Function at 0x572e23
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x65175d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e8
mov dword [ebp - 0x1d8], ecx
mov ecx, dword [ebp - 0x1d8]
call fcn.0055bbc0
mov dword [ebp - 0x1c], eax
call fcn.0040ebf0
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x14], eax
push 0
lea ecx, [ebp - 0x84]
call fcn.00477490
mov dword [ebp - 4], 0
mov ecx, 0x72e29c
call fcn.0041e980
push eax
mov ecx, dword [ebp - 0x14]
call fcn.006227dd
mov ecx, 1
test ecx, ecx
je 0x5734fd
lea ecx, [ebp - 0xc4]
call fcn.004086f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.004086f0
mov byte [ebp - 4], 2
call fcn.005f7900
mov dword [ebp - 0xc0], eax
call fcn.005f7550
mov dword [ebp - 0xc0], eax
lea edx, [ebp - 0xf0]
push edx
push 1
call fcn.005f7610
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xf0]
mov dword [eax + 0x1c0], ecx
mov dl, byte [0x6b878a]
mov byte [0x72e798], dl
mov al, byte [str.jnUUv]
mov byte [0x72e799], al
mov cl, byte [0x6b878c]
mov byte [0x72e79a], cl
mov dl, byte [0x6b8789]
mov byte [0x72e79b], dl
mov al, byte [0x6b878b]
mov byte [0x72e79c], al
mov dword [ebp - 0x88], 5
jmp 0x572f3e
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 0x17
jge 0x572f61
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov cl, byte [eax + str.jnUUv]
mov byte [edx + 0x72e798], cl
jmp 0x572f2f
push 0x3e7
call fcn.005f77e0
mov dword [ebp - 0xc0], eax
push 0x72e798
call fcn.005f7b80
mov dword [ebp - 0xc0], eax
push 0x96
push 0
lea edx, [ebp - 0x18c]
push edx
call fcn.00607d60
add esp, 0xc
push 0
lea eax, [ebp - 0x18c]
push eax
push 0x96
push 0
call fcn.005f7d50
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x57321d
mov dword [ebp - 0x190], 0
jmp 0x572fda
mov ecx, dword [ebp - 0x190]
add ecx, 1
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x12
jge 0x57303d
mov edx, dword [ebp - 0x190]
mov al, byte [ebp + edx - 0x18c]
push eax
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0x1c8]
push edx
call fcn.0061b2eb
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1e0]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0061ee07
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c8]
call fcn.0061ecce
jmp 0x572fcb
push str.ITD_TRACEVIEW_VOIP
lea edx, [ebp - 0xc4]
push edx
call fcn.00416930
and eax, 0xff
test eax, eax
je 0x57309c
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x72e3ac]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
call fcn.005f7540
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
movsx ecx, byte [ebp - 0x179]
sub ecx, 0x30
mov edx, dword [ebp - 0x14]
mov byte [edx + 0x1c5], cl
movsx eax, byte [ebp - 0x178]
sub eax, 0x30
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x1c6], al
movsx edx, byte [ebp - 0x177]
sub edx, 0x30
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x1c7], dl
movsx ecx, byte [ebp - 0x165]
sub ecx, 0x30
mov edx, dword [ebp - 0x14]
mov byte [edx + 0x1d0], cl
mov eax, 1
test eax, eax
je 0x573193
mov ecx, 1
test ecx, ecx
je 0x573149
movsx edx, byte [ebp - 0x153]
sub edx, 0x30
cmp edx, 1
je 0x573147
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x72e31c]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
jmp 0x573193
movsx ecx, byte [ebp - 0x153]
sub ecx, 0x30
cmp ecx, 1
jne 0x573193
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x72e304]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
movsx eax, byte [ebp - 0x152]
sub eax, 0x30
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x1c9], al
movsx edx, byte [ebp - 0x151]
sub edx, 0x30
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x1ca], dl
movsx ecx, byte [ebp - 0x150]
sub ecx, 0x30
mov edx, dword [ebp - 0x14]
mov byte [edx + 0x1cb], cl
movsx eax, byte [ebp - 0x14f]
sub eax, 0x30
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x1cc], al
movsx edx, byte [ebp - 0x14e]
sub edx, 0x30
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x1cd], dl
movsx ecx, byte [ebp - 0x14d]
sub ecx, 0x30
mov edx, dword [ebp - 0x14]
mov byte [edx + 0x1ce], cl
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
jmp 0x573257
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x72e394]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
push 0x3e7
call fcn.00572bec
add esp, 4
call fcn.005f7900
mov dword [ebp - 0xc0], eax
call fcn.005f7550
mov dword [ebp - 0xc0], eax
push 0x3e6
call fcn.005f77e0
mov dword [ebp - 0xc0], eax
push 0x72e798
call fcn.005f7b80
mov dword [ebp - 0xc0], eax
push 0x32
push 0
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00607d60
add esp, 0xc
push 0
lea edx, [ebp - 0xbc]
push edx
push 0x32
push 0
call fcn.005f7d50
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x57347c
mov dword [ebp - 0x194], 0
jmp 0x5732ed
mov eax, dword [ebp - 0x194]
add eax, 1
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xd
jge 0x573350
mov ecx, dword [ebp - 0x194]
mov dl, byte [ebp + ecx - 0xbc]
push edx
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.0061b2eb
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0xf4]
call fcn.0061ee07
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1cc]
call fcn.0061ecce
jmp 0x5732de
push str.ITD_PESQSCOPE
lea ecx, [ebp - 0xf4]
push ecx
call fcn.00416930
and eax, 0xff
test eax, eax
je 0x5733a5
call fcn.005f7900
mov dword [ebp - 0xc0], eax
call fcn.005f7540
mov dword [ebp - 0xc0], eax
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x72e2ec]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
movsx eax, byte [ebp - 0xaa]
sub eax, 0x30
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0x1c4], al
mov edx, 1
test edx, edx
je 0x573464
mov eax, 1
test eax, eax
je 0x57341a
movsx ecx, byte [ebp - 0xa8]
sub ecx, 0x30
cmp ecx, 1
je 0x573418
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x72e2bc]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
jmp 0x573464
movsx eax, byte [ebp - 0xa8]
sub eax, 0x30
cmp eax, 1
jne 0x573464
push 0
push 0
xor ecx, ecx
mov cl, byte [0x6dfa28]
lea ecx, [ecx*4 + 0x72e2a4]
call fcn.0041e980
push eax
call fcn.006308c8
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
push 0xffffffffffffffff
call fcn.00607fcc
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
jmp 0x5734c2
call fcn.005f7c90
mov dword [ebp - 0xc0], eax
call fcn.005f7900
mov dword [ebp - 0xc0], eax
call fcn.005f7540
mov dword [ebp - 0xc0], eax
push 0
push 0
xor edx, edx
mov dl, byte [0x6dfa28]
lea ecx, [edx*4 + 0x72e2d4]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov cl, byte [eax + 0x1c9]
test ecx, ecx
je 0x5734df
push 0
push 0
push str.This_is_a_demo_version_for_reseller____nOnly_for_demonstration___
call fcn.006308c8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.0061ecce
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc4]
call fcn.0061ecce
xor edx, edx
test edx, edx
je 0x573573
push 0xffffffffffffffff
push 0x3b
push 0x3b
push 0x17
push 0x1f
push 0xa
push 0x7d6
lea ecx, [ebp - 0x198]
call fcn.0061bb77
lea eax, [ebp - 0x19c]
push eax
call fcn.0061bc5b
push ecx
mov ecx, esp
mov dword [ebp - 0x1d0], esp
lea edx, [ebp - 0x198]
push edx
call fcn.00494dc0
lea ecx, [ebp - 0x19c]
call fcn.005c5ce0
test eax, eax
je 0x573573
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x72e5a4]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
mov ecx, 1
test ecx, ecx
je 0x573725
lea ecx, [ebp - 0x1c0]
call fcn.004086f0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
xor eax, eax
mov al, byte [edx + 0x1c9]
test eax, eax
je 0x5735a7
mov dword [ebp - 0x28], 0
jmp 0x5735cf
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov dl, byte [ecx + 0x1d0]
cmp edx, 1
jne 0x5735c0
mov dword [ebp - 0x28], 1
jmp 0x5735cf
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 0x188]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x1d8]
call fcn.00572089
mov ecx, dword [ebp - 0x1d8]
call fcn.005c54ab
mov byte [ebp - 0x24], 0
lea ecx, [ebp - 0x84]
call fcn.00623512
mov edx, dword [ebp - 0x1d8]
mov eax, dword [0x72e778]
mov dword [edx + 0x7a25e0], eax
mov ecx, dword [ebp - 0x1d8]
xor edx, edx
mov dl, byte [ecx + 0x7a287f]
test edx, edx
jne 0x573648
mov eax, dword [0x72e778]
mov ecx, dword [ebp - 0x1d8]
lea edx, [ecx + eax*4 + 0x7a2818]
push edx
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x7a2864
call fcn.0061ee07
mov eax, dword [ebp - 0x1d8]
mov byte [eax + 0x7a287e], 1
push 0x72e8e0
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x7a2864
push ecx
call fcn.00408710
and eax, 0xff
test eax, eax
je 0x573675
mov edx, dword [ebp - 0x1d8]
mov byte [edx + 0x7a287f], 1
mov dword [ebp - 0x1bc], 0x20
lea eax, [ebp - 0x1bc]
push eax
call dword [0x659330]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1c4], ecx
mov edx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x28]
mov dword [edx + 0x188], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1ec], ecx
cmp dword [ebp - 0x1ec], 3
ja case.default.0x5736bf
mov edx, dword [ebp - 0x1ec]
jmp dword [edx*4 + 0x573aae]
mov dword [0x6dfb58], 0xc350
jmp case.default.0x5736bf
mov dword [0x6dfb58], 0x186a0
jmp case.default.0x5736bf
mov dword [0x6dfb58], 0x3d090
jmp case.default.0x5736bf
mov eax, dword [ebp - 0x1c4]
xor edx, edx
mov ecx, 0x41a
div ecx
mov dword [0x6dfb58], eax
cmp dword [0x6dfb58], 0xe4e1c0
jbe case.default.0x5736bf
mov dword [0x6dfb58], 0xe4e1c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c0]
call fcn.0061ecce
jmp 0x57373c
mov dword [0x6dfb58], 0x249f0
mov edx, dword [ebp - 0x1d8]
mov byte [edx + 0x7a287f], 1
mov byte [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
and eax, 0xff
test eax, eax
jne 0x573977
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x50], 0
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x54], 0
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x58], 0
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x5c], 0
mov edx, dword [ebp - 0x1d8]
mov dword [edx + 0x40], 0
mov eax, dword [ebp - 0x1d8]
mov dword [eax + 0x44], 0
mov ecx, dword [0x6dfb58]
imul ecx, ecx, 0x226
push ecx
call fcn.00608111
add esp, 4
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x50], eax
mov eax, dword [0x6dfb58]
shl eax, 3
push eax
call fcn.00608111
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x6dfb58]
shl edx, 2
push edx
call fcn.00608111
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x54], eax
mov edx, dword [0x6dfb58]
shl edx, 2
push edx
call fcn.00608111
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x58], eax
mov edx, dword [0x6dfb58]
imul edx, edx, 0x148
push edx
call fcn.00608111
add esp, 4
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx + 0x40], eax
mov edx, dword [0x6dfb58]
imul edx, edx, 0x28
push edx
call fcn.00608111
add esp, 4
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx + 0x44], eax
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x50], 0
je 0x57386d
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x54], 0
je 0x57386d
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x5c], 0
je 0x57386d
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x58], 0
je 0x57386d
mov eax, dword [ebp - 0x1d8]
cmp dword [eax + 0x40], 0
je 0x57386d
mov ecx, dword [ebp - 0x1d8]
cmp dword [ecx + 0x44], 0
jne 0x573917
mov byte [ebp - 0x10], 0
cmp dword [0x6dfb58], 0x2710
jbe 0x5738f1
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x50]
push eax
call fcn.0060824b
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x54]
push edx
call fcn.0060824b
add esp, 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x58]
push ecx
call fcn.0060824b
add esp, 4
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x5c]
push eax
call fcn.0060824b
add esp, 4
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ecx + 0x40]
push edx
call fcn.0060824b
add esp, 4
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 0x44]
push ecx
call fcn.0060824b
add esp, 4
mov edx, dword [0x6dfb58]
sub edx, 0x2710
mov dword [0x6dfb58], edx
jmp 0x573915
push 0
push 0
xor eax, eax
mov al, byte [0x6dfa28]
lea ecx, [eax*4 + 0x72e574]
call fcn.0041e980
push eax
call fcn.006308c8
push 0xffffffffffffffff
call fcn.00607fcc
jmp 0x573972
mov byte [ebp - 0x10], 1
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x50]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x54]
mov dword [ecx + 0x6c], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x58]
mov dword [ecx + 0x68], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x5c]
mov dword [ecx + 0x70], eax
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx + 0x40]
mov dword [ecx + 0x48], eax
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx + 0x44]
mov dword [ecx + 0x1200], eax
jmp 0x573740
lea ecx, [ebp - 0x18]
call fcn.004086f0
mov byte [ebp - 4], 6
mov ecx, dword [0x6dfb58]
push ecx
xor edx, edx
mov dl, byte [0x6dfa28]
mov eax, dword [edx*4 + 0x72e694]
push eax
push str._s__d_Frames
lea ecx, [ebp - 0x18]
push ecx
call fcn.0061bac6
add esp, 0x10
cmp dword [ebp - 0x28], 0
jne 0x5739d1
cmp dword [0x6dfb58], 0xc350
je 0x5739d1
push 0
push 0
lea ecx, [ebp - 0x18]
call fcn.0041e980
push eax
call fcn.006308c8
jmp 0x573a1b
cmp dword [ebp - 0x28], 1
jne 0x5739f7
cmp dword [0x6dfb58], 0x186a0
je 0x5739f7
push 0
push 0
lea ecx, [ebp - 0x18]
call fcn.0041e980
push eax
call fcn.006308c8
jmp 0x573a1b
cmp dword [ebp - 0x28], 2
jne 0x573a1b
cmp dword [0x6dfb58], 0x3d090
je 0x573a1b
push 0
push 0
lea ecx, [ebp - 0x18]
call fcn.0041e980
push eax
call fcn.006308c8
mov ecx, dword [ebp - 0x1d8]
call fcn.00573abe
xor edx, edx
test edx, edx
je 0x573a82
push str.Demo.vip
mov eax, dword [ebp - 0x1d8]
add eax, 0x7a2868
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.0061ef63
mov dword [ebp - 0x1f0], eax
mov edx, dword [ebp - 0x1f0]
mov dword [ebp - 0x1f4], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1f4]
call fcn.0041e980
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.00413198
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1d4]
call fcn.0061ecce
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0061ecce
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.00408df0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret