Function at 0x401160
Capabilities:
Create process on windows
Query or enumerate registry value
Self delete
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3752c
call fcn.00413070
mov eax, dword [0x47a540]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
xor eax, eax
push esi
push edi
push 0xc7
push eax
mov dword [ebp - 0x3752c], eax
mov dword [ebp - 0x374f0], eax
mov dword [ebp - 0x37524], eax
mov dword [ebp - 0x37528], eax
mov byte [ebp - 0xfc0], al
lea eax, [ebp - 0xfbf]
push eax
mov dword [ebp - 0x374e8], ebx
mov dword [ebp - 0x374ec], 0
mov dword [ebp - 0x37500], 0
mov dword [ebp - 0x374f4], 0
mov dword [ebp - 0x37504], 0
mov dword [ebp - 0x374f8], 0
mov dword [ebp - 0x37514], 0
mov dword [ebp - 0x37510], 0
mov dword [ebp - 0x37520], 0xa
mov dword [ebp - 0x3750c], 0
mov dword [ebp - 0x3751c], 0
mov dword [ebp - 0x374fc], 0
mov dword [ebp - 0x37518], 0
call fcn.004143a0
push 0x159
xorps xmm0, xmm0
mov byte [ebp - 0x80], 0
lea eax, [ebp - 0xd67]
mov byte [ebp - 0x6c], 0
push 0
push eax
movups xmmword [ebp - 0x7f], xmm0
mov word [ebp - 0x63], 0
movq qword [ebp - 0x6b], xmm0
mov byte [ebp - 0xd68], 0
call fcn.004143a0
xorps xmm0, xmm0
mov byte [ebp - 0x220], 0
movups xmmword [ebp - 0x21f], xmm0
mov dword [ebp - 0x207], 0
movq qword [ebp - 0x20f], xmm0
mov word [ebp - 0x203], 0
mov byte [ebp - 0x240], 0
movups xmmword [ebp - 0x23f], xmm0
mov dword [ebp - 0x227], 0
movq qword [ebp - 0x22f], xmm0
mov word [ebp - 0x223], 0
mov byte [ebp - 0x260], 0
movups xmmword [ebp - 0x25f], xmm0
mov dword [ebp - 0x247], 0
movq qword [ebp - 0x24f], xmm0
mov word [ebp - 0x243], 0
mov byte [ebp - 0x200], 0
movups xmmword [ebp - 0x1ff], xmm0
mov dword [ebp - 0x1e7], 0
movq qword [ebp - 0x1ef], xmm0
mov word [ebp - 0x1e3], 0
mov byte [ebp - 0x1c0], 0
movups xmmword [ebp - 0x1bf], xmm0
mov dword [ebp - 0x1a7], 0
movq qword [ebp - 0x1af], xmm0
mov word [ebp - 0x1a3], 0
mov byte [ebp - 0x1a0], 0
movups xmmword [ebp - 0x19f], xmm0
mov dword [ebp - 0x187], 0
movq qword [ebp - 0x18f], xmm0
mov byte [ebp - 0x183], 0
mov byte [ebp - 0xb8], 0
movups xmmword [ebp - 0xb7], xmm0
mov word [ebp - 0xa7], 0
mov byte [ebp - 0xa5], 0
mov byte [ebp - 0x1e0], 0
movups xmmword [ebp - 0x1df], xmm0
mov dword [ebp - 0x1c7], 0
movq qword [ebp - 0x1cf], xmm0
mov word [ebp - 0x1c3], 0
mov byte [ebp - 0x410], 0
push 0x3b
lea eax, [ebp - 0x40f]
push 0
push eax
call fcn.004143a0
push 0xc7
xorps xmm0, xmm0
mov byte [ebp - 0x28], 0
lea eax, [ebp - 0x8eb]
movq qword [ebp - 0x27], xmm0
push 0
push eax
mov byte [ebp - 0x1c], 0
movq qword [ebp - 0x1b], xmm0
mov byte [ebp - 0x13], 0
mov byte [ebp - 0x8ec], 0
call fcn.004143a0
push 0x63
lea eax, [ebp - 0x473]
mov byte [ebp - 0x474], 0
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0xe2f]
mov byte [ebp - 0xe30], 0
push 0
push eax
call fcn.004143a0
add esp, 0x48
mov byte [ebp - 0x1ee44], 0
lea eax, [ebp - 0x1ee43]
push 0xc34f
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0xef7]
mov byte [ebp - 0xef8], 0
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0x9b3]
mov byte [ebp - 0x9b4], 0
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0xc0b]
mov byte [ebp - 0xc0c], 0
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0xb43]
mov byte [ebp - 0xb44], 0
push 0
push eax
call fcn.004143a0
push 0xc7
lea eax, [ebp - 0x823]
mov byte [ebp - 0x824], 0
push 0
push eax
call fcn.004143a0
add esp, 0x48
mov byte [ebp - 0x75c], 0
lea eax, [ebp - 0x75b]
push 0xc7
push 0
push eax
call fcn.004143a0
xorps xmm0, xmm0
mov byte [ebp - 0x98], 0
movq qword [ebp - 0x97], xmm0
mov word [ebp - 0x8f], 0
mov byte [ebp - 0x8d], 0
mov byte [ebp - 0x8c], 0
movq qword [ebp - 0x8b], xmm0
mov word [ebp - 0x83], 0
push 0x31
lea eax, [ebp - 0x4db]
mov byte [ebp - 0x81], 0
push 0
push eax
mov byte [ebp - 0xa4], 0
movq qword [ebp - 0xa3], xmm0
mov word [ebp - 0x9b], 0
mov byte [ebp - 0x99], 0
mov byte [ebp - 0x4dc], 0
call fcn.004143a0
push 0x31
lea eax, [ebp - 0x4a7]
mov byte [ebp - 0x4a8], 0
push 0
push eax
call fcn.004143a0
push 0x31
lea eax, [ebp - 0x55f]
mov byte [ebp - 0x560], 0
push 0
push eax
call fcn.004143a0
push 0x31
lea eax, [ebp - 0x593]
mov byte [ebp - 0x594], 0
push 0
push eax
call fcn.004143a0
push 0x3e7
lea eax, [ebp - 0x4093]
mov byte [ebp - 0x4094], 0
push 0
push eax
call fcn.004143a0
add esp, 0x48
mov byte [ebp - 0x288], 0
lea eax, [ebp - 0x287]
push 0x27
push 0
push eax
call fcn.004143a0
push 0x4f
lea eax, [ebp - 0x30b]
mov byte [ebp - 0x30c], 0
push 0
push eax
call fcn.004143a0
push 0x4f
lea eax, [ebp - 0x52b]
mov byte [ebp - 0x52c], 0
push 0
push eax
call fcn.004143a0
mov esi, dword [ebp + 8]
add esp, 0x24
cmp esi, 1
je 0x405a1c
xor edi, edi
mov dword [ebp - 0x37508], edi
test esi, esi
jle 0x4028cb
mov edx, dword [ebx + edi*4]
mov ecx, str._version
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401640
test bl, bl
je 0x40163c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401640
add eax, 2
add ecx, 2
test bl, bl
jne 0x401620
xor eax, eax
jmp 0x401645
sbb eax, eax
or eax, 1
test eax, eax
je 0x40531e
mov ecx, str._SystemIsarm64
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401674
test bl, bl
je 0x401670
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401674
add eax, 2
add ecx, 2
test bl, bl
jne 0x401654
xor eax, eax
jmp 0x401679
sbb eax, eax
or eax, 1
test eax, eax
je 0x403d75
mov ecx, str._SystemIsX86_64
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4016a8
test bl, bl
je 0x4016a4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4016a8
add eax, 2
add ecx, 2
test bl, bl
jne 0x401688
xor eax, eax
jmp 0x4016ad
sbb eax, eax
or eax, 1
test eax, eax
je 0x403d53
mov ecx, str._debug
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4016e0
test bl, bl
je 0x4016dc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4016e0
add eax, 2
add ecx, 2
test bl, bl
jne 0x4016c0
xor eax, eax
jmp 0x4016e5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401712
push eax
push eax
call fcn.0040abb0
push eax
push str.Drive:__s_n
call fcn.00405c20
add esp, 0x10
mov dword [ebp - 0x374ec], 1
call fcn.0040d170
jmp 0x4028b6
mov ecx, str._CheckAddressInRange
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401740
test bl, bl
je 0x40173c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401740
add eax, 2
add ecx, 2
test bl, bl
jne 0x401720
xor eax, eax
jmp 0x401745
sbb eax, eax
or eax, 1
test eax, eax
je 0x403b2f
mov ecx, str._SystemWaitForFile
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401774
test bl, bl
je 0x401770
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401774
add eax, 2
add ecx, 2
test bl, bl
jne 0x401754
xor eax, eax
jmp 0x401779
sbb eax, eax
or eax, 1
test eax, eax
je 0x403ae9
mov ecx, str._tasklist
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4017a8
test bl, bl
je 0x4017a4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4017a8
add eax, 2
add ecx, 2
test bl, bl
jne 0x401788
xor eax, eax
jmp 0x4017ad
sbb eax, eax
or eax, 1
test eax, eax
je 0x403aad
mov ecx, str._showmac
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4017e0
test bl, bl
je 0x4017dc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4017e0
add eax, 2
add ecx, 2
test bl, bl
jne 0x4017c0
xor eax, eax
jmp 0x4017e5
sbb eax, eax
or eax, 1
test eax, eax
je 0x403a96
mov ecx, str._sendkeys
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401814
test bl, bl
je 0x401810
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401814
add eax, 2
add ecx, 2
test bl, bl
jne 0x4017f4
xor eax, eax
jmp 0x401819
sbb eax, eax
or eax, 1
test eax, eax
je 0x4039f2
mov ecx, str._CloseTabPID
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401848
test bl, bl
je 0x401844
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401848
add eax, 2
add ecx, 2
test bl, bl
jne 0x401828
xor eax, eax
jmp 0x40184d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4039c3
mov ecx, str._CloseProgramPID
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401880
test bl, bl
je 0x40187c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401880
add eax, 2
add ecx, 2
test bl, bl
jne 0x401860
xor eax, eax
jmp 0x401885
sbb eax, eax
or eax, 1
test eax, eax
je 0x403979
mov ecx, str._CompareTaskList
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4018b4
test bl, bl
je 0x4018b0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4018b4
add eax, 2
add ecx, 2
test bl, bl
jne 0x401894
xor eax, eax
jmp 0x4018b9
sbb eax, eax
or eax, 1
test eax, eax
je 0x403821
mov ecx, str._getcurrentusername
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4018e8
test bl, bl
je 0x4018e4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4018e8
add eax, 2
add ecx, 2
test bl, bl
jne 0x4018c8
xor eax, eax
jmp 0x4018ed
sbb eax, eax
or eax, 1
test eax, eax
je 0x4037fa
mov ecx, str._remove_trailing_space
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401920
test bl, bl
je 0x40191c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401920
add eax, 2
add ecx, 2
test bl, bl
jne 0x401900
xor eax, eax
jmp 0x401925
sbb eax, eax
or eax, 1
test eax, eax
je 0x4037bf
mov ecx, str._deviceid_underscore
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401954
test bl, bl
je 0x401950
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401954
add eax, 2
add ecx, 2
test bl, bl
jne 0x401934
xor eax, eax
jmp 0x401959
sbb eax, eax
or eax, 1
test eax, eax
je 0x403785
mov ecx, str._truncate_colon
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401988
test bl, bl
je 0x401984
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401988
add eax, 2
add ecx, 2
test bl, bl
jne 0x401968
xor eax, eax
jmp 0x40198d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4019a0
mov dword [ebp - 0x3752c], 1
jmp 0x4028b6
mov ecx, str._truncate_comma
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4019c7
test bl, bl
je 0x4019c3
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4019c7
add eax, 2
add ecx, 2
test bl, bl
jne 0x4019a7
xor eax, eax
jmp 0x4019cc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4019df
mov dword [ebp - 0x37524], 1
jmp 0x4028b6
mov ecx, str._truncate_space
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401a06
test bl, bl
je 0x401a02
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401a06
add eax, 2
add ecx, 2
test bl, bl
jne 0x4019e6
xor eax, eax
jmp 0x401a0b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401a1e
mov dword [ebp - 0x374f0], 1
jmp 0x4028b6
mov ecx, str._remove_leading_dash
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401a45
test bl, bl
je 0x401a41
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401a45
add eax, 2
add ecx, 2
test bl, bl
jne 0x401a25
xor eax, eax
jmp 0x401a4a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401a5d
mov dword [ebp - 0x37528], 1
jmp 0x4028b6
mov ecx, str._truncate_after_alpha
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401a84
test bl, bl
je 0x401a80
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401a84
add eax, 2
add ecx, 2
test bl, bl
jne 0x401a64
xor eax, eax
jmp 0x401a89
sbb eax, eax
or eax, 1
test eax, eax
je 0x4036f8
mov ecx, str._extract_after_alpha
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401ab8
test bl, bl
je 0x401ab4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401ab8
add eax, 2
add ecx, 2
test bl, bl
jne 0x401a98
xor eax, eax
jmp 0x401abd
sbb eax, eax
or eax, 1
test eax, eax
je 0x403650
mov ecx, str._restrict_strings
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401af0
test bl, bl
je 0x401aec
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401af0
add eax, 2
add ecx, 2
test bl, bl
jne 0x401ad0
xor eax, eax
jmp 0x401af5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401b04
lea eax, [ebp - 0x75c]
jmp 0x402677
mov ecx, str._string_remove
mov eax, edx
nop dword [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401b30
test bl, bl
je 0x401b2c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401b30
add eax, 2
add ecx, 2
test bl, bl
jne 0x401b10
xor eax, eax
jmp 0x401b35
sbb eax, eax
or eax, 1
test eax, eax
je 0x403590
mov ecx, str._string_present
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401b64
test bl, bl
je 0x401b60
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401b64
add eax, 2
add ecx, 2
test bl, bl
jne 0x401b44
xor eax, eax
jmp 0x401b69
sbb eax, eax
or eax, 1
test eax, eax
je 0x4034c5
mov ecx, str._remove_leading_space
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401b98
test bl, bl
je 0x401b94
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401b98
add eax, 2
add ecx, 2
test bl, bl
jne 0x401b78
xor eax, eax
jmp 0x401b9d
sbb eax, eax
or eax, 1
test eax, eax
je 0x40348d
mov ecx, str._extract_after_comma_count
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401bd0
test bl, bl
je 0x401bcc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401bd0
add eax, 2
add ecx, 2
test bl, bl
jne 0x401bb0
xor eax, eax
jmp 0x401bd5
sbb eax, eax
or eax, 1
test eax, eax
je 0x403403
mov ecx, str._extract_after_comma
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401c04
test bl, bl
je 0x401c00
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401c04
add eax, 2
add ecx, 2
test bl, bl
jne 0x401be4
xor eax, eax
jmp 0x401c09
sbb eax, eax
or eax, 1
test eax, eax
je 0x4033cc
mov ecx, str._extract_after_colon
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401c38
test bl, bl
je 0x401c34
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401c38
add eax, 2
add ecx, 2
test bl, bl
jne 0x401c18
xor eax, eax
jmp 0x401c3d
sbb eax, eax
or eax, 1
test eax, eax
je 0x40336a
mov ecx, str._extract_before_dash_or_colon
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401c70
test bl, bl
je 0x401c6c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401c70
add eax, 2
add ecx, 2
test bl, bl
jne 0x401c50
xor eax, eax
jmp 0x401c75
sbb eax, eax
or eax, 1
test eax, eax
je 0x4032e1
mov ecx, str._extract_before_colon
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401ca4
test bl, bl
je 0x401ca0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401ca4
add eax, 2
add ecx, 2
test bl, bl
jne 0x401c84
xor eax, eax
jmp 0x401ca9
sbb eax, eax
or eax, 1
test eax, eax
je 0x4032c4
mov ecx, str._extract_before_dash
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401cd8
test bl, bl
je 0x401cd4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401cd8
add eax, 2
add ecx, 2
test bl, bl
jne 0x401cb8
xor eax, eax
jmp 0x401cdd
sbb eax, eax
or eax, 1
test eax, eax
je 0x40327e
mov ecx, str._find_dash_or_colon
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401d10
test bl, bl
je 0x401d0c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401d10
add eax, 2
add ecx, 2
test bl, bl
jne 0x401cf0
xor eax, eax
jmp 0x401d15
sbb eax, eax
or eax, 1
test eax, eax
je 0x403178
mov ecx, str._extract_after_dash_or_colon
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401d44
test bl, bl
je 0x401d40
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401d44
add eax, 2
add ecx, 2
test bl, bl
jne 0x401d24
xor eax, eax
jmp 0x401d49
sbb eax, eax
or eax, 1
test eax, eax
je 0x4030b8
mov ecx, str._extract_after_dash
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401d78
test bl, bl
je 0x401d74
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401d78
add eax, 2
add ecx, 2
test bl, bl
jne 0x401d58
xor eax, eax
jmp 0x401d7d
sbb eax, eax
or eax, 1
test eax, eax
je 0x403023
mov ecx, str._extract_after_space
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401db0
test bl, bl
je 0x401dac
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401db0
add eax, 2
add ecx, 2
test bl, bl
jne 0x401d90
xor eax, eax
jmp 0x401db5
sbb eax, eax
or eax, 1
test eax, eax
je 0x402fab
mov ecx, str._cut_dash_number
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401de4
test bl, bl
je 0x401de0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401de4
add eax, 2
add ecx, 2
test bl, bl
jne 0x401dc4
xor eax, eax
jmp 0x401de9
sbb eax, eax
or eax, 1
test eax, eax
je 0x402f1f
mov ecx, str._smsipdial_dtsec
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401e18
test bl, bl
je 0x401e14
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401e18
add eax, 2
add ecx, 2
test bl, bl
jne 0x401df8
xor eax, eax
jmp 0x401e1d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401e57
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x11c]
push 0x64
push eax
push ebx
push esi
push edi
call fcn.004086f0
mov edi, eax
lea eax, [ebp - 0x11c]
push 0xc
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004094a0
add esp, 0x20
jmp 0x4028bc
mov ecx, str._lessthan
mov eax, edx
nop
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401e80
test bl, bl
je 0x401e7c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401e80
add eax, 2
add ecx, 2
test bl, bl
jne 0x401e60
xor eax, eax
jmp 0x401e85
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b95
mov ecx, str._greaterthan
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401eb4
test bl, bl
je 0x401eb0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401eb4
add eax, 2
add ecx, 2
test bl, bl
jne 0x401e94
xor eax, eax
jmp 0x401eb9
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b15
mov ecx, str._smsipdial_reference
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401ee8
test bl, bl
je 0x401ee4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401ee8
add eax, 2
add ecx, 2
test bl, bl
jne 0x401ec8
xor eax, eax
jmp 0x401eed
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401efe
push 0xc
lea eax, [ebp - 0x8c]
jmp 0x40267c
mov ecx, str._smsipdial_recordnumber
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401f25
test bl, bl
je 0x401f21
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401f25
add eax, 2
add ecx, 2
test bl, bl
jne 0x401f05
xor eax, eax
jmp 0x401f2a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401f3b
push 0xc
lea eax, [ebp - 0xa4]
jmp 0x40267c
mov ecx, str._read_file_and_replace
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401f62
test bl, bl
je 0x401f5e
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401f62
add eax, 2
add ecx, 2
test bl, bl
jne 0x401f42
xor eax, eax
jmp 0x401f67
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._urlencode
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401f96
test bl, bl
je 0x401f92
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401f96
add eax, 2
add ecx, 2
test bl, bl
jne 0x401f76
xor eax, eax
jmp 0x401f9b
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._previous_json
mov eax, edx
nop word [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x401fd0
test bl, bl
je 0x401fcc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x401fd0
add eax, 2
add ecx, 2
test bl, bl
jne 0x401fb0
xor eax, eax
jmp 0x401fd5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401fe4
lea eax, [ebp - 0xe30]
jmp 0x402677
mov ecx, str._remove_rows_and_cells
mov eax, edx
nop dword [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402010
test bl, bl
je 0x40200c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402010
add eax, 2
add ecx, 2
test bl, bl
jne 0x401ff0
xor eax, eax
jmp 0x402015
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._json
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402044
test bl, bl
je 0x402040
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402044
add eax, 2
add ecx, 2
test bl, bl
jne 0x402024
xor eax, eax
jmp 0x402049
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._exact_xml_tag
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402078
test bl, bl
je 0x402074
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402078
add eax, 2
add ecx, 2
test bl, bl
jne 0x402058
xor eax, eax
jmp 0x40207d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._xml_tag
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4020b0
test bl, bl
je 0x4020ac
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4020b0
add eax, 2
add ecx, 2
test bl, bl
jne 0x402090
xor eax, eax
jmp 0x4020b5
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._extract_field_after_match
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4020e4
test bl, bl
je 0x4020e0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4020e4
add eax, 2
add ecx, 2
test bl, bl
jne 0x4020c4
xor eax, eax
jmp 0x4020e9
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._extract_after_match
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402118
test bl, bl
je 0x402114
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402118
add eax, 2
add ecx, 2
test bl, bl
jne 0x4020f8
xor eax, eax
jmp 0x40211d
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._extract_after_string
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402150
test bl, bl
je 0x40214c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402150
add eax, 2
add ecx, 2
test bl, bl
jne 0x402130
xor eax, eax
jmp 0x402155
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402164
lea eax, [ebp - 0xef8]
jmp 0x402677
mov ecx, str._extract_subject
mov eax, edx
nop dword [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402190
test bl, bl
je 0x40218c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402190
add eax, 2
add ecx, 2
test bl, bl
jne 0x402170
xor eax, eax
jmp 0x402195
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._mime_content_type
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4021c4
test bl, bl
je 0x4021c0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4021c4
add eax, 2
add ecx, 2
test bl, bl
jne 0x4021a4
xor eax, eax
jmp 0x4021c9
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4021d8
lea eax, [ebp - 0x9b4]
jmp 0x402677
mov ecx, str._mime_file_output
mov eax, edx
nop
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402200
test bl, bl
je 0x4021fc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402200
add eax, 2
add ecx, 2
test bl, bl
jne 0x4021e0
xor eax, eax
jmp 0x402205
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402214
lea eax, [ebp - 0x824]
jmp 0x402677
mov ecx, str._mime_file
mov eax, edx
nop dword [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402240
test bl, bl
je 0x40223c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402240
add eax, 2
add ecx, 2
test bl, bl
jne 0x402220
xor eax, eax
jmp 0x402245
sbb eax, eax
or eax, 1
test eax, eax
je 0x402c2e
mov ecx, str._extract_after_subject
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402274
test bl, bl
je 0x402270
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402274
add eax, 2
add ecx, 2
test bl, bl
jne 0x402254
xor eax, eax
jmp 0x402279
sbb eax, eax
or eax, 1
test eax, eax
je 0x405b0e
mov ecx, str._m1w_or_upto_comma
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4022a8
test bl, bl
je 0x4022a4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4022a8
add eax, 2
add ecx, 2
test bl, bl
jne 0x402288
xor eax, eax
jmp 0x4022ad
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m1l
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4022e0
test bl, bl
je 0x4022dc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4022e0
add eax, 2
add ecx, 2
test bl, bl
jne 0x4022c0
xor eax, eax
jmp 0x4022e5
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m2l
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402314
test bl, bl
je 0x402310
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402314
add eax, 2
add ecx, 2
test bl, bl
jne 0x4022f4
xor eax, eax
jmp 0x402319
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m3l
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402348
test bl, bl
je 0x402344
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402348
add eax, 2
add ecx, 2
test bl, bl
jne 0x402328
xor eax, eax
jmp 0x40234d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m4l
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402380
test bl, bl
je 0x40237c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x402380
add eax, 2
add ecx, 2
test bl, bl
jne 0x402360
xor eax, eax
jmp 0x402385
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m1w
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4023b4
test bl, bl
je 0x4023b0
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4023b4
add eax, 2
add ecx, 2
test bl, bl
jne 0x402394
xor eax, eax
jmp 0x4023b9
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m2w
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x4023e8
test bl, bl
je 0x4023e4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x4023e8
xor eax, eax
jmp 0x4023ed
sbb eax, eax
or eax, 1
test eax, eax
je 0x4028b6
mov ecx, str._m3w
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x402420
push 0xc8
mov ebx, dword [ebp - 0x374e8]
push eax
push ebx
push esi
push edi
call fcn.004086f0
add esp, 0x14
mov edi, eax
jmp 0x4028bc
mov ebx, dword [ebp - 0x374e8]
inc edi
mov dword [ebp - 0x37508], edi
cmp edi, esi
jl 0x401613
push 0x2710
lea eax, [ebp - 0x12af4]
push 0
push eax
call fcn.004143a0
mov edi, dword [ebp - 0x374f8]
add esp, 0xc
test edi, edi
je 0x405328
mov esi, 1
cmp dword [ebp + 8], esi
jle 0x403ead
lea edi, [ebp - 0x12af4]
mov eax, dword [ebx + esi*4]
mov edx, 0x46baa0
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403d7c
test bl, bl
je 0x402934
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403d7c
add ecx, 2
add edx, 2
test bl, bl
jne 0x402910
xor ecx, ecx
jmp 0x403d81
xor ebx, ebx
lea eax, [ebp - 0x17f]
push 0xc7
push ebx
push eax
or esi, 0xffffffff
mov byte [ebp - 0x180], bl
call fcn.004143a0
push 0x1f3
lea eax, [ebp - 0x11b3]
mov byte [ebp - 0x11b4], bl
push ebx
push eax
call fcn.004143a0
push 0xc34f
lea eax, [ebp - 0x103e3]
mov byte [ebp - 0x103e4], bl
push ebx
push eax
call fcn.004143a0
push 0xc8
lea eax, [ebp - 0xb44]
push eax
push dword [ebp - 0x374e8]
mov eax, dword [ebp + 8]
push eax
push edi
call fcn.004086f0
lea eax, [ebp - 0xb44]
push ebx
push eax
call fcn.00440737
add esp, 0x40
mov dword [ebp - 0x374f0], eax
test eax, eax
jle 0x405aed
mov dword [ebp - 0x374f4], 1
nop
push 0xc350
lea ecx, [ebp - 0x103e4]
push ecx
push eax
call fcn.0040ddf0
add esp, 0xc
mov edi, eax
cmp dword [ebp - 0x374ec], 0
je 0x402cee
push edi
push str.SystemReadLine__ld_n
call fcn.00405c20
add esp, 8
test edi, edi
je 0x405abc
test ebx, ebx
jne 0x402d46
push 0x1f4
lea eax, [ebp - 0x103e4]
push eax
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040b920
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040b080
add esp, 0x10
cmp dword [ebp - 0x374ec], ebx
je 0x402f0b
lea eax, [ebp - 0x11b4]
push eax
push str.boundary__s_n
call fcn.00405c20
add esp, 8
jmp 0x402f0b
lea eax, [ebp - 0x11b4]
push eax
lea eax, [ebp - 0x103e4]
push eax
call fcn.00414130
add esp, 8
test eax, eax
je 0x402d98
cmp dword [ebp - 0x374ec], 0
je 0x402d7d
lea eax, [ebp - 0x103e4]
push eax
push str.boundary_found__s_n
call fcn.00405c20
add esp, 8
test esi, esi
jle 0x402f0b
push dword [ebp - 0x374f0]
call fcn.0043f18a
add esp, 4
jmp 0x405ace
test esi, esi
jle 0x402e28
cmp dword [ebp - 0x374f4], 0
je 0x402dd5
cmp dword [ebp - 0x374ec], 0
je 0x402dc6
lea eax, [ebp - 0x103e4]
push eax
push str.SystemReadLine_skipping_line__s_n
call fcn.00405c20
add esp, 8
mov dword [ebp - 0x374f4], 0
jmp 0x402f0b
cmp dword [ebp - 0x374ec], 0
je 0x402df2
lea eax, [ebp - 0x103e4]
push eax
push str.ls_write__s_n
call fcn.00405c20
add esp, 8
push edi
lea eax, [ebp - 0x103e4]
push eax
push esi
call fcn.0043d23b
add esp, 0xc
test eax, eax
jns 0x402f0b
push str.Error_writing_file_n
call fcn.00405c20
push dword [ebp - 0x374f0]
call fcn.0043f18a
add esp, 8
jmp 0x405ace
lea eax, [ebp - 0x103e4]
push str.Content_Disposition:
push eax
call fcn.00414130
add esp, 8
test eax, eax
je 0x402e81
push 0xc8
lea eax, [ebp - 0x103e4]
push eax
lea eax, [ebp - 0xc0c]
push eax
call fcn.0040b920
add esp, 0xc
cmp dword [ebp - 0x374ec], 0
je 0x402f0b
lea eax, [ebp - 0x103e4]
push eax
push str.Content_Disposition__s_n
call fcn.00405c20
add esp, 8
jmp 0x402f0b
lea eax, [ebp - 0x9b4]
push eax
lea eax, [ebp - 0x103e4]
push eax
call fcn.00414130
add esp, 8
test eax, eax
je 0x402f0b
cmp dword [ebp - 0x374ec], 0
je 0x402ebf
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x9b4]
push eax
push str.open__s__s_n
call fcn.00405c20
add esp, 0xc
lea eax, [ebp - 0x824]
push 0x102
push eax
call fcn.00440737
mov esi, eax
add esp, 8
test esi, esi
js 0x405a94
push str.filename_
push 0xc8
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0xc0c]
push eax
call fcn.0040a620
lea eax, [ebp - 0x180]
push 0x22
push eax
call fcn.0040b400
add esp, 0x18
inc ebx
test edi, edi
jle 0x405abc
mov eax, dword [ebp - 0x374f0]
jmp 0x402cc0
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
add esp, 0x14
xor esi, esi
nop dword [eax]
movsx eax, byte [ebp + esi - 0x11b4]
push eax
call fcn.0043c5a0
add esp, 4
test eax, eax
jne 0x402f69
inc esi
cmp esi, 0x1f4
jb 0x402f40
lea eax, [ebp - 0x11b4]
jmp 0x405b00
cmp esi, 0x1f4
jae 0x405c15
mov byte [ebp + esi - 0x11b4], 0
test esi, esi
jle 0x402fa0
dec esi
cmp byte [ebp + esi - 0x11b4], 0x2d
jne 0x402fa0
cmp esi, 0x1f4
jae 0x405c15
mov byte [ebp + esi - 0x11b4], 0
lea eax, [ebp - 0x11b4]
jmp 0x405b00
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x447c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x20
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x447c]
push eax
call fcn.0040a4c0
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b040
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x40
jmp 0x405b0e
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x447c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x2d
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x447c]
push eax
call fcn.0040a4c0
add esp, 0x30
cmp dword [ebp - 0x374f0], 0
je 0x40308d
lea eax, [ebp - 0x13a8]
push 0x20
push eax
call fcn.0040b400
add esp, 8
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b040
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x10
jmp 0x405b0e
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x447c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x447c]
push 0x2d
push eax
call fcn.00413ec0
add esp, 0x28
test eax, eax
je 0x403104
push 0x2d
jmp 0x40311b
lea eax, [ebp - 0x447c]
push 0x3a
push eax
call fcn.00413ec0
add esp, 8
test eax, eax
je 0x403138
push 0x3a
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x447c]
push eax
call fcn.0040a4c0
add esp, 0x10
jmp 0x40313f
mov byte [ebp - 0x13a8], 0
push 0x20
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b400
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b040
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x18
jmp 0x405b0e
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x3cac]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x3cac]
push 0x2d
push eax
call fcn.00413ec0
mov esi, eax
lea eax, [ebp - 0x3cac]
push 0x3a
push eax
call fcn.00413ec0
mov edi, eax
add esp, 0x30
test edi, edi
je 0x40325f
lea eax, [ebp - 0x3cac]
test esi, esi
je 0x403220
cmp esi, eax
jbe 0x403210
mov al, byte [esi]
mov ecx, esi
cmp al, 0x20
je 0x403210
mov al, byte [esi - 1]
dec esi
cmp al, 0x20
je 0x40320e
lea ecx, [ebp - 0x3cac]
cmp esi, ecx
ja 0x4031e6
push 0x20
push esi
call fcn.0040b400
push 0x3e8
push esi
jmp 0x403250
mov esi, ecx
push 0x20
push esi
call fcn.0040b400
push 0x3e8
push esi
jmp 0x403250
cmp edi, eax
jbe 0x403242
mov al, byte [edi]
mov ecx, edi
cmp al, 0x20
je 0x403242
mov al, byte [edi - 1]
dec edi
cmp al, 0x20
je 0x403240
lea ecx, [ebp - 0x3cac]
cmp edi, ecx
ja 0x403226
jmp 0x403242
mov edi, ecx
push 0x20
push edi
call fcn.0040b400
push 0x3e8
push edi
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b920
add esp, 0x14
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0xc
jmp 0x405b0e
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x2d
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040b400
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x28
jmp 0x405b0e
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x3a
jmp 0x403299
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x13a8]
push 0x2d
push eax
call fcn.00413ec0
add esp, 0x1c
test eax, eax
lea eax, [ebp - 0x13a8]
je 0x403322
push 0x2d
push eax
call fcn.0040b400
add esp, 8
jmp 0x40334b
push 0x3a
push eax
call fcn.00413ec0
add esp, 8
test eax, eax
je 0x403344
lea eax, [ebp - 0x13a8]
push 0x3a
push eax
call fcn.0040b400
add esp, 8
jmp 0x40334b
mov byte [ebp - 0x13a8], 0
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0xc
jmp 0x405b0e
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x447c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x3a
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x447c]
push eax
call fcn.0040a4c0
add esp, 0x30
cmp dword [ebp - 0x374f0], 0
je 0x40308d
jmp 0x40307c
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
push 0x3e8
lea eax, [ebp - 0x447c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
push 0x2c
jmp 0x40339f
push 0x3e7
lea eax, [ebp - 0x13a7]
mov byte [ebp - 0x13a8], 0
push 0
push eax
call fcn.004143a0
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x34]
push 0xa
push eax
push ebx
push esi
push edi
call fcn.004086f0
push 0x3e8
lea ecx, [ebp - 0x447c]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
push eax
push 0x2c
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x447c]
push eax
call fcn.0040a500
add esp, 0x4c
cmp dword [ebp - 0x374f0], 0
je 0x403486
lea eax, [ebp - 0x13a8]
push 0x20
push eax
call fcn.0040b400
add esp, 8
push 0x2c
jmp 0x403141
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040aff0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x20
jmp 0x405b0e
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x75c]
push eax
push edi
call fcn.004086f0
mov eax, esi
push 0xc8
push eax
call fcn.0040aef0
add esp, 0x1c
test eax, eax
je 0x405b0e
nop
push 0x2c
push 0x64
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.0040a800
mov esi, eax
add esp, 0x10
cmp byte [esi], 0x2c
jne 0x40351c
inc esi
lea eax, [ebp - 0x11c]
push 0x64
push eax
call fcn.0040aef0
add esp, 8
test eax, eax
je 0x40354b
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040bb80
add esp, 8
test eax, eax
jne 0x403562
push 0xc8
push esi
call fcn.0040aef0
add esp, 8
test eax, eax
jne 0x403500
jmp 0x405b0e
cmp dword [ebp - 0x37528], 0
je 0x403585
cmp byte [ebp - 0x11c], 0x2d
jne 0x403585
lea eax, [ebp - 0x11c]
push 0
push eax
call fcn.0040ac00
add esp, 8
lea eax, [ebp - 0x11c]
jmp 0x405b00
push 0x3e8
lea eax, [ebp - 0x13a8]
push eax
push dword [ebp - 0x374e8]
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x75c]
push eax
push edi
call fcn.004086f0
mov eax, esi
push 0xc8
push eax
call fcn.0040aef0
add esp, 0x1c
test eax, eax
je 0x403645
push 0x2c
push 0x64
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.0040a800
mov esi, eax
add esp, 0x10
cmp byte [esi], 0x2c
jne 0x4035e2
inc esi
lea eax, [ebp - 0x11c]
push 0x64
push eax
call fcn.0040aef0
add esp, 8
test eax, eax
je 0x403633
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x13a8]
push eax
call fcn.0040bb80
mov edx, eax
add esp, 8
test edx, edx
je 0x403633
lea ecx, [ebp - 0x11c]
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403620
sub ecx, edi
push ecx
push edx
call fcn.0040ac20
add esp, 8
push 0xc8
push esi
call fcn.0040aef0
add esp, 8
test eax, eax
jne 0x4035c6
lea eax, [ebp - 0x13a8]
jmp 0x405b00
push 0x3e8
lea eax, [ebp - 0x13a8]
xor edi, edi
push eax
push dword [ebp - 0x374e8]
mov ebx, 0x46b2c8
push esi
push dword [ebp - 0x37508]
call fcn.004086f0
add esp, 0x14
xor esi, esi
cmp byte [ebp - 0x13a8], 0
je 0x4036b6
lea ebx, [ebp - 0x13a8]
add ebx, esi
movsx eax, byte [ebx]
push eax
call fcn.0043c3e0
add esp, 4
test eax, eax
je 0x4036a2
mov edi, 1
jmp 0x4036a6
test edi, edi
jne 0x4036b6
inc esi
cmp byte [ebp + esi - 0x13a8], 0
jne 0x403683
mov ebx, 0x46b2c8
cmp dword [ebp - 0x3752c], 0
je 0x4036ca
push 0x3a
push ebx
call fcn.0040b400
add esp, 8
cmp dword [ebp - 0x37524], 0
je 0x4036de
push 0x2c
push ebx
call fcn.0040b400
add esp, 8
cmp dword [ebp - 0x374f0], 0
je 0x4036f2
push 0x20
push ebx
call fcn.0040b400
add esp, 8
push ebx
jmp 0x405b01
push 0x3e8
lea eax, [ebp - 0x13a8]
xor edi, edi
push eax
push dword [ebp - 0x374e8]
push esi
push dword [ebp - 0x37508]
call fcn.004086f0
add esp, 0x14
xor esi, esi
cmp byte [ebp - 0x13a8], 0
je 0x403645
nop word [eax + eax]
movsx eax, byte [ebp + esi - 0x13a8]
push eax
call fcn.0043c3e0
add esp, 4
test eax, eax
je 0x40374c
mov edi, 1
jmp 0x403750
test edi, edi
jne 0x403766
inc esi
cmp byte [ebp + esi - 0x13a8], 0
jne 0x403730
lea eax, [ebp - 0x13a8]
jmp 0x405b00
cmp esi, 0x3e8
jae 0x405c15
mov byte [ebp + esi - 0x13a8], 0
lea eax, [ebp - 0x13a8]
jmp 0x405b00
push 0x1f
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x48]
push 0x1f
push eax
call fcn.00409c10
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2d0
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x28
jmp 0x405b0e
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b080
lea eax, [ebp - 0x11c]
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x20
jmp 0x405b0e
lea eax, [ebp - 0xec]
push 0x32
push eax
call fcn.004129b0
lea eax, [ebp - 0xec]
push eax
push 0x46b300
call fcn.00405c20
add esp, 0x10
jmp 0x405b0e
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x415c]
push 0xc8
push eax
push dword [ebp - 0x374e8]
lea esi, [ebp - 0x2b194]
push ebx
push edi
call fcn.004086f0
push 0xc8
lea ecx, [ebp - 0x1088]
push ecx
push dword [ebp - 0x374e8]
push ebx
push eax
call fcn.004086f0
lea eax, [ebp - 0x415c]
push eax
lea eax, [ebp - 0x374e4]
push 0xc350
push eax
call fcn.0040dd70
lea eax, [ebp - 0x1088]
push eax
mov eax, esi
push 0xc350
push eax
call fcn.0040dd70
add esp, 0x40
nop dword [eax + eax]
push str._chrome.exe_
push esi
call fcn.0040bb80
mov esi, eax
add esp, 8
test esi, esi
je 0x405b0e
push 0x2c
push 0x64
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.0040a4c0
lea eax, [ebp - 0x11c]
mov byte [ebp - 0x11c], 0x20
push 0x22
push eax
call fcn.0040b400
lea eax, [ebp - 0x11c]
push eax
push str.C:WINDOWSSYSTEM32_taskkill.exe__F__PID__s__T
lea eax, [ebp - 0x660]
push 0xc8
push eax
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.0043b169
push eax
push str._chrome.exe____ld__
lea eax, [ebp - 0x3d4]
push 0xc8
push eax
call fcn.00401120
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x374e4]
push eax
call fcn.00414130
add esp, 0x44
test eax, eax
je 0x403944
cmp dword [ebp - 0x374ec], 0
je 0x40396b
lea eax, [ebp - 0x3d4]
push eax
push str.compare_str__s_found_in_before_n
call fcn.00405c20
jmp 0x403968
cmp dword [ebp - 0x374ec], 0
lea eax, [ebp - 0x660]
je 0x403960
push eax
push 0x46b300
call fcn.00405c20
jmp 0x403968
push 0
push eax
call fcn.004078a0
add esp, 8
add esi, 0xc
jne 0x403890
jmp 0x405b0e
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b080
add esp, 0x18
push dword [ebp - 0x374ec]
push 1
lea eax, [ebp - 0x11c]
push eax
call fcn.0043b169
add esp, 4
push eax
call fcn.00412a10
add esp, 0xc
jmp 0x405b0e
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b080
add esp, 0x18
push dword [ebp - 0x374ec]
push 0
jmp 0x4039a6
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b080
lea eax, [ebp - 0x11c]
push eax
call fcn.0043b169
add esp, 0x1c
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x403a84
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0x9d
push 0x11
call esi
push 0
push 0
push 0x9e
push 0x73
call esi
push 0
push 2
push 0x9e
push 0x73
call esi
push 0
push 2
push 0x9d
push 0x11
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x405b0e
push str.No_Window_n
call fcn.00405c20
add esp, 4
jmp 0x405b0e
push dword [ebp - 0x374ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.0040f840
jmp 0x405b0b
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b080
push dword [ebp - 0x374ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.0040f840
add esp, 0x20
jmp 0x405b0e
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x1088]
push 0xc8
push eax
push ebx
push esi
push edi
call fcn.004086f0
push 0xa
lea ecx, [ebp - 0x34]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
push eax
lea eax, [ebp - 0x1088]
push eax
call fcn.0040f770
add esp, 0x34
jmp 0x405b0e
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x2bc]
push 0x32
push eax
push ebx
push esi
push edi
call fcn.004086f0
push 0x32
lea ecx, [ebp - 0x340]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
push 0x32
lea ecx, [ebp - 0xec]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
push 0
push 0x2e
push 0xa
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040a500
add esp, 0x50
lea eax, [ebp - 0x54]
push 1
push 0x2e
push 0xa
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040a500
push 2
push 0x2e
push 0xa
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040a500
push 3
push 0x2e
push 0xa
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040a500
lea eax, [ebp - 0x10]
push eax
call fcn.0043b12a
add esp, 0x40
imul esi, eax, 0xff
lea eax, [ebp - 0x54]
push eax
call fcn.0043b12a
add eax, esi
imul esi, eax, 0xff
lea eax, [ebp - 0x60]
push eax
call fcn.0043b12a
add eax, esi
imul ebx, eax, 0xff
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
push 0
push 0x2e
add ebx, eax
lea eax, [ebp - 0x10]
push 0xa
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040a500
push 1
push 0x2e
push 0xa
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040a500
push 2
push 0x2e
push 0xa
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040a500
add esp, 0x48
lea eax, [ebp - 0x34]
push 3
push 0x2e
push 0xa
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040a500
lea eax, [ebp - 0x10]
push eax
call fcn.0043b12a
imul esi, eax, 0xff
lea eax, [ebp - 0x54]
push eax
call fcn.0043b12a
add eax, esi
imul esi, eax, 0xff
lea eax, [ebp - 0x60]
push eax
call fcn.0043b12a
add eax, esi
imul edi, eax, 0xff
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
push 0
push 0x2e
add edi, eax
lea eax, [ebp - 0x10]
push 0xa
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040a500
push 1
push 0x2e
push 0xa
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040a500
add esp, 0x4c
lea eax, [ebp - 0x60]
push 2
push 0x2e
push 0xa
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040a500
push 3
push 0x2e
push 0xa
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040a500
lea eax, [ebp - 0x10]
push eax
call fcn.0043b12a
imul esi, eax, 0xff
lea eax, [ebp - 0x54]
push eax
call fcn.0043b12a
add eax, esi
imul esi, eax, 0xff
lea eax, [ebp - 0x60]
push eax
call fcn.0043b12a
add eax, esi
imul esi, eax, 0xff
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
add esp, 0x38
add eax, esi
cmp edi, ebx
jae 0x403d40
cmp eax, ebx
mov eax, 0x46b35c
ja 0x403d45
mov eax, 0x46b360
push eax
call fcn.00405c20
add esp, 4
jmp 0x405b0e
call fcn.0040dca0
test eax, eax
mov edx, str.yes_n
mov ecx, 0x46b31c
cmovne ecx, edx
push ecx
call fcn.00405c20
add esp, 4
jmp 0x405b0e
call fcn.0040dcb0
jmp 0x403d58
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x40531e
mov edx, str._LocalAPI
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403db0
test bl, bl
je 0x403dac
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403db0
add ecx, 2
add edx, 2
test bl, bl
jne 0x403d90
xor ecx, ecx
jmp 0x403db5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x403e97
mov edx, str._echofile
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403de4
test bl, bl
je 0x403de0
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403de4
add ecx, 2
add edx, 2
test bl, bl
jne 0x403dc4
xor ecx, ecx
jmp 0x403de9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4052b8
mov edx, str._hold
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403e18
test bl, bl
je 0x403e14
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403e18
add ecx, 2
add edx, 2
test bl, bl
jne 0x403df8
xor ecx, ecx
jmp 0x403e1d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4052a5
mov edx, str._debug
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403e50
test bl, bl
je 0x403e4c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403e50
add ecx, 2
add edx, 2
test bl, bl
jne 0x403e30
xor ecx, ecx
jmp 0x403e55
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x403e97
mov edx, str._skip_ack
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x403e80
test bl, bl
je 0x403e7c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x403e80
add ecx, 2
add edx, 2
test bl, bl
jne 0x403e60
xor ecx, ecx
jmp 0x403e85
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404118
mov dword [ebp - 0x374fc], 1
mov ebx, dword [ebp - 0x374e8]
inc esi
cmp esi, dword [ebp + 8]
jl 0x402903
mov edi, dword [ebp - 0x374f8]
lea eax, [ebp - 0x288]
push 0x28
push eax
call fcn.0040aef0
add esp, 8
test eax, eax
jne 0x403ef4
push 0x28
lea eax, [ebp - 0x288]
push eax
push str.API_PORT
push 0
call fcn.00409eb0
add esp, 0x10
test eax, eax
je 0x403ef4
push 0x28
lea eax, [ebp - 0x288]
push str.6530
push eax
call fcn.0040b920
add esp, 0xc
lea ecx, [ebp - 0x30c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403f00
sub ecx, edx
jne 0x404035
push 0x63
push ecx
lea eax, [ebp - 0x36f]
mov byte [ebp - 0x370], cl
push eax
call fcn.004143a0
lea eax, [ebp - 0x370]
push 0x64
push eax
call fcn.0040d280
add esp, 0x14
test eax, eax
je 0x405363
push 0x1f3
lea eax, [ebp - 0x11b3]
mov byte [ebp - 0x11b4], 0
push 0
push eax
call fcn.004143a0
lea eax, [ebp - 0x370]
push eax
push str.Hosted_server_found__s_n
call fcn.00405c20
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
lea eax, [ebp - 0x370]
push eax
call fcn.0040d2c0
add esp, 0x20
test eax, eax
js 0x4053a1
lea eax, [ebp - 0x11b4]
mov byte [ebp - 0x10], 0
push eax
xorps xmm0, xmm0
mov byte [ebp - 7], 0
push str.Hosted_server_info:_n_s_n_n
movq qword [ebp - 0xf], xmm0
call fcn.00405c20
push str.WINRSH_SERVER
push 0x50
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040a7a0
push str.API_PORT
push 0xa
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040a620
lea eax, [ebp - 0x10]
push 0xd
push eax
call fcn.0040b400
lea eax, [ebp - 0x10]
push 0xa
push eax
call fcn.0040b400
add esp, 0x38
lea eax, [ebp - 0x10]
push 0x28
push eax
call fcn.0040aff0
add esp, 4
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.0040b920
add esp, 0xc
push 0x50
lea eax, [ebp - 0x52c]
push eax
push 0x50
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00409370
add esp, 0x14
mov ebx, dword [ebp - 0x374ec]
test ebx, ebx
je 0x404061
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x30c]
push eax
push str.Network:_s_Network_IP:_s_API:_s__n
call fcn.00405c20
add esp, 0x10
call fcn.0040f1c0
push 1
push dword [ebp - 0x37520]
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.0040ec40
mov esi, eax
add esp, 0x14
test esi, esi
js 0x4053a1
cmp dword [ebp - 0x3751c], 0
jne 0x4040b2
push 1
push 0x64
lea eax, [ebp - 0x474]
push eax
push esi
call fcn.00405c90
add esp, 0x10
cmp byte [ebp - 0x474], 0x33
je 0x4059fa
cmp dword [ebp - 0x37518], 0
jne 0x4040f2
lea eax, [ebp - 0x474]
push str.05.00.25
push eax
call fcn.00414130
add esp, 8
test eax, eax
jne 0x4040f2
push str.05.00.25
push str.Version__s_is_old__update_to_the_new_version._n
call fcn.00405c20
add esp, 8
test edi, edi
jne 0x4053b7
lea eax, [ebp - 0x80]
push 0x3d
push eax
call fcn.00413ff0
mov edi, eax
add esp, 8
test edi, edi
je 0x4053b7
inc edi
jmp 0x4053ba
mov edx, str._skip_initial
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404140
test bl, bl
je 0x40413c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404140
add ecx, 2
add edx, 2
test bl, bl
jne 0x404120
xor ecx, ecx
jmp 0x404145
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404158
mov dword [ebp - 0x3751c], 1
jmp 0x403e97
mov edx, str._skip_version_check
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404180
test bl, bl
je 0x40417c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404180
add ecx, 2
add edx, 2
test bl, bl
jne 0x404160
xor ecx, ecx
jmp 0x404185
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404198
mov dword [ebp - 0x37518], 1
jmp 0x403e97
mov edx, str._pin
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4041c0
test bl, bl
je 0x4041bc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4041c0
add ecx, 2
add edx, 2
test bl, bl
jne 0x4041a0
xor ecx, ecx
jmp 0x4041c5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4041d3
push 0xb
lea eax, [ebp - 0x80]
jmp 0x404c59
mov edx, str._smsigndebug
mov ecx, eax
nop word [eax + eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404200
test bl, bl
je 0x4041fc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404200
add ecx, 2
add edx, 2
test bl, bl
jne 0x4041e0
xor ecx, ecx
jmp 0x404205
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x405234
mov edx, str._verifymacaddress
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404234
test bl, bl
je 0x404230
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404234
add ecx, 2
add edx, 2
test bl, bl
jne 0x404214
xor ecx, ecx
jmp 0x404239
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4051c8
mov edx, str._getmacaddress
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404268
test bl, bl
je 0x404264
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404268
add ecx, 2
add edx, 2
test bl, bl
jne 0x404248
xor ecx, ecx
jmp 0x40426d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4051af
mov edx, str._removemacaddress
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4042a0
test bl, bl
je 0x40429c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4042a0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404280
xor ecx, ecx
jmp 0x4042a5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x40517b
mov edx, str._writemacaddress
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4042d4
test bl, bl
je 0x4042d0
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4042d4
add ecx, 2
add edx, 2
test bl, bl
jne 0x4042b4
xor ecx, ecx
jmp 0x4042d9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4050c4
mov edx, str._getmacaddresswithip
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404308
test bl, bl
je 0x404304
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404308
add ecx, 2
add edx, 2
test bl, bl
jne 0x4042e8
xor ecx, ecx
jmp 0x40430d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x40507e
mov edx, str._sendto
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404340
test bl, bl
je 0x40433c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404340
add ecx, 2
add edx, 2
test bl, bl
jne 0x404320
xor ecx, ecx
jmp 0x404345
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404353
push 0xb
lea eax, [ebp - 0x80]
jmp 0x404c59
mov edx, str._sleep
mov ecx, eax
nop word [eax + eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404380
test bl, bl
je 0x40437c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404380
add ecx, 2
add edx, 2
test bl, bl
jne 0x404360
xor ecx, ecx
jmp 0x404385
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x405043
mov edx, str._connect_timeout
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4043b4
test bl, bl
je 0x4043b0
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4043b4
add ecx, 2
add edx, 2
test bl, bl
jne 0x404394
xor ecx, ecx
jmp 0x4043b9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4043ec
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x34]
push 0xa
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
mov esi, eax
lea eax, [ebp - 0x34]
push eax
call fcn.0043b12a
add esp, 0x18
mov dword [ebp - 0x37520], eax
jmp 0x403e9d
mov edx, str._msg
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404413
test bl, bl
je 0x40440f
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404413
add ecx, 2
add edx, 2
test bl, bl
jne 0x4043f3
xor ecx, ecx
jmp 0x404418
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x40442c
push 0x15a
lea eax, [ebp - 0xd68]
jmp 0x404c59
mov edx, str._dir
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404453
test bl, bl
je 0x40444f
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404453
add ecx, 2
add edx, 2
test bl, bl
jne 0x404433
xor ecx, ecx
jmp 0x404458
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404469
push 0x1f
lea eax, [ebp - 0x260]
jmp 0x404c59
mov edx, str._deviceid
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404490
test bl, bl
je 0x40448c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404490
add ecx, 2
add edx, 2
test bl, bl
jne 0x404470
xor ecx, ecx
jmp 0x404495
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4044a6
push 0x1f
lea eax, [ebp - 0x200]
jmp 0x404c59
mov edx, str._HotKeyDeviceID
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4044d0
test bl, bl
je 0x4044cc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4044d0
add ecx, 2
add edx, 2
test bl, bl
jne 0x4044b0
xor ecx, ecx
jmp 0x4044d5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4044e6
push 0x1f
lea eax, [ebp - 0x1c0]
jmp 0x404c59
mov edx, str._WindowsUserName
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404510
test bl, bl
je 0x40450c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404510
add ecx, 2
add edx, 2
test bl, bl
jne 0x4044f0
xor ecx, ecx
jmp 0x404515
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404526
push 0x3c
lea eax, [ebp - 0x410]
jmp 0x404c59
mov edx, str._devicestate
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404550
test bl, bl
je 0x40454c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404550
add ecx, 2
add edx, 2
test bl, bl
jne 0x404530
xor ecx, ecx
jmp 0x404555
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404566
push 0x1e
lea eax, [ebp - 0x1a0]
jmp 0x404c59
mov edx, str._deviceconnection
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404590
test bl, bl
je 0x40458c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404590
add ecx, 2
add edx, 2
test bl, bl
jne 0x404570
xor ecx, ecx
jmp 0x404595
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4045a6
push 0x14
lea eax, [ebp - 0xb8]
jmp 0x404c59
mov edx, str._frompin
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4045d0
test bl, bl
je 0x4045cc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4045d0
add ecx, 2
add edx, 2
test bl, bl
jne 0x4045b0
xor ecx, ecx
jmp 0x4045d5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4045e3
push 0xb
lea eax, [ebp - 0x6c]
jmp 0x404c59
mov edx, str._assets
mov ecx, eax
nop word [eax + eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404610
test bl, bl
je 0x40460c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404610
add ecx, 2
add edx, 2
test bl, bl
jne 0x4045f0
xor ecx, ecx
jmp 0x404615
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404629
push 0xc350
lea eax, [ebp - 0x1ee44]
jmp 0x404c59
mov edx, str._sys
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404650
test bl, bl
je 0x40464c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404650
add ecx, 2
add edx, 2
test bl, bl
jne 0x404630
xor ecx, ecx
jmp 0x404655
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x405013
mov edx, str._config
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404684
test bl, bl
je 0x404680
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404684
add ecx, 2
add edx, 2
test bl, bl
jne 0x404664
xor ecx, ecx
jmp 0x404689
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4046bf
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x1088]
push 0xc8
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
mov esi, eax
lea eax, [ebp - 0x1088]
push eax
call fcn.00409010
add esp, 0x18
jmp 0x403e9d
mov edx, str._RegGetValueWithPath
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4046e6
test bl, bl
je 0x4046e2
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4046e6
add ecx, 2
add edx, 2
test bl, bl
jne 0x4046c6
xor ecx, ecx
jmp 0x4046eb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404f5c
mov edx, str._RegGetValue
mov ecx, eax
nop word [eax + eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404720
test bl, bl
je 0x40471c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404720
add ecx, 2
add edx, 2
test bl, bl
jne 0x404700
xor ecx, ecx
jmp 0x404725
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404f00
mov edx, str._findprocess
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404754
test bl, bl
je 0x404750
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404754
add ecx, 2
add edx, 2
test bl, bl
jne 0x404734
xor ecx, ecx
jmp 0x404759
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404eb5
mov edx, str._findwindow
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404788
test bl, bl
je 0x404784
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404788
add ecx, 2
add edx, 2
test bl, bl
jne 0x404768
xor ecx, ecx
jmp 0x40478d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404e6c
mov edx, str._shellexecute
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4047c0
test bl, bl
je 0x4047bc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4047c0
add ecx, 2
add edx, 2
test bl, bl
jne 0x4047a0
xor ecx, ecx
jmp 0x4047c5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404e2f
mov edx, str._createprocess
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4047f4
test bl, bl
je 0x4047f0
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4047f4
add ecx, 2
add edx, 2
test bl, bl
jne 0x4047d4
xor ecx, ecx
jmp 0x4047f9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404dfd
mov edx, str._cmd
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404828
test bl, bl
je 0x404824
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404828
add ecx, 2
add edx, 2
test bl, bl
jne 0x404808
xor ecx, ecx
jmp 0x40482d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404dcd
mov edx, str._exe
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404860
test bl, bl
je 0x40485c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404860
add ecx, 2
add edx, 2
test bl, bl
jne 0x404840
xor ecx, ecx
jmp 0x404865
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x404d9d
mov edx, str._msgname
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404894
test bl, bl
je 0x404890
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404894
add ecx, 2
add edx, 2
test bl, bl
jne 0x404874
xor ecx, ecx
jmp 0x404899
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4048aa
push 0x1f
lea eax, [ebp - 0x220]
jmp 0x404c59
mov edx, str._signgroup
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4048d1
test bl, bl
je 0x4048cd
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4048d1
add ecx, 2
add edx, 2
test bl, bl
jne 0x4048b1
xor ecx, ecx
jmp 0x4048d6
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4048e7
push 0x1f
lea eax, [ebp - 0x240]
jmp 0x404c59
mov edx, str._label
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404910
test bl, bl
je 0x40490c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404910
add ecx, 2
add edx, 2
test bl, bl
jne 0x4048f0
xor ecx, ecx
jmp 0x404915
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404926
push 0x1f
lea eax, [ebp - 0x1e0]
jmp 0x404c59
mov edx, str._replyall
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404950
test bl, bl
je 0x40494c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404950
add ecx, 2
add edx, 2
test bl, bl
jne 0x404930
xor ecx, ecx
jmp 0x404955
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404968
mov dword [ebp - 0x374f4], 1
jmp 0x403e97
mov edx, str._reply
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404990
test bl, bl
je 0x40498c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404990
add ecx, 2
add edx, 2
test bl, bl
jne 0x404970
xor ecx, ecx
jmp 0x404995
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4049a8
mov dword [ebp - 0x37500], 1
jmp 0x403e97
mov edx, str._newemail
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x4049d0
test bl, bl
je 0x4049cc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x4049d0
add ecx, 2
add edx, 2
test bl, bl
jne 0x4049b0
xor ecx, ecx
jmp 0x4049d5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4049e8
mov dword [ebp - 0x37514], 1
jmp 0x403e97
mov edx, str._alert_panic_button
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404a10
test bl, bl
je 0x404a0c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404a10
add ecx, 2
add edx, 2
test bl, bl
jne 0x4049f0
xor ecx, ecx
jmp 0x404a15
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x403e97
mov edx, str._alert_red_panic_button
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404a44
test bl, bl
je 0x404a40
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404a44
add ecx, 2
add edx, 2
test bl, bl
jne 0x404a24
xor ecx, ecx
jmp 0x404a49
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x403e97
mov edx, str._stdinmsg
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404a78
test bl, bl
je 0x404a74
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404a78
add ecx, 2
add edx, 2
test bl, bl
jne 0x404a58
xor ecx, ecx
jmp 0x404a7d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x403e97
mov edx, str._breakingnews
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404ab0
test bl, bl
je 0x404aac
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404ab0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404a90
xor ecx, ecx
jmp 0x404ab5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404ac8
mov dword [ebp - 0x37510], 1
jmp 0x403e97
mov edx, str._var
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404af0
test bl, bl
je 0x404aec
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404af0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404ad0
xor ecx, ecx
jmp 0x404af5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404b32
cmp dword [ebp - 0x37504], 0xa
mov ebx, dword [ebp - 0x374e8]
jge 0x403e9d
push 0x3e8
push edi
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
inc dword [ebp - 0x37504]
add esp, 0x14
mov esi, eax
add edi, 0x3e8
jmp 0x403e9d
mov edx, 0x46be20
mov ecx, eax
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404b60
test bl, bl
je 0x404b5c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404b60
add ecx, 2
add edx, 2
test bl, bl
jne 0x404b40
xor ecx, ecx
jmp 0x404b65
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404b78
mov dword [ebp - 0x3750c], 1
jmp 0x403e97
mov edx, 0x46be24
mov ecx, eax
nop
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404ba0
test bl, bl
je 0x404b9c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404ba0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404b80
xor ecx, ecx
jmp 0x404ba5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404bb9
push 0xc8
lea eax, [ebp - 0x8ec]
jmp 0x404c59
mov edx, 0x46be28
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404be0
test bl, bl
je 0x404bdc
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404be0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404bc0
xor ecx, ecx
jmp 0x404be5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404c21
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x30c]
push 0x50
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
mov esi, eax
lea eax, [ebp - 0x30c]
push 0x50
push eax
lea eax, [ebp - 0x52c]
push eax
call fcn.0040b920
add esp, 0x20
jmp 0x403e9d
mov edx, str._port
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404c48
test bl, bl
je 0x404c44
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404c48
add ecx, 2
add edx, 2
test bl, bl
jne 0x404c28
xor ecx, ecx
jmp 0x404c4d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404c74
push 0x28
lea eax, [ebp - 0x288]
mov ebx, dword [ebp - 0x374e8]
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
add esp, 0x14
mov esi, eax
jmp 0x403e9d
mov edx, str._delayeddate
mov ecx, eax
nop dword [eax + eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404ca0
test bl, bl
je 0x404c9c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404ca0
add ecx, 2
add edx, 2
test bl, bl
jne 0x404c80
xor ecx, ecx
jmp 0x404ca5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404d00
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x1c]
push 0xa
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
push 0
mov esi, eax
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00408980
add esp, 0x20
test eax, eax
jne 0x403e9d
lea eax, [ebp - 0x1c]
push eax
push str.Invalid__delayeddate__s._n
call fcn.00405c20
add esp, 8
mov eax, 5
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041305e
mov esp, ebp
pop ebp
ret
mov edx, str._delayedtime
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404d27
test bl, bl
je 0x404d23
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x404d27
add ecx, 2
add edx, 2
test bl, bl
jne 0x404d07
xor ecx, ecx
jmp 0x404d2c
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x404d87
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x28]
push 9
push eax
push ebx
push dword [ebp + 8]
push esi
call fcn.004086f0
push 0
mov esi, eax
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.004089e0
add esp, 0x20
test eax, eax
jne 0x403e9d
lea eax, [ebp - 0x28]
push eax
push str.Invalid__delayedtime__s._n
call fcn.00405c20
add esp, 8
mov eax, 6
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041305e
mov esp, ebp
pop ebp
ret
push eax
push esi
push str.cmdapi:_Unknown_cmdapi_option_arg_d__s._n
call fcn.00405c20
add esp, 0xc
push 1
jmp 0x405b10
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040bdf0
add esp, 0x18
push eax
jmp 0x405b10
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040c2a0
add esp, 0x18
push eax
jmp 0x405b10
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x11b4]
push 0
push eax
call fcn.004078a0
add esp, 0x1c
push eax
jmp 0x405b10
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
add esp, 0x14
lea eax, [ebp - 0x11b4]
push 0
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x405b0e
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
add esp, 0x14
lea eax, [ebp - 0x11b4]
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [ebp - 0x11b4]
test eax, eax
push ecx
mov ecx, str.No_window__s_found_n
mov edx, str.Window__s_found_n
cmovne ecx, edx
push ecx
jmp 0x405b06
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x11b4]
push eax
call fcn.0040bd60
lea ecx, [ebp - 0x11b4]
test eax, eax
push ecx
mov edx, str.Process__s_found_n
mov ecx, str.No_process__s_found_n
cmovne ecx, edx
push ecx
call fcn.00405c20
add esp, 0x20
jmp 0x405b0e
push 0xfe
lea eax, [ebp - 0x10bf]
mov byte [ebp - 0x10c0], 0
push 0
push eax
call fcn.004143a0
add esp, 0xc
mov dword [ebp - 0x374fc], 0xff
lea eax, [ebp - 0x374fc]
push eax
lea eax, [ebp - 0x10c0]
push eax
push 0
push 0xffff
push str.SystemRoot
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegGetValueA]
lea eax, [ebp - 0x10c0]
jmp 0x405b00
push 0xfe
lea eax, [ebp - 0x693]
mov byte [ebp - 0x694], 0
push 0
push eax
call fcn.004143a0
push 0xfe
lea eax, [ebp - 0x4193]
mov byte [ebp - 0x4194], 0
push 0
push eax
call fcn.004143a0
push 0xfe
lea eax, [ebp - 0x10bf]
mov byte [ebp - 0x10c0], 0
push 0
push eax
call fcn.004143a0
mov edi, dword [ebp - 0x374e8]
lea eax, [ebp - 0x4194]
mov ebx, dword [ebp + 8]
push 0xff
push eax
push edi
push ebx
push esi
call fcn.004086f0
push 0xff
lea ecx, [ebp - 0x10c0]
push ecx
push edi
push ebx
push eax
call fcn.004086f0
add esp, 0x4c
lea eax, [ebp - 0x694]
push 0xff
push eax
lea eax, [ebp - 0x10c0]
push eax
lea eax, [ebp - 0x4194]
push eax
call fcn.0040cc10
add esp, 0x10
test eax, eax
js 0x405b0e
lea eax, [ebp - 0x694]
jmp 0x405b00
push 0x1f4
lea eax, [ebp - 0x11b4]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x11b4]
push eax
call fcn.0043b5a4
add esp, 0x18
push eax
jmp 0x405b10
push 0xa
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
add esp, 0x14
lea eax, [ebp - 0x34]
push 0
push eax
call fcn.0043b12a
imul eax, eax, 0x3e8
add esp, 4
add eax, 0x64
push eax
call dword [sym.imp.KERNEL32.dll_SleepEx]
jmp 0x405b0e
push 0x10
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
push 0x28
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x374ec]
call fcn.00408060
lea eax, [ebp - 0x2b4]
push eax
push str._n_s_n
call fcn.00405c20
add esp, 0x2c
jmp 0x405b0e
push 0
push 0
call fcn.0040abb0
push eax
push str._smac.txt
lea eax, [ebp - 0x660]
push 0xc8
push eax
call fcn.00401120
mov ebx, dword [ebp - 0x374ec]
add esp, 0x18
push 0x10
push ebx
call fcn.00407f70
add esp, 4
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040b920
add esp, 0xc
test ebx, ebx
je 0x40511a
lea eax, [ebp - 0x3c]
push eax
push str.IP:__s_n
call fcn.00405c20
add esp, 8
push 0x28
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
call fcn.00408060
lea ecx, [ebp - 0x2b4]
add esp, 0x10
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405140
push 0
lea eax, [ebp - 0x660]
sub ecx, edx
push eax
push ecx
lea eax, [ebp - 0x2b4]
push eax
call fcn.0040e180
add esp, 0x10
test eax, eax
jns 0x405b0e
lea eax, [ebp - 0x660]
push eax
push str.Error_creating_file__s_n
jmp 0x405b06
push 0
push 0
call fcn.0040abb0
push eax
push str._smac.txt
lea eax, [ebp - 0x1088]
push 0xc8
push eax
call fcn.00401120
lea eax, [ebp - 0x1088]
push eax
call fcn.0041f042
add esp, 0x1c
jmp 0x405b0e
push 0
push 0
push 0
push dword [ebp - 0x374ec]
call fcn.00408060
add esp, 0x10
jmp 0x405b0e
push 0x64
lea eax, [ebp - 0x11c]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
push 0
push 0
call fcn.0040abb0
push eax
push str._s_verify.txt
lea eax, [ebp - 0x1088]
push 0xc8
push eax
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00408370
push 0
lea ecx, [ebp - 0x1088]
test eax, eax
push ecx
mov edx, 0x46bb48
mov ecx, 0x46bb4c
cmovne ecx, edx
push 2
push ecx
call fcn.0040e180
add esp, 0x40
jmp 0x405b0e
call fcn.0040f1c0
push 1
push 5
push str.6510
push 0x46b2c8
push str.localhost
call fcn.0040ec40
mov esi, eax
add esp, 0x14
test esi, esi
jns 0x405b0e
push 0xc8
lea eax, [ebp - 0x660]
push str._debug__debug
push eax
call fcn.0040b920
lea ecx, [ebp - 0x660]
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405280
sub ecx, edx
lea eax, [ebp - 0x660]
push ecx
push eax
push esi
call fcn.0040f560
push esi
call fcn.0040ec10
add esp, 0x10
jmp 0x405b0e
mov esi, dword [sym.imp.KERNEL32.dll_SleepEx]
nop dword [eax + eax]
push 0
push 0x6e
call esi
jmp 0x4052b0
push 0x1f3
lea eax, [ebp - 0x4287]
mov byte [ebp - 0x4288], 0
push 0
push eax
call fcn.004143a0
push 0xc8
lea eax, [ebp - 0x1088]
push eax
push dword [ebp - 0x374e8]
push dword [ebp + 8]
push esi
call fcn.004086f0
lea eax, [ebp - 0x1088]
push eax
lea eax, [ebp - 0x4288]
push 0x1f4
push eax
call fcn.0040dd70
lea eax, [ebp - 0x4288]
push eax
push 0x46b2c0
call fcn.00405c20
add esp, 0x34
jmp 0x405b0e
push str.05.00.25
jmp 0x405b01
cmp esi, 2
jl 0x40533e
push 0x11
push dword [ebx + 4]
lea eax, [ebp - 0x80]
push eax
call fcn.0040b920
add esp, 0xc
cmp esi, 3
jl 0x403ead
push 0x15a
push dword [ebx + 8]
lea eax, [ebp - 0xd68]
push eax
call fcn.0040b920
add esp, 0xc
jmp 0x403ead
push 0x50
lea eax, [ebp - 0x108]
push eax
push str.WINRSH_SERVER
push str._silentm.cfg
call fcn.00409eb0
add esp, 0x10
test eax, eax
je 0x404014
push str._silentm.cfg
push str.No_WINRSH_SERVER_defined_in__s.
push 0x46b2c8
push 1
push 3
call fcn.00406fa0
add esp, 0x14
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041305e
mov esp, ebp
pop ebp
ret
lea edi, [ebp - 0x80]
cmp dword [ebp - 0x37514], 0
jne 0x405999
cmp dword [ebp - 0x37510], 0
jne 0x405999
lea ecx, [ebp - 0x8ec]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4053e0
sub ecx, edx
je 0x405493
push 0
push 0x80
push 3
push 0
push 1
push closesocket
lea eax, [ebp - 0x8ec]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x405440
call fcn.004393ff
push dword [eax]
lea eax, [ebp - 0x8ec]
push eax
push str.Cannot_open__s__error__d_n
call fcn.00405c20
add esp, 0xc
push 1
jmp 0x405b10
push 0x2710
lea eax, [ebp - 0x36d0]
push eax
push edi
call fcn.00405c50
add esp, 0xc
test eax, eax
jle 0x40546b
lea eax, [ebp - 0x36d0]
push eax
push esi
call fcn.0040f5c0
add esp, 8
jmp 0x405440
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x3750c], 0
je 0x405999
lea eax, [ebp - 0x8ec]
push eax
call fcn.0041f042
add esp, 4
jmp 0x405999
cmp dword [ebp - 0x374f4], 0
je 0x4054c5
push str.USEROPERATION
push esi
call fcn.0040f5c0
push str.REPLYALL
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
jmp 0x40565e
cmp dword [ebp - 0x37500], 0
je 0x4054f7
push str.USEROPERATION
push esi
call fcn.0040f5c0
push str.REPLY
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
jmp 0x40565e
lea ecx, [ebp - 0x200]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405500
sub ecx, edx
je 0x4055f9
push str.USEROPERATION
push esi
call fcn.0040f5c0
push str.DEVICEIDSIMULATE
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
push str.DEVICEID
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x200]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
lea ecx, [ebp - 0x1a0]
add esp, 0x30
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405560
sub ecx, edx
je 0x405591
push str.DEVICESTATE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x1a0]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0xb8]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4055a0
sub ecx, edx
je 0x4055d1
push str.DEVICECONNECTION
push esi
call fcn.0040f5c0
lea eax, [ebp - 0xb8]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
push str.MESSAGELINE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0xd68]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
jmp 0x40565e
cmp dword [ebp - 0x374f8], 0
jne 0x40561b
push str.DIRECTORYSYSTEM.DEFAULT_n
push esi
call fcn.0040f5c0
push str.MESSAGENAMECMDAPI_n
push esi
call fcn.0040f5c0
add esp, 0x10
push str.CMDAPI_PIN
push esi
call fcn.0040f5c0
push edi
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
push str.MESSAGELINE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0xd68]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x30
lea ecx, [ebp - 0x220]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405667
sub ecx, edx
je 0x405698
push str.MESSAGENAME
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x220]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x240]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4056a1
sub ecx, edx
je 0x4056d2
push str.SIGNGROUP
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x240]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x260]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4056e0
sub ecx, edx
je 0x405711
push str.DIRECTORY
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x260]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x28]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405717
sub ecx, edx
je 0x405745
push str.DELAYEDTIME
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x28]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x1c]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405750
sub ecx, edx
je 0x40577e
push str.DELAYEDDATE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
cmp dword [ebp - 0x37500], 0
jne 0x4057b0
cmp dword [ebp - 0x374f4], 0
jne 0x4057b0
push str.SENDTO
push esi
call fcn.0040f5c0
push edi
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x6c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4057b6
sub ecx, edx
je 0x4057e4
push str.USERPIN
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x6c]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4057f0
sub ecx, edx
je 0x405821
push str.WINDOWSUSERNAME
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x410]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x1c0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405830
sub ecx, edx
je 0x405861
push str.HOTKEYDEVICEID
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x1c0]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x4dc]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405870
sub ecx, edx
je 0x4058a1
push str.GEOLATITUDE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x4dc]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea ecx, [ebp - 0x4a8]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4058b0
sub ecx, edx
je 0x4058e1
push str.GEOLONGITUDE
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x4a8]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
cmp dword [ebp - 0x374f8], 0
je 0x405920
lea edi, [ebp - 0x12af4]
mov ebx, 0xa
cmp byte [edi], 0
je 0x40590f
push edi
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x10
add edi, 0x3e8
sub ebx, 1
jne 0x4058f5
mov ebx, dword [ebp - 0x374ec]
lea eax, [ebp - 0x1e0]
push 0x1f
push eax
call fcn.0040aef0
add esp, 8
test eax, eax
je 0x40595b
push str.LABEL
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x1e0]
push eax
push esi
call fcn.0040f5c0
push 0x46bfd4
push esi
call fcn.0040f5c0
add esp, 0x18
lea eax, [ebp - 0x1ee44]
push 0xc350
push eax
call fcn.0040aef0
add esp, 8
test eax, eax
je 0x405999
push str._WADE_GARCIA_ASSETS_BEGIN1_n
push esi
call fcn.0040f5c0
lea eax, [ebp - 0x1ee44]
push eax
push esi
call fcn.0040f5c0
push str._n_WADE_GARCIA_ASSETS_END1_n
push esi
call fcn.0040f5c0
add esp, 0x18
push str.SEND_n
push esi
call fcn.0040f5c0
push str.QUIT_n
push esi
call fcn.0040f5c0
add esp, 0x10
cmp dword [ebp - 0x374fc], 0
je 0x4059ca
push 0
push 0x258
call dword [sym.imp.KERNEL32.dll_SleepEx]
jmp 0x4059fa
push ebx
push 0x64
lea eax, [ebp - 0x474]
push eax
push esi
call fcn.00405c90
add esp, 0x10
cmp byte [ebp - 0x474], 0x33
jne 0x4059fa
lea eax, [ebp - 0x474]
push eax
push str._n_s._n
call fcn.00405c20
add esp, 8
push esi
call fcn.0040ec10
add esp, 4
call dword [sym.imp.WSOCK32.dll_WSACleanup]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041305e
mov esp, ebp
pop ebp
ret
push str.Usage:_cmdapi_pin_message_n
call fcn.00405c20
add esp, 4
push 0
call fcn.00439985
push 0xc8
lea eax, [ebp - 0x660]
push eax
push dword [ebp - 0x374e8]
push esi
push edi
call fcn.004086f0
lea eax, [ebp - 0x660]
push 0x46b2c8
push eax
call fcn.0040c7b0
push eax
push str._ld_n
call fcn.00405c20
add esp, 0x24
push 0
call fcn.00439985
push 0
call fcn.00439985
xor eax, eax
jmp 0x405a7f
push eax
push 0x46b9f0
call fcn.00405c20
add esp, 8
push 0
call fcn.00439985
call fcn.004393ff
lea ecx, [ebp - 0x824]
push ecx
push dword [eax]
push str.Error_errno_d_opening_output_file__s_n
call fcn.00405c20
push dword [ebp - 0x374f0]
call fcn.0043f18a
add esp, 0x10
jmp 0x405ad7
push dword [ebp - 0x374f0]
call fcn.0043f18a
add esp, 4
test esi, esi
jle 0x405ad7
push esi
call fcn.0043f18a
add esp, 4
lea eax, [ebp - 0x824]
push 0x1a4
push eax
call fcn.0040e370
add esp, 8
jmp 0x405afa
push str.Error_on_mime_file._n
call fcn.00405c20
add esp, 4
lea eax, [ebp - 0x180]
push eax
push 0x46b300
call fcn.00405c20
add esp, 8
push 0
call fcn.00439985
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x370]
push 0x64
push eax
push ebx
push esi
push edi
call fcn.004086f0
push 0x64
lea ecx, [ebp - 0x11c]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
lea eax, [ebp - 0x370]
push 0x64
push eax
call fcn.00401020
lea eax, [ebp - 0x11c]
push 0x64
push eax
call fcn.00401020
lea eax, [ebp - 0x11c]
push eax
call fcn.0043b169
mov esi, eax
lea eax, [ebp - 0x370]
push eax
call fcn.0043b169
add esp, 0x40
mov edx, 0x46b35c
cmp eax, esi
mov ecx, 0x46b360
cmovg ecx, edx
push ecx
call fcn.00405c20
add esp, 4
push 0
call fcn.00439985
mov ebx, dword [ebp - 0x374e8]
lea eax, [ebp - 0x370]
push 0x64
push eax
push ebx
push esi
push edi
call fcn.004086f0
push 0x64
lea ecx, [ebp - 0x11c]
push ecx
push ebx
push esi
push eax
call fcn.004086f0
lea eax, [ebp - 0x370]
push 0x64
push eax
call fcn.00401020
lea eax, [ebp - 0x11c]
push 0x64
push eax
call fcn.00401020
lea eax, [ebp - 0x11c]
push eax
call fcn.0043b169
mov esi, eax
lea eax, [ebp - 0x370]
push eax
call fcn.0043b169
add esp, 0x40
mov edx, 0x46b35c
cmp eax, esi
mov ecx, 0x46b360
cmovl ecx, edx
push ecx
call fcn.00405c20
add esp, 4
push 0
call fcn.00439985
call fcn.00412e6e
int3