Function at 0x4047c7
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x448923
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10ac
call fcn.0043f800
mov eax, dword [0x45b1d4]
xor eax, esp
mov dword [esp + 0x10a8], eax
push ebx
push esi
push edi
mov eax, dword [0x45b1d4]
xor eax, esp
push eax
lea eax, [esp + 0x10c0]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edi, ecx
cmp dword [edi + 0x14], 0
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], eax
jne 0x404845
xor eax, eax
mov ecx, dword [esp + 0x10c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x10a8]
xor ecx, esp
call fcn.0042d4ab
mov esp, ebp
pop ebp
ret
lea esi, [esp + 0x1c]
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x5c
mov ebx, 0x44d8a0
je 0x40487b
lea esi, [esp + 0x1c]
mov ecx, edi
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x2f
je 0x40487b
push ebx
push edi
call fcn.00401cb3
cmp dword [ebp + 8], 0
jne 0x4048fd
push 0x44d8a4
push edi
call fcn.00401cb3
lea esi, [esp + 0x1c]
mov ecx, edi
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x5c
je 0x4048bf
lea esi, [esp + 0x1c]
mov ecx, edi
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x2f
je 0x4048bf
push ebx
push edi
call fcn.00401cb3
push str.JuleGameWebBrowserPlugin
push edi
call fcn.00401cb3
lea esi, [esp + 0x1c]
mov ecx, edi
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x5c
je 0x4048fd
lea esi, [esp + 0x1c]
mov ecx, edi
call fcn.00401df6
call fcn.00401f9e
cmp word [eax], 0x2f
je 0x4048fd
push ebx
push edi
call fcn.00401cb3
cmp dword [edi + 0x18], 8
lea eax, [edi + 4]
mov dword [esp + 0x14], eax
jb 0x40490c
mov eax, dword [eax]
push eax
call fcn.0040141d
test eax, eax
pop ecx
jne 0x404922
push edi
call fcn.00405d63
jmp 0x40481f
mov eax, edi
lea esi, [esp + 0x7c]
call fcn.00401c8a
and dword [esp + 0x10c8], 0
push str.write_authority_test.tmp
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x94], 8
mov eax, dword [esp + 0x80]
jae 0x40495a
lea eax, [esp + 0x80]
push 0x44d884
push eax
call fcn.0042d580
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x404988
push edi
call fcn.00405d63
push 0
push 1
lea esi, [esp + 0x84]
call fcn.004022b6
jmp 0x40481f
push str.Write_authority_test.
push esi
call fcn.0042eefe
push esi
mov ebx, eax
call fcn.0042d82b
add esp, 0xc
test ebx, ebx
push edi
jl 0x40496e
call fcn.004013ad
pop ecx
mov esi, str.julegameieplugin.3.ocx
push esi
push dword [esp + 0x1c]
lea eax, [esp + 0x68]
push eax
call fcn.00405e08
add esp, 0xc
push esi
lea eax, [esp + 0x2c]
push edi
push eax
mov byte [esp + 0x10d4], 1
call fcn.00405e08
add esp, 0xc
push 8
mov byte [esp + 0x10cc], 2
mov ecx, dword [esp + 0x30]
pop esi
cmp dword [esp + 0x40], esi
jae 0x4049f0
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov edi, dword [esp + 0x64]
jae 0x4049fe
lea edi, [esp + 0x64]
call fcn.00403e05
test eax, eax
jne 0x404a65
cmp dword [esp + 0x40], esi
mov eax, dword [esp + 0x2c]
jae 0x404a15
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x40], esi
mov ecx, dword [esp + 0x2c]
jae 0x404a2a
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov eax, dword [esp + 0x64]
jae 0x404a38
lea eax, [esp + 0x64]
xor edi, edi
push edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x404a65
push edi
push 1
lea esi, [esp + 0x30]
call fcn.004022b6
push edi
push 1
lea esi, [esp + 0x68]
call fcn.004022b6
push edi
jmp 0x404975
mov edi, str.julegameieplugin.3.inf
push edi
push dword [esp + 0x1c]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x64]
push ecx
xor ebx, ebx
mov byte [esp + 0x10d0], 3
call fcn.00402089
push ebx
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
push edi
push dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x10d0], 4
call fcn.00402089
push ebx
inc ebx
push ebx
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
mov ecx, dword [esp + 0x2c]
push 8
pop esi
cmp dword [esp + 0x40], esi
jae 0x404af1
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov edi, dword [esp + 0x64]
jae 0x404aff
lea edi, [esp + 0x64]
call fcn.00403e05
test eax, eax
jne 0x404b65
cmp dword [esp + 0x40], esi
mov eax, dword [esp + 0x2c]
jae 0x404b16
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x40], esi
mov ecx, dword [esp + 0x2c]
jae 0x404b2b
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov eax, dword [esp + 0x64]
jae 0x404b39
lea eax, [esp + 0x64]
xor edi, edi
push edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x404b65
push edi
push ebx
lea esi, [esp + 0x30]
call fcn.004022b6
push edi
push ebx
lea esi, [esp + 0x68]
call fcn.004022b6
push edi
push ebx
jmp 0x404977
mov edi, str.npjulegameplugin.3.dll
push edi
push dword [esp + 0x1c]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x64]
push ecx
xor ebx, ebx
mov byte [esp + 0x10d0], 5
call fcn.00402089
push ebx
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
push edi
push dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x10d0], 6
call fcn.00402089
push ebx
inc ebx
push ebx
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
mov ecx, dword [esp + 0x2c]
push 8
pop esi
cmp dword [esp + 0x40], esi
jae 0x404bf1
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov edi, dword [esp + 0x64]
jae 0x404bff
lea edi, [esp + 0x64]
call fcn.00403e05
test eax, eax
jne 0x404c4c
cmp dword [esp + 0x40], esi
mov eax, dword [esp + 0x2c]
jae 0x404c16
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x40], esi
mov ecx, dword [esp + 0x2c]
jae 0x404c2b
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov eax, dword [esp + 0x64]
jae 0x404c39
lea eax, [esp + 0x64]
xor edi, edi
push edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x404b48
mov edi, str.uninstallwebplugin.exe
push edi
push dword [esp + 0x1c]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x64]
push ecx
xor ebx, ebx
mov byte [esp + 0x10d0], 7
call fcn.00402089
push ebx
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
push edi
push dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x10d0], 8
call fcn.00402089
push ebx
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 2
call fcn.004022b6
mov ecx, dword [esp + 0x2c]
push 8
pop esi
cmp dword [esp + 0x40], esi
jae 0x404cd8
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov edi, dword [esp + 0x64]
jae 0x404ce6
lea edi, [esp + 0x64]
call fcn.00403e05
test eax, eax
jne 0x404d5f
cmp dword [esp + 0x40], esi
mov eax, dword [esp + 0x2c]
jae 0x404cfd
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x40], esi
mov ecx, dword [esp + 0x2c]
jae 0x404d12
lea ecx, [esp + 0x2c]
cmp dword [esp + 0x78], esi
mov eax, dword [esp + 0x64]
jae 0x404d20
lea eax, [esp + 0x64]
xor edi, edi
push edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x404d61
xor ebx, ebx
push edi
push 1
lea esi, [esp + 0x30]
call fcn.004022b6
push edi
push 1
lea esi, [esp + 0x68]
call fcn.004022b6
push edi
push 1
lea esi, [esp + 0x84]
call fcn.004022b6
mov eax, ebx
jmp 0x404821
xor edi, edi
push 0x44d7c0
push str.CLSIDE404B657_3887_49f8_ABFE_99611CAED063InprocServer32
lea eax, [esp + 0xa0]
push connect
push eax
call section..text
add esp, 0x10
mov byte [esp + 0x10c8], 9
cmp dword [esp + 0xb0], esi
mov eax, dword [esp + 0x9c]
mov word [esp + 0xb4], di
jae 0x404da7
lea eax, [esp + 0x9c]
push 0x800
lea ecx, [esp + 0xb8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea eax, [esp + 0xb4]
lea esi, [esp + 0x98]
mov word [esp + 0x10b2], di
call fcn.0040210f
mov eax, esi
push eax
call fcn.004013ad
mov dword [esp], str.julegameieplugin.3.ocx
push dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
push ecx
xor ebx, ebx
mov byte [esp + 0x10d0], 0xa
call fcn.00402089
push edi
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 9
call fcn.004022b6
cmp dword [esp + 0x40], 8
mov eax, dword [esp + 0x2c]
jae 0x404e2f
lea eax, [esp + 0x2c]
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0xac]
push eax
lea eax, [esp + 0x9c]
call fcn.00405e4d
test eax, eax
je 0x404fae
cmp dword [esp + 0x40], 8
mov eax, dword [esp + 0x2c]
jae 0x404e5e
lea eax, [esp + 0x2c]
push eax
call fcn.00401a10
pop ecx
mov ebx, str.SoftwareMicrosoftWindowsCurrentVersionExtStatsE404B657_3887_49f8_ABFE_99611CAED063iexploreAllowedDomains_
mov eax, ebx
lea ecx, [esp + 0x44]
call fcn.00401c6e
push str.37wan.com
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x10d0], 0xb
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404e9b
lea eax, [esp + 0x48]
push eax
mov edi, getpeername
push edi
call fcn.004012d0
pop ecx
pop ecx
mov eax, ebx
lea esi, [esp + 0x44]
call fcn.0040210f
push str.gm99.com
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404ed0
lea eax, [esp + 0x48]
push eax
push edi
call fcn.004012d0
pop ecx
pop ecx
mov eax, ebx
lea esi, [esp + 0x44]
call fcn.0040210f
push str.qqopenapp.com
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404f00
lea eax, [esp + 0x48]
push eax
push edi
call fcn.004012d0
pop ecx
pop ecx
mov eax, ebx
lea esi, [esp + 0x44]
call fcn.0040210f
push str.gamecoke.co.kr
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404f30
lea eax, [esp + 0x48]
push eax
push edi
call fcn.004012d0
pop ecx
pop ecx
mov eax, ebx
lea esi, [esp + 0x44]
call fcn.0040210f
push str.gamecoke.co.kr
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404f60
lea eax, [esp + 0x48]
push eax
push edi
call fcn.004012d0
pop ecx
pop ecx
mov eax, ebx
lea esi, [esp + 0x44]
call fcn.0040210f
push str.dcz.gamecoke.co.kr
mov eax, esi
push eax
call fcn.00401cb3
cmp dword [esp + 0x5c], 8
mov eax, dword [esp + 0x48]
jae 0x404f90
lea eax, [esp + 0x48]
push eax
push edi
call fcn.004012d0
pop ecx
pop ecx
push 0
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 9
call fcn.004022b6
push str.npjulegameplugin.3.dll
push dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
call fcn.00405e08
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x2c]
push ecx
xor ebx, ebx
mov byte [esp + 0x10d0], 0xc
call fcn.00402089
push ebx
push 1
lea esi, [esp + 0x4c]
mov byte [esp + 0x10d0], 9
call fcn.004022b6
lea eax, [esp + 0x28]
push eax
call fcn.004013ad
cmp dword [esp + 0x44], 8
pop ecx
mov ecx, dword [esp + 0x2c]
jae 0x405008
lea ecx, [esp + 0x2c]
push 1
push 1
mov esi, getpeername
push str.Path
mov ebx, str.softwareMozillaPlugins_gameplayer3.julegame.com
mov edi, esi
call fcn.00403ece
add esp, 0xc
push 0
push 0
push str.Name
mov ecx, str.NPJuleGamePlayer
call fcn.00403ece
add esp, 0xc
push 0
push 0
push str.Vendor
mov ecx, str.Jule_game_co._ltd
call fcn.00403ece
add esp, 0xc
push 0
push 0
push 0x44df3c
mov ecx, str.1.0.0.32
call fcn.00403ece
mov ecx, dword [esp + 0x38]
add esp, 0xc
cmp dword [esp + 0x40], 8
jae 0x405076
lea ecx, [esp + 0x2c]
push 1
push 1
push str.Path
mov edi, getpeername
call fcn.00403ece
add esp, 0xc
push 0
push 0
push str.Name
mov ecx, str.NPJuleGamePlayer
call fcn.00403ece
add esp, 0xc
push 0
push 0
push str.Vendor
mov ecx, str.Jule_game_co._ltd
call fcn.00403ece
add esp, 0xc
push 0
push 0
push 0x44df3c
mov ecx, str.1.0.0.32
call fcn.00403ece
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x4050e0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
jmp 0x4050e4
mov ecx, dword [esp + 0x14]
push 0
push 1
push str.JuleGameWebBrowserPlugin
mov ebx, str.softwarejulegamepath
mov edi, esi
call fcn.00403ece
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp dword [eax + 0x18], 8
mov eax, dword [esp + 0x14]
jb 0x40510c
mov eax, dword [eax]
push str.webplugin
push str.0415C3FA_DF97_4514_AADC_4ADD6AC6D577_is1
xor ebx, ebx
push eax
inc ebx
push ebx
mov edx, str.1.0.0.32
mov ecx, str.Jule_game_web_plugin
call fcn.00403f4b
add esp, 0x10
push 0
push ebx
lea esi, [esp + 0xa0]
call fcn.004022b6
xor edi, edi
jmp 0x404d31