Function at 0x4369f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47aa28
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x4b700c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
call fcn.00403a70
mov ecx, eax
test ecx, ecx
je 0x43778a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.00402820
mov byte [ebp - 4], 3
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_SearchSetupCompletedSuccessfully
lea ecx, [ebp - 0x20]
call fcn.0045d070
call fcn.00464f20
push ecx
mov ecx, esp
cmp al, 1
jne 0x436c77
mov dword [ebp - 0x2c], esp
push str.DWORD
call fcn.0045d100
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x487864
call fcn.0045d100
mov byte [ebp - 4], 5
push ecx
mov dword [ebp - 0x30], esp
mov ebx, esp
mov dword [ebp - 0x34], ebx
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436abc
cmp ecx, dword [esi - 0x10]
jne 0x436abc
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436ae6
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x437794
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov dword [ebx], eax
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
mov byte [ebp - 4], 3
call fcn.00462300
add esp, 0xc
mov ebx, eax
test ebx, ebx
je 0x436c36
push str.Failed_to_update_the_registry_SetupCompletedSuccessfully
lea ecx, [ebp - 0x18]
call fcn.0045d070
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 8
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x28], esp
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436b53
cmp ecx, dword [esi - 0x10]
jne 0x436b53
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436b7d
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x437799
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045d100
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.0045fd10
add esp, 8
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x28], esp
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436bd5
cmp ecx, dword [esi - 0x10]
jne 0x436bd5
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436bff
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x43779e
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x490290
call fcn.0045d100
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.0045f800
add esp, 8
jmp 0x436e89
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045d100
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Success
call fcn.0045d100
mov byte [ebp - 4], 0x11
jmp 0x436e7a
mov dword [ebp - 0x34], esp
push str.DWORD
call fcn.0045d100
mov byte [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x487864
call fcn.0045d100
mov byte [ebp - 4], 0x13
push ecx
mov dword [ebp - 0x2c], esp
mov ebx, esp
mov dword [ebp - 0x28], ebx
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436cc7
cmp ecx, dword [esi - 0x10]
jne 0x436cc7
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436cf1
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4377a3
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov dword [ebx], eax
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 3
call fcn.00461fe0
add esp, 0xc
mov ebx, eax
test ebx, ebx
je 0x436e3e
push str.Failed_to_update_the_registry_SetupCompletedSuccessfully
lea ecx, [ebp - 0x18]
call fcn.0045d070
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 0x16
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x28], esp
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436d5e
cmp ecx, dword [esi - 0x10]
jne 0x436d5e
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436d88
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4377a8
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045d100
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.0045fd10
add esp, 8
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x28], esp
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [esi - 4]
cmp dword [eax], 0
jl 0x436de0
cmp ecx, dword [esi - 0x10]
jne 0x436de0
lea edi, [esi - 0x10]
lock inc dword [eax]
jmp 0x436e0a
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4377ad
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov edx, dword [esi - 0xc]
inc edx
push edx
push esi
lea ecx, [edi + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [edi + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Deleting_edb_file
call fcn.0045d100
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.0045f800
add esp, 8
jmp 0x436e89
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045d100
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Success
call fcn.0045d100
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
call fcn.0045fd10
add esp, 0xc
lea ecx, [ebp - 0x14]
call fcn.00402820
mov byte [ebp - 4], 0x20
mov bl, 1
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.sc_config_WSearch_startdisabled
call fcn.0045d100
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
mov dl, bl
lea ecx, [ebp - 0x2c]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x22
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x436f12
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x436f06
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x436f06
call fcn.00403060
mov dword [ebp - 0x28], eax
or esi, 0xffffffff
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x436efe
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x436f15
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030c0
or esi, 0xffffffff
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436f37
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x436f60
cmp ecx, dword [edi - 0x10]
jne 0x436f60
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x436f8a
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377b2
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_Congifure_WSearch_to_mannual
call fcn.0045d100
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x20
or ecx, 0xffffffff
call fcn.0045f800
mov bl, 1
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.net_stop_WSearch
call fcn.0045d100
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x20
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x28
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437036
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x43702a
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x43702a
call fcn.00403060
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437022
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437036
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030c0
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437058
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437081
cmp ecx, dword [edi - 0x10]
jne 0x437081
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x4370ab
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377b7
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file__stop_WSearch
call fcn.0045d100
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x20
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
push 0x48ac80
lea ecx, [ebp - 0x24]
call fcn.0045d100
mov byte [ebp - 4], 0x2d
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x24]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437118
cmp ecx, dword [edi - 0x10]
jne 0x437118
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x437142
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377bc
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x2d
call fcn.00464350
add esp, 4
test al, al
je 0x4372a0
push str.C:ProgramDataMicrosoftSearchDataApplicationsWindowsWindows.edb
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
setne bl
test eax, eax
jne 0x4372eb
push str.Failed_to_delete_the_Windows.edb_file
lea ecx, [ebp - 0x18]
call fcn.0045d070
movzx eax, bl
mov dword [ebp - 0x28], eax
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x18]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x4371ba
cmp ecx, dword [edi - 0x10]
jne 0x4371ba
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x4371e4
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377c1
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x31
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x490318
call fcn.0045d100
mov byte [ebp - 4], 0x32
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x28]
call fcn.0045f800
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 0x33
push ecx
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x2c], esp
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x437250
cmp ecx, dword [edi - 0x10]
jne 0x437250
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x43727a
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377c6
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x35
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Failure
call fcn.0045d100
mov byte [ebp - 4], 0x36
jmp 0x4372dc
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x48780e
call fcn.0045d100
mov byte [ebp - 4], 0x37
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.System_restart_is_needed_to_fix_the_issue_completely.
call fcn.0045d100
mov byte [ebp - 4], 0x38
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Success
call fcn.0045d100
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x1c]
call fcn.0045fd10
add esp, 0xc
mov bl, 1
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.sc_config_WSearch_startauto
call fcn.0045d100
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x2d
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x3b
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437365
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x437359
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x437359
call fcn.00403060
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437351
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437365
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030c0
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437387
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x4373b0
cmp ecx, dword [edi - 0x10]
jne 0x4373b0
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x4373da
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377cb
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_cofig_WSearch_auto
call fcn.0045d100
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
mov bl, 1
add esp, 4
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.net_start_WSearch
call fcn.0045d100
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x2d
mov dl, bl
lea ecx, [ebp - 0x28]
call fcn.00460ee0
add esp, 4
mov byte [ebp - 4], 0x41
mov edx, dword [eax]
lea ecx, [edx - 0x10]
mov edi, dword [ebp - 0x14]
add edi, 0xfffffff0
cmp ecx, edi
je 0x437486
lea ebx, [edi + 0xc]
cmp dword [ebx], 0
jl 0x43747a
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x43747a
call fcn.00403060
mov dword [ebp - 0x2c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x437472
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x437486
push dword [edx - 0xc]
push edx
lea ecx, [ebp - 0x14]
call fcn.004030c0
mov byte [ebp - 4], 0x42
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4374a8
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push ecx
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], esp
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
lea eax, [edi - 4]
cmp dword [eax], 0
jl 0x4374d1
cmp ecx, dword [edi - 0x10]
jne 0x4374d1
lea ebx, [edi - 0x10]
lock inc dword [eax]
jmp 0x4374fb
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4377d0
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov edx, dword [edi - 0xc]
inc edx
push edx
push edi
lea ecx, [ebx + 0x10]
call fcn.004031c0
add esp, 8
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 0x44
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Delete_windows_edb_file_start_WSearch
call fcn.0045d100
mov byte [ebp - 4], 0x45
mov byte [ebp - 4], 0x2d
or ecx, 0xffffffff
call fcn.0045f800
add esp, 8
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437550
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437572
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x48
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437594
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov dword [ebp - 4], 1
jmp 0x437681
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x4376a0
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00403850
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
call fcn.004031b0
int3