Function at 0x472080
Capabilities:
Copy file
Delete file
Get common file path
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fb6fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd34
push ebx
push esi
push edi
lea eax, [ebp - 0x380]
mov dword [ebp - 0x10], esp
push eax
mov dword [ebp - 4], 0
call fcn.004ab6e0
add esp, 4
lea ecx, [ebp - 0x38]
push ecx
call fcn.00401350
add esp, 4
lea edx, [ebp - 0x1b8]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x740]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0xc40]
push ecx
push str._sdllcache
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0xd40]
push eax
push str._sdllcache_bk
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x6c0]
push edx
push str._suserinit.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x940]
push ecx
push str._sdllcache_bkuserinit.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0xa40]
push eax
push str._sdllcacheuserinit.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
add esp, 0x40
lea edx, [ebp - 0x6c0]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472199
mov edi, 1
lea eax, [ebp - 0x940]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4721bf
mov esi, 1
push 1
lea ecx, [ebp - 0x300]
call fcn.004f0653
mov ecx, dword [0x4fe4e8]
mov byte [ebp - 4], 1
push ecx
push 2
push str.c:endpcacheprocess_log.txt
lea ecx, [ebp - 0x300]
call fcn.004f0727
cmp edi, 1
jne 0x472253
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523d5c
push 0xda7164
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x472343
lea ecx, [ebp - 0x940]
push str.c:endpcacheloguserinit.exe
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea edx, [ebp - 0x940]
push esi
lea eax, [ebp - 0x6c0]
push edx
push eax
call ebx
jmp 0x472349
cmp esi, 1
jne 0x4722c3
lea ecx, [ebp - 0x6c0]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x6c0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x6c0]
push str.c:endpcacheloguserinit.exe
push eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x6c0]
push 0
lea edx, [ebp - 0x940]
push ecx
push edx
call ebx
lea eax, [ebp - 0x6c0]
push str.c:endpcacheloguserinit.exe
push eax
call esi
lea ecx, [ebp - 0x6c0]
push 0
lea edx, [ebp - 0x940]
push ecx
push edx
jmp 0x4722eb
lea eax, [ebp - 0x6c0]
push str.c:endpcacheloguserinit.exe
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x6c0]
push 0
lea edx, [ebp - 0xa40]
push ecx
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523cfc
push 0xda7164
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
jmp 0x472349
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0xda7164
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x740]
lea eax, [ebp - 0x580]
push edx
push str._sexplorer.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x840]
push ecx
push str._sdllcache_bkexplorer.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0xb40]
push eax
push str._sdllcacheexplorer.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x580]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4723ea
mov edi, 1
lea eax, [ebp - 0x840]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472410
mov esi, 1
cmp edi, 1
jne 0x472474
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523c8c
push 0xd77290
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4725ca
lea eax, [ebp - 0x840]
push str.c:endpcachelogexplorer.exe
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x840]
push esi
lea edx, [ebp - 0x580]
push ecx
push edx
call ebx
jmp 0x4725ca
cmp esi, 1
jne 0x4724c2
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x580]
push str.c:endpcachelogexplorer.exe
push eax
call esi
lea ecx, [ebp - 0x580]
push 0
lea edx, [ebp - 0x840]
push ecx
push edx
call ebx
lea eax, [ebp - 0x580]
push str.c:endpcachelogexplorer.exe
push eax
call esi
lea ecx, [ebp - 0x580]
push 0
lea edx, [ebp - 0x840]
push ecx
push edx
jmp 0x472574
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x580]
xor edi, edi
push ecx
push edx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x4724f1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
cmp eax, ecx
je 0x4724f6
mov edi, 1
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x840]
push edx
push eax
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x47251b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
je 0x472520
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x472552
test esi, esi
jne 0x472552
lea edx, [ebp - 0x580]
push str.c:endpcachelogexplorer.exe
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x580]
push esi
push eax
lea ecx, [ebp - 0x840]
jmp 0x472573
lea edx, [ebp - 0x580]
push str.c:endpcachelogexplorer.exe
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x580]
push 0
push eax
lea ecx, [ebp - 0xb40]
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523c2c
push 0xd77290
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xd77290
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._slogonui.exe
push edx
xor edi, edi
xor esi, esi
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sdllcache_bklogonui.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcachelogonui.exe
push eax
call fcn.004f175f
push str.c:endpcache
call fcn.004f2beb
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x47266b
mov edi, 1
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472691
mov esi, 1
cmp edi, 1
jne 0x4726f5
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523bb4
push 0xe3bb40
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4727d6
lea edx, [ebp - 0x2b8]
push str.c:endpcacheloglogonui.exe
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
jmp 0x4727d6
cmp esi, 1
jne 0x47275e
lea edx, [ebp - 0x138]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x138]
push str.c:endpcacheloglogonui.exe
push ecx
call esi
lea edx, [ebp - 0x138]
push 0
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
lea ecx, [ebp - 0x138]
push str.c:endpcacheloglogonui.exe
push ecx
call esi
lea edx, [ebp - 0x138]
push 0
push edx
lea eax, [ebp - 0x2b8]
jmp 0x47277f
lea ecx, [ebp - 0x138]
push str.c:endpcacheloglogonui.exe
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [ebp - 0x138]
push 0
push edx
lea eax, [ebp - 0x480]
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523b58
push 0xe3bb40
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xe3bb40
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x138]
push eax
push str._s_rundll32.exe
push ecx
xor edi, edi
xor esi, esi
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x2b8]
push edx
push str._sdllcache_bk_rundll32.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcache_rundll32.exe
push edx
call fcn.004f175f
push str.c:endpcache
call fcn.004f2beb
lea eax, [ebp - 0x138]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472877
mov edi, 1
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x47289d
mov esi, 1
cmp edi, 1
jne 0x4728ef
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523ae8
push 0xc4e19c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x47299d
lea ecx, [ebp - 0x2b8]
push esi
lea edx, [ebp - 0x138]
push ecx
push edx
call ebx
jmp 0x47299d
cmp esi, 1
jne 0x472937
lea eax, [ebp - 0x138]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [ebp - 0x138]
push 0
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
lea ecx, [ebp - 0x138]
push 0
lea edx, [ebp - 0x2b8]
push ecx
push edx
jmp 0x472947
lea eax, [ebp - 0x138]
push 0
lea ecx, [ebp - 0x480]
push eax
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523aa8
push 0xc4e19c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xc4e19c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._scmd.exe
push edx
xor edi, edi
xor esi, esi
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sdllcache_bkcmd.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcachecmd.exe
push eax
call fcn.004f175f
push str.c:endpcache
call fcn.004f2beb
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472a3e
mov edi, 1
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472a64
mov esi, 1
cmp edi, 1
jne 0x472ac8
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523a40
push 0xd58f2c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x472ba9
lea edx, [ebp - 0x2b8]
push str.c:endpcachelogcmd.exe
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
jmp 0x472ba9
cmp esi, 1
jne 0x472b31
lea edx, [ebp - 0x138]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x138]
push str.c:endpcachelogcmd.exe
push ecx
call esi
lea edx, [ebp - 0x138]
push 0
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
lea ecx, [ebp - 0x138]
push str.c:endpcachelogcmd.exe
push ecx
call esi
lea edx, [ebp - 0x138]
push 0
push edx
lea eax, [ebp - 0x2b8]
jmp 0x472b52
lea ecx, [ebp - 0x138]
push str.c:endpcachelogcmd.exe
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [ebp - 0x138]
push 0
push edx
lea eax, [ebp - 0x480]
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5239ec
push 0xd58f2c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xd58f2c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sctfmon.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._sdllcache_bkctfmon.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcachectfmon.exe
push edx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472c4a
mov edi, 1
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472c70
mov esi, 1
cmp edi, 1
jne 0x472cc2
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x52397c
push 0xda728c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x472d4f
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
jmp 0x472d4f
cmp esi, 1
push 0
jne 0x472ceb
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
lea edx, [ebp - 0x2b8]
push 0
lea eax, [ebp - 0x138]
push edx
push eax
jmp 0x472cf9
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x480]
push ecx
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523938
push 0xda728c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xda728c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x2b8]
push edx
push str._sconime.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._sdllcache_bkconime.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcacheconime.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472df0
mov edi, 1
lea eax, [ebp - 0x138]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472e16
mov esi, 1
cmp edi, 1
jne 0x472e68
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5238b8
push 0xd4f250
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x472ef5
lea eax, [ebp - 0x138]
push esi
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call ebx
jmp 0x472ef5
cmp esi, 1
push 0
jne 0x472e91
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x138]
push edx
push eax
call ebx
lea ecx, [ebp - 0x2b8]
push 0
lea edx, [ebp - 0x138]
push ecx
push edx
jmp 0x472e9f
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x480]
push eax
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523874
push 0xd4f250
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xd4f250
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x740]
lea edx, [ebp - 0x2b8]
push ecx
push str._s_notepad.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x138]
push eax
push str._sdllcache_bk_notepad.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcache_notepad.exe
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472f96
mov edi, 1
lea edx, [ebp - 0x138]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x472fbc
mov esi, 1
cmp edi, 1
jne 0x47300e
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5237f8
push 0xe53750
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x47309b
lea edx, [ebp - 0x138]
push esi
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
jmp 0x47309b
cmp esi, 1
push 0
jne 0x473037
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x138]
push ecx
push edx
call ebx
lea eax, [ebp - 0x2b8]
push 0
lea ecx, [ebp - 0x138]
push eax
push ecx
jmp 0x473045
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x480]
push edx
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5237b8
push 0xe53750
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xe53750
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edi, [ebp - 0x740]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x5c0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x2b8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 0x5be], 0
push ecx
push str._sProgram_FilesWindows_NTAccessorieswordpad.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x138]
push eax
push str._sdllcache_bkwordpad.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcachewordpad.exe
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x47316c
mov edi, 1
lea edx, [ebp - 0x138]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473192
mov esi, 1
cmp edi, 1
jne 0x4731e4
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523718
push 0xc4e09c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x473271
lea edx, [ebp - 0x138]
push esi
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
jmp 0x473271
cmp esi, 1
push 0
jne 0x47320d
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x138]
push ecx
push edx
call ebx
lea eax, [ebp - 0x2b8]
push 0
lea ecx, [ebp - 0x138]
push eax
push ecx
jmp 0x47321b
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x480]
push edx
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5236d8
push 0xc4e09c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xc4e09c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x740]
lea ecx, [ebp - 0x2b8]
push eax
push str._s_regedit.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._sdllcache_bk_regedit.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcache_regedit.exe
push edx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473312
mov edi, 1
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473338
mov esi, 1
cmp edi, 1
jne 0x47338a
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x52365c
push 0xdb258c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x473417
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
jmp 0x473417
cmp esi, 1
push 0
jne 0x4733b3
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
lea edx, [ebp - 0x2b8]
push 0
lea eax, [ebp - 0x138]
push edx
push eax
jmp 0x4733c1
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x480]
push ecx
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x52361c
push 0xdb258c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push str.regedit.exe
call fcn.004ea440
add esp, 4
lea ecx, [ebp - 0x2f4]
push 0xdb258c
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._suxtheme.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x2b8]
push ecx
push str._sdllcache_bkuxtheme.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcacheuxtheme.dll
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x138]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4734c5
mov edi, 1
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4734eb
mov esi, 1
cmp edi, 1
jne 0x47353d
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x52359c
push 0xddb394
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x47364d
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
jmp 0x47364d
cmp esi, 1
jne 0x473568
lea edx, [ebp - 0x138]
push 0
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
lea ecx, [ebp - 0x138]
push 0
push ecx
lea edx, [ebp - 0x2b8]
jmp 0x4735f6
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x138]
xor edi, edi
push ecx
push edx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473597
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
je 0x47359c
mov edi, 1
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x2b8]
push edx
push eax
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x4735c1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
je 0x4735c6
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x4735e7
test esi, esi
jne 0x4735e7
lea edx, [ebp - 0x138]
push esi
lea eax, [ebp - 0x2b8]
push edx
push eax
jmp 0x4735f7
lea ecx, [ebp - 0x138]
push 0
push ecx
lea edx, [ebp - 0x480]
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523558
push 0xddb394
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xddb394
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x2b8]
push edx
push str._slpk.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._sdllcache_bklpk.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcachelpk.dll
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4736ee
mov edi, 1
lea eax, [ebp - 0x138]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473714
mov esi, 1
cmp edi, 1
jne 0x473766
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5234f0
push 0xe3ba18
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4737f3
lea eax, [ebp - 0x138]
push esi
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call ebx
jmp 0x4737f3
cmp esi, 1
push 0
jne 0x47378f
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x138]
push edx
push eax
call ebx
lea ecx, [ebp - 0x2b8]
push 0
lea edx, [ebp - 0x138]
push ecx
push edx
jmp 0x47379d
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x480]
push eax
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x5234b8
push 0xe3ba18
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xe3ba18
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._suxtheme.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sdllcache_bkuxtheme.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcacheuxtheme.dll
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473894
mov edi, 1
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4738ba
mov esi, 1
cmp edi, 1
jne 0x47390c
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x52359c
push 0xddb394
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x473a1c
lea edx, [ebp - 0x2b8]
push esi
lea eax, [ebp - 0x138]
push edx
push eax
call ebx
jmp 0x473a1c
cmp esi, 1
jne 0x473937
lea ecx, [ebp - 0x138]
push 0
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
lea eax, [ebp - 0x138]
push 0
push eax
lea ecx, [ebp - 0x2b8]
jmp 0x4739c5
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x138]
xor edi, edi
push eax
push ecx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473966
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp edx, eax
je 0x47396b
mov edi, 1
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473990
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
je 0x473995
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x4739b6
test esi, esi
jne 0x4739b6
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
jmp 0x4739c6
lea eax, [ebp - 0x138]
push 0
push eax
lea ecx, [ebp - 0x480]
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523558
push 0xddb394
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xddb394
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._solepro32.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sdllcache_bkolepro32.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcacheolepro32.dll
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473abd
mov edi, 1
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473ae3
mov esi, 1
cmp edi, 1
jne 0x473b35
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523440
push 0xda6900
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x473c45
lea edx, [ebp - 0x2b8]
push esi
lea eax, [ebp - 0x138]
push edx
push eax
call ebx
jmp 0x473c45
cmp esi, 1
jne 0x473b60
lea ecx, [ebp - 0x138]
push 0
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
lea eax, [ebp - 0x138]
push 0
push eax
lea ecx, [ebp - 0x2b8]
jmp 0x473bee
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x138]
xor edi, edi
push eax
push ecx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473b8f
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp edx, eax
je 0x473b94
mov edi, 1
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473bb9
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
je 0x473bbe
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x473bdf
test esi, esi
jne 0x473bdf
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
jmp 0x473bef
lea eax, [ebp - 0x138]
push 0
push eax
lea ecx, [ebp - 0x480]
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523408
push 0xda6900
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xda6900
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._slinkinfo.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._sdllcache_bklinkinfo.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcachelinkinfo.dll
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473ce6
mov edi, 1
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473d0c
mov esi, 1
cmp edi, 1
jne 0x473d70
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5233a0
push 0xda2a00
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x473ec6
lea edx, [ebp - 0x2b8]
push str.c:endpcacheloglinkinfo.dll
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
jmp 0x473ec6
cmp esi, 1
jne 0x473dbe
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [ebp - 0x138]
push str.c:endpcacheloglinkinfo.dll
push edx
call esi
lea eax, [ebp - 0x138]
push 0
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call ebx
lea edx, [ebp - 0x138]
push str.c:endpcacheloglinkinfo.dll
push edx
call esi
lea eax, [ebp - 0x138]
push 0
lea ecx, [ebp - 0x2b8]
push eax
push ecx
jmp 0x473e70
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x138]
xor edi, edi
push eax
push ecx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473ded
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp edx, eax
je 0x473df2
mov edi, 1
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x473e17
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
je 0x473e1c
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x473e4e
test esi, esi
jne 0x473e4e
lea ecx, [ebp - 0x138]
push str.c:endpcacheloglinkinfo.dll
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [ebp - 0x138]
push esi
push edx
lea eax, [ebp - 0x2b8]
jmp 0x473e6f
lea ecx, [ebp - 0x138]
push str.c:endpcacheloglinkinfo.dll
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [ebp - 0x138]
push 0
push edx
lea eax, [ebp - 0x480]
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523348
push 0xda2a00
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xda2a00
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._scomres.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._sdllcache_bkcomres.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcachecomres.dll
push edx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473f67
mov edi, 1
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x473f8d
mov esi, 1
cmp edi, 1
jne 0x473fdf
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x5232d4
push 0xd70d90
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4740ef
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
jmp 0x4740ef
cmp esi, 1
jne 0x47400a
lea eax, [ebp - 0x2b8]
push 0
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
lea edx, [ebp - 0x2b8]
push 0
push edx
lea eax, [ebp - 0x138]
jmp 0x474098
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x2b8]
xor edi, edi
push edx
push eax
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x474039
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
je 0x47403e
mov edi, 1
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x138]
push eax
push ecx
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x474063
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp edx, eax
je 0x474068
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x474089
test esi, esi
jne 0x474089
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
jmp 0x474099
lea edx, [ebp - 0x2b8]
push 0
push edx
lea eax, [ebp - 0x480]
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x52329c
push 0xd70d90
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xd70d90
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._susp10.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._sdllcache_bkusp10.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcacheusp10.dll
push edx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474190
mov edi, 1
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4741b6
mov esi, 1
cmp edi, 1
jne 0x474208
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x523224
push 0xd45cd0
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x474295
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
jmp 0x474295
cmp esi, 1
push 0
jne 0x474231
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
lea edx, [ebp - 0x2b8]
push 0
lea eax, [ebp - 0x138]
push edx
push eax
jmp 0x47423f
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x480]
push ecx
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x5231e8
push 0xd45cd0
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xd45cd0
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x2b8]
push edx
push str._soleacc.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._sdllcache_bkoleacc.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcacheoleacc.dll
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474336
mov edi, 1
lea eax, [ebp - 0x138]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x47435c
mov esi, 1
cmp edi, 1
jne 0x4743ae
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523174
push 0xdb248c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4744ac
lea eax, [ebp - 0x138]
push esi
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call ebx
jmp 0x4744ac
cmp esi, 1
jne 0x4743c7
lea edx, [ebp - 0x2b8]
push 0
push edx
lea eax, [ebp - 0x138]
jmp 0x474455
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x2b8]
xor edi, edi
push edx
push eax
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x4743f6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
je 0x4743fb
mov edi, 1
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x138]
push eax
push ecx
xor esi, esi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x474420
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp edx, eax
je 0x474425
mov esi, 1
cmp edi, 1
mov dword [ebp - 4], 1
jne 0x474446
test esi, esi
jne 0x474446
lea eax, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x138]
push eax
push ecx
jmp 0x474456
lea edx, [ebp - 0x2b8]
push 0
push edx
lea eax, [ebp - 0x480]
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x52313c
push 0xdb248c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xdb248c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x2b8]
push eax
push str._s_netman.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._sdllcache_bk_netman.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x480]
push ecx
push str._sdllcache_netman.dll
push edx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x47454d
mov edi, 1
lea ecx, [ebp - 0x138]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474573
mov esi, 1
cmp edi, 1
jne 0x4745c5
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x5230d0
push 0xdb1b0c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x474652
lea ecx, [ebp - 0x138]
push esi
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
jmp 0x474652
cmp esi, 1
push 0
jne 0x4745ee
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x138]
push eax
push ecx
call ebx
lea edx, [ebp - 0x2b8]
push 0
lea eax, [ebp - 0x138]
push edx
push eax
jmp 0x4745fc
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x480]
push ecx
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523090
push 0xdb1b0c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xdb1b0c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
push edx
push str._smmc.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x2b8]
push ecx
push str._sdllcache_bkmmc.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcachemmc.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x138]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4746f3
mov edi, 1
lea eax, [ebp - 0x2b8]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474719
mov esi, 1
cmp edi, 1
jne 0x47477d
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x523020
push 0xc5179c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x474833
lea eax, [ebp - 0x2b8]
push str.c:endpcachelogmmc.exe
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x2b8]
push esi
lea edx, [ebp - 0x138]
push ecx
push edx
call ebx
jmp 0x474833
lea eax, [ebp - 0x138]
cmp esi, 1
push str.c:endpcachelogmmc.exe
push eax
jne 0x4747c7
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
call esi
lea ecx, [ebp - 0x138]
push 0
lea edx, [ebp - 0x2b8]
push ecx
push edx
call ebx
lea eax, [ebp - 0x138]
push str.c:endpcachelogmmc.exe
push eax
call esi
lea ecx, [ebp - 0x138]
push 0
push ecx
lea edx, [ebp - 0x2b8]
jmp 0x4747dc
call dword [sym.imp.KERNEL32.dll_MoveFileA]
lea ecx, [ebp - 0x138]
push 0
push ecx
lea edx, [ebp - 0x480]
push edx
call ebx
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x522fc4
push 0xc5179c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xc5179c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x2b8]
push edx
push str._s_taskmgr.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x138]
push ecx
push str._sdllcache_bk_taskmgr.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x480]
push eax
push str._sdllcache_taskmgr.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea edx, [ebp - 0x2b8]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4748d4
mov edi, 1
lea eax, [ebp - 0x138]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4748fa
mov esi, 1
cmp edi, 1
jne 0x47494c
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x522f58
push 0xcee7f0
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x4749d9
lea eax, [ebp - 0x138]
push esi
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call ebx
jmp 0x4749d9
cmp esi, 1
push 0
jne 0x474975
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x138]
push edx
push eax
call ebx
lea ecx, [ebp - 0x2b8]
push 0
lea edx, [ebp - 0x138]
push ecx
push edx
jmp 0x474983
lea eax, [ebp - 0x2b8]
lea ecx, [ebp - 0x480]
push eax
push ecx
call ebx
lea edx, [ebp - 0x38]
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004fa6c0
add esp, 4
push eax
push 0x522f18
push 0xcee7f0
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xcee7f0
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x1b8]
lea edx, [ebp - 0x2b8]
push ecx
push str._sdebug.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x1b8]
lea ecx, [ebp - 0x138]
push eax
push str._sdllcache_bkdebug.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x480]
push edx
push str._sdllcachedebug.exe
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474a7a
mov edi, 1
lea edx, [ebp - 0x138]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x474aa0
mov esi, 1
cmp edi, 1
jne 0x474af2
lea eax, [ebp - 0x38]
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x380]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
push eax
push 0x522ea0
push 0xdb268c
call fcn.004f175f
add esp, 0x10
test esi, esi
jne 0x474b7f
lea edx, [ebp - 0x138]
push esi
lea eax, [ebp - 0x2b8]
push edx
push eax
call ebx
jmp 0x474b7f
cmp esi, 1
push 0
jne 0x474b1b
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x138]
push ecx
push edx
call ebx
lea eax, [ebp - 0x2b8]
push 0
lea ecx, [ebp - 0x138]
push eax
push ecx
jmp 0x474b29
lea edx, [ebp - 0x2b8]
lea eax, [ebp - 0x480]
push edx
push eax
call ebx
lea ecx, [ebp - 0x38]
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x380]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
push 0x522e64
push 0xdb268c
call fcn.004f175f
mov edx, dword [0xe56d24]
mov ecx, dword [0xe56c74]
mov eax, dword [0xe56d88]
add esp, 0x10
inc edx
inc ecx
inc eax
mov dword [0xe56d24], edx
mov dword [0xe56c74], ecx
mov dword [0xe56d88], eax
push 0xdb268c
lea ecx, [ebp - 0x2f4]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x300]
call fcn.004f076e
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0
call fcn.004f0714
lea ecx, [ebp - 0x2ec]
call fcn.004f05fb
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret