Function at 0x4111a0
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1a88
call fcn.004172c0
mov dword [esp + 0x1a78], 0
mov dword [esp + 0x1a70], 0
mov dword [esp + 0x1a6c], 0
mov dword [esp + 0x1a68], 0
mov dword [esp + 0x1a64], 0
mov dword [esp + 0x1a60], 0
mov dword [esp + 0x1a5c], 0
mov dword [esp + 0x1a58], 0
mov dword [esp + 0x1a54], 0
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a48], 0
mov dword [esp + 0x1a44], 0
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a3c], 0
mov dword [esp + 0x1a38], 0
mov dword [esp + 0x19fc], 0
lea eax, [esp + 0x17f2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x15e8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea ebx, [esp + 0x13de]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea esi, [esp + 0xdc0]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea edi, [esp + 0xbb6]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00417af0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.00417af0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov word [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0xffffffff
call fcn.00410940
mov dword [esp + 0x1a80], eax
mov dword [esp + 0x48], 0x8bcd1b3a
jmp 0x4114f0
mov dword [esp + 0x48], 0xf46cb1a9
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x48]
cmp eax, 0x8bcd1b39
jg 0x411510
cmp eax, 0x84f8542f
jne 0x4114f0
jmp 0x4114df
cmp eax, 0x7fe650ab
jg 0x411560
cmp eax, 0x7c44830f
jg 0x411574
cmp eax, 0x6b191f8c
jg 0x41165b
cmp eax, 0x8dd92571
jg 0x411673
cmp eax, 0x8bcd1b3a
jne 0x4114f0
mov eax, 0xdd744b7c
cmp dword [esp + 0x1a80], 0
js 0x41154f
mov eax, 0xb0661a65
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0x7fe650ac
jne 0x4114f0
mov dword [esp + 0x48], 0x84f8542f
jmp 0x4114f0
cmp eax, 0x7c448310
jne 0x4114f0
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
mov dword [esp], esi
mov dword [esp + 4], 0x104
call fcn.00404f30
mov dword [esp], esi
call fcn.00404a40
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00404630
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xbb6]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404630
mov eax, dword [esp + 0x58]
mov ecx, 0xc199feee
sub ecx, eax
mov edx, dword [esp + 0x4c]
sub ecx, edx
add ecx, 0x3e660216
lea eax, [esp + eax*2 + 0xbb6]
lea eax, [eax + edx*2]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404630
mov dword [esp + 0x48], 0x2bbfd809
jmp 0x4114f0
cmp eax, 0x6b191f8d
jne 0x4114f0
mov dword [esp + 0x48], 0x5652b412
jmp 0x4114f0
cmp eax, 0x9156aad5
jg 0x4116f0
cmp eax, 0x8dd92572
jne 0x4114f0
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004042e0
mov dword [esp], ebx
call fcn.00404a40
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00412d00
mov dword [esp], eax
call fcn.00417c82
mov dword [esp + 0x48], 0xcdbcfe95
jmp 0x4114f0
cmp eax, 0x9c99e162
jg 0x411732
cmp eax, 0x9156aad6
jne 0x4114f0
lea eax, [esp + 0xfca]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00411180
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0x653cebea
jmp 0x4114f0
cmp eax, 0x66d5f7ad
jg 0x411758
cmp eax, 0x9e0ceeaf
jg 0x411770
cmp eax, 0x9c99e163
jne 0x4114f0
mov dword [esp + 0x48], 0xfd1d64fb
jmp 0x4114f0
cmp eax, 0x66d5f7ae
jne 0x4114f0
mov dword [esp + 0x48], 0xfd1d64fb
jmp 0x4114f0
cmp eax, 0xa45a3377
jg 0x41178f
cmp eax, 0x9e0ceeb0
jne 0x4114f0
mov dword [esp + 0x48], 0x653cebea
jmp 0x4114f0
cmp eax, 0xa78e2a5d
jg 0x4117f9
cmp eax, 0xa45a3378
jne 0x4114f0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c9e64]
sub esp, 0x10
mov dword [esp + 0x50], 1
mov dword [esp + 0x48], 0x9e0ceeb0
jmp 0x4114f0
cmp eax, 0xb0661a64
jg 0x411818
cmp eax, 0xa78e2a5e
jne 0x4114f0
mov dword [esp + 0x48], 0x58f657f3
jmp 0x4114f0
cmp eax, 0xb60e6bf6
jg 0x41184d
cmp eax, 0xb0661a65
jne 0x4114f0
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.0040f9a0
test eax, eax
mov eax, 0x4220c529
jne 0x411844
mov eax, 0x379700e0
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0xb8657a7a
jg 0x411864
cmp eax, 0xb60e6bf7
jne 0x4114f0
jmp 0x411a9a
cmp eax, 0xbb7c8fcf
jg 0x41189e
cmp eax, 0xb8657a7b
jne 0x4114f0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040f8c0
mov dword [esp + 0x48], 0x58f657f3
jmp 0x4114f0
cmp eax, 0xc6e4a5f4
jg 0x41191b
cmp eax, 0xbb7c8fd0
jne 0x4114f0
lea eax, [esp + 0x38e]
mov dword [esp + 8], eax
lea eax, [esp + 0x598]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.004042e0
mov dword [esp], ebx
call fcn.00404a40
mov dword [esp + 0x58], eax
mov dword [esp], 0
call fcn.00412d00
mov dword [esp], eax
call fcn.00417c82
mov dword [esp + 0x48], 0x8dd92572
jmp 0x4114f0
cmp eax, 0xcdbcfe94
jg 0x411955
cmp eax, 0xc6e4a5f5
jne 0x4114f0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040f8c0
mov dword [esp + 0x48], 0x9e0ceeb0
jmp 0x4114f0
cmp eax, 0xd3145cbb
jg 0x411974
cmp eax, 0xcdbcfe95
jne 0x4114f0
mov dword [esp + 0x48], 0x7c448310
jmp 0x4114f0
cmp eax, 0x653cebe9
jg 0x4119bb
cmp eax, 0x6408778e
jg 0x4119f6
cmp eax, 0x58f657f2
jg 0x411a0e
cmp eax, 0x5652b411
jg 0x411a41
cmp eax, 0xd40da642
jg 0x411a69
cmp eax, 0xd3145cbc
jne 0x4114f0
mov dword [esp + 0x48], 0x9e0ceeb0
jmp 0x4114f0
cmp eax, 0x653cebea
jne 0x4114f0
lea eax, [esp + 0xfca]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.00411180
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a7c], eax
mov dword [esp + 0x48], 0x9c99e163
jmp 0x4114f0
cmp eax, 0x6408778f
jne 0x4114f0
mov dword [esp + 0x48], 0x7fe650ac
jmp 0x4114f0
cmp eax, 0x58f657f3
jne 0x4114f0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
lea eax, [esp + 0x38e]
mov dword [esp], eax
call fcn.0040f8c0
mov dword [esp + 0x48], 0xd3145cbc
jmp 0x4114f0
cmp eax, 0x5652b412
jne 0x4114f0
mov eax, 0xf46cb1a9
cmp dword [esp + 0x1a78], 0
je 0x411a60
mov eax, 0xf7d33086
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0xdd744b7b
jg 0x411a88
cmp eax, 0xd40da643
jne 0x4114f0
mov dword [esp + 0x48], 0x9e0ceeb0
jmp 0x4114f0
cmp eax, 0xe22a639b
jg 0x411ab2
cmp eax, 0xdd744b7c
jne 0x4114f0
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0xfd1d64fb
jmp 0x4114f0
cmp eax, 0xf46cb1a8
jg 0x411afe
cmp eax, 0xe22a639c
jne 0x4114f0
lea eax, [esp + 0x598]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
mov eax, 0x4b63614d
jne 0x411af5
mov eax, 0x98a887d
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0x4b63614c
jg 0x411c7b
cmp eax, 0x4b358817
jg 0x411c93
cmp eax, 0x4220c528
jg 0x411d30
cmp eax, 0x379700df
jg 0x411d53
cmp eax, 0x2bbfd808
jg 0x411d78
cmp eax, 0x1a3cc35a
jg 0x411db9
cmp eax, 0x11c8caa0
jg 0x411ea7
cmp eax, 0x98a887c
jg 0x411eca
cmp eax, 0x21587b5
jg 0x411ee2
cmp eax, 0xfd1d64fa
jg 0x411f05
cmp eax, 0xf7d33085
jg 0x411f15
cmp eax, 0xf637e89d
jg 0x412bd4
cmp eax, 0xf46cb1a9
je 0x412bec
cmp eax, 0xf48993b5
jne 0x412bf9
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404f30
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404630
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.00404a40
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404630
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4c9e60]
sub esp, 8
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0x6b191f8d
jmp 0x4114f0
cmp eax, 0x4b63614d
jne 0x4114f0
mov dword [esp + 0x48], 0x8dd92572
jmp 0x4114f0
cmp eax, 0x4b358818
jne 0x4114f0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x4c9e64]
sub esp, 0x10
lea eax, [esp + 0x9ac]
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a4c], 0
mov dword [esp + 0x1a54], 1
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c9e68]
sub esp, 4
cmp eax, 1
mov eax, 0xa78e2a5e
jne 0x411d27
mov eax, 0xf5b6d197
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0x4220c529
jne 0x4114f0
mov dword [esp + 0x1a7c], 0
mov dword [esp + 0x48], 0xfd1d64fb
jmp 0x4114f0
cmp eax, 0x379700e0
jne 0x4114f0
mov eax, 0xb60e6bf7
cmp dword [esp + 0x54], 6
jb 0x411d6f
mov eax, 0xe22a639c
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0x2bbfd809
jne 0x4114f0
mov dword [esp + 4], edi
lea eax, [esp + 0x38e]
mov dword [esp], eax
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
mov eax, 0x7c448310
je 0x411db0
mov eax, 0x6408778f
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0x1a3cc35b
jne 0x4114f0
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0x11d4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404f30
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404630
lea eax, [esp + 0x11d4]
mov dword [esp], eax
call fcn.00404a40
mov ecx, dword [esp + 0x58]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xfca]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x11d4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00404630
lea eax, [esp + 0xfca]
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [0x4c9e60]
sub esp, 8
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x48], 0xf48993b5
jmp 0x4114f0
cmp eax, 0x11c8caa1
jne 0x4114f0
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0x66d5f7ae
jmp 0x4114f0
cmp eax, 0x98a887d
jne 0x4114f0
mov dword [esp + 0x48], 0x11c8caa1
jmp 0x4114f0
cmp eax, 0x21587b6
jne 0x4114f0
mov dword [esp + 0x1a7c], 0xffffffff
mov dword [esp + 0x48], 0x11c8caa1
jmp 0x4114f0
cmp eax, 0xfd1d64fb
jne 0x4114f0
jmp 0x412cec
cmp eax, 0xf7d33086
jne 0x4114f0
mov eax, dword [0x4c9cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cbc]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cc0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9cd0]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9ca0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9ce0]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a24]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cac]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9ce4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cf0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9ce8]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9ce8]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a18]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [0x4c9cec]
mov dword [esp + 0x44], eax
mov ecx, dword [0x4c9cd4]
mov edx, dword [esp + 0x1a78]
lea eax, [esp + 0x1a14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x4c9e54]
sub esp, 0x18
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4c9e50]
sub esp, 4
call fcn.00417c5f
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
lea eax, [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418616
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.00417c5f
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00418616
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.00417c5f
and eax, 5
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418616
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0x64], eax
lea ecx, [eax + 1]
mov dword [esp + 0x64], ecx
mov word [esp + eax*2 + 0xbc], 0x2e
mov eax, dword [esp + 0x64]
lea eax, [esp + eax*2 + 0xbc]
mov dword [esp + 0x44], eax
call fcn.00417c5f
and eax, 0xc
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00418616
lea eax, [esp + 0xbc]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0x64], eax
mov eax, dword [0x4c7e84]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c7e84]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c7e84]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402930
mov eax, dword [0x4c9cc8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e4c]
sub esp, 8
mov dword [esp + 0x1a10], eax
mov eax, dword [0x4c9cf8]
mov ecx, dword [0x4c9ca8]
mov edx, dword [esp + 0x1a78]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x4c9e44]
sub esp, 0x10
mov eax, dword [0x4c9cc4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x11d4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9ca4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4c9e3c]
sub esp, 0xc
mov eax, dword [0x4c9cf4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c9e38]
sub esp, 0x10
mov eax, dword [0x4c9ccc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e4c]
sub esp, 8
mov dword [esp + 0x1a0c], eax
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a28]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a20]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a0c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e48]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a30]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a2c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
call fcn.00417c5f
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x4c7e88]
mov dword [esp + 0x19fc], eax
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x19fc]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x19fc]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x17f2]
mov dword [esp], eax
call fcn.00402fd0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x9ac]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404630
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00404630
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x17f2]
mov dword [esp + 8], eax
lea eax, [esp + 0x7a2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404630
mov eax, dword [esp + 0x60]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x7a2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00404630
mov eax, dword [0x4c7e9c]
movzx eax, byte [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c7e9c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c7e9c]
mov edx, dword [esp + 0x60]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00402930
mov eax, dword [0x4c9cd4]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e4c]
sub esp, 8
mov dword [esp + 0x1a08], eax
mov eax, dword [0x4c9cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x9ac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9cb4]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x7a2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9cb0]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9cec]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x74]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4c9e38]
sub esp, 0x10
mov eax, dword [0x4c9cd8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e4c]
sub esp, 8
mov dword [esp + 0x1a04], eax
mov eax, dword [0x4c9cac]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x422520
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a04]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e48]
sub esp, 8
mov eax, dword [0x4c7ea0]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
mov ecx, dword [0x4c7ea0]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c7ea0]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x94]
mov dword [esp], eax
call fcn.00402fd0
mov eax, dword [0x4c9cdc]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e4c]
sub esp, 8
mov dword [esp + 0x1a00], eax
mov eax, dword [0x4c9cac]
mov ecx, dword [esp + 0x1a78]
lea edx, [esp + 0x94]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [0x4c9cb8]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e40]
sub esp, 0xc
mov eax, dword [esp + 0x1a00]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e48]
sub esp, 8
mov eax, dword [esp + 0x1a08]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e48]
sub esp, 8
mov eax, dword [esp + 0x1a14]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a34]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a18]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a1c]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e34]
sub esp, 8
mov eax, dword [esp + 0x1a24]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e30]
sub esp, 8
mov eax, dword [esp + 0x1a10]
mov ecx, dword [esp + 0x1a78]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4c9e48]
sub esp, 8
mov eax, dword [esp + 0x1a78]
mov dword [esp], eax
call dword [0x4c9e58]
sub esp, 4
mov dword [esp + 0x1a38], 0x3c
mov dword [esp + 0x1a3c], 0x40
mov dword [esp + 0x1a40], 0
mov dword [esp + 0x1a44], 0x422524
mov dword [esp + 0x1a50], 0
mov dword [esp + 0x1a58], 0
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x42252e
mov dword [esp + 4], 0x104
call fcn.00404630
lea eax, [esp + 0xfca]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfca]
mov dword [esp + 8], eax
lea eax, [esp + 0x18a]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00404630
mov eax, dword [0x4c7ea4]
movzx eax, word [eax]
mov dword [esp + 0x60], eax
not eax
mov ecx, dword [0x4c7ea4]
add eax, eax
neg eax
movzx eax, word [ecx + eax]
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], eax
mov ecx, dword [0x4c7ea4]
mov edx, dword [esp + 0x60]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x44], eax
add ecx, 2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x15e8]
mov dword [esp], eax
call fcn.00402fd0
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
lea eax, [esp + 0x184]
mov dword [esp + 0x1a4c], eax
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c9e68]
sub esp, 4
cmp eax, 1
mov eax, 0xc6e4a5f5
jne 0x412bcb
mov eax, 0x4b358818
mov dword [esp + 0x48], eax
jmp 0x4114f0
cmp eax, 0xf637e89e
jne 0x4114f0
mov dword [esp + 0x48], 0x7fe650ac
jmp 0x4114f0
mov dword [esp + 0x48], 0xf48993b5
jmp 0x4114f0
cmp eax, 0xf5b6d197
jne 0x4114f0
mov eax, dword [esp + 0x1a70]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00403c40
lea eax, [esp + 0x184]
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00404630
lea eax, [esp + 0xfca]
mov dword [esp], eax
call fcn.00404a40
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfca]
mov dword [esp + 8], eax
lea eax, [esp + 0x190]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00404630
lea eax, [esp + 0x15e8]
mov dword [esp + 0x1a48], eax
lea eax, [esp + 0x184]
mov dword [esp + 0x1a4c], eax
mov dword [esp + 0x1a54], 0
lea eax, [esp + 0x1a38]
mov dword [esp], eax
call dword [0x4c9e68]
sub esp, 4
cmp eax, 1
mov eax, 0xd40da643
jne 0x412ce3
mov eax, 0xa45a3378
mov dword [esp + 0x48], eax
jmp 0x4114f0
mov eax, dword [esp + 0x1a7c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret