Function at 0x432ec0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47dd4b
mov eax, dword fs:[0]
push eax
sub esp, 0x164
push ebx
push esi
push edi
mov eax, dword [0x4bc00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb4], ecx
call fcn.00403ac0
mov ecx, eax
test ecx, ecx
je 0x43619d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.004686b0
mov byte [ebp - 4], 3
push 0x48fb30
lea ecx, [ebp - 0x14]
call fcn.0045fcf0
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0x1c]
mov eax, edi
mov dword [ebp - 0x8c], eax
xor esi, esi
mov dword [ebp - 0xbc], esi
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswspace]
movzx eax, word [eax]
test ax, ax
je 0x432fa0
push eax
call ebx
add esp, 4
test eax, eax
je 0x432f84
mov eax, dword [ebp - 0x8c]
test esi, esi
jne 0x432f92
mov esi, eax
mov dword [ebp - 0xbc], esi
add eax, 2
mov dword [ebp - 0x8c], eax
mov edi, dword [ebp - 0x1c]
jmp 0x432f52
xor esi, esi
mov dword [ebp - 0xbc], esi
mov eax, dword [ebp - 0x8c]
add eax, 2
mov dword [ebp - 0x8c], eax
mov edi, dword [ebp - 0x1c]
jmp 0x432f52
test esi, esi
je 0x432fe3
sub esi, edi
sar esi, 1
js 0x4361a7
mov ecx, 1
sub ecx, dword [edi - 4]
mov eax, dword [edi - 8]
sub eax, esi
or eax, ecx
jge 0x432fcb
push esi
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov edi, dword [ebp - 0x1c]
cmp esi, dword [edi - 8]
jg 0x4361a7
mov dword [edi - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + esi*2], cx
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], edi
movzx eax, word [edi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x432ffb
add edi, 2
jmp 0x432fe3
mov eax, dword [ebp - 0x1c]
cmp edi, eax
je 0x43307e
sub edi, eax
sar edi, 1
mov esi, dword [eax - 0xc]
test esi, esi
js 0x4361b1
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, esi
or ecx, edx
jge 0x43302e
push esi
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + edi*2]
mov dword [ebp - 0xc0], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, edi
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x30]
call fcn.0045f3b0
add esp, 4
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4330b5
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push str.D:BackUp_
lea ecx, [ebp - 0x2c]
call fcn.0045fcf0
mov byte [ebp - 4], 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0x138]
call fcn.0045fcf0
mov byte [ebp - 4], 9
push str.Desktop_BackUp
lea ecx, [ebp - 0x13c]
call fcn.0045fcf0
mov byte [ebp - 4], 0xa
push 0x48db34
lea ecx, [ebp - 0x140]
call fcn.0045fcf0
mov byte [ebp - 4], 0xb
push str.Desktop
lea ecx, [ebp - 0x144]
call fcn.0045fcf0
mov byte [ebp - 4], 0xc
push str.Robocopy
lea ecx, [ebp - 0x148]
call fcn.0045fcf0
mov byte [ebp - 4], 0xd
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0x90], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xc4], edx
movzx eax, word [eax]
test ax, ax
je 0x433197
push eax
call ebx
add esp, 4
test eax, eax
je 0x433178
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x90]
test edx, edx
jne 0x433189
mov edx, eax
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x30]
jmp 0x433140
xor edx, edx
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x30]
jmp 0x433140
test edx, edx
je 0x4331e0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4361bb
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x4331c8
push edx
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x10c], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4331f8
add esi, 2
jmp 0x4331e0
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x433289
sub esi, eax
sar esi, 1
mov dword [ebp - 0x3c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x38], ecx
test ecx, ecx
js 0x4361c5
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x433238
push dword [ebp - 0x38]
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0x10c], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x64]
call fcn.0045f3b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x144]
push ecx
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.0045f3b0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x140]
push ecx
mov edx, eax
lea ecx, [ebp - 0x154]
call fcn.0045f3b0
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x10
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0x94], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x108], edx
movzx eax, word [eax]
test ax, ax
je 0x43333f
push eax
call ebx
add esp, 4
test eax, eax
je 0x433320
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
test edx, edx
jne 0x433331
mov edx, eax
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x2c]
jmp 0x4332e8
xor edx, edx
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x2c]
jmp 0x4332e8
test edx, edx
je 0x433388
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4361cf
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433370
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x104], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4333a0
add esi, 2
jmp 0x433388
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x433431
sub esi, eax
sar esi, 1
mov dword [ebp - 0x3c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x38], ecx
test ecx, ecx
js 0x4361d9
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4333e0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x104], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x150]
call fcn.0045f3b0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x13c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x14c]
call fcn.0045f3b0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x138]
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.0045f3b0
add esp, 0xc
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x14c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433498
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x150]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4334bd
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4334e2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433504
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433526
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x148]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43354b
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x144]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433570
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x140]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433595
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x13c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4335ba
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x138]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4335df
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x3c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433606
cmp ecx, dword [esi]
jne 0x433606
lock inc dword [eax]
jmp 0x433639
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x38], ecx
test ecx, ecx
je 0x4361e3
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x38]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x29
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045fcf0
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x26
or ecx, 0xffffffff
call fcn.00462c10
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x3c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433696
cmp ecx, dword [esi]
jne 0x433696
lock inc dword [eax]
jmp 0x4336c9
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x38], ecx
test ecx, ecx
je 0x4361e8
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x38]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x26
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x34]
call fcn.004642f0
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x80], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433712
cmp ecx, dword [esi]
jne 0x433712
lock inc dword [eax]
jmp 0x433745
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x64], ecx
test ecx, ecx
je 0x4361ed
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x64]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045fcf0
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push str.Desktop
lea ecx, [ebp - 0x134]
call fcn.0045fcf0
mov byte [ebp - 4], 0x31
push str.mkdir_C:Users_
lea ecx, [ebp - 0x128]
call fcn.0045fcf0
mov byte [ebp - 4], 0x32
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0x98], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x130], edx
movzx eax, word [eax]
test ax, ax
je 0x43380d
push eax
call ebx
add esp, 4
test eax, eax
je 0x4337ee
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
test edx, edx
jne 0x4337ff
mov edx, eax
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x98], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4337b6
xor edx, edx
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x98], eax
mov esi, dword [ebp - 0x1c]
jmp 0x4337b6
test edx, edx
je 0x433856
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4361f2
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x43383e
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x12c], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x43386e
add esi, 2
jmp 0x433856
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x4338ff
sub esi, eax
sar esi, 1
mov dword [ebp - 0x80], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x64], ecx
test ecx, ecx
js 0x4361fc
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4338ae
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x12c], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x80]
mov dword [ebp - 0x64], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x64]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x48]
call fcn.0045f3b0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x134]
push ecx
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.0045f3b0
add esp, 8
mov byte [ebp - 4], 0x34
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x43397d
cmp dword [esi + 0xc], 0
jl 0x433971
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x433971
call fcn.00403090
mov dword [ebp - 0x64], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433969
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x64]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x43397d
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030f0
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43399f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4339c1
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x128]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4339e6
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x134]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433a0b
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x78], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433a32
cmp ecx, dword [esi]
jne 0x433a32
lock inc dword [eax]
jmp 0x433a65
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x48], ecx
test ecx, ecx
je 0x436206
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x48]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_create_desktop_dircommand
call fcn.0045fcf0
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x78], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433ac2
cmp ecx, dword [esi]
jne 0x433ac2
lock inc dword [eax]
jmp 0x433af5
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x48], ecx
test ecx, ecx
je 0x43620b
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x48]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x44]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x3e
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x433b6b
cmp dword [esi + 0xc], 0
jl 0x433b5f
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x433b5f
call fcn.00403090
mov dword [ebp - 0x48], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433b57
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x48]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x433b6b
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030f0
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433b8d
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x48], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x433bb4
cmp ecx, dword [esi]
jne 0x433bb4
lock inc dword [eax]
jmp 0x433be7
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x44], ecx
test ecx, ecx
je 0x436210
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x44]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x41
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045fcf0
mov byte [ebp - 4], 0x42
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0xec]
call fcn.0045fcf0
mov byte [ebp - 4], 0x43
push str.Documents_BackUp
lea ecx, [ebp - 0xfc]
call fcn.0045fcf0
mov byte [ebp - 4], 0x44
push 0x48db34
lea ecx, [ebp - 0x100]
call fcn.0045fcf0
mov byte [ebp - 4], 0x45
push str.Documents
lea ecx, [ebp - 0x110]
call fcn.0045fcf0
mov byte [ebp - 4], 0x46
push str.Robocopy
lea ecx, [ebp - 0x114]
call fcn.0045fcf0
mov byte [ebp - 4], 0x47
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0xb0], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x124], edx
movzx eax, word [eax]
test ax, ax
je 0x433ceb
push eax
call ebx
add esp, 4
test eax, eax
je 0x433ccc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
test edx, edx
jne 0x433cdd
mov edx, eax
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0x30]
jmp 0x433c94
xor edx, edx
mov dword [ebp - 0x124], edx
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0x30]
jmp 0x433c94
test edx, edx
je 0x433d34
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x436215
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433d1c
push edx
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x120], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x433d4c
add esi, 2
jmp 0x433d34
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x433ddd
sub esi, eax
sar esi, 1
mov dword [ebp - 0x48], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x43621f
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x433d8c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0x120], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x44]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x58]
call fcn.0045f3b0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x110]
push ecx
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.0045f3b0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x100]
push ecx
mov edx, eax
lea ecx, [ebp - 0x158]
call fcn.0045f3b0
add esp, 0xc
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x4a
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0x9c], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x11c], edx
nop dword [eax]
movzx eax, word [eax]
test ax, ax
je 0x433e97
push eax
call ebx
add esp, 4
test eax, eax
je 0x433e78
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
test edx, edx
jne 0x433e89
mov edx, eax
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x2c]
jmp 0x433e40
xor edx, edx
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x2c]
jmp 0x433e40
test edx, edx
je 0x433ee0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x436229
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x433ec8
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x118], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x433ef8
add esi, 2
jmp 0x433ee0
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x433f89
sub esi, eax
sar esi, 1
mov dword [ebp - 0x48], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x436233
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x433f38
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0x118], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x44]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x78]
lea ecx, [ebp - 0x16c]
call fcn.0045f3b0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xfc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.0045f3b0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xec]
push ecx
mov edx, eax
lea ecx, [ebp - 0x15c]
call fcn.0045f3b0
add esp, 0xc
mov byte [ebp - 4], 0x4d
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x434022
cmp dword [esi + 0xc], 0
jl 0x434016
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434016
call fcn.00403090
mov dword [ebp - 0x44], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43400e
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x44]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x434022
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030f0
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x15c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434047
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x160]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43406c
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x16c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434091
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x51
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x158]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4340b6
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x52
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4340d8
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4340fa
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x114]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43411f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x55
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x110]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434144
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x56
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x100]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434169
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0xfc]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43418e
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0xec]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4341b3
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x7c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x4341da
cmp ecx, dword [esi]
jne 0x4341da
lock inc dword [eax]
jmp 0x43420d
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x58], ecx
test ecx, ecx
je 0x43623d
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x58]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x59
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045fcf0
mov byte [ebp - 4], 0x5b
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x7c], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43426a
cmp ecx, dword [esi]
jne 0x43426a
lock inc dword [eax]
jmp 0x43429d
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x58], ecx
test ecx, ecx
je 0x436242
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x58]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x5c
mov byte [ebp - 4], 0x5d
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x60]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x5e
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x434313
cmp dword [esi + 0xc], 0
jl 0x434307
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434307
call fcn.00403090
mov dword [ebp - 0x58], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4342ff
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x58]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x434313
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030f0
mov byte [ebp - 4], 0x5f
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434335
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x58], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43435c
cmp ecx, dword [esi]
jne 0x43435c
lock inc dword [eax]
jmp 0x43438f
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x60], ecx
test ecx, ecx
je 0x436247
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x60]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov byte [ebp - 4], 0x60
mov byte [ebp - 4], 0x61
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045fcf0
mov byte [ebp - 4], 0x62
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push str.Documents
lea ecx, [ebp - 0xcc]
call fcn.0045fcf0
mov byte [ebp - 4], 0x63
push str.mkdir_C:Users_
lea ecx, [ebp - 0xc8]
call fcn.0045fcf0
mov byte [ebp - 4], 0x64
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0xa0], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xe8], edx
movzx eax, word [eax]
test ax, ax
je 0x434457
push eax
call ebx
add esp, 4
test eax, eax
je 0x434438
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa0]
test edx, edx
jne 0x434449
mov edx, eax
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0x1c]
jmp 0x434400
xor edx, edx
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0x1c]
jmp 0x434400
test edx, edx
je 0x4344a0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43624c
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x434488
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0xf0], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4344b8
add esi, 2
jmp 0x4344a0
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x434549
sub esi, eax
sar esi, 1
mov dword [ebp - 0x58], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x60], ecx
test ecx, ecx
js 0x436256
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4344f8
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xf0], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x58]
mov dword [ebp - 0x60], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x60]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x4c]
call fcn.0045f3b0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xcc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.0045f3b0
add esp, 8
mov byte [ebp - 4], 0x66
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4345c7
cmp dword [esi + 0xc], 0
jl 0x4345bb
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4345bb
call fcn.00403090
mov dword [ebp - 0x60], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4345b3
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x60]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x4345c7
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030f0
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4345e9
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43460b
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x69
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0xc8]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434630
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x6a
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0xcc]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434655
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x74], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43467c
cmp ecx, dword [esi]
jne 0x43467c
lock inc dword [eax]
jmp 0x4346af
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x4c], ecx
test ecx, ecx
je 0x436260
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x4c]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov byte [ebp - 4], 0x6b
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_create_desktop_dir_command
call fcn.0045fcf0
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x74], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x43470c
cmp ecx, dword [esi]
jne 0x43470c
lock inc dword [eax]
jmp 0x43473f
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x4c], ecx
test ecx, ecx
je 0x436265
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x4c]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov byte [ebp - 4], 0x6e
mov byte [ebp - 4], 0x6f
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x54]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x70
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4347b5
cmp dword [esi + 0xc], 0
jl 0x4347a9
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4347a9
call fcn.00403090
mov dword [ebp - 0x4c], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4347a1
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x4c]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x4347b5
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030f0
mov byte [ebp - 4], 0x71
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4347d7
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x4c], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x4347fe
cmp ecx, dword [esi]
jne 0x4347fe
lock inc dword [eax]
jmp 0x434831
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x54], ecx
test ecx, ecx
je 0x43626a
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x54]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x72
mov byte [ebp - 4], 0x73
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045fcf0
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push str.__E__MOVE__XA:SH__W:5
lea ecx, [ebp - 0x5c]
call fcn.0045fcf0
mov byte [ebp - 4], 0x75
push str.Downloads_BackUp
lea ecx, [ebp - 0x6c]
call fcn.0045fcf0
mov byte [ebp - 4], 0x76
push 0x48db34
lea ecx, [ebp - 0x70]
call fcn.0045fcf0
mov byte [ebp - 4], 0x77
push str.Downloads
lea ecx, [ebp - 0xe4]
call fcn.0045fcf0
mov byte [ebp - 4], 0x78
push str.Robocopy
lea ecx, [ebp - 0xe0]
call fcn.0045fcf0
mov byte [ebp - 4], 0x79
mov esi, dword [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0xa4], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xd0], edx
movzx eax, word [eax]
test ax, ax
je 0x43492c
push eax
call ebx
add esp, 4
test eax, eax
je 0x43490d
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa4]
test edx, edx
jne 0x43491e
mov edx, eax
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0x30]
jmp 0x4348d5
xor edx, edx
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0x30]
jmp 0x4348d5
test edx, edx
je 0x434975
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x43626f
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x43495d
push edx
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0xd4], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x43498d
add esi, 2
jmp 0x434975
mov eax, dword [ebp - 0x30]
cmp esi, eax
je 0x434a1e
sub esi, eax
sar esi, 1
mov dword [ebp - 0x4c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x54], ecx
test ecx, ecx
js 0x436279
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x4349cd
push dword [ebp - 0x54]
lea ecx, [ebp - 0x30]
call fcn.004032e0
mov eax, dword [ebp - 0x30]
lea esi, [eax + esi*2]
mov dword [ebp - 0xd4], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x30]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0x50]
call fcn.0045f3b0
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.0045f3b0
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x70]
push ecx
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.0045f3b0
add esp, 0xc
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x7c
mov esi, dword [ebp - 0x2c]
mov eax, esi
mov dword [ebp - 0xa8], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xd8], edx
nop word [eax + eax]
movzx eax, word [eax]
test ax, ax
je 0x434ad7
push eax
call ebx
add esp, 4
test eax, eax
je 0x434ab8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
test edx, edx
jne 0x434ac9
mov edx, eax
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0x2c]
jmp 0x434a80
xor edx, edx
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0x2c]
jmp 0x434a80
test edx, edx
je 0x434b20
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x436283
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x434b08
push edx
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0xdc], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x434b38
add esi, 2
jmp 0x434b20
mov eax, dword [ebp - 0x2c]
cmp esi, eax
je 0x434bc9
sub esi, eax
sar esi, 1
mov dword [ebp - 0x4c], esi
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x54], ecx
test ecx, ecx
js 0x43628d
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
or ecx, edx
jge 0x434b78
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2c]
call fcn.004032e0
mov eax, dword [ebp - 0x2c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xdc], esi
mov edx, dword [eax - 0xc]
mov ecx, edx
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
lea ecx, [ecx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
js 0x4361a7
mov eax, dword [ebp - 0x2c]
cmp ecx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x74]
lea ecx, [ebp - 0x88]
call fcn.0045f3b0
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x6c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.0045f3b0
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x5c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x164]
call fcn.0045f3b0
add esp, 0xc
mov byte [ebp - 4], 0x7f
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x434c5c
cmp dword [esi + 0xc], 0
jl 0x434c50
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434c50
call fcn.00403090
mov dword [ebp - 0x54], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x434c48
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x54]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x434c5c
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030f0
mov byte [ebp - 4], 0x80
mov byte [ebp - 4], 0x7e
mov edx, dword [ebp - 0x164]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434c81
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7d
mov edx, dword [ebp - 0x168]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434ca6
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x7c
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434ccb
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0x7b
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434cf0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x84
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434d12
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x85
mov byte [ebp - 4], 0x79
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434d34
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x86
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0xe0]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434d59
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x87
mov byte [ebp - 4], 0x77
mov edx, dword [ebp - 0xe4]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434d7e
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x88
mov byte [ebp - 4], 0x76
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434da0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x89
mov byte [ebp - 4], 0x75
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434dc2
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x8a
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434de4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x68], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x434e0b
cmp ecx, dword [esi]
jne 0x434e0b
lock inc dword [eax]
jmp 0x434e3e
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x50], ecx
test ecx, ecx
je 0x436297
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x50]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov byte [ebp - 4], 0x8b
mov byte [ebp - 4], 0x8c
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_command
call fcn.0045fcf0
mov byte [ebp - 4], 0x8d
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
mov byte [ebp - 0x25], 1
add esp, 4
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x68], esp
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x434e9b
cmp ecx, dword [esi]
jne 0x434e9b
lock inc dword [eax]
jmp 0x434ece
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x50], ecx
test ecx, ecx
je 0x43629c
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x50]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov byte [ebp - 4], 0x8e
mov byte [ebp - 4], 0x8f
mov byte [ebp - 4], 0x2d
mov dl, byte [ebp - 0x25]
lea ecx, [ebp - 0x40]
call fcn.004642f0
add esp, 4
mov byte [ebp - 4], 0x90
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
cmp ecx, esi
je 0x434f44
cmp dword [esi + 0xc], 0
jl 0x434f38
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x434f38
call fcn.00403090
mov dword [ebp - 0x50], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x434f30
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x50]
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x434f44
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.004030f0
mov byte [ebp - 4], 0x91
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x434f66
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x50], esp
mov esi, dword [ebp - 0x34]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi + 0xc]
cmp dword [eax], 0
jl 0x434f8d
cmp ecx, dword [esi]
jne 0x434f8d
lock inc dword [eax]
jmp 0x434fc0
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ecx, eax
mov dword [ebp - 0x40], ecx
test ecx, ecx
je 0x4362a1
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov edx, dword [esi + 4]
inc edx
push edx
lea eax, [esi + 0x10]
push eax
add ecx, 0x10
call fcn.004031f0
add esp, 8
mov esi, dword [ebp - 0x40]
lea eax, [esi + 0x10]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov byte [ebp - 4], 0x92
mov byte [ebp - 4], 0x93
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.moveDesktop_Download_Documents_ContentTo_D_Drive_result
call fcn.0045fcf0
mov byte [ebp - 4], 0x94
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.00462c10
add esp, 8
push str.Downloads
lea ecx, [ebp - 0x38]
call fcn.0045fcf0
mov byte [ebp - 4], 0x95
push str.mkdir_C:Users_
lea ecx, [ebp - 0x3c]
call fcn.0045fcf0
mov byte [ebp - 4], 0x96
mov esi, dword [ebp - 0x1c]
mov eax, esi
mov dword [ebp - 0xac], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xf4], edx
nop dword [eax + eax]
movzx eax, word [eax]
test ax, ax
je 0x435087
push eax
call ebx
add esp, 4
test eax, eax
je 0x435068
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xac]
test edx, edx
jne 0x435079
mov edx, eax
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0x1c]
jmp 0x435030
xor edx, edx
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x14], edx
add eax, 2
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0x1c]
jmp 0x435030
test edx, edx
je 0x4350d0
sub edx, esi
sar edx, 1
mov dword [ebp - 0x14], edx
js 0x4362a6
mov ecx, 1
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
sub eax, edx
or eax, ecx
jge 0x4350b8
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
cmp edx, dword [esi - 8]
jg 0x4361a7
mov dword [esi - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + edx*2], cx
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0xf8], esi
movzx eax, word [esi]
push eax
call ebx
add esp, 4
test eax, eax
je 0x4350e8
add esi, 2
jmp 0x4350d0
mov eax, dword [ebp - 0x1c]
cmp esi, eax
je 0x435169
sub esi, eax
sar esi, 1
mov dword [ebp - 0x40], esi
mov edx, dword [eax - 0xc]
test edx, edx
js 0x4362b0
mov ebx, 1
sub ebx, dword [eax - 4]
mov ecx, dword [eax - 8]
sub ecx, edx
or ecx, ebx
jge 0x43511e
push edx
lea ecx, [ebp - 0x1c]
call fcn.004032e0
mov eax, dword [ebp - 0x1c]
lea esi, [eax + esi*2]
mov dword [ebp - 0xf8], esi
mov edx, dword [eax - 0xc]
mov ebx, edx
sub ebx, dword [ebp - 0x40]
lea ecx, [ebx*2 + 2]
push ecx
push esi
lea ecx, [edx*2 + 2]
push ecx
push eax
call fcn.00460b50
add esp, 0x10
test ebx, ebx
js 0x4361a7
mov eax, dword [ebp - 0x1c]
cmp ebx, dword [eax - 8]
jg 0x4361a7
mov dword [eax - 0xc], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov word [eax + ebx*2], cx
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x18]
call fcn.0045f3b0
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x38]
push ecx
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.0045f3b0
add esp, 8
mov byte [ebp - 4], 0x98
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov esi, dword [ebp - 0x20]
add esi, 0xfffffff0
cmp ecx, esi
je 0x4351e0
lea ebx, [esi + 0xc]
cmp dword [ebx], 0
jl 0x4351d4
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4351d4
call fcn.00403090
mov dword [ebp - 0x40], eax
mov ecx, edi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x4351cc
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
add eax, 0x10
mov dword [ebp - 0x20], eax
jmp 0x4351e0
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x20]
call fcn.004030f0
mov byte [ebp - 4], 0x99
mov byte [ebp - 4], 0x97
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435202
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9a
mov byte [ebp - 4], 0x96
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435224
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9b
mov byte [ebp - 4], 0x95
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435246
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x9c
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435268
push 0x80004005
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
call fcn.004031e0
call fcn.004031e0
call fcn.004031e0
push 0x80070057
call fcn.00403880
push 0x80070057
call fcn.00403880
int3