Function at 0x4540f0
Capabilities:
Accept command line arguments
Create thread
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
lea ecx, [ebp - 0x7c]
push 0xffffffffffffffff
push 0x574810
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
push edi
call fcn.00460480
push ecx
mov edx, 2
call fcn.00455be0
add esp, 4
or ebx, 0xffffffff
test al, al
je 0x4541c6
mov dword [ebp - 4], 0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
call fcn.00453db0
mov esi, dword [ebp - 0x4c]
test al, al
je 0x4541a3
push esi
call fcn.0054cfef
add esp, 4
cmp eax, 0x55f0
jl 0x454181
mov dword [0x5bb8c0], 4
jmp 0x4541ad
push esi
call fcn.0054cfef
xor ecx, ecx
add esp, 4
cmp eax, 0x2800
setge cl
lea ecx, [ecx*2 + 1]
mov dword [0x5bb8c0], ecx
jmp 0x4541ad
mov dword [0x5bb8c0], 5
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4541e6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4541e6
push ecx
mov edx, 1
call fcn.00455be0
xor edx, edx
add esp, 4
test al, al
mov ecx, 5
cmovne ecx, edx
mov dword [0x5bb8c0], ecx
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x2c]
push str.bnBtYnNhcg
mov dword [ebp - 0x2c], eax
call fcn.0042c390
test al, al
jne 0x454220
push 0xc
push str.bnBtYnNhcg
lea ecx, [ebp - 0x2c]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x40]
push str.YWZfbGxjag
mov dword [ebp - 0x40], eax
call fcn.0042c390
test al, al
jne 0x45425a
push 0xc
push str.YWZfbGxjag
lea ecx, [ebp - 0x40]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x6c]
push str.YmNkX3Nqcg
mov dword [ebp - 0x6c], eax
call fcn.0042c390
test al, al
jne 0x454294
push 0xc
push str.YmNkX3Nqcg
lea ecx, [ebp - 0x6c]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x58]
push str.Z2I7Ky8
mov dword [ebp - 0x58], eax
call fcn.0042c390
test al, al
jne 0x4542ce
push 8
push str.Z2I7Ky8
lea ecx, [ebp - 0x58]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x64]
push str.Z2I7KzA
mov dword [ebp - 0x64], eax
call fcn.0042c390
test al, al
jne 0x454308
push 8
push str.Z2I7KzA
lea ecx, [ebp - 0x64]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x54]
push str.Z2I7KzE
mov dword [ebp - 0x54], eax
call fcn.0042c390
test al, al
jne 0x454342
push 8
push str.Z2I7KzE
lea ecx, [ebp - 0x54]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x60]
push str.Sm1hX2o
mov dword [ebp - 0x60], eax
call fcn.0042c390
test al, al
jne 0x45437c
push 8
push str.Sm1hX2o
lea ecx, [ebp - 0x60]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x4c]
push str.X2FyZ3Rj
mov dword [ebp - 0x4c], eax
call fcn.0042c390
test al, al
jne 0x4543b6
push 8
push str.X2FyZ3Rj
lea ecx, [ebp - 0x4c]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x70]
push str.LXBjcXJfcHI
mov dword [ebp - 0x70], eax
call fcn.0042c390
test al, al
jne 0x4543f0
push 0xc
push str.LXBjcXJfcHI
lea ecx, [ebp - 0x70]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x74]
push str.cWZtdUs
mov dword [ebp - 0x74], eax
call fcn.0042c390
test al, al
jne 0x45442a
push 8
push str.cWZtdUs
lea ecx, [ebp - 0x74]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.VGNwcWdtbA
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x454464
push 0xc
push str.VGNwcWdtbA
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x5c]
push str.TkE_bm5Rcm1wYw
mov dword [ebp - 0x5c], eax
call fcn.0042c390
test al, al
jne 0x45449e
push 0x10
push str.TkE_bm5Rcm1wYw
lea ecx, [ebp - 0x5c]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.P05OQj9SPw
mov dword [ebp - 0x14], eax
call fcn.0042c390
test al, al
jne 0x4544d8
push 0xc
push str.P05OQj9SPw
lea ecx, [ebp - 0x14]
call fcn.0042c6d0
push ecx
mov edi, esp
push ecx
mov ecx, dword [0x5baf98]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov eax, dword [ebp - 0x10]
mov edi, esp
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x50], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x3c]
mov edx, SysReAllocString
call fcn.004450d0
mov esi, dword [0x5baf7c]
add esp, 8
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x454587
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x454579
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x454579
call fcn.0042ba50
mov dword [ebp - 0x28], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x45456f
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov dword [0x5baf7c], eax
jmp 0x454587
push dword [edx - 0xc]
mov ecx, 0x5baf7c
push edx
call fcn.0042c6d0
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4545a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00452c80
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x88], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
push dword [eax]
call fcn.00557918
add esp, 4
mov esi, eax
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x44]
push esi
mov dword [ebp - 0x44], eax
call fcn.0042c390
test al, al
jne 0x454629
test esi, esi
jne 0x454607
xor ecx, ecx
jmp 0x45461f
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454610
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x44]
call fcn.0042c6d0
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454643
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
mov dword [ebp - 0x28], eax
cmp dword [eax + 4], 0
jne 0x454750
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.dWVjcmNsdF1jcHBtcA
mov dword [ebp + 8], eax
call fcn.0042c390
test al, al
jne 0x454690
push 0x14
push str.dWVjcmNsdF1jcHBtcA
lea ecx, [ebp + 8]
call fcn.0042c6d0
push ecx
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5baf80
call fcn.0042bb40
mov ecx, esi
call fcn.00442050
add esp, 0x14
mov esi, esp
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x58a2f0
mov dword [esi], eax
call fcn.0042c390
test al, al
jne 0x4546e5
push 0
push 0x58a2f0
mov ecx, esi
call fcn.0042c6d0
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov edi, esp
push ecx
mov ecx, eax
mov dword [ebp + 8], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov edi, dword [ebp - 0x2c]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.004422b0
add esp, 4
call fcn.004534d0
mov edx, dword [ebp + 8]
or ebx, 0xffffffff
add esp, 0x10
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454748
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or esi, 0xffffffff
jmp 0x4558a8
mov eax, dword [ebp - 0x5c]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x3c], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.004422b0
mov ecx, dword [ebp - 0x28]
mov edi, eax
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00453b40
mov edx, dword [ebp - 0x38]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4547a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x454a84
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.Ql9yXw
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x4547e7
push 8
push str.Ql9yXw
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
push ecx
mov ecx, dword [ebp - 0x3c]
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x14]
mov esi, eax
push 0x59388c
call fcn.0042b560
push esi
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x28]
call fcn.0041cdb0
add esp, 4
lea ecx, [ebp - 0x44]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042b2b0
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454848
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454862
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45487c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x14], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.004422b0
mov ecx, dword [ebp - 0x44]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00453b40
mov edx, dword [ebp - 0x28]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4548d4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x454a6d
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x593890
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x454916
push 0xc
push 0x593890
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
push ecx
mov ecx, dword [ebp - 0x14]
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x34]
mov esi, eax
push 0x58a2e4
call fcn.0041ccf0
add esp, 4
lea ecx, [ebp - 0x38]
mov edx, eax
push esi
call fcn.0041cdb0
mov esi, dword [0x5baf78]
add esp, 4
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x4549af
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x4549a1
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4549a1
call fcn.0042ba50
mov dword [ebp - 0x28], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x454997
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov dword [0x5baf78], eax
jmp 0x4549af
push dword [ecx + 4]
mov ecx, 0x5baf78
push edx
call fcn.0042c6d0
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4549c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4549e3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4549fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x34], eax
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
mov ecx, dword [0x5baf78]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00453b40
mov edx, dword [ebp - 0x24]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454a56
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454a6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454a84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.bmFfbm4scXJtcGM
mov dword [ebp - 0x14], eax
call fcn.0042c390
test al, al
jne 0x454abe
push 0x10
push str.bmFfbm4scXJtcGM
lea ecx, [ebp - 0x14]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.LW5ndmNqLGVnZA
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x454af8
push 0x10
push str.LW5ndmNqLGVnZA
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
push ecx
mov ecx, dword [0x5baf50]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
push dword [eax]
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edx, dword [ebp - 0x24]
mov dword [0x5bac40], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454b46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x90
call fcn.005468e9
mov edi, eax
mov esi, esp
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x90], eax
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.004422b0
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x34]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
mov esi, eax
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a45
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x5bb6c0
mov dword [ebp - 0x14], eax
call fcn.0042c390
test al, al
jne 0x454bed
mov ecx, 0x5bb6c0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454bd0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bb6c0
lea ecx, [ebp - 0x14]
call fcn.0042c6d0
push dword [ebp - 0x24]
lea eax, [ebp - 0x14]
push esi
push ecx
push eax
mov ecx, edi
call fcn.00442660
mov edx, dword [ebp - 0x14]
mov dword [0x5ba87c], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454c1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454c36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454c50
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x5ba87c]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], eax
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.VWdsRlJSTh4vLC4
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x454c99
push 0x10
push str.VWdsRlJSTh4vLC4
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
mov edi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
push ecx
add edi, 0xfffffff0
mov esi, esp
mov ecx, edi
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
push dword [eax]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
mov dword [esi + 0x80], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454cec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x80]
test eax, eax
jne 0x454d0c
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x454d53
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x454d53
push 0x2710
push 0x2710
push 0x2710
push 0x2710
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
mov eax, ebx
je 0x454cf8
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x454d3f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0x453b30
call fcn.00551e9a
add esp, 0xc
mov dword [ebp - 0x28], eax
call fcn.00452f80
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 1
call fcn.0042c120
test eax, eax
je 0x455a3b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x80], 2
mov dword [ebp - 0x84], eax
push ecx
jl 0x454e03
mov esi, dword [esi + 4]
mov edi, esp
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, edi
push esi
mov dword [edi], eax
call fcn.0042c390
test al, al
jne 0x454def
test esi, esi
jne 0x454dd2
xor ecx, ecx
jmp 0x454de6
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454dd7
sub ecx, edx
sar ecx, 1
push ecx
push esi
mov ecx, edi
call fcn.0042c6d0
call fcn.00444330
add esp, 4
push ecx
cmp eax, 0x628374a0
je 0x454e87
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5baf80
call fcn.0042bb40
mov ecx, esi
call fcn.00442050
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x58]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x40]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov edi, dword [ebp - 0x2c]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.004422b0
add esp, 4
call fcn.004534d0
or esi, 0xffffffff
add esp, 0x10
or ebx, esi
jmp 0x45585d
cmp dword [ebp - 0x80], 3
mov esi, esp
jge 0x454f0c
sub esp, 0x18
mov ecx, esp
push 0x5baf80
call fcn.0042bb40
mov ecx, esi
call fcn.00442050
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x40]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004422b0
mov edi, dword [ebp - 0x2c]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042ba50
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.004422b0
add esp, 4
call fcn.004534d0
add esp, 0x10
jmp 0x455388
mov ecx, dword [ebp - 0x6c]
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
mov edi, dword [ebp - 0x38]
add esp, 4
mov eax, dword [eax]
mov ecx, dword [edi + 8]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x454f56
test dx, dx
je 0x454f52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x454f56
add eax, 4
add ecx, 4
test dx, dx
jne 0x454f30
xor esi, esi
jmp 0x454f5b
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454f75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x455225
mov dword [ebp - 4], 2
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
push ecx
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5bb6c0
mov dword [esi], eax
call fcn.0042c390
test al, al
jne 0x454ffc
mov ecx, 0x5bb6c0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454fe0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bb6c0
mov ecx, esi
call fcn.0042c6d0
call fcn.00444330
mov esi, esp
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5bb6c0
mov dword [esi], eax
call fcn.0042c390
test al, al
jne 0x455050
mov ecx, 0x5bb6c0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455034
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bb6c0
mov ecx, esi
call fcn.0042c6d0
call fcn.00444330
add esp, 4
push eax
lea eax, [ebp - 0x10]
push 0x5924b8
push eax
call fcn.0041eac0
mov esi, dword [ebp - 0x10]
add esp, 0xc
mov ecx, dword [edi + 8]
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x455098
test dx, dx
je 0x455094
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x455098
add eax, 4
add ecx, 4
test dx, dx
jne 0x455072
xor eax, eax
jmp 0x45509d
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0x2c]
test eax, eax
je 0x45520a
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x2c]
push 0x58a2f0
mov dword [ebp - 0x2c], eax
call fcn.0042c390
test al, al
jne 0x4550e2
push 0
push 0x58a2f0
lea ecx, [ebp - 0x2c]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x58a2f0
mov dword [ebp - 0x14], eax
call fcn.0042c390
test al, al
jne 0x45511c
push 0
push 0x58a2f0
lea ecx, [ebp - 0x14]
call fcn.0042c6d0
push ecx
mov ecx, dword [ebp - 0x64]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [ebx], eax
call fcn.004422b0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.004422b0
lea ecx, [edi - 0x10]
mov dword [ebp - 0x34], eax
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [ebx], eax
call fcn.004422b0
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x2c]
add esp, 4
push ecx
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp - 0x24]
mov ecx, eax
call fcn.00453160
mov edx, dword [ebp - 0x10]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4551a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4551bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4551d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4551f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45520a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x455388
mov ecx, dword [esi]
push esi
jmp 0x455383
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x58a2f0
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x45525f
push 0
push 0x58a2f0
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x58a2f0
mov dword [ebp - 0x14], eax
call fcn.0042c390
test al, al
jne 0x455299
push 0
push 0x58a2f0
lea ecx, [ebp - 0x14]
call fcn.0042c6d0
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x34]
mov dword [esi], eax
call fcn.004422b0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
lea ecx, [ecx - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
mov edi, dword [ebp - 0x2c]
mov ebx, eax
lea ecx, [edi - 0x10]
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x10]
mov edx, ebx
push ecx
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp - 0x20]
mov ecx, eax
call fcn.00453160
mov edx, dword [ebp - 0x48]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455320
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45533a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455354
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45536e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455388
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ecx
mov ecx, dword [ebp - 0x3c]
mov esi, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x3c]
mov ebx, eax
push 0x59388c
call fcn.0042b560
lea eax, [ebp - 0x3c]
push eax
push ecx
mov ecx, dword [ebp - 0x60]
mov esi, esp
add ecx, 0xfffffff0
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x20]
mov edx, eax
call fcn.0041cdb0
add esp, 4
lea ecx, [ebp - 0x78]
mov edx, eax
push ebx
call fcn.0041cdb0
mov edx, dword [ebp - 0x20]
or ebx, 0xffffffff
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455415
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45542f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455449
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455463
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x78]
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, eax
call fcn.0042c120
test eax, eax
je 0x455a3b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.TkEeP25uHlFybXBj
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x4554af
push 0x10
push str.TkEeP25uHlFybXBj
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
test esi, esi
mov esi, dword [ebp - 0x10]
je 0x4555a1
cmp dword [ebp - 0x30], 2
je 0x4555a1
call fcn.0042c120
test eax, eax
je 0x455a3b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.TkEeP25uHlFybXBjHmdxHnNuHl9sYh5wc2xsZ2xlKh5hamdhaR5tbB5yZmMeUXJfcHIeQHNycm1s
mov dword [ebp + 8], eax
call fcn.0042c390
test al, al
jne 0x4554fe
push 0x4c
push str.TkEeP25uHlFybXBjHmdxHnNuHl9sYh5wc2xsZ2xlKh5hamdhaR5tbB5yZmMeUXJfcHIeQHNycm1s
lea ecx, [ebp + 8]
call fcn.0042c6d0
push ecx
lea ecx, [esi - 0x10]
mov ebx, esp
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.004422b0
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.0042ba50
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [ebx], eax
call fcn.004422b0
add esp, 4
push 0x40
push dword [ebp - 0x30]
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x20]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455567
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455581
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45582a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45582a
push dword [ebp - 0x78]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
call fcn.0042c120
mov ecx, eax
test ecx, ecx
je 0x455a3b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.UENRXUFNU0xS
mov dword [ebp - 0x10], eax
call fcn.0042c390
test al, al
jne 0x4555ea
push 0xc
push str.UENRXUFNU0xS
lea ecx, [ebp - 0x10]
call fcn.0042c6d0
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5baf98]
mov ebx, esp
mov dword [ebp - 0x68], 0
lea ecx, [ecx - 0x10]
call fcn.0042ba50
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.004422b0
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 0x30], esp
push ecx
mov ecx, eax
mov dword [ebp - 0x3c], eax
mov ebx, esp
call fcn.0042ba50
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.004422b0
add esp, 4
lea ecx, [ebp - 0x68]
mov edx, SysReAllocString
call fcn.00445350
add esp, 8
test al, al
je 0x45569a
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5baf98]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042ba50
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.004422b0
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [ebp - 0x3c]
mov ebx, esp
call fcn.0042ba50
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.004422b0
add esp, 4
mov ecx, SysReAllocString
call fcn.00445480
add esp, 8
mov edx, dword [ebp - 0x3c]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4556b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 1
push eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x160
call fcn.005468e9
mov ecx, dword [ebp - 0x7c]
mov ebx, esp
mov dword [ebp - 0x20], eax
add ecx, 0xfffffff0
mov eax, dword [0x5bb8c0]
mov dword [ebp - 0x30], eax
call fcn.0042ba50
push dword [ebp - 0x30]
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5baf7c]
add ecx, 0xfffffff0
call fcn.0042ba50
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5baf78]
add ecx, 0xfffffff0
call fcn.0042ba50
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
call fcn.0042c120
test eax, eax
je 0x455a3b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov ecx, ebx
push 0x5bb6c0
mov dword [ebx], eax
call fcn.0042c390
test al, al
jne 0x45579c
mov ecx, 0x5bb6c0
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455780
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bb6c0
mov ecx, ebx
call fcn.0042c6d0
push dword [ebp + 8]
mov ecx, dword [ebp - 0x20]
call fcn.004168c0
push 0
push 0
mov ecx, eax
mov dword [0x5bac3c], eax
call fcn.00419960
mov eax, dword [0x5bac40]
test eax, eax
je 0x4557cc
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x5bac40]
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x4557e4
push 0x1388
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x5bac40]
test eax, eax
je 0x4557ef
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5ba880
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push dword [ebp - 0x8c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov ebx, dword [0x5bac3c]
test ebx, ebx
je 0x455827
mov ecx, ebx
call fcn.00417070
push 0x160
push ebx
call fcn.00546919
add esp, 8
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x455841
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x78]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45585b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov edx, dword [ebp - 0x84]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455877
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455891
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4558a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4558c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4558dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4558f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x50]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45590d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455927
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455941
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45595b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455975
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45598f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4559a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4559c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4559dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4559f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x455a0e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x455a26
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.0042c6b0
push 0x80004005
call fcn.0042c6b0
int3