Function at 0x416470
Capabilities:
Check if file exists
Create thread
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e0e2e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x180
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 0x18], 0
push edi
mov dword [ebp - 0x38], ebx
mov ecx, 0x51372e
mov dword [ebp - 4], 0
call fcn.004ba18d
push 0x104
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.004bd210
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x188], eax
mov eax, dword [ebx + 4]
push 4
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x80], 0
call fcn.004ba1e2
add esp, 0x10
mov dword [eax], 0
push 0
push 0
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x18c]
push eax
push 0x417590
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00405850
mov ecx, eax
test ecx, ecx
je 0x416d18
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp + 8]
mov byte [ebp - 4], 1
mov byte [ebp + 0xf], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, 0x5a
test eax, eax
jne 0x416694
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x49005a
lea ebx, [ebp - 0x2c]
mov dword [ebp - 0x30], 0x50
sub ebx, eax
mov dword [ebp - 0x28], 0
mov edi, ebx
mov dword [ebp - 0x24], 0
sar edi, 1
lea esi, [ecx - 0x5a]
mov dword [ebp - 0x20], 0
je 0x4165a9
cmp edi, 0x7fffffff
ja 0x416d22
push edi
lea ecx, [ebp - 0x28]
call fcn.00403640
mov esi, eax
lea eax, [ebp - 0x34]
push ebx
push eax
push esi
lea ecx, [esi + edi*2]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], ecx
call fcn.004bcc90
lea eax, [esi + edi*2]
add esp, 0xc
mov dword [ebp - 0x24], eax
push ecx
mov edi, esp
mov byte [ebp - 4], 2
mov dword [ebp - 0x58], esp
mov dword [ebp - 0x14], edi
call fcn.00405850
mov ecx, eax
test ecx, ecx
je 0x416d27
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.00404870
test al, al
jne 0x416608
test esi, esi
jne 0x4165e7
xor ecx, ecx
jmp 0x4165ff
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4165f0
sub ecx, edx
sar ecx, 1
push ecx
push esi
mov ecx, edi
call fcn.00406920
push 0x82
push ecx
mov esi, esp
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], esi
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
push eax
call fcn.00404960
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 2
call fcn.0040b590
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov bl, al
call fcn.0040b7b0
test bl, bl
jne 0x416694
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x50]
push 0xc
push eax
call fcn.00416fa0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x10
jb 0x416c89
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x416685
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416d54
push ecx
push edx
call fcn.004ba17f
add esp, 8
jmp 0x416c89
call fcn.004089c0
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x54], 1
lea ecx, [ebp - 0x3a]
mov dword [ebp - 0x4c], 0x37005c
sub ecx, edx
mov dword [ebp - 0x48], 0x61007a
xor eax, eax
mov dword [ebp - 0x44], 0x65002e
xor esi, esi
mov dword [ebp - 0x40], 0x650078
mov edi, ecx
mov word [ebp - 0x3c], ax
sar edi, 1
mov ebx, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
je 0x416718
cmp edi, 0x7fffffff
ja 0x416d31
push edi
lea ecx, [ebp - 0x28]
call fcn.00403640
push dword [ebp - 0x14]
mov esi, eax
mov dword [ebp - 0x28], esi
lea eax, [esi + edi*2]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
push eax
push esi
call fcn.004bcc90
lea eax, [esi + edi*2]
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, esi
mov edi, dword [ebp - 0x38]
mov edi, dword [edi + 4]
mov eax, dword [edi + 4]
mov byte [ebp - 4], 6
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x416737
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x41674d
call fcn.00405850
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x416d36
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x10], eax
test ebx, ebx
jne 0x416767
xor ecx, ecx
jmp 0x41677f
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416770
sub ecx, edx
sar ecx, 1
mov eax, dword [edi + 4]
push ecx
push ebx
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00404a40
mov eax, dword [ebp - 0x10]
add esp, 0x14
mov ebx, dword [ebp - 0x1c]
add ebx, 0xfffffff0
lea edi, [eax - 0x10]
cmp edi, ebx
je 0x4167ea
cmp dword [ebx + 0xc], 0
jl 0x4167de
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x4167de
push edi
call fcn.00404960
add esp, 4
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
lea edx, [ebx + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4167d6
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov dword [ebp - 0x1c], eax
jmp 0x4167ea
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00406920
mov byte [ebp - 4], 5
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x416803
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
test esi, esi
je 0x41683d
mov eax, dword [ebp - 0x20]
sub eax, esi
sar eax, 1
lea ecx, [eax + eax]
mov eax, esi
cmp ecx, 0x1000
jb 0x416833
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416d40
push ecx
push esi
call fcn.004ba17f
add esp, 8
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0x49005a
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 0x50
sub eax, ecx
mov dword [ebp - 0x44], 0
xor ebx, ebx
mov dword [ebp - 0x40], 0
mov esi, eax
mov dword [ebp - 0x3c], ebx
sar esi, 1
mov edi, ebx
mov dword [ebp - 0x18], eax
je 0x4168a7
cmp esi, 0x7fffffff
ja 0x416d45
push esi
lea ecx, [ebp - 0x44]
call fcn.00403640
push dword [ebp - 0x18]
mov edi, eax
lea eax, [ebp - 0x34]
push eax
push edi
mov dword [ebp - 0x44], edi
lea ebx, [edi + esi*2]
mov dword [ebp - 0x3c], ebx
call fcn.004bcc90
lea eax, [edi + esi*2]
add esp, 0xc
mov dword [ebp - 0x40], eax
push ecx
mov esi, esp
mov byte [ebp - 4], 7
mov dword [ebp - 0x58], esp
mov dword [ebp - 0x18], esi
call fcn.00405850
mov ecx, eax
test ecx, ecx
je 0x416d4a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
push edi
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.00404870
test al, al
jne 0x416908
test edi, edi
jne 0x4168e5
xor ecx, ecx
jmp 0x4168ff
mov ecx, edi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4168f0
sub ecx, edx
sar ecx, 1
push ecx
push edi
mov ecx, esi
call fcn.00406920
push 0x86
push ecx
mov esi, esp
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
push eax
call fcn.00404960
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 7
call fcn.0040b590
add esp, 0xc
mov byte [ebp - 4], 1
test al, al
sete al
mov byte [ebp - 0x29], al
test edi, edi
je 0x416978
sub ebx, edi
sar ebx, 1
add ebx, ebx
cmp ebx, 0x1000
jb 0x41696b
mov ecx, dword [edi - 4]
add ebx, 0x23
sub edi, ecx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x416d40
mov edi, ecx
push ebx
push edi
call fcn.004ba17f
mov al, byte [ebp - 0x29]
add esp, 8
test al, al
je 0x4169d4
push dword [ebp - 0x1c]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4169d4
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x50]
push 0x11
push eax
call fcn.00416fa0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x10
jb 0x4169cb
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4169c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416d54
push ecx
push edx
call fcn.004ba17f
add esp, 8
mov byte [ebp + 0xf], 0
jmp 0x416cc2
lea eax, [ebp - 0x78]
mov dword [ebp - 0x14], 0
lea esi, [ebp - 0x66]
mov dword [ebp - 0x34], eax
sub esi, eax
mov dword [ebp - 0x58], esi
nop dword [eax]
movaps xmm0, xmmword [0x4e7cf0]
xor eax, eax
xor edi, edi
mov dword [ebp - 0x64], 0x74002d
xor ebx, ebx
mov dword [ebp - 0x60], 0x7a0037
mov word [ebp - 0x5c], ax
mov word [ebp - 0x68], 0x75
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
movups xmmword [ebp - 0x78], xmm0
test esi, esi
je 0x416a61
cmp esi, 0x7fffffff
ja 0x416d59
push esi
lea ecx, [ebp - 0x28]
call fcn.00402970
mov edi, eax
mov dword [ebp - 0x28], edi
lea eax, [edi + esi]
mov dword [ebp - 0x20], eax
lea esi, [ebp - 0x66]
lea eax, [ebp - 0x78]
sub esi, eax
push esi
push eax
push edi
call fcn.004bcc90
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, edi
mov byte [ebp - 4], 0xa
call fcn.00405850
test eax, eax
je 0x416d18
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
push ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xb
call fcn.00404870
test al, al
jne 0x416afd
test ebx, ebx
je 0x416af5
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [eax - 1]
test esi, esi
jle 0x416af5
mov ecx, dword [ebp - 0x10]
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or eax, edx
jge 0x416acc
push esi
lea ecx, [ebp - 0x10]
call fcn.00406130
mov ecx, dword [ebp - 0x10]
push esi
push ecx
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x10]
cmp esi, dword [eax - 8]
jg 0x416d5e
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov word [eax + esi*2], cx
jmp 0x416afd
lea ecx, [ebp - 0x10]
call fcn.004051c0
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x5a]
mov dword [ebp - 0x40], 0
sub eax, ecx
mov dword [ebp - 0x3c], 0
mov ebx, eax
mov dword [ebp - 0x18], eax
sar ebx, 1
mov esi, 0
je 0x416b66
cmp ebx, 0x7fffffff
ja 0x416d22
push ebx
lea ecx, [ebp - 0x44]
call fcn.00403640
push dword [ebp - 0x18]
mov esi, eax
lea eax, [ebp - 0x64]
push eax
push esi
mov dword [ebp - 0x44], esi
lea ecx, [esi + ebx*2]
mov dword [ebp - 0x3c], ecx
call fcn.004bcc90
lea eax, [esi + ebx*2]
add esp, 0xc
mov dword [ebp - 0x40], eax
push ecx
mov ebx, esp
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x30], ebx
call fcn.00405850
test eax, eax
je 0x416d18
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
push esi
mov ecx, ebx
mov byte [ebp - 4], 0xe
call fcn.00404870
test al, al
jne 0x416bbe
test esi, esi
jne 0x416ba1
xor ecx, ecx
jmp 0x416bb5
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416ba6
sub ecx, edx
sar ecx, 1
push ecx
push esi
mov ecx, ebx
call fcn.00406920
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xd
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
add eax, 4
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407a70
add esp, 0x18
lea ecx, [ebp - 0x44]
call fcn.0040b7b0
mov edx, dword [ebp - 0x10]
or eax, 0xffffffff
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416c07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
test edi, edi
je 0x416c51
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x416c32
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416d40
push ecx
push edi
call fcn.004ba17f
add esp, 8
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x416c85
cmp eax, 0x103
je 0x416c81
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 2
jge 0x416c7e
mov esi, dword [ebp - 0x58]
jmp 0x4169f0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x416c89
mov byte [ebp + 0xf], 1
mov eax, dword [ebp - 0x38]
push 0
push 0x32
push 0x466
mov eax, dword [eax + 4]
mov dword [ebp - 0x80], 1
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call esi
push dword [ebp - 0x1c]
call esi
mov edx, dword [ebp - 0x1c]
or ebx, 0xffffffff
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416ce3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x416d02
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp + 0xf]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x80004005
call fcn.00404840
call fcn.0040b810
push 0x80004005
call fcn.00404840
call fcn.0040b810
push 0x80004005
call fcn.00404840
call fcn.004c10cf
call fcn.0040b810
push 0x80004005
call fcn.00404840
call fcn.004c10cf
call fcn.0040b810
push 0x80070057
call fcn.00404840
int3