Function at 0x4f197c
Capabilities:
Copy file
Create process on windows
Schedule task via at

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x4f1984
push ecx
push ebx
xor eax, eax
push ebp
push 0x4f34ef
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x462394]
call fcn.00462494
mov ebx, eax
mov edx, 0x80000001
mov eax, ebx
call fcn.00462570
lea edx, [ebp - 0x18]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x10]
call fcn.0040b710
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.0040b748
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
call fcn.004053bc
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.004052d8
mov cl, 1
mov edx, 0x4f3504
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1a28
lea edx, [ebp - 0x1c]
xor eax, eax
mov al, byte [0x4fdb18]
call fcn.0040b168
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3538
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1a4f
mov ecx, 0x4f3560
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3574
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1a76
mov ecx, 0x4f35ac
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f35b8
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1a9d
mov ecx, 0x4f35e8
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f35f4
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1ac4
mov ecx, 0x4f35e8
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3628
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1aeb
mov ecx, 0x4f35e8
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f365c
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1b12
mov ecx, 0x4f35e8
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3694
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1b39
mov ecx, 0x4f35e8
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f36c8
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1b60
mov ecx, 0x4f36fc
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3708
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1b87
mov ecx, 0x4f373c
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3748
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1bae
mov ecx, 0x4f373c
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f377c
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1be3
mov ecx, 0x4f37b4
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov ecx, 0x4f37c0
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f37cc
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1c0a
mov ecx, 0x4f37b4
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3800
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1c31
mov ecx, 0x4f3834
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3840
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1c58
mov ecx, 0x4f387c
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3888
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1c7f
mov ecx, 0x4f38bc
xor edx, edx
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4f38c8
call fcn.004050cc
mov edx, dword [ebp - 0x20]
mov cl, 1
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1cc8
mov ecx, 2
mov edx, 0x4f38f4
mov eax, ebx
call fcn.00462bac
mov ecx, 8
mov edx, 0x4f3908
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3920
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1cef
xor ecx, ecx
mov edx, 0x4f3954
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
lea eax, [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4f396c
call fcn.004050cc
mov edx, dword [ebp - 0x24]
mov cl, 1
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1d27
mov ecx, 2
mov edx, 0x4f3998
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f39a8
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1d92
mov ecx, 1
mov edx, 0x4f39e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f39f4
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3a10
mov eax, ebx
call fcn.00462bac
mov ecx, 2
mov edx, 0x4f3a2c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3a44
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3a5c
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1dd8
cmp byte [0x4fdae0], 0
je 0x4f1dc0
mov ecx, 0x76
mov edx, 0x4f3a94
mov eax, ebx
call fcn.00462bac
jmp 0x4f1dd1
mov ecx, 0x80
mov edx, 0x4f3a94
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3aa8
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1e45
xor ecx, ecx
mov edx, 0x4f3ad8
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3afc
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3b1c
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3b3c
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3b5c
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3b74
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3b94
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1f19
mov ecx, 1
mov edx, 0x4f3bc0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3be0
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3c00
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3c1c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3c40
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3c5c
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3c7c
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3ca0
mov eax, ebx
call fcn.00462bac
mov ecx, 2
mov edx, 0x4f3cc8
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3cdc
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3d00
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3d24
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3d38
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1f43
mov ecx, 7
mov edx, 0x4f3d54
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3d6c
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f1ff8
xor ecx, ecx
mov edx, 0x4f3d90
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3dac
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3dc0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3dd4
mov eax, ebx
call fcn.00462bac
lea edx, [ebp - 0x28]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x10]
call fcn.0040b710
lea ecx, [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b34
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004053bc
test eax, eax
jg 0x4f1ff1
push dword [ebp - 0x10]
push 0x4f3dfc
push dword [ebp - 0xc]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405140
mov ecx, dword [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3e08
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2033
mov ecx, 1
mov edx, 0x4f3e34
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3e4c
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3e64
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2086
lea edx, [ebp - 0x2c]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x10]
call fcn.0040b710
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
call fcn.004f1658
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x10]
call fcn.00404e44
mov ecx, 3
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f3e8c
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f22d3
xor ecx, ecx
mov edx, 0x4f3dac
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3dc0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3dd4
mov eax, ebx
call fcn.00462bac
lea edx, [ebp - 0x34]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x10]
call fcn.0040b710
lea ecx, [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b34
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004053bc
test eax, eax
jg 0x4f2126
push dword [ebp - 0x10]
push 0x4f3dfc
push dword [ebp - 0xc]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405140
mov ecx, dword [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b08
xor ecx, ecx
mov edx, 0x4f3d90
mov eax, ebx
call fcn.00462bac
mov ecx, 9
mov edx, 0x4f3eac
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3ebc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3ecc
mov eax, ebx
call fcn.00462bac
mov ecx, 5
mov edx, 0x4f3edc
mov eax, ebx
call fcn.00462bac
mov ecx, 5
mov edx, 0x4f3eec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3efc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f0c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f1c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f2c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f3c
mov eax, ebx
call fcn.00462bac
mov ecx, 9
mov edx, 0x4f3f4c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f5c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f6c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f7c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f8c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f9c
mov eax, ebx
call fcn.00462bac
mov ecx, 0xc
mov edx, 0x4f3fac
mov eax, ebx
call fcn.00462bac
mov ecx, 0xc
mov edx, 0x4f3fbc
mov eax, ebx
call fcn.00462bac
mov ecx, 0xc
mov edx, 0x4f3fcc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3ecc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3fdc
mov eax, ebx
call fcn.00462bac
mov ecx, 5
mov edx, 0x4f3fec
mov eax, ebx
call fcn.00462bac
mov ecx, 0xc
mov edx, 0x4f3ffc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f400c
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f401c
mov eax, ebx
call fcn.004625d8
test al, al
mov cl, 1
mov edx, 0x4f4044
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2372
xor ecx, ecx
mov edx, 0x4f3d90
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3dac
mov eax, ebx
call fcn.00462bac
lea ecx, [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b34
lea edx, [ebp - 0x38]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x10]
call fcn.0040b710
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004053bc
test eax, eax
jg 0x4f236b
push dword [ebp - 0x10]
push 0x4f3dfc
push dword [ebp - 0xc]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405140
mov ecx, dword [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f4068
mov eax, ebx
call fcn.004625d8
test al, al
mov cl, 1
mov edx, 0x4f4094
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2411
xor ecx, ecx
mov edx, 0x4f3d90
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3dac
mov eax, ebx
call fcn.00462bac
lea ecx, [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b34
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10]
call fcn.0040b710
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004053bc
test eax, eax
jg 0x4f240a
push dword [ebp - 0x10]
push 0x4f3dfc
push dword [ebp - 0xc]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405140
mov ecx, dword [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f40bc
mov eax, ebx
call fcn.004625d8
test al, al
mov cl, 1
mov edx, 0x4f4044
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2583
mov ecx, 1
mov edx, 0x4f40ec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f40fc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f410c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4118
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4124
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4130
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4140
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f414c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4158
mov eax, ebx
call fcn.00462bac
mov ecx, 4
mov edx, 0x4f4164
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4174
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4184
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4190
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f3dac
mov eax, ebx
call fcn.00462bac
lea ecx, [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b34
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x10]
call fcn.0040b710
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.004053bc
test eax, eax
jg 0x4f257c
push dword [ebp - 0x10]
push 0x4f3dfc
push dword [ebp - 0xc]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405140
mov ecx, dword [ebp - 0xc]
mov edx, 0x4f3de8
mov eax, ebx
call fcn.00462b08
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f41a0
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f2e64
mov ecx, 1
mov edx, 0x4f41c8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f414c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4124
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f41d4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f41e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f41ec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f41f8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4208
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4158
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4218
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4224
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4230
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f423c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4248
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4254
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4260
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f426c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4280
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f428c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4298
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42a8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42b4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42c0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42cc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42ec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f42fc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4308
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4140
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4318
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4324
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4330
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f433c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4130
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4350
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4364
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4378
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4388
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4398
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43a4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43b4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43c0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43d0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43dc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43e8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f43f8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f440c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f441c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4428
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4434
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4440
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f444c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f445c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f446c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f447c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4488
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4494
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44a8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44b4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44c0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4118
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44cc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44d8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44e4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f44f4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4504
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4514
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4528
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f453c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4548
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4558
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4564
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4570
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f457c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4588
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4594
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45a0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45ac
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45b8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45c4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45d0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45ec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f45f8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4604
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4618
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f462c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4638
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4644
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4650
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f465c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4668
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4678
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4684
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4690
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f469c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46a8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46b4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46c8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46d4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46e4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46f0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f46fc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4708
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4714
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4720
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f472c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4738
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f474c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f475c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f476c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4778
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4784
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4790
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47a0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47ac
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47bc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47c8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47d4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f47f0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4800
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4818
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4824
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4830
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4840
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f484c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4858
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4864
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4870
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4880
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4890
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f48a0
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f318f
mov ecx, 1
mov edx, 0x4f3f9c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f48c4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f48d0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f48e0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f48f0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4900
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4910
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3fcc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f491c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f492c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f493c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f494c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f495c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4968
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3ebc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f3f8c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4974
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4984
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4998
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49a8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49b8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49c8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4298
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49d8
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49ec
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f49fc
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a0c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a20
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a30
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a44
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a54
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a64
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a74
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a80
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4a90
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4aa0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4ab0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4ac0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4ad0
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4ae4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4af4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4b04
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4b14
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4b24
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4b34
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4b44
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f4b58
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f31c7
xor ecx, ecx
mov edx, 0x4f4b94
mov eax, ebx
call fcn.00462bac
mov ecx, 0xd
mov edx, 0x4f4bac
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f4bc8
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f32f0
mov ecx, 1
mov edx, 0x4f4bf4
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4c08
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f4c1c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4c38
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f4c4c
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4c60
mov eax, ebx
call fcn.00462bac
mov ecx, 1
mov edx, 0x4f4c78
mov eax, ebx
call fcn.00462bac
mov ecx, 0x4f35e8
mov edx, 0x4f4c90
mov eax, ebx
call fcn.00462b08
mov ecx, dword [0x4fda54]
mov edx, 0x4f4ca4
mov eax, ebx
call fcn.00462b08
mov edx, 0x4f4cb4
mov eax, ebx
call fcn.00462d3c
test al, al
je 0x4f329d
lea ecx, [ebp - 0x44]
mov edx, 0x4f4cb4
mov eax, ebx
call fcn.00462b34
mov edx, dword [ebp - 0x44]
mov eax, 0x4fdaa4
call fcn.00404e00
xor ecx, ecx
mov edx, 0x4f4cc0
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f4cd0
mov eax, ebx
call fcn.00462bac
mov ecx, 2
mov edx, 0x4f4ce4
mov eax, ebx
call fcn.00462bac
mov ecx, 0x1f7fc
mov edx, 0x4f4cf4
mov eax, ebx
call fcn.00462bac
xor ecx, ecx
mov edx, 0x4f4d04
mov eax, ebx
call fcn.00462bac
mov eax, ebx
call fcn.00462540
mov cl, 1
mov edx, 0x4f4d18
mov eax, ebx
call fcn.004625d8
test al, al
je 0x4f336b
xor ecx, ecx
mov edx, 0x4f4d44
mov eax, ebx
call fcn.00462bf0
mov cl, 1
mov edx, 0x4f4d64
mov eax, ebx
call fcn.00462bf0
xor ecx, ecx
mov edx, 0x4f4d8c
mov eax, ebx
call fcn.00462bf0
xor ecx, ecx
mov edx, 0x4f4dac
mov eax, ebx
call fcn.00462bf0
mov cl, 1
mov edx, 0x4f4dcc
mov eax, ebx
call fcn.00462bf0
xor ecx, ecx
mov edx, 0x4f4de8
mov eax, ebx
call fcn.00462bf0
xor ecx, ecx
mov edx, 0x4f4e08
mov eax, ebx
call fcn.00462bf0
mov eax, ebx
call fcn.00462540
mov eax, ebx
call fcn.00403ef8
lea edx, [ebp - 0x4c]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.0040b6dc
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 8]
mov ecx, 0x4f4e20
call fcn.004050cc
lea eax, [ebp - 0x50]
call fcn.004e2798
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 4]
mov ecx, 0x4f4e38
call fcn.004050cc
mov eax, dword [ebp - 8]
call fcn.0040b3dc
test al, al
je 0x4f3423
mov eax, dword [ebp - 4]
call fcn.0040b3dc
test al, al
jne 0x4f3423
lea eax, [ebp - 0x54]
call fcn.004e2798
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 4]
mov ecx, 0x4f4e38
call fcn.004050cc
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
call fcn.00405278
push eax
mov eax, dword [ebp - 8]
call fcn.00405278
push eax
call sub.kernel32.dll_CopyFileA
push 5
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 4]
call fcn.004e612c
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
mov edx, 0x4f4e4c
call fcn.004050cc
mov eax, dword [ebp - 0x58]
call fcn.00405278
push eax
call sub.kernel32.dll_WinExec
lea edx, [ebp - 0x64]
xor eax, eax
call fcn.00402d90
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.0040b6dc
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 8]
mov ecx, 0x4f4e64
call fcn.004050cc
lea eax, [ebp - 0x68]
call fcn.004e2798
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 4]
mov ecx, 0x4f4e7c
call fcn.004050cc
mov eax, dword [ebp - 8]
call fcn.0040b3dc
test al, al
je 0x4f34d4
mov eax, dword [ebp - 4]
call fcn.0040b3dc
test al, al
jne 0x4f34d4
lea eax, [ebp - 0x6c]
call fcn.004e2798
mov edx, dword [ebp - 0x6c]
lea eax, [ebp - 4]
mov ecx, 0x4f4e7c
call fcn.004050cc
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
call fcn.00405278
push eax
mov eax, dword [ebp - 8]
call fcn.00405278
push eax
call sub.kernel32.dll_CopyFileA
push 5
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 4]
call fcn.004e612c
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
mov edx, 0x4f4e4c
call fcn.004050cc
mov eax, dword [ebp - 0x70]
call fcn.00405278
push eax
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f34f6
lea eax, [ebp - 0x74]
mov edx, 0x1d
call fcn.00404dd0
ret