Function at 0x4787c0
Capabilities:
Copy file
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x15c4
call fcn.00492280
mov eax, dword [0x4eb664]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14f4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x14f0], eax
mov eax, dword [ebp + 0x1c]
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp + 0x20]
push edi
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp + 0x24]
push eax
push ebx
push esi
mov dword [ebp - 0x14d8], esi
mov dword [ebp - 0x14e4], eax
call fcn.0047987c
add esp, 0xc
lea ecx, [ebp - 0x14d4]
call fcn.00477cd3
mov ecx, dword [ebx]
mov word [ebp - 0x14d4], 0x101
mov dword [ebp - 0x14d0], 0xc8
mov eax, dword [ecx]
mov dword [ebp - 0x14cc], eax
mov eax, dword [ecx + 0xc]
mov edi, str.http:__dump.upload.duba.net_DumpFileUploader_duba_dump___utm.gif
push edi
mov dword [ebp - 0x14c8], eax
call fcn.00405113
pop ecx
push eax
push edi
lea ecx, [ebp - 0x144c]
call fcn.0040509a
xor eax, eax
push 0xffe
push eax
mov word [ebp - 0x12cc], ax
lea eax, [ebp - 0x12ca]
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x12cc]
push 0x104
push eax
xor edi, edi
push edi
push esi
call sub.PSAPI.DLL_GetModuleFileNameExW
mov esi, dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea eax, [ebp - 0x12cc]
push eax
call esi
push eax
lea ecx, [ebp - 0x141c]
call fcn.0040513a
lea eax, [ebp - 0x12cc]
push eax
call fcn.00405113
pop ecx
push eax
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x14c4]
call fcn.0040509a
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x132c]
call fcn.0040513a
lea eax, [ebp - 0x132c]
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.004781a0
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x132c]
call fcn.00405ac5
push 6
pop ecx
mov dword [ebp - 0x152c], edi
xor eax, eax
lea edi, [ebp - 0x1528]
rep stosd dword es:[edi], eax
push 0x1c
lea eax, [ebp - 0x152c]
push eax
mov eax, dword [ebx + 4]
push dword [eax + 0xb8]
push dword [ebp - 0x14d8]
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov edi, dword [ebp - 0x1528]
push 0x208
lea eax, [ebp - 0x12cc]
push 0
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x12cc]
push 0x104
push eax
push edi
push dword [ebp - 0x14d8]
call sub.PSAPI.DLL_GetModuleFileNameExW
lea eax, [ebp - 0x12cc]
push eax
call esi
push eax
lea ecx, [ebp - 0x13d4]
call fcn.0040513a
lea eax, [ebp - 0x12cc]
push eax
call fcn.00405113
pop ecx
push eax
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x14ac]
call fcn.0040509a
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x132c]
call fcn.0040513a
lea eax, [ebp - 0x132c]
push eax
lea eax, [ebp - 0x13ec]
push eax
call fcn.004781a0
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x132c]
call fcn.00405ac5
push 0x208
lea eax, [ebp - 0x12cc]
push 0
push eax
call fcn.004921d0
push 0x104
lea eax, [ebp - 0x12cc]
push eax
push ebx
call fcn.00477fc8
add esp, 0x18
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x13bc]
call fcn.0040513a
xor eax, eax
mov dword [ebp - 0x1500], eax
mov dword [ebp - 0x14fc], eax
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebx]
push 0xc
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x1500]
push eax
push edi
mov edi, dword [ebp - 0x14d8]
push edi
call sub.PSAPI.DLL_GetModuleInformation
cmp eax, 1
jne 0x478a57
cmp esi, dword [ebp - 0x1500]
jbe 0x478a57
sub esi, dword [ebp - 0x1500]
xor eax, eax
push 0x3e
mov word [ebp - 0xc4], ax
xor ebx, ebx
lea eax, [ebp - 0xc2]
push ebx
push eax
call fcn.004921d0
push 0x10
push 0x20
lea eax, [ebp - 0xc4]
push eax
push esi
call fcn.00495e89
add esp, 0x1c
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x13a4]
call fcn.0040513a
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x1314], ax
push ebx
lea eax, [ebp - 0x13d4]
push eax
lea ecx, [ebp - 0x1314]
mov dword [ebp - 0x1300], 7
mov dword [ebp - 0x1304], ebx
call fcn.00405a06
mov esi, 0x4c5c9c
push esi
call fcn.00405113
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1314]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13ec]
push eax
lea ecx, [ebp - 0x1314]
call fcn.0040483a
push esi
call fcn.00405113
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1314]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13bc]
push eax
lea ecx, [ebp - 0x1314]
call fcn.0040483a
push esi
call fcn.00405113
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1314]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13a4]
push eax
lea ecx, [ebp - 0x1314]
call fcn.0040483a
sub esp, 0x18
lea eax, [ebp - 0x1314]
mov ecx, esp
push eax
call fcn.004043d6
call fcn.00477f95
mov esi, dword [ebp - 0x14e4]
add esp, 0x18
mov dword [ebp - 0x14dc], eax
cmp byte [ebp + 8], bl
je 0x478b77
mov byte [ebp - 0x14d4], bl
jmp 0x478b8c
lea eax, [ebp - 0x14d4]
push esi
push eax
call fcn.004785df
pop ecx
pop ecx
mov byte [ebp - 0x14d4], al
call fcn.004783c4
mov byte [ebp - 0x14d3], al
lea eax, [ebp - 0x1344]
push eax
mov dword [ebp - 0x1330], 0xf
mov dword [ebp - 0x1334], ebx
mov byte [ebp - 0x1344], bl
call fcn.00487f71
pop ecx
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x12e4], ax
push ebx
lea eax, [ebp - 0x141c]
push eax
lea ecx, [ebp - 0x12e4]
mov dword [ebp - 0x12d0], 7
mov dword [ebp - 0x12d4], ebx
call fcn.00405a06
push 0x4c5c9c
call fcn.00405113
pop ecx
push eax
push 0x4c5c9c
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1404]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push 0x4c5c9c
call fcn.00405113
pop ecx
push eax
push 0x4c5c9c
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13d4]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push 0x4c5c9c
call fcn.00405113
pop ecx
push eax
push 0x4c5c9c
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13ec]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push 0x4c5c9c
call fcn.00405113
pop ecx
push eax
push 0x4c5c9c
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13bc]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push 0x4c5c9c
call fcn.00405113
pop ecx
push eax
push 0x4c5c9c
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13a4]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
mov ebx, 0x4c5c9c
push ebx
call fcn.00405113
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0x4c5ca8
call fcn.00405113
pop ecx
push eax
push 0x4c5ca8
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push ebx
call fcn.00405113
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
mov ebx, 0x4c5ca4
push ebx
call fcn.00405113
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
mov ebx, 0x4c5c9c
push ebx
call fcn.00405113
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
cmp dword [ebp - 0x1330], 0x10
lea eax, [ebp - 0x1344]
cmovae eax, dword [ebp - 0x1344]
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x1334]
mov dword [ebp - 0x14e8], eax
lea eax, [ebp - 0x14ec]
push eax
lea eax, [ebp - 0x12fc]
push eax
call fcn.0047eecb
pop ecx
pop ecx
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push ebx
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push str.try_except_count
lea ecx, [ebp - 0x135c]
mov dword [ebp - 0x14e8], ebx
mov dword [ebp - 0x14d8], ebx
call fcn.0040513a
lea eax, [ebp - 0x135c]
push eax
mov ecx, esi
call fcn.00476e2e
push eax
lea ecx, [ebp - 0x150c]
call fcn.00422b52
lea eax, [ebp - 0x14e8]
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.0047df2b
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x135c]
call fcn.00405ac5
push str.except_why
lea ecx, [ebp - 0x135c]
call fcn.0040513a
lea eax, [ebp - 0x135c]
push eax
mov ecx, esi
call fcn.00476e2e
push eax
lea ecx, [ebp - 0x150c]
call fcn.00422b52
lea eax, [ebp - 0x14d8]
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.0047df2b
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x135c]
call fcn.00405ac5
xor eax, eax
push 0x3e
mov word [ebp - 0x84], ax
lea eax, [ebp - 0x82]
push ebx
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x84]
push 0x10
push 0x20
push eax
push dword [ebp - 0x14d8]
push dword [ebp - 0x14e8]
push dword [ebp - 0x14d4]
call fcn.004787a4
add esp, 0xc
push eax
call fcn.00495e89
add esp, 0x10
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x12fc]
call fcn.0040513a
mov esi, 0x4c5c9c
push esi
call fcn.00405113
pop ecx
push eax
push esi
lea ecx, [ebp - 0x12e4]
call fcn.004046dd
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.0040483a
push ebx
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
xor eax, eax
push 0x206
mov word [ebp - 0x2cc], ax
lea eax, [ebp - 0x2ca]
push ebx
push eax
call fcn.004921d0
mov ebx, dword [ebp - 0x1510]
add esp, 0xc
cmp dword [ebx + 0x14], 8
jb 0x478f1d
mov eax, dword [ebx]
jmp 0x478f1f
mov eax, ebx
push eax
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push dword [ebp - 0x14f0]
lea ecx, [ebp - 0x132c]
call fcn.004043d6
push 1
push 2
lea ecx, [ebp - 0x15c4]
call fcn.00414fd9
cmp dword [ebp - 0x12d0], 8
push str..dmp
lea eax, [ebp - 0x12e4]
cmovae eax, dword [ebp - 0x12e4]
push eax
mov esi, 0x4d3c8c
push esi
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x15c4]
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00415b62
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x1494]
call fcn.00409050
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push 0x4d3c88
lea ecx, [ebp - 0x12fc]
call fcn.0040513a
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00479ce2
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
cmp dword [ebp - 0x12d0], 8
push 0x4c25cc
lea eax, [ebp - 0x12e4]
cmovae eax, dword [ebp - 0x12e4]
push eax
push esi
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x15c4]
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00415b62
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x147c]
call fcn.00409050
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push 0x4d3c88
lea ecx, [ebp - 0x12fc]
call fcn.0040513a
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00479ce2
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
cmp dword [ebp - 0x12d0], 8
push 0x4c25c0
lea eax, [ebp - 0x12e4]
cmovae eax, dword [ebp - 0x12e4]
push eax
push esi
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x15c4]
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00415b62
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x1464]
call fcn.00409050
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
cmp dword [ebp - 0x1450], 8
push 0x4c6398
lea eax, [ebp - 0x132c]
push eax
lea eax, [ebp - 0x12fc]
lea esi, [ebp - 0x1464]
cmovae esi, dword [ebp - 0x1464]
push eax
call fcn.0040954d
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x479169
mov eax, dword [eax]
push 1
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
cmp dword [ebp - 0x1480], 8
lea eax, [ebp - 0x1494]
cmovae eax, dword [ebp - 0x1494]
cmp dword [ebx + 0x14], 8
jb 0x4791a0
mov ecx, dword [ebx]
jmp 0x4791a2
mov ecx, ebx
push 1
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4791ec
lea ecx, [ebp - 0x15c4]
call fcn.00413ef9
xor edi, edi
push 0
inc edi
push edi
lea ecx, [ebp - 0x132c]
call fcn.00405ac5
push 0
push edi
lea ecx, [ebp - 0x12e4]
call fcn.00405ac5
lea ecx, [ebp - 0x1344]
call fcn.004073c4
xor bl, bl
jmp 0x479803
lea eax, [ebp - 0x1494]
cmp ebx, eax
je 0x479202
push 0xffffffffffffffff
push 0
push eax
mov ecx, ebx
call fcn.00405a06
cmp dword [ebp - 0x1468], 8
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x147c]
cmovae eax, dword [ebp - 0x147c]
push eax
push 0x4c5ca8
push str.productid
push str.ProductInfo
call esi
mov ebx, 0x4bd3c8
push ebx
lea ecx, [ebp - 0x138c]
call fcn.0040513a
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x14c4]
push eax
lea ecx, [ebp - 0x138c]
call fcn.0040483a
push ebx
call fcn.00405113
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x138c]
call fcn.004046dd
cmp dword [ebp - 0x1468], 8
lea ecx, [ebp - 0x147c]
cmovae ecx, dword [ebp - 0x147c]
cmp dword [ebp - 0x1378], 8
push ecx
lea eax, [ebp - 0x138c]
cmovae eax, dword [ebp - 0x138c]
push eax
push str.exepath
mov ebx, str.ProcessInfo
push ebx
call esi
push 0x208
lea eax, [ebp - 0x12cc]
push 0
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x12cc]
push 0x1000
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push eax
call fcn.004782d4
add esp, 0xc
cmp dword [ebp - 0x1468], 8
lea eax, [ebp - 0x147c]
cmovae eax, dword [ebp - 0x147c]
push eax
lea eax, [ebp - 0x12cc]
push eax
push str.cmdline
push ebx
call esi
xor eax, eax
push 0x3e
mov word [ebp - 0x44], ax
xor ebx, ebx
lea eax, [ebp - 0x42]
push ebx
push eax
call fcn.004921d0
push dword [ebp - 0x14dc]
lea eax, [ebp - 0x44]
push 0x4d6594
push eax
call fcn.0040a2c7
add esp, 0x18
cmp dword [ebp - 0x1468], 8
lea eax, [ebp - 0x147c]
cmovae eax, dword [ebp - 0x147c]
push eax
lea eax, [ebp - 0x44]
push eax
push str.Value
push str.DumpKey
call esi
lea eax, [ebp - 0x1374]
push eax
mov dword [ebp - 0x1360], 0xf
mov dword [ebp - 0x1364], ebx
mov byte [ebp - 0x1374], bl
call fcn.00487d7f
cmp dword [ebp - 0x1360], 0x10
lea eax, [ebp - 0x1374]
cmovae eax, dword [ebp - 0x1374]
cmp dword [ebp - 0x1468], 8
mov dword [ebp - 0x14e0], eax
mov eax, dword [ebp - 0x1364]
mov dword [ebp - 0x14dc], eax
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x12fc]
lea edi, [ebp - 0x147c]
cmovae edi, dword [ebp - 0x147c]
push eax
call fcn.0047eee0
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x4793c0
mov eax, dword [eax]
push edi
push eax
push 0x4c63e8
push str.DumpKey
call esi
push ebx
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push dword [0x4eeee0]
lea eax, [ebp - 0x44]
push 0x4d6594
push eax
call fcn.0040a2c7
add esp, 0xc
cmp dword [ebp - 0x1468], 8
lea eax, [ebp - 0x147c]
cmovae eax, dword [ebp - 0x147c]
push eax
lea eax, [ebp - 0x44]
push eax
push str.Value
push str.AutoRecovery
call esi
cmp dword [ebp - 0x1468], 8
lea ecx, [ebp - 0x147c]
cmovae ecx, dword [ebp - 0x147c]
cmp dword [ebp - 0x14b0], 8
push ecx
lea eax, [ebp - 0x14c4]
cmovae eax, dword [ebp - 0x14c4]
push eax
push str.ProgramPath
mov edi, str.ExceptionEnvironment
push edi
call esi
cmp dword [ebp - 0x1468], 8
lea ecx, [ebp - 0x147c]
cmovae ecx, dword [ebp - 0x147c]
cmp dword [ebp - 0x1498], 8
push ecx
lea eax, [ebp - 0x14ac]
cmovae eax, dword [ebp - 0x14ac]
push eax
push str.ModulePath
push edi
call esi
push 0x208
lea eax, [ebp - 0x12cc]
push ebx
push eax
call fcn.004921d0
add esp, 0xc
lea eax, [ebp - 0x12cc]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x12cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov eax, str.4.4.30.6592
push eax
mov dword [ebp - 0x14e0], eax
call fcn.004071c8
mov dword [ebp - 0x14dc], eax
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x1434]
push eax
call fcn.0047ee93
add esp, 0xc
lea ecx, [ebp - 0x12fc]
push 0x4d3c88
call fcn.0040513a
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00479ce2
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push str.except_why
lea ecx, [ebp - 0x135c]
call fcn.0040513a
push str.try_except_count
lea ecx, [ebp - 0x12fc]
call fcn.0040513a
mov ecx, dword [ebp - 0x14e4]
mov edi, 0x4bd3c8
push edi
lea eax, [ebp - 0x135c]
push eax
call fcn.00476e2e
mov ecx, dword [ebp - 0x14e4]
push eax
push str.__except_why__
push edi
lea eax, [ebp - 0x1434]
push eax
push str.__browser_version__
lea eax, [ebp - 0x12fc]
push eax
call fcn.00476e2e
push eax
push str.__try_except_count
push str.1625462909
push str.__liebao_QQ
push dword [ebp - 0x14d0]
lea eax, [ebp - 0x144c]
push str.__dump_channel
push dword [ebp - 0x14d3]
push str.__up_dump
push dword [ebp - 0x14d4]
push str.__show_gui
push 0x4c6534
push eax
push str.__server_address__
push edi
lea eax, [ebp - 0x1464]
push eax
push str.__log_file__
push edi
lea eax, [ebp - 0x147c]
push eax
push str.__txt_file__
push edi
lea eax, [ebp - 0x1494]
push eax
push str.__dump_file__
push edi
lea eax, [ebp - 0x14ac]
push eax
push str.__exception_file_path__
push edi
lea eax, [ebp - 0x14c4]
push eax
push str.__program_path__
push dword [ebp - 0x14c8]
lea eax, [ebp - 0x15c4]
push str.__exception_address
push dword [ebp - 0x14cc]
push str.__exception_code
push edi
push dword [ebp - 0x14f4]
push edi
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
mov ecx, eax
call fcn.00477d77
push eax
call fcn.00417bf0
pop ecx
pop ecx
mov ecx, eax
call fcn.00477d77
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
mov ecx, eax
call fcn.00477e86
push eax
call fcn.00417bf0
pop ecx
pop ecx
mov ecx, eax
call fcn.00477e86
push eax
call fcn.00417bf0
pop ecx
pop ecx
mov ecx, eax
call fcn.00477d77
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
push eax
call fcn.00477b2f
pop ecx
pop ecx
push eax
call fcn.00417bf0
pop ecx
pop ecx
xor ebx, ebx
push ebx
push esi
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push ebx
push esi
lea ecx, [ebp - 0x135c]
call fcn.00405ac5
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.00415b62
mov ecx, dword [ebp - 0x1504]
lea eax, [ebp - 0x12fc]
push eax
call fcn.00409050
push ebx
push esi
lea ecx, [ebp - 0x12fc]
call fcn.00405ac5
push ebx
push esi
lea ecx, [ebp - 0x1434]
call fcn.00405ac5
lea ecx, [ebp - 0x1374]
call fcn.004073c4
push ebx
push esi
lea ecx, [ebp - 0x138c]
call fcn.00405ac5
lea ecx, [ebp - 0x15c4]
call fcn.00413ef9
push ebx
push esi
lea ecx, [ebp - 0x132c]
call fcn.00405ac5
push ebx
push esi
lea ecx, [ebp - 0x12e4]
call fcn.00405ac5
lea ecx, [ebp - 0x1344]
call fcn.004073c4
xor edi, edi
mov bl, 1
inc edi
xor esi, esi
push esi
push edi
lea ecx, [ebp - 0x1314]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x13a4]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x13bc]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x13ec]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x13d4]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x1404]
call fcn.00405ac5
push esi
push edi
lea ecx, [ebp - 0x141c]
call fcn.00405ac5
lea ecx, [ebp - 0x14d4]
call fcn.00477d2a
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov al, bl
xor ecx, ebp
pop ebx
call fcn.0048f059
leave
ret