Function at 0x460ab0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5260f8
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x595cb8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460af0
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
push 0x14
mov dword [ebp - 4], 0
call fcn.004f457c
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460b26
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov dword [edi + 4], 0xffffffff
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460b4c
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi + 8], eax
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460b6c
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, dword [ebp + 8]
add eax, 0x10
mov dword [edi + 0xc], eax
mov ecx, ebx
push str.inputFilePath
mov word [edi + 0x10], 1
call fcn.00438d70
cmp eax, 0x59c858
je 0x4613f1
mov al, byte [ebx + 8]
test al, al
je 0x460bb9
cmp al, 7
je 0x460bb9
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x460bc7
mov eax, 0x59c858
jmp 0x460bfd
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.inputFilePath
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460bf3
mov eax, 0x59c858
jmp 0x460bf6
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 4
jne 0x4613f1
test cl, cl
je 0x460c27
cmp cl, 7
je 0x460c27
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x460c34
mov esi, 0x59c858
jmp 0x460c67
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.inputFilePath
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460c60
mov esi, 0x59c858
jmp 0x460c63
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0
cmp byte [esi + 8], 4
je 0x460c84
push 0x2a9
push 0x56ef58
push str.type___stringValue
call fcn.00508598
add esp, 0xc
mov edx, dword [esi]
test edx, edx
jne 0x460c8e
xor ecx, ecx
jmp 0x460c9c
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460c93
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x10]
call fcn.0042cb10
mov edx, edi
lea ecx, [ebp - 0x10]
call fcn.0042c0f0
push str.outputFolder
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x461337
mov al, byte [ebx + 8]
test al, al
je 0x460ce9
cmp al, 7
je 0x460ce9
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x460cf7
mov eax, 0x59c858
jmp 0x460d2d
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.outputFolder
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460d23
mov eax, 0x59c858
jmp 0x460d26
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 4
jne 0x461337
test cl, cl
je 0x460d57
cmp cl, 7
je 0x460d57
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x460d64
mov esi, 0x59c858
jmp 0x460d97
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.outputFolder
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460d90
mov esi, 0x59c858
jmp 0x460d93
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0
cmp byte [esi + 8], 4
je 0x460db4
push 0x2a9
push 0x56ef58
push str.type___stringValue
call fcn.00508598
add esp, 0xc
mov edx, dword [esi]
test edx, edx
jne 0x460dbe
xor ecx, ecx
jmp 0x460dcc
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460dc3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x10]
call fcn.0042cb10
mov eax, dword [ebp - 0x10]
mov edx, dword [eax - 0xc]
lea ecx, [edx - 1]
test ecx, ecx
js 0x46132d
cmp ecx, edx
jg 0x46132d
mov al, byte [ecx + eax]
cmp al, 0x5c
je 0x460e05
push 1
push 0x572594
lea ecx, [ebp - 0x10]
call fcn.00435590
lea edx, [edi + 8]
lea ecx, [ebp - 0x10]
call fcn.0042c0f0
push str.onFinishId
mov ecx, ebx
call fcn.00438d70
or edi, 0xffffffff
cmp eax, 0x59c858
je 0x460f2a
mov al, byte [ebx + 8]
test al, al
je 0x460e4c
cmp al, 7
je 0x460e4c
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov cl, byte [ebx + 8]
test cl, cl
jne 0x460e5a
mov eax, 0x59c858
jmp 0x460e90
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.onFinishId
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460e86
mov eax, 0x59c858
jmp 0x460e89
add eax, 0x18
mov byte [ebp - 4], 0
mov cl, byte [ebx + 8]
cmp byte [eax + 8], 1
jne 0x460f2a
test cl, cl
je 0x460eba
cmp cl, 7
je 0x460eba
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x460ed5
mov ecx, 0x59c858
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x46105e
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.onFinishId
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x460f13
mov ecx, 0x59c858
mov byte [ebp - 4], 0
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x46105e
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.00438670
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
jmp 0x46105e
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460f3f
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, str.onFinishId_not_exist
mov byte [ebp - 4], 0x15
test eax, 0xffff0000
jne 0x460f74
movzx esi, ax
mov ecx, esi
call fcn.0041f3d0
test eax, eax
je 0x460f81
push esi
push eax
lea ecx, [ebp + 8]
call fcn.0041fbd0
jmp 0x460f81
push str.onFinishId_not_exist
lea ecx, [ebp + 8]
call fcn.0041fa30
push str.extractWithGzip
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x16
call fcn.0041f910
mov byte [ebp - 4], 0x17
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x460fab
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x18
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x28]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x19
cmp dword [ecx + 0xc], 0
je 0x460fe9
push 2
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0x18
mov eax, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461007
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461022
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461040
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46105e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.shouldDecrypt
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x46114b
mov al, byte [ebx + 8]
test al, al
je 0x461097
cmp al, 7
je 0x461097
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov al, byte [ebx + 8]
test al, al
jne 0x4610a5
mov ecx, 0x59c858
jmp 0x4610db
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.shouldDecrypt
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x4610d1
mov ecx, 0x59c858
jmp 0x4610d4
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
mov al, byte [ebx + 8]
cmp byte [ecx + 8], 5
jne 0x46114b
test al, al
je 0x461100
cmp al, 7
je 0x461100
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x46110d
mov ecx, 0x59c858
jmp 0x461140
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.shouldDecrypt
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461139
mov ecx, 0x59c858
jmp 0x46113c
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.004388a0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x10], al
push str.deleteDecrypted
mov ecx, ebx
call fcn.00438d70
cmp eax, 0x59c858
je 0x461238
mov al, byte [ebx + 8]
test al, al
je 0x461184
cmp al, 7
je 0x461184
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
mov al, byte [ebx + 8]
test al, al
jne 0x461192
mov ecx, 0x59c858
jmp 0x4611c8
mov esi, dword [ebx]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], str.deleteDecrypted
push eax
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x4611be
mov ecx, 0x59c858
jmp 0x4611c1
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
mov al, byte [ebx + 8]
cmp byte [ecx + 8], 5
jne 0x461238
test al, al
je 0x4611ed
cmp al, 7
je 0x4611ed
push 0x42b
push 0x56ef58
push str.type___nullValue__type___objectValue
call fcn.00508598
add esp, 0xc
cmp byte [ebx + 8], 0
jne 0x4611fa
mov ecx, 0x59c858
jmp 0x46122d
mov esi, dword [ebx]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], str.deleteDecrypted
push eax
mov ecx, esi
mov dword [ebp - 0x28], 0
call fcn.004390f0
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x461226
mov ecx, 0x59c858
jmp 0x461229
lea ecx, [eax + 0x18]
mov byte [ebp - 4], 0
call fcn.004388a0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x11], al
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push 0
push dword [ebp - 0x14]
push 0x44fe40
push 0
push 0
call fcn.004fc2dd
add esp, 0x18
test eax, eax
jne 0x461321
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.00460a10
push str._beginthreadex_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x22
call fcn.0041f910
mov byte [ebp - 4], 0x23
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x4612a1
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x24
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x25
cmp dword [ecx + 0xc], 0
je 0x4612df
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0x24
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4612fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x461318
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x22
jmp 0x4614a6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4614de
push 0x80070057
call fcn.0041f2a0
push str.outputFolder_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call fcn.0041f910
mov byte [ebp - 4], 0xc
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x46136e
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xe
cmp dword [ecx + 0xc], 0
je 0x4613ac
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 0xd
or edi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4613cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4613e8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
jmp 0x4614a6
push str.inputFilePath_error
lea ecx, [ebp - 0x1c]
call fcn.0041f870
push str.extractWithGzip
lea ecx, [ebp + 8]
mov byte [ebp - 4], 3
call fcn.0041f910
mov byte [ebp - 4], 4
call fcn.0040f350
mov ecx, eax
test ecx, ecx
jne 0x461428
push 0x80004005
call fcn.0041f2a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 5
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x20]
call fcn.00420f70
add esp, 4
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 6
cmp dword [ecx + 0xc], 0
je 0x461466
push 2
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004210a0
mov byte [ebp - 4], 5
or edi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461487
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4614a2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp + 8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4614c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4614de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4614fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4