Function at 0x437430
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47e3d8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x4bc00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
call fcn.00403ac0
mov ecx, eax
test ecx, ecx
je 0x4381ca
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.004027e0
mov byte [ebp - 4], 3
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_SearchSetupCompletedSuccessfully
lea ecx, [ebp - 0x20]
call fcn.0045fc60
call fcn.00468330
push ecx
mov ecx, esp
cmp al, 1
jne 0x4376b7
mov dword [ebp - 0x2c], esp
push str.DWORD
call fcn.0045fcf0
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x48d160
call fcn.0045fcf0
mov byte [ebp - 4], 5
push ecx
mov dword [ebp - 0x30], esp
mov ebx, esp
mov dword [ebp - 0x34], ebx
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x4374fc
cmp ecx, dword [esi - 0x10]
jne 0x4374fc
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x437526
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381d4
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov dword [ebx], eax
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
mov byte [ebp - 4], 3
call fcn.00465710
add esp, 0xc
mov ebx, eax
test ebx, ebx
je 0x437676
push str.Failed_to_update_the_registry_SetupCompletedSuccessfully
lea ecx, [ebp - 0x18]
call fcn.0045fc60
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 8
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x28], esp
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x437593
cmp ecx, dword [esi - 0x10]
jne 0x437593
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x4375bd
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381d9
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045fcf0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.00463120
add esp, 8
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x28], esp
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x437615
cmp ecx, dword [esi - 0x10]
jne 0x437615
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x43763f
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381de
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x495cc0
call fcn.0045fcf0
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.00462c10
add esp, 8
jmp 0x4378c9
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045fcf0
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0x48d168
call fcn.0045fcf0
mov byte [ebp - 4], 0x11
jmp 0x4378ba
mov dword [ebp - 0x34], esp
push str.DWORD
call fcn.0045fcf0
mov byte [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x48d160
call fcn.0045fcf0
mov byte [ebp - 4], 0x13
push ecx
mov dword [ebp - 0x2c], esp
mov ebx, esp
mov dword [ebp - 0x28], ebx
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x437707
cmp ecx, dword [esi - 0x10]
jne 0x437707
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x437731
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381e3
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov dword [ebx], eax
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 3
call fcn.004653f0
add esp, 0xc
mov ebx, eax
test ebx, ebx
je 0x43787e
push str.Failed_to_update_the_registry_SetupCompletedSuccessfully
lea ecx, [ebp - 0x18]
call fcn.0045fc60
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 0x16
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x28], esp
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x43779e
cmp ecx, dword [esi - 0x10]
jne 0x43779e
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x4377c8
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381e8
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045fcf0
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.00463120
add esp, 8
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x28], esp
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x437820
cmp ecx, dword [esi - 0x10]
jne 0x437820
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x43784a
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4381ed
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Deleting_edb_file
call fcn.0045fcf0
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.00462c10
add esp, 8
jmp 0x4378c9
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045fcf0
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0x48d168
call fcn.0045fcf0
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.00463120
add esp, 0xc
lea ecx, [ebp - 0x14]
call fcn.004027e0
mov byte [ebp - 4], 0x20
mov bl, 1
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.sc_config_WSearch_startdisabled
call fcn.0045fcf0
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
mov dl, bl
lea ecx, [ebp - 0x2c]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x22
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437952
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x437946
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x437946
call fcn.00403090
mov dword [ebp - 0x28], eax
or esi, 0xffffffff
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x43793e
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437955
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030f0
or esi, 0xffffffff
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437977
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x4379a0
cmp ecx, dword [edi - 0x10]
jne 0x4379a0
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x4379ca
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4381f2
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_Congifure_WSearch_to_mannual
call fcn.0045fcf0
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x20
or ecx, 0xffffffff
call fcn.00462c10
mov bl, 1
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.net_stop_WSearch
call fcn.0045fcf0
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x20
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x28
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437a76
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x437a6a
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x437a6a
call fcn.00403090
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437a62
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437a76
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030f0
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437a98
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437ac1
cmp ecx, dword [edi - 0x10]
jne 0x437ac1
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437aeb
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4381f7
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file__stop_WSearch
call fcn.0045fcf0
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x20
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push 0x490628
lea ecx, [ebp - 0x24]
call fcn.0045fcf0
mov byte [ebp - 4], 0x2d
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x24]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437b58
cmp ecx, dword [edi - 0x10]
jne 0x437b58
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437b82
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4381fc
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x2d
call fcn.00467760
add esp, 4
test al, al
je 0x437ce0
push str.C:ProgramDataMicrosoftSearchDataApplicationsWindowsWindows.edb
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
setne bl
test eax, eax
jne 0x437d2b
push str.Failed_to_delete_the_Windows.edb_file
lea ecx, [ebp - 0x18]
call fcn.0045fc60
movzx eax, bl
mov dword [ebp - 0x28], eax
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x18]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437bfa
cmp ecx, dword [edi - 0x10]
jne 0x437bfa
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437c24
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x438201
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x31
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x495d48
call fcn.0045fcf0
mov byte [ebp - 4], 0x32
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x28]
call fcn.00462c10
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 0x33
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x2c], esp
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437c90
cmp ecx, dword [edi - 0x10]
jne 0x437c90
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437cba
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x438206
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x35
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045fcf0
mov byte [ebp - 4], 0x36
jmp 0x437d1c
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48d10a
call fcn.0045fcf0
mov byte [ebp - 4], 0x37
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045fcf0
mov byte [ebp - 4], 0x38
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0x48d168
call fcn.0045fcf0
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x1c]
call fcn.00463120
add esp, 0xc
mov bl, 1
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.sc_config_WSearch_startauto
call fcn.0045fcf0
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x2d
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x3b
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437da5
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x437d99
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x437d99
call fcn.00403090
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437d91
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437da5
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030f0
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437dc7
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437df0
cmp ecx, dword [edi - 0x10]
jne 0x437df0
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437e1a
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x43820b
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_cofig_WSearch_auto
call fcn.0045fcf0
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
mov bl, 1
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.net_start_WSearch
call fcn.0045fcf0
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x2d
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x41
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437ec6
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x437eba
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x437eba
call fcn.00403090
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437eb2
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437ec6
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030f0
mov byte [ebp - 4], 0x42
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437ee8
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437f11
cmp ecx, dword [edi - 0x10]
jne 0x437f11
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437f3b
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x438210
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031f0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 0x44
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_start_WSearch
call fcn.0045fcf0
mov byte [ebp - 4], 0x45
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437f90
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437fb2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x48
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437fd4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov dword [ebp - 4], 1
jmp 0x4380c1
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x4380e0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
int3