Function at 0x100507e0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Log keystrokes via application hook
Read .ini file
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword [0x1009400c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0
push 0
push 0
push 0x10050720
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call edi
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push eax
push dword [0x101fa4e4]
push 0x100504f0
push 2
call esi
mov dword [0x101fa4e0], eax
call edi
push eax
push dword [0x101fa4e4]
push 0x10050630
push 7
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x101fa4dc], eax
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x54a270
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x54a270], 0xc3
push eax
push dword [ebp - 0x9c]
push 1
push 0x54a270
call ebx
push ecx
mov ecx, 0x10113a68
call fcn.1005bed0
test al, al
jne 0x100508a5
push 0x10
push str.Error
push str.Main.premium_not_found_or_invalid_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61144
call ebx
lea eax, [ebp - 0x9c]
mov byte [0xe61144], 0xa0
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61144
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d1e69
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d1e69], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d1e69
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d228d
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d228d], 0xe9
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d228d
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d228e
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d228e], 0x8b
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d228e
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d228f
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d228f], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d228f
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d2290
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d2290], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d2290
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d2291
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d2291], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d2291
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d559c
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d559c], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d559c
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x633f7a
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x633f7a], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x633f7a
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x634403
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x634403], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x634403
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x63e6c4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x63e6c4], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x63e6c4
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4d2246
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4d2246], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x4d2246
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x501163
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x501163], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x501163
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40af0a
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x40af0a
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40b4bc
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40b4bc], 0x50
push eax
push dword [ebp - 0x9c]
push 1
push 0x40b4bc
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40b4c5
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40b4c5], 0x50
push eax
push dword [ebp - 0x9c]
push 1
push 0x40b4c5
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40b4cf
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40b4cf], 0x18
push eax
push dword [ebp - 0x9c]
push 1
push 0x40b4cf
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40af0a
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x40af0a
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x40afd5
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x40afd5], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x40afd5
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x777fd6
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x777fd6], 0x70
push eax
push dword [ebp - 0x9c]
push 1
push 0x777fd6
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x777fd7
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x777fd7], 0x17
push eax
push dword [ebp - 0x9c]
push 1
push 0x777fd7
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4ebec7
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4ebec7], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x4ebec7
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c4004
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c4004], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c4004
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x7e40bb
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x7e40bb], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x7e40bb
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x81b546
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x81b546], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x81b546
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x81b58d
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x81b58d], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x81b58d
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x86e284
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x86e284], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x86e284
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x86e44c
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x86e44c], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x86e44c
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x86e573
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x86e573], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x86e573
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x86f8fc
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x86f8fc], 0x3c
push eax
push dword [ebp - 0x9c]
push 1
push 0x86f8fc
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x7da373
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x7da373], 0xb7
push eax
push dword [ebp - 0x9c]
push 1
push 0x7da373
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x7e1c44
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x7e1c44], 0xb7
push eax
push dword [ebp - 0x9c]
push 1
push 0x7e1c44
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x52100d
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x52100d], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x52100d
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x9543c4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x9543c4], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x9543c4
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x886fde
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x886fde], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x886fde
call ebx
cmp dword [0x10113c38], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x64cbd1
call ebx
mov eax, dword [ebp - 0xa4]
mov byte [0x64cbd1], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0x64cbd1
call ebx
mov al, byte [0x10113c3c]
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x64cbd0
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0x64cbd0], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0x64cbd0
call ebx
mov al, byte [0x10113c3c]
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x95ceef
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0x95ceef], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0x95ceef
call ebx
mov al, byte [0x10113c3c]
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x95cf14
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0x95cf14], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0x95cf14
call ebx
mov al, byte [0x10113ad0]
inc al
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61f68
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0xe61f68], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61f68
call ebx
mov al, byte [0x10113ad2]
add al, 2
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61f69
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0xe61f69], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61f69
call ebx
mov al, byte [0x10113ad3]
add al, 3
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61f6a
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0xe61f6a], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61f6a
call ebx
mov al, byte [0x10113ad5]
add al, 4
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61f6b
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0xe61f6b], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61f6b
call ebx
mov al, byte [0x10113ad6]
add al, 5
mov byte [ebp - 0x9d], al
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0xe61f6c
call ebx
mov al, byte [ebp - 0x9d]
mov byte [0xe61f6c], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 1
push 0xe61f6c
call ebx
mov si, word [0x10113ace]
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push 0xe609e4
call ebx
lea eax, [ebp - 0x9c]
mov word [0xe609e4], si
push eax
push dword [ebp - 0x9c]
push 2
push 0xe609e4
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4d9d3b
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4d9d3b], 0x101f53d0
push eax
push dword [ebp - 0x9c]
push 4
push 0x4d9d3b
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4dac60
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4dac60], 0x101f53d0
push eax
push dword [ebp - 0x9c]
push 4
push 0x4dac60
call ebx
cmp word [0x10113cb2], 1
jne 0x100513c3
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x7b55338
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x7b55338], 0xa
push eax
push dword [ebp - 0x9c]
push 4
push 0x7b55338
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4d597b
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4d597b], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4d597b
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4da289
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4da289], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4da289
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4da297
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4da297], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4da297
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4da3a2
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4da3a2], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4da3a2
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4da3ce
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4da3ce], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4da3ce
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4da3d9
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4da3d9], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x4da3d9
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x63d326
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x63d326], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x63d326
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x642112
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x642112], 0x101f53cc
push eax
push dword [ebp - 0x9c]
push 4
push 0x642112
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4d0e09
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4d0e09], 0x10113ae9
push eax
push dword [ebp - 0x9c]
push 4
push 0x4d0e09
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4d9f55
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4d9f55], 0x10113b09
push eax
push dword [ebp - 0x9c]
push 4
push 0x4d9f55
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c914e
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c914e], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c914e
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x14
push 0x63e908
call ebx
mov eax, 0x63e908
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x14
push 0x63e908
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x20
push 0xe611b2
call ebx
push 0x20
push 0x10113aad
push 0xe611b2
call fcn.100669d0
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x20
push 0xe611b2
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x11
push 0xe61f70
call ebx
mov ecx, 0xe61f70
mov eax, dword [0x10113ad8]
mov dword [ecx], eax
mov eax, dword [0x10113adc]
mov dword [ecx + 4], eax
mov eax, dword [0x10113ae0]
mov dword [ecx + 8], eax
mov eax, dword [0x10113ae4]
mov dword [ecx + 0xc], eax
mov al, byte [0x10113ae8]
mov byte [ecx + 0x10], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x11
push ecx
call ebx
push fcn.1005c560
push 0x65fd79
push 0xff
call fcn.10063f10
add esp, 0xc
cmp word [0x10113cb2], 1
jne 0x1005157d
push 0x10026f20
push 0x4da280
push 0xe9
call fcn.10063f10
push 0x10026f50
push 0x4da3a1
push 0xe9
call fcn.10063f10
add esp, 0x18
cmp word [0x10113cbc], 1
jne 0x1005159e
push 0x95dfd3
push 0x95dfbe
push 0xe9
call fcn.10063f10
add esp, 0xc
cmp word [0x10113cbe], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x10051696
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d3d57
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x1005160a
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d3d57
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d3d57
call ebx
test eax, eax
jne 0x1005160c
call esi
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x15e
push 0x944e50
call ebx
push 0x15e
push 0x90
push 0x944e50
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x15e
push 0x944e50
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x145
push 0x661700
call ebx
push 0x145
push 0x90
push 0x661700
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x145
push 0x661700
call ebx
cmp word [0x10113c64], 1
jne 0x100516ea
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0xc8
push 0x8193f0
call ebx
push 0xc8
push 0x90
push 0x8193f0
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0xc8
push 0x8193f0
call ebx
call fcn.10026b40
cmp word [0x10113cc2], 1
jne 0x1005174e
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d3af2
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x1005174c
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d3af2
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d3af2
call ebx
test eax, eax
jne 0x1005174e
call esi
cmp word [0x10113cc4], 0
jne 0x10051794
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x30
push 0x62f876
call ebx
push 0x30
push 0x90
push 0x62f876
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x30
push 0x62f876
call ebx
cmp word [0x10113cc6], 1
jne 0x100517fd
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d39a0
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x100517f6
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d39a0
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d39a0
call ebx
test eax, eax
jne 0x100517f8
call esi
call fcn.10026a60
cmp word [0x10113cc8], 1
jne 0x1005180c
call fcn.10026ad0
cmp word [0x10113cca], 1
jne 0x10051963
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x7c5ad2
call ebx
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x7c5ad2
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x25
push 0x7c5a68
call ebx
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x25
push 0x7c5a68
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x1d7
push 0x842dd0
call ebx
push 0x1d7
push 0x90
push 0x842dd0
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x1d7
push 0x842dd0
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x868c47
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x868c47], 5
push eax
push dword [ebp - 0x9c]
push 1
push 0x868c47
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x868cf0
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x868cf0], 0xc3
push eax
push dword [ebp - 0x9c]
push 1
push 0x868cf0
call ebx
cmp word [0x10113ccc], 1
mov edi, 0x7d37a2
jne 0x100519bf
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push edi
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x100519bd
mov al, byte [ebp - 0x9d]
mov byte [edi], al
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push edi
call ebx
test eax, eax
jne 0x100519bf
call esi
cmp word [0x10113cce], 1
jne 0x10051a08
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.10063f10
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.10063f10
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.10063f10
add esp, 0x24
cmp word [0x10113cd0], 1
jne 0x10051a3d
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.10063f10
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.10063f10
add esp, 0x18
cmp word [0x10113cd2], 1
jne 0x10051aa6
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x834e13
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x10051a9f
mov cl, byte [ebp - 0x9d]
mov eax, 0x834e13
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x834e13
call ebx
test eax, eax
jne 0x10051aa1
call esi
call fcn.100269f0
push 0x100272a0
push 0x5b96e8
push 0xe8
call fcn.10063f10
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.10063fd0
mov edx, 7
mov ecx, 0x4d9d45
call fcn.10063fd0
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.10063fd0
mov edx, 8
mov ecx, 0x4dac5c
call fcn.10063fd0
mov edx, 5
mov ecx, 0x5451f7
call fcn.10063fd0
mov edx, 8
mov ecx, 0x545230
call fcn.10063fd0
mov edx, 8
mov ecx, 0x5a52e9
call fcn.10063fd0
push 0x101fdee0
mov edx, 0x6a
call fcn.100640a0
push 0x101fddf0
mov edx, 0x6b
call fcn.100640a0
push 0x101fdfd0
mov edx, 0x6c
call fcn.100640a0
add esp, 0x18
push 0x10113d94
call fcn.100214c0
push 0x10117124
call fcn.10021530
push 0x1011a4b4
call fcn.100215a0
push 0x1011d844
call fcn.1001eb10
push 0x1011fb6c
call fcn.10026570
push 0x10122a4c
call fcn.1001a9a0
push 0x1016c5fc
call fcn.10017e80
push 0x1016c6b0
call fcn.10018190
mov ecx, 0x25
lea edi, [ebp - 0x98]
mov esi, 0x1016f410
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x10051bd7
imul edi, eax, 0x94
mov ecx, 0x25
mov esi, 0x1016f410
add edi, 0x100b6184
rep movsd dword es:[edi], dword [esi]
push 0x1016e910
call fcn.10018b30
push 0x1013c08c
call fcn.10062d50
push 0x1015c42c
call fcn.10026be0
push 0x10171bb4
call fcn.10019940
push 0x1016f4a4
call fcn.10050250
push 0x1017276c
call fcn.10021840
push 0x1017c6cc
call fcn.10023320
push 0x1017ec4c
call fcn.1001a21a
push 0x10181cbc
call fcn.10017d70
push 0x101891ec
call fcn.10018020
push 0x1018342c
call fcn.10023440
mov esi, 0x1018e7dc
nop word [eax + eax]
mov eax, dword [esi]
test eax, eax
js 0x10051c71
cmp eax, 0x64
jge 0x10051c71
push esi
mov ecx, 0x100968a8
call fcn.10022330
add esi, 0x1c
cmp esi, 0x1018f2cc
jl 0x10051c50
push 0x1018f2cc
call fcn.10022220
mov esi, 0x1018f90c
cmp dword [esi], 0
jl 0x10051c9b
push esi
mov ecx, 0x100d426c
call fcn.10021ea0
add esi, 0x2c
cmp esi, 0x1019fadc
jl 0x10051c80
push 0x1019fadc
call fcn.10023a40
push 0x101a971c
call fcn.10024090
push 0x101b047c
call fcn.1001dab0
push 0x101b71dc
call fcn.1001dcb0
push 0x101c109c
call fcn.1001dd30
mov esi, 0x101d1294
cmp dword [esi], 0
jl 0x10051ce8
push esi
call fcn.1001d7f0
add esi, 8
cmp esi, 0x101d2234
jl 0x10051cd2
push 0
push ecx
push str.DataEnc1.dat
call fcn.10056000
push 1
push ecx
push str.DataDec2.dat
call fcn.10056000
call fcn.1000f3f0
call fcn.10027130
call fcn.10048b30
call fcn.10048c20
call fcn.1005aad0
call fcn.1005db30
push 0x1005e590
push 0x4d13c2
push 0xe9
call fcn.10063f10
push 0x1005e7d0
push 0x4d2782
push 0xe9
call fcn.10063f10
push 0x1005e8a0
push 0x830c3a
push 0xe9
call fcn.10063f10
add esp, 0x24
call fcn.10011ff0
call fcn.10048cd0
mov dword [0x101fcab8], 0
mov byte [0x101fcaa4], 0
mov dword [0x101fcaac], 0xffffffff
mov dword [0x101fcab4], 0xffffffff
mov dword [0x101fcaa8], 0xffffffff
call fcn.10033540
push 0x100551d0
push 0x7e4641
push 0xff
call fcn.10063f10
push 0x10055250
push 0x7e4753
push 0xff
call fcn.10063f10
push 0x100551b0
push 0x7e46a0
push 0xe9
call fcn.10063f10
add esp, 0x24
call fcn.10002180
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10002660
push 0x100199d0
push 0x101ffacc
call fcn.10001c30
push 0x10019be0
push 0x101ffb14
call fcn.10001c30
call fcn.100021f0
call fcn.10010e80
cmp word [0x10113c92], 1
jne 0x10051e29
call fcn.10021900
call fcn.100544a0
test byte [0x10113a6c], 1
je 0x10051e4a
push 0x10113a6d
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x10051e4a
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x10113a68
call fcn.1005bfc0
mov ecx, 0x10113a68
call fcn.1005c040
mov ecx, 0x10113a68
call fcn.1005c170
mov ecx, 0x10113a68
call fcn.1005c210
mov ecx, 0x10113a68
call fcn.1005c2b0
mov ecx, 0x10113a68
call fcn.1005c350
mov ecx, 0x10113a68
call fcn.1005c3f0
mov ecx, 0x10113a68
call fcn.1005c490
cmp word [0x10113ca8], 1
jne 0x10051ea9
call fcn.1004d2e0
call fcn.10020ef0
cmp word [0x10113c82], 1
jne 0x10051ebd
call fcn.1004fc50
cmp word [0x10113c66], 1
jne 0x1005215f
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89c6
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89c6], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89c6
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89cc
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89cc], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89cc
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89d2
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89d2], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89d2
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89d8
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89d8], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89d8
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89de
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89de], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89de
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5b89e4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5b89e4], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5b89e4
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push 0x5b89ea
call ebx
xor eax, eax
mov word [0x5b89ea], ax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 2
push 0x5b89ea
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c6316
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c6316], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c6316
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c6329
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c6329], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c6329
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c633c
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c633c], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c633c
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c634f
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c634f], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c634f
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c6362
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c6362], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c6362
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5c6375
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5c6375], 0
push eax
push dword [ebp - 0x9c]
push 1
push 0x5c6375
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push 0x5c6388
call ebx
xor eax, eax
mov word [0x5c6388], ax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 2
push 0x5c6388
call ebx
push str..Settings.ini
push 0
push str.ReduceMemory
push str.AntiLag
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
jne 0x10052190
push 0
push 0
push 0
push 0x100503e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ax, word [0x10113c60]
cmp ax, 4
jne 0x100521d1
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4030d4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4030d4], 6
push eax
push dword [ebp - 0x9c]
push 1
push 0x4030d4
call ebx
mov ax, word [0x10113c60]
cmp ax, 3
jne 0x1005220c
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4030d4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4030d4], 5
push eax
push dword [ebp - 0x9c]
push 1
push 0x4030d4
call ebx
mov ax, word [0x10113c60]
cmp ax, 2
jne 0x10052247
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4030d4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 0x9c]
push 1
push 0x4030d4
call ebx
mov ax, word [0x10113c60]
cmp ax, 1
jne 0x1005227c
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x4030d4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x4030d4], 3
push eax
push dword [ebp - 0x9c]
push 1
push 0x4030d4
call ebx
cmp word [0x10113c68], 1
jne 0x100522b5
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5528a0
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5528a0], 0xc3
push eax
push dword [ebp - 0x9c]
push 1
push 0x5528a0
call ebx
cmp word [0x10113ce0], 1
jne 0x100522d6
push 0x832897
push 0x832862
push 0xe9
call fcn.10063f10
add esp, 0xc
cmp word [0x10113d8e], 1
jne 0x100522e5
call fcn.10023280
cmp word [0x10113ca0], 1
jne 0x100522f4
call fcn.1001a1bb
mov ax, word [0x10113ca2]
test ax, ax
je 0x10052305
cmp ax, 3
jne 0x10052310
call fcn.1000c620
mov ax, word [0x10113ca2]
cmp ax, 1
je 0x1005231c
cmp ax, 2
jne 0x1005232c
call fcn.10062c40
call fcn.1000db60
mov ax, word [0x10113ca2]
cmp ax, 1
je 0x1005233e
cmp ax, 2
je 0x1005233e
cmp ax, 3
jne 0x10052343
call fcn.10028e60
call fcn.1000f0a0
mov ax, word [0x10113ca2]
cmp ax, 4
je 0x10052360
cmp ax, 5
je 0x10052360
cmp ax, 6
jne 0x100523ae
call fcn.10031970
push 0x1000d230
push 0x84bc0f
push 0xe8
call fcn.10063f10
push 0x1000d250
push 0x84bd1d
push 0xe8
call fcn.10063f10
push 0x1000c8c0
push 0x84bdb0
push 0xe9
call fcn.10063f10
add esp, 0x24
call fcn.10006bd0
call fcn.1000c620
cmp word [0x10113ca4], 0
jne 0x1005245f
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x85b6ac
call ebx
mov eax, 0x85b6ac
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x85b6ac
call ebx
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d4110
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
jne 0x10052424
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
jmp 0x10052465
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d4110
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d4110
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10052465
call edi
jmp 0x10052465
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp word [0x10113ca4], 1
jne 0x100524a6
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x85b6ac
call ebx
mov eax, 0x85b6ac
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x85b6ac
call ebx
cmp word [0x10113ca4], 2
jne 0x100526f3
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x7d2dee
call ebx
mov eax, 0x7d2dee
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x7d2dee
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x7d2e31
call ebx
mov eax, 0x7d2e31
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x7d2e31
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 5
push 0x7d2d18
call ebx
mov eax, 0x7d2d18
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 5
push 0x7d2d18
call ebx
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xb6
push eax
push 0x40
push 1
push 0x7d2d55
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x100525b1
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d2d55
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d2d55
call ebx
test eax, eax
jne 0x100525b3
call edi
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0x8b
push eax
push 0x40
push 1
push 0x7d2774
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x1005260b
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d2774
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d2774
call ebx
test eax, eax
jne 0x1005260d
call edi
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0x8b
push eax
push 0x40
push 1
push 0x7d281f
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x10052665
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d281f
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d281f
call ebx
test eax, eax
jne 0x10052667
call edi
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0x8b
push eax
push 0x40
push 1
push 0x7d26d8
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x100526bf
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d26d8
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d26d8
call ebx
test eax, eax
jne 0x100526c1
call edi
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x7d2f0b
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x7d2f0b], 0x1008d9a4
push eax
push dword [ebp - 0x9c]
push 4
push 0x7d2f0b
call ebx
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d37a2
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x1005274b
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d37a2
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d37a2
call ebx
test eax, eax
jne 0x1005274d
call edi
cmp word [0x10113cae], 1
jne 0x100527b1
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 0xff
push eax
push 0x40
push 1
push 0x7d3c6c
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x100527af
mov cl, byte [ebp - 0x9d]
mov eax, 0x7d3c6c
mov byte [eax], cl
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x7d3c6c
call ebx
test eax, eax
jne 0x100527b1
call edi
cmp word [0x10113cb0], 1
jne 0x10052800
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x69d
push 0x6097b0
call ebx
push 0x69d
push 0x90
push 0x6097b0
call fcn.10066f50
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x69d
push 0x6097b0
call ebx
cmp word [0x10113caa], 1
jne 0x1005280f
call fcn.100057e0
cmp word [0x10113cac], 1
jne 0x1005284e
call fcn.10059580
call fcn.10059a30
push 0x10023a80
push 0x56f476
push 0xe8
call fcn.10063f10
push 0x10023a80
push 0x5ebbe6
push 0xe8
call fcn.10063f10
add esp, 0x18
cmp word [0x10113cba], 1
jne 0x1005288f
call fcn.1004f7d0
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x4e8799
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x4e8799], 0x1008d9c4
push eax
push dword [ebp - 0x9c]
push 4
push 0x4e8799
call ebx
cmp word [0x10113cc4], 2
jne 0x1005289e
call fcn.10052fe0
call fcn.10054a40
cmp word [0x10113d78], 0
jne 0x100528b2
call fcn.100175d0
cmp word [0x10113d78], 1
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jne 0x1005292d
call fcn.10017ca0
call fcn.10061690
push str.DataObject55Object155.bmd
call esi
push 0x1008da18
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100528ed
push 0x1008da54
call eax
add esp, 4
cmp word [0x10113d7a], 0
jne 0x10052928
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x503834
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x503834], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x503834
call ebx
jmp 0x1005292d
call fcn.1005e940
cmp word [0x10113d78], 2
jne 0x10052a45
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0xe
push 0x9184d9
call ebx
mov eax, dword [str.192.95.49.237]
mov ecx, 0x9184d9
mov dword [ecx], eax
mov eax, dword [0x1008d9dc]
mov dword [ecx + 4], eax
mov eax, dword [0x1008d9e0]
mov dword [ecx + 8], eax
mov ax, word [0x1008d9e4]
mov word [ecx + 0xc], ax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0xe
push ecx
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 0x11
push 0x918522
call ebx
mov eax, dword [str.TbYehR2hFUPBKgZj]
mov ecx, 0x918522
mov dword [ecx], eax
mov eax, dword [0x1008d9ec]
mov dword [ecx + 4], eax
mov eax, dword [0x1008d9f0]
mov dword [ecx + 8], eax
mov eax, dword [0x1008d9f4]
mov dword [ecx + 0xc], eax
mov al, byte [0x1008d9f8]
mov byte [ecx + 0x10], al
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x9c]
push 0x11
push ecx
call ebx
push str.DataObject79Object179.bmd
call esi
push 0x1008da18
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100529f6
push str.InitLoginThemeS4
call eax
add esp, 4
cmp word [0x10113d7a], 0
jne 0x10052a36
call fcn.10061df0
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x503834
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x503834], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x503834
call ebx
jmp 0x10052a45
call fcn.100148b0
call fcn.10061030
call fcn.1005e940
cmp word [0x10113d78], 3
jne 0x10052a63
cmp word [0x10113d7a], 1
jne 0x10052a8d
call fcn.100148b0
call fcn.1005e940
cmp word [0x10113d78], 4
jne 0x10052a8d
call fcn.100148b0
cmp word [0x10113d7a], 0
jne 0x10052a83
call fcn.100623f0
jmp 0x10052a8d
call fcn.10061030
call fcn.1005e940
cmp word [0x10113ce6], 1
jne 0x10052cf3
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x954149
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x954149], 0x10113cf6
push eax
push dword [ebp - 0x9c]
push 4
push 0x954149
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x40b6ec
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x40b6ec], 0xeab
push eax
push dword [ebp - 0x9c]
push 4
push 0x40b6ec
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x77f93f
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x77f93f], 0xeab
push eax
push dword [ebp - 0x9c]
push 4
push 0x77f93f
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x954116
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x954116], 0x10113d16
push eax
push dword [ebp - 0x9c]
push 4
push 0x954116
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x40b6d7
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x40b6d7], 0xeac
push eax
push dword [ebp - 0x9c]
push 4
push 0x40b6d7
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x77f92a
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x77f92a], 0xeac
push eax
push dword [ebp - 0x9c]
push 4
push 0x77f92a
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x9540e3
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x9540e3], 0x10113d36
push eax
push dword [ebp - 0x9c]
push 4
push 0x9540e3
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x40b6c2
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x40b6c2], 0xead
push eax
push dword [ebp - 0x9c]
push 4
push 0x40b6c2
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x77f915
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x77f915], 0xead
push eax
push dword [ebp - 0x9c]
push 4
push 0x77f915
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x9540ad
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x9540ad], 0x10113d56
push eax
push dword [ebp - 0x9c]
push 4
push 0x9540ad
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x40b6ad
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x40b6ad], 0xeae
push eax
push dword [ebp - 0x9c]
push 4
push 0x40b6ad
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 4
push 0x77f900
call ebx
lea eax, [ebp - 0x9c]
mov dword [0x77f900], 0xeae
push eax
push dword [ebp - 0x9c]
push 4
push 0x77f900
call ebx
movzx esi, word [0x10113cd4]
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push 0x405b7c
call ebx
lea eax, [ebp - 0x9c]
mov word [0x405b7c], si
push eax
push dword [ebp - 0x9c]
push 2
push 0x405b7c
call ebx
movzx esi, word [0x10113cd4]
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push 0x40cc40
call ebx
lea eax, [ebp - 0x9c]
mov word [0x40cc40], si
push eax
push dword [ebp - 0x9c]
push 2
push 0x40cc40
call ebx
cmp word [0x10113d82], 1
jne 0x10052d73
call fcn.1001d260
call fcn.1001aba0
cmp word [0x10113cea], 1
jne 0x10052da1
push 0
call fcn.1006a9e2
push eax
call fcn.100687f3
push 0x10062810
push 0x4d70d4
push 0xe8
call fcn.10063f10
add esp, 0x14
call fcn.1004d670
call fcn.1001d6a0
push 0x10010e60
push 0x62f69a
push 0xe9
call fcn.10063f10
add esp, 0xc
cmp word [0x10113d86], 1
jne 0x10052ece
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x8385e4
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x8385e4], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x8385e4
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x838647
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x838647], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x838647
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x838658
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x838658], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x838658
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x5bd939
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x5bd939], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x5bd939
call ebx
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 1
push 0x7e1de1
call ebx
lea eax, [ebp - 0x9c]
mov byte [0x7e1de1], 0xeb
push eax
push dword [ebp - 0x9c]
push 1
push 0x7e1de1
call ebx
push ecx
mov edx, 6
mov ecx, 0x7e5429
call fcn.10063b20
add esp, 4
cmp word [0x10113d88], 2
jne 0x10052edd
call fcn.10054650
cmp word [0x10113d8c], 1
mov esi, 0x81c03fa
jne 0x10052f39
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 1
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x10052f37
mov al, byte [ebp - 0x9d]
mov byte [esi], al
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push esi
call ebx
test eax, eax
jne 0x10052f39
call edi
cmp word [0x10113d8c], 2
jne 0x10052faf
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x9d], 1
push eax
push 0x40
push 1
push 0x81c03fa
mov dword [ebp - 0x9c], 0
call ebx
test eax, eax
je 0x10052f96
mov al, byte [ebp - 0x9d]
mov byte [esi], al
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0
push 1
push 0x81c03fa
call ebx
test eax, eax
jne 0x10052f98
call edi
push 0x1001b680
push 0x5bafab
push 0xe8
call fcn.10063f10
add esp, 0xc
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1006459b
mov esp, ebp
pop ebp
ret