Function at 0x417280
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa3c
mov eax, dword [0x658aa8]
xor eax, esp
mov dword [esp + 0xa38], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
push ebx
push esi
xor ebx, ebx
mov dword [esp + 0x9f8], ebx
push edi
mov dword [esp + 0x9f4], eax
mov dword [0x66bdf0], ecx
call fcn.00417200
push 3
mov edi, 0xf
push 0x635a38
lea ecx, [esp + 0x170]
mov byte [esp + 0xa34], 0xb3
mov byte [esp + 0xa35], 0xf5
mov byte [esp + 0xa36], 0xca
mov byte [esp + 0xa37], 0xbc
mov byte [esp + 0xa38], 0xbb
mov byte [esp + 0xa39], 0xaf
mov byte [esp + 0xa3a], 0xc6
mov byte [esp + 0xa3b], 0xf4
mov byte [esp + 0xa3c], 0xb6
mov byte [esp + 0xa3d], 0xaf
mov byte [esp + 0xa3e], bl
mov dword [esp + 0x188], edi
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
call fcn.00414400
lea eax, [esp + 0xa2c]
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebx
mov byte [esp + 0x150], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x417361
sub eax, esi
push eax
lea edx, [esp + 0xa30]
push edx
lea ecx, [esp + 0x154]
call fcn.00414400
push 8
push str.v1.1.3.1
lea ecx, [esp + 0xe4]
mov dword [esp + 0xfc], edi
mov dword [esp + 0xf8], ebx
mov byte [esp + 0xe8], bl
call fcn.00414400
push 1
push 0x635104
lea ecx, [esp + 0x138]
mov dword [esp + 0x150], edi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
call fcn.00414400
push ebx
push 0x637908
lea ecx, [esp + 0x74]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x88], ebx
mov byte [esp + 0x78], bl
call fcn.00414400
push 1
push 0x635104
lea ecx, [esp + 0xc8]
mov dword [esp + 0xe0], edi
mov dword [esp + 0xdc], ebx
mov byte [esp + 0xcc], bl
call fcn.00414400
push ebx
push 0x637908
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.00414400
push ebx
push 0x637908
lea ecx, [esp + 0x90]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
call fcn.00414400
push ebx
push 0x637908
lea ecx, [esp + 0x58]
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
call fcn.00414400
push ebx
push 0x637908
lea ecx, [esp + 0xac]
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], ebx
mov byte [esp + 0xb0], bl
call fcn.00414400
mov edx, dword [esp + 0xa8]
mov esi, 0x10
cmp dword [esp + 0xbc], esi
jae 0x4174b8
lea edx, [esp + 0xa8]
cmp dword [esp + 0x4c], esi
jb 0x4174c8
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], eax
jmp 0x4174d0
lea ecx, [esp + 0x38]
mov dword [esp + 0x24], ecx
cmp dword [esp + 0xd8], esi
jb 0x4174e6
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x1c], eax
jmp 0x4174f1
lea ecx, [esp + 0xc4]
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x84], esi
jb 0x417504
mov eax, dword [esp + 0x70]
mov dword [esp + 0x2c], eax
jmp 0x41750c
lea ecx, [esp + 0x70]
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x68], esi
jb 0x41751c
mov eax, dword [esp + 0x54]
mov dword [esp + 0x20], eax
jmp 0x417524
lea ecx, [esp + 0x54]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0xa0], esi
jb 0x41753a
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x28], eax
jmp 0x417545
lea ecx, [esp + 0x8c]
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x148], esi
jb 0x41755b
mov eax, dword [esp + 0x134]
mov dword [esp + 0x30], eax
jmp 0x417566
lea ecx, [esp + 0x134]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0xe0]
cmp dword [esp + 0xf4], esi
jae 0x41757d
lea ecx, [esp + 0xe0]
mov eax, dword [esp + 0x150]
cmp dword [esp + 0x164], esi
jae 0x417594
lea eax, [esp + 0x150]
cmp dword [esp + 0x180], esi
mov esi, dword [esp + 0x16c]
jae 0x4175ab
lea esi, [esp + 0x16c]
push edx
mov edx, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push edx
push ecx
push eax
mov ecx, 0x66be38
call fcn.00428580
lea eax, [esp + 0xa38]
push eax
push ebx
push ebx
mov byte [esp + 0xa44], 0x4d
mov byte [esp + 0xa45], 0x75
mov byte [esp + 0xa46], 0x74
mov byte [esp + 0xa47], 0x65
mov byte [esp + 0xa48], 0x78
mov byte [esp + 0xa49], 0x55
mov byte [esp + 0xa4a], 0x48
mov byte [esp + 0xa4b], 0x5a
mov byte [esp + 0xa4c], bl
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4179ae
mov cl, 0x69
mov byte [esp + 0x9eb], cl
mov byte [esp + 0x9ee], cl
mov al, 0x6e
push ebx
lea ecx, [esp + 0x9ec]
push ecx
mov byte [esp + 0x9f0], 0x43
mov byte [esp + 0x9f1], 0x4d
mov byte [esp + 0x9f2], 0x61
mov byte [esp + 0x9f4], al
mov byte [esp + 0x9f5], 0x57
mov byte [esp + 0x9f7], al
mov byte [esp + 0x9f8], 0x64
mov byte [esp + 0x9f9], 0x6f
mov byte [esp + 0x9fa], 0x77
mov byte [esp + 0x9fb], bl
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [esp + 0x9fc], eax
cmp eax, ebx
je 0x4176d0
push 9
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esp + 0x9fc]
push edx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov al, 0xd0
mov cl, 0xcd
push ebx
mov byte [esp + 0xa1a], al
mov byte [esp + 0xa1e], al
mov byte [esp + 0xa24], al
lea eax, [esp + 0x9f8]
mov byte [esp + 0xa16], cl
mov byte [esp + 0xa1b], cl
push eax
lea ecx, [esp + 0xa14]
mov dl, 0xd8
push ecx
push ebx
mov byte [esp + 0xa04], 0xcc
mov byte [esp + 0xa05], 0xe1
mov byte [esp + 0xa06], 0xca
mov byte [esp + 0xa07], 0xbe
mov byte [esp + 0xa08], bl
mov byte [esp + 0xa1c], 0xc7
mov byte [esp + 0xa1d], 0xeb
mov byte [esp + 0xa1e], 0xb9
mov byte [esp + 0xa1f], dl
mov byte [esp + 0xa20], 0xb1
mov byte [esp + 0xa21], 0xd5
mov byte [esp + 0xa23], 0xac
mov byte [esp + 0xa24], 0xc0
mov byte [esp + 0xa25], 0xe0
mov byte [esp + 0xa28], 0xb3
mov byte [esp + 0xa29], 0xcc
mov byte [esp + 0xa2b], 0xf2
mov byte [esp + 0xa2c], 0xba
mov byte [esp + 0xa2d], 0xf3
mov byte [esp + 0xa2e], 0xd6
mov byte [esp + 0xa2f], dl
mov byte [esp + 0xa31], 0xc2
mov byte [esp + 0xa32], 0xc6
mov byte [esp + 0xa33], 0xf4
mov byte [esp + 0xa34], 0xb6
mov byte [esp + 0xa35], 0xaf
mov byte [esp + 0xa36], 0xa3
mov byte [esp + 0xa37], 0xa1
mov byte [esp + 0xa38], bl
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0x10
cmp dword [esp + 0xbc], esi
jb 0x41781a
mov edx, dword [esp + 0xa8]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xa8], bl
cmp dword [esp + 0x68], esi
jb 0x417842
mov eax, dword [esp + 0x54]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
cmp dword [esp + 0xa0], esi
jb 0x417867
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
cmp dword [esp + 0x4c], esi
jb 0x41788f
mov edx, dword [esp + 0x38]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
cmp dword [esp + 0xd8], esi
jb 0x4178b4
mov eax, dword [esp + 0xc4]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
cmp dword [esp + 0x84], esi
jb 0x4178df
mov ecx, dword [esp + 0x70]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
cmp dword [esp + 0x148], esi
jb 0x41790a
mov edx, dword [esp + 0x134]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x148], edi
mov dword [esp + 0x144], ebx
mov byte [esp + 0x134], bl
cmp dword [esp + 0xf4], esi
jb 0x417938
mov eax, dword [esp + 0xe0]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
cmp dword [esp + 0x164], esi
jb 0x417966
mov ecx, dword [esp + 0x150]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebx
mov byte [esp + 0x150], bl
cmp dword [esp + 0x180], esi
jb 0x417994
mov edx, dword [esp + 0x16c]
push edx
call fcn.0048fcfa
add esp, 4
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa38]
xor ecx, esp
call fcn.00499a1c
mov esp, ebp
pop ebp
ret 0x10
call fcn.00418ba0
mov esi, dword [esp + 0x9f4]
push esi
lea ecx, [esp + 0x18]
call fcn.00413e80
push esi
lea ecx, [esp + 0x1c]
call fcn.00413e80
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
jl 0x4179fa
push str.https:__
push ecx
call fcn.0049ab43
mov ecx, dword [esp + 0x1c]
add esp, 8
cmp eax, ebx
je 0x4179fa
sub eax, ecx
cmp eax, 0xffffffff
jne 0x417adc
cmp dword [ecx - 0xc], ebx
jl 0x417a1e
push str.http:__
push ecx
call fcn.0049ab43
add esp, 8
cmp eax, ebx
je 0x417a1e
sub eax, dword [esp + 0x14]
cmp eax, 0xffffffff
jne 0x417adc
push esi
lea ecx, [esp + 0x1a4]
call fcn.00414510
push eax
push str.https:__
lea ecx, [esp + 0x18c]
call fcn.00414510
push eax
lea edi, [esp + 0x100]
call fcn.004195e0
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x664af4
call fcn.00414010
mov esi, 0x10
cmp dword [esp + 0x110], esi
jb 0x417a79
mov eax, dword [esp + 0xfc]
push eax
call fcn.0048fcfa
add esp, 4
mov edi, 0xf
mov dword [esp + 0x110], edi
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
cmp dword [esp + 0x19c], esi
jb 0x417aac
mov ecx, dword [esp + 0x188]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x19c], edi
mov dword [esp + 0x198], ebx
mov byte [esp + 0x188], bl
cmp dword [esp + 0x1b8], esi
jb 0x417afb
mov edx, dword [esp + 0x1a4]
push edx
call fcn.0048fcfa
add esp, 4
jmp 0x417afb
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x417ae1
sub eax, edx
push eax
push esi
mov ecx, 0x664af4
call fcn.00414400
mov esi, 0x10
call fcn.004207e0
mov eax, dword [ebp + 8]
push ebx
mov dword [0x66bdf0], eax
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebx
jge 0x417cf3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417b37
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417b57
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0xbc], esi
jb 0x417b70
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xa8], bl
cmp dword [esp + 0x68], esi
jb 0x417b98
mov edx, dword [esp + 0x54]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
cmp dword [esp + 0xa0], esi
jb 0x417bbd
mov eax, dword [esp + 0x8c]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
cmp dword [esp + 0x4c], esi
jb 0x417be5
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
cmp dword [esp + 0xd8], esi
jb 0x417c0a
mov edx, dword [esp + 0xc4]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
cmp dword [esp + 0x84], esi
jb 0x417c35
mov eax, dword [esp + 0x70]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
cmp dword [esp + 0x148], esi
jb 0x417c60
mov ecx, dword [esp + 0x134]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x148], edi
mov dword [esp + 0x144], ebx
mov byte [esp + 0x134], bl
cmp dword [esp + 0xf4], esi
jb 0x417c8e
mov edx, dword [esp + 0xe0]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
cmp dword [esp + 0x164], esi
jb 0x417cbc
mov eax, dword [esp + 0x150]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebx
mov byte [esp + 0x150], bl
cmp dword [esp + 0x180], esi
jb 0x418507
mov ecx, dword [esp + 0x16c]
push ecx
call fcn.0048fcfa
add esp, 4
jmp 0x418507
push 0xffffffffffffffff
push ebx
push 0x664af4
lea ecx, [esp + 0x120]
mov dword [esp + 0x138], edi
mov dword [esp + 0x134], ebx
mov byte [esp + 0x124], bl
call fcn.00414010
mov eax, dword [esp + 0x128]
cmp eax, ebx
jbe 0x417d90
push 1
lea ecx, [eax - 2]
lea esi, [esp + 0x1a4]
lea edx, [esp + 0x118]
mov dword [esp + 0xa00], 1
call fcn.00419020
mov esi, dword [eax + 0x14]
mov ecx, esi
cmp esi, 1
jb 0x417d59
mov ecx, 1
cmp dword [eax + 0x18], 0x10
jb 0x417d64
mov eax, dword [eax + 4]
jmp 0x417d67
add eax, 4
push ecx
mov ecx, 0x635a50
mov edx, eax
call fcn.00413900
add esp, 4
cmp eax, ebx
jne 0x417d90
cmp esi, 1
jb 0x417d90
xor eax, eax
cmp esi, 1
setne al
mov byte [esp + 0x13], bl
cmp eax, ebx
je 0x417d95
mov byte [esp + 0x13], 1
test byte [esp + 0x9fc], 1
je 0x417db9
cmp dword [esp + 0x1b8], 0x10
jb 0x417db9
mov edx, dword [esp + 0x1a4]
push edx
call fcn.0048fcfa
add esp, 4
cmp byte [esp + 0x13], bl
je 0x41810b
lea edi, [esp + 0x330]
mov byte [esp + 0x9e8], 0x6c
mov byte [esp + 0x9e9], 0x6f
mov byte [esp + 0x9ea], 0x61
mov byte [esp + 0x9eb], 0x64
mov byte [esp + 0x9ec], 0x70
mov byte [esp + 0x9ed], 0x63
mov byte [esp + 0x9ee], 0x2e
mov byte [esp + 0x9ef], 0x65
mov byte [esp + 0x9f0], 0x78
mov byte [esp + 0x9f1], 0x65
mov byte [esp + 0x9f2], bl
call fcn.004040a0
push 0x635a54
lea ecx, [esp + 0xfc]
call fcn.00414510
lea eax, [esp + 0x9e8]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x417e41
sub eax, esi
push eax
lea eax, [esp + 0x9ec]
push eax
lea eax, [esp + 0x100]
call fcn.00412fa0
push 4
push 0x635a5c
lea eax, [esp + 0x100]
call fcn.00412fa0
push ebx
sub esp, 0x44
mov esi, esp
mov dword [esp + 0xa3c], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
mov byte [esp + 0xa48], 0xb3
mov byte [esp + 0xa49], 0xcc
mov byte [esp + 0xa4a], 0xd0
mov byte [esp + 0xa4b], 0xf2
mov byte [esp + 0xa4c], 0xc6
mov byte [esp + 0xa4d], 0xf4
mov byte [esp + 0xa4e], 0xb6
mov byte [esp + 0xa4f], 0xaf
mov byte [esp + 0xa50], 0xd2
mov byte [esp + 0xa51], 0xec
mov byte [esp + 0xa52], 0xb3
mov byte [esp + 0xa53], 0xa3
mov byte [esp + 0xa54], bl
push 0x634b08
mov dword [esi], eax
mov byte [eax], bl
call fcn.00428e20
mov ecx, dword [esp + 0x144]
mov edi, 0x10
cmp dword [esp + 0x158], edi
jae 0x417f15
lea ecx, [esp + 0x144]
sub esp, 0x44
mov esi, esp
mov dword [esp + 0xa80], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
push ecx
mov dword [esi], eax
mov byte [eax], bl
call fcn.00428e20
sub esp, 0x44
mov esi, esp
mov dword [esp + 0xac4], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
lea ecx, [esp + 0xad0]
push ecx
mov dword [esi], eax
mov byte [eax], bl
call fcn.00428e20
mov edx, dword [0x66bdcc]
push edx
lea ecx, [esp + 0x404]
call fcn.004046f0
cmp dword [esp + 0x110], edi
jb 0x417f7e
mov eax, dword [esp + 0xfc]
push eax
call fcn.0048fcfa
add esp, 4
lea esi, [esp + 0x330]
mov dword [esp + 0x110], 0xf
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
call fcn.004041b0
cmp dword [esp + 0x12c], edi
jb 0x417fbc
mov ecx, dword [esp + 0x118]
push ecx
call fcn.0048fcfa
add esp, 4
mov eax, dword [esp + 0x18]
mov esi, 0xf
add eax, 0xfffffff0
mov dword [esp + 0x12c], esi
mov dword [esp + 0x128], ebx
mov byte [esp + 0x118], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x417ff6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418016
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0xbc], edi
jb 0x41802f
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xbc], esi
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xa8], bl
cmp dword [esp + 0x68], edi
jb 0x418057
mov edx, dword [esp + 0x54]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x68], esi
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
cmp dword [esp + 0xa0], edi
jb 0x41807c
mov eax, dword [esp + 0x8c]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xa0], esi
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
cmp dword [esp + 0x4c], edi
jb 0x4180a4
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
cmp dword [esp + 0xd8], edi
jb 0x4180c9
mov edx, dword [esp + 0xc4]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xd8], esi
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
cmp dword [esp + 0x84], edi
jb 0x4180f4
mov eax, dword [esp + 0x70]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jmp 0x4184d7
mov ecx, dword [esp + 0x128]
push 1
dec ecx
lea esi, [esp + 0xa10]
lea edx, [esp + 0x118]
call fcn.00419020
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x664a80
call fcn.00414010
mov ecx, esi
call fcn.00413f50
mov ecx, dword [esp + 0x128]
add ecx, 0xfffffffe
push ecx
xor ecx, ecx
lea esi, [esp + 0xa10]
lea edx, [esp + 0x118]
call fcn.00419020
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x120]
call fcn.00414010
mov ecx, esi
call fcn.00413f50
call fcn.00418a30
push 0xe8
lea edx, [esp + 0x24c]
push ebx
push edx
call fcn.004a0660
lea eax, [esp + 0x254]
add esp, 0xc
push eax
mov dword [esp + 0x31c], 8
call fcn.0041b010
add esp, 4
push 0xdb4
call fcn.0048fcc0
add esp, 4
cmp eax, ebx
je 0x4181c3
push eax
call fcn.0040bd00
jmp 0x4181c5
xor eax, eax
sub esp, 0x1c
lea edx, [esp + 0x130]
mov ecx, esp
mov dword [esp + 0xa10], esp
push edx
mov dword [0x66bdc8], eax
call fcn.00413a80
call fcn.0040c0f0
test al, al
je 0x41846e
mov esi, dword [0x66bdd4]
cmp esi, ebx
je 0x418209
push 1
call fcn.00401410
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
lea eax, [esp + 0x130]
mov ecx, esp
mov dword [esp + 0xa10], esp
push eax
call fcn.00413a80
call fcn.00418520
add esp, 0x1c
test al, al
je 0x41847a
push 0x635a64
lea ecx, [esp + 0xa10]
mov byte [esp + 0x9ec], 0xbf
mov byte [esp + 0x9ed], 0xf2
mov byte [esp + 0x9ee], 0xbc
mov byte [esp + 0x9ef], 0xdc
mov byte [esp + 0x9f0], 0xc6
mov byte [esp + 0x9f1], 0xf4
mov byte [esp + 0x9f2], 0xb6
mov byte [esp + 0x9f3], 0xaf
mov byte [esp + 0x9f4], bl
mov byte [esp + 0xa00], 0xb5
mov byte [esp + 0xa01], 0xc7
mov byte [esp + 0xa02], 0xba
mov byte [esp + 0xa03], 0xc5
mov byte [esp + 0xa04], 0xc6
mov byte [esp + 0xa05], 0xf7
mov byte [esp + 0xa06], bl
call fcn.00414510
lea ecx, [esp + 0x9e8]
push ecx
lea ecx, [esp + 0x230]
call fcn.00414510
push str.v1.1.3.1
lea ecx, [esp + 0x214]
call fcn.00414510
push 0x635104
lea ecx, [esp + 0x1f8]
call fcn.00414510
push 0x637908
lea ecx, [esp + 0x1dc]
call fcn.00414510
push 0x635104
lea ecx, [esp + 0x1c0]
call fcn.00414510
push 0x637908
lea ecx, [esp + 0xfc]
call fcn.00414510
push 0x637908
lea ecx, [esp + 0x188]
call fcn.00414510
push 0x637908
lea ecx, [esp + 0x1a4]
call fcn.00414510
push 0x637908
lea ecx, [esp + 0xfc]
call fcn.00413f40
push eax
lea ecx, [esp + 0x1c4]
call fcn.00413f40
push eax
lea ecx, [esp + 0x1e4]
call fcn.00413f40
push eax
lea ecx, [esp + 0x1b0]
call fcn.00413f40
push eax
lea ecx, [esp + 0x198]
call fcn.00413f40
push eax
lea ecx, [esp + 0x20c]
call fcn.00413f40
push eax
lea ecx, [esp + 0x22c]
call fcn.00413f40
push eax
lea ecx, [esp + 0x24c]
call fcn.00413f40
push eax
lea ecx, [esp + 0xa30]
call fcn.00413f40
mov esi, eax
mov ecx, 0x66be38
call fcn.00428580
mov edx, dword [0x66bdc8]
mov esi, dword [edx]
sub esp, 0x44
mov eax, esp
mov dword [esp + 0xa38], esp
push 0xffffffffffffffff
lea ecx, [esp + 0xa44]
call fcn.00428cc0
mov ecx, dword [0x66bdc8]
mov eax, dword [esi + 0x8c]
push ebx
call eax
lea ecx, [esp + 0x1a0]
call fcn.00413f50
lea ecx, [esp + 0x184]
call fcn.00413f50
lea ecx, [esp + 0xf8]
call fcn.00413f50
lea ecx, [esp + 0x1bc]
call fcn.00413f50
lea ecx, [esp + 0x1d8]
call fcn.00413f50
lea ecx, [esp + 0x1f4]
call fcn.00413f50
lea ecx, [esp + 0x210]
call fcn.00413f50
lea ecx, [esp + 0x22c]
call fcn.00413f50
lea ecx, [esp + 0xa0c]
call fcn.00413f50
call dword [0x66bfc8]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [esp + 0x114]
call fcn.00413f50
lea ecx, [esp + 0x18]
call fcn.00404080
lea ecx, [esp + 0x14]
call fcn.00404080
lea ecx, [esp + 0xa4]
call fcn.00413f50
lea ecx, [esp + 0x50]
call fcn.00413f50
lea ecx, [esp + 0x88]
call fcn.00413f50
lea ecx, [esp + 0x34]
call fcn.00413f50
lea ecx, [esp + 0xc0]
call fcn.00413f50
lea ecx, [esp + 0x6c]
call fcn.00413f50
lea ecx, [esp + 0x130]
call fcn.00413f50
lea ecx, [esp + 0xdc]
call fcn.00413f50
lea ecx, [esp + 0x14c]
call fcn.00413f50
lea ecx, [esp + 0x168]
call fcn.00413f50
mov ecx, dword [esp + 0xa44]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00499a1c
mov esp, ebp
pop ebp
ret 0x10