Function at 0x4192d0
Capabilities:
Execute command
Log keystrokes via polling
Manipulate boot configuration
Self delete

Disassembly:
push rbp
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
call fcn.0040157f
mov dword [rbp + 0xec], 0
lea rcx, str.title_Y.S.L
call sub.msvcrt.dll_system
call fcn.00401644
movzx eax, al
cmp eax, 1
setne al
test al, al
je 0x41933c
mov r9d, 0x10
lea r8, [0x004d7a9a]
lea rdx, [0x004d7aa0]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
lea rcx, str.color_0f
call sub.msvcrt.dll_system
mov dword [rbp + 0x8c], 0
mov r9d, 0x33
lea r8, [0x004d7b02]
lea rdx, [0x004d7b20]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
cmp eax, 6
sete al
test al, al
je 0x41c1df
lea rcx, str.color_0f
call sub.msvcrt.dll_system
lea rax, [rbp + 0x2e]
mov rcx, rax
call fcn.0048cd20
lea rdx, [rbp + 0x2e]
lea rax, [rbp - 0x60]
mov r8, rdx
lea rdx, str.qwert1234
mov rcx, rax
call fcn.004c00b0
lea rax, [rbp + 0x2e]
mov rcx, rax
call fcn.0048cd50
lea rax, [rbp + 0x2f]
mov rcx, rax
call fcn.0048cd20
lea rdx, [rbp + 0x2f]
lea rax, [rbp - 0x40]
mov r8, rdx
lea rdx, [0x004d77a8]
mov rcx, rax
call fcn.004c00b0
lea rax, [rbp + 0x2f]
mov rcx, rax
call fcn.0048cd50
mov dword [rbp + 0x88], 1
lea rdx, [0x004d7b4e]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov dword [rbp + 0xe8], 0
mov eax, dword [rbp + 0xe8]
movsxd rbx, eax
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.0044cf80
cmp rbx, rax
setb al
test al, al
je 0x419491
mov rax, qword [sym.imp.msvcrt.dll__getch]
call rax
mov byte [rbp + 0x5e], al
mov edx, 0x2a
mov rcx, qword [0x004de010]
call fcn.004cf960
movsx ecx, byte [rbp + 0x5e]
lea rax, [rbp + 0x30]
lea rdx, [rbp - 0x40]
mov r8d, ecx
mov rcx, rax
call fcn.004cff60
lea rdx, [rbp + 0x30]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004c0620
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.004c05e0
add dword [rbp + 0xe8], 1
jmp 0x419419
lea rdx, [rbp - 0x60]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004cf770
test al, al
je 0x4194ce
mov r9d, 0x40
lea r8, [0x004d7b02]
lea rdx, [0x004d7b5e]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
mov ebx, 0
jmp 0x419508
lea rcx, str.color_04
call sub.msvcrt.dll_system
lea rdx, [0x004d7b71]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 2
call fcn.00428b50
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov ebx, 1
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004c05e0
cmp ebx, 1
je 0x419520
mov ebx, 0
jmp 0x419525
mov ebx, 1
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004c05e0
cmp ebx, 1
jne 0x41953b
jmp 0x419382
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
lea rdx, [0x004d7b86]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, str.____________________________________________n
mov rcx, qword [0x004de010]
call fcn.004cf880
cmp dword [rbp + 0xec], 0
jne 0x419582
lea rcx, str.color_0f
call sub.msvcrt.dll_system
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004c0290
lea rdx, [0x004d7bd5]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp - 0x60]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.004cd010
lea rax, [rbp - 0x60]
lea rdx, [0x004d7be2]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419629
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov dword [rbp + 0xe4], 1
mov eax, dword [rbp + 0xe4]
lea edx, [rax + 1]
mov dword [rbp + 0xe4], edx
test eax, eax
setne al
test al, al
je 0x41c1bb
mov eax, dword [rbp + 0xe4]
mov edx, eax
mov rcx, qword [0x004de010]
call fcn.00495700
mov ecx, 1
call fcn.00428b50
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
jmp 0x4195e1
lea rax, [rbp - 0x60]
lea rdx, [0x004d7be7]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x4196ee
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
lea rdx, [0x004d7bee]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp + 0x28]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.00493200
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0xe0], eax
cmp dword [rbp + 0xe0], 0
jle 0x4196c7
mov eax, dword [rbp + 0xe0]
mov edx, eax
mov rcx, qword [0x004de010]
call fcn.00495700
mov ecx, 1
call fcn.00428b50
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
sub dword [rbp + 0xe0], 1
jmp 0x41968b
mov r9d, 0x30
lea r8, [0x004d7b02]
lea rdx, [0x004d7c00]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d7c0a]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419856
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
lea rax, [rbp + 0x24]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.00493200
mov rcx, rax
lea rax, [rbp + 0x1b]
mov rdx, rax
call fcn.004d09d0
mov rcx, rax
lea rax, [rbp + 0x20]
mov rdx, rax
call fcn.00493200
mov rcx, rax
lea rax, [rbp + 0x1a]
mov rdx, rax
call fcn.004d09d0
mov rcx, rax
lea rax, [rbp + 0x1c]
mov rdx, rax
call fcn.00493200
mov eax, dword [rbp + 0x24]
mov dword [rbp + 0xdc], eax
mov eax, dword [rbp + 0x20]
mov dword [rbp + 0xd8], eax
mov eax, dword [rbp + 0x1c]
mov dword [rbp + 0xd4], eax
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
add dword [rbp + 0xd4], 1
cmp dword [rbp + 0xd4], 0x3c
jne 0x4197ac
mov dword [rbp + 0xd4], 0
add dword [rbp + 0xd8], 1
cmp dword [rbp + 0xd8], 0x3c
jne 0x4197c6
mov dword [rbp + 0xd8], 0
add dword [rbp + 0xdc], 1
cmp dword [rbp + 0xdc], 0x18
jne 0x4197ed
mov dword [rbp + 0xd4], 0
mov dword [rbp + 0xd8], 0
mov dword [rbp + 0xdc], 0
mov eax, dword [rbp + 0xdc]
mov edx, eax
mov rcx, qword [0x004de010]
call fcn.00495700
mov edx, 0x3a
mov rcx, rax
call fcn.004cf960
mov rcx, rax
mov eax, dword [rbp + 0xd8]
mov edx, eax
call fcn.00495700
mov edx, 0x3a
mov rcx, rax
call fcn.004cf960
mov rcx, rax
mov eax, dword [rbp + 0xd4]
mov edx, eax
call fcn.00495700
mov ecx, 1
call fcn.00428b50
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
jmp 0x41978b
lea rax, [rbp - 0x60]
lea rdx, [0x004d7c0f]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419972
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov dword [rbp + 0xd0], 0
mov dword [rbp + 0xcc], 0
mov dword [rbp + 0xc8], 0
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
add dword [rbp + 0xc8], 1
cmp dword [rbp + 0xc8], 0x3c
jne 0x4198c8
mov dword [rbp + 0xc8], 0
add dword [rbp + 0xcc], 1
cmp dword [rbp + 0xcc], 0x3c
jne 0x4198e2
mov dword [rbp + 0xcc], 0
add dword [rbp + 0xd0], 1
cmp dword [rbp + 0xd0], 0x18
jne 0x419909
mov dword [rbp + 0xc8], 0
mov dword [rbp + 0xcc], 0
mov dword [rbp + 0xd0], 0
mov eax, dword [rbp + 0xd0]
mov edx, eax
mov rcx, qword [0x004de010]
call fcn.00495700
mov edx, 0x3a
mov rcx, rax
call fcn.004cf960
mov rcx, rax
mov eax, dword [rbp + 0xcc]
mov edx, eax
call fcn.00495700
mov edx, 0x3a
mov rcx, rax
call fcn.004cf960
mov rcx, rax
mov eax, dword [rbp + 0xc8]
mov edx, eax
call fcn.00495700
mov ecx, 1
call fcn.00428b50
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
jmp 0x4198a7
lea rax, [rbp - 0x60]
lea rdx, [0x004d7c18]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419b72
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
lea rdx, [0x004d7c20]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov edx, 0xa
mov rcx, rax
call fcn.004cf960
lea rdx, [0x004d7c9b]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rax, rbp
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.004931d0
movsd xmm0, qword [rbp]
movsd qword [rbp + 0xc0], xmm0
lea rax, [rbp + 0xf]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.004d09d0
mov rcx, rax
lea rax, [rbp + 0x10]
mov rdx, rax
call fcn.004931d0
mov rdx, qword [rax]
sub rdx, 0x18
mov rdx, qword [rdx]
add rax, rdx
mov rcx, rax
call fcn.00485d10
test al, al
je 0x419afa
movzx eax, byte [rbp + 0xf]
cmp al, 0x3d
je 0x419af9
movzx eax, byte [rbp + 0xf]
cmp al, 0x2b
jne 0x419a59
movsd xmm0, qword [rbp + 0x10]
movsd xmm1, qword [rbp + 0xc0]
addsd xmm0, xmm1
movsd qword [rbp + 0xc0], xmm0
jmp 0x4199eb
movzx eax, byte [rbp + 0xf]
cmp al, 0x2d
jne 0x419a7f
movsd xmm1, qword [rbp + 0x10]
movsd xmm0, qword [rbp + 0xc0]
subsd xmm0, xmm1
movsd qword [rbp + 0xc0], xmm0
jmp 0x4199eb
movzx eax, byte [rbp + 0xf]
cmp al, 0x2a
jne 0x419aa5
movsd xmm0, qword [rbp + 0x10]
movsd xmm1, qword [rbp + 0xc0]
mulsd xmm0, xmm1
movsd qword [rbp + 0xc0], xmm0
jmp 0x4199eb
movzx eax, byte [rbp + 0xf]
cmp al, 0x2f
jne 0x419acb
movsd xmm1, qword [rbp + 0x10]
movsd xmm0, qword [rbp + 0xc0]
divsd xmm0, xmm1
movsd qword [rbp + 0xc0], xmm0
jmp 0x4199eb
lea rdx, [0x004d7ca1]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 5
call fcn.00428b50
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
jmp 0x4199eb
nop
lea rdx, [0x004d7cb1]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rcx, rax
lea rax, [0x004ccfc0]
mov rdx, rax
call fcn.004954e0
mov rbx, rax
mov ecx, 0xa
call fcn.004cb1d0
mov edx, eax
mov rcx, rbx
call fcn.004cf9c0
movsd xmm0, qword [rbp + 0xc0]
movapd xmm1, xmm0
mov rcx, rax
call fcn.004956c0
mov edx, 0xa
mov rcx, rax
call fcn.004cf960
mov ecx, 0xa
call fcn.00428b50
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d7cb7]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419dc2
mov dword [rbp + 0xbc], 0
call fcn.00401a77
mov rax, qword [sym.imp.msvcrt.dll__getch]
call rax
mov byte [rbp + 0x5f], al
movsx eax, byte [rbp + 0x5f]
sub eax, 0x31
cmp eax, 6
ja case.default.0x419bd8
mov eax, eax
lea rdx, [rax*4]
lea rax, [0x004d886c]
mov eax, dword [rdx + rax]
cdqe
lea rdx, [0x004d886c]
add rax, rdx
jmp rax
call fcn.00402156
lea r9, [0x0050504c]
lea r8, [0x00505048]
lea rdx, [0x00505044]
lea rcx, [0x00505040]
call fcn.0040345e
jmp 0x419db0
call fcn.004027a7
lea r9, [0x0050504c]
lea r8, [0x00505048]
lea rdx, [0x00505044]
lea rcx, [0x00505040]
call fcn.0040345e
jmp 0x419db0
call fcn.004031d9
lea r9, [0x0050504c]
lea r8, [0x00505048]
lea rdx, [0x00505044]
lea rcx, [0x00505040]
call fcn.0040345e
jmp 0x419db0
call fcn.004030fe
lea r9, [0x0050504c]
lea r8, [0x00505048]
lea rdx, [0x00505044]
lea rcx, [0x00505040]
call fcn.0040345e
jmp 0x419db0
call fcn.0040349d
lea r9, [0x0050504c]
lea r8, [0x00505048]
lea rdx, [0x00505044]
lea rcx, [0x00505040]
call fcn.0040345e
jmp 0x419db0
lea rdx, [0x004d7cc0]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rcx, str.del__f__s__q__systemdrive_.tmp
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive_._mp
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive_.log
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive_.gid
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive_.chk
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive_.old
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__systemdrive__recycled.
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__windir_.bak
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__windir_prefetch.
call sub.msvcrt.dll_system
lea rcx, str.rd__s__q__windir__temp__md__windir__temp
call sub.msvcrt.dll_system
lea rcx, str.del__f__q__userprofile_cookies.
call sub.msvcrt.dll_system
lea rcx, str.del__f__q__userprofile__recent.
