Function at 0x40e3d0
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb8
call fcn.00413310
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea esi, [esp + 0xdd6]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea edi, [esp + 0x5ae]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00413af0
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00413af0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040e060
mov dword [esp + 0x1ca4], eax
lea ebx, [esp + 0x1c50]
mov dword [esp + 0x54], 0x551c34f7
jmp 0x40e780
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040d570
mov dword [esp + 0x54], 0x7c9220f0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x8a58e30a
jg 0x40e7a0
cmp eax, 0x83ea37c2
jne 0x40e780
jmp 0x40e75a
cmp eax, 0x7efeb24a
jg 0x40e7c0
cmp eax, 0x8b4f8aca
jg 0x40e7f3
cmp eax, 0x8a58e30b
jne 0x40e780
mov dword [esp + 0x54], 0xcaf11c03
jmp 0x40e780
cmp eax, 0x7efeb24b
jne 0x40e780
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
sete byte [esp + 0x1caa]
mov dword [esp + 0x54], 0x6ac59ef9
jmp 0x40e780
cmp eax, 0x90162c69
jg 0x40e823
cmp eax, 0x8b4f8acb
jne 0x40e780
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0xf7424cf6
jne 0x40e81a
mov eax, 0xe3e4452f
mov dword [esp + 0x54], eax
jmp 0x40e780
cmp eax, 0x920dd1d6
jg 0x40e842
cmp eax, 0x90162c6a
jne 0x40e780
mov dword [esp + 0x54], 0x6f1904d6
jmp 0x40e780
cmp eax, 0x99f129ca
jg 0x40e861
cmp eax, 0x920dd1d7
jne 0x40e780
mov dword [esp + 0x54], 0x78f581f1
jmp 0x40e780
cmp eax, 0x9e1a91c0
jg 0x40e891
cmp eax, 0x99f129cb
jne 0x40e780
mov al, byte [esp + 0x1caf]
test al, al
mov eax, 0x3867f02
jne 0x40e888
mov eax, 0xcb64c7a0
mov dword [esp + 0x54], eax
jmp 0x40e780
cmp eax, 0xa0784da7
jg 0x40e8b0
cmp eax, 0x9e1a91c1
jne 0x40e780
mov dword [esp + 0x54], 0x11141f1c
jmp 0x40e780
cmp eax, 0xa20c5382
jg 0x40e8cf
cmp eax, 0xa0784da8
jne 0x40e780
mov dword [esp + 0x54], 0xeae9c8db
jmp 0x40e780
cmp eax, 0xaae3744b
jg 0x40e8e6
cmp eax, 0xa20c5383
jne 0x40e780
jmp 0x40e75a
cmp eax, 0xb4a8c5c5
jg 0x40e98e
cmp eax, 0xaae3744c
jne 0x40e780
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c5760]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c5764]
sub esp, 4
cmp eax, 1
mov eax, 0xa20c5383
jne 0x40e985
mov eax, 0xe66e0d11
mov dword [esp + 0x54], eax
jmp 0x40e780
cmp eax, 0xbc4a4200
jg 0x40f4a3
cmp eax, 0xb4a8c5c6
jne 0x40e780
mov eax, dword [0x4c5590]
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c54]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55a0]
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c50]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55a4]
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5590]
mov ecx, dword [0x4c55b4]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c48]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5584]
mov ecx, dword [0x4c55c4]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c44]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5590]
mov ecx, dword [0x4c55c8]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c40]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d4]
mov ecx, dword [0x4c55cc]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c3c]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d0]
mov ecx, dword [0x4c55cc]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c38]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d0]
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea ebx, [esp + 0x1c34]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4c574c]
sub esp, 4
call fcn.00413c5f
and eax, 0xf
lea ecx, [esp + 0xd2]
mov ebx, ecx
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414616
mov dword [esp], ebx
call fcn.00404750
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea ebx, [esp + eax*2 + 0xd2]
call fcn.00413c5f
and eax, 1
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea ebx, [esp + eax*2 + 0xd2]
call fcn.00413c5f
mov ecx, eax
xor ecx, 0xfffffffa
and ecx, eax
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea ebx, [esp + eax*2 + 0xd2]
call fcn.00413c5f
and eax, 0xc
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
mov eax, dword [0x47d134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x98]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402a10
mov eax, dword [0x4c55ac]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x4c55dc]
mov ecx, dword [0x4c558c]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c5740]
sub esp, 0x10
mov eax, dword [0x4c55a8]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5588]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c5738]
sub esp, 0xc
mov eax, dword [0x4c55d8]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c5734]
sub esp, 0x10
mov eax, dword [0x4c55b0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
call fcn.00413c5f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x47d138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov dword [esp], eax
call fcn.00403110
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea ebx, [esp + 0xbcc]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea ebx, [esp + 0x9c2]
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404100
mov eax, dword [0x47d14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea ebx, [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
call fcn.00402a10
mov eax, dword [0x4c55b8]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5598]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5594]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c55d0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c5734]
sub esp, 0x10
mov eax, dword [0x4c55bc]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4312d4
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [0x47d150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d150]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov ebx, eax
mov dword [esp], ebx
call fcn.00403110
mov eax, dword [0x4c55c0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c559c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4c5754]
sub esp, 4
lea eax, [esp + 0x19a]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x20a
call fcn.00406390
mov dword [esp + 8], ebx
lea ebx, [esp + 0x1c50]
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c5794]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov dword [esp + 0x54], 0x7d0dbbed
jmp 0x40e780
cmp eax, 0xc06eeadd
jg 0x40f4ba
cmp eax, 0xbc4a4201
jne 0x40e780
jmp 0x41111f
cmp eax, 0xc45184c1
jg 0x40f4d9
cmp eax, 0xc06eeade
jne 0x40e780
mov dword [esp + 0x54], 0xd7636d34
jmp 0x40e780
cmp eax, 0xca08e0df
jg 0x40f4f8
cmp eax, 0xc45184c2
jne 0x40e780
mov dword [esp + 0x54], 0xf11108b8
jmp 0x40e780
cmp eax, 0xcaf11c02
jg 0x40f528
cmp eax, 0xca08e0e0
jne 0x40e780
mov al, byte [esp + 0x1cae]
test al, al
mov eax, 0xa0784da8
jne 0x40f51f
mov eax, 0x1f52405a
mov dword [esp + 0x54], eax
jmp 0x40e780
cmp eax, 0x7d9360df
jg 0x40f55d
cmp eax, 0x7d0dbbec
jg 0x40f5ba
cmp eax, 0xcb64c79f
jg 0x410165
cmp eax, 0xcaf11c03
jne 0x40e780
mov dword [esp + 0x54], 0x7c9220f0
jmp 0x40e780
cmp eax, 0x7d9360e0
jne 0x40e780
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c5764]
sub esp, 4
cmp eax, 1
mov eax, 0x16fc088
jne 0x40f5b1
mov eax, 0xaae3744c
mov dword [esp + 0x54], eax
jmp 0x40e780
cmp eax, 0x7d0dbbed
jne 0x40e780
mov eax, dword [0x4c5590]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
mov eax, ebx
lea ebx, [esp + 0x1c54]
mov dword [esp + 0x14], ebx
mov ebx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55a0]
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55a4]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5590]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55b4]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5584]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55c4]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c5590]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55c8]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d4]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55cc]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d0]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55cc]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [0x4c55d0]
mov dword [esp + 0x50], eax
mov ecx, dword [0x4c55b8]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c5750]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4c574c]
sub esp, 4
call fcn.00413c5f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea eax, [esp + 0xd2]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413c5f
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413c5f
and eax, 5
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00413c5f
and eax, 0xc
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00414616
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x78], eax
mov eax, dword [0x47d134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402a10
mov eax, dword [0x4c55ac]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x4c55dc]
mov ecx, dword [0x4c558c]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c5740]
sub esp, 0x10
mov eax, dword [0x4c55a8]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5588]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c5738]
sub esp, 0xc
mov eax, dword [0x4c55d8]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c5734]
sub esp, 0x10
mov eax, dword [0x4c55b0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
call fcn.00413c5f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x47d138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov dword [esp], eax
call fcn.00403110
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404100
mov eax, dword [0x47d14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402a10
mov eax, dword [0x4c55b8]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5598]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c5594]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c55d0]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x88]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c5734]
sub esp, 0x10
mov eax, dword [0x4c55bc]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x4312d4
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [0x47d150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d150]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.00403110
mov eax, dword [0x4c55c0]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5748]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x4c5590]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [0x4c559c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c573c]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5730]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c572c]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c5744]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x4c5754]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00406390
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c5794]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
test eax, eax
sete byte [esp + 0x1cac]
mov dword [esp + 0x54], 0x3f9bc2bd
jmp 0x40e780
cmp eax, 0xcee07595
jg 0x410197
cmp eax, 0xcb64c7a0
jne 0x40e780
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x3867f02
jmp 0x40e780
cmp eax, 0xd1820617
jg 0x4101b6
cmp eax, 0xcee07596
jne 0x40e780
mov dword [esp + 0x54], 0x63c4a592
jmp 0x40e780
cmp eax, 0xd7636d33
jg 0x4101d5
cmp eax, 0xd1820618
jne 0x40e780
mov dword [esp + 0x54], 0xf7424cf6
jmp 0x40e780
cmp eax, 0xd99132f4
jg 0x4101f4
cmp eax, 0xd7636d34
jne 0x40e780
mov dword [esp + 0x54], 0xe44f2dff
jmp 0x40e780
cmp eax, 0xd9f7e9f9
jg 0x410213
cmp eax, 0xd99132f5
jne 0x40e780
mov dword [esp + 0x54], 0x8a58e30b
jmp 0x40e780
cmp eax, 0xdaab39cd
jg 0x41023d
cmp eax, 0xd9f7e9fa
jne 0x40e780
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0x6f1904d6
jmp 0x40e780
cmp eax, 0xdc5ed010
jg 0x41025c
cmp eax, 0xdaab39ce
jne 0x40e780
mov dword [esp + 0x54], 0x30349b6
jmp 0x40e780
cmp eax, 0xdd012cce
jg 0x410282
cmp eax, 0xdc5ed011
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x3db2ea88
jmp 0x40e780
cmp eax, 0xe3e4452e
jg 0x4102a0
cmp eax, 0xdd012ccf
lea ebx, [esp + 0x1c50]
jne 0x40e780
jmp 0x410b3f
cmp eax, 0xe44f2dfe
jg 0x4102c6
cmp eax, 0xe3e4452f
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x7d0dbbed
jmp 0x40e780
cmp eax, 0xe66e0d10
jg 0x4102ec
cmp eax, 0xe44f2dff
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x3db2ea88
jmp 0x40e780
cmp eax, 0xe9d7a2d2
jg 0x410358
cmp eax, 0xe66e0d11
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
call ebx
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call ebx
sub esp, 8
test eax, eax
mov eax, 0xc778a24
jne 0x410348
mov eax, 0x62c413f8
mov dword [esp + 0x54], eax
lea ebx, [esp + 0x1c50]
jmp 0x40e780
cmp eax, 0xeae9c8da
jg 0x4103f5
cmp eax, 0xe9d7a2d3
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 8], edi
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405340
lea eax, [esp + 0x15fe]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.00411130
mov dword [esp + 0x50], eax
call fcn.00402370
imul eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00413c82
mov dword [esp + 0x54], 0x2a6b430a
jmp 0x40e780
cmp eax, 0xecd15e37
jg 0x41041b
cmp eax, 0xeae9c8db
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xfa5fd833
jmp 0x40e780
cmp eax, 0xf11108b7
jg 0x410441
cmp eax, 0xecd15e38
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xf11108b8
jmp 0x40e780
cmp eax, 0xf1944022
jg 0x410477
cmp eax, 0xf11108b8
lea ebx, [esp + 0x1c50]
jne 0x40e780
cmp dword [esp + 0x1c94], 0
sete byte [esp + 0x1cab]
mov dword [esp + 0x54], 0x8b4f8acb
jmp 0x40e780
cmp eax, 0xf658fb45
jg 0x410517
cmp eax, 0xf1944023
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00404440
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x43a5367a
test eax, eax
jne 0x410507
mov ecx, 0x90162c6a
mov dword [esp + 0x54], ecx
lea ebx, [esp + 0x1c50]
jmp 0x40e780
cmp eax, 0xf7424cf5
jg 0x410551
cmp eax, 0xf658fb46
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov eax, 0x9e1a91c1
cmp dword [esp + 0x1c9c], 0
jne 0x410546
mov eax, 0x6c0f212c
mov dword [esp + 0x54], eax
mov ebx, edx
jmp 0x40e780
cmp eax, 0xfa5fd832
jg 0x410658
cmp eax, 0xf7424cf6
lea ebx, [esp + 0x1c50]
jne 0x40e780
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405b60
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x13f4]
mov dword [esp], eax
call fcn.00404750
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13f4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404100
lea eax, [esp + 0x11ea]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4c575c]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0xecd15e38
jmp 0x40e780
cmp eax, 0xff865303
jg 0x410693
cmp eax, 0xfa5fd833
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov al, byte [esp + 0x1cad]
test al, al
mov eax, 0x9b465a0
jne 0x410688
mov eax, 0xf658fb46
mov dword [esp + 0x54], eax
mov ebx, edx
jmp 0x40e780
cmp eax, 0x16fc087
jg 0x4107f7
cmp eax, 0xff865304
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x4312d8
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
mov dword [esp], ebx
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x4312e2
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x11ea]
mov ebx, eax
mov dword [esp], ebx
call fcn.00404750
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404100
mov eax, dword [0x47d154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x47d154]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x70], eax
mov ecx, dword [0x47d154]
mov edx, dword [esp + 0x74]
lea ebx, [ecx + edx*2 + 4]
add ecx, 2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.00403110
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x83ea37c2
test eax, eax
je 0x410507
mov ecx, 0x7d9360e0
jmp 0x410507
cmp eax, 0x30349b5
jg 0x410815
cmp eax, 0x16fc088
lea ebx, [esp + 0x1c50]
jne 0x40e780
jmp 0x40e75a
cmp eax, 0x3867f01
jg 0x41084e
cmp eax, 0x30349b6
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x90162c6a
jmp 0x40e780
cmp eax, 0x9b4659f
jg 0x410887
cmp eax, 0x3867f02
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x70cffbd9
jmp 0x40e780
cmp eax, 0xc778a23
jg 0x4108c0
cmp eax, 0x9b465a0
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xf658fb46
jmp 0x40e780
cmp eax, 0xd387747
jg 0x4108e6
cmp eax, 0xc778a24
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x8a58e30b
jmp 0x40e780
cmp eax, 0x11141f1b
jg 0x41090c
cmp eax, 0xd387748
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x11141f1c
jmp 0x40e780
cmp eax, 0x18a9dcf8
jg 0x41093a
cmp eax, 0x11141f1c
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov byte [esp + 0x1caf], 1
mov dword [esp + 0x54], 0x99f129cb
jmp 0x40e780
cmp eax, 0x1f524059
jg 0x410960
cmp eax, 0x18a9dcf9
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xeae9c8db
jmp 0x40e780
cmp eax, 0x260f6e2c
jg 0x410986
cmp eax, 0x1f52405a
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xcee07596
jmp 0x40e780
cmp eax, 0x27e3a69f
jg 0x4109be
cmp eax, 0x260f6e2d
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov eax, 0x69f8b585
cmp dword [esp + 0x68], 0x80
jne 0x410546
mov eax, 0xff865304
jmp 0x410546
cmp eax, 0x28f4eebb
jg 0x4109e4
cmp eax, 0x27e3a6a0
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x63c4a592
jmp 0x40e780
cmp eax, 0x2a6b4309
jg 0x410a0a
cmp eax, 0x28f4eebc
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xc06eeade
jmp 0x40e780
cmp eax, 0x2b432b56
jg 0x410b26
cmp eax, 0x2a6b430a
lea ebx, [esp + 0x1c50]
jne 0x40e780
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00405b60
lea eax, [esp + 0xfe0]
mov dword [esp], eax
call fcn.00404750
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404100
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfe0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404100
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0xd1be0c7c
sub edx, eax
sub edx, ecx
add edx, 0x2e41f488
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404100
mov dword [esp + 0x54], 0x343c5b3f
jmp 0x40e780
cmp eax, 0x343c5b3e
jg 0x410b57
cmp eax, 0x2b432b57
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0xe44f2dff
jmp 0x40e780
cmp eax, 0x3a6d6330
jg 0x410b7d
cmp eax, 0x343c5b3f
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x7efeb24b
jmp 0x40e780
cmp eax, 0x3db2ea87
jg 0x410bbb
cmp eax, 0x3a6d6331
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
mov dword [esp + 0x54], 0x7efeb24b
jmp 0x40e780
cmp eax, 0x3f9bc2bc
jg 0x410bef
cmp eax, 0x3db2ea88
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1ca0]
mov dword [esp + 0x1cb0], eax
mov dword [esp + 0x54], 0xbc4a4201
jmp 0x40e780
cmp eax, 0x43a53679
jg 0x410c28
cmp eax, 0x3f9bc2bd
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov al, byte [esp + 0x1cac]
test al, al
mov eax, 0x4ba4137a
jne 0x410546
mov eax, 0x65f0af14
jmp 0x410546
cmp eax, 0x44f3fe80
jg 0x410c61
cmp eax, 0x43a5367a
lea ebx, [esp + 0x1c50]
jne 0x40e780
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0x920dd1d7
je 0x410348
mov eax, 0x30349b6
jmp 0x410348
cmp eax, 0x47f044d1
jg 0x410c96
cmp eax, 0x44f3fe81
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov eax, 0xdd012ccf
cmp dword [esp + 0x60], 6
jb 0x410546
mov eax, 0xe9d7a2d3
jmp 0x410546
cmp eax, 0x4ba41379
jg 0x410ced
cmp eax, 0x47f044d2
lea ebx, [esp + 0x1c50]
jne 0x40e780
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403f40
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040d650
test eax, eax
mov eax, 0xf1944023
jne 0x410348
mov eax, 0x44f3fe81
jmp 0x410348
cmp eax, 0x7c9220ef
jg 0x410dc3
cmp eax, 0x7c4f937b
jg 0x410de2
cmp eax, 0x78f581f0
jg 0x410e4c
cmp eax, 0x7470d3a8
jg 0x410ea6
cmp eax, 0x70cffbd8
jg 0x410ec5
cmp eax, 0x706fd2e5
jg 0x410ee4
cmp eax, 0x6f1904d5
jg 0x410f16
cmp eax, 0x6c0f212b
jg 0x410f40
cmp eax, 0x6ac59ef8
jg 0x410f82
cmp eax, 0x69f8b584
jg 0x410fb4
cmp eax, 0x65f0af13
jg 0x410fcb
cmp eax, 0x63c4a591
jg 0x411013
cmp eax, 0x62c413f7
jg 0x41104a
cmp eax, 0x4ba4137a
je 0x410e7e
cmp eax, 0x4bb4808c
je 0x410e92
cmp eax, 0x551c34f7
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov eax, 0x2b432b57
cmp dword [esp + 0x1ca4], 0
js 0x410546
mov eax, 0x47f044d2
jmp 0x410546
cmp eax, 0x7c9220f0
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xcee07596
jmp 0x40e780
cmp eax, 0x7c4f937c
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c5760]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0x7c9220f0
jmp 0x40e780
cmp eax, 0x78f581f1
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0xdaab39ce
jmp 0x40e780
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], edi
call fcn.0040d570
mov dword [esp + 0x54], 0x7c9220f0
lea ebx, [esp + 0x1c50]
jmp 0x40e780
cmp eax, 0x7470d3a9
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0xc06eeade
jmp 0x40e780
cmp eax, 0x70cffbd9
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x54], 0x6c0f212c
jmp 0x40e780
cmp eax, 0x706fd2e6
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x78f581f1
jmp 0x40e780
cmp eax, 0x6f1904d6
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0x7470d3a9
jmp 0x40e780
cmp eax, 0x6c0f212c
lea ebx, [esp + 0x1c50]
jne 0x40e780
lea eax, [esp + 0x11ea]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040e3b0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0xe44f2dff
jmp 0x40e780
cmp eax, 0x6ac59ef9
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov edx, ebx
mov al, byte [esp + 0x1caa]
test al, al
mov eax, 0x2a6b430a
jne 0x410546
mov eax, 0xd1820618
jmp 0x410546
cmp eax, 0x69f8b585
lea ebx, [esp + 0x1c50]
jne 0x40e780
jmp 0x40e75a
cmp eax, 0x65f0af14
lea ebx, [esp + 0x1c50]
jne 0x40e780
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0x260f6e2d
test eax, eax
jne 0x410507
mov ecx, 0xff865304
jmp 0x410507
cmp eax, 0x63c4a592
lea ebx, [esp + 0x1c50]
jne 0x40e780
cmp dword [esp + 0x1c98], 0
setne byte [esp + 0x1cad]
mov byte [esp + 0x1cae], 1
mov dword [esp + 0x54], 0xca08e0e0
jmp 0x40e780
cmp eax, 0x62c413f8
lea ebx, [esp + 0x1c50]
jne 0x40e780
lea eax, [esp + 0x3a4]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403ce0
mov dword [esp], ebx
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404100
lea eax, [esp + 0x11ea]
mov ebx, eax
mov dword [esp], ebx
call fcn.00404750
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404100
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x4c5764]
sub esp, 4
cmp eax, 1
mov eax, 0x4bb4808c
jne 0x410348
mov eax, 0x7c4f937c
jmp 0x410348
mov eax, dword [esp + 0x1cb0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret