Function at 0x40c8a0
Capabilities:
Check if file exists
Create directory
Delete directory
Delete file
Get file attributes
Get file size
Identify system language via api
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x4fa4
call fcn.0049fde0
mov eax, dword [0x4f6440]
xor eax, esp
mov dword [esp + 0x4fa0], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [esp + 0x10], 0
call fcn.00408b10
push dword [esp + 0xc]
lea ecx, [esp + 0xa14]
mov dword [0x4f9a64], esi
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xa18]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc84]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc88]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xa44]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xa48]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xa5c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xa60]
call fcn.0041f3b0
push 0x104
lea eax, [esp + 0x3e64]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [esp + 0xad0]
call fcn.00403960
lea ecx, [esp + 0xc98]
call fcn.00403b80
lea edx, [esp + 0xad0]
lea ecx, [esp + 0xb60]
call fcn.004043a0
lea edx, [esp + 0x3f68]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x41276b
lea edx, [esp + 0xb60]
lea ecx, [esp + 0xcb0]
call fcn.00404680
lea ecx, [esp + 0xcb0]
call fcn.00419220
push eax
lea eax, [esp + 0x3f6c]
push 0x104
push eax
call fcn.004afc42
sub esp, 0xc
mov esi, esp
mov ecx, esi
push dword [esp + 0x24]
call fcn.0041ec30
push 0xb
push 0x4ea988
mov ecx, esi
call fcn.0041ed10
push 0
push 0
lea edx, [esp + 0x3f88]
mov ecx, 0x6b
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x41275f
lea eax, [esp + 0xb60]
push eax
lea ecx, [esp + 0xbf4]
call fcn.00419c60
lea ecx, [esp + 0xf20]
call fcn.00415f30
push 1
push 0x40
push 1
lea eax, [esp + 0x3f74]
push eax
lea ecx, [esp + 0x158]
call fcn.004154d0
push 0x34
call fcn.0049f1cd
add esp, 4
mov ecx, eax
push 0
call fcn.00415df0
mov ecx, dword [esp + 0x148]
mov esi, eax
mov ecx, dword [ecx + 4]
push dword [esp + ecx + 0x178]
lea ecx, [esp + 0x8c]
call fcn.00401be0
push esi
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x258]
call fcn.0041e140
mov ecx, dword [esp + 0x148]
lea esi, [esp + 0x148]
mov edi, eax
lea eax, [esp + 0x248]
push edi
push eax
add esi, dword [ecx + 4]
mov ecx, esi
call fcn.00402e60
mov ecx, dword [esi + 0x38]
test ecx, ecx
je 0x40caf1
push edi
lea eax, [esp + 0x244]
push eax
call fcn.0041ae70
lea ecx, [esp + 0x240]
call fcn.00401c00
lea ecx, [esp + 0x248]
call fcn.00401c00
lea ecx, [esp + 0x250]
call fcn.00401c00
lea ecx, [esp + 0x88]
call fcn.00401c00
cmp dword [esp + 0x1a4], 0
je 0x412afe
push 1
lea ecx, [esp + 0x804]
call fcn.00414070
lea ecx, [esp + 0x148]
call fcn.004153d0
push eax
lea ecx, [esp + 0x814]
call fcn.00414260
lea eax, [esp + 0x1550]
push eax
lea ecx, [esp + 0x804]
call fcn.00413f80
lea ecx, [esp + 0x148]
call fcn.00415380
lea eax, [esp + 0x1550]
push eax
lea eax, [esp + 0x23c0]
push eax
lea ecx, [esp + 0xf28]
call fcn.00415e10
push eax
lea ecx, [esp + 0xbf4]
call fcn.00419a20
lea ecx, [esp + 0x23bc]
call fcn.004199d0
lea ecx, [esp + 0x1550]
call fcn.00419390
lea ecx, [esp + 0x800]
call fcn.00412cb0
push 0x10
push 0
lea eax, [esp + 0xce8]
push eax
lea ecx, [esp + 0xbfc]
call fcn.004195a0
push 0x10
push 0x10
lea eax, [esp + 0xd00]
push eax
lea ecx, [esp + 0xbfc]
call fcn.004195a0
push str..dat
lea edx, [esp + 0xce4]
lea ecx, [esp + 0xd14]
call fcn.0041d5a0
add esp, 4
lea edx, [esp + 0x3230]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
jne 0x40ccb6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
lea ecx, [esp + 0x1678]
push str.Unable_to_get_temp_path:_Error_1
call fcn.004175c0
push 0x4ea9d4
lea ecx, [esp + 0xf7c]
call fcn.00417690
lea ecx, [esp + 0x1678]
call fcn.00417590
lea ecx, [esp + 0xf78]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf7c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x1680]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xd10]
call fcn.004199d0
lea ecx, [esp + 0xcf8]
call fcn.004199d0
lea ecx, [esp + 0xce0]
call fcn.004199d0
jmp 0x412b7b
lea edx, [esp + 0xd10]
lea ecx, [esp + 0xd28]
call fcn.00404680
lea ecx, [esp + 0xd28]
call fcn.00419220
push eax
lea eax, [esp + 0x3234]
push 0x104
push eax
call fcn.004afc42
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop word [eax + eax]
lea eax, [esp + 0x3230]
push eax
call edi
cmp eax, 0xffffffff
jne 0x40cd5a
sub esp, 0x18
mov esi, esp
mov ecx, esi
push dword [esp + 0x24]
call fcn.0041ec30
push 0xb
push 0x4ea988
mov ecx, esi
call fcn.0041ed10
push 0
push 0
lea edx, [esp + 0x3250]
mov ecx, 0x6a
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x40f160
push str.Released_excat1.exe_successfully._n
call fcn.0042c7d0
add esp, 4
push dword [esp + 0xc]
lea ecx, [esp + 0xa2c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xa30]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb4c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb50]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb7c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb80]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb94]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb98]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc6c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc70]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xaec]
call fcn.0041ec30
push 2
push 0x4eae1c
lea ecx, [esp + 0xaf0]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb04]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb08]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xa8c]
call fcn.0041ec30
push 1
push 0x4eaadc
lea ecx, [esp + 0xa90]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xbac]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xbb0]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xbc4]
call fcn.0041ec30
push 1
push 0x4eae20
lea ecx, [esp + 0xbc8]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xa74]
call fcn.0041ec30
push 0xb
push 0x4ea988
lea ecx, [esp + 0xa78]
call fcn.0041ed10
push dword [esp + 0xc]
lea ecx, [esp + 0xbdc]
call fcn.0041ec30
push 1
push 0x4eaadc
lea ecx, [esp + 0xbe0]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc0c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc10]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb1c]
mov dword [esp + 0x48], 0x84
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb20]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xb34]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xb38]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc24]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc28]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc3c]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc40]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xc54]
call fcn.0041ec30
push 0
push 0x4ea292
lea ecx, [esp + 0xc58]
call fcn.0041f3b0
push dword [esp + 0xc]
lea ecx, [esp + 0xabc]
call fcn.0041ec30
push 1
push 0x4eae20
lea ecx, [esp + 0xac0]
call fcn.0041f3b0
lea ecx, [esp + 0xe90]
call fcn.00415f30
push 1
push 0x40
push 1
lea eax, [esp + 0x323c]
push eax
lea ecx, [esp + 0xa0]
call fcn.004154d0
push 0x34
call fcn.0049f1cd
add esp, 4
mov ecx, eax
push 0
call fcn.00415df0
mov ecx, dword [esp + 0x90]
mov esi, eax
mov ecx, dword [ecx + 4]
push dword [esp + ecx + 0xc0]
lea ecx, [esp + 0x84]
call fcn.00401be0
push esi
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x228]
call fcn.0041e140
mov ecx, dword [esp + 0x90]
mov edi, eax
lea esi, [esp + 0x90]
add esi, dword [ecx + 4]
lea eax, [esp + 0x218]
push edi
push eax
mov ecx, esi
call fcn.00402e60
mov ecx, dword [esi + 0x38]
test ecx, ecx
je 0x40d0ac
push edi
lea eax, [esp + 0x214]
push eax
call fcn.0041ae70
lea ecx, [esp + 0x210]
call fcn.00401c00
lea ecx, [esp + 0x218]
call fcn.00401c00
lea ecx, [esp + 0x220]
call fcn.00401c00
lea ecx, [esp + 0x80]
call fcn.00401c00
push dword [esp + 0xc]
lea ecx, [esp + 0xaa4]
call fcn.0041ec30
push 0
push 0x4ea3c4
lea ecx, [esp + 0xaa8]
call fcn.0041ed10
cmp dword [esp + 0xec], 0
je 0x4128fc
push 1
lea ecx, [esp + 0x8b4]
call fcn.00414070
lea ecx, [esp + 0x90]
call fcn.004153d0
push eax
lea ecx, [esp + 0x8c4]
call fcn.00414260
lea eax, [esp + 0x23d4]
push eax
lea ecx, [esp + 0x8b4]
call fcn.00413f80
push eax
lea ecx, [esp + 0xaa4]
call fcn.004193f0
lea ecx, [esp + 0x23d4]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00415380
lea ecx, [esp + 0x8b0]
call fcn.00412cb0
lea eax, [esp + 0xaa0]
push eax
lea eax, [esp + 0xccc]
push eax
lea ecx, [esp + 0xe98]
call fcn.00415e10
push 0
push 0x4eae50
lea ecx, [esp + 0xcd0]
call fcn.00419600
mov esi, eax
cmp esi, 0xffffffff
jne 0x40d394
lea ecx, [esp + 0x3230]
call fcn.004045c0
test al, al
je 0x40d1c1
lea eax, [esp + 0x3230]
push eax
call ebx
sub esp, 0x18
mov ecx, esp
push 0x4ea988
call fcn.00419480
push 0
push 0
lea edx, [esp + 0x3250]
mov ecx, 0x6a
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x40f5a1
push 1
push 0x40
push 1
lea eax, [esp + 0x323c]
push eax
lea ecx, [esp + 0x280]
call fcn.004154d0
lea ecx, [esp + 0x2590]
call fcn.00415f30
push 0x34
call fcn.0049f1cd
add esp, 4
mov ecx, eax
push 0
call fcn.00415df0
push eax
lea eax, [esp + 0x23c]
push eax
mov eax, dword [esp + 0x278]
lea ecx, [esp + 0x278]
add ecx, dword [eax + 4]
call fcn.00402e40
push eax
lea ecx, [esp + 0x238]
call fcn.0041e140
push eax
lea eax, [esp + 0x22c]
push eax
mov eax, dword [esp + 0x278]
lea ecx, [esp + 0x278]
add ecx, dword [eax + 4]
call fcn.004157e0
lea ecx, [esp + 0x228]
call fcn.00401c00
lea ecx, [esp + 0x230]
call fcn.00401c00
lea ecx, [esp + 0x238]
call fcn.00401c00
push 0x4ea3c4
lea ecx, [esp + 0xaa4]
call fcn.00419360
lea ecx, [esp + 0x270]
call fcn.004153c0
test al, al
je 0x40f3e7
push 1
lea ecx, [esp + 0x964]
call fcn.00414070
lea ecx, [esp + 0x270]
call fcn.004153d0
push eax
lea ecx, [esp + 0x974]
call fcn.00414260
lea eax, [esp + 0x23ec]
push eax
lea ecx, [esp + 0x964]
call fcn.00413f80
push eax
lea ecx, [esp + 0xaa4]
call fcn.004193f0
lea ecx, [esp + 0x23ec]
call fcn.00419390
lea ecx, [esp + 0x270]
call fcn.00415380
lea ecx, [esp + 0x960]
call fcn.00412cb0
lea eax, [esp + 0xaa0]
push eax
lea eax, [esp + 0x2408]
push eax
lea ecx, [esp + 0x2598]
call fcn.00415e10
push eax
lea ecx, [esp + 0xccc]
call fcn.00419a20
lea ecx, [esp + 0x2404]
call fcn.004199d0
push 0
push 0x4eae50
lea ecx, [esp + 0xcd0]
call fcn.00419600
mov esi, eax
cmp esi, 0xffffffff
je 0x40f195
lea ecx, [esp + 0x2590]
call fcn.00415e70
lea ecx, [esp + 0x270]
call fcn.00412c20
push esi
push 0
lea eax, [esp + 0xd60]
push eax
lea ecx, [esp + 0xaac]
call fcn.00419050
push 0xffffffffffffffff
lea eax, [esi + 3]
push eax
lea eax, [esp + 0xda8]
push eax
lea ecx, [esp + 0xaac]
call fcn.00419050
lea eax, [esp + 0xd58]
push eax
lea eax, [esp + 0xdbc]
push eax
lea ecx, [esp + 0xe98]
call fcn.00415e10
lea eax, [esp + 0xda0]
push eax
lea eax, [esp + 0xd8c]
push eax
lea ecx, [esp + 0xe98]
call fcn.00415e10
push 0x7c
lea edx, [esp + 0xd8c]
lea ecx, [esp + 0x18]
call fcn.00404cb0
add esp, 4
lea ecx, [esp + 0xd40]
mov edi, 1
push 0x4ea292
call fcn.00419bf0
push 0x4eaadc
mov ecx, 0x4f6f00
call fcn.00419970
lea ecx, [esp + 0x14]
call fcn.004188a0
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00418890
mov ebx, eax
cmp esi, ebx
je 0x40d64a
cmp edi, 0x16
jg 0x40d4b8
push esi
lea edx, [esp + 0xd44]
lea ecx, [esp + 0x2420]
call fcn.0041d660
add esp, 4
mov ecx, eax
push 1
push 0x4eaea0
call fcn.00419910
push eax
lea ecx, [esp + 0x156c]
call fcn.00419aa0
lea eax, [esp + 0x1568]
push eax
lea ecx, [esp + 0xd44]
call fcn.00419a20
lea ecx, [esp + 0x1568]
call fcn.004199d0
lea ecx, [esp + 0x241c]
call fcn.004199d0
cmp edi, 1
jne 0x40d4c9
lea ecx, [esp + 0xa28]
jmp 0x40d638
cmp edi, 2
jne 0x40d4da
lea ecx, [esp + 0xb48]
jmp 0x40d638
cmp edi, 3
jne 0x40d4eb
lea ecx, [esp + 0xb78]
jmp 0x40d638
cmp edi, 4
jne 0x40d4fc
lea ecx, [esp + 0xb90]
jmp 0x40d638
cmp edi, 5
jne 0x40d50d
lea ecx, [esp + 0xc68]
jmp 0x40d638
cmp edi, 6
jne 0x40d51e
lea ecx, [esp + 0xae8]
jmp 0x40d638
cmp edi, 7
jne 0x40d52f
lea ecx, [esp + 0xb00]
jmp 0x40d638
cmp edi, 8
jne 0x40d540
lea ecx, [esp + 0xa88]
jmp 0x40d638
cmp edi, 9
jne 0x40d551
lea ecx, [esp + 0xba8]
jmp 0x40d638
cmp edi, 0xb
jne 0x40d562
lea ecx, [esp + 0xbc0]
jmp 0x40d638
cmp edi, 0xc
jne 0x40d593
mov edx, esi
lea ecx, [esp + 0x2434]
call fcn.00404680
push eax
lea ecx, [esp + 0xa74]
call fcn.004193f0
lea ecx, [esp + 0x2434]
call fcn.00419390
jmp 0x40d63e
cmp edi, 0xd
jne 0x40d5a2
mov ecx, 0x4f6f30
jmp 0x40d638
cmp edi, 0xe
jne 0x40d5b3
lea ecx, [esp + 0xbd8]
jmp 0x40d638
cmp edi, 0xf
jne 0x40d5c1
lea ecx, [esp + 0xc08]
jmp 0x40d638
cmp edi, 0x10
jne 0x40d5da
push 0xa
xor edx, edx
mov ecx, esi
call fcn.004030b0
add esp, 4
mov dword [esp + 0x44], eax
jmp 0x40d63e
cmp edi, 0x11
jne 0x40d5e8
lea ecx, [esp + 0xb18]
jmp 0x40d638
cmp edi, 0x12
jne 0x40d5f6
lea ecx, [esp + 0xb30]
jmp 0x40d638
cmp edi, 0x15
jne 0x40d604
lea ecx, [esp + 0xc20]
jmp 0x40d638
cmp edi, 0x16
jne 0x40d612
lea ecx, [esp + 0xc38]
jmp 0x40d638
cmp edi, 0x17
jne 0x40d620
lea ecx, [esp + 0xc50]
jmp 0x40d638
cmp edi, 0x18
jne 0x40d62e
lea ecx, [esp + 0xab8]
jmp 0x40d638
cmp edi, 0x1a
jne 0x40d63e
mov ecx, 0x4f6f00
push esi
call fcn.004199a0
add esi, 0x18
inc edi
cmp esi, ebx
jne 0x40d455
lea edx, [esp + 0xd40]
lea ecx, [esp + 0xd70]
call fcn.004043a0
lea eax, [esp + 0xc50]
push eax
lea ecx, [esp + 0xd74]
call fcn.00420750
test al, al
jne 0x40d7ff
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x3230]
push eax
call ebx
lea ecx, [esp + 0xd70]
call fcn.004199d0
lea ecx, [esp + 0xd40]
call fcn.004199d0
lea ecx, [esp + 0x14]
call fcn.004188b0
lea ecx, [esp + 0xd88]
call fcn.004199d0
lea ecx, [esp + 0xdb8]
call fcn.004199d0
lea ecx, [esp + 0xda0]
call fcn.00419390
lea ecx, [esp + 0xd58]
call fcn.00419390
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x100]
call fcn.004153e0
lea ecx, [esp + 0x100]
call fcn.00415910
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
jmp 0x40ccf1
push 0x4ea292
lea ecx, [esp + 0xb1c]
call fcn.004206c0
test al, al
jne 0x4127c4
push 0x2c
lea edx, [esp + 0xb1c]
lea ecx, [esp + 0x24]
call fcn.00404cb0
add esp, 4
lea ecx, [esp + 0x20]
mov edi, 1
call fcn.004188a0
lea ecx, [esp + 0x20]
mov esi, eax
call fcn.00418890
mov ebx, eax
cmp esi, ebx
je 0x40d89b
nop dword [eax]
cmp edi, 1
jne 0x40d866
push 0xa
xor edx, edx
mov ecx, esi
call fcn.004030b0
mov dword [esp + 0x50], eax
jmp 0x40d890
cmp edi, 2
jne 0x40d87c
push 0xa
xor edx, edx
mov ecx, esi
call fcn.004030b0
mov dword [esp + 0x58], eax
jmp 0x40d890
cmp edi, 3
jne 0x40d893
push 0xa
xor edx, edx
mov ecx, esi
call fcn.004030b0
mov dword [esp + 0x54], eax
add esp, 4
add esi, 0x18
inc edi
cmp esi, ebx
jne 0x40d850
cmp dword [esp + 0x4c], 0x1388
jl 0x40d8b2
call fcn.0040c3f0
test al, al
jne 0x40f5ca
push 0x4eae20
lea ecx, [esp + 0xb4c]
call fcn.004206c0
test al, al
jne 0x40d90a
mov eax, dword [esp + 0x10]
lea edx, [esp + 0xa28]
or eax, 3
lea ecx, [esp + 0x2464]
mov dword [esp + 0x10], eax
call fcn.00404680
mov edx, eax
lea ecx, [esp + 0x244c]
call fcn.004045d0
lea ecx, [esp + 0xad0]
push ecx
mov ecx, eax
call fcn.00420750
test al, al
je 0x40d90a
mov bl, 1
jmp 0x40d90c
xor bl, bl
mov eax, dword [esp + 0x10]
test al, 2
je 0x40d92b
and eax, 0xfffffffd
lea ecx, [esp + 0x244c]
mov dword [esp + 0x10], eax
call fcn.004199d0
mov eax, dword [esp + 0x10]
test al, 1
je 0x40d942
and eax, 0xfffffffe
lea ecx, [esp + 0x2464]
mov dword [esp + 0x10], eax
call fcn.00419390
test bl, bl
jne 0x412470
push dword [esp + 0x2c]
lea ecx, [esp + 0xe04]
call fcn.0041ec30
push 0x10
push str.SbOmI5PlV3rRkPMj
lea ecx, [esp + 0xe08]
call fcn.0041f3b0
push str..dat
lea edx, [esp + 0xcfc]
lea ecx, [esp + 0xdec]
call fcn.0041d5a0
add esp, 4
lea edx, [esp + 0x3848]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412457
lea edx, [esp + 0xde8]
lea ecx, [esp + 0xe30]
call fcn.00404680
lea ecx, [esp + 0xe30]
call fcn.00419220
push eax
lea eax, [esp + 0x384c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea eax, [esp + 0xb00]
mov edx, str.http:__www.aqianniao.com_ver_json_
lea ecx, [esp + 0x247c]
push str..json
push eax
call fcn.0041df90
add esp, 4
lea ecx, [esp + 0xe1c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x247c]
call fcn.004199d0
push 0
lea ecx, [esp + 0x34]
call fcn.00418cd0
mov edx, 0x4eae1c
lea ecx, [esp + 0xae8]
call fcn.0041e0f0
test al, al
je 0x40dc6f
lea edx, [esp + 0x30]
lea ecx, [esp + 0xe18]
call fcn.00408870
test al, al
je 0x40dc6f
mov edx, 0x4eae20
lea ecx, [esp + 0xab8]
call fcn.0041df60
test al, al
je 0x40db36
push str.auto_update
lea ecx, [esp + 0x34]
call fcn.0041e2d0
mov ecx, eax
call fcn.0041e320
cmp eax, 1
jne 0x40db36
lea eax, [esp + 0x1598]
push eax
push ecx
push str.download_url
lea ecx, [esp + 0x3c]
call fcn.0041e2d0
add esp, 4
mov ecx, eax
call fcn.0041e430
lea eax, [esp + 0x3848]
push eax
lea ecx, [esp + 0x1584]
call fcn.00419480
lea eax, [esp + 0x1598]
push eax
push str.now_version
lea ecx, [esp + 0x38]
call fcn.0041e2d0
push ecx
mov ecx, eax
call fcn.0041e320
add esp, 4
lea ecx, [esp + 0x2498]
mov edx, eax
call fcn.00403110
push eax
lea eax, [esp + 0x1588]
push eax
lea eax, [esp + 0xb0c]
push eax
lea edx, [esp + 0xa38]
lea ecx, [esp + 0xaf8]
call fcn.00409f00
add esp, 0x10
lea ecx, [esp + 0x2494]
call fcn.004199d0
lea ecx, [esp + 0x1580]
call fcn.00419390
lea ecx, [esp + 0x1598]
jmp 0x40dc6a
mov edx, 0x4eb07c
lea ecx, [esp + 0xab8]
call fcn.0041df60
test al, al
jne 0x40db64
mov edx, 0x4eb080
lea ecx, [esp + 0xab8]
call fcn.0041df60
test al, al
je 0x40dc6f
sub esp, 0x18
lea eax, [esp + 0xad0]
mov ecx, esp
mov edx, str.auto_update
push eax
call fcn.0041df90
add esp, 4
lea ecx, [esp + 0x48]
call fcn.00418a70
mov ecx, eax
call fcn.0041e320
cmp eax, 1
jne 0x40dc6f
lea eax, [esp + 0x15e0]
mov edx, str.download_url
push eax
sub esp, 0x1c
lea eax, [esp + 0xad8]
mov ecx, esp
push eax
call fcn.0041df90
add esp, 4
lea ecx, [esp + 0x50]
call fcn.00418a70
add esp, 4
mov ecx, eax
call fcn.0041e430
lea eax, [esp + 0x3848]
push eax
lea ecx, [esp + 0x15b4]
call fcn.00419480
lea eax, [esp + 0x15e0]
mov edx, str.now_version
push eax
sub esp, 0x18
lea eax, [esp + 0xad4]
mov ecx, esp
push eax
call fcn.0041df90
add esp, 4
lea ecx, [esp + 0x4c]
call fcn.00418a70
push ecx
mov ecx, eax
call fcn.0041e320
add esp, 4
lea ecx, [esp + 0x24b0]
mov edx, eax
call fcn.00403110
push eax
lea eax, [esp + 0x15b8]
push eax
lea eax, [esp + 0xb0c]
push eax
lea edx, [esp + 0xa38]
lea ecx, [esp + 0xaf8]
call fcn.00409f00
add esp, 0x10
lea ecx, [esp + 0x24ac]
call fcn.004199d0
lea ecx, [esp + 0x15b0]
call fcn.00419390
lea ecx, [esp + 0x15e0]
call fcn.004199d0
mov edx, 0x4eae20
lea ecx, [esp + 0xbd8]
call fcn.0041df60
test al, al
je 0x40dd86
lea ecx, [esp + 0x1118]
call fcn.004099c0
mov ebx, dword [esp + 0x10]
lea edx, [esp + 0x1118]
or ebx, 4
lea ecx, [esp + 0x16b4]
push 0x4eb084
mov dword [esp + 0x14], ebx
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00409be0
test al, al
je 0x40dd23
or ebx, 8
lea edx, [esp + 0x1118]
push 0x4eb090
lea ecx, [esp + 0x16a0]
mov dword [esp + 0x14], ebx
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00409be0
test al, al
je 0x40dd23
or ebx, 0x10
lea edx, [esp + 0x1118]
push 0x4eb098
lea ecx, [esp + 0x24c8]
mov dword [esp + 0x14], ebx
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00409be0
test al, al
je 0x40dd23
xor bl, bl
jmp 0x40dd25
mov bl, 1
mov eax, dword [esp + 0x10]
test al, 0x10
je 0x40dd44
and eax, 0xffffffef
lea ecx, [esp + 0x24c4]
mov dword [esp + 0x10], eax
call fcn.00419390
mov eax, dword [esp + 0x10]
test al, 8
je 0x40dd5f
and eax, 0xfffffff7
lea ecx, [esp + 0x169c]
mov dword [esp + 0x10], eax
call fcn.00419390
mov eax, dword [esp + 0x10]
and eax, 0xfffffffb
lea ecx, [esp + 0x16b4]
mov dword [esp + 0x10], eax
call fcn.00419390
test bl, bl
jne 0x40f819
lea ecx, [esp + 0x1118]
call fcn.00419390
mov edx, 0x4eaadc
lea ecx, [esp + 0xc68]
call fcn.0041e0f0
test al, al
je 0x40ddd9
lea eax, [esp + 0x3e60]
push eax
lea ecx, [esp + 0x15cc]
call fcn.00419bf0
lea eax, [esp + 0xb90]
push eax
lea edx, [esp + 0x15cc]
lea ecx, [esp + 0xad4]
call fcn.00408110
add esp, 4
lea ecx, [esp + 0x15c8]
call fcn.004199d0
lea eax, [esp + 0xa28]
push eax
lea eax, [esp + 0xe4c]
push eax
lea ecx, [esp + 0xe98]
call fcn.00415e40
lea ecx, [esp + 0x3848]
call fcn.004045c0
push 1
test al, al
lea eax, [esp + 0x384c]
push 0x40
jne 0x40dfe9
push 2
push eax
lea ecx, [esp + 0x550]
call fcn.004131c0
lea ecx, [esp + 0x540]
call fcn.004131b0
test al, al
je 0x40fe79
mov edx, 0x10
lea ecx, [esp + 0x1280]
call fcn.00406170
lea ecx, [esp + 0x16fc]
call fcn.00404f70
push eax
push 0x4ea944
lea edx, [esp + 0x1288]
lea ecx, [esp + 0x16ec]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0x16d0]
mov edx, eax
call fcn.0041d760
add esp, 4
lea ecx, [esp + 0xa10]
push eax
call fcn.00419a20
lea ecx, [esp + 0x16cc]
call fcn.004199d0
lea ecx, [esp + 0x16e4]
call fcn.004199d0
lea ecx, [esp + 0x16fc]
call fcn.004199d0
push 0x4eb1a8
lea edx, [esp + 0x1284]
lea ecx, [esp + 0x1718]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0xa40]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1714]
call fcn.004199d0
push str.QND.conf
lea edx, [esp + 0x1284]
lea ecx, [esp + 0x1730]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0xa58]
push eax
call fcn.00419a20
lea ecx, [esp + 0x172c]
call fcn.004199d0
lea eax, [esp + 0xa58]
push eax
push 0x4eaea0
lea eax, [esp + 0xa48]
push eax
push 0x4eaea0
lea edx, [esp + 0xa20]
lea ecx, [esp + 0x1784]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0x1768]
mov edx, eax
call fcn.0041d6b0
add esp, 4
lea ecx, [esp + 0x174c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x141c]
mov edx, eax
call fcn.0041d6b0
add esp, 4
lea ecx, [esp + 0x1744]
call fcn.004199d0
lea ecx, [esp + 0x175c]
call fcn.004199d0
lea ecx, [esp + 0x1774]
call fcn.004199d0
lea edx, [esp + 0x1418]
lea ecx, [esp + 0x540]
call fcn.0041e530
lea ecx, [esp + 0x540]
call fcn.00413170
lea ecx, [esp + 0x1418]
call fcn.004199d0
lea ecx, [esp + 0x1280]
call fcn.004199d0
lea ecx, [esp + 0x540]
call fcn.00412db0
jmp 0x40e2ed
push 1
push eax
lea ecx, [esp + 0x498]
call fcn.00416cf0
lea ecx, [esp + 0x488]
call fcn.004153c0
test al, al
je 0x41240f
push 1
lea ecx, [esp + 0x754]
call fcn.004180b0
lea ecx, [esp + 0x488]
call fcn.004153d0
push eax
lea ecx, [esp + 0x764]
call fcn.004183e0
lea eax, [esp + 0x13b8]
push eax
lea ecx, [esp + 0x754]
call fcn.00417db0
lea ecx, [esp + 0x488]
call fcn.00416cb0
push 1
push 3
lea eax, [esp + 0x13c0]
push eax
lea ecx, [esp + 0x5fc]
call fcn.00417ea0
push 0x7c
lea edx, [esp + 0xa14]
lea ecx, [esp + 0x5f4]
call fcn.0041d580
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call fcn.00402da0
test al, al
je 0x40e0e2
push 0x7c
lea edx, [esp + 0xa44]
lea ecx, [esp + 0x5f4]
call fcn.0041d580
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call fcn.00402da0
test al, al
je 0x40e0e2
lea edx, [esp + 0xa58]
lea ecx, [esp + 0x5f0]
call fcn.0041e550
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call fcn.00402da0
test al, al
jne 0x40e2bd
push 1
push 0x40
push 2
lea eax, [esp + 0x3854]
push eax
lea ecx, [esp + 0x6b0]
call fcn.004131c0
lea ecx, [esp + 0x6a0]
call fcn.004131b0
test al, al
je 0x412397
mov edx, 0x10
lea ecx, [esp + 0x1298]
call fcn.00406170
lea ecx, [esp + 0x17bc]
call fcn.00404f70
push eax
push 0x4ea944
lea edx, [esp + 0x12a0]
lea ecx, [esp + 0x17ac]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0x1790]
mov edx, eax
call fcn.0041d760
add esp, 4
lea ecx, [esp + 0xa10]
push eax
call fcn.00419a20
lea ecx, [esp + 0x178c]
call fcn.004199d0
lea ecx, [esp + 0x17a4]
call fcn.004199d0
lea ecx, [esp + 0x17bc]
call fcn.004199d0
push 0x4eb1a8
lea edx, [esp + 0x129c]
lea ecx, [esp + 0x17d8]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0xa40]
push eax
call fcn.00419a20
lea ecx, [esp + 0x17d4]
call fcn.004199d0
push str.QND.conf
lea edx, [esp + 0x129c]
lea ecx, [esp + 0x17f0]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0xa58]
push eax
call fcn.00419a20
lea ecx, [esp + 0x17ec]
call fcn.004199d0
lea eax, [esp + 0xa58]
push eax
push 0x4eaea0
lea eax, [esp + 0xa48]
push eax
push 0x4eaea0
lea edx, [esp + 0xa20]
lea ecx, [esp + 0x1844]
call fcn.0041d5a0
add esp, 4
lea ecx, [esp + 0x1828]
mov edx, eax
call fcn.0041d6b0
add esp, 4
lea ecx, [esp + 0x180c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1434]
mov edx, eax
call fcn.0041d6b0
add esp, 4
lea ecx, [esp + 0x1804]
call fcn.004199d0
lea ecx, [esp + 0x181c]
call fcn.004199d0
lea ecx, [esp + 0x1834]
call fcn.004199d0
lea edx, [esp + 0x1430]
lea ecx, [esp + 0x6a0]
call fcn.0041e530
lea ecx, [esp + 0x6a0]
call fcn.00413170
lea ecx, [esp + 0x1430]
call fcn.004199d0
lea ecx, [esp + 0x1298]
call fcn.004199d0
lea ecx, [esp + 0x6a0]
call fcn.00412db0
lea ecx, [esp + 0x5f0]
call fcn.00404e20
lea ecx, [esp + 0x13b8]
call fcn.004199d0
lea ecx, [esp + 0x750]
call fcn.00404e20
lea ecx, [esp + 0x488]
call fcn.0040c260
lea edx, [esp + 0x3c58]
mov ecx, 0x104
call fcn.00409de0
test eax, eax
je 0x412377
lea edx, [esp + 0xa10]
lea ecx, [esp + 0x184c]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x3c5c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x184c]
call fcn.00419390
lea edx, [esp + 0x4378]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412377
lea edx, [esp + 0xa40]
lea ecx, [esp + 0x1864]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x437c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x1864]
call fcn.00419390
lea edx, [esp + 0x4b98]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412377
lea edx, [esp + 0xa58]
lea ecx, [esp + 0x187c]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x4b9c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x187c]
call fcn.00419390
lea edx, [esp + 0x2e20]
mov ecx, 0x104
call fcn.00409de0
test eax, eax
je 0x412377
lea edx, [esp + 0xa10]
lea ecx, [esp + 0x1894]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x2e24]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x1894]
call fcn.00419390
lea edx, [esp + 0x3028]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412377
lea edx, [esp + 0xa40]
lea ecx, [esp + 0x18ac]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x302c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x18ac]
call fcn.00419390
lea edx, [esp + 0x3a50]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412377
lea edx, [esp + 0xa58]
lea ecx, [esp + 0x18c4]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x3a54]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x18c4]
call fcn.00419390
mov edx, 0x4eae20
lea ecx, [esp + 0xb48]
call fcn.0041e0f0
test al, al
je 0x40e5cc
push 0
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0xa34]
call fcn.004197c0
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
push 0xfde9
call ebx
xor ecx, ecx
mov esi, eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049f202
add esp, 4
lea ecx, [esp + 0xa28]
mov edi, eax
push esi
push edi
push 0xffffffffffffffff
call fcn.004197c0
push eax
push 0
push 0xfde9
call ebx
lea ecx, [esp + 0x1448]
call fcn.00408d20
lea ecx, [esp + 0x1448]
call fcn.00419220
push eax
lea eax, [esp + 0x478c]
push 0x104
push eax
call fcn.004afcb1
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [esp + 0x4794]
add esp, 0xc
push eax
call ebx
push edi
lea eax, [esp + 0x478c]
push eax
lea eax, [esp + 0x3648]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push edi
call fcn.0049f1fd
add esp, 4
lea ecx, [esp + 0x1448]
call fcn.00419390
jmp 0x40e680
lea edx, [esp + 0x4990]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x412357
push 0
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0xa34]
call fcn.004197c0
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
push 0xfde9
call ebx
xor ecx, ecx
mov esi, eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049f202
add esp, 4
lea ecx, [esp + 0xa28]
mov edi, eax
push esi
push edi
push 0xffffffffffffffff
call fcn.004197c0
push eax
push 0
push 0xfde9
call ebx
push edi
lea eax, [esp + 0x4994]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea eax, [esp + 0x4990]
push eax
lea eax, [esp + 0x3644]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
push edi
call fcn.0049f1fd
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
add esp, 4
lea eax, [esp + 0x3c58]
push eax
lea eax, [esp + 0x4174]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea eax, [esp + 0x4170]
push eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
lea eax, [esp + 0x4170]
push eax
call edi
cmp eax, 0xffffffff
je 0x40e6c0
test al, 0x10
jne 0x40e6f6
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [esp + 0x4170]
push 0
push eax
call esi
test eax, eax
jne 0x40e6fc
push 0x10
push 0x4ea9d4
push str.Unable_to_create_directory
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [esp + 0x4378]
push eax
lea eax, [esp + 0x4584]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea eax, [esp + 0x4580]
push eax
call ebx
lea eax, [esp + 0x4580]
push eax
call edi
cmp eax, 0xffffffff
je 0x40e736
test al, 0x10
jne 0x40e746
push 0
lea eax, [esp + 0x4584]
push eax
call esi
test eax, eax
je 0x40e6d6
lea ecx, [esp + 0xdd0]
call fcn.00419580
lea ecx, [esp + 0x3028]
xor bh, bh
call fcn.004045c0
test al, al
lea eax, [esp + 0x3028]
jne 0x40ea7c
push eax
lea ecx, [esp + 0x18e0]
call fcn.00419480
mov ecx, eax
call fcn.00404ae0
lea ecx, [esp + 0x18dc]
mov bl, al
call fcn.00419390
test bl, bl
jne 0x40e853
lea ecx, [esp + 0x10d0]
call fcn.004099c0
lea ecx, [esp + 0x10d0]
call fcn.00404ae0
lea edx, [esp + 0x10d0]
test al, al
je 0x40ffe8
push str.TempExtract
lea ecx, [esp + 0x18f8]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0xdd0]
push eax
call fcn.004193f0
lea ecx, [esp + 0x18f4]
call fcn.00419390
lea ecx, [esp + 0xdd0]
call fcn.00404c60
test al, al
je 0x40fec1
push 0x4eb3a4
lea edx, [esp + 0xdd4]
mov bh, 1
lea ecx, [esp + 0x1910]
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x302c]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea ecx, [esp + 0x190c]
call fcn.00419390
lea ecx, [esp + 0x10d0]
call fcn.00419390
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
push 0
mov edx, 0x4eae20
lea ecx, [esp + 0xaa4]
call fcn.0041df60
mov ecx, dword [esp + 0x68]
lea edx, [esp + 0x3044]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x410069
push str.Released_excat1.exe_successfully._n
call fcn.0042c7d0
add esp, 4
test bh, bh
je 0x40ed8d
push 0x208
lea eax, [esp + 0x302c]
push 0
push eax
call fcn.004a0b90
add esp, 0xc
lea edx, [esp + 0x3028]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x41003d
lea edx, [esp + 0xa40]
lea ecx, [esp + 0x1924]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x302c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x1924]
call fcn.00419390
push 1
lea eax, [esp + 0x302c]
push eax
push 0x4eb3a4
lea edx, [esp + 0xddc]
lea ecx, [esp + 0x1948]
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [esp + 0x193c]
mov esi, eax
call fcn.00419390
test esi, esi
jne 0x40ed8d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1b50]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1b3c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1374]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1b34]
call fcn.004199d0
lea ecx, [esp + 0x1b4c]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x40ea39
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1b98]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x1b84]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1b68]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1370]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1b64]
call fcn.004199d0
lea ecx, [esp + 0x1b7c]
call fcn.004199d0
lea ecx, [esp + 0x1b94]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1378]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1370]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x40eaf3
lea eax, [esp + 0x60]
mov dword [esp + 0x60], 0
push eax
push esi
mov dword [esp + 0x6c], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x40eaec
mov eax, dword [esp + 0x60]
or eax, dword [esp + 0x64]
jne 0x40eaec
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x3230]
push eax
call ebx
lea eax, [esp + 0x3028]
push eax
call ebx
jmp 0x40ef9c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x2df0]
lea ecx, [esp + 0x3028]
call fcn.00404030
test al, al
je 0x4121e6
lea edx, [esp + 0x2e10]
lea ecx, [esp + 0xc20]
call fcn.004041d0
test al, al
je 0x412075
lea ecx, [esp + 0x2df0]
mov esi, 0xc
lea edx, [esp + 0x2e10]
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40eb56
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40eb40
jmp 0x40ed8d
lea edx, [esp + 0x2e20]
lea ecx, [esp + 0x10b8]
call fcn.00404300
lea edx, [esp + 0x68]
lea ecx, [esp + 0x10b8]
call fcn.004085f0
test al, al
je 0x40eb95
mov ecx, dword [esp + 0x68]
call fcn.00408760
test al, al
je 0x40eb95
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x3028]
push eax
lea ecx, [esp + 0x1958]
call fcn.00419480
mov ecx, eax
call fcn.00404ae0
lea ecx, [esp + 0x1954]
mov bl, al
call fcn.00419390
test bl, bl
jne 0x40ec80
lea ecx, [esp + 0x10e8]
call fcn.004099c0
lea ecx, [esp + 0x10e8]
call fcn.00404ae0
lea edx, [esp + 0x10e8]
test al, al
je 0x4104de
push str.TempExtract
lea ecx, [esp + 0x1970]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0xdd0]
push eax
call fcn.004193f0
lea ecx, [esp + 0x196c]
call fcn.00419390
lea ecx, [esp + 0xdd0]
call fcn.00404c60
test al, al
je 0x4103c3
push 0x4eb3a4
lea edx, [esp + 0xdd4]
mov bh, 1
lea ecx, [esp + 0x1988]
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x302c]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea ecx, [esp + 0x1984]
call fcn.00419390
lea ecx, [esp + 0x10e8]
call fcn.00419390
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
push 0
mov edx, 0x4eae20
lea ecx, [esp + 0xaa4]
call fcn.0041df60
mov ecx, dword [esp + 0x68]
lea edx, [esp + 0x3044]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x411d0e
test bh, bh
je 0x40ed81
push 0x208
lea eax, [esp + 0x302c]
push 0
push eax
call fcn.004a0b90
add esp, 0xc
lea edx, [esp + 0x3028]
mov ecx, 0x104
call fcn.00409e80
test eax, eax
je 0x410642
lea edx, [esp + 0xa40]
lea ecx, [esp + 0x199c]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x302c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x199c]
call fcn.00419390
push 1
lea eax, [esp + 0x302c]
push eax
push 0x4eb3a4
lea edx, [esp + 0xddc]
lea ecx, [esp + 0x19c0]
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [esp + 0x19b4]
mov esi, eax
call fcn.00419390
test esi, esi
je 0x410533
lea ecx, [esp + 0x10b8]
call fcn.00419390
lea ecx, [esp + 0x4378]
call fcn.0040c320
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x3244]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [esp + 0xe60]
push 0
push esi
call fcn.00419af0
push 0
push 0
push esi
push 0
lea ecx, [esp + 0xe70]
call fcn.00419820
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x3244]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea ecx, [esp + 0x3a50]
call fcn.004045c0
push 1
test al, al
lea eax, [esp + 0x3a54]
push 0x40
jne 0x40ee79
push 0x20
push eax
lea ecx, [esp + 0x338]
call fcn.004131c0
mov eax, dword [esp + 0x328]
lea ecx, [esp + 0x328]
add ecx, dword [eax + 4]
call fcn.00402db0
test al, al
jne 0x410662
lea ecx, [esp + 0xe60]
call fcn.004197b0
push 0
push eax
lea ecx, [esp + 0xe68]
call fcn.004197c0
push eax
lea ecx, [esp + 0x334]
call fcn.00418280
lea ecx, [esp + 0x328]
call fcn.00413170
lea ecx, [esp + 0x328]
jmp 0x40eee1
push 0x30
push eax
lea ecx, [esp + 0x3e8]
call fcn.004131c0
mov eax, dword [esp + 0x3d8]
lea ecx, [esp + 0x3d8]
add ecx, dword [eax + 4]
call fcn.00402db0
test al, al
jne 0x411c9f
lea ecx, [esp + 0xe60]
call fcn.004197b0
push 0
push eax
lea ecx, [esp + 0xe68]
call fcn.004197c0
push eax
lea ecx, [esp + 0x3e4]
call fcn.00418280
lea ecx, [esp + 0x3d8]
call fcn.00413170
lea ecx, [esp + 0x3d8]
call fcn.00412db0
lea ecx, [esp + 0xe78]
call fcn.00419d50
lea ecx, [esp + 0x2e20]
call fcn.004045c0
test al, al
je 0x4110ee
push 0
push 0x80
push 3
push 0
push 1
push closesocket
lea eax, [esp + 0x2e38]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4106f7
lea eax, [esp + 0x58]
mov dword [esp + 0x58], 0
push eax
push esi
mov dword [esp + 0x64], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x4106f0
mov eax, dword [esp + 0x58]
or eax, dword [esp + 0x5c]
jne 0x4106f0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x3230]
push eax
call ebx
lea eax, [esp + 0x2e20]
push eax
call ebx
lea ecx, [esp + 0xe78]
call fcn.004199d0
lea ecx, [esp + 0xe60]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
call fcn.00419390
lea ecx, [esp + 0x30]
call fcn.00418c80
lea ecx, [esp + 0xe18]
call fcn.004199d0
lea ecx, [esp + 0xe30]
call fcn.00419390
lea ecx, [esp + 0xde8]
call fcn.004199d0
lea ecx, [esp + 0xe00]
call fcn.004199d0
lea ecx, [esp + 0x20]
call fcn.004188b0
lea ecx, [esp + 0xd70]
call fcn.004199d0
lea ecx, [esp + 0xd40]
call fcn.004199d0
lea ecx, [esp + 0x14]
call fcn.004188b0
lea ecx, [esp + 0xd88]
call fcn.004199d0
lea ecx, [esp + 0xdb8]
call fcn.004199d0
lea ecx, [esp + 0xda0]
call fcn.00419390
lea ecx, [esp + 0xd58]
call fcn.00419390
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00412c20
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
jmp 0x40cd00
push str.Failed_to_release_excat1.exe_error__n
call fcn.0042c7d0
add esp, 4
lea eax, [esp + 0x3230]
push 0x10
push 0x4eadf0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0xd28]
call fcn.00419390
jmp 0x40cc8d
push 0x4eae54
lea ecx, [esp + 0x12c8]
call fcn.00416e60
push 0x4ea9d4
lea ecx, [esp + 0xf8c]
call fcn.00417690
push 0x4eae68
lea ecx, [esp + 0x12b4]
call fcn.00416e60
push 0x4ea9dc
lea ecx, [esp + 0xf84]
call fcn.00417690
push str.Parsing_configuration_file_error
lea ecx, [esp + 0x1658]
call fcn.004175c0
push str.Error
lea ecx, [esp + 0x107c]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x40f234
lea ecx, [esp + 0x12b0]
call fcn.00416e40
lea ecx, [esp + 0xf80]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf84]
call fcn.00412e40
lea ecx, [esp + 0x12b4]
jmp 0x40f29b
cmp eax, 3
jne 0x40f26e
lea ecx, [esp + 0x1654]
call fcn.00417590
lea ecx, [esp + 0x1078]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x107c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x165c]
call fcn.00412e40
jmp 0x40f2a1
lea ecx, [esp + 0x12c4]
call fcn.00416e40
lea ecx, [esp + 0xf88]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf8c]
call fcn.00412e40
lea ecx, [esp + 0x12c8]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x2590]
call fcn.00415e70
lea ecx, [esp + 0x270]
call fcn.00412c20
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00412c20
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
lea ecx, [esp + 0xd28]
call fcn.00419390
jmp 0x40cc8d
push fcn.0041e220
push ecx
mov edx, str.Unable_to_open_the_param_file_for_reading.
mov ecx, 0x4f86a8
call fcn.0041d9c0
add esp, 4
mov ecx, eax
call fcn.00418690
push str.Unable_to_open_the_param_file_for_reading
lea ecx, [esp + 0x2538]
call fcn.00413820
push 0x4ea9d4
lea ecx, [esp + 0xf94]
call fcn.00417690
lea ecx, [esp + 0x2534]
call fcn.004137e0
lea ecx, [esp + 0xf90]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf94]
call fcn.00412e40
push eax
lea ecx, [esp + 0x253c]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x2590]
call fcn.00415e70
lea ecx, [esp + 0x270]
call fcn.00412c20
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00412c20
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
lea ecx, [esp + 0xd28]
call fcn.00419390
jmp 0x40cc8d
push str.Failed_to_release_excat1.exe_error__n
call fcn.0042c7d0
add esp, 4
lea eax, [esp + 0x3230]
push 0x10
push 0x4eadf0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x40f2c2
push 0
push 0x4eaf14
push 0x4eaf20
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x20]
call fcn.004188b0
lea ecx, [esp + 0xd70]
call fcn.004199d0
lea ecx, [esp + 0xd40]
call fcn.004199d0
lea ecx, [esp + 0x14]
call fcn.004188b0
lea ecx, [esp + 0xd88]
call fcn.004199d0
lea ecx, [esp + 0xdb8]
call fcn.004199d0
lea ecx, [esp + 0xda0]
call fcn.00419390
lea ecx, [esp + 0xd58]
call fcn.00419390
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00412c20
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
lea ecx, [esp + 0xd28]
call fcn.00419390
lea ecx, [esp + 0xd10]
call fcn.004199d0
lea ecx, [esp + 0xcf8]
call fcn.004199d0
lea ecx, [esp + 0xce0]
call fcn.004199d0
lea ecx, [esp + 0x148]
call fcn.00412c20
lea ecx, [esp + 0xf20]
call fcn.00415e70
lea ecx, [esp + 0xbf0]
call fcn.004199d0
lea ecx, [esp + 0xcb0]
call fcn.00419390
lea ecx, [esp + 0xb60]
call fcn.004199d0
lea ecx, [esp + 0xc98]
call fcn.004199d0
lea ecx, [esp + 0xad0]
call fcn.004199d0
lea ecx, [esp + 0xa58]
call fcn.004199d0
lea ecx, [esp + 0xa40]
call fcn.004199d0
lea ecx, [esp + 0xc80]
call fcn.004199d0
lea ecx, [esp + 0xa10]
call fcn.004199d0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4fa0]
xor ecx, esp
call fcn.0049f18e
mov esp, ebp
pop ebp
ret 0x10
lea edx, [esp + 0x3438]
mov ecx, 0x104
call fcn.00409de0
push str.weiduan.exe
lea eax, [esp + 0x343c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0xa28]
push 0
push 0x4eb0b8
call fcn.00419600
push eax
push 0
lea eax, [esp + 0x1258]
push eax
lea ecx, [esp + 0xa34]
call fcn.004195a0
lea ecx, [esp + 0xb30]
call fcn.00419710
test al, al
jne 0x40f892
lea eax, [esp + 0xb30]
push eax
lea ecx, [esp + 0x1254]
call fcn.004199a0
push 0x4eaa78
lea ecx, [esp + 0x1a30]
call fcn.00408d20
push eax
push 0x4eb0bc
lea edx, [esp + 0x125c]
lea ecx, [esp + 0x1a20]
call fcn.00404680
push eax
mov edx, 0x4eaa78
lea ecx, [esp + 0x1a0c]
call fcn.0041df00
add esp, 4
lea ecx, [esp + 0x19f0]
mov edx, eax
call fcn.0041d7f0
add esp, 4
lea ecx, [esp + 0x19d4]
mov edx, eax
call fcn.0041d860
add esp, 4
lea ecx, [esp + 0x1104]
mov edx, eax
call fcn.0041d7f0
add esp, 4
lea ecx, [esp + 0x19cc]
call fcn.00419390
lea ecx, [esp + 0x19e4]
call fcn.00419390
lea ecx, [esp + 0x19fc]
call fcn.00419390
lea ecx, [esp + 0x1a14]
call fcn.00419390
lea ecx, [esp + 0x1a2c]
call fcn.00419390
lea ecx, [esp + 0x3438]
call fcn.004045c0
test al, al
je 0x40fd0a
lea edx, [esp + 0x2da0]
lea ecx, [esp + 0x3438]
call fcn.00404030
test al, al
jne 0x40fa8c
push 0x4eb0c4
lea ecx, [esp + 0x22c4]
call fcn.00413460
push 0x4ea9d4
lea ecx, [esp + 0xfa4]
call fcn.00417690
push 0x4eb0e8
lea ecx, [esp + 0x22a0]
call fcn.00413460
push 0x4ea9dc
lea ecx, [esp + 0xf9c]
call fcn.00417690
push str.Unable_to_open_the_specified_file_to_calculate_its_MD5_hash_value.
lea ecx, [esp + 0x2874]
call fcn.00413380
push str.Error
lea ecx, [esp + 0x1074]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x40fa17
lea ecx, [esp + 0x229c]
call fcn.00413420
lea ecx, [esp + 0xf98]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf9c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x22a4]
call fcn.00412e40
jmp 0x40fbb3
cmp eax, 3
jne 0x40fa54
lea ecx, [esp + 0x2870]
call fcn.00413330
lea ecx, [esp + 0x1070]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x1074]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2878]
call fcn.00412e40
jmp 0x40fbb3
lea ecx, [esp + 0x22c0]
call fcn.00413420
lea ecx, [esp + 0xfa0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfa4]
call fcn.00412e40
push eax
lea ecx, [esp + 0x22c8]
call fcn.00412e40
jmp 0x40fbb3
lea edx, [esp + 0x2dd0]
lea ecx, [esp + 0xc08]
call fcn.004041d0
test al, al
jne 0x40fc78
push 0x4eb154
lea ecx, [esp + 0x1304]
call fcn.00416ef0
push 0x4ea9d4
lea ecx, [esp + 0xfb4]
call fcn.00417690
push 0x4eb168
lea ecx, [esp + 0x1318]
call fcn.00416ef0
push 0x4ea9dc
lea ecx, [esp + 0xfac]
call fcn.00417690
push str.Conversion_of_the_mini_client_MD5_failed.
lea ecx, [esp + 0x250c]
call fcn.00413820
push str.Error
lea ecx, [esp + 0x1044]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x40fb46
lea ecx, [esp + 0x1314]
call fcn.00416ed0
lea ecx, [esp + 0xfa8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfac]
call fcn.00412e40
lea ecx, [esp + 0x1318]
jmp 0x40fbad
cmp eax, 3
jne 0x40fb80
lea ecx, [esp + 0x2508]
call fcn.004137e0
lea ecx, [esp + 0x1040]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x1044]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2510]
call fcn.00412e40
jmp 0x40fbb3
lea ecx, [esp + 0x1300]
call fcn.00416ed0
lea ecx, [esp + 0xfb0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfb4]
call fcn.00412e40
lea ecx, [esp + 0x1304]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1100]
call fcn.00419390
lea ecx, [esp + 0x1250]
call fcn.004199d0
lea ecx, [esp + 0x1118]
call fcn.00419390
lea ecx, [esp + 0x30]
call fcn.00418c80
lea ecx, [esp + 0xe18]
call fcn.004199d0
lea ecx, [esp + 0xe30]
call fcn.00419390
lea ecx, [esp + 0xde8]
call fcn.004199d0
lea ecx, [esp + 0xe00]
call fcn.004199d0
lea ecx, [esp + 0x20]
call fcn.004188b0
lea ecx, [esp + 0xd70]
call fcn.004199d0
lea ecx, [esp + 0xd40]
call fcn.004199d0
lea ecx, [esp + 0x14]
call fcn.004188b0
lea ecx, [esp + 0xd88]
call fcn.004199d0
lea ecx, [esp + 0xdb8]
call fcn.004199d0
lea ecx, [esp + 0xda0]
call fcn.00419390
lea ecx, [esp + 0xd58]
call fcn.00419390
jmp 0x40f2c2
lea ecx, [esp + 0x2da0]
mov esi, 0xc
lea edx, [esp + 0x2dd0]
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40fca6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40fc90
jmp 0x40fdf4
lea eax, [esp + 0x3438]
push eax
lea ecx, [esp + 0x1a48]
call fcn.00419480
lea edx, [esp + 0x6c]
mov ecx, eax
call fcn.004085f0
lea ecx, [esp + 0x1a44]
mov bl, al
call fcn.00419390
test bl, bl
je 0x40fcef
mov ecx, dword [esp + 0x6c]
call fcn.00408760
test al, al
je 0x40fcef
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
mov ecx, dword [esp + 0x5c]
jmp 0x40fddd
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
mov ecx, dword [esp + 0x5c]
lea edx, [esp + 0x3450]
push 1
push 1
call fcn.00407760
add esp, 0x20
test eax, eax
jne 0x40fdf4
lea edx, [esp + 0x3438]
mov ecx, 0x104
call fcn.00409de0
push 0x4ea3bc
push ecx
mov edx, 6
lea ecx, [esp + 0x1a94]
call fcn.00406170
add esp, 4
lea ecx, [esp + 0x1a78]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1a5c]
mov edx, eax
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x343c]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x1a5c]
call fcn.00419390
lea ecx, [esp + 0x1a74]
call fcn.004199d0
lea ecx, [esp + 0x1a8c]
call fcn.004199d0
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
mov ecx, 0x84
push 1
push 1
lea edx, [esp + 0x3458]
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x40fe17
lea ecx, [esp + 0x1100]
call fcn.00419220
push eax
push 1
mov edx, 1
lea ecx, [esp + 0x3440]
call fcn.004038c0
add esp, 8
lea ecx, [esp + 0x1100]
call fcn.00419390
lea ecx, [esp + 0x1250]
call fcn.004199d0
lea ecx, [esp + 0x1118]
call fcn.00419390
lea ecx, [esp + 0x30]
call fcn.00418c80
lea ecx, [esp + 0xe18]
call fcn.004199d0
lea ecx, [esp + 0xe30]
call fcn.00419390
lea ecx, [esp + 0xde8]
call fcn.004199d0
lea ecx, [esp + 0xe00]
call fcn.004199d0
jmp 0x40f5de
lea eax, [esp + 0x3848]
push eax
push str.Unable_to_create_and_write_to_file:__s_n
call fcn.0042c7d0
add esp, 8
push 0x10
push 0x4ea9d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, str.Error1:
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x540]
call fcn.00412db0
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb2e0
call esi
mov edx, eax
lea ecx, [esp + 0x1ac0]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1aac]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x132c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1aa4]
call fcn.004199d0
lea ecx, [esp + 0x1abc]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x40ff99
push 0x4eb340
call esi
mov edx, eax
lea ecx, [esp + 0x1b08]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x1af4]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1ad8]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1328]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1ad4]
call fcn.004199d0
lea ecx, [esp + 0x1aec]
call fcn.004199d0
lea ecx, [esp + 0x1b04]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1330]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1328]
call fcn.004199d0
lea ecx, [esp + 0x10d0]
call fcn.00419390
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
lea ecx, [esp + 0x1b1c]
call fcn.004045d0
push eax
mov edx, 0x4eb284
lea ecx, [esp + 0x1464]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1b1c]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1468]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1460]
jmp 0x40ffbf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
push str.Failed_to_release_excat1.exe_error__n
call fcn.0042c7d0
add esp, 4
lea ecx, [esp + 0x1490]
push 0x4eb328
call fcn.00417520
push 0x4eb3b8
lea ecx, [esp + 0x26b4]
call fcn.004130f0
push 0x4ea9d4
lea ecx, [esp + 0xfc4]
call fcn.00417690
push 0x4eb3f0
lea ecx, [esp + 0x147c]
call fcn.00417520
push 0x4eb408
lea ecx, [esp + 0x267c]
call fcn.004130f0
push 0x4ea9dc
lea ecx, [esp + 0xfbc]
call fcn.00417690
push str.Qianniaodun_Shield_protection_program_failed_to_start__
lea ecx, [esp + 0x27cc]
call fcn.00413020
push str.___please_check_if_its_being_blocked._nIf_there_is_a_prompt_about_blocking__please_click_trust_or_agree.
lea ecx, [esp + 0x2a04]
call fcn.00413530
push str.Error
lea ecx, [esp + 0x106c]
call fcn.00417660
lea ecx, [esp + 0x1130]
call fcn.00419d50
lea ecx, [esp + 0x11c0]
call fcn.00419d50
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x4101e6
lea ecx, [esp + 0x1478]
call fcn.00417500
lea ecx, [esp + 0x2678]
call fcn.004130b0
lea ecx, [esp + 0xfb8]
call fcn.00417680
lea ecx, [esp + 0x2678]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x1be0]
call fcn.004031f0
push eax
lea ecx, [esp + 0x1480]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x1bcc]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1bb0]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1130]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1bac]
call fcn.004199d0
lea ecx, [esp + 0x1bc4]
call fcn.004199d0
lea ecx, [esp + 0x1bdc]
call fcn.004199d0
lea ecx, [esp + 0xfb8]
jmp 0x410351
cmp eax, 3
jne 0x4102a5
lea ecx, [esp + 0x27c8]
call fcn.00412fe0
lea ecx, [esp + 0x2a00]
call fcn.004134e0
lea ecx, [esp + 0x1068]
call fcn.00417640
lea ecx, [esp + 0x2a00]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x1c28]
call fcn.004031f0
push eax
lea ecx, [esp + 0x27d0]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x1c14]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1bf8]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1130]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1bf4]
call fcn.004199d0
lea ecx, [esp + 0x1c0c]
call fcn.004199d0
lea ecx, [esp + 0x1c24]
call fcn.004199d0
lea ecx, [esp + 0x1068]
call fcn.00412e40
jmp 0x410356
lea ecx, [esp + 0x1490]
call fcn.00417500
lea ecx, [esp + 0x26b0]
call fcn.004130b0
lea ecx, [esp + 0xfc0]
call fcn.00417680
lea ecx, [esp + 0x26b0]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x1c70]
call fcn.004031f0
push eax
lea ecx, [esp + 0x1498]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x1c5c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1c40]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1130]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1c3c]
call fcn.004199d0
lea ecx, [esp + 0x1c54]
call fcn.004199d0
lea ecx, [esp + 0x1c6c]
call fcn.004199d0
lea ecx, [esp + 0xfc0]
call fcn.00412e40
push eax
lea ecx, [esp + 0x11c4]
call fcn.00419970
push 0x135
lea ecx, [esp + 0x11c4]
call fcn.004197c0
push eax
lea ecx, [esp + 0x1138]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 4
je 0x412058
lea ecx, [esp + 0x11c0]
call fcn.004199d0
lea ecx, [esp + 0x1130]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb2e0
call esi
mov edx, eax
lea ecx, [esp + 0x1ca0]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1c8c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x138c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1c84]
call fcn.004199d0
lea ecx, [esp + 0x1c9c]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x41049b
push 0x4eb340
call esi
mov edx, eax
lea ecx, [esp + 0x1ce8]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x1cd4]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1cb8]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1388]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1cb4]
call fcn.004199d0
lea ecx, [esp + 0x1ccc]
call fcn.004199d0
lea ecx, [esp + 0x1ce4]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1390]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1388]
call fcn.004199d0
lea ecx, [esp + 0x10e8]
call fcn.00419390
lea ecx, [esp + 0x10b8]
jmp 0x40ffcb
lea ecx, [esp + 0x1cfc]
call fcn.004045d0
push eax
mov edx, 0x4eb284
lea ecx, [esp + 0x153c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1cfc]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1540]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1538]
jmp 0x4104c1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1d30]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1d1c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1344]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1d14]
call fcn.004199d0
lea ecx, [esp + 0x1d2c]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x41060b
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1d78]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x1d64]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1d48]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1340]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1d44]
call fcn.004199d0
lea ecx, [esp + 0x1d5c]
call fcn.004199d0
lea ecx, [esp + 0x1d74]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1348]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1340]
call fcn.004199d0
lea ecx, [esp + 0x10b8]
jmp 0x40ffcb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
lea ecx, [esp + 0x10b8]
jmp 0x40ffcb
push 0x4eb51c
lea ecx, [esp + 0x12dc]
call fcn.00416e60
push 0x4ea9d4
lea ecx, [esp + 0xfcc]
call fcn.00417690
lea ecx, [esp + 0x12d8]
call fcn.00416e40
lea ecx, [esp + 0xfc8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfcc]
call fcn.00412e40
push eax
lea ecx, [esp + 0x12e0]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x328]
call fcn.00412db0
lea ecx, [esp + 0xe60]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x2de0]
lea ecx, [esp + 0x2e20]
call fcn.00404030
test al, al
jne 0x41084a
push 0x4eb0c4
lea ecx, [esp + 0x230c]
call fcn.00413460
push 0x4ea9d4
lea ecx, [esp + 0xfd4]
call fcn.00417690
push 0x4eb0e8
lea ecx, [esp + 0x22e8]
call fcn.00413460
push 0x4ea9dc
lea ecx, [esp + 0xf74]
call fcn.00417690
push str.Unable_to_open_the_specified_file_to_calculate_its_MD5_hash_value.
lea ecx, [esp + 0x28bc]
call fcn.00413380
push str.Error
lea ecx, [esp + 0x1064]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x4107c3
lea ecx, [esp + 0x22e4]
call fcn.00413420
lea ecx, [esp + 0xf70]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf74]
call fcn.00412e40
push eax
lea ecx, [esp + 0x22ec]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
cmp eax, 3
jne 0x410809
lea ecx, [esp + 0x28b8]
call fcn.00413330
lea ecx, [esp + 0x1060]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x1064]
call fcn.00412e40
push eax
lea ecx, [esp + 0x28c0]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x2308]
call fcn.00413420
lea ecx, [esp + 0xfd0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfd4]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2310]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea edx, [esp + 0x2e00]
lea ecx, [esp + 0xc38]
call fcn.004041d0
test al, al
jne 0x41099d
push 0x4eb4e4
lea ecx, [esp + 0x121c]
call fcn.00412f90
push 0x4ea9d4
lea ecx, [esp + 0xfe4]
call fcn.00417690
push 0x4eb4f4
lea ecx, [esp + 0x122c]
call fcn.00412f90
push 0x4ea9dc
lea ecx, [esp + 0xfdc]
call fcn.00417690
push str.Conversion_MD5_failed.
lea ecx, [esp + 0x1404]
call fcn.00412f00
push str.Error
lea ecx, [esp + 0x105c]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x410916
lea ecx, [esp + 0x1228]
call fcn.00412f80
lea ecx, [esp + 0xfd8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfdc]
call fcn.00412e40
lea ecx, [esp + 0x122c]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
cmp eax, 3
jne 0x41095c
lea ecx, [esp + 0x1400]
call fcn.00412ee0
lea ecx, [esp + 0x1058]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x105c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x1408]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x1218]
call fcn.00412f80
lea ecx, [esp + 0xfe0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xfe4]
call fcn.00412e40
lea ecx, [esp + 0x121c]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x2de0]
mov esi, 0xc
lea edx, [esp + 0x2e00]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4109c6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4109b0
jmp 0x410f29
lea edx, [esp + 0x2e20]
lea ecx, [esp + 0x1148]
call fcn.00404300
lea edx, [esp + 0x70]
lea ecx, [esp + 0x1148]
call fcn.004085f0
test al, al
je 0x410a05
mov ecx, dword [esp + 0x70]
call fcn.00408760
test al, al
je 0x410a05
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
test bh, bh
je 0x410ac9
push 1
push ecx
push 0x5c
lea edx, [esp + 0xa1c]
lea ecx, [esp + 0x270]
call fcn.00404cb0
add esp, 8
mov ecx, eax
call fcn.00418850
push eax
lea ecx, [esp + 0xe7c]
call fcn.004199a0
lea ecx, [esp + 0x264]
call fcn.004188b0
lea edx, [esp + 0xe78]
lea ecx, [esp + 0x1dbc]
call fcn.00404680
push eax
push 0x4ea948
lea edx, [esp + 0xdd8]
lea ecx, [esp + 0x1dac]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0x1d90]
mov edx, eax
call fcn.0041d860
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x2e24]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea ecx, [esp + 0x1d8c]
call fcn.00419390
lea ecx, [esp + 0x1da4]
call fcn.00419390
lea ecx, [esp + 0x1dbc]
call fcn.00419390
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
push 1
mov edx, 0x4eae20
lea ecx, [esp + 0xaa4]
call fcn.0041df60
mov ecx, dword [esp + 0x70]
lea edx, [esp + 0x2e3c]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
jne 0x410cfe
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1df0]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1ddc]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x123c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1dd4]
call fcn.004199d0
lea ecx, [esp + 0x1dec]
call fcn.004199d0
push 0x4ea9d4
lea ecx, [esp + 0x126c]
call fcn.00419bf0
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x410bf4
push 0x4eb408
call esi
mov edx, eax
lea ecx, [esp + 0x1e38]
call fcn.004031f0
push eax
mov edx, 0x4eb3f0
lea ecx, [esp + 0x1e24]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1e08]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1238]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1e04]
call fcn.004199d0
lea ecx, [esp + 0x1e1c]
call fcn.004199d0
lea ecx, [esp + 0x1e34]
call fcn.004199d0
push 0x4ea9dc
jmp 0x410c6e
cmp eax, 3
jne 0x410c7a
push str.___please_check_if_its_being_blocked._nIf_there_is_a_prompt_about_blocking__please_click_trust_or_agree.
call esi
mov edx, eax
lea ecx, [esp + 0x1e80]
call fcn.004031f0
push eax
mov edx, str.Qianniaodun_Shield_protection_program_failed_to_start__
lea ecx, [esp + 0x1e6c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1e50]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1238]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1e4c]
call fcn.004199d0
lea ecx, [esp + 0x1e64]
call fcn.004199d0
lea ecx, [esp + 0x1e7c]
call fcn.004199d0
push str.Error
lea ecx, [esp + 0x126c]
call fcn.00419970
push 0x135
lea ecx, [esp + 0x126c]
call fcn.004197c0
push eax
lea ecx, [esp + 0x1240]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 4
je 0x412058
lea ecx, [esp + 0x1268]
call fcn.004199d0
lea ecx, [esp + 0x1238]
call fcn.004199d0
lea ecx, [esp + 0x1148]
call fcn.00419390
lea ecx, [esp + 0xe78]
call fcn.004199d0
lea ecx, [esp + 0xe60]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
push str.Released_excat1.exe_successfully._n
call fcn.0042c7d0
add esp, 4
test bh, bh
je 0x410f1d
push 0x208
lea eax, [esp + 0x2e24]
push 0
push eax
call fcn.004a0b90
add esp, 0xc
lea edx, [esp + 0x2e20]
mov ecx, 0x104
call fcn.00409de0
test eax, eax
jne 0x410d58
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
jmp 0x410cc2
lea edx, [esp + 0xa10]
lea ecx, [esp + 0x1e94]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x2e24]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x1e94]
call fcn.00419390
lea eax, [esp + 0x2e20]
push 1
push eax
lea edx, [esp + 0xe80]
lea ecx, [esp + 0x1ee4]
call fcn.00404680
push eax
push 0x4ea948
lea edx, [esp + 0xde0]
lea ecx, [esp + 0x1ed4]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0x1eb8]
mov edx, eax
call fcn.0041d860
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [esp + 0x1eac]
mov esi, eax
call fcn.00419390
lea ecx, [esp + 0x1ec4]
call fcn.00419390
lea ecx, [esp + 0x1edc]
call fcn.00419390
test esi, esi
jne 0x410f1d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1f10]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x1efc]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x13a4]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1ef4]
call fcn.004199d0
lea ecx, [esp + 0x1f0c]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x410ef2
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x1f58]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x1f44]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1f28]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x13a0]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1f24]
call fcn.004199d0
lea ecx, [esp + 0x1f3c]
call fcn.004199d0
lea ecx, [esp + 0x1f54]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x13a8]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x13a0]
jmp 0x410cbd
lea ecx, [esp + 0x1148]
call fcn.00419390
test bh, bh
je 0x410f9c
lea ecx, [esp + 0xdd0]
call fcn.00419220
push eax
call edi
cmp eax, 0xffffffff
je 0x410f9c
test al, 0x10
je 0x410f9c
lea eax, [esp + 0x2b50]
push eax
push 0x4eb530
lea edx, [esp + 0xdd8]
lea ecx, [esp + 0x216c]
call fcn.0041d780
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [esp + 0x2164]
mov esi, eax
call fcn.00419390
cmp esi, 0xffffffff
je 0x410f9c
lea ecx, [esp + 0xdd0]
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [esp + 0x3c58]
call fcn.0040c320
mov edx, 0x10
lea ecx, [esp + 0x217c]
call fcn.00406170
push eax
mov ecx, 0x4f6f48
call fcn.00419a20
lea ecx, [esp + 0x217c]
call fcn.004199d0
mov edx, 0x4f6f48
lea ecx, [esp + 0x2194]
call fcn.00409930
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x3234]
push eax
push str.___file___s____debug__s
lea eax, [esp + 0x4dac]
push 0x104
push eax
call fcn.0042c740
add esp, 0x14
lea ecx, [esp + 0x2194]
call fcn.00419390
lea eax, [esp + 0x4da0]
mov edx, 1
push eax
push 1
lea ecx, [esp + 0x3c60]
call fcn.004038c0
add esp, 8
lea ecx, [esp + 0x3640]
call fcn.004045c0
test al, al
jne 0x411766
sub esp, 0x18
mov ecx, esp
push 0x4ea988
call fcn.00419480
push 0
mov edx, 0x4eaadc
lea ecx, [esp + 0xaa4]
call fcn.0041e0f0
mov ecx, dword [esp + 0x6c]
lea edx, [esp + 0x365c]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
jne 0x411754
push str.release_excat222.exe2333_error__n
call fcn.0042c7d0
add esp, 4
lea ecx, [esp + 0x15f8]
push str.release_excat2.exe_error
call fcn.00412e70
push 0x4ea9d4
lea ecx, [esp + 0x10b4]
call fcn.00417690
lea ecx, [esp + 0x15f8]
call fcn.00412e50
push 0x10
lea ecx, [esp + 0x10b4]
call fcn.00412e40
push eax
lea ecx, [esp + 0x1600]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
test bh, bh
je 0x4111b2
push 1
push ecx
push 0x5c
lea edx, [esp + 0xa1c]
lea ecx, [esp + 0x264]
call fcn.00404cb0
add esp, 8
mov ecx, eax
call fcn.00418850
push eax
lea ecx, [esp + 0xe7c]
call fcn.004199a0
lea ecx, [esp + 0x258]
call fcn.004188b0
lea edx, [esp + 0xe78]
lea ecx, [esp + 0x1f9c]
call fcn.00404680
push eax
push 0x4ea948
lea edx, [esp + 0xdd8]
lea ecx, [esp + 0x1f8c]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0x1f70]
mov edx, eax
call fcn.0041d860
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x2e24]
push 0x104
push eax
call fcn.004afcb1
add esp, 0xc
lea ecx, [esp + 0x1f6c]
call fcn.00419390
lea ecx, [esp + 0x1f84]
call fcn.00419390
lea ecx, [esp + 0x1f9c]
call fcn.00419390
sub esp, 0x18
lea eax, [esp + 0xa88]
mov ecx, esp
push eax
call fcn.004194d0
push 1
mov edx, 0x4eae20
lea ecx, [esp + 0xaa4]
call fcn.0041df60
mov ecx, dword [esp + 0x70]
lea edx, [esp + 0x2e3c]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
jne 0x411530
push 0x4eb328
lea ecx, [esp + 0x14c4]
call fcn.00417520
push 0x4eb3b8
lea ecx, [esp + 0x2724]
call fcn.004130f0
push 0x4ea9d4
lea ecx, [esp + 0xff4]
call fcn.00417690
push 0x4eb3f0
lea ecx, [esp + 0x14ac]
call fcn.00417520
push 0x4eb408
lea ecx, [esp + 0x26ec]
call fcn.004130f0
push 0x4ea9dc
lea ecx, [esp + 0xfec]
call fcn.00417690
push str.Qianniaodun_Shield_protection_program_failed_to_start__
lea ecx, [esp + 0x2804]
call fcn.00413020
push str.___please_check_if_its_being_blocked._nIf_there_is_a_prompt_about_blocking__please_click_trust_or_agree.
lea ecx, [esp + 0x2a74]
call fcn.00413530
push str.Error
lea ecx, [esp + 0x1054]
call fcn.00417660
lea ecx, [esp + 0x1160]
call fcn.00419d50
lea ecx, [esp + 0x11a8]
call fcn.00419d50
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x411366
lea ecx, [esp + 0x14a8]
call fcn.00417500
lea ecx, [esp + 0x26e8]
call fcn.004130b0
lea ecx, [esp + 0xfe8]
call fcn.00417680
lea ecx, [esp + 0x26e8]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x1fe8]
call fcn.004031f0
push eax
lea ecx, [esp + 0x14b0]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x1fd4]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x1fb8]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1160]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1fb4]
call fcn.004199d0
lea ecx, [esp + 0x1fcc]
call fcn.004199d0
lea ecx, [esp + 0x1fe4]
call fcn.004199d0
lea ecx, [esp + 0xfe8]
jmp 0x4114d1
cmp eax, 3
jne 0x411425
lea ecx, [esp + 0x2800]
call fcn.00412fe0
lea ecx, [esp + 0x2a70]
call fcn.004134e0
lea ecx, [esp + 0x1050]
call fcn.00417640
lea ecx, [esp + 0x2a70]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x2030]
call fcn.004031f0
push eax
lea ecx, [esp + 0x2808]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x201c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x2000]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1160]
push eax
call fcn.00419a20
lea ecx, [esp + 0x1ffc]
call fcn.004199d0
lea ecx, [esp + 0x2014]
call fcn.004199d0
lea ecx, [esp + 0x202c]
call fcn.004199d0
lea ecx, [esp + 0x1050]
call fcn.00412e40
jmp 0x4114d6
lea ecx, [esp + 0x14c0]
call fcn.00417500
lea ecx, [esp + 0x2720]
call fcn.004130b0
lea ecx, [esp + 0xff0]
call fcn.00417680
lea ecx, [esp + 0x2720]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x2078]
call fcn.004031f0
push eax
lea ecx, [esp + 0x14c8]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x2064]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x2048]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1160]
push eax
call fcn.00419a20
lea ecx, [esp + 0x2044]
call fcn.004199d0
lea ecx, [esp + 0x205c]
call fcn.004199d0
lea ecx, [esp + 0x2074]
call fcn.004199d0
lea ecx, [esp + 0xff0]
call fcn.00412e40
push eax
lea ecx, [esp + 0x11ac]
call fcn.00419970
push 0x135
lea ecx, [esp + 0x11ac]
call fcn.004197c0
push eax
lea ecx, [esp + 0x1168]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 4
je 0x412058
lea ecx, [esp + 0x11a8]
call fcn.004199d0
lea ecx, [esp + 0x1160]
call fcn.004199d0
jmp 0x410cce
push str.Released_excat1.exe_successfully._n
call fcn.0042c7d0
add esp, 4
test bh, bh
je 0x410f9c
push 0x208
lea eax, [esp + 0x2e24]
push 0
push eax
call fcn.004a0b90
add esp, 0xc
lea edx, [esp + 0x2e20]
mov ecx, 0x104
call fcn.00409de0
test eax, eax
jne 0x41158a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
jmp 0x410cce
lea edx, [esp + 0xa10]
lea ecx, [esp + 0x208c]
call fcn.00404680
mov ecx, eax
call fcn.00419220
push eax
lea eax, [esp + 0x2e24]
push 0x104
push eax
call fcn.004afc42
add esp, 0xc
lea ecx, [esp + 0x208c]
call fcn.00419390
lea eax, [esp + 0x2e20]
push 1
push eax
lea edx, [esp + 0xe80]
lea ecx, [esp + 0x20dc]
call fcn.00404680
push eax
push 0x4ea948
lea edx, [esp + 0xde0]
lea ecx, [esp + 0x20cc]
call fcn.0041d780
add esp, 4
lea ecx, [esp + 0x20b0]
mov edx, eax
call fcn.0041d860
add esp, 4
mov ecx, eax
call fcn.00419220
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [esp + 0x20a4]
mov esi, eax
call fcn.00419390
lea ecx, [esp + 0x20bc]
call fcn.00419390
lea ecx, [esp + 0x20d4]
call fcn.00419390
test esi, esi
jne 0x410f2d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x2108]
call fcn.004031f0
push eax
mov edx, 0x4eb328
lea ecx, [esp + 0x20f4]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x135c]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x20ec]
call fcn.004199d0
lea ecx, [esp + 0x2104]
call fcn.004199d0
mov edx, 0x4eaadc
mov ecx, 0x4f6f00
call fcn.0041e0f0
test al, al
je 0x411724
push 0x4eb3b8
call esi
mov edx, eax
lea ecx, [esp + 0x2150]
call fcn.004031f0
push eax
mov edx, 0x4eb38c
lea ecx, [esp + 0x213c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x2120]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1358]
push eax
call fcn.00419a20
lea ecx, [esp + 0x211c]
call fcn.004199d0
lea ecx, [esp + 0x2134]
call fcn.004199d0
lea ecx, [esp + 0x214c]
call fcn.004199d0
push 0x130
push 0x4ea9d4
lea ecx, [esp + 0x1360]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1358]
call fcn.004199d0
jmp 0x410cce
push str.run_excat2.exe_ok__n
call fcn.0042c7d0
add esp, 4
jmp 0x411acb
lea edx, [esp + 0x2db0]
lea ecx, [esp + 0x3640]
call fcn.00404030
test al, al
jne 0x4118b9
push 0x4eb0c4
lea ecx, [esp + 0x2354]
call fcn.00413460
push 0x4ea9d4
lea ecx, [esp + 0x1004]
call fcn.00417690
push 0x4eb0e8
lea ecx, [esp + 0x2330]
call fcn.00413460
push 0x4ea9dc
lea ecx, [esp + 0xffc]
call fcn.00417690
push str.Unable_to_open_the_specified_file_to_calculate_its_MD5_hash_value.
lea ecx, [esp + 0x2904]
call fcn.00413380
push str.Error
lea ecx, [esp + 0x104c]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x411832
lea ecx, [esp + 0x232c]
call fcn.00413420
lea ecx, [esp + 0xff8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xffc]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2334]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
cmp eax, 3
jne 0x411878
lea ecx, [esp + 0x2900]
call fcn.00413330
lea ecx, [esp + 0x1048]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x104c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2908]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x2350]
call fcn.00413420
lea ecx, [esp + 0x1000]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x1004]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2358]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea edx, [esp + 0x2dc0]
lea ecx, [esp + 0xba8]
call fcn.004041d0
test al, al
jne 0x411a0c
push 0x4eb4e4
lea ecx, [esp + 0x120c]
call fcn.00412f90
push 0x4ea9d4
lea ecx, [esp + 0x1014]
call fcn.00417690
push 0x4eb4f4
lea ecx, [esp + 0x11ec]
call fcn.00412f90
push 0x4ea9dc
lea ecx, [esp + 0x100c]
call fcn.00417690
push str.Conversion_MD5_failed.
lea ecx, [esp + 0x13ec]
call fcn.00412f00
push str.Error
lea ecx, [esp + 0x1084]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x411985
lea ecx, [esp + 0x11e8]
call fcn.00412f80
lea ecx, [esp + 0x1008]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x100c]
call fcn.00412e40
lea ecx, [esp + 0x11ec]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
cmp eax, 3
jne 0x4119cb
lea ecx, [esp + 0x13e8]
call fcn.00412ee0
lea ecx, [esp + 0x1080]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x1084]
call fcn.00412e40
push eax
lea ecx, [esp + 0x13f0]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x1208]
call fcn.00412f80
lea ecx, [esp + 0x1010]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x1014]
call fcn.00412e40
lea ecx, [esp + 0x120c]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x410cce
lea ecx, [esp + 0x2db0]
mov esi, 0xc
lea edx, [esp + 0x2dc0]
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x411a36
add ecx, 4
add edx, 4
sub esi, 4
jae 0x411a20
jmp 0x411acb
lea edx, [esp + 0x3640]
lea ecx, [esp + 0x14d8]
call fcn.00404300
lea edx, [esp + 0xc]
lea ecx, [esp + 0x14d8]
call fcn.004085f0
test al, al
je 0x411a75
mov ecx, dword [esp + 0xc]
call fcn.00408760
test al, al
je 0x411a75
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x18
mov ecx, esp
push 0x4ea988
call fcn.00419480
push 0
mov edx, 0x4eaadc
lea ecx, [esp + 0xaa4]
call fcn.0041e0f0
mov ecx, dword [esp + 0x6c]
lea edx, [esp + 0x365c]
movzx eax, al
push eax
call fcn.00407760
add esp, 0x20
test eax, eax
je 0x411abf
push str.Re_released_excat1.exe_due_to_size_mismatch._n
call fcn.0042c7d0
add esp, 4
lea ecx, [esp + 0x14d8]
call fcn.00419390
lea edx, [esp + 0x2e20]
lea ecx, [esp + 0x21ac]
call fcn.00404300
push eax
mov ecx, 0x4f6ee8
call fcn.004193f0
lea ecx, [esp + 0x21ac]
call fcn.00419390
lea eax, [esp + 0x3028]
mov ecx, 0x4f6f18
push eax
call fcn.00419360
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x3640]
call fcn.004045c0
test al, al
je 0x411b2e
lea ecx, [esp + 0x3640]
call fcn.00407730
mov edx, 0x4eae20
lea ecx, [esp + 0xb78]
call fcn.0041df60
lea ecx, [esp + 0x3640]
mov edx, 1
push 0
push 2
test al, al
je 0x411b5a
call fcn.00403840
jmp 0x411b5f
call fcn.004038c0
add esp, 8
lea ecx, [esp + 0x3640]
call fcn.004045c0
test al, al
je 0x411c6f
mov edx, 0x4eae20
lea ecx, [esp + 0xbc0]
call fcn.0041df60
test al, al
je 0x411c6f
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [esp + 0x3640]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call ebx
mov esi, eax
test esi, esi
jle 0x411c6f
lea ecx, [esp + 0x4a]
call fcn.00412e40
push eax
push esi
lea ecx, [esp + 0x7c]
call fcn.00418760
push 0
push 0
push esi
push 0
lea ecx, [esp + 0x84]
call fcn.004186e0
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x3654]
push eax
push 0
push 0
call ebx
test eax, eax
jle 0x411c66
push 1
lea eax, [esp + 0x208]
push eax
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0x80]
call fcn.004186f0
mov ecx, eax
call fcn.004186d0
mov edi, eax
lea ecx, [esp + 0x74]
lea eax, [esp + 0x20c]
push eax
call fcn.00418700
lea ecx, [esp + 0x4b]
mov esi, eax
call fcn.00412e40
push eax
push dword [edi]
lea ecx, [esp + 0x14f8]
push dword [esi]
call fcn.0041d530
lea ecx, [esp + 0x14f0]
call fcn.004197c0
mov ecx, eax
call fcn.0040c2f0
lea ecx, [esp + 0x14f0]
call fcn.004199d0
lea ecx, [esp + 0x74]
call fcn.00418710
lea ecx, [esp + 0xe78]
call fcn.004199d0
lea ecx, [esp + 0xe60]
call fcn.004199d0
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fe36
push 0x4eb51c
lea ecx, [esp + 0x12f0]
call fcn.00416e60
push 0x4ea9d4
lea ecx, [esp + 0x101c]
call fcn.00417690
lea ecx, [esp + 0x12ec]
call fcn.00416e40
lea ecx, [esp + 0x1018]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x101c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x12f4]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x3d8]
call fcn.00412db0
jmp 0x410cda
push str.Failed_to_release_excat1.exe_error__n
call fcn.0042c7d0
add esp, 4
lea ecx, [esp + 0x1520]
push 0x4eb328
call fcn.00417520
push 0x4eb3b8
lea ecx, [esp + 0x2794]
call fcn.004130f0
push 0x4ea9d4
lea ecx, [esp + 0x102c]
call fcn.00417690
push 0x4eb3f0
lea ecx, [esp + 0x150c]
call fcn.00417520
push 0x4eb408
lea ecx, [esp + 0x275c]
call fcn.004130f0
push 0x4ea9dc
lea ecx, [esp + 0x1024]
call fcn.00417690
push str.Qianniaodun_Shield_protection_program_failed_to_start__
lea ecx, [esp + 0x283c]
call fcn.00413020
push str.___please_check_if_its_being_blocked._nIf_there_is_a_prompt_about_blocking__please_click_trust_or_agree.
lea ecx, [esp + 0x2ae4]
call fcn.00413530
push str.Error
lea ecx, [esp + 0x108c]
call fcn.00417660
lea ecx, [esp + 0x1190]
call fcn.00419d50
lea ecx, [esp + 0x1178]
call fcn.00419d50
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x411e8b
lea ecx, [esp + 0x1508]
call fcn.00417500
lea ecx, [esp + 0x2758]
call fcn.004130b0
lea ecx, [esp + 0x1020]
call fcn.00417680
lea ecx, [esp + 0x2758]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x21f8]
call fcn.004031f0
push eax
lea ecx, [esp + 0x1510]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x21e4]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x21c8]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1190]
push eax
call fcn.00419a20
lea ecx, [esp + 0x21c4]
call fcn.004199d0
lea ecx, [esp + 0x21dc]
call fcn.004199d0
lea ecx, [esp + 0x21f4]
call fcn.004199d0
lea ecx, [esp + 0x1020]
jmp 0x411ff6
cmp eax, 3
jne 0x411f4a
lea ecx, [esp + 0x2838]
call fcn.00412fe0
lea ecx, [esp + 0x2ae0]
call fcn.004134e0
lea ecx, [esp + 0x1088]
call fcn.00417640
lea ecx, [esp + 0x2ae0]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x2240]
call fcn.004031f0
push eax
lea ecx, [esp + 0x2840]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x222c]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x2210]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1190]
push eax
call fcn.00419a20
lea ecx, [esp + 0x220c]
call fcn.004199d0
lea ecx, [esp + 0x2224]
call fcn.004199d0
lea ecx, [esp + 0x223c]
call fcn.004199d0
lea ecx, [esp + 0x1088]
call fcn.00412e40
jmp 0x411ffb
lea ecx, [esp + 0x1520]
call fcn.00417500
lea ecx, [esp + 0x2790]
call fcn.004130b0
lea ecx, [esp + 0x1028]
call fcn.00417680
lea ecx, [esp + 0x2790]
call fcn.00412e40
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [esp + 0x2288]
call fcn.004031f0
push eax
lea ecx, [esp + 0x1528]
call fcn.00412e40
mov edx, eax
lea ecx, [esp + 0x2274]
call fcn.0041dff0
add esp, 4
lea ecx, [esp + 0x2258]
mov edx, eax
call fcn.0041d600
add esp, 4
lea ecx, [esp + 0x1190]
push eax
call fcn.00419a20
lea ecx, [esp + 0x2254]
call fcn.004199d0
lea ecx, [esp + 0x226c]
call fcn.004199d0
lea ecx, [esp + 0x2284]
call fcn.004199d0
lea ecx, [esp + 0x1028]
call fcn.00412e40
push eax
lea ecx, [esp + 0x117c]
call fcn.00419970
push 0x135
lea ecx, [esp + 0x117c]
call fcn.004197c0
push eax
lea ecx, [esp + 0x1198]
call fcn.004197c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 4
je 0x412058
lea ecx, [esp + 0x1178]
call fcn.004199d0
lea ecx, [esp + 0x1190]
call fcn.004199d0
lea ecx, [esp + 0x10b8]
jmp 0x40ffcb
lea eax, [esp + 0x3848]
push eax
call fcn.004aed0f
add esp, 4
call fcn.0040c350
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x4eb4e4
lea ecx, [esp + 0x11dc]
call fcn.00412f90
push 0x4ea9d4
lea ecx, [esp + 0x103c]
call fcn.00417690
push 0x4eb4f4
lea ecx, [esp + 0x11fc]
call fcn.00412f90
push 0x4ea9dc
lea ecx, [esp + 0x1034]
call fcn.00417690
push str.Conversion_MD5_failed.
lea ecx, [esp + 0x13d4]
call fcn.00412f00
push str.Error
lea ecx, [esp + 0x1094]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x412139
lea ecx, [esp + 0x11f8]
call fcn.00412f80
lea ecx, [esp + 0x1030]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x1034]
call fcn.00412e40
push eax
lea ecx, [esp + 0x1200]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
cmp eax, 3
jne 0x412192
lea ecx, [esp + 0x13d0]
call fcn.00412ee0
lea ecx, [esp + 0x1090]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x1094]
call fcn.00412e40
push eax
lea ecx, [esp + 0x13d8]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
lea ecx, [esp + 0x11d8]
call fcn.00412f80
lea ecx, [esp + 0x1038]
call fcn.00417680
push 0x10
lea ecx, [esp + 0x103c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x11e0]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
push 0x4eb0c4
lea ecx, [esp + 0x239c]
call fcn.00413460
push 0x4ea9d4
lea ecx, [esp + 0xeec]
call fcn.00417690
push 0x4eb0e8
lea ecx, [esp + 0x2378]
call fcn.00413460
push 0x4ea9dc
lea ecx, [esp + 0xee4]
call fcn.00417690
push str.Unable_to_open_the_specified_file_to_calculate_its_MD5_hash_value.
lea ecx, [esp + 0x294c]
call fcn.00413380
push str.Error
lea ecx, [esp + 0x109c]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x4122aa
lea ecx, [esp + 0x2374]
call fcn.00413420
lea ecx, [esp + 0xee0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xee4]
call fcn.00412e40
lea ecx, [esp + 0x2378]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
cmp eax, 3
jne 0x412303
lea ecx, [esp + 0x2948]
call fcn.00413330
lea ecx, [esp + 0x1098]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x109c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2950]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
lea ecx, [esp + 0x2398]
call fcn.00413420
lea ecx, [esp + 0xee8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xeec]
call fcn.00412e40
lea ecx, [esp + 0x239c]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xdd0]
call fcn.00419390
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Unable_to_get_temp_path:_Error__d_n
call fcn.0042c800
add esp, 8
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
lea eax, [esp + 0x3848]
push eax
push str.Unable_to_create_and_write_to_file:__s_n
call fcn.0042c7d0
add esp, 8
push 0x10
push 0x4ea9d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, str.Error1:
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x6a0]
call fcn.00412db0
lea ecx, [esp + 0x5f0]
call fcn.00404e20
lea ecx, [esp + 0x13b8]
call fcn.004199d0
lea ecx, [esp + 0x750]
call fcn.00404e20
lea ecx, [esp + 0x488]
call fcn.0040c260
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
lea eax, [esp + 0x3848]
push eax
push str.Unable_to_read_from_existing_file:__s_n
call fcn.0042c7d0
add esp, 8
push 0x10
push 0x4ea9d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, str.Error2:
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x488]
call fcn.0040c260
lea ecx, [esp + 0xe48]
jmp 0x40fbdb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4ead80
call fcn.0042c7d0
add esp, 8
jmp 0x40fc01
push 0x4eaf40
lea ecx, [esp + 0x2614]
call fcn.00413600
push 0x4ea9d4
lea ecx, [esp + 0xefc]
call fcn.00417690
push 0x4eaf74
lea ecx, [esp + 0x2648]
call fcn.00413600
push 0x4ea9dc
lea ecx, [esp + 0xef4]
call fcn.00417690
push 0x4eafa8
lea ecx, [esp + 0x2994]
call fcn.00413530
push str.Error
lea ecx, [esp + 0x10a4]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x41250f
lea ecx, [esp + 0x2644]
call fcn.004135c0
lea ecx, [esp + 0xef0]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xef4]
call fcn.00412e40
lea ecx, [esp + 0x2648]
jmp 0x412576
cmp eax, 3
jne 0x412549
lea ecx, [esp + 0x2990]
call fcn.004134e0
lea ecx, [esp + 0x10a0]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x10a4]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2998]
call fcn.00412e40
jmp 0x41257c
lea ecx, [esp + 0x2610]
call fcn.004135c0
lea ecx, [esp + 0xef8]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xefc]
call fcn.00412e40
lea ecx, [esp + 0x2614]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x20]
call fcn.004188b0
lea ecx, [esp + 0xd70]
call fcn.004199d0
lea ecx, [esp + 0xd40]
call fcn.004199d0
lea ecx, [esp + 0x14]
call fcn.004188b0
lea ecx, [esp + 0xd88]
call fcn.004199d0
lea ecx, [esp + 0xdb8]
call fcn.004199d0
lea ecx, [esp + 0xda0]
call fcn.00419390
lea ecx, [esp + 0xd58]
call fcn.00419390
lea ecx, [esp + 0xcc8]
call fcn.004199d0
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x100]
call fcn.004153e0
lea ecx, [esp + 0x100]
call fcn.00415910
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
lea ecx, [esp + 0xd28]
call fcn.00419390
lea ecx, [esp + 0xd10]
call fcn.004199d0
lea ecx, [esp + 0xcf8]
call fcn.004199d0
lea ecx, [esp + 0xce0]
call fcn.004199d0
lea ecx, [esp + 0x1b8]
call fcn.004153e0
lea ecx, [esp + 0x1b8]
call fcn.00415910
lea ecx, [esp + 0xf20]
call fcn.00415e70
lea ecx, [esp + 0xbf0]
call fcn.004199d0
lea ecx, [esp + 0xcb0]
call fcn.00419390
lea ecx, [esp + 0xb60]
call fcn.004199d0
lea ecx, [esp + 0xc98]
call fcn.004199d0
lea ecx, [esp + 0xad0]
call fcn.004199d0
lea ecx, [esp + 0xa58]
call fcn.004199d0
lea ecx, [esp + 0xa40]
call fcn.004199d0
lea ecx, [esp + 0xc80]
call fcn.004199d0
lea ecx, [esp + 0xa10]
call fcn.004199d0
jmp 0x412bff
push 0x4eaea4
lea ecx, [esp + 0x1638]
call fcn.00413770
push 0x4ea9d4
lea ecx, [esp + 0xf0c]
call fcn.00417690
push 0x4eaec4
lea ecx, [esp + 0x1618]
call fcn.00413770
push 0x4ea9dc
lea ecx, [esp + 0xf04]
call fcn.00417690
push 0x4eaee4
lea ecx, [esp + 0x2564]
call fcn.004136c0
push str.Error
lea ecx, [esp + 0x10ac]
call fcn.00417660
mov eax, dword [0x4f9a5c]
cmp eax, 2
jne 0x412875
lea ecx, [esp + 0x1614]
call fcn.00413750
lea ecx, [esp + 0xf00]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf04]
call fcn.00412e40
lea ecx, [esp + 0x1618]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40fc22
cmp eax, 3
jne 0x4128bb
lea ecx, [esp + 0x2560]
call fcn.00413680
lea ecx, [esp + 0x10a8]
call fcn.00417640
push 0x10
lea ecx, [esp + 0x10ac]
call fcn.00412e40
push eax
lea ecx, [esp + 0x2568]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40fc22
lea ecx, [esp + 0x1634]
call fcn.00413750
lea ecx, [esp + 0xf08]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf0c]
call fcn.00412e40
lea ecx, [esp + 0x1638]
push eax
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40fc22
push fcn.0041e220
push ecx
mov edx, str.Unable_to_open_the_param_file_for_reading.
mov ecx, 0x4f86a8
call fcn.0041d9c0
add esp, 4
mov ecx, eax
call fcn.00418690
push str.Unable_to_open_the_param_file_for_reading
lea ecx, [esp + 0x24e0]
call fcn.00413820
push 0x4ea9d4
lea ecx, [esp + 0xf14]
call fcn.00417690
lea ecx, [esp + 0x24dc]
call fcn.004137e0
lea ecx, [esp + 0xf10]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf14]
call fcn.00412e40
push eax
lea ecx, [esp + 0x24e4]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0xaa0]
call fcn.00419390
lea ecx, [esp + 0x90]
call fcn.00412c20
lea ecx, [esp + 0xe90]
call fcn.00415e70
lea ecx, [esp + 0xab8]
call fcn.004199d0
lea ecx, [esp + 0xc50]
call fcn.004199d0
lea ecx, [esp + 0xc38]
call fcn.004199d0
lea ecx, [esp + 0xc20]
call fcn.004199d0
lea ecx, [esp + 0xb30]
call fcn.004199d0
lea ecx, [esp + 0xb18]
call fcn.004199d0
lea ecx, [esp + 0xc08]
call fcn.004199d0
lea ecx, [esp + 0xbd8]
call fcn.004199d0
lea ecx, [esp + 0xa70]
call fcn.00419390
lea ecx, [esp + 0xbc0]
call fcn.004199d0
lea ecx, [esp + 0xba8]
call fcn.004199d0
lea ecx, [esp + 0xa88]
call fcn.004199d0
lea ecx, [esp + 0xb00]
call fcn.004199d0
lea ecx, [esp + 0xae8]
call fcn.004199d0
lea ecx, [esp + 0xc68]
call fcn.004199d0
lea ecx, [esp + 0xb90]
call fcn.004199d0
lea ecx, [esp + 0xb78]
call fcn.004199d0
lea ecx, [esp + 0xb48]
call fcn.004199d0
lea ecx, [esp + 0xa28]
call fcn.004199d0
lea ecx, [esp + 0xd28]
call fcn.00419390
lea ecx, [esp + 0xd10]
call fcn.004199d0
lea ecx, [esp + 0xcf8]
call fcn.004199d0
lea ecx, [esp + 0xce0]
call fcn.004199d0
lea ecx, [esp + 0x1b8]
call fcn.004153e0
lea ecx, [esp + 0x1b8]
call fcn.00415910
lea ecx, [esp + 0xf20]
call fcn.00415e70
lea ecx, [esp + 0xbf0]
call fcn.004199d0
lea ecx, [esp + 0xcb0]
call fcn.00419390
lea ecx, [esp + 0xb60]
call fcn.004199d0
jmp 0x412bb7
push fcn.0041e220
push ecx
mov edx, str.Unable_to_open_the_param_file_for_reading.
mov ecx, 0x4f86a8
call fcn.0041d9c0
add esp, 4
mov ecx, eax
call fcn.00418690
push str.Unable_to_open_the_versionfile_file_for_reading
lea ecx, [esp + 0x25e4]
call fcn.004138e0
push 0x4ea9d4
lea ecx, [esp + 0xf1c]
call fcn.00417690
lea ecx, [esp + 0x25e0]
call fcn.004138a0
lea ecx, [esp + 0xf18]
call fcn.00417680
push 0x10
lea ecx, [esp + 0xf1c]
call fcn.00412e40
push eax
lea ecx, [esp + 0x25e8]
call fcn.00412e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x148]
call fcn.00412c20
lea ecx, [esp + 0xf20]
call fcn.00415e70
lea ecx, [esp + 0xbf0]
call fcn.004199d0
lea ecx, [esp + 0xcb0]
call fcn.00419390
lea ecx, [esp + 0xb60]
call fcn.004199d0
lea ecx, [esp + 0xc98]
call fcn.004199d0
lea ecx, [esp + 0xad0]
call fcn.004199d0
lea ecx, [esp + 0xa58]
call fcn.004199d0
lea ecx, [esp + 0xa40]
call fcn.004199d0
lea ecx, [esp + 0xc80]
call fcn.004199d0
lea ecx, [esp + 0xa10]
call fcn.004199d0
mov ecx, dword [esp + 0x4fac]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0049f18e
mov esp, ebp
pop ebp
ret 0x10