Function at 0x4090b0
Capabilities:
Check if file exists
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
mov eax, 0x1310
call fcn.00446e70
mov esi, esp
mov dword [esi + 0x12f8], ebp
mov dword [esi + 0x1c], ecx
lea ebx, [ebp + 8]
mov dword [esi + 0x12fc], esp
mov dword [esi + 0x1308], 0xffffffff
lea eax, [esi + 0x1300]
mov dword [esi + 0x1304], 0x42c410
mov ecx, dword fs:[0]
mov dword [esi + 0x1300], ecx
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
lea ecx, [eax + 0x28]
mov edx, 0x4ef3402
nop
cmp edx, 0x4ef3402
je 0x409122
cmp edx, 0x5e8629a9
jne 0x409110
jmp 0x409129
mov edx, 0x5e8629a9
jmp 0x409110
mov dword [esi + 0x290], ecx
mov edx, dword [esi + 0x290]
mov edx, 0x4102d04b
nop word [eax + eax]
cmp edx, 0x4102d04b
je 0x409152
cmp edx, 0x78c8eb35
jne 0x409140
jmp 0x409159
mov edx, 0x78c8eb35
jmp 0x409140
lea edx, [esi + 0x16c]
mov dword [esi + 0xf20], edx
mov edx, dword [esi + 0xf20]
mov dword [esi + 0xa90], edx
mov edx, dword [esi + 0xa90]
mov edi, 0xca370bf0
nop dword [eax]
cmp edi, 0xca370bf0
je 0x409192
cmp edi, 0x5653185b
jne 0x409180
jmp 0x409199
mov edi, 0x5653185b
jmp 0x409180
mov dword [esi + 0x290], edx
mov edx, dword [esi + 0x290]
mov dword [edx], 0
mov edx, dword [esi + 0x290]
mov edx, dword [esi + 0xa90]
mov dword [edx + 0x10], 0
mov edx, dword [esi + 0xa90]
add edx, 0x14
mov dword [esi + 0x290], edx
mov edx, 0x909fa50a
nop word cs:[eax + eax]
cmp edx, 0xc2880062
je 0x409203
cmp edx, 0x909fa50a
jne 0x4091e0
mov edx, dword [esi + 0x290]
mov dword [edx], 0
mov edx, 0xc2880062
jmp 0x4091e0
lea edx, [ebx + 8]
mov dword [esi + 0x34], edx
mov edx, dword [esi + 0xa90]
mov edx, dword [esi + 0xf20]
mov edi, dword [eax + 0x38]
call fcn.00419b70
mov dword [esi + 0x1308], 1
lea ecx, [esi + 0x16c]
push edi
push eax
call fcn.00420b30
lea eax, [ebp + 8]
mov eax, dword [eax + 4]
lea ecx, [eax + 0x28]
mov edx, 0x4ef3402
nop word cs:[eax + eax]
cmp edx, 0x4ef3402
je 0x409262
cmp edx, 0x5e8629a9
jne 0x409250
jmp 0x409269
mov edx, 0x5e8629a9
jmp 0x409250
mov dword [esi + 0x290], ecx
mov edx, dword [esi + 0x290]
mov edx, 0x4102d04b
nop word [eax + eax]
cmp edx, 0x4102d04b
je 0x409292
cmp edx, 0x78c8eb35
jne 0x409280
jmp 0x409299
mov edx, 0x78c8eb35
jmp 0x409280
lea edx, [esi + 0x88]
mov dword [esi + 0xf20], edx
mov edx, dword [esi + 0xf20]
mov dword [esi + 0xa90], edx
mov edx, dword [esi + 0xa90]
mov edi, 0xca370bf0
nop dword [eax]
cmp edi, 0xca370bf0
je 0x4092d2
cmp edi, 0x5653185b
jne 0x4092c0
jmp 0x4092d9
mov edi, 0x5653185b
jmp 0x4092c0
mov dword [esi + 0x290], edx
mov edx, dword [esi + 0x290]
mov dword [edx], 0
mov edx, dword [esi + 0x290]
mov edx, dword [esi + 0xa90]
mov dword [edx + 0x10], 0
mov edx, dword [esi + 0xa90]
add edx, 0x14
mov dword [esi + 0x290], edx
mov edx, 0x909fa50a
nop word cs:[eax + eax]
cmp edx, 0xc2880062
je 0x409343
cmp edx, 0x909fa50a
jne 0x409320
mov edx, dword [esi + 0x290]
mov dword [edx], 0
mov edx, 0xc2880062
jmp 0x409320
mov edx, dword [esi + 0xa90]
mov edx, dword [esi + 0xf20]
mov edi, dword [eax + 0x38]
call fcn.00419b70
mov dword [esi + 0x1308], 3
lea ecx, [esi + 0x88]
push edi
push eax
call fcn.00420b30
mov byte [esi + 0x17], 0
mov eax, 0x1cbbb19b
mov ebx, dword [esi + 0x34]
nop word [eax + eax]
cmp eax, 0x121076c7
je 0x4093d2
cmp eax, 0x1cbbb19b
jne 0x409380
mov eax, 0xd9a224a5
nop word cs:[eax + eax]
cmp eax, 0xd9a224a5
je 0x4093b0
cmp eax, 0x27e4ec8
jne 0x4093a0
jmp 0x4093b7
mov eax, 0x27e4ec8
jmp 0x4093a0
mov dword [esi + 0x290], ebx
mov eax, dword [esi + 0x290]
mov eax, dword [eax]
mov dword [esi + 0xa90], eax
mov eax, 0x121076c7
jmp 0x409380
cmp dword [esi + 0xa90], 0
je 0x40949d
mov eax, 0xd9a224a5
nop word cs:[eax + eax]
cmp eax, 0xd9a224a5
je 0x409400
cmp eax, 0x27e4ec8
jne 0x4093f0
jmp 0x409407
mov eax, 0x27e4ec8
jmp 0x4093f0
mov dword [esi + 0x290], ebx
mov eax, dword [esi + 0x290]
mov eax, dword [eax]
mov dword [esi + 0xa90], eax
mov eax, dword [esi + 0xa90]
mov ecx, 0x37686399
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [eax]
cmp ecx, 0xf9445729
je 0x40944b
cmp ecx, 0x37686399
jne 0x409430
call edi
xor edx, edx
mov ecx, 0xf9445729
jmp 0x409430
mov dword [esi + 0x294], edx
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x294]
mov dword [esi + 0x294], eax
mov eax, 0xf44d04c7
nop dword [eax + eax]
cmp eax, 0x4ade9632
je 0x40949d
cmp eax, 0xf44d04c7
jne 0x409470
mov eax, dword [esi + 0xa90]
mov ecx, dword [esi + 0x290]
mov edx, dword [esi + 0x294]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, 0x4ade9632
jmp 0x409470
mov eax, 0x37d1f669
nop word cs:[eax + eax]
cmp eax, 0x37d1f669
je 0x4094c0
cmp eax, 0x21a8432a
jne 0x4094b0
jmp 0x4094c7
mov eax, 0x21a8432a
jmp 0x4094b0
lea eax, [esi + 0x16c]
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x290]
cmp dword [eax + 0x10], 0
je 0x409df9
lea eax, [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 8]
or ecx, dword [eax + 0xc]
je 0x409df9
lea eax, [esi + 0x17]
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x294], eax
lea eax, [esi + 0x16c]
mov dword [esi + 0x298], eax
mov dword [esi + 0x1308], 4
lea ecx, [esi + 0x290]
lea eax, [esi + 0x138]
push ecx
push eax
call fcn.00416320
add esp, 8
mov eax, 0x1cbbb19b
mov ecx, dword [esi + 0x34]
nop dword [eax + eax]
cmp eax, 0x121076c7
je 0x409592
cmp eax, 0x1cbbb19b
jne 0x409540
mov eax, 0xd9a224a5
nop word cs:[eax + eax]
cmp eax, 0xd9a224a5
je 0x409570
cmp eax, 0x27e4ec8
jne 0x409560
jmp 0x409577
mov eax, 0x27e4ec8
jmp 0x409560
mov dword [esi + 0x290], ecx
mov eax, dword [esi + 0x290]
mov eax, dword [eax]
mov dword [esi + 0xa90], eax
mov eax, 0x121076c7
jmp 0x409540
cmp dword [esi + 0xa90], 0
je 0x40965d
mov eax, 0xd9a224a5
nop word cs:[eax + eax]
cmp eax, 0xd9a224a5
je 0x4095c0
cmp eax, 0x27e4ec8
jne 0x4095b0
jmp 0x4095c7
mov eax, 0x27e4ec8
jmp 0x4095b0
mov dword [esi + 0x290], ecx
mov eax, dword [esi + 0x290]
mov eax, dword [eax]
mov dword [esi + 0xa90], eax
mov eax, dword [esi + 0xa90]
mov ecx, 0x37686399
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [eax]
cmp ecx, 0xf9445729
je 0x40960b
cmp ecx, 0x37686399
jne 0x4095f0
call edi
xor edx, edx
mov ecx, 0xf9445729
jmp 0x4095f0
mov dword [esi + 0x294], edx
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x294]
mov dword [esi + 0x294], eax
mov eax, 0xf44d04c7
nop dword [eax + eax]
cmp eax, 0x4ade9632
je 0x40965d
cmp eax, 0xf44d04c7
jne 0x409630
mov eax, dword [esi + 0xa90]
mov ecx, dword [esi + 0x290]
mov edx, dword [esi + 0x294]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, 0x4ade9632
jmp 0x409630
lea eax, [esi + 0x88]
push eax
call fcn.00416480
add esp, 4
mov dword [esi + 0x18], eax
cmp eax, 0xffffffff
je 0x40988c
lea eax, [esi + 0x18]
mov dword [esi + 0x290], eax
mov dword [esi + 0x1308], 5
lea eax, [esi + 0x130]
lea ecx, [esi + 0x290]
push ecx
push eax
call fcn.00416830
add esp, 8
lea ecx, [esi + 0xf20]
call fcn.00416990
lea eax, [esi + 0xa90]
mov dword [esi + 0x184], eax
mov eax, dword [esi + 0x184]
mov dword [eax], 0x46a06c
mov eax, dword [esi + 0x184]
add eax, 8
mov dword [esi + 0x290], eax
mov eax, 0x4b9e1a12
mov edi, 0x3e0
lea ebx, [ebp + 8]
cmp eax, 0xae3c775f
je 0x409755
cmp eax, 0x4b9e1a12
jne 0x4096e0
mov ecx, dword [esi + 0x290]
call fcn.0041ad50
mov eax, dword [esi + 0x184]
mov eax, dword [esi + 0x184]
add eax, edi
push eax
call fcn.0042c6a0
add esp, 4
mov eax, dword [esi + 0x184]
pxor xmm0, xmm0
movdqu xmmword [eax + 0x474], xmm0
movdqu xmmword [eax + 0x464], xmm0
mov eax, dword [esi + 0x184]
mov dword [eax + 0x488], 0
mov dword [eax + 0x484], 0
mov dword [eax + 0x48c], 0
mov eax, 0xae3c775f
jmp 0x4096e0
mov eax, dword [esi + 0x184]
push str._____BEGIN_RSA_PRIVATE_KEY______nMIIEpAIBAAKCAQEAyJwug8oheeOzwmOunG0IBNvWAQCFNqxOVyi5ndRM_nqhdUJ_niOqIT69MX7fygYACHGRdNLakfVRLrSWXFs5iU58qWrTsQJy93xQFZQTxcoXaNl_nznAQjUstwo6jrr0pKGX4ZgIAIst0GvPUCKGyNnFy_eGyERC2ouktruzZdAD_RgKx_niKGGIyM2sSMU8iR19t0dAsq2u_tC90NtHF468YUAhPVUmAMU00JW_AvChCDr67eB_nakjhEqqkWptRJXIWFngTF8cBafgunSB5AIkmdvMI68lzMDuHzm6ra_5y39588_nuYfoPDnSSdzCwcCLp372SugZqyVHKU_1iXB92QIDAQABAoIBAAup1Y8fc3a5THd_nf9STLLhlTjZwgqsvXuKqSLMEgA_Br4YWm9ZAhmoqs7hW2RgnJtf6WxkohUi39KUM_ng5jZrnKPrCQ5Rt2EMvlEt3tIjZdEwv1D5p8xu4cvM3WmCydlKrwS3TEk01aMg_n1R_LKsAyoFhqKi8Lq1fR9OqDqu9MZsrEcR5vty2yz9GlQ1PS84Oowi0eTeGt9zh_nWFVbfQQiptTqm2AuNeKoIV4Ebz_QaPsKvrljaXCWs02zx2fYODcE67OGY2HYbWPm_nkx9QWS5LtIG1x04TKxftsUmpfRPoFlu23Ir7HZAxu3VyQRnASarc_7bSuiqLxOk8_n3bJwJMECgYEA8TGRxpHZlGU02sEerSHyIV3etbcAqjBTkVpY_xoT0NNwJDZ3Towy_nHk8lX29Pr_9ejqJPyQyoxiONoFzbVgrxDq1QH1rf6194yW5xTEmAcc7MkXgg0pNJ_nLhgXOWEacIRGE2GWjrWFBFCuiAVMpXqIg3kx7Zku6LLFqGsr0IqybkCgYEA2GaM_nFIL15Ynxrzh3hloh8lEeeLM3UDP7JEGUE3gBDXauUSfclPhmWBY50YyUHTc5fJnu_naCeA9UhO2KrLsBA0ue8CLYt87Gsjk13TpAKt5fPQ8UBj1cr7MaouV76WrAtwsq9_nyHSQtkv74Nxz9D3ZRBuVOgBRdba2nhxGkMxK5SECgYAXLaZOqNF50fbBdgG105H_nepfeapm7wS0muMH4se7ZkJgkQrwYrSmSQDUbQQBa88QcfSs43SMpfoEQSgq2p5T_nxMAAY2FFY0VeRijJJf8b8L2j9SFiWxkbPuFseDJsQaniTuyDBlqkEYTUOYLpJZL8_nds1XiWeSoStxhesN_WYsQKBgQCPHesA2cfkogF8P90UtuGCj9GWQ_iOC4LJ7LEQ_n2ynfDKGmvLUutMWC9lgQ1WdTlyVm2asJqS6picPTmcmSTHWCjqajFoBtH0JtAP2q_nl7cIwOJr24jraQ4OP53cnAisDMZ_cHRpcWYPmlsf0MzDOHBLke50aKd3MXq_QLYO_np33U4QKBgQCSnwbz_hF3lpz45BYGiVgjiyKF_hDkYH_hOBVrxMjzipWWKCtivl_nLvE_4iz17N6eyopxoNmVQQEMjHrKBMk3cMlrA0fR6yFE4tU5H9rhi3f8RpXqWPOL_nz_bGEEZNwbfC0F4EGbk3OK37Xr3ySwS0ia3faJowsWCYWUEhrlNBA_n_____END_RSA_PRIVATE_KEY______n
call fcn.0045b970
add esp, 4
inc eax
lea ecx, [esi + 0xf20]
push eax
push str._____BEGIN_RSA_PRIVATE_KEY______nMIIEpAIBAAKCAQEAyJwug8oheeOzwmOunG0IBNvWAQCFNqxOVyi5ndRM_nqhdUJ_niOqIT69MX7fygYACHGRdNLakfVRLrSWXFs5iU58qWrTsQJy93xQFZQTxcoXaNl_nznAQjUstwo6jrr0pKGX4ZgIAIst0GvPUCKGyNnFy_eGyERC2ouktruzZdAD_RgKx_niKGGIyM2sSMU8iR19t0dAsq2u_tC90NtHF468YUAhPVUmAMU00JW_AvChCDr67eB_nakjhEqqkWptRJXIWFngTF8cBafgunSB5AIkmdvMI68lzMDuHzm6ra_5y39588_nuYfoPDnSSdzCwcCLp372SugZqyVHKU_1iXB92QIDAQABAoIBAAup1Y8fc3a5THd_nf9STLLhlTjZwgqsvXuKqSLMEgA_Br4YWm9ZAhmoqs7hW2RgnJtf6WxkohUi39KUM_ng5jZrnKPrCQ5Rt2EMvlEt3tIjZdEwv1D5p8xu4cvM3WmCydlKrwS3TEk01aMg_n1R_LKsAyoFhqKi8Lq1fR9OqDqu9MZsrEcR5vty2yz9GlQ1PS84Oowi0eTeGt9zh_nWFVbfQQiptTqm2AuNeKoIV4Ebz_QaPsKvrljaXCWs02zx2fYODcE67OGY2HYbWPm_nkx9QWS5LtIG1x04TKxftsUmpfRPoFlu23Ir7HZAxu3VyQRnASarc_7bSuiqLxOk8_n3bJwJMECgYEA8TGRxpHZlGU02sEerSHyIV3etbcAqjBTkVpY_xoT0NNwJDZ3Towy_nHk8lX29Pr_9ejqJPyQyoxiONoFzbVgrxDq1QH1rf6194yW5xTEmAcc7MkXgg0pNJ_nLhgXOWEacIRGE2GWjrWFBFCuiAVMpXqIg3kx7Zku6LLFqGsr0IqybkCgYEA2GaM_nFIL15Ynxrzh3hloh8lEeeLM3UDP7JEGUE3gBDXauUSfclPhmWBY50YyUHTc5fJnu_naCeA9UhO2KrLsBA0ue8CLYt87Gsjk13TpAKt5fPQ8UBj1cr7MaouV76WrAtwsq9_nyHSQtkv74Nxz9D3ZRBuVOgBRdba2nhxGkMxK5SECgYAXLaZOqNF50fbBdgG105H_nepfeapm7wS0muMH4se7ZkJgkQrwYrSmSQDUbQQBa88QcfSs43SMpfoEQSgq2p5T_nxMAAY2FFY0VeRijJJf8b8L2j9SFiWxkbPuFseDJsQaniTuyDBlqkEYTUOYLpJZL8_nds1XiWeSoStxhesN_WYsQKBgQCPHesA2cfkogF8P90UtuGCj9GWQ_iOC4LJ7LEQ_n2ynfDKGmvLUutMWC9lgQ1WdTlyVm2asJqS6picPTmcmSTHWCjqajFoBtH0JtAP2q_nl7cIwOJr24jraQ4OP53cnAisDMZ_cHRpcWYPmlsf0MzDOHBLke50aKd3MXq_QLYO_np33U4QKBgQCSnwbz_hF3lpz45BYGiVgjiyKF_hDkYH_hOBVrxMjzipWWKCtivl_nLvE_4iz17N6eyopxoNmVQQEMjHrKBMk3cMlrA0fR6yFE4tU5H9rhi3f8RpXqWPOL_nz_bGEEZNwbfC0F4EGbk3OK37Xr3ySwS0ia3faJowsWCYWUEhrlNBA_n_____END_RSA_PRIVATE_KEY______n
call fcn.00416a30
test al, al
je 0x4098d8
pxor xmm0, xmm0
movdqa xmmword [esi + 0x110], xmm0
movdqa xmmword [esi + 0x100], xmm0
movdqa xmmword [esi + 0xf0], xmm0
movdqa xmmword [esi + 0xe0], xmm0
movdqa xmmword [esi + 0xd0], xmm0
movdqa xmmword [esi + 0xc0], xmm0
movdqa xmmword [esi + 0xb0], xmm0
movdqa xmmword [esi + 0xa0], xmm0
mov dword [esi + 0x124], 0
mov dword [esi + 0x120], 0
lea edi, [esi + 0x184]
push 0x10c
push 0
push edi
call fcn.004552e0
add esp, 0xc
mov eax, dword [ebx + 4]
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov ebx, dword [esi + 0x18]
mov dword [esi + 0x1308], 6
mov ecx, dword [esi + 0x1c]
push edi
push eax
push edx
push ebx
call fcn.00416ad0
test al, al
je 0x409967
mov dword [esi + 0x78], 0x400
lea eax, [esi + 0x18c]
lea edx, [esi + 0x78]
lea ecx, [esi + 0xf20]
push edx
lea edx, [esi + 0x290]
push edx
push 0x100
push eax
call fcn.00416da0
test eax, eax
je 0x409c0a
mov edi, eax
call sub.KERNEL32.dll_GetCurrentThreadId
lea ecx, [esi + 0x74]
mov dword [esi + 0x3c], ecx
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x20], ecx
mov ecx, 0xd8210750
nop word cs:[eax + eax]
cmp ecx, 0xd8210750
je 0x409885
cmp ecx, 0xfa573f0b
jne 0x409870
jmp 0x409942
mov ecx, 0xfa573f0b
jmp 0x409870
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x409d26
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x409bd8
lea eax, [esi + 0x88]
push eax
call fcn.00416660
add esp, 4
test al, al
je 0x409d26
lea eax, [esi + 0x88]
push eax
call fcn.00416480
add esp, 4
mov dword [esi + 0x18], eax
jmp 0x409bdb
call sub.KERNEL32.dll_GetCurrentThreadId
lea ecx, [esi + 0x7c]
mov dword [esi + 0xa0], ecx
mov ecx, dword [esi + 0xa0]
mov dword [esi + 0x184], ecx
mov ecx, 0xd8210750
nop word [eax + eax]
cmp ecx, 0xd8210750
je 0x409912
cmp ecx, 0xfa573f0b
jne 0x409900
jmp 0x409919
mov ecx, 0xfa573f0b
jmp 0x409900
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x184]
mov ecx, dword [esi + 0x290]
mov dword [eax], ecx
mov eax, dword [esi + 0xa0]
push str._____BEGIN_RSA_PRIVATE_KEY______nMIIEpAIBAAKCAQEAyJwug8oheeOzwmOunG0IBNvWAQCFNqxOVyi5ndRM_nqhdUJ_niOqIT69MX7fygYACHGRdNLakfVRLrSWXFs5iU58qWrTsQJy93xQFZQTxcoXaNl_nznAQjUstwo6jrr0pKGX4ZgIAIst0GvPUCKGyNnFy_eGyERC2ouktruzZdAD_RgKx_niKGGIyM2sSMU8iR19t0dAsq2u_tC90NtHF468YUAhPVUmAMU00JW_AvChCDr67eB_nakjhEqqkWptRJXIWFngTF8cBafgunSB5AIkmdvMI68lzMDuHzm6ra_5y39588_nuYfoPDnSSdzCwcCLp372SugZqyVHKU_1iXB92QIDAQABAoIBAAup1Y8fc3a5THd_nf9STLLhlTjZwgqsvXuKqSLMEgA_Br4YWm9ZAhmoqs7hW2RgnJtf6WxkohUi39KUM_ng5jZrnKPrCQ5Rt2EMvlEt3tIjZdEwv1D5p8xu4cvM3WmCydlKrwS3TEk01aMg_n1R_LKsAyoFhqKi8Lq1fR9OqDqu9MZsrEcR5vty2yz9GlQ1PS84Oowi0eTeGt9zh_nWFVbfQQiptTqm2AuNeKoIV4Ebz_QaPsKvrljaXCWs02zx2fYODcE67OGY2HYbWPm_nkx9QWS5LtIG1x04TKxftsUmpfRPoFlu23Ir7HZAxu3VyQRnASarc_7bSuiqLxOk8_n3bJwJMECgYEA8TGRxpHZlGU02sEerSHyIV3etbcAqjBTkVpY_xoT0NNwJDZ3Towy_nHk8lX29Pr_9ejqJPyQyoxiONoFzbVgrxDq1QH1rf6194yW5xTEmAcc7MkXgg0pNJ_nLhgXOWEacIRGE2GWjrWFBFCuiAVMpXqIg3kx7Zku6LLFqGsr0IqybkCgYEA2GaM_nFIL15Ynxrzh3hloh8lEeeLM3UDP7JEGUE3gBDXauUSfclPhmWBY50YyUHTc5fJnu_naCeA9UhO2KrLsBA0ue8CLYt87Gsjk13TpAKt5fPQ8UBj1cr7MaouV76WrAtwsq9_nyHSQtkv74Nxz9D3ZRBuVOgBRdba2nhxGkMxK5SECgYAXLaZOqNF50fbBdgG105H_nepfeapm7wS0muMH4se7ZkJgkQrwYrSmSQDUbQQBa88QcfSs43SMpfoEQSgq2p5T_nxMAAY2FFY0VeRijJJf8b8L2j9SFiWxkbPuFseDJsQaniTuyDBlqkEYTUOYLpJZL8_nds1XiWeSoStxhesN_WYsQKBgQCPHesA2cfkogF8P90UtuGCj9GWQ_iOC4LJ7LEQ_n2ynfDKGmvLUutMWC9lgQ1WdTlyVm2asJqS6picPTmcmSTHWCjqajFoBtH0JtAP2q_nl7cIwOJr24jraQ4OP53cnAisDMZ_cHRpcWYPmlsf0MzDOHBLke50aKd3MXq_QLYO_np33U4QKBgQCSnwbz_hF3lpz45BYGiVgjiyKF_hDkYH_hOBVrxMjzipWWKCtivl_nLvE_4iz17N6eyopxoNmVQQEMjHrKBMk3cMlrA0fR6yFE4tU5H9rhi3f8RpXqWPOL_nz_bGEEZNwbfC0F4EGbk3OK37Xr3ySwS0ia3faJowsWCYWUEhrlNBA_n_____END_RSA_PRIVATE_KEY______n
push dword [esi + 0x7c]
push str.ERROR___d_:__RSAImport_key_error_n_s__n
jmp 0x40995f
mov dword [esi + 0x140], eax
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x140]
mov dword [eax], ecx
mov eax, dword [esi + 0x3c]
push edi
push dword [esi + 0x74]
push str.ERROR___d_:__RSADecrypt_error__d__n
call fcn.004015c0
add esp, 0xc
mov ecx, 0x88a4a9e0
pxor xmm0, xmm0
mov eax, 0x484
nop word cs:[eax + eax]
cmp ecx, 0x3dbb5dec
je 0x4099d3
cmp ecx, 0x88a4a9e0
jne 0x409980
lea ecx, [esi + 0xa90]
mov dword [esi + 0xa0], ecx
mov ecx, dword [esi + 0xa0]
mov dword [ecx], 0x46a06c
mov ecx, dword [esi + 0xa0]
movdqu xmmword [ecx + 0x474], xmm0
movdqu xmmword [ecx + 0x464], xmm0
mov ecx, dword [esi + 0xa0]
add ecx, eax
mov dword [esi + 0x184], ecx
mov ecx, 0x3dbb5dec
jmp 0x409980
mov eax, dword [esi + 0x184]
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 8], 0
mov eax, 0x3e0
add eax, dword [esi + 0xa0]
push eax
call fcn.0042c6d0
add esp, 4
mov eax, dword [esi + 0xa0]
add eax, 8
mov ecx, 0x1f838b36
nop
cmp ecx, 0xaef44b09
je 0x409a39
cmp ecx, 0x1f838b36
jne 0x409a10
mov dword [esi + 0x290], eax
mov ecx, dword [esi + 0x290]
mov dword [ecx], 0x46a070
mov ecx, 0xaef44b09
jmp 0x409a10
mov edi, 0x290
mov eax, dword [esi + 0x290]
add eax, edi
push eax
call fcn.0042cc80
add esp, 4
mov eax, dword [esi + 0x290]
add eax, 0x10
push eax
call fcn.0042d380
add esp, 4
lea eax, [esi + 0xf20]
mov dword [esi + 0xa90], eax
mov eax, dword [esi + 0xa90]
mov dword [eax], 0x46a068
add edi, dword [esi + 0xa90]
push edi
call fcn.0042cc80
add esp, 4
mov ecx, 0x5cf3f12d
mov eax, dword [esi + 0x290]
nop word cs:[eax + eax]
cmp ecx, 0x515d3e97
je 0x409ad2
cmp ecx, 0x5cf3f12d
jne 0x409aa0
mov eax, dword [esi + 0xa90]
add eax, 0x10
push eax
call fcn.0042d380
add esp, 4
mov eax, dword [esi + 0xa90]
add eax, 8
mov ecx, 0x515d3e97
jmp 0x409aa0
mov dword [esi + 0x290], eax
push dword [esi + 0x290]
call fcn.0042d7c0
add esp, 4
mov eax, 0xd322db40
nop dword [eax + eax]
cmp eax, 0xd322db40
je 0x409b00
cmp eax, 0x6e4088b5
jne 0x409af0
jmp 0x409b07
mov eax, 0x6e4088b5
jmp 0x409af0
lea eax, [esi + 0x130]
mov dword [esi + 0x184], eax
mov edi, dword [esi + 0x184]
mov eax, 0x8077d01b
mov ebx, 0x32609413
nop word cs:[eax + eax]
cmp eax, 0x198a9b74
jle 0x409b70
cmp eax, 0x198a9b75
je 0x409b9b
cmp eax, 0x32609413
je 0x409d26
cmp eax, 0x7fe1aa50
jne 0x409b30
mov eax, dword [esi + 0xa90]
cmp dword [eax], 0
mov eax, 0xc33577a0
cmove eax, ebx
jmp 0x409b30
cmp eax, 0x8077d01b
je 0x409baf
cmp eax, 0x9305582c
je 0x409bce
cmp eax, 0xc33577a0
jne 0x409b30
mov eax, dword [esi + 0xf20]
add eax, 4
mov dword [esi + 0x290], eax
mov eax, 0x198a9b75
jmp 0x409b30
mov eax, dword [esi + 0x290]
mov ecx, dword [eax]
call fcn.0041c9f0
mov eax, 0x9305582c
jmp 0x409b30
mov dword [esi + 0xf20], edi
mov eax, dword [esi + 0xf20]
add eax, 4
mov dword [esi + 0xa90], eax
mov eax, 0x7fe1aa50
jmp 0x409b30
mov eax, 0x32609413
jmp 0x409b30
mov eax, dword [esi + 0x18]
cmp eax, 0xffffffff
jne 0x409678
mov eax, 0x7b4ffa6d
nop dword [eax]
cmp eax, 0x7b4ffa6d
je 0x409c03
cmp eax, 0x5288555c
jne 0x409bf0
jmp 0x409cea
mov eax, 0x5288555c
jmp 0x409bf0
movsd xmm0, qword [esi + 0x300]
movsd qword [esi + 0x110], xmm0
movups xmm0, xmmword [esi + 0x2f0]
movaps xmmword [esi + 0x100], xmm0
movups xmm0, xmmword [esi + 0x2e0]
movaps xmmword [esi + 0xf0], xmm0
movups xmm0, xmmword [esi + 0x2d0]
movaps xmmword [esi + 0xe0], xmm0
movups xmm0, xmmword [esi + 0x2c0]
movaps xmmword [esi + 0xd0], xmm0
movups xmm0, xmmword [esi + 0x2b0]
movaps xmmword [esi + 0xc0], xmm0
movdqu xmm0, xmmword [esi + 0x290]
movdqu xmm1, xmmword [esi + 0x2a0]
movdqa xmmword [esi + 0xb0], xmm1
movdqa xmmword [esi + 0xa0], xmm0
lea eax, [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
mov edx, 0xfffffef4
add edx, dword [eax + 8]
adc ecx, 0xffffffff
push ecx
push edx
push dword [esi + 0x18]
call fcn.004170e0
add esp, 0xc
test al, al
je 0x40a037
lea eax, [esi + 0xfc]
lea edx, [esi + 0xdc]
lea ecx, [esi + 0xa90]
push eax
push edx
call fcn.00417300
mov eax, 0xab3d3bc2
nop word [eax + eax]
cmp eax, 0xab3d3bc2
je 0x409ce3
cmp eax, 0xa95364e5
jne 0x409cd0
jmp 0x40a058
mov eax, 0xa95364e5
jmp 0x409cd0
lea eax, [esi + 0x88]
mov dword [esi + 0x290], eax
mov ecx, dword [esi + 0x290]
call fcn.00419b70
mov edi, eax
lea eax, [esi + 0x80]
push eax
call fcn.00401690
add esp, 4
push edi
push dword [esi + 0x80]
push str.ERROR___d_:__File_busy:__s__n
call fcn.004015c0
add esp, 0xc
mov eax, 0xd322db40
nop dword [eax + eax]
cmp eax, 0xd322db40
je 0x409d40
cmp eax, 0x6e4088b5
jne 0x409d30
jmp 0x409d47
mov eax, 0x6e4088b5
jmp 0x409d30
lea eax, [esi + 0x138]
mov dword [esi + 0x184], eax
mov edi, dword [esi + 0x184]
mov eax, 0x8077d01b
mov ebx, 0x32609413
jmp 0x409d80
mov dword [esi + 0xf20], edi
mov eax, dword [esi + 0xf20]
add eax, 4
mov dword [esi + 0xa90], eax
mov eax, 0x7fe1aa50
nop
cmp eax, 0x198a9b74
jle 0x409db0
cmp eax, 0x198a9b75
je 0x409ddb
cmp eax, 0x32609413
je 0x409df6
cmp eax, 0x7fe1aa50
jne 0x409d80
mov eax, dword [esi + 0xa90]
cmp dword [eax], 0
mov eax, 0xc33577a0
cmove eax, ebx
jmp 0x409d80
cmp eax, 0x8077d01b
je 0x409d65
cmp eax, 0x9305582c
je 0x409def
cmp eax, 0xc33577a0
jne 0x409d80
mov eax, dword [esi + 0xf20]
add eax, 4
mov dword [esi + 0x290], eax
mov eax, 0x198a9b75
jmp 0x409d80
mov eax, dword [esi + 0x290]
mov ecx, dword [eax]
call fcn.0041c9f0
mov eax, 0x9305582c
jmp 0x409d80
mov eax, 0x32609413
jmp 0x409d80
mov ebx, dword [esi + 0x34]
mov eax, 0x7829505
nop
cmp eax, 0x7829505
je 0x409e10
cmp eax, 0xe864405
jne 0x409e00
jmp 0x409e17
mov eax, 0xe864405
jmp 0x409e00
lea edi, [esi + 0x88]
mov ecx, edi
call fcn.0041d790
mov eax, 0xb46d5a3b
nop dword [eax]
cmp eax, 0xb46d5a3b
je 0x409e40
cmp eax, 0x1369437d
jne 0x409e30
jmp 0x409e47
mov eax, 0x1369437d
jmp 0x409e30
mov eax, 0x17ac3f07
nop dword [eax]
cmp eax, 0x17ac3f07
je 0x409e60
cmp eax, 0x50fec471
jne 0x409e50
jmp 0x409e67
mov eax, 0x50fec471
jmp 0x409e50
mov dword [esi + 0x290], edi
mov eax, dword [esi + 0x290]
mov eax, 0x66eec162
nop dword [eax + eax]
cmp eax, 0x66eec162
je 0x409e90
cmp eax, 0xc44a53dd
jne 0x409e80
jmp 0x409e97
mov eax, 0xc44a53dd
jmp 0x409e80
mov eax, 0x7829505
nop dword [eax]
cmp eax, 0x7829505
je 0x409eb0
cmp eax, 0xe864405
jne 0x409ea0
jmp 0x409eb7
mov eax, 0xe864405
jmp 0x409ea0
lea edi, [esi + 0x16c]
mov ecx, edi
call fcn.0041d790
mov eax, 0xb46d5a3b
nop dword [eax]
cmp eax, 0xb46d5a3b
je 0x409ee0
cmp eax, 0x1369437d
jne 0x409ed0
jmp 0x409ee7
mov eax, 0x1369437d
jmp 0x409ed0
mov eax, 0x17ac3f07
nop dword [eax]
cmp eax, 0x17ac3f07
je 0x409f00
cmp eax, 0x50fec471
jne 0x409ef0
jmp 0x409f07
mov eax, 0x50fec471
jmp 0x409ef0
mov dword [esi + 0x290], edi
mov eax, dword [esi + 0x290]
mov eax, 0x66eec162
nop dword [eax + eax]
cmp eax, 0x66eec162
je 0x409f30
cmp eax, 0xc44a53dd
jne 0x409f20
jmp 0x409f37
mov eax, 0xc44a53dd
jmp 0x409f20
mov eax, 0x9f7eea84
mov edi, 0xbf453a36
nop word cs:[eax + eax]
cmp eax, 0x1aed514c
je 0x40a021
cmp eax, 0x9f7eea84
jne 0x409f50
mov eax, 0x2ddfd05
nop word [eax + eax]
cmp eax, 0x1634b38c
jg 0x409fb0
cmp eax, 0xbf453a36
je 0x40a017
cmp eax, 0x2ddfd05
je 0x409fdf
cmp eax, 0x309cbb4
jne 0x409f70
mov ecx, dword [esi + 0x290]
call fcn.0041c9f0
mov eax, 0xbf453a36
jmp 0x409f70
cmp eax, 0x1634b38d
je 0x409fe6
cmp eax, 0x4078d013
je 0x409ffe
cmp eax, 0x1d9bb684
jne 0x409f70
mov dword [esi + 0xf20], ebx
mov eax, dword [esi + 0xf20]
cmp dword [eax + 4], 0
mov eax, 0x4078d013
cmove eax, edi
jmp 0x409f70
mov eax, 0x1d9bb684
jmp 0x409f70
mov eax, dword [esi + 0xa90]
mov eax, dword [eax]
mov dword [esi + 0x290], eax
mov eax, 0x309cbb4
jmp 0x409f70
mov eax, dword [esi + 0xf20]
add eax, 4
mov dword [esi + 0xa90], eax
mov eax, 0x1634b38d
jmp 0x409f70
mov eax, 0x1aed514c
jmp 0x409f50
mov eax, dword [esi + 0x1300]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
lea eax, [esi + 0x70]
push eax
call fcn.00401690
add esp, 4
push dword [esi + 0x70]
push str.ERROR___d_:__Failed_to_remove_encryption_header_from_file_end__n
call fcn.004015c0
add esp, 8
jmp 0x409967
lea edx, [esi + 0x20]
mov dword [esi + 0x140], edx
mov eax, dword [esi + 0x140]
mov eax, dword [esi + 0xd8]
mov dword [esi + 0x1308], 6
lea ecx, [esi + 0x3c]
push edx
push eax
call fcn.004173a0
mov eax, 0xab3d3bc2
nop word cs:[eax + eax]
cmp eax, 0xab3d3bc2
je 0x40a0a0
cmp eax, 0xa95364e5
jne 0x40a090
jmp 0x40a0a7
mov eax, 0xa95364e5
jmp 0x40a090
lea edx, [esi + 0x20]
mov dword [esi + 0x140], edx
mov eax, dword [esi + 0x140]
mov eax, dword [esi + 0xd8]
mov dword [esi + 0x1308], 7
lea ecx, [esi + 0x64]
push edx
push eax
call fcn.004173a0
lea eax, [esi + 0xa0]
mov dword [esi + 0x60], eax
mov dword [esi + 0x5c], eax
lea ecx, [esi + 0x140]
push 0
call fcn.00417470
mov eax, dword [esi + 0xd4]
not eax
or eax, 0xfffffffb
cmp eax, 0xffffffff
je 0x40a114
mov dword [esi + 0x1308], 8
lea eax, [esi + 0x5c]
lea ecx, [esi + 0x140]
push eax
call fcn.00417510
jmp 0x40a12d
mov dword [esi + 0x1308], 8
lea eax, [esi + 0x60]
lea ecx, [esi + 0x140]
push eax
call fcn.004175c0
mov ebx, dword [esi + 0x118]
mov edx, dword [esi + 0x11c]
jmp 0x40a14f
cmp ebx, dword [esi + 0x48]
mov ecx, edx
sbb ecx, dword [esi + 0x4c]
lea eax, [ebp + 8]
mov edi, dword [esi + 0x1c]
jae 0x40a3d5
lea eax, [esi + 0x3c]
mov dword [esi + 0x20], eax
mov edi, 0x3ad22c09
nop word [eax + eax]
cmp edi, 0x1a49925b
je 0x40a17a
cmp edi, 0x3ad22c09
jne 0x40a160
mov edi, 0x1a49925b
mov ecx, dword [esi + 0x20]
jmp 0x40a160
mov dword [esi + 0x1c], ebx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edi, 0xa1d780ac
mov ebx, dword [esi + 0x3c]
nop word [eax + eax]
cmp edi, 0xa1d780ac
je 0x40a1a2
cmp edi, 0x55d7efca
jne 0x40a190
jmp 0x40a1a9
mov edi, 0x55d7efca
jmp 0x40a190
sub ecx, eax
mov dword [esi + 0x20], ebx
push edx
push dword [esi + 0x1c]
push ecx
push dword [esi + 0x20]
push dword [esi + 0x18]
call fcn.00417730
add esp, 0x14
mov ebx, eax
or eax, edx
je 0x40a5ab
cmp ebx, dword [esi + 0xd8]
sbb edx, 0
jae 0x40a241
mov ecx, 0xa1d780ac
mov eax, dword [esi + 0x3c]
nop
cmp ecx, 0xa1d780ac
je 0x40a1f2
cmp ecx, 0x55d7efca
jne 0x40a1e0
jmp 0x40a1f9
mov ecx, 0x55d7efca
jmp 0x40a1e0
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x20]
lea ecx, [esi + 0x3c]
mov dword [esi + 0x20], ecx
mov edx, 0x3ad22c09
nop word [eax + eax]
cmp edx, 0x1a49925b
je 0x40a22a
cmp edx, 0x3ad22c09
jne 0x40a210
mov edx, 0x1a49925b
mov ecx, dword [esi + 0x20]
jmp 0x40a210
add eax, ebx
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
add ecx, ebx
sub edx, ecx
push edx
push 0
push eax
call fcn.004552e0
add esp, 0xc
add ebx, 0x3f
mov ecx, 0xa1d780ac
mov eax, dword [esi + 0x64]
nop dword [eax]
cmp ecx, 0xa1d780ac
je 0x40a262
cmp ecx, 0x55d7efca
jne 0x40a250
jmp 0x40a269
mov ecx, 0x55d7efca
jmp 0x40a250
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x20]
mov edx, 0xa1d780ac
mov ecx, dword [esi + 0x3c]
nop word [eax + eax]
cmp edx, 0xa1d780ac
je 0x40a292
cmp edx, 0x55d7efca
jne 0x40a280
jmp 0x40a299
mov edx, 0x55d7efca
jmp 0x40a280
and ebx, 0xffffffc0
mov dword [esi + 0x20], ecx
mov ecx, dword [esi + 0x20]
mov edx, 0xd1a751a5
nop word [eax + eax]
cmp edx, 0xd1a751a5
je 0x40a2c2
cmp edx, 0x43b7f36f
jne 0x40a2b0
jmp 0x40a2c9
mov edx, 0x43b7f36f
jmp 0x40a2b0
mov dword [esi + 0xc], eax
lea eax, [esi + 0xa90]
mov dword [esi + 0x30], eax
mov dword [esi + 0x10], ecx
mov dword [esi + 0x20], ebx
mov eax, dword [esi + 0x30]
mov ecx, 0x3e0
add eax, ecx
push dword [esi + 0xc]
push dword [esi + 0x10]
push dword [esi + 0x20]
push eax
call fcn.0042c790
add esp, 0x10
mov eax, dword [esi + 0x118]
mov ecx, dword [esi + 0x11c]
mov edi, 0xa1d780ac
mov edx, dword [esi + 0x64]
nop dword [eax + eax]
cmp edi, 0xa1d780ac
je 0x40a322
cmp edi, 0x55d7efca
jne 0x40a310
jmp 0x40a329
mov edi, 0x55d7efca
jmp 0x40a310
mov dword [esi + 0x20], edx
push ecx
push eax
push ebx
push dword [esi + 0x20]
push dword [esi + 0x18]
call fcn.00417ab0
add esp, 0x14
or edx, eax
je 0x40a5fa
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x1308], 8
lea ecx, [esi + 0x140]
call fcn.00417d90
mov ecx, dword [esi + 0xd8]
mov edi, dword [esi + 0x124]
mov eax, ecx
mul dword [esi + 0x120]
imul edi, ecx
add edx, edi
mov dword [esi + 0x118], eax
mov dword [esi + 0x11c], edx
mov edi, dword [esi + 0xd4]
mov ebx, edi
xor ebx, 0xfffffff7
mov ecx, dword [esi + 0xa4]
mov dword [esi + 0x48], ecx
mov ecx, dword [esi + 0xa8]
mov dword [esi + 0x4c], ecx
test ebx, edi
mov ebx, eax
je 0x40a13b
cmp ebx, dword [esi + 0xc8]
mov edi, edx
sbb edi, dword [esi + 0xcc]
jb 0x40a13b
mov eax, dword [esi + 0x48]
mov dword [esi + 0x118], eax
mov eax, dword [esi + 0x4c]
mov dword [esi + 0x11c], eax
lea eax, [ebp + 8]
mov edi, dword [esi + 0x1c]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xffffffef
test ecx, eax
je 0x40a66f
mov ecx, 0xa1d780ac
mov eax, dword [esi + 0x64]
cmp ecx, 0xa1d780ac
je 0x40a400
cmp ecx, 0x55d7efca
jne 0x40a3ee
jmp 0x40a407
mov ecx, 0x55d7efca
jmp 0x40a3ee
mov dword [esi + 0x20], eax
lea eax, [esi + 0x20]
push eax
push edi
push dword [esi + 0x20]
call fcn.00417ed0
add esp, 0xc
movdqu xmm0, xmmword [esi + 0x20]
movdqu xmm1, xmmword [esi + 0x108]
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x40a66b
mov edx, 0x77a7fef1
mov eax, 0x69b2cf1f
jmp 0x40a450
mov edx, 0x1141b8f2
nop dword [eax + eax]
cmp edx, 0x297089a0
jle 0x40a480
cmp edx, 0x72a74c10
jg 0x40a4c9
cmp edx, 0x297089a1
je 0x40a446
cmp edx, 0x69b2cf1f
jne 0x40a450
mov edx, dword [esi + 0x38]
mov dword [esi + 0x30], edx
mov edx, 0xb91441ef
jmp 0x40a450
cmp edx, 0xd1a63e20
jg 0x40a4f9
cmp edx, 0xb91441ef
je 0x40a50e
cmp edx, 0xbe3768c0
jne 0x40a450
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x38]
mov edi, 0x54c50fe2
nop word cs:[eax + eax]
cmp edi, 0x54c50fe2
je 0x40a4c2
cmp edi, 0x928e2591
jne 0x40a4b0
jmp 0x40a539
mov edi, 0x928e2591
jmp 0x40a4b0
cmp edx, 0x72a74c11
je 0x40a550
cmp edx, 0x77a7fef1
jne 0x40a450
lea edx, [esi + 0x88]
mov dword [esi + 0x38], edx
mov edx, dword [esi + 0x38]
mov dword [esi + 0x84], edx
mov edx, 0xbe3768c0
jmp 0x40a450
cmp edx, 0xd1a63e21
jne 0x40a56a
mov dword [esi + 0xc], ecx
mov edx, 0x297089a1
jmp 0x40a450
mov ecx, dword [esi + 0x30]
mov ecx, dword [ecx]
mov edx, 0x294ecc22
nop dword [eax + eax]
cmp edx, 0x294ecc22
je 0x40a532
cmp edx, 0xe8f71294
jne 0x40a520
jmp 0x40a55a
mov edx, 0xe8f71294
jmp 0x40a520
mov dword [esi + 0x10], edx
mov edx, dword [esi + 0x10]
cmp dword [edx + 0x14], 8
mov edx, 0xd1a63e21
cmovae edx, eax
jmp 0x40a450
mov edx, 0xd1a63e21
jmp 0x40a450
mov dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x10]
mov edx, 0x72a74c11
jmp 0x40a450
cmp edx, 0x1141b8f2
jne 0x40a450
mov edi, dword [esi + 0xc]
call sub.KERNEL32.dll_GetCurrentThreadId
lea ecx, [esi + 0x50]
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
mov dword [esi + 0xc], ecx
mov ecx, 0xd8210750
cmp ecx, 0xd8210750
je 0x40a5a4
cmp ecx, 0xfa573f0b
jne 0x40a58f
jmp 0x40a64a
mov ecx, 0xfa573f0b
jmp 0x40a58f
call sub.KERNEL32.dll_GetCurrentThreadId
lea ecx, [esi + 0x58]
mov dword [esi + 0xc], ecx
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x10], ecx
mov ecx, 0xd8210750
cmp ecx, 0xd8210750
je 0x40a5d3
cmp ecx, 0xfa573f0b
jne 0x40a5c1
jmp 0x40a5da
mov ecx, 0xfa573f0b
jmp 0x40a5c1
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x20]
mov dword [eax], ecx
mov eax, dword [esi + 0xc]
push dword [esi + 0x58]
push str.ERROR___d_:__ReadFile___returned_zero..._quit__wtf__n
call fcn.004015c0
add esp, 8
jmp 0x40a66f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
call sub.KERNEL32.dll_GetCurrentThreadId
lea ecx, [esi + 0x54]
mov dword [esi + 0xc], ecx
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x10], ecx
mov ecx, 0xd8210750
cmp ecx, 0xd8210750
je 0x40a62a
cmp ecx, 0xfa573f0b
jne 0x40a618
jmp 0x40a631
mov ecx, 0xfa573f0b
jmp 0x40a618
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x20]
mov dword [eax], ecx
mov eax, dword [esi + 0xc]
push edi
push dword [esi + 0x54]
push str.ERROR___d_:__fs_write_error:__d__n
jmp 0x40a661
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov dword [eax], ecx
mov eax, dword [esi + 0x30]
push edi
push dword [esi + 0x50]
push str.ERROR___d_:__ERROR_HASH_SUM_NOT_EQUAL__s__call_to_support_please.__n
call fcn.004015c0
add esp, 0xc
jmp 0x40a66f
mov byte [esi + 0x17], 1
push dword [esi + 0xa8]
push dword [esi + 0xa4]
push dword [esi + 0x18]
call fcn.004170e0
add esp, 0xc
mov eax, 0xc9df67d4
nop dword [eax + eax]
cmp eax, 0xc9df67d4
je 0x40a6a0
cmp eax, 0x66417e1e
jne 0x40a690
jmp 0x40a6a7
mov eax, 0x66417e1e
jmp 0x40a690
lea eax, [esi + 0x140]
mov dword [esi + 0x20], eax
mov ecx, dword [esi + 0x20]
call fcn.00419fc0
lea ecx, [esi + 0x64]
call fcn.004180a0
lea ecx, [esi + 0x3c]
call fcn.004180a0
jmp 0x409967