Function at 0x41f2a0
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x850
mov esi, esp
mov dword [esi + 0x788], 0x4fb17fa0
mov eax, dword [esi + 0x788]
mov ecx, eax
sub ecx, 0x860f68c9
mov dword [esi + 0x784], eax
mov dword [esi + 0x780], ecx
jg 0x41f2ff
jmp 0x41f2e3
mov eax, dword [esi + 0x784]
sub eax, 0x816902dd
mov dword [esi + 0x77c], eax
je 0x4248a6
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7e0a956e
mov dword [esi + 0x778], eax
jg 0x42032f
jmp 0x41f31b
mov eax, dword [esi + 0x784]
sub eax, 0x870027bb
mov dword [esi + 0x774], eax
jg 0x41f353
jmp 0x41f337
mov eax, dword [esi + 0x784]
sub eax, 0x860f68ca
mov dword [esi + 0x770], eax
je 0x42232e
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x8a1442be
mov dword [esi + 0x76c], eax
jg 0x41f38b
jmp 0x41f36f
mov eax, dword [esi + 0x784]
sub eax, 0x870027bc
mov dword [esi + 0x768], eax
je 0x422ae1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x8d073265
mov dword [esi + 0x764], eax
jg 0x41f3c3
jmp 0x41f3a7
mov eax, dword [esi + 0x784]
sub eax, 0x8a1442bf
mov dword [esi + 0x760], eax
je 0x4234b5
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x907ac75b
mov dword [esi + 0x75c], eax
jg 0x41f3fb
jmp 0x41f3df
mov eax, dword [esi + 0x784]
sub eax, 0x8d073266
mov dword [esi + 0x758], eax
je 0x4229d5
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x92a37aaf
mov dword [esi + 0x754], eax
jg 0x41f433
jmp 0x41f417
mov eax, dword [esi + 0x784]
sub eax, 0x907ac75c
mov dword [esi + 0x750], eax
je 0x4232a4
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x9722f569
mov dword [esi + 0x74c], eax
jg 0x41f46b
jmp 0x41f44f
mov eax, dword [esi + 0x784]
sub eax, 0x92a37ab0
mov dword [esi + 0x748], eax
je 0x4244ca
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7cd969ae
mov dword [esi + 0x744], eax
jg 0x420313
jmp 0x41f487
mov eax, dword [esi + 0x784]
sub eax, 0x7c513770
mov dword [esi + 0x740], eax
jg 0x4202f7
jmp 0x41f4a3
mov eax, dword [esi + 0x784]
sub eax, 0x7a164f07
mov dword [esi + 0x73c], eax
jg 0x4202db
jmp 0x41f4bf
mov eax, dword [esi + 0x784]
sub eax, 0x73756c8d
mov dword [esi + 0x738], eax
jg 0x4202bf
jmp 0x41f4db
mov eax, dword [esi + 0x784]
sub eax, 0x71595d90
mov dword [esi + 0x734], eax
jg 0x4202a3
jmp 0x41f4f7
mov eax, dword [esi + 0x784]
sub eax, 0x6ceb0d57
mov dword [esi + 0x730], eax
jg 0x420287
jmp 0x41f513
mov eax, dword [esi + 0x784]
sub eax, 0x676b6fcc
mov dword [esi + 0x72c], eax
jg 0x42026b
jmp 0x41f52f
mov eax, dword [esi + 0x784]
sub eax, 0x97982a08
mov dword [esi + 0x728], eax
jg 0x41f567
jmp 0x41f54b
mov eax, dword [esi + 0x784]
sub eax, 0x9722f56a
mov dword [esi + 0x724], eax
je 0x422a44
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x999f1bfb
mov dword [esi + 0x720], eax
jg 0x41f59f
jmp 0x41f583
mov eax, dword [esi + 0x784]
sub eax, 0x97982a09
mov dword [esi + 0x71c], eax
je 0x421197
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xa0a89e64
mov dword [esi + 0x718], eax
jg 0x41f5d7
jmp 0x41f5bb
mov eax, dword [esi + 0x784]
sub eax, 0x999f1bfc
mov dword [esi + 0x714], eax
je 0x420c2c
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xa56bd9a4
mov dword [esi + 0x710], eax
jg 0x41f60f
jmp 0x41f5f3
mov eax, dword [esi + 0x784]
sub eax, 0xa0a89e65
mov dword [esi + 0x70c], eax
je 0x422566
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x5d5f8f3b
mov dword [esi + 0x708], eax
jg 0x42024f
jmp 0x41f62b
mov eax, dword [esi + 0x784]
sub eax, 0x5ced221e
mov dword [esi + 0x704], eax
jg 0x420233
jmp 0x41f647
mov eax, dword [esi + 0x784]
sub eax, 0x5b357efd
mov dword [esi + 0x700], eax
jg 0x420217
jmp 0x41f663
mov eax, dword [esi + 0x784]
sub eax, 0x5a01d07b
mov dword [esi + 0x6fc], eax
jg 0x4201fb
jmp 0x41f67f
mov eax, dword [esi + 0x784]
sub eax, 0x4fb17f9f
mov dword [esi + 0x6f8], eax
jg 0x4201df
jmp 0x41f69b
mov eax, dword [esi + 0x784]
sub eax, 0x4af3fd43
mov dword [esi + 0x6f4], eax
jg 0x4201c3
jmp 0x41f6b7
mov eax, dword [esi + 0x784]
sub eax, 0x49cb01b8
mov dword [esi + 0x6f0], eax
jg 0x4201a7
jmp 0x41f6d3
mov eax, dword [esi + 0x784]
sub eax, 0x4362e04a
mov dword [esi + 0x6ec], eax
jg 0x42018b
jmp 0x41f6ef
mov eax, dword [esi + 0x784]
sub eax, 0x3ca9fb22
mov dword [esi + 0x6e8], eax
jg 0x42016f
jmp 0x41f70b
mov eax, dword [esi + 0x784]
sub eax, 0x3af60a7d
mov dword [esi + 0x6e4], eax
jg 0x420153
jmp 0x41f727
mov eax, dword [esi + 0x784]
sub eax, 0x33fd1091
mov dword [esi + 0x6e0], eax
jg 0x420137
jmp 0x41f743
mov eax, dword [esi + 0x784]
sub eax, 0xa5ca28a0
mov dword [esi + 0x6dc], eax
jg 0x41f77b
jmp 0x41f75f
mov eax, dword [esi + 0x784]
sub eax, 0xa56bd9a5
mov dword [esi + 0x6d8], eax
je 0x4211cf
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x3111ab8a
mov dword [esi + 0x6d4], eax
jg 0x42011b
jmp 0x41f797
mov eax, dword [esi + 0x784]
sub eax, 0x30ba6d70
mov dword [esi + 0x6d0], eax
jg 0x4200ff
jmp 0x41f7b3
mov eax, dword [esi + 0x784]
sub eax, 0x30732bdc
mov dword [esi + 0x6cc], eax
jg 0x4200e3
jmp 0x41f7cf
mov eax, dword [esi + 0x784]
sub eax, 0x2ec8916a
mov dword [esi + 0x6c8], eax
jg 0x4200c7
jmp 0x41f7eb
mov eax, dword [esi + 0x784]
sub eax, 0x2d8fbe81
mov dword [esi + 0x6c4], eax
jg 0x4200ab
jmp 0x41f807
mov eax, dword [esi + 0x784]
sub eax, 0x2923a0c3
mov dword [esi + 0x6c0], eax
jg 0x42008f
jmp 0x41f823
mov eax, dword [esi + 0x784]
sub eax, 0x26ac6197
mov dword [esi + 0x6bc], eax
jg 0x420073
jmp 0x41f83f
mov eax, dword [esi + 0x784]
sub eax, 0x25a6a974
mov dword [esi + 0x6b8], eax
jg 0x420057
jmp 0x41f85b
mov eax, dword [esi + 0x784]
sub eax, 0x23b12b11
mov dword [esi + 0x6b4], eax
jg 0x42003b
jmp 0x41f877
mov eax, dword [esi + 0x784]
sub eax, 0x1b7d03eb
mov dword [esi + 0x6b0], eax
jg 0x42001f
jmp 0x41f893
mov eax, dword [esi + 0x784]
sub eax, 0xf63171e
mov dword [esi + 0x6ac], eax
jg 0x420003
jmp 0x41f8af
mov eax, dword [esi + 0x784]
sub eax, 0xefa264d
mov dword [esi + 0x6a8], eax
jg 0x41ffe7
jmp 0x41f8cb
mov eax, dword [esi + 0x784]
sub eax, 0x6789a4b
mov dword [esi + 0x6a4], eax
jg 0x41ffcb
jmp 0x41f8e7
mov eax, dword [esi + 0x784]
sub eax, 0x61c4c32
mov dword [esi + 0x6a0], eax
jg 0x41ffaf
jmp 0x41f903
mov eax, dword [esi + 0x784]
sub eax, 0xff7738e0
mov dword [esi + 0x69c], eax
jg 0x41ff93
jmp 0x41f91f
mov eax, dword [esi + 0x784]
sub eax, 0xfec73d3e
mov dword [esi + 0x698], eax
jg 0x41ff77
jmp 0x41f93b
mov eax, dword [esi + 0x784]
sub eax, 0xfc516a8a
mov dword [esi + 0x694], eax
jg 0x41ff5b
jmp 0x41f957
mov eax, dword [esi + 0x784]
sub eax, 0xf6c6884e
mov dword [esi + 0x690], eax
jg 0x41ff3f
jmp 0x41f973
mov eax, dword [esi + 0x784]
sub eax, 0xf6a208e4
mov dword [esi + 0x68c], eax
jg 0x41ff23
jmp 0x41f98f
mov eax, dword [esi + 0x784]
sub eax, 0xf333c2f1
mov dword [esi + 0x688], eax
jg 0x41ff07
jmp 0x41f9ab
mov eax, dword [esi + 0x784]
sub eax, 0xf14d2858
mov dword [esi + 0x684], eax
jg 0x41feeb
jmp 0x41f9c7
mov eax, dword [esi + 0x784]
sub eax, 0xecda1c3f
mov dword [esi + 0x680], eax
jg 0x41fecf
jmp 0x41f9e3
mov eax, dword [esi + 0x784]
sub eax, 0xeba517aa
mov dword [esi + 0x67c], eax
jg 0x41feb3
jmp 0x41f9ff
mov eax, dword [esi + 0x784]
sub eax, 0xe830f4eb
mov dword [esi + 0x678], eax
jg 0x41fe97
jmp 0x41fa1b
mov eax, dword [esi + 0x784]
sub eax, 0xe6f03461
mov dword [esi + 0x674], eax
jg 0x41fe7b
jmp 0x41fa37
mov eax, dword [esi + 0x784]
sub eax, 0xe2096e6a
mov dword [esi + 0x670], eax
jg 0x41fe5f
jmp 0x41fa53
mov eax, dword [esi + 0x784]
sub eax, 0xe0329341
mov dword [esi + 0x66c], eax
jg 0x41fe43
jmp 0x41fa6f
mov eax, dword [esi + 0x784]
sub eax, 0xdeec7509
mov dword [esi + 0x668], eax
jg 0x41fe27
jmp 0x41fa8b
mov eax, dword [esi + 0x784]
sub eax, 0xdaba9158
mov dword [esi + 0x664], eax
jg 0x41fe0b
jmp 0x41faa7
mov eax, dword [esi + 0x784]
sub eax, 0xd99d09d9
mov dword [esi + 0x660], eax
jg 0x41fdef
jmp 0x41fac3
mov eax, dword [esi + 0x784]
sub eax, 0xd5547a69
mov dword [esi + 0x65c], eax
jg 0x41fdd3
jmp 0x41fadf
mov eax, dword [esi + 0x784]
sub eax, 0xcea87a35
mov dword [esi + 0x658], eax
jg 0x41fdb7
jmp 0x41fafb
mov eax, dword [esi + 0x784]
sub eax, 0xc91ab501
mov dword [esi + 0x654], eax
jg 0x41fd9b
jmp 0x41fb17
mov eax, dword [esi + 0x784]
sub eax, 0xc5ac458f
mov dword [esi + 0x650], eax
jg 0x41fd7f
jmp 0x41fb33
mov eax, dword [esi + 0x784]
sub eax, 0xc566a318
mov dword [esi + 0x64c], eax
jg 0x41fd63
jmp 0x41fb4f
mov eax, dword [esi + 0x784]
sub eax, 0xc24cb8c0
mov dword [esi + 0x648], eax
jg 0x41fd47
jmp 0x41fb6b
mov eax, dword [esi + 0x784]
sub eax, 0xc1156d52
mov dword [esi + 0x644], eax
jg 0x41fd2b
jmp 0x41fb87
mov eax, dword [esi + 0x784]
sub eax, 0xbe7db2f8
mov dword [esi + 0x640], eax
jg 0x41fd0f
jmp 0x41fba3
mov eax, dword [esi + 0x784]
sub eax, 0xbdb836ca
mov dword [esi + 0x63c], eax
jg 0x41fcf3
jmp 0x41fbbf
mov eax, dword [esi + 0x784]
sub eax, 0xbcef7831
mov dword [esi + 0x638], eax
jg 0x41fcd7
mov eax, dword [esi + 0x784]
sub eax, 0xbdb836cb
mov dword [esi + 0x60c], eax
je 0x420cd6
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xbe7db2f9
mov dword [esi + 0x608], eax
je 0x420ff2
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xc1156d53
mov dword [esi + 0x604], eax
je 0x42277b
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xc24cb8c1
mov dword [esi + 0x600], eax
je 0x420a31
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xc566a319
mov dword [esi + 0x5fc], eax
je 0x420c3c
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xc5ac4590
mov dword [esi + 0x5f8], eax
je 0x42478d
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xc91ab502
mov dword [esi + 0x5f4], eax
je 0x422237
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xcea87a36
mov dword [esi + 0x5f0], eax
je 0x42266c
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xd5547a6a
mov dword [esi + 0x5ec], eax
je 0x420a6d
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xd99d09da
mov dword [esi + 0x5e8], eax
je 0x422216
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xdaba9159
mov dword [esi + 0x5e4], eax
je 0x42231e
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xdeec750a
mov dword [esi + 0x5e0], eax
je 0x420fa2
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xe0329342
mov dword [esi + 0x5dc], eax
je 0x4227e9
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xe2096e6b
mov dword [esi + 0x5d8], eax
je 0x4232fa
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xe6f03462
mov dword [esi + 0x5d4], eax
je 0x420acd
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xe830f4ec
mov dword [esi + 0x5d0], eax
je 0x420a52
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xeba517ab
mov dword [esi + 0x5cc], eax
je 0x420c77
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xecda1c40
mov dword [esi + 0x5c8], eax
je 0x422274
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xf14d2859
mov dword [esi + 0x5c4], eax
je 0x420c1d
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xf333c2f2
mov dword [esi + 0x5c0], eax
je 0x422545
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xf6a208e5
mov dword [esi + 0x5bc], eax
je 0x422959
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xf6c6884f
mov dword [esi + 0x5b8], eax
je 0x420360
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xfc516a8b
mov dword [esi + 0x5b4], eax
je 0x420bf1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xfec73d3f
mov dword [esi + 0x5b0], eax
je 0x42265c
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xff7738e1
mov dword [esi + 0x5ac], eax
je 0x420cf1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x61c4c33
mov dword [esi + 0x5a8], eax
je 0x422ad1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x6789a4c
mov dword [esi + 0x5a4], eax
je 0x42271d
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xefa264e
mov dword [esi + 0x5a0], eax
je 0x420ca3
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0xf63171f
mov dword [esi + 0x59c], eax
je 0x420b9c
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x1b7d03ec
mov dword [esi + 0x598], eax
je 0x420add
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x23b12b12
mov dword [esi + 0x594], eax
je 0x42261f
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x25a6a975
mov dword [esi + 0x590], eax
je 0x4231ec
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x26ac6198
mov dword [esi + 0x58c], eax
je 0x420dab
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x2923a0c4
mov dword [esi + 0x588], eax
je 0x4232cf
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x2d8fbe82
mov dword [esi + 0x584], eax
je 0x422576
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x2ec8916b
mov dword [esi + 0x580], eax
je 0x4225c3
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x30732bdd
mov dword [esi + 0x57c], eax
je 0x420cb2
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x30ba6d71
mov dword [esi + 0x578], eax
je 0x421188
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x3111ab8b
mov dword [esi + 0x574], eax
je 0x420fe3
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x33fd1092
mov dword [esi + 0x570], eax
je 0x422968
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x3af60a7e
mov dword [esi + 0x56c], eax
je 0x4227da
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x3ca9fb23
mov dword [esi + 0x568], eax
je 0x422a93
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x4362e04b
mov dword [esi + 0x564], eax
je 0x422a68
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x49cb01b9
mov dword [esi + 0x560], eax
je 0x4227f9
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x4af3fd44
mov dword [esi + 0x55c], eax
je 0x4222e1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x4fb17fa0
mov dword [esi + 0x558], eax
je 0x420350
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x5a01d07c
mov dword [esi + 0x554], eax
je 0x422938
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x5b357efe
mov dword [esi + 0x550], eax
je 0x4222bd
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x5ced221f
mov dword [esi + 0x54c], eax
je 0x421002
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x5d5f8f3c
mov dword [esi + 0x548], eax
je 0x420c87
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x676b6fcd
mov dword [esi + 0x544], eax
je 0x422a35
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x6ceb0d58
mov dword [esi + 0x540], eax
je 0x4246f1
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x71595d91
mov dword [esi + 0x53c], eax
je 0x4211f0
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x73756c8e
mov dword [esi + 0x538], eax
je 0x4211a7
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7a164f08
mov dword [esi + 0x534], eax
je 0x4225b4
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7c513771
mov dword [esi + 0x530], eax
je 0x4229f9
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7cd969af
mov dword [esi + 0x52c], eax
je 0x422a09
jmp 0x42034b
mov eax, dword [esi + 0x784]
sub eax, 0x7e0a956f
mov dword [esi + 0x528], eax
je 0x42273e
jmp 0x42034b
jmp 0x4248c9
mov eax, 0xf6c6884f
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0xa
mov edx, 0x10
mov edi, 0x28
mov ebx, 0xc8
mov dword [esi + 0x524], eax
mov eax, 0x20a
mov dword [esi + 0x520], eax
mov eax, 0x3c
mov dword [esi + 0x51c], eax
mov eax, 4
mov dword [esi + 0x518], eax
mov dword [esi + 0x514], ebx
mov dword [esi + 0x510], ecx
mov dword [esi + 0x50c], edx
mov dword [esi + 0x508], edi
call fcn.00440020
mov eax, esp
mov dword [esi + 0x78c], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x790], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x794], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x798], eax
mov eax, 0x3c
call fcn.00440020
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x79c], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7a0], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7a4], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7a8], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7ac], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7b0], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7b4], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7b8], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7bc], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7c0], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7c4], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7c8], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7cc], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7d0], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7d4], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7d8], eax
mov eax, 0x20c
mov dword [esi + 0x504], eax
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7dc], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7e0], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7e4], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7e8], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7ec], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7f0], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7f4], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7f8], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x7fc], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x800], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x804], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x808], eax
mov eax, dword [esi + 0x504]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x80c], eax
mov eax, 0xc8
call fcn.00440020
mov eax, esp
mov dword [esi + 0x810], eax
mov eax, 0x28
call fcn.00440020
mov eax, esp
mov dword [esi + 0x814], eax
mov eax, 0x10
mov dword [esi + 0x500], eax
call fcn.00440020
mov eax, esp
mov dword [esi + 0x818], eax
mov eax, dword [esi + 0x500]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x81c], eax
mov eax, 0xc
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x518]
mov dword [esi + 0x4fc], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov dword [esi + 0x820], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x824], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x828], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x82c], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x830], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x834], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x838], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x83c], eax
mov eax, dword [esi + 0x518]
call fcn.00440020
mov eax, esp
mov dword [esi + 0x840], eax
mov eax, dword [esi + 0x790]
mov dword [eax], 0
mov eax, dword [esi + 0x794]
mov dword [eax], 0
mov eax, dword [esi + 0x798]
mov dword [eax], 0
mov eax, dword [esi + 0x79c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7d8]
mov dword [eax], 0
mov eax, dword [esi + 0x7dc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7e0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7e4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7e8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7ec]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7f0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7f4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7f8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x7fc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x800]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x804]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x80c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x810]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x814]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x818]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x81c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x4fc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x838]
mov dword [eax], 0
mov eax, dword [esi + 0x83c]
mov dword [eax], 0xffffffff
call fcn.0041ea40
mov ecx, 0xc24cb8c1
cmp eax, 0
setl al
and al, 1
mov byte [esi + 0x845], al
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0xd5547a6a
mov ecx, 0xe830f4ec
mov dl, byte [esi + 0x845]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x78c]
mov dword [eax], 0xffffffff
mov dword [esi + 0x788], 0x61c4c33
jmp 0x4248c9
mov eax, 0x104
mov ecx, dword [esi + 0x800]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esi + 0x4f8], eax
call fcn.00408220
add esp, 8
mov ecx, dword [esi + 0x820]
mov dword [ecx], eax
mov eax, dword [esi + 0x838]
sub esp, 4
mov dword [esp], eax
call fcn.0041ce20
add esp, 4
mov ecx, 0x30732bdd
mov edx, 0xe6f03462
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0x1b7d03ec
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0x104
mov ecx, dword [esi + 0x820]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x800]
mov edi, dword [esi + 0x7f0]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x4f4], eax
call fcn.00408b70
add esp, 0x10
mov ecx, 0
mov edx, dword [esi + 0x834]
mov dword [edx], eax
mov eax, dword [esi + 0x834]
mov eax, dword [eax]
sub ecx, 4
add eax, ecx
mov ecx, dword [esi + 0x7f0]
mov word [ecx + eax*2], 0
mov eax, dword [esi + 0x7f0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, 0xf63171f
mov edx, dword [esi + 0x794]
mov dword [edx], eax
mov eax, dword [esi + 0x794]
cmp dword [eax], 0
setne bl
and bl, 1
mov byte [esi + 0x846], bl
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0xeba517ab
mov ecx, 0xafe4c881
mov dl, byte [esi + 0x846]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
mov ecx, 0xf14d2859
mov dword [esi + 0x788], ecx
mov dword [esi + 0x4f0], eax
jmp 0x4248c9
mov dword [esi + 0x788], 0x999f1bfc
jmp 0x4248c9
mov eax, 0xc566a319
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov ecx, 0xae9f2155
mov dword [esi + 0x788], ecx
mov dword [esi + 0x4ec], eax
jmp 0x4248c9
mov eax, 0x5d5f8f3c
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0xefa264e
mov ecx, dword [esi + 0x78c]
mov dword [ecx], 0
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov dword [esi + 0x788], 0x61c4c33
jmp 0x4248c9
mov eax, 0xff7738e1
mov ecx, 0xbdb836cb
mov edx, dword [esi + 0x838]
cmp dword [edx], 6
cmovb eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x78c]
mov dword [eax], 0xffffffff
mov dword [esi + 0x788], 0x61c4c33
jmp 0x4248c9
mov eax, dword [esi + 0x804]
mov ecx, dword [esi + 0x800]
sub esp, 0x10
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
mov ecx, dword [esi + 0x7e4]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0x104
mov dword [esi + 0x4e8], eax
call fcn.0040a2b0
add esp, 8
mov ecx, dword [esi + 0x7e4]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x4e4], eax
call fcn.00409030
add esp, 4
mov ecx, dword [esi + 0x82c]
mov dword [ecx], eax
sub esp, 4
mov eax, esp
mov dword [eax], 0
call fcn.004248d0
add esp, 4
mov dword [esi + 0x4e0], edx
mov dword [esi + 0x4dc], eax
call fcn.00405e30
mov ecx, dword [esi + 0x4dc]
imul ecx, eax
sub esp, 4
mov dword [esp], ecx
call fcn.00440996
add esp, 4
mov dword [esi + 0x788], 0x26ac6198
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x7f0]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4d8], eax
mov dword [esi + 0x4d4], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0
mov edx, 0x20a
mov edi, dword [esi + 0x7f4]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4d0], eax
mov dword [esi + 0x4cc], ecx
mov dword [esi + 0x4c8], edx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
mov edx, dword [esi + 0x7f0]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esi + 0x4c4], eax
mov dword [esi + 0x4c0], ecx
call fcn.0040b550
add esp, 8
mov eax, dword [esi + 0x7f0]
sub esp, 4
mov dword [esp], eax
call fcn.00409030
add esp, 4
mov ecx, 0x104
mov edx, dword [esi + 0x840]
mov dword [edx], eax
mov eax, dword [esi + 0x82c]
mov eax, dword [eax]
mov edx, dword [esi + 0x7e4]
mov edi, dword [esi + 0x7f4]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x4bc], ecx
call fcn.00408570
add esp, 0x10
mov ecx, 0x104
mov edx, dword [esi + 0x840]
mov edx, dword [edx]
mov edi, dword [esi + 0x7f0]
mov ebx, dword [esi + 0x82c]
mov ebx, dword [ebx]
sub ecx, 0x54a153b1
sub ecx, ebx
add ecx, 0x54a153b1
mov ebx, dword [esi + 0x7f4]
mov dword [esi + 0x4b8], eax
mov eax, dword [esi + 0x82c]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
call fcn.00408570
add esp, 0x10
lea ecx, str..exe
mov edx, 4
mov edi, 0x104
mov ebx, dword [esi + 0x82c]
mov ebx, dword [ebx]
sub edi, 0x37901fa8
sub edi, ebx
add edi, 0x37901fa8
mov ebx, dword [esi + 0x840]
mov ebx, dword [ebx]
sub edi, 0x6426446a
sub edi, ebx
add edi, 0x6426446a
mov ebx, dword [esi + 0x7f4]
mov dword [esi + 0x4b4], eax
mov eax, dword [esi + 0x82c]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
mov eax, dword [esi + 0x840]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esi + 0x4b0], edx
call fcn.00408570
add esp, 0x10
mov dword [esi + 0x788], 0xdeec750a
mov dword [esi + 0x4ac], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
mov ecx, dword [esi + 0x804]
sub esp, 0xc
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
mov ecx, 0x3111ab8b
mov edx, 0x26ac6198
cmp eax, 0
cmove ecx, edx
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov dword [esi + 0x788], 0xbe7db2f9
jmp 0x4248c9
mov eax, 0x5ced221f
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x7e8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4a8], eax
mov dword [esi + 0x4a4], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0
mov edx, 0x20a
mov edi, dword [esi + 0x7ec]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x4a0], eax
mov dword [esi + 0x49c], ecx
mov dword [esi + 0x498], edx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
mov edx, dword [esi + 0x7e8]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esi + 0x494], eax
mov dword [esi + 0x490], ecx
call fcn.0040b550
add esp, 8
mov eax, 0x104
mov ecx, dword [esi + 0x82c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x7e4]
mov edi, dword [esi + 0x7ec]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x48c], eax
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7e8]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x488], eax
call fcn.00409030
add esp, 4
mov ecx, 0x4a63b54f
mov edx, dword [esi + 0x7e8]
mov edi, dword [esi + 0x82c]
mov edi, dword [edi]
add ecx, 0x104
sub ecx, edi
sub ecx, 0x4a63b54f
mov edi, dword [esi + 0x7ec]
mov ebx, dword [esi + 0x82c]
mov ebx, dword [ebx]
shl ebx, 1
add edi, ebx
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00408570
add esp, 0x10
mov ecx, dword [0x4db448]
mov edx, dword [esi + 0x7ec]
sub esp, 8
mov edi, esp
mov dword [edi], edx
mov dword [edi + 4], 0
mov dword [esi + 0x484], eax
call ecx
mov ecx, 0x30ba6d71
mov edx, dword [esi + 0x798]
mov dword [edx], eax
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov dword [esi + 0x788], 0x97982a09
jmp 0x4248c9
mov eax, 0x73756c8e
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0xa56bd9a5
mov ecx, dword [esi + 0x798]
cmp dword [ecx], 0
sete dl
and dl, 1
mov byte [esi + 0x847], dl
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0x71595d91
mov ecx, 0xbe7db2f9
mov dl, byte [esi + 0x847]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0xbcef7832
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0xecda1c40
mov ecx, 0xc91ab502
mov dl, byte [esi + 0x848]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x804]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x33c], eax
call fcn.0041ca70
add esp, 4
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, dword [esi + 0x790]
mov eax, dword [eax]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, 0xdaba9159
mov edx, 0x5b357efe
mov edi, dword [esi + 0x830]
mov dword [edi], eax
mov eax, dword [esi + 0x830]
cmp dword [eax], 0
cmovne ecx, edx
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0xdaba9159
mov ecx, 0x4af3fd44
mov edx, dword [esi + 0x830]
cmp dword [edx], 0x80
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x804]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x338], eax
call fcn.0041ca70
add esp, 4
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, 0x860f68ca
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
lea edx, [0x44a630]
mov edi, dword [esi + 0x79c]
mov dword [edi], 0x3c
mov edi, dword [esi + 0x79c]
mov dword [edi + 4], 0x40
mov edi, dword [esi + 0x79c]
mov dword [edi + 8], 0
mov edi, dword [esi + 0x79c]
mov dword [edi + 0xc], edx
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x18], 0
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x20], 0
mov edx, dword [esi + 0x808]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x334], eax
mov dword [esi + 0x330], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
lea edx, [0x44a63a]
mov edi, 3
mov ebx, dword [esi + 0x808]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esi + 0x32c], eax
mov dword [esi + 0x328], ecx
mov dword [esi + 0x324], edi
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7ec]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x320], eax
call fcn.00409030
add esp, 4
mov ecx, 0x101
mov edx, dword [esi + 0x7ec]
mov edi, dword [esi + 0x808]
add edi, 6
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x101
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x31c], ecx
call fcn.00408570
add esp, 0x10
mov ecx, 0
mov edx, dword [0x495170]
movzx edx, word [edx]
mov edi, dword [esi + 0x824]
mov dword [edi], edx
mov edx, dword [esi + 0x824]
mov edx, dword [edx]
sub ecx, 1
sub edx, ecx
mov ecx, dword [0x495170]
movzx ecx, word [ecx + edx*2]
mov edx, dword [esi + 0x828]
mov dword [edx], ecx
mov ecx, dword [esi + 0x828]
mov ecx, dword [ecx]
mov edx, dword [0x495170]
mov edi, dword [esi + 0x824]
mov edi, dword [edi]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [0x495170]
add edi, 2
mov ebx, dword [esi + 0x824]
mov ebx, dword [ebx]
mov dword [esi + 0x318], eax
mov eax, dword [esi + 0x7e0]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
add esp, 0x14
mov eax, dword [esi + 0x7f0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, 0xf333c2f2
mov edx, dword [esi + 0x794]
mov dword [edx], eax
mov eax, dword [esi + 0x794]
cmp dword [eax], 0
sete al
and al, 1
mov byte [esi + 0x849], al
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0x2ec8916b
mov ecx, 0xa0a89e65
mov dl, byte [esi + 0x849]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0x2d8fbe82
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x804]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x314], eax
call fcn.0041ca70
add esp, 4
mov eax, 0x7a164f08
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, dword [esi + 0x7e0]
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x808]
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x79c]
mov dword [eax + 0x1c], 0
mov eax, dword [0x4db450]
mov ecx, dword [esi + 0x79c]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, 0xfec73d3f
mov edx, 0x23b12b12
cmp eax, 1
cmovne ecx, edx
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x804]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x310], eax
call fcn.0041ca70
add esp, 4
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, 0xcea87a36
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x79c]
mov eax, dword [eax + 0x38]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, dword [0x4db44c]
sub esp, 0x10
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x30c], eax
call ecx
mov ecx, dword [esi + 0x7f8]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x14], 0
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x1c], 1
mov ecx, dword [0x4db450]
mov edx, dword [esi + 0x79c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x308], eax
call ecx
mov ecx, 0x6789a4c
cmp eax, 1
setne bl
and bl, 1
mov byte [esi + 0x84a], bl
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0xc1156d53
mov ecx, 0x7e0a956f
mov dl, byte [esi + 0x84a]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7f4]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov ecx, dword [esi + 0x804]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x304], eax
call fcn.0041ca70
add esp, 4
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, dword [esi + 0x79c]
mov eax, dword [eax + 0x38]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, dword [esi + 0x794]
mov ecx, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esi + 0x300], eax
call ecx
mov ecx, 0xe0329342
mov edx, 0x3af60a7e
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, 0x49cb01b9
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x808]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x2fc], eax
mov dword [esi + 0x2f8], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
lea edx, str._q__u
mov edi, 6
mov ebx, dword [esi + 0x808]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esi + 0x2f4], eax
mov dword [esi + 0x2f0], ecx
mov dword [esi + 0x2ec], edi
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7ec]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x2e8], eax
call fcn.00409030
add esp, 4
mov ecx, 0xfe
mov edx, dword [esi + 0x7ec]
mov edi, dword [esi + 0x808]
add edi, 0xc
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0xfe
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x2e4], ecx
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7e0]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x808]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x14], ecx
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x1c], 0
mov ecx, dword [0x4db450]
mov edx, dword [esi + 0x79c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x2e0], eax
call ecx
mov ecx, 0x5a01d07c
cmp eax, 1
setne al
and al, 1
mov byte [esi + 0x84b], al
mov dword [esi + 0x788], ecx
jmp 0x4248c9
mov eax, 0x33fd1092
mov ecx, 0xf6a208e5
mov dl, byte [esi + 0x84b]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov dword [esi + 0x788], 0x8d073266
jmp 0x4248c9
mov eax, dword [esi + 0x79c]
mov eax, dword [eax + 0x38]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, dword [0x4db44c]
sub esp, 0x10
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x2dc], eax
call ecx
mov ecx, dword [esi + 0x83c]
mov dword [ecx], 1
mov dword [esi + 0x788], 0x8d073266
mov dword [esi + 0x2d8], eax
jmp 0x4248c9
mov eax, 0x9722f56a
mov ecx, 0x7c513771
mov edx, dword [esi + 0x794]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, 0x7cd969af
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov ecx, 0x676b6fcd
mov dword [esi + 0x788], ecx
mov dword [esi + 0x2d4], eax
jmp 0x4248c9
mov dword [esi + 0x788], 0x9722f56a
jmp 0x4248c9
mov eax, 0x3ca9fb23
mov ecx, 0x4362e04b
mov edx, dword [esi + 0x790]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [esi + 0x788], eax
jmp 0x4248c9
mov eax, dword [esi + 0x790]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x788], 0x3ca9fb23
mov dword [esi + 0x2d0], eax
jmp 0x4248c9
mov eax, dword [esi + 0x7ec]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
mov dword [esi + 0x2cc], eax
call fcn.0041f280
mov eax, dword [esi + 0x83c]
mov eax, dword [eax]
mov ecx, dword [esi + 0x78c]
mov dword [ecx], eax
mov dword [esi + 0x788], 0x61c4c33
jmp 0x4248c9
mov eax, dword [esi + 0x78c]
mov eax, dword [eax]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0
mov ecx, 0xa
mov edx, 0x10
mov edi, 0x28
mov ebx, 0xc8
mov dword [esi + 0x2c8], eax
mov eax, 0x20a
mov dword [esi + 0x2c4], eax
mov eax, 0x3c
mov dword [esi + 0x2c0], eax
mov eax, 4
mov dword [esi + 0x2bc], eax
mov dword [esi + 0x2b8], ebx
mov dword [esi + 0x2b4], ecx
mov dword [esi + 0x2b0], edx
mov dword [esi + 0x2ac], edi
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x2a8], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x2a4], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x2a0], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0x3c
mov dword [esi + 0x29c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x298], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x294], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x290], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x28c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x288], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x284], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x280], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x27c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x278], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x274], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x270], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x26c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x268], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x264], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x260], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0x20c
mov dword [esi + 0x25c], eax
mov eax, ecx
mov dword [esi + 0x258], ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x254], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x250], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x24c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x248], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x244], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x240], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x23c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x238], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x234], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x230], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x22c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x258]
mov dword [esi + 0x228], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0xc8
mov dword [esi + 0x224], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0x28
mov dword [esi + 0x220], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0x10
mov dword [esi + 0x21c], eax
mov eax, ecx
mov dword [esi + 0x218], ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x218]
mov dword [esi + 0x214], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, 0xc
mov dword [esi + 0x210], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x20c], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x208], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x204], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x200], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x1fc], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x1f8], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x1f4], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2bc]
mov dword [esi + 0x1f0], eax
mov eax, ecx
call fcn.00440020
mov eax, esp
mov ecx, dword [esi + 0x2a4]
mov dword [ecx], 0
mov edx, dword [esi + 0x2a0]
mov dword [edx], 0
mov edi, dword [esi + 0x29c]
mov dword [edi], 0
mov ebx, dword [esi + 0x298]
sub esp, 0xc
mov dword [esp], ebx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esi + 0x1ec], eax
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x25c]
mov dword [eax], 0
mov ecx, dword [esi + 0x254]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x250]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x24c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x248]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x244]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x240]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x23c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x238]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x234]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x230]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x22c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x224]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x220]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x21c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x214]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x210]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x20c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.00440050
add esp, 0xc
mov eax, dword [esi + 0x1f0]
mov dword [eax], 0
mov ecx, dword [esi + 0x1ec]
mov dword [ecx], 0xffffffff
call fcn.0041ea40
mov dword [esi + 0x788], 0xf6c6884f
mov dword [esi + 0x1e8], eax
jmp 0x4248c9
mov eax, 0x104
mov ecx, dword [esi + 0x820]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x800]
mov edi, dword [esi + 0x7f0]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0x1e4], eax
call fcn.00408b70
add esp, 0x10
mov ecx, dword [esi + 0x834]
mov dword [ecx], eax
mov eax, dword [esi + 0x834]
mov eax, dword [eax]
sub eax, 0xa4ed631e
sub eax, 4
add eax, 0xa4ed631e
mov ecx, dword [esi + 0x7f0]
shl eax, 1
add ecx, eax
mov word [ecx], 0
mov eax, dword [esi + 0x7f0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, dword [esi + 0x794]
mov dword [ecx], eax
mov eax, dword [esi + 0x794]
mov dword [esi + 0x788], 0x1b7d03ec
mov dword [esi + 0x1e0], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
mov dword [esi + 0x788], 0xfc516a8b
mov dword [esi + 0x1dc], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x788], 0xc566a319
mov dword [esi + 0x1d8], eax
jmp 0x4248c9
mov eax, dword [esi + 0x78c]
mov dword [eax], 0
mov dword [esi + 0x788], 0x5d5f8f3c
jmp 0x4248c9
mov eax, dword [0x4db43c]
mov ecx, dword [0x4db274]
mov edx, dword [0x4db29c]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
mov ebx, dword [esi + 0x7a0]
sub esp, 0x18
mov dword [esi + 0x1a8], eax
mov eax, esp
mov dword [eax + 0x14], ebx
mov dword [eax + 8], ecx
mov dword [eax + 4], edx
mov dword [eax], edi
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 1
mov eax, dword [esi + 0x1a8]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db284]
mov edi, dword [0x4db29c]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x1a4], eax
mov eax, dword [esi + 0x7a4]
sub esp, 0x18
mov dword [esi + 0x1a0], eax
mov eax, esp
mov dword [esi + 0x19c], ecx
mov ecx, dword [esi + 0x1a0]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x19c]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db288]
mov edi, dword [0x4db29c]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x198], eax
mov eax, dword [esi + 0x7a8]
sub esp, 0x18
mov dword [esi + 0x194], eax
mov eax, esp
mov dword [esi + 0x190], ecx
mov ecx, dword [esi + 0x194]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x190]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db274]
mov edi, dword [0x4db298]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x18c], eax
mov eax, dword [esi + 0x7ac]
sub esp, 0x18
mov dword [esi + 0x188], eax
mov eax, esp
mov dword [esi + 0x184], ecx
mov ecx, dword [esi + 0x188]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x184]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db268]
mov edi, dword [0x4db2a8]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x180], eax
mov eax, dword [esi + 0x7b0]
sub esp, 0x18
mov dword [esi + 0x17c], eax
mov eax, esp
mov dword [esi + 0x178], ecx
mov ecx, dword [esi + 0x17c]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x178]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db274]
mov edi, dword [0x4db2ac]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x174], eax
mov eax, dword [esi + 0x7b4]
sub esp, 0x18
mov dword [esi + 0x170], eax
mov eax, esp
mov dword [esi + 0x16c], ecx
mov ecx, dword [esi + 0x170]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x16c]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db2b8]
mov edi, dword [0x4db2b0]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x168], eax
mov eax, dword [esi + 0x7b8]
sub esp, 0x18
mov dword [esi + 0x164], eax
mov eax, esp
mov dword [esi + 0x160], ecx
mov ecx, dword [esi + 0x164]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x160]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db2b4]
mov edi, dword [0x4db2b0]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x15c], eax
mov eax, dword [esi + 0x7bc]
sub esp, 0x18
mov dword [esi + 0x158], eax
mov eax, esp
mov dword [esi + 0x154], ecx
mov ecx, dword [esi + 0x158]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 1
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x154]
call eax
mov ecx, dword [0x4db43c]
mov edx, dword [0x4db2b4]
mov edi, dword [0x4db29c]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
mov dword [esi + 0x150], eax
mov eax, dword [esi + 0x7c0]
sub esp, 0x18
mov dword [esi + 0x14c], eax
mov eax, esp
mov dword [esi + 0x148], ecx
mov ecx, dword [esi + 0x14c]
mov dword [eax + 0x14], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 1
mov eax, dword [esi + 0x148]
call eax
mov ecx, dword [0x4db438]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x144], eax
call ecx
mov ecx, dword [esi + 0x810]
mov dword [esi + 0x140], eax
mov dword [esi + 0x13c], ecx
call fcn.00440973
and eax, 0xf
sub esp, 0xc
mov ecx, esp
mov edx, dword [esi + 0x13c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.00441328
add esp, 0xc
mov ecx, dword [esi + 0x810]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x138], eax
call fcn.00409030
add esp, 4
mov ecx, dword [esi + 0x820]
mov dword [ecx], eax
mov eax, dword [esi + 0x820]
mov eax, dword [eax]
mov ecx, eax
neg ecx
mov edx, 1
mov edi, edx
sub edi, ecx
mov ecx, dword [esi + 0x820]
mov dword [ecx], edi
mov ecx, dword [esi + 0x810]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x810]
mov ecx, dword [esi + 0x820]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x134], edx
mov dword [esi + 0x130], eax
call fcn.00440973
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
sub esp, 0xc
mov eax, esp
mov edx, dword [esi + 0x130]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.00441328
add esp, 0xc
mov ecx, dword [esi + 0x810]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x12c], eax
call fcn.00409030
add esp, 4
mov ecx, dword [esi + 0x820]
mov dword [ecx], eax
mov eax, dword [esi + 0x820]
mov eax, dword [eax]
mov ecx, eax
neg ecx
mov edx, dword [esi + 0x134]
sub edx, ecx
mov ecx, dword [esi + 0x820]
mov dword [ecx], edx
mov ecx, dword [esi + 0x810]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x810]
mov ecx, dword [esi + 0x820]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x128], eax
call fcn.00440973
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
sub esp, 0xc
mov eax, esp
mov edx, dword [esi + 0x128]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.00441328
add esp, 0xc
mov ecx, dword [esi + 0x810]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x124], eax
call fcn.00409030
add esp, 4
mov ecx, dword [esi + 0x820]
mov dword [ecx], eax
mov eax, dword [esi + 0x820]
mov eax, dword [eax]
mov ecx, eax
inc ecx
mov edx, dword [esi + 0x820]
mov dword [edx], ecx
mov ecx, dword [esi + 0x810]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0x810]
mov ecx, dword [esi + 0x820]
mov ecx, dword [ecx]
lea eax, [eax + ecx*2]
mov dword [esi + 0x120], eax
call fcn.00440973
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
sub esp, 0xc
mov eax, esp
mov edx, dword [esi + 0x120]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.00441328
add esp, 0xc
mov ecx, dword [esi + 0x810]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
mov dword [esi + 0x11c], eax
call fcn.00409030
add esp, 4
mov ecx, dword [esi + 0x820]
mov dword [ecx], eax
mov eax, dword [0x495150]
movzx eax, byte [eax]
mov ecx, dword [esi + 0x824]
mov dword [ecx], eax
mov eax, dword [esi + 0x824]
mov eax, dword [eax]
not eax
mov ecx, dword [0x495150]
neg eax
movzx eax, byte [ecx + eax]
mov ecx, dword [esi + 0x828]
mov dword [ecx], eax
mov eax, dword [esi + 0x828]
mov eax, dword [eax]
mov ecx, dword [0x495150]
mov edx, dword [esi + 0x824]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x495150]
inc edx
mov edi, dword [esi + 0x818]
sub esp, 0x14
mov ebx, esp
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx], edi
mov dword [ebx + 4], 0x10
call fcn.004065e0
add esp, 0x14
mov eax, dword [0x4db434]
mov ecx, dword [0x4db290]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x7c4]
mov dword [ecx], eax
mov eax, dword [0x4db42c]
xor ecx, ecx
mov edx, dword [0x4db2c0]
mov edi, dword [0x4db270]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0x118], eax
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov eax, dword [esi + 0x118]
call eax
mov ecx, dword [0x4db428]
mov edx, dword [esi + 0x810]
mov edi, dword [0x4db28c]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x114], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x4db428]
mov edx, dword [esi + 0x7e8]
mov edi, dword [0x4db274]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x110], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x4db424]
mov edx, dword [0x4db26c]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [ebx + 8], 1
mov dword [esi + 0x10c], eax
call ecx
mov ecx, dword [0x4db420]
mov edx, dword [esi + 0x818]
mov edi, dword [0x4db2bc]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0x108], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0xc], 0x10
call ecx
mov ecx, dword [0x4db434]
mov edx, dword [0x4db294]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x104], eax
call ecx
mov ecx, dword [esi + 0x7c8]
mov dword [ecx], eax
mov eax, dword [0x4db41c]
mov ecx, dword [esi + 0x7ac]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7ac]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x100], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7b4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xfc], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7b4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf8], eax
call ecx
mov ecx, dword [0x4db430]
mov edx, dword [esi + 0x7c8]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf4], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7a4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xf0], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7a4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xec], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7a8]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe8], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7a8]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe4], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7a0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xe0], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7c0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xdc], eax
call ecx
mov dword [esi + 0xd8], eax
call fcn.00440973
mov ecx, 5
xor edx, edx
div ecx
mov eax, dword [edx*4 + 0x495154]
mov ecx, dword [esi + 0x7d8]
mov dword [ecx], eax
mov eax, dword [esi + 0x7d8]
mov eax, dword [eax]
movzx eax, word [eax]
mov ecx, dword [esi + 0x824]
mov dword [ecx], eax
mov eax, dword [esi + 0x824]
mov eax, dword [eax]
add eax, 0xe9cd9ae0
add eax, 1
sub eax, 0xe9cd9ae0
mov ecx, dword [esi + 0x7d8]
mov ecx, dword [ecx]
movzx eax, word [ecx + eax*2]
mov ecx, dword [esi + 0x828]
mov dword [ecx], eax
mov eax, dword [esi + 0x828]
mov eax, dword [eax]
mov ecx, dword [esi + 0x7d8]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x824]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [esi + 0x7d8]
mov edx, dword [edx]
add edx, 2
mov edi, dword [esi + 0x824]
mov edi, dword [edi]
mov ebx, dword [esi + 0x7dc]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00406c80
add esp, 0x14
mov eax, 0x104
mov ecx, dword [esi + 0x824]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x7dc]
mov edi, dword [esi + 0x7f8]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esi + 0xd4], eax
call fcn.00408570
add esp, 0x10
lea ecx, str..exe
mov edx, 4
mov edi, 0x80c99d2f
mov ebx, dword [esi + 0x824]
mov ebx, dword [ebx]
add edi, 0x104
sub edi, ebx
sub edi, 0x80c99d2f
mov ebx, dword [esi + 0x7f8]
mov dword [esi + 0xd0], eax
mov eax, dword [esi + 0x824]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esi + 0xcc], edx
call fcn.00408570
add esp, 0x10
mov ecx, 0x104
mov edx, dword [esi + 0x824]
mov edx, dword [edx]
mov edi, dword [esi + 0x7dc]
mov ebx, dword [esi + 0x7fc]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esi + 0xc8], eax
mov dword [esi + 0xc4], ecx
call fcn.00408570
add esp, 0x10
lea ecx, str.32.exe
mov edx, 6
mov edi, 0xe8ca274d
mov ebx, dword [esi + 0x824]
mov ebx, dword [ebx]
add edi, 0x104
sub edi, ebx
sub edi, 0xe8ca274d
mov ebx, dword [esi + 0x7fc]
mov dword [esi + 0xc0], eax
mov eax, dword [esi + 0x824]
mov eax, dword [eax]
shl eax, 1
add ebx, eax
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esi + 0xbc], edx
call fcn.00408570
add esp, 0x10
mov ecx, 0x10
mov edx, 0
mov edi, dword [0x495168]
movzx edi, byte [edi]
mov ebx, dword [esi + 0x824]
mov dword [ebx], edi
mov edi, dword [esi + 0x824]
mov edi, dword [edi]
mov ebx, edx
sub ebx, edi
mov edi, edx
sub edi, 1
add ebx, edi
sub edx, ebx
mov edi, dword [0x495168]
movzx edx, byte [edi + edx]
mov edi, dword [esi + 0x828]
mov dword [edi], edx
mov edx, dword [esi + 0x828]
mov edx, dword [edx]
mov edi, dword [0x495168]
mov ebx, dword [esi + 0x824]
add edi, dword [ebx]
add edi, 2
mov ebx, dword [0x495168]
add ebx, 1
mov dword [esi + 0xb8], eax
mov eax, dword [esi + 0x81c]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x10
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
mov dword [esi + 0xb4], ecx
call fcn.004065e0
add esp, 0x14
mov eax, dword [0x4db434]
mov ecx, dword [0x4db29c]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x7cc]
mov dword [ecx], eax
mov eax, dword [0x4db428]
mov ecx, dword [esi + 0x7f8]
mov edx, dword [0x4db274]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], edx
mov dword [ebx], edi
call eax
mov ecx, dword [0x4db428]
mov edx, dword [esi + 0x7fc]
mov edi, dword [0x4db27c]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0xb0], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x4db428]
mov edx, dword [0x4db278]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [ebx + 8], str.Microsoft
mov dword [esi + 0xac], eax
call ecx
mov ecx, dword [0x4db420]
mov edx, dword [esi + 0x81c]
mov edi, dword [0x4db2b4]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0x10
mov dword [esi + 0xa8], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
mov dword [eax + 0xc], 0x10
call ecx
mov ecx, dword [0x4db434]
mov edx, dword [0x4db2a0]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xa4], eax
call ecx
mov ecx, dword [esi + 0x7d0]
mov dword [ecx], eax
mov eax, dword [0x4db428]
mov ecx, dword [0x4db274]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 0xc
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
mov dword [edi + 8], 0x44a62c
call eax
mov ecx, dword [0x4db430]
mov edx, dword [esi + 0x7d0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0xa0], eax
call ecx
mov ecx, 0
mov edx, dword [0x49516c]
movzx edx, word [edx]
mov edi, dword [esi + 0x824]
mov dword [edi], edx
mov edx, dword [esi + 0x824]
mov edx, dword [edx]
mov edi, ecx
sub edi, edx
mov edx, ecx
sub edx, 1
add edi, edx
sub ecx, edi
mov edx, dword [0x49516c]
movzx ecx, word [edx + ecx*2]
mov edx, dword [esi + 0x828]
mov dword [edx], ecx
mov ecx, dword [esi + 0x828]
mov ecx, dword [ecx]
mov edx, dword [0x49516c]
mov edi, dword [esi + 0x824]
mov edi, dword [edi]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [0x49516c]
add edi, 2
mov ebx, dword [esi + 0x824]
mov ebx, dword [ebx]
mov dword [esi + 0x9c], eax
mov eax, dword [esi + 0x814]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
add esp, 0x14
mov eax, dword [0x4db434]
mov ecx, dword [0x4db2a4]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 8
mov edi, esp
mov dword [edi + 4], ecx
mov dword [edi], edx
call eax
mov ecx, dword [esi + 0x7d4]
mov dword [ecx], eax
mov eax, dword [0x4db428]
mov ecx, dword [esi + 0x814]
mov edx, dword [0x4db274]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 0xc
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], edx
mov dword [ebx], edi
call eax
mov ecx, dword [0x4db428]
mov edx, dword [esi + 0x7f4]
mov edi, dword [0x4db280]
mov ebx, dword [esi + 0x798]
mov ebx, dword [ebx]
sub esp, 0xc
mov dword [esi + 0x98], eax
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], edi
mov dword [eax], ebx
call ecx
mov ecx, dword [0x4db430]
mov edx, dword [esi + 0x7d4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x94], eax
call ecx
mov ecx, dword [0x4db430]
mov edx, dword [esi + 0x7cc]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x90], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7c0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x8c], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7a0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x88], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7b8]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x84], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7bc]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x80], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7bc]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x7c], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7b8]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x78], eax
call ecx
mov ecx, dword [0x4db41c]
mov edx, dword [esi + 0x7b0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x74], eax
call ecx
mov ecx, dword [0x4db418]
mov edx, dword [esi + 0x7b0]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x70], eax
call ecx
mov ecx, dword [0x4db430]
mov edx, dword [esi + 0x7c4]
mov edx, dword [edx]
mov edi, dword [esi + 0x798]
mov edi, dword [edi]
sub esp, 8
mov ebx, esp
mov dword [ebx + 4], edx
mov dword [ebx], edi
mov dword [esi + 0x6c], eax
call ecx
mov ecx, dword [0x4db440]
mov edx, dword [esi + 0x798]
mov edx, dword [edx]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x68], eax
call ecx
mov eax, 0x20a
mov ecx, dword [esi + 0x80c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esi + 0x64], eax
call fcn.0040bd70
add esp, 8
mov eax, dword [0x4db480]
mov ecx, dword [esi + 0x80c]
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], 0
mov dword [edx], 0
call eax
mov ecx, dword [esi + 0x790]
mov dword [ecx], eax
mov eax, dword [esi + 0x790]
mov dword [esi + 0x788], 0xbcef7832
mov dword [esi + 0x60], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
lea edx, [0x44a630]
mov edi, dword [esi + 0x79c]
mov dword [edi], 0x3c
mov edi, dword [esi + 0x79c]
mov dword [edi + 4], 0x40
mov edi, dword [esi + 0x79c]
mov dword [edi + 8], 0
mov edi, dword [esi + 0x79c]
mov dword [edi + 0xc], edx
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x18], 0
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x20], 0
mov edx, dword [esi + 0x808]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x5c], eax
mov dword [esi + 0x58], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
lea edx, [0x44a63a]
mov edi, 3
mov ebx, dword [esi + 0x808]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esi + 0x54], eax
mov dword [esi + 0x50], ecx
mov dword [esi + 0x4c], edi
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7ec]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x48], eax
call fcn.00409030
add esp, 4
mov ecx, 0x101
mov edx, dword [esi + 0x7ec]
mov edi, dword [esi + 0x808]
add edi, 6
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x101
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x44], ecx
call fcn.00408570
add esp, 0x10
mov ecx, dword [0x495170]
movzx ecx, word [ecx]
mov edx, dword [esi + 0x824]
mov dword [edx], ecx
mov ecx, dword [esi + 0x824]
mov ecx, dword [ecx]
sub ecx, 0xc74b1db6
mov edx, dword [0x495170]
movzx ecx, word [edx + ecx*2 - 0x7169c492]
mov edx, dword [esi + 0x828]
mov dword [edx], ecx
mov ecx, dword [esi + 0x828]
mov ecx, dword [ecx]
mov edx, dword [0x495170]
mov edi, dword [esi + 0x824]
mov edi, dword [edi]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [0x495170]
add edi, 2
mov ebx, dword [esi + 0x824]
mov ebx, dword [ebx]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x7e0]
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
add esp, 0x14
mov eax, dword [esi + 0x7f0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
mov ecx, dword [esi + 0x794]
mov dword [ecx], eax
mov eax, dword [esi + 0x794]
mov dword [esi + 0x788], 0x860f68ca
mov dword [esi + 0x3c], eax
jmp 0x4248c9
mov eax, dword [esi + 0x79c]
mov eax, dword [eax + 0x38]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
mov ecx, dword [0x4db44c]
sub esp, 0x10
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x34], eax
call ecx
mov ecx, dword [esi + 0x7f8]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x14], 0
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x1c], 1
mov ecx, dword [0x4db450]
mov edx, dword [esi + 0x79c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0x30], eax
call ecx
mov dword [esi + 0x788], 0xcea87a36
mov dword [esi + 0x2c], eax
jmp 0x4248c9
mov eax, 0
mov ecx, 0x20a
mov edx, dword [esi + 0x808]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esi + 0x28], eax
mov dword [esi + 0x24], ecx
call fcn.00407e20
add esp, 0xc
mov ecx, 0x104
lea edx, str._q__u
mov edi, 6
mov ebx, dword [esi + 0x808]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], edi
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7ec]
sub esp, 4
mov dword [esp], ecx
mov dword [esi + 0x14], eax
call fcn.00409030
add esp, 4
mov ecx, 0xfe
mov edx, dword [esi + 0x7ec]
mov edi, dword [esi + 0x808]
add edi, 0xc
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0xfe
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esi + 0x10], ecx
call fcn.00408570
add esp, 0x10
mov ecx, dword [esi + 0x7e0]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x10], ecx
mov ecx, dword [esi + 0x808]
mov edx, dword [esi + 0x79c]
mov dword [edx + 0x14], ecx
mov ecx, dword [esi + 0x79c]
mov dword [ecx + 0x1c], 0
mov ecx, dword [0x4db450]
mov edx, dword [esi + 0x79c]
sub esp, 4
mov edi, esp
mov dword [edi], edx
mov dword [esi + 0xc], eax
call ecx
mov dword [esi + 0x788], 0x49cb01b9
mov dword [esi + 8], eax
jmp 0x4248c9
mov eax, dword [esi + 0x794]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x788], 0x7cd969af
mov dword [esi + 4], eax
jmp 0x41f2be