Function at 0x402457
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create udp socket
Delete service
Get common file path
Initialize winsock library
Query or enumerate registry value
Query service status
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Set socket configuration
Start service
Stop service

Disassembly:
mov eax, 0x4cdb2b
call fcn.004bc0f4
mov eax, 0x15f4
call fcn.004bc670
mov eax, dword [0x6cda48]
push ebx
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x13e4]
push edi
xor ebx, ebx
push eax
mov esi, ecx
mov byte [ebp - 0x13c9], bl
mov byte [ebp - 0x13e5], bl
mov byte [ebp - 0x13e6], 1
call fcn.004999d0
lea ecx, [ebp - 0x13bc]
mov dword [ebp - 4], ebx
mov dword [esp], str.Windows_2000
call fcn.00401072
push dword [ebp - 0x13bc]
lea ecx, [ebp - 0x13e4]
mov byte [ebp - 4], 1
call fcn.0048c920
cmp eax, 0xffffffff
lea ecx, [ebp - 0x13bc]
setne byte [ebp - 0x13f5]
mov byte [ebp - 4], bl
call fcn.00401028
cmp byte [ebp - 0x13f5], bl
je 0x4024e9
mov byte [ebp - 0x13e6], bl
push 0xd
call fcn.00411160
pop ecx
push eax
lea ecx, [ebp - 0x1480]
call fcn.00401bfd
mov eax, 0xff
push eax
push eax
push ebx
push ebx
lea ecx, [ebp - 0x146c]
mov byte [ebp - 4], 2
call fcn.004011d6
push 0xf
mov byte [ebp - 4], 3
call fcn.00411160
pop ecx
push eax
lea ecx, [ebp - 0x14a8]
call fcn.00401bfd
push 0xa
mov byte [ebp - 4], 4
call fcn.00411160
pop ecx
push eax
lea ecx, [ebp - 0x1494]
call fcn.00401bfd
lea ecx, [ebp - 0x1500]
mov byte [ebp - 4], 5
call fcn.00401c75
lea ecx, [ebp - 0x15c0]
mov byte [ebp - 4], 6
call fcn.00401c75
lea ecx, [ebp - 0x1550]
mov byte [ebp - 4], 7
call fcn.00401c75
lea ecx, [ebp - 0x1450]
mov byte [ebp - 4], 8
call fcn.00401c75
lea eax, [ebp - 0x1480]
push eax
lea ecx, [ebp - 0x14fc]
mov byte [ebp - 4], 9
call fcn.00401c3c
or dword [ebp - 0x1500], 1
mov edi, str.Courier_New
push edi
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push ebx
lea eax, [ebp - 0x13bc]
push eax
push ebx
push 0x5a
push 0x5a
push 0x46
push 0xa
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xa
call fcn.00401b3a
push eax
lea ecx, [ebp - 0x14d4]
mov byte [ebp - 4], 0xb
call fcn.004010b1
or dword [ebp - 0x1500], 0x7c
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xa
call fcn.00412700
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x13bc]
call fcn.00401028
lea eax, [ebp - 0x146c]
push eax
lea ecx, [ebp - 0x15bc]
call fcn.00401c3c
or dword [ebp - 0x15c0], 1
push edi
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push ebx
lea eax, [ebp - 0x13bc]
push eax
push ebx
push 0x5a
push 0x5a
push 0x46
push 0xa
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xc
call fcn.00401b3a
push eax
lea ecx, [ebp - 0x1594]
mov byte [ebp - 4], 0xd
call fcn.004010b1
or dword [ebp - 0x15c0], 0x7c
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xc
call fcn.00412700
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 9
call fcn.00401028
lea eax, [ebp - 0x14a8]
push eax
lea ecx, [ebp - 0x154c]
call fcn.00401c3c
or dword [ebp - 0x1550], 1
push edi
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push ebx
lea eax, [ebp - 0x13bc]
push eax
push ebx
push 0x5a
push 0x5a
push 0x46
push 0xa
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xe
call fcn.00401b3a
push eax
lea ecx, [ebp - 0x1524]
mov byte [ebp - 4], 0xf
call fcn.004010b1
or dword [ebp - 0x1550], 0x7c
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0xe
call fcn.00412700
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 9
call fcn.00401028
lea eax, [ebp - 0x1494]
push eax
lea ecx, [ebp - 0x144c]
call fcn.00401c3c
or dword [ebp - 0x1450], 1
push edi
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push ebx
lea eax, [ebp - 0x13bc]
push eax
push ebx
push 0x5a
mov byte [ebp - 4], 0x10
push 0x5a
push 0x46
push 0xa
lea ecx, [ebp - 0x13c4]
call fcn.00401b3a
push eax
lea ecx, [ebp - 0x1424]
mov byte [ebp - 4], 0x11
call fcn.004010b1
or dword [ebp - 0x1450], 0x7c
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0x10
call fcn.00412700
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 9
call fcn.00401028
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
lea eax, [ebp - 0x15e4]
push eax
call fcn.00401af3
pop ecx
push ebx
lea ecx, [ebp - 0x13c0]
call fcn.00492240
lea eax, [ebp - 0x13c0]
push eax
push dword [0x6cc3a0]
lea eax, [ebp - 0x13bc]
push eax
lea ecx, [ebp - 0x15e4]
call fcn.00494420
push ecx
mov ecx, esp
mov dword [ebp - 0x13dc], esp
push dword [eax]
mov byte [ebp - 4], 0x12
push 0x3dc
push ebx
push str.Starting_PunkBuster_Service_Tests__v_d._d____s__n
push ecx
call fcn.0048cfd0
add esp, 0x14
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 9
call fcn.00401028
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.__PunkBuster_DLL_Install_Files_Included
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push ebx
call fcn.004076ba
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_OS
push 0x4e81a8
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
call fcn.0040902d
test eax, eax
mov edi, 0x4e81a0
jne 0x402856
mov edi, 0x4e8198
lea eax, [ebp - 0x13c0]
push eax
call fcn.004999d0
mov ecx, esp
mov dword [ebp - 0x13bc], esp
push edi
push dword [eax]
mov byte [ebp - 4], 0x13
push str.___s__s_n
push ecx
call fcn.0048cfd0
add esp, 0x10
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 9
call fcn.00401028
call fcn.00499cd0
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
push 0xf003f
push ebx
push ebx
mov dword [ebp - 0x13dc], eax
mov dword [ebp - 0x13ec], ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0x13d8], edi
jne 0x4028e3
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Cannot_open_a_handle_to_the_service_control_manager.__Please_make_sure_you_are_the_administrator_for_this_computer.
call fcn.00401896
pop ecx
pop ecx
jmp 0x402f22
push 0xf01ff
push str.PnkBstrA
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
jne 0x402913
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Unable_to_open_a_handle_to_PnkBstrA_service.
jmp 0x4028d7
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrA_service_status
mov edi, str.__35s
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x15dc]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x4029b1
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_query_the_PnkBstrA_service
call fcn.00401896
pop ecx
pop ecx
cmp dword [ebp - 0x15d8], 4
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
jne 0x402cec
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.RUNNING_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0x13bc], 0x28
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x402a2a
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrA_Version
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov dword [ebp - 0x1454], ebx
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x13ec]
push eax
push 1
push ebx
push str.SOFTWAREEven_BalancePnkBstrA
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x402ab7
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x1454]
push eax
push ebx
push ebx
push str.Version
push dword [ebp - 0x13ec]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x402e01
mov dword [ebp - 0x13d0], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x402acb
dec dword [ebp - 0x13d0]
jne 0x402ac1
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x402a70
call fcn.00498b00
mov edx, dword [eax]
lea ecx, [ebp - 0x13e0]
push ecx
mov ecx, eax
call dword [edx + 8]
push str.PnkBstrB.exe
lea ecx, [ebp - 0x13e0]
mov byte [ebp - 4], 0x16
call fcn.0040103f
lea eax, [ebp - 0x13e0]
push eax
lea eax, [ebp - 0x13bc]
push str.Extracting__PnkBstrB.exe__to:_n____
push eax
call fcn.0048c420
push 0x4e7ff4
push eax
lea eax, [ebp - 0x13c0]
push eax
mov byte [ebp - 4], 0x17
call fcn.0048c360
add esp, 0x14
mov ecx, esp
mov dword [ebp - 0x13d0], esp
push dword [eax]
mov byte [ebp - 4], 0x18
push edi
push ecx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x17
call fcn.00401028
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x16
call fcn.00401028
fld dword [0x52bec4]
push dword [0x52bec8]
push dword [0x52becc]
push ecx
fstp dword [esp]
push dword [0x52bed0]
push dword [ebp - 0x13e0]
push 0x52bed8
call fcn.00408f6b
add esp, 0x14
mov dword [ebp - 0x13d8], eax
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e34b4
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
cmp dword [ebp - 0x13d8], 1
pop ecx
pop ecx
je 0x402f30
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR:
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d8]
push str.pbpack_failed_with_error__ld_n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
pop ecx
pop ecx
jne 0x4034b5
push 0x4f1b58
lea ecx, [ebp - 0x13dc]
call fcn.00401072
push str.__ERROR:_Unpacking_services_failed.__Please_contact_www.evenbalance.com_for_assistance._n
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x19
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13dc]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x1a
call fcn.0042a430
mov byte [ebp - 4], 0x19
add esp, 0x18
lea ecx, [ebp - 0x13bc]
call fcn.00401028
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], 0x16
call fcn.00401028
jmp 0x4034b5
cmp dword [ebp - 0x15d8], 1
jne 0x402d10
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
call fcn.00401072
jmp 0x402d33
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x15d8]
push str.UNKNOWN_STATUS___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Starting_PnkBstrA_service
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push ebx
push ebx
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
test eax, eax
jne 0x402a08
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13dc], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13c8]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call edi
push dword [ebp - 0x13d8]
call edi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Failed_to_start_PnkBstrA_service
jmp 0x4028d7
cmp dword [ebp - 0x1454], 0x404
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
jb 0x402e66
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x1454]
push str.OK___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x402afb
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x1454]
push str.OUTDATED___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
jne 0x402f22
push 0x4f1b58
lea ecx, [ebp - 0x13dc]
call fcn.00401072
push str.__ERROR:_The_version_of_PnkBstrA_installed_on_your_system_is_outdated.__Please_first_uninstall_and_re_install_using_this_application.____If_you_still_have_problems__please_contact_Even_Balance_at_http:__www.evenbalance.com__for_further_support.
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x14
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13dc]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x15
call fcn.0042a430
add esp, 0x18
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x14
call fcn.00401028
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], 9
call fcn.00401028
push 1
mov ecx, esi
call fcn.0041f830
jmp 0x406280
push dword [ebp - 0x13e0]
call fcn.004980f0
test al, al
pop ecx
jne 0x403010
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR:
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.PnkBstrB_file_not_found
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
pop ecx
pop ecx
jne 0x4034b5
push 0x4f1b58
lea ecx, [ebp - 0x13dc]
call fcn.00401072
push str.__ERROR:_PnkBstrB_was_unpacked__but_could_not_be_found_on_the_file_system.__Please_contact_www.evenbalance.com_for_assistance._n
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x1b
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13dc]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x1c
call fcn.0042a430
mov byte [ebp - 4], 0x1b
jmp 0x402cca
push 0x4e7d54
push dword [ebp - 0x13e0]
call fcn.004bc601
cmp eax, ebx
pop ecx
pop ecx
jne 0x4030e8
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
jne 0x4034b5
push 0x4f1b58
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push dword [ebp - 0x13e0]
lea eax, [ebp - 0x13c0]
push str.__ERROR:_Could_not_open___s_.
push eax
mov byte [ebp - 4], 0x1d
call fcn.0048cfd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea ecx, [ebp - 0x13bc]
push ecx
push eax
mov byte [ebp - 4], 0x1e
call fcn.0042a430
add esp, 0x24
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x1d
call fcn.00401028
lea ecx, [ebp - 0x13bc]
jmp 0x402cde
push eax
call fcn.004bc554
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call fcn.00499cd0
cmp byte [ebp - 0x13e6], bl
push ecx
mov dword [ebp - 0x13c0], esp
je 0x403472
mov eax, esp
push str.Checking_firewall_settings
push edi
push eax
mov dword [ebp - 0x13d0], ebx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
lea eax, [ebp - 0x13d0]
push eax
call fcn.0040631d
add esp, 0xc
cmp eax, ebx
jl 0x40348b
lea eax, [ebp - 0x13d4]
push eax
push dword [ebp - 0x13d0]
call fcn.004063fe
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
mov dword [ebp - 0x13c0], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x328]
cmp dword [ebp - 0x13c0], ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
je 0x4031d4
push 0x4e7d10
jmp 0x4031d9
push str.OFF_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
cmp dword [ebp - 0x13d4], ebx
je 0x40348b
push 0x400
lea eax, [ebp - 0x444]
push eax
mov dword [ebp - 0x13bc], ebx
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
lea eax, [ebp - 0x444]
push str.PnkBstrA.exe
push eax
call fcn.004bc420
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Is_PnkBstrA_explicitly_allowed__n
push 0x4e7cd0
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
lea ecx, [ebp - 0x444]
push ecx
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0x401
lea eax, [ebp - 0x1228]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.004bba60
pop ecx
inc eax
push eax
lea eax, [ebp - 0x444]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
lea eax, [ebp - 0x13bc]
push eax
lea eax, [ebp - 0x1228]
push eax
push dword [ebp - 0x13d0]
call fcn.0040649f
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
add esp, 0xc
cmp dword [ebp - 0x13bc], ebx
jne 0x4032f6
lea edx, [ebp - 0x15c0]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7ccc
jmp 0x403311
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.YES_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
cmp dword [ebp - 0x13d4], ebx
je 0x40348b
push 0x400
lea eax, [ebp - 0x444]
push eax
mov dword [ebp - 0x13bc], ebx
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
lea eax, [ebp - 0x444]
push str.PnkBstrB.exe
push eax
call fcn.004bc420
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Is_PnkBstrB_explicitly_allowed__n
push 0x4e7cd0
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
lea ecx, [ebp - 0x444]
push ecx
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0x401
lea eax, [ebp - 0x1228]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.004bba60
pop ecx
inc eax
push eax
lea eax, [ebp - 0x444]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
lea eax, [ebp - 0x13bc]
push eax
lea eax, [ebp - 0x1228]
push eax
push dword [ebp - 0x13d0]
call fcn.0040649f
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
add esp, 0xc
cmp dword [ebp - 0x13bc], ebx
jne 0x403455
lea edx, [ebp - 0x15c0]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7ccc
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x40348b
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.YES_n
jmp 0x40342c
mov ecx, esp
push str.Skipping_firewall_checks_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
jne 0x4034c3
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Cannot_open_a_handle_to_the_service_control_manager.__Please_make_sure_you_are_the_administrator_for_this_computer.
call fcn.00401896
pop ecx
pop ecx
push 1
mov ecx, esi
call fcn.0041f830
jmp 0x406271
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_if_PnkBstrB_is_running
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf01ff
push str.PnkBstrB
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
je 0x4036c2
lea eax, [ebp - 0x15dc]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov ecx, dword [esi + 0x1a0]
test eax, eax
mov eax, dword [ecx]
jne 0x403585
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_query_the_PnkBstrB_service
call fcn.00401896
pop ecx
pop ecx
jmp 0x4036b4
cmp dword [ebp - 0x15d8], 4
lea edx, [ebp - 0x1500]
push edx
jne 0x403679
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.RUNNING_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Manually_stopping_PnkBstrB
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x15dc]
push eax
push 1
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x403662
jmp 0x4036b4
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x40370c
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.NOT_RUNNING_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Getting_port_for_PnkBstrA
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov dword [ebp - 0x13f4], ebx
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x13ec]
push eax
push 1
push ebx
push str.SOFTWAREEven_BalancePnkBstrA
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x403798
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x13f4]
push eax
push ebx
push ebx
push str.Port
push dword [ebp - 0x13ec]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
jne 0x403837
cmp dword [ebp - 0x13f4], ebx
ja 0x4037e1
mov dword [ebp - 0x13d0], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x4037ac
dec dword [ebp - 0x13d0]
jne 0x4037a2
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x403749
jmp 0x4038a7
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13f4]
push str.OK___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x4038a7
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
jne 0x4038a7
push 0x4f1b58
lea ecx, [ebp - 0x13d0]
call fcn.00401072
push str.__ERROR:_Could_not_read_PnkBstrA_port_registry_entry.__Please_first_uninstall_and_re_install_using_this_application.____If_you_still_have_problems__please_contact_Even_Balance_at_http:__www.evenbalance.com__for_further_support.
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x1f
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13d0]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x20
call fcn.0042a430
add esp, 0x18
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x1f
call fcn.00401028
lea ecx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x16
call fcn.00401028
cmp dword [ebp - 0x13f4], ebx
jne 0x403900
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Opening_socket_for_packet_send
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x13b8]
push eax
push 0x101
mov dword [ebp - 0x1554], 1
call sub.WSOCK32.dll_WSAStartup
cmp eax, ebx
je 0x403955
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Failed_to_create_client_socket
jmp 0x403b64
push 0x11
push 2
push 2
call sub.WSOCK32.dll_socket
cmp eax, 0xffffffff
mov dword [ebp - 0x13d0], eax
je 0x403944
lea eax, [ebp - 0x1554]
push eax
push 0x8004667e
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_ioctlsocket
test eax, eax
je 0x403997
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Failed_to_enable_non_blocking_on_the_socket
jmp 0x403b64
push 1
push 1
push 4
push 0xffff
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_setsockopt
push str.127.0.0.1
mov word [ebp - 0x40], 2
mov word [ebp - 0x3e], bx
call sub.WSOCK32.dll_inet_addr
push 8
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x38]
push ebx
push eax
call fcn.004bc3b0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_bind
cmp eax, 0xffffffff
jne 0x4039fa
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Failed_to_bind_to_a_port
jmp 0x403b64
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Sending_version_packet_to_PnkBstrA
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push dword [ebp - 0x13f4]
mov word [ebp - 0x30], 2
call sub.WSOCK32.dll_htons
push str.127.0.0.1
mov word [ebp - 0x2e], ax
call sub.WSOCK32.dll_inet_addr
push 8
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x28]
push ebx
push eax
call fcn.004bc3b0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x30]
push eax
push ebx
push 1
push 0x4e7a34
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_sendto
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
mov dword [ebp - 0x13c0], eax
cmp eax, 0xffffffff
mov eax, dword [ecx]
push edx
jne 0x403b12
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
mov esi, dword [esi + 0x1a0]
mov eax, dword [esi]
pop ecx
pop ecx
lea ecx, [ebp - 0x1450]
push ecx
mov ecx, esi
call dword [eax + 0x328]
jmp 0x403b58
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13bc], esp
push str.SENT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
cmp dword [ebp - 0x13c0], ebx
jge 0x403b70
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Send_on_client_socket_failed
call fcn.00401896
pop ecx
pop ecx
jmp 0x406271
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Receiving_version_from_PnkBstrA
push edi
push eax
mov dword [ebp - 0x14ac], 0x10
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
call fcn.00499cd0
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x14ac]
push eax
lea eax, [ebp - 0x20]
push eax
push ebx
push 0x5dc
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_recvfrom
cmp eax, 0xffffffff
mov dword [ebp - 0x13d8], eax
jne 0x403bef
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x403bef
cmp eax, 0x2746
jne 0x403cc7
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [ebp - 0x13dc]
cmp dword [ebp - 0x13d8], ebx
mov dword [ebp - 0x13d4], eax
jle 0x403c7e
push dword [ebp - 0x13f4]
call sub.WSOCK32.dll_htons
cmp word [ebp - 0x1e], ax
jne 0x403c2d
push str.127.0.0.1
call sub.WSOCK32.dll_inet_addr
cmp dword [ebp - 0x1c], eax
je 0x403cd9
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.ERROR:__Received__d_UNKNOWN_bytes_from__s:_d_n__Response___ld__ms__Response_unknown___s_._n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov edi, str.__35s
mov dword [ebp - 0x13d4], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x403c92
dec dword [ebp - 0x13d4]
jne 0x403c88
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x403baa
jmp 0x403d8a
push eax
push str.Receive_on_client_socket_failed
call fcn.00401896
pop ecx
pop ecx
jmp 0x403d8a
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__Version___s_n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xa
pop edi
call fcn.00499cd0
push 0x64
call fcn.00499090
dec edi
pop ecx
jne 0x403d75
mov edi, str.__35s
cmp dword [ebp - 0x13c8], 0xf
jl 0x403de7
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.TIMEOUT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Getting_PnkBstrB_install_instance
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x13ec]
push eax
push 1
push ebx
push str.SOFTWAREEven_BalancePnkBstrB
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x1400], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x403e82
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x1400]
push eax
push ebx
push ebx
push str.Instance
push dword [ebp - 0x13ec]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
push edx
je 0x403e6a
mov dword [ebp - 0x1400], ebx
jmp 0x403e8f
mov eax, dword [ecx]
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
jmp 0x403ea5
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
push edx
mov eax, dword [ecx]
call dword [eax + 0x328]
push ecx
mov dword [ebp - 0x13c0], esp
mov eax, esp
push str.NOT_FOUND_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Sending_start_packet_to_PnkBstrA
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
push dword [ebp - 0x13e0]
lea eax, [ebp - 0x13f0]
push 0x4e7898
push eax
call fcn.0048cfd0
add esp, 0x14
mov eax, dword [ebp - 0x13f0]
push 0x10
lea ecx, [ebp - 0x30]
push ecx
push ebx
push eax
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x13c0], eax
call fcn.004bba60
pop ecx
push eax
push dword [ebp - 0x13c0]
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_sendto
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
cmp eax, 0xffffffff
mov eax, dword [ecx]
push edx
jne 0x403f97
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
jmp 0x403fd5
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.SENT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call fcn.00499cd0
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Waiting_for_packet_from_PnkBstrA
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x14ac]
push eax
lea eax, [ebp - 0x20]
push eax
push ebx
push 0x5dc
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_recvfrom
cmp eax, 0xffffffff
mov dword [ebp - 0x13d8], eax
jne 0x40404a
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x40404a
cmp eax, 0x2746
jne 0x404122
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [ebp - 0x13dc]
cmp dword [ebp - 0x13d8], ebx
mov dword [ebp - 0x13d4], eax
jle 0x4040d9
push dword [ebp - 0x13f4]
call sub.WSOCK32.dll_htons
cmp word [ebp - 0x1e], ax
jne 0x404088
push str.127.0.0.1
call sub.WSOCK32.dll_inet_addr
cmp dword [ebp - 0x1c], eax
je 0x404134
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.ERROR:__Received__d_UNKNOWN_bytes_from__s:_d_n__Response___ld__ms__Response_unknown___s_._n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov edi, str.__35s
mov dword [ebp - 0x13d4], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x4040ed
dec dword [ebp - 0x13d4]
jne 0x4040e3
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x404005
jmp 0x404500
push eax
push str.Receive_on_client_socket_failed
call fcn.00401896
pop ecx
pop ecx
jmp 0x404500
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push 2
pop edi
push edi
lea eax, [ebp - 0xa24]
push 0x4e7870
push eax
call fcn.004bc370
add esp, 0xc
test eax, eax
jne 0x4041f3
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__PnkBstrB_started._n
push edi
call fcn.0048cfd0
add esp, 0x18
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__Load_SUCCESSFUL._n
jmp 0x404355
push edi
lea eax, [ebp - 0xa24]
push 0x4e780c
push eax
call fcn.004bc370
add esp, 0xc
test eax, eax
jne 0x40427b
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__PnkBstrB_DID_NOT_start._n
push edi
call fcn.0048cfd0
add esp, 0x18
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__Load_FAILED._n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov byte [ebp - 0x13c9], 1
jmp 0x404373
push edi
lea eax, [ebp - 0xa24]
push 0x4e77a8
push eax
call fcn.004bc370
add esp, 0xc
test eax, eax
jne 0x4042e7
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__PnkBstrB_DID_NOT_start._n
push edi
call fcn.0048cfd0
add esp, 0x18
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__Load_IGNORED.__3_seconds__n
jmp 0x404355
push edi
lea eax, [ebp - 0xa24]
push 0x4e7784
push eax
call fcn.004bc370
add esp, 0xc
test eax, eax
push ecx
mov dword [ebp - 0x13c0], esp
mov edi, esp
jne 0x4043db
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__PnkBstrB_DID_NOT_start._n
push edi
call fcn.0048cfd0
add esp, 0x18
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__Load_IGNORED.__10_seconds__n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
cmp byte [ebp - 0x13c9], bl
pop ecx
pop ecx
je 0x4044fb
mov edi, 0x400
push edi
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
lea eax, [ebp - 0x444]
push str.LogFilesPunkBuster_
push eax
call fcn.004bc420
lea eax, [ebp - 0x444]
push str.PnkBstrA.log
push eax
call fcn.004bc420
push 8
call fcn.004bb98c
add esp, 0x14
mov dword [ebp - 0x13c0], eax
cmp eax, ebx
mov byte [ebp - 4], 0x22
je 0x404448
push ebx
lea ecx, [ebp - 0x444]
push ecx
mov ecx, eax
call fcn.00498920
mov dword [ebp - 0x13d4], eax
jmp 0x40444e
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__Response_unknown___s_._n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__ERROR:_Unknown_packet_returned._n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov byte [ebp - 0x13e5], 1
jmp 0x404373
mov dword [ebp - 0x13d4], ebx
cmp dword [ebp - 0x13d4], ebx
mov byte [ebp - 4], 0x21
je 0x4044fb
mov ecx, dword [ebp - 0x13d4]
push edi
lea eax, [ebp - 0xe28]
push eax
mov dword [ebp - 0x13dc], ebx
call fcn.004981d0
cmp eax, 1
jl 0x4044af
mov ecx, dword [ebp - 0x13d4]
inc dword [ebp - 0x13dc]
mov byte [ebp + eax - 0xe28], bl
push edi
lea eax, [ebp - 0xe28]
push eax
call fcn.004981d0
cmp eax, 1
jge 0x40447c
cmp dword [ebp - 0x13dc], ebx
lea eax, [ebp - 0xe28]
jg 0x4044b4
mov eax, str._EMPTY_
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push eax
push str.__PnkBstrA.log:___s_n
push ecx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [ebp - 0x13d4]
call fcn.00498170
mov ecx, dword [ebp - 0x13d4]
call fcn.00498170
push dword [ebp - 0x13d4]
call fcn.004bbb4d
pop ecx
mov edi, str.__35s
cmp dword [ebp - 0x13c8], 0xf
jl 0x40455d
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.TIMEOUT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
push dword [ebp - 0x1400]
lea eax, [ebp - 0x13c0]
push str.Watching_for_PnkBstrB_instance_change___ld_
push eax
call fcn.0048cfd0
add esp, 8
mov ecx, esp
mov dword [ebp - 0x13bc], esp
push dword [eax]
mov byte [ebp - 4], 0x23
push edi
push ecx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x21
call fcn.00401028
call fcn.00499cd0
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov eax, dword [ebp - 0x1400]
mov dword [ebp - 0x14b0], eax
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x13ec]
push eax
push 1
push ebx
push str.SOFTWAREEven_BalancePnkBstrB
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x14b0]
push eax
push ebx
push ebx
push str.Instance
push dword [ebp - 0x13ec]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404615
mov eax, dword [ebp - 0x14b0]
cmp eax, dword [ebp - 0x1400]
jne 0x40465f
mov dword [ebp - 0x13dc], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x404629
dec dword [ebp - 0x13dc]
jne 0x40461f
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x4045c8
cmp dword [ebp - 0x13c8], 0xf
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
jl 0x404695
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.TIMEOUT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
jmp 0x4046bf
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x14b0]
push str.CHANGED___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call fcn.00499cd0
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Getting_port_for_PnkBstrB
push edi
push eax
mov dword [ebp - 0x13fc], ebx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x13ec]
push eax
push 1
push ebx
push str.SOFTWAREEven_BalancePnkBstrB
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x404766
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x13fc]
push eax
push ebx
push ebx
push str.Port
push dword [ebp - 0x13ec]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
jne 0x404805
cmp dword [ebp - 0x13f4], ebx
ja 0x4047af
mov dword [ebp - 0x13dc], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x40477a
dec dword [ebp - 0x13dc]
jne 0x404770
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x404717
jmp 0x404875
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13fc]
push str.OK___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x404875
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
jne 0x404875
push 0x4f1b58
lea ecx, [ebp - 0x13dc]
call fcn.00401072
push str.__ERROR:_Could_not_read_PnkBstrB_port_registry_entry.__Please_first_uninstall_and_re_install_using_this_application.____If_you_still_have_problems__please_contact_Even_Balance_at_http:__www.evenbalance.com__for_further_support.
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x24
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13dc]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x25
call fcn.0042a430
add esp, 0x18
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x24
call fcn.00401028
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], 0x21
call fcn.00401028
cmp dword [ebp - 0x13fc], ebx
jne 0x4048ce
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
push dword [ebp - 0x13fc]
mov word [ebp - 0x30], 2
call sub.WSOCK32.dll_htons
push str.127.0.0.1
mov word [ebp - 0x2e], ax
call sub.WSOCK32.dll_inet_addr
push 8
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x28]
push ebx
push eax
call fcn.004bc3b0
pop ecx
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Sending_version_packet_to_PnkBstrB
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0x10
lea eax, [ebp - 0x30]
push eax
push ebx
push 1
push 0x4e7a34
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_sendto
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
cmp eax, 0xffffffff
mov eax, dword [ecx]
push edx
jne 0x404996
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
jmp 0x4049d4
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.SENT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
push ecx
mov dword [ebp - 0x13dc], eax
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Receiving_version_from_PnkBstrB
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
call fcn.00499cd0
mov dword [ebp - 0x13c8], ebx
lea eax, [ebp - 0x14ac]
push eax
lea eax, [ebp - 0x20]
push eax
push ebx
push 0x5dc
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_recvfrom
cmp eax, 0xffffffff
mov dword [ebp - 0x13d8], eax
jne 0x404a55
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x404a55
cmp eax, 0x2746
jne 0x404b2d
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [ebp - 0x13dc]
cmp dword [ebp - 0x13d8], ebx
mov dword [ebp - 0x13d4], eax
jle 0x404ae4
push dword [ebp - 0x13fc]
call sub.WSOCK32.dll_htons
cmp word [ebp - 0x1e], ax
jne 0x404a93
push str.127.0.0.1
call sub.WSOCK32.dll_inet_addr
cmp dword [ebp - 0x1c], eax
je 0x404b3d
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.ERROR:__Received__d_UNKNOWN_bytes_from__s:_d_n__Response___ld__ms__Response_unknown___s_._n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov edi, str.__35s
mov dword [ebp - 0x13d4], 3
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x404af8
dec dword [ebp - 0x13d4]
jne 0x404aee
inc dword [ebp - 0x13c8]
cmp dword [ebp - 0x13c8], 0xf
jl 0x404a10
jmp 0x404bdb
push eax
push str.Receive_on_client_socket_failed
call fcn.00401896
jmp 0x404bd9
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov edi, esp
mov dword [ebp - 0x13c0], esp
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0x13d4]
push dword [ebp - 0x1e]
call sub.WSOCK32.dll_ntohs
movzx eax, ax
push eax
push dword [ebp - 0x1c]
call sub.WSOCK32.dll_inet_ntoa
push eax
push dword [ebp - 0x13d8]
push str.Received__d_bytes_from__s:_d_n__Response___ld__ms__Version___s_n
push edi
call fcn.0048cfd0
add esp, 0x1c
push dword [esi + 0x1a0]
call fcn.004076ba
mov edi, str.__35s
pop ecx
pop ecx
cmp dword [ebp - 0x13c8], 0xf
jl 0x404c38
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.TIMEOUT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrK_driver_status
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
je 0x405d0e
push 0xf01ff
push str.PnkBstrK
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
je 0x405127
lea eax, [ebp - 0x1570]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x404d10
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_query_the_PnkBstrK_driver
call fcn.00401896
pop ecx
pop ecx
jmp 0x405174
cmp dword [ebp - 0x156c], 4
jne 0x404dea
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.RUNNING_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Stopping_PnkBstrK
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x1570]
push eax
push 1
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_ControlService]
call fcn.00499cd0
mov dword [ebp - 0x13dc], 4
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x404dba
dec dword [ebp - 0x13dc]
jne 0x404db0
lea eax, [ebp - 0x1570]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cmp dword [ebp - 0x156c], 1
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
jne 0x404e18
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
jmp 0x404e3c
cmp dword [ebp - 0x156c], 4
lea edx, [ebp - 0x1550]
push edx
jne 0x404e43
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STILL_RUNNING_n
call fcn.00401072
jmp 0x404e66
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x156c]
push str.UNKNOWN_STATUS___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov dword [ebp - 0x13dc], 4
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x404e9c
dec dword [ebp - 0x13dc]
jne 0x404e92
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Deleting_PnkBstrK
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
call fcn.00499cd0
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
mov ecx, dword [esi + 0x1a0]
test eax, eax
mov eax, dword [ecx]
je 0x404f3f
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x404f94
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_delete_the_PnkBstrK_service.
call fcn.00401896
pop ecx
pop ecx
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call fcn.00499cd0
mov dword [ebp - 0x13dc], 4
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x404fb9
dec dword [ebp - 0x13dc]
jne 0x404faf
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrK_driver_status
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
je 0x405d0e
push 0xf01ff
push str.PnkBstrK
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
je 0x4050cc
lea eax, [ebp - 0x1600]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1550]
test eax, eax
mov eax, dword [ecx]
push edx
je 0x405080
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x15fc]
push str.STILL_FOUND__driver_status__ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
jmp 0x40509c
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.STILL_FOUND__no_status__n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x405119
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.DELETED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x405174
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.NOT_FOUND_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call fcn.0040902d
test eax, eax
jne 0x405c9c
call fcn.00498b00
mov edx, dword [eax]
lea ecx, [ebp - 0x13d4]
push ecx
mov ecx, eax
call dword [edx + 8]
push str.PnkBstrK.sys
lea ecx, [ebp - 0x13d4]
mov byte [ebp - 4], 0x26
call fcn.0040103f
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d4]
push str.Extracting_new_PnkBstrK_to:_n_____s__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
fld dword [0x541b5c]
pop ecx
pop ecx
push dword [0x541b60]
push dword [0x541b64]
push ecx
fstp dword [esp]
push dword [0x541b68]
push dword [ebp - 0x13d4]
push 0x541b70
call fcn.00408f6b
add esp, 0x14
mov dword [ebp - 0x13d8], eax
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e34b4
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
cmp dword [ebp - 0x13d8], 1
pop ecx
pop ecx
je 0x405339
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR:
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x13d8]
push str.pbpack_failed_with_error__ld_n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
pop ecx
pop ecx
jne 0x40532b
push 0x4f1b58
lea ecx, [ebp - 0x13d0]
call fcn.00401072
push str.__ERROR:_Unpacking_services_failed.__Please_contact_www.evenbalance.com_for_assistance._n
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x27
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13d0]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x28
call fcn.0042a430
mov byte [ebp - 4], 0x27
add esp, 0x18
lea ecx, [ebp - 0x13bc]
call fcn.00401028
lea ecx, [ebp - 0x13d0]
mov byte [ebp - 4], 0x26
call fcn.00401028
push 1
mov ecx, esi
call fcn.0041f830
jmp 0x405b00
push dword [ebp - 0x13d4]
call fcn.004980f0
test al, al
pop ecx
jne 0x405419
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR:
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.PnkBstrK_file_not_found
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
pop ecx
pop ecx
jne 0x40532b
push 0x4f1b58
lea ecx, [ebp - 0x13d0]
call fcn.00401072
push str.__ERROR:_PnkBstrK_was_unpacked__but_could_not_be_found_on_the_file_system.__Please_contact_www.evenbalance.com_for_assistance._n
lea ecx, [ebp - 0x13bc]
mov byte [ebp - 4], 0x29
call fcn.00401072
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea eax, [ebp - 0x13d0]
push eax
lea eax, [ebp - 0x13bc]
push eax
mov byte [ebp - 4], 0x2a
call fcn.0042a430
mov byte [ebp - 4], 0x29
jmp 0x40530e
push 0x4e7d54
push dword [ebp - 0x13d4]
call fcn.004bc601
cmp eax, ebx
pop ecx
pop ecx
jne 0x4054f1
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a1], bl
jne 0x40532b
push 0x4f1b58
lea ecx, [ebp - 0x13bc]
call fcn.00401072
push dword [ebp - 0x13d4]
lea eax, [ebp - 0x13c0]
push str.__ERROR:_Could_not_open___s_.
push eax
mov byte [ebp - 4], 0x2b
call fcn.0048cfd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea ecx, [ebp - 0x13bc]
push ecx
push eax
mov byte [ebp - 4], 0x2c
call fcn.0042a430
add esp, 0x24
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x2b
call fcn.00401028
lea ecx, [ebp - 0x13bc]
jmp 0x405322
push eax
call fcn.004bc554
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call fcn.00499cd0
push dword [ebp - 0x13fc]
mov word [ebp - 0x30], 2
call sub.WSOCK32.dll_htons
push str.127.0.0.1
mov word [ebp - 0x2e], ax
call sub.WSOCK32.dll_inet_addr
push 8
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x28]
push ebx
push eax
call fcn.004bc3b0
pop ecx
pop ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Sending_load_packet_to_PnkBstrB
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
push dword [ebp - 0x13d4]
lea eax, [ebp - 0x13dc]
push 0x4e732c
push eax
call fcn.0048cfd0
add esp, 0x14
mov eax, dword [ebp - 0x13dc]
push 0x10
lea ecx, [ebp - 0x30]
push ecx
push ebx
push eax
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x13c0], eax
call fcn.004bba60
pop ecx
push eax
push dword [ebp - 0x13c0]
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_sendto
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1500]
cmp eax, 0xffffffff
mov eax, dword [ecx]
push edx
jne 0x405641
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
jmp 0x40567f
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.SENT_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call fcn.00499cd0
mov dword [ebp - 0x13d8], 4
mov dword [ebp - 0x13bc], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13bc]
pop ecx
jne 0x405698
dec dword [ebp - 0x13d8]
jne 0x40568e
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrK_driver_status
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
je 0x405ad5
mov dword [ebp - 0x13c8], ebx
mov dword [ebp - 0x13bc], ebx
cmp dword [ebp - 0x13bc], 0x28
jge 0x405753
push 0xf01ff
push str.PnkBstrK
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x13c8], eax
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405730
inc dword [ebp - 0x13bc]
cmp dword [ebp - 0x13c8], ebx
je 0x405701
cmp dword [ebp - 0x13c8], ebx
je 0x405c2a
lea eax, [ebp - 0x1570]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x4057d8
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_query_the_PnkBstrK_driver
call fcn.00401896
pop ecx
pop ecx
jmp 0x405c7e
cmp dword [ebp - 0x156c], 4
jne 0x4058b2
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.RUNNING_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Stopping_PnkBstrK
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
lea eax, [ebp - 0x1570]
push eax
push 1
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_ControlService]
call fcn.00499cd0
mov dword [ebp - 0x13bc], 4
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405882
dec dword [ebp - 0x13bc]
jne 0x405878
lea eax, [ebp - 0x1570]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
cmp dword [ebp - 0x156c], 1
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
jne 0x4058e0
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
jmp 0x405904
cmp dword [ebp - 0x156c], 4
lea edx, [ebp - 0x15c0]
push edx
jne 0x40590b
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STILL_RUNNING_n
call fcn.00401072
jmp 0x40592e
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x156c]
push str.UNKNOWN_STATUS___ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov dword [ebp - 0x13bc], 4
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405964
dec dword [ebp - 0x13bc]
jne 0x40595a
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Deleting_PnkBstrK
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
call fcn.00499cd0
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
mov ecx, dword [esi + 0x1a0]
test eax, eax
mov eax, dword [ecx]
je 0x405a07
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x405a5c
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.ERROR_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Could_not_delete_the_PnkBstrK_service.
call fcn.00401896
pop ecx
pop ecx
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0x13bc], 4
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405a7c
dec dword [ebp - 0x13bc]
jne 0x405a72
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Checking_PnkBstrK_driver_status
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
jne 0x405b14
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Cannot_open_a_handle_to_the_service_control_manager.__Please_make_sure_you_are_the_administrator_for_this_computer.
call fcn.00401896
pop ecx
pop ecx
push 1
mov ecx, esi
call fcn.0041f830
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], 0x26
call fcn.00401028
lea ecx, [ebp - 0x13d4]
mov byte [ebp - 4], 0x21
call fcn.00401028
jmp 0x406262
push 0xf01ff
push str.PnkBstrK
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
je 0x405bcf
lea eax, [ebp - 0x1600]
push eax
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov ecx, dword [esi + 0x1a0]
lea edx, [ebp - 0x1550]
test eax, eax
mov eax, dword [ecx]
push edx
je 0x405b83
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push dword [ebp - 0x15fc]
push str.STILL_FOUND__driver_status__ld__n
push eax
call fcn.0048cfd0
add esp, 0xc
jmp 0x405b9f
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.STILL_FOUND__no_status__n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x405c1c
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.DELETED_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x405c7e
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.NOT_FOUND_n
push eax
call fcn.0048cfd0
pop ecx
pop ecx
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13c9], 1
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], 0x26
call fcn.00401028
lea ecx, [ebp - 0x13d4]
mov byte [ebp - 4], 0x21
call fcn.00401028
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x13d0]
call sub.WSOCK32.dll_closesocket
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405cbd
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Manually_stopping_PnkBstrB
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
cmp eax, ebx
mov dword [ebp - 0x13d8], eax
jne 0x405d2f
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.Cannot_open_a_handle_to_the_service_control_manager.__Please_make_sure_you_are_the_administrator_for_this_computer.
call fcn.00401896
pop ecx
pop ecx
push 1
mov ecx, esi
call fcn.0041f830
jmp 0x406262
push 0xf01ff
push str.PnkBstrB
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
mov dword [ebp - 0x13c8], eax
je 0x405d95
lea eax, [ebp - 0x15dc]
push eax
push 1
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_ControlService]
push dword [ebp - 0x13c8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.STOPPED_n
jmp 0x405db8
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED___no_handle_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
push dword [ebp - 0x13d8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0x13c0], 0xa
call fcn.00499cd0
push 0x64
call fcn.00499090
dec dword [ebp - 0x13c0]
pop ecx
jne 0x405df5
push ecx
mov eax, esp
mov dword [ebp - 0x13c0], esp
push str.Removing_test_PnkBstrB_file
push edi
push eax
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
push dword [ebp - 0x13e0]
call fcn.004980f0
add esp, 0xc
test al, al
je 0x405ee8
push dword [ebp - 0x13e0]
call fcn.004c13d6
pop ecx
mov ecx, dword [esi + 0x1a0]
test eax, eax
mov eax, dword [ecx]
jne 0x405e9f
lea edx, [ebp - 0x1500]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push 0x4e7d30
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
jmp 0x405ee8
lea edx, [ebp - 0x1550]
push edx
call dword [eax + 0x328]
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.FAILED_n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x1450]
push edx
call dword [eax + 0x328]
mov byte [ebp - 0x13e5], 1
cmp byte [ebp - 0x13c9], bl
je 0x40611d
mov edi, 0x400
push edi
lea eax, [ebp - 0xe28]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
lea eax, [ebp - 0xe28]
push str.LogFilesPunkBuster_
push eax
call fcn.004bc420
lea eax, [ebp - 0xe28]
push str.PnkBstrA.log
push eax
call fcn.004bc420
push 8
call fcn.004bb98c
add esp, 0x14
mov dword [ebp - 0x13c0], eax
cmp eax, ebx
mov byte [ebp - 4], 0x2e
je 0x405f58
push ebx
lea ecx, [ebp - 0xe28]
push ecx
mov ecx, eax
call fcn.00498920
mov dword [ebp - 0x13d0], eax
jmp 0x405f5e
mov dword [ebp - 0x13d0], ebx
cmp dword [ebp - 0x13d0], ebx
mov byte [ebp - 4], 0x21
je 0x40600b
mov ecx, dword [ebp - 0x13d0]
push edi
lea eax, [ebp - 0x444]
push eax
mov dword [ebp - 0x13bc], ebx
call fcn.004981d0
cmp eax, 1
jl 0x405fbf
mov ecx, dword [ebp - 0x13d0]
inc dword [ebp - 0x13bc]
mov byte [ebp + eax - 0x444], bl
push edi
lea eax, [ebp - 0x444]
push eax
call fcn.004981d0
cmp eax, 1
jge 0x405f8c
cmp dword [ebp - 0x13bc], ebx
lea eax, [ebp - 0x444]
jg 0x405fc4
mov eax, str._EMPTY_
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push eax
push str.__PnkBstrA.log:___s_n
push ecx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [ebp - 0x13d0]
call fcn.00498170
mov ecx, dword [ebp - 0x13d0]
call fcn.00498170
push dword [ebp - 0x13d0]
call fcn.004bbb4d
pop ecx
push edi
lea eax, [ebp - 0xe28]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
lea eax, [ebp - 0xe28]
push str.LogFilesPunkBuster_
push eax
call fcn.004bc420
lea eax, [ebp - 0xe28]
push str.PnkBstrB.log
push eax
call fcn.004bc420
push 8
call fcn.004bb98c
add esp, 0x14
mov dword [ebp - 0x13c0], eax
cmp eax, ebx
mov byte [ebp - 4], 0x2f
je 0x40606a
push ebx
lea ecx, [ebp - 0xe28]
push ecx
mov ecx, eax
call fcn.00498920
mov dword [ebp - 0x13d0], eax
jmp 0x406070
mov dword [ebp - 0x13d0], ebx
cmp dword [ebp - 0x13d0], ebx
mov byte [ebp - 4], 0x21
je 0x40611d
mov ecx, dword [ebp - 0x13d0]
push edi
lea eax, [ebp - 0x444]
push eax
mov dword [ebp - 0x13bc], ebx
call fcn.004981d0
cmp eax, 1
jl 0x4060d1
mov ecx, dword [ebp - 0x13d0]
inc dword [ebp - 0x13bc]
mov byte [ebp + eax - 0x444], bl
push edi
lea eax, [ebp - 0x444]
push eax
call fcn.004981d0
cmp eax, 1
jge 0x40609e
cmp dword [ebp - 0x13bc], ebx
lea eax, [ebp - 0x444]
jg 0x4060d6
mov eax, str._EMPTY_
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push eax
push str.__PnkBstrB.log:___s_n
push ecx
call fcn.0048cfd0
add esp, 0xc
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
pop ecx
mov ecx, dword [ebp - 0x13d0]
call fcn.00498170
mov ecx, dword [ebp - 0x13d0]
call fcn.00498170
push dword [ebp - 0x13d0]
call fcn.004bbb4d
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str._n___________________________________n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
pop ecx
mov ecx, esp
mov dword [ebp - 0x13c0], esp
push str.__Tests_finished._n
call fcn.00401072
push dword [esi + 0x1a0]
call fcn.004076ba
mov eax, dword [0x6cfe50]
cmp byte [eax + 0x1a0], bl
pop ecx
pop ecx
jne 0x406240
lea ecx, [ebp - 0x13c0]
push 0x4f1b58
call fcn.00401072
cmp byte [ebp - 0x13c9], bl
je 0x4061b7
lea eax, [ebp - 0x13bc]
push str.__WARNING:__One_or_more_tests_failed.__Please_copy_the_output_from_the_test_and_open_a_trouble_ticket_at:_n___http:__www.evenbalance.com_troubleticket__.
push eax
mov byte [ebp - 4], 0x30
call fcn.0048cfd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea ecx, [ebp - 0x13c0]
push ecx
push eax
mov byte [ebp - 4], 0x31
call fcn.0042a430
mov byte [ebp - 4], 0x30
jmp 0x406223
cmp byte [ebp - 0x13e5], bl
je 0x4061f2
lea eax, [ebp - 0x13bc]
push str.__WARNING:__Some_of_tests_failed__however_you_may_still_be_able_to_play_without_issue.__If_you_do_have_problems_playing_on_a_PunkBuster_enabled_server__please_copy_the_output_from_the_test_and_open_a_trouble_ticket_at:_n___http:__www.evenbalance.com_troubleticket__.
push eax
mov byte [ebp - 4], 0x32
call fcn.0048cfd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea ecx, [ebp - 0x13c0]
push ecx
push eax
mov byte [ebp - 4], 0x33
call fcn.0042a430
mov byte [ebp - 4], 0x32
jmp 0x406223
lea eax, [ebp - 0x13bc]
push str.__Tests_completed_successfully_without_error.
push eax
mov byte [ebp - 4], 0x34
call fcn.0048cfd0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push 5
lea ecx, [ebp - 0x13c0]
push ecx
push eax
mov byte [ebp - 4], 0x35
call fcn.0042a430
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x13bc]
add esp, 0x20
call fcn.00401028
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x21
call fcn.00401028
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx]
push 1
call dword [eax + 0x9c]
mov esi, dword [esi + 0x1a8]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x9c]
lea ecx, [ebp - 0x13f0]
mov byte [ebp - 4], 0x16
call fcn.00401028
lea ecx, [ebp - 0x13e0]
mov byte [ebp - 4], 9
call fcn.00401028
lea ecx, [ebp - 0x1450]
mov byte [ebp - 4], 8
call fcn.00401725
lea ecx, [ebp - 0x1550]
mov byte [ebp - 4], 7
call fcn.00401725
lea ecx, [ebp - 0x15c0]
mov byte [ebp - 4], 6
call fcn.00401725
lea ecx, [ebp - 0x1500]
mov byte [ebp - 4], 5
call fcn.00401725
lea ecx, [ebp - 0x1494]
mov byte [ebp - 4], 4
call fcn.004b4600
lea ecx, [ebp - 0x14a8]
mov byte [ebp - 4], 3
call fcn.004b4600
lea ecx, [ebp - 0x146c]
mov byte [ebp - 4], 2
call fcn.004b4600
lea ecx, [ebp - 0x1480]
mov byte [ebp - 4], bl
call fcn.004b4600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13e4]
call fcn.00401028
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.004bc19b
pop edi
pop esi
pop ebx
leave
ret