Function at 0x402da0
Capabilities:
Copy file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x40abfd
push eax
mov eax, 0x1674
mov dword fs:[0], esp
call fcn.004048b0
push ebx
push esi
push edi
push 0x4110ac
push 0x80000000
lea ecx, [esp + 0x424]
call fcn.00403dc0
push str.SoftwareQvodPlayerFileExts_
push 0x80000001
lea ecx, [esp + 0x147c]
mov dword [esp + 0x1690], 0
call fcn.00403dc0
push 0x4110ac
push 0x80000001
lea ecx, [esp + 0x1270]
mov byte [esp + 0x1690], 1
call fcn.00403dc0
mov ebx, dword [esp + 0x1690]
mov byte [esp + 0x1688], 2
mov esi, 0x40c048
mov eax, dword [esi - 8]
push 1
push eax
push 0x4110ac
lea ecx, [esp + 0x1480]
call fcn.00403f00
cmp eax, 1
jne 0x402fc2
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x110]
mov edx, dword [esi - 4]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0x214]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov eax, dword [esi - 8]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push edx
push eax
lea ecx, [esp + 0x42c]
call fcn.00403e00
test eax, eax
jne 0x402ef9
mov edx, dword [esi - 8]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push eax
push edx
lea ecx, [esp + 0x42c]
call fcn.00403e00
test eax, eax
je 0x402ef9
mov al, byte [esp + 0x110]
test al, al
je 0x402ef9
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push ecx
push eax
call fcn.004048df
add esp, 8
test eax, eax
je 0x402ef9
mov eax, dword [esi - 4]
mov ecx, dword [esi - 8]
lea edx, [esp + 0x110]
push edx
push eax
push ecx
lea ecx, [esp + 0x428]
call fcn.004041e0
mov edx, dword [esi]
mov eax, dword [esi - 8]
push edx
push 0
push eax
lea ecx, [esp + 0x428]
call fcn.004041e0
mov ecx, dword [esi + 8]
lea edx, [esp + 0x214]
push ecx
push ebx
push str._s__d
push edx
call fcn.00404394
mov eax, dword [esi]
add esp, 0x10
lea ecx, [esp + 0xc]
push eax
push str._sDefaultIcon
push ecx
call fcn.00404394
add esp, 0xc
lea edx, [esp + 0x214]
lea eax, [esp + 0xc]
lea ecx, [esp + 0x41c]
push edx
push 0
push eax
call fcn.004041e0
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x214]
lea edx, [esp + 0x214]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 4]
push ecx
push ebx
push str.__s____s____1_
push edx
call fcn.00404394
mov eax, dword [esi]
add esp, 0x10
lea ecx, [esp + 0xc]
push eax
push str._s_shellopencommand
push ecx
call fcn.00404394
add esp, 0xc
lea edx, [esp + 0x214]
lea eax, [esp + 0xc]
lea ecx, [esp + 0x41c]
push edx
push 0
push eax
call fcn.004041e0
jmp 0x403067
mov edx, dword [esi - 4]
mov eax, dword [esi - 8]
lea ecx, [esp + 0x110]
push 0x104
push ecx
push edx
push eax
lea ecx, [esp + 0x42c]
call fcn.00403e00
test eax, eax
je 0x403017
mov edx, dword [esi - 8]
lea ecx, [esp + 0x110]
push ecx
push 0
push edx
lea ecx, [esp + 0x428]
call fcn.004041e0
mov eax, dword [esi - 4]
mov ecx, dword [esi - 8]
push eax
push ecx
lea ecx, [esp + 0x424]
call fcn.00404080
jmp 0x403034
cmp dword [esi + 0x10], 0xa
je 0x403034
mov edx, dword [esi - 8]
push 0x4110ac
push 0
push edx
lea ecx, [esp + 0x428]
call fcn.004041e0
mov eax, dword [esi - 8]
mov ecx, dword [str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_]
push eax
push ecx
lea edx, [esp + 0x14]
push str._s_s
push edx
call fcn.00404394
add esp, 0x10
lea eax, [esp + 0xc]
lea ecx, [esp + 0x1268]
push str.Progid
push eax
call fcn.00404110
add esi, 0x20
cmp esi, 0x40cf28
jl 0x402e2b
push 0
push 0
push 0x1000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push 0x4110ac
push 0x80000000
lea ecx, [esp + 0xe58]
call fcn.00403dc0
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x628]
push 0x208
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x62c]
mov byte [esp + 0x168c], 3
push ecx
push eax
push str.SoftwareRealNetworksPreferencesDT_Codecs
lea ecx, [esp + 0xe60]
call fcn.00403e00
test eax, eax
jne 0x403123
mov ecx, 0x41
lea edi, [esp + 0x318]
push 0x4110b0
lea edx, [esp + 0x31c]
push str._sCodecs_
push edx
rep stosd dword es:[edi], eax
call fcn.00404394
add esp, 0xc
lea eax, [esp + 0x318]
lea ecx, [esp + 0xe50]
push eax
push 0
push str.SoftwareRealNetworksPreferencesDT_Codecs
call fcn.004041e0
jmp 0x4031df
lea ecx, [esp + 0x628]
push str.QvodPlayer
push ecx
call fcn.004047ba
add esp, 8
test eax, eax
jne 0x4031df
mov ecx, 0x82
lea edi, [esp + 0xc48]
rep stosd dword es:[edi], eax
lea edi, [esp + 0x628]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffe
cmp byte [esp + ecx + 0x628], 0x5c
jne 0x403180
lea edx, [esp + 0x628]
lea eax, [esp + 0xc48]
push edx
push str._scook.dll
push eax
jmp 0x403195
lea ecx, [esp + 0x628]
lea edx, [esp + 0xc48]
push ecx
push 0x40e6e4
push edx
call fcn.00404394
add esp, 0xc
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x318]
rep stosd dword es:[edi], eax
push 0x4110b0
lea eax, [esp + 0x31c]
push str._sCodecscook.dll
push eax
call fcn.00404394
add esp, 0xc
lea ecx, [esp + 0xc48]
lea edx, [esp + 0x318]
push 0
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x4110ac
push 0x80000002
lea ecx, [esp + 0x838]
call fcn.00403dc0
mov eax, dword [str.application_QVOD]
mov ecx, dword [str.qvod]
mov edx, dword [str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsAccepted_Documents]
push eax
push ecx
push edx
lea ecx, [esp + 0x83c]
mov byte [esp + 0x1694], 4
call fcn.004041e0
mov eax, dword [str.application_QVOD]
mov ecx, dword [str.qhtp]
mov edx, dword [str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsAccepted_Documents]
push eax
push ecx
push edx
lea ecx, [esp + 0x83c]
call fcn.004041e0
mov eax, dword [str.R31CND_QVOD]
mov ecx, dword [str.SOFTWAREClassesSoftwareRealNetworksRealPlayer6.0PreferencesDistCode]
push eax
push 0
push ecx
lea ecx, [esp + 0x83c]
call fcn.004041e0
push 0x4110ac
push 0x80000000
lea ecx, [esp + 0xa44]
call fcn.00403dc0
mov edx, dword [0x40d000]
mov eax, dword [0x40cffc]
push edx
mov bl, 5
push 0
push eax
lea ecx, [esp + 0xa48]
mov byte [esp + 0x1694], bl
call fcn.004041e0
mov ecx, dword [0x40cff8]
mov edx, dword [str.._tv]
push ecx
push 0
push edx
lea ecx, [esp + 0xa48]
call fcn.004041e0
push 0x4110ac
push 0x80000000
lea ecx, [esp + 0x1064]
call fcn.00403dc0
mov eax, dword [0x40d008]
mov ecx, dword [str..mem]
push eax
push 0
push ecx
lea ecx, [esp + 0x1068]
mov byte [esp + 0x1694], 6
call fcn.004041e0
push 1
call fcn.004033a0
add esp, 4
lea ecx, [esp + 0x105c]
mov byte [esp + 0x1688], bl
call fcn.00403df0
lea ecx, [esp + 0xa3c]
mov byte [esp + 0x1688], 4
call fcn.00403df0
lea ecx, [esp + 0x830]
mov byte [esp + 0x1688], 3
call fcn.00403df0
lea ecx, [esp + 0xe50]
mov byte [esp + 0x1688], 2
call fcn.00403df0
lea ecx, [esp + 0x1268]
mov byte [esp + 0x1688], 1
call fcn.00403df0
lea ecx, [esp + 0x1474]
mov byte [esp + 0x1688], 0
call fcn.00403df0
lea ecx, [esp + 0x41c]
mov dword [esp + 0x1688], 0xffffffff
call fcn.00403df0
mov ecx, dword [esp + 0x1680]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x1680
ret