Function at 0x40d7f8
Capabilities:
Accept command line arguments
Identify system language via api

Disassembly:
push ebp
mov edx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov ecx, 0xb42
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xcc
movzx eax, byte [edx]
inc edx
test al, al
je 0x40aa48
add ecx, eax
cmp ecx, 0xdc2
jbe 0x40aa02
mov dword [esp + 0xc], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 8], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov eax, dword [0x429844]
mov dword [esp], str.The_cloud_file_provider_is_not_running.
mov dword [esp + 4], eax
call fcn.004142c0
imul eax, dword [0x429844], 0xc652286a
mov dword [0x429844], eax
mov eax, dword [0x429844]
mov edx, eax
imul eax, eax, 0xce2ef836
or edx, 0xa31ee6c5
mov dword [0x4293e4], edx
mov dword [0x429844], eax
call fcn.0041264c
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov ecx, 0x578
movzx eax, byte [edx]
inc edx
test al, al
je 0x40aacc
add ecx, eax
cmp ecx, 0x15cb
jbe 0x40aa75
mov dword [esp + 0xc], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 8], str.LoadResource_API_exit
mov eax, dword [0x4293e4]
mov dword [esp], str.The_cloud_file_provider_is_not_running.
mov dword [esp + 4], eax
call fcn.004142c0
xor dword [0x429844], 0xacfa4724
call fcn.004119f4
mov eax, dword [0x429844]
and eax, 0x253da1f4
mov dword [0x4293e4], eax
jmp 0x40aad6
and dword [0x429844], 0x80c8df74
imul eax, dword [0x4293e4], 0x240e171b
mov dword [0x4293e4], eax
mov dword [esp], eax
call fcn.00410104
mov eax, dword [0x429844]
add eax, 0x5cfae7a1
mov dword [0x4293e4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, dword [0x4293e4]
mov ecx, 0x100
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
movzx edi, byte [edx]
lea ebx, [edi - 0x30]
cmp bl, 9
ja 0x40ab1f
inc edx
jmp 0x40ab11
dec ecx
jne 0x40ab0c
add eax, 0x1bde5e00
mov ebx, 0x2d
imul eax, eax, 0x8a95b2a5
xor eax, 0x63afd58a
mov dword [0x429844], eax
mov ecx, dword [0x429844]
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov esi, 0xfde
movzx eax, byte [edx]
inc edx
test al, al
je 0x40ab6f
add esi, eax
cmp esi, 0x1516
jbe 0x40ab4c
imul ecx, ecx, 0xe7802e47
mov dword [0x4293e4], ecx
call fcn.00413064
mov eax, dword [0x429844]
mov edx, eax
and eax, 0xf1e966af
or edx, 0xf1f8e696
mov dword [0x429844], eax
mov dword [0x4293e4], edx
call fcn.0040ff20
mov eax, dword [0x429844]
mov edx, eax
and eax, 0x6fdbe25c
or edx, 0x7973c582
or eax, 0x6953c000
sub edx, 0x634dac51
mov dword [0x429844], eax
mov dword [0x4293e4], edx
dec ebx
jne 0x40ab3c
xor edx, edx
cmp byte [edx + str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
je 0x40abda
inc edx
cmp edx, 0xa8d
jne 0x40abbe
xor eax, 0xa6cc5880
mov dword [0x4293e4], eax
mov eax, dword [0x4293e4]
or eax, 0x9d88ab6
mov dword [0x429844], eax
mov dword [esp], str.Security_System_Capability_
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
call fcn.0041264c
mov edx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov ecx, 0x217
and dword [0x4293e4], 0x1a0a4f23
movzx eax, byte [edx]
inc edx
test al, al
je 0x40ac36
add ecx, eax
cmp ecx, 0x72f
jbe 0x40ac10
call fcn.00413064
mov eax, dword [0x4293e4]
or eax, 0x9d7fc6c0
mov dword [0x429844], eax
add dword [0x4293e4], 0x1b2db6ec
xor dword [0x429844], 0x32cfde8c
call fcn.004124d4
mov eax, dword [0x429844]
sub eax, 0x1b3085f5
mov dword [0x4293e4], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov al, byte [edx]
test al, al
je 0x40ac90
sub eax, 0x30
cmp al, 9
jbe 0x40ac8d
mov eax, dword [0x4293e4]
or eax, 0xa0494e75
mov dword [0x429844], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40ac90
inc edx
jmp 0x40ac69
mov eax, dword [0x429844]
lea edi, [ebp - 0x64]
mov esi, str._v_J
xor ebx, ebx
and eax, 0xec48990a
mov dword [0x4293e4], eax
call fcn.004124d4
mov ecx, 4
imul eax, dword [0x429844], 0x688f221
rep movsd dword es:[edi], dword [esi]
mov esi, 0x3c00
mov dword [0x429844], eax
sub eax, 0x8ef68a4
or eax, 0xbe062a5
mov dword [0x4293e4], eax
mov edx, str.LoadResource_API_exit
mov ecx, 0x7a4
movsx eax, byte [edx]
inc edx
test al, al
je 0x40ad03
add ecx, eax
cmp ecx, 0x2666
jbe 0x40ace2
call fcn.00414158
add dword [0x429844], 0x42ad45d7
xor eax, eax
cmp byte [eax + str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40ad23
inc eax
cmp eax, 0x1eac
jne 0x40ad05
mov eax, dword [0x429844]
mov dword [esp], eax
call fcn.00410104
mov eax, dword [0x429844]
sub esi, dword [ebp + ebx*4 - 0x64]
inc ebx
mov dword [ebp - 0xa8], esi
add eax, 0x35c331e4
mov dword [0x429844], eax
and eax, 0x98e4343f
mov dword [0x4293e4], eax
cmp ebx, 4
jne 0x40acd8
cmp byte [str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40ad64
call fcn.0040ff20
sub dword [0x429844], 0x44e6d6ed
mov eax, dword [0x429844]
add eax, 0x33f8e30c
mov dword [0x4293e4], eax
imul eax, eax, 0xa8ed0440
or eax, 0xdd79d514
mov dword [0x429844], eax
call fcn.00413064
xor eax, eax
cmp byte [eax + str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40adaf
inc eax
cmp eax, 0x1192
jne 0x40ad8a
call fcn.0040ff20
imul eax, dword [0x429844], 0x7ec8d20a
mov dword [0x4293e4], eax
mov dword [ebp - 0x9c], 0x2c
mov eax, dword [0x4293e4]
sub eax, 0x4dc085c
or eax, 0x29a93e4a
sub eax, 0x2576ddeb
imul eax, eax, 0x29b3ade6
or eax, 0xcb54a7cb
dec dword [ebp - 0x9c]
jne 0x40adcd
mov dword [0x429844], eax
add eax, 0x6b46caef
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [0x4293e4], eax
mov al, byte [edx]
test al, al
je 0x40ae57
sub eax, 0x30
cmp al, 9
ja 0x40ae04
inc edx
jmp 0x40adf4
mov edx, str.The_cloud_file_provider_is_not_running.
mov ecx, 0x64e
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x40ae28
add ecx, eax
cmp ecx, 0x11a9
jbe 0x40ae0e
call fcn.0041264c
mov eax, dword [0x4293e4]
lea edx, [eax - 0x69ec4741]
sub eax, 0x2a64bb6
mov dword [0x429844], edx
mov dword [0x4293e4], eax
call fcn.004119f4
mov eax, dword [0x429844]
add eax, 0x3e8fb11c
mov dword [0x4293e4], eax
mov eax, dword [0x4293e4]
mov ebx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
imul edx, eax, 0x7bf2cea8
imul eax, eax, 0x75f98bc4
mov dword [0x429844], edx
sub eax, 0x77bdafe8
or eax, 0x5b9adf80
mov dword [0x4293e4], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call fcn.004119f4
xor dword [0x429844], 0x1a3b8ba5
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, dword [0x429844]
lea eax, [ecx - 0x58f84b7d]
mov dword [0x4293e4], eax
mov dl, byte [ebx]
test dl, dl
je 0x40aecd
sub edx, 0x30
cmp dl, 9
jbe 0x40aeca
add ecx, 0xda41800
mov dword [0x429844], ecx
jmp 0x40aecd
inc ebx
jmp 0x40aeae
lea edi, [ebp - 0x54]
mov esi, 0x4160c4
mov ecx, 4
xor ebx, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x63
add dword [0x429844], 0x308c250d
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
or dword [0x4293e4], 0x1988b5c
call fcn.004124d4
add dword [0x4293e4], 0x28d19692
add dword [0x429844], 0x7a6899c8
xor eax, eax
cmp byte [eax + str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
je 0x40af42
inc eax
cmp eax, 0x4e1
jne 0x40af22
call fcn.004124d4
add dword [0x429844], 0x556f3144
sub dword [0x4293e4], 0x55d59e21
and dword [0x429844], 0xa711541a
call dword [sym.imp.KERNEL32.dll_GetLastError]
add esi, dword [ebp + ebx*4 - 0x54]
inc ebx
add eax, 0x7096bd04
mov dword [ebp - 0xac], esi
mov dword [0x4293e4], eax
cmp ebx, 4
jne 0x40af20
xor edx, edx
cmp word [edx + str.The_cloud_file_provider_is_not_running.], 0
je 0x40af97
add edx, 2
cmp edx, 0x45aa
jne 0x40af78
and eax, 0x3e518a7
mov dword [0x4293e4], eax
mov eax, dword [0x429844]
xor dword [0x4293e4], 0x4ed01bf8
sub eax, 0x4de417d8
mov dword [0x429844], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 8], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.004142c0
imul eax, dword [0x4293e4], 0x4a8a4ecc
mov dword [0x429844], eax
mov dword [esp], eax
call fcn.00410104
xor eax, eax
cmp byte [eax + str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
je 0x40b016
inc eax
cmp eax, 0x326
jne 0x40afe9
mov eax, dword [0x429844]
mov dword [esp], eax
call fcn.00410104
imul eax, dword [0x4293e4], 0xc534ec0b
mov dword [0x429844], eax
mov eax, dword [0x429844]
lea edi, [ebp - 0x44]
mov esi, 0x4160d4
xor ebx, ebx
lea edx, [eax + 0xb678da8]
add eax, 0x36e8a546
mov dword [0x4293e4], edx
mov dword [0x429844], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
mov eax, dword [0x429844]
mov ecx, 5
xor edx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa4], edx
sub eax, 0x1407ced
mov dword [0x4293e4], eax
mov edx, str.LoadResource_API_exit
mov ecx, 0x1060
movsx eax, byte [edx]
inc edx
test al, al
je 0x40b0d6
add ecx, eax
cmp ecx, 0x218a
jbe 0x40b073
mov eax, dword [0x4293e4]
mov dword [esp], str.The_cloud_file_provider_is_not_running.
mov dword [esp + 4], eax
call fcn.0040efac
mov eax, dword [0x429844]
xor eax, 0xb59e6230
mov dword [0x4293e4], eax
mov dword [esp + 8], str.LoadResource_API_exit
mov dword [esp + 4], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
mov eax, dword [0x4293e4]
add eax, 0x718b4ee0
mov dword [0x429844], eax
jmp 0x40b0e5
mov eax, dword [0x429844]
or eax, 0x9fe059a8
mov dword [0x4293e4], eax
and dword [0x4293e4], 0xcf96425e
mov dword [esp + 8], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp + 4], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
mov eax, dword [0x4293e4]
mov edi, dword [ebp + ebx*4 - 0x44]
inc ebx
sub dword [ebp - 0xa4], edi
sub eax, 0x41ccedb3
mov dword [0x429844], eax
cmp ebx, 5
jne 0x40b069
cmp byte [str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
mov dword [ebp - 0x7c], 0x48
mov dword [ebp - 0x78], 0x51
mov dword [ebp - 0x74], 0xbff67
je 0x40b151
call fcn.00413064
mov eax, dword [0x4293e4]
xor esi, esi
mov edi, 0xd0000
or eax, 0x9188bc3c
mov dword [0x4293e4], eax
sub eax, 0x169b8373
mov dword [0x429844], eax
mov dword [esp], 0x238c
call dword [sym.imp.USER32.dll_OpenIcon]
push eax
mov eax, dword [0x429844]
add eax, 0x88f604d
mov dword [0x4293e4], eax
call fcn.00414158
mov eax, dword [0x429844]
xor edx, edx
xor dword [0x4293e4], 0x32c15891
and eax, 0x258c6aa2
or eax, 0xdf962fd0
cmp byte [edx + str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40b1cc
inc edx
cmp edx, 0x147c
jne 0x40b1ae
lea edx, [eax + 0xf432638]
mov dword [0x4293e4], edx
sub edi, dword [ebp + esi*4 - 0x7c]
xor eax, 0x924a15b2
inc esi
mov edx, dword [0x4293e4]
mov dword [0x429844], eax
mov dword [ebp - 0xb0], edi
cmp esi, 3
jne 0x40b17f
imul edx, edx, 0x927b8b6d
xor eax, eax
and edx, 0x85b266b6
mov dword [0x4293e4], edx
cmp byte [eax + str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40b216
inc eax
cmp eax, 0x12cc
jne 0x40b200
call fcn.00414158
mov eax, dword [0x4293e4]
add eax, 0x7ae1db4e
mov dword [0x429844], eax
xor eax, 0x94f4fce
mov dword [0x4293e4], eax
call fcn.0040ff20
mov eax, dword [0x429844]
mov ecx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov edx, eax
or edx, 0x1f70ca61
mov dword [0x429844], edx
mov dl, byte [ecx]
test dl, dl
je 0x40b25d
sub edx, 0x30
cmp dl, 9
ja 0x40b25d
inc ecx
jmp 0x40b24c
and eax, 0x845a64fe
or eax, 0x4504060
mov dword [0x4293e4], eax
call fcn.004119f4
mov eax, dword [0x429844]
imul edx, eax, 0x9e7e9548
add eax, 0x27ec9d47
mov dword [0x429844], eax
mov dword [0x4293e4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push eax
xor eax, eax
cmp byte [eax + str.LoadResource_API_exit], 0
je 0x40b2b3
inc eax
cmp eax, 0x3d1
jne 0x40b298
add dword [0x429844], 0xd3234b3
mov eax, dword [0x429844]
or eax, 0x7ade91a5
mov dword [0x4293e4], eax
sub eax, 0x355fa450
mov dword [0x429844], eax
xor eax, eax
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
mov dword [esp + 4], eax
lea eax, [ebp - 0x8c]
mov dword [esp], eax
call fcn.0040946c
test eax, eax
jns 0x40b347
lea edi, [ebp - 0x30]
mov esi, 0x4160e8
mov ecx, 4
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x429844]
mov ebx, 0x1d
xor edx, 0xc02c1e00
mov dword [ebp - 0x9c], edx
mov ecx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
movzx edi, byte [ecx]
lea esi, [edi - 0x30]
mov edx, esi
cmp dl, 9
ja 0x40b32d
inc ecx
jmp 0x40b31d
add ebx, dword [ebp + eax*4 - 0x30]
inc eax
cmp eax, 4
jne 0x40b318
mov eax, dword [ebp - 0x9c]
mov dword [0x4293e4], eax
jmp 0x40bdf8
mov dword [esp], 0x100000
call fcn.0040d2a0
mov edx, dword [0x41611c]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x84]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [edx + 0x4c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xa8]
shl eax, 0xa
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], 0x102
mov dword [esp + 4], eax
call dword [edx + 0x14]
xor eax, eax
sub esp, 0x18
cmp word [eax + str.The_cloud_file_provider_is_not_running.], 0
je 0x40b3c0
add eax, 2
cmp eax, 0x431a
jne 0x40b39d
call fcn.0040ff20
sub dword [0x429844], 0x70436927
mov eax, dword [0x429844]
mov edx, eax
or eax, 0x39b67504
or edx, 0x4d1297e0
mov dword [0x429844], eax
mov dword [0x4293e4], edx
call dword [sym.imp.USER32.dll_GetMessageTime]
mov eax, dword [0x429844]
sub eax, 0x3558b4a4
mov dword [0x4293e4], eax
xor eax, eax
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x30]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 0xc], 0x18
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.00401083
mov edx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov al, byte [edx]
sub eax, 0x30
cmp al, 9
ja 0x40b42c
inc edx
jmp 0x40b420
mov eax, dword [0x4293e4]
xor edi, edi
mov edx, eax
or edx, 0x45486ded
mov dword [0x429844], edx
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
mov eax, dword [0x429844]
add eax, 0x79c12628
mov dword [0x4293e4], eax
mov dword [esp], 0x248
call fcn.0040d2a0
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x248
mov esi, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.004010ab
mov dword [esp], esi
call fcn.0040d2e4
mov eax, dword [ebp - 0xa0]
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
cmp word [eax], 0x5a4d
je 0x40b56d
mov eax, dword [0x4293e4]
sub eax, 0x14e278b6
xor eax, 0x6b5cc300
lea edx, [eax - 0x64ee1a4f]
mov dword [0x429844], eax
mov dword [0x4293e4], edx
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
xor ecx, ecx
add dword [0x429844], 0x21053031
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010dd
mov eax, dword [ebp - 0x9c]
cmp word [eax + str.The_cloud_file_provider_is_not_running.], 0
je 0x40b556
add dword [ebp - 0x9c], 2
cmp dword [ebp - 0x9c], 0x4d8e
jne 0x40b4ff
mov dword [esp + 0xc], str.LoadResource_API_exit
mov dword [esp + 8], str.LoadResource_API_exit
mov eax, dword [0x4293e4]
mov dword [esp], str.The_cloud_file_provider_is_not_running.
mov dword [esp + 4], eax
call fcn.004142c0
mov eax, dword [0x4293e4]
add eax, 0x7bb14f3a
mov dword [0x429844], eax
imul eax, dword [0x429844], 0x372bd040
mov dword [0x4293e4], eax
xor ebx, ebx
jmp 0x40bdf8
inc edx
mov al, byte [edx]
test al, al
je 0x40b589
sub eax, 0x30
cmp al, 9
jbe 0x40b56c
mov eax, dword [0x4293e4]
add eax, 0x6f3ad803
mov dword [0x429844], eax
mov eax, dword [ebp - 0xa0]
xor edx, edx
xor dword [0x4293e4], 0x4935f59c
mov esi, dword [eax + 0x3c]
add esi, eax
xor eax, eax
mov dword [ebp - 0x80], eax
mov dword [esp + 0x14], 0x40
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
or ah, 0x20
mov dword [esp + 0x10], eax
lea eax, [esi + 0x50]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x80]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.004010b5
mov eax, dword [esi + 0x54]
mov dword [esp], eax
call fcn.0040d2a0
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov ecx, 0x1ff4
mov edi, eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x40b603
add ecx, eax
cmp ecx, 0xf22
jbe 0x40b5f1
mov eax, dword [0x4293e4]
or eax, 0xb29c654e
mov dword [0x4293e4], eax
add eax, 0x262e72e2
mov dword [0x429844], eax
mov dword [esp + 8], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp + 4], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
mov eax, dword [esi + 0x54]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d204
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x80]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.004010bf
test eax, eax
je 0x40b8d7
cmp byte [str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
je 0x40b697
imul eax, dword [0x429844], 0x38917f35
mov dword [0x4293e4], eax
mov eax, dword [0x4293e4]
mov esi, 0x100
sub eax, 0x1b9c1123
mov dword [0x4293e4], eax
and eax, 0xca7a7660
mov dword [0x429844], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
mov ecx, str.The_cloud_file_provider_is_not_running.
mov edx, 0xaa8
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x40b6e4
add edx, eax
cmp edx, 0x1b53
jbe 0x40b6cf
mov eax, dword [0x4293e4]
add eax, 0x1eaa2caa
mov dword [0x429844], eax
mov dword [esp], str.No_system_quota_limits_are_specifically_set_for_this_account.
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov eax, dword [0x429844]
sub eax, 0x2fda21e7
and eax, 0xcd15b85c
mov dword [0x4293e4], eax
dec esi
jne 0x40b6c5
mov esi, 0x46
mov eax, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov cl, byte [eax]
lea edx, [ecx - 0x30]
cmp dl, 9
ja 0x40b72f
inc eax
jmp 0x40b722
mov eax, dword [0x4293e4]
or eax, 0xded3f51c
mov dword [0x429844], eax
mov dword [esp + 8], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 4], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
dec esi
jne 0x40b71d
cmp byte [str.No_system_quota_limits_are_specifically_set_for_this_account.], 0
je 0x40b770
xor dword [0x4293e4], 0xbf0651ca
add dword [0x4293e4], 0x1042fead
xor esi, esi
and dword [0x429844], 0xa37590a4
call fcn.00414158
mov eax, dword [0x429844]
or eax, 0x1b88f324
sub eax, 0x431cd862
and eax, 0x984aa472
mov edx, eax
or eax, 0xad21b852
or edx, 0x7dffedef
mov dword [0x429844], eax
mov dword [0x4293e4], edx
call fcn.004124d4
mov dword [ebp - 0x70], 0x59
mov dword [ebp - 0x6c], 0x5e
mov dword [ebp - 0x68], 0xffffff44
mov eax, dword [0x429844]
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov ecx, 0x1caa
sub eax, 0x15136e7a
mov dword [0x4293e4], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x40b801
add ecx, eax
cmp ecx, 0x21b2
jbe 0x40b7ea
call fcn.004119f4
imul eax, dword [0x429844], 0x374dea03
mov edx, eax
mov dword [0x429844], eax
xor edx, 0xa06c786a
mov dword [0x4293e4], edx
mov dword [esp], eax
call fcn.00410104
mov eax, dword [0x4293e4]
add ebx, dword [ebp + esi*4 - 0x70]
inc esi
and eax, 0x8ba0ebbe
mov dword [0x429844], eax
cmp esi, 3
jne 0x40b7d1
mov dword [esp], edi
call fcn.0040d2e4
xor eax, eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010dd
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov al, byte [edx]
sub eax, 0x30
cmp al, 9
ja 0x40b86c
inc edx
jmp 0x40b860
mov eax, dword [0x429844]
or eax, 0x67975e5
lea edx, [eax + 0x17ac745b]
mov dword [0x429844], eax
mov dword [0x4293e4], edx
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.LoadResource_API_exit
mov dword [esp + 8], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.004142c0
mov eax, dword [0x4293e4]
or eax, 0x4a1b85dd
mov dword [0x429844], eax
mov dword [esp + 8], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp + 4], str.LoadResource_API_exit
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
jmp 0x40bdf8
mov dword [esp], edi
call fcn.0040d2e4
movzx eax, word [esi + 0x14]
lea ebx, [esi + eax + 0x18]
movzx eax, word [esi + 6]
mov edi, dword [ebp - 0xa4]
cmp eax, edi
jle 0x40bd46
mov eax, dword [0x429844]
lea edx, [eax - 0x1903f115]
and eax, 0x3631a54d
mov dword [0x4293e4], edx
mov dword [0x429844], eax
call fcn.0040ff20
mov eax, dword [0x429844]
mov ecx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov edx, eax
sub eax, 0x24d96eca
xor edx, 0x803168c6
mov dword [0x429844], eax
mov dword [0x4293e4], edx
mov dl, byte [ecx]
test dl, dl
je 0x40b958
sub edx, 0x30
cmp dl, 9
jbe 0x40b955
or eax, 0x18645feb
mov dword [0x4293e4], eax
jmp 0x40b958
inc ecx
jmp 0x40b93b
sub dword [0x4293e4], 0x313f7507
xor eax, eax
cmp word [eax + str.The_cloud_file_provider_is_not_running.], 0
je 0x40b97d
add eax, 2
cmp eax, 0x17e
jne 0x40b964
call fcn.00413064
mov eax, dword [0x4293e4]
imul edx, eax, 0xa4921696
xor eax, 0x35e08b36
mov dword [0x4293e4], eax
mov eax, dword [ebx + 0x10]
mov dword [0x429844], edx
mov dword [esp], eax
call fcn.0040d2a0
mov edi, eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebx + 0x14]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d204
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0xc]
add eax, dword [ebp - 0x80]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.004010bf
test eax, eax
je 0x40bd30
imul eax, dword [0x4293e4], 0x90ab0a37
mov dword [0x429844], eax
mov eax, dword [ebp - 0x9c]
cmp word [eax + str.The_cloud_file_provider_is_not_running.], 0
je 0x40ba38
add dword [ebp - 0x9c], 2
cmp dword [ebp - 0x9c], 0x2dce
jne 0x40ba01
call fcn.004124d4
imul eax, dword [0x4293e4], 0xaa66e0d8
mov dword [0x429844], eax
mov eax, dword [0x429844]
mov ebx, 0x100
or eax, 0x1bd297e3
mov dword [0x4293e4], eax
mov edx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov al, byte [edx]
test al, al
je 0x40ba72
sub eax, 0x30
cmp al, 9
jbe 0x40ba6f
mov eax, dword [0x4293e4]
and eax, 0xd8a18ad9
mov dword [0x429844], eax
jmp 0x40ba72
inc edx
jmp 0x40ba51
mov eax, dword [0x429844]
add eax, 0x7dbcddad
mov dword [0x4293e4], eax
call fcn.00414158
mov eax, dword [0x4293e4]
lea edx, [eax - 0x668a424f]
sub eax, 0x31258996
mov dword [0x4293e4], edx
mov dword [0x429844], eax
call dword [sym.imp.USER32.dll_GetShellWindow]
or eax, 0x17616dd0
xor eax, 0xaedeeb5
mov dword [0x429844], eax
dec ebx
jne 0x40ba4c
mov ebx, 0x100
mov eax, dword [0x4293e4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetLastActivePopup]
xor eax, eax
push esi
cmp byte [eax + str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_], 0
je 0x40baf1
inc eax
cmp eax, 0x1541
jne 0x40bacf
imul eax, dword [0x429844], 0xd4eb3fd8
mov dword [0x429844], eax
jmp 0x40baf8
cmp eax, 0x11aa
jle 0x40bafd
call fcn.00414158
imul eax, dword [0x429844], 0xd7bbaa0f
mov dword [0x4293e4], eax
mov dword [esp + 8], str.LoadResource_API_exit
mov dword [esp + 4], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
dec ebx
jne 0x40babe
mov ebx, 0x41
mov ecx, str.No_system_quota_limits_are_specifically_set_for_this_account.
mov edx, 0x1f9d
movzx eax, byte [ecx]
inc ecx
test al, al
je 0x40bb5d
add edx, eax
cmp edx, 0x19aa
jbe 0x40bb3a
call fcn.0041264c
or dword [0x429844], 0x819bb85b
jmp 0x40bb6f
mov eax, dword [0x4293e4]
sub eax, 0x41451dd8
cmp edx, 0x19aa
jbe 0x40bb9e
mov dword [esp + 0xc], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 8], str.LoadResource_API_exit
mov eax, dword [0x429844]
mov dword [esp], str.The_cloud_file_provider_is_not_running.
mov dword [esp + 4], eax
call fcn.004142c0
imul eax, dword [0x429844], 0xaf1402c8
mov dword [0x429844], eax
imul eax, eax, 0x723df06c
mov dword [0x4293e4], eax
mov dword [esp + 8], str.No_system_quota_limits_are_specifically_set_for_this_account.
mov dword [esp + 4], str.LoadResource_API_exit
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0041496c
mov eax, dword [0x4293e4]
sub eax, 0x2c11f3b2
mov dword [0x4293e4], eax
dec ebx
jne 0x40bb30
and eax, 0x668ccc9a
xor eax, 0x9a4c6326
mov dword [0x429844], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
xor eax, 0x765daa98
mov dword [0x4293e4], eax
mov dword [esp], edi
call fcn.0040d2e4
mov eax, dword [0x429844]
mov ecx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
imul edx, eax, 0x59cef4dd
mov dword [0x4293e4], edx
mov dl, byte [ecx]
test dl, dl
je 0x40bc3e
sub edx, 0x30
cmp dl, 9
jbe 0x40bc3b
mov edx, eax
or edx, 0x9d4a41c
mov dword [0x4293e4], edx
jmp 0x40bc3e
inc ecx
jmp 0x40bc1d
add eax, 0x599d6854
mov dword [0x429844], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov dword [esp + 8], str.LoadResource_API_exit
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.004142c0
mov eax, dword [0x429844]
xor ecx, ecx
add eax, 0x6c5f2c89
mov dword [0x4293e4], eax
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010dd
mov edx, dword [0x4293e4]
mov eax, edx
and eax, 0x30a84b90
sub eax, 0x2a670a70
mov dword [0x429844], eax
mov dword [esp + 4], edx
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
mov edx, str.RtlDosPathNameToNtPathName_U_WithStatus_failed___x_
mov ecx, 0xb19
movzx eax, byte [edx]
inc edx
test al, al
je 0x40bd02
add ecx, eax
cmp ecx, 0x1739
jbe 0x40bcbc
call fcn.0040ff20
mov eax, dword [0x4293e4]
mov edx, eax
xor edx, 0x4702955d
mov dword [0x429844], edx
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
mov eax, dword [0x4293e4]
xor eax, 0x9ee22f41
jmp 0x40bd0c
mov eax, dword [0x4293e4]
sub eax, 0xafa5582
and dword [0x429844], 0xbb2ab5af
mov dword [0x4293e4], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_cloud_file_provider_is_not_running.
call fcn.0040efac
jmp 0x40b565
mov dword [esp], edi
add ebx, 0x28
call fcn.0040d2e4
inc dword [ebp - 0xa4]
jmp 0x40b8e7
mov dword [esp], 0x2cc
call fcn.0040d2a0
mov ebx, eax
mov eax, dword [ebp - 0xb0]
or eax, 0x10007
mov dword [ebx], eax
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010c9
mov eax, dword [esi + 0x28]
add eax, dword [ebp - 0x80]
mov dword [ebx + 0xb0], eax
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010d3
xor eax, eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x80]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x2c]
add eax, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call fcn.004010bf
xor edx, edx
imul eax, dword [0x429844], 0x8aaed412
sub dword [0x4293e4], 0x48f634e8
mov dword [0x429844], eax
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
call fcn.004010dd
mov dword [esp], ebx
mov ebx, 1
call fcn.0040d2e4
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
push ebp
mov ecx, 4
xor edx, edx
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x28]
mov esi, 0x4160f8
push ebx
sub esp, 0x2c
mov eax, dword [0x4293f4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x2400
mov ebx, ecx
sub ebx, dword [ebp + edx*4 - 0x28]
inc edx
or eax, 0xc447f16
mov ecx, ebx
cmp edx, 4
jne 0x40d81c
add eax, 0x556fde5d
mov ecx, str.Error_getting_ptr_to_tag_data
mov dword [0x4293fc], eax
movzx edi, byte [ecx]
lea edx, [edi - 0x30]
cmp dl, 9
ja 0x40d84c
inc ecx
jmp 0x40d83e
imul eax, eax, 0xd9d06119
mov esi, 0x2a
add eax, 0x1b31998b
mov dword [0x4293f4], eax
cmp byte [str.The_configuration_database_is_full.], 0
je 0x40d874
add dword [0x4293f4], 0x6a557274
mov eax, dword [0x4293f4]
and eax, 0xe50a7ca1
or eax, 0x200a0c21
mov dword [0x4293f4], eax
mov eax, dword [0x4293fc]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov edx, str.BaseQueryModuleData
push ecx
mov ecx, 0x343
and dword [0x4293fc], 0xa98ee6c1
movzx eax, byte [edx]
inc edx
test al, al
je 0x40d8f9
add ecx, eax
cmp ecx, 0x234c
jbe 0x40d8ab
mov dword [esp + 4], str.BaseQueryModuleData
mov eax, dword [0x4293f4]
mov dword [esp], eax
call fcn.00414488
mov eax, dword [0x4293f4]
sub eax, 0x4bf1a7cd
mov dword [0x4293fc], eax
mov dword [esp + 8], str.Signature
mov dword [esp + 4], eax
mov dword [esp], str.The_configuration_database_is_full.
call fcn.00413308
mov eax, dword [0x4293fc]
mov edx, eax
xor edx, 0x7ecea2b8
mov dword [0x4293f4], edx
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.The_configuration_database_is_full.
mov dword [esp], str.Error_getting_ptr_to_tag_data
call fcn.00413ae4
mov eax, dword [0x4293f4]
or eax, 0xc82f6266
mov dword [0x4293fc], eax
dec esi
jne 0x40d861
mov ecx, str.The_configuration_database_is_full.
movzx edi, byte [ecx]
lea edx, [edi - 0x30]
cmp dl, 9
ja 0x40d951
inc ecx
jmp 0x40d943
add eax, 0x7227285b
mov dword [0x4293f4], eax
mov dword [esp + 0xc], str.Access_to_the_cloud_file_is_denied.
mov dword [esp + 8], str.SdbpCheckMatchingText
mov dword [esp + 4], str.ServerNt
mov dword [esp], str.Error_getting_ptr_to_tag_data
call fcn.004151b8
mov edx, str.Error_getting_ptr_to_tag_data
mov ecx, 0xfb
movzx eax, byte [edx]
inc edx
test al, al
je 0x40d9c0
add ecx, eax
cmp ecx, 0xca8
jbe 0x40d989
call fcn.0041373c
imul eax, dword [0x4293f4], 0x9b665a74
mov dword [0x4293fc], eax
call fcn.00411074
mov eax, dword [0x4293fc]
sub eax, 0x41fb0e76
jmp 0x40d9ca
mov eax, dword [0x4293fc]
xor eax, 0x3ef65531
mov dword [0x4293fc], eax
shl ebx, 0xa
imul eax, dword [0x4293f4], 0xc199c501
mov dword [0x4293f4], eax
call fcn.00411074
mov esi, dword [0x41611c]
xor dword [0x4293fc], 0xdda01667
mov dword [esp], ebx
call fcn.0040d2a0
xor edx, edx
mov dword [esi + 0x4c], eax
mov eax, dword [0x41611c]
mov dword [eax + 0x50], edx
call fcn.0040a7ec
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp 0x40a9ec