Function at 0x401000
Capabilities:
Allocate thread local storage
Check mutex on windows
Get geographical location
Identify system language via api
Parse pe header

Disassembly:
push 0x15c
push 0
push 0x43b08c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x43b090], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x43b08c], eax
mov eax, 0x438ef8
mov dword [0x43b0d8], eax
call fcn.00430df0
call fcn.0042ff00
call fcn.0042fee3
call fcn.0042f1f9
call fcn.0042f0b7
call fcn.0042f031
call fcn.0042ebf4
call fcn.0042dfb0
call fcn.0042dd99
call fcn.0042c9f0
call fcn.0042bb56
call fcn.0042a3ee
call fcn.0041fe8d
call fcn.0041fc6d
call fcn.0041fb0c
call fcn.0041f90e
call fcn.0041e21f
mov edx, str.1.0.3.8
lea ecx, [0x43b0a4]
call fcn.0041e008
mov edx, 0x434358
lea ecx, [0x43b0e0]
call fcn.0041e008
mov edx, str.2015_9_001
lea ecx, [0x43b0f0]
call fcn.0041e008
mov edx, str.Computer_Bild_Edition
lea ecx, [0x43b0e0]
call fcn.0041e008
mov edx, str.2021_9_107
lea ecx, [0x43b0f0]
call fcn.0041e008
push 0
push 0x43b0dc
lea eax, [0x43b128]
push eax
push str.GdiplusStartup
push dword [0x43b114]
call fcn.0041fcd4
call fcn.00430e40
push eax
push eax
push 0x434770
call fcn.00430e40
push eax
push eax
call fcn.0042bc80
call fcn.00430e92
add dword [esp], edx
call fcn.0041e310
push 0x43b188
call fcn.00430eb0
push 0x43b1b4
push 0x438e9c
push 8
push 0xa1
push 4
call fcn.0042eaf5
call sub.KERNEL32.dll_GetUserDefaultLangID
mov ebx, eax
and ebx, 0x3ff
mov dword [0x43b0ac], ebx
push dword [0x43b0ac]
call fcn.0041a56e
call fcn.00430e40
push eax
push str.SystemStartOptions
push str.SYSTEMCurrentControlSetControl
push str.HKLM
push 0
call fcn.0041cdce
push 0x43b0bc
call fcn.00430eb0
call fcn.00430e40
push eax
push str.minint
call fcn.00430e40
push eax
push eax
push dword [0x43b0bc]
call fcn.0041e3c0
call fcn.00430e92
add dword [esp], edx
call fcn.0041e4a0
call fcn.00430f40
mov ebx, eax
and ebx, ebx
jne 0x401219
call fcn.00430e40
push eax
mov ebp, dword [0x43b1b4]
push dword [ebp + 8]
call fcn.00430e40
push eax
mov edx, 0x435f52
call fcn.00430f90
mov edx, dword [0x43b0a4]
call fcn.00430f90
call fcn.00430e92
add dword [esp], edx
call fcn.0041f974
call fcn.00430f40
jmp 0x4040e1
mov dword [0x43b0cc], 0x5ee1
call fcn.0042e7d8
push eax
call fcn.0042e80d
mov dword [0x43b0d4], eax
call fcn.0042e7d8
push eax
call fcn.0042e835
mov dword [0x43b134], eax
mov ebx, dword [0x43b0d4]
imul ebx, ebx, 0xc
add ebx, dword [0x43b134]
mov dword [0x43b0c4], ebx
mov ebx, dword [0x43b0c4]
cmp ebx, dword [0x43b0cc]
jge 0x40126b
jmp 0x4040e1
mov ebx, dword [0x43b0c4]
mov edi, dword [0x43b0cc]
add edi, 0xf
cmp ebx, edi
jle 0x401283
jmp 0x4040e1
call fcn.00430e40
push eax
push str.PSModule
push str.SYSTEMControlSet001ControlSession_ManagerEnvironment
push str.HKLM
push 0
call fcn.0041cdce
push 0x43b17c
call fcn.00430eb0
push dword [0x43b17c]
call fcn.00405ebe
mov dword [0x43b124], eax
mov dword [0x43b1c0], 0x14
mov dword [0x43b1c4], 1
push 0x43b1bc
push 0x438e9c
push 8
push 4
push 2
call fcn.0042eb86
push 0x43b1c8
push 0x438e9c
push 8
push 7
push 4
call fcn.0042eaf5
push 0x43b1d0
push 0x438e9c
push 8
push 1
push 4
call fcn.0042eaf5
push str.DevManPE
push 0
push 0
call sub.KERNEL32.dll_CreateMutexW
mov dword [0x43b0a8], eax
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x4013a8
push dword [0x43b0a8]
call sub.KERNEL32.dll_ReleaseMutex
push dword [0x43b0a8]
call sub.KERNEL32.dll_CloseHandle
mov ebp, dword [0x43b1b4]
push dword [ebp + 0xc]
push str.DevManPE
call fcn.0041f974
push str._DevManPE
push 0
call sub.USER32.DLL_FindWindowW
mov dword [0x43b130], eax
cmp dword [0x43b130], 0
je 0x4013a3
push dword [0x43b130]
call sub.USER32.DLL_SetForegroundWindow
jmp 0x4040e1
push 0x90000001
push str._DevManPE
push 0xc8
push 0x190
push 0
push 0
push 0
call fcn.0042a6fe
mov dword [0x43b174], eax
push 0xffffff
push 0
call fcn.0042a721
push 0
call fcn.0042a7ba
mov dword [0x43b144], eax
push 0
call fcn.0042a832
mov dword [0x43b140], eax
push 7
push 7
push dword [0x43b140]
push dword [0x43b144]
push 0
push 0
call sub.GDI32.DLL_CreateRoundRectRgn
mov dword [0x43b178], eax
push 1
push dword [0x43b178]
push dword [0x43b174]
call sub.USER32.DLL_SetWindowRgn
push 0x434032
push 0xcd
push 0x18f
push 0xfffffffa
push 0
push 1
call fcn.004200c5
push 0
push 0
push 0x78
push 0x32
push 0x14
push 2
call fcn.0042062e
call fcn.00430e40
push eax
push 0x60
push 0x23
push 0x23
push 1
call fcn.00430e40
push eax
push eax
call fcn.0041fb3b
call fcn.00430ff0
push 2
call fcn.00430e92
add dword [esp + 4], edx
call fcn.0041c9d0
call fcn.00430f40
mov edx, 0x43778c
lea ecx, [0x43b150]
call fcn.0041e008
push dword [0x43b150]
push 0x20
push 0xf0
push 0x28
push 0x9b
push 3
call fcn.004208a7
push 0x100
push 0x10
push str.tahoma
push 1
call fcn.0042bb6a
and eax, eax
je 0x401531
push 1
call fcn.0042bc64
push eax
push 3
call fcn.004208c7
push 0xffffff
push 2
push 3
call fcn.00420936
push str.Reanimate_your_Windows
push 0x18
push 0x96
push 0x56
push 0x9b
push 6
call fcn.004208a7
push 0xa
push str.tahoma
push 2
call fcn.0042bc4e
and eax, eax
je 0x401595
push 2
call fcn.0042bc64
push eax
push 6
call fcn.004208c7
push 0xffffff
push 2
push 6
call fcn.00420936
call fcn.00430e40
push eax
push eax
mov edx, 0x435194
call fcn.00430f90
mov edx, dword [0x43b0a4]
call fcn.00430f90
call fcn.00430ff0
push 0x11
push 0x8c
push 0x78
push 0x9b
push 7
call fcn.00430e92
add dword [esp + 0x14], edx
call fcn.004208a7
call fcn.00430f40
push 0xffffff
push 2
push 7
call fcn.00420936
push 0
push 0
push 0
push 0x97
push 0xfffffff6
push 9
call fcn.0042062e
push 0x434032
push 0x434e70
push 9
call fcn.0041323c
push str._c__2024_Kare
push 0x11
push 0x96
push 0xac
push 0x14
push 4
call fcn.004208a7
push 0xffffff
push 2
push 4
call fcn.00420936
push 0
push 0
call fcn.0042a8f0
push 0x14
push 0xffff0001
push 0xffff0001
push 0xffff0001
push 9
call fcn.00420a76
push 0x514
push 0x7b
push 0
call fcn.0042a902
mov dword [0x43b13c], 0
call fcn.0042aa1a
mov dword [0x43b148], eax
mov ebx, dword [0x43b148]
cmp ebx, 0x3336
jne 0x4016ee
call fcn.0042de6d
mov ebx, eax
cmp ebx, 0x7b
jne 0x4016ee
mov eax, 1
jmp 0x4016f0
xor eax, eax
and eax, eax
je 0x4016fe
mov dword [0x43b13c], 1
mov ebx, dword [0x43b13c]
cmp ebx, 1
jne 0x4016c3
push 0
call fcn.0042a2c1
mov dword [0x43b13c], 0
mov dword [0x43b180], 0x60
mov ebx, dword [0x43b180]
cmp ebx, 0x60
jne 0x40173e
mov dword [0x43b180], 1
jmp 0x401754
mov ebx, dword [0x43b180]
mov eax, 0x60
cdq
idiv ebx
mov ebx, eax
mov dword [0x43b180], ebx
push 0x100
mov ebx, dword [0x43b180]
imul ebx, ebx, 9
push ebx
push str.tahoma
push 0
call fcn.0042bb6a
push 0x100
push 9
push str.tahoma
push 1
call fcn.0042bb6a
push 0x100
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xa
push ebx
push str.tahoma
push 2
call fcn.0042bb6a
push 0x100
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xa
push ebx
push str.Arial
push 3
call fcn.0042bb6a
push 0x100
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xc
push ebx
push str.Tahoma
push 4
call fcn.0042bb6a
push 0x200
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xa
push ebx
push str.Tahoma
push 5
call fcn.0042bb6a
mov ebx, dword [0x43b180]
imul ebx, ebx, 9
push ebx
push str.Tahoma
push 6
call fcn.0042bc4e
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xa
push ebx
push str.Tahoma
push 7
call fcn.0042bc4e
push 0x100
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xb
push ebx
push str.Tahoma
push 8
call fcn.0042bb6a
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xe
push ebx
push str.Tahoma
push 9
call fcn.0042bc4e
push 0x100
mov ebx, dword [0x43b180]
shl ebx, 4
push ebx
push str.Arial
push 0xa
call fcn.0042bb6a
mov ebx, dword [0x43b180]
imul ebx, ebx, 9
push ebx
push str.Arial
push 0xb
call fcn.0042bc4e
mov ebx, dword [0x43b180]
imul ebx, ebx, 0xd
push ebx
push str.Arial
push 0xc
call fcn.0042bc4e
push 0x100
fild dword [0x43b180]
fmul qword [0x438e94]
push eax
fistp dword [esp]
push str.MS_Shell_Dlg
push 0xd
call fcn.0042bb6a
fild dword [0x43b180]
fmul qword [0x438e94]
push eax
fistp dword [esp]
push str.MS_Shell_Dlg
push 0xe
call fcn.0042bc4e
call fcn.00430e40
push eax
push eax
push 0x100
call fcn.0041e500
push 0x43b0c8
call fcn.00430eb0
push 0x100
push dword [0x43b0c8]
push 1
push 0x400
call sub.KERNEL32.dll_GetLocaleInfoW
call fcn.00430e40
push eax
push eax
push 2
push dword [0x43b0c8]
call fcn.0041e550
push 0x43b100
call fcn.00430eb0
mov edx, 0x434032
lea ecx, [0x43b14c]
call fcn.0041e008
push 0x90000001
push str._DevManPE
push 0x20b
push 0x2b9
push 0xa
push 0xa
push 0xa
call fcn.0042a6fe
mov dword [0x43b174], eax
push 0xffffff
push 0xa
call fcn.0042a721
push 0xffffff
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x43b190], eax
mov edx, 0x434388
lea ecx, [0x43b0e4]
call fcn.0041e008
push 0xa
call fcn.0042a7ba
mov dword [0x43b144], eax
push 0xa
call fcn.0042a832
mov dword [0x43b140], eax
push 0xd
push 0xd
push dword [0x43b140]
push dword [0x43b144]
push 0
push 0
call sub.GDI32.DLL_CreateRoundRectRgn
mov dword [0x43b178], eax
push 1
push dword [0x43b178]
push dword [0x43b174]
call sub.USER32.DLL_SetWindowRgn
push 0
push 0
push 0
push 0
push 0
push 0xb
call fcn.0042062e
push 0x434032
push 0x434f38
push 0xb
call fcn.0041323c
push 1
push 0xb
call fcn.00420aaf
push 0
push 0x118
push 0xc8
push 0x2f
push 0
push 0xc
call fcn.0042062e
push 0x434032
push 0x4370c2
push 0xc
call fcn.0041323c
push 0
push 0x118
push 0xc8
push 0x2f
push 0x2b0
push 0xd
call fcn.0042062e
push 0x434032
push 0x438d76
push 0xd
call fcn.0041323c
push 0
push 0
push 0
push 0x202
push 0
push 0xe
call fcn.0042062e
push 0x434032
push 0x434e70
push 0xe
call fcn.0041323c
push 0
push 0x12
push 0x1b
push 0
push 0x265
push 0x11
call fcn.0042062e
push 0x434032
push 0x435734
push 0x11
call fcn.0041323c
push 1
push 0x11
call fcn.00420ada
push 0
push 0x12
push 0x2d
push 0
push 0x282
push 0x12
call fcn.0042062e
push 0x434032
push 0x435abe
push 0x12
call fcn.0041323c
push 1
push 0x12
call fcn.00420ada
push 0x1d2
push 0x2a8
push 0x30
push 8
push 0x13
call fcn.00420dd3
push 0xffffff
push 2
push 0x13
call fcn.00420936
push 0
push 0x12
push 0x1e
push 5
push 7
push 0x17
call fcn.0042062e
push 0x434032
push 0x4381be
push 0x17
call fcn.0041323c
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x18]
push 0x12
push 0x50
push 7
push 0x20
push 0x18
call fcn.004208a7
push 0
call fcn.0042bc64
push eax
push 0x18
call fcn.004208c7
push 0xffffff
push 2
push 0x18
call fcn.00420936
push dword [ebp + 0x48]
push 0x12
push 0x28
push 0x25
push 5
push 0x1e
call fcn.004208a7
push 0xffffff
push 2
push 0x1e
call fcn.00420936
push 2
call fcn.0042bc64
push eax
push 0x1e
call fcn.004208c7
push 0x434032
push 0x12
push 0x10e
push 0x25
push 0x2d
push 0x1f
call fcn.004208a7
push 0xffffff
push 2
push 0x1f
call fcn.00420936
push 2
call fcn.0042bc64
push eax
push 0x1f
call fcn.004208c7
push dword [ebp + 0x14]
push 0x14
push 0x50
push 0x19
push 0x14a
push 0x1b
call fcn.004208a7
push 0xffffff
push 2
push 0x1b
call fcn.00420936
push 0xc
call fcn.0042bc64
push eax
push 0x1b
call fcn.004208c7
push 0x14
push 0xf0
push 0x19
push 0x1a4
push 0x1a
call fcn.00421691
push 0xc
push 0x434032
push 0x12
push 0x15e
push 0x3c
push 0x145
push 0x20
call fcn.004207af
push 0xffffff
push 2
push 0x20
call fcn.00420936
push 1
call fcn.0042bc64
push eax
push 0x20
call fcn.004208c7
push 0x434032
push 1
push 0x168
push 0x50
push 0x141
push 0x2a
call fcn.004208a7
push 0
push 2
push 0x2a
call fcn.00420936
push 0x434032
push 0x12
push 0x15e
push 0x5a
push 0x145
push 0x21
call fcn.004208a7
push 0xffffff
push 2
push 0x21
call fcn.00420936
push dword [ebp + 0x4c]
push 0x12
push 0x50
push 0x73
push 0x145
push 0x22
call fcn.004208a7
push 0xffffff
push 2
push 0x22
call fcn.00420936
push 1
push 0x434032
push 0x10
push 0x5a
push 0x73
push 0x19a
push 0x23
call fcn.004207af
push 0xf2
push 0xe4
mov eax, 0xd7
call fcn.0042f040
push eax
push 2
push 0x23
call fcn.00420936
push str.Service:
push 0x12
push 0x50
push 0x8c
push 0x145
push 0x24
call fcn.004208a7
push 0xffffff
push 2
push 0x24
call fcn.00420936
push 0x14
push 0x5a
push 0x8b
push 0x19a
push 0x25
call fcn.00421691
push 0x434032
push 0x26
push 0x159
push 0xaa
push 0x14f
push 0x28
call fcn.004208a7
push 0xffffff
push 2
push 0x28
call fcn.00420936
push 0x14
push 0x5a
push 0x8b
push 0x208
push 0x27
call fcn.00421691
push 1
push 0x27
call fcn.00420ada
push str.0Boot
push 0xffffffff
push 0x27
call fcn.004216ae
push str.1System
push 0xffffffff
push 0x27
call fcn.004216ae
push str.2Automatic
push 0xffffffff
push 0x27
call fcn.004216ae
push str.3Manual
push 0xffffffff
push 0x27
call fcn.004216ae
push str.4Deaktiviert
push 0xffffffff
push 0x27
call fcn.004216ae
push 0x434032
push 0x3c
push 0x14f
push 0xd2
push 0x14f
push 0x29
call fcn.004208a7
push 0x20
push 0x119
push 0x140
push 0x3c
push 2
push 0x1d
call fcn.004226bf
mov dword [0x43b10c], eax
push 0x434032
push 1
push 0x168
push 0x10e
push 0x141
push 0x2b
call fcn.004208a7
push 0
push 2
push 0x2b
call fcn.00420936
push 0x434526
push 0x1a
push 0x5a
push 0x118
push 0x15e
push 0x33
call fcn.00422b3e
push 1
push 0x33
call fcn.00420aaf
push 0x438570
push 0x1a
push 0x5a
push 0x118
push 0x1c7
push 0x34
call fcn.00422b3e
push 1
push 0x34
call fcn.00420aaf
push dword [ebp + 0x64]
push 0x1a
push 0x5a
push 0x118
push 0x230
push 0x35
call fcn.00422b3e
push 1
push 0x35
call fcn.00420aaf
push 0x434032
push 0x12
push 0x190
push 0x140
push 0x145
push 0x36
call fcn.004208a7
push 0x434032
push 1
push 0x2a8
push 0x154
push 0
push 0x2c
call fcn.004208a7
push 0
push 2
push 0x2c
call fcn.00420936
push str.Device_Manager_PE_Recovery
push 0x12
push 0xfa
push 0x15e
push 0xa
push 0x2e
call fcn.004208a7
push 0xffffff
push 2
push 0x2e
call fcn.00420936
push 2
call fcn.0042bc64
push eax
push 0x2e
call fcn.004208c7
push dword [ebp + 0x70]
push 0x12
push 0xfa
push 0x17c
push 0xa
push 0x2f
call fcn.004208a7
push 0xffffff
push 2
push 0x2f
call fcn.00420936
push dword [ebp + 0x74]
push 0x12
push 0x5a
push 0x19d
push 0xa
push 0x2d
call fcn.004208a7
push 0xffffff
push 2
push 0x2d
call fcn.00420936
push 0x4351d8
push 0x12
push 0x73
push 0x19d
push 0x6e
push 0x31
call fcn.004208a7
push 0xffffff
push 2
push 0x31
call fcn.00420936
push dword [ebp + 0x7c]
push 0x1e
push 0x5a
push 0x195
push 0xf0
push 0x32
call fcn.00422b3e
push str._c__2024_Kare
push 0x11
push 0x5a
push 0x1b8
push 0x244
push 0x30
call fcn.004208a7
push 0xffffff
push 2
push 0x30
call fcn.00420936
call fcn.00422b5e
push 0x1d2
push 0x2a8
push 0x30
push 8
push 0x14
call fcn.00420dd3
push 0xffffff
push 2
push 0x14
call fcn.00420936
push str.Driver_inject
push 0x1a
push 0x190
push 0x14
push 0x10e
push 0x37
call fcn.004208a7
push 0xffffff
push 2
push 0x37
call fcn.00420936
push 0xa
call fcn.0042bc64
push eax
push 0x37
call fcn.004208c7
push dword [ebp + 0x84]
push 0x16
push 0x3c
push 0x46
push 0x1e
push 0x38
call fcn.004208a7
push 0xffffff
push 2
push 0x38
call fcn.00420936
push 0x4351d8
push 0x14
push 0x1f4
push 0x46
push 0x5f
push 0x39
call fcn.004208a7
push 0xffffff
push 2
push 0x39
call fcn.00420936
push dword [ebp + 0x88]
push 0x16
push 0x3c
push 0x5f
push 0x1e
push 0x3a
call fcn.004208a7
push 0xffffff
push 2
push 0x3a
call fcn.00420936
push 0x4351d8
push 0x16
push 0x190
push 0x5f
push 0x5f
push 0x3b
call fcn.004208a7
push 0xffffff
push 2
push 0x3b
call fcn.00420936
push 0x434032
push 1
push 0x2a8
push 0x82
push 0
push 0x3c
call fcn.004208a7
push 0
push 2
push 0x3c
call fcn.00420936
push dword [ebp + 0x98]
push 0x16
push 0x190
push 0x91
push 0x1e
push 0x3d
call fcn.004208a7
push 0xffffff
push 2
push 0x3d
call fcn.00420936
mov edx, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
lea ecx, [0x43b18c]
call fcn.0041e008
push 0x434032
push 0x14
push 0x226
push 0xa5
push 0x1e
push 0x3e
call fcn.00422e59
push 0
push 0x12
push 0x2d
push 0x9d
push 0x253
push 0x3f
call fcn.0042062e
push 0x434032
push 0x43559e
push 0x3f
call fcn.0041323c
push 0x40010008
push 0x5a
mov ebp, dword [0x43b1b4]
push dword [ebp + 0xa0]
push 0x8e
push 0x258
push 0xc8
push 0x1e
push 0x40
call fcn.00424076
push 0x50
push dword [ebp + 0xa4]
push 1
push 0x40
call fcn.00424307
push 0x50
push dword [ebp + 0xa8]
push 2
push 0x40
call fcn.00424307
push 0x182
push dword [ebp + 0xac]
push 3
push 0x40
call fcn.00424307
push 0xc
push 0x434032
push 0x12
push 0x258
push 0x163
push 0x1e
push 0x41
call fcn.004207af
push 0xffffff
push 2
push 0x41
call fcn.00420936
push dword [ebp + 0xb4]
push 0x1e
push 0x5a
push 0x190
push 0x32
push 0x42
call fcn.00422b3e
push dword [ebp + 0xb8]
push 0x1e
push 0x5a
push 0x190
push 0x118
push 0x43
call fcn.00422b3e
push dword [ebp + 0xbc]
push 0x1e
push 0x5a
push 0x190
push 0x208
push 0x44
call fcn.00422b3e
call fcn.00422b5e
push 0x1d2
push 0x2a8
push 0x30
push 8
push 0x15
call fcn.00420dd3
push 0xffffff
push 2
push 0x15
call fcn.00420936
push dword [ebp + 0xc8]
push 0x1a
push 0x190
push 0x1e
push 0xfa
push 0x45
call fcn.004208a7
push 0xffffff
push 2
push 0x45
call fcn.00420936
push 0xa
call fcn.0042bc64
push eax
push 0x45
call fcn.004208c7
push dword [ebp + 0xcc]
push 0x16
push 0x1cc
push 0x5a
push 0x1e
push 0x46
call fcn.004208a7
push 0xffffff
push 2
push 0x46
call fcn.00420936
push 0x40010008
push 0x82
push dword [ebp + 0xd4]
push 0xb2
push 0x258
push 0x82
push 0x1e
push 0x47
call fcn.00424076
push 0x1ea
push dword [ebp + 0xd8]
push 1
push 0x47
call fcn.00424307
push 0x434032
push 0x12
push 0x190
push 0x13b
push 0x1e
push 0x4a
call fcn.004208a7
push 0xffffff
push 2
push 0x4a
call fcn.00420936
push dword [ebp + 0xe8]
push 0x1e
push 0x5a
push 0x168
push 0x32
push 0x48
call fcn.00422b3e
push dword [ebp + 0xec]
push 0x1e
push 0x5a
push 0x168
push 0x1f4
push 0x49
call fcn.00422b3e
call fcn.00422b5e
push 0x1d2
push 0x2a8
push 0x30
push 8
push 0x16
call fcn.00420dd3
push 0xffffff
push 2
push 0x16
call fcn.00420936
push dword [ebp + 0x224]
push 0x19
push 0x10e
push 0xe1
push 0xf
push 0x4b
call fcn.004208a7
push 0xffffff
push 2
push 0x4b
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x4b
call fcn.004208c7
push dword [ebp + 0x208]
push 0xbe
push 0x186
push 0xd
push 0xc
push 0x4f
call fcn.004200c5
push dword [ebp + 0x20c]
push 0x19
push 0x96
push 0x2d
push 0x1b
push 0x4c
call fcn.004208a7
push 8
call fcn.0042bc64
push eax
push 0x4c
call fcn.004208c7
push 0xffffff
push 2
push 0x4c
call fcn.00420936
push dword [ebp + 0x210]
push 0x19
push 0x96
push 0x49
push 0x1b
push 0x4d
call fcn.004208a7
push 0xffffff
push 2
push 0x4d
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x4d
call fcn.004208c7
push dword [ebp + 0x214]
push 0x19
push 0x96
push 0x5d
push 0x1b
push 0x50
call fcn.004208a7
push 0xffffff
push 2
push 0x50
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x50
call fcn.004208c7
push dword [ebp + 0x218]
push 0x19
push 0x96
push 0x71
push 0x1b
push 0x51
call fcn.004208a7
push 0xffffff
push 2
push 0x51
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x51
call fcn.004208c7
push dword [ebp + 0x21c]
push 0x19
push 0x96
push 0x94
push 0x1b
push 0x52
call fcn.004208a7
push 0xffffff
push 2
push 0x52
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x52
call fcn.004208c7
push dword [ebp + 0x220]
push 0x19
push 0x96
push 0xaa
push 0x1b
push 0x53
call fcn.004208a7
push 0xffffff
push 2
push 0x53
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x53
call fcn.004208c7
push dword [0x43b0a4]
push 0x19
push 0x96
push 0x2d
push 0xa0
push 0x54
call fcn.004208a7
push 7
call fcn.0042bc64
push eax
push 0x54
call fcn.004208c7
push 0xffffff
push 2
push 0x54
call fcn.00420936
push 0x434032
push 0x19
push 0x96
push 0x4b
push 0xa0
push 0x55
call fcn.004208a7
push 0xffffff
push 2
push 0x55
call fcn.00420936
push 7
call fcn.0042bc64
push eax
push 0x55
call fcn.004208c7
push 0x434032
push 0x19
push 0x96
push 0x62
push 0xa0
push 0x56
call fcn.004208a7
push 0xffffff
push 2
push 0x56
call fcn.00420936
push 0x434032
push 0x19
push 0x96
push 0x73
push 0xa0
push 0x57
call fcn.004208a7
push 0xffffff
push 2
push 0x57
call fcn.00420936
push 7
call fcn.0042bc64
push eax
push 0x57
call fcn.004208c7
push dword [0x43b0e0]
push 0x14
push 0xc8
push 0x96
push 0xa0
push 0x58
call fcn.004208a7
push 0xffffff
push 2
push 0x58
call fcn.00420936
push 7
call fcn.0042bc64
push eax
push 0x58
call fcn.004208c7
push dword [0x43b0f0]
push 0x14
push 0x96
push 0xaa
push 0xa0
push 0x59
call fcn.004208a7
push 0xffffff
push 2
push 0x59
call fcn.00420936
push 7
call fcn.0042bc64
push eax
push 0x59
call fcn.004208c7
call fcn.00430e40
push eax
push 0x60
push 0x28
push 0x1e0
push 1
call fcn.00430e40
push eax
push eax
call fcn.0041fb3b
call fcn.00430ff0
push 0x5c
call fcn.00430e92
add dword [esp + 4], edx
call fcn.0041c9d0
call fcn.00430f40
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x22c]
push 0x19
push 0xc8
push 0x9b
push 0x1ce
push 0x5a
call fcn.004208a7
push 0xffffff
push 2
push 0x5a
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x5a
call fcn.004208c7
push 1
push 0xff0000
push str.http:__kare_net.de
push 0x14
push 0x8c
push 0xb4
push 0x1ce
push 0x5d
call fcn.0042475e
mov dword [0x43b0ec], eax
push 0xffffff
push 2
push 0x5d
call fcn.00420936
push 0xff0000
push 1
push 0x5d
call fcn.00420936
push 8
call fcn.0042bc64
push eax
push 0x5d
call fcn.004208c7
push str.Copyright__c__2006___2024__Kare
push 0x19
push 0xc8
push 0xdc
push 0x1ce
push 0x5b
call fcn.004208a7
push 0xffffff
push 2
push 0x5b
call fcn.00420936
call fcn.00430e40
push eax
mov edx, 0x437ef4
call fcn.00430f90
mov edx, dword [ebp + 0x228]
call fcn.00430f90
push 0x43b098
call fcn.00430eb0
push 0x800
push 0xcc
push 0x23a
push 0xf8
push 0xc
push 0x5f
call fcn.00425088
push dword [0x43b098]
push 0x5f
call fcn.00425341
push dword [ebp + 0xb4]
push 0x16
push 0x50
push 0x1ae
push 0x24e
push 0x5e
call fcn.00422b3e
call fcn.00422b5e
lea eax, [0x41c766]
push eax
call fcn.0042aa22
push 0
push 0xa
call fcn.0042a8f0
push 1
call fcn.0040a8c2
push 0x43b1d8
push 0x438e9c
push 8
push 1
push 4
call fcn.0042eaf5
push 0x43b1d8
call fcn.00413eb6
mov dword [0x43b184], eax
mov dword [0x43b0e8], 1
mov eax, dword [0x43b184]
cmp eax, dword [0x43b0e8]
jl 0x402e7c
call fcn.00430e40
push eax
mov ebx, dword [0x43b0e8]
mov ebp, dword [0x43b1d8]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, 0x434770
call fcn.00430f90
call fcn.00430e92
add dword [esp], edx
call fcn.0040b7d4
call fcn.00430f40
mov ebx, eax
cmp ebx, 3
jne 0x402e70
call fcn.00430e40
push eax
mov ebx, dword [0x43b0e8]
mov ebp, dword [0x43b1d8]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040576b
push 0x43b0b8
call fcn.00430eb0
call fcn.00430e40
push eax
push str.DeviceDesc
call fcn.00430e40
push eax
mov edx, str.SYSTEMCurrentControlSetenum_
call fcn.00430f90
mov edx, dword [0x43b0b8]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
push 0x43b0bc
call fcn.00430eb0
push 0x4344da
push dword [0x43b0bc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
inc dword [0x43b0e8]
jno 0x402d8a
push 0xa
call fcn.0042aa37
mov dword [0x43b0f8], eax
call fcn.00430e40
push eax
push eax
mov eax, dword [0x43b0f8]
cdq
push edx
push eax
call fcn.0041e740
push 0x43b0d0
call fcn.00430eb0
call fcn.0042aa53
and eax, eax
je 0x402eb4
jmp 0x402ea9
push 0x3c
call fcn.0042ff70
mov dword [0x43b138], eax
push 0x43b1e0
push 0x438e9c
push 8
push 4
push 4
call fcn.0042eaf5
push 0x43b1e0
call fcn.00408045
mov ebp, dword [0x43b1e0]
mov edx, dword [ebp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b0fc
call fcn.00430eb0
push 0x434770
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
push 0x43b15c
call fcn.00430eb0
push dword [0x43b0fc]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x40301c
call fcn.00430e40
push eax
push dword [0x43b0fc]
call fcn.0040e837
push 0x43b120
call fcn.00430eb0
push dword [0x43b120]
push 0x31
call fcn.00425341
push 0x434770
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
mov ebp, dword [0x43b138]
lea eax, [ebp]
push eax
call fcn.00430eb0
mov edx, dword [0x43b0fc]
call fcn.00430e40
push eax
call fcn.00430f90
mov ebp, dword [0x43b138]
lea eax, [ebp + 4]
push eax
call fcn.00430eb0
mov ebp, dword [0x43b1e0]
mov edx, dword [ebp + 8]
call fcn.00430e40
push eax
call fcn.00430f90
mov ebp, dword [0x43b138]
lea eax, [ebp + 8]
push eax
call fcn.00430eb0
push dword [0x43b138]
lea eax, [fcn.004163ee]
push eax
call fcn.0041e26d
mov dword [0x43b0b0], eax
lea eax, [0x40e8eb]
push eax
push 0x64
push 0x60
push 0xa
call fcn.0042aa37
push eax
call sub.USER32.DLL_SetTimer
call fcn.0042aa1a
mov dword [0x43b194], eax
mov ebx, dword [0x43b194]
cmp ebx, 0x333c
jne 0x40305f
mov dword [0x43b13c], 1
mov ebx, dword [0x43b194]
cmp ebx, 0x201
jne 0x4030fc
push 0xa
call fcn.0042aa5b
mov ebx, eax
and ebx, ebx
jl 0x4030bd
push 0xa
call fcn.0042aa5b
mov ebx, eax
cmp ebx, 0x281
jg 0x4030bd
push 0xa
call fcn.0042aac2
mov ebx, eax
and ebx, ebx
jl 0x4030bd
push 0xa
call fcn.0042aac2
mov ebx, eax
cmp ebx, 0x2e
jg 0x4030bd
mov eax, 1
jmp 0x4030bf
xor eax, eax
and eax, eax
je 0x4030fc
push 0
push 2
push 0xa1
push dword [0x43b174]
call sub.USER32.DLL_SendMessageW
push 0x101
push 0
push 0
push 0xa
call fcn.0042aa37
push eax
call sub.USER32.DLL_RedrawWindow
mov ebx, dword [0x43b194]
cmp ebx, 0x332c
jne 0x40409e
call fcn.0042de7c
push eax
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x403143
push 0x11
call fcn.00408d54
mov ebx, eax
cmp ebx, 1
jne 0x40313e
push 0x20000000
push 0xa
call fcn.0042ab29
jmp 0x40409d
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x40317e
push 0x12
call fcn.00408d54
mov ebx, eax
cmp ebx, 1
jne 0x403179
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x403179
mov dword [0x43b13c], 1
jmp 0x40409d
mov ebx, 0x17
cmp ebx, dword [esp]
jne 0x403263
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x40325e
mov ebp, dword [0x43b138]
mov edx, dword [ebp + 0x10]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b170
call fcn.00430eb0
mov ebp, dword [0x43b138]
mov edx, dword [ebp + 0xc]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b158
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
push dword [0x43b158]
push dword [0x43b170]
call fcn.0041add9
call fcn.00430ff0
push 0x55
call fcn.00430e92
add dword [esp + 4], edx
call fcn.00425341
call fcn.00430f40
call fcn.00430e40
push eax
push eax
push dword [0x43b158]
call fcn.00413de2
call fcn.00430ff0
push 0x56
call fcn.00430e92
add dword [esp + 4], edx
call fcn.00425341
call fcn.00430f40
mov ebp, dword [0x43b138]
push dword [ebp + 4]
push 0x57
call fcn.00425341
push 4
call fcn.0040a8c2
jmp 0x40409d
mov ebx, 0x5e
cmp ebx, dword [esp]
jne 0x40327c
push 1
call fcn.0040a8c2
jmp 0x40409d
mov ebx, 0x1a
cmp ebx, dword [esp]
jne 0x403391
call fcn.0042de8b
mov ebx, eax
cmp ebx, 0x300
jne 0x40338c
call fcn.00430e40
push eax
push eax
push 0x1a
call fcn.0042538c
push 0x43b0fc
call fcn.00430eb0
push 0x435dc2
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
push 0x43b0fc
call fcn.00430eb0
push 0x434770
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
push 0x43b15c
call fcn.00430eb0
mov edx, dword [0x43b0fc]
call fcn.00430e40
push eax
call fcn.00430f90
mov ebp, dword [0x43b138]
lea eax, [ebp + 4]
push eax
call fcn.00430eb0
mov edx, dword [0x43b15c]
call fcn.00430e40
push eax
call fcn.00430f90
mov ebp, dword [0x43b138]
lea eax, [ebp]
push eax
call fcn.00430eb0
push dword [0x43b138]
lea eax, [fcn.004163ee]
push eax
call fcn.0041e26d
mov dword [0x43b0b0], eax
call fcn.0042aa53
and eax, eax
je 0x40338c
jmp 0x403381
jmp 0x40409d
mov ebx, 0x1d
cmp ebx, dword [esp]
jne 0x403839
call fcn.0042de8b
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403833
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x403833
push 0x1d
call fcn.004253f4
mov dword [0x43b118], eax
push dword [0x43b118]
push 0x1d
call fcn.0042541f
mov dword [0x43b164], eax
mov ebx, dword [0x43b164]
and ebx, ebx
jle 0x403833
mov eax, dword [0x43b118]
mov dword [0x43b0b4], eax
push 0x434032
push 0x36
call fcn.00425341
mov eax, dword [0x43b1c0]
shl eax, 2
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0x20
call fcn.00425341
mov eax, dword [0x43b1c0]
imul eax, eax, 0xb
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0x23
call fcn.00425341
call fcn.00430e40
push eax
push str.DeviceDesc
call fcn.00430e40
push eax
mov edx, str.SYSTEMCurrentControlSetEnum_
call fcn.00430f90
mov eax, dword [0x43b1c0]
imul eax, eax, 7
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
mov edx, dword [ebp]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
push 0x43b0bc
call fcn.00430eb0
push 0x4344da
push dword [0x43b0bc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
inc ebx
push ebx
push dword [0x43b0bc]
call fcn.0041e8e0
push 0x43b0bc
call fcn.00430eb0
mov eax, dword [0x43b1c0]
shl eax, 4
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
mov edx, 0x4343e2
pop ecx
call fcn.00431020
je 0x4035a1
push 0x4349fc
mov ebp, dword [0x43b1c8]
push dword [ebp + 4]
call fcn.0041e930
mov dword [0x43b108], eax
mov dword [0x43b0e8], 1
mov eax, dword [0x43b108]
cmp eax, dword [0x43b0e8]
jl 0x4035a1
call fcn.00430e40
push eax
push eax
call fcn.00430e40
push eax
push 0x4349fc
push dword [0x43b0e8]
mov ebp, dword [0x43b1c8]
push dword [ebp + 4]
call fcn.0041e9c0
call fcn.00430e92
add dword [esp], edx
call fcn.0041eaf0
call fcn.00430f40
mov dword [0x43b168], eax
inc dword [0x43b0e8]
jno 0x40354f
push dword [0x43b0bc]
mov eax, dword [0x43b1c0]
shl eax, 2
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
mov edx, dword [ebp]
pop ecx
call fcn.00431020
je 0x4035de
mov edx, 0x434032
lea ecx, [0x43b0bc]
call fcn.0041e008
push dword [0x43b0bc]
push 0x21
call fcn.00425341
push 0x25
call fcn.00425451
mov eax, dword [0x43b1c0]
imul eax, eax, 0xc
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0xffffffff
push 0x25
call fcn.004216ae
mov eax, dword [0x43b1c0]
imul eax, eax, 0xd
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
call fcn.0041eaf0
push eax
push 0x27
call fcn.00425474
push 0x434032
push 0x28
call fcn.00425341
push 0
push 0x25
call fcn.00425474
mov eax, dword [0x43b1c0]
shl eax, 4
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
mov edx, 0x4343e2
pop ecx
call fcn.00431020
je 0x403767
push 0x4349fc
mov ebp, dword [0x43b1c8]
push dword [ebp + 8]
call fcn.0041e930
mov dword [0x43b0c0], eax
mov dword [0x43b0e8], 1
mov eax, dword [0x43b0c0]
cmp eax, dword [0x43b0e8]
jl 0x403745
call fcn.00430e40
push eax
push eax
call fcn.00430e40
push eax
push 0x4349fc
push dword [0x43b0e8]
mov ebp, dword [0x43b1c8]
push dword [ebp + 8]
call fcn.0041e9c0
call fcn.00430e92
add dword [esp], edx
call fcn.0041eaf0
call fcn.00430f40
mov dword [0x43b168], eax
mov eax, dword [0x43b1c0]
imul eax, eax, 0xc
mov ebp, eax
push ebp
mov eax, dword [0x43b168]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0xffffffff
push 0x25
call fcn.004216ae
inc dword [0x43b0e8]
jno 0x4036c5
push 0
push 0x35
call fcn.00420aaf
push dword [0x43b164]
push dword [0x43b0fc]
call fcn.00413fcc
jmp 0x4037a8
push 1
push 0x35
call fcn.00420aaf
push 0xffffffff
push 2
push 0x27
call fcn.00420936
push 1
push 0x27
call fcn.00420ada
push 1
push 0x33
call fcn.00420aaf
mov eax, dword [0x43b1c0]
imul eax, eax, 0x13
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0x29
call fcn.00425341
call fcn.00430e40
push eax
push eax
mov eax, dword [0x43b1c0]
add eax, eax
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
call fcn.0041e3c0
call fcn.00430ff0
mov edx, str.display
call fcn.00431060
mov ecx, eax
call fcn.00431020
je 0x403824
push 0
push 0x34
call fcn.00420aaf
jmp 0x403833
push 1
push 0x34
call fcn.00420aaf
pop eax
jmp 0x40409d
mov ebx, 0x35
cmp ebx, dword [esp]
jne 0x403a03
push dword [0x43b0b4]
push 0x1d
call fcn.0042541f
mov dword [0x43b164], eax
mov ebx, dword [0x43b164]
and ebx, ebx
jne 0x403881
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x100]
push 0x36
call fcn.00425341
jmp 0x4039fe
mov eax, dword [0x43b1c0]
imul eax, eax, 0xa
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
mov edx, 0x4343c8
pop ecx
call fcn.00431020
je 0x4038c8
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x104]
push 0x36
call fcn.00425341
jmp 0x4039fe
mov ebp, dword [0x43b138]
mov edx, dword [ebp + 0x24]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b09c
call fcn.00430eb0
mov ebp, dword [0x43b138]
mov edx, dword [ebp + 0x10]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b170
call fcn.00430eb0
mov edx, dword [0x43b09c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, 0x4380c8
call fcn.00430f90
call fcn.00430e40
push eax
mov ebp, dword [0x43b138]
push dword [ebp + 0xc]
push dword [0x43b170]
call fcn.0041add9
pop eax
push 0x43b09c
call fcn.00430eb0
mov edx, dword [0x43b09c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, 0x4380c8
call fcn.00430f90
call fcn.00430e40
push eax
mov ebp, dword [0x43b138]
push dword [ebp + 0xc]
call fcn.00413de2
pop eax
push 0x43b09c
call fcn.00430eb0
mov edx, dword [0x43b09c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, 0x436ada
call fcn.00430f90
mov ebp, dword [0x43b138]
mov edx, dword [ebp + 4]
call fcn.00430f90
mov edx, 0x4340f0
call fcn.00430f90
push 0x43b09c
call fcn.00430eb0
push dword [0x43b09c]
push 0x39
call fcn.00425341
mov eax, dword [0x43b1c0]
shl eax, 2
mov ebp, eax
push ebp
mov eax, dword [0x43b164]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
push 0x3b
call fcn.00425341
push 2
call fcn.0040a8c2
jmp 0x40409d
mov ebx, 0x42
cmp ebx, dword [esp]
jne 0x403a2d
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x403a28
push 1
call fcn.0040a8c2
jmp 0x40409d
mov ebx, 0x48
cmp ebx, dword [esp]
jne 0x403a46
push 1
call fcn.0040a8c2
jmp 0x40409d
mov ebx, 0x40
cmp ebx, dword [esp]
jne 0x403a80
push 0x40
call fcn.004253f4
mov dword [0x43b11c], eax
mov ebx, dword [0x43b11c]
cmp ebx, 0xffffffff
jne 0x403a6c
jmp 0x403a7b
push 0x434032
push 0x41
call fcn.00425341
jmp 0x40409d
mov ebx, 0x3f
cmp ebx, dword [esp]
jne 0x403b23
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x403b1e
call fcn.00430e40
push eax
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x34]
push dword [0x43b18c]
push dword [ebp + 0x28]
call fcn.004198a1
push 0x43b0bc
call fcn.00430eb0
push dword [0x43b0bc]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x403b1e
push dword [0x43b0bc]
push 0x3e
call fcn.00425341
call fcn.00430e40
push eax
push eax
push 0x434770
call fcn.00430e40
push eax
push eax
push dword [0x43b0bc]
call fcn.0042bcc6
call fcn.00430e92
add dword [esp], edx
call fcn.0041e310
push 0x43b18c
call fcn.00430eb0
jmp 0x40409d
mov ebx, 0x43
cmp ebx, dword [esp]
jne 0x403b93
push dword [0x43b0b0]
call fcn.0041e1fc
mov ebx, eax
and ebx, ebx
jne 0x403b84
mov dword [0x43b0a0], 0
call fcn.00430e40
push eax
push eax
mov eax, dword [0x43b164]
cdq
push edx
push eax
call fcn.0041e740
mov ebp, dword [0x43b138]
lea eax, [ebp + 0x38]
push eax
call fcn.00430eb0
push dword [0x43b138]
lea eax, [0x413955]
push eax
call fcn.0041e26d
mov dword [0x43b0b0], eax
jmp 0x403b8e
mov dword [0x43b0a0], 1
jmp 0x40409d
mov ebx, 0x32
cmp ebx, dword [esp]
jne 0x403bea
push 3
call fcn.0040a8c2
call fcn.0042aa53
and eax, eax
je 0x403bb2
jmp 0x403ba7
call fcn.00430e40
push eax
mov edx, dword [0x43b15c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DevManPE_Cache
call fcn.00430f90
call fcn.00430e92
add dword [esp], edx
call fcn.00408dff
call fcn.00430f40
jmp 0x40409d
mov ebx, 0x49
cmp ebx, dword [esp]
jne 0x403d00
push 0x47
call fcn.004253f4
mov dword [0x43b11c], eax
mov ebx, dword [0x43b11c]
cmp ebx, 0xffffffff
jne 0x403c2d
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x110]
push 0x4a
call fcn.00425341
jmp 0x403cfb
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x114]
push 0x4a
call fcn.00425341
call fcn.00430e40
push eax
push eax
push 0
push dword [0x43b11c]
push 0x47
call fcn.004254ac
push 0x43b160
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
push 0x4344da
push 0x4344d6
push dword [0x43b160]
call fcn.0041efa0
push 0x43b160
call fcn.00430eb0
mov edx, dword [0x43b15c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DevManPE_Cache_
call fcn.00430f90
mov edx, dword [0x43b160]
call fcn.00430f90
push 0x43b160
call fcn.00430eb0
push dword [0x43b0fc]
push dword [0x43b160]
call fcn.0041afdb
push dword [0x43b138]
call fcn.004163ee
mov dword [0x43b0b4], 0
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x118]
push 0x4a
call fcn.00425341
jmp 0x40409d
mov ebx, 0x44
cmp ebx, dword [esp]
jne 0x403e60
push 0x40
call fcn.004253f4
mov dword [0x43b11c], eax
mov ebx, dword [0x43b11c]
cmp ebx, 0xffffffff
jne 0x403d43
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x12c]
push 0x41
call fcn.00425341
jmp 0x403e5b
mov ebx, dword [0x43b11c]
inc ebx
mov ebp, dword [0x43b1d0]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00430e40
push eax
call fcn.00430f90
push 0x43b104
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
push 0x434176
push 9
push dword [0x43b104]
call fcn.0041e9c0
push 0x43b16c
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
push dword [0x43b16c]
call fcn.0041e3c0
call fcn.00430ff0
mov edx, 0x435a7e
call fcn.00431060
mov ecx, eax
call fcn.00431020
jne 0x403de8
call fcn.00430e40
push eax
push eax
push dword [0x43b16c]
call fcn.0041e3c0
call fcn.00430ff0
mov edx, str.scsiadapter
call fcn.00431060
mov ecx, eax
call fcn.00431020
jne 0x403de8
jmp 0x403def
mov eax, 1
jmp 0x403df1
xor eax, eax
and eax, eax
je 0x403e30
mov ebx, dword [0x43b11c]
inc ebx
mov ebp, dword [0x43b1d0]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00430e40
push eax
call fcn.00430f90
mov ebp, dword [0x43b138]
lea eax, [ebp + 0x38]
push eax
call fcn.00430eb0
push dword [0x43b138]
call fcn.0040ea62
jmp 0x403e46
mov ebp, dword [0x43b1b4]
push dword [ebp + 0x130]
push 0x41
call fcn.00425341
push dword [0x43b138]
call fcn.004163ee
mov dword [0x43b0b4], 0
jmp 0x40409d
mov ebx, 0x25
cmp ebx, dword [esp]
jne 0x403efa
push 0x25
call fcn.004253f4
mov dword [0x43b12c], eax
call fcn.00430e40
push eax
push eax
call fcn.00430e40
push eax
push 0x4349fc
mov ebx, dword [0x43b12c]
inc ebx
push ebx
mov ebp, dword [0x43b1c8]
push dword [ebp + 4]
call fcn.0041e9c0
call fcn.00430e92
add dword [esp], edx
call fcn.0041eaf0
call fcn.00430f40
mov dword [0x43b168], eax
mov eax, dword [0x43b1c0]
imul eax, eax, 0xd
mov ebp, eax
push ebp
mov eax, dword [0x43b168]
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x43b1bc]
push dword [ebp]
call fcn.0041eaf0
mov dword [0x43b154], eax
push dword [0x43b154]
push 0x27
call fcn.00425474
jmp 0x40409d
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x40405e
call fcn.00430e40
push eax
push eax
push 0x1a
call fcn.0042538c
push 0x43b0fc
call fcn.00430eb0
push 0x435dc2
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
push 0x43b0fc
call fcn.00430eb0
push 0x434770
push dword [0x43b0fc]
call fcn.0041e4a0
mov dword [0x43b0f4], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [0x43b0f4]
dec ebx
push ebx
push dword [0x43b0fc]
call fcn.0041e7e0
push 0x43b15c
call fcn.00430eb0
push 0x25
call fcn.004253f4
mov dword [0x43b12c], eax
call fcn.00430e40
push eax
push eax
call fcn.00430e40
push eax
push 0x4349fc
mov ebx, dword [0x43b12c]
inc ebx
push ebx
mov ebp, dword [0x43b1c8]
push dword [ebp + 4]
call fcn.0041e9c0
call fcn.00430e92
add dword [esp], edx
call fcn.0041eaf0
call fcn.00430f40
mov dword [0x43b168], eax
call fcn.00430e40
push eax
push eax
push 0x27
call fcn.004253f4
cdq
push edx
push eax
call fcn.0041e740
push 0x43b094
call fcn.00430eb0
push dword [0x43b094]
push dword [0x43b168]
push dword [0x43b0fc]
call fcn.00414b22
push 0x1d
call fcn.004253f4
mov dword [0x43b118], eax
push dword [0x43b118]
push 0x1d
call fcn.0042541f
mov dword [0x43b164], eax
mov ebx, dword [0x43b164]
and ebx, ebx
jle 0x40405c
push dword [0x43b164]
push dword [0x43b0fc]
call fcn.00413fcc
jmp 0x40409d
mov ebx, 0x34
cmp ebx, dword [esp]
jne 0x40409d
push dword [0x43b164]
push dword [0x43b0fc]
call fcn.0040aee7
push 1
push 0x34
call fcn.00420aaf
push dword [0x43b138]
call fcn.004163ee
mov dword [0x43b0b4], 0
pop eax
mov ebx, dword [0x43b13c]
cmp ebx, 1
jne 0x40303d
push 0x50010
push 0x1a4
push 0xa
call fcn.0042aa37
push eax
call sub.USER32.DLL_AnimateWindow
jmp 0x4040e1
push 0
call 0x404100
call fcn.00430e20
push dword [0x43b08c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0041e22b
call fcn.0041fc15
call fcn.0041fefd
call fcn.0042a3d7
call fcn.0042bb4a
call fcn.0042bd4a
call fcn.0042c9e0
call fcn.0042de60
call fcn.0042f0ab
call fcn.0042f294
call fcn.0042ff20
ret