Function at 0x4a0490
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check os version
Delete file
Encode data using base64
Get number of processors
Resolve function by parsing pe exports
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x54a0c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x174
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x134]
call fcn.0044b480
mov eax, dword [0x5ab980]
mov dword [esp + 0x20], eax
xor ebp, ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x18c], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], eax
push 0xa
lea ecx, [esp + 0xb4]
mov byte [esp + 0x190], 9
call fcn.00510deb
mov eax, dword [0x5ab980]
mov dword [esp + 0x60], 0x559c1c
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], ebp
mov eax, dword [esi + 0x38]
mov byte [esp + 0x18c], 0xb
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xd8], ebp
mov ecx, dword [eax + 0x9b8]
mov dword [esp + 0x44], ebp
mov dword [esi + 0x3988], ecx
mov edx, dword [eax + 0x9bc]
mov dword [esi + 0x3990], ebp
mov dword [esi + 0x3998], ebp
mov dword [esi + 0x398c], edx
mov dword [esi + 0x3994], ebp
mov dword [esi + 0x399c], ebp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x194]
mov dword [esp + 0xec], eax
add eax, 0x2710
mov dword [esi + 0x39a0], ebp
mov dword [esp + 0x48], eax
mov dword [esi + 0x39a4], ebp
mov eax, dword [ecx]
lea edx, [esp + 0x60]
push ebp
push edx
mov dword [esp + 0x70], ebp
mov dword [esp + 0x74], ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x6c], 1
call dword [eax]
mov eax, dword [esi + 0x38]
push 1
add eax, 0x930
lea ecx, [esp + 0x138]
push eax
call fcn.0044b500
cmp eax, ebp
je 0x4a0620
lea ecx, [esp + 0x134]
mov dword [eax + 0xc0], ebp
call fcn.0044b560
cmp eax, ebp
jne 0x4a060a
mov edi, dword [esi + 0x39c0]
cmp edi, ebp
je 0x4a0665
lea ebx, [esi + 0x3ba4]
mov eax, edi
mov edi, dword [edi]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
push ecx
push edx
lea eax, [esp + 0x18]
push str._s____s_r_n
push eax
call fcn.0050e6c7
add esp, 0x10
lea ecx, [esp + 0x10]
push ecx
push 5
push 5
mov ecx, ebx
call fcn.004bf410
cmp edi, ebp
jne 0x4a0630
mov edi, dword [esi + 0x3a30]
cmp edi, ebp
je 0x4a06aa
lea ebx, [esi + 0x3ba4]
mov eax, edi
mov edi, dword [edi]
lea ecx, [esp + 0x10]
mov eax, dword [eax + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
push edx
push eax
push str._Registry_Value___s____s_r_n
push ecx
call fcn.0050e6c7
add esp, 0x10
lea edx, [esp + 0x10]
mov ecx, ebx
push edx
push 5
push 5
call fcn.004bf410
cmp edi, ebp
jne 0x4a0675
mov edi, dword [esi + 0x39f8]
cmp edi, ebp
je 0x4a06ef
lea ebx, [esi + 0x3ba4]
mov eax, edi
mov edi, dword [edi]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
push ecx
push edx
lea eax, [esp + 0x18]
push str._Registry_Key___s____s_r_n
push eax
call fcn.0050e6c7
add esp, 0x10
lea ecx, [esp + 0x10]
push ecx
push 5
push 5
mov ecx, ebx
call fcn.004bf410
cmp edi, ebp
jne 0x4a06ba
mov edi, dword [esi + 0x3a14]
cmp edi, ebp
je 0x4a0734
lea ebx, [esi + 0x3ba4]
mov eax, edi
mov edi, dword [edi]
lea ecx, [esp + 0x10]
mov eax, dword [eax + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
push edx
push eax
push str._Registry_KeyValue___s____s_r_n
push ecx
call fcn.0050e6c7
add esp, 0x10
lea edx, [esp + 0x10]
mov ecx, ebx
push edx
push 5
push 5
call fcn.004bf410
cmp edi, ebp
jne 0x4a06ff
mov edi, dword [esi + 0x39dc]
cmp edi, ebp
je 0x4a0779
lea ebx, [esi + 0x3ba4]
mov eax, edi
mov edi, dword [edi]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
push ecx
push edx
lea eax, [esp + 0x18]
push str._Redirection___s____s_r_n
push eax
call fcn.0050e6c7
add esp, 0x10
lea ecx, [esp + 0x10]
push ecx
push 5
push 5
mov ecx, ebx
call fcn.004bf410
cmp edi, ebp
jne 0x4a0744
mov edx, dword [esi + 0x38]
push 1
add edx, 0x930
lea ecx, [esp + 0x138]
push edx
call fcn.0044b500
mov edi, eax
cmp edi, ebp
je 0x4a1a5b
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x198]
