Function at 0x40d790
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Create process on windows
Enumerate gui resources
Hide graphical window
Read .ini file
Read file on windows
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b890
mov eax, dword fs:[0]
push eax
mov eax, 0x1a28
call fcn.00416020
mov eax, dword [0x438b10]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1560], 0
push 0x42c28c
lea ecx, [ebp - 0x28]
call fcn.00401e40
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 1
jle 0x40d8a4
cmp dword [ebp + 8], 2
jle 0x40d808
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x28]
call fcn.00408460
jmp 0x40d81f
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x28]
call fcn.00408460
push str.XN100
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40d880
push 0x42c28c
lea ecx, [ebp - 0x28]
call fcn.00408460
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x28]
call fcn.00408460
push 0x42c5b0
lea ecx, [ebp - 0x28]
call fcn.004085d0
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x28]
call fcn.004085d0
jmp 0x40d8a4
push 0x42c28c
lea ecx, [ebp - 0x28]
call fcn.00408460
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x28]
call fcn.00408460
lea ecx, [ebp - 0x40]
call fcn.00401ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00401ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00401ee0
mov byte [ebp - 4], 3
push 0x42c28c
lea ecx, [ebp - 0x88]
call fcn.00401e40
mov byte [ebp - 4], 4
push 0x42c28c
lea ecx, [ebp - 0xa0]
call fcn.00401e40
mov byte [ebp - 4], 5
push 0x42c28c
lea ecx, [ebp - 0xb8]
call fcn.00401e40
mov byte [ebp - 4], 6
push 0x42c28c
lea ecx, [ebp - 0xd0]
call fcn.00401e40
mov byte [ebp - 4], 7
push 0x42c28c
lea ecx, [ebp - 0xe8]
call fcn.00401e40
mov byte [ebp - 4], 8
push 0x42c28c
lea ecx, [ebp - 0x100]
call fcn.00401e40
mov byte [ebp - 4], 9
push 0x42c28c
lea ecx, [ebp - 0x118]
call fcn.00401e40
mov byte [ebp - 4], 0xa
push 0x42c28c
lea ecx, [ebp - 0x130]
call fcn.00401e40
mov byte [ebp - 4], 0xb
push 0x42c28c
lea ecx, [ebp - 0x148]
call fcn.00401e40
mov byte [ebp - 4], 0xc
push 0x42c28c
lea ecx, [ebp - 0x160]
call fcn.00401e40
mov byte [ebp - 4], 0xd
push 0x42c28c
lea ecx, [ebp - 0x178]
call fcn.00401e40
mov byte [ebp - 4], 0xe
push 0x42c28c
lea ecx, [ebp - 0x190]
call fcn.00401e40
mov byte [ebp - 4], 0xf
push 0x42c28c
lea ecx, [ebp - 0x1a8]
call fcn.00401e40
mov byte [ebp - 4], 0x10
push 0x42c28c
lea ecx, [ebp - 0x1c0]
call fcn.00401e40
mov byte [ebp - 4], 0x11
push str.START_QFPT
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40df33
cmp dword [ebp + 8], 6
jne 0x40dd1e
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x88]
call fcn.00408460
mov eax, 4
imul ecx, eax, 3
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00408460
mov eax, 4
shl eax, 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0xb8]
call fcn.00408460
mov eax, 4
imul ecx, eax, 5
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00408460
push str.000000
lea eax, [ebp - 0x88]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40da98
push 0x42c28c
lea ecx, [ebp - 0x88]
call fcn.00408460
push str.000000
lea eax, [ebp - 0xa0]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40dac3
push 0x42c28c
lea ecx, [ebp - 0xa0]
call fcn.00408460
push str.000000
lea eax, [ebp - 0xb8]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40daee
push 0x42c28c
lea ecx, [ebp - 0xb8]
call fcn.00408460
push str.000000
lea eax, [ebp - 0xd0]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40db19
push 0x42c28c
lea ecx, [ebp - 0xd0]
call fcn.00408460
lea eax, [ebp - 0xd0]
push eax
push 0x42c5c8
lea ecx, [ebp - 0xb8]
push ecx
push 0x42c5c8
lea edx, [ebp - 0xa0]
push edx
push 0x42c5c8
lea eax, [ebp - 0x88]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x1990]
push edx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x19e0]
push ecx
lea edx, [ebp - 0x1978]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x19e8]
push ecx
lea edx, [ebp - 0x1960]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x19f0]
push ecx
lea edx, [ebp - 0x1948]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x19f8]
push ecx
lea edx, [ebp - 0x192c]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1a00]
push ecx
lea edx, [ebp - 0x1914]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1a08]
push ecx
lea edx, [ebp - 0x18fc]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov eax, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x1a10]
push ecx
lea edx, [ebp - 0x18e0]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov eax, dword [ebp - 0x1a14]
push eax
lea ecx, [ebp - 0x40]
call fcn.00402140
lea ecx, [ebp - 0x18e0]
call fcn.00402070
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x18fc]
call fcn.00402070
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1914]
call fcn.00402070
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x192c]
call fcn.00402070
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1948]
call fcn.00402070
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1960]
call fcn.00402070
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1978]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1990]
call fcn.00402070
jmp 0x40df2e
push 0x42c28c
lea ecx, [ebp - 0xd0]
call fcn.00408460
lea eax, [ebp - 0xd0]
push eax
push 0x42c5c8
lea ecx, [ebp - 0xb8]
push ecx
push 0x42c5c8
lea edx, [ebp - 0xa0]
push edx
push 0x42c5c8
lea eax, [ebp - 0x88]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x18c8]
push edx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x19e0]
push ecx
lea edx, [ebp - 0x18b0]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x19e8]
push ecx
lea edx, [ebp - 0x1898]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x19f0]
push ecx
lea edx, [ebp - 0x187c]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x19f8]
push ecx
lea edx, [ebp - 0x1860]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1a00]
push ecx
lea edx, [ebp - 0x1848]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1a08]
push ecx
lea edx, [ebp - 0x1830]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov eax, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x1a10]
push ecx
lea edx, [ebp - 0x1818]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov eax, dword [ebp - 0x1a14]
push eax
lea ecx, [ebp - 0x40]
call fcn.00402140
lea ecx, [ebp - 0x1818]
call fcn.00402070
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1830]
call fcn.00402070
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1848]
call fcn.00402070
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1860]
call fcn.00402070
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x187c]
call fcn.00402070
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1898]
call fcn.00402070
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18b0]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18c8]
call fcn.00402070
jmp 0x40eda3
push str.START_XN100
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40e487
cmp dword [ebp + 8], 7
jne 0x40e272
mov eax, 4
imul ecx, eax, 3
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00408460
mov eax, 4
shl eax, 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x100]
call fcn.00408460
mov eax, 4
imul ecx, eax, 5
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x118]
call fcn.00408460
mov eax, 4
imul ecx, eax, 6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x130]
call fcn.00408460
push str.000000
lea eax, [ebp - 0xe8]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40dfec
push 0x42c28c
lea ecx, [ebp - 0xe8]
call fcn.00408460
push str.000000
lea eax, [ebp - 0x100]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40e017
push 0x42c28c
lea ecx, [ebp - 0x100]
call fcn.00408460
push str.000000
lea eax, [ebp - 0x118]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40e042
push 0x42c28c
lea ecx, [ebp - 0x118]
call fcn.00408460
push str.000000
lea eax, [ebp - 0x130]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40e06d
push 0x42c28c
lea ecx, [ebp - 0x130]
call fcn.00408460
lea eax, [ebp - 0x130]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x118]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x100]
push edx
push 0x42c5c8
lea eax, [ebp - 0xe8]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x1800]
push edx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x19e0]
push ecx
lea edx, [ebp - 0x17e8]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x19e8]
push ecx
lea edx, [ebp - 0x17d0]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x19f0]
push ecx
lea edx, [ebp - 0x17b8]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x19f8]
push ecx
lea edx, [ebp - 0x17a0]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x1a00]
push ecx
lea edx, [ebp - 0x1788]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1a08]
push ecx
lea edx, [ebp - 0x1770]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov eax, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x1a10]
push ecx
lea edx, [ebp - 0x1758]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov eax, dword [ebp - 0x1a14]
push eax
lea ecx, [ebp - 0x58]
call fcn.00402140
lea ecx, [ebp - 0x1758]
call fcn.00402070
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1770]
call fcn.00402070
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1788]
call fcn.00402070
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x17a0]
call fcn.00402070
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x17b8]
call fcn.00402070
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x17d0]
call fcn.00402070
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x17e8]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1800]
call fcn.00402070
jmp 0x40e482
push str.340000
lea ecx, [ebp - 0x130]
call fcn.00408460
lea eax, [ebp - 0x130]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x118]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x100]
push edx
push 0x42c5c8
lea eax, [ebp - 0xe8]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x1740]
push edx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x19e0]
push ecx
lea edx, [ebp - 0x1728]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x19e8]
push ecx
lea edx, [ebp - 0x1710]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x19f0]
push ecx
lea edx, [ebp - 0x16f8]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x19f8]
push ecx
lea edx, [ebp - 0x16e0]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x1a00]
push ecx
lea edx, [ebp - 0x16c8]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x1a08]
push ecx
lea edx, [ebp - 0x16b0]
push edx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov eax, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x1a10]
push ecx
lea edx, [ebp - 0x1698]
push edx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov eax, dword [ebp - 0x1a14]
push eax
lea ecx, [ebp - 0x58]
call fcn.00402140
lea ecx, [ebp - 0x1698]
call fcn.00402070
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x16b0]
call fcn.00402070
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x16c8]
call fcn.00402070
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x16e0]
call fcn.00402070
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x16f8]
call fcn.00402070
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1710]
call fcn.00402070
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1728]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1740]
call fcn.00402070
jmp 0x40eda3
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40eda3
cmp dword [ebp + 8], 8
jl 0x40e851
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x148]
call fcn.00408460
mov eax, 4
imul ecx, eax, 3
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x160]
call fcn.00408460
mov eax, 4
shl eax, 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
push edx
lea ecx, [ebp - 0x178]
call fcn.00408460
mov eax, 4
imul ecx, eax, 5
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x190]
call fcn.00408460
mov eax, 4
imul ecx, eax, 6
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00408460
mov eax, 4
imul ecx, eax, 7
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00408460
lea eax, [ebp - 0x1c0]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x1a8]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x190]
push edx
push 0x42c5c8
lea eax, [ebp - 0x178]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x160]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x148]
push edx
push 0x42c5c8
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1680]
push ecx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x19e0]
push eax
lea ecx, [ebp - 0x1668]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x19e8]
push eax
lea ecx, [ebp - 0x1650]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov edx, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x19f0]
push eax
lea ecx, [ebp - 0x1638]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov edx, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x19f8]
push eax
lea ecx, [ebp - 0x1620]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov edx, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x1a00]
push eax
lea ecx, [ebp - 0x1608]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov edx, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x1a08]
push eax
lea ecx, [ebp - 0x15f0]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov edx, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], edx
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x1a10]
push eax
lea ecx, [ebp - 0x15d8]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov edx, dword [ebp - 0x1a14]
mov dword [ebp - 0x1a18], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x1a18]
push eax
lea ecx, [ebp - 0x15c0]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a1c], eax
mov edx, dword [ebp - 0x1a1c]
mov dword [ebp - 0x1a20], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x1a20]
push eax
lea ecx, [ebp - 0x15a8]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a24], eax
mov edx, dword [ebp - 0x1a24]
mov dword [ebp - 0x1a28], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x1a28]
push eax
lea ecx, [ebp - 0x1590]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a2c], eax
mov edx, dword [ebp - 0x1a2c]
mov dword [ebp - 0x1a30], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x1a30]
push eax
lea ecx, [ebp - 0x1578]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a34], eax
mov edx, dword [ebp - 0x1a34]
push edx
lea ecx, [ebp - 0x70]
call fcn.00402140
lea ecx, [ebp - 0x1578]
call fcn.00402070
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1590]
call fcn.00402070
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x15a8]
call fcn.00402070
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x15c0]
call fcn.00402070
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x15d8]
call fcn.00402070
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x15f0]
call fcn.00402070
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1608]
call fcn.00402070
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1620]
call fcn.00402070
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1638]
call fcn.00402070
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1650]
call fcn.00402070
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1668]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1680]
call fcn.00402070
jmp 0x40ec56
mov dword [ebp - 0x1c4], 2
jmp 0x40e86c
mov eax, dword [ebp - 0x1c4]
add eax, 1
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp + 8]
jge 0x40e952
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x19dc]
sub ecx, 2
mov dword [ebp - 0x19dc], ecx
cmp dword [ebp - 0x19dc], 5
ja case.default.0x40e8a9
mov edx, dword [ebp - 0x19dc]
jmp dword [edx*4 + 0x41097c]
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x148]
call fcn.00408460
jmp case.default.0x40e8a9
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x160]
call fcn.00408460
jmp case.default.0x40e8a9
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x178]
call fcn.00408460
jmp case.default.0x40e8a9
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x190]
call fcn.00408460
jmp case.default.0x40e8a9
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x1a8]
call fcn.00408460
jmp case.default.0x40e8a9
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea ecx, [ebp - 0x1c0]
call fcn.00408460
jmp 0x40e85d
lea eax, [ebp - 0x1c0]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x1a8]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x190]
push edx
push 0x42c5c8
lea eax, [ebp - 0x178]
push eax
push 0x42c5c8
lea ecx, [ebp - 0x160]
push ecx
push 0x42c5c8
lea edx, [ebp - 0x148]
push edx
push 0x42c5c8
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x155c]
push ecx
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x19e0]
push eax
lea ecx, [ebp - 0x1544]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], edx
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x19e8]
push eax
lea ecx, [ebp - 0x152c]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19ec], eax
mov edx, dword [ebp - 0x19ec]
mov dword [ebp - 0x19f0], edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x19f0]
push eax
lea ecx, [ebp - 0x1514]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x19f4], eax
mov edx, dword [ebp - 0x19f4]
mov dword [ebp - 0x19f8], edx
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x19f8]
push eax
lea ecx, [ebp - 0x14fc]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x19fc], eax
mov edx, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a00], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x1a00]
push eax
lea ecx, [ebp - 0x14e4]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a04], eax
mov edx, dword [ebp - 0x1a04]
mov dword [ebp - 0x1a08], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x1a08]
push eax
lea ecx, [ebp - 0x14cc]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a0c], eax
mov edx, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1a10], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x1a10]
push eax
lea ecx, [ebp - 0x14b4]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a14], eax
mov edx, dword [ebp - 0x1a14]
mov dword [ebp - 0x1a18], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x1a18]
push eax
lea ecx, [ebp - 0x149c]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a1c], eax
mov edx, dword [ebp - 0x1a1c]
mov dword [ebp - 0x1a20], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x1a20]
push eax
lea ecx, [ebp - 0x1484]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a24], eax
mov edx, dword [ebp - 0x1a24]
mov dword [ebp - 0x1a28], edx
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x1a28]
push eax
lea ecx, [ebp - 0x146c]
push ecx
call fcn.00406a20
add esp, 0xc
mov dword [ebp - 0x1a2c], eax
mov edx, dword [ebp - 0x1a2c]
mov dword [ebp - 0x1a30], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x1a30]
push eax
lea ecx, [ebp - 0x1454]
push ecx
call fcn.00401400
add esp, 0xc
mov dword [ebp - 0x1a34], eax
mov edx, dword [ebp - 0x1a34]
push edx
lea ecx, [ebp - 0x70]
call fcn.00402140
lea ecx, [ebp - 0x1454]
call fcn.00402070
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x146c]
call fcn.00402070
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1484]
call fcn.00402070
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x149c]
call fcn.00402070
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x14b4]
call fcn.00402070
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x14cc]
call fcn.00402070
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x14e4]
call fcn.00402070
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x14fc]
call fcn.00402070
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1514]
call fcn.00402070
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x152c]
call fcn.00402070
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1544]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x155c]
call fcn.00402070
push 0x42c28c
lea eax, [ebp - 0x1c0]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40eda3
push 0x40
push 0x42c5f0
push 0x42c5f8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x137c], 0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x137c]
jmp 0x410960
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x40edeb
push str.START_QFPT
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x40edeb
push str.START_XN100
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40ee4a
push 0
push 0x408c50
call dword [sym.imp.USER32.dll_EnumWindows]
movzx eax, byte [0x43b3e4]
test eax, eax
je 0x40ee4a
push str.aisvr.exe
call fcn.00408f80
add esp, 4
movzx eax, al
cmp eax, 1
jne 0x40ee25
push 0
push str.taskkill__f__im_aisvr.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.taskkill__f__im_qdfpzs.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.taskkill__f__im_skfpd.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.aisvr.exe
call fcn.00408f80
add esp, 4
movzx eax, al
test eax, eax
jne 0x40eed1
mov byte [ebp - 0x3b8], 0
push 0x1f3
push 0
lea eax, [ebp - 0x3b7]
push eax
call fcn.00414450
add esp, 0xc
push 0x104
lea eax, [ebp - 0x3b8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea eax, [ebp - 0x3b8]
push eax
call fcn.0040ccc0
add esp, 8
mov ecx, 1
imul edx, ecx, 0
mov byte [eax + edx], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1378], esp
lea eax, [ebp - 0x3b8]
push eax
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
lea eax, [ebp - 0x143c]
push eax
call fcn.00408d80
add esp, 4
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x19dc]
push ecx
mov ecx, 0x43b3e8
call fcn.00402140
lea ecx, [ebp - 0x143c]
call fcn.00402070
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
mov dword [ebp - 0x3bc], eax
push 0x42c680
push 0x1003
mov eax, dword [ebp - 0x3bc]
push eax
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
push str.yyyy_MM_dd
push 0x1f
mov eax, dword [ebp - 0x3bc]
push eax
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
push str.yyyy_MM_dd
push 0x20
mov eax, dword [ebp - 0x3bc]
push eax
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
xor eax, eax
mov word [ebp - 0x7a4], ax
push 0x3e6
push 0
lea eax, [ebp - 0x7a2]
push eax
call fcn.00414450
add esp, 0xc
push 0x104
lea eax, [ebp - 0x7a4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea eax, [ebp - 0x7a4]
push eax
call fcn.0040d3a0
add esp, 8
mov ecx, 2
imul edx, ecx, 0
xor ecx, ecx
mov word [eax + edx], cx
push 0xb8
lea ecx, [ebp - 0x85c]
call fcn.0040a950
push 1
push 0x40
push 0x61
push 0x42c6e8
lea eax, [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x1424]
call fcn.004074e0
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], ecx
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x19e0]
push edx
lea eax, [ebp - 0x140c]
push eax
call fcn.00406bf0
add esp, 0xc
mov dword [ebp - 0x19e4], eax
mov ecx, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], ecx
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x19e8]
push edx
lea ecx, [ebp - 0x85c]
call fcn.004071c0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x140c]
call fcn.00408090
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x1424]
call fcn.00408090
mov eax, dword [ebp - 0x85c]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x85c]
call fcn.00408490
movzx edx, al
test edx, edx
je 0x40f065
lea ecx, [ebp - 0x85c]
call fcn.0040b1d0
push 2
push 0
push 0
lea ecx, [ebp - 0x85c]
call fcn.0040c590
lea eax, [ebp - 0x1374]
push eax
lea ecx, [ebp - 0x85c]
call fcn.0040cda0
mov ecx, eax
call fcn.004084d0
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0
jle 0x40f453
push 0
push 0
push 0
lea ecx, [ebp - 0x85c]
call fcn.0040c590
mov eax, dword [ebp - 0x860]
push eax
call fcn.00410ef4
add esp, 4
mov dword [ebp - 0x135c], eax
mov ecx, dword [ebp - 0x135c]
mov dword [ebp - 0x864], ecx
mov eax, dword [ebp - 0x860]
cdq
push edx
push eax
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x85c]
call fcn.0040c3d0
mov eax, dword [ebp - 0x860]
push eax
mov ecx, dword [ebp - 0x864]
push ecx
lea ecx, [ebp - 0x87c]
call fcn.00401e90
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x1358], eax
mov ecx, dword [ebp - 0x1358]
push ecx
call fcn.00412224
add esp, 4
cmp dword [ebp - 0x1358], 0
jne 0x40f13c
mov dword [ebp - 0x19dc], 0
jmp 0x40f152
mov dword [ebp - 0x864], 0x8123
mov edx, dword [ebp - 0x864]
mov dword [ebp - 0x19dc], edx
lea ecx, [ebp - 0x85c]
call fcn.0040b1d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1354], esp
lea eax, [ebp - 0x87c]
push eax
call fcn.00401d90
mov dword [ebp - 0x19dc], eax
lea ecx, [ebp - 0x894]
push ecx
call fcn.00410a20
add esp, 0x1c
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x4a
mov byte [ebp - 0x8a4], 0x24
mov byte [ebp - 0x8a3], 0x97
mov byte [ebp - 0x8a2], 0x82
mov byte [ebp - 0x8a1], 0x10
mov byte [ebp - 0x8a0], 5
mov byte [ebp - 0x89f], 0x49
mov byte [ebp - 0x89e], 0x33
mov byte [ebp - 0x89d], 0x47
mov byte [ebp - 0x89c], 0x86
mov byte [ebp - 0x89b], 0x26
mov byte [ebp - 0x89a], 0x51
mov byte [ebp - 0x899], 3
mov byte [ebp - 0x898], 0x93
mov byte [ebp - 0x897], 0x16
mov byte [ebp - 0x896], 0x45
mov byte [ebp - 0x895], 0x71
mov byte [ebp - 0x8b4], 0x32
mov byte [ebp - 0x8b3], 0x70
mov byte [ebp - 0x8b2], 0x72
mov byte [ebp - 0x8b1], 0x35
mov byte [ebp - 0x8b0], 0x44
mov byte [ebp - 0x8af], 0x46
mov byte [ebp - 0x8ae], 9
mov byte [ebp - 0x8ad], 6
mov byte [ebp - 0x8ac], 0x86
mov byte [ebp - 0x8ab], 0x37
mov byte [ebp - 0x8aa], 0x41
mov byte [ebp - 0x8a9], 0x84
mov byte [ebp - 0x8a8], 0x22
mov byte [ebp - 0x8a7], 0x28
mov byte [ebp - 0x8a6], 4
mov byte [ebp - 0x8a5], 0x55
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1350], esp
push 0x42c28c
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x4b
push 0x10
lea ecx, [ebp - 0x8b4]
push ecx
push 0x10
lea edx, [ebp - 0x8a4]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x134c], esp
lea eax, [ebp - 0x894]
push eax
call fcn.00401d90
mov dword [ebp - 0x19e4], eax
lea ecx, [ebp - 0x8cc]
push ecx
mov byte [ebp - 4], 0x4a
call fcn.00402490
add esp, 0x44
mov dword [ebp - 0x19e8], eax
mov byte [ebp - 4], 0x4c
push 0x42c28c
lea eax, [ebp - 0x8cc]
push eax
call fcn.004069e0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40f424
push 0xc
lea ecx, [ebp - 0x8d8]
call fcn.0040a950
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1348], esp
push 0x42c3c4
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x8d8]
push ecx
call fcn.00410cf0
add esp, 0x20
mov dword [ebp - 0x19e0], eax
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x8dc], 0
jmp 0x40f36c
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
lea ecx, [ebp - 0x8d8]
call fcn.00406630
cmp dword [ebp - 0x8dc], eax
jae 0x40f415
mov eax, dword [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.004084b0
mov ecx, eax
call fcn.00405710
movzx ecx, al
test ecx, ecx
jne 0x40f410
push 0x42c28c
mov eax, dword [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.004084b0
push eax
call fcn.004069e0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40f410
mov eax, dword [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.004084b0
push eax
push str.taskkill__f__im
lea ecx, [ebp - 0x8f4]
push ecx
call fcn.00406b30
add esp, 0xc
push 0
lea ecx, [ebp - 0x8f4]
call fcn.00405400
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x8f4]
call fcn.00402070
jmp 0x40f35d
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x8d8]
call fcn.00402090
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x8cc]
call fcn.00402070
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x894]
call fcn.00402070
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x87c]
call fcn.00402070
jmp 0x40f45e
lea ecx, [ebp - 0x85c]
call fcn.0040b1d0
mov byte [ebp - 0x8f5], 0
push str.qdfpzsShell
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 0
je 0x40f490
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40f4ba
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1344], esp
push str.Mutex
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
mov byte [ebp - 0x8f5], 1
mov byte [ebp - 0x8fd], 0
mov eax, dword [str.skfpd.exe]
mov dword [ebp - 0x980], eax
mov ecx, dword [0x42c728]
mov dword [ebp - 0x97c], ecx
mov dx, word [0x42c72c]
mov word [ebp - 0x978], dx
push 0x76
push 0
lea eax, [ebp - 0x976]
push eax
call fcn.00414450
add esp, 0xc
mov eax, dword [str.qdfpzs.exe]
mov dword [ebp - 0xa00], eax
mov ecx, dword [0x42c734]
mov dword [ebp - 0x9fc], ecx
mov dx, word [0x42c738]
mov word [ebp - 0x9f8], dx
mov al, byte [0x42c73a]
mov byte [ebp - 0x9f6], al
push 0x75
push 0
lea eax, [ebp - 0x9f5]
push eax
call fcn.00414450
add esp, 0xc
mov eax, dword [str.dppt_amixd.exe]
mov dword [ebp - 0xa80], eax
mov ecx, dword [0x42c740]
mov dword [ebp - 0xa7c], ecx
mov edx, dword [0x42c744]
mov dword [ebp - 0xa78], edx
mov ax, word [0x42c748]
mov word [ebp - 0xa74], ax
mov cl, byte [0x42c74a]
mov byte [ebp - 0xa72], cl
push 0x71
push 0
lea eax, [ebp - 0xa71]
push eax
call fcn.00414450
add esp, 0xc
mov eax, 1
test eax, eax
je 0x41084c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1340], esp
push 0x42c74c
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
mov byte [ebp - 0x8fd], 0
lea eax, [ebp - 0x980]
push eax
call fcn.00408f80
add esp, 4
movzx ecx, al
cmp ecx, 1
je 0x40f5f4
lea eax, [ebp - 0xa80]
push eax
call fcn.00408f80
add esp, 4
movzx ecx, al
cmp ecx, 1
jne 0x40f858
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x133c], esp
push str.cnewskfpd_debug_or_cnewskfp2022_debug
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0
push 0x408af0
call dword [sym.imp.USER32.dll_EnumWindows]
movzx eax, byte [0x43b3e4]
test eax, eax
je 0x40f84c
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40f723
mov byte [ebp - 0xc78], 0
push 0x1f3
push 0
lea eax, [ebp - 0xc77]
push eax
call fcn.00414450
add esp, 0xc
mov byte [ebp - 0xc8c], 0
xor eax, eax
mov dword [ebp - 0xc8b], eax
mov dword [ebp - 0xc87], eax
mov dword [ebp - 0xc83], eax
mov dword [ebp - 0xc7f], eax
mov word [ebp - 0xc7b], ax
mov byte [ebp - 0xc79], al
push 0x104
lea eax, [ebp - 0xc78]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.guide.ini
lea eax, [ebp - 0xc78]
push eax
call fcn.00406e50
add esp, 8
lea eax, [ebp - 0xc78]
push eax
push 0x400
lea ecx, [ebp - 0xc8c]
push ecx
push 0
push 0x42c798
push str.KPRJV3
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xc8c]
test edx, edx
je 0x40f723
push 0xa
push 0
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040cbf0
add esp, 0xc
mov dword [ebp - 0xc90], eax
push 0
mov eax, dword [ebp - 0xc90]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x19d8], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x19d8]
jmp 0x410960
mov byte [ebp - 0x8fd], 1
jmp 0x40fad2
lea eax, [ebp - 0xa00]
push eax
call fcn.00408f80
add esp, 4
movzx ecx, al
cmp ecx, 1
jne 0x40fad2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19d4], esp
push str.cnewskfp
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0
push 0x408af0
call dword [sym.imp.USER32.dll_EnumWindows]
movzx eax, byte [0x43b3e4]
test eax, eax
je 0x40facb
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40f9a2
mov byte [ebp - 0xe88], 0
push 0x1f3
push 0
lea eax, [ebp - 0xe87]
push eax
call fcn.00414450
add esp, 0xc
mov byte [ebp - 0xe9c], 0
xor eax, eax
mov dword [ebp - 0xe9b], eax
mov dword [ebp - 0xe97], eax
mov dword [ebp - 0xe93], eax
mov dword [ebp - 0xe8f], eax
mov word [ebp - 0xe8b], ax
mov byte [ebp - 0xe89], al
push 0x104
lea eax, [ebp - 0xe88]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.guide.ini
lea eax, [ebp - 0xe88]
push eax
call fcn.00406e50
add esp, 8
lea eax, [ebp - 0xe88]
push eax
push 0x400
lea ecx, [ebp - 0xe9c]
push ecx
push 0
push 0x42c798
push str.KPRJV3
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xe9c]
test edx, edx
je 0x40f9a2
push 0xa
push 0
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040cbf0
add esp, 0xc
mov dword [ebp - 0xea0], eax
push 0
mov eax, dword [ebp - 0xea0]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x19d0], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x19d0]
jmp 0x410960
mov byte [ebp - 0x8fd], 1
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40fb12
push 0xa
push 0
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040cbf0
add esp, 0xc
mov dword [ebp - 0xea4], eax
push 0
mov eax, dword [ebp - 0xea4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0xea8], 1
movzx eax, byte [ebp - 0x8fd]
test eax, eax
jne 0x40fc22
cmp dword [ebp - 0xea8], 3
jg 0x40fc22
mov byte [ebp - 0x109c], 0
push 0x1f3
push 0
lea eax, [ebp - 0x109b]
push eax
call fcn.00414450
add esp, 0xc
push 0x104
lea eax, [ebp - 0x109c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea eax, [ebp - 0x109c]
push eax
call fcn.0040ccc0
add esp, 8
mov ecx, 1
imul edx, ecx, 0
mov byte [eax + edx], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19cc], esp
lea eax, [ebp - 0x109c]
push eax
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 1
lea eax, [ebp - 0x109c]
push eax
push 0
push str.qdfpzs.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xa00]
push eax
call fcn.00408f80
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x40fc0e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19c8], esp
push 0x42c7b4
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
jmp 0x40fc22
mov eax, dword [ebp - 0xea8]
add eax, 1
mov dword [ebp - 0xea8], eax
jmp 0x40fb1c
push 0
call fcn.004109a0
add esp, 4
push eax
call fcn.004158d1
add esp, 4
mov dword [ebp - 0x10a0], 0
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x10a4], 0x64
mov byte [ebp - 0x10a5], 1
mov eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x10a4]
sub ecx, 1
mov dword [ebp - 0x10a4], ecx
cmp dword [ebp - 0x19dc], 0
jle 0x40fcba
push 0xffffffffffffffff
push str..Pipeqdfpzsmainpipe
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 0
jne 0x40fcaf
mov byte [ebp - 0x10a5], 0
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40fcb8
mov byte [ebp - 0x10a5], 1
jmp 0x40fcba
jmp 0x40fc5b
movzx eax, byte [ebp - 0x10a5]
test eax, eax
jne 0x40fdf2
mov dword [ebp - 0x19c4], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x19c4]
jmp 0x410960
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
push str..Pipeqdfpzsmainpipe
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x10b0], eax
cmp dword [ebp - 0x10b0], 0xffffffff
jne 0x40fe57
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10b4], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19c0], esp
push 0x42c7dc
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
jmp 0x40f58b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19bc], esp
push 0x42c7f0
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0x42c28c
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40fed5
push str.mainkp
lea ecx, [ebp - 0x13f4]
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], edx
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0x1560]
or eax, 1
mov dword [ebp - 0x1560], eax
mov ecx, dword [ebp - 0x19e0]
mov dword [ebp - 0x19e4], ecx
jmp 0x40ff0e
lea edx, [ebp - 0x28]
push edx
push str.mainkp_
lea eax, [ebp - 0x13dc]
push eax
call fcn.00406b30
add esp, 0xc
mov dword [ebp - 0x19e8], eax
mov ecx, dword [ebp - 0x1560]
or ecx, 2
mov dword [ebp - 0x1560], ecx
mov edx, dword [ebp - 0x19e8]
mov dword [ebp - 0x19e4], edx
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x19b8]
push ecx
lea ecx, [ebp - 0x10cc]
call fcn.00401d40
mov dword [ebp - 4], 0x4f
mov edx, dword [ebp - 0x1560]
and edx, 2
je 0x40ff50
and dword [ebp - 0x1560], 0xfffffffd
lea ecx, [ebp - 0x13dc]
call fcn.00402070
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0x1560]
and eax, 1
je 0x40ff71
and dword [ebp - 0x1560], 0xfffffffe
lea ecx, [ebp - 0x13f4]
call fcn.00402070
push str.START_QFPT
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40fff7
lea eax, [ebp - 0x40]
push eax
push str.mainkp_
lea ecx, [ebp - 0x13c4]
push ecx
call fcn.00406b30
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
push edx
lea ecx, [ebp - 0x10cc]
call fcn.00402140
lea ecx, [ebp - 0x13c4]
call fcn.00402070
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x19b4], esp
push 0x42c814
lea ecx, [ebp - 0x10cc]
push ecx
push eax
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
jmp 0x4100fe
push str.START_XN100
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41007d
lea eax, [ebp - 0x58]
push eax
push str.mainkp_
lea ecx, [ebp - 0x13ac]
push ecx
call fcn.00406b30
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
push edx
lea ecx, [ebp - 0x10cc]
call fcn.00402140
lea ecx, [ebp - 0x13ac]
call fcn.00402070
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x19b0], esp
push 0x42c814
lea ecx, [ebp - 0x10cc]
push ecx
push eax
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
jmp 0x4100fe
push str.START_QD_ASSIST
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4100fe
lea eax, [ebp - 0x70]
push eax
push str.mainkp_
lea ecx, [ebp - 0x1394]
push ecx
call fcn.00406b30
add esp, 0xc
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19dc]
push edx
lea ecx, [ebp - 0x10cc]
call fcn.00402140
lea ecx, [ebp - 0x1394]
call fcn.00402070
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x19ac], esp
push 0x42c814
lea ecx, [ebp - 0x10cc]
push ecx
push eax
call fcn.00406a70
add esp, 0xc
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0
lea eax, [ebp - 0x10a0]
push eax
lea ecx, [ebp - 0x10cc]
call fcn.00406610
push eax
lea ecx, [ebp - 0x10cc]
call fcn.00405400
push eax
mov ecx, dword [ebp - 0x10b0]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x410190
mov eax, dword [ebp - 0x10b0]
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [ebp - 0x10b0]
push eax
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [ebp - 0x10b0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19a8], esp
push 0x42c81c
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x10cc]
call fcn.00402070
jmp 0x40f58b
mov al, byte [0x42c28c]
mov byte [ebp - 0x11cc], al
push 0xff
push 0
lea eax, [ebp - 0x11cb]
push eax
call fcn.00414450
add esp, 0xc
mov dword [ebp - 0x11d0], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19a4], esp
push 0x42c28c
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xa00]
push eax
call fcn.00408f80
add esp, 4
movzx ecx, al
cmp ecx, 1
jne 0x4104ed
push 0x42c584
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x11d4], eax
cmp dword [ebp - 0x11d4], 0
je 0x410383
push str.ASDK
lea eax, [ebp - 0x28]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41024b
push 0
mov eax, dword [ebp - 0x11d4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x19a0], 0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x10cc]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x19a0]
jmp 0x410960
push 0x42c56c
push str.SOUIHOST
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x11d4], eax
cmp dword [ebp - 0x11d4], 0
je 0x4104ed
push 0
mov eax, dword [ebp - 0x11d4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x199c], 0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x10cc]
call fcn.00402070
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x199c]
jmp 0x410960
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x10cc]
call fcn.00402070
mov eax, 1
test eax, eax
je 0x410847
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1998], esp
push 0x42c844
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
movzx eax, byte [ebp - 0x8f5]
test eax, eax
je 0x410664
mov dword [ebp - 0x1994], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov eax, dword [ebp - 0x1994]
jmp 0x410960
mov al, byte [0x42c28c]
mov byte [ebp - 0x12d4], al
push 0xff
push 0
lea eax, [ebp - 0x12d3]
push eax
call fcn.00414450
add esp, 0xc
mov dword [ebp - 0x12d8], 0
push 0
lea eax, [ebp - 0x12d8]
push eax
push pe_nt_image_headers32
lea ecx, [ebp - 0x12d4]
push ecx
mov edx, dword [ebp - 0x10b0]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 0x12d4]
push eax
lea ecx, [ebp - 0x12f0]
call fcn.00401e40
mov byte [ebp - 4], 0x51
push str.MainRestart
lea eax, [ebp - 0x12f0]
push eax
call fcn.00401340
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x410828
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1930], esp
push 0x42c860
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0x42c584
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x12f4], eax
cmp dword [ebp - 0x12f4], 0
je 0x41075b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18e4], esp
push 0x42c870
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x12f4]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x42c56c
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x12f8], eax
cmp dword [ebp - 0x12f8], 0
je 0x4107ad
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1880], esp
push 0x42c880
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x12f8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1864], esp
push 0x42c890
call fcn.00401e40
mov dword [ebp - 0x19dc], eax
call fcn.00409130
add esp, 0x18
push str.aisvr.exe
call fcn.00408f80
add esp, 4
movzx eax, al
cmp eax, 1
jne 0x4107f2
push 0
push str.taskkill__f__im_aisvr.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.taskkill__f__im_qdfpzs.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push str.taskkill__f__im_skfpd.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x12f0]
call fcn.00402070
jmp 0x410847
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x12f0]
call fcn.00402070
jmp 0x4104fc
jmp 0x40f58b
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x85c]
call fcn.00408600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c0]
call fcn.00402070
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a8]
call fcn.00402070
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x190]
call fcn.00402070
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.00402070
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x160]
call fcn.00402070
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x148]
call fcn.00402070
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00402070
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call fcn.00402070
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.00402070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.00402070
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd0]
call fcn.00402070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.00402070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00402070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.00402070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00402070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00402070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402070
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00412229
mov esp, ebp
pop ebp
ret