Function at 0xbd62be
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xc956a8
push 0xbe2b14
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffff7ec
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x2c], 0
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x184], 0
mov ecx, 0x10
xor eax, eax
lea edi, [ebp - 0x180]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
cmp dword [ebp + 8], 0
jne 0xbd634e
mov eax, 0x300000a0
jmp 0xbd7915
mov ecx, dword [ebp + 8]
push ecx
call fcn.00bdb326
mov byte [ebp - 0x134], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0xd77d28
push 0xd77d34
push 0x104
lea edx, [ebp - 0x134]
push edx
call fcn.00bd4da0
add esp, 0x10
lea eax, [ebp - 0x134]
push eax
call fcn.00bdb3ff
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x13c]
and ecx, 0xff000000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x18
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x18
mov dword [ebp - 0x13c], ecx
call dword [sym.imp.kernel32.dll_GetTickCount]
add eax, dword [ebp + 0xc]
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x13c]
and edx, 0xff000000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x18
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x18
mov dword [ebp - 0x13c], edx
push str.GlobalC886B01D_2DDD_466e_B6D7_43E0DC18F895
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateMutexA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0xbd64e1
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77d6c
push str._s_CM_SMS_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xb7
jne 0xbd65c8
mov ecx, dword [ebp - 0x13c]
and ecx, 0xffff0000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x10
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x10
mov dword [ebp - 0x13c], ecx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00be1770
add esp, 0xc
mov eax, dword [ebp - 0x13c]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0xd77d90
push str._s_CM_SMS_EAE_0x_x_in_0x_x
push 0x104
lea edx, [ebp - 0x134]
push edx
call fcn.00bd4da0
add esp, 0x18
lea eax, [ebp - 0x134]
push eax
call fcn.00bdb3ff
jmp 0xbd7646
mov ecx, dword [ebp - 0x13c]
and ecx, 0xff000000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x18
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x18
mov dword [ebp - 0x13c], ecx
push str.GlobalEF81BA4B_4163_44f5_90E2_F05C1E49C12D
push 0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateEventA]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0xbd66c3
mov edx, dword [ebp - 0x13c]
and edx, 0xffff0000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x10
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x10
mov dword [ebp - 0x13c], edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push 0xd77de4
push str._s_CE_SEHF_0x_x_in_0x_x
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x18
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
jmp 0xbd7646
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xb7
jne 0xbd676c
mov edx, dword [ebp - 0x13c]
and edx, 0xffff0000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x10
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x10
mov dword [ebp - 0x13c], edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push 0xd77e08
push str._s_CE_SEHF_EAE_0x_x_in_0x_x
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x18
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
jmp 0xbd7646
mov edx, dword [ebp - 0x13c]
and edx, 0xff000000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x18
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x18
mov dword [ebp - 0x13c], edx
push 0
push str.AlwaysShowRebootMsg
push str.SoftwareAhnLabAutoupTemporarySettings
push 0x80000001
call fcn.00bdb7b5
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jne 0xbd67e9
push 1
push str.AlwaysShowRebootMsg
push str.SoftwareAhnLabAutoupTemporarySettings
push 0x80000001
call fcn.00bdb941
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
and ecx, 0xffff0000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x10
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x10
mov dword [ebp - 0x13c], ecx
push 0x10
push 0
lea edx, [ebp - 0x2c]
push edx
call fcn.00be1770
add esp, 0xc
push 0x44
push 0
lea eax, [ebp - 0x184]
push eax
call fcn.00be1770
add esp, 0xc
mov dword [ebp - 0x184], 0x44
mov byte [ebp - 0x298], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x297]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x39c], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x39b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push str.HSUpdate.exe
mov ecx, dword [ebp + 8]
push ecx
push 0xd77e40
push 0x104
lea edx, [ebp - 0x298]
push edx
call fcn.00bd4da0
add esp, 0x14
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x298]
push ecx
push str.__s___ld
push 0x104
lea edx, [ebp - 0x39c]
push edx
call fcn.00bd4da0
add esp, 0x14
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x184]
push edx
mov eax, dword [ebp + 8]
push eax
push 0
push 0
push 1
push 0
push 0
lea ecx, [ebp - 0x39c]
push ecx
push 0
call dword [sym.imp.kernel32.dll_CreateProcessA]
test eax, eax
jne 0xbd6a0e
mov edx, dword [ebp - 0x13c]
and dl, 0
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 8
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 8
mov dword [ebp - 0x13c], edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push 0xd77e54
push 0xd77e60
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x18
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
jmp 0xbd7646
mov edx, dword [ebp - 0x13c]
and edx, 0xff000000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x18
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x18
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x190]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.00bd515a
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x30000090
jne 0xbd6b14
mov edx, dword [ebp - 0x13c]
and edx, 0xffff0000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x10
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x10
mov dword [ebp - 0x13c], edx
push 1
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.kernel32.dll_TerminateProcess]
mov dword [ebp - 0x3a0], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x3a0]
push eax
push 0xd77e70
push str._s__d_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x194], 0
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jne 0xbd6c21
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77e8c
push 0xd77e98
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x18c], 0
mov ecx, dword [ebp - 0x13c]
and ecx, 0xffff0000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x10
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x10
mov dword [ebp - 0x13c], ecx
cmp dword [ebp - 0x188], 0x103
jne 0xbd6dd9
push 1
push 0
push 0
push 0
lea edx, [ebp - 0x3bc]
push edx
call dword [sym.imp.user32.dll_PeekMessageA]
cmp eax, 1
jne 0xbd6cec
lea eax, [ebp - 0x3bc]
push eax
call dword [sym.imp.user32.dll_TranslateMessage]
lea ecx, [ebp - 0x3bc]
push ecx
call dword [sym.imp.user32.dll_DispatchMessageA]
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
lea edx, [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0xbd6d62
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77eb0
push 0xd77ebc
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x18c]
add eax, 1
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x4b0
jbe 0xbd6dd4
mov dword [ebp - 0x30], 0x102
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77ed4
push str._s_HSU_MLWT_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
jmp 0xbd6ca8
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x188], 0x300000f0
jne 0xbd6e76
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x194]
push eax
push 0xd77efc
push str._s_SU_NUUI
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x188], 0
je 0xbd6f19
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x188]
push eax
push 0xd77f14
push str._s_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x30], eax
jmp 0xbd7646
mov ecx, dword [ebp - 0x13c]
and ecx, 0xff000000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x18
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
and edx, 0xffff0000
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 0x10
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 0x10
mov dword [ebp - 0x13c], edx
mov byte [ebp - 0x5fc], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x5fb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x5dc], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x5db]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x4c8], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x4c7]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
push eax
push str._sUpdate
push 0x104
lea ecx, [ebp - 0x4c8]
push ecx
call fcn.00bd4da0
add esp, 0x10
lea edx, [ebp - 0x4c8]
push edx
push str._s_autoup.exe
push 0x104
lea eax, [ebp - 0x5dc]
push eax
call fcn.00bd4da0
add esp, 0x10
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x5dc]
push ecx
call dword [sym.imp.kernel32.dll_CreateFileA]
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0xffffffff
jne 0xbd70e0
mov edx, dword [ebp - 0x13c]
and dl, 0
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shr eax, 8
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shl edx, 8
mov dword [ebp - 0x13c], edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push 0xd77f4c
push str._s_CF_AU_0x_x_in_0x_x
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x18
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
jmp 0xbd7646
mov edx, dword [ebp - 0x4d4]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
push str._ASRY
push 0x104
lea ecx, [ebp - 0x5fc]
push ecx
call fcn.00bd4da0
add esp, 0xc
mov byte [ebp - 0x700], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x6ff]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [ebp - 0x5fc]
push edx
lea eax, [ebp - 0x5dc]
push eax
push str.__s___s
push 0x104
lea ecx, [ebp - 0x700]
push ecx
call fcn.00bd4da0
add esp, 0x14
push 0x10
push 0
lea edx, [ebp - 0x2c]
push edx
call fcn.00be1770
add esp, 0xc
push 0x44
push 0
lea eax, [ebp - 0x184]
push eax
call fcn.00be1770
add esp, 0xc
mov dword [ebp - 0x184], 0x44
mov ecx, dword [ebp - 0x13c]
and ecx, 0xffff0000
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 0x10
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 0x10
