Function at 0x4245a0
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Copy file
Get token membership
Hide graphical window
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x557d9c
mov eax, dword fs:[0]
push eax
sub esp, 0xaf8
mov eax, dword [0x5b706c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xacc], eax
lea eax, [ebp - 0x914]
mov dword [ebp - fcn.00428b50], vtable.std::_Func_impl_no_alloc_class__lambda_f1a5db0015a13b6cd3ea8fa4f22bc61a___void___.0
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0xac0]
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0xa9c], 0
push eax
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 1
call fcn.00428b50
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x8f0]
test ecx, ecx
je 0x424648
mov edx, dword [ecx]
lea eax, [ebp - 0x914]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [ebp - 4], 3
xorps xmm0, xmm0
movq qword [ebp - 0x86c], xmm0
mov dword [ebp - 0x864], 0
mov dword [ebp - 0x86c], 0
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x864], 0
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x848], 0
mov ecx, edx
mov dword [ebp - 0x844], 7
xor eax, eax
mov word [ebp - 0x858], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4246b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x858]
call fcn.00403df0
lea edx, [ebp - 0x86c]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x858]
call fcn.004a5170
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 4
call fcn.00403d90
xorps xmm0, xmm0
mov dword [ebp - 0x8bc], 0
push 0x60
movups xmmword [ebp - 0x8d4], xmm0
movq qword [ebp - 0x8c4], xmm0
call fcn.0051ebe4
mov esi, eax
mov dword [ebp - 0x88c], esi
push 0x60
push 0
push esi
mov byte [ebp - 4], 6
call fcn.00525340
add esp, 0x10
mov ecx, esi
call fcn.004a2740
mov dword [ebp - 0x8d4], eax
xor eax, eax
mov dword [ebp - 0x8c0], 0
mov dword [ebp - 0x8bc], 7
mov word [ebp - 0x8d0], ax
lea ecx, [ebp - 0x8d4]
mov byte [ebp - 4], 7
call fcn.004a15a0
mov eax, dword [ebp - 0x8d4]
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x85c], eax
xor eax, eax
push 6
push 0x5869d8
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
mov byte [ebp - 4], 8
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x868]
mov ecx, esi
mov edi, dword [ebp - 0x86c]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x424800
push ecx
push esi
push edi
lea edx, [ebp - 0x858]
mov dword [ebp - 0x840], 0
lea ecx, [ebp - 0x840]
call fcn.004a58e0
mov eax, dword [ebp - 0x840]
add esp, 0xc
cmp eax, dword [ebp - 0x868]
setne byte [ebp - 0xac1]
jmp 0x424807
mov byte [ebp - 0xac1], 0
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 7
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
je 0x424a32
lea ecx, [ebp - 0x858]
call fcn.004a3a70
push 0x822
lea eax, [ebp - 0x838]
mov byte [ebp - 4], 9
push 0
push eax
call fcn.00525340
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x838]
add esp, 0xc
push 0x410
push eax
push 0
call edi
lea ecx, [eax - 2]
cmp ecx, 0x40d
ja 0x4248a2
lea ecx, [ebp + eax*2 - 0x83a]
xor esi, esi
movzx edx, word [ecx]
cmp edx, 0x5c
je 0x424883
cmp edx, 0x2f
je 0x424883
xor dl, dl
jmp 0x424885
mov dl, 1
test dl, dl
jne 0x424892
sub ecx, 2
inc esi
sub eax, 1
jne 0x424872
xor eax, eax
mov word [ebp - 0x888], ax
lea eax, [ecx + 2]
push esi
push eax
jmp 0x4248b1
xor eax, eax
push eax
mov word [ebp - 0x888], ax
push 0x584430
lea ecx, [ebp - 0x888]
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x874], 7
call fcn.00403df0
lea eax, [ebp - 0x888]
mov byte [ebp - 4], 0xa
push eax
mov edx, str._TEMP__
lea ecx, [ebp - 0xb04]
call fcn.00414100
add esp, 4
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 4], 0xb
push ecx
mov ecx, dword [ebp - 0x85c]
push eax
lea eax, [ebp - 0x8ec]
push eax
call fcn.004a23f0
lea ecx, [ebp - 0xb04]
call fcn.00403d90
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0xe
call fcn.00403d90
cmp dword [ebp - 0x848], 0
je 0x424a16
cmp dword [ebp - 0x8dc], 0
je 0x424a16
cmp dword [ebp - 0x8d8], 8
lea ecx, [ebp - 0x8ec]
push 0
cmovae ecx, dword [ebp - 0x8ec]
lea eax, [ebp - 0x858]
cmp dword [ebp - 0x844], 8
push ecx
cmovae eax, dword [ebp - 0x858]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x424a16
mov edx, dword [ebp - 0xacc]
lea ecx, [ebp - 0xae8]
push edx
call fcn.00403900
lea edx, [ebp - 0xae8]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x8ec]
call fcn.004aef00
lea ecx, [ebp - 0xae8]
call fcn.00403d90
lea ecx, [ebp - 0x8ec]
call fcn.00403d90
lea ecx, [ebp - 0x858]
call fcn.00403d90
lea ecx, [ebp - 0x8d0]
call fcn.00403d90
mov eax, dword [ebp - 0x8d4]
test eax, eax
je 0x4249dd
push eax
call fcn.00403bb0
lea ecx, [ebp - 0x86c]
call fcn.0041cf40
lea ecx, [ebp - 0xac0]
call fcn.004206d0
mov eax, 0xfffffffe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0051e9d8
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp - 0x8ec]
call fcn.00403d90
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 7
call fcn.00403d90
jmp 0x424a38
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor esi, esi
mov dword [ebp - 0x840], 0
lea eax, [ebp - 0x83c]
mov dword [ebp - 0x83c], esi
push eax
push esi
push esi
push esi
push esi
push esi
push esi
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x890]
mov dword [ebp - 0x890], esi
push eax
mov word [ebp - 0x88c], 0x500
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x424a98
lea eax, [ebp - 0x840]
push eax
push dword [ebp - 0x83c]
push esi
call dword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x424aa0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [ebp - 0x83c]
test eax, eax
je 0x424abb
push eax
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov dword [ebp - 0x83c], 0
test esi, esi
jne 0x426840
cmp dword [ebp - 0x840], esi
jne 0x424bec
push 0x208
lea eax, [ebp - 0x220]
push esi
push eax
call fcn.00525340
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push esi
call edi
test eax, eax
je 0x424bec
mov edx, dword [ebp - 0xacc]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x8dc], esi
mov dword [ebp - 0x8d8], 7
mov word [ebp - 0x8ec], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424b20
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x8ec]
call fcn.00403df0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x220]
xor eax, eax
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 7
lea edx, [ecx + 2]
mov word [ebp - 0x858], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424b66
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x858]
call fcn.00403df0
lea edx, [ebp - 0x8ec]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x858]
call fcn.004aef00
lea ecx, [ebp - 0x858]
call fcn.00403d90
lea ecx, [ebp - 0x8ec]
call fcn.00403d90
lea ecx, [ebp - 0x8d0]
call fcn.00403d90
mov eax, dword [ebp - 0x8d4]
test eax, eax
je 0x424bce
push eax
call fcn.00403bb0
lea ecx, [ebp - 0x86c]
call fcn.0041cf40
lea ecx, [ebp - 0xac0]
call fcn.004206d0
or eax, 0xffffffff
jmp 0x4249f8
push 6
xor eax, eax
mov dword [ebp - 0x848], 0
push 0x5869d8
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
mov byte [ebp - 4], 0x12
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x868]
mov ecx, esi
mov edi, dword [ebp - 0x86c]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x424c7b
push ecx
push esi
push edi
lea edx, [ebp - 0x858]
mov dword [ebp - 0x840], 0
lea ecx, [ebp - 0x840]
call fcn.004a58e0
mov eax, dword [ebp - 0x840]
add esp, 0xc
cmp eax, dword [ebp - 0x868]
setne byte [ebp - 0xac1]
jmp 0x424c82
mov byte [ebp - 0xac1], 0
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 7
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
je 0x424cbf
lea ecx, [ebp - 0xb04]
call fcn.004a3a70
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00424280
lea ecx, [ebp - 0xb04]
mov byte [ebp - 4], 7
call fcn.00403d90
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x890]
mov dword [ebp - 0x890], 8
push eax
mov dword [ebp - 0x88c], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
sub esp, 0xc
call fcn.004231a0
push 0x8001
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x64
mov dword [ebp - 0x88c], eax
lea eax, [ebp - 0x990]
push 0
push eax
call fcn.00525340
add esp, 0xc
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0xf
mov byte [ebp - 0x990], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x978]
push 0
push 0
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x978], 0
mov dword [ebp - 0x974], 0
mov dword [ebp - 0x970], 0
call fcn.0042d120
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x96c], 0
mov dword [ebp - 0x968], 0
mov dword [ebp - 0x964], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x978]
push 8
mov dword [ebp - 0x978], 0x3f800000
call fcn.00413a60
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x94c]
push 0
push 0
mov dword [ebp - 0x958], 0
mov dword [ebp - 0x954], 0
mov dword [ebp - 0x950], 0
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x94c], 0
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x944], 0
call fcn.004b51e0
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x94c]
push 8
mov dword [ebp - 0x94c], 0x3f800000
call fcn.00413a60
lea eax, [ebp - 0x990]
mov dword [0x5bf080], eax
xorps xmm0, xmm0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x8b8]
movq qword [ebp - 0x898], xmm0
movups xmmword [ebp - 0x8b8], xmm0
movups xmmword [ebp - 0x8a8], xmm0
call fcn.00430930
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x894], 0
jne 0x42500c
push 0
push str.WiperSoft_Installer
push str.Failed_to_load_default_resources._Application_is_terminating.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x8b8]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x424eae
push eax
call esi
mov dword [ebp - 0x8b8], 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x894], 0
test ecx, ecx
je 0x424ed1
mov byte [ebp - 4], 0x1c
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov byte [ebp - 4], 0x1b
call fcn.00423290
mov eax, dword [ebp - 0x8b8]
test eax, eax
je 0x424eed
push eax
call esi
mov dword [ebp - 0x8b8], 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x894], 0
test ecx, ecx
je 0x424f21
mov byte [ebp - 4], 0x1d
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x894]
test ecx, ecx
je 0x424f21
mov byte [ebp - 4], 0x1e
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
lea ecx, [ebp - 0x8b4]
call fcn.0042ce30
mov dword [0x5bf080], 0
mov dword [ebp - 0x954], 0
mov dword [ebp - 0x958], 0
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0x1f
call fcn.004b4de0
push 8
lea ecx, [ebp - 0x978]
call fcn.00413a60
lea ecx, [ebp - 0x94c]
call fcn.004b4ba0
lea ecx, [ebp - 0x978]
call fcn.004b4b30
mov edx, dword [ebp - 0x97c]
cmp edx, 0x10
jb 0x424fb6
mov ecx, dword [ebp - 0x990]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x424fac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426857
push edx
push ecx
call fcn.0051ec14
add esp, 8
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0xf
mov byte [ebp - 0x990], 0
call fcn.00403d90
mov eax, dword [ebp - 0x8d4]
test eax, eax
je 0x424fec
push eax
call fcn.00403bb0
lea ecx, [ebp - 0x86c]
call fcn.0041cf40
lea ecx, [ebp - 0xac0]
call fcn.004206d0
mov eax, 1
jmp 0x4249f8
cmp dword [ebp - 0x8b8], 0
jne 0x425158
call fcn.00423290
mov eax, dword [ebp - 0x8b8]
test eax, eax
je 0x425039
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8b8], 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x894], 0
test ecx, ecx
je 0x42506d
mov byte [ebp - 4], 0x20
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x894]
test ecx, ecx
je 0x42506d
mov byte [ebp - 4], 0x21
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
lea ecx, [ebp - 0x8b4]
call fcn.0042ce30
mov dword [0x5bf080], 0
mov dword [ebp - 0x954], 0
mov dword [ebp - 0x958], 0
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0x22
call fcn.004b4de0
push 8
lea ecx, [ebp - 0x978]
call fcn.00413a60
lea ecx, [ebp - 0x94c]
call fcn.004b4ba0
lea ecx, [ebp - 0x978]
call fcn.004b4b30
mov edx, dword [ebp - 0x97c]
cmp edx, 0x10
jb 0x425102
mov ecx, dword [ebp - 0x990]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4250f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42685c
push edx
push ecx
call fcn.0051ec14
add esp, 8
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0xf
mov byte [ebp - 0x990], 0
call fcn.00403d90
mov eax, dword [ebp - 0x8d4]
test eax, eax
je 0x425138
push eax
call fcn.00403bb0
lea ecx, [ebp - 0x86c]
call fcn.0041cf40
lea ecx, [ebp - 0xac0]
call fcn.004206d0
mov eax, 2
jmp 0x4249f8
mov ecx, 2
call fcn.00438150
push 0x38
lea eax, [ebp - 0x9fc]
push 0
push eax
call fcn.00525340
xorps xmm0, xmm0
mov dword [ebp - 0x9fc], 0x586bcc
add esp, 0xc
mov dword [ebp - 0x9e8], 0
movups xmmword [ebp - 0x9f8], xmm0
mov dword [ebp - 0x9e4], 0
mov edi, dword [0x5bf004]
add edi, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [0x5bf0dc]
xor edx, edx
push 4
mov dword [ebp - 0x85c], eax
mov ecx, dword [esi + 8]
add ecx, 1
setb dl
neg edx
or edx, ecx
push edx
push dword [esi]
call fcn.0052e7b5
add esp, 0xc
test eax, eax
je 0x42522f
mov dword [esi], eax
xor ecx, ecx
mov eax, dword [esi + 8]
add eax, 1
push 4
setb cl
neg ecx
or ecx, eax
push ecx
push dword [esi + 4]
call fcn.0052e7b5
add esp, 0xc
test eax, eax
je 0x42522f
mov ecx, dword [esi + 8]
mov dword [esi + 4], eax
lea edx, [ecx*4]
mov ecx, dword [esi]
add ecx, edx
je 0x425220
mov eax, dword [ebp - 0x85c]
mov dword [ecx], eax
mov eax, dword [esi + 4]
add eax, edx
je 0x42522c
lea ecx, [ebp - 0x9fc]
mov dword [eax], ecx
inc dword [esi + 8]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
lea eax, [ebp - 0xa98]
mov dword [ebp - 0xa98], 1
push eax
lea eax, [ebp - 0x9c4]
mov dword [ebp - 0xa94], 0
push eax
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
xor esi, esi
mov dword [ebp - 0x860], esi
lea ecx, [ebp - 0x870]
mov dword [ebp - 0x870], esi
call fcn.0051ffe0
mov byte [ebp - 4], 0x25
mov eax, dword [0x5bf080]
push str.Kernel32.dll
mov dword [ebp - 0x840], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x4253ec
push str.GetUserDefaultLocaleName
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
je 0x4253ec
push 0xac
lea eax, [ebp - 0xc4]
push esi
push eax
call fcn.00525340
add esp, 0xc
lea eax, [ebp - 0xc4]
push 0x55
push eax
call edi
test eax, eax
je 0x4253ec
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x888]
call fcn.00403900
push esi
push 0x2d
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x26
call fcn.004a1780
mov dword [ebp - 0x85c], eax
cmp eax, 0xffffffff
je 0x425363
cmp dword [ebp - 0x874], 8
lea ecx, [ebp - 0x888]
mov eax, dword [ebp - 0x878]
cmovae ecx, dword [ebp - 0x888]
mov edx, dword [ebp - 0x85c]
lea ecx, [ecx + eax*2]
lea eax, [ebp - 0x888]
cmovae eax, dword [ebp - 0x888]
push ecx
lea ecx, [ebp - 0x888]
lea eax, [eax + edx*2]
push eax
lea eax, [ebp - 0x85c]
push eax
call fcn.0041f3c0
lea edx, [ebp - 0x888]
lea ecx, [ebp - 0x858]
call fcn.004ad250
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x840]
push eax
call fcn.004b4520
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x844]
cmp edx, 0x10
jb 0x4253c2
mov ecx, dword [ebp - 0x858]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4253b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426861
push edx
push ecx
call fcn.0051ec14
add esp, 8
lea ecx, [ebp - 0x888]
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0xf
mov byte [ebp - 0x858], 0
mov byte [ebp - 4], 0x25
call fcn.00403d90
push 0x8c
lea eax, [ebp - 0xa88]
push 0
push eax
call fcn.00525340
lea eax, [ebp - 0x8b8]
mov dword [ebp - 0xa84], 0
mov dword [ebp - 0xa88], eax
add esp, 0xc
lea eax, [ebp - 0xa7c]
mov dword [ebp - 0xa80], 0
mov ecx, eax
mov dword [ebp - 0x85c], eax
call fcn.00432040
lea eax, [ebp - 0xa70]
push eax
call fcn.00521390
add esp, 4
lea ecx, [ebp - 0xa6c]
call fcn.0051ffe0
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xa64]
push 0
push 0
mov byte [ebp - 0xa68], 0
mov dword [ebp - 0x840], eax
mov dword [ebp - 0xa64], 0
mov dword [ebp - 0xa60], 0
mov dword [ebp - 0xa5c], 0
call fcn.004365a0
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa58], 0
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0xa50], 0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa64]
push 8
mov dword [ebp - 0xa64], 0x3f800000
call fcn.00413a60
lea eax, [ebp - 0xa44]
mov byte [ebp - 4], 0x2c
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
mov byte [ebp - 4], 0x2d
push 0
mov dword [ebp - 0xa2c], 0
mov dword [ebp - 0xa28], 0
call fcn.00434d50
mov dword [ebp - 0xa2c], eax
push 0
mov byte [ebp - 4], 0x2e
push 0
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa20], 0
call fcn.00434d50
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xa1c], 0
mov dword [ebp - 0xa18], 9
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0xa00], 0xf
mov byte [ebp - 0xa14], 0
lea ecx, [ebp - 0xa7c]
mov byte [ebp - 4], 0x30
call fcn.00433390
mov byte [ebp - 4], 0x31
xor eax, eax
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
push 3
push 0x586a9c
lea ecx, [ebp - 0x858]
call fcn.00403df0
push ecx
lea edx, [ebp - 0x858]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x86c]
call fcn.004a5760
add esp, 4
mov byte [ebp - 0xac1], al
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x31
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
je 0x425649
push 0x586a9c
lea ecx, [ebp - 0xae8]
call fcn.00403900
push ecx
lea eax, [ebp - 0xae8]
mov byte [ebp - 4], 0x33
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0x858]
call fcn.004a57e0
add esp, 8
mov edx, eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xb04]
call fcn.004ad250
push eax
lea ecx, [ebp - 0xa88]
mov byte [ebp - 4], 0x35
call fcn.00429290
lea ecx, [ebp - 0xb04]
call fcn.00403b20
lea ecx, [ebp - 0x858]
call fcn.00403d90
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x31
call fcn.00403d90
push 0x198
call fcn.0051ebe4
mov edi, eax
mov dword [ebp - 0x85c], edi
push 0x198
push 0
push edi
mov byte [ebp - 4], 0x36
call fcn.00525340
add esp, 0x10
lea eax, [ebp - 0xa88]
mov ecx, edi
push eax
lea eax, [ebp - 0x8b8]
push eax
call fcn.0042de30
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0x85c], eax
xor edi, edi
mov dword [ebp - 0x840], edi
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x858]
push 6
xor eax, eax
mov dword [ebp - 0x848], edi
push str.silent
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
push ecx
lea edx, [ebp - 0x858]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x86c]
call fcn.004a5760
add esp, 4
mov byte [ebp - 0xac1], al
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x38
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
je 0x42579d
or dword [ebp - 0xa1c], 8
lea ecx, [ebp - 0xae8]
push str.silent
call fcn.00403900
push ecx
lea eax, [ebp - 0xae8]
mov byte [ebp - 4], 0x3a
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0x858]
call fcn.004a57e0
add esp, 8
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xae8]
call fcn.00403d90
cmp dword [ebp - 0x844], 8
lea ecx, [ebp - 0x858]
cmovae ecx, dword [ebp - 0x858]
cmp dword [ebp - 0x848], 4
jne 0x425792
mov dword [ebp - 0xacc], 4
mov edx, str.very
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x425792
add ecx, 2
add edx, 2
sub dword [ebp - 0xacc], 1
jne 0x425774
or dword [ebp - 0xa1c], 0x10
lea ecx, [ebp - 0x858]
call fcn.00403d90
push 0xa
xor eax, eax
mov dword [ebp - 0x848], 0
push str.verysilent
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
push ecx
lea edx, [ebp - 0x858]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x86c]
call fcn.004a5760
add esp, 4
mov byte [ebp - 0xac1], al
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x38
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
mov eax, dword [ebp - 0xa1c]
je 0x425812
or eax, 0x18
mov dword [ebp - 0xa1c], eax
shr eax, 4
test al, 1
jne 0x425897
push 0x148
call fcn.0051ebe4
mov edi, eax
mov dword [ebp - 0xacc], edi
push 0x148
push 0
push edi
mov byte [ebp - 4], 0x3c
call fcn.00525340
add esp, 0x10
lea eax, [ebp - 0x8b8]
mov ecx, edi
push eax
call fcn.00430f50
mov edi, eax
mov byte [ebp - 4], 0x38
mov ecx, 0x5b7a68
mov dword [ebp - 0x840], edi
lea eax, [edi + 0x20]
push eax
call fcn.00423510
push ecx
movzx eax, ax
push eax
push ecx
mov eax, esp
mov ecx, edi
push 0x80
push 0x82c00000
sub esp, 8
mov dword [eax], 0
mov eax, esp
push 0
mov dword [eax], 0x5b7ac8
call fcn.00426ca0
push 0
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.0042cd40
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x92c]
call fcn.004ad250
lea ecx, [ebp - 0xb04]
mov byte [ebp - 4], 0x40
call fcn.00403d90
push 1
xor eax, eax
mov dword [ebp - 0x848], 0
push 0x586ad8
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
push ecx
lea eax, [ebp - 0x858]
mov byte [ebp - 4], 0x41
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0xae8]
call fcn.004a57e0
add esp, 8
mov edx, eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x9c0]
call fcn.004ad250
lea ecx, [ebp - 0xae8]
call fcn.00403d90
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x45
call fcn.00403d90
push 2
xor eax, eax
mov dword [ebp - 0x8dc], 0
push 0x586adc
lea ecx, [ebp - 0x8ec]
mov dword [ebp - 0x8d8], 7
mov word [ebp - 0x8ec], ax
call fcn.00403df0
push ecx
lea eax, [ebp - 0x8ec]
mov byte [ebp - 4], 0x46
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0xb04]
call fcn.004a57e0
add esp, 8
mov edx, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x9a8]
call fcn.004ad250
lea ecx, [ebp - 0xb04]
call fcn.00403d90
lea ecx, [ebp - 0x8ec]
mov byte [ebp - 4], 0x4a
call fcn.00403d90
cmp dword [ebp - 0x9b0], 0
sete al
test al, al
je 0x4259ef
lea ecx, [ebp - 0xae8]
call fcn.004a8a90
push eax
lea ecx, [ebp - 0x9c0]
call fcn.00409140
lea ecx, [ebp - 0xae8]
call fcn.00403b20
mov edx, dword [ebp - 0x998]
test edx, edx
jne 0x425a21
lea ecx, [ebp - 0xae8]
call fcn.004a9220
push eax
lea ecx, [ebp - 0x9a8]
call fcn.00409140
lea ecx, [ebp - 0xae8]
call fcn.00403b20
mov edx, dword [ebp - 0x998]
cmp dword [ebp - 0x9b0], 0
je 0x425aef
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x874], 0xf
mov byte [ebp - 0x888], 0
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x9c0]
cmp dword [ebp - 0x9ac], 0x10
lea ecx, [ebp - 0x888]
push ecx
cmovae eax, dword [ebp - 0x9c0]
lea edx, [ebp - 0x9c0]
add eax, dword [ebp - 0x9b0]
lea ecx, [ebp - 0xacc]
cmp dword [ebp - 0x9ac], 0x10
push eax
cmovae edx, dword [ebp - 0x9c0]
push edx
call fcn.00427680
add esp, 0xc
lea eax, [ebp - 0x888]
cmp dword [ebp - 0x874], 0x10
lea ecx, [ebp - 0x9c0]
cmovae eax, dword [ebp - 0x888]
push dword [ebp - 0x878]
push eax
call fcn.00403f90
push 0x586ae4
lea ecx, [ebp - 0x92c]
call fcn.0040c890
lea eax, [ebp - 0x9c0]
push eax
lea ecx, [ebp - 0x92c]
call fcn.0040c900
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
mov edx, dword [ebp - 0x998]
test edx, edx
je 0x425bd7
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x874], 0xf
mov byte [ebp - 0x888], 0
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x9a8]
cmp dword [ebp - 0x994], 0x10
lea ecx, [ebp - 0x888]
push ecx
cmovae eax, dword [ebp - 0x9a8]
lea ecx, [ebp - 0xacc]
add eax, edx
cmp dword [ebp - 0x994], 0x10
lea edx, [ebp - 0x9a8]
cmovae edx, dword [ebp - 0x9a8]
push eax
push edx
call fcn.00427680
add esp, 8
lea ecx, [ebp - 0x92c]
push 0x3f
call fcn.00426c60
lea ecx, [ebp - 0x92c]
cmp eax, 0xffffffff
jne 0x425b76
push 0x586ae8
jmp 0x425b7b
push 0x586aec
call fcn.0040c890
cmp dword [ebp - 0x874], 0x10
lea eax, [ebp - 0x888]
push dword [ebp - 0x878]
cmovae eax, dword [ebp - 0x888]
lea ecx, [ebp - 0x9a8]
push eax
call fcn.00403f90
push 0x586af0
lea ecx, [ebp - 0x92c]
call fcn.0040c890
lea eax, [ebp - 0x9a8]
push eax
lea ecx, [ebp - 0x92c]
call fcn.0040c900
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
push 0
push 0x5843b0
lea ecx, [ebp - 0x888]
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x874], 0xf
mov byte [ebp - 0x888], 0
call fcn.00403f90
mov byte [ebp - 4], 0x4d
cmp dword [ebp - 0x878], 0
je 0x425c96
push ecx
push 0x3f
lea ecx, [ebp - 0x92c]
call fcn.00426c60
lea ecx, [ebp - 0x92c]
cmp eax, 0xffffffff
jne 0x425c35
push 0x586ae8
jmp 0x425c3a
push 0x586aec
call fcn.0040c890
push 0x586af4
lea ecx, [ebp - 0x92c]
call fcn.0040c890
cmp dword [ebp - 0x874], 0x10
lea ecx, [ebp - 0x888]
mov eax, dword [ebp - 0x878]
lea edx, [ebp - 0x92c]
cmovae ecx, dword [ebp - 0x888]
add eax, ecx
lea ecx, [ebp - 0x888]
cmp dword [ebp - 0x874], 0x10
push edx
cmovae ecx, dword [ebp - 0x888]
push eax
push ecx
lea ecx, [ebp - 0xacc]
call fcn.00427680
add esp, 0xc
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
push 6
xor eax, eax
mov dword [ebp - 0x848], 0
push 0x5869d8
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x844], 7
mov word [ebp - 0x858], ax
call fcn.00403df0
push ecx
lea edx, [ebp - 0x858]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x86c]
call fcn.004a5760
add esp, 4
mov byte [ebp - 0xac1], al
lea ecx, [ebp - 0x858]
call fcn.00403d90
xor eax, eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x90c], xmm0
mov dword [ebp - 0x90c], eax
movups xmmword [ebp - 0x8fc], xmm0
mov dword [ebp - 0x908], eax
mov word [ebp - 0x904], ax
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x8f0], 7
cmp byte [ebp - 0xac1], al
je 0x425ec8
or dword [ebp - 0xa1c], 1
lea eax, [ebp - 0x8d0]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x8d4]
call fcn.004a1520
push eax
lea ecx, [ebp - 0x90c]
call fcn.00402990
push 0x5869d8
lea ecx, [ebp - 0xae8]
call fcn.00403900
push ecx
lea eax, [ebp - 0xae8]
mov byte [ebp - 4], 0x50
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0x858]
call fcn.004a57e0
add esp, 8
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x52
call fcn.00403d90
cmp dword [ebp - 0x848], 0
je 0x425e29
lea eax, [ebp - 0x858]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004029d0
push eax
lea ecx, [ebp - 0x860]
call fcn.00403800
mov esi, dword [ebp - 0x860]
test esi, esi
jne 0x425e5e
lea edx, [ebp - 0x858]
lea ecx, [ebp - 0x888]
call fcn.004a3b10
push eax
lea ecx, [ebp - 0x858]
call fcn.004090a0
lea ecx, [ebp - 0x888]
call fcn.00403d90
lea eax, [ebp - 0x858]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004029d0
push eax
lea ecx, [ebp - 0x860]
call fcn.00403800
mov esi, dword [ebp - 0x860]
test esi, esi
jne 0x425e5e
lea ecx, [ebp - 0x90c]
call fcn.004028f0
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004035d0
push eax
lea ecx, [ebp - 0x860]
call fcn.00403800
mov esi, dword [ebp - 0x860]
test esi, esi
setne byte [ebp - 0xac1]
test esi, esi
je 0x425eb8
lea eax, [ebp - 0xad0]
mov dword [ebp - 0x83c], 0
push eax
lea ecx, [ebp - 0x83c]
mov dword [ebp - 0xad0], 0x412010
mov dword [ebp - 0xacc], esi
call fcn.00427840
mov ecx, dword [ebp - 0x870]
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x83c], ecx
lea ecx, [ebp - 0x83c]
mov dword [ebp - 0x870], eax
call fcn.00423f70
lea ecx, [ebp - 0x858]
call fcn.00403d90
jmp 0x426098
lea eax, [ebp - 0x8d0]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x8d4]
call fcn.004a1520
push eax
lea ecx, [ebp - 0x90c]
call fcn.00402990
lea ecx, [ebp - 0x90c]
call fcn.004028f0
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004035d0
mov esi, eax
lea ecx, [ebp - 0xae8]
push 0x586af8
mov dword [ebp - 0x860], esi
call fcn.00403900
push ecx
lea edx, [ebp - 0xae8]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x86c]
call fcn.004a5760
add esp, 4
mov byte [ebp - 0xac1], al
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x53
call fcn.00403d90
cmp byte [ebp - 0xac1], 0
je 0x426035
or dword [ebp - 0xa1c], 4
test esi, esi
jne 0x42603e
push 0x586af8
lea ecx, [ebp - 0xae8]
call fcn.00403900
push ecx
lea eax, [ebp - 0xae8]
mov byte [ebp - 4], 0x55
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0x858]
call fcn.004a57e0
add esp, 8
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x57
call fcn.00403d90
cmp dword [ebp - 0x848], esi
je 0x426024
lea eax, [ebp - 0x858]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004029d0
push eax
lea ecx, [ebp - 0x860]
call fcn.00403800
mov esi, dword [ebp - 0x860]
test esi, esi
jne 0x426024
lea edx, [ebp - 0x858]
lea ecx, [ebp - 0x888]
call fcn.004a3b10
push eax
lea ecx, [ebp - 0x858]
call fcn.004090a0
lea ecx, [ebp - 0x888]
call fcn.00403d90
lea eax, [ebp - 0x858]
push eax
lea ecx, [ebp - 0x90c]
call fcn.004029d0
push eax
lea ecx, [ebp - 0x860]
call fcn.00403800
mov esi, dword [ebp - 0x860]
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x53
call fcn.00403d90
jmp 0x42603c
or dword [ebp - 0xa1c], 2
test esi, esi
setne byte [ebp - 0xac1]
test esi, esi
je 0x426098
lea eax, [ebp - 0xad0]
mov dword [ebp - 0x83c], 0
push eax
lea ecx, [ebp - 0x83c]
mov dword [ebp - 0xad0], 0x411de0
mov dword [ebp - 0xacc], esi
call fcn.00427840
mov ecx, dword [ebp - 0x870]
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x83c], ecx
lea ecx, [ebp - 0x83c]
mov dword [ebp - 0x870], eax
call fcn.00423f70
lea ecx, [ebp - 0x90c]
mov byte [ebp - 4], 0x4a
call fcn.00403770
cmp byte [ebp - 0xac1], 0
je 0x4262bb
push esi
lea ecx, [ebp - 0xa88]
call fcn.004296e0
cmp dword [ebp - 0x9b0], 0
je 0x426120
push 4
push str.HWID
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0xf
mov byte [ebp - 0x858], 0
call fcn.00403f90
push 0
lea eax, [ebp - 0x9c0]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x858]
mov ecx, esi
push eax
call fcn.00410d00
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
cmp dword [ebp - 0x998], 0
je 0x426180
push 5
push str.HWID2
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0xf
mov byte [ebp - 0x858], 0
call fcn.00403f90
push 0
lea eax, [ebp - 0x9a8]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x858]
mov ecx, esi
push eax
call fcn.00410d00
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
mov eax, dword [ebp - 0xac8]
mov ecx, 0x5b7a08
add eax, 0x20
push eax
call fcn.00423510
movzx eax, ax
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0xac8]
cmp dword [eax + 0x14], 0
jne 0x4261cb
call fcn.005236dc
mov ecx, dword [ebp - 0xac8]
mov dword [ecx + 0x14], eax
test eax, eax
jne 0x4261c5
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x426237
mov eax, dword [ebp - 0xac8]
push 0
push 0
push dword [eax + 0x14]
call fcn.005237de
cmp word [ebp - 0xacc], 0
je 0x426237
mov eax, dword [ebp - 0xac8]
mov edx, eax
lea ecx, [eax + 8]
call fcn.004230a0
mov eax, dword [0x5b7ad4]
mov edx, dword [0x5b7acc]
sub eax, edx
mov ecx, dword [0x5b7ac8]
push 0
push dword [0x5be658]
push 0
push 0
push eax
mov eax, dword [0x5b7ad0]
sub eax, ecx
push eax
mov eax, dword [ebp - 0xacc]
push edx
push ecx
push 0x2ce0000
push 0
movzx eax, ax
push eax
push 0x40100
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov eax, dword [ebp - 0xa1c]
shr eax, 3
test al, 1
mov eax, dword [ebp - 0xac8]
je 0x42625a
push 0
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x426334
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0xac8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [ebp - 0xac8]
push 0x43
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebp - 0xac8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [ebp - 0xac8]
push 0x43
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xfffffffffffffffe
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x426334
push 8
push str.nodeploy
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x844], 0xf
mov byte [ebp - 0x858], 0
call fcn.00403f90
lea edx, [ebp - 0x858]
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0xae8]
call fcn.004b4180
cmp dword [eax + 0x14], 8
jb 0x426305
mov eax, dword [eax]
push 0
push 0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xae8]
call fcn.00403d90
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0x4a
call fcn.00403b20
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
test edi, edi
je 0x42635e
push dword [edi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, edi
xor edi, edi
mov dword [ebp - 0x840], edi
test ecx, ecx
je 0x42635e
mov byte [ebp - 4], 0x5b
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov ecx, 1
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0x83c], ecx
test ecx, ecx
je 0x4263b7
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x9e0]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x4263b7
mov eax, dword [ebp - 0x9fc]
lea ecx, [ebp - 0x9fc]
push dword [ebp - 0xacc]
mov eax, dword [eax + 4]
call eax
inc dword [ebp - 0xacc]
test eax, eax
jne 0x426377
mov dword [ebp - 0x83c], eax
push 0
push 0
push 0
lea eax, [ebp - 0x9e0]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
mov ecx, dword [ebp - 0x83c]
cmp eax, 0xffffffff
je 0x426373
test eax, eax
jne 0x4267d2
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0xacc], eax
test esi, esi
je 0x426419
mov ecx, esi
mov byte [ebp - 4], 0x5c
call fcn.00412150
lea ecx, [ebp - 0x870]
call fcn.00521980
test al, al
je 0x426412
lea ecx, [ebp - 0x870]
call fcn.00423ff0
mov dword [ebp - 4], 0x4a
mov ecx, dword [ebp - 0xac8]
mov dword [ebp - 0x85c], 0
test ecx, ecx
je 0x42643c
mov byte [ebp - 4], 0x5e
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x8b8]
test eax, eax
je 0x426457
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8b8], 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x894], 0
test ecx, ecx
je 0x42647a
mov byte [ebp - 4], 0x5f
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov byte [ebp - 4], 0x4a
mov eax, dword [0x5bf1e8]
test eax, eax
je 0x42650c
sub eax, 1
mov dword [0x5bf1e8], eax
jne 0x42650c
cmp dword [0x5bf20c], 0
je 0x4264b2
mov ecx, 0x5bf1f4
call fcn.0044f210
mov dword [0x5bf20c], 0
cmp dword [0x5bf210], 0
je 0x4264cf
mov eax, dword [0x5b7b7c]
mov eax, dword [eax + 0x14]
call eax
mov dword [0x5bf210], 0
test byte [0x5bf1ec], 2
je 0x426502
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, dword [0x5bf058]
test eax, eax
je 0x426502
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x5bf058], 0
mov dword [0x5bf05c], 0
mov dword [0x5bf1ec], 0
push dword [ebp - 0x9c4]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call fcn.004233c0
call fcn.00423290
call dword [sym.imp.ole32.dll_CoUninitialize]
push dword [ebp - 0x88c]
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [ebp - 0x9a8]
call fcn.00403b20
lea ecx, [ebp - 0x9c0]
call fcn.00403b20
lea ecx, [ebp - 0x92c]
call fcn.00403b20
test edi, edi
je 0x426566
mov byte [ebp - 4], 0x60
mov ecx, edi
mov eax, dword [edi]
push 1
call dword [eax + 4]
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xa6c]
mov byte [ebp - 0xa68], 0
call fcn.00521980
test al, al
je 0x42658b
lea ecx, [ebp - 0xa6c]
call fcn.00423ff0
mov edx, dword [ebp - 0xa00]
cmp edx, 0x10
jb 0x4265eb
mov ecx, dword [ebp - 0xa14]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4265e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426866
jmp 0x4265e1
push edx
push ecx
call fcn.0051ec14
add esp, 8
lea ecx, [ebp - 0xa7c]
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0xa00], 0xf
mov byte [ebp - 0xa14], 0
call fcn.00433500
lea ecx, [ebp - 0x870]
call fcn.00423f70
test esi, esi
je 0x426635
mov ecx, esi
call fcn.00412dc0
push 0x200
push esi
call fcn.0051ec14
add esp, 8
mov eax, dword [ebp - 0x9ec]
test eax, eax
je 0x426652
push eax
call fcn.00529d29
add esp, 4
mov dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0x9e4], 0
test eax, eax
je 0x426683
push eax
call fcn.00529d29
add esp, 4
mov dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9f0], 0
test eax, eax
je 0x4266b2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8b8], 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x894], 0
test ecx, ecx
je 0x4266e6
mov byte [ebp - 4], 0x63
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x894]
test ecx, ecx
je 0x4266e6
mov byte [ebp - 4], 0x64
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
lea ecx, [ebp - 0x8b4]
call fcn.0042ce30
mov dword [0x5bf080], 0
mov dword [ebp - 0x954], 0
mov dword [ebp - 0x958], 0
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0x65
call fcn.004b4de0
push 8
lea ecx, [ebp - 0x978]
call fcn.00413a60
lea ecx, [ebp - 0x94c]
call fcn.004b4ba0
lea ecx, [ebp - 0x978]
call fcn.004b4b30
mov edx, dword [ebp - 0x97c]
cmp edx, 0x10
jb 0x42677b
mov ecx, dword [ebp - 0x990]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x426771
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42686b
push edx
push ecx
call fcn.0051ec14
add esp, 8
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0xf
mov byte [ebp - 0x990], 0
call fcn.00403d90
mov ecx, dword [ebp - 0x8d4]
test ecx, ecx
je 0x4267b1
push ecx
call fcn.00403bb0
lea ecx, [ebp - 0x86c]
call fcn.0041cf40
lea ecx, [ebp - 0xac0]
call fcn.004206d0
mov eax, dword [ebp - 0xacc]
jmp 0x4249f8
lea eax, [ebp - 0x9e0]
push eax
mov eax, dword [ebp - 0x9fc]
lea ecx, [ebp - 0x9fc]
mov eax, dword [eax]
call eax
test eax, eax
jne 0x426807
lea eax, [ebp - 0x9e0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x9e0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [ebp - 0x83c]
cmp eax, 0x118
ja 0x426830
je 0x426373
cmp eax, 0xf
je 0x426373
cmp eax, 0xa0
jmp 0x426835
cmp eax, 0x200
je 0x426373
jmp 0x42635e
push 0x5b4454
lea eax, [ebp - 0xaec]
mov dword [ebp - 0xaec], esi
push eax
call fcn.005247ca
call fcn.00528129
call fcn.00528129
call fcn.00528129
call fcn.00528129
call fcn.00528129
int3