jmp 0x4a07b3
mov ebp, dword [esp + 0x198]
mov ebx, dword [esp + 0x44]
mov eax, dword [edi + 8]
and al, 0xf0
shl eax, 0x18
cmp eax, 0x30000000
jl 0x4a19b4
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [edi + 8]
shl eax, 0x1c
sar eax, 0x1c
dec eax
je 0x4a1618
dec eax
jne 0x4a19b4
lea ecx, [esp + 0xe4]
push ecx
mov ecx, edi
call fcn.00441fe0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x190], 0x18
call fcn.00512a1d
lea ecx, [esp + 0xe4]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea edx, [esp + 0x14]
push 1
push edx
mov ecx, esi
call fcn.0049c5e0
lea eax, [esp + 0x14]
push 1
push eax
lea ecx, [esi + 0x39d8]
call fcn.00497ef0
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00512a1d
mov eax, dword [esi + 0x398c]
mov ecx, dword [esi + 0x3988]
test eax, eax
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], eax
ja 0x4a086a
test ecx, ecx
jbe 0x4a0886
fild qword [esi + 0x3990]
fild qword [esp + 0x108]
fdivp st(1)
fmul qword [0x55cbf0]
fstp qword [esp + 0xd4]
mov al, byte [edi + 0xb8]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
test al, 0x30
je 0x4a08a0
mov dword [esp + 0x44], 0
jmp 0x4a08b7
test ebx, ebx
je 0x4a08ae
call ebp
cmp eax, ebx
jbe 0x4a09e3
call ebp
add eax, 0x64
mov dword [esp + 0x44], eax
fld qword [esp + 0xd4]
mov dword [esp + 0x64], 0
mov dword [esp + 0x8c], 0x46494c45
call fcn.004fa6b4
mov dword [esp + 0x80], eax
mov al, byte [edi + 0xb8]
test al, 0x30
je 0x4a0958
lea edx, [esp + 0xd0]
mov ecx, edi
push edx
call fcn.00441ca0
mov ebp, eax
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
mov byte [esp + 0x190], 0x19
call fcn.00442480
mov ecx, dword [ebp]
mov edx, dword [eax]
push ecx
push edx
lea eax, [esp + 0x84]
push str._s:__s
push eax
mov byte [esp + 0x19c], 0x1a
call fcn.0050e6c7
add esp, 0x10
lea ecx, [esp + 0xcc]
mov byte [esp + 0x18c], 0x19
call fcn.005128e4
mov byte [esp + 0x18c], 0xb
lea ecx, [esp + 0xd0]
jmp 0x4a098b
lea ecx, [esp + 0x104]
push ecx
mov ecx, edi
call fcn.00442480
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x190], 0x1b
call fcn.00512a1d
mov byte [esp + 0x18c], 0xb
lea ecx, [esp + 0x104]
call fcn.005128e4
lea edx, [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00512659
call fcn.0041f7a0
add esp, 8
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x7c]
call fcn.00512a1d
mov ecx, dword [esp + 0x194]
lea eax, [esp + 0x60]
push 0
push eax
mov edx, dword [ecx]
call dword [edx]
test eax, eax
jne 0x4a1b7e
push bind
call fcn.0041e1e0
add esp, 4
mov eax, dword [edi + 0xb8]
test al, 0x30
jne 0x4a09f8
test eax, 0x40000
je 0x4a1219
mov ecx, dword [edi + 0x58]
mov ebp, dword [esi + 0x3990]
mov edx, dword [edi + 0x5c]
add ebp, ecx
mov dword [esi + 0x3990], ebp
mov ebx, dword [esi + 0x3994]
adc ebx, edx
mov dword [esp + 0x4c], 0
mov dword [esi + 0x3994], ebx
mov ebx, dword [edi + 0xb8]
shl ebx, 0xd
sar ebx, 0x1f
je 0x4a0a80
lea eax, [esp + 0x14]
lea ecx, [esp + 0x30]
push eax
call fcn.00512a1d
mov eax, dword [esi + 0x39b0]
lea ecx, [esp + 0x30]
push eax
push 3
call fcn.0050df1d
lea ecx, [esp + 0xb0]
lea edx, [esp + 0x1c]
push ecx
push edx
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx]
call dword [edx + 0x28]
test eax, eax
je 0x4a1233
jmp 0x4a0a89
lea ecx, [esp + 0x30]
call fcn.0051286f
mov eax, dword [edi + 0xb8]
shl eax, 0xc
sar eax, 0x1f
mov dword [esp + 0x40], eax
je 0x4a0b76
mov ecx, dword [esi + 0x3c]
mov edx, dword [esp + 0x14]
push edx
mov eax, dword [ecx]
call dword [eax]
cmp eax, 0xffffffff
je 0x4a0b6e
lea eax, [esp + 0x14]
lea ecx, [esp + 0x2c]
push eax
call fcn.00512a1d
mov eax, dword [esi + 0x39ac]
lea ecx, [esp + 0x2c]
push eax
push 3
call fcn.0050df1d
lea ecx, [esp + 0xb0]
lea edx, [esp + 0x1c]
push ecx
push edx
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx]
call dword [edx + 0x28]
test eax, eax
je 0x4a1255
mov eax, dword [esp + 0x2c]
push 0
push 0
push 3
push 0
push 0
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x4a0b5f
lea ecx, [esp + 0x110]
push ecx
push ebp
call fcn.0041f6b0
mov edx, dword [esp + 0x118]
mov eax, dword [esp + 0x11c]
add esp, 8
or edx, eax
je 0x4a0b4e
mov dword [esp + 0x40], 0
push ebp
mov dword [esp + 0x50], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4a0b76
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
mov dword [esp + 0x1c], eax
je 0x4a0b76
mov dword [esp + 0x40], 0
test byte [edi + 0xb8], 0x30
jne 0x4a0bbd
lea eax, [esp + 0x18]
push 0
push eax
push edi
push 4
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
test ebx, ebx
je 0x4a19b4
mov ecx, dword [esp + 0x194]
lea edx, [esp + 0x30]
push ecx
lea eax, [esp + 0x34]
push edx
push eax
push edi
mov ecx, esi
call fcn.0049db30
mov ebx, eax
jmp 0x4a1208
mov ebp, dword [esi + 0x3944]
lea ecx, [esp + 0x38]
push ecx
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
shr ebp, 5
mov dword [esp + 0x30], esp
push edx
and ebp, 1
call fcn.00512659
call fcn.0041f7a0
add esp, 8
lea eax, [esp + 0x38]
lea ecx, [esp + 0x100]
push str.JSA.TMP
push eax
push ecx
call fcn.00512b79
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x190], 0x1e
call fcn.00512a1d
lea ecx, [esp + 0x100]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
mov eax, dword [edi + 0xb8]
shr eax, 6
and eax, 3
dec eax
je 0x4a1116
dec eax
je 0x4a0e60
dec eax
jne 0x4a1427
mov edx, dword [esp + 0x194]
lea eax, [esp + 0x30]
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
push edi
mov ecx, esi
call fcn.0049db30
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x28], ebx
jle 0x4a120a
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4a0cd9
push 1
push ecx
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x48], esp
push edx
mov dword [esp + 0x58], 1
call fcn.00512659
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
mov byte [esp + 0x19c], 0x2a
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x198], 0xb
mov edx, dword [ecx]
call dword [edx + 0x34]
test eax, eax
jne 0x4a0cd9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
sub eax, 2
je 0x4a0cd9
sub eax, 0x4e
je 0x4a0cd9
mov dword [esp + 0x4c], 0
mov ecx, dword [esi + 0x3c]
mov edx, dword [esp + 0x24]
push 0x80
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x28]
push ecx
push edx
push edi
mov ecx, esi
call fcn.004a63a0
mov ebx, eax
test ebx, ebx
jge 0x4a0d2e
mov eax, dword [esp + 0x1c]
push 0x5685
push eax
push 2
lea ecx, [esp + 0x24]
push edi
push ecx
lea ecx, [esi + 0x3ba4]
call fcn.004c0010
mov ebx, dword [esp + 0x28]
jmp 0x4a1208
jne 0x4a0d6a
push 0x5686
lea ecx, [esp + 0x14]
call fcn.00517fef
mov edx, dword [esp + 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
push ecx
push edi
push 4
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
mov ebx, dword [esp + 0x28]
jmp 0x4a1208
mov ecx, dword [esi + 0x3c]
mov eax, dword [esp + 0x14]
push eax
mov edx, dword [ecx]
call dword [edx]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x4a0da8
mov ecx, dword [esi + 0x3c]
mov eax, dword [esp + 0x14]
push 0x80
push eax
mov edx, dword [ecx]
call dword [edx + 0x2c]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x4a0da8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
mov byte [esp + 0x198], 0x2b
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x194], 0xb
mov edx, dword [ecx]
call dword [edx + 0x30]
test eax, eax
je 0x4a1277
mov ecx, dword [esi + 0x3c]
cmp ebp, 0xffffffff
mov eax, dword [ecx]
je 0x4a0df7
push ebp
jmp 0x4a0dfb
mov edx, dword [edi + 0x3c]
push edx
mov edx, dword [esp + 0x18]
push edx
call dword [eax + 0x2c]
push ebx
lea eax, [esp + 0x14]
push 0x568a
push eax
call fcn.0050e6da
mov eax, dword [esp + 0x58]
add esp, 0xc
test eax, eax
je 0x4a0e3f
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push ecx
push edx
push edi
push 3
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
mov ebx, dword [esp + 0x28]
jmp 0x4a1208
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
push ecx
push edi
push 2
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
mov ebx, dword [esp + 0x28]
jmp 0x4a1208
mov edx, dword [esp + 0x194]
lea eax, [esp + 0x30]
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
push edi
mov ecx, esi
call fcn.0049db30
mov ebx, eax
test ebx, ebx
jle 0x4a120a
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4a0f33
test ebp, ebp
mov dword [esp + 0x4c], 1
jne 0x4a0f22
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
mov byte [esp + 0x198], 0x24
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x194], 0xb
mov edx, dword [ecx]
call dword [edx + 0x30]
test eax, eax
jne 0x4a0f37
push eax
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
call fcn.00512659
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov byte [esp + 0x19c], 0x25
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x198], 0xb
mov eax, dword [ecx]
call dword [eax + 0x34]
test eax, eax
jne 0x4a0f37
mov ebp, 1
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, esi
call fcn.0049e230
test ebp, ebp
jne 0x4a0fac
mov eax, dword [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x4a0f60
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
mov byte [esp + 0x198], 0x26
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x194], 0xb
mov edx, dword [ecx]
call dword [edx + 0x30]
test eax, eax
jne 0x4a10f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
push 0xa
lea ecx, [esp + 0x16c]
call fcn.00510deb
lea eax, [esp + 0x14]
lea ecx, [esp + 0x50]
push eax
mov byte [esp + 0x190], 0x27
call fcn.00512659
mov eax, dword [esi + 0x39b4]
lea ecx, [esp + 0x50]
push eax
push 3
mov byte [esp + 0x194], 0x28
call fcn.0050df1d
lea ecx, [esp + 0x168]
lea edx, [esp + 0x1c]
push ecx
push edx
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
call fcn.00512659
call fcn.004201f0
mov ecx, dword [esp + 0x5c]
add esp, 0xc
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edx, dword [esp + 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.00512659
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x198], 0x29
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x194], 0x28
mov eax, dword [ecx]
call dword [eax + 0x30]
test eax, eax
jne 0x4a108e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x5687
push eax
push 2
lea ecx, [esp + 0x24]
push edi
push ecx
lea ecx, [esi + 0x3ba4]
mov dword [esp + 0x30], eax
call fcn.004c0010
jmp 0x4a10cb
mov ecx, dword [edi + 0xc0]
mov eax, dword [esp + 0x4c]
or ecx, 0x20
test eax, eax
mov dword [edi + 0xc0], ecx
je 0x4a10ba
lea edx, [esp + 0x18]
push 0
push edx
push edi
push 3
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
lea eax, [esp + 0x14]
lea ecx, [esp + 0x50]
push eax
push ecx
mov ecx, esi
call fcn.0049e230
lea ecx, [esp + 0x50]
mov byte [esp + 0x18c], 0x27
call fcn.005128e4
lea ecx, [esp + 0x168]
mov byte [esp + 0x18c], 0xb
call fcn.00510e5f
jmp 0x4a1208
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4a1208
lea edx, [esp + 0x18]
push 0
push edx
push edi
push 3
lea ecx, [esi + 0x3ba4]
jmp 0x4a1203
lea ecx, [esp + 0xb0]
call fcn.00510e2a
lea eax, [esp + 0xb0]
lea ecx, [esp + 0x1c]
push eax
push ecx
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov eax, dword [ecx]
call dword [eax + 0x28]
test eax, eax
je 0x4a156f
lea ecx, [esp + 0xb0]
lea ebp, [esi + 0x3ba4]
push ecx
mov ecx, ebp
call fcn.004bf2a0
push 0x5b0738
lea ecx, [esp + 0xac]
call fcn.00512952
mov edx, dword [esp + 0x194]
lea eax, [esp + 0xa8]
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
push edi
mov ecx, esi
mov byte [esp + 0x19c], 0x22
call fcn.0049db30
lea ecx, [esp + 0xa8]
mov ebx, eax
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
test ebx, ebx
jle 0x4a120a
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
mov byte [esp + 0x198], 0x23
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov byte [esp + 0x194], 0xb
mov edx, dword [ecx]
call dword [edx + 0x30]
test eax, eax
je 0x4a129f
lea eax, [esp + 0x18]
push 0
push eax
push edi
push 2
mov ecx, ebp
call fcn.004bf7c0
test ebx, ebx
jne 0x4a12d2
mov ebx, dword [esp + 0x44]
jmp 0x4a0886
lea ecx, [esp + 0x18]
push 0
push ecx
push edi
push 4
lea ecx, [esi + 0x3ba4]
call fcn.004bf7c0
jmp 0x4a19b4
mov edx, dword [esp + 0x1c]
push 0x5683
push edx
push 2
lea eax, [esp + 0x3c]
push edi
push eax
lea ecx, [esi + 0x3ba4]
call fcn.004c0010
jmp 0x4a19b4
mov ecx, dword [esp + 0x1c]
push 0x5684
push ecx
push 2
lea edx, [esp + 0x38]
push edi
push edx
lea ecx, [esi + 0x3ba4]
call fcn.004c0010
jmp 0x4a19b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x5687
mov dword [esp + 0x20], eax
push eax
push 2
lea eax, [esp + 0x24]
push edi
push eax
lea ecx, [esi + 0x3ba4]
call fcn.004c0010
jmp 0x4a19b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x568b
push eax
push 2
lea ecx, [esp + 0x24]
push edi
push ecx
lea ecx, [esi + 0x3ba4]
mov dword [esp + 0x30], eax
call fcn.004c0010
mov edx, dword [esp + 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x4a19b4
jge 0x4a1427
cmp ebx, 0xffffd954
jne 0x4a13dd
mov ecx, dword [0x5b8cb0]
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
je 0x4a1d90
mov eax, dword [0x5ab980]
mov dword [esp + 0x40], eax
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x18c], 0x2d
push ecx
call fcn.00422870
mov edx, dword [esp + 0x44]
add esp, 4
lea eax, [esp + 0x28]
push edx
push str.Unable_to_restore_file_due_to_problems_in_the_DMV_File._nClick_Yes_to_continue_restoring_other_files._n_nAdditional_Information:_n_s
push eax
call fcn.0050e6c7
add esp, 0xc
lea ecx, [esp + 0xa4]
push str.Restore_Error
call fcn.00512952
push str.File_restore_failed._Continue_
lea ecx, [esp + 0xb0]
mov byte [esp + 0x190], 0x2e
call fcn.00512952
push 0
lea ecx, [esp + 0xa8]
push 0x34
lea edx, [esp + 0xb4]
push ecx
lea eax, [esp + 0x34]
push edx
push eax
mov byte [esp + 0x1a0], 0x2f
call fcn.0042e160
add esp, 0x14
lea ecx, [esp + 0xac]
mov edi, eax
mov byte [esp + 0x18c], 0x2e
call fcn.005128e4
lea ecx, [esp + 0xa4]
mov byte [esp + 0x18c], 0x2d
call fcn.005128e4
cmp edi, 6
mov byte [esp + 0x18c], 0x2c
lea ecx, [esp + 0x28]
jne 0x4a1c7c
call fcn.005128e4
lea ecx, [esp + 0x40]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
jmp 0x4a19b4
cmp ebx, 0xfffffc19
jle 0x4a1d90
mov ecx, dword [esi + 0x3bc0]
lea edx, [esp + 0x7c]
push ecx
push 0x569e
push edx
mov dword [esp + 0x70], 0
mov dword [esp + 0x98], 0x7761726e
call fcn.0050e6da
mov ecx, dword [esp + 0x1a0]
add esp, 0xc
lea edx, [esp + 0x60]
mov eax, dword [ecx]
push 0
push edx
call dword [eax]
mov eax, dword [edi + 0x58]
mov ecx, dword [edi + 0x5c]
mov edi, dword [esi + 0x3998]
add edi, eax
mov dword [esi + 0x3998], edi
mov edx, dword [esi + 0x399c]
adc edx, ecx
mov dword [esi + 0x399c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, dword [esp + 0x48]
jbe 0x4a19b4
mov eax, dword [esi + 0x399c]
test eax, eax
ja 0x4a1471
mov eax, dword [esi + 0x3998]
test eax, eax
jbe 0x4a19b4
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, dword [esp + 0xec]
mov edx, eax
sub edx, ecx
mov eax, 0x10624dd3
mul edx
fild qword [esi + 0x3998]
mov edi, edx
mov dword [esp + 0x124], 0
shr edi, 6
mov dword [esp + 0x120], edi
mov eax, dword [esi + 0x3988]
fild qword [esp + 0x120]
mov ebp, dword [esi + 0x3990]
mov ecx, dword [esi + 0x398c]
mov edx, dword [esi + 0x3994]
sub eax, ebp
fdivp st(1)
sbb ecx, edx
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esi + 0x397c], edi
fild qword [esp + 0x118]
fdiv st(1)
fstp qword [esp + 0x58]
call fcn.004fa6b4
fld qword [esp + 0x58]
mov ebp, eax
mov dword [esp + 0x64], 0
mov dword [esi + 0x3980], ebp
mov dword [esp + 0x8c], 0x53544154
mov dword [esp + 0x128], edi
call fcn.004fa6b4
mov ecx, dword [esp + 0x194]
lea edx, [esp + 0x128]
mov dword [esp + 0x94], edx
mov dword [esp + 0x12c], eax
mov eax, dword [ecx]
lea edx, [esp + 0x60]
push 0
push edx
mov dword [esp + 0x138], ebp
call dword [eax]
test eax, eax
jne 0x4a1e8b
call ebx
add eax, 0x7d0
mov dword [esp + 0x94], 0
mov dword [esp + 0x48], eax
jmp 0x4a19b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.004226f0
add esp, 8
mov ecx, dword [eax]
mov edx, dword [esp + 0x14]
push ecx
push edx
lea eax, [esp + 0x18]
push 0x5681
push eax
mov byte [esp + 0x19c], 0x1f
call fcn.0050e6da
add esp, 0x10
lea ecx, [esp + 0xdc]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push 2
lea eax, [esp + 0x24]
push edi
push eax
lea ecx, [esi + 0x3ba4]
call fcn.004bfef0
mov edi, dword [esp + 0x198]
push 0x5682
lea ecx, [edi + 0x14]
mov dword [edi + 8], 0xffffff92
call fcn.00517fef
lea ecx, [esp + 0x10]
push ecx
lea ecx, [edi + 0x18]
call fcn.00512a1d
cmp dword [esp + 0x1c], 0xce
jne 0x4a1f89
jmp 0x4a19b4
lea edx, [esp + 0xf4]
mov ecx, edi
push edx
call fcn.00441d60
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x190], 0xc
call fcn.00512a1d
lea ecx, [esp + 0xf4]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea eax, [esp + 0x20]
push 1
push eax
mov ecx, esi
call fcn.0049c5e0
lea ecx, [esp + 0x20]
push 1
push ecx
lea ecx, [esi + 0x39d8]
call fcn.00497ef0
xor ebx, ebx
push str.Directory
lea ecx, [esp + 0x78]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x90], 0x44495220
call fcn.00512a6d
lea edx, [esp + 0x20]
lea ecx, [esp + 0x78]
push edx
call fcn.00512a1d
lea ecx, [esp + 0x7c]
call fcn.0051286f
mov ecx, dword [esp + 0x194]
lea edx, [esp + 0x60]
push ebx
push edx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x4a2096
mov eax, dword [edi + 0xb8]
test al, 0x30
je 0x4a19b4
test al, 0xc0
je 0x4a19b4
lea ecx, [esp + 0xb0]
call fcn.00510e2a
lea eax, [esp + 0xb0]
lea ecx, [esp + 0x1c]
push eax
push ecx
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
call fcn.00512659
mov ecx, dword [esi + 0x3c]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp eax, ebx
je 0x4a191d
lea ecx, [esp + 0xb0]
lea ebp, [esi + 0x3ba4]
push ecx
mov ecx, ebp
call fcn.004bf2a0
mov eax, dword [edi + 0x3c]
mov ecx, dword [esi + 0x3c]
push eax
mov eax, dword [esp + 0x24]
mov edx, dword [ecx]
push eax
call dword [edx + 0x2c]
test eax, eax
jne 0x4a1837
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0xfc]
push eax
push ecx
mov dword [esp + 0x24], eax
call fcn.004226f0
add esp, 8
mov edx, dword [eax]
mov eax, dword [edi + 0x3c]
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
lea edx, [esp + 0x1c]
push 0x569b
push edx
mov byte [esp + 0x1a0], 0x12
call fcn.0050e6da
add esp, 0x14
lea ecx, [esp + 0xfc]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push 2
lea edx, [esp + 0x2c]
push edi
push edx
mov ecx, ebp
call fcn.004bfef0
mov eax, dword [0x5b8c00]
test eax, eax
jne 0x4a1837
lea eax, [esp + 0xf8]
push 0x4fda
push eax
call fcn.00422640
mov ebp, eax
lea ecx, [esp + 0xf0]
push 0x569c
push ecx
mov byte [esp + 0x19c], 0x13
call fcn.00422640
push ebx
push 0x31
push ebp
lea edx, [esp + 0x2c]
push eax
push edx
mov byte [esp + 0x1b0], 0x14
call fcn.0042e160
add esp, 0x24
cmp eax, 1
lea ecx, [esp + 0xe8]
mov byte [esp + 0x18c], 0x13
setne bl
call fcn.005128e4
lea ecx, [esp + 0xf8]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
test bl, bl
jne 0x4a2194
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x4a19b4
lea eax, [esp + 0x20]
lea ecx, [esp + 0x34]
push eax
call fcn.00512a1d
push 0x5c
lea ecx, [esp + 0x38]
call fcn.0050e776
lea ecx, [esp + 0x34]
push ecx
call fcn.00421120
add esp, 4
test eax, eax
jle 0x4a19b4
lea edx, [esp + 0x34]
push edx
call fcn.0041f9c0
add esp, 4
lea eax, [esp + 0xf0]
mov ecx, edi
push eax
call fcn.00441ae0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x190], 0x17
call fcn.00512a1d
lea ecx, [esp + 0xf0]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
push ecx
push edx
call fcn.004f9670
add esp, 8
test eax, eax
je 0x4a19b4
lea eax, [esp + 0x34]
push 0
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, esi
call fcn.0049c310
test eax, eax
je 0x4a19b4
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x34]
push edx
push eax
lea ecx, [esp + 0x18]
push str.__s____s_r_n
push ecx
call fcn.0050e6c7
add esp, 0x10
lea edx, [esp + 0x10]
lea ecx, [esi + 0x3ba4]
push edx
push 5
push 5
call fcn.004bf410
jmp 0x4a19b4
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0xe0]
push eax
push ecx
call fcn.004226f0
add esp, 8
mov edx, dword [eax]
mov eax, dword [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x18]
push 0x5681
push ecx
mov byte [esp + 0x19c], 0xf
call fcn.0050e6da
add esp, 0x10
lea ecx, [esp + 0xe0]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
push 0x5682
lea ecx, [ebp + 0x14]
mov dword [ebp + 8], 0xfffffff6
call fcn.00517fef
lea edx, [esp + 0x10]
lea ecx, [ebp + 0x18]
push edx
call fcn.00512a1d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push 2
lea edx, [esp + 0x2c]
push edi
push edx
lea ecx, [esi + 0x3ba4]
call fcn.004bfef0
cmp dword [esp + 0x1c], 0xce
jne 0x4a2410
lea ecx, [esp + 0x134]
call fcn.0044b560
lea ebp, [esi + 0x39b8]
mov edi, eax
mov eax, dword [ebp]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4a1a51
push ebp
lea ecx, [esp + 0xa0]
call fcn.00512659
mov ecx, ebp
mov byte [esp + 0x18c], 0x36
call fcn.0051286f
test edi, edi
je 0x4a22ba
mov ebp, dword [esp + 0x9c]
lea ecx, [esp + 0xa0]
push ecx
mov ecx, edi
call fcn.00441e60
mov edx, dword [eax]
push ebp
push edx
call fcn.004f9670
add esp, 8
lea ecx, [esp + 0xa0]
test eax, eax
sete bl
call fcn.005128e4
test bl, bl
jne 0x4a1a3d
lea ecx, [esp + 0x134]
call fcn.0044b560
mov edi, eax
jmp 0x4a19ee
lea ecx, [esp + 0x9c]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
test edi, edi
jne 0x4a07a8
xor ebp, ebp
mov eax, dword [esp + 0x194]
mov ecx, esi
push eax
call fcn.0049e8e0
mov edi, eax
cmp edi, 1
jge 0x4a251d
mov ecx, dword [esp + 0x198]
mov dword [ecx + 8], 0xfffffff2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x3b
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x3a
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, edi
jmp 0x4a28a2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x1d
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x1c
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xfffffc19
jmp 0x4a28a2
call fcn.005128e4
lea ecx, [esp + 0x40]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x31
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x30
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xffffd954
jmp 0x4a28a2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x33
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x32
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, ebx
jmp 0x4a28a2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x35
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x34
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xfffffc19
jmp 0x4a28a2
mov eax, dword [esp + 0x10]
push 0xffffffffffffff92
push eax
call fcn.004227e0
add esp, 8
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x21
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x20
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xffffff92
jmp 0x4a28a2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0xe
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0xd
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xfffffc19
jmp 0x4a28a2
mov esi, dword [esp + 0x198]
push 0x569c
lea ecx, [esi + 0x14]
mov dword [esi + 8], 0xfffffff5
call fcn.00517fef
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x18]
call fcn.00512a1d
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x16
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x15
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xfffffff5
jmp 0x4a28a2
mov edx, dword [0x5ab980]
mov dword [esp + 0x28], edx
lea eax, [esp + 0x28]
push str.CopyFilesToPC__DMV_SysInfo_mismatch__n_nThis_DMV_file_cannot_be_used_for_Application_and_or_Settings_restore._However__you_may_be_able_to_restore_some_individual_files_using_DMV_Explorer.
push eax
mov byte [esp + 0x194], 0x37
call fcn.0050e6c7
mov ecx, dword [esp + 0x30]
push 0xffffb146
push ecx
call fcn.004227e0
add esp, 0x10
lea ecx, [esp + 0x28]
mov byte [esp + 0x18c], 0x36
call fcn.005128e4
lea ecx, [esp + 0x9c]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x39
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x38
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xffffd8fa
jmp 0x4a28a2
mov edx, dword [esp + 0x10]
push 0xfffffffffffffff6
push edx
call fcn.004227e0
add esp, 8
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x11
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x10
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 0xfffffff6
jmp 0x4a28a2
mov edx, dword [0x5ab980]
mov dword [esp + 0x54], edx
mov bl, 0x3c
push str.FILE
lea ecx, [esp + 0x4c]
mov byte [esp + 0x190], bl
call fcn.00512952
lea eax, [esp + 0x54]
push ebp
lea ecx, [esp + 0x4c]
push eax
push ecx
lea ecx, [esi + 0x3af4]
mov byte [esp + 0x198], 0x3d
call fcn.00497220
lea ecx, [esp + 0x48]
mov byte [esp + 0x18c], bl
call fcn.005128e4
push ecx
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
lea edi, [esi + 0x3b2c]
mov ecx, edi
call fcn.004e9bc0
push str.FILE
lea ecx, [esp + 0x4c]
call fcn.00512952
lea eax, [esp + 0x54]
push ebp
lea ecx, [esp + 0x4c]
push eax
push ecx
lea ecx, [esi + 0x3b10]
mov byte [esp + 0x198], 0x3e
call fcn.00497220
lea ecx, [esp + 0x48]
mov byte [esp + 0x18c], bl
call fcn.005128e4
push ecx
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00512659
mov ecx, edi
call fcn.004e9bc0
mov ecx, dword [esp + 0x194]
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004a32f0
mov esi, eax
cmp esi, ebp
jge 0x4a2798
mov edx, dword [0x5ab980]
mov dword [esp + 0x44], edx
mov edi, dword [esp + 0x198]
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x190], 0x3f
mov dword [edi + 8], 0xfffffff1
call fcn.00422870
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0xa4]
push ecx
push edx
call fcn.004226f0
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
push eax
push esi
push ecx
lea edx, [edi + 0x14]
push 0x56a2
push edx
mov byte [esp + 0x1a0], 0x40
call fcn.0050e6da
add esp, 0x14
lea ecx, [esp + 0xa0]
mov byte [esp + 0x18c], 0x3f
call fcn.005128e4
lea ecx, [edi + 0x18]
call fcn.0051286f
lea ecx, [esp + 0x44]
mov byte [esp + 0x18c], bl
call fcn.005128e4
lea ecx, [esp + 0x54]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x42
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x41
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
mov dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0x20]
call fcn.005128e4
mov eax, 0xffffff88
jmp 0x4a28a2
lea ecx, [esp + 0x54]
mov byte [esp + 0x18c], 0xb
call fcn.005128e4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x18c], 0x44
call fcn.005128e4
lea ecx, [esp + 0x78]
mov byte [esp + 0x18c], 0x43
call fcn.005128e4
lea ecx, [esp + 0x74]
mov byte [esp + 0x18c], 0xa
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x18c], 9
call fcn.00510e5f
lea ecx, [esp + 0x38]
mov byte [esp + 0x18c], 8
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x18c], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x18c], 6
call fcn.005128e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x18c], 5
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x18c], 4
call fcn.005128e4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x18c], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x18c], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x18c], 1
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x18c], 0xffffffff
call fcn.005128e4
mov eax, 1
mov ecx, dword [esp + 0x184]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x180
ret 8