Function at 0x403030
Capabilities:
Check if file exists
Set file attributes
Shutdown system

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6e3e7f
mov eax, dword fs:[0]
push eax
mov eax, 0x11c0
call fcn.005e9a80
mov eax, dword [0x7cf070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x640], edi
lea eax, [edi + 0xd8]
mov ecx, eax
mov dword [ebp - 0x650], eax
call fcn.0040ab50
lea ebx, [edi + 0x180]
mov ecx, str.DGGSSSSSXbchoy_8_ESbbnz__5DPPYhinw____8CEHUafioqw_.6HVX_luzz___33_CH
mov dword [ebp - 0x65c], ebx
call fcn.0045f920
push eax
mov ecx, ebx
call fcn.004ad9d3
mov ecx, dword [0x7e80ac]
call fcn.0041cfb0
mov ebx, dword [0x7e80ac]
xor esi, esi
cmp dword [ebx + 0x44], esi
jle 0x403127
xor edi, edi
test edi, edi
js 0x4031f1
cmp esi, dword [ebx + 0x44]
jge 0x4031f1
mov eax, dword [ebx + 0x40]
mov eax, dword [eax + edi + 0x3c]
test eax, eax
je 0x403243
mov ecx, dword [0x7e80b8]
nop dword [eax + eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403106
test dx, dx
je 0x403102
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403106
add ecx, 4
add eax, 4
test dx, dx
jne 0x4030e0
xor eax, eax
jmp 0x40310b
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x4031e0
inc esi
add edi, 0x60
cmp esi, dword [ebx + 0x44]
jl 0x4030b5
mov edi, dword [ebp - 0x640]
mov esi, dword [0x7e80bc]
cmp esi, 0xffffffff
jne 0x4031f6
mov ecx, str.ABGVVVVVinv9HTTYcpsx__JNNR_giu_2_FGOUdlpz_7DJKYaky4ALNRY__ov022_MWbcdeqv__.44:::GHKRVXYaj
call fcn.0045f920
push eax
lea ecx, [ebp - 0x62c]
call fcn.00404e10
mov dword [ebp - 4], 0
push dword [0x7e7fe8]
push 5
push 1
push 0x10
push ecx
mov esi, esp
mov dword [ebp - 0x630], esi
mov eax, dword [ebp - 0x62c]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add esp, 4
lea ecx, [ebp - 0x9b0]
add eax, 0x10
mov dword [esi], eax
call fcn.004234f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 1
call fcn.004b1d6a
lea ecx, [ebp - 0x9b0]
call fcn.00423920
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4031c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 1
push 0x46e
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4036a1
mov edi, dword [ebp - 0x640]
mov dword [0x7e80bc], esi
jmp 0x40312d
call fcn.004b03fc
test esi, esi
js 0x4031f1
cmp esi, dword [ebx + 0x44]
jge 0x4031f1
mov eax, dword [0x7e8820]
lea ecx, [esi + esi*2]
shl ecx, 5
mov edx, 1
add ecx, dword [ebx + 0x40]
cmp dword [ecx + 0x10], 0
lea ecx, [ebp - 0x654]
cmovne eax, edx
mov edx, 0x7e80b8
mov dword [0x7e8820], eax
call fcn.00420de0
mov ecx, str.NX______gmnz2_DP_aloqyz__1799BIQgjmw_
mov dword [ebp - 4], 2
call fcn.0045f920
test eax, eax
jne 0x40324d
push 0x80004005
call fcn.00402890
mov ecx, dword [ebp - 0x654]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403279
test dx, dx
je 0x403275
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403279
add ecx, 4
add eax, 4
test dx, dx
jne 0x403253
xor eax, eax
jmp 0x40327e
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x403340
mov ecx, str.CPQZZZZZdhkt__3__KZZddmmy_2AGQQRix
call fcn.0045f920
test eax, eax
jne 0x4032a3
push 0x80004005
call fcn.00402890
mov ecx, dword [ebp - 0x654]
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4032d6
test dx, dx
je 0x4032d2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4032d6
add ecx, 4
add eax, 4
test dx, dx
jne 0x4032b0
xor eax, eax
jmp 0x4032db
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x403340
mov ecx, str.Occcccls_.7FRXekqy4:DGUU_oy__0_CPQ_
call fcn.0045f920
test eax, eax
jne 0x4032fc
push 0x80004005
call fcn.00402890
mov ecx, dword [ebp - 0x654]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403328
test dx, dx
je 0x403324
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403328
add ecx, 4
add eax, 4
test dx, dx
jne 0x403302
xor eax, eax
jmp 0x40332d
sbb eax, eax
or eax, 1
test eax, eax
mov dword [0x7e87b0], 0
sete al
test al, al
je 0x40334a
mov dword [0x7e87b0], 1
movsd xmm0, qword [0x7a6948]
lea eax, [ebp - 0x62c]
mov ecx, dword [0x7e80ac]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push dword [0x7e80bc]
push 0x7e80cc
push eax
call fcn.0041f4d0
push eax
mov ecx, 0x7e80d0
mov byte [ebp - 4], 3
call fcn.00405050
mov byte [ebp - 4], 2
or ebx, 0xffffffff
mov edx, dword [ebp - 0x62c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4033ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [0x7e87b4], 0
jne 0x4033f0
push 5
mov ecx, str.JUZ_____gktuv____.LMQcggnp_____HPTYempsw__:FGGHMTbgqx_.88DJWfggor__5_IVddmy___5:_BPR_coxx_47FUW_
call fcn.0045f920
push ecx
mov ecx, esp
push eax
call fcn.00404e10
mov edx, 1
lea ecx, [edx + 0xf]
call fcn.004243d0
add esp, 8
push 0
push 1
push 0x46e
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x40367f
mov ecx, 0x7e7fc8
call fcn.00437c50
mov ecx, str.MSX_____jt_4:JXadho.8_KTUWds_6_FGL
call fcn.0045f920
push eax
lea eax, [ebp - 0x66c]
push 0x7e80d0
push eax
call fcn.00404720
push 0x7e80a4
push eax
lea eax, [ebp - 0x668]
mov byte [ebp - 4], 4
push eax
call fcn.004047f0
add esp, 0x18
mov byte [ebp - 4], 6
mov eax, ebx
mov edx, dword [ebp - 0x66c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403450
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea edx, [ebp - 0x668]
mov ecx, 0x7e809c
call fcn.0044dde0
add esp, 4
mov ecx, str.NOS_____kwwx__7_GOdrrw_.2_JKOYl_.EHQWX_jnuz39GKZivx__DGUVeru
call fcn.0045f920
push eax
lea ecx, [edi + 0x180]
call fcn.004ad9d3
mov ecx, 0x7e7fc8
call fcn.00438780
push ecx
mov esi, esp
mov dword [ebp - 0x630], esp
mov dword [ebp - 0x648], esi
mov eax, dword [0x7e80a0]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add eax, 0x10
mov dword [esi], eax
mov ecx, str.NQSTTTTTcggnr9_MNWgjxz_07_ANV_gr___1
mov byte [ebp - 4], 7
call fcn.0045f920
push eax
lea eax, [ebp - 0x634]
push 0x7e80dc
push eax
call fcn.00404720
mov esi, eax
mov ecx, str.DLNPPPPPUblz379_DOYdes____HSW_abjq_3A
mov byte [ebp - 4], 8
call fcn.0045f920
push eax
lea eax, [ebp - 0x62c]
push 0x7e80dc
push eax
call fcn.00404720
add esp, 0x1c
mov byte [ebp - 4], 9
push 0x7e8118
push esi
mov edx, eax
mov byte [ebp - 4], 0xb
mov ecx, 0x7e80d0
call fcn.00440740
mov byte [ebp - 4], 0xa
add esp, 0xc
mov edx, dword [ebp - 0x62c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40352a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40354b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ecx, ecx
xor esi, esi
mov dword [ebp - 0x62c], ecx
test esi, esi
js 0x4031f1
cmp ecx, dword [0x7e8844]
jge 0x4031f1
mov edi, dword [0x7e8840]
add edi, esi
cmp dword [edi + 0x90], 0
jne 0x403587
mov ecx, edi
call fcn.004427a0
mov ecx, dword [ebp - 0x62c]
cmp dword [edi + 0x90], 2
jne 0x4035a5
cmp dword [0x7e8820], 0
je 0x4036bd
test esi, esi
jg 0x4036bd
inc ecx
add esi, 0xa8
mov dword [ebp - 0x62c], ecx
cmp esi, 0x1f8
jl 0x403555
mov ecx, str.JRT_____ftx_59HJTYYZeky.5_EOOY_loy16_FKUajnu__2__NT_biw__49_DJM_gt__4GKM__fnz.3_GS_dnt_9_IL
call fcn.0045f920
push eax
lea ecx, [ebp - 0x650]
call fcn.00404e10
mov byte [ebp - 4], 0xc
push dword [0x7e7fe8]
push 5
push 1
push 0x10
push ecx
mov esi, esp
mov dword [ebp - 0x630], esi
mov eax, dword [ebp - 0x650]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add esp, 4
lea ecx, [ebp - 0x9b0]
add eax, 0x10
mov dword [esi], eax
call fcn.004234f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0xd
call fcn.004b1d6a
lea ecx, [ebp - 0x9b0]
call fcn.00423920
mov byte [ebp - 4], 6
mov eax, ebx
mov edx, dword [ebp - 0x650]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403646
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x640]
push 0
push 1
push 0x46e
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 4], 2
mov eax, ebx
mov edx, dword [ebp - 0x668]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40367f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x654]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4036a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005e9199
mov esp, ebp
pop ebp
ret
mov dword [0x7e80c0], ecx
mov ecx, str.DELSSSSSUdqr_09GL_elu_06_AIIJNWclz___.6DMN_aanqx58_DR_ikx_2348__I
call fcn.0045f920
mov ecx, dword [ebp - 0x65c]
push eax
call fcn.004ad9d3
call fcn.005f3da6
lea ecx, [ebp - 0x638]
mov eax, dword [eax]
push dword [eax + 8]
call fcn.00404e10
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x638]
call fcn.005f4234
add esp, 0x14
cmp word [ebp - 0x18], 0
jne 0x4037d4
mov ecx, str.LSUcccccdhty_:BDDGQWckmu_15_KYbnz__6AM
call fcn.0045f920
push eax
lea eax, [ebp - 0x634]
push 0x7e80a0
push eax
call fcn.00404720
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0xf
push ecx
push eax
lea eax, [ebp - 0x62c]
push eax
call fcn.004047f0
add esp, 0x18
push eax
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0x10
call fcn.00405050
mov byte [ebp - 4], 0xf
mov eax, ebx
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40378c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4037ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x638]
call fcn.005f4234
add esp, 0x14
push dword [ebp - 0x638]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x403891
mov ecx, str.FHJOOOOOZ__gmy__6DNQY_als__.27_BMZ_cr__6CIP_ccivwy__6_M__luvvz_24_IKSbgst_03_HWceloz_7__FPWcln5
call fcn.0045f920
push eax
lea ecx, [ebp - 0x62c]
call fcn.00404e10
mov byte [ebp - 4], 0x11
push dword [0x7e7fe8]
push 5
push 1
push 0x10
push ecx
mov esi, esp
mov dword [ebp - 0x630], esi
mov eax, dword [ebp - 0x62c]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add esp, 4
lea ecx, [ebp - 0x9b0]
add eax, 0x10
mov dword [esi], eax
call fcn.004234f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x12
call fcn.004b1d6a
lea ecx, [ebp - 0x9b0]
call fcn.00423920
mov byte [ebp - 4], 0xe
mov eax, ebx
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403874
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x640]
push 0
push 1
push 0x46e
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x40442d
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x664]
call fcn.00404e10
mov byte [ebp - 4], 0x13
xor edi, edi
mov ecx, dword [0x7e80ac]
mov eax, dword [ecx + 0x44]
mov dword [ebp - 0x634], eax
test eax, eax
jle 0x403977
mov eax, dword [ebp - 0x664]
xor edx, edx
mov dword [ebp - 0x62c], edx
nop dword [eax + eax]
test edx, edx
js 0x4031f1
cmp edi, dword [ecx + 0x44]
jge 0x4031f1
mov ecx, dword [ecx + 0x40]
mov ecx, dword [ecx + edx + 0x3c]
test ecx, ecx
je 0x403243
mov edx, eax
mov si, word [edx]
cmp si, word [ecx]
jne 0x403918
test si, si
je 0x403914
mov si, word [edx + 2]
cmp si, word [ecx + 2]
jne 0x403918
add edx, 4
add ecx, 4
test si, si
jne 0x4038f2
xor ecx, ecx
jmp 0x40391d
sbb ecx, ecx
or ecx, 1
test ecx, ecx
sete cl
test cl, cl
mov ecx, dword [0x7e80ac]
jne 0x403951
mov edx, dword [ebp - 0x62c]
inc edi
add edx, 0x60
mov dword [ebp - 0x62c], edx
cmp edi, dword [ebp - 0x634]
jl 0x4038d0
mov edi, 1
mov dword [ebp - 0x62c], edi
jmp 0x40398a
cmp edi, dword [ecx + 0x44]
jge 0x4031f1
lea eax, [edi + edi*2]
shl eax, 5
add eax, dword [ecx + 0x40]
xor ecx, ecx
cmp dword [eax + 0xc], 7
sete cl
mov dword [ebp - 0x62c], ecx
cmp edi, 0xffffffff
jne 0x403984
mov edi, 1
mov dword [ebp - 0x62c], edi
jmp 0x40398a
mov edi, dword [ebp - 0x62c]
mov ecx, str.MXgggggt_04_NZhhlmr6_ET_jy_27_BBMNP
call fcn.0045f920
mov esi, eax
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x4039ab
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x64c], eax
mov byte [ebp - 4], 0x14
test esi, esi
je 0x403a01
test esi, 0xffff0000
jne 0x4039e5
movzx esi, si
push esi
call fcn.004b2c39
test eax, eax
je 0x403a10
push esi
push eax
lea ecx, [ebp - 0x64c]
call fcn.00404cb0
jmp 0x403a10
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4039f0
sub ecx, edx
sar ecx, 1
jmp 0x403a03
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x64c]
call fcn.00404fa0
mov byte [ebp - 4], 0x15
call fcn.005f3da0
cmp dword [eax], 3
jle 0x403afd
call fcn.005f3da6
lea ecx, [ebp - 0x63c]
mov eax, dword [eax]
push dword [eax + 0xc]
call fcn.00404e10
mov ecx, str.KNOOOOOOPT__beeht___29FKZiirxy2_JSagtz___4AP_cosu__:EIMXbp___69DRS
mov byte [ebp - 4], 0x16
call fcn.0045f920
push eax
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x63c]
call fcn.004048a0
mov eax, dword [eax]
test eax, eax
jne 0x403a68
push 0x80004005
call fcn.00402890
mov ecx, dword [ebp - 0x63c]
nop
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403a96
test dx, dx
je 0x403a92
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403a96
add ecx, 4
add eax, 4
test dx, dx
jne 0x403a70
xor eax, eax
jmp 0x403a9b
sbb eax, eax
or eax, 1
mov edx, dword [ebp - 0x634]
test eax, eax
mov eax, ebx
sete byte [ebp - 0x641]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403ac1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x641], 0
je 0x403adc
lea eax, [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00405050
mov byte [ebp - 4], 0x15
mov eax, ebx
mov edx, dword [ebp - 0x63c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403afd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, str.PWeeeeefry7DNSbfoz_8CHO_lo_38AHUbcqs_.2:_NOPRWdgux_6_DDFOYhuu___BNT_cqwz_08_BEIV_hq__._:FFTYYcmx.5_IXfjl__55DKKQ_etvw_02_KT
call fcn.0045f920
push eax
lea ecx, [ebp - 0x634]
call fcn.00404e10
mov byte [ebp - 4], 0x17
push dword [0x7e7fe8]
push 0xa
push 1
push 0x24
push ecx
mov esi, esp
mov dword [ebp - 0x630], esi
mov eax, dword [ebp - 0x634]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add esp, 4
lea ecx, [ebp - 0x9b0]
add eax, 0x10
mov dword [esi], eax
call fcn.004234f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x18
call fcn.004b1d6a
lea ecx, [ebp - 0x9b0]
mov esi, eax
call fcn.00423920
mov byte [ebp - 4], 0x15
mov ecx, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x403b8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp esi, 6
je 0x403bad
mov eax, dword [ebp - 0x640]
push 0
push 1
push 0x46e
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4043eb
test edi, edi
je 0x403c8f
lea edx, [ebp - 0x638]
lea ecx, [ebp - 0x648]
call fcn.0044ed90
mov esi, eax
mov ecx, str.IJMWWWWWagt___7_GMN_eht__HPacrv_2AM
mov byte [ebp - 4], 0x19
call fcn.0045f920
push eax
lea eax, [ebp - 0x63c]
push 0x7e80d0
push eax
call fcn.00404720
push esi
push eax
lea eax, [ebp - 0x634]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004047f0
add esp, 0x18
mov byte [ebp - 4], 0x1c
mov eax, ebx
mov edx, dword [ebp - 0x63c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403c1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov eax, ebx
mov edx, dword [ebp - 0x648]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403c3f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x640]
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x638]
mov ecx, edi
push eax
call fcn.004044d0
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x638]
call fcn.00405050
mov byte [ebp - 4], 0x15
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403c95
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x403c95
mov edi, dword [ebp - 0x640]
push dword [ebp - 0x638]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x403d4c
mov ecx, str.CGIXXXXXiqz__019_KNOUZcko__2_IQT_mo___4_LV_klt0_HNTbcgouw_0:FTTcdmz__46__Njr_22_CCDQ__gjx
call fcn.0045f920
push eax
lea ecx, [ebp - 0x62c]
call fcn.00404e10
mov byte [ebp - 4], 0x1e
push dword [0x7e7fe8]
push 5
push 1
push 0x10
push ecx
mov esi, esp
mov dword [ebp - 0x630], esi
mov eax, dword [ebp - 0x62c]
add eax, 0xfffffff0
push eax
call fcn.004050c0
add esp, 4
lea ecx, [ebp - 0x9b0]
add eax, 0x10
mov dword [esi], eax
call fcn.004234f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x1f
call fcn.004b1d6a
lea ecx, [ebp - 0x9b0]
call fcn.00423920
mov byte [ebp - 4], 0x15
mov eax, ebx
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403d35
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 1
push 0x46e
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4043eb
mov ecx, str.OSXXXXXXclx_____18___MSV_abcklw__6AHKX_fnp__GQkw____DR__ly345DDFF
call fcn.0045f920
push eax
lea ecx, [edi + 0x180]
call fcn.004ad9d3
mov eax, dword [0x7e80c0]
test eax, eax
js 0x4031f1
cmp eax, dword [0x7e8844]
jge 0x4031f1
imul ecx, eax, 0xa8
lea eax, [ebp - 0x648]
push eax
add ecx, dword [0x7e8840]
call fcn.004438c0
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.0041ca50
mov byte [ebp - 4], 0x15
mov eax, ebx
mov edx, dword [ebp - 0x648]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403dbf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [0x7e80ac]
push 0
call fcn.00416dd0
mov ecx, str.EHN______kmr_8_JSktx_15:AIQ_bjw_16CGKTX_hv_8GIPallx_249_BDPXiq
call fcn.0045f920
push eax
lea ecx, [edi + 0x180]
call fcn.004ad9d3
mov ecx, str.OX______nz0_DER__ddmy__14CNO_hry2_ANS__kwy____.DNNNjopu_.57_ITcrwwy
call fcn.0045f920
push eax
lea eax, [ebp - 0x660]
push 0x7e80b8
push eax
call fcn.00404720
add esp, 0xc
push 0x1000
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x680]
push dword [ebp - 0x660]
call fcn.004b2ce0
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x22
call fcn.004b2fdd
mov eax, dword [0x7e8118]
add eax, 0xfffffff0
push eax
call fcn.004050c0
lea esi, [eax + 0x10]
mov dword [ebp - 0x63c], esi
mov ecx, str.HLO_____eikw___77LZinuu_6CEIRaft__7
mov byte [ebp - 4], 0x23
call fcn.0045f920
push eax
lea eax, [ebp - 0x648]
push 0x7e80d0
push eax
call fcn.00404720
push 0x7e8130
push eax
lea eax, [ebp - 0x658]
mov byte [ebp - 4], 0x24
push eax
call fcn.004047f0
add esp, 0x1c
mov byte [ebp - 4], 0x26
mov eax, ebx
mov edx, dword [ebp - 0x648]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403e9b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x11cc]
call fcn.0040c040
mov ecx, str.NTU__egmnot__0_KP_afhipp_3__MZfkt
mov byte [ebp - 4], 0x27
call fcn.0045f920
push eax
lea ecx, [ebp - 0x634]
call fcn.00404e10
lea eax, [ebp - 0x634]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x9c0]
call fcn.00405050
mov byte [ebp - 4], 0x27
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403efe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, str.OQVYYYYYhu__4JUabp.99ERTWWillmuu_
call fcn.0045f920
push eax
lea ecx, [ebp - 0x634]
call fcn.00404e10
push ecx
lea eax, [ebp - 0x63c]
mov byte [ebp - 4], 0x29
push eax
lea edx, [ebp - 0x634]
lea ecx, [ebp - 0x630]
call fcn.0044cd40
add esp, 8
mov edi, dword [eax]
mov ecx, str.INO_____bkw__67FLQYcknwzz8BGJO_cju
call fcn.0045f920
push dword [ebp - 0x9c4]
push edi
push eax
push dword [ebp - 0x9c0]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x29
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403f75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x27
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403f96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
lea eax, [ebp - 0x63c]
mov edx, 0x7e8138
push eax
lea ecx, [ebp - 0x630]
call fcn.0044cd40
add esp, 8
mov edi, dword [eax]
mov ecx, str.IOSTTTTT_hhlru_.9FR_ntwz.67ETWfq
call fcn.0045f920
push dword [ebp - 0x9c4]
push edi
push eax
push dword [ebp - 0x9c0]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x27
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x403ff2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x404007
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x634], eax
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x62c], 0
je 0x404039
lea edx, [ebp - 0x638]
lea ecx, [ebp - 0x630]
call fcn.0044ed90
mov byte [ebp - 4], 0x2d
jmp 0x40405c
mov eax, dword [ebp - 0x638]
lea ecx, [ebp - 0x638]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffe
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.004048e0
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x634]
call fcn.00405050
mov byte [ebp - 4], 0x2c
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404089
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
lea eax, [ebp - 0x63c]
push eax
lea edx, [ebp - 0x634]
lea ecx, [ebp - 0x630]
call fcn.0044cd40
add esp, 8
mov edi, dword [eax]
mov ecx, str.HOQ_____ipry__88:CNXdnoq__6AFNSZZ__lx_
call fcn.0045f920
push dword [ebp - 0x9c4]
push edi
push eax
push dword [ebp - 0x9c0]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x2c
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4040e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, str.BMQQQQQQYagkrw__6AKKSSXgkkkww_8FFGLQTa
call fcn.0045f920
push eax
lea ecx, [ebp - 0x62c]
call fcn.00404e10
push ecx
lea eax, [ebp - 0x63c]
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x62c]
lea ecx, [ebp - 0x630]
call fcn.0044cd40
add esp, 8
mov edi, dword [eax]
mov ecx, str.HWZdeht__0AJQVbcoy_27_MOTXehoy__
call fcn.0045f920
push dword [ebp - 0x9c4]
push edi
push eax
push dword [ebp - 0x9c0]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x30
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40415d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov eax, ebx
mov edx, dword [ebp - 0x62c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40417e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
lea eax, [ebp - 0x63c]
push eax
lea edx, [ebp - 0x64c]
lea ecx, [ebp - 0x630]
call fcn.0044cd40
add esp, 8
mov edi, dword [eax]
mov ecx, str.LMMOOOOO_ehkz_26_FTcis__59_DS_dimmps___
call fcn.0045f920
push dword [ebp - 0x9c4]
push edi
push eax
push dword [ebp - 0x9c0]
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x2c
mov eax, ebx
mov edx, dword [ebp - 0x630]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4041db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 2
push dword [ebp - 0x658]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ecx, str.FPW_____erw__078BDPZells__.:DFFQfs__.6_LZ_bkz_0_BJU_dry_.5_FMXbgtx
call fcn.0045f920
mov ecx, dword [ebp - 0x65c]
push eax
call fcn.004ad9d3
mov edi, dword [ebp - 0x650]
cmp dword [edi + 0x9c], 0
je 0x404223
push 1
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [edi + 0x9c], 0
movups xmm0, xmmword [0x7317bc]
mov dword [edi + 0xa0], 0
lea eax, [ebp - 0x628]
mov dword [edi + 0x98], 0
mov edi, dword [edi + 0x80]
push 0
push eax
movups xmmword [ebp - 0x628], xmm0
push dword [edi + 4]
call dword [sym.imp.gdiplus.dll_GdipImageSelectActiveFrame]
test eax, eax
je 0x404264
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x650]
push 0
push 0
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x630]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x624]
push eax
push str.SeShutdownPrivilege
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push 0
push 0
push 0
lea eax, [ebp - 0x628]
mov dword [ebp - 0x628], 1
push eax
push 0
push dword [ebp - 0x630]
mov dword [ebp - 0x61c], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push 0
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov eax, dword [ebp - 0x640]
push 0
push 0
push 0x46e
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 4], 0x27
mov eax, ebx
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40431e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x26
mov eax, ebx
mov edx, dword [ebp - 0x9bc]
mov dword [ebp - method.CIni.virtual_0], vtable.CIni.0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404349
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c0]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404366
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x404383
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov eax, ebx
mov edx, dword [ebp - 0x658]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4043a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4043bf
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x680]
call fcn.004b2d53
mov byte [ebp - 4], 0x15
mov eax, ebx
mov edx, dword [ebp - 0x660]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4043eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov eax, ebx
mov edx, dword [ebp - 0x64c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40440c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov eax, ebx
mov edx, dword [ebp - 0x664]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40442d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov eax, ebx
mov edx, dword [ebp - 0x638]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40365e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40365e