Function at 0x43deb0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55527e
mov eax, dword fs:[0]
push eax
sub esp, 0x4c4
mov eax, dword [0x5932e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
sub esp, 0x18
xor esi, esi
mov ecx, esp
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x8c], esp
mov dword [ebp - 0xb0], esi
push esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], 0xf
push 0x56ffeb
mov byte [ecx], 0
call fcn.00409ab0
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x28]
push 2
push 0x572554
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00409ab0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
push 5
push str.fox.e
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00409ab0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a0]
push 7
push str.hs_fire
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
call fcn.00409ab0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
push 8
push str.App_Pat
mov dword [ebp - 0x178], esi
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00409ab0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x170]
push 6
push str.ersion
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.00409ab0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
push 8
push str.CurrentV
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.00409ab0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
push 6
push str.ndows_
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
call fcn.00409ab0
mov byte [ebp - 4], 7
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
push 2
push 0x572ef8
lea ecx, [ebp - 0x128]
call fcn.00409ab0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x110]
push 5
push str.soft_
mov dword [ebp - 0x100], esi
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
call fcn.00409ab0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf8]
push 9
push str.AREMicro
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
call fcn.00409ab0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe0]
push 1
push 0x572f10
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.00409ab0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xac]
push 4
push str.SOFT
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
call fcn.00409ab0
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x278]
call fcn.00409da0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xd
push ecx
mov edx, eax
lea ecx, [ebp - 0x260]
call fcn.00409da0
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xe
push ecx
mov edx, eax
lea ecx, [ebp - 0x248]
call fcn.00409da0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x230]
call fcn.00409da0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x10
push ecx
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.00409da0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x11
push ecx
mov edx, eax
lea ecx, [ebp - 0x200]
call fcn.00409da0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x1e8]
call fcn.00409da0
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x13
push ecx
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.00409da0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x14
push ecx
mov edx, eax
lea ecx, [ebp - 0x1b8]
call fcn.00409da0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
push ecx
mov edx, eax
lea ecx, [ebp - 0x380]
call fcn.00409da0
add esp, 0x10
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x28]
mov ecx, esp
push edx
mov edx, eax
call fcn.00409da0
add esp, 4
xor edx, edx
mov byte [ebp - 4], 0x2c
mov ecx, 0x80000002
call fcn.00409150
mov byte [ebp - 4], 0x2b
add esp, 0x30
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x8c], eax
cmp edx, 0x10
jb 0x43e272
mov ecx, dword [ebp - 0x380]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e268
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f566
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0xf
mov byte [ebp - 0x380], 0
cmp edx, 0x10
jb 0x43e2cb
mov ecx, dword [ebp - 0x1b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e2c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f56b
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
cmp edx, 0x10
jb 0x43e324
mov ecx, dword [ebp - 0x1d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e31a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f570
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
cmp edx, 0x10
jb 0x43e37d
mov ecx, dword [ebp - 0x1e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e373
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f575
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
cmp edx, 0x10
jb 0x43e3d6
mov ecx, dword [ebp - 0x200]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e3cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f57a
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
cmp edx, 0x10
jb 0x43e42f
mov ecx, dword [ebp - 0x218]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e425
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f57f
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
cmp edx, 0x10
jb 0x43e488
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e47e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f584
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
cmp edx, 0x10
jb 0x43e4e1
mov ecx, dword [ebp - 0x248]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e4d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f589
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
cmp edx, 0x10
jb 0x43e53a
mov ecx, dword [ebp - 0x260]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e530
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f58e
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
cmp edx, 0x10
jb 0x43e593
mov ecx, dword [ebp - 0x278]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e589
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f593
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
cmp edx, 0x10
jb 0x43e5ec
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e5e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f598
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x43e645
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e63b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f59d
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
cmp edx, 0x10
jb 0x43e69e
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e694
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5a2
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
cmp edx, 0x10
jb 0x43e6f7
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e6ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5a7
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
cmp edx, 0x10
jb 0x43e750
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e746
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5ac
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
cmp edx, 0x10
jb 0x43e7a9
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e79f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5b1
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp edx, 0x10
jb 0x43e802
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e7f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5b6
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
cmp edx, 0x10
jb 0x43e85b
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e851
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5bb
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x174]
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
cmp edx, 0x10
jb 0x43e8b4
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e8aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5c0
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
cmp edx, 0x10
jb 0x43e90d
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e903
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5c5
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp edx, 0x10
jb 0x43e960
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e956
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5ca
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x43e9ad
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e9a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5cf
push edx
push ecx
call fcn.005150f8
add esp, 8
cmp dword [ebp - 0x8c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jne 0x43edf3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x90], esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x56fff5
mov byte [ecx], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0xc8]
push 1
push 0x572f1c
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x368]
push 4
push str.ox.e
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x350]
push 0xa
push str.aths_firef
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0xf
mov byte [ebp - 0x350], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x338]
push 5
push str.App_P
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x320]
push 6
push str.rsion_
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x308]
push 9
push str.CurrentVe
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2f0]
push 5
push str.dows_
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x2d8]
push 0xa
push str.rosoftWin
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2c0]
push 6
push str.REMic
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x2a8]
push 6
push str.SOFTWA
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
call fcn.00409ab0
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 0x37
push eax
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x4a0]
call fcn.00409da0
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x38
push ecx
mov edx, eax
lea ecx, [ebp - 0x488]
call fcn.00409da0
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x39
push ecx
mov edx, eax
lea ecx, [ebp - 0x470]
call fcn.00409da0
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x3a
push ecx
mov edx, eax
lea ecx, [ebp - 0x458]
call fcn.00409da0
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x3b
push ecx
mov edx, eax
lea ecx, [ebp - 0x4d0]
call fcn.00409da0
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x440]
call fcn.00409da0
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x3d
push ecx
mov edx, eax
lea ecx, [ebp - 0x428]
call fcn.00409da0
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x3e
push ecx
mov edx, eax
lea ecx, [ebp - 0x290]
call fcn.00409da0
add esp, 8
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0xc8]
mov ecx, esp
push edx
mov edx, eax
call fcn.00409da0
add esp, 4
xor edx, edx
mov byte [ebp - 4], 0x51
mov ecx, 0x80000001
call fcn.00409150
mov byte [ebp - 4], 0x50
add esp, 0x30
mov edx, dword [ebp - 0x27c]
mov dword [ebp - 0x8c], eax
cmp edx, 0x10
jb 0x43ed16
mov ecx, dword [ebp - 0x290]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ed0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5d4
push edx
push ecx
call fcn.005150f8
add esp, 8
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
call fcn.00409830
lea ecx, [ebp - 0x440]
call fcn.00409830
lea ecx, [ebp - 0x4d0]
call fcn.00409830
lea ecx, [ebp - 0x458]
call fcn.00409830
lea ecx, [ebp - 0x470]
call fcn.00409830
lea ecx, [ebp - 0x488]
call fcn.00409830
lea ecx, [ebp - 0x4a0]
call fcn.00409830
lea ecx, [ebp - 0x2a8]
call fcn.00409830
lea ecx, [ebp - 0x2c0]
call fcn.00409830
lea ecx, [ebp - 0x2d8]
call fcn.00409830
lea ecx, [ebp - 0x2f0]
call fcn.00409830
lea ecx, [ebp - 0x308]
call fcn.00409830
lea ecx, [ebp - 0x320]
call fcn.00409830
lea ecx, [ebp - 0x338]
call fcn.00409830
lea ecx, [ebp - 0x350]
call fcn.00409830
lea ecx, [ebp - 0x368]
call fcn.00409830
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00409830
push 0
push 0x56fff6
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x52
cmp dword [ebp - 0x8c], 0
je 0x43ee9d
sub esp, 0x18
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x572f74
mov byte [ecx], 0
call fcn.00409ab0
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x4b8]
call fcn.00409450
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0x40]
cmp eax, esi
je 0x43ee8c
mov ecx, eax
call fcn.00409830
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
movq qword [ebp - 0x30], xmm0
mov byte [esi], 0
lea ecx, [ebp - 0x4b8]
call fcn.00409830
mov esi, dword [ebp - 0xb0]
cmp dword [ebp - 0x30], 0
jne 0x43f1ba
sub esp, 0x18
mov ecx, esp
push 0xc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.programfiles
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x70]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x53
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x43efc3
sub esp, 0x18
mov ecx, esp
push 9
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push str.homedrive
mov byte [ecx], al
call fcn.00409ab0
lea ecx, [ebp - 0x28]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xac]
mov eax, dword [ebp - 0x18]
add eax, 0xe
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
mov dword [ebp - 0x8c], 0x80
call fcn.00409fe0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xac]
push eax
call fcn.00409bf0
push 0xe
push str.Program_Files
lea ecx, [ebp - 0xac]
call fcn.00409bf0
lea ecx, [ebp - 0x70]
call fcn.00409830
movups xmm0, xmmword [ebp - 0xac]
lea ecx, [ebp - 0xac]
mov byte [ebp - 0xac], 0
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [ebp - 0x9c]
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
call fcn.00409830
lea ecx, [ebp - 0x28]
call fcn.00409830
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xac]
add eax, 0x10
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
mov dword [ebp - 0x8c], 0x100
call fcn.00409fe0
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
push dword [ebp - 0x60]
cmovae eax, dword [ebp - 0x70]
lea ecx, [ebp - 0xac]
push eax
call fcn.00409bf0
push 0x10
push str.Mozilla_Firefox
lea ecx, [ebp - 0xac]
call fcn.00409bf0
lea ecx, [ebp - 0x40]
call fcn.00409830
movups xmm0, xmmword [ebp - 0xac]
lea ecx, [ebp - 0xac]
mov byte [ebp - 0xac], 0
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [ebp - 0x9c]
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 4], 0x53
call fcn.00409830
push 7
push 0x572fbc
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x3fc], 0xf
mov byte [ebp - 0x410], 0
call fcn.00409ab0
lea eax, [edi + 0x1ac]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x3f8]
call fcn.00409940
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3e0]
push 8
push 0x572fc4
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3cc], 0xf
mov byte [ebp - 0x3e0], 0
call fcn.00409ab0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00409940
mov dword [ebp - 4], 0x5a
lea ecx, [ebp - 0x3b0]
push 7
push 0x572fd0
mov dword [ebp - 0x8c], 3
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 0xf
mov byte [ebp - 0x3b0], 0
call fcn.00409ab0
push 0x59a848
lea ecx, [ebp - 0x398]
mov dword [ebp - 4], 0x5b
call fcn.00409940
mov dword [ebp - 4], 0x5c
lea edx, [ebp - 0x410]
mov dword [ebp - 0x8c], 0xf
sub esp, 8
lea eax, [ebp - 0x380]
mov ecx, esp
push eax
push edx
call fcn.00419d30
mov ecx, dword [edi + 0x5c]
push 0xc
call fcn.0044d0b0
push fcn.0040e2f0
push 3
push 0x30
lea eax, [ebp - 0x410]
mov dword [ebp - 4], 0x53
push eax
call fcn.0051510b
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x52
mov esi, 7
call fcn.00409830
sub esp, 0x18
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.APPDATA
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x88]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x28]
push 0x19
push str.MozillaFirefoxProfiles
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x88]
cmp dword [ebp - 0x74], 0x10
push dword [ebp - 0x78]
cmovae eax, dword [ebp - 0x88]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040a1a0
or esi, 0x200
mov dword [ebp - 0xb0], esi
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
movq qword [ebp - 0x48], xmm0
mov byte [eax], 0
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43f297
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f28d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5d9
push edx
push ecx
call fcn.005150f8
add esp, 8
lea ecx, [edi + 0x1c4]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, eax
je 0x43f2cd
cmp dword [ebp - 0x2c], 0x10
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00409ab0
lea ecx, [edi + 0x1c4]
push ecx
lea ecx, [ebp - 0xc8]
call fcn.00409940
cmp dword [ebp - 0xb4], 0x10
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
mov edx, dword [ebp - 0xb4]
cmp eax, 0xffffffff
setne al
mov byte [ebp - 0x91], al
cmp edx, 0x10
jb 0x43f340
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f330
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5de
push edx
push ecx
call fcn.005150f8
mov al, byte [ebp - 0x91]
add esp, 8
test al, al
jne 0x43f34e
mov esi, 0xfffff82e
jmp 0x43f495
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.00409940
call fcn.0040cae0
add esp, 0x18
test al, al
jne 0x43f372
mov esi, 0xfffff82f
jmp 0x43f495
push 7
push 0x572ffc
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3cc], 0xf
mov byte [ebp - 0x3e0], 0
call fcn.00409ab0
lea eax, [edi + 0x1ac]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00409940
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x3b0]
push 4
or esi, 0x10
mov dword [ebp - 0x3a0], 0
push 0x573004
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x39c], 0xf
mov byte [ebp - 0x3b0], 0
call fcn.00409ab0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x63
push eax
lea ecx, [ebp - 0x398]
call fcn.00409940
mov dword [ebp - 4], 0x64
lea edx, [ebp - 0x3e0]
mov eax, dword [ebp - 0xb0]
sub esp, 8
or eax, 0x70
mov ecx, esp
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x380]
push eax
push edx
call fcn.00419d30
mov ecx, dword [edi + 0x5c]
push 0xd
call fcn.0044d0b0
push fcn.0040e2f0
push 2
push 0x30
lea eax, [ebp - 0x3e0]
mov dword [ebp - 4], 0x60
push eax
call fcn.0051510b
lea ecx, [edi + 0x20c]
lea eax, [ebp - 0x58]
cmp ecx, eax
je 0x43f477
cmp dword [ebp - 0x44], 0x10
push dword [ebp - 0x48]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.00409ab0
mov eax, dword [edi]
mov esi, dword [eax + 0x28]
mov ecx, esi
call dword [0x55d39c]
mov ecx, edi
call esi
mov esi, eax
test esi, esi
jne 0x43f495
mov byte [edi + 0xfc], 1
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x43f4c9
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f4bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5e3
push edx
push ecx
call fcn.005150f8
add esp, 8
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x43f500
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f4f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5e8
push edx
push ecx
call fcn.005150f8
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x43f549
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f53f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f5ed
push edx
push ecx
call fcn.005150f8
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00514e1d
mov esp, ebp
pop ebp
ret
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
int3