0x411e92
cmp eax, 0x556c07a9
jg 0x411ec0
cmp eax, 0x53525ae8
jg 0x411ed8
cmp eax, 0x4e7395f6
jg 0x411ef0
cmp eax, 0x45d136b6
jg 0x411f00
cmp eax, 0x43939de8
jg 0x411f3a
cmp eax, 0x3c274d55
jg 0x411f52
cmp eax, 0x3670bf24
jg 0x411f6a
cmp eax, 0x30002745
jg 0x411f92
cmp eax, 0x2c4b3d1b
jg 0x411faa
cmp eax, 0xac5ba7a4
jg 0x411fba
cmp eax, 0xab7f0951
jne 0x410f80
mov dword [esp + 0x50], 0x10116c5
jmp 0x410f80
cmp eax, 0x58d68449
jne 0x410f80
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x18c]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.004045c0
mov dword [esp], edi
call fcn.00404920
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.004045c0
lea eax, [esp + 0x15f0]
mov dword [esp + 0x1a50], eax
mov dword [esp + 0x1a54], esi
lea esi, [esp + 0x1a40]
mov dword [esp + 0x1a5c], 0
mov dword [esp], esi
mov ebx, esi
call dword [0x4cde68]
sub esp, 4
mov dword [esp + 0x50], 0x201ba6a7
jmp 0x410f80
cmp eax, 0x57751744
jne 0x410f80
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.0040f470
test eax, eax
mov eax, 0xfc5ca03c
jne 0x411eb7
mov eax, 0x62dbed95
mov dword [esp + 0x50], eax
jmp 0x410f80
cmp eax, 0x556c07aa
jne 0x410f80
mov dword [esp + 0x50], 0xf40d4866
jmp 0x410f80
cmp eax, 0x53525ae9
jne 0x410f80
mov dword [esp + 0x50], 0x5df24bff
jmp 0x410f80
cmp eax, 0x4e7395f7
jne 0x410f80
jmp 0x4121c3
cmp eax, 0x45d136b7
jne 0x410f80
lea eax, [esp + 0xbbe]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x396]
mov dword [esp], eax
call fcn.0040f1d0
mov dword [esp + 0x50], 0x30002746
jmp 0x410f80
cmp eax, 0x43939de9
jne 0x410f80
mov dword [esp + 0x50], 0x53525ae9
jmp 0x410f80
cmp eax, 0x3c274d56
jne 0x410f80
mov dword [esp + 0x50], 0x201ba6a7
jmp 0x410f80
cmp eax, 0x3670bf25
jne 0x410f80
mov eax, 0x10116c5
cmp dword [esp + 0x1a80], 0
je 0x411f89
mov eax, 0x98f6c143
mov dword [esp + 0x50], eax
jmp 0x410f80
cmp eax, 0x30002746
jne 0x410f80
mov dword [esp + 0x50], 0x6e73033e
jmp 0x410f80
cmp eax, 0x2c4b3d1c
jne 0x410f80
jmp 0x4126f3
cmp eax, 0x20b08a8e
jg 0x4120a0
cmp eax, 0x201ba6a6
jg 0x4120b8
cmp eax, 0x1b7dc05c
jg 0x41218a
mov esi, ebx
cmp eax, 0x14a8c8fb
jg 0x4121b6
cmp eax, 0x10116c4
jg 0x4121db
cmp eax, 0xfc5ca03b
jg 0x4122aa
cmp eax, 0xfbaa3e7e
jg 0x4122cf
cmp eax, 0xf58de1e9
jg 0x4122e9
cmp eax, 0xf40d4865
jg 0x412385
cmp eax, 0xdb28e583
jg 0x4123ad
cmp eax, 0xcd9c9ce4
jg 0x4123c7
cmp eax, 0xc93c7ff9
jg 0x4123e1
cmp eax, 0xc869380a
jg 0x412446
cmp eax, 0xbaed665f
jg 0x412460
cmp eax, 0xb8d0c664
jg 0x412489
cmp eax, 0xb59a37d3
jg 0x41258a
cmp eax, 0xac5ba7a5
je 0x4125b7
cmp eax, 0xac981aad
jne 0x4125f1
mov al, byte [esp + 0x1a8e]
test al, al
mov eax, 0x86515300
jne 0x41237a
mov eax, 0xac5ba7a5
jmp 0x41237a
cmp eax, 0x20b08a8f
jne 0x410f80
mov dword [esp + 0x50], 0x53525ae9
jmp 0x410f80
cmp eax, 0x201ba6a7
jne 0x410f80
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x18c]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.004045c0
mov dword [esp], edi
call fcn.00404920
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea eax, [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.004045c0
lea eax, [esp + 0x15f0]
mov dword [esp + 0x1a50], eax
mov dword [esp + 0x1a54], esi
mov dword [esp + 0x1a5c], 0
mov dword [esp], ebx
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a8f]
mov dword [esp + 0x50], 0xb59a37d4
jmp 0x410f80
cmp eax, 0x1b7dc05d
jne 0x410f80
mov ecx, ebx
mov eax, 0x4e7395f7
cmp dword [esp + 0x1a88], 0
js 0x4121ab
mov eax, 0x57751744
mov dword [esp + 0x50], eax
mov ebx, ecx
jmp 0x410f80
cmp eax, 0x14a8c8fc
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x1a84], 0xffffffff
mov dword [esp + 0x50], 0xc869380b
jmp 0x410f80
cmp eax, 0x10116c5
mov ebx, esi
jne 0x410f80
lea eax, [esp + 0x11dc]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404da0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13e6]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004045c0
mov dword [esp], esi
call fcn.00404920
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfd2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004045c0
mov dword [esp], edi
mov dword [esp + 4], 0
call dword [0x4cde60]
sub esp, 8
mov dword [esp + 0x1a80], eax
mov dword [esp + 0x50], 0x3670bf25
jmp 0x410f80
cmp eax, 0xfc5ca03c
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x1a84], 0
mov dword [esp + 0x50], 0xc869380b
jmp 0x410f80
cmp eax, 0xfbaa3e7f
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x50], 0xc869380b
jmp 0x410f80
cmp eax, 0xf58de1ea
mov ebx, esi
jne 0x410f80
mov esi, ebx
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cde64]
sub esp, 0x10
lea eax, [esp + 0x9b4]
mov dword [esp + 0x1a50], eax
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a5c], 1
mov dword [esp], esi
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
mov eax, 0x898685d3
jne 0x41237a
mov eax, 0x3c274d56
mov dword [esp + 0x50], eax
mov ebx, esi
jmp 0x410f80
cmp eax, 0xf40d4866
mov ebx, esi
jne 0x410f80
mov eax, dword [esp + 0x1a84]
mov dword [esp + 0x1a90], eax
mov dword [esp + 0x50], 0x2c4b3d1c
jmp 0x410f80
cmp eax, 0xdb28e584
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x50], 0xaf7be7b5
jmp 0x410f80
cmp eax, 0xcd9c9ce5
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x50], 0xbaed6660
jmp 0x410f80
cmp eax, 0xc93c7ffa
mov ebx, esi
jne 0x410f80
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cde64]
sub esp, 0x10
mov dword [esp + 0x58], 1
mov dword [esp + 0x50], 0x30002746
jmp 0x410f80
cmp eax, 0xc869380b
mov ebx, esi
jne 0x410f80
mov dword [esp + 0x50], 0xf40d4866
jmp 0x410f80
cmp eax, 0xbaed6660
mov ebx, esi
jne 0x410f80
cmp dword [esp + 0x5c], 6
setb al
mov byte [esp + 0x1a8e], al
mov dword [esp + 0x50], 0xac981aad
jmp 0x410f80
cmp eax, 0xb8d0c665
mov ebx, esi
jne 0x410f80
lea eax, [esp + 0xdc8]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404da0
mov dword [esp], esi
call fcn.00404920
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13e6]
mov dword [esp + 8], eax
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004045c0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbbe]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004045c0
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x54]
sub ecx, edx
lea eax, [esp + eax*2 + 0xbbe]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004045c0
mov dword [esp + 0x50], 0xaf7be7b5
jmp 0x410f80
cmp eax, 0xb59a37d4
mov ebx, esi
jne 0x410f80
mov ecx, ebx
mov al, byte [esp + 0x1a8f]
test al, al
mov eax, 0x43939de9
jne 0x4121ab
mov eax, 0xc93c7ffa
jmp 0x4121ab
lea eax, [esp + 0x5a0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0x91d1586e
jne 0x41237a
mov eax, 0x14a8c8fc
jmp 0x41237a
cmp eax, 0xaf7be7b5
mov ebx, esi
jne 0x410f80
lea eax, [esp + 0xdc8]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c80
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404da0
mov dword [esp], esi
call fcn.00404920
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13e6]
mov dword [esp + 8], eax
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004045c0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbbe]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004045c0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x54]
lea edx, [esp + eax*2 + 0xbbe]
lea edx, [edx + ecx*2]
neg ecx
sub ecx, eax
add ecx, 0x104
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004045c0
mov dword [esp + 0x50], 0x975d5353
jmp 0x410f80
mov eax, dword [esp + 0x1a90]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret