Function at 0x406ca0
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x538
mov eax, dword [0x42d00c]
mov esi, edx
mov edx, 7
xor eax, ebp
test cl, cl
mov dword [esp + 0x530], eax
mov eax, 0xf
je 0x4070f6
mov dword [esp + 0x1c], 0
push 0x40
call fcn.0042557a
add esp, 4
lea ebx, [esp + 0x440]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esp + 0x18], eax
mov ecx, ebx
push 1
push 1
push esi
call fcn.00415cc0
lea edi, [esp + 0x18]
mov ecx, ebx
mov edx, edi
push 0
call fcn.004060d0
add esp, 4
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esp + 0x38], 0x15
mov dword [esp + 0x3c], 0x1f
mov ebx, eax
mov dword [eax + 0x10], 0x6f467374
mov dword [eax + 0xc], 0x726f7065
mov dword [eax + 8], 0x52676e69
mov dword [eax + 4], 0x646e6553
mov dword [eax], 0x706f7453
mov word [eax + 0x14], 0x72
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
lea edx, [esp + 0x518]
mov ecx, edi
push eax
call fcn.00410c30
add esp, 4
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x518]
push 0x20
push ebx
call fcn.004255af
add esp, 8
cmp esi, edi
je 0x406fb2
mov eax, 7
mov ecx, 0xf
add eax, 0xfffffff9
adc ecx, 0xffffffff
mov dword [esp + 0x528], eax
mov dword [esp + 0x52c], ecx
mov byte [esp + 0x518], 0
push 0x20
call fcn.0042557a
add esp, 4
mov dword [esp + 0x528], 0x15
mov dword [esp + 0x52c], 0x1f
lea edi, [esp + 0x28]
mov dword [eax + 0x10], 0x6f467374
mov dword [eax + 0xc], 0x726f7065
mov dword [eax + 8], 0x52676e69
mov dword [eax + 4], 0x646e6553
mov dword [eax], 0x706f7453
mov word [eax + 0x14], 0x72
mov dword [esp + 0x518], eax
lea eax, [esp + 0x518]
lea ecx, [esp + 0x18]
mov edx, edi
push eax
call fcn.0041a4a0
add esp, 4
mov ebx, dword [esp + 0x28]
lea esi, [esp + 0x4e8]
mov edx, 0x42d4f4
mov ecx, esi
add ebx, 0x28
push 0x428e23
call fcn.004084e0
add esp, 4
mov ecx, esi
push str.EndOfLife
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x510], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x508], xmm1
movsd qword [esp + 0x500], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [esp + 0x500]
push ebx
push eax
push edi
call fcn.00403a20
add esp, 0xc
mov eax, dword [esp + 0x514]
cmp eax, 0x10
jb 0x406ecb
mov ecx, dword [esp + 0x500]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407e4a
push esi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x4fc]
mov dword [esp + 0x510], 0
mov dword [esp + 0x514], 0xf
mov byte [esp + 0x500], 0
cmp eax, 0x10
jb 0x406f15
mov ecx, dword [esp + 0x4e8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407e67
push esi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x52c]
cmp eax, 0x10
jb 0x406f41
mov ecx, dword [esp + 0x518]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407e84
push esi
push ecx
call fcn.004255af
add esp, 8
lea ecx, [esp + 0x28]
xor edx, edx
push 0
call fcn.00406990
add esp, 4
cmp dword [eax + 0x50], 0
mov esi, eax
je 0x406f78
mov ecx, esi
push 1
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
push 0x429281
push eax
call fcn.00406790
add esp, 8
mov ecx, esi
call fcn.00406a50
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [esi + eax]
push 1
call dword [eax]
mov eax, dword [esp + 0x3c]
cmp eax, 0x10
jb 0x406fae
mov ecx, dword [esp + 0x28]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407ea1
push esi
push ecx
call fcn.004255af
add esp, 8
mov edi, dword [esp + 0x18]
mov eax, 7
mov esi, 0xf
lea ebx, [esp + 0x28]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x518]
