Function at 0x42db44
Capabilities:
Move file
Persist via lnk shortcut

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3f
push 0
push 0
dec ecx
jne 0x42db4c
push ecx
push ebx
xor eax, eax
push ebp
push 0x42ee30
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee48
call fcn.004180a0
lea ecx, [ebp - 0x28]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee54
call fcn.004180a0
mov eax, dword [ebp - 0x28]
call fcn.0042f0fc
test al, al
je 0x42dba6
lea eax, [ebp - 0x10]
mov edx, 0x42ee60
call fcn.00404484
jmp 0x42dbb3
lea edx, [ebp - 0x10]
mov eax, 1
call fcn.00402db0
call fcn.00428058
test al, al
jne 0x42e286
call fcn.0042fe30
test al, al
je 0x42dbef
xor ebx, ebx
mov eax, 0x64
call fcn.00434934
inc ebx
cmp ebx, 0x28
ja 0x42dbef
lea eax, [ebp - 0x2c]
call fcn.00429388
mov eax, dword [ebp - 0x2c]
call fcn.0042c888
test al, al
je 0x42dbcb
lea eax, [ebp - 0x20]
call fcn.004349ec
mov eax, dword [ebp - 0x20]
call fcn.00435204
test al, al
jne 0x42dc19
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
call fcn.00408bfc
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x20]
call fcn.00404484
mov eax, dword [ebp - 0x10]
call fcn.00435204
test al, al
jne 0x42dc3b
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x10]
call fcn.00408bfc
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x10]
call fcn.00404484
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x38]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0x38]
call fcn.00435204
test al, al
jne 0x42dd1f
lea ecx, [ebp - 0x3c]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee74
call fcn.004180a0
mov eax, dword [ebp - 0x3c]
call fcn.0042f0fc
test al, al
je 0x42dcd7
push 0x10
push 0
push 0x1770
lea ecx, [ebp - 0x40]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee80
call fcn.004180a0
mov eax, dword [ebp - 0x40]
call fcn.004048c8
push eax
lea ecx, [ebp - 0x48]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee8c
call fcn.004180a0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.0041af2c
mov eax, dword [ebp - 0x44]
call fcn.004048c8
mov edx, eax
xor eax, eax
pop ecx
call fcn.00434a9c
mov eax, dword [0x462ab4]
mov eax, dword [eax]
call fcn.004350dc
lea edx, [ebp - 0x4c]
mov eax, 4
call fcn.00431be0
mov eax, dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
call fcn.00432440
lea eax, [ebp - 0x50]
push eax
lea edx, [ebp - 0x54]
mov eax, 0x42ee98
call fcn.0043493c
mov edx, dword [ebp - 0x54]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x50]
pop edx
call fcn.00431ae8
lea ecx, [ebp - 0x58]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42eea8
call fcn.004180a0
mov eax, dword [ebp - 0x58]
call fcn.0042f0fc
test al, al
je 0x42ecf4
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.00431300
mov edx, dword [ebp - 0x5c]
mov eax, 0x463c40
call fcn.00404440
lea ecx, [ebp - 0x60]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42eeb4
call fcn.004180a0
mov eax, dword [ebp - 0x60]
call fcn.0042f0fc
test al, al
je 0x42de95
lea eax, [ebp - 0x64]
call fcn.00434a2c
lea eax, [ebp - 0x64]
mov edx, 0x42ee60
call fcn.004046d0
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x14]
call fcn.00431300
push 0x42eec0
lea edx, [ebp - 0x6c]
mov eax, 8
call fcn.00431be0
push dword [ebp - 0x6c]
mov eax, dword [0x462c60]
push dword [eax]
push dword [0x463c40]
lea eax, [ebp - 0x68]
mov edx, 4
call fcn.00404788
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x74]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x74]
push 0x42eed8
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x70]
pop edx
call fcn.00431ae8
lea edx, [ebp - 0x7c]
mov eax, 8
call fcn.00431be0
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x78]
mov edx, dword [ebp - 0x14]
call fcn.00404714
mov eax, dword [ebp - 0x78]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x80]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0x80]
pop edx
call fcn.00431ae8
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00431300
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x84]
mov ecx, 0x42eee8
call fcn.00404714
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x24]
call fcn.00431ae8
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x14]
call fcn.0042fa90
mov edx, dword [ebp - 0x88]
mov eax, 0x463c44
call fcn.00404440
jmp 0x42e273
lea ecx, [ebp - 0x8c]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ef00
call fcn.004180a0
mov eax, dword [ebp - 0x8c]
call fcn.0042f0fc
test al, al
je 0x42e007
mov edx, 0x2710
mov eax, 0x3e8
call fcn.0041afb4
lea edx, [ebp - 0x90]
call fcn.00431be0
lea eax, [ebp - 0x90]
mov edx, dword [0x463c40]
call fcn.004046d0
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x98]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x98]
push 0x42ef0c
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x94]
pop edx
call fcn.00431ae8
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.00431300
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x9c]
mov ecx, 0x42ef1c
call fcn.00404714
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x24]
call fcn.00431ae8
mov edx, dword [0x463c40]
mov eax, dword [ebp - 0x1c]
call fcn.004049b0
test eax, eax
jne 0x42df84
or edx, 0xffffffff
mov eax, 0x42ef30
call fcn.00431ed4
call fcn.004349d4
lea ecx, [ebp - 0xa4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x463c40]
call fcn.00430560
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax + 4]
lea ecx, [ebp - 0xa0]
mov edx, dword [ebp - 0x1c]
call fcn.004313c4
mov edx, dword [ebp - 0xa0]
mov eax, 0x463c44
call fcn.00404440
lea ecx, [ebp - 0x18]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ef4c
call fcn.004180a0
cmp dword [ebp - 0x18], 0
je 0x42e273
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xa8]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x18]
call fcn.00431ae8
jmp 0x42e273
lea ecx, [ebp - 0xac]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee54
call fcn.004180a0
mov eax, dword [ebp - 0xac]
call fcn.0042f0fc
test al, al
je 0x42e1c2
call fcn.0042f88c
cmp eax, 7
jne 0x42e057
lea eax, [ebp - 0xc]
mov edx, 0x42ef5c
call fcn.00404484
lea eax, [ebp - 8]
mov edx, 0x42ef70
call fcn.00404484
jmp 0x42e071
lea eax, [ebp - 0xc]
mov edx, 0x42ef80
call fcn.00404484
lea eax, [ebp - 8]
mov edx, 0x42ef9c
call fcn.00404484
lea eax, [ebp - 0xb0]
call fcn.00434a2c
lea eax, [ebp - 0xb0]
mov edx, dword [ebp - 0xc]
call fcn.004046d0
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 4]
call fcn.00431300
cmp dword [ebp - 4], 0
jne 0x42e0a9
lea edx, [ebp - 4]
mov eax, dword [ebp - 0xc]
call fcn.00431300
lea eax, [ebp - 0xb4]
call fcn.00434a2c
lea eax, [ebp - 0xb4]
mov edx, 0x42ee60
call fcn.004046d0
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x14]
call fcn.00431300
cmp dword [ebp - 0x14], 0
jne 0x42e0e5
lea edx, [ebp - 0x14]
mov eax, 0x42ee60
call fcn.00431300
lea eax, [ebp - 0xb8]
call fcn.004349ec
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x24]
call fcn.00431300
cmp dword [ebp - 0x24], 0
jne 0x42e12e
lea eax, [ebp - 0xc0]
call fcn.004349ec
mov eax, dword [ebp - 0xc0]
lea edx, [ebp - 0xbc]
call fcn.00408bfc
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0x24]
call fcn.00431300
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0xc]
call fcn.00404714
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 4]
call fcn.00431ae8
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xc8]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0x14]
call fcn.00431ae8
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xcc]
mov ecx, dword [ebp - 8]
call fcn.00404714
mov eax, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x24]
call fcn.00431ae8
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0042f9b0
mov edx, dword [ebp - 0xd0]
mov eax, 0x463c44
call fcn.00404440
jmp 0x42e273
lea ecx, [ebp - 0xd4]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42efbc
call fcn.004180a0
mov eax, dword [ebp - 0xd4]
call fcn.0042f0fc
test al, al
je 0x42e273
lea edx, [ebp - 4]
mov eax, 0x42efc8
call fcn.00431300
lea edx, [ebp - 0x14]
mov eax, 0x42ee60
call fcn.00431300
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xd8]
mov ecx, 0x42efc8
call fcn.00404714
mov eax, dword [ebp - 0xd8]
mov edx, dword [ebp - 4]
call fcn.00431ae8
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xdc]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x14]
call fcn.00431ae8
lea ecx, [ebp - 0xe0]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0042f9b0
mov edx, dword [ebp - 0xe0]
mov eax, 0x463c44
call fcn.00404440
call fcn.0042c52c
test al, al
je 0x42e286
call fcn.004349d4
jmp 0x42ecf4
lea ecx, [ebp - 0xe4]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42eea8
call fcn.004180a0
mov eax, dword [ebp - 0xe4]
call fcn.0042f0fc
test al, al
je 0x42ecf4
mov edx, 0x42eeb4
lea ecx, [ebp - 0xe8]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0xe8]
call fcn.0042f0fc
test al, al
je 0x42e314
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0xf0]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0xec]
call fcn.00431300
mov edx, dword [ebp - 0xec]
mov eax, 0x463c40
call fcn.00404440
jmp 0x42e3c2
mov edx, 0x42ef00
lea ecx, [ebp - 0xf4]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0xf4]
call fcn.0042f0fc
test al, al
je 0x42e389
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0xf8]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0xf8]
push 0x42ef0c
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404788
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x10]
call fcn.00431300
mov edx, dword [ebp - 0xfc]
mov eax, 0x463c40
call fcn.00404440
jmp 0x42e3c2
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x104]
mov ecx, 0x42ee60
call fcn.00404714
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x100]
call fcn.00431300
mov edx, dword [ebp - 0x100]
mov eax, 0x463c40
call fcn.00404440
mov dx, 1
mov eax, dword [0x463c40]
call fcn.0042d600
cmp dword [0x463c40], 0
jne 0x42e3e8
mov eax, 0x42efdc
call fcn.004262b4
call fcn.004349d4
mov edx, 0x42eeb4
lea ecx, [ebp - 0x108]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x108]
call fcn.0042f0fc
test al, al
je 0x42e433
lea edx, [ebp - 0x10c]
mov eax, dword [0x463c40]
call fcn.0042fa90
mov edx, dword [ebp - 0x10c]
mov eax, 0x463c44
call fcn.00404440
jmp 0x42e4b5
mov edx, 0x42ef00
lea ecx, [ebp - 0x110]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x110]
call fcn.0042f0fc
test al, al
je 0x42e495
lea ecx, [ebp - 0x118]
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x463c40]
call fcn.00430560
mov eax, dword [ebp - 0x118]
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x114]
mov edx, dword [ebp - 0x1c]
call fcn.004313c4
mov edx, dword [ebp - 0x114]
mov eax, 0x463c44
call fcn.00404440
jmp 0x42e4b5
lea edx, [ebp - 0x11c]
mov eax, dword [0x463c40]
call fcn.0042fa14
mov edx, dword [ebp - 0x11c]
mov eax, 0x463c44
call fcn.00404440
lea eax, [ebp - 0x24]
call fcn.0042b910
mov eax, dword [0x462808]
mov byte [eax], 0
mov eax, dword [0x462800]
mov byte [eax], 0
mov eax, dword [ebp - 0x24]
call fcn.004355e0
test al, al
jne 0x42e733
mov eax, dword [0x462800]
mov byte [eax], 1
mov edx, 0x42eeb4
lea ecx, [ebp - 0x120]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x120]
call fcn.0042f0fc
test al, al
je 0x42e580
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x128]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x128]
push 0x42eed8
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x124]
push eax
lea eax, [ebp - 0x12c]
call fcn.0042b81c
mov eax, dword [ebp - 0x12c]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x130]
mov ecx, 0x42eee8
call fcn.00404714
mov eax, dword [ebp - 0x130]
pop ecx
pop edx
call fcn.0042b520
jmp 0x42eb09
mov edx, 0x42ef00
lea ecx, [ebp - 0x134]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x134]
call fcn.0042f0fc
test al, al
je 0x42e61b
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x13c]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x13c]
push 0x42ef0c
lea eax, [ebp - 0x138]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x138]
push eax
lea eax, [ebp - 0x140]
call fcn.0042b81c
mov eax, dword [ebp - 0x140]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x144]
mov ecx, 0x42ef1c
call fcn.00404714
mov eax, dword [ebp - 0x144]
pop ecx
pop edx
call fcn.0042b520
jmp 0x42eb09
lea ecx, [ebp - 0x148]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee54
call fcn.004180a0
mov eax, dword [ebp - 0x148]
call fcn.0042f0fc
test al, al
je 0x42e6c9
call fcn.0042f88c
cmp eax, 7
jne 0x42e68c
lea eax, [ebp - 0x14c]
call fcn.0042b81c
mov eax, dword [ebp - 0x14c]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x150]
mov ecx, 0x42ef70
call fcn.00404714
mov eax, dword [ebp - 0x150]
xor edx, edx
pop ecx
call fcn.0042b520
jmp 0x42eb09
lea eax, [ebp - 0x154]
call fcn.0042b81c
mov eax, dword [ebp - 0x154]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x158]
mov ecx, 0x42ef9c
call fcn.00404714
mov eax, dword [ebp - 0x158]
xor edx, edx
pop ecx
call fcn.0042b520
jmp 0x42eb09
mov edx, 0x42efbc
lea ecx, [ebp - 0x15c]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x15c]
call fcn.0042f0fc
test al, al
je 0x42eb09
lea eax, [ebp - 0x160]
call fcn.0042b81c
mov eax, dword [ebp - 0x160]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x164]
mov ecx, 0x42eff0
call fcn.00404714
mov edx, dword [ebp - 0x164]
mov eax, 0x42f00c
pop ecx
call fcn.0042b520
jmp 0x42eb09
mov edx, 0x42eeb4
lea ecx, [ebp - 0x168]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x168]
call fcn.0042f0fc
test al, al
je 0x42e7f5
lea eax, [ebp - 0x16c]
call fcn.00432440
lea eax, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x170]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x170]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x16c]
push eax
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x178]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x178]
push 0x42eed8
lea eax, [ebp - 0x174]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x174]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x17c]
mov ecx, 0x42eee8
call fcn.00404714
mov eax, dword [ebp - 0x17c]
pop edx
pop ecx
call fcn.0042b674
jmp 0x42ea2f
mov edx, 0x42ef00
lea ecx, [ebp - 0x180]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x180]
call fcn.0042f0fc
test al, al
je 0x42e8b7
lea eax, [ebp - 0x184]
call fcn.00432440
lea eax, [ebp - 0x184]
push eax
lea edx, [ebp - 0x188]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x188]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x184]
push eax
mov eax, dword [0x462ab4]
push dword [eax]
lea edx, [ebp - 0x190]
mov eax, 0x42eecc
call fcn.0043493c
push dword [ebp - 0x190]
push 0x42ef0c
lea eax, [ebp - 0x18c]
mov edx, 3
call fcn.00404788
mov eax, dword [ebp - 0x18c]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x194]
mov ecx, 0x42ef1c
call fcn.00404714
mov eax, dword [ebp - 0x194]
pop edx
pop ecx
call fcn.0042b674
jmp 0x42ea2f
lea ecx, [ebp - 0x198]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee54
call fcn.004180a0
mov eax, dword [ebp - 0x198]
call fcn.0042f0fc
test al, al
je 0x42e9ab
call fcn.0042f88c
cmp eax, 7
jne 0x42e94b
lea eax, [ebp - 0x19c]
call fcn.00432440
lea eax, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x1a0]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x1a0]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x19c]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x1a4]
mov ecx, 0x42ef70
call fcn.00404714
mov eax, dword [ebp - 0x1a4]
xor edx, edx
pop ecx
call fcn.0042b674
jmp 0x42ea2f
lea eax, [ebp - 0x1a8]
call fcn.00432440
lea eax, [ebp - 0x1a8]
push eax
lea edx, [ebp - 0x1ac]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x1ac]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x1a8]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x1b0]
mov ecx, 0x42ef9c
call fcn.00404714
mov eax, dword [ebp - 0x1b0]
xor edx, edx
pop ecx
call fcn.0042b674
jmp 0x42ea2f
mov edx, 0x42efbc
lea ecx, [ebp - 0x1b4]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x1b4]
call fcn.0042f0fc
test al, al
je 0x42ea2f
lea eax, [ebp - 0x1b8]
call fcn.00432440
lea eax, [ebp - 0x1b8]
push eax
lea edx, [ebp - 0x1bc]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x1bc]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x1b8]
push eax
mov edx, dword [0x462ab4]
mov edx, dword [edx]
lea eax, [ebp - 0x1c0]
mov ecx, 0x42eff0
call fcn.00404714
mov edx, dword [ebp - 0x1c0]
mov eax, 0x42f00c
pop ecx
call fcn.0042b674
push dword [ebp - 0x24]
mov eax, dword [0x462804]
push dword [eax]
push 0x42f030
mov eax, 0x463c3c
mov edx, 3
call fcn.00404788
mov eax, 0x29a
call fcn.00434934
mov eax, 0x42f040
call fcn.004355e0
test al, al
je 0x42ea8b
mov ecx, dword [0x4629e4]
mov ecx, dword [ecx]
lea eax, [ebp - 0x1c4]
mov edx, 0x42f054
call fcn.00404714
mov eax, dword [ebp - 0x1c4]
or edx, 0xffffffff
call fcn.00431ed4
mov eax, dword [0x463c3c]
call fcn.004048c8
push eax
lea eax, [ebp - 0x1c8]
call fcn.00432440
lea eax, [ebp - 0x1c8]
push eax
lea edx, [ebp - 0x1cc]
mov eax, 0x42f024
call fcn.0043493c
mov edx, dword [ebp - 0x1cc]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x1c8]
call fcn.004048c8
push eax
call sub.kernel32.dll_MoveFileA
mov eax, 0x42f040
call fcn.004355e0
test al, al
je 0x42eb09
mov ecx, dword [0x4629e4]
mov ecx, dword [ecx]
lea eax, [ebp - 0x1d0]
mov edx, 0x42f068
call fcn.00404714
mov eax, dword [ebp - 0x1d0]
or edx, 0xffffffff
call fcn.00431ed4
lea eax, [ebp - 0x1d4]
call fcn.00432440
lea eax, [ebp - 0x1d4]
push eax
lea edx, [ebp - 0x1d8]
mov eax, 0x42ee98
call fcn.0043493c
mov edx, dword [ebp - 0x1d8]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x1d4]
call fcn.00435204
test al, al
je 0x42ecea
lea eax, [ebp - 0x1dc]
call fcn.00432440
lea eax, [ebp - 0x1dc]
push eax
lea edx, [ebp - 0x1e0]
mov eax, 0x42ee98
call fcn.0043493c
mov edx, dword [ebp - 0x1e0]
pop eax
call fcn.004046d0
mov eax, dword [ebp - 0x1dc]
call fcn.0042fec4
mov eax, dword [0x4627a0]
cmp byte [eax], 0
je 0x42ebba
lea ecx, [ebp - 0x1e4]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42f080
call fcn.004180a0
mov eax, dword [ebp - 0x1e4]
call fcn.0042f0fc
test al, al
je 0x42ebba
xor eax, eax
call fcn.0042bf00
mov eax, dword [0x4628b4]
cmp byte [eax], 0
je 0x42ecd4
lea ecx, [ebp - 0x1e8]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42f08c
call fcn.004180a0
mov eax, dword [ebp - 0x1e8]
call fcn.0042f0fc
test al, al
je 0x42ecd4
mov edx, 0x42eeb4
lea ecx, [ebp - 0x1ec]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x1ec]
call fcn.0042f0fc
test al, al
jne 0x42ec3e
lea ecx, [ebp - 0x1f0]
mov eax, dword [0x462940]
mov eax, dword [eax]
mov edx, 0x42ee54
call fcn.004180a0
mov eax, dword [ebp - 0x1f0]
call fcn.0042f0fc
test al, al
je 0x42ec66
lea ecx, [ebp - 0x1f4]
mov edx, 0x42f098
mov eax, dword [0x463c40]
call fcn.00430560
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax + 4]
lea edx, [ebp - 0x24]
call fcn.0041af2c
jmp 0x42ecb3
mov edx, 0x42ef00
lea ecx, [ebp - 0x1f8]
mov eax, dword [0x462940]
mov eax, dword [eax]
call fcn.004180a0
mov eax, dword [ebp - 0x1f8]
call fcn.0042f0fc
test al, al
je 0x42ecb3
lea ecx, [ebp - 0x1fc]
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x463c40]
call fcn.00430560
mov eax, dword [ebp - 0x1fc]
mov eax, dword [eax + 8]
lea ecx, [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
call fcn.004313c4
push 0
push 1
lea eax, [ebp - 0x24]
call fcn.00404920
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.00426dbc
mov eax, 0xbb8
call fcn.00434934
mov eax, dword [0x4627a0]
cmp byte [eax], 0
jne 0x42ecea
xor edx, edx
mov eax, dword [0x463c40]
call fcn.0042d600
mov eax, 0x42cfd4
call fcn.00431ebc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x42ee3a
lea eax, [ebp - 0x1fc]
mov edx, dword [0x42f860]
call fcn.004058d8
lea eax, [ebp - 0x1f8]
call fcn.004043ec
lea eax, [ebp - 0x1f4]
mov edx, dword [0x42f860]
call fcn.004058d8
lea eax, [ebp - 0x1f0]
mov edx, 0x24
call fcn.00404410
lea eax, [ebp - 0x160]
call fcn.00404a8c
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.00404410
lea eax, [ebp - 0x154]
call fcn.00404a8c
lea eax, [ebp - 0x150]
call fcn.004043ec
lea eax, [ebp - 0x14c]
call fcn.00404a8c
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00404410
lea eax, [ebp - 0x140]
call fcn.00404a8c
lea eax, [ebp - 0x13c]
mov edx, 4
call fcn.00404410
lea eax, [ebp - 0x12c]
call fcn.00404a8c
lea eax, [ebp - 0x128]
mov edx, 4
call fcn.00404410
lea eax, [ebp - 0x118]
mov edx, dword [0x42f860]
call fcn.004058d8
lea eax, [ebp - 0x114]
mov edx, 0x1c
call fcn.00404410
lea eax, [ebp - 0xa4]
mov edx, dword [0x42f860]
call fcn.004058d8
lea eax, [ebp - 0xa0]
mov edx, 0xb
call fcn.00404410
lea eax, [ebp - 0x70]
call fcn.004043ec
lea eax, [ebp - 0x68]
call fcn.004043ec
lea eax, [ebp - 0x74]
call fcn.004043ec
lea eax, [ebp - 0x6c]
call fcn.004043ec
lea eax, [ebp - 0x64]
mov edx, 0x19
call fcn.00404410
ret