Function at 0x432480
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47a39b
mov eax, dword fs:[0]
push eax
sub esp, 0x164
push ebx
push esi
push edi
mov eax, dword [0x4b700c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb4], ecx
call fcn.00403a70
mov ecx, eax
test ecx, ecx
je 0x43575d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.004652a0
mov byte [ebp - 4], 3
push 0x48a188
lea ecx, [ebp - 0x14]
call fcn.0045d100
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0x1c]
mov eax, edi
mov dword [ebp - 0x8c], eax
xor esi, esi
mov dword [ebp - 0xbc], esi
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
movzx eax, word [eax]
test ax, ax
je 0x432560
push eax
call ebx
add esp, 4
test eax, eax
je 0x432544
mov eax, dword [ebp - 0x8c]
test esi, esi
jne 0x432552
mov esi, eax
mov dword [ebp - 0xbc], esi
add eax, 2
mov dword [ebp - 0x8c], eax
mov edi, dword [ebp - 0x1c]
jmp 0x432512
xor esi, esi
mov dword [ebp - 0xbc], esi
mov eax, dword [ebp - 0x8c]
add eax, 2
mov dword [ebp - 0x8c], eax
mov edi, dword [ebp - 0x1c]
jmp 0x432512
test esi, esi
je 0x4325a3
sub esi, edi
sar esi, 1
js 0x435767
mov ecx, 1
sub ecx, dword [edi - 4]
mov eax, dword [edi - 8]
sub eax, esi
or eax, ecx
jge 0x43258b
push esi
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov edi, dword [ebp - 0x1c]
cmp esi, dword [edi - 8]
jg 0x435767
mov dword [edi - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + esi*2], cx
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], edi
movzx eax, word [edi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4325bb
add edi, 2
jmp 0x4325a3
mov eax, dword [ebp - 0x1c]
cmp edi, eax
je 0x43263e
sub edi, eax
sar edi, 1
mov esi, dword [eax - 0xc]
test esi, esi
js 0x435771
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, esi
or ecx, edx
jge 0x4325ee
push esi
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + edi*2]
mov dword [ebp - 0xc0], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, edi
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x30]
call fcn.0045c7c0
add esp, 4
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432675
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push str.D:BackUp_
lea ecx, [ebp - 0x2c]
call fcn.0045d100
mov byte [ebp - 4], 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0x138]
call fcn.0045d100
mov byte [ebp - 4], 9
push str.Desktop_BackUp
lea ecx, [ebp - 0x13c]
call fcn.0045d100
mov byte [ebp - 4], 0xa
push 0x488164
lea ecx, [ebp - 0x140]
call fcn.0045d100
mov byte [ebp - 4], 0xb
push str.Desktop
lea ecx, [ebp - 0x144]
call fcn.0045d100
mov byte [ebp - 4], 0xc
push str.Robocopy
lea ecx, [ebp - 0x148]
call fcn.0045d100
mov byte [ebp - 4], 0xd
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0x90], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xc4], edx
movzx eax, word [eax]
test ax, ax
je 0x432757
push eax
call ebx
add esp, 4
test eax, eax
je 0x432738
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x90]
test edx, edx
jne 0x432749
mov edx, eax
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x30]
jmp 0x432700
xor edx, edx
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x30]
jmp 0x432700
test edx, edx
je 0x4327a0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43577b
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x432788
push edx
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x10c], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4327b8
add esi, 2
jmp 0x4327a0
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x432849
sub esi, eax
sar esi, 1
mov dword [ebp - 0x3c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x38], ecx
test ecx, ecx
js 0x435785
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4327f8
push dword [ebp - 0x38]
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0x10c], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x64]
call fcn.0045c7c0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x144]
push ecx
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.0045c7c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x140]
push ecx
mov edx, eax
lea ecx, [ebp - 0x154]
call fcn.0045c7c0
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x10
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0x94], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x108], edx
movzx eax, word [eax]
test ax, ax
je 0x4328ff
push eax
call ebx
add esp, 4
test eax, eax
je 0x4328e0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
test edx, edx
jne 0x4328f1
mov edx, eax
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x2c]
jmp 0x4328a8
xor edx, edx
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x2c]
jmp 0x4328a8
test edx, edx
je 0x432948
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43578f
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x432930
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x104], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x432960
add esi, 2
jmp 0x432948
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x4329f1
sub esi, eax
sar esi, 1
mov dword [ebp - 0x3c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x38], ecx
test ecx, ecx
js 0x435799
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4329a0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x104], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x150]
call fcn.0045c7c0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x13c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x14c]
call fcn.0045c7c0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x138]
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.0045c7c0
add esp, 0xc
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x14c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432a58
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x150]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432a7d
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432aa2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432ac4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432ae6
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x148]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432b0b
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x144]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432b30
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x140]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432b55
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x13c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432b7a
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x138]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432b9f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x3c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x432bc6
cmp ecx, dword [esi]
jne 0x432bc6
lock inc dword [eax]
jmp 0x432bf9
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x38], ecx
test ecx, ecx
je 0x4357a3
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x38]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x29
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045d100
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x26
or ecx, 0xffffffff
call fcn.0045f800
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x3c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x432c56
cmp ecx, dword [esi]
jne 0x432c56
lock inc dword [eax]
jmp 0x432c89
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x38], ecx
test ecx, ecx
je 0x4357a8
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x38]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x26
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x34]
call fcn.00460ee0
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x80], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x432cd2
cmp ecx, dword [esi]
jne 0x432cd2
lock inc dword [eax]
jmp 0x432d05
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x64], ecx
test ecx, ecx
je 0x4357ad
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x64]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045d100
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push str.Desktop
lea ecx, [ebp - 0x134]
call fcn.0045d100
mov byte [ebp - 4], 0x31
push str.mkdir_C:Users_
lea ecx, [ebp - 0x128]
call fcn.0045d100
mov byte [ebp - 4], 0x32
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0x98], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x130], edx
movzx eax, word [eax]
test ax, ax
je 0x432dcd
push eax
call ebx
add esp, 4
test eax, eax
je 0x432dae
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
test edx, edx
jne 0x432dbf
mov edx, eax
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x98], eax
mov esi, dword [ebp - 0x1c]
jmp 0x432d76
xor edx, edx
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x98], eax
mov esi, dword [ebp - 0x1c]
jmp 0x432d76
test edx, edx
je 0x432e16
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4357b2
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x432dfe
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x12c], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x432e2e
add esi, 2
jmp 0x432e16
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x432ebf
sub esi, eax
sar esi, 1
mov dword [ebp - 0x80], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x64], ecx
test ecx, ecx
js 0x4357bc
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x432e6e
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x12c], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x80]
mov dword [ebp - 0x64], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x64]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x48]
call fcn.0045c7c0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x134]
push ecx
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.0045c7c0
add esp, 8
mov byte [ebp - 4], 0x34
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x432f3d
cmp dword [esi + 0xc], 0
jl 0x432f31
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x432f31
call fcn.00403060
mov dword [ebp - 0x64], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x432f29
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x432f3d
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030c0
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432f5f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432f81
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x128]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432fa6
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x134]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432fcb
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x78], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x432ff2
cmp ecx, dword [esi]
jne 0x432ff2
lock inc dword [eax]
jmp 0x433025
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x48], ecx
test ecx, ecx
je 0x4357c6
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x48]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_create_desktop_dircommand
call fcn.0045d100
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x78], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433082
cmp ecx, dword [esi]
jne 0x433082
lock inc dword [eax]
jmp 0x4330b5
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x48], ecx
test ecx, ecx
je 0x4357cb
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x48]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x44]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x3e
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x43312b
cmp dword [esi + 0xc], 0
jl 0x43311f
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x43311f
call fcn.00403060
mov dword [ebp - 0x48], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433117
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x48]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x43312b
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030c0
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43314d
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x48], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433174
cmp ecx, dword [esi]
jne 0x433174
lock inc dword [eax]
jmp 0x4331a7
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x44], ecx
test ecx, ecx
je 0x4357d0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x44]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x41
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045d100
mov byte [ebp - 4], 0x42
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0xec]
call fcn.0045d100
mov byte [ebp - 4], 0x43
push str.Documents_BackUp
lea ecx, [ebp - 0xfc]
call fcn.0045d100
mov byte [ebp - 4], 0x44
push 0x488164
lea ecx, [ebp - 0x100]
call fcn.0045d100
mov byte [ebp - 4], 0x45
push str.Documents
lea ecx, [ebp - 0x110]
call fcn.0045d100
mov byte [ebp - 4], 0x46
push str.Robocopy
lea ecx, [ebp - 0x114]
call fcn.0045d100
mov byte [ebp - 4], 0x47
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0xb0], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x124], edx
movzx eax, word [eax]
test ax, ax
je 0x4332ab
push eax
call ebx
add esp, 4
test eax, eax
je 0x43328c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
test edx, edx
jne 0x43329d
mov edx, eax
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0x30]
jmp 0x433254
xor edx, edx
mov dword [ebp - 0x124], edx
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0x30]
jmp 0x433254
test edx, edx
je 0x4332f4
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4357d5
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x4332dc
push edx
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x120], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x43330c
add esi, 2
jmp 0x4332f4
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x43339d
sub esi, eax
sar esi, 1
mov dword [ebp - 0x48], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x4357df
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x43334c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0x120], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x44]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x58]
call fcn.0045c7c0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x110]
push ecx
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.0045c7c0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x100]
push ecx
mov edx, eax
lea ecx, [ebp - 0x158]
call fcn.0045c7c0
add esp, 0xc
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x4a
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0x9c], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x11c], edx
nop dword [eax]
movzx eax, word [eax]
test ax, ax
je 0x433457
push eax
call ebx
add esp, 4
test eax, eax
je 0x433438
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
test edx, edx
jne 0x433449
mov edx, eax
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x2c]
jmp 0x433400
xor edx, edx
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x2c]
jmp 0x433400
test edx, edx
je 0x4334a0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4357e9
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433488
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x118], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4334b8
add esi, 2
jmp 0x4334a0
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x433549
sub esi, eax
sar esi, 1
mov dword [ebp - 0x48], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x4357f3
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4334f8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x118], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x44]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x78]
lea ecx, [ebp - 0x16c]
call fcn.0045c7c0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xfc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.0045c7c0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xec]
push ecx
mov edx, eax
lea ecx, [ebp - 0x15c]
call fcn.0045c7c0
add esp, 0xc
mov byte [ebp - 4], 0x4d
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4335e2
cmp dword [esi + 0xc], 0
jl 0x4335d6
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4335d6
call fcn.00403060
mov dword [ebp - 0x44], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4335ce
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x44]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x4335e2
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030c0
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x15c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433607
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x160]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43362c
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x16c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433651
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x51
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x158]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433676
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x52
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433698
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4336ba
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x114]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4336df
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x55
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x110]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433704
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x56
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x100]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433729
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0xfc]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43374e
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0xec]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433773
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x7c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43379a
cmp ecx, dword [esi]
jne 0x43379a
lock inc dword [eax]
jmp 0x4337cd
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x58], ecx
test ecx, ecx
je 0x4357fd
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x58]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x59
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045d100
mov byte [ebp - 4], 0x5b
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x7c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43382a
cmp ecx, dword [esi]
jne 0x43382a
lock inc dword [eax]
jmp 0x43385d
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x58], ecx
test ecx, ecx
je 0x435802
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x58]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x5c
mov byte [ebp - 4], 0x5d
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x60]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x5e
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4338d3
cmp dword [esi + 0xc], 0
jl 0x4338c7
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4338c7
call fcn.00403060
mov dword [ebp - 0x58], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4338bf
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x58]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x4338d3
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030c0
mov byte [ebp - 4], 0x5f
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4338f5
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x58], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43391c
cmp ecx, dword [esi]
jne 0x43391c
lock inc dword [eax]
jmp 0x43394f
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x60], ecx
test ecx, ecx
je 0x435807
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x60]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov byte [ebp - 4], 0x60
mov byte [ebp - 4], 0x61
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045d100
mov byte [ebp - 4], 0x62
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push str.Documents
lea ecx, [ebp - 0xcc]
call fcn.0045d100
mov byte [ebp - 4], 0x63
push str.mkdir_C:Users_
lea ecx, [ebp - 0xc8]
call fcn.0045d100
mov byte [ebp - 4], 0x64
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0xa0], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xe8], edx
movzx eax, word [eax]
test ax, ax
je 0x433a17
push eax
call ebx
add esp, 4
test eax, eax
je 0x4339f8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa0]
test edx, edx
jne 0x433a09
mov edx, eax
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4339c0
xor edx, edx
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4339c0
test edx, edx
je 0x433a60
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43580c
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433a48
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0xf0], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x433a78
add esi, 2
jmp 0x433a60
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x433b09
sub esi, eax
sar esi, 1
mov dword [ebp - 0x58], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x60], ecx
test ecx, ecx
js 0x435816
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x433ab8
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xf0], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x58]
mov dword [ebp - 0x60], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x60]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x4c]
call fcn.0045c7c0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xcc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.0045c7c0
add esp, 8
mov byte [ebp - 4], 0x66
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x433b87
cmp dword [esi + 0xc], 0
jl 0x433b7b
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x433b7b
call fcn.00403060
mov dword [ebp - 0x60], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433b73
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x60]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x433b87
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030c0
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433ba9
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433bcb
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x69
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0xc8]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433bf0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x6a
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0xcc]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433c15
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x74], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433c3c
cmp ecx, dword [esi]
jne 0x433c3c
lock inc dword [eax]
jmp 0x433c6f
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x4c], ecx
test ecx, ecx
je 0x435820
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x4c]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov byte [ebp - 4], 0x6b
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_create_desktop_dir_command
call fcn.0045d100
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x74], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433ccc
cmp ecx, dword [esi]
jne 0x433ccc
lock inc dword [eax]
jmp 0x433cff
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x4c], ecx
test ecx, ecx
je 0x435825
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x4c]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov byte [ebp - 4], 0x6e
mov byte [ebp - 4], 0x6f
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x54]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x70
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x433d75
cmp dword [esi + 0xc], 0
jl 0x433d69
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x433d69
call fcn.00403060
mov dword [ebp - 0x4c], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433d61
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x433d75
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030c0
mov byte [ebp - 4], 0x71
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433d97
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x4c], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433dbe
cmp ecx, dword [esi]
jne 0x433dbe
lock inc dword [eax]
jmp 0x433df1
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x54], ecx
test ecx, ecx
je 0x43582a
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x54]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x72
mov byte [ebp - 4], 0x73
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045d100
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0x5c]
call fcn.0045d100
mov byte [ebp - 4], 0x75
push str.Downloads_BackUp
lea ecx, [ebp - 0x6c]
call fcn.0045d100
mov byte [ebp - 4], 0x76
push 0x488164
lea ecx, [ebp - 0x70]
call fcn.0045d100
mov byte [ebp - 4], 0x77
push str.Downloads
lea ecx, [ebp - 0xe4]
call fcn.0045d100
mov byte [ebp - 4], 0x78
push str.Robocopy
lea ecx, [ebp - 0xe0]
call fcn.0045d100
mov byte [ebp - 4], 0x79
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0xa4], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xd0], edx
movzx eax, word [eax]
test ax, ax
je 0x433eec
push eax
call ebx
add esp, 4
test eax, eax
je 0x433ecd
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa4]
test edx, edx
jne 0x433ede
mov edx, eax
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0x30]
jmp 0x433e95
xor edx, edx
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0x30]
jmp 0x433e95
test edx, edx
je 0x433f35
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43582f
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433f1d
push edx
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0xd4], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x433f4d
add esi, 2
jmp 0x433f35
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x433fde
sub esi, eax
sar esi, 1
mov dword [ebp - 0x4c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x54], ecx
test ecx, ecx
js 0x435839
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x433f8d
push dword [ebp - 0x54]
lea ecx, [ebp - 0x30]
call fcn.004032b0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0xd4], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0x50]
call fcn.0045c7c0
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.0045c7c0
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x70]
push ecx
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.0045c7c0
add esp, 0xc
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x7c
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0xa8], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xd8], edx
nop word [eax + eax]
movzx eax, word [eax]
test ax, ax
je 0x434097
push eax
call ebx
add esp, 4
test eax, eax
je 0x434078
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
test edx, edx
jne 0x434089
mov edx, eax
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0x2c]
jmp 0x434040
xor edx, edx
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0x2c]
jmp 0x434040
test edx, edx
je 0x4340e0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x435843
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x4340c8
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0xdc], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4340f8
add esi, 2
jmp 0x4340e0
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x434189
sub esi, eax
sar esi, 1
mov dword [ebp - 0x4c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x54], ecx
test ecx, ecx
js 0x43584d
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x434138
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2c]
call fcn.004032b0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xdc], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
js 0x435767
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x74]
lea ecx, [ebp - 0x88]
call fcn.0045c7c0
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x6c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.0045c7c0
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x5c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x164]
call fcn.0045c7c0
add esp, 0xc
mov byte [ebp - 4], 0x7f
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x43421c
cmp dword [esi + 0xc], 0
jl 0x434210
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434210
call fcn.00403060
mov dword [ebp - 0x54], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x434208
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x54]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x43421c
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030c0
mov byte [ebp - 4], 0x80
mov byte [ebp - 4], 0x7e
mov edx, dword [ebp - 0x164]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434241
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7d
mov edx, dword [ebp - 0x168]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434266
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x7c
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43428b
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0x7b
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4342b0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x84
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4342d2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x85
mov byte [ebp - 4], 0x79
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4342f4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x86
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0xe0]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434319
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x87
mov byte [ebp - 4], 0x77
mov edx, dword [ebp - 0xe4]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43433e
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x88
mov byte [ebp - 4], 0x76
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434360
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x89
mov byte [ebp - 4], 0x75
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434382
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x8a
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4343a4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x68], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x4343cb
cmp ecx, dword [esi]
jne 0x4343cb
lock inc dword [eax]
jmp 0x4343fe
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x50], ecx
test ecx, ecx
je 0x435857
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x50]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov byte [ebp - 4], 0x8b
mov byte [ebp - 4], 0x8c
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045d100
mov byte [ebp - 4], 0x8d
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x68], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43445b
cmp ecx, dword [esi]
jne 0x43445b
lock inc dword [eax]
jmp 0x43448e
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x50], ecx
test ecx, ecx
je 0x43585c
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x50]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov byte [ebp - 4], 0x8e
mov byte [ebp - 4], 0x8f
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x40]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x90
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x434504
cmp dword [esi + 0xc], 0
jl 0x4344f8
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4344f8
call fcn.00403060
mov dword [ebp - 0x50], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4344f0
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x50]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x434504
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030c0
mov byte [ebp - 4], 0x91
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434526
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x50], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43454d
cmp ecx, dword [esi]
jne 0x43454d
lock inc dword [eax]
jmp 0x434580
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x40], ecx
test ecx, ecx
je 0x435861
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031c0
add esp, 8
mov esi, dword [ebp - 0x40]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov byte [ebp - 4], 0x92
mov byte [ebp - 4], 0x93
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045d100
mov byte [ebp - 4], 0x94
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push str.Downloads
lea ecx, [ebp - 0x38]
call fcn.0045d100
mov byte [ebp - 4], 0x95
push str.mkdir_C:Users_
lea ecx, [ebp - 0x3c]
call fcn.0045d100
mov byte [ebp - 4], 0x96
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0xac], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xf4], edx
nop dword [eax + eax]
movzx eax, word [eax]
test ax, ax
je 0x434647
push eax
call ebx
add esp, 4
test eax, eax
je 0x434628
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xac]
test edx, edx
jne 0x434639
mov edx, eax
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4345f0
xor edx, edx
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4345f0
test edx, edx
je 0x434690
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x435866
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x434678
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x435767
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0xf8], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4346a8
add esi, 2
jmp 0x434690
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x434729
sub esi, eax
sar esi, 1
mov dword [ebp - 0x40], esi
mov edx, dword [eax - 0xc]
test edx, edx
js 0x435870
mov ebx, 1
sub ebx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, edx
or ecx, ebx
jge 0x4346de
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032b0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xf8], esi
mov edx, dword [eax - 0xc]
mov ebx, edx
sub ebx, dword [ebp - 0x40]
lea ecx, [ebx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.0045d860
add esp, 0x10
test ebx, ebx
js 0x435767
mov eax, dword [ebp - 0x1c]
cmp ebx, dword [eax - 8]
jg 0x435767
mov dword [eax - 0xc], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + ebx*2], cx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x18]
call fcn.0045c7c0
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x38]
push ecx
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.0045c7c0
add esp, 8
mov byte [ebp - 4], 0x98
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4347a0
lea ebx, [esi + 0xc]
cmp dword [ebx], 0
jl 0x434794
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434794
call fcn.00403060
mov dword [ebp - 0x40], eax
mov ecx, edi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x43478c
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x4347a0
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030c0
mov byte [ebp - 4], 0x99
mov byte [ebp - 4], 0x97
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4347c2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9a
mov byte [ebp - 4], 0x96
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4347e4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9b
mov byte [ebp - 4], 0x95
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434806
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9c
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434828
push 0x80004005
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
push 0x80070057
call fcn.00403850
push 0x80070057
call fcn.00403850
int3