Function at 0x40c311
Capabilities:
Accept command line arguments
Delete file

Disassembly:
push ebp
mov eax, 0x2b50
lea ebp, [esp - 0x68]
call fcn.00411570
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.DLL_GetCommandLineA]
call fcn.0041011a
xor ebx, ebx
push ebx
mov word [0x4277f0], ax
call dword [sym.imp.ole32.dll_CoInitialize]
push ebx
push dword [ebp + 0x70]
mov ecx, 0x428240
push 0x428210
call fcn.004090e1
xor eax, eax
mov esi, 0xff
mov byte [ebp - 0x19e8], bl
mov ecx, esi
lea edi, [ebp - 0x19e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x26e8], bl
mov ecx, esi
lea edi, [ebp - 0x26e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
push 0x7f
pop ecx
mov byte [ebp - 0x398], bl
lea edi, [ebp - 0x397]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
push 0x3f
pop ecx
mov byte [ebp - 0x498], bl
lea edi, [ebp - 0x497]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xc98], bl
mov ecx, esi
lea edi, [ebp - 0xc97]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x22e8], bl
mov ecx, esi
lea edi, [ebp - 0x22e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x898], bl
mov ecx, esi
lea edi, [ebp - 0x897]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x3f
pop ecx
xor eax, eax
lea edi, [ebp - 0x197]
mov byte [ebp - 0x198], bl
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x50], ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1de8], bl
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x1de7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str.amd64
push str.i586
stosb byte es:[edi], al
mov byte [0x427e10], bl
mov byte [0x4277f8], bl
mov byte [0x427bf8], bl
mov byte [0x427e0c], bl
mov dword [ebp + 0x4c], ebx
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c45a
mov dword [ebp + 0x4c], 1
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push str.jkernel
push 0x427df8
call edi
call dword [0x426060]
push ebx
mov dword [ebp + 0x44], eax
call fcn.0040e8e3
lea eax, [ebp - 0x398]
mov dword [esp], 0x41f76c
push eax
call edi
push 0x400
lea eax, [ebp - 0x19e8]
push eax
push str.InstallerXmlURL
call fcn.0040e7a6
add esp, 0xc
test eax, eax
jne 0x40c4c2
push str.http:__java.sun.com_update_1.6.0_1.6.0_10_b92.xml
lea eax, [ebp - 0x19e8]
push 0x420358
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x19e8]
push eax
lea eax, [ebp - 0x1de8]
push eax
call edi
xor eax, eax
inc eax
cmp dword [0x428420], eax
mov dword [ebp + 0x5c], eax
jle 0x40c820
mov edi, dword [ebp + 0x5c]
mov eax, dword [0x428424]
push 0x420a40
shl edi, 2
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c50d
mov dword [ebp + 0x60], 1
jmp 0x40c785
mov eax, dword [0x428424]
push str._installurl
push dword [edi + eax]
call fcn.004114e0
pop ecx
test eax, eax
mov eax, dword [0x428424]
pop ecx
je 0x40c5bd
push 0x420a2c
push dword [edi + eax]
call fcn.004114e0
pop ecx
inc eax
pop ecx
mov dword [ebp + 0x54], eax
jne 0x40c547
xor eax, eax
jmp 0x40c572
push dword [ebp + 0x54]
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
inc eax
mov dword [ebp + 0x48], eax
add eax, eax
add eax, 3
and eax, 0xfffffffc
call fcn.00411570
mov eax, esp
push dword [ebp + 0x44]
push dword [ebp + 0x48]
push dword [ebp + 0x54]
push eax
call fcn.00408f88
push ebx
push eax
push ebx
call sub.urlmon.dll_IsValidURL
neg eax
sbb eax, eax
neg eax
mov dword [ebp + 0x54], eax
mov eax, dword [0x428424]
push 0x420a2c
push dword [edi + eax]
call fcn.004114e0
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcpyA]
pop ecx
pop ecx
inc eax
push eax
lea eax, [ebp - 0x19e8]
push eax
call edi
lea eax, [ebp - 0x19e8]
push eax
lea eax, [ebp - 0x1de8]
push eax
call edi
jmp 0x40c785
push str._installmethod
push dword [edi + eax]
call fcn.004114e0
pop ecx
test eax, eax
mov eax, dword [0x428424]
pop ecx
je 0x40c5f8
push 0x13
push 0x420a2c
push dword [edi + eax]
call fcn.004114e0
pop ecx
pop ecx
inc eax
push eax
push 0x427df8
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
jmp 0x40c785
push str._lang
push dword [edi + eax]
call fcn.004114e0
pop ecx
test eax, eax
mov eax, dword [0x428424]
pop ecx
je 0x40c643
push 0x420a2c
push dword [edi + eax]
call fcn.004114e0
inc eax
push eax
call fcn.004129a3
mov edi, eax
push edi
call fcn.00410179
add esp, 0x10
test eax, eax
je 0x40c785
mov word [0x4277f0], di
jmp 0x40c785
push 0x420a10
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c661
mov dword [ebp + 0x54], 1
jmp 0x40c785
mov eax, dword [0x428424]
push str.SPONSORS0
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c683
mov dword [0x4261e0], ebx
jmp 0x40c785
mov eax, dword [0x428424]
push 0x420a00
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpA]
test eax, eax
jne 0x40c6d5
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0x4209fc
lea eax, [ebp - 0x398]
push eax
call edi
inc dword [ebp + 0x5c]
mov eax, dword [0x428424]
mov ecx, dword [ebp + 0x5c]
push dword [eax + ecx*4]
lea eax, [ebp - 0x398]
push eax
call edi
push 0x4209f8
lea eax, [ebp - 0x398]
jmp 0x40c5b5
mov eax, dword [0x428424]
push str.STATIC1
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpA]
test eax, eax
jne 0x40c6fb
mov dword [0x428238], 1
jmp 0x40c785
mov eax, dword [0x428424]
push str.KERNEL1
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpA]
test eax, eax
jne 0x40c71e
mov dword [0x42823c], 1
jmp 0x40c785
mov eax, dword [0x428424]
push str._download
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c73e
inc eax
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x60], eax
jmp 0x40c785
mov eax, dword [0x428424]
push str.REINSTALL_NO_PROMPT1
push dword [edi + eax]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
jne 0x40c75e
mov dword [ebp + 0x50], 1
jmp 0x40c785
mov eax, dword [0x428424]
push dword [edi + eax]
lea eax, [ebp - 0x398]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0x41f76c
lea eax, [ebp - 0x398]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
inc dword [ebp + 0x5c]
mov eax, dword [ebp + 0x5c]
cmp eax, dword [0x428420]
jl 0x40c4e4
cmp dword [ebp + 0x50], ebx
je 0x40c7a6
cmp dword [ebp + 0x58], ebx
jne 0x40c7a6
call fcn.004098e1
cmp dword [ebp + 0x54], ebx
je 0x40c820
cmp dword [ebp + 0x60], ebx
jne 0x40c814
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
mov edi, 0x400
push edi
lea eax, [ebp - 0x198]
push eax
push 0x7d3
push dword [ebp + 0x70]
call esi
mov eax, dword [0x428424]
push dword [eax]
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push edi
lea eax, [ebp - 0x198]
push eax
push 0x7d4
push dword [ebp + 0x70]
call esi
push 0x10
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp + 0x64], 0xfffffffe
jmp 0x40cf33
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x400
lea eax, [ebp - 0x198]
push eax
push 0x7d4
push dword [ebp + 0x70]
call edi
jmp 0x40c893
cmp eax, 0x80070210
je 0x40c917
cmp eax, 0x80070211
je 0x40c91f
cmp dword [ebp + 0x60], ebx
jne 0x40cac8
lea ecx, [ebp - 0x15e8]
call fcn.00408ab5
push ebx
push ebx
lea ecx, [ebp - 0x15e8]
mov dword [ebp - 0x10c8], 0x7ed
call fcn.0040c2b3
cmp eax, 2
lea ecx, [ebp - 0x15e8]
je 0x40cac3
call fcn.00403e56
lea eax, [ebp - 0x1de8]
push eax
call fcn.0040ff18
cmp eax, ebx
pop ecx
jl 0x40c83e
call fcn.00409417
test eax, eax
jne 0x40c9e4
cmp dword [ebp + 0x60], ebx
je 0x40c8bf
cmp dword [ebp + 0x58], ebx
je 0x40c9d8
mov esi, 0x400
push esi
lea eax, [ebp - 0x898]
push eax
push 0x7e8
push dword [ebp + 0x70]
call edi
push esi
lea eax, [ebp - 0x198]
push eax
push 0x7e6
push dword [ebp + 0x70]
call edi
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
cmp dword [ebp + 0x58], ebx
je 0x40c9c1
lea eax, [ebp - 0x898]
push eax
call fcn.0040df32
pop ecx
jmp 0x40c9d8
mov dword [0x4261e0], ebx
jmp 0x40c8a4
lea eax, [ebp - 0x1de8]
push eax
call fcn.0040fb42
test eax, eax
pop ecx
je 0x40c969
push 0x400
lea eax, [ebp - 0x898]
push eax
push 0x7ee
push dword [ebp + 0x70]
call edi
cmp dword [ebp + 0x60], ebx
jne 0x40c961
push ebx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xfffffffffffffff9
pop eax
jmp 0x40cf73
push 0x100
lea eax, [ebp - 0x1ee8]
push eax
push 0x7d5
push dword [ebp + 0x70]
call edi
lea eax, [ebp - 0x1de8]
push eax
lea eax, [ebp - 0x1ee8]
push eax
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp dword [ebp + 0x60], ebx
jne 0x40cac8
push ebx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40cac8
push 0x10
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp + 0x64], 0xfffffffd
jmp 0x40cf33
call fcn.00409a47
test eax, eax
jne 0x40ca44
push ebx
call fcn.0041020d
test eax, eax
pop ecx
jne 0x40ca44
cmp dword [ebp + 0x60], ebx
jne 0x40cac8
lea ecx, [ebp - 0x15e8]
call fcn.00408ab5
push ebx
push ebx
lea ecx, [ebp - 0x15e8]
mov dword [ebp - 0x10c8], 0x7ef
call fcn.0040c2b3
cmp eax, 2
je 0x40cabd
push ebx
call fcn.0041020d
pop ecx
lea ecx, [ebp - 0x15e8]
mov edi, eax
call fcn.00403e56
cmp edi, ebx
je 0x40c9f8
mov byte [ebp - 0x2ae8], bl
xor eax, eax
mov ecx, esi
lea edi, [ebp - 0x2ae7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [0x42823c], 1
stosb byte es:[edi], al
call fcn.0040933f
test eax, eax
je 0x40ca80
lea eax, [ebp - 0x2ae8]
push 0x4209b8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
pop ecx
lea ecx, [ebp + 0x2c]
call fcn.00409ca2
xor eax, eax
cmp dword [0x428238], ebx
mov byte [ebp - 0x1098], bl
mov ecx, esi
lea edi, [ebp - 0x1097]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x40cbdf
cmp dword [ebp + 0x3c], ebx
je 0x40cad0
mov dword [0x428238], 1
jmp 0x40cbdf
lea ecx, [ebp - 0x15e8]
call fcn.00403e56
or eax, 0xffffffff
jmp 0x40cf73
cmp dword [ebp + 0x40], ebx
je 0x40cb92
xor eax, eax
inc eax
cmp dword [ebp + 0x40], eax
jne 0x40cb3d
cmp dword [0x42823c], ebx
je 0x40cb05
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_c_k
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40cb26
lea eax, [ebp - 0x2ae8]
push eax
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_c_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push str._REINSTALLMODEvaums_REINSTALLALL
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
jmp 0x40cbd7
cmp dword [ebp + 0x40], 2
jne 0x40cb8b
xor eax, eax
mov byte [ebp - 0x1498], bl
mov ecx, esi
lea edi, [ebp - 0x1497]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1498]
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.00409ad3
lea eax, [ebp - 0x1498]
push eax
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_pfrom_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x40cbd7
mov dword [0x428238], eax
jmp 0x40cbd7
cmp dword [0x42823c], ebx
je 0x40cbb6
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_c_k
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x40cbd7
lea eax, [ebp - 0x2ae8]
push eax
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_c_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp dword [0x428238], ebx
je 0x40cc21
cmp dword [ebp + 0x3c], ebx
jne 0x40ccc7
cmp dword [ebp + 0x40], 1
jne 0x40cc00
push str._REMOVEEXISTING1
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
lea eax, [ebp - 0x2ae8]
push eax
push str.1.6.0_10
lea eax, [ebp - 0x1098]
push str.jre_s_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov edi, dword [ebp + 0x60]
cmp edi, ebx
je 0x40cc33
cmp dword [ebp + 0x58], ebx
jne 0x40cc33
mov dword [0x4261e0], ebx
push dword [ebp + 0x4c]
lea eax, [ebp - 0x1098]
push eax
xor eax, eax
mov ax, word [0x4277f0]
mov esi, 0x4277f8
push eax
lea eax, [ebp - 0xc98]
push esi
push eax
call fcn.0040945f
add esp, 0x14
lea ecx, [ebp - 0x98]
call fcn.00403310
cmp edi, ebx
lea eax, [ebp - 0x19e8]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x26e8]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x398]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0xc98]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x22e8]
mov dword [ebp - 0x64], eax
mov eax, dword [0x4261e0]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x58], eax
je 0x40ccd1
lea eax, [ebp - 0x98]
push eax
call fcn.00402b4d
test eax, eax
jne 0x40cd5b
jmp 0x40cce9
push str._REINSTALLMODEvaums_REINSTALLALL
jmp 0x40cbf3
push ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040c2e2
cmp eax, 1
je 0x40cd5b
cmp dword [ebp - 0x20], ebx
mov dword [ebp + 0x64], 0xfffffffa
jne 0x40cd16
cmp dword [ebp - 0x24], ebx
je 0x40cd16
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0x26e8]
push eax
push str.Download_Cancelled_by_User:_from_s__s.msi__to_s
jmp 0x40cd30
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0x26e8]
push eax
push str.Download_failed:_from_s__s.msi__to_s
lea eax, [ebp - 0x898]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x898]
add esp, 0x14
push eax
call fcn.0040df32
cmp dword [ebp - 0x20], ebx
pop ecx
jne 0x40cd5b
cmp dword [ebp - 0x24], ebx
jne 0x40cf28
call fcn.004095f8
cmp dword [ebp + 0x64], ebx
jne 0x40cd9b
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0x26e8]
push eax
lea eax, [ebp - 0x898]
push str.Msi_file_from_URL_s__s.msi__downloaded_to_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x898]
push eax
call fcn.0040df32
add esp, 0x18
cmp dword [ebp + 0x64], ebx
mov eax, dword [ebp - 0x5c]
mov dword [0x4261e0], eax
jne 0x40ce03
lea eax, [ebp - 0x898]
push eax
lea eax, [ebp - 0x22e8]
push eax
lea eax, [ebp - 0xc98]
push eax
call fcn.00409598
add esp, 0xc
test eax, eax
jne 0x40cdd2
mov dword [ebp + 0x64], 0xfffffffa
jmp 0x40ce09
cmp dword [ebp + 0x58], ebx
jne 0x40ce38
lea eax, [ebp - 0x898]
push eax
push esi
lea eax, [ebp - 0x22e8]
push eax
lea eax, [ebp - 0xc98]
push eax
push dword [ebp + 0x70]
call fcn.0040968d
add esp, 0x14
test eax, eax
jne 0x40ce5a
mov dword [ebp + 0x64], 0xfffffffa
cmp dword [ebp + 0x64], 0xfffffffa
jne 0x40ce24
cmp edi, ebx
jne 0x40ce24
push 0x10
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x898]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [0x428234], ebx
je 0x40cf28
push dword [ebp + 0x64]
jmp 0x40cf05
mov ecx, 0x428240
call fcn.00409bc0
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x98]
call fcn.00402fd0
xor eax, eax
jmp 0x40cf73
lea eax, [ebp - 0x26e8]
push eax
lea eax, [ebp - 0xc98]
push eax
call fcn.0040d5c6
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp + 0x64], eax
jne 0x40cf04
cmp edi, ebx
je 0x40ce93
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0xc98]
push eax
call fcn.0040fba3
pop ecx
pop ecx
cmp dword [0x428234], ebx
je 0x40cecb
mov esi, dword [sym.imp.KERNEL32.DLL_lstrcatA]
push str._METHOD
lea eax, [ebp - 0x398]
push eax
call esi
push 0x427df8
lea eax, [ebp - 0x398]
push eax
call esi
push 0x41f76c
lea eax, [ebp - 0x398]
push eax
call esi
lea eax, [ebp - 0x22e8]
push eax
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0xc98]
push eax
call fcn.00409704
add esp, 0x10
cmp eax, ebx
mov dword [ebp + 0x64], eax
je 0x40cf28
cmp eax, 0xbc2
je 0x40cf28
cmp eax, 0x669
je 0x40cf28
push eax
push ebx
push ebx
push 0x4208a4
push 0x427e0c
push 0x4208a0
push 0x427df8
push 0x427cf8
call fcn.0040ea0f
add esp, 0x20
lea ecx, [ebp - 0x98]
call fcn.00402fd0
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
lea eax, [ebp - 0xc98]
push eax
call esi
lea eax, [ebp - 0x22e8]
push eax
call esi
push ebx
call fcn.0040e8e3
pop ecx
call fcn.00409a47
test eax, eax
je 0x40cf60
call fcn.0040e6a9
mov ecx, 0x428240
call fcn.00409bc0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp + 0x64]
lea esp, [ebp - 0x2af4]
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10