Function at 0x402a30
Capabilities:
Copy file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x409dbd
push eax
mov eax, 0x1674
mov dword fs:[0], esp
call fcn.00404660
push ebx
push esi
push edi
push 0x40dff0
push 0x80000000
lea ecx, [esp + 0x424]
call fcn.00403ae0
push str.SoftwareQvodPlayerFileExts_
push 0x80000001
lea ecx, [esp + 0x147c]
mov dword [esp + 0x1690], 0
call fcn.00403ae0
push 0x40dff0
push 0x80000001
lea ecx, [esp + 0x1270]
mov byte [esp + 0x1690], 1
call fcn.00403ae0
mov ebx, dword [esp + 0x1690]
mov byte [esp + 0x1688], 2
mov esi, 0x40b040
mov eax, dword [esi]
push 1
push eax
push 0x40dff0
lea ecx, [esp + 0x1480]
call fcn.00403c20
mov edi, eax
mov eax, dword [esi]
push str..qmv
push eax
call fcn.0040456a
add esp, 8
test eax, eax
jne 0x402af0
cmp edi, 1
jne 0x402c61
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x110]
mov edx, dword [esi + 4]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0x214]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push edx
push eax
lea ecx, [esp + 0x42c]
call fcn.00403b20
test eax, eax
jne 0x402b9c
mov edx, dword [esi]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push eax
push edx
lea ecx, [esp + 0x42c]
call fcn.00403b20
test eax, eax
je 0x402b9c
mov al, byte [esp + 0x110]
test al, al
je 0x402b9c
mov eax, dword [esi + 8]
lea ecx, [esp + 0x110]
push ecx
push eax
call fcn.0040468f
add esp, 8
test eax, eax
je 0x402b9c
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [esp + 0x110]
push edx
push eax
push ecx
lea ecx, [esp + 0x428]
call fcn.00403f00
mov edx, dword [esi + 8]
mov eax, dword [esi]
push edx
push 0
push eax
lea ecx, [esp + 0x428]
call fcn.00403f00
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0x214]
push ecx
push ebx
push str._s__d
push edx
call fcn.00404144
mov eax, dword [esi + 8]
lea ecx, [esp + 0x1c]
push eax
push str._sDefaultIcon
push ecx
call fcn.00404144
add esp, 0x1c
lea edx, [esp + 0x214]
lea eax, [esp + 0xc]
lea ecx, [esp + 0x41c]
push edx
push 0
push eax
call fcn.00403f00
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x214]
lea edx, [esp + 0x214]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0xc]
push ecx
push ebx
push str.__s____s____1_
push edx
call fcn.00404144
mov eax, dword [esi + 8]
lea ecx, [esp + 0x1c]
push eax
push str._s_shellopencommand
push ecx
call fcn.00404144
add esp, 0x1c
lea edx, [esp + 0x214]
lea eax, [esp + 0xc]
lea ecx, [esp + 0x41c]
push edx
push 0
push eax
call fcn.00403f00
jmp 0x402d01
mov edx, dword [esi + 4]
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push edx
push eax
lea ecx, [esp + 0x42c]
call fcn.00403b20
test eax, eax
je 0x402cb3
mov edx, dword [esi]
lea ecx, [esp + 0x110]
push ecx
push 0
push edx
lea ecx, [esp + 0x428]
call fcn.00403f00
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea ecx, [esp + 0x424]
call fcn.00403da0
jmp 0x402ccf
cmp dword [esi + 0x18], 0xa
je 0x402ccf
mov edx, dword [esi]
push 0x40dff0
push 0
push edx
lea ecx, [esp + 0x428]
call fcn.00403f00
mov eax, dword [esi]
mov ecx, dword [str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_]
push eax
push ecx
lea edx, [esp + 0x14]
push str._s_s
push edx
call fcn.00404144
add esp, 0x10
lea eax, [esp + 0xc]
lea ecx, [esp + 0x1268]
push str.Progid
push eax
call fcn.00403e30
add esi, 0x20
cmp esi, 0x40bf40
jl 0x402abb
push 0
push 0
push 0x1000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push 0x40dff0
push 0x80000000
lea ecx, [esp + 0xe58]
call fcn.00403ae0
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x628]
push 0x208
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x62c]
mov byte [esp + 0x168c], 3
push ecx
push eax
push str.SoftwareRealNetworksPreferencesDT_Codecs
lea ecx, [esp + 0xe60]
call fcn.00403b20
test eax, eax
jne 0x402dbd
mov ecx, 0x41
lea edi, [esp + 0x318]
push 0x40dff4
lea edx, [esp + 0x31c]
push str._sCodecs_
push edx
rep stosd dword es:[edi], eax
call fcn.00404144
add esp, 0xc
lea eax, [esp + 0x318]
lea ecx, [esp + 0xe50]
push eax
push 0
push str.SoftwareRealNetworksPreferencesDT_Codecs
call fcn.00403f00
jmp 0x402e79
lea ecx, [esp + 0x628]
push str.QvodPlayer
push ecx
call fcn.0040456a
add esp, 8
test eax, eax
jne 0x402e79
mov ecx, 0x82
lea edi, [esp + 0xc48]
rep stosd dword es:[edi], eax
lea edi, [esp + 0x628]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffe
cmp byte [esp + ecx + 0x628], 0x5c
jne 0x402e1a
lea edx, [esp + 0x628]
lea eax, [esp + 0xc48]
push edx
push str._scook.dll
push eax
jmp 0x402e2f
lea ecx, [esp + 0x628]
lea edx, [esp + 0xc48]
push ecx
push 0x40d648
push edx
call fcn.00404144
add esp, 0xc
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x318]
rep stosd dword es:[edi], eax
push 0x40dff4
lea eax, [esp + 0x31c]
push str._sCodecscook.dll
push eax
call fcn.00404144
add esp, 0xc
lea ecx, [esp + 0xc48]
lea edx, [esp + 0x318]
push 0
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x40dff0
push 0x80000002
lea ecx, [esp + 0x838]
call fcn.00403ae0
mov eax, dword [str.application_QVOD]
mov ecx, dword [str.qvod]
mov edx, dword [str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsAccepted_Documents]
push eax
push ecx
push edx
lea ecx, [esp + 0x83c]
mov byte [esp + 0x1694], 4
call fcn.00403f00
mov eax, dword [str.application_QVOD]
mov ecx, dword [str.qhtp]
mov edx, dword [str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsAccepted_Documents]
push eax
push ecx
push edx
lea ecx, [esp + 0x83c]
call fcn.00403f00
mov eax, dword [str.R31CND_QVOD]
mov ecx, dword [str.SOFTWAREClassesSoftwareRealNetworksRealPlayer6.0PreferencesDistCode]
push eax
push 0
push ecx
lea ecx, [esp + 0x83c]
call fcn.00403f00
push 0x40dff0
push 0x80000000
lea ecx, [esp + 0xa44]
call fcn.00403ae0
mov edx, dword [0x40c020]
mov eax, dword [0x40c01c]
push edx
mov bl, 5
push 0
push eax
lea ecx, [esp + 0xa48]
mov byte [esp + 0x1694], bl
call fcn.00403f00
mov ecx, dword [0x40c018]
mov edx, dword [str.._tv]
push ecx
push 0
push edx
lea ecx, [esp + 0xa48]
call fcn.00403f00
push 0x40dff0
push 0x80000000
lea ecx, [esp + 0x1064]
call fcn.00403ae0
mov eax, dword [0x40c028]
mov ecx, dword [str..mem]
push eax
push 0
push ecx
lea ecx, [esp + 0x1068]
mov byte [esp + 0x1694], 6
call fcn.00403f00
push 1
call fcn.00403040
add esp, 4
lea ecx, [esp + 0x105c]
mov byte [esp + 0x1688], bl
call fcn.00403b10
lea ecx, [esp + 0xa3c]
mov byte [esp + 0x1688], 4
call fcn.00403b10
lea ecx, [esp + 0x830]
mov byte [esp + 0x1688], 3
call fcn.00403b10
lea ecx, [esp + 0xe50]
mov byte [esp + 0x1688], 2
call fcn.00403b10
lea ecx, [esp + 0x1268]
mov byte [esp + 0x1688], 1
call fcn.00403b10
lea ecx, [esp + 0x1474]
mov byte [esp + 0x1688], 0
call fcn.00403b10
lea ecx, [esp + 0x41c]
mov dword [esp + 0x1688], 0xffffffff
call fcn.00403b10
mov ecx, dword [esp + 0x1680]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x1680
ret