Function at 0x424df0
Capabilities:
Access peb ldr_data
Authenticate hmac
Check for peb ntglobalflag flag
Check for time delay via gettickcount
Contain obfuscated stackstrings
Copy file
Encode data using xor
Get number of processors
Get process heap flags
Get process heap force flags
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x4de8d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x41c
push ebx
push ebp
push esi
mov esi, ecx
push edi
push str.MP3OutputDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 0
call fcn.004b26c4
lea eax, [esp + 0x14]
push esi
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 1
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 0
call fcn.004b2656
or edi, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CnvOutputDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 2
call fcn.004b26c4
lea edx, [esi + 8]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 3
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 2
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.RecOutputDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 4
call fcn.004b26c4
lea edx, [esi + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 5
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 4
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.bNormTrackalization
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 6
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x1c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 7
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.OutputRiffWavaFile
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 8
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x6c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 9
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.WinEncoder
lea ecx, [esp + 0x18]
call fcn.004b26c4
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 0xa
call fcn.004b26c4
mov edx, dword [esi + 0x70]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0xb
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 0xa
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.FNBufferSize
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0xc
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov byte [esp + 0x434], 0xd
mov edx, dword [esi + 0xa8]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.MP3InputDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0xe
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x18]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0xf
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.PlayDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x10
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 4]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x11
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.WAVInputDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x12
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0xc]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x43c], 0x13
push ecx
mov ecx, 0x534a44
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.DeleteWAVAfterConversion
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x14
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x68]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x15
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.M3UPlayList
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x16
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x50]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x17
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.PLSPlayList
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x18
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x4c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x19
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
mov dword [esp + 0x434], edi
lea ecx, [esp + 0x14]
call fcn.004b2656
push str.CDDBPath
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x1a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x28]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x1b
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.WinampDBPath
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x1c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x2c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x1d
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDDEmailAddress
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x1e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x44]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x1f
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDDProxyAddress
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x20
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x48]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x21
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBUseProxy
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x22
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x3c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x23
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBUseAuthentication
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x24
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xa4]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x25
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBProxyPort
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x26
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x34]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x27
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBTimeOut
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x28
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x38]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x29
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBLongDirNames
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x2a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x30]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x2b
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDBBAutoConnect
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x2c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x40]
lea eax, [esp + 0x14]
push edx
mov byte [esp + 0x438], 0x2d
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x534a44
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.SplitTrackName
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x2e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xd0]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x2f
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.SplitTrackChar
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x30
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
movsx edx, byte [esi + 0xcc]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x31
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.EjectWhenFinished
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x32
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xd4]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x33
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.SelectAllCDTracks
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x34
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xe0]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x35
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.AutoShutDown
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x36
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xd8]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x37
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.KeepDirLayout
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x38
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0xdc]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x39
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDBWriteAsDosFile
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x3a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x104]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x3b
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDPlayDigital
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x3c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x108]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x3d
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.RecordAddSeqNr
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x3e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x10c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x3f
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.RecordEncoderType
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x40
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov edx, dword [esi + 0x110]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x41
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.TempDir
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x42
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x14]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x43
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
mov eax, dword [esi + 0xa4]
test eax, eax
je 0x425eec
push 0x517f0c
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x44
push str.ProxyAuthentication
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esp + 0x14]
push 1
lea eax, [esp + 0x14]
push edx
push eax
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x45
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.UserName
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x46
push str.ProxyAuthentication
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea ecx, [esi + 0x9c]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x14]
push edx
push eax
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x47
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0048fc68
add esp, 4
call fcn.0048fc75
mov ebp, eax
mov ecx, dword [esi + 0xa0]
cdq
xor eax, edx
mov ebx, dword [ecx - 8]
sub eax, edx
mov dword [esp + 0x30], ebp
add eax, 0x64
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fsqrt
call fcn.0048e214
xor eax, ebx
mov dword [esp + 0x18], 2
mov dword [esp + 0x34], eax
lea eax, [ebx + ebp]
and eax, 0xa
mov dword [esp + 0x14], 0
jle 0x425d83
mov dword [esp + 0x10], eax
add eax, 2
lea ebp, [esp + 0x38]
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, dword [ebp - 8]
push eax
call fcn.0048fc68
add esp, 4
call fcn.0048fc75
call fcn.0048fc75
mov edx, dword [esp + 0x14]
mov dword [ebp], eax
add edx, eax
mov eax, dword [esp + 0x10]
add ebp, 4
dec eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
jne 0x425d4c
test ebx, ebx
mov dword [esp + 0x10], 0
jle 0x425def
mov eax, dword [esp + 0x18]
lea ebp, [esp + eax*4 + 0x28]
add eax, ebx
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xa0]
mov edx, dword [esp + 0x10]
mov al, byte [eax + edx]
mov edx, dword [ebp]
mov byte [esp + 0x1f], al
mov eax, dword [ebp + 4]
add eax, edx
cdq
xor eax, edx
sub eax, edx
add eax, 0xd7e
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fsqrt
call fcn.0048e214
movsx ecx, byte [esp + 0x1f]
xor eax, ecx
mov ecx, dword [esp + 0x14]
xor eax, ecx
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x10]
inc eax
add ebp, 4
cmp eax, ebx
mov dword [esp + 0x10], eax
jl 0x425d9d
push str.PasswordLength
lea ecx, [esp + 0x18]
call fcn.004b26c4
push str.ProxyAuthentication
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 0x48
call fcn.004b26c4
mov ebx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push ebx
lea eax, [esp + 0x14]
push edx
push eax
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x49
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 0x48
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
xor ebp, ebp
test ebx, ebx
jle 0x425eec
lea ebx, [esp + 0x30]
mov ecx, dword [0x52506c]
mov dword [esp + 0x10], ecx
push ebp
lea edx, [esp + 0x14]
push str.Password_03d
push edx
mov dword [esp + 0x440], 0x4a
call fcn.004acb0b
add esp, 0xc
lea ecx, [esp + 0x14]
push str.ProxyAuthentication
call fcn.004b26c4
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x4b
call fcn.0043da90
lea ecx, [esp + 0x14]
mov byte [esp + 0x434], 0x4a
call fcn.004b2656
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], edi
call fcn.004b2656
mov eax, dword [esp + 0x18]
inc ebp
add ebx, 4
cmp ebp, eax
jl 0x425e66
push str.FileFormatString
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x4c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0x58]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x4d
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.PlsFileFormatString
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x4e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0x5c]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x4f
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.LocalCDDBType
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x50
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x60]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x51
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.SaveToCDPlayer
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x52
mov dword [esp + 0x434], ebx
push 0x5175e0
lea ecx, [esp + 0x14]
call fcn.004b26c4
mov eax, dword [esi + 0x78]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x53
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.SaveToLocalCDDB
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x54
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x74]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x55
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.PCopyEncType
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x56
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x64]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x57
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.NormLowLevel
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x58
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x7c]
mov byte [esp + 0x434], 0x59
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.NormHighLevel
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x5a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x80]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x5b
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.LNormFactor
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x5c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x84]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x5d
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.HNormFactor
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x5e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x88]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
mov byte [esp + 0x43c], 0x5f
push edx
mov ecx, 0x534a44
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.EncoderType
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x60
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x8c]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x61
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ExtEncPath
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x62
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0x90]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x63
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ExtEncOpts
lea ecx, [esp + 0x18]
call fcn.004b26c4
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], 0x64
call fcn.004b26c4
lea eax, [esi + 0x94]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x65
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 0x64
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ThreadPriority
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x66
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0x98]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x67
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDBSubmitVia
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x68
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xc0]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x69
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ID3Version
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x6a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xc4]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x6b
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ID3EncodedBy
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x6c
mov dword [esp + 0x434], ebx
push 0x5175e0
lea ecx, [esp + 0x14]
call fcn.004b26c4
lea eax, [esi + 0xb0]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x6d
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ID3Comment
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x6e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0xac]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x6f
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDBESubmitAddr
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x70
push 0x519c68
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0xb4]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x71
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDBHSubmitAddr
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x72
push 0x519c68
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov byte [esp + 0x434], 0x73
lea eax, [esi + 0xb8]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.CDDBESubmitServer
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x74
push 0x519c68
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0xbc]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x75
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.RILC
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x76
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea eax, [esi + 0xc8]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x77
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.OverwriteExisting
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x78
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xe4]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
mov byte [esp + 0x43c], 0x79
push edx
mov ecx, 0x534a44
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.FileOpenRecursive
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x7a
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xf0]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x7b
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.RecordingDevice
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x7c
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xe8]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x7d
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push str.ID3V2TrackNumber
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x7e
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
mov eax, dword [esi + 0xec]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x7f
call fcn.0043da90
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
mov dword [esp + 0x434], edi
lea ecx, [esp + 0x14]
call fcn.004b2656
push str.ProfileName
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x80
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea ebp, [esi + 0x100]
lea eax, [esp + 0x14]
push ebp
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x81
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
push 0x519bd8
lea ecx, [esp + 0x18]
call fcn.004b26c4
mov ebx, 0x82
push 0x5175e0
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.004b26c4
lea edx, [esi + 0x114]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x534a44
mov byte [esp + 0x440], 0x83
call fcn.0043da60
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], edi
call fcn.004b2656
mov ecx, 0x534938
call fcn.00429eb0
call fcn.0047416a
mov edx, dword [ebp]
mov eax, dword [edx - 8]
test eax, eax
je 0x426b69
lea eax, [esp + 0x28]
mov ecx, esi
push eax
call fcn.00404910
push 0x51681c
lea ecx, [esp + 0x28]
push eax
push ecx
mov dword [esp + 0x440], 0x84
call fcn.004b28eb
push ebp
lea edx, [esp + 0x30]
push eax
push edx
mov byte [esp + 0x440], 0x85
call fcn.004b2885
push str..prf.ini
push eax
lea eax, [esp + 0x20]
mov bl, 0x86
push eax
mov byte [esp + 0x440], bl
call fcn.004b28eb
mov ebp, dword [eax]
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
mov byte [esp + 0x438], 0x87
call fcn.00404870
mov eax, dword [eax]
push 0
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x20]
call fcn.004b2656
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], bl
call fcn.004b2656
lea ecx, [esp + 0x2c]
mov byte [esp + 0x434], 0x85
call fcn.004b2656
lea ecx, [esp + 0x24]
mov byte [esp + 0x434], 0x84
call fcn.004b2656
lea ecx, [esp + 0x28]
mov dword [esp + 0x434], edi
call fcn.004b2656
mov ecx, dword [esp + 0x42c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x428
ret