Function at 0x59cac0
Capabilities:
Contain obfuscated stackstrings
Enumerate files on windows
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66548e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x4253c
call fcn.00612380
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 4], 0
wait
cmp dword [edi + 0x2d8], 0
jne 0x59cb13
xor eax, eax
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [edi + 0x2fc]
call fcn.00526880
push 0
lea ecx, [edi + 0x50]
call fcn.005b0d20
push eax
mov ecx, dword [edi + 0x2d8]
call fcn.00413ee0
push 0
lea ecx, [edi + 0x50]
call fcn.005b0d20
push eax
mov ecx, dword [edi + 0x2d8]
call fcn.00413eb0
push 0xffffffffffffffff
push 0
mov ecx, 0x7147b4
call fcn.00599520
lea ecx, [edi + 0x29c]
call fcn.004b9330
lea eax, [ebp - 0x48]
push eax
call fcn.005bd6c0
add esp, 4
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
lea ecx, [edi + 0x2a0]
call fcn.004644a0
push eax
lea ecx, [ebp - 0x60]
call fcn.004078d0
push 0x104
push 0x104
lea ecx, [ebp - 0x28]
call fcn.00401640
push eax
push str.LogsDir
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.005bd4f0
add esp, 0x10
lea ecx, [ebp - 0x28]
test eax, eax
jne 0x59cc4b
push 0x104
call fcn.00401640
push eax
push 1
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x59cc29
push str.SHGetFolderPathW__0__0x001a__0__SHGFP_TYPE_DEFAULT__strSysDir.GetBuffer__260__
push eax
lea ecx, [ebp - 0x1a4]
call fcn.0040de50
push 0x6ba4dc
lea edx, [ebp - 0x1a4]
push edx
call fcn.0060fb01
push 0xffffffffffffffff
lea ecx, [ebp - 0x28]
call fcn.004048d0
push 0x67ea0c
push str._sData_
lea eax, [ebp - 0x28]
push eax
call fcn.00414990
add esp, 0xc
jmp 0x59cc5f
push 0xffffffffffffffff
call fcn.004048d0
push str.Data_
lea ecx, [ebp - 0x28]
call fcn.004017a0
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 5
mov byte [ebp - 4], 6
mov eax, dword [edi + 0x2d8]
add eax, 0x14
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
jle 0x59ccb9
push 0x66ea40
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00428bb0
add esp, 0xc
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x40]
call fcn.004078d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov eax, dword [edi + 0x2d8]
add eax, 0x10
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00428b00
mov byte [ebp - 4], 8
push 0x66ea40
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00428bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40]
push ecx
push eax
lea edx, [ebp - 0x24]
push edx
call fcn.00428b00
mov byte [ebp - 4], 0xa
push str.USBCachedFiles
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00428bb0
mov byte [ebp - 4], 0xb
push 0x66f150
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00428bb0
mov bl, 0xc
mov byte [ebp - 4], bl
push 0x67eac0
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00428bb0
add esp, 0x48
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
lea ecx, [ebp - 0x40c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp esi, 0xffffffff
je 0x59d3fb
lea ecx, [ebp - 0xb0]
call fcn.00432c80
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xc8], 0
lea esp, [esp]
call ebx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, edi
call fcn.004f2360
test al, al
je 0x59cf3e
lea edx, [edi + 0x2b8]
push edx
lea ecx, [ebp - 0x144]
call fcn.00425550
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004255a0
mov ecx, eax
call fcn.00425710
test al, al
je 0x59cf3e
lea ecx, [edi + 0x2a8]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00425550
push eax
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xbc]
call fcn.004255a0
mov ecx, eax
call fcn.004256b0
test al, al
je 0x59cf3e
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x5c]
call fcn.004255a0
fld qword [eax]
fstp qword [ebp - 0xc4]
mov ecx, dword [edi + 0x2d8]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0xf
push 0x66ea40
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x40]
push edx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x11
push str.USBCachedFiles
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x12
push 0x66ea40
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3e0]
push ecx
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.00428bb0
add esp, 0x48
mov esi, eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004315b0
push esi
mov ecx, eax
call fcn.004078d0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x24]
call fcn.004014a0
inc dword [ebp - 0xc8]
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0x40c]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x59cdc0
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0xac]
mov eax, dword [edx]
mov dword [ebp - 0x50], eax
mov edi, eax
cmp edi, dword [ebp - 0xac]
je 0x59d3e3
mov eax, dword [edi + 0x18]
push 0x66fe90
push eax
call fcn.00614a04
add esp, 8
mov esi, eax
test esi, esi
je 0x59d39f
xor ebx, ebx
push 2
push ebx
push esi
call fcn.006167c5
push esi
call fcn.006166d6
mov dword [ebp - 0x30], eax
push ebx
push ebx
push esi
call fcn.006167c5
add esp, 0x1c
cmp ebx, dword [ebp - 0x30]
jae 0x59d396
lea ecx, [ebp - 0x98]
call fcn.0055f760
mov byte [ebp - 4], 0x15
push esi
push 1
push 0x10
lea ecx, [ebp - 0x128]
push ecx
call fcn.00614929
add esp, 0x10
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x128]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push esi
push 1
push 1
lea ecx, [ebp - 0x88]
push ecx
call fcn.00614929
push esi
push 1
push 4
lea edx, [ebp - 0x84]
push edx
call fcn.00614929
push esi
call fcn.006166d6
mov dword [ebp - 0x20], eax
push esi
push 1
push 0x10810
lea eax, [ebp - 0x2152c]
push eax
call fcn.00614929
add esp, 0x34
lea ecx, [ebp - 0x2152c]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.0040bea0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx - 0xc]
push 0
add eax, eax
push eax
lea ecx, [ebp - 0x1c]
call fcn.004014f0
push eax
call fcn.005bd2f0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
lea edi, [eax - 0x10]
mov ebx, dword [ebp - 0x80]
add ebx, 0xfffffff0
cmp edi, ebx
je 0x59d11d
cmp dword [ebx + 0xc], 0
jl 0x59d110
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x59d110
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi + 0xc]
cmp dword [ecx], 0
jl 0x59d0ac
cmp eax, dword [edi]
jne 0x59d0ac
mov dword [ebp - 0x18], edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59d0ec
mov edx, dword [eax]
push 2
mov ecx, dword [edi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x59d0c6
call fcn.00404070
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
lea edx, [eax + eax + 2]
push edx
add edi, 0x10
push edi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59d105
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
mov dword [ebp - 0x80], ecx
jmp 0x59d11d
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x80]
call fcn.00401670
lea eax, [ebp - 0x2152c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x59d126
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x20]
lea eax, [edx + eax*2 + 2]
mov dword [ebp - 0x20], eax
push 0
push eax
push esi
call fcn.006167c5
push esi
push 1
push 0x10810
lea eax, [ebp - 0x4254c]
push eax
call fcn.00614929
add esp, 0x1c
lea ecx, [ebp - 0x4254c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0040bea0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x24]
mov eax, dword [edx - 0xc]
push 0
add eax, eax
push eax
lea ecx, [ebp - 0x24]
call fcn.004014f0
push eax
call fcn.005bd2f0
add esp, 0xc
mov eax, dword [ebp - 0x24]
lea edi, [eax - 0x10]
mov ebx, dword [ebp - 0x7c]
add ebx, 0xfffffff0
cmp edi, ebx
je 0x59d248
cmp dword [ebx + 0xc], 0
jl 0x59d23b
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x59d23b
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi + 0xc]
cmp dword [ecx], 0
jl 0x59d1d7
cmp eax, dword [edi]
jne 0x59d1d7
mov dword [ebp - 0x18], edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59d217
mov edx, dword [eax]
push 2
mov ecx, dword [edi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x59d1f1
call fcn.00404070
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
lea edx, [eax + eax + 2]
push edx
add edi, 0x10
push edi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59d230
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
mov dword [ebp - 0x7c], ecx
jmp 0x59d248
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.00401670
lea eax, [ebp - 0x4254c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x59d251
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x20]
lea eax, [edx + eax*2 + 2]
mov dword [ebp - 0x20], eax
push 0
push eax
push esi
call fcn.006167c5
mov dword [ebp - 0x74], 0
push 0x66f16a
mov eax, dword [ebp - 0x2c]
add eax, 0x2a0
push eax
call fcn.0040b580
add esp, 0x14
test al, al
je 0x59d34a
mov edi, dword [ebp - 0x24]
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi - 4]
cmp dword [ecx], 0
jl 0x59d2c0
cmp eax, dword [edi - 0x10]
jne 0x59d2c0
lea ebx, [edi - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59d2f9
mov edx, dword [eax]
push 2
mov ecx, dword [edi - 0xc]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov ebx, eax
test ebx, ebx
jne 0x59d2d9
call fcn.00404070
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov eax, dword [edi - 0xc]
lea ecx, [eax + eax + 2]
push ecx
push edi
lea edx, [eax + eax + 2]
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.0060fbd3
add esp, 0x10
add ebx, 0x10
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x14]
call fcn.004644a0
push 0
mov ecx, dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004144e0
cmp eax, 0xffffffff
je 0x59d33c
cmp dword [ebp - 0x84], 0
jbe 0x59d33c
lea edx, [ebp - 0x98]
push edx
mov ecx, 0x7147b4
call fcn.00598970
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x14]
call fcn.004014a0
jmp 0x59d364
cmp dword [ebp - 0x84], 0
jbe 0x59d364
lea eax, [ebp - 0x98]
push eax
mov ecx, 0x7147b4
call fcn.00598970
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x98]
call fcn.004270e0
mov edi, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x20]
jmp 0x59cfb0
push esi
call fcn.0061466b
add esp, 4
cmp byte [edi + 0x21], 0
jne 0x59cf6a
mov eax, dword [edi + 8]
cmp byte [eax + 0x21], 0
jne 0x59d3c4
mov edi, eax
mov dword [ebp - 0x138], edi
mov eax, dword [edi]
cmp byte [eax + 0x21], 0
jne 0x59d3db
jmp 0x59d3b2
mov eax, dword [edi + 4]
cmp byte [eax + 0x21], 0
jne 0x59d3d9
cmp edi, dword [eax + 8]
jne 0x59d3d9
mov edi, eax
mov dword [ebp - 0x50], edi
jmp 0x59d3c4
mov edi, eax
mov dword [ebp - 0x50], edi
jmp 0x59cf6a
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb0]
call fcn.00432c20
mov edi, dword [ebp - 0x2c]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [edi + 0x2d8]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x1a
push 0x66ea40
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x40]
push edx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x1c
push str.USBCachedFiles
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x1d
push 0x66f150
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x1e
push 0x67eac8
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00428bb0
add esp, 0x48
mov byte [ebp - 4], 0x1f
mov eax, dword [eax]
lea ecx, [ebp - 0x40c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24]
call fcn.004014a0
call ebx
cmp esi, 0xffffffff
je 0x59dc37
lea ecx, [ebp - 0xb0]
call fcn.00432c80
mov byte [ebp - 4], 0x20
mov dword [ebp - 0xb4], 0
call ebx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, edi
call fcn.004f2360
test al, al
je 0x59d6ce
lea edx, [edi + 0x2b8]
push edx
lea ecx, [ebp - 0x144]
call fcn.00425550
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004255a0
mov ecx, eax
call fcn.00425710
test al, al
je 0x59d6ce
lea ecx, [edi + 0x2a8]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00425550
push eax
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xbc]
call fcn.004255a0
mov ecx, eax
call fcn.004256b0
test al, al
je 0x59d6ce
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x160]
call fcn.004255a0
fld qword [eax]
fstp qword [ebp - 0xa0]
mov ecx, dword [edi + 0x2d8]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x21
push 0x66ea40
push eax
lea ecx, [ebp - 0x24]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x40]
push edx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x23
push str.USBCachedFiles
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x24
push 0x66ea40
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x3e0]
push ecx
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00428bb0
add esp, 0x48
mov esi, eax
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004315b0
mov ebx, eax
mov ecx, dword [esi]
lea eax, [ecx - 0x10]
mov esi, dword [ebx]
sub esi, 0x10
cmp eax, esi
je 0x59d677
cmp dword [esi + 0xc], 0
jl 0x59d66b
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x59d66b
push eax
call fcn.004011f0
add esp, 4
mov dword [ebp - 0x30], eax
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59d661
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x10
mov dword [ebx], ecx
jmp 0x59d677
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, ebx
call fcn.00401670
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x58]
call fcn.004014a0
inc dword [ebp - 0xb4]
mov esi, dword [ebp - 0x20]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x40c]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x59d4f8
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax]
mov dword [ebp - 0x54], ecx
mov edi, ecx
cmp edi, dword [ebp - 0xac]
je 0x59dc1f
mov eax, dword [edi + 0x18]
push 0x66fe90
push eax
call fcn.00614a04
add esp, 8
mov esi, eax
test esi, esi
je 0x59dbd5
xor ebx, ebx
push 2
push ebx
push esi
call fcn.006167c5
push esi
call fcn.006166d6
mov dword [ebp - 0x58], eax
push ebx
push ebx
push esi
call fcn.006167c5
add esp, 0x1c
cmp ebx, dword [ebp - 0x58]
jae 0x59dbcc
xor edx, edx
mov word [ebp - 0xf0], dx
xor eax, eax
mov dword [ebp - 0xee], eax
mov dword [ebp - 0xea], eax
mov dword [ebp - 0xe6], eax
mov word [ebp - 0xe2], ax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0xd8], eax
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x28
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x2a
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0xcc], 0
push esi
push 1
push 0x10
lea eax, [ebp - 0x128]
push eax
call fcn.00614929
add esp, 0x10
lea ecx, [ebp - 0xf0]
push ecx
lea edx, [ebp - 0x128]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push esi
push 1
push 1
lea eax, [ebp - 0xe0]
push eax
call fcn.00614929
push esi
push 1
push 4
lea ecx, [ebp - 0xdc]
push ecx
call fcn.00614929
push esi
call fcn.006166d6
mov dword [ebp - 0x24], eax
push esi
push 1
push 0x10810
lea edx, [ebp - 0x4254c]
push edx
call fcn.00614929
add esp, 0x34
lea eax, [ebp - 0x4254c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040bea0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx - 0xc]
push 0
lea edx, [eax + eax]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004014f0
push eax
call fcn.005bd2f0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
lea edi, [eax - 0x10]
mov ebx, dword [ebp - 0xd8]
add ebx, 0xfffffff0
cmp edi, ebx
je 0x59d942
cmp dword [ebx + 0xc], 0
jl 0x59d932
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x59d932
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi + 0xc]
cmp dword [ecx], 0
jl 0x59d8cb
cmp eax, dword [edi]
jne 0x59d8cb
mov dword [ebp - 0x14], edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59d90b
mov edx, dword [eax]
push 2
mov ecx, dword [edi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x59d8e5
call fcn.00404070
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
lea edx, [eax + eax + 2]
push edx
add edi, 0x10
push edi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59d924
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x10
mov dword [ebp - 0xd8], ecx
jmp 0x59d942
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00401670
lea eax, [ebp - 0x4254c]
lea edx, [eax + 2]
jmp 0x59d950
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x59d950
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x24]
lea eax, [edx + eax*2 + 2]
mov dword [ebp - 0x24], eax
push 0
push eax
push esi
call fcn.006167c5
push esi
push 1
push 0x10810
lea eax, [ebp - 0x2152c]
push eax
call fcn.00614929
add esp, 0x1c
lea ecx, [ebp - 0x2152c]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0040bea0
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x20]
mov eax, dword [edx - 0xc]
push 0
add eax, eax
push eax
lea ecx, [ebp - 0x20]
call fcn.004014f0
push eax
call fcn.005bd2f0
add esp, 0xc
mov eax, dword [ebp - 0x20]
lea edi, [eax - 0x10]
mov ebx, dword [ebp - 0xd4]
add ebx, 0xfffffff0
cmp edi, ebx
je 0x59da7b
cmp dword [ebx + 0xc], 0
jl 0x59da6b
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x59da6b
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi + 0xc]
cmp dword [ecx], 0
jl 0x59da04
cmp eax, dword [edi]
jne 0x59da04
mov dword [ebp - 0x14], edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59da44
mov edx, dword [eax]
push 2
mov ecx, dword [edi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x59da1e
call fcn.00404070
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
lea edx, [eax + eax + 2]
push edx
add edi, 0x10
push edi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59da5d
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x10
mov dword [ebp - 0xd4], ecx
jmp 0x59da7b
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.00401670
lea eax, [ebp - 0x2152c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x59da84
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x24]
lea eax, [edx + eax*2 + 2]
mov dword [ebp - 0x24], eax
push 0
push eax
push esi
call fcn.006167c5
mov dword [ebp - 0xcc], 0
push 0x66f16a
mov eax, dword [ebp - 0x2c]
add eax, 0x2a0
push eax
call fcn.0040b580
add esp, 0x14
test al, al
je 0x59db80
mov edi, dword [ebp - 0x20]
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [edi - 4]
cmp dword [ecx], 0
jl 0x59daf6
cmp eax, dword [edi - 0x10]
jne 0x59daf6
lea ebx, [edi - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59db2f
mov edx, dword [eax]
push 2
mov ecx, dword [edi - 0xc]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov ebx, eax
test ebx, ebx
jne 0x59db0f
call fcn.00404070
mov eax, dword [edi - 0xc]
mov dword [ebx + 4], eax
mov eax, dword [edi - 0xc]
lea ecx, [eax + eax + 2]
push ecx
push edi
lea edx, [eax + eax + 2]
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.0060fbd3
add esp, 0x10
add ebx, 0x10
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x18]
call fcn.004644a0
push 0
mov ecx, dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x18]
call fcn.004144e0
cmp eax, 0xffffffff
je 0x59db72
cmp dword [ebp - 0xdc], 0
jbe 0x59db72
lea edx, [ebp - 0xf0]
push edx
mov ecx, 0x7147b4
call fcn.00598970
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x18]
call fcn.004014a0
jmp 0x59db9a
cmp dword [ebp - 0xdc], 0
jbe 0x59db9a
lea eax, [ebp - 0xf0]
push eax
mov ecx, 0x7147b4
call fcn.00598970
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x20]
call fcn.004014a0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xf0]
call fcn.004270e0
mov edi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x24]
jmp 0x59d740
push esi
call fcn.0061466b
add esp, 4
cmp byte [edi + 0x21], 0
jne 0x59d6fa
mov eax, dword [edi + 8]
cmp byte [eax + 0x21], 0
jne 0x59dc00
mov edi, eax
mov dword [ebp - 0x148], edi
mov eax, dword [edi]
cmp byte [eax + 0x21], 0
jne 0x59dc17
jmp 0x59dbe8
mov eax, dword [edi + 4]
cmp byte [eax + 0x21], 0
jne 0x59dc15
cmp edi, dword [eax + 8]
jne 0x59dc15
mov edi, eax
mov dword [ebp - 0x54], edi
jmp 0x59dc00
mov edi, eax
mov dword [ebp - 0x54], edi
jmp 0x59d6fa
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb0]
call fcn.00432c20
mov edi, dword [ebp - 0x2c]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], esi
mov byte [ebp - 4], 0x31
push esi
lea ecx, [edi + 0x2b8]
push ecx
lea edx, [edi + 0x2a8]
push edx
lea ecx, [edi + 0x50]
call fcn.005b0d20
push eax
mov ecx, dword [edi + 0x2d8]
call fcn.00414080
lea eax, [ebp - 0x48]
push eax
call fcn.005bd6c0
add esp, 4
push 0x104
push 0x104
lea ecx, [ebp - 0x28]
call fcn.00401640
push eax
push str.LogsDir
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.005bd4f0
add esp, 0x10
lea ecx, [ebp - 0x28]
test eax, eax
jne 0x59dd08
push 0x104
call fcn.00401640
push eax
push 1
push esi
push 0x1a
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp eax, esi
jge 0x59dce6
push str.SHGetFolderPathW__0__0x001a__0__SHGFP_TYPE_DEFAULT__strSysDir.GetBuffer__260__
push eax
lea ecx, [ebp - 0x1b4]
call fcn.0040de50
push 0x6ba4dc
lea edx, [ebp - 0x1b4]
push edx
call fcn.0060fb01
push 0xffffffffffffffff
lea ecx, [ebp - 0x28]
call fcn.004048d0
push 0x67ea0c
push str._sData_
lea eax, [ebp - 0x28]
push eax
call fcn.00414990
add esp, 0xc
jmp 0x59dd1c
push 0xffffffffffffffff
call fcn.004048d0
push str.Data_
lea ecx, [ebp - 0x28]
call fcn.004017a0
mov ecx, dword [edi + 0x2d8]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x1c]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x32
push 0x66ea40
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x40]
push edx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x34
push str.Sites
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x35
push 0x66f150
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x36
push str.urllog
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00428bb0
add esp, 0x48
mov byte [ebp - 4], 0x37
mov eax, dword [eax]
lea ecx, [ebp - 0x40c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x58]
call fcn.004014a0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1c]
call fcn.004014a0
call ebx
cmp esi, 0xffffffff
je 0x59e6c4
lea ecx, [ebp - 0x128]
call fcn.00432c80
mov byte [ebp - 4], 0x38
lea ecx, [edi + 0x29c]
call fcn.004b9330
lea ebx, [ebx]
call ebx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, edi
call fcn.004f2360
test al, al
je 0x59e061
lea edx, [edi + 0x2b8]
push edx
lea ecx, [ebp - 0x160]
call fcn.00425550
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004255a0
mov ecx, eax
call fcn.00425710
test al, al
je 0x59e061
lea ecx, [edi + 0x2a8]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.00425550
push eax
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x1bc]
call fcn.004255a0
mov ecx, eax
call fcn.004256b0
test al, al
je 0x59e061
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004255a0
fld qword [eax]
fstp qword [ebp - 0x144]
mov ecx, dword [edi + 0x2d8]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x39
push 0x66ea40
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x40]
push edx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x3b
push str.Sites
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x3c
push 0x66ea40
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x3e0]
push ecx
push eax
lea edx, [ebp - 0x58]
push edx
call fcn.00428bb0
add esp, 0x48
mov esi, eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x128]
call fcn.004315b0
mov dword [ebp - 0x18], eax
mov ecx, dword [esi]
lea ebx, [ecx - 0x10]
mov esi, dword [eax]
sub esi, 0x10
cmp ebx, esi
je 0x59e00d
cmp dword [esi + 0xc], 0
jl 0x59e000
mov edx, dword [ebx]
cmp edx, dword [esi]
jne 0x59e000
mov ecx, edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
lea ecx, [ebx + 0xc]
cmp dword [ecx], 0
jl 0x59df9a
cmp eax, dword [ebx]
jne 0x59df9a
mov dword [ebp - 0x14], ebx
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x59dfda
mov edx, dword [eax]
push 2
mov ecx, dword [ebx + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x59dfb4
call fcn.00404070
mov eax, dword [ebx + 4]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 4]
lea edx, [eax + eax + 2]
push edx
add ebx, 0x10
push ebx
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59dff3
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x10
mov edx, dword [ebp - 0x18]
mov dword [edx], ecx
jmp 0x59e00d
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.00401670
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x58]
call fcn.004014a0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.004014a0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x6c]
call fcn.004014a0
mov esi, dword [ebp - 0x20]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 0x40c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x59de20
call ebx
lea ecx, [edi + 0x2a0]
call fcn.004644a0
push eax
lea ecx, [ebp - 0x24]
call fcn.00401450
mov byte [ebp - 4], 0x3f
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
mov dword [ebp - 0x4c], edx
mov esi, edx
cmp esi, dword [ebp - 0x124]
je 0x59e6a6
push 0
push 0
lea eax, [ebp - 0x158]
push eax
mov eax, dword [esi + 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040bea0
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x3f
call fcn.004efd00
add esp, 0x10
mov ebx, dword [ebp - 0x158]
mov dword [ebp - 0x130], ebx
cmp ebx, dword [ebp - 0x154]
je 0x59e662
mov dword [ebp - 0x44], 0
lea ebx, [ebx]
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebx + 0x28]
jae 0x59e65a
mov esi, ecx
push esi
lea ecx, [ebx + 0x24]
call fcn.0055ed20
add eax, 4
push eax
lea ecx, [ebp - 0x20]
call fcn.00401450
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x20]
call fcn.004644a0
lea ecx, [ebp - 0x118]
call fcn.0055f760
mov byte [ebp - 4], 0x42
push esi
lea ecx, [ebx + 0x24]
call fcn.0055ed20
xor edx, edx
cmp dword [eax + 0xc], edx
sete dl
mov dword [ebp - 0x108], edx
mov eax, dword [ebx + 4]
lea esi, [eax - 0x10]
mov ecx, dword [ebp - 0xf8]
add ecx, 0xfffffff0
mov dword [ebp - 0x14], ecx
cmp esi, ecx
je 0x59e223
cmp dword [ecx + 0xc], 0
jl 0x59e213
mov edx, dword [esi]
cmp edx, dword [ecx]
jne 0x59e213
mov ecx, edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
lea ecx, [esi + 0xc]
cmp dword [ecx], 0
jl 0x59e1a6
cmp eax, dword [esi]
jne 0x59e1a6
mov dword [ebp - 0x18], esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x59e1e6
mov edx, dword [eax]
push 2
mov ecx, dword [esi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x59e1c0
call fcn.00404070
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 4]
lea edx, [eax + eax + 2]
push edx
add esi, 0x10
push esi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
mov eax, dword [ebp - 0x14]
add eax, 0xc
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59e205
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
mov dword [ebp - 0xf8], ecx
jmp 0x59e223
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00401670
mov esi, dword [ebp - 0x44]
push esi
lea ecx, [ebx + 0x24]
call fcn.0055ed20
mov edx, dword [eax + 8]
mov dword [ebp - 0x104], edx
push esi
lea ecx, [ebx + 0x24]
call fcn.0055ed20
mov eax, dword [eax + 4]
lea esi, [eax - 0x10]
mov ecx, dword [ebp - 0xfc]
add ecx, 0xfffffff0
mov dword [ebp - 0x14], ecx
cmp esi, ecx
je 0x59e30f
cmp dword [ecx + 0xc], 0
jl 0x59e2ff
mov edx, dword [esi]
cmp edx, dword [ecx]
jne 0x59e2ff
mov ecx, edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
lea ecx, [esi + 0xc]
cmp dword [ecx], 0
jl 0x59e292
cmp eax, dword [esi]
jne 0x59e292
mov dword [ebp - 0x18], esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x59e2d2
mov edx, dword [eax]
push 2
mov ecx, dword [esi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x59e2ac
call fcn.00404070
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 4]
lea edx, [eax + eax + 2]
push edx
add esi, 0x10
push esi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
mov eax, dword [ebp - 0x14]
add eax, 0xc
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59e2f1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x10
mov dword [ebp - 0xfc], ecx
jmp 0x59e30f
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00401670
push 0x672aa0
lea edx, [ebx + 0xc]
push edx
lea eax, [ebp - 0xb8]
push eax
call fcn.00428bb0
mov byte [ebp - 4], 0x43
lea ecx, [ebx + 0x10]
push ecx
push eax
lea edx, [ebp - 0x6c]
push edx
call fcn.00428b00
add esp, 0x18
mov byte [ebp - 4], 0x44
mov ecx, eax
call fcn.004014f0
push eax
lea ecx, [ebp - 0xe4]
call fcn.0040aa60
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call fcn.004f91d0
add esp, 8
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x110], esi
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xe4]
call fcn.00405700
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x6c]
call fcn.004014a0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xb8]
call fcn.004014a0
mov dword [ebp - 0xf4], 1
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x47
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x118]
mov dword [eax], ecx
mov edx, dword [ebp - 0x114]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x110]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x10c]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx + 0x20]
call fcn.00561cb0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x2d8]
add edx, 0x10
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
push ecx
call fcn.00428b00
mov byte [ebp - 4], 0x48
push 0x66ea40
push eax
lea edx, [ebp - 0x64]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0x49
push str.Webfiles
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00428bb0
mov byte [ebp - 4], 0x4a
push 0x66ea40
push eax
lea ecx, [ebp - 0x9c]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0x4b
lea edx, [ebp - 0x1c]
push edx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00428b00
mov byte [ebp - 4], 0x4c
push 0x66ea40
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00428bb0
add esp, 0x48
mov esi, eax
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x44]
push edx
lea ecx, [ebx + 0x24]
call fcn.0055ed20
push eax
push esi
lea eax, [ebp - 0x58]
push eax
call fcn.00428b00
add esp, 0xc
mov byte [ebp - 4], 0x4e
mov eax, dword [eax]
lea esi, [eax - 0x10]
mov edi, dword [ebp - 0x100]
add edi, 0xfffffff0
cmp esi, edi
je 0x59e57a
cmp dword [edi + 0xc], 0
jl 0x59e56a
mov ecx, dword [esi]
cmp ecx, dword [edi]
jne 0x59e56a
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [esi + 0xc]
cmp dword [ecx], 0
jl 0x59e503
cmp eax, dword [esi]
jne 0x59e503
mov dword [ebp - 0x14], esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x59e543
mov edx, dword [eax]
push 2
mov ecx, dword [esi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x59e51d
call fcn.00404070
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov eax, dword [esi + 4]
lea edx, [eax + eax + 2]
push edx
add esi, 0x10
push esi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.0060fbd3
add esp, 0x10
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59e55c
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x10
mov dword [ebp - 0x100], ecx
jmp 0x59e57a
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.00401670
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x58]
call fcn.004014a0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x34]
call fcn.004014a0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x9c]
call fcn.004014a0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xc0]
call fcn.004014a0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x64]
call fcn.004014a0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x38]
call fcn.004014a0
push 0x66f16a
lea edx, [ebp - 0x24]
push edx
call fcn.0040b580
add esp, 8
test al, al
je 0x59e60e
push 0
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
call fcn.004144e0
cmp eax, 0xffffffff
je 0x59e628
cmp dword [ebp - 0x104], 0
jbe 0x59e628
lea ecx, [ebp - 0x118]
push ecx
jmp 0x59e61e
cmp dword [ebp - 0x104], 0
jbe 0x59e628
lea edx, [ebp - 0x118]
push edx
mov ecx, 0x7147b4
call fcn.00598970
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x118]
call fcn.004270e0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x20]
call fcn.004014a0
inc dword [ebp - 0x44]
mov esi, dword [ebp - 0x4c]
jmp 0x59e100
add ebx, 0x34
jmp 0x59e0e1
cmp byte [esi + 0x21], 0
jne 0x59e0a5
mov eax, dword [esi + 8]
cmp byte [eax + 0x21], 0
jne 0x59e687
mov esi, eax
mov dword [ebp - 0x134], esi
mov eax, dword [esi]
cmp byte [eax + 0x21], 0
jne 0x59e69e
jmp 0x59e675
mov eax, dword [esi + 4]
cmp byte [eax + 0x21], 0
jne 0x59e69c
cmp esi, dword [eax + 8]
jne 0x59e69c
mov esi, eax
mov dword [ebp - 0x4c], esi
jmp 0x59e687
mov esi, eax
mov dword [ebp - 0x4c], esi
jmp 0x59e0a5
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x128]
call fcn.00432c20
mov edi, dword [ebp - 0x2c]
lea ecx, [edi + 4]
call fcn.004a1380
mov esi, dword [0x7147b8]
test esi, esi
je 0x59eaf7
mov byte [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
push eax
push 0
mov ecx, 0x7147b4
call fcn.004bd400
lea ecx, [esi + esi*4]
lea edx, [eax + ecx*8]
push edx
push 0
mov ecx, 0x7147b4
call fcn.004bd400
push eax
call fcn.0059ca80
lea eax, [ebp - 0x20]
push eax
push str.ItemsPerPage
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.005bd460
add esp, 0x18
test eax, eax
jne 0x59e738
push 0x1f4
push str.ItemsPerPage
mov edx, dword [ebp - 0x48]
push edx
call fcn.005bd4b0
add esp, 0xc
jmp 0x59e73f
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x59e747
mov ecx, 0x1f4
mov dword [ebp - 0x20], ecx
mov eax, dword [0x7147b8]
mov dword [ebp - 0x38], eax
push ecx
push eax
call fcn.00615734
add esp, 8
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edx
mov esi, eax
mov dword [ebp - 0x13c], esi
test edx, edx
jle 0x59e774
lea esi, [eax + 1]
mov dword [ebp - 0x13c], esi
push esi
lea ecx, [edi + 0x2fc]
call fcn.00527030
cmp byte [edi + 0x344], 0
je 0x59e7ab
lea eax, [esi - 1]
mov ecx, dword [ebp - 0x20]
imul eax, ecx
mov dword [ebp - 0x18], eax
mov ebx, esi
imul ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
lea ecx, [edi + 0x2fc]
call fcn.00527170
jmp 0x59e7cd
lea ecx, [edi + 0x2fc]
call fcn.00526870
mov ecx, dword [ebp - 0x20]
imul eax, ecx
mov dword [ebp - 0x18], eax
lea ebx, [eax + ecx - 1]
mov dword [ebp - 0x14], ebx
mov byte [edi + 0x344], 1
mov eax, dword [ebp - 0x38]
cmp ebx, eax
jl 0x59e7d8
dec eax
mov dword [ebp - 0x14], eax
xor ebx, ebx
mov dword [ebp - 0x12c], ebx
cmp ebx, dword [0x7147b8]
jae 0x59eaf7
cmp ebx, dword [ebp - 0x18]
jl 0x59eaf1
cmp ebx, dword [ebp - 0x14]
jg 0x59eaf1
push ebx
mov ecx, 0x7147b4
call fcn.004bd400
push eax
lea ecx, [ebp - 0x98]
call fcn.00598430
mov byte [ebp - 4], 0x4f
push 0
push 1
push 0x1002
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x194], 0
push 0x30
push 0
lea ecx, [ebp - 0x190]
push ecx
call fcn.006100a0
add esp, 0xc
mov dword [ebp - 0x194], 5
mov dword [ebp - 0x190], connect
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x51
movzx ecx, word [ebp - 0x98]
push ecx
movzx edx, word [ebp - 0x96]
push edx
movzx eax, word [ebp - 0x92]
push eax
push str._.2d._.2d._.2d
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00405ab0
add esp, 0x14
lea ecx, [ebp - 0x2c]
call fcn.004014f0
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x174], ebx
lea edx, [ebp - 0x194]
push edx
push 0
push 0x104d
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1c], eax
movzx ecx, word [ebp - 0x8c]
push ecx
movzx edx, word [ebp - 0x8e]
push edx
movzx eax, word [ebp - 0x90]
push eax
push str._.2d:_.2d:_.2d
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00405ab0
add esp, 0x14
mov edx, dword [ebp - 0x2c]
push edx
push 1
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [edi + 4]
call fcn.00417050
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x52
mov byte [ebp - 4], 0x53
push ebx
mov ecx, 0x7147b4
call fcn.004bd400
cmp dword [eax + 0x24], 0
jne 0x59e96e
push 0x80
cmp dword [ebp - 0x88], 1
jne 0x59e959
lea ecx, [ebp - 0x50c]
push ecx
push 0x2c28
jmp 0x59e9ad
lea eax, [ebp - 0x50c]
push eax
push 0x2c24
mov ecx, dword [0x716738]
push ecx
jmp 0x59e9b4
push ebx
mov ecx, 0x7147b4
call fcn.004bd400
cmp dword [eax + 0x24], 1
jne 0x59e9ba
push 0x80
cmp dword [ebp - 0x88], 0
je 0x59e9a1
lea edx, [ebp - 0x50c]
push edx
push 0x346
mov eax, dword [0x716738]
push eax
jmp 0x59e9b4
lea ecx, [ebp - 0x50c]
push ecx
push 0x347
mov edx, dword [0x716738]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x50c]
push eax
push 2
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [edi + 4]
call fcn.00417050
mov edx, dword [ebp - 0x7c]
push edx
push 3
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [edi + 4]
call fcn.00417050
push 0x400
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.00615734
add esp, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
test eax, eax
jle 0x59ea9b
push 0x100000
mov edx, dword [ebp - 0x84]
push edx
call fcn.00615734
add esp, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
fild dword [ebp - 0x84]
test eax, eax
jle 0x59ea61
mov eax, dword [ebp - 0x84]
test eax, eax
jns 0x59ea37
fadd dword [0x66f22c]
fmul qword [0x67c450]
fstp dword [ebp - 0x38]
push 0x67c448
fld dword [ebp - 0x38]
sub esp, 8
fstp qword [esp]
push str._.2f__s
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00405ab0
add esp, 0x14
jmp 0x59eab8
mov edx, dword [ebp - 0x84]
test edx, edx
jns 0x59ea71
fadd dword [0x66f22c]
fmul qword [0x67c430]
fstp dword [ebp - 0x38]
push 0x67c424
fld dword [ebp - 0x38]
sub esp, 8
fstp qword [esp]
push str._.2f__s
lea eax, [ebp - 0x2c]
push eax
call fcn.00405ab0
add esp, 0x14
jmp 0x59eab8
push str.bytes
mov ecx, dword [ebp - 0x84]
push ecx
push str._u__s
lea edx, [ebp - 0x2c]
push edx
call fcn.00405ab0
add esp, 0x10
mov eax, dword [ebp - 0x2c]
push eax
push 4
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [edi + 4]
call fcn.00417050
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x64]
call fcn.004014a0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2c]
call fcn.004014a0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x98]
call fcn.004270e0
inc ebx
jmp 0x59e7da
mov eax, dword [edi + 0x28]
lea ecx, [edi + 0x24]
mov dl, byte [ecx]
mov byte [ebp - 0x38], dl
mov dword [0x6f79d8], 1
mov edx, dword [ebp - 0x38]
push edx
push eax
call fcn.004f8850
lea ecx, [edi + 0x2fc]
call fcn.00526890
lea ecx, [edi + 0x2fc]
call fcn.00526920
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x158]
call fcn.004f0ba0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
call fcn.004014a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
call fcn.004014a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004014a0
wait
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret