Function at 0x401000
Capabilities:
Allocate thread local storage
Delete directory
Get common file path

Disassembly:
push 0x134
push 0
push 0x4133c4
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4133c8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4133c4], eax
call section..text
mov eax, 0x41223c
mov dword [0x4133fc], eax
call fcn.0040f240
call fcn.0040f02c
call fcn.0040d533
call fcn.0040d063
call fcn.0040cb70
call fcn.0040c7f9
call fcn.0040c570
call fcn.0040c551
call fcn.0040c4c8
call fcn.0040bc30
call fcn.0040ac5f
call fcn.00409e91
call fcn.00409b56
call fcn.004097dd
call fcn.00408361
call fcn.00407fd9
push dword [0x4134e4]
call fcn.00409b75
push 7
push 0x412060
lea eax, [0x4134e4]
push eax
push 8
call fcn.00409ac4
push 0x4134dc
push 0x412070
push 7
push 0x401
push 8
call fcn.0040ef2d
mov eax, 0x200
push eax
lea eax, [0x4134f4]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0040d552
push dword [0x4134ec]
call fcn.00409b75
push 7
push 0x412068
lea eax, [0x4134ec]
push eax
push 8
call fcn.00409ac4
mov edx, 0x412021
lea ecx, [0x41349c]
call fcn.00405068
mov ebp, 0x41223c
mov ebx, ebp
mov ebp, 0x412078
sub ebx, ebp
mov dword [0x413484], ebx
mov ebp, 0x412078
mov dword [0x413488], ebp
push dword [0x413484]
call fcn.0040c5e0
mov dword [0x413458], eax
mov dword [0x413410], 0
mov eax, dword [0x413484]
cmp eax, dword [0x413410]
jl 0x4011b1
mov ebx, dword [0x413488]
add ebx, dword [0x413410]
mov eax, ebx
call fcn.0040c600
mov ebx, eax
imul ebx, ebx, 0xffffffff
push ebx
mov ebx, dword [0x413458]
add ebx, dword [0x413410]
mov eax, ebx
call fcn.0040c610
inc dword [0x413410]
jno 0x401170
mov edx, dword [0x4139d0]
push edx
push edx
mov ebx, dword [0x413484]
add ebx, 0xfffffff8
push ebx
mov ebx, dword [0x413458]
add ebx, 4
push ebx
call fcn.0040c620
push 0x4133ec
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push dword [0x4133ec]
call fcn.004050d0
push 0x4133ec
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 4
push dword [0x4133ec]
call fcn.004051b0
push 0x413450
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 5
push dword [0x4133ec]
call fcn.004051b0
push 0x4133e0
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 7
push dword [0x4133ec]
call fcn.004051b0
push 0x413494
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 8
push dword [0x4133ec]
call fcn.004051b0
push 0x4134d4
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 9
push dword [0x4133ec]
call fcn.004051b0
push 0x413434
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0xa
push dword [0x4133ec]
call fcn.004051b0
push 0x4134d8
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0xb
push dword [0x4133ec]
call fcn.004051b0
push 0x413444
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0xc
push dword [0x4133ec]
call fcn.004051b0
push 0x413448
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0xf
push dword [0x4133ec]
call fcn.004051b0
push 0x4133dc
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x10
push dword [0x4133ec]
call fcn.004051b0
push 0x4134c4
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x11
push dword [0x4133ec]
call fcn.004051b0
push 0x413408
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x12
push dword [0x4133ec]
call fcn.004051b0
push 0x413470
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x13
push dword [0x4133ec]
call fcn.004051b0
push 0x4134a4
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x14
push dword [0x4133ec]
call fcn.004051b0
push 0x41346c
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x15
push dword [0x4133ec]
call fcn.004051b0
push 0x4134b4
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x16
push dword [0x4133ec]
call fcn.004051b0
push 0x4134a0
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x17
push dword [0x4133ec]
call fcn.004051b0
push 0x4134b8
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x18
push dword [0x4133ec]
call fcn.004051b0
push 0x413438
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x19
push dword [0x4133ec]
call fcn.004051b0
push 0x41340c
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x41349c]
push 0x1b
push dword [0x4133ec]
call fcn.004051b0
push 0x413468
call fcn.0040f2c0
call fcn.0040aa3f
mov ebx, eax
cmp ebx, 0x32
jge 0x401546
push 0x10
push dword [0x4134b4]
push dword [0x4134c4]
call fcn.00408010
jmp 0x4022ed
mov eax, 0x41223c
mov dword [0x4133fc], eax
mov eax, dword [0x4133fc]
mov eax, dword [eax]
mov dword [0x413410], eax
add dword [0x4133fc], 4
mov eax, dword [0x4133fc]
mov eax, dword [eax]
mov dword [0x413414], eax
add dword [0x4133fc], 4
mov eax, dword [0x4133fc]
mov eax, dword [eax]
mov dword [0x413418], eax
add dword [0x4133fc], 4
mov eax, dword [0x4133fc]
mov eax, dword [eax]
mov dword [0x41341c], eax
add dword [0x4133fc], 4
mov eax, dword [0x4133fc]
mov eax, dword [eax]
mov dword [0x413420], eax
add dword [0x4133fc], 4
push 0x14
call fcn.0040c5e0
mov dword [0x41342c], eax
push dword [0x413410]
mov eax, dword [0x41342c]
call fcn.0040c680
push dword [0x413414]
mov ebx, dword [0x41342c]
add ebx, 4
mov eax, ebx
call fcn.0040c680
push dword [0x413418]
mov ebx, dword [0x41342c]
add ebx, 8
mov eax, ebx
call fcn.0040c680
push dword [0x41341c]
mov ebx, dword [0x41342c]
add ebx, 0xc
mov eax, ebx
call fcn.0040c680
push dword [0x413420]
mov ebx, dword [0x41342c]
add ebx, 0x10
mov eax, ebx
call fcn.0040c680
mov edx, dword [0x4139d0]
push edx
push edx
push 0x14
push dword [0x41342c]
call fcn.0040db10
push 0x4134cc
call fcn.0040f2c0
call fcn.00408efc
push 1
lea eax, [0x4032be]
push eax
call sub.KERNEL32.dll_SetConsoleCtrlHandler
lea eax, [0x403274]
push eax
call fcn.004098e0
call fcn.0040849f
mov dword [0x4134a8], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x41344c], eax
mov ebx, dword [0x4134a8]
and ebx, ebx
jle 0x401772
mov ebx, dword [0x4134a8]
and ebx, ebx
jle 0x401772
mov dword [0x413410], 0
mov ebx, dword [0x4134a8]
dec ebx
cmp ebx, dword [0x413410]
jl 0x401772
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x413410]
call fcn.00408451
push 0x41348c
call fcn.0040f2c0
push dword [0x41348c]
mov edx, dword [0x4133e0]
pop ecx
call fcn.0040f340
je 0x4016f9
mov dword [0x413400], 1
jmp 0x401766
mov ebx, dword [0x413400]
cmp ebx, 1
jne 0x40172b
mov edx, dword [0x41348c]
push dword [0x4139d0]
call fcn.0040f370
push 0x4134bc
call fcn.0040f2c0
mov dword [0x413400], 0
jmp 0x401766
push dword [0x41348c]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov edx, dword [0x413440]
push dword [0x4139d0]
call fcn.0040f370
mov edx, dword [0x41348c]
call fcn.0040f370
mov edx, str.__e
call fcn.0040f370
push 0x413440
call fcn.0040f2c0
inc dword [0x413410]
jno 0x4016a9
push 0x412034
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x40179d
mov eax, dword [0x4133d0]
mov dword [0x41347c], eax
push dword [0x41347c]
call fcn.0040336d
jmp 0x4017bd
push 0x10
push dword [0x41346c]
push dword [0x4134c4]
call fcn.00408010
push 1
jmp 0x4022f2
push 0x412032
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x4017f6
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4133e4]
push dword [0x4133d0]
call fcn.0040c620
push 0x413464
call fcn.0040f2c0
jmp 0x401816
push 0x10
push dword [0x41346c]
push dword [0x4134c4]
call fcn.00408010
push 1
jmp 0x4022f2
push 0x41202c
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x40184a
mov eax, dword [0x4133d0]
mov dword [0x413414], eax
mov eax, dword [0x4133e4]
mov dword [0x4133d4], eax
mov eax, dword [0x413414]
mov dword [0x4134b0], eax
jmp 0x40186a
push 0x10
push dword [0x41346c]
push dword [0x4134c4]
call fcn.00408010
push 1
jmp 0x4022f2
push 0x412030
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x40189c
mov eax, dword [0x4133d0]
mov dword [0x413428], eax
mov eax, dword [0x4133e4]
mov dword [0x413430], eax
mov eax, dword [0x413428]
mov dword [0x413478], eax
push 0x41202e
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x4018ce
mov eax, dword [0x4133d0]
mov dword [0x413424], eax
mov eax, dword [0x4133e4]
mov dword [0x4133d8], eax
mov eax, dword [0x413424]
mov dword [0x4134c8], eax
push 0x412036
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x401b66
mov edx, dword [0x4134bc]
xor ecx, ecx
call fcn.0040f340
jne 0x401915
mov edx, dword [0x4134bc]
push dword [0x4139d0]
call fcn.0040f370
push 0x413498
call fcn.0040f2c0
jmp 0x401a89
push 0xc80001
push dword [0x4134b8]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.0040af6f
push dword [0x413438]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.0040a173
push 0x20
push 0x41201e
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.0040a34c
push 0x41204c
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.0040a659
push 4
push 0xd
push 0
call fcn.0040af92
push 2
call fcn.0040a679
call fcn.0040b196
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x4019f5
push dword [0x4134c0]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x4022f2
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401a3d
call fcn.0040d12c
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401a3a
mov edx, dword [0x4139d0]
push edx
push edx
push 2
call fcn.0040a6b4
push 0x413498
call fcn.0040f2c0
push 0
call fcn.0040ab32
add esp, 8
jmp 0x401a89
pop eax
jmp 0x401a83
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401a83
call fcn.0040d13b
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401a82
mov edx, dword [0x4139d0]
push edx
push edx
push 2
call fcn.0040a6b4
push 0x413498
call fcn.0040f2c0
push 0
call fcn.0040ab32
add esp, 8
jmp 0x401a89
pop eax
pop eax
jmp 0x4019cb
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x413498]
call fcn.004052c0
push eax
mov eax, dword [0x413498]
push eax
call fcn.0040db10
inc dword [0x4139d0]
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4133e4]
push dword [0x4133d0]
call fcn.0040c620
pop edx
pop ecx
mov dword [0x4139d0], ecx
add ecx, dword [0x412250]
add edx, dword [0x412250]
call fcn.0040f340
jne 0x401b0d
push 0x10
push dword [0x4134a4]
push dword [0x4134c4]
call fcn.00408010
push dword [0x4134c0]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x4022f2
push 0x412038
push dword [0x41344c]
call fcn.00403bbb
and eax, eax
je 0x401b2b
mov eax, dword [0x4133d0]
mov dword [0x4134ac], eax
push dword [0x4133d8]
push dword [0x413430]
push dword [0x4133d4]
push dword [0x4134ac]
push dword [0x413424]
push dword [0x413428]
push dword [0x413414]
push dword [0x413498]
push dword [0x41344c]
call fcn.00403db6
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4133d4]
push dword [0x4134b0]
call fcn.0040c620
push 0x413460
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x413430]
push dword [0x413478]
call fcn.0040c620
push 0x4133f4
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push 0
call fcn.00408451
inc dword [0x4139d0]
mov edx, dword [0x413468]
pop ecx
mov dword [0x4139d0], ecx
add ecx, dword [0x412250]
call fcn.0040f340
je 0x401bf0
mov ebx, dword [0x4134a8]
cmp ebx, 1
jne 0x401bf0
mov eax, 1
jmp 0x401bf2
xor eax, eax
and eax, eax
je 0x401d09
mov edx, dword [0x4139d0]
push edx
push edx
mov edx, dword [0x4139d0]
push edx
push edx
call fcn.0040c805
inc dword [0x4139d0]
push dword [0x4134a0]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.00408083
push 0x4133f0
call fcn.0040f2c0
mov edx, dword [0x4133f0]
xor ecx, ecx
call fcn.0040f340
jne 0x401cb7
mov edx, dword [0x4133f0]
push dword [0x4139d0]
call fcn.0040f370
push 0x41345c
call fcn.0040f2c0
push dword [0x41345c]
call fcn.0040c845
mov edx, dword [0x4133f4]
xor ecx, ecx
call fcn.0040f340
jne 0x401c83
push dword [0x4133f4]
call fcn.0040349b
push dword [0x413464]
push 1
call fcn.0040cd10
and eax, eax
je 0x401cb7
push dword [0x4133d4]
push dword [0x4134b0]
push 1
call fcn.0040ce90
push 1
call fcn.0040caf0
mov edx, dword [0x4139d0]
push edx
push edx
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
call fcn.004084b2
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c857
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c845
pop dword [0x4139d0]
push dword [0x4134c0]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x4022f2
mov edx, dword [0x4134c0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, 0x41202a
call fcn.0040f370
mov edx, dword [0x413464]
call fcn.0040f370
push 0x413464
call fcn.0040f2c0
mov edx, dword [0x4139d0]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x4133f8
call fcn.0040f2c0
push dword [0x4139d0]
push dword [0x4133f8]
push 0
push 0x41201e
mov edx, dword [0x4134c0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, 0x41202a
call fcn.0040f370
inc dword [0x4139d0]
mov edx, dword [0x412250]
add dword [esp], edx
call sub.KERNEL32.dll_GetTempFileNameA
pop dword [0x4139d0]
push dword [0x4133f8]
call fcn.0040c8fb
push 0x412025
push dword [0x4133f8]
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov edx, dword [0x4133f8]
push dword [0x4139d0]
call fcn.0040f370
push 0x413464
call fcn.0040f2c0
push dword [0x413464]
push 1
call fcn.0040cd10
and eax, eax
je 0x401e0c
push dword [0x4133d4]
push dword [0x4134b0]
push 1
call fcn.0040ce90
push 1
call fcn.0040caf0
jmp 0x401e47
push dword [0x413464]
call fcn.0040c8fb
call fcn.00404063
push 0x10
push dword [0x41346c]
push dword [0x4134c4]
call fcn.00408010
push dword [0x4134c0]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x4022f2
mov edx, dword [0x4133f4]
xor ecx, ecx
call fcn.0040f340
jne 0x401e61
push dword [0x4133f4]
call fcn.0040349b
mov edx, dword [0x4139d0]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x413480
call fcn.0040f2c0
push dword [0x4139d0]
push 0x800
push dword [0x413480]
mov edx, dword [0x4139d0]
push edx
push edx
call fcn.004084b2
inc dword [0x4139d0]
mov edx, dword [0x412250]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x4139d0]
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
call fcn.004084b2
inc dword [0x4139d0]
push dword [0x413494]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x4139d0]
mov edx, dword [0x4139d0]
push edx
push edx
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
call fcn.004084b2
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c9b1
inc dword [0x4139d0]
push dword [0x4134d4]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x4139d0]
mov edx, dword [0x4139d0]
push edx
push edx
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
call fcn.004084b2
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c857
inc dword [0x4139d0]
push dword [0x413434]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x4139d0]
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
push dword [0x413480]
call fcn.00405190
inc dword [0x4139d0]
push dword [0x4134d8]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x4139d0]
push dword [0x41345c]
push dword [0x413444]
call fcn.0040850d
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
mov eax, dword [0x4133e8]
cdq
push edx
push eax
call fcn.004054a0
inc dword [0x4139d0]
push dword [0x413448]
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x4139d0]
push dword [0x413464]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
call fcn.00403b87
and eax, eax
je 0x40202b
call fcn.0040aa3f
mov ebx, eax
cmp ebx, 0x41
je 0x40202b
mov eax, 1
jmp 0x40202d
xor eax, eax
and eax, eax
je 0x4021a3
mov edx, dword [0x4139d0]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x4134d0
call fcn.0040f2c0
push 0x800
push dword [0x4134d0]
call sub.KERNEL32.dll_GetWindowsDirectoryA
push dword [0x4134d0]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov edx, dword [0x4134d0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, 0x41203a
call fcn.0040f370
push 0x4134d0
call fcn.0040f2c0
push dword [0x4134d0]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov edx, dword [0x4134d0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, dword [0x41340c]
call fcn.0040f370
push 0x41343c
call fcn.0040f2c0
mov edx, dword [0x4134d0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, dword [0x41340c]
call fcn.0040f370
mov edx, 0x412044
call fcn.0040f370
push 0x413454
call fcn.0040f2c0
push dword [0x41343c]
push 0
call fcn.0040cde0
and eax, eax
je 0x40211c
mov dword [0x413410], 1
push 0
call fcn.0040caf0
jmp 0x402126
mov dword [0x413410], 0
push dword [0x413454]
push 0
call fcn.0040cde0
and eax, eax
je 0x402150
mov dword [0x413414], 1
push 0
call fcn.0040caf0
jmp 0x40215a
mov dword [0x413414], 0
mov ebx, dword [0x413410]
add ebx, dword [0x413414]
and ebx, ebx
jne 0x4021a1
mov edx, dword [0x4139d0]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x4134d0
call fcn.0040f2c0
push 0x800
push dword [0x4134d0]
call sub.KERNEL32.dll_GetSystemDirectoryA
push dword [0x4134d0]
call sub.SHLWAPI.DLL_PathAddBackslashA
jmp 0x4021da
mov edx, dword [0x4139d0]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x4134d0
call fcn.0040f2c0
push 0x800
push dword [0x4134d0]
call sub.KERNEL32.dll_GetSystemDirectoryA
push dword [0x4134d0]
call sub.SHLWAPI.DLL_PathAddBackslashA
push dword [0x4139d0]
push 0x45
push dword [0x41345c]
mov edx, dword [0x413464]
push dword [0x4139d0]
call fcn.0040f370
mov edx, str.__e
call fcn.0040f370
mov edx, dword [0x413440]
call fcn.0040f370
inc dword [0x4139d0]
mov edx, dword [0x4134d0]
push dword [0x4139d0]
call fcn.0040f370
mov edx, dword [0x41340c]
call fcn.0040f370
mov edx, dword [0x412250]
add dword [esp], edx
mov edx, dword [0x412250]
add dword [esp + 4], edx
call fcn.00408989
pop dword [0x4139d0]
mov dword [0x413474], eax
push dword [0x413474]
call fcn.004089a3
mov dword [0x413404], eax
push dword [0x413474]
call fcn.004089c1
push 0
lea eax, [0x4032be]
push eax
call sub.KERNEL32.dll_SetConsoleCtrlHandler
call fcn.00404063
push dword [0x413464]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push dword [0x413464]
call fcn.0040c8fb
mov edx, dword [0x4139d0]
push edx
push edx
mov edx, dword [0x4139d0]
push edx
push edx
push dword [0x4139d0]
call fcn.004084b2
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c857
mov edx, dword [0x412250]
add dword [esp], edx
call fcn.0040c845
pop dword [0x4139d0]
push dword [0x4134c0]
call sub.KERNEL32.dll_RemoveDirectoryA
push dword [0x413404]
jmp 0x4022f2
push 0
call 0x40230c
call fcn.0040f290
push dword [0x4133c4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004097f1
call fcn.00409a30
call fcn.00409f01
call fcn.0040ac48
call fcn.0040bcbe
call fcn.0040c4bc
call fcn.0040c9c3
call fcn.0040cb60
call fcn.0040d42e
call fcn.0040c590
ret