Function at 0x42b920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49dc09
mov eax, dword fs:[0]
push eax
sub esp, 0x59c
mov eax, dword [0x544070]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x420], ebx
mov eax, dword [0x56f400]
mov dword [ebp - 0x424], ebx
mov dword [ebp - 0x42c], 0x531b0c
cmp dword [eax], ebx
je 0x42b9b6
lea eax, [ebp - 0x43c]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x43c], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0x43c]
push str._CI__::_wWinMain___
push ebx
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x438]
push 0x4b10ad
push ebx
mov dword [ebp - 0x430], eax
call fcn.00406440
add esp, 0x10
lea ecx, [ebp - 0x47c]
mov dword [ebp - 4], 0
call fcn.00436f10
mov byte [ebp - 4], 1
xor esi, esi
mov edi, dword [ebp - 0x464]
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x458], edi
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x45c], eax
test edi, edi
jle 0x42ba1f
mov ebx, eax
mov eax, dword [0x56f400]
cmp dword [eax], 0
je 0x42ba14
push dword [ebx + esi*4]
push esi
push str.argv__d___s_
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x14
inc esi
cmp esi, edi
jl 0x42b9f2
mov ebx, dword [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x454]
call fcn.00423690
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x424], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42ba60
mov eax, dword [ecx]
jmp 0x42ba62
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
mov byte [ebp - 4], 4
sub esp, 0x18
mov eax, dword [ebp - 0x420]
mov edx, esp
mov esi, dword [eax]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x42baa8
mov eax, dword [edx]
jmp 0x42baaa
mov eax, edx
mov byte [eax], 0
cmp byte [esi], 0
jne 0x42bab6
xor ecx, ecx
jmp 0x42bac9
mov ecx, esi
lea edi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42bac0
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.00402c80
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 3
call fcn.00428a60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
push 0x26
push str.dont_submit_encrypted_file_to_Katasif
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00402c80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x44]
push 4
push str.nocs
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
call fcn.00402c80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe4]
push 0x20
push str.submit_encrypted_file_to_Katasif
mov dword [ebp - 0xd0], 0xf
mov dword [ebp - 0xd4], 0
mov byte [ebp - 0xe4], 0
call fcn.00402c80
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xfc]
push 2
push 0x531e30
mov dword [ebp - 0xe8], 0xf
mov dword [ebp - 0xec], 0
mov byte [ebp - 0xfc], 0
call fcn.00402c80
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb4]
push 0x21
push str.dont_dump_encrypted_file_to_disk
mov dword [ebp - 0xa0], 0xf
mov dword [ebp - 0xa4], 0
mov byte [ebp - 0xb4], 0
call fcn.00402c80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xcc]
push 4
push str.node
mov dword [ebp - 0xb8], 0xf
mov dword [ebp - 0xbc], 0
mov byte [ebp - 0xcc], 0
call fcn.00402c80
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3fc]
push 0x1b
push str.dump_encrypted_file_to_disk
mov dword [ebp - 0x3e8], 0xf
mov dword [ebp - 0x3ec], 0
mov byte [ebp - 0x3fc], 0
call fcn.00402c80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3e4]
push 2
push 0x531ddc
mov dword [ebp - 0x3d0], 0xf
mov dword [ebp - 0x3d4], 0
mov byte [ebp - 0x3e4], 0
call fcn.00402c80
mov byte [ebp - 4], 0xd
push 0x24
push str.private_key_file_used_for_decryption
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x3b8], 0xf
mov dword [ebp - 0x3bc], 0
mov byte [ebp - 0x3cc], 0
call fcn.00402c80
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x12c]
push 2
push 0x531dbc
mov dword [ebp - 0x118], 0xf
mov dword [ebp - 0x11c], 0
mov byte [ebp - 0x12c], 0
call fcn.00402c80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x144]
push 0x14
push str.decypted_output_file
mov dword [ebp - 0x130], 0xf
mov dword [ebp - 0x134], 0
mov byte [ebp - 0x144], 0
call fcn.00402c80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3b4]
push 6
push str.output
mov dword [ebp - 0x3a0], 0xf
mov dword [ebp - 0x3a4], 0
mov byte [ebp - 0x3b4], 0
call fcn.00402c80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x39c]
push 0x15
push str.input_file_to_decrypt
mov dword [ebp - 0x388], 0xf
mov dword [ebp - 0x38c], 0
mov byte [ebp - 0x39c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x384]
push 5
push str.input
mov dword [ebp - 0x370], 0xf
mov dword [ebp - 0x374], 0
mov byte [ebp - 0x384], 0
call fcn.00402c80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x36c]
push 0xc
push str.decrypt_mode
mov dword [ebp - 0x358], 0xf
mov dword [ebp - 0x35c], 0
mov byte [ebp - 0x36c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x354]
push 9
push str.d_decrypt
mov dword [ebp - 0x340], 0xf
mov dword [ebp - 0x344], 0
mov byte [ebp - 0x354], 0
call fcn.00402c80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x33c]
push 0x22
push str.dont_dump_compressed_json_to_disk
mov dword [ebp - 0x328], 0xf
mov dword [ebp - 0x32c], 0
mov byte [ebp - 0x33c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x16
push 4
push str.nodc
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x310], 0xf
mov dword [ebp - 0x314], 0
mov byte [ebp - 0x324], 0
call fcn.00402c80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x30c]
push 0x23
push str.dump_compressed_lzma2__json_to_disk
mov dword [ebp - 0x2f8], 0xf
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 0x30c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2f4]
push 2
push 0x531d08
mov dword [ebp - 0x2e0], 0xf
mov dword [ebp - 0x2e4], 0
mov byte [ebp - 0x2f4], 0
call fcn.00402c80
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2dc]
push 0x2b
push str.dont_dump_json_with_collected_data_to_disk
mov dword [ebp - 0x2c8], 0xf
mov dword [ebp - 0x2cc], 0
mov byte [ebp - 0x2dc], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2c4]
push 4
push str.nodj
mov dword [ebp - 0x2b0], 0xf
mov dword [ebp - 0x2b4], 0
mov byte [ebp - 0x2c4], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2ac]
push 0x25
push str.dump_json_with_collected_data_to_disk
mov dword [ebp - 0x298], 0xf
mov dword [ebp - 0x29c], 0
mov byte [ebp - 0x2ac], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x174]
push 2
push 0x531cac
mov dword [ebp - 0x160], 0xf
mov dword [ebp - 0x164], 0
mov byte [ebp - 0x174], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x294]
push 0x21
push str.load_settings_from_specified_file
mov dword [ebp - 0x280], 0xf
mov dword [ebp - 0x284], 0
mov byte [ebp - 0x294], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x27c]
push 0xa
push str.s_settings
mov dword [ebp - 0x268], 0xf
mov dword [ebp - 0x26c], 0
mov byte [ebp - 0x27c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x1f
push 0x1e
push str.start_monitoring_DHCP_requests
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x250], 0xf
mov dword [ebp - 0x254], 0
mov byte [ebp - 0x264], 0
call fcn.00402c80
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x24c]
push 9
push str.stop_dhcp
mov dword [ebp - 0x238], 0xf
mov dword [ebp - 0x23c], 0
mov byte [ebp - 0x24c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x234]
push 0x1e
push str.start_monitoring_DHCP_requests
mov dword [ebp - 0x220], 0xf
mov dword [ebp - 0x224], 0
mov byte [ebp - 0x234], 0
call fcn.00402c80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x21c]
push 0xa
push str.start_dhcp
mov dword [ebp - 0x208], 0xf
mov dword [ebp - 0x20c], 0
mov byte [ebp - 0x21c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x204]
push 0x21
push str.remove_dhcp_monitoring_on_startup
mov dword [ebp - 0x1f0], 0xf
mov dword [ebp - 0x1f4], 0
mov byte [ebp - 0x204], 0
call fcn.00402c80
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1ec]
push 0xe
push str.uninstall_dhcp
mov dword [ebp - 0x1d8], 0xf
mov dword [ebp - 0x1dc], 0
mov byte [ebp - 0x1ec], 0
call fcn.00402c80
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1d4]
push 0x20
push str.start_dhcp_monitoring_on_startup
mov dword [ebp - 0x1c0], 0xf
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 0x1d4], 0
call fcn.00402c80
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1bc]
push 0xc
push str.install_dhcp
mov dword [ebp - 0x1a8], 0xf
mov dword [ebp - 0x1ac], 0
mov byte [ebp - 0x1bc], 0
call fcn.00402c80
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x15c]
push 0x1b
push str.remove_task_scheduler_entry
mov dword [ebp - 0x148], 0xf
mov dword [ebp - 0x14c], 0
mov byte [ebp - 0x15c], 0
call fcn.00402c80
mov byte [ebp - 4], 0x28
push 0xb
push str.u_uninstall
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x190], 0xf
mov dword [ebp - 0x194], 0
mov byte [ebp - 0x1a4], 0
call fcn.00402c80
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x114]
push 0x1b
push str.create_task_scheduler_entry
mov dword [ebp - 0x100], 0xf
mov dword [ebp - 0x104], 0
mov byte [ebp - 0x114], 0
call fcn.00402c80
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x18c]
push 9
push str.i_install
mov dword [ebp - 0x178], 0xf
mov dword [ebp - 0x17c], 0
mov byte [ebp - 0x18c], 0
call fcn.00402c80
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0x424], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c244
mov eax, dword [ecx]
jmp 0x42c246
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 0x2c
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x420], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x2e
push eax
lea eax, [ebp - 0x44]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4e4], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c2c5
mov eax, dword [ecx]
jmp 0x42c2c7
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x2f
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x4e8], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0xfc]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4ec], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c34c
mov eax, dword [ecx]
jmp 0x42c34e
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x32
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x4f8], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0xcc]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4fc], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c3d3
mov eax, dword [ecx]
jmp 0x42c3d5
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x35
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x500], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x3e4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x504], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c45a
mov eax, dword [ecx]
jmp 0x42c45c
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 0x38
call fcn.0042f120
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x508], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x12c]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x498], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c4e1
mov eax, dword [ecx]
jmp 0x42c4e3
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x3b
call fcn.0042f120
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x50c], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x3b4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x510], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c568
mov eax, dword [ecx]
jmp 0x42c56a
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x3e
call fcn.0042f120
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x514], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x39c]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x384]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x518], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c5ef
mov eax, dword [ecx]
jmp 0x42c5f1
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x41
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x51c], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x354]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x520], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c676
mov eax, dword [ecx]
jmp 0x42c678
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x44
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x524], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x324]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x528], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c6fd
mov eax, dword [ecx]
jmp 0x42c6ff
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x47
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x52c], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x2f4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x530], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c784
mov eax, dword [ecx]
jmp 0x42c786
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 0x4a
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x534], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x2c4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x538], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c80b
mov eax, dword [ecx]
jmp 0x42c80d
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 0x4d
call fcn.0042e9d0
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x53c], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x174]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x540], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c892
mov eax, dword [ecx]
jmp 0x42c894
mov eax, ecx
push 0
push 0x4b10ad
mov byte [eax], 0
call fcn.00402c80
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x50
call fcn.0042f120
mov esi, eax
mov ecx, dword [esi]
sub esp, 8
mov edx, esp
mov dword [ebp - 0x544], esp
mov dword [edx], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov dword [esi], 0
mov dword [esi + 4], 0
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x27c]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x548], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42c919
mov eax, dword [ecx]
jmp 0x42c91b
mov eax, ecx
push 0x4b10ad
mov byte [eax], 0
call fcn.00405b90
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x53
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x54c], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x24c]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x550], esp
push 0x4b10ad
call fcn.00405bd0
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x56
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x554], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x21c]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x558], esp
push 0x4b10ad
call fcn.00405bd0
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 0x59
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x560], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x204]
mov byte [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0x1ec]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x564], esp
push 0x4b10ad
call fcn.00405bd0
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x5c
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x568], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0x1bc]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x56c], esp
push 0x4b10ad
call fcn.00405bd0
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0x5f
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x570], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x1a4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x55c], esp
push 0x4b10ad
call fcn.00405bd0
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x62
call fcn.0042e9d0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x574], esp
push eax
call fcn.0042ea70
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x18c]
push eax
sub esp, 0x18
mov ecx, esp
push 0x4b10ad
call fcn.00405bd0
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428e60
mov byte [ebp - 4], 0x65
mov ecx, eax
mov byte [ebp - 4], 0x67
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x73
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x79
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x88
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x9b
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xa6
call fcn.00428f00
mov byte [ebp - 4], 0xb2
mov ecx, eax
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xbf
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xcd
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xdc
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xec
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0xfd
call fcn.00428f00
mov ecx, eax
mov dword [ebp - 4], 0x10f
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x22
call fcn.00428f00
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.00428f00
lea ecx, [ebp - 0x418]
call fcn.00428ec0
lea ecx, [ebp - 0x580]
call fcn.00406f50
lea ecx, [ebp - 0x588]
call fcn.00406f50
lea ecx, [ebp - 0x590]
call fcn.00406f50
lea ecx, [ebp - 0x598]
call fcn.00406f50
lea ecx, [ebp - 0x5a0]
call fcn.00406f50
lea ecx, [ebp - 0x5a8]
call fcn.00406f50
lea ecx, [ebp - 0x484]
call fcn.00406f50
lea ecx, [ebp - 0x48c]
call fcn.00406f50
lea ecx, [ebp - 0x494]
call fcn.00406f50
lea ecx, [ebp - 0x4f4]
call fcn.00406f50
lea ecx, [ebp - 0x4a0]
call fcn.00406f50
lea ecx, [ebp - 0x4a8]
call fcn.00406f50
lea ecx, [ebp - 0x4b0]
call fcn.00406f50
lea ecx, [ebp - 0x4b8]
call fcn.00406f50
lea ecx, [ebp - 0x4c0]
call fcn.00406f50
lea ecx, [ebp - 0x4c8]
call fcn.00406f50
lea ecx, [ebp - 0x4d0]
call fcn.00406f50
lea ecx, [ebp - 0x4d8]
call fcn.00406f50
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 4], 0x2b
call fcn.00406f50
lea ecx, [ebp - 0x18c]
call fcn.00402bb0
lea ecx, [ebp - 0x114]
call fcn.00402bb0
lea ecx, [ebp - 0x1a4]
call fcn.00402bb0
lea ecx, [ebp - 0x15c]
call fcn.00402bb0
lea ecx, [ebp - 0x1bc]
call fcn.00402bb0
lea ecx, [ebp - 0x1d4]
call fcn.00402bb0
lea ecx, [ebp - 0x1ec]
call fcn.00402bb0
lea ecx, [ebp - 0x204]
call fcn.00402bb0
lea ecx, [ebp - 0x21c]
call fcn.00402bb0
lea ecx, [ebp - 0x234]
call fcn.00402bb0
lea ecx, [ebp - 0x24c]
call fcn.00402bb0
lea ecx, [ebp - 0x264]
call fcn.00402bb0
lea ecx, [ebp - 0x27c]
call fcn.00402bb0
lea ecx, [ebp - 0x294]
call fcn.00402bb0
lea ecx, [ebp - 0x174]
call fcn.00402bb0
lea ecx, [ebp - 0x2ac]
call fcn.00402bb0
lea ecx, [ebp - 0x2c4]
call fcn.00402bb0
lea ecx, [ebp - 0x2dc]
call fcn.00402bb0
lea ecx, [ebp - 0x2f4]
call fcn.00402bb0
lea ecx, [ebp - 0x30c]
call fcn.00402bb0
lea ecx, [ebp - 0x324]
call fcn.00402bb0
lea ecx, [ebp - 0x33c]
call fcn.00402bb0
lea ecx, [ebp - 0x354]
call fcn.00402bb0
lea ecx, [ebp - 0x36c]
call fcn.00402bb0
lea ecx, [ebp - 0x384]
call fcn.00402bb0
lea ecx, [ebp - 0x39c]
call fcn.00402bb0
lea ecx, [ebp - 0x3b4]
call fcn.00402bb0
lea ecx, [ebp - 0x144]
call fcn.00402bb0
lea ecx, [ebp - 0x12c]
call fcn.00402bb0
lea ecx, [ebp - 0x3cc]
call fcn.00402bb0
lea ecx, [ebp - 0x3e4]
call fcn.00402bb0
lea ecx, [ebp - 0x3fc]
call fcn.00402bb0
lea ecx, [ebp - 0xcc]
call fcn.00402bb0
lea ecx, [ebp - 0xb4]
call fcn.00402bb0
lea ecx, [ebp - 0xfc]
call fcn.00402bb0
lea ecx, [ebp - 0xe4]
call fcn.00402bb0
lea ecx, [ebp - 0x44]
call fcn.00402bb0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00402bb0
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00429810
push str.decrypt
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d0ef
push str.input
lea ecx, [ebp - 0xe4]
call fcn.00405bd0
lea eax, [ebp - 0xe4]
mov dword [ebp - 4], 0x137
mov ebx, 1
lea ecx, [ebp - 0x9c]
push eax
mov dword [ebp - 0x420], ebx
call fcn.00428b60
test eax, eax
je 0x42cf16
push str.output
lea ecx, [ebp - 0x44]
call fcn.00405bd0
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 0x138
mov ebx, 3
lea ecx, [ebp - 0x9c]
push eax
mov dword [ebp - 0x420], ebx
call fcn.00428b60
test eax, eax
je 0x42cf16
push 0x531dbc
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
mov ebx, 7
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
mov byte [ebp - 0x419], 0
test eax, eax
jne 0x42cf1d
mov byte [ebp - 0x419], 1
test bl, 4
je 0x42cf2d
lea ecx, [ebp - 0x2c]
and ebx, 0xfffffffb
call fcn.00402bb0
test bl, 2
je 0x42cf3a
lea ecx, [ebp - 0x44]
call fcn.00402bb0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], 5
call fcn.00402bb0
cmp byte [ebp - 0x419], 0
je 0x42cfa9
mov eax, dword [0x56f400]
cmp dword [eax], 0
je 0x42cf75
push str.invalid_arguments_for_decrypt_operation
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
lea ecx, [ebp - 0x9c]
call fcn.0042d800
lea ecx, [ebp - 0x44c]
call fcn.004119c0
lea ecx, [ebp - 0x47c]
call fcn.0042d770
lea ecx, [ebp - 0x434]
call fcn.00437170
or eax, 0xffffffff
jmp 0x42d747
push str.input
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0x139
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428bd0
mov ecx, eax
call fcn.0042f1c0
push eax
lea ecx, [ebp - 0xcc]
call fcn.004049c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
call fcn.00402bb0
push str.output
lea ecx, [ebp - 0x44]
call fcn.00405bd0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428bd0
mov ecx, eax
call fcn.0042f1c0
push eax
lea ecx, [ebp - 0xb4]
call fcn.004049c0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3e
call fcn.00402bb0
push 0x531dbc
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428bd0
mov ecx, eax
call fcn.0042f1c0
push eax
lea ecx, [ebp - 0xfc]
call fcn.004049c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
call fcn.00402bb0
lea ecx, [ebp - 0xfc]
call fcn.00402ba0
push eax
lea ecx, [ebp - 0xb4]
call fcn.00402ba0
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.00402ba0
mov edx, esi
mov ecx, eax
call fcn.00439c10
add esp, 4
lea ecx, [ebp - 0xfc]
mov esi, eax
call fcn.00402bb0
lea ecx, [ebp - 0xb4]
call fcn.00402bb0
lea ecx, [ebp - 0xcc]
call fcn.00402bb0
lea ecx, [ebp - 0x9c]
call fcn.0042d800
lea ecx, [ebp - 0x44c]
call fcn.004119c0
lea ecx, [ebp - 0x47c]
call fcn.0042d770
lea ecx, [ebp - 0x434]
call fcn.00437170
mov eax, esi
jmp 0x42d747
push 0x531cac
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56f310]
test esi, esi
mov edi, 1
cmovne ecx, edi
mov byte [0x56f310], cl
lea ecx, [ebp - 0x44]
push str.nodj
call fcn.00405bd0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56f310]
xor eax, eax
test esi, esi
push 0x531d08
cmovne ecx, eax
mov byte [0x56f310], cl
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56f311]
test esi, esi
push str.nodc
cmovne ecx, edi
mov byte [0x56f311], cl
lea ecx, [ebp - 0x44]
call fcn.00405bd0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56f311]
xor eax, eax
test esi, esi
push 0x531ddc
cmovne ecx, eax
mov byte [0x56f311], cl
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56a7e4]
test esi, esi
push str.node
cmovne ecx, edi
mov byte [0x56a7e4], cl
lea ecx, [ebp - 0x44]
call fcn.00405bd0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
mov esi, eax
lea ecx, [ebp - 0x44]
call fcn.00402bb0
test esi, esi
je 0x42d261
mov eax, dword [0x56f400]
mov byte [0x56a7e4], 0
cmp dword [eax], 0
je 0x42d261
push str.Warning:_not_generating_encrypted_file___cloud_submit_wont_work
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
push 0x531e30
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56a7e5]
test esi, esi
push str.nocs
cmovne ecx, edi
mov byte [0x56a7e5], cl
lea ecx, [ebp - 0x44]
call fcn.00405bd0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.00402bb0
movzx ecx, byte [0x56a7e5]
xor eax, eax
test esi, esi
cmovne ecx, eax
mov eax, dword [0x56f400]
mov byte [0x56a7e5], cl
cmp dword [eax], 0
je 0x42d313
lea ecx, [ebp - 0x2c]
call fcn.0042a8d0
mov dword [ebp - 4], 0x142
mov ebx, 8
mov ecx, eax
mov dword [ebp - 0x420], ebx
call fcn.00402ba0
push eax
push str.cli_flags__s
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
mov dword [ebp - 4], 5
test bl, 8
je 0x42d32a
lea ecx, [ebp - 0x2c]
and ebx, 0xfffffff7
call fcn.00402bb0
push str.install
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d3b1
call fcn.00437e60
push ecx
mov ecx, eax
xor esi, esi
call fcn.00438930
test al, al
mov eax, dword [0x56f400]
je 0x42d38f
cmp dword [eax], esi
je 0x42d0bc
push str.Scheduler_task_created
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
jmp 0x42d0bc
cmp dword [eax], esi
je 0x42d3a9
push str.Error_creating_scheduler_task
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
or esi, 0xffffffff
jmp 0x42d0bc
push str.uninstall
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d426
call fcn.00437e60
mov ecx, eax
xor esi, esi
call fcn.00438c20
test al, al
mov eax, dword [0x56f400]
je 0x42d404
cmp dword [eax], esi
je 0x42d0bc
push str.Scheduler_task_removed
jmp 0x42d379
cmp dword [eax], esi
je 0x42d3a9
push str.Error_removing_scheduler_task
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
or esi, 0xffffffff
jmp 0x42d0bc
push str.install_dhcp
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d49a
mov cl, 1
xor esi, esi
call fcn.00439280
test al, al
mov eax, dword [0x56f400]
je 0x42d474
cmp dword [eax], esi
je 0x42d0bc
push str.Run_registry_added
jmp 0x42d379
cmp dword [eax], esi
je 0x42d3a9
push str.Run_registry_error
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
or esi, 0xffffffff
jmp 0x42d0bc
push str.uninstall_dhcp
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d50e
xor cl, cl
xor esi, esi
call fcn.00439280
test al, al
mov eax, dword [0x56f400]
je 0x42d4e8
cmp dword [eax], esi
je 0x42d0bc
push str.Run_registry_removed
jmp 0x42d379
cmp dword [eax], esi
je 0x42d3a9
push str.Run_registry_remove_error
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
or esi, 0xffffffff
jmp 0x42d0bc
push str.start_dhcp
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d57c
xor edx, edx
xor cl, cl
call fcn.00438ef0
lea ecx, [ebp - 0x9c]
mov bl, al
call fcn.0042d800
lea ecx, [ebp - 0x44c]
call fcn.004119c0
lea ecx, [ebp - 0x47c]
call fcn.0042d770
lea ecx, [ebp - 0x434]
call fcn.00437170
xor eax, eax
test bl, bl
setne al
dec eax
jmp 0x42d747
push str.stop_dhcp
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d5ac
xor edx, edx
mov cl, 1
jmp 0x42d53c
push str.settings
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428b60
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402bb0
test esi, esi
je 0x42d62e
push str.settings
lea ecx, [ebp - 0x2c]
call fcn.00405bd0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0x143
push eax
lea ecx, [ebp - 0x9c]
call fcn.00428bd0
mov ecx, eax
call fcn.0042f1c0
push eax
lea ecx, [ebp - 0x44]
call fcn.004049c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.00402bb0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x454]
call fcn.004237a0
lea ecx, [ebp - 0x44]
call fcn.00402bb0
jmp 0x42d639
lea ecx, [ebp - 0x454]
call fcn.00423860
lea ecx, [ebp - 0x9c]
call fcn.0042d800
mov dword [ebp - 4], 2
mov eax, dword [0x56f400]
cmp dword [eax], 0
je 0x42d68d
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x454]
call fcn.00423b80
mov dword [ebp - 4], 0x147
or ebx, 0x10
mov ecx, eax
mov dword [ebp - 0x420], ebx
call fcn.00402ba0
push eax
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
mov dword [ebp - 4], 2
test bl, 0x10
je 0x42d6a1
lea ecx, [ebp - 0x2c]
call fcn.00402bb0
lea ecx, [ebp - 0x454]
call fcn.0042b700
mov eax, dword [0x56f400]
cmp dword [eax], 0
je 0x42d6cc
push str.done
push 0
push str._CI__::_wWinMain____
push 0
call fcn.00406440
add esp, 0x10
lea ecx, [ebp - 0x44c]
call fcn.004119c0
lea ecx, [ebp - 0x47c]
call fcn.0042d770
lea ecx, [ebp - 0x434]
call fcn.00437170
xor eax, eax
jmp 0x42d747
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045bdad
mov esp, ebp
pop ebp
ret 0x10