Function at 0x58b6b0
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60e2cc
mov eax, dword fs:[0]
push eax
sub esp, 0x5e0
mov eax, dword [0x697bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1d8], ecx
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x48c
call fcn.0058f2d0
push 0x18
lea ecx, [ebp - 0x3c]
call fcn.00578440
mov eax, dword [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x338]
call fcn.00589400
push eax
lea ecx, [ebp - 0x3c]
call fcn.005894f0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1e0], 0
call fcn.00521cb0
mov ecx, eax
call fcn.00526dc0
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jne 0x58b74f
mov dword [ebp - 0x24c], 1
jmp 0x58b759
mov dword [ebp - 0x24c], 0
mov cl, byte [ebp - 0x24c]
mov byte [ebp - 0x1d9], cl
movzx edx, byte [ebp - 0x1d9]
test edx, edx
je 0x58bc0b
lea eax, [ebp - 0x114]
push eax
call fcn.0057b1d0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x114]
call fcn.004eed70
movzx ecx, al
test ecx, ecx
jne 0x58bb7e
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x200], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x200], 0
je 0x58b7d2
push 0x61c92c
mov ecx, dword [ebp - 0x200]
call fcn.004ef370
mov dword [ebp - 0x210], eax
jmp 0x58b7dc
mov dword [ebp - 0x210], 0
mov edx, dword [ebp - 0x210]
mov dword [ebp - 0x280], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x1e0], eax
push 0
mov ecx, dword [ebp - 0x1e0]
push ecx
push 0x608
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x218], 0
push str.FlashCenter.exe
call fcn.004e7b40
add esp, 4
test eax, eax
je 0x58b9d7
push str.Flash_Center
lea ecx, [ebp - 0x3a0]
call fcn.004ef370
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3a0]
push ecx
call fcn.004edfc0
add esp, 4
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3a0]
call fcn.004ef480
cmp dword [ebp - 0x250], 0
je 0x58b9d2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2ec], esp
push str.MINI_OPEN_GAME
call fcn.004ef370
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x300], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1d8]
add eax, 0x418
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x308], esp
push eax
push 1
push ecx
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 1
call fcn.004ee020
add esp, 0x30
push 0
push 0
push 0x486
mov edx, dword [ebp - 0x250]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x61c94c
lea ecx, [ebp - 0x3e8]
call fcn.004ef370
mov byte [ebp - 4], 5
push 0x619f54
lea ecx, [ebp - 0x460]
call fcn.004ef370
mov byte [ebp - 4], 6
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
push edx
lea eax, [ebp - 0x144]
push eax
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x460]
call fcn.004ef480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3e8]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x318], esp
lea edx, [ebp - 0x144]
push edx
call fcn.004ef320
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x320], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x328], esp
push ecx
mov ecx, edx
call fcn.004ef320
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.004ef480
jmp 0x58bb38
push 5
push 0
mov eax, dword [ebp - 0x1d8]
add eax, 0x418
push eax
push 2
lea ecx, [ebp - 0x4f8]
push ecx
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
call fcn.004ef850
push eax
lea ecx, [ebp - 0x114]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x4f8]
call fcn.004ef480
push 0x61c94c
lea ecx, [ebp - 0x4d8]
call fcn.004ef370
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x218], 0x20
jle 0x58ba5d
mov dword [ebp - 0x238], 0x61c964
jmp 0x58ba67
mov dword [ebp - 0x238], 0x61c968
mov edx, dword [ebp - 0x238]
push edx
lea ecx, [ebp - 0x4a8]
call fcn.004ef370
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x4a8]
push ecx
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
push edx
lea eax, [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4a8]
call fcn.004ef480
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4d8]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2dc], esp
lea edx, [ebp - 0x174]
push edx
call fcn.004ef320
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x2e4], esp
push ecx
mov ecx, edx
call fcn.004ef320
mov dword [ebp - 0x358], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x174]
call fcn.004ef480
push 5
push 0
push 0x608
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x3c]
call fcn.0058a5f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.004ef480
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
jmp 0x58cbd0
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x220], 0
je 0x58bbb3
push 0x61c970
mov ecx, dword [ebp - 0x220]
call fcn.004ef370
mov dword [ebp - 0x248], eax
jmp 0x58bbbd
mov dword [ebp - 0x248], 0
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x268], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x1e0], eax
push 1
mov ecx, dword [ebp - 0x1e0]
push ecx
push 0x608
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.004ef480
jmp 0x58bd14
cmp dword [ebp - 0x1e4], 1
jne 0x58bc92
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x1f4], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x1f4], 0
je 0x58bc49
push 0x61c98c
mov ecx, dword [ebp - 0x1f4]
call fcn.004ef370
mov dword [ebp - 0x1fc], eax
jmp 0x58bc53
mov dword [ebp - 0x1fc], 0
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x270], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x1e0], edx
push 3
mov eax, dword [ebp - 0x1e0]
push eax
push 0x608
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x58bd14
cmp dword [ebp - 0x1e4], 3
jne 0x58bd14
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x204], 0
je 0x58bcd0
push 0x61c9a0
mov ecx, dword [ebp - 0x204]
call fcn.004ef370
mov dword [ebp - 0x20c], eax
jmp 0x58bcda
mov dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x1e0], ecx
push 3
mov edx, dword [ebp - 0x1e0]
push edx
push 0x608
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x1d8]
add edx, 0x428
push edx
lea ecx, [ebp - 0x6c]
call fcn.004ee9d0
mov byte [ebp - 4], 0x14
mov eax, dword [0x66ef08]
push eax
push 0x2f
lea ecx, [ebp - 0x6c]
call fcn.004eeda0
mov dword [ebp - 0x1e8], eax
lea ecx, [ebp - 0x6c]
call fcn.004eed70
movzx ecx, al
test ecx, ecx
jne 0x58bd64
mov edx, dword [0x66ef08]
cmp edx, dword [ebp - 0x1e8]
jne 0x58be90
push 0x66dd94
lea ecx, [ebp - 0x490]
call fcn.004ef370
mov byte [ebp - 4], 0x15
movzx eax, byte [ebp - 0x1d9]
test eax, eax
je 0x58bd8f
mov dword [ebp - 0x214], 0x61c9b4
jmp 0x58bd99
mov dword [ebp - 0x214], 0x6197ec
mov ecx, dword [ebp - 0x214]
push ecx
lea ecx, [ebp - 0x3b8]
call fcn.004ef370
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x490]
push edx
lea eax, [ebp - 0x3b8]
push eax
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
push ecx
lea edx, [ebp - 0x1a4]
push edx
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3b8]
call fcn.004ef480
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x490]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x360], esp
lea eax, [ebp - 0x1a4]
push eax
call fcn.004ef320
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x368], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x370], esp
push edx
call fcn.004ef320
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
lea ecx, [ebp - 0x3c]
call fcn.0058a5f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1a4]
call fcn.004ef480
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
jmp 0x58cbd0
lea ecx, [ebp - 0x6c]
call fcn.004eed60
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
sub eax, dword [ebp - 0x1e8]
push eax
mov ecx, dword [ebp - 0x1e8]
add ecx, 1
push ecx
lea edx, [ebp - 0x9c]
push edx
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x428
call fcn.004eedc0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x9c]
call fcn.004eed70
movzx eax, al
test eax, eax
je 0x58c024
push 0x66dd94
lea ecx, [ebp - 0x418]
call fcn.004ef370
mov byte [ebp - 4], 0x1c
movzx ecx, byte [ebp - 0x1d9]
test ecx, ecx
je 0x58bf12
mov dword [ebp - 0x21c], 0x61c9b4
jmp 0x58bf1c
mov dword [ebp - 0x21c], 0x6197ec
mov edx, dword [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x4c0]
call fcn.004ef370
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x4c0]
push ecx
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
push edx
lea eax, [ebp - 0x1d4]
push eax
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x4c0]
call fcn.004ef480
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x418]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x380], esp
lea edx, [ebp - 0x1d4]
push edx
call fcn.004ef320
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x364], esp
push ecx
mov ecx, edx
call fcn.004ef320
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
lea ecx, [ebp - 0x3c]
call fcn.0058a5f0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d4]
call fcn.004ef480
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
jmp 0x58cbd0
push 0xc
lea ecx, [ebp - 0x24]
call fcn.004e2570
lea ecx, [ebp - 0x24]
call fcn.004f6b10
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x194
call fcn.004ef850
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004e2fe0
add esp, 8
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xfc]
push ecx
push 0x619e3c
lea edx, [ebp - 0x528]
push edx
call fcn.004f9ac0
add esp, 0xc
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x2a0]
push ecx
push 0x619e40
lea ecx, [ebp - 0x5ec]
call fcn.0053f870
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x528]
call fcn.004eeb60
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1e9]
call fcn.004e2500
push eax
lea edx, [ebp - 0x5bc]
push edx
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00590860
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x2f8]
call fcn.00545ce0
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x24]
call fcn.004f6b50
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2f8]
call fcn.004fb500
mov byte [ebp - 4], 0x23
push fcn.004fa7c0
push 1
push 0x30
lea ecx, [ebp - 0x5ec]
push ecx
call fcn.005c433c
mov edx, dword [ebp - 0x1d8]
add edx, 0x428
push edx
lea ecx, [ebp - 0xe4]
call fcn.004ee9d0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x9c]
call fcn.004eed50
push eax
lea eax, [ebp - 0x558]
push eax
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2b0], ecx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x2b0]
call fcn.004ef850
push eax
lea edx, [ebp - 0x588]
push edx
call fcn.004e4da0
add esp, 4
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2c0]
call fcn.004ef850
push eax
push 0x66dff0
lea ecx, [ebp - 0x84]
push ecx
call fcn.004e37f0
add esp, 0x10
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x588]
call fcn.004ef480
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x558]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2e8], esp
lea edx, [ebp - 0x84]
push edx
call fcn.004ef320
mov dword [ebp - 0x348], eax
call fcn.004e6150
add esp, 0x18
mov eax, dword [ebp - 0x1d8]
add eax, 0x484
push eax
lea ecx, [ebp - 0x84]
call fcn.004ef850
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x350], esp
push eax
push ecx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x2fc], eax
lea edx, [ebp - 0xe4]
push edx
lea ecx, [ebp - 0x24]
call fcn.004f7210
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x264], eax
movzx ecx, byte [ebp - 0x1d9]
test ecx, ecx
je 0x58c2e9
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x224], 0
je 0x58c2a0
push str.Flash
mov ecx, dword [ebp - 0x224]
call fcn.004ef370
mov dword [ebp - 0x22c], eax
jmp 0x58c2aa
mov dword [ebp - 0x22c], 0
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x2d0], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x1e0], eax
push 2
mov ecx, dword [ebp - 0x1e0]
push ecx
push 0x608
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x58c3f2
cmp dword [ebp - 0x1e4], 1
jne 0x58c370
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x234], 0
je 0x58c327
push 0x61c9d8
mov ecx, dword [ebp - 0x234]
call fcn.004ef370
mov dword [ebp - 0x23c], eax
jmp 0x58c331
mov dword [ebp - 0x23c], 0
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x2d8], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x1e0], edx
push 4
mov eax, dword [ebp - 0x1e0]
push eax
push 0x608
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x58c3f2
cmp dword [ebp - 0x1e4], 3
jne 0x58c3f2
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0x2f
cmp dword [ebp - 0x244], 0
je 0x58c3ae
push 0x61c9ec
mov ecx, dword [ebp - 0x244]
call fcn.004ef370
mov dword [ebp - 0x1f0], eax
jmp 0x58c3b8
mov dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x29c], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x1e0], ecx
push 4
mov edx, dword [ebp - 0x1e0]
push edx
push 0x608
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x9c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x54]
push edx
call fcn.004e3070
add esp, 8
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x264], 0
je 0x58c598
movzx eax, byte [ebp - 0x1d9]
test eax, eax
je 0x58c432
mov dword [ebp - 0x254], 0x61c9b4
jmp 0x58c43c
mov dword [ebp - 0x254], 0x6197ec
mov ecx, dword [ebp - 0x254]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004ef370
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x448]
push eax
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
push ecx
lea edx, [ebp - 0x15c]
push edx
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x448]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
lea eax, [ebp - 0x15c]
push eax
call fcn.004ef320
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x304], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x384], esp
push edx
call fcn.004ef320
mov dword [ebp - 0x30c], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
push 0
mov eax, dword [ebp - 0x1e0]
push eax
push 0x60a
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x3c]
call fcn.0058a5f0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x15c]
call fcn.004ef480
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x84]
call fcn.004ef480
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xe4]
call fcn.004eeb60
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xfc]
call fcn.004eeb60
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
jmp 0x58cbd0
movzx eax, byte [ebp - 0x1d9]
test eax, eax
je 0x58c5af
mov dword [ebp - 0x1f8], 0x61ca00
jmp 0x58c5b9
mov dword [ebp - 0x1f8], 0x6196d4
mov ecx, dword [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x478]
call fcn.004ef370
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x478]
push eax
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
push ecx
lea edx, [ebp - 0x12c]
push edx
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x478]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34c], esp
lea eax, [ebp - 0x12c]
push eax
call fcn.004ef320
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x314], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x36c], esp
push edx
call fcn.004ef320
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x12c]
call fcn.004ef480
push 0x66dd94
lea ecx, [ebp - 0xb4]
call fcn.004ef370
mov byte [ebp - 4], 0x39
movzx eax, byte [ebp - 0x1d9]
test eax, eax
je 0x58c833
lea ecx, [ebp - 0x84]
push ecx
call fcn.0057b2b0
add esp, 4
movzx edx, al
test edx, edx
jne 0x58c7f3
push 0x61ca04
lea ecx, [ebp - 0x430]
call fcn.004ef370
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x430]
push ecx
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
push edx
lea eax, [ebp - 0x1bc]
push eax
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x430]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
lea edx, [ebp - 0x1bc]
push edx
call fcn.004ef320
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x324], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x1d8]
add ecx, 0x4c8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x37c], esp
push ecx
mov ecx, edx
call fcn.004ef320
mov dword [ebp - 0x32c], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1bc]
call fcn.004ef480
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xb4]
call fcn.004ef480
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x84]
call fcn.004ef480
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xe4]
call fcn.004eeb60
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xfc]
call fcn.004eeb60
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
jmp 0x58cbd0
mov eax, dword [ebp - 0x1d8]
add eax, 0x418
push eax
push 0
lea ecx, [ebp - 0x5b8]
push ecx
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x274], eax
mov edx, dword [ebp - 0x274]
push edx
lea ecx, [ebp - 0xb4]
call fcn.004ef440
lea ecx, [ebp - 0x5b8]
call fcn.004ef480
push 0x619e4c
lea ecx, [ebp - 0xb4]
call fcn.004ef520
mov eax, dword [ebp - 0x1d8]
add eax, 0x440
mov dword [ebp - 0x228], eax
push 4
lea ecx, [ebp - 0x14]
call fcn.004e2570
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x228]
call fcn.004efb30
push 4
lea ecx, [ebp - 0x18]
call fcn.004e2570
lea edx, [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x228]
call fcn.004efb40
jmp 0x58c890
lea ecx, [ebp - 0x14]
call fcn.004f2220
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call fcn.004f0040
movzx ecx, al
test ecx, ecx
je 0x58c965
lea ecx, [ebp - 0x14]
call fcn.004f0940
push eax
lea ecx, [ebp - 0x18c]
call fcn.004ee9d0
mov byte [ebp - 4], 0x3e
push 0x619e4c
lea ecx, [ebp - 0x18c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x540]
push edx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x27c]
push ecx
lea edx, [ebp - 0x510]
push edx
call fcn.004f4470
add esp, 0xc
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x284], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x284]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.004f4e50
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x510]
call fcn.004ef480
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x540]
call fcn.004ef480
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x18c]
call fcn.004eeb60
jmp 0x58c888
push 5
push 0
lea ecx, [ebp - 0xb4]
call fcn.004ef850
push eax
lea ecx, [ebp - 0x84]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x208], eax
push 0x66dd94
lea ecx, [ebp - 0xcc]
call fcn.004ef370
mov byte [ebp - 4], 0x41
movzx edx, byte [ebp - 0x1d9]
test edx, edx
je 0x58ca4c
cmp dword [ebp - 0x208], 0x20
jle 0x58c9cc
mov dword [ebp - 0x240], 0x61a23c
jmp 0x58c9d6
mov dword [ebp - 0x240], 0x61ca0c
mov eax, dword [ebp - 0x240]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.004ef370
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x3d0]
push edx
mov eax, dword [ebp - 0x1d8]
add eax, 0x4c8
push eax
lea ecx, [ebp - 0x570]
push ecx
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov dword [ebp - 0x2c4], eax
mov edx, dword [ebp - 0x2c4]
push edx
lea ecx, [ebp - 0xcc]
call fcn.004ef440
lea ecx, [ebp - 0x570]
call fcn.004ef480
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3d0]
call fcn.004ef480
jmp 0x58cadc
cmp dword [ebp - 0x208], 0x20
jle 0x58ca61
mov dword [ebp - 0x230], 0x6196ec
jmp 0x58ca6b
mov dword [ebp - 0x230], 0x619944
mov eax, dword [ebp - 0x230]
push eax
lea ecx, [ebp - 0x400]
call fcn.004ef370
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x400]
push edx
mov eax, dword [ebp - 0x1d8]
add eax, 0x4c8
push eax
lea ecx, [ebp - 0x5a0]
push ecx
mov ecx, dword [ebp - 0x1d8]
call fcn.005872a0
mov dword [ebp - 0x28c], eax
mov edx, dword [ebp - 0x28c]
push edx
lea ecx, [ebp - 0xcc]
call fcn.004ef440
lea ecx, [ebp - 0x5a0]
call fcn.004ef480
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x400]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x35c], esp
lea eax, [ebp - 0xcc]
push eax
call fcn.004ef320
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x334], ecx
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x1d8]
add edx, 0x4c8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x374], esp
push edx
call fcn.004ef320
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x1d8]
call fcn.005871d0
lea ecx, [ebp - 0x3c]
call fcn.0058a5f0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xcc]
call fcn.004ef480
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xb4]
call fcn.004ef480
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x84]
call fcn.004ef480
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xe4]
call fcn.004eeb60
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xfc]
call fcn.004eeb60
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0058a1c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6c09
mov esp, ebp
pop ebp
ret