Function at 0x408540
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Delete file
Parse pe header
Self delete
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x583c02
mov eax, dword fs:[0]
push eax
mov eax, 0x18fc
call fcn.00559700
mov eax, dword [0x5ee004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp byte [edi + 0x15a], 1
jne 0x40858e
push 1
call fcn.0042ed25
push 0
mov ecx, edi
call fcn.0043178c
jmp 0x4085b0
push str.zeroefforts.dev
lea ecx, [edi + 0xd4]
call fcn.00411880
push 0xf
push str.zeroefforts.dev
lea ecx, [edi + 0xf4]
call fcn.0040e350
mov ecx, edi
call fcn.00406180
mov ecx, edi
call fcn.004035f0
cmp dword [edi + 0x108], 0x10
lea eax, [edi + 0xf4]
mov dword [ebp - 0x13b8], 0
jb 0x4085d9
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x13b8]
call fcn.004117e0
mov dword [ebp - 4], 0
mov eax, dword [edi + 0xd4]
test eax, eax
jne 0x408600
push 0x80004005
call fcn.004024b0
mov ecx, dword [ebp - 0x13b8]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40862c
test dx, dx
je 0x408628
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40862c
add ecx, 4
add eax, 4
test dx, dx
jne 0x408606
xor eax, eax
jmp 0x408631
sbb eax, eax
or eax, 1
test eax, eax
je 0x408653
push 0x1388
push ecx
push str.Incorrect_Password
call fcn.00407770
mov ecx, edi
call fcn.00406330
push 0
call fcn.005650f0
cmp byte [edi + 0x160], 1
jne 0x40868f
mov eax, dword [edi + 0x15c]
cmp eax, dword [edi + 0x164]
jne 0x40868f
mov eax, dword [edi + 0x168]
mov ecx, dword [edi + 0xd8]
cmp eax, ecx
jge 0x40868f
cmp ecx, 0xfffffcee
je 0x40868f
cmp eax, 0xfffffcee
je 0x40868f
mov dword [edi + 0xd8], eax
mov dword [ebp - 0x1408], 0
mov dword [ebp - 0x1404], 0xf
mov byte [ebp - 0x1418], 0
mov byte [ebp - 4], 1
mov edx, dword [edi + 0xd8]
cmp edx, 0xfffffcee
jne 0x4086d9
lea ecx, [edi + 0xdc]
mov edx, 0x5cd268
call fcn.0040ffa0
test al, al
jne 0x408a6b
jmp 0x408868
lea ecx, [ebp - 0x1400]
call fcn.004029e0
push eax
mov edx, str.You_have
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1650]
call fcn.0040fe90
mov ecx, eax
add esp, 4
mov dword [ebp - 0x1604], ecx
mov byte [ebp - 4], 3
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xd
jb 0x408745
lea eax, [edx + 0xd]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x408726
mov eax, dword [ecx]
push 0xd
lea esi, [eax + edx]
push str._tries_left._n
push esi
call fcn.0055c3b0
mov eax, dword [ebp - 0x1604]
add esp, 0xc
mov byte [esi + 0xd], 0
jmp 0x408760
push 0xd
push str._tries_left._n
mov byte [ebp - 0x1604], 0
push dword [ebp - 0x1604]
push 0xd
call fcn.004106e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x1418]
movups xmmword [ebp - 0x13e8], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x13e8]
push eax
movq qword [ebp - 0x13d8], xmm0
call fcn.0040ccf0
mov edx, dword [ebp - 0x13d4]
cmp edx, 0x10
jb 0x4087d4
mov ecx, dword [ebp - 0x13e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4087ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408859
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x163c]
cmp edx, 0x10
jb 0x40880e
mov ecx, dword [ebp - 0x1650]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408804
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408859
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x13ec]
mov dword [ebp - 0x1640], 0
mov dword [ebp - 0x163c], 0xf
mov byte [ebp - 0x1650], 0
cmp edx, 0x10
jb 0x408868
mov ecx, dword [ebp - 0x1400]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40885e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40885e
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
lea esi, [edi + 0xdc]
mov edx, 0x5cd268
mov ecx, esi
call fcn.0040ffa0
test al, al
jne 0x4089af
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040cd70
lea eax, [ebp - 0x1400]
push eax
call fcn.00403c50
mov esi, eax
push str.Program_will_expire_on
lea edx, [ebp - 0x1418]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1650]
call fcn.0040fcd0
add esp, 4
push esi
push eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x16e0]
push dword [ebp - 0x1628]
call fcn.00410d80
lea eax, [ebp - 0x16e0]
push eax
lea ecx, [ebp - 0x1418]
call fcn.0040ccf0
mov edx, dword [ebp - 0x16cc]
cmp edx, 0x10
jb 0x40891b
mov ecx, dword [ebp - 0x16e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408911
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4089a0
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x163c]
cmp edx, 0x10
jb 0x408955
mov ecx, dword [ebp - 0x1650]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40894b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4089a0
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x13ec]
mov dword [ebp - 0x1640], 0
mov dword [ebp - 0x163c], 0xf
mov byte [ebp - 0x1650], 0
cmp edx, 0x10
jb 0x4089af
mov ecx, dword [ebp - 0x1400]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4089a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4089a5
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
cmp dword [ebp - 0x1404], 0x10
lea eax, [ebp - 0x1418]
lea ecx, [ebp - 0x139c]
mov dword [ebp - 0x139c], 0
cmovae eax, dword [ebp - 0x1418]
push eax
call fcn.004117e0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x139c]
push str.user32.dll
mov dword [ebp - 0x1604], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x408a49
mov eax, dword [0x5f79c4]
test eax, eax
jne 0x408a27
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x408a42
push str.MessageBoxTimeoutW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x5f79c4], eax
test eax, eax
je 0x408a42
push 0x1388
push 0
push 0x11040
push str.Information
push dword [ebp - 0x1604]
push 0
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov edx, dword [ebp - 0x139c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408a6b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [edi + 0x154]
lea esi, [edi + 0x140]
mov ecx, esi
cmp edx, 0x10
jb 0x408a80
mov ecx, dword [esi]
add ecx, dword [esi + 0x10]
mov eax, esi
cmp edx, 0x10
jb 0x408a8c
mov eax, dword [esi]
push ecx
push eax
call fcn.0055afa6
add esp, 8
push 0
push str.attrib__h_ExeLock.tmp
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0xb0
lea eax, [ebp - 0x1600]
push 0
push eax
call fcn.0055c930
add esp, 4
lea ecx, [ebp - 0x1600]
push 0x22
push 0x5cd55c
call fcn.0040b540
mov byte [ebp - 4], 7
cmp dword [ebp - 0x15b0], 0
je 0x40adff
xor eax, eax
mov dword [ebp - 0x139c], eax
cmp dword [edi + 0x150], eax
jbe 0x408b1d
nop dword [eax]
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x408afa
mov ecx, dword [esi]
mov dl, byte [ecx + eax]
lea ecx, [ebp - 0x1600]
call fcn.0040f6b0
mov eax, dword [ebp - 0x139c]
inc eax
mov dword [ebp - 0x139c], eax
cmp eax, dword [edi + 0x150]
jb 0x408af0
lea ecx, [ebp - 0x15fc]
call fcn.0040df60
test eax, eax
jne 0x408b57
mov eax, dword [ebp - 0x1600]
lea ecx, [ebp - 0x1600]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.004033c0
mov esi, dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.attrib_h_ExeLock.tmp
call esi
lea eax, [ebp - 0x1624]
mov dword [ebp - 0x14a0], 0x44
push eax
lea eax, [ebp - 0x14a0]
xorps xmm0, xmm0
push eax
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push str.ExeLock.tmp
movlpd qword [ebp - 0x149c], xmm0
movlpd qword [ebp - 0x1494], xmm0
movlpd qword [ebp - 0x148c], xmm0
movlpd qword [ebp - 0x1484], xmm0
movlpd qword [ebp - 0x147c], xmm0
movlpd qword [ebp - 0x1474], xmm0
movlpd qword [ebp - 0x146c], xmm0
movlpd qword [ebp - 0x1464], xmm0
movups xmmword [ebp - 0x1624], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x40a449
xorps xmm0, xmm0
mov dword [ebp - 0x145c], 0x44
lea eax, [ebp - 0x1398]
movlpd qword [ebp - 0x1458], xmm0
push 0x1388
push eax
movlpd qword [ebp - 0x1450], xmm0
movlpd qword [ebp - 0x1448], xmm0
movlpd qword [ebp - 0x1440], xmm0
movlpd qword [ebp - 0x1438], xmm0
movlpd qword [ebp - 0x1430], xmm0
movlpd qword [ebp - 0x1428], xmm0
movlpd qword [ebp - 0x1420], xmm0
movups xmmword [ebp - 0x1614], xmm0
call fcn.00564d98
lea ecx, [ebp - 0x1398]
mov dword [ebp - 0x13c0], 0
add esp, 8
mov dword [ebp - 0x13bc], 0xf
mov byte [ebp - 0x13d0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408c75
sub ecx, edx
lea eax, [ebp - 0x1398]
push ecx
push eax
lea ecx, [ebp - 0x13d0]
call fcn.0040e350
push 0x5cd140
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1848]
call fcn.0040fcd0
mov dword [ebp - 0x1628], eax
push 0x5cd140
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x18a8]
call fcn.0040fcd0
mov dword [ebp - 0x1638], eax
push 0x5cd140
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1890]
call fcn.0040fcd0
mov dword [ebp - 0x1634], eax
push 0x5cd19c
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1878]
call fcn.0040fcd0
mov dword [ebp - 0x1630], eax
push 0x5cd19c
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1860]
call fcn.0040fcd0
mov dword [ebp - 0x162c], eax
push 0x5cd1dc
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18c0]
call fcn.0040fcd0
mov dword [ebp - 0x139c], eax
push 0x5cd1dc
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x18d8]
call fcn.0040fcd0
push eax
mov edx, str._echo_off_n:repeat_ndel__f__s__a__q__
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x18f0]
call fcn.0040fe90
mov ecx, eax
add esp, 0x20
mov dword [ebp - 0x1604], ecx
mov byte [ebp - 4], 0x10
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xc
jb 0x408dcc
lea eax, [edx + 0xc]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x408dad
mov eax, dword [ecx]
push 0xc
lea esi, [eax + edx]
push str.__nif_exist__
push esi
call fcn.0055c3b0
mov eax, dword [ebp - 0x1604]
add esp, 0xc
mov byte [esi + 0xc], 0
jmp 0x408de7
push 0xc
push str.__nif_exist__
mov byte [ebp - 0x1604], 0
push dword [ebp - 0x1604]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x17d0]
push dword [ebp - 0x139c]
lea ecx, [ebp - 0x1698]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1684]
mov eax, edx
mov ecx, dword [ebp - 0x1688]
sub eax, ecx
mov dword [ebp - 0x1604], ecx
push 0x1f
push str.__goto_repeat_ndel__f__s__a__q__
cmp eax, 0x1f
jb 0x408e8f
cmp edx, 0x10
lea esi, [ebp - 0x1698]
lea eax, [ecx + 0x1f]
cmovae esi, dword [ebp - 0x1698]
mov dword [ebp - 0x1688], eax
lea eax, [esi + ecx]
push eax
call fcn.0055c3b0
mov eax, dword [ebp - 0x1604]
add esp, 0xc
mov byte [esi + eax + 0x1f], 0
lea eax, [ebp - 0x1698]
jmp 0x408ea9
mov byte [ebp - 0x1604], 0
lea ecx, [ebp - 0x1698]
push dword [ebp - 0x1604]
push 0x1f
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1758], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1748], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x1758]
push dword [ebp - 0x162c]
lea ecx, [ebp - 0x1680]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x166c]
mov eax, edx
mov ecx, dword [ebp - 0x1670]
sub eax, ecx
push 0xc
push str.__nif_exist__
cmp eax, 0xc
jb 0x408f43
cmp edx, 0x10
lea esi, [ebp - 0x1680]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x1680]
add esi, ecx
mov dword [ebp - 0x1670], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x1680]
jmp 0x408f5d
mov byte [ebp - 0x162c], 0
lea ecx, [ebp - 0x1680]
push dword [ebp - 0x162c]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1770], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1760], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x1770]
push dword [ebp - 0x1630]
lea ecx, [ebp - 0x1740]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x172c]
mov eax, edx
mov ecx, dword [ebp - 0x1730]
sub eax, ecx
push 0x19
push str.__goto_repeat_nattrib__h__
cmp eax, 0x19
jb 0x408ff7
cmp edx, 0x10
lea esi, [ebp - 0x1740]
lea eax, [ecx + 0x19]
cmovae esi, dword [ebp - 0x1740]
add esi, ecx
mov dword [ebp - 0x1730], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x19], 0
lea eax, [ebp - 0x1740]
jmp 0x409011
mov byte [ebp - 0x1630], 0
lea ecx, [ebp - 0x1740]
push dword [ebp - 0x1630]
push 0x19
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1788], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1778], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x1788]
push dword [ebp - 0x1634]
lea ecx, [ebp - 0x1728]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x1714]
mov eax, edx
mov ecx, dword [ebp - 0x1718]
sub eax, ecx
push 0x10
push str.__n:repeat2_nren__
cmp eax, 0x10
jb 0x4090ab
cmp edx, 0x10
lea esi, [ebp - 0x1728]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x1728]
add esi, ecx
mov dword [ebp - 0x1718], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x1728]
jmp 0x4090c5
mov byte [ebp - 0x1634], 0
lea ecx, [ebp - 0x1728]
push dword [ebp - 0x1634]
push 0x10
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17a0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1790], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x17a0]
push dword [ebp - 0x1638]
lea ecx, [ebp - 0x1710]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x16fc]
mov eax, edx
mov ecx, dword [ebp - 0x1700]
sub eax, ecx
push 0x1a
push str.___ExeLock.exe__nif_exist__
cmp eax, 0x1a
jb 0x40915f
cmp edx, 0x10
lea esi, [ebp - 0x1710]
lea eax, [ecx + 0x1a]
cmovae esi, dword [ebp - 0x1710]
add esi, ecx
mov dword [ebp - 0x1700], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1a], 0
lea eax, [ebp - 0x1710]
jmp 0x409179
mov byte [ebp - 0x1638], 0
lea ecx, [ebp - 0x1710]
push dword [ebp - 0x1638]
push 0x1a
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17a8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x17b8]
push dword [ebp - 0x1628]
lea ecx, [ebp - 0x16f8]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x16e4]
mov eax, edx
mov ecx, dword [ebp - 0x16e8]
sub eax, ecx
push 0x2f
push str.__goto_repeat2_ndel__f__s__a__q___f0___exit__b
cmp eax, 0x2f
jb 0x409213
cmp edx, 0x10
lea esi, [ebp - 0x16f8]
lea eax, [ecx + 0x2f]
cmovae esi, dword [ebp - 0x16f8]
add esi, ecx
mov dword [ebp - 0x16e8], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x2f], 0
lea eax, [ebp - 0x16f8]
jmp 0x40922d
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x16f8]
push dword [ebp - 0x1628]
push 0x2f
call fcn.004106e0
mov dword [ebp - 0x13d8], 0
mov dword [ebp - 0x13d4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x13e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x13d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x16e4]
cmp edx, 0x10
jb 0x4092a7
mov ecx, dword [ebp - 0x16f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40929d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x16e8], 0
mov dword [ebp - 0x16e4], 0xf
mov byte [ebp - 0x16f8], 0
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x17a4]
cmp edx, 0x10
jb 0x409300
mov ecx, dword [ebp - 0x17b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4092f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x16fc]
cmp edx, 0x10
jb 0x40933e
mov ecx, dword [ebp - 0x1710]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409334
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1700], 0
mov dword [ebp - 0x16fc], 0xf
mov byte [ebp - 0x1710], 0
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x178c]
cmp edx, 0x10
jb 0x409397
mov ecx, dword [ebp - 0x17a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40938d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x1714]
cmp edx, 0x10
jb 0x4093d5
mov ecx, dword [ebp - 0x1728]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4093cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1718], 0
mov dword [ebp - 0x1714], 0xf
mov byte [ebp - 0x1728], 0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x1774]
cmp edx, 0x10
jb 0x40942e
mov ecx, dword [ebp - 0x1788]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409424
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x172c]
cmp edx, 0x10
jb 0x40946c
mov ecx, dword [ebp - 0x1740]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409462
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1730], 0
mov dword [ebp - 0x172c], 0xf
mov byte [ebp - 0x1740], 0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x175c]
cmp edx, 0x10
jb 0x4094c5
mov ecx, dword [ebp - 0x1770]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4094bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x166c]
cmp edx, 0x10
jb 0x409503
mov ecx, dword [ebp - 0x1680]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4094f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1670], 0
mov dword [ebp - 0x166c], 0xf
mov byte [ebp - 0x1680], 0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x1744]
cmp edx, 0x10
jb 0x40955c
mov ecx, dword [ebp - 0x1758]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409552
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x1684]
cmp edx, 0x10
jb 0x40959a
mov ecx, dword [ebp - 0x1698]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409590
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1688], 0
mov dword [ebp - 0x1684], 0xf
mov byte [ebp - 0x1698], 0
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x17bc]
cmp edx, 0x10
jb 0x4095f3
mov ecx, dword [ebp - 0x17d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4095e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x18dc]
cmp edx, 0x10
jb 0x409631
mov ecx, dword [ebp - 0x18f0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409627
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x18e0], 0
mov dword [ebp - 0x18dc], 0xf
mov byte [ebp - 0x18f0], 0
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x18c4]
cmp edx, 0x10
jb 0x40968a
mov ecx, dword [ebp - 0x18d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409680
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x18c8], 0
mov dword [ebp - 0x18c4], 0xf
mov byte [ebp - 0x18d8], 0
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x18ac]
cmp edx, 0x10
jb 0x4096e3
mov ecx, dword [ebp - 0x18c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4096d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x18b0], 0
mov dword [ebp - 0x18ac], 0xf
mov byte [ebp - 0x18c0], 0
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x184c]
cmp edx, 0x10
jb 0x40973c
mov ecx, dword [ebp - 0x1860]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409732
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1850], 0
mov dword [ebp - 0x184c], 0xf
mov byte [ebp - 0x1860], 0
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x1864]
cmp edx, 0x10
jb 0x409795
mov ecx, dword [ebp - 0x1878]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40978b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1868], 0
mov dword [ebp - 0x1864], 0xf
mov byte [ebp - 0x1878], 0
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x187c]
cmp edx, 0x10
jb 0x4097ee
mov ecx, dword [ebp - 0x1890]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4097e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1880], 0
mov dword [ebp - 0x187c], 0xf
mov byte [ebp - 0x1890], 0
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x1894]
cmp edx, 0x10
jb 0x409843
mov ecx, dword [ebp - 0x18a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409839
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40988e
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1898], 0
mov dword [ebp - 0x1894], 0xf
mov byte [ebp - 0x18a8], 0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x1834]
cmp edx, 0x10
jb 0x40989d
mov ecx, dword [ebp - 0x1848]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409893
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409893
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
cmp byte [edi + 0x159], 1
mov dword [ebp - 0x1838], 0
mov dword [ebp - 0x1834], 0xf
mov byte [ebp - 0x1848], 0
jne 0x40a322
push 0x5cd140
lea edx, [ebp - 0x13d0]
lea ecx, [ebp - 0x1908]
call fcn.0040fcd0
mov dword [ebp - 0x1604], eax
push 0x5cd140
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x17b8]
call fcn.0040fcd0
mov dword [ebp - 0x162c], eax
push 0x5cd19c
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x17a0]
call fcn.0040fcd0
mov dword [ebp - 0x1630], eax
push 0x5cd19c
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1788]
call fcn.0040fcd0
mov dword [ebp - 0x1634], eax
push 0x5cd1dc
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1770]
call fcn.0040fcd0
mov dword [ebp - 0x1638], eax
push 0x5cd1dc
lea edx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1758]
call fcn.0040fcd0
push eax
mov edx, str._echo_off_n:repeat_ndel__f__s__a__q__
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x17d0]
call fcn.0040fe90
mov ecx, eax
add esp, 0x1c
mov dword [ebp - 0x1628], ecx
mov byte [ebp - 4], 0x38
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xc
jb 0x4099dc
lea eax, [edx + 0xc]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x4099bd
mov eax, dword [ecx]
push 0xc
lea esi, [eax + edx]
push str.__nif_exist__
push esi
call fcn.0055c3b0
mov eax, dword [ebp - 0x1628]
add esp, 0xc
mov byte [esi + 0xc], 0
jmp 0x4099f7
push 0xc
push str.__nif_exist__
mov byte [ebp - 0x1628], 0
push dword [ebp - 0x1628]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x16e0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x16d0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x16e0]
push dword [ebp - 0x1638]
lea ecx, [ebp - 0x1650]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x163c]
mov eax, edx
mov ecx, dword [ebp - 0x1640]
sub eax, ecx
push 0x1f
push str.__goto_repeat_ndel__f__s__a__q__
cmp eax, 0x1f
jb 0x409a91
cmp edx, 0x10
lea esi, [ebp - 0x1650]
lea eax, [ecx + 0x1f]
cmovae esi, dword [ebp - 0x1650]
add esi, ecx
mov dword [ebp - 0x1640], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1f], 0
lea eax, [ebp - 0x1650]
jmp 0x409aab
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1650]
push dword [ebp - 0x1628]
push 0x1f
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x17e8]
push dword [ebp - 0x1634]
lea ecx, [ebp - 0x1668]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x1654]
mov eax, edx
mov ecx, dword [ebp - 0x1658]
sub eax, ecx
push 0xc
push str.__nif_exist__
cmp eax, 0xc
jb 0x409b45
cmp edx, 0x10
lea esi, [ebp - 0x1668]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x1668]
add esi, ecx
mov dword [ebp - 0x1658], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x1668]
jmp 0x409b5f
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1668]
push dword [ebp - 0x1628]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1830], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1820], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x1830]
push dword [ebp - 0x1630]
lea ecx, [ebp - 0x13b4]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x13a0]
mov eax, edx
mov ecx, dword [ebp - 0x13a4]
sub eax, ecx
push 0x1f
push str.__goto_repeat_ndel__f__s__a__q__
cmp eax, 0x1f
jb 0x409bf9
cmp edx, 0x10
lea esi, [ebp - 0x13b4]
lea eax, [ecx + 0x1f]
cmovae esi, dword [ebp - 0x13b4]
add esi, ecx
mov dword [ebp - 0x13a4], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1f], 0
lea eax, [ebp - 0x13b4]
jmp 0x409c13
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x13b4]
push dword [ebp - 0x1628]
push 0x1f
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1818], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1808], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x1818]
push dword [ebp - 0x162c]
lea ecx, [ebp - 0x16b0]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x169c]
mov eax, edx
mov ecx, dword [ebp - 0x16a0]
sub eax, ecx
push 0x1a
push str.___ExeLock.exe__nif_exist__
cmp eax, 0x1a
jb 0x409cad
cmp edx, 0x10
lea esi, [ebp - 0x16b0]
lea eax, [ecx + 0x1a]
cmovae esi, dword [ebp - 0x16b0]
add esi, ecx
mov dword [ebp - 0x16a0], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1a], 0
lea eax, [ebp - 0x16b0]
jmp 0x409cc7
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x16b0]
push dword [ebp - 0x1628]
push 0x1a
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1800], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x1800]
push dword [ebp - 0x1604]
lea ecx, [ebp - 0x16c8]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x16b4]
mov eax, edx
mov ecx, dword [ebp - 0x16b8]
sub eax, ecx
push 0x2e
push str.__goto_repeat_ndel__f__s__a__q___f0___exit__b
cmp eax, 0x2e
jb 0x409d61
cmp edx, 0x10
lea esi, [ebp - 0x16c8]
lea eax, [ecx + 0x2e]
cmovae esi, dword [ebp - 0x16c8]
add esi, ecx
mov dword [ebp - 0x16b8], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x2e], 0
lea eax, [ebp - 0x16c8]
jmp 0x409d7b
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x16c8]
push dword [ebp - 0x1628]
push 0x2e
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1400], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x16b4]
movq qword [ebp - 0x13f0], xmm0
cmp edx, 0x10
jb 0x409de1
mov ecx, dword [ebp - 0x16c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409dd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x17ec]
mov dword [ebp - 0x16b8], 0
mov dword [ebp - 0x16b4], 0xf
mov byte [ebp - 0x16c8], 0
cmp edx, 0x10
jb 0x409e3a
mov ecx, dword [ebp - 0x1800]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409e30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x169c]
cmp edx, 0x10
jb 0x409e78
mov ecx, dword [ebp - 0x16b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409e6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x1804]
mov dword [ebp - 0x16a0], 0
mov dword [ebp - 0x169c], 0xf
mov byte [ebp - 0x16b0], 0
cmp edx, 0x10
jb 0x409ed1
mov ecx, dword [ebp - 0x1818]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ec7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x13a0]
cmp edx, 0x10
jb 0x409f0f
mov ecx, dword [ebp - 0x13b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409f05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x181c]
mov dword [ebp - 0x13a4], 0
mov dword [ebp - 0x13a0], 0xf
mov byte [ebp - 0x13b4], 0
cmp edx, 0x10
jb 0x409f68
mov ecx, dword [ebp - 0x1830]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409f5e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x1654]
cmp edx, 0x10
jb 0x409fa6
mov ecx, dword [ebp - 0x1668]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409f9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x17d4]
mov dword [ebp - 0x1658], 0
mov dword [ebp - 0x1654], 0xf
mov byte [ebp - 0x1668], 0
cmp edx, 0x10
jb 0x409fff
mov ecx, dword [ebp - 0x17e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ff5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x163c]
cmp edx, 0x10
jb 0x40a03d
mov ecx, dword [ebp - 0x1650]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a033
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x16cc]
mov dword [ebp - 0x1640], 0
mov dword [ebp - 0x163c], 0xf
mov byte [ebp - 0x1650], 0
cmp edx, 0x10
jb 0x40a096
mov ecx, dword [ebp - 0x16e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a08c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x17bc]
cmp edx, 0x10
jb 0x40a0d4
mov ecx, dword [ebp - 0x17d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a0ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x1744]
mov dword [ebp - 0x17c0], 0
mov dword [ebp - 0x17bc], 0xf
mov byte [ebp - 0x17d0], 0
cmp edx, 0x10
jb 0x40a12d
mov ecx, dword [ebp - 0x1758]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a123
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x175c]
mov dword [ebp - 0x1748], 0
mov dword [ebp - 0x1744], 0xf
mov byte [ebp - 0x1758], 0
cmp edx, 0x10
jb 0x40a186
mov ecx, dword [ebp - 0x1770]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a17c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x1774]
mov dword [ebp - 0x1760], 0
mov dword [ebp - 0x175c], 0xf
mov byte [ebp - 0x1770], 0
cmp edx, 0x10
jb 0x40a1df
mov ecx, dword [ebp - 0x1788]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a1d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x178c]
mov dword [ebp - 0x1778], 0
mov dword [ebp - 0x1774], 0xf
mov byte [ebp - 0x1788], 0
cmp edx, 0x10
jb 0x40a238
mov ecx, dword [ebp - 0x17a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a22e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x17a4]
mov dword [ebp - 0x1790], 0
mov dword [ebp - 0x178c], 0xf
mov byte [ebp - 0x17a0], 0
cmp edx, 0x10
jb 0x40a28d
mov ecx, dword [ebp - 0x17b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a283
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a2d8
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x18f4]
mov dword [ebp - 0x17a8], 0
mov dword [ebp - 0x17a4], 0xf
mov byte [ebp - 0x17b8], 0
cmp edx, 0x10
jb 0x40a2e7
mov ecx, dword [ebp - 0x1908]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a2dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a2dd
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
mov edx, dword [ebp - 0x13ec]
cmp edx, 0x10
jb 0x40a322
mov ecx, dword [ebp - 0x1400]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a318
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a318
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
mov eax, dword [edi + 0xd8]
cmp eax, 0xfffffcee
je 0x40a336
dec eax
mov dword [edi + 0xd8], eax
push 0xb0
lea eax, [ebp - 0x1550]
push 0
push eax
call fcn.0055c930
add esp, 4
lea ecx, [ebp - 0x1550]
push 2
push 0x5cd210
call fcn.0040b540
mov byte [ebp - 4], 0x43
cmp dword [ebp - 0x1500], 0
je 0x40a42b
lea edx, [ebp - 0x13e8]
lea ecx, [ebp - 0x1550]
call fcn.0040ff80
lea ecx, [ebp - 0x1550]
call fcn.0040b500
push 0
push str.attrib_h___Delete_.cmd_
call dword [sym.imp.KERNEL32.dll_WinExec]
lea eax, [ebp - 0x1614]
push eax
lea eax, [ebp - 0x145c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push 0
push str._Delete_.cmd
call eax
push dword [ebp - 0x1610]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1614]
call esi
mov ecx, edi
call fcn.004039a0
mov ecx, edi
call fcn.00404e90
push 0xffffffffffffffff
push dword [ebp - 0x1624]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x1624]
call esi
push dword [ebp - 0x1620]
call esi
lea ecx, [ebp - 0x1550]
call fcn.00407870
lea ecx, [ebp - 0x13e8]
call fcn.004020f0
lea ecx, [ebp - 0x13d0]
call fcn.004020f0
jmp 0x40ade0
push 0x2710
push ecx
push str.You_have_no_rights_to_open_file._nPossible_reason:_n_No_Admin_rights_change_directory_to_other_drive_then_C:__nContact_app_provider._nError_code:_4
call fcn.00407770
mov ecx, edi
call fcn.00406330
push 0
call fcn.005650f0
push 1
push str.start____ExeLock.exe
call esi
cmp eax, 0x1f
jb 0x40adc9
xorps xmm0, xmm0
mov dword [ebp - 0x145c], 0x44
lea eax, [ebp - 0x1398]
movlpd qword [ebp - 0x1458], xmm0
push 0x1388
push eax
movlpd qword [ebp - 0x1450], xmm0
movlpd qword [ebp - 0x1448], xmm0
movlpd qword [ebp - 0x1440], xmm0
movlpd qword [ebp - 0x1438], xmm0
movlpd qword [ebp - 0x1430], xmm0
movlpd qword [ebp - 0x1428], xmm0
movlpd qword [ebp - 0x1420], xmm0
movups xmmword [ebp - 0x1614], xmm0
call fcn.00564d98
lea ecx, [ebp - 0x1398]
mov dword [ebp - 0x13a4], 0
add esp, 8
mov dword [ebp - 0x13a0], 0xf
mov byte [ebp - 0x13b4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a4e7
sub ecx, edx
lea eax, [ebp - 0x1398]
push ecx
push eax
lea ecx, [ebp - 0x13b4]
call fcn.0040e350
push 0x5cd140
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x1848]
call fcn.0040fcd0
mov dword [ebp - 0x139c], eax
push 0x5cd140
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x17d0]
call fcn.0040fcd0
mov dword [ebp - 0x1604], eax
push 0x5cd140
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1758]
call fcn.0040fcd0
mov dword [ebp - 0x162c], eax
push 0x5cd19c
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1770]
call fcn.0040fcd0
mov dword [ebp - 0x1630], eax
push 0x5cd19c
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x1788]
call fcn.0040fcd0
mov dword [ebp - 0x1634], eax
push 0x5cd1dc
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x17a0]
call fcn.0040fcd0
mov dword [ebp - 0x1638], eax
push 0x5cd1dc
lea edx, [ebp - 0x13b4]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x17b8]
call fcn.0040fcd0
push eax
mov edx, str._echo_off_n:repeat_ndel__f__s__a__q__
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x1908]
call fcn.0040fe90
mov ecx, eax
add esp, 0x20
mov dword [ebp - 0x1628], ecx
mov byte [ebp - 4], 0x4c
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xc
jb 0x40a63e
lea eax, [edx + 0xc]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x40a61f
mov eax, dword [ecx]
push 0xc
lea esi, [eax + edx]
push str.__nif_exist__
push esi
call fcn.0055c3b0
mov eax, dword [ebp - 0x1628]
add esp, 0xc
mov byte [esi + 0xc], 0
jmp 0x40a659
push 0xc
push str.__nif_exist__
mov byte [ebp - 0x1628], 0
push dword [ebp - 0x1628]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1800], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x1800]
push dword [ebp - 0x1638]
lea ecx, [ebp - 0x1680]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x166c]
mov eax, edx
mov ecx, dword [ebp - 0x1670]
sub eax, ecx
push 0x1f
push str.__goto_repeat_ndel__f__s__a__q__
cmp eax, 0x1f
jb 0x40a6f3
cmp edx, 0x10
lea esi, [ebp - 0x1680]
lea eax, [ecx + 0x1f]
cmovae esi, dword [ebp - 0x1680]
add esi, ecx
mov dword [ebp - 0x1670], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1f], 0
lea eax, [ebp - 0x1680]
jmp 0x40a70d
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1680]
push dword [ebp - 0x1628]
push 0x1f
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1818], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1808], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x1818]
push dword [ebp - 0x1634]
lea ecx, [ebp - 0x1698]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x1684]
mov eax, edx
mov ecx, dword [ebp - 0x1688]
sub eax, ecx
push 0xc
push str.__nif_exist__
cmp eax, 0xc
jb 0x40a7a7
cmp edx, 0x10
lea esi, [ebp - 0x1698]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x1698]
add esi, ecx
mov dword [ebp - 0x1688], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x1698]
jmp 0x40a7c1
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1698]
push dword [ebp - 0x1628]
push 0xc
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1830], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1820], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x1830]
push dword [ebp - 0x1630]
lea ecx, [ebp - 0x16c8]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0x16b4]
mov eax, edx
mov ecx, dword [ebp - 0x16b8]
sub eax, ecx
push 0x19
push str.__goto_repeat_nattrib__h__
cmp eax, 0x19
jb 0x40a85b
cmp edx, 0x10
lea esi, [ebp - 0x16c8]
lea eax, [ecx + 0x19]
cmovae esi, dword [ebp - 0x16c8]
add esi, ecx
mov dword [ebp - 0x16b8], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x19], 0
lea eax, [ebp - 0x16c8]
jmp 0x40a875
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x16c8]
push dword [ebp - 0x1628]
push 0x19
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1400], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x13f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x1400]
push dword [ebp - 0x162c]
lea ecx, [ebp - 0x16b0]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x169c]
mov eax, edx
mov ecx, dword [ebp - 0x16a0]
sub eax, ecx
push 0x10
push str.__n:repeat2_nren__
cmp eax, 0x10
jb 0x40a90f
cmp edx, 0x10
lea esi, [ebp - 0x16b0]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x16b0]
add esi, ecx
mov dword [ebp - 0x16a0], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x16b0]
jmp 0x40a929
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x16b0]
push dword [ebp - 0x1628]
push 0x10
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x17e8]
push dword [ebp - 0x1604]
lea ecx, [ebp - 0x1668]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x1654]
mov eax, edx
mov ecx, dword [ebp - 0x1658]
sub eax, ecx
push 0x1a
push str.___ExeLock.exe__nif_exist__
cmp eax, 0x1a
jb 0x40a9c3
cmp edx, 0x10
lea esi, [ebp - 0x1668]
lea eax, [ecx + 0x1a]
cmovae esi, dword [ebp - 0x1668]
add esi, ecx
mov dword [ebp - 0x1658], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x1a], 0
lea eax, [ebp - 0x1668]
jmp 0x40a9dd
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1668]
push dword [ebp - 0x1628]
push 0x1a
call fcn.004106e0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x16e0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x16d0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x16e0]
push dword [ebp - 0x139c]
lea ecx, [ebp - 0x1650]
push eax
push dword [ebp - 0x1628]
call fcn.00410d80
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x163c]
mov eax, edx
mov ecx, dword [ebp - 0x1640]
sub eax, ecx
push 0x2f
push str.__goto_repeat2_ndel__f__s__a__q___f0___exit__b
cmp eax, 0x2f
jb 0x40aa77
cmp edx, 0x10
lea esi, [ebp - 0x1650]
lea eax, [ecx + 0x2f]
cmovae esi, dword [ebp - 0x1650]
add esi, ecx
mov dword [ebp - 0x1640], eax
push esi
call fcn.0055c3b0
add esp, 0xc
mov byte [esi + 0x2f], 0
lea eax, [ebp - 0x1650]
jmp 0x40aa91
mov byte [ebp - 0x1628], 0
lea ecx, [ebp - 0x1650]
push dword [ebp - 0x1628]
push 0x2f
call fcn.004106e0
mov dword [ebp - 0x13d8], 0
mov dword [ebp - 0x13d4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x13e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x13d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x163c]
cmp edx, 0x10
jb 0x40ab0b
mov ecx, dword [ebp - 0x1650]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ab90
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1640], 0
mov dword [ebp - 0x163c], 0xf
mov byte [ebp - 0x1650], 0
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x16cc]
cmp edx, 0x10
jb 0x40ab60
mov ecx, dword [ebp - 0x16e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ab90
push edx
push ecx
call fcn.005590bc
add esp, 8
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x1654]
cmp edx, 0x10
jb 0x40ab9f
mov ecx, dword [ebp - 0x1668]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40ab95
call fcn.0055f72a
push edx
push ecx
call fcn.005590bc
add esp, 8
mov dword [ebp - 0x1658], 0
mov dword [ebp - 0x1654], 0xf
mov byte [ebp - 0x1668], 0
mov eax, dword [ebp - 0x17d4]
cmp eax, 0x10
jb 0x40ac0b
mov ecx, dword [ebp - 0x17e8]
inc eax
mov dword [ebp - 0x139c], eax
mov dword [ebp - 0x1604], ecx
cmp eax, 0x1000
jb 0x40ac01
lea eax, [ebp - 0x139c]
push eax
lea eax, [ebp - 0x1604]
push eax
call fcn.00401c30
mov eax, dword [ebp - 0x139c]
add esp, 8
mov ecx, dword [ebp - 0x1604]
push eax
push ecx
call fcn.005590bc
add esp, 8
lea ecx, [ebp - 0x16b0]
call fcn.004020f0
lea ecx, [ebp - 0x1400]
call fcn.004020f0
lea ecx, [ebp - 0x16c8]
call fcn.004020f0
lea ecx, [ebp - 0x1830]
call fcn.004020f0
lea ecx, [ebp - 0x1698]
call fcn.004020f0
lea ecx, [ebp - 0x1818]
call fcn.004020f0
lea ecx, [ebp - 0x1680]
call fcn.004020f0
lea ecx, [ebp - 0x1800]
call fcn.004020f0
lea ecx, [ebp - 0x1908]
call fcn.004020f0
lea ecx, [ebp - 0x17b8]
call fcn.004020f0
lea ecx, [ebp - 0x17a0]
call fcn.004020f0
lea ecx, [ebp - 0x1788]
call fcn.004020f0
lea ecx, [ebp - 0x1770]
call fcn.004020f0
lea ecx, [ebp - 0x1758]
call fcn.004020f0
lea ecx, [ebp - 0x17d0]
call fcn.004020f0
lea ecx, [ebp - 0x1848]
mov byte [ebp - 4], 0x6d
call fcn.004020f0
mov eax, dword [edi + 0xd8]
cmp eax, 0xfffffcee
je 0x40acd3
dec eax
mov dword [edi + 0xd8], eax
push 0xb0
lea eax, [ebp - 0x1550]
push 0
push eax
call fcn.0055c930
add esp, 4
lea ecx, [ebp - 0x1550]
push 2
push 0x5cd210
call fcn.0040b540
mov byte [ebp - 4], 0x6e
cmp dword [ebp - 0x1500], 0
je 0x40adab
lea edx, [ebp - 0x13e8]
lea ecx, [ebp - 0x1550]
call fcn.0040ff80
lea ecx, [ebp - 0x1550]
call fcn.0040b500
mov esi, dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.attrib_h___Delete_.cmd_
call esi
lea eax, [ebp - 0x1614]
push eax
lea eax, [ebp - 0x145c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push 0
push str._Delete_.cmd
call eax
push 0
push str.start__Delete_.cmd
call esi
push dword [ebp - 0x1610]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1614]
call esi
mov ecx, edi
call fcn.00404e90
lea ecx, [ebp - 0x1550]
call fcn.00407870
lea ecx, [ebp - 0x13e8]
call fcn.004020f0
lea ecx, [ebp - 0x13b4]
call fcn.004020f0
jmp 0x40ade0
push 0x2710
push ecx
push str.You_have_no_rights_to_open_file._nPossible_reason:_n_No_Admin_rights_change_directory_to_other_drive_then_C:__nContact_app_provider._nError_code:_3
call fcn.00407770
mov ecx, edi
call fcn.00406330
push 0
call fcn.005650f0
push 0x2710
push ecx
push str.You_have_no_rights_to_open_file._nPossible_reason:_n_No_Admin_rights_change_directory_to_other_drive_then_C:__nContact_app_provider._nError_code:_3
call fcn.00407770
mov ecx, edi
call fcn.00406330
push 0x5cd55c
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push str.del__f__s__a__q_ExeLock.tmp
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
call fcn.005650f0
push 0x2710
push ecx
push str.You_have_no_rights_to_open_file._nPossible_reason:_n_No_Admin_rights_change_directory_to_other_drive_then_C:__nContact_app_provider._nError_code:_3
call fcn.00407770
call fcn.00405a50
int3