Function at 0x410600
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a90
call fcn.00416e00
mov dword [esp + 0x1a7c], 0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x1a74], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a04], 0
lea eax, [esp + 0x17fa]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0x15f0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea ebx, [esp + 0x13e6]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0x11dc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0xfd2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0xdc8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0xbbe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0x9b4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0x7aa]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea edi, [esp + 0x5a0]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea esi, [esp + 0x396]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417670
lea eax, [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00417670
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov word [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0xffffffff
call fcn.0040fbe0
mov dword [esp + 0x1a84], eax
mov dword [esp + 0x50], 0x41f82181
jmp 0x4109a0
mov dword [esp + 8], esi
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004045a0
mov dword [esp], ebx
call fcn.00404d50
mov dword [esp + 0x60], eax
mov dword [esp], 0
call fcn.004121f0
mov dword [esp], eax
call fcn.00417802
mov dword [esp + 0x50], 0x6bbfc8d3
nop
nop
nop
mov eax, dword [esp + 0x50]
cmp eax, 0x7f0fe3c4
jg 0x4109d0
cmp eax, 0x738c8944
jg 0x4109e0
cmp eax, 0x97699b2a
jg 0x4109f1
cmp eax, 0x92aead6b
jne 0x4109a0
jmp 0x4121bb
cmp eax, 0x7f0fe3c5
jne 0x4109a0
jmp 0x410945
cmp eax, 0x738c8945
jne 0x4109a0
mov dword [esp + 0x50], 0x6bbfc8d3
jmp 0x4109a0
cmp eax, 0x9ac84b4d
jg 0x410a04
cmp eax, 0x97699b2b
jne 0x4109a0
jmp 0x4121d3
cmp eax, 0x6d80506e
jg 0x410b24
cmp eax, 0x6bbfc8d2
jg 0x410bfd
cmp eax, 0x69bb4c35
jg 0x410c65
cmp eax, 0x5cdac94f
jg 0x410c7d
cmp eax, 0x53851c91
jg 0x410c95
cmp eax, 0x4bb846fa
jg 0x410cc3
cmp eax, 0x4920d600
jg 0x410cec
cmp eax, 0x4634592d
jg 0x410d04
cmp eax, 0x44b4feb4
jg 0x410d3f
cmp eax, 0x41f82180
jg 0x410d57
cmp eax, 0x3b11b45a
jg 0x410d7f
cmp eax, 0x358eaf9f
jg 0x410da2
cmp eax, 0x218c6424
jg 0x410de3
cmp eax, 0x1f5185f3
jg 0x410dfb
cmp eax, 0x1ae2212f
jg 0x410e0b
cmp eax, 0x186ca097
jg 0x410e32
cmp eax, 0x17dcea34
jg 0x410e4a
cmp eax, 0x1331e576
jg 0x410e62
cmp eax, 0xe0fdb01
jg 0x410f67
cmp eax, 0x345ae5e
jg 0x41104c
cmp eax, 0xfbeb6c9d
jg 0x41114b
cmp eax, 0xfa920da8
jg 0x4111ae
cmp eax, 0xf3de1b01
jg 0x41129e
cmp eax, 0x9b518ca1
jg 0x4112c6
cmp eax, 0x9ac84b4e
jne 0x4109a0
mov dword [esp + 0x50], 0xf3de1b02
jmp 0x4109a0
cmp eax, 0x6d80506f
jne 0x4109a0
lea edi, [esp + 0x11dc]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
lea esi, [esp + 0xfd2]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.004052c0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404870
mov dword [esp], edi
call fcn.00404d50
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfd2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea edi, [esp + 0x5a0]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404870
mov dword [esp], esi
lea esi, [esp + 0x396]
mov dword [esp + 4], 0
call dword [0x4cee60]
sub esp, 8
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x50], 0xd6bc62b3
jmp 0x4109a0
cmp eax, 0x6bbfc8d3
jne 0x4109a0
mov dword [esp + 8], esi
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004045a0
mov dword [esp], ebx
call fcn.00404d50
mov dword [esp + 0x60], eax
mov dword [esp], 0
call fcn.004121f0
mov dword [esp], eax
call fcn.00417802
mov dword [esp + 0x50], 0xc5348be5
jmp 0x4109a0
cmp eax, 0x69bb4c36
jne 0x4109a0
mov dword [esp + 0x50], 0x1ae22130
jmp 0x4109a0
cmp eax, 0x5cdac950
jne 0x4109a0
mov dword [esp + 0x50], 0x358eafa0
jmp 0x4109a0
cmp eax, 0x53851c92
jne 0x4109a0
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.0040ed20
test eax, eax
mov eax, 0x3b11b45b
jne 0x410cba
mov eax, 0x44b4feb5
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0x4bb846fb
jne 0x4109a0
mov al, byte [esp + 0x1a8a]
test al, al
mov eax, 0xef01e265
jne 0x410ce3
mov eax, 0xa0787d5c
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0x4920d601
jne 0x4109a0
mov dword [esp + 0x50], 0xfa920da9
jmp 0x4109a0
cmp eax, 0x4634592e
jne 0x4109a0
lea eax, [esp + 0xfd2]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00410580
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1a80], eax
mov dword [esp + 0x50], 0x97699b2b
jmp 0x4109a0
cmp eax, 0x44b4feb5
jne 0x4109a0
mov dword [esp + 0x50], 0x1ae22130
jmp 0x4109a0
cmp eax, 0x41f82181
jne 0x4109a0
mov eax, 0x92aead6b
cmp dword [esp + 0x1a84], 0
js 0x410d76
mov eax, 0x53851c92
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0x3b11b45b
jne 0x4109a0
mov dword [esp + 0x1a80], 0
mov dword [esp + 0x50], 0x97699b2b
jmp 0x4109a0
cmp eax, 0x358eafa0
jne 0x4109a0
lea eax, [esp + 0xbbe]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x218c6425
je 0x410dda
mov eax, 0x17dcea35
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0x218c6425
jne 0x4109a0
mov dword [esp + 0x50], 0x1331e577
jmp 0x4109a0
cmp eax, 0x1f5185f4
jne 0x4109a0
jmp 0x41217b
cmp eax, 0x1ae22130
jne 0x4109a0
cmp dword [esp + 0x5c], 6
setb al
mov byte [esp + 0x1a8a], al
mov dword [esp + 0x50], 0x4bb846fb
jmp 0x4109a0
cmp eax, 0x186ca098
jne 0x4109a0
mov dword [esp + 0x50], 0xd6bc62b3
jmp 0x4109a0
cmp eax, 0x17dcea35
jne 0x4109a0
mov dword [esp + 0x50], 0x186ca098
jmp 0x4109a0
cmp eax, 0x1331e577
jne 0x4109a0
lea esi, [esp + 0xdc8]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
lea eax, [esp + 0xbbe]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004052c0
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], edi
lea edi, [esp + 0x5a0]
mov dword [esp + 4], 0x104
call fcn.00404870
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbbe]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x396]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404870
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x54]
mov edx, 0xc7ce7dd8
sub edx, eax
sub edx, ecx
add edx, 0x3831832c
lea eax, [esp + eax*2 + 0xbbe]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404870
mov dword [esp + 0x50], 0x5cdac950
jmp 0x4109a0
cmp eax, 0xe0fdb02
jne 0x4109a0
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x18c]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404870
lea eax, [esp + 0xfd2]
mov esi, eax
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x396]
lea eax, [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404870
lea eax, [esp + 0x15f0]
mov dword [esp + 0x1a50], eax
lea eax, [esp + 0x18c]
mov dword [esp + 0x1a54], eax
mov dword [esp + 0x1a5c], 0
lea eax, [esp + 0x1a40]
mov dword [esp], eax
call dword [0x4cee68]
sub esp, 4
mov dword [esp + 0x50], 0xfa920da9
jmp 0x4109a0
cmp eax, 0x345ae5f
jne 0x4109a0
lea esi, [esp + 0xdc8]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
lea eax, [esp + 0xbbe]
mov edi, eax
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004052c0
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], edi
lea edi, [esp + 0x5a0]
mov dword [esp + 4], 0x104
call fcn.00404870
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbbe]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x396]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404870
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
mov edx, dword [esp + 0x54]
sub ecx, edx
lea eax, [esp + eax*2 + 0xbbe]
lea eax, [eax + edx*2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404870
mov dword [esp + 0x50], 0x1331e577
jmp 0x4109a0
cmp eax, 0xfbeb6c9e
jne 0x4109a0
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cee64]
sub esp, 0x10
mov dword [esp + 0x58], 1
mov dword [esp + 0x50], 0x4634592e
jmp 0x4109a0
cmp eax, 0xfa920da9
jne 0x4109a0
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x18c]
mov esi, eax
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], esi
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404870
lea eax, [esp + 0xfd2]
mov esi, eax
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea esi, [esp + 0x396]
lea eax, [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404870
lea eax, [esp + 0x15f0]
mov dword [esp + 0x1a50], eax
lea eax, [esp + 0x18c]
mov dword [esp + 0x1a54], eax
mov dword [esp + 0x1a5c], 0
lea eax, [esp + 0x1a40]
mov dword [esp], eax
call dword [0x4cee68]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1a8b]
mov dword [esp + 0x50], 0xda46b195
jmp 0x4109a0
cmp eax, 0xf3de1b02
jne 0x4109a0
mov eax, 0x186ca098
cmp dword [esp + 0x1a7c], 0
je 0x4112bd
mov eax, 0xab0abdd8
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0x9e38b59b
jg 0x41136e
cmp eax, 0x9b518ca2
jne 0x4109a0
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4cee64]
sub esp, 0x10
lea eax, [esp + 0x9b4]
mov dword [esp + 0x1a50], eax
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a5c], 1
lea eax, [esp + 0x1a40]
mov dword [esp], eax
call dword [0x4cee68]
sub esp, 4
cmp eax, 1
mov eax, 0x1f5185f4
jne 0x411365
mov eax, 0x4920d601
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0xa0787d5b
jg 0x41138d
cmp eax, 0x9e38b59c
jne 0x4109a0
mov dword [esp + 0x50], 0x97699b2b
jmp 0x4109a0
cmp eax, 0xab0abdd7
jg 0x4113d2
cmp eax, 0xa0787d5c
jne 0x4109a0
mov dword [esp + 4], edi
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0x738c8945
jne 0x4113c9
mov eax, 0xef9a9231
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0xaf62919a
jg 0x411fc5
cmp eax, 0xab0abdd8
jne 0x4109a0
mov eax, dword [0x4cecac]
mov ecx, dword [0x4cecd4]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a3c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecbc]
mov ecx, dword [0x4cecd4]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a38]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecc0]
mov ecx, dword [0x4cecd4]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a34]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecac]
mov ecx, dword [0x4cecd0]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a30]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4ceca0]
mov ecx, dword [0x4cece0]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a2c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecac]
mov ecx, dword [0x4cece4]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a28]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecf0]
mov ecx, dword [0x4cece8]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a24]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecec]
mov ecx, dword [0x4cece8]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a20]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [0x4cecec]
mov ecx, dword [0x4cecd4]
mov edx, dword [esp + 0x1a7c]
lea esi, [esp + 0x1a1c]
mov dword [esp + 0x14], esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4cee54]
sub esp, 0x18
mov eax, dword [esp + 0x1a7c]
mov dword [esp], eax
call dword [0x4cee50]
sub esp, 4
call fcn.004177df
and eax, 0xf
lea esi, [esp + 0xc4]
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418194
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x6c], eax
lea ecx, [eax + 1]
mov dword [esp + 0x6c], ecx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea edi, [esp + eax*2 + 0xc4]
call fcn.004177df
and eax, 1
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418194
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x6c], eax
lea ecx, [eax + 1]
mov dword [esp + 0x6c], ecx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea edi, [esp + eax*2 + 0xc4]
call fcn.004177df
and eax, 5
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418194
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x6c], eax
lea ecx, [eax + 1]
mov dword [esp + 0x6c], ecx
mov word [esp + eax*2 + 0xc4], 0x2e
mov eax, dword [esp + 0x6c]
lea edi, [esp + eax*2 + 0xc4]
call fcn.004177df
and eax, 0xc
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418194
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0x6c], eax
mov eax, dword [0x4cce84]
movzx eax, byte [eax]
mov dword [esp + 0x68], eax
not eax
mov ecx, dword [0x4cce84]
neg eax
movzx eax, byte [ecx + eax]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4cce84]
mov edx, dword [esp + 0x68]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea edi, [esp + 0x8c]
mov dword [esp], edi
mov dword [esp + 4], 0x10
call fcn.00402a80
mov eax, dword [0x4cecc8]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee4c]
sub esp, 8
mov dword [esp + 0x1a18], eax
mov eax, dword [0x4cecf8]
mov ecx, dword [0x4ceca8]
mov edx, dword [esp + 0x1a7c]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4cee44]
sub esp, 0x10
mov eax, dword [0x4cecc4]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4cecac]
mov ecx, dword [esp + 0x1a7c]
lea edx, [esp + 0x11dc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4ceca4]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4cee3c]
sub esp, 0xc
mov eax, dword [0x4cecf4]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cee38]
sub esp, 0x10
mov eax, dword [0x4ceccc]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee4c]
sub esp, 8
mov dword [esp + 0x1a14], eax
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee48]
sub esp, 8
mov eax, dword [esp + 0x1a38]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a38]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a3c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
call fcn.004177df
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4cce88]
mov dword [esp + 0x1a04], eax
movzx eax, word [eax]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x1a04]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x1a04]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17fa]
mov edi, eax
mov dword [esp], edi
call fcn.00402ee0
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea esi, [esp + 0x9b4]
mov ebx, esi
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404870
mov eax, dword [esp + 0x68]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9b4]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404870
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
lea edi, [esp + 0x7aa]
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404870
mov eax, dword [esp + 0x68]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7aa]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404870
mov eax, dword [0x4cce9c]
movzx eax, byte [eax]
mov dword [esp + 0x68], eax
mov ecx, dword [0x4cce9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4cce9c]
mov edx, dword [esp + 0x68]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea esi, [esp + 0x7c]
mov dword [esp], esi
mov dword [esp + 4], 0x10
call fcn.00402a80
mov eax, dword [0x4cecd4]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4cecac]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4cecb4]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4cecb0]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4cecec]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4cee38]
sub esp, 0x10
mov eax, dword [0x4cecd8]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [0x4cecac]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x421520
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee48]
sub esp, 8
mov eax, dword [0x4ccea0]
movzx eax, word [eax]
mov dword [esp + 0x68], eax
not eax
mov ecx, dword [0x4ccea0]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4ccea0]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x9c]
mov esi, eax
mov dword [esp], esi
call fcn.00402ee0
mov eax, dword [0x4cecdc]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4cecac]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [0x4cecb8]
mov ecx, dword [esp + 0x1a7c]
lea edx, [esp + 0xbbe]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee40]
sub esp, 0xc
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee48]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee48]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a3c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee30]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a7c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4cee48]
sub esp, 8
mov eax, dword [esp + 0x1a7c]
mov dword [esp], eax
call dword [0x4cee58]
sub esp, 4
mov dword [esp + 0x1a40], 0x3c
mov dword [esp + 0x1a44], 0x40
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a4c], 0x421524
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a60], 0
lea edi, [esp + 0x18c]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], edi
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42152e
mov dword [esp + 4], 0x104
call fcn.00404870
lea eax, [esp + 0xfd2]
mov esi, eax
mov dword [esp], esi
call fcn.00404d50
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [esp + 0x192]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404870
mov eax, dword [0x4ccea4]
movzx eax, word [eax]
mov dword [esp + 0x68], eax
not eax
mov ecx, dword [0x4ccea4]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x64], eax
mov ecx, dword [0x4ccea4]
mov edx, dword [esp + 0x68]
lea esi, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15f0]
mov esi, eax
mov dword [esp], esi
call fcn.00402ee0
mov dword [esp + 0x1a50], esi
mov dword [esp + 0x1a54], edi
mov dword [esp + 0x1a5c], 0
lea eax, [esp + 0x1a40]
mov dword [esp], eax
call dword [0x4cee68]
sub esp, 4
cmp eax, 1
mov eax, 0xef2156ea
jne 0x411fa7
mov eax, 0x9b518ca2
mov dword [esp + 0x50], eax
lea edi, [esp + 0x5a0]
lea ebx, [esp + 0x13e6]
lea esi, [esp + 0x396]
jmp 0x4109a0
cmp eax, 0xb2a7c286
jg 0x411fe4
cmp eax, 0xaf62919b
jne 0x4109a0
mov dword [esp + 0x50], 0x4634592e
jmp 0x4109a0
cmp eax, 0xc5348be4
jg 0x41200e
cmp eax, 0xb2a7c287
jne 0x4109a0
mov dword [esp + 0x1a80], 0xffffffff
mov dword [esp + 0x50], 0x9e38b59c
jmp 0x4109a0
cmp eax, 0xcbd803f1
jg 0x41202d
cmp eax, 0xc5348be5
jne 0x4109a0
mov dword [esp + 0x50], 0x218c6425
jmp 0x4109a0
cmp eax, 0xd6bc62b2
jg 0x412057
cmp eax, 0xcbd803f2
jne 0x4109a0
mov dword [esp + 0x1a80], 0xffffffff
mov dword [esp + 0x50], 0xb2a7c287
jmp 0x4109a0
cmp eax, 0xda46b194
jg 0x41213d
cmp eax, 0xd6bc62b3
jne 0x4109a0
lea eax, [esp + 0x11dc]
mov dword [esp], eax
mov esi, eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
lea edi, [esp + 0xfd2]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00404110
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.004052c0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404870
mov dword [esp], esi
call fcn.00404d50
mov ecx, dword [esp + 0x60]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfd2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404870
mov dword [esp], edi
lea edi, [esp + 0x5a0]
lea esi, [esp + 0x396]
mov dword [esp + 4], 0
call dword [0x4cee60]
sub esp, 8
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x50], 0x9ac84b4e
jmp 0x4109a0
cmp eax, 0xef01e264
jg 0x41216d
cmp eax, 0xda46b195
jne 0x4109a0
mov al, byte [esp + 0x1a8b]
test al, al
mov eax, 0xaf62919b
jne 0x412164
mov eax, 0xfbeb6c9e
mov dword [esp + 0x50], eax
jmp 0x4109a0
cmp eax, 0xef01e265
je 0x4121a3
cmp eax, 0xef2156ea
jne 0x4121b0
lea eax, [esp + 0xbbe]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040ec40
mov dword [esp + 0x50], 0x4634592e
jmp 0x4109a0
mov dword [esp + 0x50], 0xb2a7c287
jmp 0x4109a0
cmp eax, 0xef9a9231
jne 0x4109a0
mov dword [esp + 0x1a80], 0xffffffff
mov dword [esp + 0x50], 0x97699b2b
jmp 0x4109a0
mov eax, dword [esp + 0x1a80]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret