Function at 0x419579
Capabilities:
Delete file
Link many functions at runtime

Disassembly:
sub esp, 0x124
mov al, byte [0x47f294]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x20], ecx
test al, 0x10
mov ebp, 0x47f7c8
mov edi, 0x47f3f0
je 0x419609
test al, 0x20
je 0x419609
push 0x4c
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419609
push 0x4c
mov ecx, edi
call fcn.0041da60
push eax
push 0x48
mov ecx, edi
call fcn.0041da60
push eax
mov ecx, ebp
call fcn.0041de81
mov esi, 0x47f67c
push eax
mov ecx, esi
call fcn.0041dc28
test eax, eax
jge 0x4195de
push 0xfffffffffffffff6
jmp 0x41a1b5
mov ecx, esi
call fcn.0041d42e
test al, al
jne 0x419609
push 0
mov ecx, 0x47fcbc
call fcn.0041de81
push eax
push 0
mov ecx, 0x47f0b8
call fcn.0041c404
push 0xfffffffffffffff5
jmp 0x41a1b5
cmp byte [0x48038c], 0
jne 0x419a09
push 0x10
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419796
push 0x14
mov ecx, edi
call fcn.0041da60
push 0x10
mov ecx, edi
mov esi, eax
call fcn.0041da60
test eax, eax
jle 0x419796
mov dword [esp + 0x10], eax
push 0x18
call fcn.004260f9
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41965e
mov ecx, ebx
call fcn.0041cf28
jmp 0x419660
xor ebx, ebx
test ebx, ebx
jne 0x419675
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
and byte [ebx + 0x11], 0
lea ecx, [esp + 0x14]
call fcn.0041cf28
push 4
push esi
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
push eax
lea eax, [esi + 4]
push eax
mov ecx, ebp
call fcn.0041de81
push eax
mov ecx, ebx
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
lea esi, [esi + eax + 4]
push 4
push esi
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
add esi, 4
push 4
push esi
mov ecx, ebp
mov dword [ebx + 0xc], eax
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
test eax, eax
setne al
add esi, 4
push 4
push esi
mov ecx, ebp
mov byte [ebx + 0x10], al
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
add esi, 4
push eax
push esi
mov ecx, ebp
mov dword [esp + 0x2c], eax
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
add esi, dword [esp + 0x24]
and dword [esp + 0x28], 0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x14]
push eax
call fcn.0041de81
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ebx + 0x14]
push eax
mov ecx, dword [esp + 0x30]
call fcn.004177ba
push 0xffffffffffffffff
push ebx
mov ecx, 0x47f60c
call fcn.0041fb14
lea ecx, [esp + 0x14]
call fcn.0041d05e
dec dword [esp + 0x10]
jne 0x419647
cmp byte [0x48038c], 0
jne 0x419a09
push 0x18
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419835
push 0x1c
mov ecx, edi
call fcn.0041da60
push 0x18
mov ecx, edi
mov esi, eax
call fcn.0041da60
test eax, eax
jle 0x419835
mov ebx, eax
lea ecx, [esp + 0x14]
call fcn.0041cf28
push 4
push esi
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
add esi, 4
call fcn.0041da60
mov ecx, eax
mov edx, eax
and ecx, 0xff0000
push 0xffffffffffffffff
shr edx, 0x10
or ecx, edx
mov edx, eax
shl edx, 0x10
and eax, 0xff00
or edx, eax
shr ecx, 8
shl edx, 8
or ecx, edx
push ecx
mov ecx, 0x47f634
call fcn.0041fb14
lea ecx, [esp + 0x14]
call fcn.0041d05e
dec ebx
jne 0x4197ce
cmp byte [0x48038c], 0
jne 0x419a09
push 0x20
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x4199cf
push 0x24
mov ecx, edi
call fcn.0041da60
push 0x20
mov ecx, edi
mov esi, eax
call fcn.0041da60
and dword [esp + 0x10], 0
mov dword [esp + 0x2c], eax
test eax, eax
jle 0x4199cf
push 0x10
call fcn.004260f9
mov ebx, eax
pop ecx
test ebx, ebx
je 0x419894
lea ecx, [ebx + 4]
call fcn.0041cf28
mov dword [esp + 0x24], ebx
jmp 0x419899
and dword [esp + 0x24], 0
lea ecx, [esp + 0x14]
call fcn.0041cf28
push 4
mov ecx, ebp
pop ebx
push ebx
push esi
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
add esi, ebx
call fcn.0041da60
mov ecx, dword [esp + 0x24]
push ebx
push esi
mov dword [ecx], eax
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0x104
add esi, ebx
call fcn.004260f9
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x419902
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push str..bmp
push ebx
call fcn.0041ee09
mov eax, dword [esp + 0x2c]
pop ecx
pop ecx
lea ecx, [eax + 4]
push ebx
call fcn.0041d075
push ebx
call fcn.004260ee
pop ecx
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
push 1
mov ebx, eax
pop eax
mov dword [esp + 0x28], ebx
mov dword [0x48032c], eax
mov dword [0x47f390], eax
mov eax, dword [0x48039c]
test eax, eax
je 0x419951
push eax
call fcn.004260ee
pop ecx
push 4
call fcn.004260f9
test eax, eax
pop ecx
mov dword [0x48039c], eax
jne 0x419978
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
mov eax, dword [0x48039c]
pop ecx
push dword [esp + 0x28]
add ebx, esi
mov dword [eax], ebx
mov eax, dword [esp + 0x28]
push esi
lea ecx, [eax + 4]
call fcn.0041de81
push eax
mov ecx, ebp
call fcn.0041de81
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
jne 0x4199f9
push 0xffffffffffffffff
mov ecx, 0x47f620
push dword [esp + 0x28]
mov esi, ebx
call fcn.0041fb14
lea ecx, [esp + 0x14]
call fcn.0041d05e
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x2c]
jl 0x419878
cmp byte [0x48038c], 0
jne 0x419a09
push 0x28
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419a09
mov ecx, dword [esp + 0x20]
call fcn.0041ad1a
test al, al
jne 0x419a09
push 0xffffffffffffffd3
jmp 0x41a1b5
lea ecx, [esp + 0x14]
call fcn.0041d05e
push 0xffffffffffffffd6
jmp 0x41a1b5
push 0x5c
mov ecx, edi
call fcn.0041da60
test eax, eax
mov ebx, 0x47f9a0
je 0x419a78
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x419a3d
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push 0x60
push esi
mov ecx, ebx
call fcn.004129d4
test al, al
jne 0x419a53
or edi, 0xffffffff
jmp 0x419ad6
push esi
mov ecx, 0x47f084
call fcn.0041d075
push esi
mov ecx, 0x47f810
call fcn.0041f943
test al, al
jne 0x419a71
push 0xfffffffffffffffe
jmp 0x419ad5
push esi
call fcn.004260ee
pop ecx
push 0x50
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419aeb
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x419aa7
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push 0x54
push esi
mov ecx, ebx
call fcn.004129d4
test al, al
jne 0x419ab9
push 0xfffffffffffffffd
jmp 0x419ad5
push esi
mov ecx, 0x47f078
call fcn.0041d075
push esi
mov ecx, 0x47f3d0
call fcn.0041ceb8
test al, al
jne 0x419ae4
push 0xfffffffffffffffc
pop edi
push esi
call fcn.004260ee
pop ecx
mov eax, edi
jmp 0x41a1b6
push esi
call fcn.004260ee
pop ecx
cmp byte [0x48038c], 0
jne 0x419d3f
push 0x80
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419caa
mov esi, 0x88
mov ecx, edi
push esi
call fcn.0041da60
push eax
mov ecx, 0x480318
call fcn.0041084d
cmp eax, 2
jne 0x419bed
push 0x104
call fcn.004260f9
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x419b4f
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push str..jpg
push ebx
call fcn.0041ee09
pop ecx
pop ecx
push 0
push 0x8c
mov ecx, edi
call fcn.0041da60
push eax
push esi
mov ecx, edi
call fcn.0041da60
push eax
push ebx
mov ecx, 0x47f9a0
call fcn.0041138c
test al, al
jne 0x419b91
push ebx
call fcn.004260ee
pop ecx
push 0xfffffffffffffffb
jmp 0x41a1b5
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x419bb3
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push str..bmp
push esi
call fcn.0041ee09
pop ecx
pop ecx
push esi
push ebx
call dword [0x47f3d8]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
mov ecx, 0x47f09c
call fcn.0041d075
push ebx
call fcn.004260ee
push esi
call fcn.004260ee
pop ecx
pop ecx
jmp 0x419ca5
push 0x84
mov ecx, edi
call fcn.0041da60
cmp eax, 1
jne 0x419caa
lea eax, [esp + 0x30]
push str..bmp
push eax
call fcn.0041ee09
pop ecx
pop ecx
push esi
mov ecx, edi
call fcn.0041da60
push 0x8c
mov ecx, edi
mov esi, eax
call fcn.0041da60
push 1
mov ebx, eax
pop eax
mov dword [0x48032c], eax
mov dword [0x47f390], eax
mov eax, dword [0x48039c]
test eax, eax
je 0x419c48
push eax
call fcn.004260ee
pop ecx
push 4
call fcn.004260f9
test eax, eax
pop ecx
mov dword [0x48039c], eax
jne 0x419c6f
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
mov eax, dword [0x48039c]
pop ecx
lea ecx, [ebx + esi]
push ebx
mov dword [eax], ecx
lea eax, [esp + 0x34]
push esi
push eax
mov ecx, ebp
call fcn.0041de81
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
je 0x419c96
push 0xffffffffffffffd1
jmp 0x41a1b5
lea eax, [esp + 0x30]
mov ecx, 0x47f09c
push eax
call fcn.0041d075
mov ebx, 0x47f9a0
cmp byte [0x48038c], 0
jne 0x419d3f
push 0x74
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419d3f
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x419ce6
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push str..mp3
push esi
call fcn.0041ee09
pop ecx
pop ecx
push 0
push 0x7c
mov ecx, edi
call fcn.0041da60
push eax
push 0x78
mov ecx, edi
call fcn.0041da60
push eax
push esi
mov ecx, ebx
call fcn.0041138c
test al, al
push esi
jne 0x419d23
call fcn.004260ee
pop ecx
push 0xfffffffffffffffa
jmp 0x41a1b5
mov ecx, 0x47f858
call fcn.0041d075
push esi
mov ecx, 0x47f0a8
call fcn.0041d075
push esi
call fcn.004260ee
pop ecx
push 0x68
mov ecx, edi
call fcn.0041da60
test eax, eax
je 0x419f28
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x419d72
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push 0x6c
push esi
mov ecx, ebx
call fcn.004129d4
test al, al
push esi
jne 0x419d8e
call fcn.004260ee
pop ecx
push 0xfffffffffffffff9
jmp 0x41a1b5
mov ecx, 0x47f090
call fcn.0041d075
push esi
mov ecx, 0x480380
call fcn.0041d075
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
mov dword [0x48037c], eax
call fcn.004260ee
mov eax, dword [0x48037c]
pop ecx
test eax, eax
jne 0x419dc6
push 0xfffffffffffffff8
jmp 0x41a1b5
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AdvancedEntry
push eax
call esi
push str.EntryPoint0
mov dword [0x480330], eax
push dword [0x48037c]
call esi
push str.EntryPoint1
mov dword [0x480334], eax
push dword [0x48037c]
call esi
push str.EntryPoint1_5
mov dword [0x48033c], eax
push dword [0x48037c]
call esi
push str.EntryPoint2
mov dword [0x480338], eax
push dword [0x48037c]
call esi
push str.EntryPoint3
mov dword [0x480340], eax
push dword [0x48037c]
call esi
push str.EntryPoint4
mov dword [0x480344], eax
push dword [0x48037c]
call esi
push str.EntryPoint5
mov dword [0x480348], eax
push dword [0x48037c]
call esi
push str.EntryPoint6
mov dword [0x48034c], eax
push dword [0x48037c]
call esi
push str.EntryPoint7
mov dword [0x480350], eax
push dword [0x48037c]
call esi
push str.EntryPoint8
mov dword [0x480354], eax
push dword [0x48037c]
call esi
push str.EntryPoint9
mov dword [0x480358], eax
push dword [0x48037c]
call esi
push str.EntryPoint10
mov dword [0x48035c], eax
push dword [0x48037c]
call esi
push str.EntryPoint11
mov dword [0x480360], eax
push dword [0x48037c]
call esi
push str.EntryPoint12
mov dword [0x480364], eax
push dword [0x48037c]
call esi
push str.EntryPoint13
mov dword [0x480368], eax
push dword [0x48037c]
call esi
push str.EntryPointCustom
mov dword [0x48036c], eax
push dword [0x48037c]
call esi
push str.SystemInformation
mov dword [0x480370], eax
push dword [0x48037c]
call esi
push str.OnMessage
mov dword [0x480374], eax
push dword [0x48037c]
call esi
test eax, eax
mov dword [0x480378], eax
je 0x419f28
or byte [0x47f28f], 0x80
push 0x90
mov ecx, edi
call fcn.0041da60
cmp byte [0x48038c], 0
mov esi, eax
jne 0x41a0aa
test esi, esi
jle 0x41a03d
lea eax, [esi + esi*2]
lea eax, [eax*4 + 4]
push eax
call fcn.004260f9
test eax, eax
pop ecx
je 0x419f8b
mov dword [eax], esi
lea ebx, [eax + 4]
lea eax, [esi - 1]
mov dword [esp + 0x10], ebx
test eax, eax
jl 0x419f8d
inc eax
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x10]
call fcn.0041cf28
add dword [esp + 0x10], 0xc
dec dword [esp + 0x20]
jne 0x419f75
jmp 0x419f8d
xor ebx, ebx
test ebx, ebx
mov dword [0x47f880], ebx
jne 0x419fa8
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push 0x94
mov ecx, edi
mov dword [0x47f884], esi
call fcn.0041da60
test esi, esi
mov ebx, eax
jle 0x41a034
and dword [esp + 0x10], 0
mov dword [esp + 0x20], esi
lea ecx, [esp + 0x14]
call fcn.0041cf28
push 4
push ebx
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
push 0
lea ecx, [esp + 0x18]
call fcn.0041da60
mov esi, eax
add ebx, 4
push esi
push ebx
mov ecx, ebp
call fcn.0041de81
push eax
lea ecx, [esp + 0x20]
call fcn.0041dc28
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
mov eax, dword [0x47f880]
add ecx, eax
add ebx, esi
call fcn.0041d0e3
lea ecx, [esp + 0x14]
call fcn.0041d05e
add dword [esp + 0x10], 0xc
dec dword [esp + 0x20]
jne 0x419fc9
cmp byte [0x48038c], 0
jne 0x41a0aa
push 0xa0
mov ecx, edi
call fcn.0041da60
push eax
mov ecx, 0x47f0b8
mov dword [0x47f70c], eax
call fcn.004163c4
test al, al
jne 0x41a064
push 0xfffffffffffffff0
jmp 0x41a1b5
mov esi, 0x47f800
push 0x42f1c8
mov ecx, esi
call fcn.0041d075
test byte [0x47f28c], 0x40
mov ecx, 0x47f450
je 0x41a090
call fcn.0041de81
push eax
mov ecx, 0x47fa1c
jmp 0x41a09b
call fcn.0041de81
push eax
mov ecx, 0x47fa10
call fcn.0041de81
push eax
push esi
call fcn.0041d5b5
add esp, 0xc
mov ebx, 0xa8
mov ecx, edi
push ebx
call fcn.0041da60
test eax, eax
je 0x41a1b3
test byte [0x47f292], 2
jne 0x41a1b3
push 0x104
call fcn.004260f9
mov esi, eax
pop ecx
test esi, esi
jne 0x41a0ee
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push str..EXE
push esi
call fcn.0041ee09
pop ecx
pop ecx
push esi
mov ecx, 0x47f8a8
call fcn.0041d075
push 1
pop eax
mov dword [0x48032c], eax
mov dword [0x47f390], eax
mov eax, dword [0x48039c]
test eax, eax
je 0x41a123
push eax
call fcn.004260ee
pop ecx
push 4
call fcn.004260f9
test eax, eax
pop ecx
mov dword [0x48039c], eax
jne 0x41a145
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push 0xac
mov ecx, edi
call fcn.0041da60
mov edx, eax
push ebx
mov ecx, edi
mov dword [esp + 0x30], edx
call fcn.0041da60
mov ecx, dword [esp + 0x2c]
push 0xa8
add ecx, eax
mov eax, dword [0x48039c]
mov dword [eax], ecx
mov ecx, edi
call fcn.0041da60
push eax
push 0xac
mov ecx, edi
call fcn.0041da60
push eax
push esi
mov ecx, ebp
call fcn.0041de81
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
push esi
je 0x41a1ad
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
call fcn.004260ee
pop ecx
push 0xfffffffffffffff1
jmp 0x41a1b5
call fcn.004260ee
pop ecx
push 1
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x124
ret