Function at 0x473628
Capabilities:
Check for peb beingdebugged flag
Copy file
Extract resource via kernel32 functions
Get common file path
Get disk information
Get number of processors

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x5c
push 0
push 0
dec ecx
jne 0x473630
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4749bd
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x474955
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20c]
xor edx, edx
call fcn.0041f6b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
mov edx, 0x4749d4
call fcn.0045f638
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
call fcn.0045a4fc
test al, al
jne 0x473736
push 0
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x184], eax
mov byte [ebp - 0x180], 0xb
lea edx, [ebp - 0x184]
xor ecx, ecx
mov eax, 0x4749f8
call fcn.00408320
mov eax, dword [ebp - 0x17c]
mov cx, word [0x474a28]
mov dl, 3
call fcn.0043c5c8
cmp eax, 6
jne 0x47372c
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
call fcn.0045a520
jmp 0x473736
call fcn.00403550
jmp 0x47495f
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, 0x104
call fcn.00407e94
mov ebx, eax
push ebx
push 0x104
call sub.kernel32.dll_GetTempPathA
push ebx
push 0
push 0x474a2c
push ebx
call sub.kernel32.dll_GetTempFileNameA
push 0xffff
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov ecx, dword [ebp - 0x17c]
mov dl, 1
mov eax, dword [0x40cf6c]
call fcn.004102dc
mov esi, eax
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.00407e80
mov eax, ebx
call fcn.00407ee0
push 0x474a30
mov eax, dword [0x481364]
mov eax, dword [eax]
call fcn.00403e14
push eax
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_FindResourceA
mov ebx, eax
test ebx, ebx
jne 0x4737cd
call fcn.00403550
jmp 0x47495f
push ebx
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_SizeofResource
mov edi, eax
test edi, edi
jne 0x4737eb
call fcn.00403550
jmp 0x47495f
push ebx
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_LoadResource
test eax, eax
jne 0x473807
call fcn.00403550
jmp 0x47495f
push eax
call sub.kernel32.dll_LockResource
test eax, eax
jne 0x47381b
call fcn.00403550
jmp 0x47495f
mov edx, eax
mov ecx, edi
mov eax, esi
call fcn.004101b4
mov eax, dword [0x481364]
mov eax, dword [eax]
mov edx, 0x474a44
call fcn.00403d60
jne 0x473cef
mov eax, esi
call fcn.00402f00
xor eax, eax
push ebp
push 0x473cc5
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x481440]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x44fce4]
call fcn.0044fd90
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x30], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x31], 2
mov eax, dword [ebp - 0x18]
add eax, 0x34
mov edx, dword [ebp - 0x1c]
call fcn.00403a28
mov eax, 0x104
call fcn.00407e94
mov ebx, eax
push ebx
push 0x104
call sub.kernel32.dll_GetTempPathA
push ebx
push 0
push 0x474a2c
push ebx
call sub.kernel32.dll_GetTempFileNameA
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x18]
add eax, 0x38
call fcn.00403a28
lea eax, [ebp - 0x188]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x18c]
call fcn.00402aec
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x18c]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x198]
call fcn.00402aec
mov edx, 0x474a50
lea eax, [ebp - 0x198]
mov cl, 5
call fcn.00402abc
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x1a0]
call fcn.00402aec
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x1a0]
mov cl, 6
call fcn.00402abc
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x184]
call fcn.00402aec
mov edx, 0x474a54
lea eax, [ebp - 0x184]
mov cl, 7
call fcn.00402abc
lea edx, [ebp - 0x184]
lea eax, [ebp - 0x17c]
call fcn.00403bf4
push dword [ebp - 0x17c]
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 4]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x1ac]
call fcn.00402aec
lea eax, [ebp - 0x1b0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1ac]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x1ac]
lea eax, [ebp - 0x1b4]
call fcn.00402aec
lea eax, [ebp - 0x1b0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 8]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1b4]
mov cl, 3
call fcn.00402abc
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x1bc]
call fcn.00402aec
lea eax, [ebp - 0x1b0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1bc]
mov cl, 4
call fcn.00402abc
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0x1c4]
call fcn.00402aec
lea eax, [ebp - 0x1b0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1c4]
mov cl, 5
call fcn.00402abc
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x1cc]
call fcn.00402aec
lea eax, [ebp - 0x1b0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 6]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1cc]
mov cl, 6
call fcn.00402abc
lea edx, [ebp - 0x1cc]
lea eax, [ebp - 0x1a8]
call fcn.00403bf4
mov edx, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1a4]
mov eax, dword [0x481508]
mov eax, dword [eax]
call fcn.004770f4
push dword [ebp - 0x1a4]
push 0x474a60
lea eax, [ebp - 0x1a8]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 2]
call fcn.00403b78
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x1d0]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 1]
call fcn.00403b78
push dword [ebp - 0x1d0]
push 0x474a70
lea eax, [ebp - 0x1d4]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 4]
call fcn.00403b78
push dword [ebp - 0x1d4]
push 0x474a8c
mov eax, dword [ebp - 0x18]
add eax, 0x2c
mov edx, 8
call fcn.00403d10
lea eax, [ebp - 0x188]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 6]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x18c]
call fcn.00402aec
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 7]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x18c]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x1b4]
call fcn.00402aec
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 8]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x1b4]
mov cl, 3
call fcn.00402abc
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x1bc]
call fcn.00402aec
lea eax, [ebp - 0x190]
mov edx, dword [0x48145c]
mov edx, dword [edx]
mov dl, byte [edx + 9]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x1bc]
mov cl, 4
call fcn.00402abc
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0x1e0]
call fcn.00402aec
mov edx, 0x474a98
lea eax, [ebp - 0x1e0]
mov cl, 8
call fcn.00402abc
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x18]
add eax, 0x24
call fcn.00403bf4
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.0044f5fc
mov eax, dword [ebp - 0x1c]
call fcn.004077d8
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.00407e80
mov eax, ebx
call fcn.00407ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x473ccc
mov eax, dword [ebp - 0x18]
call fcn.00402f00
ret
push 0x474aa0
push 0x474aac
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_FindResourceA
mov ebx, eax
test ebx, ebx
jne 0x473d16
call fcn.00403550
jmp 0x47495f
push ebx
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_SizeofResource
mov edi, eax
test edi, edi
jne 0x473d34
call fcn.00403550
jmp 0x47495f
push ebx
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_LoadResource
test eax, eax
jne 0x473d50
call fcn.00403550
jmp 0x47495f
push eax
call sub.kernel32.dll_LockResource
test eax, eax
jne 0x473d64
call fcn.00403550
jmp 0x47495f
mov edx, eax
mov ecx, edi
mov eax, esi
call fcn.004101b4
mov eax, esi
call fcn.00402f00
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov dl, 1
mov eax, dword [0x45ac18]
call fcn.0045ad14
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.0045ada8
xor ecx, ecx
mov edx, 0x474ac4
mov eax, esi
call fcn.0045ae0c
push 0x252b05
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x17c]
mov edx, 0x474af4
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x17c]
mov ecx, 0x13361
mov edx, 0x12ea
call fcn.0045b330
push 0x2697
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x17c]
mov edx, 0x474b04
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x17c]
mov ecx, 0x140ec
mov edx, 0xdcb1
call fcn.0045b330
push 0x116e
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x17c]
mov edx, 0x474b14
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x17c]
mov ecx, 0x2637
mov edx, 0x1c8
call fcn.0045b330
mov eax, 0xff
call fcn.00407e94
mov ebx, eax
mov eax, dword [ebp - 0xc]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0xc]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
mov cl, 0x32
call fcn.00402b08
mov eax, dword [ebp - 0x10]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0x10]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
add eax, 0x33
mov cl, 0x32
call fcn.00402b08
mov eax, dword [ebp - 0x14]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0x14]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
add eax, 0x66
mov cl, 0x32
call fcn.00402b08
mov eax, 0xff
call fcn.00407e94
mov ebx, eax
push ebx
push 0xff
call sub.kernel32.dll_GetTempPathA
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 8]
mov ecx, 0x474b24
call fcn.00403c9c
mov eax, dword [0x481494]
mov eax, dword [eax]
mov eax, dword [eax + 0x208]
mov edx, dword [eax + 0xe8]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0x99], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xe0]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0x9d], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xd8]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xa1], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xf4]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xa5], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xe4]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xa9], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xdc]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xad], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xd4]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xb1], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xc4]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xb5], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xc0]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xb9], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xbc]
mov ecx, dword [0x4813b0]
mov dword [ecx + 0xbd], edx
mov edx, dword [0x481494]
mov eax, dword [eax + 0xf0]
mov edx, dword [0x4813b0]
mov dword [edx + 0xc1], eax
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d0]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xc5], al
mov eax, dword [0x481494]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x54]
mov edx, dword [0x4813b0]
mov dword [edx + 0xc6], eax
mov eax, dword [0x4813b0]
mov dword [eax + 0xca], 0x32
mov eax, dword [0x4813b0]
mov dword [eax + 0xce], 0x32
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2ec]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xd2], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xd3], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x31c]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xd4], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2e4]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xd5], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x34c]
cmp byte [eax + 0x120], 0
je 0x474182
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x35c]
call fcn.00462784
mov eax, dword [0x4813b0]
fstp qword [eax + 0x150]
wait
jmp 0x474195
mov eax, dword [0x4813b0]
xor edx, edx
mov dword [eax + 0x150], edx
mov dword [eax + 0x154], edx
lea edx, [ebp - 0x178]
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x358]
call fcn.0041f720
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
add eax, 0x15d
mov cl, 0xa0
call fcn.00402b08
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0x1fe], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x344]
call fcn.00436d14
test al, al
jne 0x47422b
mov eax, dword [0x4813b0]
mov byte [eax + 0xd6], 0
mov eax, dword [0x4813b0]
mov byte [eax + 0x113], 0
jmp 0x4742b5
lea edx, [ebp - 0x178]
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x334]
call fcn.0041f720
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
add eax, 0xd6
mov cl, 0x3c
call fcn.00402b08
lea edx, [ebp - 0x178]
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x338]
call fcn.0041f720
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x2e0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2e0]
mov eax, dword [0x4813b0]
add eax, 0x113
mov cl, 0x3c
call fcn.00402b08
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x320]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0x158], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x32c]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0x159], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x328]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0x15a], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0x15b], al
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2e8]
mov eax, dword [eax + 0x124]
sub eax, 1
jb 0x474349
je 0x474369
jmp 0x4743a7
mov eax, dword [0x4813b0]
mov dword [eax + 0xca], 0xffffffff
mov eax, dword [0x4813b0]
mov dword [eax + 0xce], 0xffffffff
jmp 0x4743a7
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2dc]
mov eax, dword [eax + 0x17c]
mov edx, dword [0x4813b0]
mov dword [edx + 0xca], eax
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x17c]
mov edx, dword [0x4813b0]
mov dword [edx + 0xce], eax
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x2e4]
call fcn.00436d14
mov edx, dword [0x4813b0]
mov byte [edx + 0xd5], al
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x174]
call fcn.00404ee6
mov edx, 1
lea eax, [ebp - 0x174]
call fcn.00405234
call fcn.0040276c
push 0
mov edx, dword [0x4813b0]
mov ecx, 0x1ff
lea eax, [ebp - 0x174]
call fcn.00404fec
call fcn.0040276c
lea eax, [ebp - 0x174]
call fcn.00405050
call fcn.0040276c
mov eax, ebx
call fcn.00407ee0
mov eax, esi
call fcn.00402f00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
mov edx, 1
call fcn.0045f6ac
mov edx, 0x474b3c
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
mov edx, 2
call fcn.0045f6ac
mov edx, 0x474b54
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x204]
mov dl, 1
call fcn.0041f67c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x208]
mov dl, 1
call fcn.0041f67c
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
mov dword [eax + 0x1e8], 0x38800
mov edx, dword [0x481508]
mov edx, dword [edx]
mov ecx, dword [0x481508]
mov dword [eax + 0x22c], edx
mov dword [eax + 0x228], 0x47a7b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1ec]
mov eax, dword [eax + 0x118]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x484a34], eax
imul edx, dword [0x484a34], 0x64
mov eax, dword [0x484a28]
mov eax, dword [eax + 0x208]
call fcn.00460018
mov eax, dword [0x484a34]
dec eax
test eax, eax
jl 0x47489e
inc eax
mov dword [ebp - 0x28], eax
xor esi, esi
lea eax, [ebp - 0x24]
call fcn.004039d4
mov dword [0x484a30], esi
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1ec]
mov eax, dword [eax + 0x118]
mov edx, esi
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x184], eax
mov byte [ebp - 0x180], 0xb
lea edx, [ebp - 0x184]
xor ecx, ecx
mov eax, 0x474b68
call fcn.00408320
mov eax, dword [ebp - 0x17c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
pop edx
call fcn.0045f638
mov eax, dword [ebp - 0x20]
call fcn.00407600
test al, al
je 0x474894
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx]
call fcn.00403b78
lea eax, [ebp - 0x17c]
mov edx, 0x474b9c
call fcn.00403c58
mov eax, dword [ebp - 0x17c]
call fcn.00403e14
push eax
call sub.kernel32.dll_GetDriveTypeA
cmp eax, 5
jne 0x47469f
mov eax, 0x104
call fcn.00407e94
mov ebx, eax
push ebx
push 0x104
call sub.kernel32.dll_GetTempPathA
push 0
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
mov edx, dword [ebp - 0x1a4]
pop eax
call fcn.00403c58
mov eax, dword [ebp - 0x17c]
call fcn.00403e14
push eax
mov eax, dword [ebp - 0x20]
call fcn.00403e14
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x474698
lea edx, [ebp - 0x17c]
mov eax, ebx
call fcn.00407e80
push dword [ebp - 0x17c]
push 0x474ba8
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00403d10
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00403a6c
push 0x80
mov eax, dword [ebp - 0x20]
call fcn.00403e14
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, ebx
call fcn.00407ee0
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 0x17c]
call fcn.00407904
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
mov eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1a4]
mov edx, 0x474bb4
call fcn.00407870
mov edx, dword [ebp - 0x1a4]
pop eax
call fcn.00403c58
mov eax, dword [ebp - 0x17c]
call fcn.00407600
test al, al
je 0x474720
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f8]
call fcn.00436d14
test al, al
je 0x474894
push 0
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 0x17c]
call fcn.00407904
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
mov eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1a4]
mov edx, 0x474bb4
call fcn.00407870
mov edx, dword [ebp - 0x1a4]
pop eax
call fcn.00403c58
mov eax, dword [ebp - 0x17c]
call fcn.00403e14
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00403e14
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x474894
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
call fcn.0041f720
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 0x17c]
call fcn.00407904
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 0x20]
call fcn.00407a28
mov eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1a4]
mov edx, 0x474bb4
call fcn.00407870
mov edx, dword [ebp - 0x1a4]
pop eax
call fcn.00403c58
mov edx, dword [ebp - 0x17c]
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
call fcn.0044481c
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
call fcn.004459bc
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
mov edx, dword [ebp - 0x20]
call fcn.0044ece4
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
mov edx, dword [ebp - 8]
call fcn.0044ece4
mov eax, dword [0x481508]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e4]
call fcn.00445b8c
cmp dword [ebp - 0x24], 0
je 0x474894
mov eax, dword [ebp - 0x24]
call fcn.00407600
test al, al
je 0x474894
mov eax, dword [ebp - 0x24]
call fcn.00403e14
mov edx, eax
lea eax, [ebp - 0x17c]
call fcn.00403b88
mov eax, dword [ebp - 0x17c]
call fcn.004077d8
inc esi
dec dword [ebp - 0x28]
jne 0x47450e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47495f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x204]
xor edx, edx
call fcn.0041f67c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.0041f67c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
mov edx, 1
call fcn.0045f6ac
xor edx, edx
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
mov edx, 2
call fcn.0045f6ac
xor edx, edx
call fcn.0045f638
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, dword [ebp - 8]
call fcn.004077d8
mov eax, dword [ebp - 0x1c]
call fcn.004077d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x200]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
xor edx, edx
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20c]
mov dl, 1
call fcn.0041f6b8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4749c4
lea eax, [ebp - 0x1d4]
mov edx, 2
call fcn.004039f8
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.004039f8
lea eax, [ebp - 0x17c]
call fcn.004039d4
lea eax, [ebp - 0x178]
call fcn.004039d4
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.004039f8
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004039f8
ret