mov dword [ebp - 0x13c], ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x184]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x700]
push edx
push 0
call dword [sym.imp.kernel32.dll_CreateProcessA]
test eax, eax
jne 0xbd72b4
mov eax, dword [ebp - 0x13c]
and al, 0
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 8
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 8
mov dword [ebp - 0x13c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77f80
push 0xd77f8c
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4d0], 0
lea ecx, [ebp - 0x4cc]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
jne 0xbd73be
mov eax, dword [ebp - 0x13c]
and al, 0
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 8
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 8
mov dword [ebp - 0x13c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77fa4
push 0xd77fb0
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x3c0], 0
mov ecx, dword [ebp - 0x13c]
and cl, 0
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
shr edx, 8
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
add eax, 1
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shl ecx, 8
mov dword [ebp - 0x13c], ecx
cmp dword [ebp - 0x4cc], 0x103
jne 0xbd7573
push 1
push 0
push 0
push 0
lea edx, [ebp - 0x71c]
push edx
call dword [sym.imp.user32.dll_PeekMessageA]
cmp eax, 1
jne 0xbd7486
lea eax, [ebp - 0x71c]
push eax
call dword [sym.imp.user32.dll_TranslateMessage]
lea ecx, [ebp - 0x71c]
push ecx
call dword [sym.imp.user32.dll_DispatchMessageA]
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
lea edx, [ebp - 0x4cc]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0xbd74fc
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [ebp - 0x30], eax
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77fc8
push str._s_GECP_EC_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
mov eax, dword [ebp - 0x3c0]
add eax, 1
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x4b0
jbe 0xbd756e
mov dword [ebp - 0x30], 0x102
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0xd77fec
push str._s_AU_MLWT_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
jmp 0xbd7646
jmp 0xbd7442
mov eax, dword [ebp - 0x13c]
and eax, 0xffff0000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x10
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x10
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x4cc], 0
je 0xbd7608
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x4cc]
push eax
push 0xd78010
push str._s_AU_RV_0x_x_in_0x_x
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x18
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
mov eax, dword [ebp - 0x13c]
and eax, 0xff000000
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
shr ecx, 0x18
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
shl eax, 0x18
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0xffffffff
jmp 0xbd76c0
cmp dword [ebp - 0x140], 0
jne 0xbd7732
push 0
push str.AlwaysShowRebootMsg
push str.SoftwareAhnLabAutoupTemporarySettings
push 0x80000001
call fcn.00bdb941
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0
je 0xbd7732
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00be1770
add esp, 0xc
mov edx, dword [ebp - 0x30]
push edx
push 0xd78054
push str._s_RSD_ASRM_0x_x
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x14
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
cmp dword [ebp - 0x30], 0
je 0xbd77bc
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x820], edx
mov byte [ebp - 0x81c], 0
mov ecx, 0x3e
xor eax, eax
lea edi, [ebp - 0x81b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x820]
and eax, 0x30000000
cmp eax, 0x30000000
je 0xbd7775
mov dword [ebp - 0x30], 0x3000ffff
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [0xd77b98]
push ecx
push str.Version_:_0x_x__Error_:_0x_x__0x_x____Step_:_0x_x
push 0xfa
lea edx, [ebp - 0x81c]
push edx
call fcn.00bd4da0
add esp, 0x1c
lea eax, [ebp - 0x81c]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
mov ecx, 0xd8c138
call fcn.00bd9547
cmp dword [ebp - 0x138], 0
je 0xbd77dc
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [ebp - 0x138], 0
cmp dword [ebp - 0x1c], 0
je 0xbd77f6
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.kernel32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x30], 0
je 0xbd78d2
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00be1770
add esp, 0xc
mov eax, dword [0xd77b98]
push eax
push 0xd780a8
push 0xd780b4
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x14
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0xd780c4
push 0xd780d0
push 0x104
lea eax, [ebp - 0x134]
push eax
call fcn.00bd4da0
add esp, 0x18
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bdb3ff
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00be1770
add esp, 0xc
mov eax, dword [ebp - 0x30]
push eax
push 0xd780e8
push 0xd780f4
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x14
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00be1770
add esp, 0xc
push str._AHNHSUPDA_
push 0xd7810c
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call fcn.00bd4da0
add esp, 0x10
lea edx, [ebp - 0x134]
push edx
call fcn.00bdb3ff
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc