Function at 0x40d760
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x118
mov esi, esp
mov dword [esi + 0x50], 0x81c7ef35
jmp 0x40d780
mov dword [esi + 0x50], eax
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x40d790
mov dword [esi + 0x50], 0x4b07f538
nop
mov eax, dword [esi + 0x50]
cmp eax, 0x89e7aae3
jg 0x40d7b0
cmp eax, 0x81c7ef35
jne 0x40d790
jmp 0x40d788
cmp eax, 0x7f91c76a
jg 0x40d800
cmp eax, 0x7a076d53
jg 0x40d823
cmp eax, 0x8b1fd5ce
jg 0x40d85e
cmp eax, 0x89e7aae4
jne 0x40d790
mov eax, dword [esi + 0xb4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.0040d740
mov eax, dword [esi + 0x104]
mov eax, dword [eax]
mov ecx, dword [esi + 0x54]
mov dword [ecx], eax
mov dword [esi + 0x50], 0x18bd965d
jmp 0x40d790
cmp eax, 0x7f91c76b
jne 0x40d790
mov al, byte [esi + 0x112]
test al, al
mov eax, 0x4f9a5c61
jne 0x40d81b
mov eax, 0xeb509e8a
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x7a076d54
jne 0x40d790
mov eax, dword [esi + 0xb4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.0040d740
mov eax, dword [esi + 0x104]
mov eax, dword [eax]
mov ecx, dword [esi + 0x54]
mov dword [ecx], eax
mov dword [esi + 0x50], 0x89e7aae4
jmp 0x40d790
cmp eax, 0x91725d61
jg 0x40d8a2
cmp eax, 0x8b1fd5cf
jne 0x40d790
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xcc]
sub esp, 4
mov dword [esp], eax
call fcn.0040b960
add esp, 4
mov dword [esi + 0x50], 0x2535c2ba
jmp 0x40d790
cmp eax, 0x92acb848
jg 0x40d8cd
cmp eax, 0x91725d62
jne 0x40d790
mov eax, dword [esi + 0x58]
cmp dword [eax], 0
setne byte [esi + 0x113]
mov dword [esi + 0x50], 0xfa0a5e3d
jmp 0x40d790
cmp eax, 0x9538011e
jg 0x40d8eb
cmp eax, 0x92acb849
jne 0x40d790
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
cmp eax, 0x95d2e250
jg 0x40d909
cmp eax, 0x9538011f
jne 0x40d790
mov dword [esi + 0x50], 0xce707b80
jmp 0x40d790
cmp eax, 0x96c17ba5
jg 0x40d955
cmp eax, 0x95d2e251
jne 0x40d790
mov eax, dword [esi + 0xbc]
mov ecx, dword [esi + 0xcc]
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
mov eax, 0x1c5351a9
je 0x40d94d
mov eax, 0x768de5db
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x9a85fdaf
jg 0x40d981
cmp eax, 0x96c17ba6
jne 0x40d790
mov ecx, dword [esi + 0x5c]
mov eax, 0xc459a54
cmp dword [ecx], 0
jne 0x40d979
mov eax, 0x6d45444d
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x9b6c5d87
jg 0x40db35
cmp eax, 0x9a85fdb0
jne 0x40d790
mov eax, dword [esi + 0x64]
mov dword [eax], 0x3c
mov eax, dword [esi + 0x64]
mov dword [eax + 4], 0x40
mov eax, dword [esi + 0x64]
mov dword [eax + 8], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0xc], 0x47d2ec
mov eax, dword [esi + 0x64]
mov dword [eax + 0x18], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0x20], 0
mov eax, dword [esi + 0xd0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xd0]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47d2f6
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xb4]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xb4]
mov edx, dword [esi + 0xd0]
add edx, 6
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x101
call fcn.00403200
add esp, 0x10
mov eax, dword [0x41d154]
movzx eax, word [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [0x41d154]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov dword [esi + 0x4c], eax
mov ecx, dword [0x41d154]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea eax, [ecx + edx*2 + 4]
mov dword [esi + 0x48], eax
mov edx, dword [0x41d154]
add edx, 2
mov eax, edi
mov edi, dword [esi + 0xec]
mov edi, dword [edi]
mov ebx, dword [esi + 0xa8]
sub esp, 0x14
mov ecx, dword [esi + 0x4c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0x48]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov edi, eax
mov dword [esp], ebx
call fcn.00402850
add esp, 0x14
mov eax, dword [esi + 0xb8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [esi + 0x5c]
mov dword [ecx], eax
mov eax, dword [esi + 0x5c]
cmp dword [eax], 0
sete byte [esi + 0x111]
mov dword [esi + 0x50], 0x54c1376
jmp 0x40d790
cmp eax, 0xb6c29682
jg 0x40db53
cmp eax, 0x9b6c5d88
jne 0x40d790
mov dword [esi + 0x50], 0xe336fba
jmp 0x40d790
cmp eax, 0xbb3193d1
jg 0x40db82
cmp eax, 0xb6c29683
jne 0x40d790
mov eax, dword [esi + 0x58]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x50], 0xdecfe6e2
jmp 0x40d790
cmp eax, 0xbce954e8
jg 0x40db99
cmp eax, 0xbb3193d2
jne 0x40d790
jmp 0x410229
cmp eax, 0xc30bd36d
jg 0x40dbb7
cmp eax, 0xbce954e9
jne 0x40d790
mov dword [esi + 0x50], 0x354018ab
jmp 0x40d790
cmp eax, 0xc437178b
jg 0x40e0dd
cmp eax, 0xc30bd36e
jne 0x40d790
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x24], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x1c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x18], esp
mov eax, 0x3c
call fcn.00412af0
mov ecx, esp
and ecx, 0xfffffff8
mov esp, ecx
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov edx, esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 4], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 8], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xc], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x10], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x14], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x20], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x28], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x2c], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x30], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x34], esp
mov eax, 0x20c
call fcn.00412af0
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0x38], esp
mov eax, 0xc8
call fcn.00412af0
mov dword [esi + 0x44], esp
mov eax, 0x28
call fcn.00412af0
mov ebx, esp
mov eax, 0x10
call fcn.00412af0
mov edi, esp
mov eax, 0x10
call fcn.00412af0
mov dword [esi + 0x48], esp
mov eax, 0xc
call fcn.00412af0
mov dword [esi + 0x4c], esp
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x40], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x3c], esp
mov eax, 4
call fcn.00412af0
mov eax, dword [esi + 0x24]
mov dword [eax], 0
mov eax, dword [esi + 0x1c]
mov dword [eax], 0
mov eax, dword [esi + 0x18]
mov dword [eax], 0
mov dword [ecx + 0x38], 0
mov dword [ecx + 0x34], 0
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x20], 0
mov dword [ecx + 0x1c], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov dword [edx], 0
sub esp, 0xc
mov eax, dword [esi]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0xc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x10]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x14]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x20]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x28]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x2c]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x30]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x34]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x38]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
sub esp, 0xc
mov eax, dword [esi + 0x44]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 0
mov dword [edi], 0
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [esi + 0x48]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0x4c]
mov word [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0x40]
mov dword [eax], 0
mov eax, dword [esi + 0x3c]
mov dword [eax], 0xffffffff
call fcn.0040d050
mov dword [esi + 0x50], 0x4b07f538
jmp 0x40d790
cmp eax, 0xce707b7f
jg 0x40e109
cmp eax, 0xc437178c
jne 0x40d790
mov ecx, dword [esi + 0x60]
mov eax, 0x5b77ccff
cmp dword [ecx], 0
je 0x40e101
mov eax, 0xd5ecb71a
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xd5ecb719
jg 0x40e139
cmp eax, 0xce707b80
jne 0x40d790
mov eax, dword [esi + 0x100]
cmp dword [eax], 6
setb al
mov byte [esi + 0x110], al
mov dword [esi + 0x50], 0x6c6c6e9b
jmp 0x40d790
cmp eax, 0x770b60cc
jg 0x40e199
cmp eax, 0x768de5da
jg 0x40e1c1
cmp eax, 0x73f0f729
jg 0x40e1d8
cmp eax, 0x6ed0903b
jg 0x40e1ef
cmp eax, 0x6dbc4e69
jg 0x40e206
cmp eax, 0x6d45444c
jg 0x40e226
cmp eax, 0x6c6c6e9a
jg 0x40e23d
cmp eax, 0xd6323f5f
jg 0x40e264
cmp eax, 0xd5ecb71a
jne 0x40d790
jmp 0x40f5e0
cmp eax, 0x770b60cd
jne 0x40d790
mov eax, dword [esi + 0x5c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [esi + 0x50], 0x621d300c
jmp 0x40d790
cmp eax, 0x768de5db
jne 0x40d790
mov dword [esi + 0x50], 0x5b77ccff
jmp 0x40d790
cmp eax, 0x73f0f72a
jne 0x40d790
mov dword [esi + 0x50], 0x9a85fdb0
jmp 0x40d790
cmp eax, 0x6ed0903c
jne 0x40d790
mov dword [esi + 0x50], 0x8b1fd5cf
jmp 0x40d790
cmp eax, 0x6dbc4e6a
jne 0x40d790
mov eax, dword [esi + 0x54]
mov dword [eax], 0
mov dword [esi + 0x50], 0xbb3193d2
jmp 0x40d790
cmp eax, 0x6d45444d
jne 0x40d790
mov dword [esi + 0x50], 0x91725d62
jmp 0x40d790
cmp eax, 0x6c6c6e9b
jne 0x40d790
mov al, byte [esi + 0x110]
test al, al
mov eax, 0x65c0de0a
jne 0x40e25c
mov eax, 0xcc9a4b0
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xd8338299
jg 0x40e2a8
cmp eax, 0xd6323f60
jne 0x40d790
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xcc]
sub esp, 4
mov dword [esp], eax
call fcn.0040b960
add esp, 4
mov dword [esi + 0x50], 0x92acb849
jmp 0x40d790
cmp eax, 0xdecfe6e1
jg 0x40e398
cmp eax, 0xd833829a
jne 0x40d790
mov eax, dword [esi + 0xd0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xd0]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xb4]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xb4]
mov edx, dword [esi + 0xd0]
add edx, 0xc
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0xfe
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xa8]
mov ecx, dword [esi + 0x64]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0xd0]
mov ecx, dword [esi + 0x64]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x64]
mov dword [eax + 0x1c], 0
mov eax, dword [0x467524]
mov ecx, dword [esi + 0x64]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
mov eax, 0xbce954e9
jne 0x40e390
mov eax, 0x8ae3e6
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xe2125ed9
jg 0x40e3b6
cmp eax, 0xdecfe6e2
jne 0x40d790
mov dword [esi + 0x50], 0x89e7aae4
jmp 0x40d790
cmp eax, 0xe627058d
jg 0x40e464
cmp eax, 0xe2125eda
jne 0x40d790
mov eax, dword [esi + 0xe8]
mov eax, dword [eax]
mov ecx, dword [esi + 0xc8]
mov edx, dword [esi + 0xb8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403440
add esp, 0x10
mov ecx, dword [esi + 0xfc]
mov dword [ecx], eax
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb8]
mov word [ecx + eax*2 - 8], 0
mov eax, dword [esi + 0xb8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [esi + 0x5c]
mov dword [ecx], eax
mov ecx, dword [esi + 0x5c]
mov eax, 0x66f5c622
cmp dword [ecx], 0
jne 0x40e45c
mov eax, 0x6dbc4e6a
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xeb509e89
jg 0x40e4c4
cmp eax, 0xe627058e
jne 0x40d790
mov eax, dword [esi + 0xc8]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fe0
add esp, 8
mov ecx, dword [esi + 0xe8]
mov dword [ecx], eax
mov eax, dword [esi + 0x100]
sub esp, 4
mov dword [esp], eax
call fcn.0040ba40
add esp, 4
test eax, eax
mov eax, 0xe2125eda
jne 0x40e4bc
mov eax, 0x9538011f
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xefef5bae
jg 0x40e4e2
cmp eax, 0xeb509e8a
jne 0x40d790
mov dword [esi + 0x50], 0x354018ab
jmp 0x40d790
cmp eax, 0xf0d2d001
jg 0x40e526
cmp eax, 0xefef5baf
jne 0x40d790
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xcc]
sub esp, 4
mov dword [esp], eax
call fcn.0040b960
add esp, 4
mov dword [esi + 0x50], 0xd6323f60
jmp 0x40d790
cmp eax, 0xfa0a5e3c
jg 0x40e554
cmp eax, 0xf0d2d002
jne 0x40d790
mov al, byte [esi + 0x10f]
test al, al
mov eax, 0x66c8ece7
jne 0x40e54c
mov eax, 0xe627058e
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0xfca4e16a
jg 0x40e582
cmp eax, 0xfa0a5e3d
jne 0x40d790
mov al, byte [esi + 0x113]
test al, al
mov eax, 0xb6c29683
jne 0x40e57a
mov eax, 0xdecfe6e2
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x66f5c621
jg 0x40e6d8
cmp eax, 0x66c8ece6
jg 0x40e702
cmp eax, 0x65c0de09
jg 0x40e70f
cmp eax, 0x621d300b
jg 0x40e72f
cmp eax, 0x61dddabb
jg 0x40e757
cmp eax, 0x600f265d
jg 0x40e782
cmp eax, 0x5fb6a83a
jg 0x40e7bf
cmp eax, 0x5e1d690d
jg 0x40e7d9
cmp eax, 0x5b77ccfe
jg 0x40e7f6
cmp eax, 0x4f9a5c60
jg 0x40e91b
cmp eax, 0x4b07f537
jg 0x40e932
cmp eax, 0x3d708015
jg 0x40ef47
cmp eax, 0x354018aa
jg 0x40efdb
cmp eax, 0x2def4c89
jg 0x40eff2
cmp eax, 0x25ad53d2
jg 0x40f009
cmp eax, 0x256cab4b
jg 0x40f05d
cmp eax, 0x2535c2b9
jg 0x40f06d
cmp eax, 0x22066cf2
jg 0x40f084
cmp eax, 0x1c5351a8
jg 0x40f223
cmp eax, 0x18bd965c
jg 0x40f38b
cmp eax, 0x18663d04
jg 0x40f3a2
cmp eax, 0xe336fb9
jg 0x40f3df
cmp eax, 0xcc9a4af
jg 0x40f3fd
cmp eax, 0xc459a53
jg 0x40f4a2
cmp eax, 0xb4dc035
jg 0x40f4ca
cmp eax, 0x54c1375
jg 0x40f516
cmp eax, 0x8ae3e5
jg 0x40f53d
cmp eax, 0xfca4e16b
je 0x40f5a2
cmp eax, 0xfcca7e2c
je 0x40f3ad
cmp eax, 0xfe9c6f7e
jne 0x40d790
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
cmp eax, 0x66f5c622
jne 0x40d790
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0x770b60cd
je 0x40e6fa
mov eax, 0x621d300c
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x66c8ece7
jne 0x40d790
jmp 0x40e71a
cmp eax, 0x65c0de0a
jne 0x40d790
mov eax, dword [esi + 0x54]
mov dword [eax], 0xffffffff
mov dword [esi + 0x50], 0xbb3193d2
jmp 0x40d790
cmp eax, 0x621d300c
jne 0x40d790
mov eax, dword [esi + 0x5c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x50], 0x6dbc4e6a
jmp 0x40d790
cmp eax, 0x61dddabc
jne 0x40d790
mov ecx, dword [esi + 0xf8]
mov eax, 0x6ed0903c
cmp dword [ecx], 0x80
jne 0x40e77a
mov eax, 0x73f0f72a
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x600f265e
jne 0x40d790
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xcc]
sub esp, 4
mov dword [esp], eax
call fcn.0040b960
add esp, 4
mov dword [esi + 0x50], 0x8b1fd5cf
jmp 0x40d790
cmp eax, 0x5fb6a83b
jne 0x40d790
mov eax, dword [esi + 0x58]
mov dword [esi + 0x50], 0x91725d62
jmp 0x40d790
cmp eax, 0x5e1d690e
jne 0x40d790
mov eax, dword [esi + 0x100]
mov dword [esi + 0x50], 0xce707b80
jmp 0x40d790
cmp eax, 0x5b77ccff
jne 0x40d790
mov eax, dword [esi + 0xb0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xb4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xb0]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004047f0
add esp, 8
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
mov ecx, dword [esi + 0xac]
mov edx, dword [esi + 0xb4]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xb0]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xb0]
mov edx, dword [esi + 0xf4]
mov edi, 0x104
sub edi, dword [edx]
mov edx, dword [esi + 0xb4]
mov ebx, dword [esi + 0xf4]
mov ebx, dword [ebx]
lea edx, [edx + ebx*2]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp], edx
call fcn.00403200
add esp, 0x10
mov eax, dword [0x46751c]
mov ecx, dword [esi + 0xb4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
mov ecx, dword [esi + 0x60]
mov dword [ecx], eax
mov dword [esi + 0x50], 0xc437178c
jmp 0x40d790
cmp eax, 0x4f9a5c61
jne 0x40d790
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
cmp eax, 0x4b07f538
jne 0x40d790
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x54], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x58], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x5c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x60], esp
mov eax, 0x3c
call fcn.00412af0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x64], eax
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x68], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x6c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x70], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x74], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x78], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x7c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x80], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x84], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x88], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x8c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x90], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x94], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x98], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x9c], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xa0], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xa4], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xa8], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xac], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xb0], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xb4], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xb8], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xbc], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xc0], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xc4], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xc8], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xcc], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xd0], esp
mov eax, 0x20c
call fcn.00412af0
mov dword [esi + 0xd4], esp
mov eax, 0xc8
call fcn.00412af0
mov dword [esi + 0xd8], esp
mov eax, 0x28
call fcn.00412af0
mov dword [esi + 0xdc], esp
mov eax, 0x10
call fcn.00412af0
mov dword [esi + 0xe0], esp
mov eax, 0x10
call fcn.00412af0
mov dword [esi + 0xe4], esp
mov eax, 0xc
call fcn.00412af0
mov ebx, esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xe8], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xec], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xf0], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xf4], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xf8], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0xfc], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x100], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x104], esp
mov eax, 4
call fcn.00412af0
mov dword [esi + 0x108], esp
mov eax, dword [esi + 0x58]
mov dword [eax], 0
mov eax, dword [esi + 0x5c]
mov dword [eax], 0
mov eax, dword [esi + 0x60]
mov dword [eax], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0x38], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xa0]
mov dword [eax], 0
mov eax, dword [esi + 0xa4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xa8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xac]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xb0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xb4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xb8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xbc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xc0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xc4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xc8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xcc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xd4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004132a0
add esp, 0xc
mov eax, dword [esi + 0xdc]
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xe0]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [esi + 0xe4]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov word [ebx + 8], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0
mov eax, dword [esi + 0x100]
mov dword [eax], 0
mov eax, dword [esi + 0x104]
mov dword [eax], 0xffffffff
call fcn.0040d050
test eax, eax
sets byte [esi + 0x10f]
mov dword [esi + 0x50], 0xf0d2d002
jmp 0x40d790
cmp eax, 0x3d708016
jne 0x40d790
mov eax, dword [esi + 0x64]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x467520]
mov eax, dword [esi + 0xc0]
mov ecx, dword [esi + 0x64]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x64]
mov dword [eax + 0x14], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0x1c], 1
mov eax, dword [0x467524]
mov ecx, dword [esi + 0x64]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
mov eax, 0xfcca7e2c
jne 0x40efd3
mov eax, 0xb4dc036
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x354018ab
jne 0x40d790
mov dword [esi + 0x50], 0xe336fba
jmp 0x40d790
cmp eax, 0x2def4c8a
jne 0x40d790
mov dword [esi + 0x50], 0xd6323f60
jmp 0x40d790
cmp eax, 0x25ad53d3
jne 0x40d790
mov eax, dword [esi + 0xa8]
mov ecx, dword [esi + 0x64]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0xd0]
mov ecx, dword [esi + 0x64]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x64]
mov dword [eax + 0x1c], 0
mov eax, dword [0x467524]
mov ecx, dword [esi + 0x64]
sub esp, 4
mov dword [esp], ecx
call eax
cmp eax, 1
mov eax, 0x2def4c8a
jne 0x40f055
mov eax, 0x3d708016
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x256cab4c
jne 0x40d790
jmp 0x40f3ad
cmp eax, 0x2535c2ba
jne 0x40d790
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
cmp eax, 0x22066cf3
jne 0x40d790
mov eax, dword [esi + 0x64]
mov dword [eax], 0x3c
mov eax, dword [esi + 0x64]
mov dword [eax + 4], 0x40
mov eax, dword [esi + 0x64]
mov dword [eax + 8], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0xc], 0x47d2ec
mov eax, dword [esi + 0x64]
mov dword [eax + 0x18], 0
mov eax, dword [esi + 0x64]
mov dword [eax + 0x20], 0
mov eax, dword [esi + 0xd0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xd0]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47d2f6
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xb4]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xb4]
mov edx, dword [esi + 0xd0]
add edx, 6
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x101
call fcn.00403200
add esp, 0x10
mov eax, dword [0x41d154]
movzx eax, word [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [0x41d154]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov dword [esi + 0x4c], eax
mov ecx, dword [0x41d154]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea eax, [ecx + edx*2 + 4]
mov dword [esi + 0x48], eax
mov edx, dword [0x41d154]
add edx, 2
mov eax, edi
mov edi, dword [esi + 0xec]
mov edi, dword [edi]
mov ebx, dword [esi + 0xa8]
sub esp, 0x14
mov ecx, dword [esi + 0x4c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0x48]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov edi, eax
mov dword [esp], ebx
call fcn.00402850
add esp, 0x14
mov eax, dword [esi + 0xb8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [esi + 0x5c]
mov dword [ecx], eax
mov eax, dword [esi + 0x5c]
mov dword [esi + 0x50], 0x9a85fdb0
jmp 0x40d790
cmp eax, 0x1c5351a9
jne 0x40d790
mov eax, dword [esi + 0xb8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xbc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402f40
add esp, 0xc
mov eax, dword [esi + 0xb8]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004047f0
add esp, 8
mov eax, dword [esi + 0xb8]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0x108]
mov dword [ecx], eax
mov eax, dword [esi + 0xf4]
mov eax, dword [eax]
mov ecx, dword [esi + 0xac]
mov edx, dword [esi + 0xbc]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0x108]
mov eax, dword [eax]
mov ecx, dword [esi + 0xb8]
mov edx, dword [esi + 0xf4]
mov edi, 0x104
sub edi, dword [edx]
mov edx, dword [esi + 0xbc]
mov ebx, dword [esi + 0xf4]
mov ebx, dword [ebx]
lea edx, [edx + ebx*2]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp], edx
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xf4]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0x108]
sub ecx, dword [eax]
mov eax, dword [esi + 0xbc]
mov edx, dword [esi + 0xf4]
mov edx, dword [edx]
lea eax, [eax + edx*2]
mov edx, dword [esi + 0x108]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403200
add esp, 0x10
mov dword [esi + 0x50], 0x95d2e251
jmp 0x40d790
cmp eax, 0x18bd965d
jne 0x40d790
mov dword [esi + 0x50], 0xbb3193d2
jmp 0x40d790
cmp eax, 0x18663d05
jne 0x40d790
mov eax, dword [esi + 0xbc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi + 0xcc]
sub esp, 4
mov dword [esp], eax
call fcn.0040b960
add esp, 4
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
cmp eax, 0xe336fba
jne 0x40d790
mov byte [esi + 0x112], 1
mov dword [esi + 0x50], 0x7f91c76b
jmp 0x40d790
cmp eax, 0xcc9a4b0
jne 0x40d790
mov eax, dword [esi + 0xcc]
mov ecx, dword [esi + 0xc8]
sub esp, 0x10
mov dword [esp + 8], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov eax, dword [esi + 0xac]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403dd0
add esp, 8
mov eax, dword [esi + 0xac]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xf4]
mov dword [ecx], eax
sub esp, 4
mov dword [esp], 0
call fcn.00410240
add esp, 4
mov ebx, eax
call fcn.00401fd0
imul eax, ebx
sub esp, 4
mov dword [esp], eax
call fcn.00413432
add esp, 4
mov dword [esi + 0x50], 0x1c5351a9
jmp 0x40d790
cmp eax, 0xc459a54
jne 0x40d790
mov eax, dword [esi + 0x5c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x50], 0x6d45444d
jmp 0x40d790
cmp eax, 0xb4dc036
jne 0x40d790
mov eax, dword [esi + 0x64]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call edi
mov eax, dword [esi + 0x5c]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call edi
test eax, eax
mov eax, 0xfe9c6f7e
jne 0x40f50e
mov eax, 0xd833829a
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x54c1376
jne 0x40d790
mov al, byte [esi + 0x111]
test al, al
mov eax, 0x256cab4c
jne 0x40f535
mov eax, 0x25ad53d3
mov dword [esi + 0x50], eax
jmp 0x40d790
cmp eax, 0x8ae3e6
jne 0x40d790
mov eax, dword [esi + 0x64]
mov eax, dword [eax + 0x38]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x467520]
mov eax, dword [esi + 0x104]
mov dword [eax], 1
mov dword [esi + 0x50], 0x96c17ba6
jmp 0x40d790
mov eax, dword [esi + 0x58]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [esi + 0xf8]
mov dword [ecx], eax
mov ecx, dword [esi + 0xf8]
mov eax, 0x61dddabc
cmp dword [ecx], 0
jne 0x40f5d8
mov eax, 0x73f0f72a
mov dword [esi + 0x50], eax
jmp 0x40d790
mov eax, dword [0x467510]
mov ecx, dword [0x467350]
mov edx, dword [0x467378]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x68]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467360]
mov edx, dword [0x467378]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x6c]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467364]
mov edx, dword [0x467378]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x70]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467350]
mov edx, dword [0x467374]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x74]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467344]
mov edx, dword [0x467384]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x78]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467350]
mov edx, dword [0x467388]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x7c]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467394]
mov edx, dword [0x46738c]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x80]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467390]
mov edx, dword [0x46738c]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x84]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x467510]
mov ecx, dword [0x467390]
mov edx, dword [0x467378]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
mov ebx, dword [esi + 0x88]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call eax
mov eax, dword [0x46750c]
mov ecx, dword [esi + 0x60]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
mov edi, dword [esi + 0xd8]
call fcn.0041340f
and eax, 0xf
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413dc4
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xe8]
mov dword [ecx], eax
mov eax, dword [esi + 0xe8]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xe8]
mov dword [edx], ecx
mov ecx, dword [esi + 0xd8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xe8]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.0041340f
and eax, 1
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413dc4
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xe8]
mov dword [ecx], eax
mov eax, dword [esi + 0xe8]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xe8]
mov dword [edx], ecx
mov ecx, dword [esi + 0xd8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xe8]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.0041340f
and eax, 5
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413dc4
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xe8]
mov dword [ecx], eax
mov eax, dword [esi + 0xe8]
mov eax, dword [eax]
lea ecx, [eax + 1]
mov edx, dword [esi + 0xe8]
mov dword [edx], ecx
mov ecx, dword [esi + 0xd8]
mov word [ecx + eax*2], 0x2e
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xe8]
mov ecx, dword [ecx]
lea edi, [eax + ecx*2]
call fcn.0041340f
and eax, 0xc
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413dc4
add esp, 0xc
mov eax, dword [esi + 0xd8]
sub esp, 4
mov dword [esp], eax
call fcn.00403720
add esp, 4
mov ecx, dword [esi + 0xe8]
mov dword [ecx], eax
mov eax, dword [0x41d134]
movzx eax, byte [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [0x41d134]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov ecx, dword [0x41d134]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x41d134]
inc edx
mov edi, dword [esi + 0xe0]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402520
add esp, 0x14
mov eax, dword [0x467508]
mov ecx, dword [0x46736c]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x8c]
mov dword [ecx], eax
mov eax, dword [0x467500]
mov ecx, dword [0x46739c]
mov edx, dword [0x46734c]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0
call eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xd8]
mov edx, dword [0x467368]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xb0]
mov edx, dword [0x467350]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x4674f8]
mov ecx, dword [0x467348]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], 1
call eax
mov eax, dword [0x4674f4]
mov ecx, dword [esi + 0xe0]
mov edx, dword [0x467398]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0x10
call eax
mov eax, dword [0x467508]
mov ecx, dword [0x467370]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x90]
mov dword [ecx], eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x74]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x74]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x7c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x7c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467504]
mov ecx, dword [esi + 0x90]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x70]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x70]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x68]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x88]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
call fcn.0041340f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41d138]
mov ecx, dword [esi + 0xa0]
mov dword [ecx], eax
mov eax, dword [esi + 0xa0]
mov eax, dword [eax]
movzx eax, word [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [esi + 0xa0]
mov ecx, dword [ecx]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov ecx, dword [esi + 0xa0]
mov ecx, dword [ecx]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea ecx, [ecx + edx*2 + 4]
mov edx, dword [esi + 0xa0]
mov edx, dword [edx]
add edx, 2
mov edi, dword [esi + 0xec]
mov edi, dword [edi]
mov ebx, dword [esi + 0xa4]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00402850
add esp, 0x14
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [esi + 0xa4]
mov edx, dword [esi + 0xc0]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xec]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0xc0]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [esi + 0xa4]
mov edx, dword [esi + 0xc4]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x104
call fcn.00403200
add esp, 0x10
mov eax, dword [esi + 0xec]
mov ecx, 0x104
sub ecx, dword [eax]
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea eax, [eax + edx*2]
sub esp, 0x10
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403200
add esp, 0x10
mov eax, dword [0x41d14c]
movzx eax, byte [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [0x41d14c]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov ecx, dword [0x41d14c]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea ecx, [ecx + edx + 2]
mov edx, dword [0x41d14c]
inc edx
mov edi, dword [esi + 0xe4]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402520
add esp, 0x14
mov eax, dword [0x467508]
mov ecx, dword [0x467378]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x94]
mov dword [ecx], eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xc0]
mov edx, dword [0x467350]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xc4]
mov edx, dword [0x467358]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x4674fc]
mov ecx, dword [0x467354]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], str.Microsoft
call eax
mov eax, dword [0x4674f4]
mov ecx, dword [esi + 0xe4]
mov edx, dword [0x467390]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0xc], 0x10
call eax
mov eax, dword [0x467508]
mov ecx, dword [0x46737c]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x98]
mov dword [ecx], eax
mov eax, dword [0x4674fc]
mov ecx, dword [0x467350]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 8], 0x47d2e8
call eax
mov eax, dword [0x467504]
mov ecx, dword [esi + 0x98]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x41d150]
movzx eax, word [eax]
mov ecx, dword [esi + 0xec]
mov dword [ecx], eax
mov eax, dword [esi + 0xec]
mov eax, dword [eax]
mov ecx, dword [0x41d150]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0xf0]
mov dword [ecx], eax
mov eax, dword [esi + 0xf0]
mov eax, dword [eax]
mov ecx, dword [0x41d150]
mov edx, dword [esi + 0xec]
mov edx, dword [edx]
lea ecx, [ecx + edx*2 + 4]
mov edx, dword [0x41d150]
add edx, 2
mov edi, dword [esi + 0xec]
mov edi, dword [edi]
mov ebx, dword [esi + 0xdc]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00402850
add esp, 0x14
mov eax, dword [0x467508]
mov ecx, dword [0x467380]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov ecx, dword [esi + 0x9c]
mov dword [ecx], eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xdc]
mov edx, dword [0x467350]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x4674fc]
mov ecx, dword [esi + 0xbc]
mov edx, dword [0x46735c]
mov edi, dword [esi + 0x60]
mov edi, dword [edi]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov eax, dword [0x467504]
mov ecx, dword [esi + 0x9c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467504]
mov ecx, dword [esi + 0x94]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x88]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x68]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674f0]
mov ecx, dword [esi + 0x78]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x4674ec]
mov ecx, dword [esi + 0x78]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467504]
mov ecx, dword [esi + 0x8c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x60]
mov edx, dword [edx]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [0x467514]
mov ecx, dword [esi + 0x60]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
mov eax, dword [esi + 0xd4]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404b40
add esp, 8
mov eax, dword [0x467554]
mov ecx, dword [esi + 0xd4]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov ecx, dword [esi + 0x58]
mov dword [ecx], eax
mov ecx, dword [esi + 0x58]
mov eax, 0x18663d05
cmp dword [ecx], 0
je 0x40d77d
mov eax, 0xfca4e16b
jmp 0x40d77d
mov eax, dword [esi + 0x54]
mov eax, dword [eax]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret