Function at 0x4276d0
Capabilities:
Check for time delay via gettickcount
Copy file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x450ad6
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x4612b0]
xor eax, esp
mov dword [esp + 0x258], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4612b0]
xor eax, esp
push eax
lea eax, [esp + 0x270]
mov dword fs:[0], eax
mov eax, dword [esp + 0x280]
mov dword [esp + 0x20], eax
mov dword [esp + 0x278], 0
mov edx, dword [esp + 0x29c]
mov eax, dword [esp + 0x288]
cmp edx, 0x10
jb 0x42787d
mov esi, eax
test eax, eax
je 0x427769
mov ecx, eax
cmp edx, 0x10
jae 0x42774c
lea ecx, [esp + 0x288]
cmp ecx, esi
ja 0x427769
cmp edx, 0x10
jae 0x42775c
lea eax, [esp + 0x288]
mov ecx, dword [esp + 0x298]
add ecx, eax
cmp esi, ecx
jbe 0x42776e
call fcn.004392c0
lea eax, [esp + 0x284]
mov ebp, eax
mov ebx, esi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push 0
shr esi, 0x18
call fcn.0043a6c4
imul eax, eax, 0x63
add esp, 4
cmp esi, eax
jbe 0x4277aa
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
call fcn.00419db0
mov edx, dword [esp + 0x29c]
mov esi, dword [esp + 0x288]
mov eax, esi
cmp edx, 0x10
jae 0x4277c6
lea eax, [esp + 0x288]
mov ecx, dword [esp + 0x298]
add eax, ecx
mov dword [esp + 0x18], eax
je 0x4277ff
mov eax, esi
cmp edx, 0x10
jae 0x4277e3
lea eax, [esp + 0x288]
cmp eax, dword [esp + 0x18]
ja 0x4277ff
mov eax, esi
cmp edx, 0x10
jae 0x4277f7
lea eax, [esp + 0x288]
add ecx, eax
cmp dword [esp + 0x18], ecx
jbe 0x427804
call fcn.004392c0
mov dword [esp + 0x1c], 0
lea esp, [esp]
lea esi, [esp + 0x74]
call fcn.0040f4b0
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x288]
push eax
push ebx
push ebp
push 0
push 0x100
lea eax, [esp + 0x3c]
push eax
sub esp, 0x1c
mov byte [esp + 0x2b0], 1
mov esi, esp
mov dword [esp + 0x78], esp
push 0x2f
mov ecx, str._http:_
call fcn.00404200
lea esi, [esp + 0x17c]
call fcn.004016b0
mov byte [esp + 0x294], 2
call fcn.00401ad0
mov byte [esp + 0x290], 3
cmp dword [eax + 0x18], 0x10
jb 0x427889
mov eax, dword [eax + 4]
jmp 0x42788c
lea esi, [esp + 0x288]
jmp 0x42773e
add eax, 4
push eax
lea ecx, [esp + 0xf8]
push ecx
call fcn.0040f570
push eax
lea edx, [esp + 0x8c]
push edx
mov byte [esp + 0x294], 4
call fcn.0042dc60
movzx edi, al
add esp, 0x1c
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x27c], 3
call fcn.0040f660
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea esi, [esp + 0x144]
call fcn.00429e20
test edi, edi
je 0x427d33
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 2
je 0x4278fd
sub eax, 2
je 0x4278fd
sub eax, 4
jne 0x427903
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x278], 1
mov ecx, dword [esp + 0x8c]
sub ecx, dword [esp + 0x88]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea esi, [esp + 0x74]
cmp ecx, 4
jne 0x427ce2
lea edi, [ecx - 3]
call fcn.0040f500
lea ecx, [esp + 0x58]
call fcn.0040f550
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x200]
mov byte [esp + 0x27c], 7
call fcn.00402ba0
lea ecx, [esp + 0x58]
mov byte [esp + 0x278], 9
call fcn.00402bd0
call fcn.004174a0
test eax, eax
je 0x427988
call fcn.00419e60
call fcn.00419840
mov edi, 2
lea esi, [esp + 0x74]
call fcn.0040f500
lea ecx, [esp + 0x24]
call fcn.0040f550
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x21c]
mov byte [esp + 0x27c], 0xa
call fcn.00402ba0
lea ecx, [esp + 0x24]
mov byte [esp + 0x278], 0xc
call fcn.00402bd0
call fcn.00417640
test eax, eax
je 0x4279d7
call fcn.00419f30
mov edi, 3
lea esi, [esp + 0x74]
call fcn.0040f500
lea ecx, [esp + 0x58]
call fcn.0040f550
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x238]
mov byte [esp + 0x27c], 0xd
call fcn.00402ba0
lea ecx, [esp + 0x58]
mov byte [esp + 0x278], 0xf
call fcn.00402bd0
lea esi, [esp + 0xe4]
call fcn.0040f4b0
push 0
push 0x100
lea edx, [esp + 0x2c]
push edx
sub esp, 0x1c
mov byte [esp + 0x2a0], 0x10
mov esi, esp
mov dword [esp + 0x68], esp
push 0x1f
mov ecx, 0x457724
call fcn.00404200
lea esi, [esp + 0x16c]
call fcn.004016b0
mov byte [esp + 0x284], 0x11
call fcn.00401930
mov byte [esp + 0x280], 0x12
cmp dword [eax + 0x18], 0x10
jb 0x427a79
mov eax, dword [eax + 4]
jmp 0x427a7c
add eax, 4
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.0040f570
push eax
lea ecx, [esp + 0xec]
push ecx
lea edi, [esp + 0x208]
mov byte [esp + 0x284], 0x13
call fcn.00410430
add esp, 0xc
lea edx, [esp + 0x50]
push edx
movzx edi, al
mov byte [esp + 0x27c], 0x12
call fcn.0040f660
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea esi, [esp + 0x144]
mov byte [esp + 0x278], 0x10
call fcn.00429e20
test edi, edi
je 0x427cae
call fcn.00417430
test eax, eax
je 0x427aef
call fcn.00419f30
mov ecx, dword [esp + 0xfc]
sub ecx, dword [esp + 0xf8]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jne 0x427cae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 2
je 0x427b2c
sub eax, 2
je 0x427b2c
sub eax, 4
jne 0x427b34
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov edi, 1
lea esi, [esp + 0xe4]
mov dword [esp + 0x278], 0x10
call fcn.0040f500
lea ecx, [esp + 0x24]
call fcn.0040f550
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x254]
mov byte [esp + 0x27c], 0x16
call fcn.00402ba0
lea ecx, [esp + 0x24]
mov byte [esp + 0x278], 0x18
call fcn.00402bd0
sub esp, 0x1c
lea edx, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00402ba0
sub esp, 0x1c
mov byte [esp + 0x2b0], 0x19
lea eax, [esp + 0x250]
mov ecx, esp
mov dword [esp + 0x110], esp
push eax
call fcn.00402ba0
sub esp, 0x1c
mov byte [esp + 0x2cc], 0x1a
lea edx, [esp + 0x2a4]
mov ecx, esp
mov dword [esp + 0x98], esp
push edx
call fcn.00402ba0
sub esp, 0x1c
mov byte [esp + 0x2e8], 0x1b
lea eax, [esp + 0x26c]
mov ecx, esp
mov dword [esp + 0x84], esp
push eax
call fcn.00402ba0
mov ecx, dword [esp + 0x90]
push ecx
mov byte [esp + 0x2ec], 0x18
call fcn.00428740
call fcn.00435550
mov ecx, eax
mov eax, 0xb70fbb5b
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x166
jle 0x427c47
push 0x166
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00419840
call fcn.00419900
push 0
call fcn.0043a6c4
add esp, 4
lea eax, [esp + 0x74]
mov dword [esp + 0x278], 0x18
call fcn.0042aef0
mov edi, eax
lea eax, [esp + 0x74]
call fcn.0042ae70
add edi, eax
lea esi, [esp + 0x48]
call fcn.004037f0
mov ebp, dword [esp + 0x48]
cmp ebp, 0xfffffffc
je 0x427c98
test ebp, ebp
je 0x427c93
lea ecx, [esp + 0x284]
cmp ebp, ecx
je 0x427c98
call fcn.004392c0
mov ebx, dword [esp + 0x4c]
lea ecx, [esp + 0x250]
call fcn.00402bd0
cmp ebx, dword [esp + 0x18]
jae 0x427d03
lea esi, [esp + 0xe4]
call fcn.0040f300
lea ecx, [esp + 0x234]
call fcn.00402bd0
lea ecx, [esp + 0x218]
call fcn.00402bd0
lea ecx, [esp + 0x1fc]
call fcn.00402bd0
lea esi, [esp + 0x74]
mov byte [esp + 0x278], 0
call fcn.0040f300
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, 0x1e
jb 0x427810
jmp 0x427d44
lea esi, [esp + 0xe4]
call fcn.0040f300
lea ecx, [esp + 0x234]
call fcn.00402bd0
lea ecx, [esp + 0x218]
call fcn.00402bd0
lea ecx, [esp + 0x1fc]
call fcn.00402bd0
lea esi, [esp + 0x74]
mov byte [esp + 0x278], 0
call fcn.0040f300
lea esi, [esp + 0x19c]
call fcn.0040f4b0
push 0
push 0x100
lea edx, [esp + 0x204]
push edx
sub esp, 0x1c
mov byte [esp + 0x2a0], 0x1e
mov esi, esp
mov dword [esp + 0x3c], esp
push 0x23
mov ecx, str.__http:_
call fcn.00404200
lea esi, [esp + 0x9c]
call fcn.004016b0
mov byte [esp + 0x284], 0x1f
call fcn.00401ca0
mov edi, 0x10
mov byte [esp + 0x280], 0x20
cmp dword [eax + 0x18], edi
jb 0x427dac
mov ebp, dword [eax + 4]
jmp 0x427daf
lea ebp, [eax + 4]
mov eax, dword [esp + 0x28]
add eax, 0x1d8
push eax
lea ecx, [esp + 0x25c]
push ecx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push 3
mov ecx, 0x457768
call fcn.00404200
lea esi, [esp + 0x170]
call fcn.004016b0
mov byte [esp + 0x288], 0x21
call fcn.00401ad0
mov byte [esp + 0x284], 0x22
cmp dword [eax + 0x18], edi
jb 0x427e01
mov eax, dword [eax + 4]
jmp 0x427e04
add eax, 4
mov ecx, eax
lea edi, [esp + 0x64]
call fcn.0042dbb0
add esp, 4
push eax
mov edi, ebp
lea esi, [esp + 0x30]
mov byte [esp + 0x284], 0x23
call fcn.00405500
add esp, 4
mov bl, 0x24
mov byte [esp + 0x280], bl
cmp dword [eax + 0x18], 0x10
jb 0x427e3d
mov eax, dword [eax + 4]
jmp 0x427e40
add eax, 4
push eax
lea edx, [esp + 0x5c]
push edx
call fcn.0040f570
push eax
lea eax, [esp + 0x1a4]
push eax
lea edi, [esp + 0x290]
mov byte [esp + 0x284], 0x25
call fcn.00410430
add esp, 0xc
lea ecx, [esp + 0x50]
push ecx
movzx edi, al
mov byte [esp + 0x27c], bl
call fcn.0040f660
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea ecx, [esp + 0x58]
call fcn.00402bd0
lea ecx, [esp + 0x250]
call fcn.00402bd0
lea esi, [esp + 0x144]
call fcn.00429e20
lea ecx, [esp + 0x1fc]
call fcn.00402bd0
lea esi, [esp + 0x74]
mov byte [esp + 0x278], 0x1e
call fcn.00429e20
call fcn.00435430
test eax, eax
je 0x427ed4
call fcn.0041a0c0
test edi, edi
je 0x4286f9
mov ecx, dword [esp + 0x1b4]
sub ecx, dword [esp + 0x1b0]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jne 0x4286f9
lea edi, [eax - 1]
lea esi, [esp + 0x19c]
call fcn.0040f500
lea ecx, [esp + 0x24]
call fcn.0040f550
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x254]
mov byte [esp + 0x27c], 0x26
call fcn.00402ba0
lea ecx, [esp + 0x24]
mov byte [esp + 0x278], 0x28
call fcn.00402bd0
lea edx, [esp + 0x218]
push edx
call fcn.0042af60
mov ebp, dword [esp + 0x20]
add ebp, 0x2d8
mov byte [esp + 0x278], 0x29
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
xor esi, esi
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], esi
je 0x427fc2
jmp 0x427f90
lea ebx, [esp + 0x1c]
lea edi, [esp + 0x218]
call fcn.0042b070
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [esp + 0x1c], esi
cmp esi, ecx
jb 0x427f90
mov esi, dword [esp + 0x228]
sub esi, dword [esp + 0x224]
xor edi, edi
sar esi, 2
test esi, esi
jbe 0x428029
lea esp, [esp]
call fcn.004393a7
xor edx, edx
div esi
lea eax, [esp + 0x218]
mov ebx, edx
call fcn.0042aff0
mov esi, eax
mov ebx, edi
lea eax, [esp + 0x218]
call fcn.0042aff0
cmp eax, esi
je 0x428013
mov edx, dword [esi]
mov ecx, dword [eax]
mov dword [eax], edx
mov dword [esi], ecx
mov esi, dword [esp + 0x228]
sub esi, dword [esp + 0x224]
inc edi
sar esi, 2
cmp edi, esi
jb 0x427fe0
call fcn.00417500
sub eax, 1
jne 0x42804a
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
call fcn.00418fd0
push 0
call fcn.0043a6c4
mov dword [esp + 0x27c], 0x29
mov eax, dword [esp + 0x22c]
sub eax, dword [esp + 0x228]
add esp, 4
sar eax, 2
mov dword [esp + 0x18], 0
test eax, eax
jbe 0x4286e1
mov ebx, dword [esp + 0x18]
lea eax, [esp + 0x218]
call fcn.0042aff0
mov ecx, dword [eax]
push ecx
mov eax, ebp
call fcn.0042a990
cmp dword [eax + 0x7c], 0
je 0x4280bb
mov edx, dword [esp + 0x228]
sub edx, dword [esp + 0x224]
inc ebx
sar edx, 2
cmp ebx, edx
jb 0x428084
jmp 0x4286e1
mov eax, dword [esp + 0x20]
add eax, 0x19c
push eax
lea ecx, [esp + 0x200]
mov dword [esp + 0x1c], ebx
call fcn.00402ba0
mov ebx, 0x2c
mov byte [esp + 0x278], bl
mov eax, dword [esp + 0x210]
test eax, eax
je 0x428111
lea edi, [eax - 1]
lea eax, [esp + 0x1fc]
call fcn.00404d70
cmp byte [eax], 0x5c
je 0x428111
push 0x5c
lea eax, [ebx - 0x2b]
lea edi, [esp + 0x200]
call fcn.00412590
mov esi, 8
call fcn.004393a7
and eax, 0x80000001
jns 0x428127
dec eax
or eax, 0xfffffffe
inc eax
jne 0x42813e
call fcn.004393a7
cdq
mov ecx, 0x19
idiv ecx
movsx eax, dl
add eax, 0x61
jmp 0x428151
call fcn.004393a7
cdq
mov ecx, 0x19
idiv ecx
movsx eax, dl
add eax, 0x41
push eax
mov eax, 1
lea edi, [esp + 0x200]
call fcn.00412590
call fcn.00435460
sub esi, 1
mov dword [esp + 0x278], ebx
jne 0x428116
lea edx, [esp + 0x24]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
push 4
mov ecx, 0x45776c
call fcn.00404200
lea esi, [esp + 0x94]
call fcn.004016b0
mov byte [esp + 0x27c], 0x2f
call fcn.00401850
mov edi, 0x10
mov byte [esp + 0x278], 0x30
cmp dword [eax + 0x18], edi
jb 0x4281be
mov eax, dword [eax + 4]
jmp 0x4281c1
add eax, 4
lea ecx, [esp + 0x1fc]
push ecx
mov edx, eax
call fcn.00405730
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea esi, [esp + 0x74]
mov byte [esp + 0x278], bl
call fcn.00429e20
lea edx, [esp + 0x234]
push edx
call fcn.0042af60
mov byte [esp + 0x278], 0x31
call fcn.004173f0
test eax, eax
je 0x428211
call fcn.0041a190
call fcn.00418970
lea eax, [esp + 0x58]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
push 0xb
mov ecx, 0x457774
call fcn.00404200
lea esi, [esp + 0x94]
call fcn.004016b0
mov byte [esp + 0x27c], 0x32
call fcn.00401770
mov byte [esp + 0x278], 0x33
cmp dword [eax + 0x18], edi
jb 0x428256
mov eax, dword [eax + 4]
jmp 0x428259
add eax, 4
push eax
lea ecx, [esp + 0x28]
call fcn.00404230
lea ecx, [esp + 0x24]
push ecx
lea ebx, [esp + 0x238]
mov byte [esp + 0x27c], 0x34
call fcn.0042a780
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea ecx, [esp + 0x58]
call fcn.00402bd0
lea esi, [esp + 0x74]
mov byte [esp + 0x278], 0x31
call fcn.00429e20
call fcn.00417390
mov ecx, eax
mov eax, 0x13e22cbd
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x67
jle 0x4282ce
push 0x67
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0041a200
call fcn.004308a0
call fcn.00417260
test eax, eax
je 0x4282e1
call fcn.0041a2b0
call fcn.00436210
lea ecx, [esp + 0x58]
push ecx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
push 5
mov ecx, 0x457780
call fcn.00404200
lea esi, [esp + 0x94]
call fcn.004016b0
mov byte [esp + 0x27c], 0x35
call fcn.00401ca0
mov byte [esp + 0x278], 0x36
cmp dword [eax + 0x18], 0x10
jb 0x428327
mov eax, dword [eax + 4]
jmp 0x42832a
add eax, 4
push eax
lea ecx, [esp + 0x28]
call fcn.00404230
lea edx, [esp + 0x24]
push edx
lea ebx, [esp + 0x238]
mov byte [esp + 0x27c], 0x37
call fcn.0042a780
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea ecx, [esp + 0x58]
call fcn.00402bd0
mov ebx, 0x31
lea esi, [esp + 0x74]
mov byte [esp + 0x278], bl
call fcn.00429e20
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
lea ecx, [esp + 0x250]
call fcn.0042a610
sub esp, 0x1c
mov byte [esp + 0x2ac], 0x38
lea edx, [esp + 0x284]
mov ecx, esp
mov dword [esp + 0x78], esp
push edx
call fcn.00402ba0
mov edi, dword [esp + 0x54]
lea esi, [edi + 0x18]
mov ecx, esi
mov byte [esp + 0x2ac], bl
call fcn.00434970
test eax, eax
jge 0x42842a
mov eax, dword [esp + 0x254]
mov ebx, 0x10
cmp dword [esp + 0x268], ebx
jae 0x4283dd
lea eax, [esp + 0x254]
push eax
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push 0x33
mov ecx, str._DRTSN_tIxI
call fcn.00404200
lea esi, [esp + 0x98]
call fcn.004016b0
mov byte [esp + 0x280], 0x39
call fcn.00401ca0
mov byte [esp + 0x27c], 0x3a
cmp dword [eax + 0x18], ebx
jb 0x4286a8
mov eax, dword [eax + 4]
jmp 0x4286ab
sub esp, 0x1c
lea edx, [esp + 0x218]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00402ba0
call fcn.00432640
mov dword [esp + 0x278], ebx
test eax, eax
jge 0x4284b9
mov eax, dword [esp + 0x200]
mov ebx, 0x10
cmp dword [esp + 0x214], ebx
jae 0x42846c
lea eax, [esp + 0x200]
push eax
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push 0x33
mov ecx, 0x4577bc
call fcn.00404200
lea esi, [esp + 0x98]
call fcn.004016b0
mov byte [esp + 0x280], 0x3d
call fcn.00401770
mov byte [esp + 0x27c], 0x3e
cmp dword [eax + 0x18], ebx
jb 0x4286a8
mov eax, dword [eax + 4]
jmp 0x4286ab
sub esp, 0x1c
lea edx, [esp + 0x218]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00402ba0
mov ebx, dword [esp + 0x34]
lea eax, [esp + 0x234]
mov byte [esp + 0x294], 0x3f
call fcn.0042aff0
mov eax, dword [eax]
push eax
mov eax, ebp
call fcn.0042a990
sub esp, 0x1c
add eax, 0x3c
mov ecx, esp
mov dword [esp + 0x7c], esp
push eax
call fcn.00402ba0
mov ecx, edi
mov byte [esp + 0x2b0], 0x31
call fcn.0040da80
call fcn.00417580
test eax, eax
je 0x428520
call fcn.00436210
call fcn.00417360
test eax, eax
je 0x42852e
call fcn.00418fd0
sub esp, 0x1c
lea edx, [esp + 0x218]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00402ba0
push edi
call fcn.0041c3d0
mov esi, eax
call fcn.00430090
sub eax, 1
jne 0x428560
call fcn.0041a350
call fcn.00435810
test esi, esi
jge 0x4285cd
mov eax, dword [esp + 0x200]
mov ebx, 0x10
cmp dword [esp + 0x214], ebx
jae 0x428580
lea eax, [esp + 0x200]
push eax
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push 0x2d
mov ecx, 0x4577f0
call fcn.00404200
lea esi, [esp + 0x98]
call fcn.004016b0
mov byte [esp + 0x280], 0x40
call fcn.00401850
mov byte [esp + 0x27c], 0x41
cmp dword [eax + 0x18], ebx
jb 0x4286a8
mov eax, dword [eax + 4]
jmp 0x4286ab
lea eax, [esp + 0x218]
call fcn.0042aff0
mov ecx, dword [eax]
push ecx
mov eax, ebp
call fcn.0042a990
add eax, 0x58
mov ecx, 0x10
cmp dword [eax + 0x18], ecx
jb 0x4285f5
mov eax, dword [eax + 4]
jmp 0x4285f8
add eax, 4
cmp dword [esp + 0x214], ecx
mov ecx, dword [esp + 0x200]
jae 0x42860f
lea ecx, [esp + 0x200]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
call fcn.004172f0
sub eax, 1
jne 0x42862f
call fcn.00435810
call fcn.00418100
test esi, esi
jne 0x4286c9
lea eax, [esp + 0x218]
call fcn.0042aff0
mov edx, dword [eax]
push edx
mov eax, ebp
call fcn.0042a990
add eax, 0x58
mov ebx, 0x10
cmp dword [eax + 0x18], ebx
jb 0x42865f
mov eax, dword [eax + 4]
jmp 0x428662
add eax, 4
push eax
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push 0x2a
mov ecx, str.b_b_
call fcn.00404200
lea esi, [esp + 0x98]
call fcn.004016b0
mov byte [esp + 0x280], 0x42
call fcn.00401770
mov byte [esp + 0x27c], 0x43
cmp dword [eax + 0x18], ebx
jb 0x4286a8
mov eax, dword [eax + 4]
jmp 0x4286ab
add eax, 4
push eax
push 1
push edi
call fcn.0041d220
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.00402bd0
lea esi, [esp + 0x74]
call fcn.00429e20
lea esi, [esp + 0x234]
call fcn.0042a730
lea ecx, [esp + 0x1fc]
call fcn.00402bd0
lea esi, [esp + 0x218]
call fcn.0042afc0
lea ecx, [esp + 0x250]
call fcn.00402bd0
lea esi, [esp + 0x19c]
call fcn.0040f300
lea ecx, [esp + 0x284]
call fcn.00402bd0
xor eax, eax
mov ecx, dword [esp + 0x270]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x258]
xor ecx, esp
call fcn.00438dc1
add esp, 0x268
ret 0x20