Function at 0x40f620
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb0
call fcn.00413120
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea edi, [esp + 0xdd6]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea esi, [esp + 0x5ae]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413900
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00413900
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040f2b0
mov dword [esp + 0x1ca8], eax
lea ebx, [esp + 0x3a4]
mov dword [esp + 0x54], 0xd2aa4b6c
jmp 0x40f9d0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040e1a0
mov dword [esp + 0x54], 0x227ee9f1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x7c87b520
jg 0x40fa50
cmp eax, 0x777faa12
jg 0x40fa60
cmp eax, 0x7530abd6
jg 0x40fa70
cmp eax, 0x922b104d
jg 0x40faaa
cmp eax, 0x90047122
jne 0x40f9d0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], ebx
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x465794]
sub esp, 4
cmp eax, 1
mov eax, 0x7c87b521
jne 0x40fa41
mov eax, 0x1c86a962
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x7c87b521
jne 0x40f9d0
jmp 0x40f9aa
cmp eax, 0x777faa13
jne 0x40f9d0
jmp 0x410bc9
cmp eax, 0x7530abd7
jne 0x40f9d0
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x1fd9c6e6
je 0x40faa1
mov eax, 0x1916e09
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x9acc56e9
jg 0x40fb10
cmp eax, 0x922b104e
jne 0x40f9d0
mov esi, edi
mov edi, ebx
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
call ebx
sub esp, 8
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call ebx
sub esp, 8
test eax, eax
mov eax, 0xdaac3658
jne 0x410af8
mov eax, 0x11824aa
mov dword [esp + 0x54], eax
jmp 0x410afc
cmp eax, 0x64a23bde
jg 0x40fb76
cmp eax, 0x628f6a38
jg 0x40fc01
cmp eax, 0x5f5f2774
jg 0x40fc42
cmp eax, 0x5d6e0633
jg 0x40fc6a
cmp eax, 0x5b4a5be2
jg 0x40fcb3
cmp eax, 0x9b19adfd
jg 0x40fcd8
cmp eax, 0x9acc56ea
jne 0x40f9d0
mov eax, 0xb931fa53
cmp dword [esp + 0x1ca0], 0
jne 0x40fb6d
mov eax, 0xab2a226d
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x64a23bdf
jne 0x40f9d0
mov esi, edi
mov edi, ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404840
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c9c], eax
mov ecx, 0xe3425e66
test eax, eax
jne 0x40fbf8
mov ecx, 0xad4a2473
mov dword [esp + 0x54], ecx
jmp 0x410afc
cmp eax, 0x628f6a39
jne 0x40f9d0
mov eax, dword [esp + 0x1ca0]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0x5f5f2775
test eax, eax
jne 0x40fc39
mov ecx, 0x4be1c6e8
mov dword [esp + 0x54], ecx
jmp 0x40f9d0
cmp eax, 0x5f5f2775
jne 0x40f9d0
mov eax, 0x45e35401
cmp dword [esp + 0x68], 0x80
jne 0x40fc61
mov eax, 0x4be1c6e8
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x5d6e0634
jne 0x40f9d0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404210
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040e280
test eax, eax
mov eax, 0x64a23bdf
jne 0x40fcaa
mov eax, 0x5b4a5be3
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x5b4a5be3
jne 0x40f9d0
mov eax, 0x777faa13
cmp dword [esp + 0x60], 6
jb 0x40fccf
mov eax, 0x20c0a98e
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0x9df05ae2
jg 0x4107fa
cmp eax, 0x9b19adfe
jne 0x40f9d0
mov eax, dword [0x4655c0]
mov ecx, dword [0x4655e8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c54]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x4655d0]
mov ecx, dword [0x4655e8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c50]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x4655d4]
mov ecx, dword [0x4655e8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x4655c0]
mov ecx, dword [0x4655e4]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c48]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x4655b4]
mov ecx, dword [0x4655f4]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c44]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x4655c0]
mov ecx, dword [0x4655f8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c40]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x465604]
mov ecx, dword [0x4655fc]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c3c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x465600]
mov ecx, dword [0x4655fc]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c38]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x465780]
sub esp, 0x18
mov eax, dword [0x465600]
mov ecx, dword [0x4655e8]
mov edx, dword [esp + 0x1c98]
lea ebx, [esp + 0x1c34]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x465780]
sub esp, 0x18
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [0x46577c]
sub esp, 4
call fcn.00413a6f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea ebx, [esp + 0xd2]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414424
mov dword [esp], ebx
call fcn.00404d70
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413a6f
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414424
mov dword [esp], ebx
call fcn.00404d70
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413a6f
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414424
mov dword [esp], ebx
call fcn.00404d70
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413a6f
and eax, 0xc
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414424
mov dword [esp], ebx
call fcn.00404d70
mov dword [esp + 0x78], eax
mov eax, dword [0x41d134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [0x41d134]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41d134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x98]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402e10
mov eax, dword [0x4655dc]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465778]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x46560c]
mov ecx, dword [0x4655bc]
mov edx, dword [esp + 0x1c98]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x465770]
sub esp, 0x10
mov eax, dword [0x4655d8]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x4655c0]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x4655b8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x465768]
sub esp, 0xc
mov eax, dword [0x465608]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x465764]
sub esp, 0x10
mov eax, dword [0x4655e0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465778]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465774]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
call fcn.00413a6f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41d138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov ebx, eax
mov dword [esp], ebx
call fcn.00403650
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004043e0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004043e0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0x9c2]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004043e0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.004043e0
mov eax, dword [0x41d14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [0x41d14c]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41d14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402e10
mov eax, dword [0x4655e8]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465778]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x4655c0]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x4655c8]
mov ecx, dword [esp + 0x1c98]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x4655c4]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x465600]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x465764]
sub esp, 0x10
mov eax, dword [0x4655ec]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465778]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x4655c0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x47b2f8
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465774]
sub esp, 8
mov eax, dword [0x41d150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41d150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41d150]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov ebx, eax
mov dword [esp], ebx
call fcn.00403650
mov eax, dword [0x4655f0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465778]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x4655c0]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [0x4655cc]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46576c]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465774]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465774]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465760]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x46575c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c98]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x465774]
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [0x465784]
sub esp, 4
lea eax, [esp + 0x19a]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x20a
call fcn.00406880
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4657c4]
sub esp, 0xc
mov dword [esp + 0x1ca0], eax
mov ecx, 0x12287ab
test eax, eax
je 0x4107ea
mov ecx, 0x628f6a39
mov dword [esp + 0x54], ecx
lea ebx, [esp + 0x3a4]
jmp 0x40f9d0
cmp eax, 0xa84d1128
jg 0x410811
cmp eax, 0x9df05ae3
jne 0x40f9d0
jmp 0x4110d7
cmp eax, 0xab2a226c
jg 0x410911
cmp eax, 0xa84d1129
jne 0x40f9d0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00406040
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004043e0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
call fcn.00404d70
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13f4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004043e0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x46578c]
sub esp, 8
mov dword [esp + 0x1c98], eax
mov dword [esp + 0x54], 0x3482d5de
jmp 0x40f9d0
cmp eax, 0xad4a2472
jg 0x410953
cmp eax, 0xab2a226d
jne 0x40f9d0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040f600
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0x9df05ae3
jmp 0x40f9d0
cmp eax, 0xb931fa52
jg 0x41097d
cmp eax, 0xad4a2473
jne 0x40f9d0
mov dword [esp + 0x1ca4], 0
mov dword [esp + 0x54], 0x9df05ae3
jmp 0x40f9d0
cmp eax, 0xbc4a74c3
jg 0x4109af
cmp eax, 0xb931fa53
jne 0x40f9d0
mov eax, dword [esp + 0x1ca0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xab2a226d
jmp 0x40f9d0
cmp eax, 0xc78eecb4
jg 0x410a19
cmp eax, 0xbc4a74c4
jne 0x40f9d0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x465790]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x227ee9f1
jmp 0x40f9d0
cmp eax, 0xd2aa4b6b
jg 0x410a4b
cmp eax, 0xc78eecb5
jne 0x40f9d0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xad4a2473
jmp 0x40f9d0
cmp eax, 0xd625ad89
jg 0x410a7a
cmp eax, 0xd2aa4b6c
jne 0x40f9d0
mov eax, 0x56a2b580
cmp dword [esp + 0x1ca8], 0
js 0x410a71
mov eax, 0x5d6e0634
mov dword [esp + 0x54], eax
jmp 0x40f9d0
cmp eax, 0xdaac3657
jg 0x410aac
cmp eax, 0xd625ad8a
jne 0x40f9d0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0xc78eecb5
jmp 0x40f9d0
cmp eax, 0xe3425e65
jg 0x410acb
cmp eax, 0xdaac3658
jne 0x40f9d0
mov dword [esp + 0x54], 0x227ee9f1
jmp 0x40f9d0
cmp eax, 0x11824a9
jg 0x410b0c
cmp eax, 0xe3425e66
jne 0x40f9d0
mov esi, edi
mov edi, ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xd625ad8a
je 0x410af8
mov eax, 0xc78eecb5
mov dword [esp + 0x54], eax
mov ebx, edi
mov edi, esi
lea esi, [esp + 0x5ae]
jmp 0x40f9d0
cmp eax, 0x56a2b57f
jg 0x410bbe
cmp eax, 0x5655dd0d
jg 0x410be1
cmp eax, 0x4dcfc799
jg 0x410bf1
cmp eax, 0x4be1c6e7
jg 0x410c09
cmp eax, 0x482f5598
jg 0x410d52
cmp eax, 0x45e35400
jg 0x410d62
cmp eax, 0x3482d5dd
jg 0x410d72
cmp eax, 0x34033220
jg 0x410d95
cmp eax, 0x227ee9f0
jg 0x410dc0
cmp eax, 0x20c0a98d
jg 0x410dec
cmp eax, 0x1fd9c6e5
jg 0x410e77
cmp eax, 0x1c86a961
jg 0x410f7b
cmp eax, 0x11824aa
je 0x41101f
cmp eax, 0x12287ab
je 0x40f9aa
cmp eax, 0x1916e09
jne 0x40f9d0
mov dword [esp + 0x54], 0xa84d1129
jmp 0x40f9d0
cmp eax, 0x56a2b580
jne 0x40f9d0
mov dword [esp + 0x1ca4], 0xffffffff
mov dword [esp + 0x54], 0x9df05ae3
jmp 0x40f9d0
cmp eax, 0x5655dd0e
jne 0x40f9d0
jmp 0x40f9aa
cmp eax, 0x4dcfc79a
jne 0x40f9d0
mov dword [esp + 0x54], 0x227ee9f1
jmp 0x40f9d0
cmp eax, 0x4be1c6e8
jne 0x40f9d0
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x47b2fc
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
mov dword [esp], ebx
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47b306
mov dword [esp + 4], 0x104
call fcn.004043e0
lea eax, [esp + 0x11ea]
mov ebx, eax
mov dword [esp], ebx
call fcn.00404d70
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.004043e0
mov eax, dword [str._v4_fQ]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [str._v4_fQ]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [str._v4_fQ]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.00403650
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c9c], eax
mov ecx, 0x5655dd0e
test eax, eax
je 0x4107ea
mov ecx, 0x90047122
jmp 0x4107ea
cmp eax, 0x482f5599
jne 0x40f9d0
jmp 0x40f9aa
cmp eax, 0x45e35401
jne 0x40f9d0
jmp 0x40f9aa
cmp eax, 0x3482d5de
jne 0x40f9d0
mov ecx, ebx
mov eax, 0xa84d1129
cmp dword [esp + 0x1c98], 0
je 0x410de1
mov eax, 0x9b19adfe
jmp 0x410de1
cmp eax, 0x34033221
jne 0x40f9d0
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x9acc56ea
jmp 0x40f9d0
cmp eax, 0x227ee9f1
jne 0x40f9d0
mov ecx, ebx
mov eax, 0x34033221
cmp dword [esp + 0x1c9c], 0
jne 0x410de1
mov eax, 0x9acc56ea
mov dword [esp + 0x54], eax
mov ebx, ecx
jmp 0x40f9d0
cmp eax, 0x20c0a98e
jne 0x40f9d0
mov dword [esp + 8], esi
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405430
lea eax, [esp + 0x15fe]
mov dword [esp], eax
call fcn.00404d70
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.004110f0
mov dword [esp + 0x50], eax
call fcn.00402690
imul eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00413a92
mov dword [esp + 0x54], 0x1fd9c6e6
jmp 0x40f9d0
cmp eax, 0x1fd9c6e6
jne 0x40f9d0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00406040
lea eax, [esp + 0xfe0]
mov dword [esp], eax
call fcn.00404d70
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004043e0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfe0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004043e0
mov eax, dword [esp + 0x6c]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x58]
sub ecx, edx
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.004043e0
mov dword [esp + 0x54], 0x7530abd7
jmp 0x40f9d0
cmp eax, 0x1c86a962
jne 0x40f9d0
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x465790]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x465794]
sub esp, 4
cmp eax, 1
mov eax, 0x482f5599
jne 0x41100f
mov eax, 0x922b104e
mov dword [esp + 0x54], eax
lea ebx, [esp + 0x3a4]
jmp 0x40f9d0
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404030
mov dword [esp], ebx
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.004043e0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call fcn.00404d70
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11ea]
mov dword [esp + 8], eax
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.004043e0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], ebx
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x465794]
sub esp, 4
cmp eax, 1
mov eax, 0x4dcfc79a
jne 0x4110ce
mov eax, 0xbc4a74c4
mov dword [esp + 0x54], eax
jmp 0x40f9d0
mov eax, dword [esp + 0x1ca4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret