Function at 0x454950
Capabilities:
Accept command line arguments
Create thread
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
lea ecx, [ebp - 0x7c]
push 0xffffffffffffffff
push 0x575830
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
push edi
call fcn.00460c90
push ecx
mov edx, 2
call fcn.004563c0
add esp, 4
or ebx, 0xffffffff
test al, al
je 0x454a26
mov dword [ebp - 4], 0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
call fcn.00454610
mov esi, dword [ebp - 0x4c]
test al, al
je 0x454a03
push esi
call fcn.0054d66f
add esp, 4
cmp eax, 0x55f0
jl 0x4549e1
mov dword [0x5bc33c], 4
jmp 0x454a0d
push esi
call fcn.0054d66f
xor ecx, ecx
add esp, 4
cmp eax, 0x2800
setge cl
lea ecx, [ecx*2 + 1]
mov dword [0x5bc33c], ecx
jmp 0x454a0d
mov dword [0x5bc33c], 5
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x454a46
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x454a46
push ecx
mov edx, 1
call fcn.004563c0
xor edx, edx
add esp, 4
test al, al
mov ecx, 5
cmovne ecx, edx
mov dword [0x5bc33c], ecx
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x34]
push str.bnBtYnNhcg
mov dword [ebp - 0x34], eax
call fcn.0042cad0
test al, al
jne 0x454a80
push 0xc
push str.bnBtYnNhcg
lea ecx, [ebp - 0x34]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x40]
push str.YWZfbGxjag
mov dword [ebp - 0x40], eax
call fcn.0042cad0
test al, al
jne 0x454aba
push 0xc
push str.YWZfbGxjag
lea ecx, [ebp - 0x40]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x68]
push str.YmNkX3Nqcg
mov dword [ebp - 0x68], eax
call fcn.0042cad0
test al, al
jne 0x454af4
push 0xc
push str.YmNkX3Nqcg
lea ecx, [ebp - 0x68]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x58]
push str.Z2I7Ky8
mov dword [ebp - 0x58], eax
call fcn.0042cad0
test al, al
jne 0x454b2e
push 8
push str.Z2I7Ky8
lea ecx, [ebp - 0x58]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x64]
push str.Z2I7KzA
mov dword [ebp - 0x64], eax
call fcn.0042cad0
test al, al
jne 0x454b68
push 8
push str.Z2I7KzA
lea ecx, [ebp - 0x64]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x54]
push str.Z2I7KzE
mov dword [ebp - 0x54], eax
call fcn.0042cad0
test al, al
jne 0x454ba2
push 8
push str.Z2I7KzE
lea ecx, [ebp - 0x54]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x60]
push str.Sm1hX2o
mov dword [ebp - 0x60], eax
call fcn.0042cad0
test al, al
jne 0x454bdc
push 8
push str.Sm1hX2o
lea ecx, [ebp - 0x60]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x4c]
push str.X2FyZ3Rj
mov dword [ebp - 0x4c], eax
call fcn.0042cad0
test al, al
jne 0x454c16
push 8
push str.X2FyZ3Rj
lea ecx, [ebp - 0x4c]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x74]
push str.LXBjcXJfcHI
mov dword [ebp - 0x74], eax
call fcn.0042cad0
test al, al
jne 0x454c50
push 0xc
push str.LXBjcXJfcHI
lea ecx, [ebp - 0x74]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x78]
push str.cWZtdUs
mov dword [ebp - 0x78], eax
call fcn.0042cad0
test al, al
jne 0x454c8a
push 8
push str.cWZtdUs
lea ecx, [ebp - 0x78]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.VGNwcWdtbA
mov dword [ebp - 0x14], eax
call fcn.0042cad0
test al, al
jne 0x454cc4
push 0xc
push str.VGNwcWdtbA
lea ecx, [ebp - 0x14]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x5c]
push str.TkE_bm5Rcm1wYw
mov dword [ebp - 0x5c], eax
call fcn.0042cad0
test al, al
jne 0x454cfe
push 0x10
push str.TkE_bm5Rcm1wYw
lea ecx, [ebp - 0x5c]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.P05OQj9SPw
mov dword [ebp - 0x10], eax
call fcn.0042cad0
test al, al
jne 0x454d38
push 0xc
push str.P05OQj9SPw
lea ecx, [ebp - 0x10]
call fcn.0042cdf0
push ecx
mov edi, esp
push ecx
mov ecx, dword [0x5bbddc]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov eax, dword [ebp - 0x14]
mov edi, esp
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x50], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x2c]
mov edx, SysReAllocString
call fcn.00445970
mov esi, dword [0x5bbdc0]
add esp, 8
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x454de7
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x454dd9
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x454dd9
call fcn.0042c200
mov dword [ebp - 0x38], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x454dcf
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [0x5bbdc0], eax
jmp 0x454de7
push dword [edx - 0xc]
mov ecx, 0x5bbdc0
push edx
call fcn.0042cdf0
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454e01
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004533c0
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x88], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
push dword [eax]
call fcn.00558928
add esp, 4
mov esi, eax
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x44]
push esi
mov dword [ebp - 0x44], eax
call fcn.0042cad0
test al, al
jne 0x454e89
test esi, esi
jne 0x454e67
xor ecx, ecx
jmp 0x454e7f
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454e70
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x44]
call fcn.0042cdf0
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454ea3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
mov dword [ebp - 0x2c], eax
cmp dword [eax + 4], 0
jne 0x454fb0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.dWVjcmNsdF1jcHBtcA
mov dword [ebp + 8], eax
call fcn.0042cad0
test al, al
jne 0x454ef0
push 0x14
push str.dWVjcmNsdF1jcHBtcA
lea ecx, [ebp + 8]
call fcn.0042cdf0
push ecx
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5bbdc4
call fcn.0042c2f0
mov ecx, esi
call fcn.00442a50
add esp, 0x14
mov esi, esp
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x58b2f0
mov dword [esi], eax
call fcn.0042cad0
test al, al
jne 0x454f45
push 0
push 0x58b2f0
mov ecx, esi
call fcn.0042cdf0
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov edi, esp
push ecx
mov ecx, eax
mov dword [ebp + 8], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov edi, dword [ebp - 0x34]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
call fcn.00453c10
mov edx, dword [ebp + 8]
or ebx, 0xffffffff
add esp, 0x10
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x454fa8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or esi, 0xffffffff
jmp 0x456108
mov eax, dword [ebp - 0x5c]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x38], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [esi], eax
call fcn.00442cb0
mov ecx, dword [ebp - 0x2c]
mov edi, eax
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004543a0
mov edx, dword [ebp - 0x14]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x455005
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x4552e4
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.Ql9yXw
mov dword [ebp - 0x14], eax
call fcn.0042cad0
test al, al
jne 0x455047
push 8
push str.Ql9yXw
lea ecx, [ebp - 0x14]
call fcn.0042cdf0
push ecx
mov ecx, dword [ebp - 0x38]
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x10]
mov esi, eax
push 0x5948cc
call fcn.0042bd10
push esi
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x2c]
call fcn.0041d710
add esp, 4
lea ecx, [ebp - 0x44]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042ba60
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4550a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4550c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4550dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.00442cb0
mov ecx, dword [ebp - 0x44]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004543a0
mov edx, dword [ebp - 0x2c]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x455134
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x4552cd
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x5948d0
mov dword [ebp - 0x14], eax
call fcn.0042cad0
test al, al
jne 0x455176
push 0xc
push 0x5948d0
lea ecx, [ebp - 0x14]
call fcn.0042cdf0
push ecx
mov ecx, dword [ebp - 0x10]
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x3c]
mov esi, eax
push 0x58b2e4
call fcn.0041d650
add esp, 4
lea ecx, [ebp - 0x28]
mov edx, eax
push esi
call fcn.0041d710
mov esi, dword [0x5bbdbc]
add esp, 4
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x45520f
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x455201
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x455201
call fcn.0042c200
mov dword [ebp - 0x2c], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x4551f7
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [0x5bbdbc], eax
jmp 0x45520f
push dword [ecx + 4]
mov ecx, 0x5bbdbc
push edx
call fcn.0042cdf0
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455229
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455243
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45525d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x3c], eax
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
mov ecx, dword [0x5bbdbc]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004543a0
mov edx, dword [ebp - 0x20]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4552b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4552cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4552e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.bmFfbm4scXJtcGM
mov dword [ebp - 0x10], eax
call fcn.0042cad0
test al, al
jne 0x45531e
push 0x10
push str.bmFfbm4scXJtcGM
lea ecx, [ebp - 0x10]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.LW5ndmNqLGVnZA
mov dword [ebp - 0x14], eax
call fcn.0042cad0
test al, al
jne 0x455358
push 0x10
push str.LW5ndmNqLGVnZA
lea ecx, [ebp - 0x14]
call fcn.0042cdf0
push ecx
mov ecx, dword [0x5bbd94]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
push dword [eax]
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edx, dword [ebp - 0x20]
mov dword [0x5bba78], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4553a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x90
call fcn.00546f77
mov edi, eax
mov esi, esp
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x90], eax
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.00442cb0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
mov esi, eax
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x4562a5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x5bc540
mov dword [ebp - 0x28], eax
call fcn.0042cad0
test al, al
jne 0x45544d
mov ecx, 0x5bc540
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455430
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bc540
lea ecx, [ebp - 0x28]
call fcn.0042cdf0
push dword [ebp - 0x20]
lea eax, [ebp - 0x28]
push esi
push ecx
push eax
mov ecx, edi
call fcn.00443060
mov edx, dword [ebp - 0x28]
mov dword [0x5bb6b4], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45547c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455496
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4554b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x5bb6b4]
mov dword [ebp - 0x20], eax
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.VWdsRlJSTh4vLC4
mov dword [ebp - 0x14], eax
call fcn.0042cad0
test al, al
jne 0x4554f2
push 0x10
push str.VWdsRlJSTh4vLC4
lea ecx, [ebp - 0x14]
call fcn.0042cdf0
mov edi, dword [ebp - 0x14]
push 0
push 0
push 0
push 0
push ecx
add edi, 0xfffffff0
mov esi, esp
mov ecx, edi
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
push dword [eax]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov dword [esi + 0x80], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455545
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x80]
test eax, eax
jne 0x45556b
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x455563
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], edi
jmp 0x4555b2
push 0x2710
push 0x2710
push 0x2710
push 0x2710
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
mov eax, ebx
je 0x455551
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45559e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0x454240
call fcn.0055304a
add esp, 0xc
mov dword [ebp - 0x14], eax
call fcn.004536c0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 1
call fcn.0042c860
test eax, eax
je 0x45629b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x80], 2
mov dword [ebp - 0x84], eax
push ecx
jl 0x455662
mov esi, dword [esi + 4]
mov edi, esp
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, edi
push esi
mov dword [edi], eax
call fcn.0042cad0
test al, al
jne 0x45564e
test esi, esi
jne 0x455631
xor ecx, ecx
jmp 0x455645
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455636
sub ecx, edx
sar ecx, 1
push ecx
push esi
mov ecx, edi
call fcn.0042cdf0
call fcn.00444bd0
add esp, 4
push ecx
cmp eax, 0x628374a0
je 0x4556e6
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5bbdc4
call fcn.0042c2f0
mov ecx, esi
call fcn.00442a50
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x58]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x40]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov edi, dword [ebp - 0x34]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
call fcn.00453c10
or esi, 0xffffffff
add esp, 0x10
or ebx, esi
jmp 0x4560bd
cmp dword [ebp - 0x80], 3
mov esi, esp
jge 0x45576b
sub esp, 0x18
mov ecx, esp
push 0x5bbdc4
call fcn.0042c2f0
mov ecx, esi
call fcn.00442a50
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x40]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00442cb0
mov edi, dword [ebp - 0x34]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
call fcn.00453c10
add esp, 0x10
jmp 0x455be8
mov ecx, dword [ebp - 0x68]
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
mov edi, dword [ebp - 0x2c]
add esp, 4
mov eax, dword [eax]
mov ecx, dword [edi + 8]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4557b6
test dx, dx
je 0x4557b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4557b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x455790
xor esi, esi
jmp 0x4557bb
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4557d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x455a85
mov dword [ebp - 4], 2
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
push ecx
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5bc540
mov dword [esi], eax
call fcn.0042cad0
test al, al
jne 0x45585c
mov ecx, 0x5bc540
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455840
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bc540
mov ecx, esi
call fcn.0042cdf0
call fcn.00444bd0
mov esi, esp
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5bc540
mov dword [esi], eax
call fcn.0042cad0
test al, al
jne 0x4558b0
mov ecx, 0x5bc540
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455894
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bc540
mov ecx, esi
call fcn.0042cdf0
call fcn.00444bd0
add esp, 4
push eax
lea eax, [ebp - 0x10]
push 0x593520
push eax
call fcn.0041f420
mov esi, dword [ebp - 0x10]
add esp, 0xc
mov ecx, dword [edi + 8]
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4558f8
test dx, dx
je 0x4558f4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4558f8
add eax, 4
add ecx, 4
test dx, dx
jne 0x4558d2
xor eax, eax
jmp 0x4558fd
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0x34]
test eax, eax
je 0x455a6a
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x34]
push 0x58b2f0
mov dword [ebp - 0x34], eax
call fcn.0042cad0
test al, al
jne 0x455942
push 0
push 0x58b2f0
lea ecx, [ebp - 0x34]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x58b2f0
mov dword [ebp - 0x28], eax
call fcn.0042cad0
test al, al
jne 0x45597c
push 0
push 0x58b2f0
lea ecx, [ebp - 0x28]
call fcn.0042cdf0
push ecx
mov ecx, dword [ebp - 0x64]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [ebx], eax
call fcn.00442cb0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.00442cb0
lea ecx, [edi - 0x10]
mov dword [ebp - 0x3c], eax
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [ebx], eax
call fcn.00442cb0
mov edx, dword [ebp - 0x3c]
lea ecx, [ebp - 0x34]
add esp, 4
push ecx
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x20]
mov ecx, eax
call fcn.004538a0
mov edx, dword [ebp - 0x10]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a02
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a50
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x455be8
mov ecx, dword [esi]
push esi
jmp 0x455be3
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x58b2f0
mov dword [ebp - 0x10], eax
call fcn.0042cad0
test al, al
jne 0x455abf
push 0
push 0x58b2f0
lea ecx, [ebp - 0x10]
call fcn.0042cdf0
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x58b2f0
mov dword [ebp - 0x28], eax
call fcn.0042cad0
test al, al
jne 0x455af9
push 0
push 0x58b2f0
lea ecx, [ebp - 0x28]
call fcn.0042cdf0
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00442cb0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
mov edi, dword [ebp - 0x34]
mov ebx, eax
lea ecx, [edi - 0x10]
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x10]
mov edx, ebx
push ecx
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x24]
mov ecx, eax
call fcn.004538a0
mov edx, dword [ebp - 0x48]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455b80
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455b9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455bb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455bce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455be8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ecx
mov ecx, dword [ebp - 0x38]
mov esi, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x38]
mov ebx, eax
push 0x5948cc
call fcn.0042bd10
lea eax, [ebp - 0x38]
push eax
push ecx
mov ecx, dword [ebp - 0x60]
mov esi, esp
add ecx, 0xfffffff0
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
call fcn.0041d710
add esp, 4
lea ecx, [ebp - 0x70]
mov edx, eax
push ebx
call fcn.0041d710
mov edx, dword [ebp - 0x24]
or ebx, 0xffffffff
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455c75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455c8f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455ca9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455cc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x70]
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, eax
call fcn.0042c860
test eax, eax
je 0x45629b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.TkEeP25uHlFybXBj
mov dword [ebp - 0x10], eax
call fcn.0042cad0
test al, al
jne 0x455d0f
push 0x10
push str.TkEeP25uHlFybXBj
lea ecx, [ebp - 0x10]
call fcn.0042cdf0
test esi, esi
mov esi, dword [ebp - 0x10]
je 0x455e01
cmp dword [ebp - 0x30], 2
je 0x455e01
call fcn.0042c860
test eax, eax
je 0x45629b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.TkEeP25uHlFybXBjHmdxHnNuHl9sYh5wc2xsZ2xlKh5hamdhaR5tbB5yZmMeUXJfcHIeQHNycm1s
mov dword [ebp + 8], eax
call fcn.0042cad0
test al, al
jne 0x455d5e
push 0x4c
push str.TkEeP25uHlFybXBjHmdxHnNuHl9sYh5wc2xsZ2xlKh5hamdhaR5tbB5yZmMeUXJfcHIeQHNycm1s
lea ecx, [ebp + 8]
call fcn.0042cdf0
push ecx
lea ecx, [esi - 0x10]
mov ebx, esp
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.00442cb0
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.0042c200
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [ebx], eax
call fcn.00442cb0
add esp, 4
push 0x40
push dword [ebp - 0x30]
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x24]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455dc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455de1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45608a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45608a
push dword [ebp - 0x70]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x45629b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.UENRXUFNU0xS
mov dword [ebp - 0x10], eax
call fcn.0042cad0
test al, al
jne 0x455e4a
push 0xc
push str.UENRXUFNU0xS
lea ecx, [ebp - 0x10]
call fcn.0042cdf0
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5bbddc]
mov ebx, esp
mov dword [ebp - 0x6c], 0
lea ecx, [ecx - 0x10]
call fcn.0042c200
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00442cb0
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 0x30], esp
push ecx
mov ecx, eax
mov dword [ebp - 0x38], eax
mov ebx, esp
call fcn.0042c200
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00442cb0
add esp, 4
lea ecx, [ebp - 0x6c]
mov edx, SysReAllocString
call fcn.00445bf0
add esp, 8
test al, al
je 0x455efa
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5bbddc]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042c200
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00442cb0
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [ebp - 0x38]
mov ebx, esp
call fcn.0042c200
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00442cb0
add esp, 4
mov ecx, SysReAllocString
call fcn.00445d20
add esp, 8
mov edx, dword [ebp - 0x38]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455f12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 1
push eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x160
call fcn.00546f77
mov ecx, dword [ebp - 0x7c]
mov ebx, esp
mov dword [ebp - 0x24], eax
add ecx, 0xfffffff0
mov eax, dword [0x5bc33c]
mov dword [ebp - 0x30], eax
call fcn.0042c200
push dword [ebp - 0x30]
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5bbdc0]
add ecx, 0xfffffff0
call fcn.0042c200
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5bbdbc]
add ecx, 0xfffffff0
call fcn.0042c200
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
call fcn.0042c860
test eax, eax
je 0x45629b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov ecx, ebx
push 0x5bc540
mov dword [ebx], eax
call fcn.0042cad0
test al, al
jne 0x455ffc
mov ecx, 0x5bc540
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455fe0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5bc540
mov ecx, ebx
call fcn.0042cdf0
push dword [ebp + 8]
mov ecx, dword [ebp - 0x24]
call fcn.00417140
push 0
push 0
mov ecx, eax
mov dword [0x5bba74], eax
call fcn.0041a300
mov eax, dword [0x5bba78]
test eax, eax
je 0x45602c
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x5bba78]
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x456044
push 0x1388
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x5bba78]
test eax, eax
je 0x45604f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5bb6b8
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push dword [ebp - 0x8c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov ebx, dword [0x5bba74]
test ebx, ebx
je 0x456087
mov ecx, ebx
call fcn.004178d0
push 0x160
push ebx
call fcn.00546e91
add esp, 8
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4560a1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4560bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov edx, dword [ebp - 0x84]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4560d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4560f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456108
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456122
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45613c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456156
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x50]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45616d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x78]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456187
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4561a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4561bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4561d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4561ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456209
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456223
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45623d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456257
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45626e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x456286
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.0042cdd0
push 0x80004005
call fcn.0042cdd0
int3