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q___userprofile_Local_SettingsTemporary_Internet_Files._
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q___userprofile_Local_SettingsTemp._
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q___userprofile__recent._
call sub.msvcrt.dll_system
lea rdx, [0x004d7f79]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rcx, str.pause
call sub.msvcrt.dll_system
jmp 0x419db0
lea rcx, str.sfc_scannow
call sub.msvcrt.dll_system
mov dword [rbp + 0xbc], 1
nop
cmp dword [rbp + 0xbc], 1
je 0x41c1ba
jmp 0x419b97
lea rax, [rbp - 0x60]
lea rdx, [0x004d7f9d]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419e21
lea rdx, [0x004d7fa8]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, str.1.0.0:Y.S.L
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, str.1.0.1:
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 0xa
call fcn.00428b50
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d803e]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419e76
lea rdx, [0x004d8048]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d8078]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d80a8]
mov rcx, qword [0x004de010]
call fcn.004cf880
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d80e5]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419e9e
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d80ea]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x419ff5
lea rdx, [0x004d80f0]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp - 4]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.00493200
mov rcx, rax
lea rax, [rbp - 8]
mov rdx, rax
call fcn.00493200
mov rcx, rax
lea rax, [rbp - 0xc]
mov rdx, rax
call fcn.00493200
lea rdx, [0x004d8147]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 0x3e8
mov rax, qword [sym.imp.msvcrt.dll__sleep]
call rax
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov ecx, 0xfffffff5
mov rax, qword [sym.imp.KERNEL32.dll_GetStdHandle]
call rax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0xb0], 0
mov edx, 0x10
mov ecx, 0
call fcn.004015c2
mov ebx, eax
mov edx, pe_nt_image_headers64
mov ecx, 0x20
call fcn.004015c2
movsx eax, al
mov edx, ebx
mov ecx, eax
call fcn.004015f3
add qword [rbp + 0xb0], 1
mov eax, dword [rbp - 0xc]
mov ecx, eax
mov rax, qword [sym.imp.msvcrt.dll__sleep]
call rax
mov eax, dword [rbp - 4]
movsxd rcx, eax
mov rax, qword [rbp + 0xb0]
cqo
idiv rcx
mov rax, rdx
test rax, rax
jne 0x419fb6
mov rdx, qword [0x004de020]
mov rcx, qword [0x004de010]
call fcn.004954d0
mov eax, dword [rbp - 4]
movsxd rbx, eax
mov rax, qword [rbp + 0xb0]
cqo
idiv rbx
mov rdx, rax
mov eax, dword [rbp - 8]
cdqe
cmp rdx, rax
jne 0x419f47
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov qword [rbp + 0xb0], 0
jmp 0x419f47
lea rax, [rbp - 0x60]
lea rdx, [0x004d8151]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a033
mov r9d, 0
lea r8, [0x004d8156]
lea rdx, str.Y.S.L
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d81ce]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a0d8
lea rdx, [0x004d81d8]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d8228]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d8255]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, str.:
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d82c8]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d82f3]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d8308]
mov rcx, qword [0x004de010]
call fcn.004cf880
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d8355]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a100
lea rcx, str.systeminfo
call sub.msvcrt.dll_system
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, str.tree
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a128
lea rcx, str.tree
call sub.msvcrt.dll_system
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d836e]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a294
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov byte [rbp + 0xaf], 1
mov edx, 0x2a
mov rax, qword [0x004de010]
lea rcx, [rax + 8]
call fcn.004c9d10
mov edx, 0x19
mov rax, qword [0x004de010]
lea rcx, [rax + 8]
call fcn.004c81c0
lea rdx, [0x004d8377]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov edx, 0x2a
mov rax, qword [0x004de010]
lea rcx, [rax + 8]
call fcn.004c9d10
mov edx, 0x14
mov rax, qword [0x004de010]
lea rcx, [rax + 8]
call fcn.004c81c0
lea rdx, [0x004d70d9]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rdx, [0x004d8388]
mov rcx, qword [0x004de010]
call fcn.004cf880
cmp byte [rbp + 0xaf], 0
je 0x41c1bb
lea rdx, [0x004d83c8]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp - 0x10]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.00493200
mov eax, dword [rbp - 0x10]
cmp eax, 5
ja case.default.0x41a23e
mov eax, eax
lea rdx, [rax*4]
lea rax, [0x004d8888]
mov eax, dword [rdx + rax]
cdqe
lea rdx, [0x004d8888]
add rax, rdx
jmp rax
call fcn.00418a5f
jmp 0x41a28f
call fcn.00419066
jmp 0x41a28f
call fcn.00418cd2
jmp 0x41a28f
call fcn.00418e8a
jmp 0x41a28f
call fcn.00418b9a
jmp 0x41a28f
mov byte [rbp + 0xaf], 0
jmp 0x41a28f
lea rdx, [0x004d83d5]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rdx, qword [0x004de020]
mov rcx, rax
call fcn.004954d0
nop
jmp 0x41a1e3
lea rax, [rbp - 0x60]
lea rdx, str.Kill_PC
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a3e7
lea rdx, [0x004d83f8]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rcx, str.pause
call sub.msvcrt.dll_system
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp + 0x70], eax
mov ecx, 1
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp + 0x6c], eax
mov ecx, 0
call fcn.00401560
mov ecx, eax
call sub.msvcrt.dll_srand
mov qword [rbp + 0xa0], 0xf4240
cmp qword [rbp + 0xa0], 0
je 0x41a343
call sub.msvcrt.dll_rand
cdq
idiv dword [rbp + 0x6c]
mov ebx, edx
call sub.msvcrt.dll_rand
cdq
idiv dword [rbp + 0x70]
mov eax, edx
mov edx, ebx
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_SetCursorPos]
call rax
sub qword [rbp + 0xa0], 1
jmp 0x41a30c
lea rcx, str.rd__s__q__windir_System32
call sub.msvcrt.dll_system
lea rcx, str.del__f__s__q__userprofile_.
call sub.msvcrt.dll_system
lea rcx, str.attrib__r__s__h_c:_autoexec.bat
call sub.msvcrt.dll_system
lea rcx, str.del_C:_autoexec.bat
call sub.msvcrt.dll_system
lea rcx, str.attrib__r__s__h_C:_boot.ini
call sub.msvcrt.dll_system
lea rcx, str.del_C:_boot.ini
call sub.msvcrt.dll_system
lea rcx, str.attrib__r__s__h_c:_ntldr
call sub.msvcrt.dll_system
lea rcx, str.del_C:_ntldr
call sub.msvcrt.dll_system
lea rcx, str.attrib__r__s__h_c:windowswin.ini
call sub.msvcrt.dll_system
lea rcx, str.del_c:windowswin.ini
call sub.msvcrt.dll_system
lea rcx, str._echo_off_start_reg_delete_HKCR_.exe_start_reg_delete_HKCR_.dll_start_reg_delete_HKCR_
call sub.msvcrt.dll_system
call fcn.00419141
call fcn.004191b9
call fcn.00419231
lea rcx, str.del__f__s__q__systemdrive_.
call sub.msvcrt.dll_system
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d85df]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a41e
mov ecx, 0
call fcn.00401560
mov ecx, eax
call sub.msvcrt.dll_srand
call fcn.004016f8
call fcn.0040193f
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d85e8]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a51f
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004c0290
lea rdx, [0x004d85f1]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp - 0x40]
mov rdx, rax
mov rcx, qword [0x004ddfe0]
call fcn.004cd010
lea rax, [rbp - 0x40]
lea rdx, str.exit
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41a4c6
mov r9d, 4
lea r8, [0x004d8603]
lea rdx, [0x004d8610]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
cmp eax, 6
sete al
test al, al
je 0x41a4ba
mov dword [rbp + 0xec], 1
jmp 0x41a50e
mov dword [rbp + 0xec], 0
jmp 0x41a50e
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.0044cfa0
mov rcx, rax
call sub.msvcrt.dll_system
mov dword [rbp + 0x74], eax
cmp dword [rbp + 0x74], 0
je 0x41a445
lea rdx, [0x004d8637]
mov rcx, qword [0x004ddff0]
call fcn.004cf880
mov rdx, qword [0x004de020]
mov rcx, rax
call fcn.004954d0
jmp 0x41a445
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004c05e0
jmp 0x41c1bb
lea rax, [rbp - 0x60]
lea rdx, [0x004d8645]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41bd0a
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
lea rcx, str.mode_con_cols60_lines37
call sub.msvcrt.dll_system
mov dword [rbp - 0x18], 1
mov dword [rbp - 0x14], 0
mov ecx, 0xfffffff5
mov rax, qword [sym.imp.KERNEL32.dll_GetStdHandle]
call rax
mov rcx, rax
lea rax, [rbp - 0x18]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
call rax
mov ecx, 0
call fcn.00401560
mov ecx, eax
call sub.msvcrt.dll_srand
mov dword [0x00505088], 0
mov dword [0x00505054], 1
mov dword [0x00505060], 1
mov dword [0x00505050], 0x64
movss xmm0, dword [0x004d8a88]
movss dword [0x005052f4], xmm0
mov dword [0x0050505c], 0x12c
movss xmm0, dword [0x004d8908]
movss dword [0x005052f8], xmm0
movss xmm0, dword [0x004d88f4]
movss dword [0x005052e0], xmm0
movss xmm0, dword [0x004d8a48]
movss dword [0x005052e4], xmm0
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
mov r8d, 0x3d0928
mov edx, 0
lea rcx, [0x005072a0]
call sub.msvcrt.dll_memset
mov r8d, 0xa0
mov edx, 0xffffffff
lea rcx, [0x00505140]
call sub.msvcrt.dll_memset
mov dword [0x0050508c], 0
mov dword [0x00505080], 0
mov dword [0x00505084], 0xffffffff
mov dword [0x0050509c], 0
mov eax, dword [0x00505050]
imul eax, eax, 0x64
cvtsi2ss xmm0, eax
movss dword [0x005052f4], xmm0
movss xmm0, dword [0x004d8a7c]
movss dword [0x005052f0], xmm0
mov r8d, 0x28
mov edx, 0
lea rcx, [0x00505220]
call sub.msvcrt.dll_memset
mov r8d, 0x28
mov edx, 0
lea rcx, [0x00505260]
call sub.msvcrt.dll_memset
mov r8d, 0x28
mov edx, 0
lea rcx, [0x005052a0]
call sub.msvcrt.dll_memset
mov eax, dword [0x00505088]
and eax, 1
test eax, eax
jne 0x41a6e7
mov dword [0x0050508c], 0
mov eax, dword [0x00505088]
and eax, 1
test eax, eax
jne 0x41a7b9
mov eax, dword [0x005050d4]
test eax, eax
jne 0x41a7b9
mov eax, dword [0x00505088]
test eax, eax
jle 0x41a71a
mov ecx, 5
call fcn.00417b0b
mov dword [0x005051f4], 0
call sub.msvcrt.dll_rand
cdq
shr edx, 0x1e
add eax, edx
and eax, 3
sub eax, edx
add eax, 1
mov dword [0x005050b4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [0x00505088]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
cmp dword [rbp + 0x9c], eax
jge 0x41a78d
mov eax, dword [rbp + 0x9c]
cdqe
lea rdx, [rax*4]
lea rax, [0x005050c0]
mov edx, dword [rdx + rax]
mov eax, dword [0x005050b4]
cmp edx, eax
jne 0x41a784
jmp 0x41a724
add dword [rbp + 0x9c], 1
jmp 0x41a747
mov eax, dword [0x00505088]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [0x005050b4]
movsxd rdx, edx
lea rcx, [rdx*4]
lea rdx, [0x005050c0]
mov dword [rcx + rdx], eax
mov eax, dword [0x00505088]
cdq
shr edx, 0x1f
add eax, edx
and eax, 1
sub eax, edx
cmp eax, 1
jne 0x41a977
mov eax, dword [0x005050d4]
test eax, eax
jne 0x41a977
mov eax, dword [0x00505088]
cmp eax, 7
jne 0x41a811
mov dword [0x005051f4], 6
mov dword [0x0050508c], 0
mov eax, dword [0x00505050]
add eax, 0x64
mov dword [0x00505050], eax
jmp 0x41a886
nop
call sub.msvcrt.dll_rand
mov ecx, eax
movsxd rax, ecx
imul rax, rax, 0x55555556
shr rax, 0x20
mov rdx, rax
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
add eax, eax
add eax, edx
mov edx, ecx
sub edx, eax
lea eax, [rdx + 1]
mov dword [0x005051f4], eax
mov dword [rbp + 0x98], 0
cmp dword [rbp + 0x98], 3
jg 0x41a886
mov eax, dword [rbp + 0x98]
cdqe
lea rdx, [rax*4]
lea rax, [0x005052d0]
mov edx, dword [rdx + rax]
mov eax, dword [0x005051f4]
cmp edx, eax
jne 0x41a87d
jmp 0x41a812
add dword [rbp + 0x98], 1
jmp 0x41a84e
mov eax, dword [0x00505088]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [0x005051f4]
movsxd rdx, edx
lea rcx, [rdx*4]
lea rdx, [0x005052d0]
mov dword [rcx + rdx], eax
mov dword [0x00505208], 0
mov eax, dword [0x00505208]
mov dword [0x00505204], eax
mov eax, dword [0x00505204]
mov dword [0x00505200], eax
movss xmm0, dword [0x004d88dc]
movss dword [0x005052fc], xmm0
movss xmm0, dword [0x004d8904]
movss dword [0x00505300], xmm0
movss xmm0, dword [0x004d8908]
movss dword [0x00505304], xmm0
movss xmm0, dword [0x004d8904]
movss dword [0x00505308], xmm0
movss xmm0, dword [0x004d8920]
movss dword [0x0050530c], xmm0
movss xmm0, dword [0x004d8904]
movss dword [0x00505310], xmm0
lea rcx, str.color_4C
call sub.msvcrt.dll_system
mov ecx, 0x14
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rcx, str.color_0F
call sub.msvcrt.dll_system
mov edx, 1
mov ecx, 0
call fcn.00404a1e
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cdq
shr edx, 0x1f
add eax, edx
and eax, 1
sub eax, edx
cmp eax, 1
jne 0x41a9d2
mov eax, dword [0x00505088]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
add eax, 1
imul eax, eax, 0x1f4
mov dword [0x005051fc], eax
mov eax, dword [0x005051fc]
mov dword [0x005051f8], eax
mov eax, dword [0x005051f4]
cmp eax, 2
jne 0x41a9d2
movss xmm0, dword [0x004d8a78]
movss dword [0x005052f0], xmm0
mov eax, dword [0x0050508c]
add eax, 1
mov dword [0x0050508c], eax
mov eax, dword [0x0050511c]
test eax, eax
jne 0x41aac1
mov ecx, 0x25
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
shr ax, 0xf
test al, al
je 0x41aa5e
movss xmm0, dword [0x005052f0]
movss xmm1, dword [0x005052e4]
subss xmm0, xmm1
call fcn.004cccc0
cvtss2sd xmm1, xmm0
movsd xmm0, qword [0x004d8a90]
mulsd xmm1, xmm0
movsd xmm0, qword [0x004d8a10]
subsd xmm0, xmm1
movq xmm1, qword [0x004d8aa0]
xorpd xmm0, xmm1
movsd xmm1, qword [0x004d8a40]
divsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [0x005052ec], xmm0
mov ecx, 0x27
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
shr ax, 0xf
test al, al
je 0x41aac1
movss xmm0, dword [0x005052f0]
movss xmm1, dword [0x005052e4]
subss xmm0, xmm1
call fcn.004cccc0
cvtss2sd xmm1, xmm0
movsd xmm0, qword [0x004d8a90]
mulsd xmm1, xmm0
movsd xmm0, qword [0x004d8a10]
subsd xmm0, xmm1
movsd xmm1, qword [0x004d8a40]
divsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [0x005052ec], xmm0
mov ecx, 0x26
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
test ax, ax
jns 0x41aae5
mov eax, dword [0x005050a4]
test eax, eax
jne 0x41aae5
mov eax, 1
jmp 0x41aaea
mov eax, 0
test al, al
je 0x41ada5
mov eax, dword [0x005050a4]
add eax, 1
mov dword [0x005050a4], eax
mov eax, dword [0x005050a0]
cmp eax, 1
jne 0x41ab8a
mov dword [0x005050a0], 0
mov dword [0x00505098], 0
mov eax, dword [0x00505054]
cmp eax, 2
jne 0x41ab65
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
pxor xmm0, xmm0
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88f4]
movss dword [0x005052e0], xmm0
mov dword [0x005050d0], 5
jmp 0x41ada5
movss xmm0, dword [0x004d8964]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d8a34]
movss dword [0x005052ec], xmm0
jmp 0x41ada5
mov eax, dword [0x00505098]
test eax, eax
jne 0x41ac37
mov eax, dword [0x0050511c]
test eax, eax
jne 0x41ac37
mov dword [0x005050a0], 0
mov dword [0x00505098], 1
mov eax, dword [0x00505054]
cmp eax, 2
jne 0x41ac12
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
movss xmm0, dword [0x004d88c0]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88dc]
movss dword [0x005052e0], xmm0
mov edx, 3
mov ecx, 0
call fcn.00404a1e
mov dword [0x005050d0], 5
jmp 0x41ada5
movss xmm0, dword [0x004d8924]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88d8]
movss dword [0x005052ec], xmm0
jmp 0x41ada5
mov eax, dword [0x00505098]
cmp eax, 1
jne 0x41acf1
mov eax, dword [0x0050511c]
test eax, eax
jne 0x41acf1
mov dword [0x005050a0], 0
mov dword [0x00505098], 2
mov eax, dword [0x00505054]
cmp eax, 2
jne 0x41accc
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
movss xmm0, dword [0x004d88c0]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x005052e0]
movss xmm1, dword [0x004d8a48]
subss xmm0, xmm1
movss dword [0x005052e0], xmm0
mov edx, 3
mov ecx, 0
call fcn.00404a1e
mov dword [0x005050d0], 5
jmp 0x41ada5
movss xmm0, dword [0x004d88c8]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88d8]
movss dword [0x005052ec], xmm0
jmp 0x41ada5
mov eax, dword [0x00505054]
cmp eax, 3
jne 0x41ad51
mov eax, dword [0x00505098]
cmp eax, 2
jne 0x41ad51
mov eax, dword [0x0050511c]
test eax, eax
jne 0x41ad51
mov dword [0x005050a0], 0
mov dword [0x00505098], 3
movss xmm0, dword [0x004d88c0]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88ec]
movss dword [0x005052ec], xmm0
mov dword [0x0050509c], 0x1e
jmp 0x41ada5
mov eax, dword [0x00505054]
cmp eax, 4
jne 0x41ada5
mov eax, dword [0x00505098]
cmp eax, 2
jne 0x41ada5
mov eax, dword [0x0050511c]
test eax, eax
jne 0x41ada5
mov dword [0x005050a0], 0
mov dword [0x00505098], 3
movss xmm0, dword [0x004d8ab0]
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88d8]
movss dword [0x005052ec], xmm0
mov ecx, 0x28
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
test ax, ax
jns 0x41adc9
mov eax, dword [0x005050a8]
test eax, eax
jne 0x41adc9
mov eax, 1
jmp 0x41adce
mov eax, 0
test al, al
je 0x41aebc
mov eax, dword [0x005050a8]
add eax, 1
mov dword [0x005050a8], eax
mov eax, dword [0x005050a0]
cmp eax, 1
jne 0x41ae24
mov eax, dword [0x00505054]
cmp eax, 5
jne 0x41ae24
mov dword [0x005050a0], 2
mov dword [0x00505098], 0
movss xmm0, dword [0x004d8ab4]
movss dword [0x005052e8], xmm0
jmp 0x41aebc
mov dword [0x005050a0], 1
mov dword [0x00505098], 0
mov eax, dword [0x00505054]
cmp eax, 2
jne 0x41ae89
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
pxor xmm0, xmm0
movss dword [0x005052e8], xmm0
movss xmm0, dword [0x004d88e8]
movss dword [0x005052e0], xmm0
mov edx, 3
mov ecx, 0
call fcn.00404a1e
mov dword [0x005050d0], 5
jmp 0x41aebc
mov eax, dword [0x0050509c]
test eax, eax
je 0x41aeac
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
mov dword [0x0050509c], 0
movss xmm0, dword [0x004d8ab8]
movss dword [0x005052e8], xmm0
mov ecx, 0x26
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
not eax
shr ax, 0xf
test al, al
je 0x41aede
mov dword [0x005050a4], 0
mov ecx, 0x28
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
not eax
shr ax, 0xf
test al, al
je 0x41af00
mov dword [0x005050a8], 0
call sub.msvcrt.dll__kbhit
test eax, eax
setne al
test al, al
je 0x41af5e
mov rax, qword [sym.imp.msvcrt.dll__getch]
call rax
mov byte [rbp + 0x7b], al
cmp byte [rbp + 0x7b], 0x20
jne 0x41af5e
mov ecx, 0x64
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d88e4]
call fcn.004038a3
mov eax, dword [0x00505094]
add eax, 1
mov dword [0x00505094], eax
lea rcx, str.pause
call sub.msvcrt.dll_system
mov eax, dword [0x00505094]
cmp eax, 1
jne 0x41af99
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d88e4]
call fcn.004038a3
lea rcx, str.
call fcn.0043ea70
mov eax, dword [0x00505094]
sub eax, 1
mov dword [0x00505094], eax
mov eax, dword [0x0050506c]
test eax, eax
jne 0x41afe8
movss xmm0, dword [0x005052f4]
cvtss2sd xmm1, xmm0
movss xmm0, dword [0x005052f8]
cvtss2sd xmm0, xmm0
movsd xmm2, qword [0x004d8ac0]
divsd xmm0, xmm2
addsd xmm1, xmm0
mov eax, dword [0x00505050]
cvtsi2ss xmm0, eax
call fcn.004ccec0
cvtsd2ss xmm0, xmm0
movss dword [0x005052f4], xmm0
jmp 0x41b035
mov ecx, dword [0x0050508c]
movsxd rax, ecx
imul rax, rax, 0x66666667
shr rax, 0x20
mov edx, eax
sar edx, 2
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
shl eax, 2
add eax, edx
add eax, eax
mov edx, ecx
sub edx, eax
test edx, edx
jne 0x41b035
movss xmm0, dword [0x005052f4]
movss xmm1, dword [0x004d88c0]
subss xmm0, xmm1
movss dword [0x005052f4], xmm0
mov ecx, dword [0x0050508c]
movsxd rax, ecx
imul rax, rax, 0x66666667
shr rax, 0x20
mov edx, eax
sar edx, 3
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
sub ecx, eax
mov edx, ecx
test edx, edx
jne 0x41b08f
mov eax, dword [0x005050ac]
test eax, eax
je 0x41b07b
mov dword [0x005050ac], 0
mov eax, dword [0x00505064]
test eax, eax
je 0x41b08f
mov dword [0x00505064], 0
mov eax, dword [0x005050b0]
test eax, eax
jle 0x41b0a8
mov eax, dword [0x005050b0]
sub eax, 1
mov dword [0x005050b0], eax
mov eax, dword [0x005050d0]
test eax, eax
jle 0x41b0c1
mov eax, dword [0x005050d0]
sub eax, 1
mov dword [0x005050d0], eax
mov eax, dword [0x00505068]
test eax, eax
jle 0x41b0da
mov eax, dword [0x00505068]
sub eax, 1
mov dword [0x00505068], eax
mov eax, dword [0x0050506c]
test eax, eax
jle 0x41b0f3
mov eax, dword [0x0050506c]
sub eax, 1
mov dword [0x0050506c], eax
mov eax, dword [0x00505120]
test eax, eax
jle 0x41b10c
mov eax, dword [0x00505120]
sub eax, 1
mov dword [0x00505120], eax
mov eax, dword [0x0050510c]
test eax, eax
jle 0x41b12f
mov ecx, 1
call fcn.00417b0b
mov eax, dword [0x0050510c]
sub eax, 1
mov dword [0x0050510c], eax
mov eax, dword [0x00505114]
test eax, eax
jle 0x41b152
mov ecx, 2
call fcn.00417b0b
mov eax, dword [0x00505114]
sub eax, 1
mov dword [0x00505114], eax
mov eax, dword [0x0050511c]
test eax, eax
jle 0x41b175
mov ecx, 3
call fcn.00417b0b
mov eax, dword [0x0050511c]
sub eax, 1
mov dword [0x0050511c], eax
mov eax, dword [0x00505118]
test eax, eax
jle 0x41b198
mov ecx, 4
call fcn.00417b0b
mov eax, dword [0x00505118]
sub eax, 1
mov dword [0x00505118], eax
mov eax, dword [0x005051f4]
test eax, eax
jne 0x41b1db
mov edx, dword [0x0050508c]
movsxd rax, edx
imul rax, rax, 0x57619f1
shr rax, 0x20
mov ecx, eax
sar ecx, 5
mov eax, edx
sar eax, 0x1f
sub ecx, eax
mov eax, ecx
imul eax, eax, 0x5dc
sub edx, eax
mov eax, edx
mov ecx, dword [0x005050b4]
mov edx, eax
call fcn.00410eeb
call fcn.00412569
mov ecx, dword [0x0050508c]
movsxd rax, ecx
imul rax, rax, 0x66666667
shr rax, 0x20
mov edx, eax
sar edx, 3
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
mov edx, ecx
sub edx, eax
cmp edx, 1
jne 0x41b222
mov eax, dword [0x00505058]
add eax, 1
mov dword [0x00505058], eax
mov eax, dword [0x0050508c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
mov ecx, edx
sar ecx, 4
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x32
sub eax, edx
mov edx, eax
cmp edx, 1
jne 0x41b36d
mov eax, dword [0x00505058]
add eax, 1
mov dword [0x00505058], eax
lea rcx, [0x004d786f]
call sub.msvcrt.dll_system
pxor xmm1, xmm1
movss xmm0, dword [0x004d8904]
call fcn.004038a3
mov ecx, 0
call fcn.0040390c
mov dword [rbp + 0x94], 1
cmp dword [rbp + 0x94], 0x3c
jg 0x41b2ae
lea rcx, [0x004d7873]
call fcn.0043ea70
add dword [rbp + 0x94], 1
jmp 0x41b290
mov eax, dword [0x00505088]
test eax, eax
jne 0x41b36d
mov eax, dword [0x0050508c]
cmp eax, 0x12b
jg 0x41b36d
movss xmm1, dword [0x004d8a48]
movss xmm0, dword [0x004d88e4]
call fcn.004038a3
lea rdx, [0x004d8690]
mov rcx, qword [0x004de010]
call fcn.004cf880
movss xmm1, dword [0x004d8a48]
movss xmm0, dword [0x004d8930]
call fcn.004038a3
lea rdx, [0x004d86c0]
mov rcx, qword [0x004de010]
call fcn.004cf880
movss xmm1, dword [0x004d8a48]
movss xmm0, dword [0x004d8930]
call fcn.004038a3
lea rdx, [0x004d86f0]
mov rcx, qword [0x004de010]
call fcn.004cf880
movss xmm1, dword [0x004d8908]
movss xmm0, dword [0x004d88dc]
call fcn.004038a3
lea rdx, [0x004d8716]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
mov eax, dword [0x005051f4]
cmp eax, 1
jne 0x41b38c
call fcn.00412dad
mov eax, dword [0x005051f4]
cmp eax, 2
jne 0x41b39c
call fcn.004144f3
mov eax, dword [0x005051f4]
cmp eax, 3
jne 0x41b3ac
call fcn.00415ee2
mov eax, dword [0x005051f4]
cmp eax, 6
jne 0x41b3c6
call fcn.00412dad
call fcn.004144f3
call fcn.00415ee2
call fcn.0040d6e7
mov eax, dword [0x005050ac]
test eax, eax
setne al
movzx eax, al
mov edx, eax
mov ecx, 0
call fcn.00404a1e
mov ecx, 0
call fcn.0040390c
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d88c0]
call fcn.004038a3
mov eax, dword [0x00505050]
cvtsi2ss xmm0, eax
mov eax, dword [0x005052f4]
movaps xmm1, xmm0
movd xmm0, eax
call fcn.004ccf20
movd eax, xmm0
mov dword [0x005052f4], eax
mov eax, dword [0x005051f4]
test eax, eax
jne 0x41b46c
lea rdx, [0x004d8725]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rcx, rax
movss xmm0, dword [0x005052f4]
cvttss2si eax, xmm0
mov edx, eax
call fcn.00495700
lea rdx, [0x004d7614]
mov rcx, rax
call fcn.004cf880
mov ecx, 0
call fcn.0040390c
movss xmm1, dword [0x004d8ac8]
movss xmm0, dword [0x004d88c0]
call fcn.004038a3
lea rdx, [0x004d872c]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rcx, rax
mov eax, dword [0x005050d4]
mov edx, eax
call fcn.00495700
lea rdx, [0x004d7614]
mov rcx, rax
call fcn.004cf880
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d8924]
call fcn.004038a3
lea rdx, [0x0050505c]
lea rcx, [0x00505058]
call fcn.004ccd10
mov eax, dword [rax]
mov dword [0x00505058], eax
mov edx, dword [0x00505058]
mov eax, dword [0x0050505c]
cmp edx, eax
jl 0x41b550
mov dword [0x00505058], 0
mov eax, dword [0x00505060]
add eax, 1
mov dword [0x00505060], eax
mov eax, dword [0x00505064]
add eax, 1
mov dword [0x00505064], eax
movss xmm1, dword [0x005052f8]
movss xmm0, dword [0x004d88c0]
addss xmm0, xmm1
movss dword [0x005052f8], xmm0
mov eax, dword [0x00505050]
add eax, 5
mov dword [0x00505050], eax
mov eax, dword [0x00505064]
test eax, eax
jle 0x41b564
mov ecx, 5
call fcn.0040390c
lea rdx, [0x004d8737]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rcx, rax
mov eax, dword [0x00505060]
mov edx, eax
call fcn.00495700
mov ecx, 0
call fcn.0040390c
movss xmm1, dword [0x004d8ac8]
movss xmm0, dword [0x004d8924]
call fcn.004038a3
lea rdx, [0x004d873e]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov rcx, rax
mov eax, dword [0x00505058]
mov edx, eax
call fcn.00495700
lea rdx, [0x004d7614]
mov rcx, rax
call fcn.004cf880
mov eax, dword [0x005051f4]
test eax, eax
jle 0x41b614
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d892c]
call fcn.004038a3
lea rdx, [0x004d8745]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 7
call fcn.00417b0b
mov eax, dword [0x005051f4]
test eax, eax
jle 0x41b65b
mov eax, dword [0x005051f4]
cmp eax, 6
je 0x41b65b
movss xmm1, dword [0x004d88c0]
movss xmm0, dword [0x004d88e4]
call fcn.004038a3
lea rdx, [0x004d8751]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 6
call fcn.00417b0b
mov eax, dword [0x005051f4]
cmp eax, 6
jne 0x41b6b1
movss xmm1, dword [0x004d8ac8]
movss xmm0, dword [0x004d88c0]
call fcn.004038a3
mov eax, dword [0x0050508c]
cvtsi2sd xmm0, eax
movsd xmm1, qword [0x004d8ad0]
divsd xmm0, xmm1
movq rax, xmm0
mov rdx, rax
movq xmm0, rdx
movapd xmm1, xmm0
mov rdx, rax
lea rcx, [0x004d875c]
call fcn.0043ea70
mov eax, dword [0x00505088]
test eax, eax
jne 0x41b6c9
mov ecx, 0x37
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 1
jne 0x41b6e2
mov ecx, 0x32
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 2
jne 0x41b6fb
mov ecx, 0x23
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 3
jne 0x41b714
mov ecx, 0x28
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 4
jne 0x41b72d
mov ecx, 0x19
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 5
jne 0x41b746
mov ecx, 0x1e
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 6
jne 0x41b75f
mov ecx, 0x14
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
cmp eax, 6
jle 0x41b778
mov ecx, 0x11
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x005051f4]
cmp eax, 3
jne 0x41badc
mov eax, dword [0x005051f8]
test eax, eax
jg 0x41badc
mov dword [rbp + 0x90], 1
cmp dword [rbp + 0x90], 4
jg 0x41badc
mov eax, dword [0x00505084]
add eax, 1
mov dword [0x00505084], eax
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072b0]
mov dword [rdx + rax], 0x62
movss xmm0, dword [0x0050530c]
mov eax, dword [0x00505084]
movss xmm1, dword [0x004d88c0]
subss xmm0, xmm1
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a0]
movss dword [rdx + rax], xmm0
movss xmm0, dword [0x00505310]
movss xmm1, dword [0x004d88c0]
subss xmm0, xmm1
movaps xmm1, xmm0
cvtsi2ss xmm0, dword [rbp + 0x90]
mov eax, dword [0x00505084]
addss xmm0, xmm1
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072ac]
movss xmm0, dword [0x004d88e4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072c0]
mov dword [rdx + rax], 1
mov eax, dword [0x00505084]
add eax, 1
mov dword [0x00505084], eax
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072b0]
mov dword [rdx + rax], 0x62
mov eax, dword [0x00505084]
movss xmm0, dword [0x0050530c]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a0]
movss dword [rdx + rax], xmm0
movss xmm0, dword [0x00505310]
movss xmm1, dword [0x004d88c0]
subss xmm0, xmm1
movaps xmm1, xmm0
cvtsi2ss xmm0, dword [rbp + 0x90]
mov eax, dword [0x00505084]
addss xmm0, xmm1
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072ac]
movss xmm0, dword [0x004d88e4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072c0]
mov dword [rdx + rax], 1
mov eax, dword [0x00505084]
add eax, 1
mov dword [0x00505084], eax
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072b0]
mov dword [rdx + rax], 0x62
movss xmm0, dword [0x0050530c]
mov eax, dword [0x00505084]
movss xmm1, dword [0x004d8924]
subss xmm0, xmm1
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a0]
movss dword [rdx + rax], xmm0
movss xmm0, dword [0x00505310]
movss xmm1, dword [0x004d88c0]
subss xmm0, xmm1
movaps xmm1, xmm0
cvtsi2ss xmm0, dword [rbp + 0x90]
mov eax, dword [0x00505084]
addss xmm0, xmm1
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072a4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072ac]
movss xmm0, dword [0x004d88e4]
movss dword [rdx + rax], xmm0
mov eax, dword [0x00505084]
movsxd rdx, eax
mov rax, rdx
shl rax, 2
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [0x005072c0]
mov dword [rdx + rax], 1
add dword [rbp + 0x90], 1
jmp 0x41b79f
mov eax, dword [0x00505088]
and eax, 1
test eax, eax
jne 0x41baf6
mov eax, dword [0x0050508c]
cmp eax, 0x577
jg 0x41bb3f
mov eax, dword [0x00505088]
cdq
shr edx, 0x1f
add eax, edx
and eax, 1
sub eax, edx
cmp eax, 1
jne 0x41bb16
mov eax, dword [0x005051f8]
test eax, eax
jle 0x41bb3f
mov eax, dword [0x00505088]
cmp eax, 7
jne 0x41bb2e
mov eax, dword [0x0050508c]
cmp eax, 0x1c1
jg 0x41bb3f
movss xmm1, dword [0x005052f4]
pxor xmm0, xmm0
comiss xmm0, xmm1
jb 0x41bb50
mov edx, 0
mov ecx, 0xffffffff
call fcn.00404a1e
jmp 0x41bb55
jmp 0x41a9d2
movss xmm1, dword [0x005052f4]
pxor xmm0, xmm0
comiss xmm0, xmm1
jb 0x41bbd4
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x005050d4]
add eax, 1
mov dword [0x005050d4], eax
lea rcx, str.color_7F
call sub.msvcrt.dll_system
movss xmm1, dword [0x004d8ad8]
movss xmm0, dword [0x004d8908]
call fcn.004038a3
mov ecx, 4
call fcn.0040390c
lea rdx, str.GAME_OVER...
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 0x7d0
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x41a604
mov eax, dword [0x00505088]
cmp eax, 6
jne 0x41bc5a
lea rcx, str.color_7F
call sub.msvcrt.dll_system
movss xmm1, dword [0x004d8ad8]
movss xmm0, dword [0x004d8908]
call fcn.004038a3
mov ecx, 4
call fcn.0040390c
lea rdx, [0x004d8782]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 0x7d0
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
pxor xmm1, xmm1
movss xmm0, dword [0x004d89b8]
call fcn.004038a3
mov eax, dword [0x00505088]
add eax, 1
mov dword [0x00505088], eax
mov dword [0x005050d4], 0
jmp 0x41a666
mov eax, dword [0x00505088]
cmp eax, 7
jne 0x41bcde
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rcx, str.color_6E
call sub.msvcrt.dll_system
movss xmm1, dword [0x004d8ad8]
movss xmm0, dword [0x004d8908]
call fcn.004038a3
mov ecx, 5
call fcn.0040390c
lea rdx, [0x004d8796]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov ecx, 0x7d0
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
pxor xmm1, xmm1
movss xmm0, dword [0x004d89b8]
call fcn.004038a3
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
jmp 0x41bd05
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [0x00505088]
add eax, 1
mov dword [0x00505088], eax
mov dword [0x005050d4], 0
jmp 0x41a666
lea rax, [rbp - 0x60]
lea rdx, [0x004d879e]
mov rcx, rax
call fcn.004cf7f0
test al, al
je 0x41c196
lea rdx, [0x004d87a8]
mov rcx, qword [0x004de010]
call fcn.004cf880
mov dword [rbp + 0x84], 0xfa
mov dword [rbp + 0x80], 0xfa
mov dword [rbp + 0x7c], 0x2ee
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x528
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x4b0
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x4b0
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x528
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x4b0
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x4b0
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov ecx, 0x1f4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x3d4
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x84]
mov edx, eax
mov ecx, 0x424
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
mov eax, dword [rbp + 0x7c]
mov edx, eax
mov ecx, 0x370
mov rax, qword [sym.imp.KERNEL32.dll_Beep]
call rax
jmp 0x41c1bb
lea rax, [rbp - 0x60]
mov rdx, rax
mov rcx, qword [0x004de010]
call fcn.004cfaf0
lea rdx, [0x004d87e0]
mov rcx, rax
call fcn.004cf880
jmp 0x41c1bb
nop
lea rdx, [0x004d8844]
mov rcx, qword [0x004de010]
call fcn.004cf880
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004c05e0
jmp 0x41956d
mov r9d, 0x10
lea r8, [0x004d7b02]
lea rdx, [0x004d8848]
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
lea rcx, str.pause
call sub.msvcrt.dll_system
lea rcx, str.taskkill__f__im_YSLHacker.exe__t
call sub.msvcrt.dll_system
jmp 0x41c298
add rsp, 0x178
pop rbx
pop rbp
ret