Function at 0x411a90
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a90
call fcn.00418710
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea eax, [esp + 0x17f2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x15e8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x13de]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0xdc0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0xbb6]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea ebx, [esp + 0x9ac]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00418f80
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00418f80
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.00410e60
mov dword [esp + 0x1a80], eax
mov dword [esp + 0x48], 0x67e9c6ee
jmp 0x412990
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cbc]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a30]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cc0]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a2c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0cd0]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a28]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0ca0]
mov ecx, dword [0x4d0ce0]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a24]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0ce4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a20]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cf0]
mov ecx, dword [0x4d0ce8]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a1c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cec]
mov ecx, dword [0x4d0ce8]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a18]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cec]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a14]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4d0e50]
sub esp, 4
call fcn.004190ef
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea edi, [esp + 0xbc]
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], edi
call fcn.00404da0
mov dword [esp + 0x64], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x64], edx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea esi, [esp + eax*2 + 0xbc]
call fcn.004190ef
and eax, 1
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], edi
call fcn.00404da0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea esi, [esp + eax*2 + 0xbc]
call fcn.004190ef
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], edi
call fcn.00404da0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea esi, [esp + eax*2 + 0xbc]
call fcn.004190ef
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], edi
call fcn.00404da0
mov dword [esp + 0x64], eax
mov eax, dword [0x4cee84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cee84]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cee84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x84]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402870
mov eax, dword [0x4d0cc8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4d0cf8]
mov ecx, dword [0x4d0ca8]
mov edx, dword [esp + 0x1a78]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4d0e44]
sub esp, 0x10
mov eax, dword [0x4d0cc4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0ca4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4d0e3c]
sub esp, 0xc
mov eax, dword [0x4d0cf4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4d0e38]
sub esp, 0x10
mov eax, dword [0x4d0ccc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
call fcn.004190ef
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cee88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404970
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404970
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x7a2]
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404970
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404970
mov eax, dword [0x4cee9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cee9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cee9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea edi, [esp + 0x74]
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402870
mov eax, dword [0x4d0cd4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb0]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cec]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4d0e38]
sub esp, 0x10
mov eax, dword [0x4d0cd8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x423520
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [0x4ceea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4ceea0]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4ceea0]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov eax, dword [0x4d0cdc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb8]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4d0e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x423524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea edi, [esp + 0x184]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42352e
mov dword [esp + 4], 0x104
call fcn.00404970
lea eax, [esp + 0xfca]
mov esi, eax
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404970
mov eax, dword [0x4ceea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4ceea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4ceea4]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov dword [esp + 0x1a48], esi
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4d0e68]
sub esp, 4
mov dword [esp + 0x48], 0x6bfe162e
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x941ca939
jg 0x4129b0
cmp eax, 0x817ab550
jne 0x412990
jmp 0x411dd2
cmp eax, 0x987c88a7
jg 0x4129d0
cmp eax, 0x941ca93a
jne 0x412990
mov dword [esp + 0x48], 0x6bfe162e
jmp 0x412990
cmp eax, 0x9f08b0cf
jg 0x412a0b
cmp eax, 0x987c88a8
jne 0x412990
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
mov dword [esp + 0x48], 0xeece214a
jmp 0x412990
cmp eax, 0x7698fae1
jg 0x412a8b
cmp eax, 0x738fd879
jg 0x412b64
cmp eax, 0xa0476c7c
jg 0x412b7c
cmp eax, 0x9f08b0d0
jne 0x412990
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4d0e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0x1659c9cd
jmp 0x412990
cmp eax, 0x7698fae2
jne 0x412990
lea esi, [esp + 0x11d4]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea edi, [esp + 0xfca]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004055c0
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404970
mov dword [esp], esi
call fcn.00404da0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404970
mov dword [esp], edi
lea ebx, [esp + 0x9ac]
mov dword [esp + 4], 0
call dword [0x4d0e60]
sub esp, 8
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0xfdcfd017
jmp 0x412990
cmp eax, 0x738fd87a
jne 0x412990
mov dword [esp + 0x48], 0x40d7643
jmp 0x412990
cmp eax, 0xa33b407f
jg 0x412b9b
cmp eax, 0xa0476c7d
jne 0x412990
mov dword [esp + 0x48], 0x1dc0654b
jmp 0x412990
cmp eax, 0xa998fbf3
jg 0x412bdd
cmp eax, 0xa33b4080
jne 0x412990
lea eax, [esp + 0xfca]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00411a10
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0x29d4fd79
jmp 0x412990
cmp eax, 0x704e6577
jg 0x412d16
cmp eax, 0x6f77e729
jg 0x412d39
cmp eax, 0x6bfe162d
jg 0x412d81
cmp eax, 0x687d0a76
jg 0x413951
cmp eax, 0x67e9c6ed
jg 0x413969
cmp eax, 0x5859aea5
jg 0x413991
cmp eax, 0x53c1a4af
jg 0x4139a9
cmp eax, 0x4c4486d4
jg 0x4139c1
cmp eax, 0x2fb8becc
jg 0x4139e9
cmp eax, 0x29d4fd78
jg 0x413a01
cmp eax, 0x21b3d4f6
jg 0x413a11
cmp eax, 0x2105e210
jg 0x413a1e
cmp eax, 0x1e456407
jg 0x413a36
cmp eax, 0x1dc0654a
jg 0x413a4e
cmp eax, 0x1c91edce
jg 0x413a71
cmp eax, 0x1c4fb3b3
jg 0x413a94
cmp eax, 0x1c2f7ed2
jg 0x413aac
cmp eax, 0x1659c9cc
jg 0x413ac4
cmp eax, 0x127bde7a
jg 0x413b27
cmp eax, 0xf6ff352
jg 0x413b50
cmp eax, 0xb36e113
jg 0x413c32
cmp eax, 0x40d7642
jg 0x413c55
cmp eax, 0xfe36a8
jg 0x413c6d
cmp eax, 0xfdcfd016
jg 0x413c85
cmp eax, 0xf634db50
jg 0x413d59
cmp eax, 0xf61e1b95
jg 0x413def
cmp eax, 0xa9a73af6
jg 0x413e6e
cmp eax, 0xa998fbf4
jne 0x412990
jmp 0x413f1e
cmp eax, 0x704e6578
jne 0x412990
mov dword [esp + 0x1a7c], 0
mov dword [esp + 0x48], 0xd319d4c2
jmp 0x412990
cmp eax, 0x6f77e72a
jne 0x412990
lea eax, [esp + 0xbb6]
mov dword [esp + 4], eax
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0xc4e67d55
je 0x412d78
mov eax, 0x738fd87a
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0x6bfe162e
jne 0x412990
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cbc]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a30]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cc0]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a2c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0cd0]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a28]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0ca0]
mov ecx, dword [0x4d0ce0]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a24]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cac]
mov ecx, dword [0x4d0ce4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a20]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cf0]
mov ecx, dword [0x4d0ce8]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a1c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cec]
mov ecx, dword [0x4d0ce8]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a18]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [0x4d0cec]
mov ecx, dword [0x4d0cd4]
mov edx, dword [esp + 0x1a78]
lea esi, [esp + 0x1a14]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4d0e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4d0e50]
sub esp, 4
call fcn.004190ef
and eax, 0xf
lea esi, [esp + 0xbc]
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x64], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x64], edx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea edi, [esp + eax*2 + 0xbc]
call fcn.004190ef
and eax, 1
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea edi, [esp + eax*2 + 0xbc]
call fcn.004190ef
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea edi, [esp + eax*2 + 0xbc]
call fcn.004190ef
mov ecx, eax
xor ecx, 0xfffffff3
and ecx, eax
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00419aa4
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x64], eax
mov eax, dword [0x4cee84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4cee84]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cee84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea edi, [esp + 0x84]
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402870
mov eax, dword [0x4d0cc8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4d0cf8]
mov ecx, dword [0x4d0ca8]
mov edx, dword [esp + 0x1a78]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4d0e44]
sub esp, 0x10
mov eax, dword [0x4d0cc4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0ca4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4d0e3c]
sub esp, 0xc
mov eax, dword [0x4d0cf4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4d0e38]
sub esp, 0x10
mov eax, dword [0x4d0ccc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
call fcn.004190ef
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cee88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404970
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404970
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x7a2]
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404970
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404970
mov eax, dword [0x4cee9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4cee9c]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4cee9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea edi, [esp + 0x74]
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402870
mov eax, dword [0x4d0cd4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb0]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cec]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4d0e38]
sub esp, 0x10
mov eax, dword [0x4d0cd8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x423520
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [0x4ceea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4ceea0]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4ceea0]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov eax, dword [0x4d0cdc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4d0cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [0x4d0cb8]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0xbb6]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4d0e48]
sub esp, 8
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4d0e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x423524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea edi, [esp + 0x184]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42352e
mov dword [esp + 4], 0x104
call fcn.00404970
lea eax, [esp + 0xfca]
mov esi, eax
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404970
mov eax, dword [0x4ceea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4ceea4]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4ceea4]
mov edx, dword [esp + 0x60]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov esi, eax
mov dword [esp], esi
call fcn.00402eb0
mov dword [esp + 0x1a48], esi
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4d0e68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a8a]
mov dword [esp + 0x48], 0xdb07871e
jmp 0x412990
cmp eax, 0x687d0a77
jne 0x412990
mov dword [esp + 0x48], 0xeece214a
jmp 0x412990
cmp eax, 0x67e9c6ee
jne 0x412990
mov eax, 0x21b3d4f7
cmp dword [esp + 0x1a80], 0
js 0x413988
mov eax, 0xe7dab9d2
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0x5859aea6
jne 0x412990
mov dword [esp + 0x48], 0x1c4fb3b4
jmp 0x412990
cmp eax, 0x53c1a4b0
jne 0x412990
mov dword [esp + 0x48], 0xeecb23d6
jmp 0x412990
cmp eax, 0x4c4486d5
jne 0x412990
cmp dword [esp + 0x1a78], 0
sete byte [esp + 0x1a89]
mov dword [esp + 0x48], 0x127bde7b
jmp 0x412990
cmp eax, 0x2fb8becd
jne 0x412990
mov dword [esp + 0x48], 0xa33b4080
jmp 0x412990
cmp eax, 0x29d4fd79
jne 0x412990
jmp 0x414292
cmp eax, 0x21b3d4f7
jne 0x412990
jmp 0x413a7c
cmp eax, 0x2105e211
jne 0x412990
mov dword [esp + 0x48], 0x4c4486d5
jmp 0x412990
cmp eax, 0x1e456408
jne 0x412990
mov dword [esp + 0x48], 0xd319d4c2
jmp 0x412990
cmp eax, 0x1dc0654b
jne 0x412990
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0xcf0dd618
jmp 0x412990
cmp eax, 0x1c91edcf
jne 0x412990
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0x29d4fd79
jmp 0x412990
cmp eax, 0x1c4fb3b4
jne 0x412990
mov dword [esp + 0x48], 0x4c4486d5
jmp 0x412990
cmp eax, 0x1c2f7ed3
jne 0x412990
mov dword [esp + 0x48], 0xeecb23d6
jmp 0x412990
cmp eax, 0x1659c9cd
jne 0x412990
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4d0e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0x2fb8becd
jmp 0x412990
cmp eax, 0x127bde7b
jne 0x412990
mov al, byte [esp + 0x1a89]
test al, al
mov eax, 0x40d7643
jne 0x413b47
mov eax, 0x941ca93a
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xf6ff353
jne 0x412990
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404970
lea eax, [esp + 0xfca]
mov esi, eax
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404970
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4d0e68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a8b]
mov dword [esp + 0x48], 0xb0b575c0
jmp 0x412990
cmp eax, 0xb36e114
jne 0x412990
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0x1dc0654b
jmp 0x412990
cmp eax, 0x40d7643
jne 0x412990
mov dword [esp + 0x48], 0xfdcfd017
jmp 0x412990
cmp eax, 0xfe36a9
jne 0x412990
mov dword [esp + 0x48], 0xf6ff353
jmp 0x412990
cmp eax, 0xfdcfd017
jne 0x412990
lea esi, [esp + 0x11d4]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0xfca]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004055c0
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404970
mov dword [esp], esi
call fcn.00404da0
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404970
mov dword [esp], edi
mov dword [esp + 4], 0
call dword [0x4d0e60]
sub esp, 8
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0x5859aea6
jmp 0x412990
cmp eax, 0xf634db51
jne 0x412990
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4d0e64]
sub esp, 0x10
mov dword [esp + 0x1a48], ebx
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4d0e68]
sub esp, 4
cmp eax, 1
mov eax, 0xa998fbf4
jne 0x413de6
mov eax, 0xfe36a9
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xf61e1b96
jne 0x412990
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x13de]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004044d0
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.004142b0
mov dword [esp], eax
call fcn.00419112
mov dword [esp + 0x48], 0xc4e67d55
jmp 0x412990
cmp eax, 0xb0b575bf
jg 0x413e9e
cmp eax, 0xa9a73af7
jne 0x412990
mov al, byte [esp + 0x1a87]
test al, al
mov eax, 0x1c91edcf
jne 0x413e95
mov eax, 0x687d0a77
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xb1a6cb2b
jg 0x413ece
cmp eax, 0xb0b575c0
jne 0x412990
mov al, byte [esp + 0x1a8b]
test al, al
mov eax, 0xb25421be
jne 0x413ec5
mov eax, 0xd58abc81
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xb25421bd
jg 0x413eed
cmp eax, 0xb1a6cb2c
jne 0x412990
mov dword [esp + 0x48], 0x29d4fd79
jmp 0x412990
cmp eax, 0xb4838749
jg 0x413f0c
cmp eax, 0xb25421be
jne 0x412990
mov dword [esp + 0x48], 0xa33b4080
jmp 0x412990
cmp eax, 0xbee9038c
jg 0x413f4d
cmp eax, 0xb483874a
jne 0x412990
lea eax, [esp + 0xbb6]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040fdf0
mov dword [esp + 0x48], 0xa33b4080
jmp 0x412990
cmp eax, 0xc4e67d54
jg 0x41402f
cmp eax, 0xbee9038d
jne 0x412990
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], edi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404970
lea eax, [esp + 0xfca]
mov esi, eax
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404970
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], edi
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4d0e68]
sub esp, 4
mov dword [esp + 0x48], 0xf6ff353
jmp 0x412990
cmp eax, 0xcf0dd617
jg 0x414138
cmp eax, 0xc4e67d55
jne 0x412990
lea esi, [esp + 0xdc0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
lea eax, [esp + 0xbb6]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403e40
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004055c0
mov dword [esp], esi
call fcn.00404da0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13de]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404970
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404970
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
mov edx, 0xa740765b
sub edx, eax
sub edx, ecx
add edx, 0x58bf8aa9
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404970
mov dword [esp + 0x48], 0x6f77e72a
jmp 0x412990
cmp eax, 0xd319d4c1
jg 0x414157
cmp eax, 0xcf0dd618
jne 0x412990
mov dword [esp + 0x48], 0x29d4fd79
jmp 0x412990
cmp eax, 0xd58abc80
jg 0x414181
cmp eax, 0xd319d4c2
jne 0x412990
mov dword [esp + 0x1a7c], 0
mov dword [esp + 0x48], 0xb1a6cb2c
jmp 0x412990
cmp eax, 0xdb07871d
jg 0x4141a0
cmp eax, 0xd58abc81
jne 0x412990
mov dword [esp + 0x48], 0x1659c9cd
jmp 0x412990
cmp eax, 0xdecbc96b
jg 0x4141d0
cmp eax, 0xdb07871e
jne 0x412990
mov al, byte [esp + 0x1a8a]
test al, al
mov eax, 0xb483874a
jne 0x4141c7
mov eax, 0xf634db51
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xe7dab9d1
jg 0x414200
cmp eax, 0xdecbc96c
jne 0x412990
mov al, byte [esp + 0x1a88]
test al, al
mov eax, 0xf61e1b96
jne 0x4141f7
mov eax, 0xa0476c7d
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xe7dab9d2
je 0x41422a
cmp eax, 0xeecb23d6
jne 0x41424d
cmp dword [esp + 0x54], 6
setb al
mov byte [esp + 0x1a87], al
mov dword [esp + 0x48], 0xa9a73af7
jmp 0x412990
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040fed0
test eax, eax
mov eax, 0x1e456408
jne 0x414244
mov eax, 0x53c1a4b0
mov dword [esp + 0x48], eax
jmp 0x412990
cmp eax, 0xeece214a
jne 0x412990
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
setne byte [esp + 0x1a88]
mov dword [esp + 0x48], 0xdecbc96c
jmp 0x412990
mov eax, dword [esp + 0x1a7c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret