Function at 0x433a40
Capabilities:
Create thread
Inspect load icon resource
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6a2989
mov eax, dword fs:[0]
push eax
sub esp, 0x66c
mov eax, dword [0x778400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x368], ecx
mov ecx, 0x78b140
call fcn.00419090
movzx eax, al
test eax, eax
je 0x433ab4
lea ecx, [ebp - 0x4e0]
push ecx
call fcn.004eac20
add esp, 4
mov dword [ebp - 0x3bc], eax
mov edx, dword [ebp - 0x3bc]
push edx
mov ecx, 0x78b140
call fcn.00415700
lea ecx, [ebp - 0x4e0]
call fcn.00419eb0
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x134], 1
mov ecx, dword [ebp - 0x368]
cmp dword [ecx + 0x134], 0
je 0x433b2a
mov edx, dword [ebp - 0x368]
mov dword [edx + 0xc], 0x26e
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x10], 0x195
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0xf8], 0
call fcn.00444c90
test eax, eax
je 0x433b0f
mov byte [ebp - 0x36c], 1
jmp 0x433b16
mov byte [ebp - 0x36c], 0
mov edx, dword [ebp - 0x368]
mov al, byte [ebp - 0x36c]
mov byte [edx + 0x13b8], al
jmp 0x433b8c
call fcn.00415650
movzx ecx, al
test ecx, ecx
je 0x433b62
mov edx, dword [ebp - 0x368]
mov dword [edx + 0xc], 0x2ee
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x10], 0x238
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0xf8], 4
jmp 0x433b8c
mov edx, dword [ebp - 0x368]
mov dword [edx + 0xc], 0x26e
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x10], 0x195
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0xf8], 0
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x368]
call fcn.004f4c50
lea eax, [ebp - 0x618]
push eax
call fcn.00414450
add esp, 4
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x3fc]
call fcn.0041af60
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00419d50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x618]
call fcn.00419eb0
push str._Installer
lea ecx, [ebp - 0x1a4]
call fcn.004157f0
lea ecx, [ebp - 0x1a4]
call fcn.0041af60
push eax
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x6b
mov eax, dword [0x78a684]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
push ecx
push 1
push 0x80
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x38c]
push eax
push 0
push 0x80
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
call fcn.00444cd0
push eax
mov ecx, dword [ebp - 0x368]
add ecx, 0x104
call fcn.00415810
lea edx, [ebp - 0x648]
push edx
call fcn.004143b0
add esp, 4
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x40c], eax
mov byte [ebp - 4], 3
push 0
mov ecx, dword [ebp - 0x40c]
call fcn.0041b040
push eax
call fcn.004f5240
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x648]
call fcn.00419320
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00444d40
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18c]
call fcn.00419090
movzx edx, al
test edx, edx
jne 0x433d0c
mov eax, dword [ebp - 0x368]
add eax, 0x1344
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x478], esp
lea edx, [ebp - 0x18c]
push edx
call fcn.00417770
mov dword [ebp - 0x458], eax
call fcn.004e6550
add esp, 0x1c
jmp 0x433d5a
mov byte [ebp - 0x114], 0
push 0x103
push 0
lea eax, [ebp - 0x113]
push eax
call fcn.0066eb10
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x114]
push ecx
push 0x5dc
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
lea edx, [ebp - 0x114]
push edx
mov ecx, dword [ebp - 0x368]
add ecx, 0x1344
call fcn.004157b0
lea eax, [ebp - 0x364]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x5c
push 0
lea edx, [ebp - 0x218]
push edx
call fcn.0066eb10
add esp, 0xc
push 0x48
push 0x5a
mov eax, dword [ebp - 0x368]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0x16
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp - 0x218], eax
lea edx, [ebp - 0x678]
push edx
mov ecx, dword [ebp - 0x368]
call fcn.00441690
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp - 0x414]
call fcn.0041b040
push eax
push 0x740eb4
push 0x20
lea eax, [ebp - 0x1fc]
push eax
call fcn.0066d85d
add esp, 0x10
lea ecx, [ebp - 0x678]
call fcn.00419320
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x41c], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x41c]
mov dword [edx + 0x1260], eax
call fcn.004f5b60
test eax, eax
je 0x433e64
lea ecx, [ebp - 0x5a0]
push ecx
mov ecx, dword [ebp - 0x368]
call fcn.00441690
mov dword [ebp - 0x424], eax
mov ecx, dword [ebp - 0x424]
call fcn.0041b040
push eax
push 0x740ebc
push 0x20
lea edx, [ebp - 0x1fc]
push edx
call fcn.0066d85d
add esp, 0x10
lea ecx, [ebp - 0x5a0]
call fcn.00419320
jmp 0x433e7f
push str.ArialMT
push 0x740ecc
push 0x20
lea eax, [ebp - 0x1fc]
push eax
call fcn.0066d85d
add esp, 0x10
push 0x60
push 0x5a
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0xe
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x1264], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0xc]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x122c], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0x10]
sub eax, 0x32
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x1230], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0x1230]
push eax
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 0x122c]
push edx
call fcn.00429b30
add esp, 8
call fcn.00674150
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x1234], eax
push 0xbe
mov ecx, dword [ebp - 0x368]
add ecx, 0x115c
call fcn.00419f90
push 0x84
mov ecx, dword [ebp - 0x368]
add ecx, 0x1170
call fcn.00419f90
push 0x85
mov ecx, dword [ebp - 0x368]
add ecx, 0x1184
call fcn.00419f90
push 0xb7
mov ecx, dword [ebp - 0x368]
add ecx, 0x1198
call fcn.00419f90
push 0xb6
mov ecx, dword [ebp - 0x368]
add ecx, 0x11ac
call fcn.00419f90
push 0xb8
mov ecx, dword [ebp - 0x368]
add ecx, 0x11d4
call fcn.00419f90
push 0xb9
mov ecx, dword [ebp - 0x368]
add ecx, 0x11e8
call fcn.00419f90
push 0xbf
mov ecx, dword [ebp - 0x368]
add ecx, 0x11fc
call fcn.00419f90
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0x1164]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 0x122c]
sub edx, eax
mov eax, dword [ebp - 0x368]
mov dword [eax + 0x1220], edx
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x368]
mov eax, dword [ecx + 0x1230]
sub eax, dword [edx + 0x1168]
cdq
sub eax, edx
sar eax, 1
add eax, 2
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x1224], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x368]
mov ecx, dword [edx + 0x122c]
sub ecx, dword [eax + 0x1220]
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x368]
mov ecx, dword [edx + 0x1230]
sub ecx, dword [eax + 0x1224]
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x42c]
push edx
mov eax, dword [ebp - 0x434]
push eax
call fcn.00429b30
add esp, 8
call fcn.00674150
mov ecx, dword [ebp - 0x368]
mov dword [ecx + 0x1228], eax
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x368]
mov ecx, dword [edx + 0xc]
imul ecx, dword [eax + 0x10]
xor ebx, ebx
mov eax, ecx
mov edx, 4
mul edx
seto bl
neg ebx
or ebx, eax
push ebx
call fcn.00657741
add esp, 4
mov dword [ebp - 0x43c], eax
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x43c]
mov dword [edx + ecx + 0x124c], eax
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x368]
mov eax, dword [ecx + 0xc]
imul eax, dword [edx + 0x10]
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00657741
add esp, 4
mov dword [ebp - 0x3f0], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x3f0]
mov dword [ecx + eax + 0x124c], edx
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x368]
mov edx, dword [eax + 0xc]
imul edx, dword [ecx + 0x10]
shl edx, 2
push edx
push 0xff
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + ecx + 0x124c]
push eax
call fcn.0066eb10
add esp, 0xc
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x368]
mov eax, dword [ecx + 0xc]
imul eax, dword [edx + 0x10]
shl eax, 2
push eax
push 0xff
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + ecx + 0x124c]
push eax
call fcn.0066eb10
add esp, 0xc
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 0x368]
mov eax, dword [ecx + 0xc]
imul eax, dword [edx + 0x10]
xor ecx, ecx
mov edx, 8
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00657741
add esp, 4
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x3ec]
mov dword [eax + 0x1258], ecx
mov dword [ebp - 0x374], 0
jmp 0x434202
mov edx, dword [ebp - 0x374]
add edx, 1
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x374]
cmp ecx, dword [eax + 0xc]
jge 0x4342bc
mov dword [ebp - 0x378], 0
jmp 0x434232
mov edx, dword [ebp - 0x378]
add edx, 1
mov dword [ebp - 0x378], edx
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax + 0x10]
jge 0x4342b7
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x378]
sub eax, dword [edx + 0x1230]
cdq
xor eax, edx
sub eax, edx
push eax
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x374]
sub ecx, dword [eax + 0x122c]
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
push eax
call fcn.00429b30
add esp, 8
fstp qword [ebp - 0x46c]
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x378]
imul eax, dword [edx + 0xc]
add eax, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 0x1258]
movsd xmm0, qword [ebp - 0x46c]
movsd qword [edx + eax*8], xmm0
jmp 0x434223
jmp 0x4341f3
push 0x1000
call fcn.00657741
add esp, 4
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x3a8]
mov dword [eax + 0x125c], ecx
mov ecx, dword [ebp - 0x368]
call fcn.004351d0
mov edx, dword [ebp - 0x368]
add edx, 0x1b1
push edx
lea ecx, [ebp - 0x144]
call fcn.00419d50
mov byte [ebp - 4], 5
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x368]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x368]
mov edx, dword [eax + 0x64]
call edx
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
push eax
lea ecx, [ebp - 0x144]
call fcn.00415700
lea ecx, [ebp - 0x498]
call fcn.00419eb0
mov ecx, dword [ebp - 0x368]
add ecx, 0x12a0
push ecx
push 0x740ed4
lea ecx, [ebp - 0x144]
call fcn.0041af60
push eax
call fcn.004e9860
add esp, 0xc
push 0x740ee0
lea ecx, [ebp - 0x144]
call fcn.0041af60
push eax
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0x12a0]
push eax
push str.Read_Setup_Cfg_Flag_:__d__root__s___key__s_._n
call fcn.004e64c0
add esp, 0x10
lea ecx, [ebp - 0x660]
push ecx
call fcn.004eb5b0
add esp, 4
mov dword [ebp - 0x3b0], eax
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3f8], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x3f8]
call fcn.0041af60
push eax
push str.Serial_number_is:__s
call fcn.004e64c0
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x660]
call fcn.00419eb0
mov ecx, dword [ebp - 0x368]
call fcn.00436f50
lea ecx, [ebp - 0x12c]
call fcn.00419670
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x174]
call fcn.00419670
mov byte [ebp - 4], 8
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x12c]
push ecx
mov ecx, dword [ebp - 0x368]
call fcn.00429f80
movzx edx, al
test edx, edx
je 0x43460c
mov eax, dword [ebp - 0x368]
cmp dword [eax + 0x4c], 0
je 0x4344f1
lea ecx, [ebp - 0x174]
call fcn.00419090
movzx ecx, al
test ecx, ecx
jne 0x4344d6
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x510]
push eax
call fcn.004f3350
add esp, 8
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x438], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x438]
call fcn.0041b040
push eax
mov edx, dword [ebp - 0x368]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp - 0x368]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x4c]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x510]
call fcn.00419320
push 1
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp - 0x368]
mov edx, dword [edx]
mov ecx, dword [eax + 0x4c]
mov eax, dword [edx + 0x30]
call eax
jmp 0x4344f1
push 0
mov ecx, dword [ebp - 0x368]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp - 0x368]
mov edx, dword [edx]
mov ecx, dword [eax + 0x4c]
mov eax, dword [edx + 0x30]
call eax
lea ecx, [ebp - 0x12c]
call fcn.0041af60
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x368]
add ecx, 0x231
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x380]
mov cl, byte [eax]
mov byte [ebp - 0x36e], cl
mov edx, dword [ebp - 0x37c]
mov al, byte [ebp - 0x36e]
mov byte [edx], al
mov ecx, dword [ebp - 0x380]
add ecx, 1
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x37c]
add edx, 1
mov dword [ebp - 0x37c], edx
cmp byte [ebp - 0x36e], 0
jne 0x434520
lea eax, [ebp - 0x12c]
push eax
mov ecx, dword [ebp - 0x368]
add ecx, 0x12f8
call fcn.004195f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x460], esp
push 0x73e6b7
call fcn.00419d50
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x444], ecx
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x44c], esp
push 0x740f34
call fcn.00419d50
mov dword [ebp - 0x454], eax
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x5d0]
push eax
mov byte [ebp - 4], 8
call fcn.004ea1b0
add esp, 0x38
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x400]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x3c8]
push edx
lea ecx, [ebp - 0x12c]
call fcn.00415700
lea ecx, [ebp - 0x5d0]
call fcn.00419eb0
jmp 0x434622
push str.1.0.0.1
mov ecx, dword [ebp - 0x368]
add ecx, 0x12f8
call fcn.004157b0
lea eax, [ebp - 0x630]
push eax
call fcn.00444d70
add esp, 4
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x3d0], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x3d0]
push edx
lea eax, [ebp - 0x540]
push eax
call fcn.004f3490
add esp, 8
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x408]
push ecx
mov ecx, dword [ebp - 0x368]
add ecx, 0x1314
call fcn.00415700
lea ecx, [ebp - 0x540]
call fcn.00419eb0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x630]
call fcn.00419320
lea edx, [ebp - 0x600]
push edx
call fcn.00444da0
add esp, 4
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x430]
push ecx
lea edx, [ebp - 0x570]
push edx
call fcn.004f3490
add esp, 8
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
push eax
mov ecx, dword [ebp - 0x368]
add ecx, 0x132c
call fcn.00415700
lea ecx, [ebp - 0x570]
call fcn.00419eb0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x600]
call fcn.00419320
mov ecx, dword [ebp - 0x368]
add ecx, 0x1314
call fcn.0041af60
push eax
push 0x740f40
call fcn.004e64c0
add esp, 8
mov ecx, dword [ebp - 0x368]
add ecx, 0x132c
call fcn.0041af60
push eax
push 0x740f50
call fcn.004e64c0
add esp, 8
push 0
push 0
mov ecx, dword [ebp - 0x368]
push ecx
push 0x42b300
push 0
push 0
call fcn.0066da1a
add esp, 0x18
lea edx, [ebp - 0x4b0]
push edx
call fcn.00414550
add esp, 4
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 0xd
push 0x740f60
mov ecx, dword [ebp - 0x3e8]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.00427740
add esp, 0xc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4b0]
call fcn.00419320
push 0
push str.installEx.log
lea ecx, [ebp - 0x15c]
call fcn.0041b040
push eax
lea eax, [ebp - 0x4c8]
push eax
call fcn.004e6960
add esp, 0x10
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
push ecx
lea ecx, [ebp - 0x15c]
call fcn.0041a190
lea ecx, [ebp - 0x4c8]
call fcn.00419320
lea ecx, [ebp - 0x1bc]
call fcn.00419670
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x1bc]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x45c], esp
lea eax, [ebp - 0x15c]
push eax
call fcn.00417770
mov dword [ebp - 0x464], eax
call fcn.004e6550
add esp, 0x1c
lea ecx, [ebp - 0x354]
call fcn.00434e40
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4f8]
push ecx
call fcn.004eac20
add esp, 4
mov dword [ebp - 0x3a0], eax
mov edx, dword [ebp - 0x3a0]
push edx
lea ecx, [ebp - 0x354]
call fcn.00415700
lea ecx, [ebp - 0x4f8]
call fcn.00419eb0
lea eax, [ebp - 0x528]
push eax
call fcn.00414510
add esp, 4
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x3a4]
push ecx
lea ecx, [ebp - 0x33c]
call fcn.00415700
lea ecx, [ebp - 0x528]
call fcn.00419eb0
mov edx, dword [ebp - 0x368]
add edx, 0x1314
push edx
lea ecx, [ebp - 0x324]
call fcn.004195f0
mov eax, dword [ebp - 0x368]
add eax, 0x132c
push eax
lea ecx, [ebp - 0x30c]
call fcn.004195f0
lea ecx, [ebp - 0x12c]
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.004195f0
lea edx, [ebp - 0x1bc]
push edx
lea ecx, [ebp - 0x2dc]
call fcn.004195f0
lea eax, [ebp - 0x558]
push eax
call fcn.00415250
add esp, 4
mov dword [ebp - 0x3ac], eax
mov ecx, dword [ebp - 0x3ac]
push ecx
lea ecx, [ebp - 0x2ac]
call fcn.00415700
lea ecx, [ebp - 0x558]
call fcn.00419eb0
mov edx, dword [ebp - 0x368]
cmp dword [edx + 0x334], 0
je 0x434941
mov byte [ebp - 0x36d], 1
jmp 0x434948
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
push eax
lea ecx, [ebp - 0x588]
push ecx
call fcn.00415290
add esp, 8
mov dword [ebp - 0x3b4], eax
mov edx, dword [ebp - 0x3b4]
push edx
lea ecx, [ebp - 0x294]
call fcn.00415700
lea ecx, [ebp - 0x588]
call fcn.00419eb0
lea eax, [ebp - 0x5b8]
push eax
call fcn.00414450
add esp, 4
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00415700
lea ecx, [ebp - 0x5b8]
call fcn.00419eb0
mov edx, dword [ebp - 0x368]
cmp dword [edx + 0x334], 0
je 0x4349cc
mov byte [ebp - 0x369], 1
jmp 0x4349d3
mov byte [ebp - 0x369], 0
mov al, byte [ebp - 0x369]
mov byte [ebp - 0x234], al
call fcn.004ec780
test eax, eax
je 0x4349f1
mov byte [ebp - 0x36a], 1
jmp 0x4349f8
mov byte [ebp - 0x36a], 0
mov cl, byte [ebp - 0x36a]
mov byte [ebp - 0x233], cl
lea edx, [ebp - 0x5e8]
push edx
mov eax, dword [ebp - 0x368]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x368]
mov eax, dword [edx + 0x98]
call eax
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3c4]
push ecx
lea ecx, [ebp - 0x264]
call fcn.00415700
lea ecx, [ebp - 0x5e8]
call fcn.00419eb0
call fcn.00444c20
test eax, eax
je 0x434a56
mov byte [ebp - 0x36b], 1
jmp 0x434a5d
mov byte [ebp - 0x36b], 0
mov dl, byte [ebp - 0x36b]
mov byte [ebp - 0x232], dl
call fcn.00444cc0
test eax, eax
je 0x434a7e
mov dword [ebp - 0x388], str.online
jmp 0x434a88
mov dword [ebp - 0x388], str.offline
mov eax, dword [ebp - 0x388]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004157b0
mov ecx, dword [ebp - 0x368]
cmp dword [ecx + 0x134], 0
je 0x434b1f
mov ecx, dword [ebp - 0x368]
add ecx, 0x13b7
call fcn.00428d00
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 2
jne 0x434adb
push 0x740f98
lea ecx, [ebp - 0x230]
call fcn.004157b0
jmp 0x434b06
cmp dword [ebp - 0x390], 1
jne 0x434af6
push 0x740fa4
lea ecx, [ebp - 0x230]
call fcn.004157b0
jmp 0x434b06
push 0x740fb0
lea ecx, [ebp - 0x230]
call fcn.004157b0
lea ecx, [ebp - 0x230]
call fcn.0041af60
push eax
push 0x740fb4
call fcn.004e64c0
add esp, 8
mov edx, dword [ebp - 0x368]
cmp dword [edx + 0x134], 0
je 0x434ba4
mov ecx, dword [ebp - 0x368]
add ecx, 0x13b7
call fcn.00428d00
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jne 0x434b60
push str.overwrite
lea ecx, [ebp - 0x230]
call fcn.004157b0
jmp 0x434b8b
cmp dword [ebp - 0x398], 1
jne 0x434b7b
push str.reinstall
lea ecx, [ebp - 0x230]
call fcn.004157b0
jmp 0x434b8b
push 0x740fe0
lea ecx, [ebp - 0x230]
call fcn.004157b0
lea ecx, [ebp - 0x230]
call fcn.0041af60
push eax
push str.Install_type__s._n
call fcn.004e64c0
add esp, 8
push 0x2b0
call fcn.00480108
add esp, 4
mov dword [ebp - 0x384], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x384], 0
je 0x434c41
push 0x2b0
mov ecx, dword [ebp - 0x384]
call fcn.00413f70
sub esp, 0x13c
mov ecx, esp
mov dword [ebp - 0x440], esp
lea eax, [ebp - 0x354]
push eax
call fcn.00435010
mov dword [ebp - 0x3cc], eax
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp - 0x480], ecx
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x448], esp
push edx
call fcn.00414b20
add esp, 4
mov dword [ebp - 0x470], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x384]
call fcn.004fa060
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x394], eax
jmp 0x434c4b
mov dword [ebp - 0x394], 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x3dc], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x3dc]
mov dword [edx + 0x1310], eax
mov ecx, dword [ebp - 0x368]
add ecx, 0x1344
push ecx
mov edx, dword [ebp - 0x368]
mov ecx, dword [edx + 0x1310]
call fcn.005084a0
push 0
push 0
mov eax, dword [ebp - 0x368]
mov ecx, dword [eax + 0x1310]
push ecx
push 0x42b370
push 0
push 0
call fcn.0066da1a
add esp, 0x18
mov edx, dword [ebp - 0x368]
cmp dword [edx + 0x134], 0
je 0x434cd8
push 0
push 0
mov eax, dword [ebp - 0x368]
push eax
push 0x42b400
push 0
push 0
call fcn.0066da1a
add esp, 0x18
call fcn.00444c70
test eax, eax
je 0x434d3a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x474], esp
push ecx
call fcn.00444d10
add esp, 4
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x368]
call fcn.0042f3a0
mov byte [ebp - 0x36f], al
movzx edx, byte [ebp - 0x36f]
test edx, edx
je 0x434d26
push str.Create_Shared_Memory_success__n
call fcn.004e64c0
add esp, 4
jmp 0x434d3a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Create_Shared_Memory_fail___d__n
call fcn.004e64c0
add esp, 8
call fcn.00444c20
test eax, eax
je 0x434d70
call fcn.00444c10
test eax, eax
jne 0x434d59
mov ecx, dword [ebp - 0x368]
call fcn.00442630
jmp 0x434d6e
call fcn.00444c10
cmp eax, 1
jne 0x434d6e
mov ecx, dword [ebp - 0x368]
call fcn.00442b10
jmp 0x434d8c
call fcn.00444c10
test eax, eax
jne 0x434d8c
push 0
push 0x3e8
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [ebp - 0x3e4], 1
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x354]
call fcn.00434f60
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1bc]
call fcn.00419eb0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x15c]
call fcn.00419320
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x174]
call fcn.00419eb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x12c]
call fcn.00419eb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x144]
call fcn.00419eb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18c]
call fcn.00419320
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00419eb0
mov eax, dword [ebp - 0x3e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0066c98d
mov esp, ebp
pop ebp
ret 4