Function at 0x40fe40
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a90
call fcn.00415bc0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea eax, [esp + 0x17f2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea edi, [esp + 0x15e8]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea ebx, [esp + 0xfca]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004163f0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004163f0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.0040f730
mov dword [esp + 0x1a80], eax
lea esi, [esp + 0x184]
mov dword [esp + 0x48], 0x5dae0c11
jmp 0x410190
mov dword [esp + 0x48], 0x433e068a
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x7390d22b
jg 0x4101d0
cmp eax, 0x5dae0c10
jg 0x4101e0
cmp eax, 0x8a974324
jg 0x410201
cmp eax, 0x883902cc
jne 0x410190
mov dword [esp + 0x1a7c], 0
mov dword [esp + 0x48], 0x478cbae7
jmp 0x410190
cmp eax, 0x7390d22c
jne 0x410190
jmp 0x410186
cmp eax, 0x5dae0c11
jne 0x410190
mov eax, 0x4f752853
cmp dword [esp + 0x1a80], 0
js 0x4101fb
mov eax, 0xa7d33695
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0x8dc80ac8
jg 0x41021c
cmp eax, 0x8a974325
jne 0x410190
mov dword [esp + 0x48], 0xf63a5dc5
jmp 0x410190
cmp eax, 0x902f2fbc
jg 0x4102f0
cmp eax, 0x8dc80ac9
jne 0x410190
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.004046f0
mov dword [esp], ebx
call fcn.00404a70
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.004046f0
mov dword [esp + 0x1a48], edi
mov dword [esp + 0x1a4c], esi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
mov eax, 0x8a974325
jne 0x4102e7
mov eax, 0xa7a01559
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0x94d6566f
jg 0x41031b
cmp eax, 0x902f2fbd
jne 0x410190
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040e950
mov dword [esp + 0x48], 0xb139253d
jmp 0x410190
cmp eax, 0x97de04c3
jg 0x410332
cmp eax, 0x94d65670
jne 0x410190
jmp 0x410523
cmp eax, 0x53aeb6cd
jg 0x4104a3
cmp eax, 0x52178bb7
jg 0x4104cb
cmp eax, 0x4f752852
jg 0x4104db
cmp eax, 0x478cbae6
jg 0x4104e8
cmp eax, 0x433e0689
jg 0x410500
cmp eax, 0x3e22a754
jg 0x410518
cmp eax, 0x3ace09a2
jg 0x410552
cmp eax, 0x23cdeb83
jg 0x410575
cmp eax, 0x2345ebf1
jg 0x41058d
cmp eax, 0x215da104
jg 0x41059d
cmp eax, 0x10e541ea
jg 0x4105db
cmp eax, 0x260b2bd
jg 0x4106ed
cmp eax, 0xff40dba9
jg 0x41078a
cmp eax, 0xf8df2d2b
jg 0x4107b0
cmp eax, 0xf63a5dc4
jg 0x4107c8
cmp eax, 0xf04896ff
jg 0x4107fc
cmp eax, 0xdb81bf74
jg 0x410814
cmp eax, 0xd61827cf
jg 0x410839
cmp eax, 0xd51aa9ee
jg 0x410862
cmp eax, 0xd295f451
jg 0x4108c5
cmp eax, 0xbee1bd38
jg 0x41154d
cmp eax, 0xba690bf5
jg 0x41165f
cmp eax, 0xb5f79613
jg 0x411677
cmp eax, 0xb3e0a5d3
jg 0x4116a0
cmp eax, 0xb139253c
jg 0x4116b8
cmp eax, 0xab86e4a3
jg 0x4116e6
cmp eax, 0x98564430
jg 0x411749
cmp eax, 0x97de04c4
jne 0x410190
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
sete byte [esp + 0x1a86]
mov dword [esp + 0x48], 0xd61827d0
jmp 0x410190
cmp eax, 0x53aeb6ce
jne 0x410190
cmp dword [esp + 0x1a78], 0
sete byte [esp + 0x1a87]
mov dword [esp + 0x48], 0x9ade1b7a
jmp 0x410190
cmp eax, 0x52178bb8
jne 0x410190
jmp 0x41055d
cmp eax, 0x4f752853
jne 0x410190
jmp 0x41055d
cmp eax, 0x478cbae7
jne 0x410190
mov dword [esp + 0x48], 0xff40dbaa
jmp 0x410190
cmp eax, 0x433e068a
jne 0x410190
mov dword [esp + 0x48], 0x97de04c4
jmp 0x410190
cmp eax, 0x3e22a755
jne 0x410190
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040e6c0
mov dword [esp + 0x48], 0xf63a5dc5
jmp 0x410190
cmp eax, 0x3ace09a3
jne 0x410190
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0x478cbae7
jmp 0x410190
cmp eax, 0x23cdeb84
jne 0x410190
mov dword [esp + 0x48], 0x98564431
jmp 0x410190
cmp eax, 0x2345ebf2
jne 0x410190
jmp 0x41197f
cmp eax, 0x215da105
jne 0x410190
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
mov dword [esp + 0x48], 0x97de04c4
jmp 0x410190
cmp eax, 0x10e541eb
jne 0x410190
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405110
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004046f0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004046f0
mov eax, dword [esp + 0x58]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x4c]
sub ecx, edx
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004046f0
mov dword [esp + 0x48], 0x7390d22c
jmp 0x410190
cmp eax, 0x260b2be
jne 0x410190
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
lea eax, [esp + 0x9ac]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
mov eax, 0x3e22a755
jne 0x410781
mov eax, 0x8dc80ac9
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xff40dbaa
jne 0x410190
mov eax, dword [esp + 0x1a7c]
mov dword [esp + 0x1a88], eax
mov dword [esp + 0x48], 0x2345ebf2
jmp 0x410190
cmp eax, 0xf8df2d2c
jne 0x410190
mov dword [esp + 0x48], 0x10e541eb
jmp 0x410190
cmp eax, 0xf63a5dc5
jne 0x410190
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040fe20
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0x478cbae7
jmp 0x410190
cmp eax, 0xf0489700
jne 0x410190
mov dword [esp + 0x48], 0x53aeb6ce
jmp 0x410190
cmp eax, 0xdb81bf75
jne 0x410190
mov eax, 0x52178bb8
cmp dword [esp + 0x54], 6
jb 0x410830
mov eax, 0x98fc4e15
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xd61827d0
jne 0x410190
mov al, byte [esp + 0x1a86]
test al, al
mov eax, 0xf8df2d2c
jne 0x410859
mov eax, 0x23cdeb84
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xd51aa9ef
jne 0x410190
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0xab86e4a4
jmp 0x410190
cmp eax, 0xd295f452
jne 0x410190
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cbc]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cc0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd0]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8ca0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce0]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a24]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cf0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8ce8]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a18]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [0x4c8cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c8cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c8e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4c8e50]
sub esp, 4
call fcn.0041655f
and eax, 0xf
lea ecx, [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416f14
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.0041655f
and eax, 1
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416f14
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.0041655f
and eax, 5
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416f14
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.0041655f
and eax, 0xc
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00416f14
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x64], eax
mov eax, dword [0x4c6e84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6e84]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004026c0
mov eax, dword [0x4c8cc8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4c8cf8]
mov ecx, dword [0x4c8ca8]
mov edx, dword [esp + 0x1a78]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c8e44]
sub esp, 0x10
mov eax, dword [0x4c8cc4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8ca4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c8e3c]
sub esp, 0xc
mov eax, dword [0x4c8cf4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8ccc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
call fcn.0041655f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4c6e88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov dword [esp], eax
call fcn.00402cf0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004046f0
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004046f0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004046f0
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.004046f0
mov eax, dword [0x4c6e9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6e9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004026c0
mov eax, dword [0x4c8cd4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x9ac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x7a2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb0]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cec]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x74]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c8e38]
sub esp, 0x10
mov eax, dword [0x4c8cd8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x420520
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [0x4c6ea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6ea0]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea0]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov dword [esp], eax
call fcn.00402cf0
mov eax, dword [0x4c8cdc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4c8cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x94]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [0x4c8cb8]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c8e48]
sub esp, 8
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4c8e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x420524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
mov dword [esp], esi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42052e
mov dword [esp + 4], 0x104
call fcn.004046f0
mov dword [esp], ebx
call fcn.00404a70
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.004046f0
mov eax, dword [0x4c6ea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c6ea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c6ea4]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.00402cf0
mov dword [esp + 0x1a48], edi
mov dword [esp + 0x1a4c], esi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c8e68]
sub esp, 4
cmp eax, 1
mov eax, 0x94d65670
jne 0x411544
mov eax, 0x260b2be
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xbee1bd39
jne 0x410190
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405110
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004046f0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004046f0
mov eax, dword [esp + 0x58]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x4c]
sub ecx, edx
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004046f0
mov dword [esp + 0x48], 0x10e541eb
jmp 0x410190
cmp eax, 0xba690bf6
jne 0x410190
mov dword [esp + 0x48], 0xff40dbaa
jmp 0x410190
cmp eax, 0xb5f79614
jne 0x410190
mov al, byte [esp + 0x1a85]
test al, al
mov eax, 0x883902cc
jne 0x411697
mov eax, 0xdb81bf75
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xb3e0a5d4
jne 0x410190
mov dword [esp + 0x48], 0xf63a5dc5
jmp 0x410190
cmp eax, 0xb139253d
jne 0x410190
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040e950
test eax, eax
setne byte [esp + 0x1a85]
mov dword [esp + 0x48], 0xb5f79614
jmp 0x410190
cmp eax, 0xab86e4a4
jne 0x410190
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c8e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0xb3e0a5d4
jmp 0x410190
cmp eax, 0x98fc4e14
jg 0x411834
cmp eax, 0x98564431
jne 0x410190
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c50
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405110
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004046f0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.00404a70
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004046f0
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [0x4c8e60]
sub esp, 8
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0xf0489700
jmp 0x410190
cmp eax, 0x9ade1b79
jg 0x411880
cmp eax, 0x98fc4e15
jne 0x410190
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0xa7716128
jne 0x411877
mov eax, 0x3ace09a3
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xa1c91f30
jg 0x4118b0
cmp eax, 0x9ade1b7a
jne 0x410190
mov al, byte [esp + 0x1a87]
test al, al
mov eax, 0x98564431
jne 0x4118a7
mov eax, 0xd295f452
mov dword [esp + 0x48], eax
jmp 0x410190
cmp eax, 0xa7716127
jg 0x4118cf
cmp eax, 0xa1c91f31
jne 0x410190
mov dword [esp + 0x48], 0x53aeb6ce
jmp 0x410190
cmp eax, 0xa7716128
je 0x4118ee
cmp eax, 0xa7a01559
jne 0x411967
mov dword [esp + 0x48], 0xab86e4a4
jmp 0x410190
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004043f0
lea eax, [esp + 0x13de]
mov dword [esp], eax
call fcn.00404a70
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00411990
mov dword [esp], eax
call fcn.00416582
mov dword [esp + 0x48], 0xf8df2d2c
jmp 0x410190
cmp eax, 0xa7d33695
jne 0x410190
mov dword [esp + 0x48], 0xb139253d
jmp 0x410190
mov eax, dword [esp + 0x1a88]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret