Function at 0x40d1c0
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1cb0
call fcn.00412a20
mov dword [esp + 0x1c9c], 0
mov dword [esp + 0x1c98], 0
mov dword [esp + 0x1c94], 0
mov dword [esp + 0x1c90], 0
mov dword [esp + 0x1c8c], 0
mov dword [esp + 0x1c88], 0
mov dword [esp + 0x1c84], 0
mov dword [esp + 0x1c80], 0
mov dword [esp + 0x1c7c], 0
mov dword [esp + 0x1c78], 0
mov dword [esp + 0x1c74], 0
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c68], 0
mov dword [esp + 0x1c64], 0
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c5c], 0
mov dword [esp + 0x1c58], 0
mov dword [esp + 0x1c1c], 0
lea eax, [esp + 0x1a12]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x1808]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea ebx, [esp + 0x11ea]
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea edi, [esp + 0xdd6]
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea esi, [esp + 0x5ae]
mov dword [esp], esi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.004128b0
lea eax, [esp + 0xd2]
mov dword [esp], eax
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
call fcn.004128b0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov word [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0xffffffff
call fcn.0040ce60
mov dword [esp + 0x1ca4], eax
mov dword [esp + 0x54], 0x92ee6d17
jmp 0x40d560
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x95f961cb
nop
nop
mov eax, dword [esp + 0x54]
cmp eax, 0x7d5bd9c2
jg 0x40d5b0
cmp eax, 0x78f34e79
jg 0x40d5c0
cmp eax, 0x6b85dfde
jg 0x40d5d1
cmp eax, 0x60321440
jg 0x40d5dd
cmp eax, 0x82d143db
jg 0x40d609
cmp eax, 0x814eb891
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0xbc14aa19
jmp 0x40d560
cmp eax, 0x7d5bd9c3
jne 0x40d560
jmp 0x40d543
cmp eax, 0x78f34e7a
jne 0x40d560
mov dword [esp + 0x54], 0xecb07757
jmp 0x40d560
cmp eax, 0x6b85dfdf
jne 0x40d560
jmp 0x40fd49
cmp eax, 0x60321441
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0xdd01f6d5
jmp 0x40d560
cmp eax, 0x83eb3388
jg 0x40d639
cmp eax, 0x82d143dc
jne 0x40d560
mov al, byte [esp + 0x1ca8]
test al, al
mov eax, 0xddc3cceb
jne 0x40d630
mov eax, 0xcb0f9581
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x8a0a8d88
jg 0x40d658
cmp eax, 0x83eb3389
jne 0x40d560
mov dword [esp + 0x54], 0xd5e93c0e
jmp 0x40d560
cmp eax, 0x8ae3ef85
jg 0x40d68a
cmp eax, 0x8a0a8d89
jne 0x40d560
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0x5c80f6f5
jmp 0x40d560
cmp eax, 0x5c80f6f4
jg 0x40d8de
cmp eax, 0x5bef27e0
jg 0x40d912
cmp eax, 0x5a3a39b9
jg 0x40d93d
cmp eax, 0x57a38b81
jg 0x40d965
cmp eax, 0x55e25d27
jg 0x40d9fe
cmp eax, 0x511cf23a
jg 0x40da5c
cmp eax, 0x4fba736f
jg 0x40daa5
cmp eax, 0x4d45f18f
jg 0x40dadf
cmp eax, 0x4c9b360e
jg 0x40daf7
cmp eax, 0x4c5ed9f9
jg 0x40db23
cmp eax, 0x4aaae125
jg 0x40db30
cmp eax, 0x3da86ba8
jg 0x40db5c
cmp eax, 0x311ca2c7
jg 0x40db74
cmp eax, 0x2382cba9
jg 0x40dcdf
cmp eax, 0x1f20f4cf
jg 0x40dd6a
cmp eax, 0x15de3493
jg 0x40dd82
cmp eax, 0x13e10733
jg 0x40dd9a
cmp eax, 0x4680771
jg 0x40ddaa
cmp eax, 0xff2f29a7
jg 0x40ddc2
cmp eax, 0xfac9db3d
jg 0x40ddeb
cmp eax, 0xf602a837
jg 0x40de13
cmp eax, 0xf1b1eb69
jg 0x40de2b
cmp eax, 0xf16a51c8
jg 0x40de43
cmp eax, 0xef1c6bbb
jg 0x40df4d
cmp eax, 0xed55428a
jg 0x40eb7d
cmp eax, 0xecb07756
jg 0x40ebcf
cmp eax, 0xe7b93fb4
jg 0x40f84e
cmp eax, 0xe535a6f7
jg 0x40f866
cmp eax, 0xe44f7cbd
jg 0x40f87e
cmp eax, 0xdeb20c7c
jg 0x40f902
cmp eax, 0xddc3ccea
jg 0x40f932
cmp eax, 0xdd01f6d4
jg 0x40f95d
cmp eax, 0xd85a0ba3
jg 0x40f989
cmp eax, 0xd5e93c0d
jg 0x40f9ae
cmp eax, 0xd450404a
jg 0x40fa0b
cmp eax, 0xcb0f9580
jg 0x40fa36
cmp eax, 0xc3e1575b
jg 0x40fa59
cmp eax, 0xbd946796
jg 0x40fb23
cmp eax, 0xbc14aa18
jg 0x40fb4f
cmp eax, 0xbaffc780
jg 0x40fb7b
cmp eax, 0xb76187d1
jg 0x40fba4
cmp eax, 0x9fb42320
jg 0x40fc41
cmp eax, 0x9eca5ba3
jg 0x40fc82
cmp eax, 0x9c7f83c3
jg 0x40fce5
cmp eax, 0x9c29e469
jg 0x40fcfd
cmp eax, 0x996656ee
jg 0x40fd15
cmp eax, 0x9791aa18
jg 0x40fd3e
cmp eax, 0x95f961ca
jg 0x40fd61
cmp eax, 0x92ee6d16
jg 0x40fd89
cmp eax, 0x8e8cc8a1
jg 0x40fdb1
cmp eax, 0x8e360c96
jg 0x40fdc9
cmp eax, 0x8ae3ef86
je 0x40fdf1
cmp eax, 0x8b0c7780
jne 0x40fec6
mov dword [esp + 0x54], 0x8b405192
jmp 0x40d560
cmp eax, 0x5c80f6f5
jne 0x40d560
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
call fcn.0040d1a0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1ca0], eax
mov dword [esp + 0x54], 0x13e10734
jmp 0x40d560
cmp eax, 0x5bef27e1
jne 0x40d560
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0xd450404b
jmp 0x40d560
cmp eax, 0x5a3a39ba
jne 0x40d560
mov eax, 0x8ae3ef86
cmp dword [esp + 0x1c94], 0
je 0x40d95c
mov eax, 0x78f34e7a
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x57a38b82
jne 0x40d560
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403260
mov dword [esp + 0x64], eax
mov ecx, 4
sub ecx, eax
add ecx, ecx
neg ecx
mov word [esp + ecx + 0xfe0], 0
mov dword [esp + 0xc], ebx
lea ebx, [esp + 0x11ea]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
test eax, eax
setne byte [esp + 0x1ca8]
mov dword [esp + 0x54], 0x82d143dc
jmp 0x40d560
cmp eax, 0x55e25d28
jne 0x40d560
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
call ebx
sub esp, 8
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call ebx
sub esp, 8
test eax, eax
mov eax, 0xf1b1eb6a
jne 0x40da4c
mov eax, 0xc3e1575c
mov dword [esp + 0x54], eax
lea ebx, [esp + 0x11ea]
jmp 0x40d560
cmp eax, 0x511cf23b
jne 0x40d560
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402e00
mov dword [esp + 0x78], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.0040c500
test eax, eax
mov eax, 0x8e8cc8a2
jne 0x40da9c
mov eax, 0xd85a0ba4
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x4fba7370
jne 0x40d560
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
test eax, eax
sete byte [esp + 0x1ca9]
mov dword [esp + 0x54], 0xff2f29a8
jmp 0x40d560
cmp eax, 0x4d45f190
jne 0x40d560
mov dword [esp + 0x54], 0xdd01f6d5
jmp 0x40d560
cmp eax, 0x4c9b360f
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0xbd946797
jmp 0x40d560
cmp eax, 0x4c5ed9fa
jne 0x40d560
jmp 0x40db3b
cmp eax, 0x4aaae126
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x3da86ba9
jne 0x40d560
mov dword [esp + 0x54], 0xbd946797
jmp 0x40d560
cmp eax, 0x311ca2c8
jne 0x40d560
mov dword [esp + 0x1c58], 0x3c
mov dword [esp + 0x1c5c], 0x40
mov dword [esp + 0x1c60], 0
mov dword [esp + 0x1c64], 0x47f2f4
mov dword [esp + 0x1c70], 0
mov dword [esp + 0x1c78], 0
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x47f2fe
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov dword [esp], ebx
call fcn.00403450
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3aa]
mov dword [esp], eax
mov dword [esp + 4], 0x101
call fcn.00402fb0
mov eax, dword [0x41c154]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, 0x7af1908b
sub ecx, eax
mov eax, 0x7af1908c
sub eax, ecx
mov ecx, dword [0x41c154]
movzx eax, word [ecx + eax*2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c154]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1808]
mov dword [esp], eax
call fcn.004027e0
lea eax, [esp + 0xfe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov ecx, 0x4d45f190
test eax, eax
je 0x40dcd6
mov ecx, 0x83eb3389
mov dword [esp + 0x54], ecx
jmp 0x40d560
cmp eax, 0x2382cbaa
jne 0x40d560
mov dword [esp + 8], esi
lea eax, [esp + 0x7b8]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x104
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00403b10
lea eax, [esp + 0x15fe]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x6c], eax
mov dword [esp], 0
call fcn.0040ff00
mov dword [esp + 0x50], eax
call fcn.00401ed0
imul eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00412a6e
mov dword [esp + 0x54], 0xf16a51c9
jmp 0x40d560
cmp eax, 0x1f20f4d0
jne 0x40d560
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x15de3494
jne 0x40d560
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x13e10734
jne 0x40d560
jmp 0x40fef1
cmp eax, 0x4680772
jne 0x40d560
mov dword [esp + 0x54], 0x8ae3ef86
jmp 0x40d560
cmp eax, 0xff2f29a8
jne 0x40d560
mov al, byte [esp + 0x1ca9]
test al, al
mov eax, 0xf16a51c9
jne 0x40dde2
mov eax, 0x4680772
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xfac9db3e
jne 0x40d560
mov eax, 0x7d5bd9c3
cmp dword [esp + 0x1c98], 0
jne 0x40de0a
mov eax, 0x95f961cb
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xf602a838
jne 0x40d560
mov dword [esp + 0x54], 0x4fba7370
jmp 0x40d560
cmp eax, 0xf1b1eb6a
jne 0x40d560
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0xf16a51c9
jne 0x40d560
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
mov dword [esp], edi
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
lea eax, [esp + 0xfe0]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404560
lea eax, [esp + 0xfe0]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0xdd6]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xfe0]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00402fb0
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x58]
mov edx, 0xd783bfa8
sub edx, eax
sub edx, ecx
add edx, 0x287c415c
lea eax, [esp + eax*2 + 0xdd6]
lea eax, [eax + ecx*2]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00402fb0
mov dword [esp + 0x54], 0xf602a838
jmp 0x40d560
cmp eax, 0xef1c6bbc
jne 0x40d560
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469760]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c50]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469764]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469774]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469744]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469784]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469788]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469794]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46978c]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469790]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46978c]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469790]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x469910]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46990c]
sub esp, 4
call fcn.00412a4b
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffff0
and eax, 0xf
add eax, edx
xor ecx, eax
and ecx, eax
lea eax, [esp + 0xd2]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov ecx, 0x8670824a
sub ecx, eax
mov edx, 0x8670824b
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x4855b7a7
and eax, 0xb7aa4858
add eax, edx
xor eax, 0xb7aa4859
xor ecx, eax
and ecx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov ecx, 0x23de8373
sub ecx, eax
mov edx, 0x23de8374
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd5d68f9a
and eax, 0x2a297065
add eax, edx
xor eax, 0xd5d68f9f
or eax, ecx
not eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffff3
and eax, 0xc
add eax, edx
not eax
or eax, ecx
not eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov eax, dword [0x41c134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, 0xf39755c4
sub ecx, eax
mov eax, 0x7f5657b4
sub eax, ecx
mov ecx, dword [0x41c134]
movzx eax, byte [eax + ecx + 0x7440fe11]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004023f0
mov eax, dword [0x46976c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x46979c]
mov ecx, dword [0x46974c]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x469900]
sub esp, 0x10
mov eax, dword [0x469768]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469748]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4698f8]
sub esp, 0xc
mov eax, dword [0x469798]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4698f4]
sub esp, 0x10
mov eax, dword [0x469770]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
call fcn.00412a4b
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41c138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, 0x606f9b5
sub ecx, eax
mov eax, 0x606f9b6
sub eax, ecx
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov dword [esp], eax
call fcn.004027e0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov ecx, 0xb7b9566e
sub ecx, eax
mov edx, 0xea42bc08
sub edx, ecx
mov ecx, 0x3289669e
sub ecx, edx
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00402fb0
mov eax, dword [0x41c14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41c14c]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004023f0
mov eax, dword [0x469778]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469758]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469754]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469790]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x88]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4698f4]
sub esp, 0x10
mov eax, dword [0x46977c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x47f2f0
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [0x41c150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41c150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c150]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.004027e0
mov eax, dword [0x469780]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x46975c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x469914]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404880
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x469954]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
mov dword [esp + 0x54], 0xecb07757
jmp 0x40d560
cmp eax, 0xed55428b
jne 0x40d560
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x469924]
sub esp, 4
mov dword [esp + 0x54], 0xd5e93c0e
jmp 0x40d560
cmp eax, 0xecb07757
jne 0x40d560
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 1
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469760]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c50]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469764]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469774]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469744]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469784]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469750]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469788]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469794]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46978c]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469790]
mov dword [esp + 0x50], eax
mov ecx, dword [0x46978c]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
call dword [0x469910]
sub esp, 0x18
mov eax, dword [0x469790]
mov dword [esp + 0x50], eax
mov ecx, dword [0x469778]
mov edx, dword [esp + 0x1c94]
lea eax, [esp + 0x1c34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
call dword [0x469910]
sub esp, 0x18
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x46990c]
sub esp, 4
call fcn.00412a4b
mov ecx, eax
not ecx
and eax, 0xaa5c8132
mov edx, ecx
and edx, 0x55a37ecd
add edx, eax
xor edx, 0x55a37ec2
and ecx, 0xfffffff0
or ecx, edx
not ecx
and ecx, ecx
lea eax, [esp + 0xd2]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
lea ecx, [eax + 1]
mov dword [esp + 0x78], ecx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
and ecx, 0xfffffffe
xor eax, 1
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x5b016b37
and eax, 0xa4fe94c8
add eax, ecx
xor eax, 0xa4fe94c8
and eax, eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov ecx, eax
neg ecx
mov edx, 1
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
and ecx, 0x19ef278
and eax, 0xfe610d87
add eax, ecx
mov ecx, eax
xor ecx, 0xfe610d87
xor eax, 0x183020
and eax, 0xe1838a4
mov edx, ecx
and edx, 0xf1e7c75b
add edx, eax
xor edx, 0xf1e7c75e
and ecx, 0xfffffffa
or ecx, edx
not ecx
and ecx, ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov ecx, 0x702fcd44
sub ecx, eax
mov edx, 0x702fcd45
sub edx, ecx
mov dword [esp + 0x78], edx
mov word [esp + eax*2 + 0xd2], 0x2e
mov eax, dword [esp + 0x78]
lea eax, [esp + eax*2 + 0xd2]
mov dword [esp + 0x50], eax
call fcn.00412a4b
mov ecx, eax
not ecx
and eax, 0x86577bda
mov edx, ecx
and edx, 0x79a88425
add edx, eax
xor edx, 0x79a88429
and ecx, 0xfffffff3
or ecx, edx
mov eax, ecx
not eax
and eax, 0x67a459e0
and ecx, 0x985ba61f
add ecx, eax
xor ecx, 0x985ba61f
and ecx, ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.00413400
lea eax, [esp + 0xd2]
mov dword [esp], eax
call fcn.00403450
mov dword [esp + 0x78], eax
mov eax, dword [0x41c134]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41c134]
movzx eax, byte [eax + ecx + 1]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c134]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004023f0
mov eax, dword [0x46976c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c30], eax
mov eax, dword [0x46979c]
mov ecx, dword [0x46974c]
mov edx, dword [esp + 0x1c94]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 0
call dword [0x469900]
sub esp, 0x10
mov eax, dword [0x469768]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xd2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x13f4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469748]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 1
call dword [0x4698f8]
sub esp, 0xc
mov eax, dword [0x469798]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4698f4]
sub esp, 0x10
mov eax, dword [0x469770]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c2c], eax
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c48]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c40]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c2c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c50]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c4c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
call fcn.00412a4b
mov ecx, eax
mov edx, 0xcccccccd
mul edx
shr edx, 2
lea eax, [edx + edx*4]
sub ecx, eax
mov eax, dword [ecx*4 + 0x41c138]
mov dword [esp + 0x1c1c], eax
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1c1c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x1c1c]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x1a12]
mov dword [esp], eax
call fcn.004027e0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov ecx, 0xea68746e
sub ecx, eax
mov edx, 0xd05a5189
sub edx, ecx
mov ecx, 0xe5f1de1f
sub ecx, edx
lea eax, [esp + eax*2 + 0xbcc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 8], str..exe
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1a12]
mov dword [esp + 8], eax
lea eax, [esp + 0x9c2]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov eax, dword [esp + 0x74]
mov ecx, 0x104
sub ecx, eax
lea eax, [esp + eax*2 + 0x9c2]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str.32.exe
call fcn.00402fb0
mov eax, dword [0x41c14c]
movzx eax, byte [eax]
mov dword [esp + 0x74], eax
neg eax
mov ecx, 0x71c6d716
sub ecx, eax
mov eax, dword [0x41c14c]
movzx eax, byte [ecx + eax - 0x71c6d715]
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c14c]
mov edx, dword [esp + 0x74]
lea edx, [ecx + edx + 2]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
lea eax, [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004023f0
mov eax, dword [0x469778]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c28], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xbcc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469758]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x9c2]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469754]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], str.Microsoft
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x469790]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0x88]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], 0x10
call dword [0x4698f4]
sub esp, 0x10
mov eax, dword [0x46977c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c24], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0x47f2f0
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [esp + 0x1c24]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [0x41c150]
movzx eax, word [eax]
mov dword [esp + 0x74], eax
mov ecx, dword [0x41c150]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x70], eax
mov ecx, dword [0x41c150]
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x50], eax
add ecx, 2
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0xa8]
mov dword [esp], eax
call fcn.004027e0
mov eax, dword [0x469780]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469908]
sub esp, 8
mov dword [esp + 0x1c20], eax
mov eax, dword [0x469750]
mov ecx, dword [esp + 0x1c94]
lea edx, [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [0x46975c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698fc]
sub esp, 0xc
mov eax, dword [esp + 0x1c20]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c28]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c34]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c54]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c38]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c3c]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698f0]
sub esp, 8
mov eax, dword [esp + 0x1c44]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x4698ec]
sub esp, 8
mov eax, dword [esp + 0x1c30]
mov ecx, dword [esp + 0x1c94]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [0x469904]
sub esp, 8
mov eax, dword [esp + 0x1c94]
mov dword [esp], eax
call dword [0x469914]
sub esp, 4
lea eax, [esp + 0x19a]
mov dword [esp], eax
mov dword [esp + 4], 0x20a
call fcn.00404880
lea eax, [esp + 0x19a]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x469954]
sub esp, 0xc
mov dword [esp + 0x1c9c], eax
test eax, eax
sete byte [esp + 0x1caa]
mov dword [esp + 0x54], 0xbaffc781
jmp 0x40d560
cmp eax, 0xe7b93fb5
jne 0x40d560
mov dword [esp + 0x54], 0xd450404b
jmp 0x40d560
cmp eax, 0xe535a6f8
jne 0x40d560
mov dword [esp + 0x54], 0xbc14aa19
jmp 0x40d560
cmp eax, 0xe44f7cbe
jne 0x40d560
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x7b8]
mov dword [esp + 8], eax
lea eax, [esp + 0xfe0]
mov ebx, eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00403260
mov dword [esp + 0x64], eax
mov word [esp + eax*2 + 0xfd8], 0
mov dword [esp + 0xc], ebx
lea ebx, [esp + 0x11ea]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
sub esp, 0x10
mov dword [esp + 0x1c98], eax
mov dword [esp + 0x54], 0x57a38b82
jmp 0x40d560
cmp eax, 0xdeb20c7d
jne 0x40d560
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 8], 1
call dword [sym.imp.KERNEL32.dll_CopyFileW]
sub esp, 0xc
mov dword [esp + 0x54], 0x4fba7370
jmp 0x40d560
cmp eax, 0xddc3cceb
jne 0x40d560
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
mov eax, 0xe7b93fb5
je 0x40f954
mov eax, 0x8b405192
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xdd01f6d5
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0x9c29e46a
jmp 0x40d560
cmp eax, 0xd85a0ba4
jne 0x40d560
mov eax, 0x6b85dfdf
cmp dword [esp + 0x60], 6
jb 0x40f9a5
mov eax, 0x2382cbaa
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xd5e93c0e
jne 0x40d560
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x469924]
sub esp, 4
cmp eax, 1
setne byte [esp + 0x1cab]
mov dword [esp + 0x54], 0x996656ef
jmp 0x40d560
cmp eax, 0xd450404b
jne 0x40d560
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
sub esp, 4
mov dword [esp + 0x54], 0x8b0c7780
jmp 0x40d560
cmp eax, 0xcb0f9581
jne 0x40d560
mov dword [esp + 0x1ca0], 0
mov dword [esp + 0x54], 0x13e10734
jmp 0x40d560
cmp eax, 0xc3e1575c
jne 0x40d560
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
lea eax, [esp + 0x3a4]
mov dword [esp], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], str._q__u
mov dword [esp + 4], 0x104
call fcn.00402fb0
mov dword [esp], ebx
call fcn.00403450
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
lea eax, [esp + 0x3b0]
mov dword [esp], eax
mov dword [esp + 4], 0xfe
call fcn.00402fb0
lea eax, [esp + 0x1808]
mov dword [esp + 0x1c68], eax
lea eax, [esp + 0x3a4]
mov dword [esp + 0x1c6c], eax
mov dword [esp + 0x1c74], 0
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x469924]
sub esp, 4
cmp eax, 1
mov eax, 0x15de3494
jne 0x40fb1a
mov eax, 0x9eca5ba4
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xbd946797
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0x9c7f83c4
jmp 0x40d560
cmp eax, 0xbc14aa19
jne 0x40d560
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 4
mov dword [esp], esi
call fcn.0040c420
mov dword [esp + 0x54], 0x1f20f4d0
jmp 0x40d560
cmp eax, 0xbaffc781
jne 0x40d560
mov al, byte [esp + 0x1caa]
test al, al
mov eax, 0x4c5ed9fa
jne 0x40fb9b
mov eax, 0x9fb42321
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0xb76187d2
jne 0x40d560
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x469920]
sub esp, 0x10
lea eax, [esp + 0xbcc]
mov dword [esp + 0x1c68], eax
mov dword [esp + 0x1c6c], 0
mov dword [esp + 0x1c74], 1
lea eax, [esp + 0x1c58]
mov dword [esp], eax
call dword [0x469924]
sub esp, 4
cmp eax, 1
mov eax, 0xe535a6f8
jne 0x40fc38
mov eax, 0x55e25d28
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x9fb42321
jne 0x40d560
mov eax, dword [esp + 0x1c9c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0x68], eax
mov ecx, 0x8e360c97
test eax, eax
jne 0x40fc79
mov ecx, 0x311ca2c8
mov dword [esp + 0x54], ecx
jmp 0x40d560
cmp eax, 0x9eca5ba4
jne 0x40d560
mov eax, dword [esp + 0x1c90]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [0x469920]
sub esp, 0x10
mov dword [esp + 0x5c], 1
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x9c7f83c4
jne 0x40d560
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x9c29e46a
jne 0x40d560
mov dword [esp + 0x54], 0xfac9db3e
jmp 0x40d560
cmp eax, 0x996656ef
jne 0x40d560
mov al, byte [esp + 0x1cab]
test al, al
mov eax, 0x4aaae126
jne 0x40fd35
mov eax, 0xb76187d2
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x9791aa19
jne 0x40d560
mov dword [esp + 0x1ca0], 0xffffffff
mov dword [esp + 0x54], 0x13e10734
jmp 0x40d560
cmp eax, 0x95f961cb
jne 0x40d560
mov eax, 0x8a0a8d89
cmp dword [esp + 0x1c9c], 0
jne 0x40fd80
mov eax, 0x5c80f6f5
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x92ee6d17
jne 0x40d560
mov eax, 0x9791aa19
cmp dword [esp + 0x1ca4], 0
js 0x40fda8
mov eax, 0x511cf23b
mov dword [esp + 0x54], eax
jmp 0x40d560
cmp eax, 0x8e8cc8a2
jne 0x40d560
mov dword [esp + 0x54], 0x57a38b82
jmp 0x40d560
cmp eax, 0x8e360c97
jne 0x40d560
mov eax, 0x3da86ba9
cmp dword [esp + 0x68], 0x80
jne 0x40fde8
mov eax, 0x311ca2c8
mov dword [esp + 0x54], eax
jmp 0x40d560
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
mov dword [esp], ebx
mov dword [esp + 8], 0x20a
mov dword [esp + 4], 0
call fcn.00402d40
lea eax, [esp + 0x13f4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
call fcn.00404560
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x15fe]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], 0x104
call fcn.00402fb0
lea eax, [esp + 0x13f4]
mov dword [esp], eax
call fcn.00403450
mov ecx, dword [esp + 0x6c]
mov edx, 0x104
sub edx, ecx
lea ecx, [esp + ecx*2 + 0x11ea]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x13f4]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00402fb0
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [0x46991c]
sub esp, 8
mov dword [esp + 0x1c94], eax
mov dword [esp + 0x54], 0x5a3a39ba
jmp 0x40d560
cmp eax, 0x8b405192
jne 0x40d560
mov eax, dword [esp + 0x1c98]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x54], 0xcb0f9581
jmp 0x40d560
mov eax, dword [esp + 0x1ca0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret