Function at 0x40cbd0
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb0
call fcn.00410f20
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea esi, [esp + 0x1a12]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea edi, [esp + 0xfe0]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0xdd6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea ebx, [esp + 0x7b8]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x5ae]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00411700
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00411700
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040c580
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0xf8296b2
jmp 0x40cf60
mov dword [esp + 0x54], 0x381492a5
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x850aafd1
jg 0x40cf80
cmp eax, 0x82058e5b
jne 0x40cf60
jmp 0x40cf53
cmp eax, 0x8a8727be
jg 0x40d000
cmp eax, 0x850aafd2
jne 0x40cf60
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00403600
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x471b6156
test eax, eax
jne 0x40cff1
mov ecx, 0x900cff
mov dword [esp + 0x54], ecx
jmp 0x40cf60
cmp eax, 0x8cf16d39
jg 0x40d032
cmp eax, 0x8a8727bf
jne 0x40cf60
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xe0f7a7
jmp 0x40cf60
cmp eax, 0x91b94519
jg 0x40d07a
cmp eax, 0x8cf16d3a
jne 0x40cf60
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0x118484be
test eax, eax
jne 0x40d071
mov ecx, 0xb1c0a541
mov dword [esp + 0x54], ecx
jmp 0x40cf60
cmp eax, 0x95777f31
jg 0x40d0c3
cmp eax, 0x91b9451a
jne 0x40cf60
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004031a0
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040b8d0
test eax, eax
setne byte [esp + 0x1cab]
mov dword [esp + 0x54], 0xf1c697f0
jmp 0x40cf60
cmp eax, 0x97f3b48b
jg 0x40d0e2
cmp eax, 0x95777f32
jne 0x40cf60
mov dword [esp + 0x54], 0x91b9451a
jmp 0x40cf60
cmp eax, 0xa53d5bba
jg 0x40d101
cmp eax, 0x97f3b48c
jne 0x40cf60
mov dword [esp + 0x54], 0xa53d5bbb
jmp 0x40cf60
cmp eax, 0xac853d71
jg 0x40d133
cmp eax, 0xa53d5bbb
jne 0x40cf60
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x2d449cdd
jmp 0x40cf60
cmp eax, 0xb1c0a540
jg 0x40d14a
cmp eax, 0xac853d72
jne 0x40cf60
jmp 0x40e0d8
cmp eax, 0x7e22e834
jg 0x40d2b7
cmp eax, 0xb34f2f46
jg 0x40d31a
cmp eax, 0xb1c0a541
jne 0x40cf60
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x47b2d8
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
mov dword [esp], esi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47b2e2
mov dword [esp + 4], 0x104
call fcn.00403460
lea eax, [esp + 0x11ea]
mov esi, eax
mov dword [esp], esi
call fcn.004037f0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00403460
mov eax, dword [0x41b154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [0x41b154]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41b154]
mov edx, dword [esp + 0x74]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.00402910
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x7c006b04
test eax, eax
je 0x40d2a7
mov ecx, 0xbcb42435
mov dword [esp + 0x54], ecx
lea esi, [esp + 0x1a12]
jmp 0x40cf60
cmp eax, 0x7e22e835
jne 0x40cf60
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4661dc]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x5fba1fb8
jmp 0x40cf60
cmp eax, 0xb8cf744c
jg 0x40d3c2
cmp eax, 0xb34f2f47
jne 0x40cf60
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4661dc]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4661e0]
sub esp, 4
cmp eax, 1
mov eax, 0x6472180d
jne 0x40d3b9
mov eax, 0x14657fcf
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0xbcb42434
jg 0x40d3f4
cmp eax, 0xb8cf744d
jne 0x40cf60
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xa53d5bbb
jmp 0x40cf60
cmp eax, 0xc48de8c7
jg 0x40d458
cmp eax, 0xbcb42435
jne 0x40cf60
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4661e0]
sub esp, 4
cmp eax, 1
mov eax, 0x5be30ca
jne 0x40d44f
mov eax, 0xb34f2f47
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0xce5ca098
jg 0x40d487
cmp eax, 0xc48de8c8
jne 0x40cf60
mov eax, 0x8a8727bf
cmp dword [esp + 0x1c9c], 0
jne 0x40d47e
mov eax, 0xe0f7a7
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0xd2f7b240
jg 0x40d49e
cmp eax, 0xce5ca099
jne 0x40cf60
jmp 0x40e6c3
cmp eax, 0x7c006b03
jg 0x40e06e
cmp eax, 0x7a931ce9
jg 0x40e07e
cmp eax, 0xd34ff946
jg 0x40e0c6
cmp eax, 0xd2f7b241
jne 0x40cf60
mov eax, dword [0x46600c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466034]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x46601c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466034]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c50]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x466020]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466034]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x46600c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466030]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x466000]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466040]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x46600c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466044]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x466050]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466048]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x46604c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466048]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [0x46604c]
mov dword [esp + 0x50], eax
mov ecx, dword [0x466034]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4661cc]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4661c8]
sub esp, 4
call fcn.0041186f
and eax, 0xf
lea ecx, [esp + 0xd2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00412224
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004037f0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.0041186f
and eax, 1
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00412224
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004037f0
mov dword [esp + 0x78], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.0041186f
and eax, 5
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00412224
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004037f0
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.0041186f
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00412224
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.004037f0
mov dword [esp + 0x78], eax
mov eax, dword [0x41b134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [0x41b134]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41b134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004025f0
mov eax, dword [0x466028]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c4]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x466058]
mov ecx, dword [0x466008]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4661bc]
sub esp, 0x10
mov eax, dword [0x466024]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x46600c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x466004]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4661b4]
sub esp, 0xc
mov eax, dword [0x466054]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4661b0]
sub esp, 0x10
mov eax, dword [0x46602c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c4]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c0]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
call fcn.0041186f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41b138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [esp + 0x1c1c]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.00402910
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403460
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403460
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403460
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00403460
mov eax, dword [0x41b14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
not eax
mov ecx, dword [0x41b14c]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41b14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004025f0
mov eax, dword [0x466034]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c4]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x46600c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x466014]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x466010]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x46604c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x88]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4661b0]
sub esp, 0x10
mov eax, dword [0x466038]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c4]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x46600c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x47b2d4
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c0]
sub esp, 8
mov eax, dword [0x41b150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41b150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41b150]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.00402910
mov eax, dword [0x46603c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c4]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x46600c]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [0x466018]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xdd6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661b8]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c0]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c0]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661ac]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661a8]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4661c0]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4661d0]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404840
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x466210]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov ecx, 0xce5ca099
test eax, eax
je 0x40e065
mov ecx, 0x8cf16d3a
mov dword [esp + 0x54], ecx
jmp 0x40cf60
cmp eax, 0x7c006b04
jne 0x40cf60
jmp 0x40e6c3
cmp eax, 0x7a931cea
jne 0x40cf60
lea eax, [esp + 0xdd6]
mov dword [esp + 4], eax
lea eax, [esp + 0x5ae]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x2118c70f
je 0x40e0bd
mov eax, 0x82058e5b
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0xe337fea4
jg 0x40e0f0
cmp eax, 0xd34ff947
jne 0x40cf60
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x704843a3
jmp 0x40cf60
cmp eax, 0xf1c697ef
jg 0x40e122
cmp eax, 0xe337fea5
jne 0x40cf60
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x1bc5aa7d
jmp 0x40cf60
cmp eax, 0xf6e1cd36
jg 0x40e152
cmp eax, 0xf1c697f0
jne 0x40cf60
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0x850aafd2
jne 0x40e149
mov eax, 0x799fe7c5
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x900cfe
jg 0x40e171
cmp eax, 0xf6e1cd37
jne 0x40cf60
mov dword [esp + 0x54], 0x5fba1fb8
jmp 0x40cf60
cmp eax, 0xe0f7a6
jg 0x40e19b
cmp eax, 0x900cff
jne 0x40cf60
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0x704843a3
jmp 0x40cf60
cmp eax, 0x5be30c9
jg 0x40e1dd
cmp eax, 0xe0f7a7
jne 0x40cf60
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040cbb0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0x704843a3
jmp 0x40cf60
cmp eax, 0x93c0a4f
jg 0x40e1f4
cmp eax, 0x5be30ca
jne 0x40cf60
jmp 0x40e6c3
cmp eax, 0xf8296b1
jg 0x40e213
cmp eax, 0x93c0a50
jne 0x40cf60
mov dword [esp + 0x54], 0x6e2b0e8e
jmp 0x40cf60
cmp eax, 0x118484bd
jg 0x40e242
cmp eax, 0xf8296b2
jne 0x40cf60
mov eax, 0xac853d72
cmp dword [esp + 0x1ca4], 0
js 0x40e239
mov eax, 0x95777f32
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x14657fce
jg 0x40e271
cmp eax, 0x118484be
jne 0x40cf60
mov eax, 0x16112a39
cmp dword [esp + 0x68], 0x80
jne 0x40e268
mov eax, 0xb1c0a541
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x16112a38
jg 0x40e2d6
cmp eax, 0x14657fcf
jne 0x40cf60
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, eax
call esi
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call esi
sub esp, 8
test eax, eax
mov eax, 0x29ec4b89
jne 0x40e2c6
mov eax, 0x4ae99857
mov dword [esp + 0x54], eax
lea esi, [esp + 0x1a12]
jmp 0x40cf60
cmp eax, 0x1bc5aa7c
jg 0x40e2ed
cmp eax, 0x16112a39
jne 0x40cf60
jmp 0x40e6c3
cmp eax, 0x2118c70e
jg 0x40e31f
cmp eax, 0x1bc5aa7d
jne 0x40cf60
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x900cff
jmp 0x40cf60
cmp eax, 0x22869204
jg 0x40e426
cmp eax, 0x2118c70f
jne 0x40cf60
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
lea eax, [esp + 0xdd6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004045e0
mov dword [esp], edi
call fcn.004037f0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
lea eax, [esp + 0xdd6]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403460
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403460
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0x9573d6e9
sub edx, eax
sub edx, ecx
add edx, 0x6a8c2a1b
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00403460
mov dword [esp + 0x54], 0x7a931cea
jmp 0x40cf60
cmp eax, 0x29ec4b88
jg 0x40e4bc
cmp eax, 0x22869205
jne 0x40cf60
lea eax, [esp + 0x5ae]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403e80
lea eax, [esp + 0x15fe]
mov dword [esp], eax
call fcn.004037f0
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.0040e860
mov dword [esp + 0x50], eax
call fcn.004021a0
imul eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00411892
mov dword [esp + 0x54], 0x2118c70f
jmp 0x40cf60
cmp eax, 0x2d449cdc
jg 0x40e4db
cmp eax, 0x29ec4b89
jne 0x40cf60
mov dword [esp + 0x54], 0x5fba1fb8
jmp 0x40cf60
cmp eax, 0x381492a4
jg 0x40e4fa
cmp eax, 0x2d449cdd
jne 0x40cf60
mov dword [esp + 0x54], 0xc48de8c8
jmp 0x40cf60
cmp eax, 0x415997d5
jg 0x40e519
cmp eax, 0x381492a5
jne 0x40cf60
mov dword [esp + 0x54], 0x93c0a50
jmp 0x40cf60
cmp eax, 0x471b6155
jg 0x40e558
cmp eax, 0x415997d6
jne 0x40cf60
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004031a0
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040b8d0
mov dword [esp + 0x54], 0x91b9451a
jmp 0x40cf60
cmp eax, 0x4ae99856
jg 0x40e58a
cmp eax, 0x471b6156
jne 0x40cf60
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xe337fea5
je 0x40e581
mov eax, 0x1bc5aa7d
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x4e3da16f
jg 0x40e663
cmp eax, 0x4ae99857
jne 0x40cf60
lea eax, [esp + 0x3a4]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00403460
lea eax, [esp + 0x11ea]
mov esi, eax
mov dword [esp], esi
call fcn.004037f0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00403460
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4661e0]
sub esp, 4
cmp eax, 1
mov eax, 0xf6e1cd37
jne 0x40e2c6
mov eax, 0x7e22e835
jmp 0x40e2c6
cmp eax, 0x5fba1fb7
jg 0x40e682
cmp eax, 0x4e3da170
jne 0x40cf60
mov dword [esp + 0x54], 0x381492a5
jmp 0x40cf60
cmp eax, 0x6472180c
jg 0x40e6b1
cmp eax, 0x5fba1fb8
jne 0x40cf60
mov eax, 0x97f3b48c
cmp dword [esp + 0x1c98], 0
jne 0x40e6a8
mov eax, 0xc48de8c8
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x6e2b0e8d
jg 0x40e6f2
cmp eax, 0x6472180d
jne 0x40cf60
lea eax, [esp + 0xdd6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x5ae]
mov dword [esp], eax
call fcn.0040b7f0
mov dword [esp + 0x54], 0x5fba1fb8
jmp 0x40cf60
cmp eax, 0x704843a2
jg 0x40e7f2
cmp eax, 0x6e2b0e8e
jne 0x40cf60
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004030f0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.004045e0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403460
lea eax, [esp + 0x13f4]
mov dword [esp], eax
call fcn.004037f0
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13f4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00403460
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4661d8]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0x79a65e6f
jmp 0x40cf60
cmp eax, 0x799fe7c5
je 0x40e81d
cmp eax, 0x79a65e6f
jne 0x40e837
mov eax, 0x6e2b0e8e
cmp dword [esp + 0x1c94], 0
je 0x40e814
mov eax, 0xd2f7b241
mov dword [esp + 0x54], eax
jmp 0x40cf60
mov eax, 0xd34ff947
cmp dword [esp + 0x60], 6
jb 0x40e82e
mov eax, 0x22869205
mov dword [esp + 0x54], eax
jmp 0x40cf60
cmp eax, 0x704843a3
jne 0x40cf60
mov eax, dword [esp + 0x1ca0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret