Function at 0x461520
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5260f8
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x595cb8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461560
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
push 0x14
mov dword [ebp - 4], 0
call fcn.004f457c
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461596
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov dword [edi + 4], 0xffffffff
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x4615bc
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi + 8], eax
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x4615dc
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, dword [ebp + 8]
add eax, 0x10
mov dword [edi + 0xc], eax
mov ecx, ebx
push str.inputFilePath
mov word [edi + 0x10], 1
call fcn.00438d70
cmp eax, 0x59c858
je 0x461e61
mov al, byte [ebx + 8]
test al, al
je 0x461629
cmp al, 7
je 0x461629
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x461637
mov eax, 0x59c858
jmp 0x46166d
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.inputFilePath
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461663
mov eax, 0x59c858
jmp 0x461666
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 4
jne 0x461e61
test cl, cl
je 0x461697
cmp cl, 7
je 0x461697
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x4616a4
mov esi, 0x59c858
jmp 0x4616d7
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.inputFilePath
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x4616d0
mov esi, 0x59c858
jmp 0x4616d3
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0
cmp byte [esi + 8], 4
je 0x4616f4
push 0x2a9
push 0x56ef58
push str.type___stringValue
call fcn.00508598
add esp, 0xc
mov edx, dword [esi]
test edx, edx
jne 0x4616fe
xor ecx, ecx
jmp 0x46170c
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461703
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x10]
call fcn.0042cb10
mov edx, edi
lea ecx, [ebp - 0x10]
call fcn.0042c0f0
push str.outputFolder
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x461da7
mov al, byte [ebx + 8]
test al, al
je 0x461759
cmp al, 7
je 0x461759
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x461767
mov eax, 0x59c858
jmp 0x46179d
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.outputFolder
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461793
mov eax, 0x59c858
jmp 0x461796
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 4
jne 0x461da7
test cl, cl
je 0x4617c7
cmp cl, 7
je 0x4617c7
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x4617d4
mov esi, 0x59c858
jmp 0x461807
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.outputFolder
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461800
mov esi, 0x59c858
jmp 0x461803
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0
cmp byte [esi + 8], 4
je 0x461824
push 0x2a9
push 0x56ef58
push str.type___stringValue
call fcn.00508598
add esp, 0xc
mov edx, dword [esi]
test edx, edx
jne 0x46182e
xor ecx, ecx
jmp 0x46183c
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461833
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x10]
call fcn.0042cb10
mov eax, dword [ebp - 0x10]
mov edx, dword [eax - 0xc]
lea ecx, [edx - 1]
test ecx, ecx
js 0x461d9d
cmp ecx, edx
jg 0x461d9d
mov al, byte [ecx + eax]
cmp al, 0x5c
je 0x461875
push 1
push 0x572594
lea ecx, [ebp - 0x10]
call fcn.00435590
lea edx, [edi + 8]
lea ecx, [ebp - 0x10]
call fcn.0042c0f0
push str.onFinishId
mov ecx, ebx
call fcn.00438d70
or edi, 0xffffffff
cmp eax, 0x59c858
je 0x46199a
mov al, byte [ebx + 8]
test al, al
je 0x4618bc
cmp al, 7
je 0x4618bc
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x4618ca
mov eax, 0x59c858
jmp 0x461900
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.onFinishId
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x4618f6
mov eax, 0x59c858
jmp 0x4618f9
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 1
jne 0x46199a
test cl, cl
je 0x46192a
cmp cl, 7
je 0x46192a
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x461945
mov ecx, 0x59c858
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x461ace
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.onFinishId
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461983
mov ecx, 0x59c858
mov byte [ebp - 4], 0
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x461ace
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x461ace
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x4619af
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, str.onFinishId_not_exist
mov byte [ebp - 4], 0x15
test eax, 0xffff0000
jne 0x4619e4
movzx esi, ax
mov ecx, esi
call fcn.0041f3d0
test eax, eax
je 0x4619f1
push esi
push eax
lea ecx, [ebp + 8]
call fcn.0041fbd0
jmp 0x4619f1
push str.onFinishId_not_exist
lea ecx, [ebp + 8]
call fcn.0041fa30
push str.extractWithGzip
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x16
call fcn.0041f910
mov byte [ebp - 4], 0x17
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461a1b
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x18
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x28]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x19
cmp dword [ecx + 0xc], 0
je 0x461a59
push 2
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0x18
mov eax, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461a77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461a92
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461ab0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461ace
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.shouldDecrypt
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x461bbb
mov al, byte [ebx + 8]
test al, al
je 0x461b07
cmp al, 7
je 0x461b07
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov al, byte [ebx + 8]
test al, al
jne 0x461b15
mov ecx, 0x59c858
jmp 0x461b4b
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.shouldDecrypt
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461b41
mov ecx, 0x59c858
jmp 0x461b44
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
mov al, byte [ebx + 8]
cmp byte [ecx + 8], 5
jne 0x461bbb
test al, al
je 0x461b70
cmp al, 7
je 0x461b70
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x461b7d
mov ecx, 0x59c858
jmp 0x461bb0
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.shouldDecrypt
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461ba9
mov ecx, 0x59c858
jmp 0x461bac
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.004388a0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x10], al
push str.deleteDecrypted
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x461ca8
mov al, byte [ebx + 8]
test al, al
je 0x461bf4
cmp al, 7
je 0x461bf4
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov al, byte [ebx + 8]
test al, al
jne 0x461c02
mov ecx, 0x59c858
jmp 0x461c38
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.deleteDecrypted
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461c2e
mov ecx, 0x59c858
jmp 0x461c31
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
mov al, byte [ebx + 8]
cmp byte [ecx + 8], 5
jne 0x461ca8
test al, al
je 0x461c5d
cmp al, 7
je 0x461c5d
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x461c6a
mov ecx, 0x59c858
jmp 0x461c9d
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.deleteDecrypted
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461c96
mov ecx, 0x59c858
jmp 0x461c99
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.004388a0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x11], al
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push 0
push dword [ebp - 0x14]
push 0x4508f0
push 0
push 0
call fcn.004fc2dd
add esp, 0x18
test eax, eax
jne 0x461d91
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.00460a10
push str._beginthreadex_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x22
call fcn.0041f910
mov byte [ebp - 4], 0x23
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461d11
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x24
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x25
cmp dword [ecx + 0xc], 0
je 0x461d4f
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0x24
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461d6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461d88
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x22
jmp 0x461f16
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x461f4e
push 0x80070057
call fcn.0041f2a0
push str.outputFolder_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call fcn.0041f910
mov byte [ebp - 4], 0xc
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461dde
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xe
cmp dword [ecx + 0xc], 0
je 0x461e1c
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0xd
or edi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461e3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461e58
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
jmp 0x461f16
push str.inputFilePath_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 3
call fcn.0041f910
mov byte [ebp - 4], 4
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461e98
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 5
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 6
cmp dword [ecx + 0xc], 0
je 0x461ed6
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 5
or edi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461ef7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461f12
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp + 8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461f30
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461f4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x461f6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4