Function at 0x402030
Capabilities:
Delete file
Receive data
Receive data on socket
Send data
Send data on socket
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46afa9
mov eax, dword fs:[0]
push eax
sub esp, 0x198
mov eax, dword [0x48f244]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x15c], edi
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1a0], eax
xor eax, eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x164], eax
xor al, al
mov dword [ebp - 4], 0
mov byte [ebp - 0x149], al
mov byte [ebp - 0x155], al
xor eax, eax
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x154], 0x50
push eax
lea edx, [ebp - 0xd8]
call fcn.00404b60
mov esi, dword [ebp - 0x154]
mov eax, 0x1bb
add esp, 8
cmp si, ax
jne 0x4021c0
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x402165
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40215b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0xc4]
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
cmp edx, 8
jb 0x4021b9
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4021af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push edx
push ecx
call fcn.00439095
add esp, 8
xor al, al
jmp 0x403128
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0xc0]
call fcn.004047c0
push esi
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 3
push eax
mov ecx, edi
call fcn.00401d00
test al, al
je 0x403146
mov esi, dword [ebp - 0xb0]
test esi, esi
je 0x402310
cmp dword [ebp - 0xac], 0x10
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xa8], str.Host
cmovae eax, dword [ebp - 0xc0]
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x154], eax
cmp esi, 0x10
jae 0x402257
movups xmm0, xmmword [eax]
mov dword [ebp - 0x90], 0xf
movups xmmword [ebp - 0xa4], xmm0
jmp 0x40229c
mov edi, esi
lea ecx, [ebp - 0xa4]
mov eax, closesocket
or edi, 0xf
cmp edi, eax
cmova edi, eax
lea eax, [edi + 1]
push eax
call fcn.004056f0
mov ecx, eax
lea eax, [esi + 1]
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0xa4], ecx
push ecx
call fcn.00444600
mov dword [ebp - 0x90], edi
add esp, 0xc
mov edi, dword [ebp - 0x15c]
mov eax, 2
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [edi + 0x70]
call fcn.0040c240
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x90]
cmp edx, 0x10
jb 0x402310
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4022fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push edx
push ecx
call fcn.00439095
add esp, 8
nop word [eax + eax]
mov byte [ebp - 4], 5
xor edi, edi
mov eax, dword [ebp - 0x164]
mov esi, 0xf
mov ecx, dword [ebp - 0x4c]
or eax, 4
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], esi
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x154], eax
test ecx, ecx
je 0x4023d9
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push edi
cmovae eax, dword [ebp - 0x5c]
push edi
push edi
push edi
push ecx
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4023d9
lea edi, [eax + 1]
push edi
call fcn.004390a3
add esp, 4
mov esi, eax
push edi
push 0
push esi
call fcn.00444b80
mov edi, dword [ebp - 0x174]
lea eax, [ebp - 0x5c]
add esp, 0xc
cmp dword [ebp - 0x48], 8
cmovae eax, dword [ebp - 0x5c]
push 0
push 0
push edi
push esi
push dword [ebp - 0x4c]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, esi
mov byte [edi + esi], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4023b7
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.004045e0
push esi
call fcn.004390ac
mov esi, dword [ebp - 0x18]
add esp, 4
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x2c]
add ecx, 0x58
cmp ecx, eax
je 0x4023fa
cmp esi, 0x10
push edi
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.00405800
mov esi, dword [ebp - 0x18]
and dword [ebp - 0x164], 0xfffffffb
mov byte [ebp - 4], 3
cmp esi, 0x10
jb 0x402436
mov ecx, dword [ebp - 0x2c]
inc esi
mov eax, ecx
cmp esi, 0x1000
jb 0x40242c
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push esi
push ecx
call fcn.00439095
add esp, 8
mov edi, dword [ebp - 0x15c]
lea eax, [ebp - 0x8c]
push ecx
push eax
lea ecx, [edi + 0x20]
call fcn.0040adc0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
push 0
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
push eax
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x403161
mov esi, dword [ebp - 0x170]
xorps xmm0, xmm0
push 0
push 0x80
push 3
push 0
push 1
push connect
push esi
movsd qword [ebp - 0x16c], xmm0
movsd qword [ebp - 0x17c], xmm0
mov byte [ebp - 0x14a], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x4024c5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x483730
lea eax, [ebp - 0x160]
push esi
push eax
call fcn.0044ff06
add esp, 0xc
cmp dword [ebp - 0x160], 0
je 0x40317c
push 0x1001
call fcn.00447d93
mov esi, eax
add esp, 4
mov dword [ebp - 0x150], esi
jmp 0x402516
call fcn.00439095
add esp, 8
nop word [eax + eax]
mov esi, dword [ebp - 0x150]
mov ecx, dword [edi + 0x7c]
test ecx, ecx
je 0x40252c
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x403197
push 0
push 0x1000
push esi
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_recv]
mov esi, eax
mov dword [ebp - 0x198], esi
cmp esi, 0xffffffff
je 0x4031b2
test esi, esi
jle 0x402f8a
cmp byte [ebp - 0x14a], 0
mov eax, dword [ebp - 0x150]
mov byte [esi + eax], 0
jne 0x402eee
mov ecx, eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402590
sub ecx, edx
push ecx
push dword [ebp - 0x150]
lea ecx, [ebp - 0x74]
call fcn.00405800
cmp dword [ebp - 0x60], 0x10
lea ecx, [ebp - 0x74]
mov esi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x64]
cmovae ecx, esi
mov dword [ebp - 0x154], ecx
cmp eax, 4
jb 0x402639
add eax, 0xfffffffd
add eax, ecx
mov dword [ebp - 0x174], eax
sub eax, ecx
push eax
push 0xd
push ecx
call fcn.00445360
mov edi, eax
add esp, 0xc
test edi, edi
je 0x402633
mov ecx, edi
mov edx, str._r_n_r_n
mov eax, dword [ecx]
cmp eax, dword [edx]
je 0x40260b
cmp al, byte [edx]
jne 0x40260f
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40260f
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40260f
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x40260f
xor eax, eax
jmp 0x402614
sbb eax, eax
or eax, 1
test eax, eax
je 0x402673
mov eax, dword [ebp - 0x174]
inc edi
sub eax, edi
push eax
push 0xd
push edi
call fcn.00445360
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x4025e2
mov edi, dword [ebp - 0x15c]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x60]
cmp eax, 0x10
jb 0x402510
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x402ee7
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031cd
jmp 0x402ee7
sub edi, dword [ebp - 0x154]
cmp edi, 0xffffffff
je 0x402633
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 8
cmp edi, 0xf
ja 0x4026bd
push edi
push dword [ebp - 0x150]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], edi
push eax
call fcn.00444600
mov byte [ebp + edi - 0x44], 0
jmp 0x402757
cmp edi, 0x7fffffff
ja 0x4031d2
mov esi, edi
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x4026fe
mov esi, closesocket
mov ecx, 0x80000023
push ecx
call fcn.00439065
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4031cd
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x402731
cmp esi, 0x16
mov eax, 0x16
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x402720
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x4031d7
jmp 0x4026e0
test eax, eax
je 0x40272f
push eax
call fcn.00439065
add esp, 4
jmp 0x402731
xor eax, eax
push edi
push dword [ebp - 0x150]
mov dword [ebp - 0x154], eax
push eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], esi
call fcn.00444600
mov eax, dword [ebp - 0x154]
mov byte [eax + edi], 0
mov dword [ebp - 0x44], eax
add esp, 0xc
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x148]
push eax
call fcn.0040a9a0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x144]
cmp eax, 0x194
je 0x4031dc
cmp eax, 0x12c
jle 0x402c4d
cmp eax, 0x190
jge 0x402c4d
mov esi, dword [str.Location]
mov edi, 0xf
mov eax, dword [0x483744]
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], 8
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], eax
mov byte [ebp - 0xe8], 0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x148]
call fcn.0040ab80
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.00405280
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x90]
cmp edx, 0x10
jb 0x402830
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402826
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
push 0
push 0x483760
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.00404920
test eax, eax
je 0x4029c3
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x5c]
push eax
call fcn.004049f0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x4028bb
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4028b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.0040aa80
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x402912
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402908
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x40295c
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402952
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x4029a9
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40299f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
jmp 0x402310
mov esi, dword [ebp - 0x15c]
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x4029df
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [esi + 4], 0xffffffff
push dword [ebp - 0x150]
call fcn.00447d78
push dword [ebp - 0x160]
mov dword [ebp - 0x150], 0
call fcn.0044f9ce
mov eax, dword [esi]
lea edx, [ebp - 0x2c]
mov edi, dword [ebp - 0x170]
add esp, 8
cmp dword [ebp - 0x18], 8
mov ecx, esi
mov dword [ebp - 0x160], 0
cmovae edx, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
push edi
push edx
call eax
mov edx, dword [ebp - 0x18]
mov byte [ebp - 0x14a], al
cmp edx, 8
jb 0x402a68
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402a5e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.0040aa80
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x402abb
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402ab1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x402b01
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402af7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x402b4a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402b40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x402b99
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402b8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 8
jb 0x402bee
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402be4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0xc4]
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
cmp edx, 8
jb 0x402c42
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402c38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031f7
push edx
push ecx
call fcn.00439095
add esp, 8
mov al, byte [ebp - 0x14a]
jmp 0x403128
push 0xe
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push str.Content_Length
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00405800
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x148]
call fcn.0040ab80
cmp dword [eax + 0x14], 0x10
jb 0x402c97
mov eax, dword [eax]
push eax
call fcn.0045426f
add esp, 4
lea ecx, [ebp - 0xa4]
fstp qword [ebp - 0x16c]
call fcn.00405010
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x402ce9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402cdf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031fc
push edx
push ecx
call fcn.00439095
add esp, 8
mov esi, dword [ebp - 0x198]
mov eax, esi
sub eax, edi
sub eax, 4
test eax, eax
jle 0x402d6d
push dword [ebp - 0x160]
push 1
push eax
mov eax, dword [ebp - 0x150]
add eax, 4
add eax, edi
push eax
call fcn.00450215
mov edi, dword [ebp - 0x15c]
add esp, 0x10
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mov ecx, dword [edi + 0x7c]
addsd xmm0, qword [ebp - 0x17c]
movsd qword [ebp - 0x17c], xmm0
test ecx, ecx
je 0x402d73
mov eax, dword [ecx]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [ebp - 0x16c]
movsd qword [esp], xmm0
push 0
push dword [edi + 0x78]
movsd qword [ebp - 0x16c], xmm0
call dword [eax]
movsd xmm0, qword [ebp - 0x16c]
jmp 0x402d83
mov edi, dword [ebp - 0x15c]
movsd xmm0, qword [ebp - 0x16c]
movsd qword [ebp - 0x16c], xmm0
movsd xmm1, qword [ebp - 0x17c]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x402e4c
mov ecx, dword [edi + 0x7c]
test ecx, ecx
je 0x402db7
mov eax, dword [ecx]
sub esp, 0x10
movsd qword [esp + 8], xmm1
movsd qword [esp], xmm0
push 2
push dword [edi + 0x78]
call dword [eax]
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x149], 1
call fcn.0040aa80
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x402dfd
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402df3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031cd
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x402f8a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402e3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031cd
push edx
push ecx
call fcn.00439095
add esp, 8
jmp 0x402f8a
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x14a], 1
call fcn.0040aa80
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x402e96
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402e8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031cd
push edx
push ecx
call fcn.00439095
add esp, 8
mov esi, dword [ebp - 0x150]
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x402516
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402ee0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4031cd
push edx
push ecx
jmp 0x4024fe
push ecx
push esi
jmp 0x4024fe
push dword [ebp - 0x160]
push 1
push esi
push eax
call fcn.00450215
mov ecx, dword [edi + 0x7c]
add esp, 0x10
movd xmm0, esi
cvtdq2pd xmm1, xmm0
addsd xmm1, qword [ebp - 0x17c]
movsd qword [ebp - 0x17c], xmm1
test ecx, ecx
je 0x402f46
movsd xmm0, qword [ebp - 0x16c]
sub esp, 0x10
mov eax, dword [ecx]
movsd qword [esp + 8], xmm1
movsd qword [esp], xmm0
push 0
push dword [edi + 0x78]
call dword [eax]
movsd xmm1, qword [ebp - 0x17c]
movsd xmm0, qword [ebp - 0x16c]
comisd xmm1, xmm0
mov esi, dword [ebp - 0x150]
jb 0x402516
mov ecx, dword [edi + 0x7c]
mov al, 1
mov byte [ebp - 0x149], al
mov byte [ebp - 0x155], al
test ecx, ecx
je 0x402f8a
mov eax, dword [ecx]
sub esp, 0x10
movsd qword [esp + 8], xmm1
movsd qword [esp], xmm0
push 2
push dword [edi + 0x78]
call dword [eax]
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x402fc1
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402fb7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push edx
push ecx
call fcn.00439095
add esp, 8
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x403010
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x403006
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403201
push edx
push ecx
call fcn.00439095
add esp, 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp eax, 8
jb 0x403040
inc eax
lea ecx, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
call fcn.00405460
xor eax, eax
mov dword [ebp - 0x4c], 0
mov word [ebp - 0x5c], ax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x48], 7
cmp eax, 8
jb 0x403072
inc eax
lea ecx, [ebp - 0xd8]
push eax
push dword [ebp - 0xd8]
call fcn.00405460
mov edi, dword [ebp - 0x170]
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
jmp 0x4030e1
mov eax, dword [ebp - 0x150]
test eax, eax
je 0x4030f4
push eax
call fcn.00447d78
add esp, 4
mov eax, dword [ebp - 0x160]
test eax, eax
je 0x403111
push eax
call fcn.0044f9ce
add esp, 4
mov dword [ebp - 0x160], 0
mov al, byte [ebp - 0x149]
test al, al
jne 0x403128
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov al, byte [ebp - 0x149]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004390b1
mov esp, ebp
pop ebp
ret 8
push 0x48cfd8
lea eax, [ebp - 0x180]
mov dword [ebp - 0x180], 0x48375c
push eax
call fcn.00444d5c
push 0x48d00c
lea eax, [ebp - 0x184]
mov dword [ebp - 0x184], 3
push eax
call fcn.00444d5c
push 0x48d00c
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], 7
push eax
call fcn.00444d5c
push 0x48d00c
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x18c], 0xb
push eax
call fcn.00444d5c
push 0x48d00c
lea eax, [ebp - 0x190]
mov dword [ebp - 0x190], 0xa
push eax
call fcn.00444d5c
call fcn.004480ba
call fcn.00405500
call fcn.00405680
push 0x48d00c
lea eax, [ebp - 0x194]
mov dword [ebp - 0x194], 5
push eax
call fcn.00444d5c
call fcn.004480ba
call fcn.004480ba
call fcn.004480ba
int3