Function at 0x4539b1
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Create directory
Create thread
Delete registry key
Get common file path
Get number of processors
Parse pe header
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bdb90
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2148
call fcn.005788a0
mov eax, dword [0x6bd6f8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x2054], edi
xor esi, esi
mov dword [edi], esi
mov dword [edi + 4], esi
mov dword [edi + 8], esi
mov dword [edi + 0xc], esi
mov dword [ebp - 4], esi
lea eax, [edi + 0x24]
push eax
call fcn.004084d7
mov byte [ebp - 4], 1
lea eax, [edi + 0x28]
push eax
call fcn.004084d7
mov byte [ebp - 4], 2
lea ecx, [edi + 0x2c]
call fcn.004010c4
mov byte [ebp - 4], 3
lea ecx, [edi + 0x30]
call fcn.004010c4
mov byte [ebp - 4], 4
lea ecx, [edi + 0x34]
call fcn.004010c4
mov byte [ebp - 4], 5
lea ecx, [edi + 0x38]
call fcn.004010c4
mov byte [ebp - 4], 6
lea ecx, [edi + 0x3c]
call fcn.004010c4
mov byte [ebp - 4], 7
lea ecx, [edi + 0x40]
call fcn.004010c4
mov byte [ebp - 4], 8
lea ecx, [edi + 0x44]
call fcn.004010c4
mov byte [ebp - 4], 9
mov dword [edi + 0x48], esi
mov byte [edi + 0x4c], 0
mov byte [edi + 0x68], 0
or ebx, 0xffffffff
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x70], 0xd
mov dword [edi + 0x74], 0x1e
mov dword [edi + 0x78], esi
mov byte [edi + 0x7c], 0
mov dword [edi + 0x80], 1
mov byte [edi + 0x84], 1
push 0x673a14
lea eax, [edi + 0x88]
push eax
call fcn.0040852d
mov byte [ebp - 4], 0xa
lea esi, [edi + 0x8c]
mov ecx, esi
call fcn.004010c4
mov byte [ebp - 4], 0xb
xor eax, eax
inc eax
mov dword [edi + 0x90], eax
lea ecx, [edi + 0x94]
mov dword [ebp - 0x2048], ecx
push 0
push eax
call fcn.0040eabb
pop ecx
pop ecx
mov dword [ebp - 0x205c], eax
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x453b07
mov ecx, dword [ebp - 0x2048]
mov dword [eax], ecx
jmp 0x453b09
xor eax, eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2048]
mov dword [ecx], eax
mov byte [ebp - 4], 0x11
call fcn.0046aa20
mov edx, dword [ebp - 0x2048]
lea ecx, [edx + 0x18]
mov dword [ecx], eax
mov byte [eax + 0x1ad], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
and dword [edx + 0x1c], 0
mov byte [ebp - 4], 0x13
lea eax, [edi + 0xb4]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 0x14
and dword [edi + 0xcc], 0
lea eax, [edi + 0xd0]
push eax
call fcn.00413b2d
mov byte [ebp - 4], 0x15
lea eax, [edi + 0xf0]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 0x16
lea eax, [edi + 0x108]
mov dword [ebp - 0x2048], eax
push 0
push 1
call fcn.0040eabb
pop ecx
pop ecx
mov dword [ebp - 0x205c], eax
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x453bb4
mov ecx, dword [ebp - 0x2048]
mov dword [eax], ecx
jmp 0x453bb6
xor eax, eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x2048]
mov dword [ecx], eax
mov byte [ebp - 4], 0x1c
call fcn.0042b073
mov edx, dword [ebp - 0x2048]
lea ecx, [edx + 0x18]
mov dword [ecx], eax
mov byte [eax + 0x15], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
and dword [edx + 0x1c], 0
mov byte [ebp - 4], 0x1e
lea eax, [edi + 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 0x1f
mov dword [edi + 0x140], 0x64
and dword [edi + 0x144], 0
mov byte [ebp - 4], 0x20
call fcn.00453880
push 0x45348b
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.0040fa17
push 4
call fcn.00573487
pop ecx
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x21
test eax, eax
je 0x453c57
and dword [eax], 0
push eax
push str.S_1_5_80_956008885_3418522649_1831038044_1853292631_2271478464
call sub.ADVAPI32.dll_ConvertStringSidToSidW
mov eax, dword [ebp - 0x203c]
jmp 0x453c59
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [0x6d5d08], eax
call fcn.0042dd50
call fcn.004534bd
push ebx
push 0x673b18
call fcn.004bb9d0
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x22
push ebx
push 0x673b14
call fcn.004bb9d0
mov dword [ebp - 0x2050], eax
mov byte [ebp - 4], 0x23
push ebx
push 0x673b10
call fcn.004bb9d0
mov dword [ebp - 0x2060], eax
mov byte [ebp - 4], 0x24
push ebx
push 0x673b0c
call fcn.004bb9d0
mov dword [ebp - 0x2058], eax
mov byte [ebp - 4], 0x25
push ebx
push 0x673b08
call fcn.004bb9d0
mov dword [ebp - 0x2104], eax
mov byte [ebp - 4], 0x26
push ebx
push 0x673b04
call fcn.004bb9d0
mov dword [ebp - 0x20fc], eax
mov byte [ebp - 4], 0x27
push ebx
push 0x673b00
call fcn.004bb9d0
mov dword [ebp - 0x20f4], eax
mov byte [ebp - 4], 0x28
push ebx
push 0x673afc
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x20ec], eax
mov byte [ebp - 4], 0x29
push ebx
push 0x673af8
call fcn.004bb9d0
mov dword [ebp - 0x20e4], eax
mov byte [ebp - 4], 0x2a
push ebx
push 0x673af4
call fcn.004bb9d0
mov dword [ebp - 0x20dc], eax
mov byte [ebp - 4], 0x2b
push ebx
push 0x673af0
call fcn.004bb9d0
mov dword [ebp - 0x20d4], eax
mov byte [ebp - 4], 0x2c
push ebx
push 0x673aec
call fcn.004bb9d0
mov dword [ebp - 0x20cc], eax
mov byte [ebp - 4], 0x2d
push ebx
push 0x673ae8
call fcn.004bb9d0
mov dword [ebp - 0x20c4], eax
mov byte [ebp - 4], 0x2e
push ebx
push 0x673ae4
call fcn.004bb9d0
mov dword [ebp - 0x20bc], eax
mov byte [ebp - 4], 0x2f
push ebx
push 0x673ae0
call fcn.004bb9d0
mov dword [ebp - 0x20b4], eax
mov byte [ebp - 4], 0x30
push ebx
push 0x673adc
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x20ac], eax
mov byte [ebp - 4], 0x31
push ebx
push 0x673ad8
call fcn.004bb9d0
mov dword [ebp - 0x20a4], eax
mov byte [ebp - 4], 0x32
push ebx
push 0x673ad4
call fcn.004bb9d0
mov dword [ebp - 0x209c], eax
mov byte [ebp - 4], 0x33
push ebx
push 0x673ad0
call fcn.004bb9d0
mov dword [ebp - 0x2094], eax
mov byte [ebp - 4], 0x34
push ebx
push 0x673acc
call fcn.004bb9d0
mov dword [ebp - 0x208c], eax
mov byte [ebp - 4], 0x35
push ebx
push 0x673ac8
call fcn.004bb9d0
mov dword [ebp - 0x2084], eax
mov byte [ebp - 4], 0x36
push ebx
push 0x673ac4
call fcn.004bb9d0
mov dword [ebp - 0x207c], eax
mov byte [ebp - 4], 0x37
push ebx
push 0x673ac0
call fcn.004bb9d0
mov dword [ebp - 0x2074], eax
mov byte [ebp - 4], 0x38
push ebx
push 0x673abc
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x206c], eax
mov byte [ebp - 4], 0x39
push ebx
push 0x673ab8
call fcn.004bb9d0
mov dword [ebp - 0x20e0], eax
mov byte [ebp - 4], 0x3a
push ebx
push 0x673ab4
call fcn.004bb9d0
mov dword [ebp - 0x2118], eax
mov byte [ebp - 4], 0x3b
push ebx
push 0x673ab0
call fcn.004bb9d0
mov dword [ebp - 0x20d8], eax
mov byte [ebp - 4], 0x3c
push ebx
push 0x673aac
call fcn.004bb9d0
mov dword [ebp - 0x2150], eax
mov byte [ebp - 4], 0x3d
push ebx
push 0x673aa8
call fcn.004bb9d0
mov dword [ebp - 0x20d0], eax
mov byte [ebp - 4], 0x3e
push ebx
push 0x673aa4
call fcn.004bb9d0
mov dword [ebp - 0x2110], eax
mov byte [ebp - 4], 0x3f
push ebx
push 0x673aa0
call fcn.004bb9d0
mov dword [ebp - 0x20c8], eax
mov byte [ebp - 4], 0x40
push ebx
push 0x673a9c
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x2130], eax
mov byte [ebp - 4], 0x41
push ebx
push 0x673a98
call fcn.004bb9d0
mov dword [ebp - 0x2068], eax
mov byte [ebp - 4], 0x42
push ebx
push 0x673a94
call fcn.004bb9d0
mov dword [ebp - 0x2108], eax
mov byte [ebp - 4], 0x43
push ebx
push 0x673a90
call fcn.004bb9d0
mov dword [ebp - 0x20b8], eax
mov byte [ebp - 4], 0x44
push ebx
push 0x673a8c
call fcn.004bb9d0
mov dword [ebp - 0x2140], eax
mov byte [ebp - 4], 0x45
push ebx
push 0x673a88
call fcn.004bb9d0
mov dword [ebp - 0x20b0], eax
mov byte [ebp - 4], 0x46
push ebx
push 0x673a84
call fcn.004bb9d0
mov dword [ebp - 0x2100], eax
mov byte [ebp - 4], 0x47
push ebx
push 0x673a80
call fcn.004bb9d0
mov dword [ebp - 0x20a8], eax
mov byte [ebp - 4], 0x48
push ebx
push 0x673a7c
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x2128], eax
mov byte [ebp - 4], 0x49
push ebx
push 0x673a78
call fcn.004bb9d0
mov dword [ebp - 0x20a0], eax
mov byte [ebp - 4], 0x4a
push ebx
push 0x673a70
call fcn.004bb9d0
mov dword [ebp - 0x20f8], eax
mov byte [ebp - 4], 0x4b
push ebx
push 0x673a6c
call fcn.004bb9d0
mov dword [ebp - 0x2098], eax
mov byte [ebp - 4], 0x4c
push ebx
push 0x673a68
call fcn.004bb9d0
mov dword [ebp - 0x2148], eax
mov byte [ebp - 4], 0x4d
push ebx
push 0x673a64
call fcn.004bb9d0
mov dword [ebp - 0x2090], eax
mov byte [ebp - 4], 0x4e
push ebx
push 0x673a60
call fcn.004bb9d0
mov dword [ebp - 0x20f0], eax
mov byte [ebp - 4], 0x4f
push ebx
push 0x673a5c
call fcn.004bb9d0
mov dword [ebp - 0x2088], eax
mov byte [ebp - 4], 0x50
push ebx
push 0x673a58
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x2120], eax
mov byte [ebp - 4], 0x51
push ebx
push 0x673a54
call fcn.004bb9d0
mov dword [ebp - 0x2080], eax
mov byte [ebp - 4], 0x52
push ebx
push 0x673a50
call fcn.004bb9d0
mov dword [ebp - 0x20e8], eax
mov byte [ebp - 4], 0x53
push ebx
push 0x673a4c
call fcn.004bb9d0
mov dword [ebp - 0x2078], eax
mov byte [ebp - 4], 0x54
push ebx
push 0x673a48
call fcn.004bb9d0
mov dword [ebp - 0x2138], eax
mov byte [ebp - 4], 0x55
push ebx
push 0x673a44
call fcn.004bb9d0
mov dword [ebp - 0x2070], eax
mov byte [ebp - 4], 0x56
push ebx
push 0x673a40
call fcn.004bb9d0
mov dword [ebp - 0x2154], eax
mov byte [ebp - 4], 0x57
push ebx
push 0x673a3c
call fcn.004bb9d0
mov dword [ebp - 0x214c], eax
mov byte [ebp - 4], 0x58
push ebx
push 0x673a38
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x2144], eax
mov byte [ebp - 4], 0x59
push ebx
push 0x673a34
call fcn.004bb9d0
mov dword [ebp - 0x213c], eax
mov byte [ebp - 4], 0x5a
push ebx
push 0x673a30
call fcn.004bb9d0
mov dword [ebp - 0x2134], eax
mov byte [ebp - 4], 0x5b
push ebx
push 0x673a2c
call fcn.004bb9d0
mov dword [ebp - 0x212c], eax
mov byte [ebp - 4], 0x5c
push ebx
push 0x673a28
call fcn.004bb9d0
mov dword [ebp - 0x2124], eax
mov byte [ebp - 4], 0x5d
push ebx
push 0x673a24
call fcn.004bb9d0
mov dword [ebp - 0x211c], eax
mov byte [ebp - 4], 0x5e
push ebx
push 0x673a20
call fcn.004bb9d0
mov dword [ebp - 0x2114], eax
mov byte [ebp - 4], 0x5f
push ebx
push 0x673a1c
call fcn.004bb9d0
mov dword [ebp - 0x210c], eax
mov byte [ebp - 4], 0x60
push ebx
push 0x673a18
call fcn.004bb9d0
add esp, 0x40
mov dword [ebp - 0x20c0], eax
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x20c0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x210c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2114]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x211c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2124]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x212c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2134]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x213c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2144]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x214c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2154]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2070]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2138]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2078]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20e8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2080]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2120]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2088]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20f0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2090]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2148]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2098]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20f8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20a0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2128]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20a8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2100]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20b0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2140]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20b8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2108]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2068]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2130]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20c8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2110]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20d0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2150]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20d8]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2118]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20e0]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x206c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2074]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x207c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2084]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x208c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2094]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x209c]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20a4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20ac]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20b4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20bc]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20c4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20cc]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20d4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20dc]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20e4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20ec]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20f4]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x20fc]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2104]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2058]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2060]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x2050]
push eax
mov ecx, esi
call fcn.00401d88
lea eax, [ebp - 0x203c]
push eax
mov ecx, esi
call fcn.00401d88
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x20c0]
call fcn.004010b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x210c]
call fcn.004010b0
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x2114]
call fcn.004010b0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x211c]
call fcn.004010b0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x2124]
call fcn.004010b0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x212c]
call fcn.004010b0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x2134]
call fcn.004010b0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x213c]
call fcn.004010b0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x2144]
call fcn.004010b0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x214c]
call fcn.004010b0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x2154]
call fcn.004010b0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x2070]
call fcn.004010b0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x2138]
call fcn.004010b0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2078]
call fcn.004010b0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x20e8]
call fcn.004010b0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x2080]
call fcn.004010b0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x2120]
call fcn.004010b0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2088]
call fcn.004010b0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x20f0]
call fcn.004010b0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x2090]
call fcn.004010b0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x2148]
call fcn.004010b0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2098]
call fcn.004010b0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x20f8]
call fcn.004010b0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x20a0]
call fcn.004010b0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2128]
call fcn.004010b0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x20a8]
call fcn.004010b0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x2100]
call fcn.004010b0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x20b0]
call fcn.004010b0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2140]
call fcn.004010b0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x20b8]
call fcn.004010b0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x2108]
call fcn.004010b0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2068]
call fcn.004010b0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2130]
call fcn.004010b0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x20c8]
call fcn.004010b0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2110]
call fcn.004010b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x20d0]
call fcn.004010b0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x2150]
call fcn.004010b0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x20d8]
call fcn.004010b0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2118]
call fcn.004010b0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x20e0]
call fcn.004010b0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x206c]
call fcn.004010b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2074]
call fcn.004010b0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x207c]
call fcn.004010b0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2084]
call fcn.004010b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x208c]
call fcn.004010b0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2094]
call fcn.004010b0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x209c]
call fcn.004010b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x20a4]
call fcn.004010b0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x20ac]
call fcn.004010b0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x20b4]
call fcn.004010b0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x20bc]
call fcn.004010b0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x20c4]
call fcn.004010b0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x20cc]
call fcn.004010b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x20d4]
call fcn.004010b0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x20dc]
call fcn.004010b0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x20e4]
call fcn.004010b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x20ec]
call fcn.004010b0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x20f4]
call fcn.004010b0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x20fc]
call fcn.004010b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2104]
call fcn.004010b0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2058]
call fcn.004010b0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x2060]
call fcn.004010b0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2050]
call fcn.004010b0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x203c]
call fcn.004010b0
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673b1c
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x62
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
test eax, eax
jne 0x454954
push eax
call fcn.0057501b
pop ecx
push eax
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673b3c
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x63
mov byte [ebp - 4], 0x20
call fcn.0042c986
xor esi, esi
inc esi
cmp dword [0x6bc38c], esi
jl 0x454972
push 0x673b5c
push 0x673b64
push esi
call fcn.00532652
add esp, 0xc
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673b74
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x64
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d65f4], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673b90
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x65
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d65f0], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673bb0
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x66
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d65ec], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673bc8
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d65e8], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673be4
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d65f8], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673bfc
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x69
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03d4], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673c1c
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6a
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03d8], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.Beh1
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6b
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03dc], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.Beh21
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6c
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03e0], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.BehR1
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d5d04], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.BehR21
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6e
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c039c], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673c68
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x6f
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03e4], eax
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673c7c
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x70
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c0448], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673c98
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x71
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03c4], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673cbc
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x72
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03c8], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.SuperUSB
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x73
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03e8], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673cf4
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6d6604], eax
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.AllowUSBSigned
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x20
call fcn.0042c8fe
mov dword [0x6c03a4], eax
push 0x20
call fcn.00573487
pop ecx
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x76
test eax, eax
je 0x454c56
push eax
call fcn.0040f7de
jmp 0x454c58
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [0x6d6630], eax
push str._restorem.db
push ecx
mov eax, esp
mov dword [ebp - 0x2060], esp
push eax
call fcn.0046f4e0
pop ecx
mov byte [ebp - 4], 0x77
lea eax, [ebp - 0x2050]
push eax
mov byte [ebp - 4], 0x20
call fcn.004040c2
pop ecx
pop ecx
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x203c]
push ecx
mov esi, eax
call fcn.004135e5
pop ecx
pop ecx
mov byte [ebp - 4], 0x79
push dword [eax]
mov ecx, dword [0x6d6630]
call fcn.004100b3
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x203c]
call fcn.0040842d
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2050]
call fcn.0040842d
call fcn.0041c2f1
mov esi, 0x6d683c
mov dword [ebp - 0x2058], esi
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x2050]
push eax
call fcn.0046f4e0
mov byte [ebp - 4], 0x7b
mov dword [esp], 0x673d34
lea ecx, [ebp - 0x203c]
push ecx
mov ecx, eax
call fcn.0040fc0a
pop ecx
pop ecx
mov byte [ebp - 4], 0x7c
mov eax, dword [eax]
push 0
push eax
mov ecx, 0x6d6838
call fcn.004320b6
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x203c]
call fcn.0040856e
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x2050]
call fcn.0040856e
push 0x6d6838
call fcn.00432174
test al, al
jne 0x454d86
xor eax, eax
push eax
push eax
push eax
push 0x4554ad
push eax
push eax
call fcn.005752ab
add esp, 0x18
mov dword [0x6d662c], eax
cmp dword [0x6bc38c], 1
jl 0x454d86
push str.PCDB_ready
push 0x673d50
push 1
call fcn.00532652
add esp, 0xc
mov byte [ebp - 4], 0x20
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
push esi
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x6d6620], eax
mov byte [edi + 0x50], 0
push 0x6d5d0c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x400
lea eax, [ebp - 0x2018]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea eax, [ebp - 0x2018]
push eax
call fcn.00575e85
pop ecx
pop ecx
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x2018]
push eax
lea eax, [ebp - 0x2064]
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x7d
push str.msav.db
lea eax, [ebp - 0x203c]
push eax
lea ecx, [ebp - 0x2064]
call fcn.0040fc0a
pop ecx
pop ecx
mov byte [ebp - 4], 0x7e
mov edi, 0x6d78c0
call fcn.00408591
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x203c]
call fcn.0040856e
push esi
push 0x23
lea eax, [ebp - 0x818]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea edi, [ebp - 0x818]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x454e40
mov esi, str.AVHome
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x818]
push eax
lea eax, [ebp - 0x203c]
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x7f
push str.cache.db
lea ecx, [ebp - 0x205c]
push ecx
mov ecx, eax
call fcn.0040fc0a
pop ecx
pop ecx
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x203c]
call fcn.0040856e
push 0
lea eax, [ebp - 0x818]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea edi, [ebp - 0x818]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x454ea6
mov esi, 0x673d98
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor esi, esi
push esi
lea eax, [ebp - 0x818]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push str._sc3.db
lea eax, [ebp - 0x203c]
push eax
lea ecx, [ebp - 0x2064]
call fcn.0040fc0a
pop ecx
pop ecx
mov byte [ebp - 4], 0x82
mov edi, 0x6d78fc
call fcn.00408591
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x203c]
call fcn.0040856e
push 0x3c
call fcn.00573487
pop ecx
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x83
cmp eax, esi
je 0x454f1d
push eax
call fcn.00485610
jmp 0x454f1f
xor eax, eax
mov byte [ebp - 4], 0x81
mov dword [0x6d6610], eax
push esi
push dword [0x6d78fc]
call fcn.00485b40
lea eax, [ebp - 0x818]
push eax
call fcn.0043381c
pop ecx
call fcn.0042e025
mov eax, dword [ebp - 0x2054]
mov dword [0x6d661c], eax
mov byte [ebp - 0x203d], 0
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x2044], 0x400
xor eax, eax
mov word [ebp - 0x1018], ax
push 0x7fe
push esi
lea eax, [ebp - 0x1016]
push eax
call fcn.005780d0
add esp, 0xc
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x1018]
push eax
lea eax, [ebp - 0x204c]
push eax
push 0x673dc4
push 0x673dcc
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x45502d
mov eax, dword [ebp - 0x2044]
cmp eax, esi
je 0x45502d
shr eax, 1
xor ecx, ecx
mov word [ebp + eax*2 - 0x1018], cx
lea eax, [ebp - 0x1018]
push eax
lea eax, [ebp - 0x203c]
push eax
call fcn.00470110
pop ecx
pop ecx
mov byte [ebp - 4], 0x84
lea esi, [ebp - 0x203c]
call fcn.004084c0
push ecx
mov esi, esp
mov dword [ebp - 0x2050], esp
push eax
call fcn.00401019
mov byte [ebp - 4], 0x85
push 0x673df0
push 0x673df8
mov byte [ebp - 4], 0x84
call fcn.00401ab1
mov byte [ebp - 0x203d], 1
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x203c]
call fcn.0040842d
xor esi, esi
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x2044], 0x400
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x1018]
push eax
lea eax, [ebp - 0x204c]
push eax
push 0x673e00
push 0x673e08
push edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x4550d6
mov eax, dword [ebp - 0x2044]
cmp eax, esi
je 0x4550d6
shr eax, 1
xor ecx, ecx
mov word [ebp + eax*2 - 0x1018], cx
lea eax, [ebp - 0x1018]
push eax
lea eax, [ebp - 0x203c]
push eax
call fcn.00470110
mov byte [ebp - 4], 0x86
mov eax, dword [eax]
add esp, 4
mov esi, esp
mov dword [ebp - 0x2050], esp
push eax
call fcn.00401019
mov byte [ebp - 4], 0x87
push 0x673e2c
push 0x673e34
mov byte [ebp - 4], 0x86
call fcn.00401ab1
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x203c]
call fcn.0040842d
mov byte [ebp - 0x203d], 1
xor esi, esi
mov dword [ebp - 0x2048], ebx
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x2044], 4
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x2048]
push eax
lea eax, [ebp - 0x204c]
push eax
push 0x673e3c
push 0x673e44
push edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
cmp dword [ebp - 0x2048], ebx
je 0x455290
cmp dword [ebp - 0x2048], 1
jne 0x455273
push esi
push 0x673e68
push 0x673e74
call fcn.0040191b
xor eax, eax
mov word [ebp - 0x1818], ax
push 0x7fe
push esi
lea eax, [ebp - 0x1816]
push eax
call fcn.005780d0
add esp, 0xc
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x2044], 0x400
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x1818]
push eax
lea eax, [ebp - 0x204c]
push eax
push 0x673e7c
push 0x673e84
push edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x455204
mov eax, dword [ebp - 0x2044]
cmp eax, esi
je 0x455204
shr eax, 1
xor ecx, ecx
mov word [ebp + eax*2 - 0x1818], cx
lea eax, [ebp - 0x1818]
push eax
lea eax, [ebp - 0x203c]
push eax
call fcn.00470110
pop ecx
pop ecx
mov byte [ebp - 4], 0x88
lea esi, [ebp - 0x203c]
call fcn.004084c0
push ecx
mov esi, esp
mov dword [ebp - 0x2050], esp
push eax
call fcn.00401019
mov byte [ebp - 4], 0x89
push 0x673ea8
push 0x673eb4
mov byte [ebp - 4], 0x88
call fcn.00401ab1
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x203c]
call fcn.0040842d
xor esi, esi
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x2044], 0x400
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x1818]
push eax
lea eax, [ebp - 0x204c]
push eax
push 0x673ebc
push 0x673ec4
push edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x455284
mov eax, dword [ebp - 0x2044]
cmp eax, esi
je 0x455284
shr eax, 1
xor ecx, ecx
mov word [ebp + eax*2 - 0x1818], cx
lea eax, [ebp - 0x1818]
push eax
call fcn.00573a87
pop ecx
push eax
push 0x673ee8
push 0x673ef4
call fcn.00401840
jmp 0x455284
push 1
push 0x673efc
push 0x673f08
call fcn.0040191b
push str.Softwarepchiktmp
push edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
cmp byte [ebp - 0x203d], 0
jne 0x4552a1
cmp dword [ebp - 0x2048], ebx
je 0x4552a6
call fcn.00401cb3
mov ecx, dword [ebp - 0x2054]
call fcn.00461f76
mov ecx, dword [ebp - 0x2054]
call fcn.0046237d
call fcn.00465ff6
push esi
push esi
xor esi, esi
inc esi
call fcn.00455a07
pop ecx
pop ecx
xor esi, esi
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push 0x673f34
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x8a
mov byte [ebp - 4], 0x81
call fcn.0042c8fe
cmp eax, 1
jne 0x4552fc
push eax
call fcn.00456002
lea eax, [ebp - 0x2038]
push eax
call fcn.0040f7de
mov byte [ebp - 4], 0x8b
push esi
lea ecx, [ebp - 0x2038]
call fcn.004100b3
mov edi, dword [ebp - 0x2054]
test al, al
je 0x455341
lea eax, [edi + 0xd0]
push eax
lea eax, [ebp - 0x2038]
push eax
call fcn.00411a3b
lea eax, [ebp - 0x2038]
push eax
call fcn.00412511
mov byte [ebp - 4], 0x81
lea eax, [ebp - 0x2038]
push eax
call fcn.0040f80a
push 0x20
call fcn.00573487
pop ecx
mov dword [ebp - 0x203c], eax
mov byte [ebp - 4], 0x8c
cmp eax, esi
je 0x45536f
push eax
call fcn.0040f7de
jmp 0x455371
xor eax, eax
mov byte [ebp - 4], 0x81
mov dword [0x6d782c], eax
push esi
mov ecx, eax
call fcn.004100b3
mov ecx, edi
call fcn.0045df15
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x203c], esp
push str.USBPassword
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x8d
mov byte [ebp - 4], 0x81
call fcn.0042c8fe
mov dword [edi + 0xcc], eax
push esi
push esi
push edi
push 0x455904
push esi
push esi
call fcn.005752ab
push esi
push esi
push edi
push 0x455724
push esi
push esi
call fcn.005752ab
push esi
push esi
push edi
push 0x4554f2
push esi
push esi
call fcn.005752ab
add esp, 0x48
mov edi, 0x6d75f0
mov ecx, edi
call fcn.0044a413
push esi
push esi
push edi
push 0x44a5e3
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x6d761c], eax
call fcn.00431f2a
call fcn.00431acd
call fcn.00431d92
call fcn.00431a95
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x205c]
call fcn.0040856e
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2064]
call fcn.0040856e
mov dword [ebp - 4], 0x1f
jmp 0x45546a
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x2054]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0057340c
leave
ret