Function at 0x410db0
Capabilities:
Check http status code
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xed4
mov eax, dword [0x435008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0xe90], 0x1c73
mov dword [ebp - 0xdbc], 0x17671
mov dword [ebp - 0xdc8], 0xa636
mov dword [ebp - 0xdc4], 0xd90
mov dword [ebp - 0xdc0], 0x9f5c
push 0
push 0
push 0
push 1
push 0x432b60
call dword [0x4380c8]
mov dword [ebp - 0xdd0], eax
cmp dword [ebp - 0xdd0], 0
jne 0x410e1f
xor eax, eax
jmp 0x411ed8
push 0
push 0x80000000
push 0
push 0
push 4
push 0x26
push 0x435a78
call fcn.0040b3d0
add esp, 0xc
push eax
mov eax, dword [ebp - 0xdd0]
push eax
call dword [0x4380cc]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jne 0x410e6c
mov ecx, dword [ebp - 0xdd0]
push ecx
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
mov dword [ebp - 0xd54], 0
mov dword [ebp - 0xd60], 4
push 0
lea edx, [ebp - 0xd60]
push edx
lea eax, [ebp - 0xd54]
push eax
push 0x20000013
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [0x4380d4]
cmp dword [ebp - 0xd54], 0xc8
je 0x410ecf
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d8]
mov eax, dword [ebp - 0xdd0]
push eax
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
mov dword [ebp - 0xdb8], 0
mov dword [ebp - 0xd5c], 4
push 0
lea ecx, [ebp - 0xd5c]
push ecx
lea edx, [ebp - 0xdb8]
push edx
push 0x20000005
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d4]
cmp dword [ebp - 0xdb8], 0
ja 0x410f2f
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [0x4380d8]
mov edx, dword [ebp - 0xdd0]
push edx
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
mov dword [ebp - 0xd48], 0
lea eax, [ebp - 0xd48]
push eax
push 1
lea ecx, [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d0]
test eax, eax
je 0x410f63
cmp dword [ebp - 0xd48], 1
je 0x410f6a
xor eax, eax
jmp 0x411ed8
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ebp + ecx - 0x120]
mov dword [ebp - 0xde0], edx
lea eax, [ebp - 0xd48]
push eax
mov ecx, dword [ebp - 0xde0]
push ecx
lea edx, [ebp - 0x120]
push edx
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d0]
test eax, eax
je 0x410fb4
mov ecx, dword [ebp - 0xd48]
cmp ecx, dword [ebp - 0xde0]
je 0x410fd5
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d8]
mov eax, dword [ebp - 0xdd0]
push eax
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
lea ecx, [ebp - 0xd48]
push ecx
push 1
lea edx, [ebp - 0xd41]
push edx
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d0]
test eax, eax
je 0x410fff
cmp dword [ebp - 0xd48], 1
je 0x411020
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [0x4380d8]
mov edx, dword [ebp - 0xdd0]
push edx
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
mov dword [ebp - 0xe28], 0
movzx eax, byte [ebp - 0xd41]
cmp eax, 0xb
jne 0x411085
mov ecx, dword [ebp - 0xde0]
push ecx
mov edx, dword [ebp - 0xd48]
push edx
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0xdb8]
push ecx
mov edx, dword [ebp - 0xdcc]
push edx
call fcn.0040d890
add esp, 0x14
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d8]
mov ecx, dword [ebp - 0xdd0]
push ecx
call dword [0x4380d8]
mov eax, 1
jmp 0x411ed8
movzx edx, byte [ebp - 0xd41]
cmp edx, 0xe
jne 0x4112de
mov eax, dword [ebp - 0xdb8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xdd4], eax
cmp dword [ebp - 0xdd4], 0
jne 0x4110c1
xor eax, eax
jmp 0x411ed8
mov dword [ebp - 0xddc], 0
mov dword [ebp - 0xe1c], 0
mov ecx, dword [ebp - 0xddc]
cmp ecx, dword [ebp - 0xdb8]
jae 0x41113e
mov dword [ebp - 0xd50], 0
lea edx, [ebp - 0xd50]
push edx
mov eax, dword [ebp - 0xdb8]
sub eax, dword [ebp - 0xddc]
push eax
mov ecx, dword [ebp - 0xdd4]
add ecx, dword [ebp - 0xddc]
push ecx
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d0]
test eax, eax
je 0x411128
cmp dword [ebp - 0xd50], 0
jne 0x41112a
jmp 0x41113e
mov eax, dword [ebp - 0xddc]
add eax, dword [ebp - 0xd50]
mov dword [ebp - 0xddc], eax
jmp 0x4110d5
mov dword [ebp - 0xdf8], 0
jmp 0x411159
mov ecx, dword [ebp - 0xdf8]
add ecx, 1
mov dword [ebp - 0xdf8], ecx
mov edx, dword [ebp - 0xdf8]
cmp edx, dword [ebp - 0xddc]
jae 0x411210
mov eax, dword [ebp - 0xe1c]
xor edx, edx
div dword [ebp - 0xde0]
movzx eax, byte [ebp + edx - 0x120]
mov ecx, dword [ebp - 0xdd4]
add ecx, dword [ebp - 0xdf8]
movzx edx, byte [ecx]
xor edx, eax
mov eax, dword [ebp - 0xdd4]
add eax, dword [ebp - 0xdf8]
mov byte [eax], dl
mov ecx, dword [ebp - 0xdc0]
mov dword [ebp - 0xe20], ecx
jmp 0x4111bd
mov edx, dword [ebp - 0xe20]
sub edx, 1
mov dword [ebp - 0xe20], edx
mov eax, dword [ebp - 0xe20]
cmp eax, dword [0x435a70]
jb 0x4111e6
mov ecx, dword [ebp - 0xdc0]
imul ecx, dword [ebp - 0xdc0]
add ecx, dword [ebp - 0xdc4]
mov dword [ebp - 0xdc4], ecx
jmp 0x4111ae
mov edx, dword [0x4359bc]
cmp edx, dword [ebp - 0xdc8]
jl 0x4111a0
mov eax, dword [ebp - 0xe1c]
add eax, 1
xor edx, edx
div dword [ebp - 0xde0]
mov dword [ebp - 0xe1c], edx
jmp 0x41114a
mov eax, dword [ebp - 0xdd4]
add eax, dword [ebp - 0xddc]
mov byte [eax], 0
push 0
mov ecx, dword [ebp - 0xdd4]
push ecx
push 0
call fcn.0041d37b
add esp, 0xc
add eax, 1
mov dword [ebp - 0xe3c], eax
mov edx, dword [ebp - 0xe3c]
shl edx, 1
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xe0c], eax
cmp dword [ebp - 0xe0c], 0
je 0x4112a4
mov eax, dword [ebp - 0xe3c]
push eax
mov ecx, dword [ebp - 0xdd4]
push ecx
mov edx, dword [ebp - 0xe0c]
push edx
call fcn.0041d37b
add esp, 0xc
mov eax, dword [ebp - 0xe0c]
push eax
call fcn.0040eaa0
add esp, 4
mov ecx, dword [ebp - 0xe0c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, dword [ebp - 0xdd4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d8]
mov ecx, dword [ebp - 0xdd0]
push ecx
call dword [0x4380d8]
mov eax, 1
jmp 0x411ed8
push 7
lea edx, [ebp - 0x20]
push edx
call fcn.0040d770
add esp, 8
lea eax, [ebp - 0x20]
push eax
push 0x104
lea ecx, [ebp - 0x738]
push ecx
call fcn.0041d507
add esp, 0xc
movzx edx, byte [ebp - 0xd41]
push edx
lea eax, [ebp - 0x738]
push eax
call fcn.0040e860
add esp, 8
mov dword [ebp - 0xe54], 0
lea ecx, [ebp - 0x940]
push ecx
push 1
push 0
push 0x1c
mov edx, dword [ebp - 0xe54]
push edx
call dword [0x4380e4]
xor eax, eax
mov byte [ebp - 0xdd5], al
lea ecx, [ebp - 0xea8]
push ecx
lea ecx, [ebp - 0xdd5]
call fcn.00411ef0
mov dword [ebp - 0xe00], eax
mov dword [ebp - 0xdfc], 0
jmp 0x41137a
mov edx, dword [ebp - 0xdfc]
add edx, 1
mov dword [ebp - 0xdfc], edx
cmp dword [ebp - 0xdfc], 5
jae 0x4113dc
mov eax, dword [ebp - 0xdfc]
mov ecx, dword [ebp - 0xe00]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0xe64], edx
mov eax, dword [ebp - 0xe64]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xe00]
movsx eax, byte [edx]
xor ecx, eax
mov word [ebp - 0xe10], cx
mov ecx, dword [ebp - 0xdfc]
mov edx, dword [ebp - 0xe00]
lea eax, [edx + ecx*2 + 2]
mov dword [ebp - 0xe68], eax
mov ecx, dword [ebp - 0xe68]
mov dx, word [ebp - 0xe10]
mov word [ecx], dx
jmp 0x41136b
mov eax, 5
shl eax, 1
mov ecx, dword [ebp - 0xe00]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0xe6c], edx
xor eax, eax
mov ecx, dword [ebp - 0xe6c]
mov word [ecx], ax
mov edx, dword [ebp - 0xe00]
add edx, 2
mov dword [ebp - 0xe70], edx
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x940]
push ecx
mov edx, dword [ebp - 0xe70]
push edx
push 0x104
lea eax, [ebp - 0x328]
push eax
call fcn.004010b0
add esp, 0x14
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x328]
push ecx
call dword [0x438100]
mov dword [ebp - 0xe24], eax
cmp dword [ebp - 0xe24], 0xffffffff
jne 0x411485
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d8]
mov eax, dword [ebp - 0xdd0]
push eax
call dword [0x4380d8]
xor eax, eax
jmp 0x411ed8
mov ecx, dword [ebp - 0xdb8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0xe74], 0
mov edx, dword [ebp - 0xe74]
cmp edx, dword [ebp - 0xdb8]
jae 0x4119ca
mov dword [ebp - 0xd4c], 0
lea eax, [ebp - 0xd4c]
push eax
mov ecx, dword [ebp - 0xdb8]
push ecx
mov edx, dword [ebp - 0xe08]
push edx
mov eax, dword [ebp - 0xdcc]
push eax
call dword [0x4380d0]
test eax, eax
je 0x4114f6
cmp dword [ebp - 0xd4c], 0
jne 0x4114fb
jmp 0x4119ca
mov dword [ebp - 0xe04], 0
jmp 0x411516
mov ecx, dword [ebp - 0xe04]
add ecx, 1
mov dword [ebp - 0xe04], ecx
mov edx, dword [ebp - 0xe04]
cmp edx, dword [ebp - 0xd4c]
jae 0x411983
mov eax, dword [ebp - 0xe28]
xor edx, edx
div dword [ebp - 0xde0]
movzx eax, byte [ebp + edx - 0x120]
mov ecx, dword [ebp - 0xe08]
add ecx, dword [ebp - 0xe04]
movzx edx, byte [ecx]
xor edx, eax
mov eax, dword [ebp - 0xe08]
add eax, dword [ebp - 0xe04]
mov byte [eax], dl
mov ecx, dword [ebp - 0xdc8]
cmp ecx, dword [0x435a44]
jle 0x411967
mov edx, dword [ebp - 0xdc0]
imul edx, dword [ebp - 0xdc0]
mov eax, dword [ebp - 0xdbc]
sub eax, edx
add eax, dword [ebp - 0xdc8]
mov dword [ebp - 0xdbc], eax
mov ecx, dword [ebp - 0xdc8]
push ecx
call fcn.00401290
add esp, 4
mov ecx, dword [ebp - 0xdbc]
add ecx, dword [ebp - 0xdbc]
sub ecx, dword [ebp - 0xdc0]
sub ecx, dword [ebp - 0xdc0]
mov edx, dword [ebp - 0xdc0]
sar edx, cl
and edx, dword [ebp - 0xdc4]
mov dword [ebp - 0xdc4], edx
mov esi, dword [ebp - 0xdbc]
sub esi, dword [ebp - 0xdc0]
sub esi, 0x114ba
mov eax, dword [ebp - 0xdc4]
cdq
idiv dword [ebp - 0xdc8]
add eax, dword [ebp - 0xdc4]
mov ecx, eax
sar esi, cl
mov dword [ebp - 0xdc0], esi
mov eax, dword [0x435ad8]
mov dword [ebp - 0xe38], eax
cmp dword [ebp - 0xe38], 0x5a72
je 0x411636
cmp dword [ebp - 0xe38], 0xa903
je 0x411785
cmp dword [ebp - 0xe38], 0x131c8
je 0x411812
jmp 0x411962
mov eax, 0x162f8
cdq
idiv dword [ebp - 0xdc0]
imul eax, dword [ebp - 0xdc0]
mov dword [ebp - 0xdbc], eax
mov ecx, dword [ebp - 0xdc8]
push ecx
call fcn.00401d90
add esp, 4
mov edx, dword [ebp - 0xdc0]
add edx, dword [ebp - 0xdc4]
mov dword [ebp - 0xdc8], edx
mov eax, dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdc0]
mov ecx, edx
mov eax, dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdbc]
sub ecx, eax
or ecx, dword [ebp - 0xdbc]
mov dword [ebp - 0xdbc], ecx
mov edx, dword [ebp - 0xdbc]
add edx, 0x17ff1
mov dword [ebp - 0xdbc], edx
mov eax, dword [ebp - 0xdbc]
sub eax, dword [ebp - 0xdc0]
mov ecx, dword [ebp - 0xdc0]
sar eax, cl
and eax, dword [ebp - 0xdbc]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0xdc8]
cdq
idiv dword [ebp - 0xdc4]
cdq
idiv dword [ebp - 0xdc8]
add edx, dword [ebp - 0xdbc]
mov eax, 0x5e5d
mov ecx, edx
sar eax, cl
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0xdbc]
cdq
mov ecx, 0x17666
idiv ecx
mov ecx, eax
mov eax, dword [ebp - 0xdbc]
imul eax, dword [ebp - 0xdc8]
cdq
idiv dword [ebp - 0xdbc]
sub ecx, edx
mov edx, dword [ebp - 0xdbc]
sar edx, cl
mov dword [0x435ac4], edx
mov ecx, dword [ebp - 0xdc0]
sub ecx, dword [ebp - 0xdc0]
add ecx, dword [ebp - 0xdbc]
sub ecx, dword [ebp - 0xdc8]
mov eax, dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdc4]
sub ecx, eax
mov dword [ebp - 0xdc8], ecx
call fcn.00401df0
mov esi, dword [ebp - 0xdc8]
sub esi, dword [ebp - 0xdc4]
mov eax, dword [ebp - 0xdc8]
cdq
idiv dword [ebp - 0xdc4]
mov ecx, eax
shl esi, cl
mov dword [ebp - 0xdc8], esi
mov edx, dword [ebp - 0xdbc]
push edx
mov eax, dword [ebp - 0xdc8]
push eax
call fcn.004026b0
add esp, 8
cmp dword [0x435a6c], eax
jne 0x411812
mov esi, dword [ebp - 0xdc0]
mov ecx, dword [ebp - 0xdc0]
shl esi, cl
mov eax, dword [ebp - 0xdc8]
imul eax, dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdbc]
sub eax, dword [ebp - 0xdc4]
mov ecx, eax
sar esi, cl
mov dword [0x435a08], esi
mov ecx, dword [ebp - 0xdc8]
imul ecx, dword [ebp - 0xdbc]
mov eax, dword [ebp - 0xdbc]
cdq
idiv dword [ebp - 0xdbc]
mov eax, edx
cdq
idiv dword [ebp - 0xdc4]
sub ecx, eax
mov dword [ebp - 0xdc0], ecx
mov edx, dword [ebp - 0xdc0]
sub edx, dword [ebp - 0xdc4]
mov dword [0x435ac4], edx
mov eax, dword [ebp - 0xdc8]
push eax
mov ecx, dword [ebp - 0xdbc]
push ecx
call fcn.004011a0
add esp, 8
imul edx, dword [ebp - 0xdc8], 0x1050f
add edx, dword [ebp - 0xdc4]
imul eax, dword [ebp - 0xdc4], 0x11578
add eax, dword [ebp - 0xdc4]
and edx, eax
mov dword [ebp - 0xdc4], edx
mov ecx, dword [ebp - 0xdc8]
add ecx, 0xb27f
sub ecx, dword [ebp - 0xdc4]
add ecx, 0x13a60
mov dword [ebp - 0xdc8], ecx
mov eax, dword [ebp - 0xdc4]
imul eax, dword [ebp - 0xdc0]
cdq
idiv dword [ebp - 0xdbc]
mov dword [ebp - 0xdc8], edx
mov edx, dword [ebp - 0xdc8]
sub edx, dword [ebp - 0xdbc]
sub edx, dword [ebp - 0xdc0]
mov dword [ebp - 0xdc4], edx
imul eax, dword [ebp - 0xdc8], 0x158ac
cdq
idiv dword [ebp - 0xdbc]
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0xdbc]
add ecx, dword [ebp - 0xdc0]
mov eax, dword [ebp - 0xdc0]
imul eax, dword [ebp - 0xdc8]
cdq
idiv dword [ebp - 0xdc0]
sub ecx, eax
mov dword [ebp - 0xdc8], ecx
mov esi, dword [ebp - 0xdc8]
mov ecx, dword [ebp - 0xdc4]
shl esi, cl
mov eax, dword [ebp - 0xdc0]
cdq
idiv dword [ebp - 0xdbc]
mov ecx, dword [ebp - 0xdbc]
sar eax, cl
and esi, eax
or esi, dword [ebp - 0xdc0]
mov dword [ebp - 0xdc4], esi
mov edx, dword [ebp - 0xdc4]
push edx
mov eax, dword [ebp - 0xdc4]
push eax
mov ecx, dword [ebp - 0xdbc]
push ecx
mov edx, dword [ebp - 0xdc0]
push edx
mov eax, dword [ebp - 0xdc4]
push eax
call dword [sym.imp.UxTheme.dll_GetThemePosition]
mov dword [ebp - 0xdc4], eax
mov esi, dword [ebp - 0xdc4]
sub esi, dword [ebp - 0xdbc]
mov eax, dword [ebp - 0xdc4]
cdq
idiv dword [ebp - 0xdc8]
mov ecx, edx
shl esi, cl
mov dword [ebp - 0xdc4], esi
jmp 0x41155d
mov eax, dword [ebp - 0xe28]
add eax, 1
xor edx, edx
div dword [ebp - 0xde0]
mov dword [ebp - 0xe28], edx
jmp 0x411507
mov dword [ebp - 0xd58], 0
push 0
lea ecx, [ebp - 0xd58]
push ecx
mov edx, dword [ebp - 0xd4c]
push edx
mov eax, dword [ebp - 0xe08]
push eax
mov ecx, dword [ebp - 0xe24]
push ecx
call dword [0x4380fc]
test eax, eax
je 0x4119c3
mov edx, dword [ebp - 0xd58]
cmp edx, dword [ebp - 0xd4c]
je 0x4119c5
jmp 0x4119ca
jmp 0x4114ab
mov eax, dword [ebp - 0xe08]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0xe24]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xdcc]
push edx
call dword [0x4380d8]
mov eax, dword [ebp - 0xdd0]
push eax
call dword [0x4380d8]
movzx ecx, byte [ebp - 0xd41]
cmp ecx, 2
jne 0x411cf9
xor edx, edx
mov byte [ebp - 0xdd6], dl
lea eax, [ebp - 0xeb8]
push eax
lea ecx, [ebp - 0xdd6]
call fcn.00411f60
mov dword [ebp - 0xdf0], eax
mov dword [ebp - 0xdf4], 0
jmp 0x411a52
mov ecx, dword [ebp - 0xdf4]
add ecx, 1
mov dword [ebp - 0xdf4], ecx
cmp dword [ebp - 0xdf4], 6
jae 0x411ab4
mov edx, dword [ebp - 0xdf4]
mov eax, dword [ebp - 0xdf0]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0xe78], ecx
mov edx, dword [ebp - 0xe78]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xdf0]
movsx edx, byte [ecx]
xor eax, edx
mov word [ebp - 0xe12], ax
mov eax, dword [ebp - 0xdf4]
mov ecx, dword [ebp - 0xdf0]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0xe7c], edx
mov eax, dword [ebp - 0xe7c]
mov cx, word [ebp - 0xe12]
mov word [eax], cx
jmp 0x411a43
mov edx, 6
shl edx, 1
mov eax, dword [ebp - 0xdf0]
lea ecx, [eax + edx + 2]
mov dword [ebp - 0xe80], ecx
xor edx, edx
mov eax, dword [ebp - 0xe80]
mov word [eax], dx
mov ecx, dword [ebp - 0xdf0]
add ecx, 2
mov dword [ebp - 0xe84], ecx
mov edx, dword [ebp - 0xe84]
push edx
push 0x104
lea eax, [ebp - 0x328]
push eax
call fcn.0041d56b
add esp, 0xc
xor ecx, ecx
mov byte [ebp - 0xdd7], cl
xor edx, edx
mov byte [ebp - 0xe0d], dl
lea eax, [ebp - 0xed4]
push eax
lea ecx, [ebp - 0xdd7]
call fcn.00411fe0
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0xdec], 0
jmp 0x411b43
mov ecx, dword [ebp - 0xdec]
add ecx, 1
mov dword [ebp - 0xdec], ecx
cmp dword [ebp - 0xdec], 0xc
jae 0x411ba5
mov edx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xde8]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0xe88], ecx
mov edx, dword [ebp - 0xe88]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xde8]
movsx edx, byte [ecx]
xor eax, edx
mov word [ebp - 0xe14], ax
mov eax, dword [ebp - 0xdec]
mov ecx, dword [ebp - 0xde8]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0xe40], edx
mov eax, dword [ebp - 0xe40]
mov cx, word [ebp - 0xe14]
mov word [eax], cx
jmp 0x411b34
mov edx, 0xc
shl edx, 1
mov eax, dword [ebp - 0xde8]
lea ecx, [eax + edx + 2]
mov dword [ebp - 0xe44], ecx
xor edx, edx
mov eax, dword [ebp - 0xe44]
mov word [eax], dx
mov ecx, dword [ebp - 0xde8]
add ecx, 2
mov dword [ebp - 0xe60], ecx
mov byte [ebp - 0xe34], 0x4b
xor edx, edx
mov byte [ebp - 0xe33], dl
mov eax, 4
mov word [ebp - 0xe32], ax
mov ecx, 0x1b
mov word [ebp - 0xe30], cx
mov edx, 0xe
mov word [ebp - 0xe2e], dx
mov eax, 5
mov word [ebp - 0xe2c], ax
xor ecx, ecx
mov word [ebp - 0xe2a], cx
mov dword [ebp - 0xde4], 0
jmp 0x411c39
mov edx, dword [ebp - 0xde4]
add edx, 1
mov dword [ebp - 0xde4], edx
cmp dword [ebp - 0xde4], 4
jae 0x411c93
mov eax, dword [ebp - 0xde4]
lea ecx, [ebp + eax*2 - 0xe32]
mov dword [ebp - 0xe48], ecx
mov edx, dword [ebp - 0xe48]
movzx eax, word [edx]
movsx ecx, byte [ebp - 0xe34]
xor eax, ecx
mov word [ebp - 0xe16], ax
mov edx, dword [ebp - 0xde4]
lea eax, [ebp + edx*2 - 0xe32]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
mov dx, word [ebp - 0xe16]
mov word [ecx], dx
jmp 0x411c2a
mov eax, 4
shl eax, 1
lea ecx, [ebp + eax - 0xe32]
mov dword [ebp - 0xe50], ecx
xor edx, edx
mov eax, dword [ebp - 0xe50]
mov word [eax], dx
lea ecx, [ebp - 0xe32]
mov dword [ebp - 0xe58], ecx
push 0
push 0
lea edx, [ebp - 0x328]
push edx
mov eax, dword [ebp - 0xe60]
push eax
mov ecx, dword [ebp - 0xe58]
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [0x4380f8]
mov dword [ebp - 0xe94], eax
mov eax, 1
jmp 0x411ed8
movzx edx, byte [ebp - 0xd41]
cmp edx, 0xd
jne 0x411db7
mov dword [ebp - 0xe8c], 0
lea eax, [ebp - 0x530]
push eax
push 1
push 0
push 0x1c
push 0
call dword [0x4380e4]
push 0x432b64
push 0x104
lea ecx, [ebp - 0x530]
push ecx
call fcn.0041d56b
add esp, 0xc
push 5
lea edx, [ebp - 0x10]
push edx
call fcn.0040d770
add esp, 8
lea eax, [ebp - 0x10]
push eax
push 0x104
lea ecx, [ebp - 0x530]
push ecx
call fcn.0041d56b
add esp, 0xc
push 0
lea edx, [ebp - 0x530]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x328]
push ecx
call fcn.004128c0
add esp, 8
lea edx, [ebp - 0x530]
push edx
call fcn.00413f20
add esp, 4
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 1
jmp 0x411ed8
movzx ecx, byte [ebp - 0xd41]
cmp ecx, 8
jne 0x411e8a
push 0x44
push 0
lea edx, [ebp - 0xdb4]
push edx
call fcn.00418d90
add esp, 0xc
mov dword [ebp - 0xdb4], 0x44
xor eax, eax
mov dword [ebp - 0xd70], eax
mov dword [ebp - 0xd6c], eax
mov dword [ebp - 0xd68], eax
mov dword [ebp - 0xd64], eax
push 4
push 0x23
push 0x4359c0
call fcn.0040b3d0
add esp, 0xc
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0xe5c]
push ecx
push 0x200
lea edx, [ebp - 0xd40]
push edx
call fcn.0041d56b
add esp, 0xc
lea eax, [ebp - 0x328]
push eax
push 0x200
lea ecx, [ebp - 0xd40]
push ecx
call fcn.0041d56b
add esp, 0xc
lea edx, [ebp - 0xd70]
push edx
lea eax, [ebp - 0xdb4]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
lea ecx, [ebp - 0xd40]
push ecx
push 0
call dword [0x4380e8]
test eax, eax
jne 0x411e81
xor eax, eax
jmp 0x411ed8
mov eax, 1
jmp 0x411ed8
push 0
push 0
lea edx, [ebp - 0x328]
push edx
push 4
push 0xd
push 0x435adc
call fcn.0040b3d0
add esp, 0xc
push eax
push 4
push 5
push 0x435a24
call fcn.0040b3d0
add esp, 0xc
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [0x4380f8]
mov dword [ebp - 0xe98], eax
mov eax, 1
jmp 0x411ed8
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004176dc
mov esp, ebp
pop ebp
ret