Function at 0x40f8d0
Capabilities:
Enumerate gui resources
Enumerate processes
Get disk information
Get disk size
Get memory capacity
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3fc
mov eax, dword [0x428004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 8
call fcn.00412765
mov esi, eax
add esp, 4
test esi, esi
je 0x40f8e6
push 1
call fcn.00412765
add esp, 4
test eax, eax
je 0x40f8f6
push 0x10d
mov dword [esi], eax
mov dword [esi + 4], 0
call fcn.00403fe0
mov eax, dword [0x42a118]
mov ecx, dword [eax + 0x434]
add esp, 4
push ecx
call fcn.004031d0
add esp, 4
push 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov ebx, dword [edx]
add esp, 4
push 0xc
mov dword [ebp - 0x3bc], ebx
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x30]
add esp, 4
push eax
call fcn.0041356b
add esp, 4
test eax, eax
je 0x40f96f
mov edi, eax
mov dword [ebp - 0x3d0], eax
jmp 0x40f97a
mov edi, 0x423572
mov dword [ebp - 0x3d0], edi
push 0xd
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x34]
add esp, 4
push eax
call fcn.0041356b
add esp, 4
mov dword [ebp - 0x3f0], eax
test eax, eax
jne 0x40f9aa
mov dword [ebp - 0x3f0], 0x423572
call fcn.00403940
mov dword [ebp - 0x3d4], eax
call fcn.004037b0
push 0xe
mov dword [ebp - 0x3c4], eax
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x38]
add esp, 4
push eax
call fcn.0041356b
add esp, 4
mov dword [ebp - 0x3ec], eax
test eax, eax
jne 0x40f9f0
mov dword [ebp - 0x3ec], 0x423572
push 0xf
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x3c]
add esp, 4
push eax
call fcn.0041356b
add esp, 4
mov dword [ebp - 0x3cc], eax
test eax, eax
jne 0x40fa1f
mov dword [ebp - 0x3cc], 0x423572
call fcn.00409800
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fa27
sub eax, edx
mov dword [ebp - 0x3c0], eax
mov eax, ebx
lea edx, [eax + 1]
jmp 0x40fa40
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fa40
sub eax, edx
mov dword [ebp - 0x3e4], eax
call fcn.00408b20
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fa57
sub eax, edx
mov dword [ebp - 0x3f8], eax
mov eax, edi
lea edx, [eax + 1]
jmp 0x40fa70
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fa70
sub eax, edx
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fa88
sub eax, edx
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3d4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40faa0
sub eax, edx
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fab8
sub eax, edx
mov ebx, eax
mov eax, dword [ebp - 0x3ec]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fad0
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0x3cc]
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40fae4
sub eax, edi
add eax, ecx
mov ecx, dword [ebp - 0x3c0]
add eax, ebx
add eax, dword [ebp - 0x3c8]
add eax, dword [ebp - 0x3fc]
add eax, dword [ebp - 0x3f4]
add eax, dword [ebp - 0x3f8]
add eax, dword [ebp - 0x3e4]
lea edi, [eax + ecx + 0xe2]
lea esp, [esp]
push edi
call fcn.00412765
add esp, 4
mov dword [ebp - 0x3c8], eax
test eax, eax
je 0x40fb20
lea edx, [ebp - 0x168]
push edx
mov dword [ebp - 0x168], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov ebx, dword [ebp - 0x160]
mov edi, dword [ebp - 0x15c]
push 0x115
call fcn.00403fe0
mov eax, dword [0x42a118]
mov ecx, dword [eax + 0x454]
mov edx, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x3ec]
add esp, 4
shrd ebx, edi, 0x14
shr edi, 0x14
push edi
push ebx
mov ebx, dword [ebp - 0x3d4]
push edx
mov edx, dword [ebp - 0x3f0]
push eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3c0], ecx
mov ecx, dword [ebp - 0x3c4]
push ecx
push ebx
push edx
push eax
call fcn.00408b20
push eax
push ecx
call fcn.00407150
mov ecx, dword [ebp - 0x3bc]
add esp, 4
push eax
push ecx
call fcn.00409800
mov edx, dword [ebp - 0x3c0]
mov edi, dword [ebp - 0x3c8]
push eax
push edx
push edi
call fcn.004128a6
push edi
call fcn.004031d0
add esp, 0x3c
push 0x425d10
call fcn.004031d0
add esp, 4
test ebx, ebx
je 0x40fbfc
mov eax, ebx
push eax
call fcn.0041272b
add esp, 4
mov eax, dword [ebp - 0x3c4]
test eax, eax
je 0x40fc0f
push eax
call fcn.0041272b
add esp, 4
mov ecx, dword [ebp - 0x3c8]
push ecx
call fcn.0041272b
add esp, 4
push 0x10e
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x438]
add esp, 4
push eax
call fcn.004031d0
add esp, 4
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ebx, [ebx]
push 0x92
call fcn.00412765
mov edi, eax
add esp, 4
test edi, edi
je 0x40fc60
movzx eax, word [ebp - 0x120]
movzx ecx, word [ebp - 0x110]
sub ecx, eax
mov ebx, 0x424344
jns 0x40fc8f
mov ebx, 0x424520
push 0x116
call fcn.00403fe0
movzx edx, word [ebp - 0x120]
movzx eax, word [ebp - 0x110]
sub eax, edx
cdq
xor eax, edx
add esp, 4
sub eax, edx
push eax
mov eax, dword [0x42a118]
mov ecx, dword [eax + 0x458]
push ebx
push ecx
push edi
call fcn.004128a6
push edi
call fcn.004031d0
add esp, 0x14
push 0x117
call fcn.00403fe0
movzx edx, word [ebp - 0x10c]
movzx eax, word [ebp - 0x10e]
movzx ecx, word [ebp - 0x110]
add esp, 4
push edx
movzx edx, word [ebp - 0x118]
push eax
movzx eax, word [ebp - 0x116]
push ecx
movzx ecx, word [ebp - 0x112]
push edx
mov edx, dword [0x42a118]
push eax
mov eax, dword [edx + 0x45c]
push ecx
push eax
push edi
call fcn.004128a6
push edi
call fcn.004031d0
add esp, 0x24
push 0x118
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov ebx, dword [ecx + 0x460]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
push edx
push ebx
push edi
call fcn.004128a6
add esp, 0xc
push edi
call fcn.004031d0
add esp, 4
push 0x425d10
call fcn.004031d0
add esp, 4
push edi
call fcn.0041272b
add esp, 4
push 0x10f
call fcn.00403fe0
mov eax, dword [0x42a118]
mov ecx, dword [eax + 0x43c]
add esp, 4
push ecx
call fcn.004031d0
add esp, 4
push fcn.0040f700
call fcn.00402c80
add esp, 4
push 4
call fcn.00412765
add esp, 4
test eax, eax
je 0x40fdb4
xor edi, edi
push edi
push 0x40f640
mov dword [0x42a7b4], eax
mov dword [0x42a7b8], edi
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x3c4], edi
cmp dword [0x42a7b8], edi
jbe 0x40fedf
mov edx, dword [0x42a7b4]
mov eax, dword [ebp - 0x3c4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40fe05
mov ecx, dword [esi + 4]
sub eax, edx
mov edx, dword [esi]
mov edi, eax
lea ebx, [edi + ecx + 1]
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x3bc]
push ebx
push eax
call fcn.004127f9
add esp, 8
test eax, eax
je 0x40fe1f
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x40fe59
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x40fe47
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov byte [eax + ecx], 0
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add edi, 2
lea ecx, [ecx]
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x40fe70
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + 1]
cmp eax, edx
jae 0x40fea2
mov ecx, 0x425d0c
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
inc edx
cmp eax, edx
jb 0x40fe91
inc dword [esi + 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edi, dword [ebp - 0x3c4]
mov byte [eax + ecx], 0
mov edx, dword [0x42a7b4]
mov eax, dword [edx + edi*4]
test eax, eax
je 0x40feca
push eax
call fcn.0041272b
add esp, 4
inc edi
mov dword [ebp - 0x3c4], edi
cmp edi, dword [0x42a7b8]
jb 0x40fded
xor edi, edi
mov eax, dword [0x42a7b4]
cmp eax, edi
je 0x40fef1
push eax
call fcn.0041272b
add esp, 4
cmp byte [0x429fd4], 0
je 0x40ff13
lea ebx, [ebx]
push 0x32
call fcn.00412e68
add esp, 4
cmp byte [0x429fd4], 0
jne 0x40ff00
mov ecx, dword [0x429fcc]
cmp ecx, edi
je 0x40ff47
mov edx, dword [0x429fd0]
xor eax, eax
cmp edx, edi
jbe 0x40ff47
lea esp, [esp]
mov ebx, dword [ecx + eax*4]
cmp dword [ebx], fcn.0040f700
je 0x40ff42
inc eax
cmp eax, edx
jb 0x40ff30
jmp 0x40ff47
mov eax, ebx
mov dword [eax + 4], edi
mov edi, dword [esi + 4]
mov ebx, dword [esi]
mov byte [0x429fd4], 0
add edi, 3
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x40ff56
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + 2]
cmp eax, ecx
jae 0x40ff8a
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x40ff77
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0x110
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x440]
add esp, 4
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40ffc0
mov ecx, dword [esi]
sub eax, edx
mov edi, eax
mov eax, dword [esi + 4]
lea ebx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
lea ebx, [ebx]
mov edx, dword [ebp - 0x3bc]
push ebx
push edx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x40ffe0
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x41001a
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410008
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0
push 2
mov byte [eax + ecx], 0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x3c4], eax
test eax, eax
je 0x410146
lea edx, [ebp - 0x290]
push edx
push eax
mov dword [ebp - 0x290], 0x128
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x410139
mov edi, edi
lea eax, [ebp - 0x26c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410070
mov ecx, dword [esi + 4]
sub eax, edx
mov edx, dword [esi]
mov edi, eax
lea ebx, [edi + ecx + 1]
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x3bc]
push ebx
push eax
call fcn.004127f9
add esp, 8
test eax, eax
je 0x41008a
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x4100c4
lea ecx, [ebp - 0x26c]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x4100b2
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov byte [eax + ecx], 0
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add edi, 2
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x4100d8
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + 1]
cmp eax, edx
jae 0x410111
mov ecx, 0x425d0c
sub ecx, eax
lea esp, [esp]
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
inc edx
cmp eax, edx
jb 0x410100
inc dword [esi + 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [ebp - 0x290]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x3c4]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x410060
mov ecx, dword [ebp - 0x3c4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add edi, 3
mov edi, edi
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410150
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + 2]
cmp eax, edx
jae 0x410184
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x410171
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0x111
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x444]
add esp, 4
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4101b3
mov ecx, dword [esi]
sub eax, edx
mov edi, eax
mov eax, dword [esi + 4]
lea ebx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
push ebx
push edx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x4101cd
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x410207
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x4101f5
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 9
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x24]
add esp, 4
push eax
call fcn.0041356b
add esp, 4
mov ebx, eax
test eax, eax
jne 0x41023a
mov ebx, 0x423572
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410240
sub eax, edx
lea edi, [eax + 8]
lea esp, [esp]
push edi
call fcn.00412765
add esp, 4
mov dword [ebp - 0x3bc], eax
test eax, eax
je 0x410250
push ebx
mov edi, eax
push str._s.
push edi
call fcn.004128a6
add esp, 0xc
lea eax, [ebp - 0x3b8]
push eax
push edi
call fcn.004137e9
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x41034a
cmp ebx, 0xffffffff
je 0x41034a
jmp 0x4102a0
mov ecx, 0x425b7c
lea eax, [ebp - 0x394]
jmp 0x4102b0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4102d0
test dl, dl
je 0x4102cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4102d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4102b0
xor eax, eax
jmp 0x4102d5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x410329
mov ecx, 0x425b80
lea eax, [ebp - 0x394]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x410304
test dl, dl
je 0x410300
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x410304
add eax, 2
add ecx, 2
test dl, dl
jne 0x4102e4
xor eax, eax
jmp 0x410309
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x410329
lea ecx, [ebp - 0x394]
push ecx
call fcn.004031d0
add esp, 4
push 0x425d0c
call fcn.004031d0
add esp, 4
lea edx, [ebp - 0x3b8]
push edx
push ebx
call fcn.00413910
add esp, 8
test eax, eax
je 0x4102a0
push ebx
call fcn.00413a3e
add esp, 4
push edi
call fcn.0041272b
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add esp, 4
add edi, 3
jmp 0x410360
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410360
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + 2]
cmp eax, ecx
jae 0x410394
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x410381
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0x112
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x448]
add esp, 4
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4103c3
mov ecx, dword [esi]
sub eax, edx
mov edi, eax
mov eax, dword [esi + 4]
lea ebx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
lea ecx, [ecx]
mov edx, dword [ebp - 0x3bc]
push ebx
push edx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x4103e0
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x41041a
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410408
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push fcn.0040f700
mov byte [eax + ecx], 0
call fcn.00402c80
add esp, 4
push 4
call fcn.00412765
add esp, 4
test eax, eax
je 0x410433
mov dword [0x42a7bc], eax
push 4
call fcn.00412765
add esp, 4
test eax, eax
je 0x410446
xor edi, edi
push edi
mov dword [0x42a7c0], eax
mov dword [0x42a7c4], edi
call fcn.0040f700
add esp, 4
mov dword [ebp - 0x3cc], edi
cmp dword [0x42a7c4], edi
jbe 0x410753
lea esp, [esp]
mov edx, dword [0x42a7c0]
mov edi, dword [ebp - 0x3cc]
mov eax, dword [edx + edi*4]
cmp eax, 6
ja case.default.0x410498
jmp dword [eax*4 + 0x410fe0]
push 0x11c
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x470]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4104c0
jmp 0x41061a
push 0x11d
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x474]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4104f0
jmp 0x41061a
push 0x11e
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x478]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x410520
jmp 0x41061a
push 0x11f
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x47c]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x410550
jmp 0x41061a
push 0x120
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x480]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x410580
jmp 0x41061a
push 0x121
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x484]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4105b0
jmp 0x41061a
push 0x122
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x488]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4105e0
jmp 0x41061a
push 0x123
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x48c]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x410610
mov edx, dword [0x42a7bc]
mov eax, dword [edx + edi*4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410626
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x108]
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410640
sub eax, edi
lea edi, [edx + eax + 0x2e]
lea ecx, [ecx]
push edi
call fcn.00412765
mov ebx, eax
add esp, 4
mov dword [ebp - 0x3e4], ebx
test ebx, ebx
je 0x410650
push 0x119
call fcn.00403fe0
mov eax, dword [0x42a7bc]
mov ecx, dword [ebp - 0x3cc]
mov edx, dword [eax + ecx*4]
mov ecx, dword [0x42a118]
add esp, 4
push edx
mov edx, dword [ecx + 0x464]
lea eax, [ebp - 0x108]
push eax
push edx
push ebx
call fcn.004128a6
mov eax, ebx
add esp, 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4106a3
sub eax, edx
mov edx, dword [esi]
mov edi, eax
mov eax, dword [esi + 4]
lea ecx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c0], edx
mov eax, dword [ebp - 0x3bc]
mov ecx, dword [ebp - 0x3c0]
push eax
push ecx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x4106c3
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + edi]
cmp eax, edx
jae 0x410708
mov ecx, ebx
sub ecx, eax
lea ecx, [ecx]
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x4106f0
mov ebx, dword [ebp - 0x3e4]
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push ebx
mov byte [eax + ecx], 0
call fcn.0041272b
mov edx, dword [ebp - 0x3cc]
mov eax, dword [0x42a7bc]
mov eax, dword [eax + edx*4]
add esp, 4
test eax, eax
je 0x410738
push eax
call fcn.0041272b
add esp, 4
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp eax, dword [0x42a7c4]
jb 0x410480
xor edi, edi
mov eax, dword [0x42a7bc]
cmp eax, edi
je 0x410765
push eax
call fcn.0041272b
add esp, 4
mov eax, dword [0x42a7c0]
cmp eax, edi
je 0x410777
push eax
call fcn.0041272b
add esp, 4
cmp byte [0x429fd4], 0
je 0x410793
push 0x32
call fcn.00412e68
add esp, 4
cmp byte [0x429fd4], 0
jne 0x410780
mov ecx, dword [0x429fcc]
cmp ecx, edi
je 0x4107c7
mov edx, dword [0x429fd0]
xor eax, eax
cmp edx, edi
jbe 0x4107c7
lea esp, [esp]
mov ebx, dword [ecx + eax*4]
cmp dword [ebx], fcn.0040f700
je 0x4107c2
inc eax
cmp eax, edx
jb 0x4107b0
jmp 0x4107c7
mov ecx, ebx
mov dword [ecx + 4], edi
mov edi, dword [esi + 4]
mov ebx, dword [esi]
mov byte [0x429fd4], 0
add edi, 3
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x4107d6
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + 2]
cmp eax, edx
jae 0x41080a
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x4107f7
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0x113
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x44c]
add esp, 4
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410840
mov ecx, dword [esi]
sub eax, edx
mov edi, eax
mov eax, dword [esi + 4]
lea ebx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
lea ebx, [ebx]
mov edx, dword [ebp - 0x3bc]
push ebx
push edx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410860
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x41089a
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [ecx + eax]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410888
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov byte [eax + ecx], 0
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
xor edi, edi
xor ecx, ecx
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3d8], 0x5c3a41
mov dword [ebp - 0x3d0], ecx
mov eax, 1
shl eax, cl
lea edx, [ecx + 0x41]
mov byte [ebp - 0x3d8], dl
test dword [ebp - 0x3bc], eax
je 0x410b1d
lea eax, [ebp - 0x3d8]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0x4108fb
jmp dword [eax*4 + 0x410ffc]
push 0x124
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x490]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x410923
jmp 0x4109ea
push 0x125
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x494]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x410953
jmp 0x4109ea
push 0x126
call fcn.00403fe0
mov eax, dword [0x42a118]
mov eax, dword [eax + 0x498]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x410982
jmp 0x4109ea
push 0x127
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov eax, dword [ecx + 0x49c]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4109b2
jmp 0x4109ea
push 0x128
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x4a0]
lea edx, [ebp - 0x108]
add esp, 4
sub edx, eax
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4109e0
push edi
push edi
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x3d8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
jne 0x410a10
mov dword [ebp - 0x3e8], edi
mov dword [ebp - 0x3e4], edi
lea eax, [ebp - 0x3d8]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410a20
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x108]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410a34
sub eax, edi
lea ebx, [eax + edx + 0x5f]
push ebx
call fcn.00412765
mov edi, eax
add esp, 4
mov dword [ebp - 0x3c8], edi
test edi, edi
je 0x410a41
push 0x11a
call fcn.00403fe0
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x3e4]
shrd edx, eax, 0x1e
add esp, 4
shr eax, 0x1e
push eax
mov eax, dword [0x42a118]
push edx
lea ecx, [ebp - 0x108]
push ecx
mov ecx, dword [eax + 0x468]
lea edx, [ebp - 0x3d8]
push edx
push ecx
push edi
call fcn.004128a6
mov eax, edi
add esp, 0x18
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410aa0
sub eax, edx
mov edx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
lea ebx, [edi + edx + 1]
mov dword [ebp - 0x3c0], eax
lea ebx, [ebx]
mov ecx, dword [ebp - 0x3c0]
push ebx
push ecx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410ac0
mov dword [esi], eax
mov eax, dword [esi + 4]
lea edx, [eax + edi]
cmp eax, edx
jae 0x410afa
mov ecx, dword [ebp - 0x3c8]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [eax + ecx]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410ae8
add dword [esi + 4], edi
mov edx, dword [ebp - 0x3c8]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
mov byte [eax + ecx], 0
call fcn.0041272b
mov ecx, dword [ebp - 0x3d0]
add esp, 4
xor edi, edi
inc ecx
mov dword [ebp - 0x3d0], ecx
cmp ecx, 0x1a
jb 0x4108c6
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add edi, 3
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410b35
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + 2]
cmp eax, ecx
jae 0x410b69
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [eax + ecx]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x410b56
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0x114
mov byte [eax + ecx], 0
call fcn.00403fe0
mov edx, dword [0x42a118]
mov eax, dword [edx + 0x450]
add esp, 4
mov dword [ebp - 0x3c0], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410b98
mov ecx, dword [esi]
sub eax, edx
mov edi, eax
mov eax, dword [esi + 4]
lea ebx, [edi + eax + 1]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
push ebx
push edx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410bb2
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x410bf2
mov ecx, dword [ebp - 0x3c0]
sub ecx, eax
lea ebx, [ebx]
mov edx, dword [esi]
mov bl, byte [eax + ecx]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410be0
add dword [esi + 4], edi
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov byte [eax + ecx], 0
push 0x129
mov dword [ebp - 0x3dc], 0
call fcn.00403fe0
mov eax, dword [0x42a118]
mov ecx, dword [eax + 0x4a4]
add esp, 4
lea edx, [ebp - 0x3dc]
push edx
push ecx
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov eax, dword [ebp - 0x3dc]
test eax, eax
je 0x410f3f
push 0x100
lea edx, [ebp - 0x108]
push edx
push 0
push eax
mov dword [ebp - 0x3d4], 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x410f32
jmp 0x410c70
lea eax, [ebp - 0x108]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410c80
sub eax, edx
lea edi, [eax + 0x31]
lea esp, [esp]
push edi
call fcn.00412765
add esp, 4
mov dword [ebp - 0x3c4], eax
test eax, eax
je 0x410c90
push 0x129
call fcn.00403fe0
mov ecx, dword [0x42a118]
mov edx, dword [ecx + 0x4a4]
add esp, 4
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x3c4]
push edx
push 0x425b20
push eax
call fcn.004128a6
push 0x12a
call fcn.00403fe0
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [0x42a118]
mov edi, dword [ecx + 0x4a8]
add esp, 0x14
lea edx, [ebp - 0x3c8]
push edx
push 0x20019
push 0
push eax
xor bl, bl
push connect
mov byte [ebp - 0x270], bl
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x410ef4
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x270]
push edx
push 0
push 0
push edi
push eax
mov dword [ebp - 0x3bc], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x410d4e
mov bl, 1
mov eax, dword [ebp - 0x3c8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test bl, bl
je 0x410ef4
lea eax, [ebp - 0x270]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410d70
sub eax, edx
lea edi, [eax + 1]
lea esp, [esp]
push edi
call fcn.00412765
mov ebx, eax
add esp, 4
mov dword [ebp - 0x3c0], ebx
test ebx, ebx
je 0x410d80
push ebx
push 0
push 0
lea ecx, [ebp - 0x270]
push 0
push ecx
call fcn.00413c5c
add esp, 0x14
push 0x14
call fcn.00403fe0
mov edx, dword [0x42a118]
mov ecx, dword [edx + 0x50]
add esp, 4
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x410de0
test dl, dl
je 0x410ddc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x410de0
add eax, 2
add ecx, 2
test dl, dl
jne 0x410dc0
xor eax, eax
jmp 0x410de5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x410eeb
lea eax, [ebp - 0x270]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410df6
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x108]
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410e10
sub eax, edi
lea ebx, [edx + eax + 0x18]
lea ecx, [ecx]
push ebx
call fcn.00412765
mov edi, eax
add esp, 4
mov dword [ebp - 0x3d0], edi
test edi, edi
je 0x410e20
push 0x11b
call fcn.00403fe0
mov edx, dword [0x42a118]
add esp, 4
lea eax, [ebp - 0x108]
push eax
mov eax, dword [edx + 0x46c]
lea ecx, [ebp - 0x270]
push ecx
push eax
push edi
call fcn.004128a6
mov eax, edi
add esp, 0x10
lea edx, [eax + 1]
jmp 0x410e70
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410e70
mov ecx, dword [esi + 4]
sub eax, edx
mov edx, dword [esi]
mov edi, eax
lea ebx, [edi + ecx + 1]
mov dword [ebp - 0x3bc], edx
lea ebx, [ebx]
mov eax, dword [ebp - 0x3bc]
push ebx
push eax
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410e90
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + edi]
cmp eax, ecx
jae 0x410eca
mov ecx, dword [ebp - 0x3d0]
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [eax + ecx]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, edi
cmp eax, edx
jb 0x410eb8
add dword [esi + 4], edi
mov edx, dword [ebp - 0x3d0]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
mov byte [eax + ecx], 0
call fcn.0041272b
mov ebx, dword [ebp - 0x3c0]
add esp, 4
push ebx
call fcn.0041272b
add esp, 4
mov eax, dword [ebp - 0x3c4]
push eax
call fcn.0041272b
mov eax, dword [ebp - 0x3d4]
mov edx, dword [ebp - 0x3dc]
add esp, 4
push 0x100
lea ecx, [ebp - 0x108]
inc eax
push ecx
push eax
push edx
mov dword [ebp - 0x3d4], eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x410c70
mov eax, dword [ebp - 0x3dc]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [esi + 4]
mov ebx, dword [esi]
add edi, 3
push edi
push ebx
call fcn.004127f9
add esp, 8
test eax, eax
je 0x410f47
mov dword [esi], eax
mov eax, dword [esi + 4]
lea ecx, [eax + 2]
cmp eax, ecx
jae 0x410f7b
mov ecx, 0x425d10
sub ecx, eax
mov edx, dword [esi]
mov bl, byte [eax + ecx]
mov byte [eax + edx], bl
mov edx, dword [esi + 4]
inc eax
add edx, 2
cmp eax, edx
jb 0x410f68
add dword [esi + 4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov byte [eax + ecx], 0
mov edi, dword [esi + 4]
inc edi
lea esp, [esp]
push edi
call fcn.00412765
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x410f90
mov ecx, dword [esi]
mov edx, ebx
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x410fa3
mov eax, dword [esi]
mov dword [esi + 4], 0
test eax, eax
je 0x410fc3
push eax
call fcn.0041272b
add esp, 4
push esi
call fcn.0041272b
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.004118d8
mov esp, ebp
pop ebp
ret