Function at 0x418110
Capabilities:
Authenticate hmac
Check if file exists
Contain obfuscated stackstrings
Create thread
Delete registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Resume thread
Set registry value
Suspend thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d2e76
mov eax, dword fs:[0]
push eax
mov eax, 0x1638
call fcn.004644c0
mov eax, dword [0x50b618]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov ecx, dword [0x51376c]
mov dword [ebp - 0x1540], edi
mov dword [ebp - 0x1578], eax
call fcn.0043ac90
mov ecx, dword [0x513778]
mov esi, eax
call fcn.0043ac90
xor ebx, ebx
cmp esi, ebx
je 0x41c330
cmp eax, ebx
je 0x41c330
cmp esi, eax
je 0x4181ac
mov esi, edi
call fcn.0041cc70
lea esp, [ebp - 0x1654]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045d99c
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x513770]
call fcn.0043ac90
mov ecx, dword [0x51377c]
mov esi, eax
call fcn.0043ac90
cmp esi, ebx
je 0x418181
cmp eax, ebx
je 0x418181
cmp esi, 2
jb 0x418181
cmp eax, 2
jb 0x418181
cmp esi, eax
jne 0x418181
mov ecx, dword [0x513774]
call fcn.0043ac90
mov ecx, dword [0x513780]
mov esi, eax
call fcn.0043ac90
cmp esi, ebx
je 0x418181
cmp eax, ebx
je 0x418181
cmp esi, eax
jne 0x418181
mov ecx, 0x45
mov word [ebp - 0x248], cx
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x246], dx
mov word [ebp - 0x244], ax
mov word [ebp - 0x240], dx
xor eax, eax
mov word [ebp - 0x23e], ax
mov ecx, 0x6f
mov word [ebp - 0x242], cx
mov ecx, 0x4f
mov word [ebp - 0x390], cx
mov edx, 0x70
mov word [ebp - 0x38e], dx
mov ecx, 0x72
mov word [ebp - 0x38a], cx
mov eax, 0x65
mov word [ebp - 0x38c], ax
mov edx, 0x61
mov word [ebp - 0x388], dx
mov ecx, 0x69
mov word [ebp - 0x384], cx
mov eax, 0x74
mov word [ebp - 0x386], ax
mov edx, 0x6e
mov word [ebp - 0x382], dx
mov ecx, 0x20
mov word [ebp - 0x37e], cx
mov edx, 0x73
mov ecx, edx
mov word [ebp - 0x37c], dx
mov eax, 0x67
mov word [ebp - 0x380], ax
mov word [ebp - 0x378], cx
mov eax, 0x79
mov word [ebp - 0x37a], ax
mov edx, 0x74
mov word [ebp - 0x376], dx
mov eax, 0x65
mov word [ebp - 0x374], ax
mov ecx, 0x6d
mov word [ebp - 0x372], cx
mov edx, 0x20
mov word [ebp - 0x370], dx
mov eax, 0x61
mov ecx, 0x62
mov edx, 0x6e
mov word [ebp - 0x36e], ax
mov word [ebp - 0x36c], cx
mov word [ebp - 0x36a], dx
mov eax, 0x6f
mov ecx, 0x72
mov edx, 0x6d
mov word [ebp - 0x368], ax
mov word [ebp - 0x366], cx
mov word [ebp - 0x364], dx
mov eax, 0x61
mov ecx, 0x6c
xor edx, edx
mov word [ebp - 0x362], ax
mov word [ebp - 0x360], cx
mov word [ebp - 0x35e], dx
call fcn.00417580
test eax, eax
je 0x418419
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
push 0x4fc327
push 0x3a
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], bl
call fcn.00407d10
add esp, 0x1c
push 0x600
call fcn.004403a2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x418408
lea ecx, [ebp - 0x390]
push ecx
mov edx, esi
call fcn.00404060
add esp, 4
lea edx, [ebp - 0x248]
push edx
lea edx, [esi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push esi
push 0x4011a0
push ebx
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push ebx
push ebx
push 0x40aa10
push ebx
push ebx
call edi
jmp 0x418188
mov eax, 0x48
mov word [ebp - 0x464], ax
mov ecx, 0x41
mov word [ebp - 0x462], cx
mov eax, 0x44
mov word [ebp - 0x45e], ax
mov edx, 0x52
mov word [ebp - 0x460], dx
mov ecx, 0x57
mov word [ebp - 0x45c], cx
mov eax, 0x52
mov word [ebp - 0x458], ax
mov edx, 0x41
mov word [ebp - 0x45a], dx
mov ecx, 0x45
mov word [ebp - 0x456], cx
mov word [ebp - 0x450], cx
mov eax, 0x44
mov word [ebp - 0x452], ax
mov edx, 0x5c
mov word [ebp - 0x454], dx
mov eax, 0x43
mov word [ebp - 0x44c], ax
mov ecx, 0x52
mov word [ebp - 0x44a], cx
mov edx, 0x53
mov word [ebp - 0x44e], dx
mov eax, 0x50
mov word [ebp - 0x446], ax
mov ecx, 0x54
mov word [ebp - 0x444], cx
mov edx, 0x49
mov word [ebp - 0x448], dx
mov word [ebp - 0x442], dx
mov eax, 0x4f
mov word [ebp - 0x440], ax
mov ecx, 0x4e
mov word [ebp - 0x43e], cx
mov edx, 0x5c
mov word [ebp - 0x43c], dx
mov eax, 0x53
mov word [ebp - 0x43a], ax
mov ecx, 0x79
mov word [ebp - 0x438], cx
mov edx, 0x73
mov word [ebp - 0x436], dx
mov eax, 0x74
mov word [ebp - 0x434], ax
mov ecx, 0x65
mov word [ebp - 0x432], cx
xor eax, eax
mov edx, 0x6d
mov word [ebp - 0x430], dx
mov word [ebp - 0x42e], ax
mov ecx, 0x48
mov word [ebp - 0x3c4], cx
mov edx, 0x41
mov word [ebp - 0x3c2], dx
mov eax, 0x52
mov ecx, 0x44
mov word [ebp - 0x3c0], ax
mov word [ebp - 0x3be], cx
mov edx, 0x57
mov word [ebp - 0x3bc], dx
mov eax, 0x41
mov ecx, 0x52
mov word [ebp - 0x3ba], ax
mov word [ebp - 0x3b8], cx
mov edx, 0x45
mov eax, 0x5c
mov ecx, 0x41
mov word [ebp - 0x3b6], dx
mov edx, 0x43
mov word [ebp - 0x3b4], ax
mov word [ebp - 0x3b2], cx
mov eax, 0x50
mov ecx, 0x49
mov word [ebp - 0x3b0], dx
mov word [ebp - 0x3ae], ax
mov word [ebp - 0x3ac], cx
mov edx, 0x5c
mov word [ebp - 0x3aa], dx
mov eax, 0x44
mov edx, eax
mov word [ebp - 0x3a8], ax
mov word [ebp - 0x3a4], dx
mov ecx, 0x53
mov word [ebp - 0x3a6], cx
mov eax, 0x54
mov word [ebp - 0x3a2], ax
mov ecx, 0x5c
mov word [ebp - 0x3a0], cx
mov edx, 0x56
mov word [ebp - 0x39e], dx
mov eax, 0x42
mov word [ebp - 0x39c], ax
mov ecx, 0x4f
mov word [ebp - 0x39a], cx
mov eax, 0x5f
mov ecx, eax
mov word [ebp - 0x396], ax
mov word [ebp - 0x394], cx
mov edx, 0x58
mov word [ebp - 0x398], dx
xor edx, edx
mov word [ebp - 0x392], dx
mov eax, 0x48
mov word [ebp - 0x35c], ax
mov ecx, 0x41
mov word [ebp - 0x35a], cx
mov edx, 0x52
mov word [ebp - 0x358], dx
mov eax, 0x44
mov word [ebp - 0x356], ax
mov ecx, 0x57
mov word [ebp - 0x354], cx
mov edx, 0x41
mov word [ebp - 0x352], dx
mov eax, 0x52
mov word [ebp - 0x350], ax
mov ecx, 0x45
mov word [ebp - 0x34e], cx
mov edx, 0x5c
mov word [ebp - 0x34c], dx
mov eax, 0x41
mov word [ebp - 0x34a], ax
mov ecx, 0x43
mov word [ebp - 0x348], cx
mov edx, 0x50
mov word [ebp - 0x346], dx
mov eax, 0x49
mov word [ebp - 0x344], ax
mov ecx, 0x5c
mov word [ebp - 0x342], cx
mov edx, 0x44
mov ecx, edx
mov word [ebp - 0x340], dx
mov eax, 0x53
mov word [ebp - 0x33e], ax
xor eax, eax
mov edx, 0x54
mov word [ebp - 0x33c], cx
mov word [ebp - 0x33a], dx
mov word [ebp - 0x338], ax
mov ecx, 0x53
mov edx, 0x79
mov eax, 0x73
mov word [ebp - 0x2e4], cx
mov word [ebp - 0x2e2], dx
mov word [ebp - 0x2e0], ax
mov ecx, 0x74
mov edx, 0x65
mov eax, 0x6d
mov word [ebp - 0x2de], cx
mov word [ebp - 0x2dc], dx
mov word [ebp - 0x2da], ax
mov ecx, 0x42
mov edx, 0x69
mov eax, 0x6f
mov word [ebp - 0x2d8], cx
mov word [ebp - 0x2d6], dx
mov word [ebp - 0x2d4], ax
mov ecx, 0x73
mov word [ebp - 0x2d2], cx
mov edx, 0x56
mov word [ebp - 0x2d0], dx
mov eax, 0x65
mov word [ebp - 0x2ce], ax
mov ecx, 0x72
mov word [ebp - 0x2cc], cx
mov edx, 0x73
mov word [ebp - 0x2ca], dx
mov eax, 0x69
mov word [ebp - 0x2c8], ax
xor eax, eax
mov word [ebp - 0x2c2], ax
mov ecx, 0x6f
mov word [ebp - 0x2c6], cx
mov edx, 0x6e
mov word [ebp - 0x2c4], dx
mov ecx, 0x56
mov word [ebp - 0x2c0], cx
mov edx, 0x69
mov word [ebp - 0x2be], dx
mov eax, 0x64
mov word [ebp - 0x2bc], ax
mov ecx, 0x65
mov word [ebp - 0x2ba], cx
mov edx, 0x6f
mov word [ebp - 0x2b8], dx
mov word [ebp - 0x2b2], dx
mov eax, 0x42
mov word [ebp - 0x2b6], ax
mov ecx, 0x69
mov word [ebp - 0x2b4], cx
mov eax, 0x73
mov word [ebp - 0x2b0], ax
mov ecx, 0x56
mov word [ebp - 0x2ae], cx
mov edx, 0x65
mov word [ebp - 0x2ac], dx
mov eax, 0x72
mov word [ebp - 0x2aa], ax
mov ecx, 0x73
mov word [ebp - 0x2a8], cx
mov edx, 0x69
mov word [ebp - 0x2a6], dx
xor edx, edx
mov word [ebp - 0x2a0], dx
mov eax, 0x6f
mov word [ebp - 0x2a4], ax
mov ecx, 0x6e
mov word [ebp - 0x2a2], cx
mov eax, 0x56
mov word [ebp - 0x23c], ax
mov ecx, 0x42
mov word [ebp - 0x23a], cx
mov edx, 0x4f
mov word [ebp - 0x238], dx
xor ecx, ecx
mov eax, 0x58
mov edx, 0x56
mov word [ebp - 0x236], ax
mov word [ebp - 0x234], cx
mov word [ebp - 0x2fc], dx
mov eax, 0x69
mov ecx, 0x72
mov edx, 0x74
mov word [ebp - 0x2fa], ax
mov word [ebp - 0x2f8], cx
mov word [ebp - 0x2f6], dx
mov eax, 0x75
mov ecx, 0x61
mov edx, 0x6c
mov word [ebp - 0x2f4], ax
mov word [ebp - 0x2f2], cx
mov word [ebp - 0x2f0], dx
mov eax, 0x42
mov ecx, 0x6f
mov edx, 0x78
mov word [ebp - 0x2ee], ax
mov word [ebp - 0x2ec], cx
mov word [ebp - 0x2ea], dx
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor eax, eax
mov word [ebp - 0x2e8], ax
mov eax, 0x42
mov word [ebp - 0x1dc], ax
mov ecx, 0x58
lea eax, [ebp - 0x157c]
push eax
mov word [ebp - 0x1e0], cx
push 0xf003f
mov ecx, 0x56
mov word [ebp - 0x1da], cx
push ebx
mov edx, 0x4f
lea ecx, [ebp - 0x464]
mov word [ebp - 0x1de], dx
push ecx
xor edx, edx
push reloc.OLEAUT32.dll_SysReAllocString
mov word [ebp - 0x1d8], dx
call esi
test eax, eax
jne 0x418bf5
push 0x207
lea edx, [ebp - 0x6cb]
push ebx
push edx
mov byte [ebp - 0x6cc], bl
call fcn.004634b0
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push ebx
lea eax, [ebp - 0x2e4]
push eax
push ecx
mov dword [ebp - 0x1570], 7
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x418be6
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0045ed5b
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
add esp, 8
test eax, eax
je 0x418ade
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
jmp 0x418ab0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x418ab0
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push ebx
lea eax, [ebp - 0x2e4]
push eax
push ecx
call edi
push 0x208
lea edx, [ebp - 0x6cc]
push ebx
push edx
call fcn.004634b0
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push ebx
lea eax, [ebp - 0x2c0]
push eax
push ecx
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x418be6
lea edx, [ebp - 0x2fc]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0045ed5b
add esp, 8
test eax, eax
je 0x418b80
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x418b52
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push ebx
lea eax, [ebp - 0x2c0]
push eax
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push ebx
lea eax, [ebp - 0x3c4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x418be6
mov ecx, dword [ebp - 0x1560]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push ebx
lea eax, [ebp - 0x35c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x418bec
mov ecx, dword [ebp - 0x1560]
push ebx
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov edx, dword [ebp - 0x1560]
push edx
call edi
jmp 0x418bec
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x157c]
push eax
call edi
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x222], dx
mov word [ebp - 0x21c], dx
mov word [ebp - 0x220], ax
xor eax, eax
mov ecx, 0x45
mov word [ebp - 0x224], cx
mov word [ebp - 0x21a], ax
mov ecx, 0x6f
mov word [ebp - 0x21e], cx
mov edx, 0x6f
mov word [ebp - 0x42a], dx
mov ecx, 0x59
mov word [ebp - 0x42c], cx
mov edx, 0x20
mov word [ebp - 0x424], dx
mov ecx, 0x72
mov word [ebp - 0x426], cx
mov edx, 0x6d
mov word [ebp - 0x41e], dx
mov eax, 0x75
mov word [ebp - 0x428], ax
mov ecx, 0x6f
mov word [ebp - 0x420], cx
mov edx, 0x74
mov word [ebp - 0x418], dx
mov eax, 0x63
mov word [ebp - 0x422], ax
mov ecx, 0x75
mov word [ebp - 0x41a], cx
mov edx, 0x20
mov word [ebp - 0x412], dx
mov eax, 0x70
mov word [ebp - 0x41c], ax
mov ecx, 0x72
mov word [ebp - 0x414], cx
mov edx, 0x79
mov word [ebp - 0x40c], dx
mov eax, 0x65
mov word [ebp - 0x416], ax
mov ecx, 0x61
mov word [ebp - 0x40e], cx
mov edx, 0x65
mov word [ebp - 0x406], dx
mov eax, 0x6d
mov word [ebp - 0x410], ax
mov eax, 0x20
mov ecx, 0x62
mov word [ebp - 0x408], cx
mov edx, 0x6e
mov word [ebp - 0x400], dx
mov word [ebp - 0x40a], ax
mov word [ebp - 0x404], ax
mov ecx, 0x69
mov word [ebp - 0x402], cx
mov edx, 0x63
mov eax, 0x66
mov word [ebp - 0x3fa], dx
mov word [ebp - 0x3fe], ax
mov ecx, 0x65
mov edx, 0x64
mov word [ebp - 0x3fc], cx
mov eax, 0x74
mov word [ebp - 0x3f6], cx
mov word [ebp - 0x3f4], dx
mov word [ebp - 0x3f8], ax
mov eax, 0x20
mov ecx, 0x62
mov edx, 0x79
mov word [ebp - 0x3f0], cx
mov word [ebp - 0x3ee], dx
mov ecx, 0x61
mov edx, eax
mov word [ebp - 0x3f2], ax
mov word [ebp - 0x3ec], ax
mov eax, 0x63
mov word [ebp - 0x3ea], cx
mov word [ebp - 0x3e8], dx
mov word [ebp - 0x3e6], ax
mov ecx, 0x6f
mov word [ebp - 0x3e4], cx
mov eax, 0x70
mov word [ebp - 0x3e0], ax
mov ecx, 0x75
mov word [ebp - 0x3de], cx
mov edx, 0x6d
mov word [ebp - 0x3e2], dx
mov eax, 0x65
mov word [ebp - 0x3da], ax
mov ecx, 0x72
mov word [ebp - 0x3d8], cx
mov edx, 0x74
mov word [ebp - 0x3dc], dx
mov eax, 0x76
mov word [ebp - 0x3d4], ax
mov ecx, 0x69
mov edx, 0x20
mov word [ebp - 0x3d2], cx
mov ecx, 0x73
mov eax, 0x75
mov word [ebp - 0x3d6], dx
mov word [ebp - 0x3ce], ax
xor eax, eax
mov edx, 0x72
mov word [ebp - 0x3cc], cx
mov byte [ebp - 0x138], cl
mov byte [ebp - 0x136], cl
mov byte [ebp - 0x134], cl
mov byte [ebp - 0x124], cl
mov byte [ebp - 0x122], cl
mov byte [ebp - 0x120], cl
mov word [ebp - 0x3d0], dx
mov edx, 0x2e
mov word [ebp - 0x3c8], ax
mov al, 0x3a
lea ecx, [ebp - 0xd8]
push ecx
mov word [ebp - 0x3ca], dx
mov byte [ebp - 0xd8], 0x57
mov byte [ebp - 0xd7], 0x49
mov byte [ebp - 0xd6], 0x4e
mov byte [ebp - 0xd5], 0x53
mov byte [ebp - 0xd4], 0x50
mov byte [ebp - 0xd3], 0x4f
mov byte [ebp - 0xd2], 0x4f
mov byte [ebp - 0xd1], 0x4c
mov byte [ebp - 0xd0], dl
mov byte [ebp - 0xcf], 0x44
mov byte [ebp - 0xce], 0x52
mov byte [ebp - 0xcd], 0x56
mov byte [ebp - 0xcc], bl
mov byte [ebp - 0x140], al
mov byte [ebp - 0x13f], 0x5c
mov byte [ebp - 0x13e], 0x77
mov byte [ebp - 0x13d], 0x69
mov byte [ebp - 0x13c], 0x6e
mov byte [ebp - 0x13b], 0x64
mov byte [ebp - 0x13a], 0x6f
mov byte [ebp - 0x139], 0x77
mov byte [ebp - 0x137], 0x5c
mov byte [ebp - 0x135], 0x79
mov byte [ebp - 0x133], 0x77
mov byte [ebp - 0x132], 0x6f
mov byte [ebp - 0x131], 0x77
mov byte [ebp - 0x130], bl
mov byte [ebp - 0x12c], al
mov byte [ebp - 0x12b], 0x5c
mov byte [ebp - 0x12a], 0x77
mov byte [ebp - 0x129], 0x69
mov byte [ebp - 0x128], 0x6e
mov byte [ebp - 0x127], 0x64
mov byte [ebp - 0x126], 0x6f
mov byte [ebp - 0x125], 0x77
mov byte [ebp - 0x123], 0x5c
mov byte [ebp - 0x121], 0x79
mov byte [ebp - 0x11f], 0x74
mov byte [ebp - 0x11e], 0x65
mov byte [ebp - 0x11d], 0x6d
mov byte [ebp - 0x11c], bl
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
cmp esi, ebx
je 0x41910b
push 0x1ff
lea edx, [ebp - 0x6c3]
push ebx
push edx
mov byte [ebp - 0x6c4], bl
call fcn.004634b0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x6c4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x41907f
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
push 0x4fc327
push 0x3b
lea ecx, [ebp - 0x1c]
push 0x4d
push ecx
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.00407d10
add esp, 0x1c
push 0x600
call fcn.004403a2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x418408
lea edx, [ebp - 0x42c]
push edx
mov edx, esi
call fcn.00404060
add esp, 4
lea eax, [ebp - 0x224]
push eax
jmp 0x4183e7
lea eax, [ebp - 0x6c4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x419088
sub eax, edx
mov edi, eax
mov esi, ebx
je 0x4190bd
jmp 0x4190a0
movsx ecx, byte [ebp + esi - 0x6c4]
push ecx
call fcn.00461357
mov byte [ebp + esi - 0x6c4], al
inc esi
add esp, 4
cmp esi, edi
jb 0x4190a0
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0x6c4]
push eax
call fcn.0045e1c0
add esp, 8
test eax, eax
jne 0x41910b
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x6c4]
push edx
call fcn.0045e1c0
add esp, 8
test eax, eax
jne 0x41910b
push 0xffffffffffffffff
lea eax, [ebp - 0x6c4]
push eax
push 0x4fc327
push 0x4fc327
push 0x3c
jmp 0x41901c
mov eax, dword [ebp - 0x1540]
lea ecx, [eax + 0x160]
push ecx
push eax
call fcn.0043aef0
add esp, 8
call fcn.00410b20
mov ecx, dword [0x5132bc]
call fcn.0043ac90
mov edx, 0x43
mov word [ebp - 0x27c], dx
mov edi, eax
mov ecx, 0x6e
mov word [ebp - 0x278], cx
mov edx, 0x27
mov word [ebp - 0x276], dx
mov ecx, 0x20
mov word [ebp - 0x272], cx
mov edx, 0x53
mov word [ebp - 0x270], dx
mov ecx, 0x61
mov word [ebp - 0x26c], cx
mov eax, 0x61
mov word [ebp - 0x27a], ax
mov edx, 0x72
mov word [ebp - 0x26a], dx
mov eax, 0x74
mov word [ebp - 0x274], ax
mov word [ebp - 0x26e], ax
mov word [ebp - 0x268], ax
mov ecx, 0x20
mov word [ebp - 0x266], cx
mov edx, 0x47
mov word [ebp - 0x264], dx
mov ecx, 0x6d
mov word [ebp - 0x260], cx
mov eax, 0x61
mov word [ebp - 0x262], ax
mov edx, 0x65
mov word [ebp - 0x25e], dx
mov ecx, 0x43
mov word [ebp - 0x25a], cx
mov eax, 0x20
mov word [ebp - 0x25c], ax
mov edx, 0x6c
mov word [ebp - 0x258], dx
mov ecx, 0x65
mov eax, 0x69
mov word [ebp - 0x254], cx
mov edx, 0x6e
mov word [ebp - 0x256], ax
mov word [ebp - 0x252], dx
mov ecx, 0x2e
xor edx, edx
mov eax, 0x74
mov word [ebp - 0x24e], cx
mov ecx, 0x72
mov word [ebp - 0x250], ax
mov word [ebp - 0x24c], dx
mov eax, 0x45
mov edx, ecx
mov word [ebp - 0x1f4], ax
mov word [ebp - 0x1f0], dx
mov eax, 0x6f
xor edx, edx
mov dword [ebp - 0x1588], edi
mov word [ebp - 0x1f2], cx
mov word [ebp - 0x1ee], ax
mov word [ebp - 0x1ec], cx
mov word [ebp - 0x1ea], dx
mov byte [ebp - 0xbc], 0x6b
mov byte [ebp - 0xbb], 0x65
mov byte [ebp - 0xba], cl
mov byte [ebp - 0xb9], 0x6e
mov byte [ebp - 0xb8], 0x65
mov byte [ebp - 0xb7], 0x6c
mov byte [ebp - 0xb6], 0x33
mov byte [ebp - 0xb5], 0x32
mov byte [ebp - 0xb4], 0x2e
mov byte [ebp - 0xb3], 0x64
mov byte [ebp - 0xb2], 0x6c
mov byte [ebp - 0xf0], al
mov byte [ebp - 0x167], al
mov byte [ebp - 0x15f], al
mov byte [ebp - 0x100], al
mov byte [ebp - 0x110], al
lea eax, [ebp - 0xf8]
mov byte [ebp - 0x16d], cl
mov byte [ebp - 0x169], cl
mov byte [ebp - 0x166], cl
mov byte [ebp - 0x15a], cl
mov byte [ebp - 0x107], cl
mov byte [ebp - 0x101], cl
mov byte [ebp - 0x117], cl
mov byte [ebp - 0x111], cl
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov byte [ebp - 0xb1], 0x6c
mov byte [ebp - 0xb0], bl
mov byte [ebp - 0xf8], 0x47
mov byte [ebp - 0xf7], 0x65
mov byte [ebp - 0xf6], 0x74
mov byte [ebp - 0xf5], 0x54
mov byte [ebp - 0xf4], 0x69
mov byte [ebp - 0xf3], 0x63
mov byte [ebp - 0xf2], 0x6b
mov byte [ebp - 0xf1], 0x43
mov byte [ebp - 0xef], 0x75
mov byte [ebp - 0xee], 0x6e
mov byte [ebp - 0xed], 0x74
mov byte [ebp - 0xec], bl
mov byte [ebp - 0x170], 0x51
mov byte [ebp - 0x16f], 0x75
mov byte [ebp - 0x16e], 0x65
mov byte [ebp - 0x16c], 0x79
mov byte [ebp - 0x16b], 0x50
mov byte [ebp - 0x16a], 0x65
mov byte [ebp - 0x168], 0x66
mov byte [ebp - 0x165], 0x6d
mov byte [ebp - 0x164], 0x61
mov byte [ebp - 0x163], 0x6e
mov byte [ebp - 0x162], 0x63
mov byte [ebp - 0x161], 0x65
mov byte [ebp - 0x160], 0x43
mov byte [ebp - 0x15e], 0x75
mov byte [ebp - 0x15d], 0x6e
mov byte [ebp - 0x15c], 0x74
mov byte [ebp - 0x15b], 0x65
mov byte [ebp - 0x159], bl
mov byte [ebp - 0x108], 0x43
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x61
mov byte [ebp - 0x104], 0x74
mov byte [ebp - 0x103], 0x65
mov byte [ebp - 0x102], 0x50
mov byte [ebp - 0xff], 0x63
mov byte [ebp - 0xfe], 0x65
mov byte [ebp - 0xfd], 0x73
mov byte [ebp - 0xfc], 0x73
mov byte [ebp - 0xfb], 0x41
mov byte [ebp - 0xfa], bl
mov byte [ebp - 0x118], 0x43
mov byte [ebp - 0x116], 0x65
mov byte [ebp - 0x115], 0x61
mov byte [ebp - 0x114], 0x74
mov byte [ebp - 0x113], 0x65
mov byte [ebp - 0x112], 0x50
mov byte [ebp - 0x10f], 0x63
mov byte [ebp - 0x10e], 0x65
mov byte [ebp - 0x10d], 0x73
mov byte [ebp - 0x10c], 0x73
mov byte [ebp - 0x10b], 0x57
mov byte [ebp - 0x10a], bl
call fcn.00476470
mov esi, eax
cmp esi, ebx
je 0x4195f4
cmp byte [esi], 0xe9
jne 0x4195f4
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x41952f
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00404060
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push edi
push 0x4011a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push ebx
push ecx
mov dword [ebp - 0x1568], ebx
mov byte [ebp - 0x6c4], bl
call fcn.004634b0
add esp, 0xc
push 0x206
lea eax, [ebp - 0xc22]
xor edx, edx
push ebx
push eax
mov word [ebp - 0xc24], dx
call fcn.004634b0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.00401210
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x419596
sub eax, edx
je 0x4195df
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c4]
push ecx
push 0x4fc327
push 0x4fc327
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.00407d10
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x40aa10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x418188
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00476470
mov esi, eax
cmp esi, ebx
je 0x4196ee
cmp byte [esi], 0xe9
jne 0x4196ee
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x419671
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00404060
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push edi
push 0x4011a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push ebx
push ecx
mov dword [ebp - 0x1568], ebx
mov byte [ebp - 0x6c4], bl
call fcn.004634b0
add esp, 0xc
push 0x206
lea eax, [ebp - 0xc22]
xor edx, edx
push ebx
push eax
mov word [ebp - 0xc24], dx
call fcn.004634b0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.00401210
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4196d8
sub eax, edx
je 0x4195df
push 0xfffffffffffffffe
jmp 0x4195a3
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00476470
mov esi, eax
cmp esi, ebx
je 0x4197e8
cmp byte [esi], 0xe9
jne 0x4197e8
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x41976b
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00404060
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push edi
push 0x4011a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push ebx
push ecx
mov dword [ebp - 0x1568], ebx
mov byte [ebp - 0x6c4], bl
call fcn.004634b0
add esp, 0xc
push 0x206
lea eax, [ebp - 0xc22]
xor edx, edx
push ebx
push eax
mov word [ebp - 0xc24], dx
call fcn.004634b0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.00401210
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4197d2
sub eax, edx
je 0x4195df
push 0xfffffffffffffffd
jmp 0x4195a3
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00476470
mov esi, eax
cmp esi, ebx
je 0x4198e6
cmp byte [esi], 0xe9
jne 0x4198e6
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, eax
add esp, 0xc
cmp edi, ebx
je 0x419865
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00404060
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push edi
push 0x4011a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push ebx
push ecx
mov dword [ebp - 0x1568], ebx
mov byte [ebp - 0x6c4], bl
call fcn.004634b0
add esp, 0xc
push 0x206
lea eax, [ebp - 0xc22]
xor edx, edx
push ebx
push eax
mov word [ebp - 0xc24], dx
call fcn.004634b0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.00401210
mov eax, edi
add esp, 8
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4198d0
sub eax, edx
je 0x4195df
push 0xfffffffffffffffc
jmp 0x4195a3
mov eax, 0x25
mov edx, eax
mov word [ebp - 0x200], ax
mov ecx, 0x73
mov eax, ecx
mov word [ebp - 0x1fa], ax
mov word [ebp - 0x1fe], cx
xor ecx, ecx
mov word [ebp - 0x1fc], dx
mov word [ebp - 0x1f8], cx
mov word [ebp - 0x1e4], cx
mov eax, 0x62
mov word [ebp - 0x1e6], ax
mov edx, 0x72
mov word [ebp - 0x1e8], dx
mov eax, 0x69
mov word [ebp - 0x29a], ax
mov ecx, 0x6c
mov word [ebp - 0x298], cx
mov edx, 0x46
mov word [ebp - 0x29c], dx
mov eax, 0x20
mov word [ebp - 0x294], ax
mov ecx, 0x63
mov word [ebp - 0x292], cx
mov eax, 0x72
mov ecx, eax
mov edx, 0x65
mov word [ebp - 0x296], dx
mov word [ebp - 0x28c], cx
mov word [ebp - 0x28e], ax
mov edx, 0x6f
mov word [ebp - 0x290], dx
mov ecx, 0x74
mov word [ebp - 0x286], cx
mov edx, 0x75
mov word [ebp - 0x28a], dx
mov eax, 0x70
mov word [ebp - 0x288], ax
mov ecx, 0x21
mov word [ebp - 0x280], cx
mov edx, 0x65
mov word [ebp - 0x284], dx
mov eax, 0x64
mov word [ebp - 0x282], ax
xor edx, edx
mov ecx, 0x6f
mov eax, 0x4c
mov word [ebp - 0x216], cx
mov word [ebp - 0x27e], dx
mov word [ebp - 0x218], ax
mov ecx, 0x6e
mov edx, 0x67
mov eax, 0x69
push 0x206
mov word [ebp - 0x210], cx
mov word [ebp - 0x214], dx
mov word [ebp - 0x212], ax
lea ecx, [ebp - 0x112a]
xor edx, edx
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x20e], dx
mov dword [ebp - 0x1574], ebx
mov word [ebp - 0x112c], ax
call fcn.004634b0
add esp, 0xc
lea eax, [edi + 0x4da]
push eax
lea edx, [ebp - 0x200]
push 0x512ea8
push edx
lea edx, [ebp - 0x112c]
mov dword [ebp - 0x1560], eax
call fcn.00408ae0
add esp, 0xc
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x112c]
push ecx
lea edx, [ebp - 0x1574]
push edx
call fcn.0045e84b
mov eax, dword [ebp - 0x1574]
add esp, 0xc
cmp eax, ebx
jne 0x419b53
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
cmp esi, ebx
je 0x419b06
lea eax, [ebp - 0x29c]
push eax
mov edx, esi
call fcn.00404060
lea ecx, [ebp - 0x218]
add esp, 4
push ecx
lea edx, [esi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push esi
push 0x4011a0
push ebx
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffb
push 0x4fc327
push 0x4fc327
push 0x4fc327
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], bl
call fcn.00407d10
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x40aa10
push ebx
push ebx
call edi
jmp 0x418188
push 2
push ebx
push eax
call fcn.004606dd
mov eax, dword [ebp - 0x1574]
add esp, 0xc
push eax
call fcn.004608ff
mov ecx, dword [ebp - 0x1574]
add esp, 4
push ebx
push ebx
push ecx
mov esi, eax
call fcn.004606dd
add esp, 0xc
push esi
call fcn.004403dc
mov edx, dword [ebp - 0x1574]
add esp, 4
push edx
push 1
mov edi, eax
push esi
push edi
call fcn.00460c0d
mov eax, dword [ebp - 0x1574]
push eax
call fcn.0045ecdf
lea ecx, [ebp - 0x1d4]
add esp, 0x14
push ecx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.0047fba0
add esp, 4
push esi
lea edx, [ebp - 0x1d4]
push edi
push edx
call fcn.0047f970
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.0047fa50
push edi
call fcn.004403d1
lea edx, [ebp - 0x4c4]
add esp, 0xc
push edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
call fcn.0047f930
add esp, 4
push 0x14
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.0047f720
add esp, 0xc
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.0047f800
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.0043ac90
add eax, 0xc
lea ecx, [ebp - 0x2c]
mov edx, 0x10
sub ecx, eax
mov edi, edi
mov esi, dword [eax + ecx]
cmp esi, dword [eax]
jne 0x419d41
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x419c50
mov ecx, dword [0x513764]
call fcn.0043ac90
test eax, eax
je 0x419d3b
mov ecx, dword [0x513768]
call fcn.0043ac90
test eax, eax
je 0x419d3b
push 0x208
lea ecx, [ebp - 0x112c]
push ebx
push ecx
call fcn.004634b0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x112c]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x30
lea eax, [ebp - 0x15fc]
push ebx
push eax
call fcn.004634b0
add esp, 0xc
lea ecx, [ebp - 0x15fc]
push ecx
lea edx, [ebp - 0x112c]
push edx
call fcn.00461484
add esp, 8
test eax, eax
jne 0x419de7
cmp dword [ebp - 0x15e8], 0x864700
jl 0x419de7
push 0xfffffffffffffff9
push 0x4fc327
push 0x4fc327
push 0x4fc327
push 0x3d
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], bl
call fcn.00407d10
mov esi, dword [ebp - 0x1540]
add esp, 0x1c
call fcn.0041cc70
push ebx
call fcn.0045fe0e
push ebx
push ebx
call fcn.0043aef0
push 0x600
call fcn.004403a2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
cmp esi, ebx
je 0x419d9a
lea ecx, [ebp - 0x29c]
push ecx
mov edx, esi
call fcn.00404060
lea edx, [ebp - 0x218]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push esi
push 0x4011a0
push ebx
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffa
push 0x4fc327
push 0x4fc327
push 0x4fc327
push 0x3d
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], bl
call fcn.00407d10
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x40aa10
push ebx
push ebx
call edi
jmp 0x418188
push 0xc
lea ecx, [ebp - 0x1598]
push ecx
push ebx
mov dword [ebp - 0x1598], ebx
mov dword [ebp - 0x1594], ebx
mov dword [ebp - 0x1590], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push eax
call sub.PSAPI.DLL_GetModuleInformation
mov ecx, dword [0x513744]
cmp byte [ecx], 0xe9
mov eax, dword [ebp - 0x1598]
mov edx, dword [ebp - 0x1594]
lea edi, [edx + eax]
je 0x419e4d
push ebx
call esi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [ebp - 0x1540]
call fcn.0041cc70
push ebx
call fcn.0045fe0e
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x419e32
cmp ecx, edi
ja 0x419e32
mov ecx, dword [0x513758]
cmp byte [ecx], 0xe9
jne 0x419e32
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x419e32
cmp ecx, edi
ja 0x419e32
mov ecx, dword [0x51375c]
cmp byte [ecx], 0xe9
jne 0x419e32
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x419e32
cmp ecx, edi
ja 0x419e32
mov ecx, dword [0x513760]
cmp byte [ecx], 0xe9
jne 0x419e32
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x419e32
cmp ecx, edi
ja 0x419e32
push 0x44
lea eax, [ebp - 0x1644]
push ebx
push eax
mov dword [ebp - 0x1554], ebx
mov dword [ebp - 0x1550], ebx
mov dword [ebp - 0x154c], ebx
mov dword [ebp - 0x1548], ebx
call fcn.004634b0
add esp, 0xc
push 0x206
lea edx, [ebp - 0x153a]
xor ecx, ecx
push ebx
push edx
mov dword [ebp - 0x1644], 0x44
mov word [ebp - 0x153c], cx
call fcn.004634b0
add esp, 0xc
push 0x206
lea ecx, [ebp - 0xa1a]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0xa1c], ax
call fcn.004634b0
add esp, 0xc
push 0x103
lea edx, [ebp - 0x813]
push ebx
push edx
mov byte [ebp - 0x814], bl
call fcn.004634b0
mov eax, 0xb1be
mov word [ebp - 0x594], ax
mov ecx, 0xbeab
mov word [ebp - 0x592], cx
mov edx, 0xbbaa
mov word [ebp - 0x590], dx
mov eax, 0xcad6
mov word [ebp - 0x58e], ax
mov ecx, 0xb2e1
mov word [ebp - 0x58c], cx
mov edx, 0xcad5
mov word [ebp - 0x58a], dx
mov eax, 0x2e
mov word [ebp - 0x588], ax
mov ecx, 0xc2bc
mov word [ebp - 0x586], cx
mov edx, 0xb5c4
mov word [ebp - 0x584], dx
mov eax, 0xcec4
mov word [ebp - 0x582], ax
mov ecx, 0xd5c2
mov word [ebp - 0x580], cx
mov edx, 0x71
mov eax, 0x77
mov ecx, 0x65
mov word [ebp - 0x57e], dx
mov word [ebp - 0x57c], ax
mov word [ebp - 0x57a], cx
mov edx, 0x72
mov eax, 0x74
mov ecx, 0x79
mov word [ebp - 0x578], dx
mov word [ebp - 0x576], ax
mov word [ebp - 0x574], cx
mov edx, 0xd2d4
mov eax, 0xbfb4
mov ecx, 0xd1a9
mov word [ebp - 0x572], dx
mov word [ebp - 0x570], ax
mov word [ebp - 0x56e], cx
mov edx, 0x2e
mov eax, 0xc2db
mov ecx, 0xccb3
add esp, 0xc
mov byte [ebp - 0x1559], bl
mov word [ebp - 0x56c], dx
mov word [ebp - 0x56a], ax
mov word [ebp - 0x568], cx
mov edx, 0xd4ad
mov word [ebp - 0x566], dx
mov eax, 0x51
mov word [ebp - 0x564], ax
mov ecx, 0x57
mov word [ebp - 0x562], cx
mov edx, 0x45
mov word [ebp - 0x560], dx
mov eax, 0x52
mov word [ebp - 0x55e], ax
mov ecx, 0x54
mov word [ebp - 0x55c], cx
mov edx, 0x59
mov word [ebp - 0x55a], dx
mov eax, 0x75
mov word [ebp - 0x558], ax
mov ecx, 0x69
mov word [ebp - 0x556], cx
mov edx, 0x6f
mov word [ebp - 0x554], dx
mov eax, 0x70
mov word [ebp - 0x552], ax
mov ecx, 0xb4b4
mov word [ebp - 0x550], cx
mov edx, 0xcec4
mov word [ebp - 0x54e], dx
mov eax, 0xd5c2
mov word [ebp - 0x54c], ax
mov ecx, 0xceaa
mov word [ebp - 0x54a], cx
mov edx, 0xd6f7
mov word [ebp - 0x548], dx
mov eax, 0xd7aa
mov word [ebp - 0x546], ax
mov ecx, 0xccfb
mov word [ebp - 0x544], cx
mov edx, 0x62
mov word [ebp - 0x542], dx
mov eax, 0x6e
mov word [ebp - 0x540], ax
mov ecx, 0x6d
mov word [ebp - 0x53e], cx
mov edx, 0x4b
mov word [ebp - 0x53c], dx
mov eax, 0x48
mov word [ebp - 0x53a], ax
mov ecx, 0x46
mov word [ebp - 0x538], cx
mov edx, 0x44
mov word [ebp - 0x536], dx
mov eax, 0x53
mov word [ebp - 0x534], ax
mov ecx, 0xc2db
mov word [ebp - 0x532], cx
mov edx, 0xccb3
mov word [ebp - 0x530], dx
mov eax, 0xbbf2
mov word [ebp - 0x52e], ax
mov ecx, 0xcfe0
mov edx, 0xb9d8
mov word [ebp - 0x52c], cx
mov word [ebp - 0x52a], dx
mov eax, 0xb5c4
mov word [ebp - 0x528], ax
mov ecx, 0xc2db
mov edx, 0xccb3
mov word [ebp - 0x526], cx
mov word [ebp - 0x524], dx
mov eax, 0xd7a2
mov ecx, 0xb2e1
mov edx, 0xd3c3
mov word [ebp - 0x522], ax
mov eax, 0xbba7
mov word [ebp - 0x520], cx
mov word [ebp - 0x51e], dx
mov ecx, 0xcbf9
mov edx, 0xd3d0
mov word [ebp - 0x51c], ax
mov word [ebp - 0x51a], cx
mov word [ebp - 0x518], dx
mov eax, 0xb5c4
mov word [ebp - 0x516], ax
mov ecx, 0xb9a4
mov word [ebp - 0x514], cx
mov edx, 0xd7f7
mov word [ebp - 0x512], dx
mov eax, 0xbcb0
mov word [ebp - 0x510], ax
mov ecx, 0xcbf9
mov word [ebp - 0x50e], cx
mov edx, 0xd3d0
mov word [ebp - 0x50c], dx
mov eax, 0xcdf8
mov word [ebp - 0x50a], ax
mov ecx, 0xd3d1
mov word [ebp - 0x508], cx
mov edx, 0xb6d4
mov word [ebp - 0x506], dx
mov eax, 0x42
mov word [ebp - 0x504], ax
mov ecx, 0x31
mov word [ebp - 0x502], cx
mov edx, 0x32
mov word [ebp - 0x500], dx
mov eax, 0x33
mov word [ebp - 0x4fe], ax
mov ecx, 0x34
mov word [ebp - 0x4fc], cx
mov edx, 0x35
mov word [ebp - 0x4fa], dx
mov eax, 0x36
mov word [ebp - 0x4f8], ax
mov ecx, 0x37
mov word [ebp - 0x4f6], cx
mov edx, 0x38
mov word [ebp - 0x4f4], dx
mov eax, 0x39
mov word [ebp - 0x4f2], ax
mov ecx, 0xd0d4
mov word [ebp - 0x4f0], cx
mov edx, 0xd6ca
mov word [ebp - 0x4ee], dx
mov eax, 0xb5c4
mov word [ebp - 0x4ec], ax
mov ecx, 0xcec4
mov word [ebp - 0x4ea], cx
mov edx, 0xd5c2
mov word [ebp - 0x4e8], dx
mov eax, 0xb3fd
mov word [ebp - 0x4e6], ax
mov ecx, 0xb7c7
mov word [ebp - 0x4e4], cx
mov edx, 0xccd8
mov word [ebp - 0x4e2], dx
mov eax, 0x2e
mov word [ebp - 0x4e0], ax
mov ecx, 0xb1f0
mov word [ebp - 0x4de], cx
mov edx, 0xd3c5
mov eax, 0xd0e3
mov word [ebp - 0x4dc], dx
mov word [ebp - 0x4da], ax
mov ecx, 0xb5c4
mov edx, 0xd2bb
mov eax, 0xb0e3
mov word [ebp - 0x4d8], cx
mov word [ebp - 0x4d6], dx
mov word [ebp - 0x4d4], ax
mov ecx, 0xb2bb
mov edx, 0xcad5
mov eax, 0xc2bc
push 0x3e
mov word [ebp - 0x4d2], cx
xor ecx, ecx
mov word [ebp - 0x4d0], dx
mov word [ebp - 0x4ce], ax
xor edx, edx
push ebx
lea eax, [ebp - 0x70a]
mov word [ebp - 0x4cc], cx
mov word [ebp - 0x70c], dx
push eax
call fcn.004634b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0046185f
add esp, 4
call fcn.00461871
cdq
mov ecx, 0xa
idiv ecx
xor edi, edi
mov esi, edx
add esi, 3
cmp esi, ebx
jle 0x41a487
jmp 0x41a440
lea eax, [ebp - 0x594]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41a450
sub eax, edx
sar eax, 1
mov dword [ebp - 0x156c], eax
call fcn.00461871
xor edx, edx
div dword [ebp - 0x156c]
inc edi
cmp edi, esi
mov dx, word [ebp + edx*2 - 0x594]
mov word [ebp + edi*2 - 0x70e], dx
jl 0x41a440
xor edi, edi
lea esp, [esp]
mov ecx, dword [ebp - 0x1560]
lea eax, [ebp - 0x70c]
push eax
push ecx
call fcn.00461893
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x41a50c
inc edi
cmp edi, 0x64
jl 0x41a490
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp esi, 0xffffffff
je 0x41a4e5
cmp edi, ebx
je 0x41a50c
push ebx
push ebx
call fcn.0043aef0
push esi
mov esi, edi
mov edi, 0x4fe960
call fcn.00429ad0
add esp, 0xc
mov esi, dword [ebp - 0x1540]
jmp 0x418183
cmp edi, ebx
je 0x41a50c
push ebx
push ebx
call fcn.0043aef0
mov esi, edi
push 0xffffffffffffffff
mov edi, 0x4fe990
call fcn.00429ad0
mov esi, dword [ebp - 0x1540]
add esp, 0xc
jmp 0x418183
lea edx, [ebp - 0x70c]
push edx
lea eax, [ebp - 0x200]
push 0x512ea8
push eax
lea edx, [ebp - 0x153c]
call fcn.00408ae0
mov eax, dword [ebp - 0x1588]
add esp, 0xc
add eax, 0x51b
push eax
lea ecx, [ebp - 0x200]
push 0x512ea8
push ecx
lea edx, [ebp - 0xa1c]
mov dword [ebp - 0x156c], eax
call fcn.00408ae0
lea edx, [ebp - 0x814]
add esp, 0xc
push edx
lea esi, [ebp - 0xa1c]
call fcn.0043b420
mov ecx, dword [0x51376c]
add esp, 4
call fcn.0043ac90
mov ecx, dword [0x513778]
mov esi, eax
call fcn.0043ac90
cmp esi, ebx
je 0x41a4da
cmp eax, ebx
je 0x41a4da
cmp esi, eax
jne 0x41a4da
mov ecx, dword [0x513770]
call fcn.0043ac90
mov ecx, dword [0x51377c]
mov esi, eax
call fcn.0043ac90
cmp esi, ebx
je 0x41a4da
cmp eax, ebx
je 0x41a4da
cmp esi, 2
jb 0x41a4da
cmp eax, 2
jb 0x41a4da
cmp esi, eax
jne 0x41a4da
mov ecx, dword [0x513774]
call fcn.0043ac90
mov ecx, dword [0x513780]
mov esi, eax
call fcn.0043ac90
cmp esi, eax
jne 0x41a4da
push 0x30
lea eax, [ebp - 0x15cc]
push ebx
push eax
mov dword [ebp - 0x1558], ebx
mov dword [ebp - 0x1564], ebx
mov dword [ebp - 0x1570], ebx
call fcn.004634b0
add esp, 0xc
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea eax, [ebp - 0x158c]
push eax
call fcn.0045e84b
add esp, 0xc
test eax, eax
jne 0x41a7fd
lea ecx, [ebp - 0x15cc]
push ecx
lea edx, [ebp - 0xa1c]
push edx
call fcn.00461484
add esp, 8
test eax, eax
je 0x41a693
mov eax, dword [ebp - 0x158c]
push eax
call fcn.0045ecdf
mov ecx, dword [ebp - 0x1560]
add esp, 4
push ecx
lea edx, [ebp - 0x70c]
push edx
call fcn.00461893
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x418183
mov edi, dword [ebp - 0x15b8]
push edi
call fcn.004403dc
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x158c]
push eax
push 1
push edi
push esi
call fcn.00460c0d
mov ecx, dword [ebp - 0x158c]
push ecx
call fcn.0045ecdf
lea edx, [ebp - 0x1d4]
add esp, 0x14
push edx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.0047fba0
add esp, 4
push edi
lea eax, [ebp - 0x1d4]
push esi
push eax
call fcn.0047f970
add esp, 0xc
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.0047fa50
push esi
call fcn.004403d1
lea eax, [ebp - 0x4c4]
add esp, 0xc
push eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
call fcn.0047f930
add esp, 4
push 0x14
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x4c4]
push edx
call fcn.0047f720
add esp, 0xc
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.0047f800
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.0043ac90
mov esi, eax
lea eax, [esi + 0x1c]
lea ecx, [ebp - 0x2c]
mov edx, 0x10
sub ecx, eax
mov edi, dword [ecx + eax]
cmp edi, dword [eax]
jne 0x41a7c4
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x41a768
mov esi, dword [ebp - 0x1540]
push 0x409
mov ecx, esi
call fcn.0044f819
mov ecx, eax
call fcn.0044f9a0
test eax, eax
je 0x41a81e
mov eax, dword [esi + 0x190]
mov dword [ebp - 0x1568], eax
cmp dword [esi + 0x194], ebx
je 0x41a828
cmp eax, ebx
je 0x41a828
call fcn.00417da0
cmp eax, 0x10
je 0x41a828
call fcn.00417de0
jmp 0x41a828
xor edx, edx
xor eax, eax
mov word [ebp - 0xa1c], dx
mov word [ebp - 0xa1a], ax
mov ecx, dword [esi + 0xb4]
push ecx
call fcn.004403d1
mov edx, dword [esi + 0xb8]
add esp, 4
push edx
call fcn.004403d1
add esp, 4
push esi
call fcn.004403d1
add esp, 4
mov eax, dword [ebp - 0x1560]
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00461893
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x418183
mov dword [ebp - 0x1568], 0xffffffff
push 0x206
lea eax, [ebp - 0x1332]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x1334], dx
call fcn.004634b0
mov ecx, 0x25
mov eax, ecx
mov word [ebp - 0x230], cx
mov edx, 0x73
mov ecx, edx
mov word [ebp - 0x22e], dx
xor edx, edx
mov word [ebp - 0x22a], cx
mov word [ebp - 0x22c], ax
mov word [ebp - 0x228], dx
mov ecx, 0x74
mov word [ebp - 0x20a], cx
mov eax, 0x4f
mov word [ebp - 0x20c], ax
mov edx, 0x68
mov word [ebp - 0x208], dx
xor edx, edx
mov ecx, 0x72
mov word [ebp - 0x204], cx
mov word [ebp - 0x202], dx
mov eax, 0x65
mov word [ebp - 0x206], ax
mov ecx, 0x6f
mov word [ebp - 0x316], cx
mov eax, 0x43
mov word [ebp - 0x318], ax
mov edx, 0x6d
mov word [ebp - 0x314], dx
mov ecx, 0x61
mov word [ebp - 0x310], cx
mov eax, 0x70
mov word [ebp - 0x312], ax
mov edx, 0x74
mov word [ebp - 0x30e], dx
mov ecx, 0x6e
add esp, 0xc
mov eax, 0x45
mov word [ebp - 0x30a], cx
mov word [ebp - 0x30c], ax
mov edx, 0x61
mov word [ebp - 0x308], dx
mov ecx, 0x6c
mov eax, 0x62
push 0x513130
mov word [ebp - 0x304], cx
mov edx, 0x65
mov word [ebp - 0x306], ax
lea ecx, [ebp - 0x230]
mov word [ebp - 0x302], dx
xor eax, eax
push 0x4fe808
push ecx
lea edx, [ebp - 0x1334]
mov word [ebp - 0x300], ax
call fcn.00408ae0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
add esp, 0xc
lea edx, [ebp - 0x1334]
push edx
push 1
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call esi
cmp eax, 1
jl 0x41a99f
call fcn.004180b0
mov eax, 0x70
mov word [ebp - 0x332], ax
mov edx, 0x4f
mov word [ebp - 0x334], dx
mov eax, 0x6d
mov word [ebp - 0x32c], ax
mov ecx, 0x74
mov word [ebp - 0x330], cx
mov edx, 0x69
mov ecx, edx
mov word [ebp - 0x32e], dx
mov eax, 0x61
mov word [ebp - 0x32a], cx
mov word [ebp - 0x326], ax
mov edx, 0x7a
mov word [ebp - 0x328], dx
mov eax, 0x6f
mov ecx, 0x74
mov word [ebp - 0x324], cx
mov word [ebp - 0x320], ax
mov edx, 0x69
lea eax, [ebp - 0x1334]
push eax
mov word [ebp - 0x322], dx
mov ecx, 0x6e
xor edx, edx
mov word [ebp - 0x31e], cx
push 2
lea ecx, [ebp - 0x334]
mov word [ebp - 0x31c], dx
push ecx
lea edx, [ebp - 0x20c]
push edx
call esi
cmp eax, 2
jl 0x41ab5a
mov eax, 0x64
mov ecx, eax
mov word [ebp - 0x2e], cx
mov word [ebp - 0x30], ax
mov edx, 0x72
mov word [ebp - 0x2c], dx
mov ecx, 0x77
mov word [ebp - 0x28], cx
mov eax, 0x61
mov word [ebp - 0x2a], ax
mov edx, 0x2e
mov word [ebp - 0x26], dx
mov ecx, 0x6c
mov edx, ecx
mov word [ebp - 0x22], cx
mov word [ebp - 0x20], dx
mov eax, 0x64
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x1e], ax
mov ecx, 0x64
mov edx, ecx
mov word [ebp - 0xac], cx
mov word [ebp - 0xaa], dx
mov eax, 0x72
mov word [ebp - 0xa8], ax
mov edx, 0x77
mov word [ebp - 0xa4], dx
mov ecx, 0x61
mov word [ebp - 0xa6], cx
mov eax, 0x2e
mov word [ebp - 0xa2], ax
mov edx, 0x6c
mov eax, edx
mov ecx, 0x64
mov word [ebp - 0xa0], cx
mov word [ebp - 0x9c], ax
mov ecx, 0x2e
mov word [ebp - 0x9a], cx
mov eax, 0x61
mov word [ebp - 0x9e], dx
mov word [ebp - 0x96], ax
mov ecx, 0x6b
mov edx, 0x62
lea eax, [ebp - 0xac]
mov word [ebp - 0x94], cx
mov word [ebp - 0x98], dx
push eax
lea ecx, [ebp - 0x30]
xor edx, edx
push ecx
mov word [ebp - 0x92], dx
call fcn.00461893
add esp, 8
call fcn.00417b50
cmp eax, 1
jne 0x41ab79
mov esi, dword [ebp - 0x156c]
lea edx, [ebp - 0x814]
push edx
call fcn.0043b420
add esp, 4
mov esi, ebx
mov edi, ebx
lea ecx, [ecx]
cmp edi, 0x32
jg 0x41abd8
cmp esi, 0x64
jg 0x41abd8
push ebx
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x1554]
push ecx
lea edx, [ebp - 0x1644]
push edx
push ebx
push ebx
push 0x404
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x153c]
push eax
call fcn.00478460
mov dword [ebp - 0x1558], eax
cmp eax, ebx
jne 0x41abd8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1564], eax
cmp eax, 2
jne 0x41abd5
inc edi
jmp 0x41ab80
inc esi
jmp 0x41ab80
mov eax, dword [0x514978]
sub eax, dword [0x514974]
mov byte [ebp - 0x1541], bl
sar eax, 2
mov dword [ebp - 0x1580], eax
cmp eax, ebx
ja 0x41abfd
mov byte [ebp - 0x1541], 1
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
xor esi, esi
cmp eax, ebx
jbe 0x41aec9
lea ecx, [ecx]
call fcn.00431c50
mov edx, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x41adb7
cmp dword [ebp - 0x1c], 0x103
jne 0x41ad09
call fcn.00431c50
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
cmp eax, ebx
jbe 0x41acfa
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
lea ecx, [ebp - 0x68]
push ecx
push 0x35
lea edx, [ebp - 0x4c]
push 0x4d
push edx
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x4c], 0x63
mov byte [ebp - 0x4b], 0x64
mov byte [ebp - 0x4a], 0x73
mov byte [ebp - 0x49], 0x73
mov byte [ebp - 0x48], 0x73
mov byte [ebp - 0x47], 0x64
mov byte [ebp - 0x46], bl
mov byte [ebp - 0x68], 0x43
mov byte [ebp - 0x67], 0x68
mov byte [ebp - 0x66], 0x65
mov byte [ebp - 0x65], 0x63
mov byte [ebp - 0x64], 0x6b
mov byte [ebp - 0x63], 0x20
mov byte [ebp - 0x62], 0x54
mov byte [ebp - 0x61], 0x68
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x65
mov byte [ebp - 0x5e], 0x61
mov byte [ebp - 0x5d], 0x64
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x53
mov byte [ebp - 0x5a], 0x75
mov byte [ebp - 0x59], 0x73
mov byte [ebp - 0x58], 0x70
mov byte [ebp - 0x57], 0x65
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x64
mov byte [ebp - 0x54], bl
call fcn.00407d10
add esp, 0x1c
call fcn.00410b20
call fcn.00431c50
mov eax, dword [eax]
push eax
call edi
cmp eax, ebx
jne 0x41ace7
jmp 0x41aebc
call fcn.00431c50
mov ecx, dword [eax]
push ecx
call edi
jmp 0x41aebc
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
lea edx, [ebp - 0x6c]
push edx
push 0x36
push 0x4d
lea eax, [ebp - 0x38]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x38], 0x63
mov byte [ebp - 0x37], 0x64
mov byte [ebp - 0x36], 0x73
mov byte [ebp - 0x35], 0x73
mov byte [ebp - 0x34], 0x73
mov byte [ebp - 0x33], 0x64
mov byte [ebp - 0x32], bl
mov byte [ebp - 0x6c], 0x43
mov byte [ebp - 0x6b], 0x68
mov byte [ebp - 0x6a], 0x65
mov byte [ebp - 0x69], 0x63
mov byte [ebp - 0x68], 0x6b
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x54
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x72
mov byte [ebp - 0x63], 0x65
mov byte [ebp - 0x62], 0x61
mov byte [ebp - 0x61], 0x64
mov byte [ebp - 0x60], 0x20
mov byte [ebp - 0x5f], 0x53
mov byte [ebp - 0x5e], 0x74
mov byte [ebp - 0x5d], 0x6f
mov byte [ebp - 0x5c], 0x70
mov byte [ebp - 0x5b], 0x20
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x72
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x43
mov byte [ebp - 0x56], 0x61
mov byte [ebp - 0x55], 0x6e
mov byte [ebp - 0x54], 0x63
mov byte [ebp - 0x53], 0x65
mov byte [ebp - 0x52], 0x6c
mov byte [ebp - 0x51], bl
push eax
jmp 0x41aeaf
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
lea ecx, [ebp - 0x90]
push ecx
push 0x37
push 0x4d
lea edx, [ebp - 0x24]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], 0x73
mov byte [ebp - 0x21], 0x73
mov byte [ebp - 0x20], 0x73
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x90], 0x43
mov byte [ebp - 0x8f], 0x68
mov byte [ebp - 0x8e], 0x65
mov byte [ebp - 0x8d], 0x63
mov byte [ebp - 0x8c], 0x6b
mov byte [ebp - 0x8b], 0x20
mov byte [ebp - 0x8a], 0x54
mov byte [ebp - 0x89], 0x68
mov byte [ebp - 0x88], 0x72
mov byte [ebp - 0x87], 0x65
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x64
mov byte [ebp - 0x84], 0x20
mov byte [ebp - 0x83], 0x4d
mov byte [ebp - 0x82], 0x69
mov byte [ebp - 0x81], 0x73
mov byte [ebp - 0x80], 0x73
mov byte [ebp - 0x7f], 0x69
mov byte [ebp - 0x7e], 0x6e
mov byte [ebp - 0x7d], 0x67
mov byte [ebp - 0x7c], 0x20
mov byte [ebp - 0x7b], 0x6f
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x20
mov byte [ebp - 0x78], 0x4e
mov byte [ebp - 0x77], 0x6f
mov byte [ebp - 0x76], 0x74
mov byte [ebp - 0x75], 0x20
mov byte [ebp - 0x74], 0x43
mov byte [ebp - 0x73], 0x72
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x61
mov byte [ebp - 0x70], 0x74
mov byte [ebp - 0x6f], 0x65
mov byte [ebp - 0x6e], bl
push edx
call fcn.00407d10
add esp, 0x1c
call fcn.00410b20
inc esi
cmp esi, dword [ebp - 0x1580]
jb 0x41ac10
push 0x103
lea eax, [ebp - 0xf23]
push ebx
push eax
mov byte [ebp - 0xe8], 0x6b
mov byte [ebp - 0xe7], 0x65
mov byte [ebp - 0xe6], 0x72
mov byte [ebp - 0xe5], 0x6e
mov byte [ebp - 0xe4], 0x65
mov byte [ebp - 0xe3], 0x6c
mov byte [ebp - 0xe2], 0x33
mov byte [ebp - 0xe1], 0x32
mov byte [ebp - 0xe0], 0x2e
mov byte [ebp - 0xdf], 0x64
mov byte [ebp - 0xde], 0x6c
mov byte [ebp - 0xdd], 0x6c
mov byte [ebp - 0xdc], bl
mov byte [ebp - 0xf24], bl
call fcn.004634b0
add esp, 0xc
lea ecx, [ebp - 0x158]
push ecx
lea edx, [ebp - 0xe8]
push edx
mov byte [ebp - 0x158], 0x47
mov byte [ebp - 0x157], 0x65
mov byte [ebp - 0x156], 0x74
mov byte [ebp - 0x155], 0x57
mov byte [ebp - 0x154], 0x69
mov byte [ebp - 0x153], 0x6e
mov byte [ebp - 0x152], 0x64
mov byte [ebp - 0x151], 0x6f
mov byte [ebp - 0x150], 0x77
mov byte [ebp - 0x14f], 0x73
mov byte [ebp - 0x14e], 0x44
mov byte [ebp - 0x14d], 0x69
mov byte [ebp - 0x14c], 0x72
mov byte [ebp - 0x14b], 0x65
mov byte [ebp - 0x14a], 0x63
mov byte [ebp - 0x149], 0x74
mov byte [ebp - 0x148], 0x6f
mov byte [ebp - 0x147], 0x72
mov byte [ebp - 0x146], 0x79
mov byte [ebp - 0x145], 0x41
mov byte [ebp - 0x144], bl
mov byte [ebp - 0xc8], 0x5c
mov byte [ebp - 0xc7], 0x79
mov byte [ebp - 0xc6], 0x78
mov byte [ebp - 0xc5], 0x62
mov byte [ebp - 0xc4], 0x73
mov byte [ebp - 0xc3], 0x71
mov byte [ebp - 0xc2], 0x2e
mov byte [ebp - 0xc1], 0x69
mov byte [ebp - 0xc0], 0x6e
mov byte [ebp - 0xbf], 0x69
mov byte [ebp - 0xbe], bl
call fcn.00476470
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, ebx
je 0x41b487
push 0x104
lea ecx, [ebp - 0xf24]
push ecx
call eax
cmp eax, ebx
jbe 0x41b487
push 0x103
lea edx, [ebp - 0x5cb]
push ebx
push edx
mov byte [ebp - 0x5cc], bl
call fcn.004634b0
add esp, 0xc
lea eax, [ebp - 0xf24]
push eax
lea ecx, [ebp - 0x5cc]
push 0x104
push ecx
call fcn.00460fdb
add esp, 0xc
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x5cc]
push 0x104
push eax
call fcn.00462d08
add esp, 0xc
lea eax, [ebp - 0x5cc]
call fcn.00404be0
test al, al
je 0x41b487
lea ecx, [ebp - 0x5cc]
push ecx
call fcn.004618c6
mov edx, 0x61
mov word [ebp - 0x4b4], dx
mov eax, 0x78
mov word [ebp - 0x4b2], ax
mov ecx, 0x63
mov word [ebp - 0x4b0], cx
mov edx, 0x76
mov word [ebp - 0x4ae], dx
mov eax, 0x6a
mov word [ebp - 0x4ac], ax
mov ecx, 0x32
mov word [ebp - 0x4aa], cx
mov edx, 0x33
mov word [ebp - 0x4a8], dx
mov eax, 0x34
mov word [ebp - 0x4a6], ax
mov ecx, 0x38
mov word [ebp - 0x4a4], cx
mov edx, 0x30
mov word [ebp - 0x4a2], dx
mov eax, 0x39
mov word [ebp - 0x4a0], ax
mov ecx, 0x73
mov word [ebp - 0x49e], cx
mov ecx, 0x40
mov word [ebp - 0x498], cx
mov edx, 0x64
mov word [ebp - 0x49c], dx
mov edx, ecx
mov eax, 0x66
mov word [ebp - 0x49a], ax
mov eax, ecx
mov word [ebp - 0x496], dx
mov word [ebp - 0x494], ax
mov ecx, 0x31
mov eax, ecx
mov word [ebp - 0x492], cx
mov edx, 0x32
mov word [ebp - 0x490], dx
mov edx, eax
mov ecx, 0x33
mov word [ebp - 0x48c], cx
mov word [ebp - 0x48e], ax
mov word [ebp - 0x48a], dx
mov ecx, 0x73
mov word [ebp - 0x486], cx
mov eax, 0x6b
mov word [ebp - 0x488], ax
mov edx, 0x64
mov word [ebp - 0x484], dx
mov word [ebp - 0x482], ax
mov ecx, 0x6c
mov word [ebp - 0x480], cx
mov edx, 0x78
mov eax, 0x63
mov ecx, 0x76
mov word [ebp - 0x47e], dx
mov word [ebp - 0x47c], ax
mov word [ebp - 0x47a], cx
mov edx, 0x6b
mov eax, 0x3b
mov ecx, 0x6c
mov word [ebp - 0x478], dx
mov word [ebp - 0x476], ax
mov word [ebp - 0x474], cx
mov edx, 0x73
mov eax, 0x64
mov ecx, 0x66
add esp, 4
mov word [ebp - 0x472], dx
mov word [ebp - 0x470], ax
mov word [ebp - 0x46e], cx
mov edx, 0x6b
xor eax, eax
mov ecx, 0x23
mov word [ebp - 0x46c], dx
mov word [ebp - 0x46a], ax
mov word [ebp - 0x1bc], cx
mov edx, 0x7e
mov eax, edx
mov ecx, eax
mov word [ebp - 0x1b8], ax
mov word [ebp - 0x1ba], dx
mov word [ebp - 0x1b4], dx
mov word [ebp - 0x1b6], cx
mov eax, 0x58
mov word [ebp - 0x1b2], ax
mov edx, 0x67
mov word [ebp - 0x1ae], dx
mov ecx, 0x69
mov word [ebp - 0x1b0], cx
mov eax, 0x6e
mov word [ebp - 0x1ac], ax
mov edx, 0x6f
mov word [ebp - 0x1a8], dx
mov ecx, 0x63
mov word [ebp - 0x1aa], cx
mov eax, 0x64
mov word [ebp - 0x1a6], ax
mov eax, 0x7e
mov edx, 0x33
mov word [ebp - 0x1a2], dx
mov edx, eax
mov ecx, 0x65
mov word [ebp - 0x1a4], cx
mov ecx, eax
mov word [ebp - 0x1a0], ax
mov word [ebp - 0x19c], dx
mov word [ebp - 0x19a], ax
mov word [ebp - 0x19e], cx
mov word [ebp - 0x198], cx
mov edx, 0x41
mov word [ebp - 0x196], dx
mov eax, 0x6c
mov word [ebp - 0x194], ax
mov ecx, 0x65
mov word [ebp - 0x192], cx
mov ecx, 0x7e
mov edx, 0x72
mov eax, 0x74
mov word [ebp - 0x190], dx
mov word [ebp - 0x18e], ax
mov edx, ecx
mov eax, ecx
mov word [ebp - 0x18a], dx
mov word [ebp - 0x188], ax
mov word [ebp - 0x184], dx
mov word [ebp - 0x182], ax
mov edx, 0x23
xor eax, eax
push 0x600
mov word [ebp - 0x18c], cx
mov word [ebp - 0x186], cx
mov word [ebp - 0x180], cx
mov word [ebp - 0x17e], dx
mov word [ebp - 0x17c], ax
call fcn.004403a2
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x41b41a
lea ecx, [ebp - 0x4b4]
push ecx
mov edx, esi
call fcn.00404060
lea edx, [ebp - 0x1bc]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.00404080
add esp, 4
push ebx
push ebx
push esi
push 0x4011a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call edi
push 0xffffffffffffffff
push 0x4fc327
push 0x4fc327
lea eax, [ebp - 0x3c]
push eax
push 0x39
lea ecx, [ebp - 0x24]
push 0x4d
push ecx
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], 0x73
mov byte [ebp - 0x21], 0x73
mov byte [ebp - 0x20], 0x73
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x3c], 0x73
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x65
mov byte [ebp - 0x39], 0x65
mov byte [ebp - 0x38], 0x64
mov byte [ebp - 0x37], 0x20
mov byte [ebp - 0x36], 0x68
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x63
mov byte [ebp - 0x33], 0x6b
mov byte [ebp - 0x32], bl
call fcn.00407d10
add esp, 0x1c
call fcn.00410b20
jmp 0x41b490
cmp byte [ebp - 0x1541], 1
jne 0x41b4fc
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00461893
push ebx
push ebx
call fcn.0043aef0
mov ecx, dword [ebp - 0x1554]
add esp, 0x10
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x1558], ebx
je 0x41a4da
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41b4da
push eax
call edi
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41a4da
push eax
call edi
mov esi, dword [ebp - 0x1540]
mov dword [ebp - 0x1550], ebx
jmp 0x418183
cmp dword [ebp - 0x1558], ebx
je 0x41c0d7
xor esi, esi
lea ebx, [ebx]
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00461893
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x41b58b
inc esi
cmp esi, 0x64
jl 0x41b510
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x41b574
cmp esi, ebx
je 0x41b58b
push ebx
push ebx
call fcn.0043aef0
mov ecx, dword [ebp - 0x1554]
add esp, 8
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov edi, 0x4fe9c0
call fcn.00429ad0
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x418183
cmp esi, ebx
je 0x41b58b
cmp esi, 0x20
jne 0x41bd59
mov dword [ebp - 0x1570], 1
lea ecx, [ebp - 0x1564]
call fcn.00405f40
lea eax, [ebp - 0x4c4]
push eax
mov dword [ebp - 4], ebx
call fcn.0047fba0
mov esi, dword [0x5132c0]
add esp, 4
push 7
mov ecx, esi
call fcn.0043ac90
mov ecx, eax
xor eax, eax
call fcn.00439610
add esp, 4
push 0x10
mov ecx, esi
call fcn.0043ac90
add eax, 8
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.0047f970
mov esi, dword [0x5132c0]
add esp, 0xc
push 0x10
mov ecx, esi
call fcn.0043ac90
mov edi, eax
add edi, 8
call fcn.0043ac50
add esp, 4
push 0x10
mov ecx, esi
call fcn.0043ac90
add eax, 8
push eax
lea edx, [ebp - 0x4c4]
push edx
call fcn.0047f970
mov esi, dword [0x5132c0]
add esp, 0xc
push 0x10
mov ecx, esi
call fcn.0043ac90
mov edi, eax
add edi, 8
call fcn.0043ac50
add esp, 4
push ebx
mov ecx, esi
call fcn.0043ac90
mov ecx, 7
call fcn.00439660
add esp, 4
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.0047fa50
mov edx, 0x25
mov word [ebp - 0x28], dx
mov eax, 0x30
mov ecx, 0x32
mov word [ebp - 0x26], ax
mov word [ebp - 0x24], cx
mov edx, 0x58
xor eax, eax
mov ecx, 0x25
mov word [ebp - 0x22], dx
mov edx, 0x30
mov word [ebp - 0x20], ax
mov word [ebp - 0x3c], cx
mov eax, 0x38
mov ecx, 0x58
add esp, 8
mov word [ebp - 0x3a], dx
mov word [ebp - 0x38], ax
mov word [ebp - 0x36], cx
xor edx, edx
push 0x4fe374
lea ecx, [ebp - 0x1564]
mov word [ebp - 0x34], dx
call fcn.00409770
lea eax, [ebp - 0x64]
dec eax
mov esi, 1
mov dword [ebp - 0x1558], eax
mov edi, edi
mov eax, dword [ebp - 0x1558]
movzx ecx, byte [eax + esi]
push ecx
lea edx, [ebp - 0x28]
push edx
lea edi, [ebp - 0x1564]
call fcn.00405ad0
mov eax, dword [ebp - 0x1558]
mov ecx, esi
add esp, 8
and ecx, reloc.WS2_32.dll_closesocket
mov byte [eax + esi], bl
jns 0x41b705
dec ecx
or ecx, 0xfffffffc
inc ecx
jne 0x41b71f
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x41b71f
push 0x4fea20
lea ecx, [ebp - 0x1564]
call fcn.00409770
mov eax, esi
cdq
mov ecx, 0xc
idiv ecx
test edx, edx
jne 0x41b75f
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x41b75f
mov eax, dword [ebp - 0x154c]
xor eax, 0x5b429d65
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edi, [ebp - 0x1564]
call fcn.00405ad0
add esp, 8
push 0x4fea20
mov ecx, edi
call fcn.00409770
inc esi
lea edx, [esi - 1]
cmp edx, 0x14
jl 0x41b6d0
push 0x4fe384
lea ecx, [ebp - 0x1564]
call fcn.00409770
lea ecx, [ebp - 0x1564]
call fcn.004097b0
push eax
call fcn.0043ade0
add esp, 4
test eax, eax
je 0x41bec6
call fcn.0043ae20
mov ecx, dword [ebp - 0x1578]
mov esi, eax
mov dword [esi + 0x4002a4], 0x134da7e
call fcn.0043ac90
mov edi, eax
mov edx, dword [edi + 0xb8]
push esi
mov ecx, 0x4c
call fcn.004379c0
add esp, 4
cmp byte [0x5134fe], 1
jne 0x41b7e3
push esi
mov ecx, 1
xor edx, edx
call fcn.004379c0
add esp, 4
mov eax, dword [ebp - 0x1568]
push 0x513130
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], 0xffffffff
mov ecx, dword [ebp - 0x1548]
lea edx, [esi + 0x58]
push 0x20
push edx
mov dword [esi + 0x54], ecx
call fcn.0045e3d6
mov ecx, dword [0x513514]
add esp, 0xc
cmp ecx, ebx
je 0x41b833
lea eax, [esi + 0x9c]
push eax
mov edx, 0x513518
mov dword [esi + 0x98], ecx
call fcn.004379c0
add esp, 4
mov ecx, dword [0x513718]
cmp ecx, ebx
je 0x41b858
lea edx, [esi + 0x2a0]
push edx
mov edx, dword [0x51371c]
mov dword [esi + 0x29c], ecx
call fcn.004379c0
add esp, 4
mov eax, dword [edi + 0x2c]
lea ecx, [esi + 0x4002ac]
push ecx
lea edx, [edi + 0x30]
mov ecx, 0x80
mov dword [esi + 0x4002a8], eax
call fcn.004379c0
lea edx, [esi + 0x40032c]
add esp, 4
push edx
mov edx, dword [edi + 0xb4]
mov ecx, 0x1d9
call fcn.004379c0
mov ecx, dword [0x513720]
add esp, 4
call fcn.0043ac90
lea ecx, [esi + 0x400505]
push ecx
mov ecx, 0x14
mov edx, eax
call fcn.004379c0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esi + 0x400519], eax
mov eax, dword [ebp - 0x1588]
mov dl, byte [eax + 0xa1f]
mov byte [esi + 0x40051d], dl
lea edx, [eax + 0xa20]
lea eax, [esi + 0x40051e]
push eax
mov ecx, 0x100
call fcn.004379c0
mov eax, dword [ebp - 0x1588]
mov cl, byte [eax + 0xb20]
lea edx, [eax + 0xb21]
lea eax, [esi + 0x40061f]
add esp, 4
mov byte [esi + 0x40061e], cl
push eax
mov ecx, 0x100
call fcn.004379c0
add esp, 4
mov dword [esi + 0x4002a0], ebx
cmp dword [edi + 8], 4
jne 0x41ba1a
mov ecx, 0x57
mov word [ebp - 0x8c], cx
mov edx, 0x69
mov word [ebp - 0x8a], dx
mov eax, 0x6e
mov word [ebp - 0x88], ax
mov ecx, 0x44
mov word [ebp - 0x86], cx
mov edx, 0x6f
mov word [ebp - 0x84], dx
mov eax, 0x73
mov word [ebp - 0x82], ax
mov ecx, 0x47
mov word [ebp - 0x80], cx
mov edx, 0x64
mov eax, 0x69
mov word [ebp - 0x7e], dx
mov word [ebp - 0x7c], ax
mov ecx, 0x5f
mov word [ebp - 0x7a], cx
mov edx, 0x25
mov eax, 0x30
mov ecx, 0x38
mov word [ebp - 0x78], dx
mov word [ebp - 0x76], ax
mov word [ebp - 0x74], cx
mov edx, 0x58
xor eax, eax
lea ecx, [ebp - 0x1558]
mov word [ebp - 0x72], dx
mov word [ebp - 0x70], ax
call fcn.00405f40
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x154c]
xor ecx, 0x2b429d65
push ecx
lea edx, [ebp - 0x8c]
push edx
lea edi, [ebp - 0x1558]
call fcn.00405ad0
add esp, 8
mov ecx, edi
call fcn.004097b0
push eax
push 0x80
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ecx, edi
mov dword [0x51373c], eax
call fcn.00405b20
mov ecx, edi
call fcn.00405f90
mov eax, dword [ebp - 0x1550]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [0x5134fe], bl
je 0x41ba50
push esi
mov ecx, 1
xor edx, edx
call fcn.004379c0
add esp, 4
mov dword [esi + 0x50], 0xffffffff
mov dword [esi + 0x4002a4], 0x42e576f7
xor edi, edi
cmp dword [esi + 0x50], 0xffffffff
jne 0x41ba77
cmp dword [esi + 0x4002a0], ebx
jne 0x41ba77
cmp edi, 0xbb8
jge 0x41ba77
push 1
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x50], 0xffffffff
je 0x41ba58
push 0xc6
lea edx, [ebp - 0x58a]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x58c], cx
call fcn.004634b0
add esp, 0xc
push 0x3ff
lea eax, [ebp - 0xe1b]
push ebx
push eax
mov byte [ebp - 0xe1c], bl
call fcn.004634b0
mov edx, 0x69
mov ecx, 0x57
mov eax, 0x6e
mov word [ebp - 0xa8], cx
mov word [ebp - 0xa6], dx
mov word [ebp - 0xa4], ax
mov word [ebp - 0xa0], dx
mov ecx, 0x4c
mov eax, 0x63
mov edx, 0x6e
add esp, 0xc
mov word [ebp - 0xa2], cx
mov ecx, 0x65
mov word [ebp - 0x9e], ax
mov eax, 0x73
mov word [ebp - 0x9a], dx
xor edx, edx
mov byte [ebp - 0x50], 0x57
mov byte [ebp - 0x4f], 0x69
mov byte [ebp - 0x4e], 0x6e
mov byte [ebp - 0x4d], 0x4c
mov byte [ebp - 0x4c], 0x69
mov byte [ebp - 0x4b], 0x63
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x6e
mov byte [ebp - 0x48], 0x73
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], bl
mov word [ebp - 0x9c], cx
mov word [ebp - 0x98], ax
mov word [ebp - 0x96], cx
mov word [ebp - 0x94], dx
mov byte [ebp - 0x1a8], 0x52
mov byte [ebp - 0x1a7], 0x75
mov byte [ebp - 0x1a6], 0x6e
mov byte [ebp - 0x1a5], 0x54
mov byte [ebp - 0x1a4], 0x69
mov byte [ebp - 0x1a3], 0x6d
mov byte [ebp - 0x1a2], cl
mov byte [ebp - 0x1a1], 0x20
mov byte [ebp - 0x1a0], 0x45
mov byte [ebp - 0x19f], 0x72
mov byte [ebp - 0x19e], 0x72
mov byte [ebp - 0x19d], 0x6f
mov byte [ebp - 0x19c], 0x72
mov byte [ebp - 0x19b], 0x2e
mov byte [ebp - 0x19a], 0x20
mov byte [ebp - 0x199], 0x50
mov byte [ebp - 0x198], 0x6c
mov byte [ebp - 0x197], cl
mov byte [ebp - 0x196], 0x61
mov byte [ebp - 0x195], al
mov byte [ebp - 0x194], cl
mov byte [ebp - 0x193], 0x2c
mov byte [ebp - 0x192], 0x20
mov byte [ebp - 0x191], 0x72
mov byte [ebp - 0x190], cl
mov byte [ebp - 0x18f], 0x2d
mov byte [ebp - 0x18e], 0x69
mov byte [ebp - 0x18d], 0x6e
mov byte [ebp - 0x18c], al
mov byte [ebp - 0x18b], 0x74
mov byte [ebp - 0x18a], 0x61
mov byte [ebp - 0x189], 0x6c
mov byte [ebp - 0x188], 0x6c
mov byte [ebp - 0x187], 0x20
mov byte [ebp - 0x186], 0x74
mov byte [ebp - 0x185], 0x68
mov byte [ebp - 0x184], 0x69
mov byte [ebp - 0x183], al
mov byte [ebp - 0x182], 0x20
mov byte [ebp - 0x181], 0x61
mov byte [ebp - 0x180], 0x70
mov byte [ebp - 0x17f], 0x70
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x69
mov byte [ebp - 0x17c], 0x63
mov byte [ebp - 0x17b], 0x61
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x69
mov byte [ebp - 0x178], 0x6f
mov byte [ebp - 0x177], 0x6e
mov byte [ebp - 0x176], 0x2e
mov byte [ebp - 0x175], bl
mov edi, dword [esi + 0x50]
mov esi, dword [esi + 0x4002a0]
cmp edi, 0x4d236ad
ja 0x41bd8b
je 0x41bcde
cmp edi, ebx
jbe 0x41bd90
cmp edi, 2
ja 0x41bd90
mov byte [ebp - 0x1559], 1
cmp esi, 0x134da7e
je 0x41bf19
cmp edi, 0x4d236ad
jne 0x41bf19
mov eax, dword [ebp - 0x1554]
push ebx
push eax
mov byte [ebp - 0x1559], bl
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41bd28
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41bd3f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0xe1c]
call fcn.004351c0
add esp, 4
jmp 0x41beaa
push ebx
push ebx
call fcn.0043aef0
mov edx, dword [ebp - 0x1554]
add esp, 8
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0xffffffffffffffff
mov edi, 0x4fe9f0
call fcn.00429ad0
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x418183
cmp edi, 0xffffffff
je 0x41be02
mov edx, dword [ebp - 0x1554]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41bdb5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41bdcc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
push edi
push str.File_corrupted_._This_application_has_been_manipulated_and_maybe_r_nits_infected_by_a_Virus_or_cracked._This_application_wont_work_anymore._r_nError:_08X
lea edx, [ebp - 0x58c]
call fcn.004351e0
mov edx, dword [0x5132b8]
add esp, 8
push 0x10
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x58c]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41bf19
cmp word [ebp - 0xa1c], bx
je 0x41bf19
cmp word [ebp - 0xa1a], bx
je 0x41bf19
mov eax, dword [ebp - 0x1554]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41be41
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41be58
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
mov edi, dword [ebp - 0x156c]
cmp edi, ebx
jne 0x41be66
xor eax, eax
jmp 0x41be8f
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41be79
xor eax, eax
jmp 0x41be8f
lea esi, [eax + eax]
mov eax, esi
call fcn.00464640
mov eax, esp
push 3
push esi
push edi
push eax
call fcn.004372c0
lea ecx, [ebp - 0x814]
push ecx
push eax
push str.Cannot_find__s._Please__re_install_this_application._r_nMissing_file_path:_s
lea edx, [ebp - 0xe1c]
call fcn.004351c0
add esp, 0xc
mov ecx, dword [0x5132b8]
push 0x10
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0xe1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x41bf19
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1554]
push ebx
push edx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 2
mov edi, 0x4feba8
call fcn.00429ad0
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x41bf02
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41bf19
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
call fcn.0043ae50
lea ecx, [ebp - 0x1564]
call fcn.00405b20
lea ecx, [ebp - 0x1564]
mov dword [ebp - 4], 0xffffffff
call fcn.00405f90
cmp byte [ebp - 0x1559], bl
je 0x41c235
mov edi, dword [sym.imp.USER32.dll_EnumThreadWindows]
mov edx, 0x6c
mov word [ebp - 0xa8], dx
mov eax, 0x69
mov word [ebp - 0xa6], ax
mov edx, 0x65
mov word [ebp - 0xa2], dx
mov eax, 0x61
mov word [ebp - 0xa0], ax
mov word [ebp - 0x9c], dx
mov ecx, 0x6e
mov word [ebp - 0xa4], cx
mov edx, 0x66
mov eax, 0x2e
mov ecx, 0x67
mov word [ebp - 0x9a], ax
mov word [ebp - 0x96], dx
mov word [ebp - 0x9e], cx
lea edx, [ebp - 0x1584]
mov eax, 0x67
push edx
mov ecx, 0x63
mov word [ebp - 0x94], ax
mov eax, dword [ebp - 0x1548]
mov word [ebp - 0x98], cx
push 0x410600
xor ecx, ecx
push eax
mov word [ebp - 0x92], cx
xor esi, esi
mov dword [ebp - 0x1584], ebx
mov dword [ebp - 0x1580], ebx
call edi
test eax, eax
je 0x41c02a
lea esp, [esp]
cmp esi, 0x1388
jge 0x41c02a
push 1
inc esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x1548]
lea ecx, [ebp - 0x1584]
push ecx
push 0x410600
push edx
call edi
test eax, eax
jne 0x41c000
mov eax, dword [ebp - 0x1584]
cmp eax, ebx
je 0x41c1a2
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [ebp - 0x1548]
je 0x41c235
cmp dword [ebp - 0x1580], 1
je 0x41c235
mov ecx, dword [ebp - 0x1554]
lea eax, [ebp - 0x156c]
push eax
push ecx
mov dword [ebp - 0x156c], ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x41c161
mov edx, dword [ebp - 0x1554]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xc
mov esi, eax
mov edi, 0x4fec1c
call fcn.00429ad0
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x41c0b7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41c235
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
jmp 0x41c235
xor edi, edi
lea esp, [esp]
mov eax, dword [ebp - 0x1560]
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00461893
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x41c14f
inc edi
cmp edi, 0x64
jl 0x41c0e0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0xffffffff
je 0x41c119
cmp eax, ebx
je 0x41c14f
push esi
mov edi, 0x4febbc
jmp 0x41c145
cmp eax, ebx
je 0x41c14f
cmp eax, 0x20
jne 0x41c13e
mov esi, dword [ebp - 0x1564]
mov dword [ebp - 0x1570], 1
push 1
mov edi, 0x4feba8
jmp 0x41c22d
push 0xffffffffffffffff
mov edi, 0x4febec
mov esi, eax
call fcn.00429ad0
add esp, 4
mov esi, dword [ebp - 0x1564]
push 1
mov edi, 0x4feba8
jmp 0x41c22d
cmp dword [ebp - 0x156c], 0x103
jne 0x41c190
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jl 0x41c1b3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 2
mov edi, 0x4feba8
jmp 0x41c22b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xd
mov edi, 0x4fec38
jmp 0x41c22b
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jge 0x41c21e
inc eax
mov dword [esi + 0x278], eax
mov eax, dword [ebp - 0x1554]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41c1df
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41c1f6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
cmp dword [esi + 0x278], 2
jne 0x41c20e
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004618f6
add esp, 4
mov edx, dword [ebp - 0x1578]
push edx
mov ecx, esi
call fcn.00418110
jmp 0x41c235
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xb
mov edi, 0x4fec58
mov esi, eax
call fcn.00429ad0
add esp, 4
cmp dword [ebp - 0x1570], ebx
je 0x41c29a
xor esi, esi
nop
mov eax, dword [ebp - 0x1560]
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00461893
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x41c29a
inc esi
cmp esi, 0x64
jl 0x41c240
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x41c27b
cmp esi, ebx
je 0x41c29a
push edi
mov edi, 0x4fec70
jmp 0x41c292
cmp esi, ebx
je 0x41c29a
push 0xffffffffffffffff
cmp esi, 0x20
jne 0x41c28d
mov edi, 0x4feca0
jmp 0x41c292
mov edi, 0x4fecd0
call fcn.00429ad0
add esp, 4
cmp byte [0x5134fe], bl
je 0x41c2ed
mov edx, dword [ebp - 0x1554]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41c2c7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41a4da
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x1540]
mov dword [ebp - 0x1550], ebx
jmp 0x418183
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x41c304
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41c31b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
push ebx
push ebx
call fcn.0043aef0
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x418183
mov edx, dword [edi + 0x20]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41c35f
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41c353
mov ecx, edi
call fcn.0044c068
mov ecx, edi
call fcn.00452609
jmp 0x418188
mov eax, edi
call fcn.0041c780
jmp 0x419e47