lea eax, [eax + 2]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], 0x65647261
mov dword [esp + 0x28], 0x63736944
mov word [esp + 0x30], 0x64
push ebx
call fcn.00410c30
add esp, 4
cmp dword [esp + 0x518], edi
je 0x40713e
lea esi, [esp + 0x4a0]
mov ecx, esi
call fcn.00416490
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
lea ecx, [esp + 0x18]
call fcn.00405650
lea esi, [esp + 0x428]
mov dword [esp + 0x438], 0
mov dword [esp + 0x43c], 0
mov ecx, esi
push 0x42d548
call fcn.0041a1f0
mov edi, dword [esp + 0x43c]
mov edx, dword [esp + 0x438]
cmp edi, 0xf
jbe 0x407065
mov esi, dword [esp + 0x428]
mov ecx, esi
push 2
call fcn.0041b3a0
add esp, 4
cmp eax, 2
jl 0x407ddc
lea esi, [esp + 0x428]
mov ecx, esi
push 0
push eax
call fcn.004080b0
lea edi, [esp + 0x518]
mov edx, esi
mov ecx, edi
call fcn.00411750
lea esi, [esp + 0x500]
push str..dmp
push edi
push esi
call fcn.004012e0
add esp, 0xc
cmp dword [esp + 0x514], 7
jbe 0x4070c2
mov esi, dword [esp + 0x500]
lea eax, [esp + 0x28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0xc], eax
je 0x407d2a
xor edi, edi
lea ebx, [esp + 0x28]
mov dword [esp + 4], 0
mov dword [esp + 8], 0
jmp 0x407830
add edx, 0xfffffff9
mov ecx, 1
adc eax, 0xffffffff
mov dword [esp + 0x38], edx
lea edx, [esp + 0x28]
mov dword [esp + 0x3c], eax
mov byte [esp + 0x28], 0
call fcn.004080f0
mov eax, dword [esp + 0x3c]
cmp eax, 0x10
jb 0x407dfd
mov ecx, dword [esp + 0x28]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407e13
push esi
push ecx
jmp 0x407df5
mov eax, 7
mov dword [esp + 0x3c], esi
lea ecx, [esp + 0x18]
lea edx, [esp + 0x518]
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], 0x73617243
mov dword [esp + 0x2c], 0x444968
push ebx
call fcn.00410c30
add esp, 4
cmp dword [esp + 0x518], edi
je 0x407003
lea esi, [esp + 0x28]
mov edx, 0x42d4f4
mov ecx, esi
push 0x428e23
call fcn.004084e0
add esp, 4
mov ecx, esi
push str.submitted
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
mov edi, 0xf
movsd qword [esp + 0x528], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x520], xmm1
movsd qword [esp + 0x518], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x3c]
cmp eax, 0x10
jb 0x407205
mov ecx, dword [esp + 0x28]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407f46
push esi
push ecx
call fcn.004255af
add esp, 8
lea ecx, [esp + 0x518]
call fcn.00410cb0
test al, al
je 0x4076f6
mov eax, 7
lea esi, [esp + 0x28]
mov dword [esp + 0x4fc], edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0x4e8]
mov dword [esp + 0x4e8], 0x73617243
mov dword [esp + 0x4ec], 0x444968
mov edx, esi
push eax
call fcn.0041a4a0
add esp, 4
mov edi, dword [esp + 0x28]
lea ebx, [esp + 0x428]
lea edx, [esp + 0x518]
mov ecx, ebx
add edi, 0x28
push 0x428e23
call fcn.004084e0
add esp, 4
push edi
push ebx
push esi
call fcn.00403a20
add esp, 0xc
mov ecx, esi
push str..txt
call fcn.00403b00
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x510], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 0x508], xmm1
movsd qword [esp + 0x500], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [esp + 0x3c]
cmp eax, 0x10
jb 0x4072f7
mov ecx, dword [esp + 0x28]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407f85
push esi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x43c]
mov edi, 0xf
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0xf
mov byte [esp + 0x28], 0
cmp eax, 0x10
jb 0x40733d
mov ecx, dword [esp + 0x428]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407fa2
push esi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x4fc]
cmp eax, 0x10
jb 0x407369
mov ecx, dword [esp + 0x4e8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407fc4
push esi
push ecx
call fcn.004255af
add esp, 8
lea ecx, [esp + 0x500]
xor edx, edx
push 0
call fcn.00406990
add esp, 4
cmp dword [eax + 0x50], 0
je 0x4076fa
mov dword [esp + 4], eax
mov eax, 7
mov ebx, 0xf
mov dword [esp + 0x4fc], edi
lea ecx, [esp + 0x18]
lea edx, [esp + 0x28]
mov dword [esp + 0x4f8], eax
lea eax, [esp + 0x4e8]
mov dword [esp + 0x4e8], 0x73617243
mov dword [esp + 0x4ec], 0x444968
push eax
call fcn.0041a4a0
add esp, 4
mov eax, dword [esp + 0x28]
cmp dword [eax + 0x3c], 0x10
lea edi, [eax + 0x28]
jb 0x4073df
mov edi, dword [edi]
mov eax, 7
mov dword [esp + 0x43c], ebx
lea ebx, [esp + 0x28]
lea esi, [esp + 0x428]
mov ecx, 0x42d4ec
mov dword [esp + 0x438], eax
mov dword [esp + 0x428], 0x73617243
mov dword [esp + 0x42c], 0x444968
mov edx, ebx
push esi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 4]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x407436
mov eax, dword [eax]
push edi
push eax
push 0x400
push ebx
call fcn.00406090
add esp, 0x10
mov eax, dword [esp + 0x43c]
cmp eax, 0x10
jb 0x407472
mov ecx, dword [esp + 0x428]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408003
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x4fc]
cmp eax, 0x10
jb 0x40749e
mov ecx, dword [esp + 0x4e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x408024
push edi
push ecx
call fcn.004255af
add esp, 8
push ebx
push esi
call fcn.00406790
add esp, 8
push 0x429281
push eax
call fcn.00406790
add esp, 8
mov eax, 0xf
mov ebx, 7
mov edi, esi
lea esi, [esp + 0x4e8]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x428]
mov dword [esp + 0x4fc], eax
mov dword [esp + 0x4f8], ebx
mov dword [esp + 0x4e8], 0x77656956
mov dword [esp + 0x4ec], 0x4c5255
push esi
call fcn.00410c30
add esp, 4
mov eax, dword [esp + 0x428]
cmp eax, dword [esp + 0x18]
je 0x407661
mov dword [esp + 0x4f8], ebx
lea ebx, [esp + 0x428]
mov eax, 0xf
lea ecx, [esp + 0x18]
mov dword [esp + 0x4fc], eax
mov dword [esp + 0x4e8], 0x77656956
mov dword [esp + 0x4ec], 0x4c5255
mov edx, ebx
push esi
call fcn.0041a4a0
add esp, 4
mov eax, dword [esp + 0x428]
cmp dword [eax + 0x3c], 0x10
lea edi, [eax + 0x28]
jb 0x407563
mov edi, dword [edi]
mov esi, dword [esp + 4]
mov eax, 7
mov ecx, 0xf
lea edx, [esp + 0x20]
lea eax, [eax + 8]
mov dword [esp + 0x43c], ecx
mov ecx, 0x42d4ec
mov dword [esp + 0x438], eax
mov dword [esp + 0x430], 0x736c6961
mov dword [esp + 0x42c], 0x74654468
mov dword [esp + 0x428], 0x73617243
mov dword [esp + 0x434], 0x4c5255
push ebx
call fcn.0041a4a0
add esp, 4
mov eax, dword [esp + 0x20]
cmp dword [eax + 0x3c], 0x10
lea eax, [eax + 0x28]
jb 0x4075cf
mov eax, dword [eax]
lea ebx, [esp + 0x28]
push edi
push eax
push 0x400
push ebx
call fcn.00406090
add esp, 0x10
mov eax, dword [esp + 0x43c]
cmp eax, 0x10
jb 0x40760f
mov ecx, dword [esp + 0x428]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40805a
push edi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x4fc]
cmp eax, 0x10
jb 0x40763b
mov ecx, dword [esp + 0x4e8]
lea edi, [eax + 1]
cmp edi, 0x1000
jae 0x40807b
push edi
push ecx
call fcn.004255af
add esp, 8
push ebx
push esi
call fcn.00406790
add esp, 8
push 0x429281
push eax
call fcn.00406790
add esp, 8
mov edi, esi
mov ebx, 7
lea esi, [esp + 0x4e8]
mov ecx, edi
call fcn.00406a50
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [edi + eax]
push 1
call dword [eax]
mov eax, 0xf
mov dword [esp + 0x4f8], ebx
lea ecx, [esp + 0x18]
lea edx, [esp + 0x428]
mov dword [esp + 0x4fc], eax
mov dword [esp + 0x4e8], 0x73617243
mov dword [esp + 0x4ec], 0x444968
push esi
call fcn.0041a4a0
add esp, 4
mov edx, dword [esp + 0x428]
xor ecx, ecx
add edx, 0x28
call fcn.004080f0
mov eax, dword [esp + 0x4fc]
cmp eax, 0x10
jb 0x4076f2
mov ecx, dword [esp + 0x4e8]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x408041
push esi
push ecx
call fcn.004255af
add esp, 8
mov bl, 1
jmp 0x40770c
xor ebx, ebx
jmp 0x407738
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov ecx, eax
mov eax, dword [eax + edx]
add ecx, edx
push 1
call dword [eax]
xor ebx, ebx
mov eax, dword [esp + 0x514]
cmp eax, 0x10
jb 0x407738
mov ecx, dword [esp + 0x500]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407fe6
push esi
push ecx
call fcn.004255af
add esp, 8
mov eax, dword [esp + 0x52c]
cmp eax, 0x10
jb 0x407764
mov ecx, dword [esp + 0x518]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407f68
push esi
push ecx
call fcn.004255af
add esp, 8
lea esi, [esp + 0x4a0]
mov ecx, esi
call fcn.00416490
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::ios_base::destructor_void_]
lea ecx, [esp + 0x18]
call fcn.00405650
test bl, bl
je 0x407022
call fcn.00406b30
jmp 0x407dfd
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x40789e
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407afd
cmp eax, 0xffffffdc
lea eax, [eax + 0x23]
mov ecx, 0xffffffff
cmova eax, ecx
push eax
call fcn.0042557a
add esp, 4
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x407964
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jae 0x40809c
add ecx, 0x23
jmp 0x407ab0
mov eax, 0xffffffff
jmp 0x407942
xor esi, esi
jmp 0x407964
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x444], ecx
mov dword [esp + 0x440], eax
push 0x429664
lea eax, [esp + 0x51c]
push eax
lea eax, [esp + 0x4f0]
mov esi, eax
push eax
call fcn.004012e0
add esp, 0xc
lea eax, [esp + 0x54]
push eax
push esi
lea eax, [esp + 0x450]
push eax
call fcn.00401280
add esp, 0xc
mov ecx, dword [esp + 0x4fc]
cmp ecx, 8
jb 0x4078a8
mov eax, dword [esp + 0x4e8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407795
push edx
push eax
call fcn.004255af
add esp, 8
mov esi, dword [esp + 8]
mov eax, dword [esp + 4]
cmp eax, esi
je 0x407900
mov eax, dword [esp + 0x440]
mov ecx, dword [esp + 0x444]
mov dword [esi], eax
lea eax, [esp + 0x448]
mov dword [esi + 4], ecx
mov dword [esi + 0x18], 0
lea ecx, [esi + 8]
mov dword [esi + 0x1c], 0
push eax
call fcn.00401130
add esi, 0x20
mov dword [esp + 8], esi
jmp 0x407ada
mov ebx, eax
sub esi, edi
mov ecx, 0x7ffffff
sub ebx, edi
sar esi, 5
mov dword [esp + 0x10], ebx
sar ebx, 5
inc esi
mov eax, ebx
mov dword [esp + 8], esi
shr eax, 1
sub ecx, eax
cmp ebx, ecx
ja 0x407931
mov ecx, dword [esp + 8]
add eax, ebx
cmp eax, ecx
cmovb eax, ecx
mov esi, eax
cmp esi, 0x7ffffff
ja 0x407811
mov eax, esi
shl eax, 5
cmp eax, 0x1000
mov dword [esp + 0x14], esi
jae 0x4077d3
test eax, eax
je 0x40781b
push eax
call fcn.0042557a
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x440]
mov ecx, dword [esp + 0x444]
shl ebx, 5
mov dword [esi + ebx], eax
lea eax, [esp + 0x448]
mov dword [esi + ebx + 4], ecx
mov dword [esi + ebx + 0x18], 0
lea ecx, [esi + ebx + 8]
mov dword [esi + ebx + 0x1c], 0
push eax
call fcn.00401130
mov ebx, dword [esp + 4]
cmp edi, ebx
je 0x407a16
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [edi + eax]
mov edx, dword [edi + eax + 4]
mov dword [esi + eax], ecx
mov dword [esi + eax + 4], edx
mov dword [esi + eax + 0x18], 0
mov dword [esi + eax + 0x1c], 0
lea ecx, [edi + eax + 0x20]
movsd xmm0, qword [edi + eax + 0x18]
movsd qword [esi + eax + 0x18], xmm0
movsd xmm0, qword [edi + eax + 8]
movsd xmm1, qword [edi + eax + 0x10]
movsd qword [esi + eax + 0x10], xmm1
movsd qword [esi + eax + 8], xmm0
mov dword [edi + eax + 0x18], 0
mov dword [edi + eax + 0x1c], 7
mov word [edi + eax + 8], 0
add eax, 0x20
cmp ecx, ebx
jne 0x4079b0
mov ebx, edi
test ebx, ebx
je 0x407aba
mov eax, dword [esp + 4]
cmp ebx, eax
jne 0x407a60
sub eax, ebx
mov edi, ebx
mov ecx, eax
cmp ecx, 0x1000
jb 0x407aae
jmp 0x4077f8
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407a77
mov ecx, dword [ebx + 0x1c]
cmp ecx, 8
jb 0x407a81
mov eax, dword [ebx + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407a39
push edx
push eax
call fcn.004255af
add esp, 8
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 7
mov word [ebx + 8], 0
add ebx, 0x20
cmp dword [esp + 4], ebx
jne 0x407a60
mov ecx, dword [esp + 0x10]
cmp ecx, 0x1000
jae 0x4077f8
mov eax, edi
push ecx
push eax
call fcn.004255af
add esp, 8
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov edi, esi
lea ebx, [esp + 0x28]
shl eax, 5
shl ecx, 5
add eax, esi
add ecx, esi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x45c]
cmp ecx, 8
jb 0x407b07
mov eax, dword [esp + 0x448]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x4077b4
push edx
push eax
call fcn.004255af
add esp, 8
push ebx
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x407830
mov edx, dword [esp + 8]
mov ecx, edi
mov esi, edx
sub esi, edi
sar esi, 5
push esi
call fcn.0041cf10
add esp, 4
cmp esi, 0xb
jb 0x407c87
mov edx, dword [esp + 8]
lea ebx, [esp + 0x440]
jmp 0x407b90
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407c21
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407c64
mov esi, edx
lea eax, [edx - 0x18]
mov dword [esp + 0x450], 0
mov dword [esp + 0x454], 0
mov ecx, ebx
push eax
call fcn.00401130
cmp dword [esp + 0x454], 7
mov eax, ebx
jbe 0x407bc6
mov eax, dword [esp + 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [esp + 0x450]
mov ecx, ebx
add edx, 0xfffffffc
push 6
push str..extra
push 4
call fcn.0041c830
add esp, 0xc
cmp dword [esp + 0x454], 7
mov eax, ebx
jbe 0x407bfd
mov eax, dword [esp + 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esi - 4]
mov edx, esi
cmp ecx, 8
jb 0x407c2d
mov eax, dword [edx - 0x18]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407b46
push edx
push eax
call fcn.004255af
add esp, 8
mov edx, esi
mov dword [edx - 8], 0
mov dword [edx - 4], 7
mov word [edx - 0x18], 0
mov ecx, dword [esp + 0x454]
cmp ecx, 8
jb 0x407c70
mov eax, dword [esp + 0x440]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407b65
push edx
push eax
call fcn.004255af
add esp, 8
mov edx, esi
add edx, 0xffffffe0
mov eax, edx
sub eax, edi
sar eax, 5
cmp eax, 0xa
ja 0x407b90
mov dword [esp + 8], edx
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x407d2a
mov ebx, dword [esp + 8]
cmp edi, ebx
je 0x407d0c
mov esi, edi
jmp 0x407cd0
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
jmp 0x407ce7
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x407cf1
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407ca5
push edx
push eax
call fcn.004255af
add esp, 8
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], 0
add esi, 0x20
cmp ebx, esi
jne 0x407cd0
mov ecx, dword [esp + 4]
sub ecx, edi
cmp ecx, 0x1000
jae 0x407f2d
mov eax, edi
push ecx
push eax
call fcn.004255af
add esp, 8
mov ecx, dword [esp + 0x514]
mov esi, 0xf
mov edi, 7
cmp ecx, 8
jb 0x407d61
mov eax, dword [esp + 0x500]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407edb
push edx
push eax
call fcn.004255af
add esp, 8
mov ecx, dword [esp + 0x52c]
cmp ecx, 8
jb 0x407d8e
mov eax, dword [esp + 0x518]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jae 0x407f04
push edx
push eax
call fcn.004255af
add esp, 8
add edi, 0xfffffff9
lea edx, [esp + 0x28]
mov ecx, 1
adc esi, 0xffffffff
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], esi
mov byte [esp + 0x28], 0
call fcn.004080f0
mov eax, dword [esp + 0x3c]
cmp eax, 0x10
jb 0x407dd5
mov ecx, dword [esp + 0x28]
lea esi, [eax + 1]
cmp esi, 0x1000
jae 0x407ebe
push esi
push ecx
call fcn.004255af
add esp, 8
mov edi, dword [esp + 0x43c]
cmp edi, 0x10
jb 0x407dfd
mov eax, dword [esp + 0x428]
lea edx, [edi + 1]
cmp edx, 0x1000
jae 0x407e30
push edx
push eax
call fcn.004255af
add esp, 8
mov ecx, dword [esp + 0x530]
xor ecx, ebp
call fcn.00425eac
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407137
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x40809c
add edi, 0x24
mov eax, ecx
mov edx, edi
jmp 0x407df3
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406ec1
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406f0b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406f37
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x406fa4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x407dcb
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
mov esi, 0xf
mov edi, 7
add ecx, 0x25
mov edx, ecx
jmp 0x407d57
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x40809c
add ecx, ecx
mov esi, 0xf
mov edi, 7
add ecx, 0x25
mov edx, ecx
jmp 0x407d84
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jae 0x40809c
add ecx, 0x23
jmp 0x407d20
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x4071fb
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x40775a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x4072ed
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x407333
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov edi, 0xf
mov esi, eax
jmp 0x40735f
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x40772e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
mov esi, dword [esp + 4]
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x407468
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
mov esi, dword [esp + 4]
add eax, 0x24
mov ecx, edx
mov edi, eax
jmp 0x407494
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
add eax, 0x24
mov ecx, edx
mov esi, eax
jmp 0x4076e8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
mov esi, dword [esp + 4]
add eax, 0x24
mov ecx, edx
lea ebx, [esp + 0x28]
mov edi, eax
jmp 0x407605
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x40809c
mov esi, dword [esp + 4]
add eax, 0x24
mov ecx, edx
lea ebx, [esp + 0x28]
mov edi, eax
jmp 0x407631
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3