Function at 0x442920
Capabilities:
Delete file
Get file attributes
Get file size
Read file on windows
Resolve function by parsing pe exports
Set file attributes
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x510c98
mov eax, dword fs:[0]
push eax
sub esp, 0x2c0
mov eax, dword [0x5467a4]
xor eax, esp
mov dword [esp + 0x2b8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5467a4]
xor eax, esp
push eax
lea eax, [esp + 0x2d4]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2e8]
mov ebx, dword [esp + 0x2ec]
mov ebp, dword [esp + 0x2e4]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x80], ebx
xor edi, edi
mov dword [esp + 0x2dc], edi
mov ecx, dword [ebx + 0x68]
mov edx, dword [ebx + 0x6c]
mov eax, dword [ebx + 0x80]
mov dword [esp + 0x64], ecx
mov ecx, dword [ebx + 0x84]
mov dword [esp + 0x68], edx
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
xor esi, esi
mov byte [esp + 0x2dc], 1
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x34], esi
jmp 0x4429d0
mov ecx, dword [ebp + 0xbc]
cmp ecx, edi
je 0x442c45
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x442c45
cmp ecx, edi
je 0x442a04
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x442a09
call fcn.004e89bf
mov edx, dword [ebp + 0xbc]
mov esi, dword [edx + esi*4]
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x442a8e
lea ecx, [esp + 0x50]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
jne 0x442a36
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x442a8e
mov edx, dword [esp + 0x50]
push 1
push 0
push 0
push edx
call fcn.004f5030
mov edi, eax
xor eax, eax
add edi, esi
mov ebx, edx
lea ecx, [esp + 0xac]
adc ebx, eax
push ecx
lea esi, [esp + 0x20]
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], ebx
call fcn.004450a0
add dword [esp + 0x3c], edi
adc dword [esp + 0x40], ebx
add dword [esp + 0x34], 1
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0x34]
xor edi, edi
jmp 0x4429d0
push edi
push 0x51a1d4
lea esi, [esp + 0x170]
mov dword [esp + 0x188], 7
mov dword [esp + 0x184], edi
mov word [esp + 0x174], di
call fcn.00407330
mov byte [esp + 0x2dc], 2
mov esi, dword [ebp]
lea edx, [esp + 0x168]
push edx
add esi, 0x30
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [esi]
mov ecx, ebp
call eax
mov byte [esp + 0x2dc], 1
cmp dword [esp + 0x180], 8
mov bl, al
jb 0x442b01
mov ecx, dword [esp + 0x16c]
push ecx
call fcn.004e7d7e
add esp, 4
test bl, bl
je 0x442b73
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x442b16
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x2dc], 0xffffffff
mov esi, dword [esp + 0x2f4]
cmp esi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
je 0x443b7c
lea edx, [esi + 4]
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x443b7c
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x443b7c
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
jmp 0x443b7c
push edi
push 0x51a1d4
lea esi, [esp + 0x138]
mov dword [esp + 0x150], 7
mov dword [esp + 0x14c], edi
mov word [esp + 0x13c], di
call fcn.00407330
mov byte [esp + 0x2dc], 3
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea eax, [esp + 0x134]
push eax
push 0x10000002
mov ecx, ebp
call edx
cmp dword [esp + 0x148], 8
jb 0x442be1
mov eax, dword [esp + 0x134]
push eax
call fcn.004e7d7e
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x442bf2
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x2dc], 0xffffffff
mov esi, dword [esp + 0x2f4]
cmp esi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
je 0x442c3e
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x442c3e
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x442c3e
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
xor al, al
jmp 0x443b7e
mov ecx, dword [esp + 0x58]
cmp dword [esp + 0x40], ecx
ja 0x442cbf
jb 0x442c5b
mov edx, dword [esp + 0x54]
cmp dword [esp + 0x3c], edx
jae 0x442cbf
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x442c6c
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x2dc], 0xffffffff
mov esi, dword [esp + 0x2f4]
cmp esi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
je 0x442cb8
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x442cb8
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x442cb8
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
xor al, al
jmp 0x443b7e
mov edx, dword [ebx + 0x68]
or edx, dword [ebx + 0x6c]
mov eax, dword [ebx + 0x78]
mov ecx, dword [ebx + 0x7c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
je 0x442e9d
mov edx, dword [esp + 0x20]
cmp edx, edi
mov ecx, dword [esp + 0x24]
je 0x442e06
mov eax, ecx
sub eax, edx
sar eax, 3
cmp eax, dword [esp + 0x34]
jbe 0x442e06
cmp edx, ecx
mov esi, edx
jbe 0x442d11
call fcn.004e89bf
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x1c]
mov edi, eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc0], esi
lea esi, [esi + eax*8]
cmp esi, ecx
ja 0x442d2d
cmp esi, edx
jae 0x442d36
call fcn.004e89bf
mov edx, dword [esp + 0x20]
cmp esi, dword [edi + 8]
jb 0x442d44
call fcn.004e89bf
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
cmp ecx, dword [esi + 4]
jb 0x442e9d
ja 0x442d5f
mov eax, dword [esp + 0x3c]
cmp eax, dword [esi]
jb 0x442e9d
test edx, edx
je 0x442e06
mov ecx, dword [esp + 0x24]
mov eax, ecx
sub eax, edx
sar eax, 3
cmp eax, dword [esp + 0x34]
jbe 0x442e06
cmp edx, ecx
mov esi, edx
jbe 0x442d8f
call fcn.004e89bf
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x1c]
mov edi, eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc0], esi
lea esi, [esi + eax*8]
cmp esi, ecx
ja 0x442dab
cmp esi, edx
jae 0x442db4
call fcn.004e89bf
mov edx, dword [esp + 0x20]
cmp esi, dword [edi + 8]
jb 0x442dc2
call fcn.004e89bf
mov edx, dword [esp + 0x20]
mov ecx, dword [esi]
sub dword [esp + 0x3c], ecx
mov eax, dword [esi + 4]
mov edi, dword [esp + 0x34]
sbb dword [esp + 0x40], eax
mov ecx, dword [ebp + 0xbc]
add edi, 1
test ecx, ecx
mov dword [esp + 0x34], edi
je 0x442e0b
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x442e0b
mov ecx, dword [ebx + 0x68]
or ecx, dword [ebx + 0x6c]
je 0x442e9d
xor edi, edi
jmp 0x442ce1
call fcn.00406e80
mov esi, 8
cmp dword [ebp + 0x144], esi
jb 0x442e20
mov eax, dword [ebp + 0x130]
jmp 0x442e26
lea eax, [ebp + 0x130]
push edi
push str..part
push eax
lea edx, [esp + 0x200]
push str._s_s_d
push edx
call fcn.0042cd80
add esp, 0x14
push 2
mov byte [esp + 0x2e0], 4
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
lea ecx, [esp + 0x1f8]
push ecx
push 0x10000002
mov ecx, ebp
call edx
cmp dword [esp + 0x20c], esi
jb 0x442e7c
mov eax, dword [esp + 0x1f8]
push eax
call fcn.004e7d7e
add esp, 4
xor edi, edi
mov dword [esp + 0x20c], 7
mov dword [esp + 0x208], edi
mov word [esp + 0x1f8], di
jmp 0x442be1
mov ecx, dword [ebp + 0xbc]
xor edi, edi
cmp ecx, edi
je 0x442eba
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x34], eax
jb 0x442ebf
call fcn.004e89bf
mov ecx, dword [ebp + 0xbc]
mov edx, dword [esp + 0x34]
mov eax, dword [ecx + edx*4]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
push 0x80000
mov dword [esp + 0x74], eax
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
mov dword [esp + 0x80], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0xec], vtable.GameMgr::GMBuffer_unsigned_char_.0
mov dword [esp + 0xf8], edi
call fcn.004e7330
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xec], 0x80000
mov dword [esp + 0x6c], edi
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
push 1
push edi
mov byte [esp + 0x2e4], 6
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x78]
push edi
lea esi, [esp + 0x50]
mov byte [esp + 0x47], 0
mov byte [esp + 0x27], 0
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0xdc], ecx
call fcn.0043ec40
test al, al
jne 0x442fff
push edi
push 0x51a1d4
lea esi, [esp + 0x100]
mov dword [esp + 0x118], 7
mov dword [esp + 0x114], edi
mov word [esp + 0x104], di
call fcn.00407330
mov byte [esp + 0x2dc], 7
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [esi]
lea edx, [esp + 0xfc]
push edx
push 0x10000002
mov ecx, ebp
call eax
mov byte [esp + 0x2dc], 6
cmp dword [esp + 0x110], 8
jb 0x442fff
mov ecx, dword [esp + 0xfc]
push ecx
call fcn.004e7d7e
add esp, 4
mov eax, dword [ebx + 0x78]
cmp dword [esp + 0x44], eax
mov ecx, dword [ebx + 0x7c]
jne 0x443015
cmp dword [esp + 0x48], ecx
je 0x4430a5
push edi
push ecx
push eax
mov eax, dword [ebp + 0xb4]
lea esi, [esp + 0x50]
call fcn.0043ec40
test al, al
jne 0x443077
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x44303c
push eax
call fcn.004e7d6a
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x44304d
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea eax, [esp + 0x2f0]
mov dword [esp + 0x2dc], 0xffffffff
call fcn.0043de60
xor al, al
jmp 0x443b7e
mov edx, dword [esp + 0x44]
cmp edx, dword [ebx + 0x78]
jne 0x443089
mov eax, dword [esp + 0x48]
cmp eax, dword [ebx + 0x7c]
je 0x4430a5
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x44309a
push eax
call fcn.004e7d6a
add esp, 4
lea esi, [esp + 0x1c]
call fcn.00444e50
jmp 0x443059
cmp dword [esp + 0x58], edi
ja 0x4430b5
cmp dword [esp + 0x54], edi
jbe 0x443b50
mov ecx, dword [esp + 0x34]
add ecx, 1
mov dword [esp + 0x50], ecx
cmp dword [esp + 0x58], edi
mov dword [esp + 0x60], edi
jb 0x4430dd
ja 0x4430d6
cmp dword [esp + 0x54], 0x80000
jbe 0x4430dd
mov esi, 0x80000
jmp 0x4430e1
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x6c]
mov edx, dword [esp + 0x2c]
lea eax, [edx + ebx]
cmp eax, edi
je 0x443ba8
mov ecx, dword [esp + 0x70]
cmp dword [ecx], 0xffffffff
je 0x443ba8
push edi
lea edx, [esp + 0x64]
push edx
push esi
push eax
mov dword [esp + 0x70], edi
mov eax, dword [ecx]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x443ba8
mov eax, dword [esp + 0x60]
cmp eax, edi
seta cl
test cl, cl
je 0x443ba8
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
sub ecx, eax
sbb edx, edi
add ebx, eax
mov dword [esp + 0x54], ecx
or ecx, edx
mov dword [esp + 0x58], edx
mov dword [esp + 0x6c], ebx
je 0x44352a
cmp ebx, 0x80000
jae 0x44337b
cmp eax, esi
jae 0x4430c0
mov ecx, dword [ebp + 0xbc]
cmp ecx, edi
je 0x443deb
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x50], eax
jae 0x443deb
mov ebx, dword [esp + 0x34]
add dword [esp + 0x50], 1
add ebx, 1
cmp ecx, edi
mov dword [esp + 0x34], ebx
je 0x4431ab
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4431b0
call fcn.004e89bf
mov ecx, dword [ebp + 0xbc]
mov eax, dword [ecx + ebx*4]
mov dword [esp + 0x70], eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x443212
push 1
lea edx, [esp + 0xbc]
push edx
push edi
push eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc8], edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
mov dword [esp + 0xb4], eax
jne 0x443201
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x443212
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x48], eax
jmp 0x443288
push edi
push 0x51a1d4
lea esi, [esp + 0x18c]
mov dword [esp + 0x1a4], 7
mov dword [esp + 0x1a0], edi
mov word [esp + 0x190], di
call fcn.00407330
mov byte [esp + 0x2dc], 0xe
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea ecx, [esp + 0x188]
push ecx
push 0x10000002
mov ecx, ebp
call edx
mov byte [esp + 0x2dc], 6
cmp dword [esp + 0x19c], 8
jb 0x443288
mov eax, dword [esp + 0x188]
push eax
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esp + 0x44]
or ecx, dword [esp + 0x48]
je 0x4432fa
mov eax, dword [ebp + 0xb4]
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x443d22
push edi
lea edx, [esp + 0xac]
push edx
push edi
push eax
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
mov dword [esp + 0xa4], eax
jne 0x4432e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x443d22
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x44], eax
or eax, ecx
mov dword [esp + 0x48], ecx
jne 0x443d22
mov edx, dword [esp + 0x20]
cmp edx, edi
je 0x442e06
mov ecx, dword [esp + 0x24]
mov eax, ecx
sub eax, edx
sar eax, 3
cmp eax, ebx
jbe 0x442e06
cmp edx, ecx
mov esi, edx
jbe 0x44332c
call fcn.004e89bf
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov dword [esp + 0xb0], esi
lea esi, [esi + ebx*8]
cmp esi, ecx
lea eax, [esp + 0x1c]
mov edi, eax
ja 0x443344
cmp esi, edx
jae 0x443349
call fcn.004e89bf
cmp esi, dword [edi + 8]
jb 0x443353
call fcn.004e89bf
mov ecx, dword [esp + 0x6c]
xor eax, eax
add ecx, dword [esi]
adc eax, dword [esi + 4]
test eax, eax
ja 0x44352a
jb 0x443374
cmp ecx, 0x80000
ja 0x44352a
xor edi, edi
jmp 0x4430c0
mov eax, dword [esp + 0x70]
push 1
push edi
push edi
lea esi, [esp + 0x50]
call fcn.0043ec40
test al, al
jne 0x44340c
push edi
push 0x51a1d4
lea esi, [esp + 0x1a8]
mov dword [esp + 0x1c0], 7
mov dword [esp + 0x1bc], edi
mov word [esp + 0x1ac], di
call fcn.00407330
mov byte [esp + 0x2dc], 0xa
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea eax, [esp + 0x1a4]
push eax
push 0x10000002
mov ecx, ebp
call edx
mov ebx, 8
mov byte [esp + 0x2dc], 6
cmp dword [esp + 0x1b8], ebx
jb 0x443411
mov eax, dword [esp + 0x1a4]
push eax
call fcn.004e7d7e
add esp, 4
jmp 0x443411
mov ebx, 8
mov esi, dword [esp + 0x34]
push esi
lea eax, [esp + 0x20]
call fcn.00445040
mov ecx, dword [esp + 0x44]
cmp ecx, dword [eax]
jne 0x44352a
mov edx, dword [esp + 0x48]
cmp edx, dword [eax + 4]
jne 0x44352a
mov ecx, dword [ebp + 0xbc]
cmp ecx, edi
jne 0x443446
xor eax, eax
jmp 0x443451
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
lea ecx, [esi + 1]
cmp ecx, eax
jae 0x443d49
mov esi, ecx
mov ecx, dword [ebp + 0xbc]
cmp ecx, edi
mov dword [esp + 0x34], esi
je 0x44347b
mov eax, dword [ebp + 0xc0]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x443480
call fcn.004e89bf
mov eax, dword [ebp + 0xbc]
mov eax, dword [eax + esi*4]
push 1
push edi
push edi
lea esi, [esp + 0x50]
mov dword [esp + 0x7c], eax
call fcn.0043ec40
test al, al
jne 0x4434f8
mov edx, 0x51a1d4
lea eax, [esp + 0x1bc]
call fcn.00406ac0
mov byte [esp + 0x2dc], 0xc
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea ecx, [esp + 0x1c0]
push ecx
push 0x10000002
mov ecx, ebp
call edx
mov byte [esp + 0x2dc], 6
cmp dword [esp + 0x1d4], ebx
jb 0x4434f8
mov eax, dword [esp + 0x1c0]
push eax
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esp + 0x44]
or ecx, dword [esp + 0x48]
je 0x44352a
mov eax, dword [ebp + 0xb4]
push edi
push edi
push edi
lea esi, [esp + 0x50]
call fcn.0043ec40
test al, al
je 0x443dd2
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x48]
jne 0x443dd2
mov al, byte [ebp + 0x110]
test al, al
jne 0x443e82
mov eax, dword [esp + 0x6c]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x60], eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x50], edi
jbe 0x443b2c
mov ebx, dword [esp + 0x74]
lea ecx, [ecx]
mov eax, dword [ebp + 0x114]
cmp eax, edi
mov esi, dword [esp + 0x2f0]
je 0x44357f
mov eax, dword [eax + 4]
cmp eax, 0xffffffff
je 0x44357f
push eax
call sub.KERNEL32.dll_Sleep
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
mov byte [esp + 0x80], 0
call eax
xor ecx, ecx
cmp dword [esp + 0x68], ecx
jg 0x4435a8
jl 0x4435a0
cmp dword [esp + 0x64], eax
ja 0x4435a8
mov byte [esp + 0x80], 1
mov eax, dword [esp + 0x80]
mov edx, dword [esi]
mov edx, dword [edx + 8]
push eax
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x88]
push ecx
mov ecx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x5c]
add ecx, eax
push ecx
mov ecx, esi
call edx
test al, al
je 0x443e9d
mov eax, dword [esp + 0x84]
add dword [esp + 0x50], eax
sub dword [esp + 0x60], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov ecx, esi
call edx
test eax, eax
jbe 0x443b22
mov dword [esp + 0x5c], edi
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, esi
call edx
cmp eax, edi
mov dword [esp + 0xac], eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
je 0x443b19
mov eax, dword [esp + 0x5c]
cmp eax, edi
jbe 0x443b19
sub dword [esp + 0x64], eax
sbb dword [esp + 0x68], edi
jmp 0x443640
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x7c]
mov eax, esi
call fcn.004354d0
cmp edi, eax
jae 0x44402f
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x44366d
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 3
cmp edi, eax
jb 0x443672
call fcn.004e89bf
mov eax, dword [esi + 4]
lea eax, [eax + edi*8]
mov edi, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], eax
je 0x44369b
add eax, 4
mov ecx, 1
lock xadd dword [eax], ecx
lea edx, [esp + 0x22c]
push edx
mov byte [esp + 0x2e0], 0xf
call fcn.004427f0
cmp byte [esp + 0x3b], 0
mov byte [esp + 0x2dc], 0x10
jne 0x44393f
lea eax, [esp + 0x258]
push eax
call fcn.0043a7a0
add esp, 4
test al, al
je 0x4437ee
mov eax, dword [esp + 0x25c]
mov esi, 8
cmp dword [esp + 0x270], esi
jae 0x4436f7
lea eax, [esp + 0x25c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, dword [esp + 0x25c]
and eax, 0xfffffffe
cmp dword [esp + 0x270], esi
jae 0x443718
lea ecx, [esp + 0x25c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [esp + 0x270], esi
mov eax, dword [esp + 0x25c]
jae 0x443737
lea eax, [esp + 0x25c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
je 0x4437ee
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp]
mov edx, dword [edx + 0x30]
mov esi, eax
lea eax, [esp + 0x258]
push eax
push esi
mov ecx, ebp
call edx
test al, al
jne 0x44388b
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
push esi
lea ecx, [esp + 0x25c]
push ecx
push 0x10000004
mov ecx, ebp
call edx
test al, al
jne 0x44388b
lea esi, [esp + 0x22c]
mov byte [esp + 0x2dc], 0xf
call fcn.0043fc10
mov byte [esp + 0x2dc], 6
mov esi, dword [esp + 0x9c]
xor edi, edi
cmp esi, edi
je 0x443d22
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x443d22
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x443d22
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
jmp 0x443d22
cmp byte [esp + 0x1b], 0
jne 0x443890
mov esi, dword [esp + 0x28c]
mov eax, dword [esp + 0x30]
or esi, 0x8000000
cmp eax, 0xffffffff
je 0x443816
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x270], 8
mov eax, dword [esp + 0x25c]
jae 0x44382e
lea eax, [esp + 0x25c]
push 0
push esi
push 4
push 0
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x30], eax
jne 0x443890
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [ebp]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x258]
push ecx
push esi
mov ecx, ebp
call edx
test al, al
jne 0x44388b
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
push esi
lea ecx, [esp + 0x25c]
push ecx
push 0x10000001
mov ecx, ebp
call edx
test al, al
je 0x443ed1
mov byte [esp + 0x1b], 1
cmp dword [esp + 0x2ac], 0
jne 0x4438c8
cmp dword [esp + 0x2b0], 0
jne 0x4438c8
mov eax, dword [esp + 0x294]
add dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x298]
mov ebx, eax
adc dword [esp + 0x90], ecx
mov dword [esp + 0x78], ecx
jmp 0x4438fe
mov ebx, dword [esp + 0xc4]
sub ebx, dword [esp + 0x8c]
mov eax, dword [esp + 0xc8]
sbb eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
mov eax, dword [esp + 0x84]
mov edx, dword [ebp]
mov edx, dword [edx + 0x24]
push 0
push eax
lea ecx, [esp + 0x234]
push ecx
mov ecx, ebp
mov dword [esp + 0x80], ebx
mov byte [esp + 0x47], 1
call edx
mov ecx, dword [ebp + 0x114]
test ecx, ecx
je 0x44393f
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x22c]
push edx
call eax
xor ecx, ecx
cmp byte [esp + 0x1b], cl
mov dword [esp + 0x88], ecx
jne 0x4439a9
mov esi, dword [esp + 0x5c]
cmp ebx, esi
jae 0x443958
mov esi, ebx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xac]
mov edi, dword [esp + 0x30]
lea eax, [ecx + edx]
test eax, eax
je 0x443f61
cmp edi, 0xffffffff
je 0x443f61
push 0
lea ecx, [esp + 0x8c]
push ecx
push esi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x443f61
mov eax, dword [esp + 0x88]
cmp esi, eax
jne 0x443f61
xor ecx, ecx
jmp 0x4439ba
mov eax, dword [esp + 0x5c]
cmp ebx, eax
jae 0x4439b3
mov eax, ebx
mov dword [esp + 0x88], eax
cmp ebx, eax
jne 0x443a8a
cmp dword [esp + 0x78], ecx
jne 0x443a8a
sub dword [esp + 0x5c], eax
add dword [esp + 0x7c], 1
add dword [esp + 0x3c], eax
mov edx, dword [esp + 0x284]
mov eax, dword [esp + 0x288]
adc dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x27c]
mov esi, dword [esp + 0x30]
cmp esi, 0xffffffff
mov dword [esp + 0xd8], edx
mov edx, dword [esp + 0x280]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x274]
mov dword [esp + 0xe0], ecx
mov ecx, dword [esp + 0x278]
mov dword [esp + 0xe4], edx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
je 0x443a6c
lea edx, [esp + 0xd8]
push edx
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0xc4]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x443a6c
mov dword [esp + 0x30], 0xffffffff
mov edx, dword [ebp]
mov edx, dword [edx + 0x28]
lea eax, [esp + 0x22c]
push eax
mov ecx, ebp
mov byte [esp + 0x3f], 0
mov byte [esp + 0x1f], 0
call edx
jmp 0x443aa0
sub ebx, eax
sbb dword [esp + 0x78], ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x74], ebx
lea esi, [esp + 0x22c]
mov byte [esp + 0x2dc], 0xf
call fcn.0043fc10
mov byte [esp + 0x2dc], 6
mov esi, dword [esp + 0x9c]
test esi, esi
je 0x443af1
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x443af1
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x443af1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
cmp dword [esp + 0x5c], 0
ja 0x443640
mov eax, dword [esp + 0x84]
add dword [ebp + 0x120], eax
mov esi, dword [esp + 0x2f0]
adc dword [ebp + 0x124], 0
xor edi, edi
mov edx, dword [esi]
mov eax, dword [edx + 0x1c]
mov ecx, esi
call eax
cmp dword [esp + 0x60], edi
ja 0x443560
cmp dword [esp + 0x58], edi
ja 0x4430b5
cmp dword [esp + 0x54], edi
ja 0x4430b5
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x443b50
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0xe8]
call fcn.00401070
lea esi, [esp + 0x1c]
call fcn.00444e50
lea eax, [esp + 0x2f0]
mov dword [esp + 0x2dc], 0xffffffff
call fcn.0043de60
mov al, 1
mov ecx, dword [esp + 0x2d4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2b8]
xor ecx, esp
call fcn.004e7d6f
add esp, 0x2cc
ret 0x14
xor edi, edi
push edi
push 0x51a1d4
lea esi, [esp + 0x11c]
mov dword [esp + 0x134], 7
mov dword [esp + 0x130], edi
mov word [esp + 0x120], di
call fcn.00407330
mov byte [esp + 0x2dc], 8
mov esi, dword [ebp]
lea ecx, [esp + 0x114]
push ecx
add esi, 0x30
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
mov ecx, ebp
call edx
mov byte [esp + 0x2dc], 6
cmp dword [esp + 0x12c], 8
mov bl, al
jb 0x443c1d
mov eax, dword [esp + 0x118]
push eax
call fcn.004e7d7e
add esp, 4
test bl, bl
je 0x443cb4
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x443c35
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x443c46
push eax
call fcn.004e7d6a
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x443c57
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x2dc], 0xffffffff
mov esi, dword [esp + 0x2f4]
cmp esi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
je 0x443b7c
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x443b7c
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x443b7c
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
jmp 0x443b7c
push edi
push 0x51a1d4
lea esi, [esp + 0x154]
mov dword [esp + 0x16c], 7
mov dword [esp + 0x168], edi
mov word [esp + 0x158], di
call fcn.00407330
mov byte [esp + 0x2dc], 9
mov esi, dword [ebp]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea ecx, [esp + 0x150]
push ecx
push 0x10000002
mov ecx, ebp
call edx
cmp dword [esp + 0x164], 8
jb 0x443d22
mov eax, dword [esp + 0x150]
push eax
call fcn.004e7d7e
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x443d32
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x442be1
push eax
call fcn.004e7d6a
jmp 0x442bde
cmp dword [ebp + 0x144], ebx
jb 0x443d59
mov eax, dword [ebp + 0x130]
jmp 0x443d5f
lea eax, [ebp + 0x130]
add esi, 1
push esi
push str..part
push eax
lea ecx, [esp + 0x1e4]
push str._s_s_d
push ecx
call fcn.0042cd80
add esp, 0x14
push 2
mov byte [esp + 0x2e0], 0xb
mov edx, dword [ebp]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x1dc]
push eax
push 0x10000002
mov ecx, ebp
call edx
cmp dword [esp + 0x1f0], ebx
jb 0x443db8
mov eax, dword [esp + 0x1dc]
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x1f0], 7
mov dword [esp + 0x1ec], edi
mov word [esp + 0x1dc], di
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x443089
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x443089
mov esi, 8
cmp dword [ebp + 0x144], esi
jb 0x443e00
mov eax, dword [ebp + 0x130]
jmp 0x443e06
lea eax, [ebp + 0x130]
mov ecx, dword [esp + 0x34]
add ecx, 1
push ecx
push str..part
push eax
lea edx, [esp + 0x21c]
push str._s_s_d
push edx
call fcn.0042cd80
add esp, 0x14
push 2
mov byte [esp + 0x2e0], 0xd
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
lea ecx, [esp + 0x214]
push ecx
push 0x10000002
mov ecx, ebp
call edx
cmp dword [esp + 0x228], esi
jb 0x443e63
mov eax, dword [esp + 0x214]
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x228], 7
mov dword [esp + 0x224], edi
mov word [esp + 0x214], di
jmp 0x443d22
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x443e92
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
test eax, eax
jmp 0x44308f
mov eax, dword [esp + 0xcc]
sub eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xd0]
sbb ecx, dword [esp + 0x58]
add eax, dword [esp + 0x44]
mov edx, dword [ebp]
adc ecx, dword [esp + 0x48]
push ecx
push eax
mov eax, dword [edx + 0x38]
push 0x30000003
mov ecx, ebp
call eax
jmp 0x443d22
lea esi, [esp + 0x22c]
mov byte [esp + 0x2dc], 0xf
call fcn.0043fc10
mov byte [esp + 0x2dc], 6
mov esi, dword [esp + 0x9c]
test esi, esi
je 0x443f22
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x443f22
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x443f22
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x443f33
push eax
call fcn.004e7d6a
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
je 0x443f44
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
jmp 0x443059
mov esi, dword [ebp]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0x258]
push ecx
add esi, 0x30
call ebx
mov edx, dword [esi]
push eax
mov ecx, ebp
call edx
test al, al
je 0x443fd0
lea esi, [esp + 0x22c]
mov byte [esp + 0x2dc], 0xf
call fcn.0043fc10
lea eax, [esp + 0x98]
mov byte [esp + 0x2dc], 6
call fcn.0043de60
cmp edi, 0xffffffff
je 0x443fb6
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x443b5c
push eax
call fcn.004e7d6a
add esp, 4
jmp 0x443b5c
mov esi, dword [ebp]
add esi, 0x34
call ebx
mov edx, dword [esi]
push eax
lea eax, [esp + 0x25c]
push eax
push 0x10000003
mov ecx, ebp
call edx
lea esi, [esp + 0x22c]
mov byte [esp + 0x2dc], 0xf
call fcn.0043fc10
lea eax, [esp + 0x98]
mov byte [esp + 0x2dc], 6
call fcn.0043de60
cmp edi, 0xffffffff
je 0x443e92
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
test eax, eax
jmp 0x44308f
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
je 0x44403f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
xor esi, esi
cmp eax, esi
je 0x444052
push eax
call fcn.004e7d6a
add esp, 4
mov eax, dword [esp + 0x20]
cmp eax, esi
je 0x444063
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
jmp 0x443059