Function at 0x4025c4
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18c
lea esi, [ebp - 0x17c]
mov dword [esp], esi
call fcn.004020fc
mov dword [ebp - 0x2c], 0x43b004
mov dword [ebp - 0x28], 0x44032c
mov dword [ebp - 0x24], ebp
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x24], 0x4030c1
mov dword [ebp - 0x40], 1
lea eax, [ebp - 0x48]
call fcn.0043bc6d
mov dword [esp + 4], esi
lea eax, [ebp - 0xac]
mov dword [esp], eax
mov dword [esp + 8], str.INetCache_Exiftool_Cleaning.bat
call fcn.0040339c
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x40], 2
lea eax, [ebp - 0x90]
mov dword [esp], eax
mov dword [esp + 8], 0x2a
mov dword [esp + 4], str._LOCALAPPDATA_MicrosoftWindowsINetCache
call fcn.004144c4
mov dword [ebp - 0x40], 3
lea eax, [ebp - 0xac]
mov dword [esp + 4], eax
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 0xc], 0x1b6
mov dword [esp + 8], 1
call fcn.0040235c
mov eax, dword [ebp - 0x160]
mov eax, dword [eax - 0xc]
mov esi, dword [ebp + eax - 0x158]
mov dword [ebp - 0x160], 0x41c9e0
lea edi, [ebp - 0xf8]
mov dword [ebp - 0xf8], 0x41c9f4
lea eax, [ebp - 0x150]
mov dword [esp], eax
call fcn.00417ff8
mov dword [esp], edi
call fcn.0041d008
cmp esi, 0
je 0x402f1d
mov dword [ebp - 0x40], 8
lea eax, [ebp - 0xac]
mov dword [esp + 4], eax
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 0xc], 0x1b6
mov dword [esp + 8], 2
call fcn.004035a0
cmp dword [ebp - 0x114], 0
je 0x402f8c
mov dword [ebp - 0x40], 9
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str._echo_off
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0xa
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0xb
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0xc
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0xd
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.setlocal_enabledelayedexpansion
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0xe
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0xf
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x10
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x11
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.set__search_dir
call fcn.0040167c
mov dword [ebp - 0x40], 0x12
lea ecx, [ebp - 0x90]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004037cc
mov dword [ebp - 0x40], 0x13
mov dword [esp], eax
mov dword [esp + 4], 0x43f56b
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x14
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x15
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x16
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x17
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.dir__s__b__a:_d___search_dir_____temp_file_list.txt
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x18
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x19
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x1a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x1b
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.for__f__tokens____A_in__temp_file_list.txt__do__
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x1d
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x1e
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x1f
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____set__file__A_
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x20
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x21
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x22
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x23
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____set__filename_file:_search_dir___
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x24
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x25
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x26
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x27
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____echo__filename___find__i__exif____nul
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x28
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x29
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x2a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x2b
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____if_not_errorlevel_1__
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x2c
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x2d
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x2e
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x2f
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.________for___F_in____file____do__
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x30
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x31
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x32
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x33
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____________rd__s__q____dpF_
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x34
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x35
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x36
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x37
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.____________echo__V__Deleted_Exiftool.exe_in_:__file_
call fcn.0040167c
mov ecx, dword [eax]
mov ecx, dword [ecx - 0xc]
add ecx, eax
mov dword [ebp - 0x40], 0x38
mov dword [esp], ecx
mov dword [esp + 4], 0xa
mov dword [ebp - 0x10], eax
call fcn.00415f68
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], 0x39
movsx eax, al
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00415d08
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], 0x3a
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x3b
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str._________
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x3c
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x3d
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x3e
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x3f
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str._____
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x40
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x41
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x42
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x43
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], 0x43f6db
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x44
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x45
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x46
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x47
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.Del_temp_file_list.txt
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x48
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x49
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x4a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x4b
lea eax, [ebp - 0x160]
mov dword [esp], eax
mov dword [esp + 4], str.exit
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x4c
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x4d
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x4e
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x40], 0x4f
lea eax, [ebp - 0x160]
mov dword [esp], eax
call fcn.00401ff0
mov dword [ebp - 0x40], 0x50
mov dword [esp + 4], str.Batch_file
mov dword [esp], 0x4460c0
call fcn.0040167c
mov dword [ebp - 0x40], 0x51
lea ecx, [ebp - 0xac]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004037cc
mov dword [ebp - 0x40], 0x52
mov dword [esp], eax
mov dword [esp + 4], str._has_been_created_successfully.
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x53
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x54
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x55
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
jmp 0x40300f
mov dword [ebp - 0x40], 4
mov dword [esp + 4], str.Error:_INetCache_Exiftool_Cleaning.bat_already_exists_in_the_current_directory.
mov dword [esp], 0x446168
call fcn.0040167c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 5
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 6
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 7
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
jmp 0x40303f
mov dword [ebp - 0x40], 0x56
mov dword [esp + 4], str.Error:_Unable_to_create_batch_file
mov dword [esp], 0x446168
call fcn.0040167c
mov dword [ebp - 0x40], 0x57
lea ecx, [ebp - 0xac]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004037cc
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, ecx
mov dword [ebp - 0x40], 0x58
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00415f68
mov dword [ebp - 0x40], 0x59
movsx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00415d08
mov dword [ebp - 0x40], 0x5a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004154a0
mov dword [ebp - 0x160], 0x41c8cc
lea esi, [ebp - 0x108]
mov dword [ebp - 0x108], 0x41c8e0
lea eax, [ebp - 0x15c]
mov dword [esp], eax
call fcn.00417ff8
mov dword [esp], esi
call fcn.0041d008
mov ecx, dword [ebp - 0x78]
cmp ecx, 0x10
jb 0x403061
mov eax, dword [ebp - 0x8c]
inc ecx
cmp ecx, 0x1000
jb 0x403059
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.0041cb44
mov ecx, dword [ebp - 0x94]
cmp ecx, 0x10
jb 0x403086
mov eax, dword [ebp - 0xa8]
inc ecx
cmp ecx, 0x1000
jb 0x40307e
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.0041cb44
mov ecx, dword [ebp - 0x164]
cmp ecx, 0x10
jb 0x4030ab
mov eax, dword [ebp - 0x178]
inc ecx
cmp ecx, 0x1000
jb 0x4030a3
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.0041cb44
lea eax, [ebp - 0x48]
mov dword [esp], eax
call fcn.0043bc8e
add esp, 0x18c
pop esi
pop edi
pop ebx
pop ebp
ret