Function at 0x410872
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cdd8e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x644
push str.LocalScanDirectory
lea ecx, [ebp - 0x2ac]
call fcn.00404f76
and dword [ebp - 4], 0
lea ecx, [ebp - 0x3d0]
call fcn.0042583a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x30], eax
cmp dword [ebp + 0x18], 0
je 0x4108c8
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x28]
call fcn.004054e3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.004054e3
mov byte [ebp - 4], 3
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00405662
lea ecx, [ebp - 0x28]
call fcn.004085af
dec eax
push eax
lea ecx, [ebp - 0x28]
call fcn.00405ab8
movsx eax, byte [eax]
cmp eax, 0x5c
je 0x410937
push 0x4dae74
lea ecx, [ebp - 0x1ad]
call fcn.004053d4
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1ad]
push eax
lea ecx, [ebp - 0x28]
call fcn.00406100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1ad]
call fcn.004055b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00405662
push 0x4dae78
lea ecx, [ebp - 0x19b]
call fcn.004053d4
mov byte [ebp - 4], 5
lea eax, [ebp - 0x19b]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00406100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x19b]
call fcn.004055b0
and dword [ebp - 0x40], 0
push 0x4dae78
mov ecx, dword [ebp + 0xc]
call fcn.004058ee
movzx eax, al
test eax, eax
je 0x410994
mov dword [ebp - 0x40], 1
and dword [ebp - 0x4c], 0
jmp 0x4109a1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x41114f
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040c9cb
pop ecx
pop ecx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffff
je 0x411117
mov eax, dword [ebp - 0x510]
and eax, 0x10
je 0x410bc9
push 0x4dae7c
lea eax, [ebp - 0x4e4]
push eax
call fcn.004b6232
pop ecx
pop ecx
test eax, eax
je 0x410bc4
push 0x4dae80
lea eax, [ebp - 0x4e4]
push eax
call fcn.004b6232
pop ecx
pop ecx
test eax, eax
je 0x410bc4
push 0x1d
call fcn.0040245f
pop ecx
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x60], 0
je 0x410a31
mov ecx, dword [ebp - 0x60]
call fcn.00425880
mov dword [ebp - 0x6c], eax
jmp 0x410a35
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
call fcn.00405662
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x189]
call fcn.004053d4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x189]
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
call fcn.00406100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x189]
call fcn.004055b0
push 0x4dae74
lea ecx, [ebp - 0x192]
call fcn.004053d4
mov byte [ebp - 4], 8
lea eax, [ebp - 0x192]
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
call fcn.00406100
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x192]
call fcn.004055b0
push 1
push dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
add eax, 0x10
push eax
call fcn.0040fbe2
add esp, 0xc
movzx eax, al
test eax, eax
je 0x410b7a
push 0
mov eax, dword [ebp - 0x18]
add eax, 0x10
push eax
push str.Excluding_directory:
lea eax, [ebp - 0x27c]
push eax
call fcn.00405b42
add esp, 0xc
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xcc]
call fcn.00405b2a
push eax
push str.DSCAN
push 0x342
push str.D:projectsUTIL_srcgdir.cpp
call fcn.00404405
add esp, 0x14
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x27c]
call fcn.004055b0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x410b71
push 1
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
call dword [eax + 8]
mov dword [ebp - 0x120], eax
jmp 0x410b78
and dword [ebp - 0x120], 0
jmp 0x410bc4
cmp dword [ebp + 0x20], 0
jl 0x410bb6
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x10]
call dword [eax + 8]
cmp dword [ebp + 0x20], eax
jge 0x410bb6
push dword [ebp - 0x18]
push dword [ebp + 0x20]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x10]
call dword [eax + 0x34]
push eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x10]
call dword [eax + 0x18]
mov eax, dword [ebp + 0x20]
inc eax
mov dword [ebp + 0x20], eax
jmp 0x410bc4
push dword [ebp - 0x18]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x10]
call dword [eax + 0xc]
jmp 0x4110f4
cmp dword [ebp - 0x40], 0
je 0x4110f4
lea ecx, [ebp - 0x174]
call fcn.004054e3
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x273]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 0xb
push dword [ebp - 0x128]
lea ecx, [ebp - 0x174]
call fcn.00405662
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x273]
call fcn.004055b0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x174]
push eax
call fcn.0040fbe2
add esp, 0xc
mov byte [ebp - 0x29], al
movzx eax, byte [ebp - 0x29]
test eax, eax
jne 0x4110e5
push 0x1a5
call fcn.0040245f
pop ecx
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x74], 0
je 0x410c76
mov ecx, dword [ebp - 0x74]
call fcn.00409f67
mov dword [ebp - 0x58], eax
jmp 0x410c7a
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.0040a406
cmp dword [ebp + 0x1c], 0
je 0x4110d7
lea ecx, [ebp - 0x394]
call fcn.0042709d
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x10]
add eax, 0x3c
push eax
lea eax, [ebp - 0x1da]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 0xe
push dword [ebp - 0x98]
lea ecx, [ebp - 0x394]
call fcn.00427762
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1da]
call fcn.004055b0
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x394]
call fcn.004272dc
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xa0]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x154
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x258]
call fcn.004055b0
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x394]
call fcn.0042736e
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xa8]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x15d
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1ec]
call fcn.004055b0
lea eax, [ebp - 0x285]
push eax
lea ecx, [ebp - 0x394]
call fcn.00427400
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xb4]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x166
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x285]
call fcn.004055b0
lea eax, [ebp - 0x1fe]
push eax
lea ecx, [ebp - 0x394]
call fcn.0042763e
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xc0]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x16f
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1fe]
call fcn.004055b0
lea eax, [ebp - 0x26a]
push eax
lea ecx, [ebp - 0x394]
call fcn.004276d0
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xc8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xc8]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x178
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x26a]
call fcn.004055b0
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x394]
call fcn.00427858
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xd0]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x181
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x210]
call fcn.004055b0
lea eax, [ebp - 0x297]
push eax
lea ecx, [ebp - 0x394]
call fcn.004278ea
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x144]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x18a
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x297]
call fcn.004055b0
lea eax, [ebp - 0x222]
push eax
lea ecx, [ebp - 0x394]
call fcn.0042797c
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x124]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x193
call fcn.0040574c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x222]
call fcn.004055b0
mov ecx, dword [ebp - 0x10]
call fcn.0040c896
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0xac], 0
ja 0x4110c8
jb 0x410fbf
cmp dword [ebp - 0xb0], 0x2faf080
jae 0x4110c8
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x10]
add eax, 0x150
push eax
lea eax, [ebp - 0xe4]
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x3c
push eax
lea eax, [ebp - 0x1bf]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xec]
call fcn.00405b2a
push eax
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
je 0x411021
mov dword [ebp - 0x70], 1
jmp 0x411025
and dword [ebp - 0x70], 0
mov al, byte [ebp - 0x70]
mov byte [ebp - 0x19], al
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1bf]
call fcn.004055b0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x41104c
mov eax, dword [ebp - 0x10]
and dword [eax + 0x150], 0
mov eax, dword [ebp - 0x10]
add eax, 0x3c
push eax
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xf4], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xf4]
call fcn.00405b2a
push eax
lea ecx, [ebp - 0x1a4]
call fcn.004053d4
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x10]
add eax, 0x19c
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.00434906
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1a4]
call fcn.004055b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x234]
call fcn.004055b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x394]
call fcn.00427188
push dword [ebp - 0x10]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x14]
call dword [eax + 0xc]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.004055b0
lea eax, [ebp - 0x510]
push eax
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4109ca
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x41114f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x41114a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x41114a
lea ecx, [ebp - 0x3c]
call fcn.00405b2a
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.FindFirstFile:_returned_windows_error:__ld_on_dir__s_r_n
call fcn.00403bd8
add esp, 0xc
jmp 0x41099a
cmp dword [ebp - 0x40], 0
je 0x411190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.004055b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004055b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3d0]
call fcn.00425937
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ac]
call fcn.004050e2
jmp 0x41178a
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00405662
push dword [ebp + 0xc]
lea ecx, [ebp - 0x3c]
call fcn.00406100
and dword [ebp - 0x50], 0
jmp 0x4111b4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x411754
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040c9cb
pop ecx
pop ecx
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x411726
mov eax, dword [ebp - 0x650]
and eax, 0x10
jne 0x411701
lea ecx, [ebp - 0x180]
call fcn.004054e3
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x28e]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xfc], eax
mov byte [ebp - 4], 0x1b
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x180]
call fcn.00405662
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x28e]
call fcn.004055b0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x180]
push eax
call fcn.0040fbe2
add esp, 0xc
mov byte [ebp - 0x2a], al
movzx eax, byte [ebp - 0x2a]
test eax, eax
jne 0x4116f2
push 0x1a5
call fcn.0040245f
pop ecx
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x68], 0
je 0x41128f
mov ecx, dword [ebp - 0x68]
call fcn.00409f67
mov dword [ebp - 0x5c], eax
jmp 0x411293
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x134], eax
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x650]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0040a406
cmp dword [ebp + 0x1c], 0
je 0x4116e4
lea ecx, [ebp - 0x320]
call fcn.0042709d
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x14]
add eax, 0x3c
push eax
lea eax, [ebp - 0x246]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x15c], eax
mov byte [ebp - 4], 0x1e
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x320]
call fcn.00427762
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x246]
call fcn.004055b0
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x320]
call fcn.004272dc
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x13c]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x154
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1c8]
call fcn.004055b0
lea eax, [ebp - 0x1d1]
push eax
lea ecx, [ebp - 0x320]
call fcn.0042736e
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x154], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x154]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x15d
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1d1]
call fcn.004055b0
lea eax, [ebp - 0x1e3]
push eax
lea ecx, [ebp - 0x320]
call fcn.00427400
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0xd4]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x166
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1e3]
call fcn.004055b0
lea eax, [ebp - 0x1f5]
push eax
lea ecx, [ebp - 0x320]
call fcn.0042763e
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0xe0]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x16f
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1f5]
call fcn.004055b0
lea eax, [ebp - 0x207]
push eax
lea ecx, [ebp - 0x320]
call fcn.004276d0
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xf0]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x178
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x207]
call fcn.004055b0
lea eax, [ebp - 0x219]
push eax
lea ecx, [ebp - 0x320]
call fcn.00427858
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x100], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x100]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x181
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x219]
call fcn.004055b0
lea eax, [ebp - 0x22b]
push eax
lea ecx, [ebp - 0x320]
call fcn.004278ea
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x110], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x110]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x18a
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x22b]
call fcn.004055b0
lea eax, [ebp - 0x23d]
push eax
lea ecx, [ebp - 0x320]
call fcn.0042797c
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x7c]
call fcn.00405b2a
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x193
call fcn.0040574c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x23d]
call fcn.004055b0
mov ecx, dword [ebp - 0x14]
call fcn.0040c896
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 0
ja 0x4116d5
jb 0x4115cc
cmp dword [ebp - 0xbc], 0x2faf080
jae 0x4116d5
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x14]
add eax, 0x150
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x14]
add eax, 0x3c
push eax
lea eax, [ebp - 0x24f]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x94]
call fcn.00405b2a
push eax
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
je 0x41162e
mov dword [ebp - 0x64], 1
jmp 0x411632
and dword [ebp - 0x64], 0
mov al, byte [ebp - 0x64]
mov byte [ebp - 0x1a], al
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x24f]
call fcn.004055b0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x411659
mov eax, dword [ebp - 0x14]
and dword [eax + 0x150], 0
mov eax, dword [ebp - 0x14]
add eax, 0x3c
push eax
lea eax, [ebp - 0x261]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405cc1
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xa4]
call fcn.00405b2a
push eax
lea ecx, [ebp - 0x1b6]
call fcn.004053d4
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x14]
add eax, 0x19c
push eax
lea eax, [ebp - 0x1b6]
push eax
call fcn.00434906
pop ecx
pop ecx
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1b6]
call fcn.004055b0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x261]
call fcn.004055b0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x320]
call fcn.00427188
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x14]
call dword [eax + 0xc]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x180]
call fcn.004055b0
lea eax, [ebp - 0x650]
push eax
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4111dd
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x411754
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x41174f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x41174f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.FindFirstFile:_returned_windows_error:__ld_r_n
call fcn.00403bd8
pop ecx
pop ecx
jmp 0x4111ad
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.004055b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004055b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3d0]
call fcn.00425937
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ac]
call fcn.004050e2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret