Function at 0x409ac0
Capabilities:
Connect to http server
Create http request
Enumerate processes

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414e8e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x718
mov eax, dword [0x41e008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x120]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x120]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x120]
push 0x5c
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsrchr]
add esp, 4
mov edx, 0x104
push str.uninstall.bss
push ecx
lea ecx, [eax + 1]
call fcn.00409060
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x120]
push eax
push 0x41a5b4
push str.title
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a5d8
push str.tipOne
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a5f4
push str.tipTwo
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a608
push str.tipThree
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a620
push str.showNum
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a620
push str.softnum
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a620
push str.dllnum
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41a620
push str.linknum
push str.General
call esi
mov ecx, str.000000
mov eax, 0x41f138
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x409c40
test dl, dl
je 0x409c3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x409c40
add eax, 2
add ecx, 2
test dl, dl
jne 0x409c20
xor eax, eax
jmp 0x409c45
sbb eax, eax
or eax, 1
test eax, eax
jne 0x409c53
mov eax, 1
jmp 0x40bffa
lea eax, [ebp - 0x120]
push eax
push 0x41f23e
push 0x41a644
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41f034
push str.version
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
push 0x41f138
push str.channel
push str.General
call esi
push 0
push 0
push 0
push 1
push str.WindowsApplication
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ecx, eax
mov dword [0x41f288], ecx
test ecx, ecx
je 0x409cdf
movzx eax, word [0x41f23c]
push 0
push 0
push 3
push 0
push 0
push eax
push 0x41ef20
push ecx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [0x41f28c], eax
jmp 0x409ce4
mov eax, dword [0x41f28c]
test eax, eax
je 0x40bffa
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
lea ecx, [ebp - 0x6c4]
push edx
push eax
call fcn.00409270
add esp, 8
mov esi, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x5fc]
push 0xc
push str._version_:_
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x5e8], 0xf
mov byte [ebp - 0x5fc], 0
call fcn.00410d70
push 0x41f034
lea edx, [ebp - 0x5fc]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6ac]
call fcn.00410ef0
add esp, 4
push 0x41a67c
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x694]
call fcn.00410ef0
add esp, 4
push str._channel_:_
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x67c]
call fcn.00410ef0
add esp, 4
push 0x41f138
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6dc]
call fcn.00410ef0
add esp, 4
push 0x41a67c
mov edx, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x660]
call fcn.00410ef0
add esp, 4
push str._uid_:_
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x648]
call fcn.00410ef0
add esp, 4
push 0x41f23e
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x630]
call fcn.00410ef0
add esp, 4
push 0x41a67c
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x618]
call fcn.00410ef0
add esp, 4
push str._curTime_:
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x70c]
call fcn.00410ef0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6f4]
call fcn.00410f90
add esp, 4
push 0x41a66c
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x450]
call fcn.00410ef0
add esp, 4
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x6e0]
cmp edx, 0x10
jb 0x409e90
mov ecx, dword [ebp - 0x6f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409e86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409e86
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x6e0], 0xf
mov byte [ebp - 0x6f4], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x6f8]
cmp edx, 0x10
jb 0x409eeb
mov ecx, dword [ebp - 0x70c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ee1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409ee1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 0xf
mov byte [ebp - 0x70c], 0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x604]
cmp edx, 0x10
jb 0x409f46
mov ecx, dword [ebp - 0x618]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409f3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409f3c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x604], 0xf
mov byte [ebp - 0x618], 0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x61c]
cmp edx, 0x10
jb 0x409fa1
mov ecx, dword [ebp - 0x630]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409f97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409f97
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x61c], 0xf
mov byte [ebp - 0x630], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x634]
cmp edx, 0x10
jb 0x409ffc
mov ecx, dword [ebp - 0x648]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ff2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x409ff2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x634], 0xf
mov byte [ebp - 0x648], 0
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x64c]
cmp edx, 0x10
jb 0x40a057
mov ecx, dword [ebp - 0x660]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a04d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a04d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x64c], 0xf
mov byte [ebp - 0x660], 0
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x6c8]
cmp edx, 0x10
jb 0x40a0b2
mov ecx, dword [ebp - 0x6dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a0a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a0a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x6c8], 0xf
mov byte [ebp - 0x6dc], 0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x668]
cmp edx, 0x10
jb 0x40a10d
mov ecx, dword [ebp - 0x67c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a103
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a103
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0xf
mov byte [ebp - 0x67c], 0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x680]
cmp edx, 0x10
jb 0x40a168
mov ecx, dword [ebp - 0x694]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a15e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a15e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0xf
mov byte [ebp - 0x694], 0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x698]
cmp edx, 0x10
jb 0x40a1c3
mov ecx, dword [ebp - 0x6ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a1b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a1b9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 0xf
mov byte [ebp - 0x6ac], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x5e8]
cmp edx, 0x10
jb 0x40a21e
mov ecx, dword [ebp - 0x5fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a214
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a214
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x5e8], 0xf
mov byte [ebp - 0x5fc], 0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x6b0]
cmp edx, 0x10
jb 0x40a279
mov ecx, dword [ebp - 0x6c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a26f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a26f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0xf
mov byte [ebp - 0x468], 0
push 0
push 0x800000
push 0x41f028
push 0
push 0
push 0x41ee18
push str.POST
mov byte [ebp - 4], 0x19
push dword [0x41f28c]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
lea edx, [ebp - 0x450]
lea eax, [ebp - 0x468]
mov ecx, esi
push eax
call fcn.0040d510
add esp, 4
mov edi, eax
test esi, esi
je 0x40a2e4
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
test edi, edi
js 0x40bf63
push 0x124
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x5b1], 1
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x590], 0x128
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
movzx ecx, byte [ebp - 0x5b1]
xor edx, edx
cmp eax, 0xffffffff
mov dword [ebp - 0x440], edx
push 0xc
cmove ecx, edx
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x43c], 0x10
mov dword [ebp - 0x664], ecx
lea ecx, [ebp - 0x450]
cmovae ecx, dword [ebp - 0x450]
push str._version_:_
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5e8], 0xf
mov byte [ecx], dl
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 0x5fc], dl
call fcn.00410d70
push 0x41f034
lea edx, [ebp - 0x5fc]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x618]
call fcn.00410ef0
add esp, 4
push 0x41a67c
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x630]
call fcn.00410ef0
add esp, 4
push str._channel_:_
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x648]
call fcn.00410ef0
add esp, 4
push 0x41f138
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x660]
call fcn.00410ef0
add esp, 4
push 0x41a67c
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6dc]
call fcn.00410ef0
add esp, 4
push str._uid_:_
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x67c]
call fcn.00410ef0
add esp, 4
push 0x41f23e
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x694]
call fcn.00410ef0
add esp, 4
mov byte [ebp - 4], 0x21
push 0x41a67c
mov edx, eax
lea ecx, [ebp - 0x6ac]
call fcn.00410ef0
add esp, 4
lea ecx, [ebp - 0x450]
push eax
call fcn.0040fe90
mov edx, dword [ebp - 0x698]
cmp edx, 0x10
jb 0x40a490
mov ecx, dword [ebp - 0x6ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a486
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a486
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x680]
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 0xf
mov byte [ebp - 0x6ac], 0
cmp edx, 0x10
jb 0x40a4eb
mov ecx, dword [ebp - 0x694]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a4e1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x668]
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0xf
mov byte [ebp - 0x694], 0
cmp edx, 0x10
jb 0x40a546
mov ecx, dword [ebp - 0x67c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a53c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a53c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x6c8]
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0xf
mov byte [ebp - 0x67c], 0
cmp edx, 0x10
jb 0x40a5a1
mov ecx, dword [ebp - 0x6dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a597
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a597
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x6c8], 0xf
mov byte [ebp - 0x6dc], 0
cmp edx, 0x10
jb 0x40a5fc
mov ecx, dword [ebp - 0x660]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a5f2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x634]
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x64c], 0xf
mov byte [ebp - 0x660], 0
cmp edx, 0x10
jb 0x40a657
mov ecx, dword [ebp - 0x648]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a64d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a64d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x61c]
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x634], 0xf
mov byte [ebp - 0x648], 0
cmp edx, 0x10
jb 0x40a6b2
mov ecx, dword [ebp - 0x630]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a6a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a6a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x61c], 0xf
mov byte [ebp - 0x630], 0
cmp edx, 0x10
jb 0x40a70d
mov ecx, dword [ebp - 0x618]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a703
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a703
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x5e8]
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x604], 0xf
mov byte [ebp - 0x618], 0
cmp edx, 0x10
jb 0x40a768
mov ecx, dword [ebp - 0x5fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a75e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40a75e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
cmp dword [ebp - 0x454], 0x10
lea esi, [ebp - 0x468]
push 0x28
cmovae esi, dword [ebp - 0x468]
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x5e8], 0xf
mov byte [ebp - 0x5fc], 0
call dword [0x419cac]
mov edi, eax
add esp, 4
mov dword [ebp - 0x5d0], edi
test edi, edi
je 0x40b4c8
xorps xmm0, xmm0
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm0
movq qword [edi + 0x20], xmm0
test esi, esi
je 0x40a7d4
mov al, byte [esi]
test al, al
je 0x40a7d4
cmp al, 0x20
ja 0x40a7d4
add esi, 1
jne 0x40a7c5
mov edx, esi
mov ecx, edi
call fcn.00411cf0
mov ecx, edi
test eax, eax
je 0x40b4c3
call fcn.004120b0
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5c4], 0
test eax, eax
jle 0x40b4c1
mov ecx, dword [ebp - 0x5d4]
xor eax, eax
nop dword [eax]
mov edi, dword [edi + 8]
mov dword [ebp - 0x5bc], edi
test edi, edi
je 0x40b4a6
test eax, eax
jle 0x40a837
mov edi, dword [edi]
dec eax
mov dword [ebp - 0x5bc], edi
test edi, edi
jne 0x40a821
jmp 0x40b4a6
test edi, edi
je 0x40b4a6
mov esi, dword [edi + 8]
test esi, esi
je 0x40b4a6
nop word [eax + eax]
mov ecx, dword [esi + 0x20]
mov edx, str.type
call fcn.00411750
test eax, eax
je 0x40a86c
mov esi, dword [esi]
test esi, esi
jne 0x40a850
jmp 0x40b4a0
test esi, esi
je 0x40b4a0
cmp dword [esi + 0xc], 3
jne 0x40b4a0
cmp dword [esi + 0x14], 3
jne 0x40b4a0
cmp byte [ebp - 0x664], 0
je 0x40abf7
mov edx, str.procs
mov ecx, edi
call fcn.004120d0
mov esi, eax
mov dword [ebp - 0x5e4], esi
test esi, esi
je 0x40abf7
push str._procs_:_
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov ecx, esi
call fcn.004120b0
mov dword [ebp - 0x5c0], eax
xor eax, eax
mov byte [ebp - 0x5b1], 1
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5c0], eax
jle 0x40abe7
nop dword [eax]
mov esi, dword [esi + 8]
test esi, esi
je 0x40abc2
nop dword [eax + eax]
test eax, eax
jle 0x40a90b
mov esi, dword [esi]
dec eax
test esi, esi
jne 0x40a900
test esi, esi
je 0x40abc2
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x40abc2
mov edx, str._ref
mov ecx, esi
call fcn.004120d0
test eax, eax
jne 0x40a957
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edi, eax
mov dword [ebp - 0x5d8], edi
jmp 0x40aa0c
cmp dword [eax + 0xc], 4
jne 0x40abc2
lea ecx, [ebp - 0x5a0]
push ecx
lea ecx, [ebp - 0x59c]
push ecx
push str.___d_.procs__d_
push dword [eax + 0x10]
call fcn.00408fc0
add esp, 0x10
cmp eax, 2
jl 0x40abc2
mov ecx, dword [ebp - 0x5d0]
mov eax, dword [ebp - 0x59c]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x40abc2
nop
test eax, eax
jle 0x40a9b0
mov ecx, dword [ecx]
dec eax
test ecx, ecx
jne 0x40a9a0
jmp 0x40abc2
test ecx, ecx
je 0x40abc2
mov edx, str.procs
call fcn.004120d0
test eax, eax
je 0x40abc2
mov esi, dword [eax + 8]
mov ecx, dword [ebp - 0x5a0]
test esi, esi
je 0x40abc2
nop dword [eax + eax]
test ecx, ecx
jle 0x40a9f0
mov esi, dword [esi]
dec ecx
test esi, esi
jne 0x40a9e0
jmp 0x40abc2
test esi, esi
je 0x40abc2
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edi, eax
mov dword [ebp - 0x5d8], eax
mov edx, str.name
mov ecx, esi
call fcn.004120d0
mov dword [ebp - 0x5dc], eax
test edi, edi
je 0x40abc2
cmp dword [edi + 0xc], 3
jne 0x40abc2
test eax, eax
je 0x40abc2
cmp dword [eax + 0xc], 4
jne 0x40abc2
mov edi, dword [eax + 0x10]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x40aa48
sub edi, ecx
lea esi, [edi + 1]
push esi
call fcn.00413f90
add esp, 4
mov dword [ebp - 0x5b8], eax
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor esi, esi
test edi, edi
jle 0x40aab0
nop word [eax + eax]
mov eax, dword [ebp - 0x5dc]
mov eax, dword [eax + 0x10]
movsx eax, byte [eax + esi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ecx, dword [ebp - 0x5b8]
add esp, 4
mov byte [esi + ecx], al
inc esi
cmp esi, edi
jl 0x40aa80
nop word [eax + eax]
push 0x104
lea eax, [ebp - 0x438]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea edi, [ebp - 0x56c]
add esp, 0xc
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x40aad0
sub edi, ecx
xor esi, esi
test edi, edi
jle 0x40aafe
nop
movsx eax, byte [ebp + esi - 0x56c]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [ebp + esi - 0x438], al
add esp, 4
inc esi
cmp esi, edi
jl 0x40aae0
mov esi, dword [ebp - 0x5b8]
lea eax, [ebp - 0x438]
push eax
push esi
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
jne 0x40ab35
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x40aab0
jmp 0x40abb7
cmp byte [ebp - 0x5b1], 0
jne 0x40ab4e
push 0x41a6ec
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov edx, dword [ebp - 0x5d8]
lea ecx, [ebp - 0x6c4]
mov edx, dword [edx + 0x14]
call fcn.004091c0
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x22
call fcn.0040fe20
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x6b0]
cmp edx, 0x10
jb 0x40abb0
mov ecx, dword [ebp - 0x6c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aba6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409e80
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 0x5b1], 0
push 1
push esi
call fcn.00413d82
add esp, 8
mov eax, dword [ebp - 0x5cc]
mov esi, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5cc], eax
cmp eax, dword [ebp - 0x5c0]
jl 0x40a8f0
mov edi, dword [ebp - 0x5bc]
push 0x41a6f0
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov edx, str.regs
mov ecx, edi
call fcn.004120d0
mov esi, eax
mov dword [ebp - 0x5e4], esi
test esi, esi
je 0x40b01f
push str.__regs_:_
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov ecx, esi
call fcn.004120b0
mov dword [ebp - 0x5d8], eax
xor eax, eax
mov byte [ebp - 0x5b1], 1
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5d8], eax
jle 0x40afbf
nop dword [eax + eax]
mov esi, dword [esi + 8]
test esi, esi
je 0x40af9a
nop dword [eax + eax]
test eax, eax
jle 0x40ac70
mov esi, dword [esi]
dec eax
test esi, esi
jne 0x40ac60
jmp 0x40af9a
test esi, esi
je 0x40af9a
mov edx, str._ref
mov ecx, esi
call fcn.004120d0
test eax, eax
je 0x40ad28
cmp dword [eax + 0xc], 4
jne 0x40af9a
lea ecx, [ebp - 0x5a8]
push ecx
lea ecx, [ebp - 0x5a4]
push ecx
push str.___d_.regs__d_
push dword [eax + 0x10]
call fcn.00408fc0
add esp, 0x10
cmp eax, 2
jl 0x40af9a
mov ecx, dword [ebp - 0x5d0]
mov eax, dword [ebp - 0x5a4]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x40af9a
test eax, eax
jle 0x40ace4
mov ecx, dword [ecx]
dec eax
test ecx, ecx
jne 0x40acd4
jmp 0x40af9a
test ecx, ecx
je 0x40af9a
mov edx, str.regs
call fcn.004120d0
test eax, eax
je 0x40af9a
mov esi, dword [eax + 8]
mov ecx, dword [ebp - 0x5a8]
test esi, esi
je 0x40af9a
nop
test ecx, ecx
jle 0x40ad20
mov esi, dword [esi]
dec ecx
test esi, esi
jne 0x40ad10
jmp 0x40af9a
test esi, esi
je 0x40af9a
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edx, str.root
mov dword [ebp - 0x5b8], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.path
mov ecx, esi
mov edi, eax
call fcn.004120d0
mov ecx, dword [ebp - 0x5b8]
mov dword [ebp - 0x5c0], eax
test ecx, ecx
je 0x40af9a
cmp dword [ecx + 0xc], 3
jne 0x40af9a
test edi, edi
je 0x40af9a
cmp dword [edi + 0xc], 4
jne 0x40af9a
test eax, eax
je 0x40af9a
cmp dword [eax + 0xc], 4
jne 0x40af9a
mov esi, dword [edi + 0x10]
mov ecx, str.HKEY_CURRENT_USER
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40adc0
test dl, dl
je 0x40adbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40adc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ada0
xor eax, eax
jmp 0x40adc5
sbb eax, eax
or eax, 1
xor ecx, ecx
mov edi, 0x80000001
test eax, eax
mov eax, esi
cmovne edi, ecx
mov ecx, str.HKEY_LOCAL_MACHINE
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40adf8
test dl, dl
je 0x40adf4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40adf8
add eax, 2
add ecx, 2
test dl, dl
jne 0x40add8
xor eax, eax
jmp 0x40adfd
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_CLASSES_ROOT
mov eax, 0x80000002
cmove edi, eax
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ae30
test dl, dl
je 0x40ae2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ae30
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ae10
xor eax, eax
jmp 0x40ae35
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_USERS
mov eax, 0x80000000
cmove edi, eax
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ae66
test dl, dl
je 0x40ae62
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ae66
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ae46
xor eax, eax
jmp 0x40ae6b
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_CURRENT_CONFIG
mov eax, 0x80000003
cmove edi, eax
mov eax, esi
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40aea0
test dl, dl
je 0x40ae9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40aea0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ae80
xor eax, eax
jmp 0x40aea5
sbb eax, eax
or eax, 1
test eax, eax
mov eax, 0x80000005
cmove edi, eax
mov eax, str.HKEY_CURRENT_USER_LOCAL_SETTINGS
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40aed4
test cl, cl
je 0x40aed0
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40aed4
add esi, 2
add eax, 2
test cl, cl
jne 0x40aeb4
xor eax, eax
jmp 0x40aed9
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40aee4
mov edi, 0x80000007
jmp 0x40aeec
test edi, edi
je 0x40af9a
lea eax, [ebp - 0x5b0]
push eax
mov eax, dword [ebp - 0x5c0]
push 0x20019
push 0
push dword [eax + 0x10]
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, 2
je 0x40af18
cmp eax, 3
jne 0x40af9a
cmp byte [ebp - 0x5b1], 0
jne 0x40af31
push 0x41a6ec
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov edx, dword [ebp - 0x5b8]
lea ecx, [ebp - 0x6c4]
mov edx, dword [edx + 0x14]
call fcn.004091c0
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x23
call fcn.0040fe20
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x6b0]
cmp edx, 0x10
jb 0x40af93
mov ecx, dword [ebp - 0x6c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40af89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409e80
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 0x5b1], 0
mov eax, dword [ebp - 0x5cc]
mov esi, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5cc], eax
cmp eax, dword [ebp - 0x5d8]
jl 0x40ac50
mov edi, dword [ebp - 0x5bc]
mov edx, dword [ebp - 0x43c]
mov eax, edx
mov ecx, dword [ebp - 0x440]
sub eax, ecx
push 1
push 0x41a6f0
cmp eax, 1
jb 0x40b005
cmp edx, 0x10
lea esi, [ebp - 0x450]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x450]
add esi, ecx
mov dword [ebp - 0x440], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x40b01f
mov byte [ebp - 0x600], 0
lea ecx, [ebp - 0x450]
push dword [ebp - 0x600]
push 1
call fcn.00411130
mov edx, str.relateRegs
mov ecx, edi
call fcn.004120d0
mov esi, eax
mov dword [ebp - 0x5b8], esi
test esi, esi
je 0x40b4a0
push str.__relateRegs_:_
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov ecx, esi
call fcn.004120b0
mov edi, eax
mov byte [ebp - 0x5b1], 1
xor eax, eax
mov dword [ebp - 0x5bc], edi
mov dword [ebp - 0x5cc], eax
test edi, edi
jle 0x40b440
mov ecx, edi
mov edi, dword [esi + 8]
test edi, edi
je 0x40b42b
nop
test eax, eax
jle 0x40b090
mov edi, dword [edi]
dec eax
test edi, edi
jne 0x40b080
jmp 0x40b42b
test edi, edi
je 0x40b42b
mov esi, dword [edi + 8]
test esi, esi
je 0x40b0bb
nop
mov ecx, dword [esi + 0x20]
mov edx, str._ref
call fcn.00411750
test eax, eax
je 0x40b15e
mov esi, dword [esi]
test esi, esi
jne 0x40b0a0
mov edx, 0x41a6d0
mov ecx, edi
call fcn.004120d0
mov edx, str.root
mov dword [ebp - 0x5dc], eax
mov ecx, edi
call fcn.004120d0
mov edx, str.path
mov ecx, edi
mov esi, eax
call fcn.004120d0
mov edi, dword [ebp - 0x5dc]
mov dword [ebp - 0x5c0], eax
test edi, edi
je 0x40b41f
cmp dword [edi + 0xc], 3
jne 0x40b41f
test esi, esi
je 0x40b41f
cmp dword [esi + 0xc], 4
jne 0x40b41f
test eax, eax
je 0x40b41f
cmp dword [eax + 0xc], 4
jne 0x40b41f
mov esi, dword [esi + 0x10]
mov ecx, str.HKEY_CURRENT_USER
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b245
test dl, dl
je 0x40b157
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b245
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b133
xor eax, eax
jmp 0x40b24a
test esi, esi
je 0x40b0bb
cmp dword [esi + 0xc], 4
jne 0x40b41f
lea eax, [ebp - 0x594]
push eax
lea eax, [ebp - 0x598]
push eax
push str.___d_.regs__d_
push dword [esi + 0x10]
call fcn.00408fc0
add esp, 0x10
cmp eax, 2
jl 0x40b41f
mov ecx, dword [ebp - 0x5d0]
mov eax, dword [ebp - 0x598]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x40b41f
nop
test eax, eax
jle 0x40b1c0
mov ecx, dword [ecx]
dec eax
test ecx, ecx
jne 0x40b1b0
jmp 0x40b41f
test ecx, ecx
je 0x40b41f
mov edx, str.regs
call fcn.004120d0
test eax, eax
je 0x40b41f
mov esi, dword [eax + 8]
mov ecx, dword [ebp - 0x594]
test esi, esi
je 0x40b41f
nop dword [eax + eax]
test ecx, ecx
jle 0x40b200
mov esi, dword [esi]
dec ecx
test esi, esi
jne 0x40b1f0
jmp 0x40b41f
test esi, esi
je 0x40b41f
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edi, eax
mov edx, str.root
mov ecx, esi
mov dword [ebp - 0x5dc], edi
call fcn.004120d0
mov edx, str.path
mov dword [ebp - 0x5e4], eax
mov ecx, esi
call fcn.004120d0
mov esi, dword [ebp - 0x5e4]
jmp 0x40b0ed
sbb eax, eax
or eax, 1
xor ecx, ecx
mov edi, 0x80000001
test eax, eax
mov eax, esi
cmovne edi, ecx
mov ecx, str.HKEY_LOCAL_MACHINE
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b280
test dl, dl
je 0x40b27c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b280
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b260
xor eax, eax
jmp 0x40b285
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_CLASSES_ROOT
mov eax, 0x80000002
cmove edi, eax
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b2b6
test dl, dl
je 0x40b2b2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b2b6
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b296
xor eax, eax
jmp 0x40b2bb
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_USERS
mov eax, 0x80000000
cmove edi, eax
mov eax, esi
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b2f0
test dl, dl
je 0x40b2ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b2f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b2d0
xor eax, eax
jmp 0x40b2f5
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.HKEY_CURRENT_CONFIG
mov eax, 0x80000003
cmove edi, eax
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b326
test dl, dl
je 0x40b322
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b326
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b306
xor eax, eax
jmp 0x40b32b
sbb eax, eax
or eax, 1
test eax, eax
mov eax, 0x80000005
cmove edi, eax
mov eax, str.HKEY_CURRENT_USER_LOCAL_SETTINGS
nop word [eax + eax]
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40b360
test cl, cl
je 0x40b35c
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40b360
add esi, 2
add eax, 2
test cl, cl
jne 0x40b340
xor eax, eax
jmp 0x40b365
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40b370
mov edi, 0x80000007
jmp 0x40b378
test edi, edi
je 0x40b41f
lea eax, [ebp - 0x5ac]
push eax
mov eax, dword [ebp - 0x5c0]
push 0x20019
push 0
push dword [eax + 0x10]
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40b41f
cmp byte [ebp - 0x5b1], al
jne 0x40b3b6
push 0x41a6ec
lea ecx, [ebp - 0x450]
call fcn.0040fdb0
mov eax, dword [ebp - 0x5dc]
lea ecx, [ebp - 0x6c4]
mov edx, dword [eax + 0x14]
call fcn.004091c0
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x24
call fcn.0040fe20
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x6b0]
cmp edx, 0x10
jb 0x40b418
mov ecx, dword [ebp - 0x6c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b40e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409e80
push edx
push ecx
call fcn.00413d82
add esp, 8
mov byte [ebp - 0x5b1], 0
mov ecx, dword [ebp - 0x5bc]
mov esi, dword [ebp - 0x5b8]
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp eax, ecx
jl 0x40b073
mov edx, dword [ebp - 0x43c]
mov eax, edx
mov ecx, dword [ebp - 0x440]
sub eax, ecx
push 1
push 0x41a6f0
cmp eax, 1
jb 0x40b486
cmp edx, 0x10
lea esi, [ebp - 0x450]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x450]
add esi, ecx
mov dword [ebp - 0x440], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x40b4a0
mov byte [ebp - 0x5c8], 0
lea ecx, [ebp - 0x450]
push dword [ebp - 0x5c8]
push 1
call fcn.00411130
mov ecx, dword [ebp - 0x5d4]
mov eax, dword [ebp - 0x5c4]
mov edi, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5c4], eax
cmp eax, ecx
jl 0x40a810
mov ecx, edi
call fcn.004117e0
mov edx, dword [ebp - 0x43c]
mov eax, edx
mov ecx, dword [ebp - 0x440]
sub eax, ecx
push 0xb
push str.__curTime_:
cmp eax, 0xb
jb 0x40b50e
cmp edx, 0x10
lea esi, [ebp - 0x450]
lea eax, [ecx + 0xb]
cmovae esi, dword [ebp - 0x450]
add esi, ecx
mov dword [ebp - 0x440], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0xb], 0
jmp 0x40b528
mov byte [ebp - 0x5c8], 0
lea ecx, [ebp - 0x450]
push dword [ebp - 0x5c8]
push 0xb
call fcn.00411130
cmp dword [ebp - 0x43c], 0x10
lea ecx, [ebp - 0x450]
mov eax, dword [ebp - 0x440]
cmovae ecx, dword [ebp - 0x450]
push 0
mov byte [ecx + eax], 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
lea ecx, [ebp - 0x724]
push edx
push eax
call fcn.00409270
add esp, 8
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x25
call fcn.0040fe20
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x710]
cmp edx, 0x10
jb 0x40b5b1
mov ecx, dword [ebp - 0x724]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b5a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40b5a7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov ecx, dword [ebp - 0x43c]
mov eax, ecx
mov edi, dword [ebp - 0x440]
sub eax, edi
push 1
push 0x41a66c
cmp eax, 1
jb 0x40b5f9
cmp ecx, 0x10
lea esi, [ebp - 0x450]
lea eax, [edi + 1]
cmovae esi, dword [ebp - 0x450]
mov dword [ebp - 0x440], eax
lea eax, [esi + edi]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi + 1], 0
jmp 0x40b613
mov byte [ebp - 0x5c8], 0
lea ecx, [ebp - 0x450]
push dword [ebp - 0x5c8]
push 1
call fcn.00411130
mov eax, dword [ebp - 0x5e0]
cmp eax, 0xffffffff
je 0x40b625
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x454], 0x10
lea eax, [ebp - 0x468]
push 0
cmovae eax, dword [ebp - 0x468]
push 0x800000
push 0x41f028
push 0
push 0
push 0x41ed10
mov dword [ebp - 0x458], 0
push str.POST
mov byte [eax], 0
push dword [0x41f28c]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
lea edx, [ebp - 0x450]
lea eax, [ebp - 0x468]
mov ecx, esi
push eax
call fcn.0040d510
add esp, 4
test esi, esi
je 0x40b690
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x43c], 0x10
lea eax, [ebp - 0x450]
push 0x104
cmovae eax, dword [ebp - 0x450]
mov dword [ebp - 0x440], 0
push 0
mov byte [eax], 0
lea eax, [ebp - 0x330]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x228]
push 0x104
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x468]
cmp dword [ebp - 0x454], 0x10
cmovae esi, dword [ebp - 0x468]
push 0x28
call dword [0x419cac]
mov edi, eax
add esp, 4
mov dword [ebp - 0x5d0], edi
test edi, edi
je 0x40bf2a
xorps xmm0, xmm0
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm0
movq qword [edi + 0x20], xmm0
test esi, esi
je 0x40b72f
nop
mov al, byte [esi]
test al, al
je 0x40b72f
cmp al, 0x20
ja 0x40b72f
add esi, 1
jne 0x40b720
mov edx, esi
mov ecx, edi
call fcn.00411cf0
test eax, eax
je 0x40bf23
mov esi, dword [edi + 8]
test esi, esi
je 0x40bf23
nop dword [eax + eax]
mov ecx, dword [esi + 0x20]
mov edx, str.type
call fcn.00411750
test eax, eax
je 0x40b76c
mov esi, dword [esi]
test esi, esi
jne 0x40b750
jmp 0x40bf23
test esi, esi
je 0x40bf23
cmp dword [esi + 0xc], 3
jne 0x40bf23
cmp dword [esi + 0x14], 3
jne 0x40bf23
mov edx, str.title
mov ecx, edi
call fcn.004120d0
mov edx, str.tipOne
mov dword [ebp - 0x5c8], eax
mov ecx, edi
call fcn.004120d0
mov edx, str.tipTwo
mov ecx, edi
mov esi, eax
call fcn.004120d0
mov edx, str.tipThree
mov dword [ebp - 0x5c4], eax
mov ecx, edi
call fcn.004120d0
mov edx, str.showNum
mov dword [ebp - 0x5c0], eax
mov ecx, edi
call fcn.004120d0
mov edx, dword [ebp - 0x5c8]
mov ecx, eax
mov dword [ebp - 0x594], ecx
test edx, edx
je 0x40bf63
cmp dword [edx + 0xc], 4
jne 0x40bf63
test esi, esi
je 0x40bf63
cmp dword [esi + 0xc], 4
jne 0x40bf63
mov eax, dword [ebp - 0x5c4]
test eax, eax
je 0x40bf63
cmp dword [eax + 0xc], 4
jne 0x40bf63
mov eax, dword [ebp - 0x5c0]
test eax, eax
je 0x40bf63
cmp dword [eax + 0xc], 4
jne 0x40bf63
test ecx, ecx
je 0x40bf63
cmp dword [ecx + 0xc], 3
jne 0x40bf63
lea eax, [ebp - 0x120]
push eax
push dword [edx + 0x10]
mov eax, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.title
push str.General
call eax
lea eax, [ebp - 0x120]
push eax
push dword [esi + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.tipOne
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5c4]
push dword [eax + 0x10]
push str.tipTwo
push str.General
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5c0]
push dword [eax + 0x10]
push str.tipThree
push str.General
call esi
mov eax, dword [ebp - 0x594]
push dword [eax + 0x14]
lea eax, [ebp - 0x228]
push 0x41a7c8
push 0x104
push eax
call fcn.00408fe0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push str.showNum
push str.General
call esi
mov edx, str.softs
mov ecx, edi
call fcn.004120d0
mov dword [ebp - 0x5b8], eax
test eax, eax
je 0x40bc03
mov ecx, eax
call fcn.004120b0
mov esi, eax
lea eax, [ebp - 0x228]
push esi
push 0x41a7c8
push 0x104
push eax
mov dword [ebp - 0x598], esi
call fcn.00408fe0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.softnum
push str.General
call eax
xor edi, edi
test esi, esi
jle 0x40bbfd
mov ecx, dword [ebp - 0x5b8]
nop dword [eax]
mov esi, dword [ecx + 8]
mov eax, edi
test esi, esi
je 0x40bbf0
nop dword [eax]
test eax, eax
jle 0x40b990
mov esi, dword [esi]
dec eax
test esi, esi
jne 0x40b980
jmp 0x40bbf0
test esi, esi
je 0x40bbf0
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edx, str.interfaceName
mov dword [ebp - 0x5c4], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.name
mov dword [ebp - 0x5c8], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.downUrl
mov dword [ebp - 0x5c0], eax
mov ecx, esi
call fcn.004120d0
mov edx, 0x41a7ec
mov dword [ebp - 0x5cc], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.silenceParam
mov dword [ebp - 0x5d8], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.isSelect
mov dword [ebp - 0x5e0], eax
mov ecx, esi
call fcn.004120d0
mov ecx, eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x594], ecx
test eax, eax
je 0x40bbea
cmp dword [eax + 0xc], 3
jne 0x40bbea
mov esi, dword [ebp - 0x5c8]
test esi, esi
je 0x40bbea
cmp dword [esi + 0xc], 4
jne 0x40bbea
mov eax, dword [ebp - 0x5c0]
test eax, eax
je 0x40bbea
cmp dword [eax + 0xc], 4
jne 0x40bbea
mov eax, dword [ebp - 0x5cc]
test eax, eax
je 0x40bbea
cmp dword [eax + 0xc], 4
jne 0x40bbea
mov eax, dword [ebp - 0x5d8]
test eax, eax
je 0x40bbea
cmp dword [eax + 0xc], 4
jne 0x40bbea
mov eax, dword [ebp - 0x5e0]
test eax, eax
je 0x40bbea
cmp dword [eax + 0xc], 4
jne 0x40bbea
test ecx, ecx
je 0x40bbea
cmp dword [ecx + 0xc], 3
jne 0x40bbea
lea eax, [edi + 1]
push eax
push str.Soft_d
lea eax, [ebp - 0x330]
push 0x104
push eax
call fcn.00408fe0
mov eax, dword [ebp - 0x5c4]
push dword [eax + 0x14]
lea eax, [ebp - 0x228]
push 0x41a7c8
push 0x104
push eax
call fcn.00408fe0
add esp, 0x20
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x41a6d0
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x120]
push eax
push dword [esi + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x330]
push str.interfaceName
push eax
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5c0]
push dword [eax + 0x10]
lea eax, [ebp - 0x330]
push str.name
push eax
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5cc]
push dword [eax + 0x10]
lea eax, [ebp - 0x330]
push str.downUrl
push eax
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5d8]
push dword [eax + 0x10]
lea eax, [ebp - 0x330]
push 0x41a7ec
push eax
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5e0]
push dword [eax + 0x10]
lea eax, [ebp - 0x330]
push str.silenceParam
push eax
call esi
mov eax, dword [ebp - 0x594]
push dword [eax + 0x14]
lea eax, [ebp - 0x228]
push 0x41a7c8
push 0x104
push eax
call fcn.00408fe0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push str.isSelect
lea eax, [ebp - 0x330]
push eax
call esi
mov ecx, dword [ebp - 0x5b8]
inc edi
cmp edi, dword [ebp - 0x598]
jl 0x40b970
mov edi, dword [ebp - 0x5d0]
mov edx, 0x41a814
mov ecx, edi
call fcn.004120d0
mov esi, eax
test esi, esi
je 0x40bdad
lea eax, [ebp - 0x120]
push eax
push 0x41a818
push str.dllnum
push str.General
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edx, str.downUrl
mov dword [ebp - 0x5c8], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.jsonUrl
mov dword [ebp - 0x594], eax
mov ecx, esi
call fcn.004120d0
mov edx, str.downDir
mov dword [ebp - 0x5c4], eax
mov ecx, esi
call fcn.004120d0
mov edx, 0x41a7ec
mov dword [ebp - 0x5c0], eax
mov ecx, esi
call fcn.004120d0
mov edx, dword [ebp - 0x5c8]
mov ecx, eax
mov dword [ebp - 0x598], ecx
test edx, edx
je 0x40bf63
cmp dword [edx + 0xc], 3
jne 0x40bf63
mov esi, dword [ebp - 0x594]
test esi, esi
je 0x40bf63
cmp dword [esi + 0xc], 4
jne 0x40bf63
mov eax, dword [ebp - 0x5c4]
test eax, eax
je 0x40bf63
cmp dword [eax + 0xc], 4
jne 0x40bf63
mov eax, dword [ebp - 0x5c0]
test eax, eax
je 0x40bf63
cmp dword [eax + 0xc], 4
jne 0x40bf63
test ecx, ecx
je 0x40bf63
cmp dword [ecx + 0xc], 4
jne 0x40bf63
push dword [edx + 0x14]
lea eax, [ebp - 0x228]
push 0x41a7c8
push 0x104
push eax
call fcn.00408fe0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x41a6d0
push 0x41a82c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x120]
push eax
push dword [esi + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.downUrl
push 0x41a82c
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5c4]
push dword [eax + 0x10]
push str.jsonUrl
push 0x41a82c
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x5c0]
push dword [eax + 0x10]
push str.downDir
push 0x41a82c
call esi
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x598]
push dword [eax + 0x10]
push 0x41a7ec
push 0x41a82c
call esi
mov edx, str.links
mov ecx, edi
call fcn.004120d0
mov esi, eax
mov dword [ebp - 0x5c8], esi
test esi, esi
je 0x40bf23
mov ecx, esi
call fcn.004120b0
push eax
push 0x41a7c8
mov dword [ebp - 0x5c0], eax
lea eax, [ebp - 0x228]
push 0x104
push eax
call fcn.00408fe0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push str.linknum
push str.General
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
xor edi, edi
cmp dword [ebp - 0x5c0], edi
jle 0x40bf1d
nop dword [eax]
mov esi, dword [esi + 8]
mov eax, edi
test esi, esi
je 0x40bf0a
nop dword [eax]
test eax, eax
jle 0x40be40
mov esi, dword [esi]
dec eax
test esi, esi
jne 0x40be30
jmp 0x40bf0a
test esi, esi
je 0x40bf0a
mov edx, 0x41a6d0
mov ecx, esi
call fcn.004120d0
mov edx, 0x41a838
mov dword [ebp - 0x5c4], eax
mov ecx, esi
call fcn.004120d0
mov esi, eax
mov eax, dword [ebp - 0x5c4]
test eax, eax
je 0x40bf0a
cmp dword [eax + 0xc], 3
jne 0x40bf0a
test esi, esi
je 0x40bf0a
cmp dword [esi + 0xc], 4
jne 0x40bf0a
lea eax, [edi + 1]
push eax
push str.Link_d
lea eax, [ebp - 0x330]
push 0x104
push eax
call fcn.00408fe0
mov eax, dword [ebp - 0x5c4]
push dword [eax + 0x14]
lea eax, [ebp - 0x228]
push 0x41a7c8
push 0x104
push eax
call fcn.00408fe0
add esp, 0x20
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x41a6d0
lea eax, [ebp - 0x330]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x120]
push eax
push dword [esi + 0x10]
lea eax, [ebp - 0x330]
push 0x41a838
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov esi, dword [ebp - 0x5c8]
inc edi
cmp edi, dword [ebp - 0x5c0]
jl 0x40be20
mov edi, dword [ebp - 0x5d0]
mov ecx, edi
call fcn.004117e0
mov eax, dword [0x41f28c]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
test eax, eax
je 0x40bf46
push eax
call esi
mov dword [0x41f28c], 0
mov eax, dword [0x41f288]
test eax, eax
je 0x40bf5c
push eax
call esi
mov dword [0x41f288], 0
mov esi, 1
jmp 0x40bf65
xor esi, esi
mov edx, dword [ebp - 0x454]
cmp edx, 0x10
jb 0x40bfa1
mov ecx, dword [ebp - 0x468]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40bf97
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov edx, dword [ebp - 0x43c]
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0xf
mov byte [ebp - 0x468], 0
cmp edx, 0x10
jb 0x40bff8
mov ecx, dword [ebp - 0x450]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bfee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40bfee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00413d82
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00413d41
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret