Function at 0x40f430
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a88
call fcn.004160a0
mov dword [esp + 0x1a74], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea eax, [esp + 0x17f2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0x15e8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea ebx, [esp + 0x13de]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea edi, [esp + 0x11d4]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea esi, [esp + 0xfca]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004168d0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004168d0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.0040ed80
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0x9f7bb08c
jmp 0x40f780
mov dword [esp + 0x48], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x7dac5af2
jg 0x40f860
cmp eax, 0x88d4aa28
jg 0x40f890
cmp eax, 0x8259d195
jne 0x40f780
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404790
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00403e00
mov dword [esp], edi
call fcn.00404240
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403e00
mov dword [esp], esi
mov dword [esp + 4], 0
call dword [0x4cde60]
sub esp, 8
mov dword [esp + 0x1a74], eax
mov dword [esp + 0x48], 0x7dac5af3
jmp 0x40f780
cmp eax, 0x7dac5af3
jne 0x40f780
mov eax, 0x8259d195
cmp dword [esp + 0x1a74], 0
je 0x40f76f
mov eax, 0x4edd4860
jmp 0x40f76f
cmp eax, 0x8f8606c8
jg 0x40f8fa
cmp eax, 0x88d4aa29
jne 0x40f780
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cde64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0x73564714
jmp 0x40f780
cmp eax, 0x97a2c81f
jg 0x4104f1
cmp eax, 0x8f8606c9
jne 0x40f780
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcbc]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a30]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcc0]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a2c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd0]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a28]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdca0]
mov ecx, dword [0x4cdce0]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a24]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdce4]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a20]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcf0]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a1c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a18]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea esi, [esp + 0x1a14]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cde50]
sub esp, 4
call fcn.00416a3f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea esi, [esp + 0xbc]
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea ebx, [esp + eax*2 + 0xbc]
call fcn.00416a3f
and eax, 1
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea ebx, [esp + eax*2 + 0xbc]
call fcn.00416a3f
and eax, 5
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0x64], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x64], edx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea ebx, [esp + eax*2 + 0xbc]
call fcn.00416a3f
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0x64], eax
mov eax, dword [0x4cbe8c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cbe8c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbe8c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402510
mov eax, dword [0x4cdcc8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4cdcf8]
mov ecx, dword [0x4cdca8]
mov edx, dword [esp + 0x1a74]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4cde44]
sub esp, 0x10
mov eax, dword [0x4cdcc4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdca4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4cde3c]
sub esp, 0xc
mov eax, dword [0x4cdcf4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdccc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
call fcn.00416a3f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cbe90]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402860
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea edi, [esp + 0x9ac]
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0x7a2]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403e00
mov eax, dword [0x4cbea4]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cbea4]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbea4]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x74]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402510
mov eax, dword [0x4cdcd4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb0]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcec]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdcd8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x420520
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [0x4cbea8]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cbea8]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbea8]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov esi, eax
mov dword [esp], esi
call fcn.00402860
mov eax, dword [0x4cdcdc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb8]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cde58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x420524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea edi, [esp + 0x184]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42052e
mov dword [esp + 4], 0x104
call fcn.00403e00
lea eax, [esp + 0xfca]
mov dword [esp], eax
call fcn.00404240
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfca]
mov dword [esp + 8], eax
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00403e00
mov eax, dword [0x4cbeac]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4cbeac]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbeac]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402860
mov dword [esp + 0x1a48], ebx
lea ebx, [esp + 0x13de]
lea esi, [esp + 0xfca]
mov dword [esp + 0x1a4c], edi
lea edi, [esp + 0x11d4]
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a82]
mov dword [esp + 0x48], 0xeea22537
jmp 0x40f780
cmp eax, 0x9f7bb08b
jg 0x4105e0
cmp eax, 0x97a2c820
jne 0x40f780
mov ebx, edi
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403e00
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00403e00
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
mov eax, 0xabd6281e
jne 0x4105ce
mov eax, 0x88d4aa29
mov dword [esp + 0x48], eax
mov edi, ebx
lea ebx, [esp + 0x13de]
jmp 0x40f780
cmp eax, 0xa549d179
jg 0x41060f
cmp eax, 0x9f7bb08c
jne 0x40f780
mov eax, 0xd6202e3a
cmp dword [esp + 0x1a7c], 0
js 0x410606
mov eax, 0xf4b56379
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0x73564713
jg 0x410652
cmp eax, 0x6e60bac6
jg 0x410686
cmp eax, 0x62634c14
jg 0x41069e
cmp eax, 0xa60bb978
jg 0x41128b
cmp eax, 0xa549d17a
jne 0x40f780
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0xe1867422
jmp 0x40f780
cmp eax, 0x73564714
jne 0x40f780
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040f3b0
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0x3a8e8569
jmp 0x40f780
cmp eax, 0x6e60bac7
jne 0x40f780
mov dword [esp + 0x48], 0x3e87c0d2
jmp 0x40f780
cmp eax, 0x62634c15
jne 0x40f780
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a34]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcbc]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a30]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcc0]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a2c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdcd0]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a28]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdca0]
mov ecx, dword [0x4cdce0]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a24]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcac]
mov ecx, dword [0x4cdce4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a20]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcf0]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a1c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdce8]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a18]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [0x4cdcec]
mov ecx, dword [0x4cdcd4]
mov edx, dword [esp + 0x1a74]
lea ebx, [esp + 0x1a14]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4cde54]
sub esp, 0x18
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cde50]
sub esp, 4
call fcn.00416a3f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea eax, [esp + 0xbc]
mov ebx, eax
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], ebx
call fcn.00404240
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea ebx, [esp + eax*2 + 0xbc]
call fcn.00416a3f
and eax, 1
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004173f4
lea ebx, [esp + 0xbc]
mov dword [esp], ebx
call fcn.00404240
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.00416a3f
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004173f4
mov dword [esp], ebx
call fcn.00404240
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea ebx, [esp + eax*2 + 0xbc]
call fcn.00416a3f
and eax, 0xc
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.004173f4
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404240
mov dword [esp + 0x64], eax
mov eax, dword [0x4cbe8c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4cbe8c]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbe8c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402510
mov eax, dword [0x4cdcc8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4cdcf8]
mov ecx, dword [0x4cdca8]
mov edx, dword [esp + 0x1a74]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4cde44]
sub esp, 0x10
mov eax, dword [0x4cdcc4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdca4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4cde3c]
sub esp, 0xc
mov eax, dword [0x4cdcf4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdccc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
call fcn.00416a3f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cbe90]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402860
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea edi, [esp + 0x9ac]
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0x7a2]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403e00
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403e00
mov eax, dword [0x4cbea4]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cbea4]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbea4]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x74]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402510
mov eax, dword [0x4cdcd4]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb4]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0x7a2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb0]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcec]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cde38]
sub esp, 0x10
mov eax, dword [0x4cdcd8]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x420520
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [0x4cbea8]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cbea8]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbea8]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402860
mov eax, dword [0x4cdcdc]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4cdcac]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [0x4cdcb8]
mov ecx, dword [esp + 0x1a74]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a74]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cde48]
sub esp, 8
mov eax, dword [esp + 0x1a74]
mov dword [esp], eax
call dword [0x4cde58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x420524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea edi, [esp + 0x184]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42052e
mov dword [esp + 4], 0x104
call fcn.00403e00
mov dword [esp], esi
call fcn.00404240
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00403e00
mov eax, dword [0x4cbeac]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4cbeac]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cbeac]
mov edx, dword [esp + 0x60]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov ebx, eax
mov dword [esp], ebx
call fcn.00402860
mov dword [esp + 0x1a48], ebx
lea ebx, [esp + 0x13de]
mov dword [esp + 0x1a4c], edi
lea edi, [esp + 0x11d4]
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cde68]
sub esp, 4
mov dword [esp + 0x48], 0x8f8606c9
jmp 0x40f780
cmp eax, 0xabd6281d
jg 0x4112aa
cmp eax, 0xa60bb979
jne 0x40f780
mov dword [esp + 0x48], 0x8259d195
jmp 0x40f780
cmp eax, 0xb1318446
jg 0x4112c9
cmp eax, 0xabd6281e
jne 0x40f780
mov dword [esp + 0x48], 0xfd93e411
jmp 0x40f780
cmp eax, 0xb2ee6df1
jg 0x4112e8
cmp eax, 0xb1318447
jne 0x40f780
mov dword [esp + 0x48], 0xfd93e411
jmp 0x40f780
cmp eax, 0xb7b5ac54
jg 0x411307
cmp eax, 0xb2ee6df2
jne 0x40f780
mov dword [esp + 0x48], 0xc37370e0
jmp 0x40f780
cmp eax, 0xb8fe90ca
jg 0x411333
cmp eax, 0xb7b5ac55
jne 0x40f780
mov eax, 0x34c4498c
cmp dword [esp + 0x54], 6
jb 0x41132a
mov eax, 0xc4c4c8ab
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0xc37370df
jg 0x41134a
cmp eax, 0xb8fe90cb
jne 0x40f780
jmp 0x411834
cmp eax, 0xc4c4c8aa
jg 0x4113c7
cmp eax, 0xc37370e0
jne 0x40f780
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403a90
mov dword [esp], ebx
call fcn.00404240
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00411a90
mov dword [esp], eax
call fcn.00416a62
mov dword [esp + 0x48], 0x42539b0
jmp 0x40f780
cmp eax, 0xd6202e39
jg 0x411413
cmp eax, 0xc4c4c8ab
jne 0x40f780
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0xb2ee6df2
jne 0x41140a
mov eax, 0xb8fe90cb
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0xdddb825b
jg 0x41142a
cmp eax, 0xd6202e3a
jne 0x40f780
jmp 0x411834
cmp eax, 0xdf8a3bad
jg 0x41146b
cmp eax, 0xdddb825c
jne 0x40f780
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040dcb0
mov dword [esp + 0x48], 0x5f23f0e0
jmp 0x40f780
cmp eax, 0xe1867421
jg 0x41148a
cmp eax, 0xdf8a3bae
jne 0x40f780
mov dword [esp + 0x48], 0x73564714
jmp 0x40f780
cmp eax, 0xeea22536
jg 0x4114b4
cmp eax, 0xe1867422
jne 0x40f780
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x48], 0x92ac21a
jmp 0x40f780
cmp eax, 0xf4b56378
jg 0x4114e4
cmp eax, 0xeea22537
jne 0x40f780
mov al, byte [esp + 0x1a82]
test al, al
mov eax, 0x41e0a516
jne 0x4114db
mov eax, 0x6e60bac7
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0xf8278b9c
jg 0x411519
cmp eax, 0xf4b56379
jne 0x40f780
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040dd90
test eax, eax
mov eax, 0x52bdf98c
jne 0x411510
mov eax, 0xb7b5ac55
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0xfafcf252
jg 0x41155a
cmp eax, 0xf8278b9d
jne 0x40f780
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040dcb0
mov dword [esp + 0x48], 0xdf8a3bae
jmp 0x40f780
cmp eax, 0xfd93e410
jg 0x41159b
cmp eax, 0xfafcf253
jne 0x40f780
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040dcb0
mov dword [esp + 0x48], 0xf8278b9d
jmp 0x40f780
cmp eax, 0xe3e6f6
jg 0x4115ba
cmp eax, 0xfd93e411
jne 0x40f780
mov dword [esp + 0x48], 0x53116088
jmp 0x40f780
cmp eax, 0x42539af
jg 0x4115fb
cmp eax, 0xe3e6f7
jne 0x40f780
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040dcb0
mov dword [esp + 0x48], 0xdddb825c
jmp 0x40f780
cmp eax, 0x92ac219
jg 0x41161a
cmp eax, 0x42539b0
jne 0x40f780
mov dword [esp + 0x48], 0x1cf7ced5
jmp 0x40f780
cmp eax, 0x1cf7ced4
jg 0x411639
cmp eax, 0x92ac21a
jne 0x40f780
mov dword [esp + 0x48], 0x3a8e8569
jmp 0x40f780
cmp eax, 0x2990d012
jg 0x411755
cmp eax, 0x1cf7ced5
jne 0x40f780
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004035c0
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404790
lea eax, [esp + 0xdc0]
mov dword [esp], eax
call fcn.00404240
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403e00
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xdc0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403e00
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
mov edx, 0x9c50e23a
sub edx, eax
sub edx, ecx
add edx, 0x63af1eca
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403e00
mov dword [esp + 0x48], 0x3bcd9fb4
jmp 0x40f780
cmp eax, 0x2b101074
jg 0x4117f2
cmp eax, 0x2990d013
jne 0x40f780
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cde64]
sub esp, 0x10
lea eax, [esp + 0x9ac]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cde68]
sub esp, 4
mov dword [esp + 0x48], 0x3e87c0d2
jmp 0x40f780
cmp eax, 0x34c4498b
jg 0x411822
cmp eax, 0x2b101075
jne 0x40f780
mov al, byte [esp + 0x1a83]
test al, al
mov eax, 0x58af6e5e
jne 0x411819
mov eax, 0x97a2c820
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0x3a8e8568
jg 0x41184c
cmp eax, 0x34c4498c
jne 0x40f780
mov dword [esp + 0x1a78], 0xffffffff
mov dword [esp + 0x48], 0x3a8e8569
jmp 0x40f780
cmp eax, 0x3bcd9fb3
jg 0x411863
cmp eax, 0x3a8e8569
jne 0x40f780
jmp 0x411a80
cmp eax, 0x3e87c0d1
jg 0x4118b2
cmp eax, 0x3bcd9fb4
jne 0x40f780
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x1cf7ced5
je 0x4118a9
mov eax, 0xa60bb979
mov dword [esp + 0x48], eax
jmp 0x40f780
cmp eax, 0x41e0a515
jg 0x41195a
cmp eax, 0x3e87c0d2
jne 0x40f780
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cde64]
sub esp, 0x10
lea eax, [esp + 0x9ac]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4cde68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a83]
mov dword [esp + 0x48], 0x2b101075
jmp 0x40f780
cmp eax, 0x4edd485f
jg 0x411979
cmp eax, 0x41e0a516
jne 0x40f780
mov dword [esp + 0x48], 0xdddb825c
jmp 0x40f780
cmp eax, 0x52bdf98b
jg 0x411998
cmp eax, 0x4edd4860
jne 0x40f780
mov dword [esp + 0x48], 0x8f8606c9
jmp 0x40f780
cmp eax, 0x5fa0ca53
jg 0x4119cd
cmp eax, 0x5f23f0df
jg 0x411a43
cmp eax, 0x52bdf98c
je 0x411a5b
cmp eax, 0x53116088
jne 0x411a68
mov dword [esp + 0x48], 0x73564714
jmp 0x40f780
cmp eax, 0x5fa0ca54
jne 0x40f780
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403a90
mov dword [esp], ebx
call fcn.00404240
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00411a90
mov dword [esp], eax
call fcn.00416a62
mov dword [esp + 0x48], 0xc37370e0
jmp 0x40f780
cmp eax, 0x5f23f0e0
jne 0x40f780
mov dword [esp + 0x48], 0x73564714
jmp 0x40f780
mov dword [esp + 0x48], 0xe1867422
jmp 0x40f780
cmp eax, 0x58af6e5e
jne 0x40f780
mov dword [esp + 0x48], 0xf8278b9d
jmp 0x40f780
mov eax, dword [esp + 0x1a78]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret