Function at 0x4309a0
Capabilities:
Connect to http server
Copy file
Create process on windows
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e323
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x3bec
call fcn.0048db70
push esi
mov dword [ebp - 0x3264], 0
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.004236e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x28]
push eax
call fcn.0042ebd0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3084]
push ecx
call fcn.0042f2c0
add esp, 4
mov dword [ebp - 0x3b3c], eax
mov edx, dword [ebp - 0x3b3c]
mov dword [ebp - 0x31d4], edx
mov byte [ebp - 4], 2
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x31d4]
push eax
lea ecx, [ebp - 0x28]
call fcn.00419710
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x3084]
call fcn.004236e0
push 0xffffffffffffffff
push 0
push 0x4b65a0
lea ecx, [ebp - 0x28]
call fcn.00419710
cmp dword [0x4b65b8], 0x10
jb 0x430a63
mov ecx, dword [0x4b65a4]
mov dword [ebp - 0x3b40], ecx
jmp 0x430a6d
mov dword [ebp - 0x3b40], 0x4b65a4
mov edx, dword [ebp - 0x3b40]
add edx, dword [0x4b65b4]
mov dword [ebp - 0x31d8], edx
mov eax, dword [ebp - 0x31d8]
mov dword [ebp - 0x3088], eax
cmp dword [0x4b65b8], 0x10
jb 0x430aa2
mov ecx, dword [0x4b65a4]
mov dword [ebp - 0x31dc], ecx
jmp 0x430aac
mov dword [ebp - 0x31dc], 0x4b65a4
mov edx, dword [ebp - 0x31dc]
mov dword [ebp - 0x308c], edx
mov eax, dword [ebp - 0x3088]
push eax
mov ecx, dword [ebp - 0x308c]
push ecx
lea edx, [ebp - 0x3090]
push edx
mov ecx, 0x4b65a0
call fcn.004199b0
mov dword [ebp - 0x5c], 0
mov eax, dword [0x4b83c0]
mov ecx, dword [0x4b83c0]
fld qword [eax + 0x50]
fadd qword [ecx + 0x48]
mov edx, dword [0x4b83c0]
fstp qword [edx + 0x50]
mov ecx, dword [0x4b83c0]
call fcn.0044dfc0
push 0
lea ecx, [ebp - 0x58]
call fcn.0041b900
mov byte [ebp - 4], 3
mov eax, dword [0x4b83c0]
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x3224], ecx
mov edx, dword [0x4b6594]
mov dword [ebp - 0x321c], edx
mov eax, dword [ebp - 0x321c]
mov dword [ebp - 0x3214], eax
mov ecx, dword [ebp - 0x3214]
mov dword [ebp - 0x3220], ecx
mov edx, dword [ebp - 0x3224]
shl edx, 5
add edx, dword [ebp - 0x3220]
mov dword [ebp - 0x3220], edx
mov eax, dword [ebp - 0x3220]
mov dword [ebp - 0x3218], eax
mov ecx, dword [0x4b83c0]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x3238], edx
mov eax, dword [0x4b6594]
mov dword [ebp - 0x3230], eax
mov ecx, dword [ebp - 0x3230]
mov dword [ebp - 0x3228], ecx
mov edx, dword [ebp - 0x3228]
mov dword [ebp - 0x3234], edx
mov eax, dword [ebp - 0x3238]
shl eax, 5
add eax, dword [ebp - 0x3234]
mov dword [ebp - 0x3234], eax
mov ecx, dword [ebp - 0x3234]
mov dword [ebp - 0x322c], ecx
mov edx, dword [ebp - 0x322c]
cmp dword [edx + 0x18], 0x10
jb 0x430bd4
mov eax, dword [ebp - 0x322c]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x3b44], ecx
jmp 0x430be3
mov edx, dword [ebp - 0x322c]
add edx, 4
mov dword [ebp - 0x3b44], edx
push 0
push 0
push 3
push 0
push 0
mov eax, dword [ebp - 0x3218]
mov cx, word [eax + 0x1c]
push ecx
mov edx, dword [ebp - 0x3b44]
push edx
mov eax, dword [0x4b8398]
push eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x43342b
xor ecx, ecx
cmp dword [0x4b84f4], 0
sete cl
movzx edx, cl
test edx, edx
je 0x430c37
mov dword [ebp - 0x3b48], 0x4a2b44
jmp 0x430c63
cmp dword [0x4b84f8], 0x10
jb 0x430c4d
mov eax, dword [0x4b84e4]
mov dword [ebp - 0x3b4c], eax
jmp 0x430c57
mov dword [ebp - 0x3b4c], 0x4b84e4
mov ecx, dword [ebp - 0x3b4c]
mov dword [ebp - 0x3b48], ecx
push 0
push 0x4200100
push 0
push 0
push str.HTTP_1.1
mov edx, dword [ebp - 0x3b48]
push edx
push str.POST
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x433421
mov dword [ebp - 0x6c], 0x400
push 0x2e
push str.g_Version:__i
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0048cc64
add esp, 0xc
push 0x20000000
push 0xffffffffffffffff
lea edx, [ebp - 0x2d34]
push edx
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [ebp - 0x70], eax
push 0x4b8354
push str.g_SetID
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00430780
add esp, 0xc
push 0x4b8364
push str.g_AffiliateID
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
push 0x4b8374
push str.g_ResourceID
mov eax, dword [ebp - 0x60]
push eax
call fcn.00430780
add esp, 0xc
movzx ecx, byte [0x4b8391]
test ecx, ecx
je 0x430d38
push str.true
push str.g_BConnect
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
mov byte [0x4b8391], 0
xor eax, eax
cmp dword [0x4b84f4], 0
sete al
movzx ecx, al
test ecx, ecx
je 0x430d57
mov dword [ebp - 0x3b50], 0x4a2b44
jmp 0x430d84
cmp dword [0x4b84f8], 0x10
jb 0x430d6e
mov edx, dword [0x4b84e4]
mov dword [ebp - 0x3b54], edx
jmp 0x430d78
mov dword [ebp - 0x3b54], 0x4b84e4
mov eax, dword [ebp - 0x3b54]
mov dword [ebp - 0x3b50], eax
mov ecx, dword [ebp - 0x3b50]
push ecx
push str.g_URL
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
cmp dword [ebp - 0x10], 0x10
jb 0x430dad
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3b58], eax
jmp 0x430db6
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x3b58], ecx
mov edx, dword [ebp - 0x3b58]
push edx
push str.g_Client
mov eax, dword [ebp - 0x60]
push eax
call fcn.00430780
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0x130]
call fcn.004236e0
mov byte [ebp - 4], 4
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x68]
push ecx
push 0xd
mov ecx, dword [0x4b8388]
call fcn.00433e90
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x430e1e
mov edx, dword [ebp - 0x64]
push edx
call fcn.0048bc60
add esp, 4
push eax
mov eax, dword [ebp - 0x64]
push eax
lea ecx, [ebp - 0x130]
call fcn.004241c0
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x3260], ecx
cmp dword [ebp - 0x3260], 0
je 0x430e6e
cmp dword [ebp - 0x118], 0x10
jb 0x430e4a
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x3b5c], edx
jmp 0x430e56
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x3b5c], eax
mov ecx, dword [ebp - 0x3b5c]
push ecx
push str.g_CrashHistory
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
cmp dword [0x4b8530], 0x10
jb 0x430e84
mov eax, dword [0x4b851c]
mov dword [ebp - 0x3b60], eax
jmp 0x430e8e
mov dword [ebp - 0x3b60], 0x4b851c
mov ecx, dword [ebp - 0x3b60]
push ecx
push str.g_ClientGUID
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
mov eax, dword [0x4b83c0]
movzx ecx, byte [eax + 0x58]
test ecx, ecx
je 0x430ebf
mov dword [ebp - 0x3b64], str.true
jmp 0x430ec9
mov dword [ebp - 0x3b64], str.false
mov edx, dword [ebp - 0x3b64]
push edx
push str.g_GZipSupported
mov eax, dword [ebp - 0x60]
push eax
call fcn.00430780
add esp, 0xc
xor ecx, ecx
cmp dword [0x4b8510], 0
sete cl
movzx edx, cl
test edx, edx
jne 0x430f2c
cmp dword [0x4b8514], 0x10
jb 0x430f0a
mov eax, dword [0x4b8500]
mov dword [ebp - 0x3b68], eax
jmp 0x430f14
mov dword [ebp - 0x3b68], 0x4b8500
mov ecx, dword [ebp - 0x3b68]
push ecx
push str.g_UID
mov edx, dword [ebp - 0x60]
push edx
call fcn.00430780
add esp, 0xc
push 1
push 3
lea ecx, [ebp - 0x114]
call fcn.00436290
mov byte [ebp - 4], 5
lea eax, [ebp - 0x114]
test eax, eax
je 0x430f57
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x3b6c], ecx
jmp 0x430f61
mov dword [ebp - 0x3b6c], 0
push str.STATISTICS_
mov edx, dword [ebp - 0x3b6c]
push edx
call fcn.0043c030
add esp, 8
cmp dword [0x4b8384], 0
je 0x4310db
push 0xffffffffffffffff
mov eax, dword [0x4b842c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [ebp - 0x3269]
push ecx
lea edx, [ebp - 0x326a]
push edx
lea ecx, [ebp - 0x2d40]
call fcn.004372d0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2d40]
push eax
mov ecx, dword [0x4b8384]
call fcn.004784d0
mov ecx, dword [ebp - 0x2d3c]
mov dword [ebp - 0x3270], ecx
mov edx, dword [ebp - 0x3270]
mov eax, dword [edx]
mov dword [ebp - 0x3274], eax
mov ecx, dword [ebp - 0x3274]
mov dword [ebp - 0x2d44], ecx
jmp 0x43100a
mov edx, dword [ebp - 0x2d44]
mov dword [ebp - 0x3278], edx
lea ecx, [ebp - 0x2d44]
call fcn.0043bcc0
mov eax, dword [ebp - 0x3278]
mov dword [ebp - 0x3094], eax
mov ecx, dword [ebp - 0x2d3c]
mov dword [ebp - 0x327c], ecx
mov edx, dword [ebp - 0x327c]
mov dword [ebp - 0x3098], edx
mov eax, dword [ebp - 0x2d44]
sub eax, dword [ebp - 0x3098]
neg eax
sbb eax, eax
inc eax
movzx ecx, al
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
test edx, edx
je 0x4310bf
lea eax, [ebp - 0x114]
test eax, eax
je 0x43105a
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x3b70], ecx
jmp 0x431064
mov dword [ebp - 0x3b70], 0
push 0x4a2d38
mov edx, dword [ebp - 0x2d44]
add edx, 0x28
push edx
push 0x4a2d34
mov eax, dword [ebp - 0x2d44]
add eax, 0xc
push eax
push 0x4a2d30
mov ecx, dword [ebp - 0x3b70]
push ecx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
jmp 0x430fe7
mov edx, dword [0x4b842c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2d40]
call fcn.004372f0
mov eax, dword [0x4b83c0]
fld qword [eax + 0x50]
fcomp qword [0x4a2d28]
fnstsw ax
test ah, 1
jne 0x4321e5
push 0xffffffffffffffff
mov ecx, dword [0x4b8460]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x4b8458]
mov dword [ebp - 0x3280], edx
mov eax, dword [ebp - 0x3280]
mov ecx, dword [eax]
mov dword [ebp - 0x3284], ecx
mov edx, dword [ebp - 0x3284]
mov dword [ebp - 0x2d6c], edx
jmp 0x43114e
mov eax, dword [ebp - 0x2d6c]
mov dword [ebp - 0x3288], eax
lea ecx, [ebp - 0x2d6c]
call fcn.004551c0
mov ecx, dword [ebp - 0x3288]
mov dword [ebp - 0x309c], ecx
mov edx, dword [0x4b8458]
mov dword [ebp - 0x328c], edx
mov eax, dword [ebp - 0x328c]
mov dword [ebp - 0x30a0], eax
mov ecx, dword [ebp - 0x2d6c]
sub ecx, dword [ebp - 0x30a0]
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
neg edx
sbb edx, edx
inc edx
movzx eax, dl
test eax, eax
je 0x431224
lea ecx, [ebp - 0x114]
test ecx, ecx
je 0x4311a2
lea edx, [ebp - 0x10c]
mov dword [ebp - 0x3b74], edx
jmp 0x4311ac
mov dword [ebp - 0x3b74], 0
push 0x4a2d24
mov eax, dword [ebp - 0x2d6c]
mov ecx, dword [eax + 0x28]
push ecx
push 0x4a2d34
mov edx, dword [ebp - 0x2d6c]
mov eax, dword [edx + 0x2c]
push eax
push 0x4a2d34
mov ecx, dword [ebp - 0x2d6c]
add ecx, 0xc
push ecx
push 0x4a2d20
mov edx, dword [ebp - 0x3b74]
push edx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
mov ecx, eax
call fcn.00435190
push eax
call fcn.0043c030
add esp, 8
mov ecx, eax
call fcn.00435190
push eax
call fcn.0043c030
add esp, 8
jmp 0x43112b
mov eax, dword [0x4b8460]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov ecx, dword [0x4b8470]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x4b8468]
mov dword [ebp - 0x3290], edx
mov eax, dword [ebp - 0x3290]
mov ecx, dword [eax]
mov dword [ebp - 0x3294], ecx
mov edx, dword [ebp - 0x3294]
mov dword [ebp - 0x2d70], edx
jmp 0x43128a
mov eax, dword [ebp - 0x2d70]
mov dword [ebp - 0x3298], eax
lea ecx, [ebp - 0x2d70]
call fcn.0043bd50
mov ecx, dword [ebp - 0x3298]
mov dword [ebp - 0x30a4], ecx
mov edx, dword [0x4b8468]
mov dword [ebp - 0x329c], edx
mov eax, dword [ebp - 0x329c]
mov dword [ebp - 0x30a8], eax
mov ecx, dword [ebp - 0x2d70]
sub ecx, dword [ebp - 0x30a8]
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
neg edx
sbb edx, edx
inc edx
movzx eax, dl
test eax, eax
je 0x4313c9
lea ecx, [ebp - 0x114]
test ecx, ecx
je 0x4312de
lea edx, [ebp - 0x10c]
mov dword [ebp - 0x3b78], edx
jmp 0x4312e8
mov dword [ebp - 0x3b78], 0
push 0x4a2d1c
mov eax, dword [ebp - 0x2d70]
add eax, 0x2c
push eax
push 0x4a2d34
mov ecx, dword [ebp - 0x2d70]
add ecx, 0x48
push ecx
push 0x4a2d34
mov edx, dword [ebp - 0x2d70]
mov eax, dword [edx + 0x84]
push eax
push 0x4a2d34
mov ecx, dword [ebp - 0x2d70]
mov edx, dword [ecx + 0x88]
push edx
push 0x4a2d34
mov eax, dword [ebp - 0x2d70]
add eax, 0x10
push eax
push 0x4a2d34
mov ecx, dword [ebp - 0x2d70]
add ecx, 0x64
push ecx
push 0x4a2d18
mov edx, dword [ebp - 0x3b78]
push edx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
mov ecx, eax
call fcn.00435190
push eax
call fcn.0043c030
add esp, 8
mov ecx, eax
call fcn.00435190
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
jmp 0x431267
mov eax, dword [0x4b8470]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov ecx, dword [0x4b83f0]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x4b83f8], 0
jne 0x4313f9
mov dword [ebp - 0x3b7c], 0
jmp 0x431412
mov eax, dword [0x4b83fc]
sub eax, dword [0x4b83f8]
cdq
mov ecx, 0x18
idiv ecx
mov dword [ebp - 0x3b7c], eax
mov edx, dword [ebp - 0x3b7c]
mov dword [ebp - 0x2d48], edx
push 0
lea ecx, [ebp - 0x2d68]
call fcn.004387d0
mov byte [ebp - 4], 7
push 0
lea ecx, [ebp - 0x2d58]
call fcn.0041b900
mov byte [ebp - 4], 8
mov dword [ebp - 0x2d74], 0
jmp 0x43145b
mov eax, dword [ebp - 0x2d74]
add eax, 1
mov dword [ebp - 0x2d74], eax
mov ecx, dword [ebp - 0x2d74]
cmp ecx, dword [ebp - 0x2d48]
jae 0x431ad1
lea edx, [ebp - 0x2d84]
push edx
call fcn.0048ea23
add esp, 4
mov eax, dword [0x4b83f8]
mov dword [ebp - 0x32b8], eax
mov ecx, dword [ebp - 0x32b8]
mov dword [ebp - 0x32b0], ecx
mov edx, dword [ebp - 0x32b0]
mov dword [ebp - 0x32bc], edx
mov eax, dword [ebp - 0x2d74]
imul eax, eax, 0x18
add eax, dword [ebp - 0x32bc]
mov dword [ebp - 0x32bc], eax
mov ecx, dword [ebp - 0x32bc]
mov dword [ebp - 0x32b4], ecx
mov edx, dword [ebp - 0x32b4]
mov dword [ebp - 0x32c0], edx
mov eax, dword [0x4b83f8]
mov dword [ebp - 0x32cc], eax
mov ecx, dword [ebp - 0x32cc]
mov dword [ebp - 0x32c4], ecx
mov edx, dword [ebp - 0x32c4]
mov dword [ebp - 0x32d0], edx
mov eax, dword [ebp - 0x2d74]
imul eax, eax, 0x18
add eax, dword [ebp - 0x32d0]
mov dword [ebp - 0x32d0], eax
mov ecx, dword [ebp - 0x32d0]
mov dword [ebp - 0x32c8], ecx
mov edx, dword [ebp - 0x32c0]
mov eax, dword [ebp - 0x32c8]
mov dword [ebp - 0x3b80], edx
mov dword [ebp - 0x3b84], eax
mov ecx, dword [ebp - 0x3b80]
mov edx, dword [ebp - 0x3b84]
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 0xc]
jl 0x431565
jg 0x431551
mov ecx, dword [ebp - 0x3b80]
mov edx, dword [ebp - 0x3b84]
mov eax, dword [ecx]
cmp eax, dword [edx + 8]
jb 0x431565
lea ecx, [ebp - 0x2d74]
push ecx
lea ecx, [ebp - 0x58]
call fcn.004361b0
jmp 0x43144c
mov edx, dword [0x4b83f8]
mov dword [ebp - 0x32ec], edx
mov eax, dword [ebp - 0x32ec]
mov dword [ebp - 0x32e4], eax
mov ecx, dword [ebp - 0x32e4]
mov dword [ebp - 0x32f0], ecx
mov edx, dword [ebp - 0x2d74]
imul edx, edx, 0x18
add edx, dword [ebp - 0x32f0]
mov dword [ebp - 0x32f0], edx
mov eax, dword [ebp - 0x32f0]
mov dword [ebp - 0x32e8], eax
mov ecx, dword [ebp - 0x2d80]
push ecx
mov edx, dword [ebp - 0x2d84]
push edx
mov eax, dword [ebp - 0x32e8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.00430820
add esp, 0x10
movzx eax, al
test eax, eax
je 0x4315d9
jmp 0x43144c
mov byte [ebp - 0x2d75], 0
mov dword [ebp - 0x2d88], 0
jmp 0x4315fb
mov ecx, dword [ebp - 0x2d88]
add ecx, 1
mov dword [ebp - 0x2d88], ecx
cmp dword [ebp - 0x2d64], 0
jne 0x431610
mov dword [ebp - 0x3b88], 0
jmp 0x431625
mov edx, dword [ebp - 0x2d60]
sub edx, dword [ebp - 0x2d64]
sar edx, 5
mov dword [ebp - 0x3b88], edx
mov eax, dword [ebp - 0x2d88]
cmp eax, dword [ebp - 0x3b88]
jae 0x4318aa
mov ecx, dword [0x4b83f8]
mov dword [ebp - 0x32fc], ecx
mov edx, dword [ebp - 0x32fc]
mov dword [ebp - 0x32f4], edx
mov eax, dword [ebp - 0x32f4]
mov dword [ebp - 0x3300], eax
mov ecx, dword [ebp - 0x2d74]
imul ecx, ecx, 0x18
add ecx, dword [ebp - 0x3300]
mov dword [ebp - 0x3300], ecx
mov edx, dword [ebp - 0x3300]
mov dword [ebp - 0x32f8], edx
mov eax, dword [ebp - 0x2d64]
mov dword [ebp - 0x330c], eax
mov ecx, dword [ebp - 0x330c]
mov dword [ebp - 0x3304], ecx
mov edx, dword [ebp - 0x3304]
mov dword [ebp - 0x3310], edx
mov eax, dword [ebp - 0x2d88]
shl eax, 5
add eax, dword [ebp - 0x3310]
mov dword [ebp - 0x3310], eax
mov ecx, dword [ebp - 0x3310]
mov dword [ebp - 0x3308], ecx
mov edx, dword [ebp - 0x32f8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [edx]
push ecx
mov edx, dword [ebp - 0x3308]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [edx]
push ecx
call fcn.00430820
add esp, 0x10
movzx edx, al
test edx, edx
je 0x4318a5
mov eax, dword [0x4b83f8]
mov dword [ebp - 0x331c], eax
mov ecx, dword [ebp - 0x331c]
mov dword [ebp - 0x3314], ecx
mov edx, dword [ebp - 0x3314]
mov dword [ebp - 0x3320], edx
mov eax, dword [ebp - 0x2d74]
imul eax, eax, 0x18
add eax, dword [ebp - 0x3320]
mov dword [ebp - 0x3320], eax
mov ecx, dword [ebp - 0x3320]
mov dword [ebp - 0x3318], ecx
mov edx, dword [ebp - 0x2d64]
mov dword [ebp - 0x332c], edx
mov eax, dword [ebp - 0x332c]
mov dword [ebp - 0x3324], eax
mov ecx, dword [ebp - 0x3324]
mov dword [ebp - 0x3330], ecx
mov edx, dword [ebp - 0x2d88]
shl edx, 5
add edx, dword [ebp - 0x3330]
mov dword [ebp - 0x3330], edx
mov eax, dword [ebp - 0x3330]
mov dword [ebp - 0x3328], eax
mov ecx, dword [ebp - 0x3328]
mov edx, dword [ebp - 0x3318]
mov eax, dword [edx + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [edx + 0xc]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x2d54]
mov dword [ebp - 0x333c], eax
mov ecx, dword [ebp - 0x333c]
mov dword [ebp - 0x3334], ecx
mov edx, dword [ebp - 0x3334]
mov dword [ebp - 0x3340], edx
mov eax, dword [ebp - 0x2d88]
mov ecx, dword [ebp - 0x3340]
lea edx, [ecx + eax*4]
mov dword [ebp - 0x3340], edx
mov eax, dword [ebp - 0x3340]
mov dword [ebp - 0x3338], eax
mov ecx, dword [ebp - 0x3338]
mov dword [ebp - 0x3b8c], ecx
mov edx, dword [0x4b83f8]
mov dword [ebp - 0x334c], edx
mov eax, dword [ebp - 0x334c]
mov dword [ebp - 0x3344], eax
mov ecx, dword [ebp - 0x3344]
mov dword [ebp - 0x3350], ecx
mov edx, dword [ebp - 0x2d74]
imul edx, edx, 0x18
add edx, dword [ebp - 0x3350]
mov dword [ebp - 0x3350], edx
mov eax, dword [ebp - 0x3350]
mov dword [ebp - 0x3348], eax
mov ecx, dword [0x4b83f8]
mov dword [ebp - 0x335c], ecx
mov edx, dword [ebp - 0x335c]
mov dword [ebp - 0x3354], edx
mov eax, dword [ebp - 0x3354]
mov dword [ebp - 0x3360], eax
mov ecx, dword [ebp - 0x2d74]
imul ecx, ecx, 0x18
add ecx, dword [ebp - 0x3360]
mov dword [ebp - 0x3360], ecx
mov edx, dword [ebp - 0x3360]
mov dword [ebp - 0x3358], edx
mov eax, dword [ebp - 0x3348]
mov ecx, dword [ebp - 0x3358]
mov edx, dword [eax + 8]
sub edx, dword [ecx]
mov eax, dword [eax + 0xc]
sbb eax, dword [ecx + 4]
push 0
push 0x3c
push eax
push edx
call fcn.0048ea60
mov ecx, dword [ebp - 0x3b8c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x3b8c]
mov dword [edx], eax
mov byte [ebp - 0x2d75], 1
jmp 0x4318aa
jmp 0x4315ec
movzx eax, byte [ebp - 0x2d75]
test eax, eax
jne 0x431abd
mov ecx, dword [0x4b83f8]
mov dword [ebp - 0x336c], ecx
mov edx, dword [ebp - 0x336c]
mov dword [ebp - 0x3364], edx
mov eax, dword [ebp - 0x3364]
mov dword [ebp - 0x3370], eax
mov ecx, dword [ebp - 0x2d74]
imul ecx, ecx, 0x18
add ecx, dword [ebp - 0x3370]
mov dword [ebp - 0x3370], ecx
mov edx, dword [ebp - 0x3370]
mov dword [ebp - 0x3368], edx
mov eax, dword [0x4b83f8]
mov dword [ebp - 0x337c], eax
mov ecx, dword [ebp - 0x337c]
mov dword [ebp - 0x3374], ecx
mov edx, dword [ebp - 0x3374]
mov dword [ebp - 0x3380], edx
mov eax, dword [ebp - 0x2d74]
imul eax, eax, 0x18
add eax, dword [ebp - 0x3380]
mov dword [ebp - 0x3380], eax
mov ecx, dword [ebp - 0x3380]
mov dword [ebp - 0x3378], ecx
mov edx, dword [ebp - 0x3368]
mov eax, dword [edx]
mov dword [ebp - 0x3398], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x3394], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x3390], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x338c], ecx
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x3388], eax
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x3384], ecx
mov edx, dword [ebp - 0x3378]
mov eax, dword [edx]
mov dword [ebp - 0x33a0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x339c], ecx
mov edx, dword [ebp - 0x33a0]
mov dword [ebp - 0x30cc], edx
mov eax, dword [ebp - 0x339c]
mov dword [ebp - 0x30c8], eax
lea ecx, [ebp - 0x30c4]
mov edx, dword [ebp - 0x3398]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3394]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x3390]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x338c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x3388]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x3384]
mov dword [ecx + 0x14], eax
lea ecx, [ebp - 0x30cc]
push ecx
lea ecx, [ebp - 0x2d68]
call fcn.00437020
mov edx, dword [0x4b83f8]
mov dword [ebp - 0x33bc], edx
mov eax, dword [ebp - 0x33bc]
mov dword [ebp - 0x33b4], eax
mov ecx, dword [ebp - 0x33b4]
mov dword [ebp - 0x33c0], ecx
mov edx, dword [ebp - 0x2d74]
imul edx, edx, 0x18
add edx, dword [ebp - 0x33c0]
mov dword [ebp - 0x33c0], edx
mov eax, dword [ebp - 0x33c0]
mov dword [ebp - 0x33b8], eax
mov ecx, dword [0x4b83f8]
mov dword [ebp - 0x33cc], ecx
mov edx, dword [ebp - 0x33cc]
mov dword [ebp - 0x33c4], edx
mov eax, dword [ebp - 0x33c4]
mov dword [ebp - 0x33d0], eax
mov ecx, dword [ebp - 0x2d74]
imul ecx, ecx, 0x18
add ecx, dword [ebp - 0x33d0]
mov dword [ebp - 0x33d0], ecx
mov edx, dword [ebp - 0x33d0]
mov dword [ebp - 0x33c8], edx
mov eax, dword [ebp - 0x33b8]
mov ecx, dword [ebp - 0x33c8]
mov edx, dword [eax + 8]
sub edx, dword [ecx]
mov eax, dword [eax + 0xc]
sbb eax, dword [ecx + 4]
mov eax, edx
xor edx, edx
mov ecx, 0x3c
div ecx
mov dword [ebp - 0x30d0], eax
lea edx, [ebp - 0x30d0]
push edx
lea ecx, [ebp - 0x2d58]
call fcn.004361b0
lea eax, [ebp - 0x2d74]
push eax
lea ecx, [ebp - 0x58]
call fcn.004361b0
jmp 0x43144c
mov ecx, dword [0x4b83f0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x2d8c], 0
jmp 0x431af9
mov edx, dword [ebp - 0x2d8c]
add edx, 1
mov dword [ebp - 0x2d8c], edx
cmp dword [ebp - 0x2d64], 0
jne 0x431b0e
mov dword [ebp - 0x3b90], 0
jmp 0x431b23
mov eax, dword [ebp - 0x2d60]
sub eax, dword [ebp - 0x2d64]
sar eax, 5
mov dword [ebp - 0x3b90], eax
mov ecx, dword [ebp - 0x2d8c]
cmp ecx, dword [ebp - 0x3b90]
jae 0x431e49
mov edx, dword [ebp - 0x2d64]
mov dword [ebp - 0x33fc], edx
mov eax, dword [ebp - 0x33fc]
mov dword [ebp - 0x33f4], eax
mov ecx, dword [ebp - 0x33f4]
mov dword [ebp - 0x3400], ecx
mov edx, dword [ebp - 0x2d8c]
shl edx, 5
add edx, dword [ebp - 0x3400]
mov dword [ebp - 0x3400], edx
mov eax, dword [ebp - 0x3400]
mov dword [ebp - 0x33f8], eax
mov ecx, dword [ebp - 0x33f8]
push ecx
call fcn.0048dbb8
add esp, 4
mov dword [ebp - 0x2dc4], eax
mov edx, dword [ebp - 0x2dc4]
cmp dword [edx + 8], 4
jge 0x431c26
mov eax, dword [ebp - 0x2d64]
mov dword [ebp - 0x340c], eax
mov ecx, dword [ebp - 0x340c]
mov dword [ebp - 0x3404], ecx
mov edx, dword [ebp - 0x3404]
mov dword [ebp - 0x3410], edx
mov eax, dword [ebp - 0x2d8c]
shl eax, 5
add eax, dword [ebp - 0x3410]
mov dword [ebp - 0x3410], eax
mov ecx, dword [ebp - 0x3410]
mov dword [ebp - 0x3408], ecx
mov edx, dword [ebp - 0x3408]
mov dword [ebp - 0x3b94], edx
mov eax, dword [ebp - 0x2dc4]
mov ecx, 4
sub ecx, dword [eax + 8]
mov eax, 0x18
sub eax, ecx
imul eax, eax, 0x3c
imul eax, eax, 0x3c
cdq
mov ecx, dword [ebp - 0x3b94]
mov esi, dword [ecx]
sub esi, eax
mov eax, dword [ecx + 4]
sbb eax, edx
mov ecx, dword [ebp - 0x3b94]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2d64]
mov dword [ebp - 0x341c], edx
mov eax, dword [ebp - 0x341c]
mov dword [ebp - 0x3414], eax
mov ecx, dword [ebp - 0x3414]
mov dword [ebp - 0x3420], ecx
mov edx, dword [ebp - 0x2d8c]
shl edx, 5
add edx, dword [ebp - 0x3420]
mov dword [ebp - 0x3420], edx
mov eax, dword [ebp - 0x3420]
mov dword [ebp - 0x3418], eax
mov ecx, dword [ebp - 0x3418]
push ecx
call fcn.0048dbb8
add esp, 4
push eax
push str._Y__m__d
push 0x32
lea edx, [ebp - 0x2dc0]
push edx
call fcn.0048ea08
add esp, 0x10
mov eax, dword [ebp - 0x2d64]
mov dword [ebp - 0x342c], eax
mov ecx, dword [ebp - 0x342c]
mov dword [ebp - 0x3424], ecx
mov edx, dword [ebp - 0x3424]
mov dword [ebp - 0x3430], edx
mov eax, dword [ebp - 0x2d8c]
shl eax, 5
add eax, dword [ebp - 0x3430]
mov dword [ebp - 0x3430], eax
mov ecx, dword [ebp - 0x3430]
mov dword [ebp - 0x3428], ecx
mov edx, dword [ebp - 0x3428]
add edx, 8
push edx
call fcn.0048dbb8
add esp, 4
push eax
push str.__H:_M
push 0x32
lea eax, [ebp - 0x2df8]
push eax
call fcn.0048ea08
add esp, 0x10
mov ecx, dword [ebp - 0x2d64]
mov dword [ebp - 0x343c], ecx
mov edx, dword [ebp - 0x343c]
mov dword [ebp - 0x3434], edx
mov eax, dword [ebp - 0x3434]
mov dword [ebp - 0x3440], eax
mov ecx, dword [ebp - 0x2d8c]
shl ecx, 5
add ecx, dword [ebp - 0x3440]
mov dword [ebp - 0x3440], ecx
mov edx, dword [ebp - 0x3440]
mov dword [ebp - 0x3438], edx
mov eax, dword [ebp - 0x3438]
add eax, 0x10
push eax
call fcn.0048dbb8
add esp, 4
push eax
push str._H:_M
push 0x32
lea ecx, [ebp - 0x2e2c]
push ecx
call fcn.0048ea08
add esp, 0x10
lea edx, [ebp - 0x114]
test edx, edx
je 0x431d85
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x3b98], eax
jmp 0x431d8f
mov dword [ebp - 0x3b98], 0
mov ecx, dword [ebp - 0x2d54]
mov dword [ebp - 0x344c], ecx
mov edx, dword [ebp - 0x344c]
mov dword [ebp - 0x3444], edx
mov eax, dword [ebp - 0x3444]
mov dword [ebp - 0x3450], eax
mov ecx, dword [ebp - 0x2d8c]
mov edx, dword [ebp - 0x3450]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x3450], eax
mov ecx, dword [ebp - 0x3450]
mov dword [ebp - 0x3448], ecx
push 0x4a2cf8
lea edx, [ebp - 0x2e2c]
push edx
push 0x4a2cf4
lea eax, [ebp - 0x2df8]
push eax
mov ecx, dword [ebp - 0x3448]
mov edx, dword [ecx]
push edx
lea eax, [ebp - 0x2dc0]
push eax
push 0x4a2cf0
mov ecx, dword [ebp - 0x3b98]
push ecx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c030
add esp, 8
mov ecx, eax
call fcn.004355c0
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c030
add esp, 8
jmp 0x431aea
push 0xffffffffffffffff
mov edx, dword [0x4b83e0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x4b83e8]
mov dword [ebp - 0x3454], eax
mov ecx, dword [ebp - 0x3454]
mov edx, dword [ecx]
mov dword [ebp - 0x3458], edx
mov eax, dword [ebp - 0x3458]
mov dword [ebp - 0x2e30], eax
jmp 0x431ea2
mov ecx, dword [ebp - 0x2e30]
mov dword [ebp - 0x345c], ecx
lea ecx, [ebp - 0x2e30]
call fcn.0043bdf0
mov edx, dword [ebp - 0x345c]
mov dword [ebp - 0x30d4], edx
mov eax, dword [0x4b83e8]
mov dword [ebp - 0x3460], eax
mov ecx, dword [ebp - 0x3460]
mov dword [ebp - 0x30d8], ecx
mov edx, dword [ebp - 0x2e30]
sub edx, dword [ebp - 0x30d8]
neg edx
sbb edx, edx
inc edx
movzx eax, dl
neg eax
sbb eax, eax
inc eax
movzx ecx, al
test ecx, ecx
je 0x432068
lea edx, [ebp - 0x114]
test edx, edx
je 0x431ef5
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x3b9c], eax
jmp 0x431eff
mov dword [ebp - 0x3b9c], 0
push 0x4a2cec
mov ecx, dword [ebp - 0x2e30]
add ecx, 0x28
push ecx
push 0x4a2d34
mov edx, dword [ebp - 0x2e30]
add edx, 0xc
push edx
push str.____
mov eax, dword [ebp - 0x3b9c]
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
mov ecx, dword [ebp - 0x2e30]
mov edx, dword [ecx + 0x48]
mov dword [ebp - 0x3464], edx
mov eax, dword [ebp - 0x3464]
mov dword [ebp - 0x2e34], eax
jmp 0x431f99
mov ecx, dword [ebp - 0x2e34]
mov dword [ebp - 0x3468], ecx
mov edx, dword [ebp - 0x2e34]
add edx, 0x1c
mov dword [ebp - 0x2e34], edx
mov eax, dword [ebp - 0x3468]
mov dword [ebp - 0x30dc], eax
mov ecx, dword [ebp - 0x2e30]
mov edx, dword [ecx + 0x4c]
mov dword [ebp - 0x346c], edx
mov eax, dword [ebp - 0x346c]
mov dword [ebp - 0x30e0], eax
mov ecx, dword [ebp - 0x2e34]
sub ecx, dword [ebp - 0x30e0]
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
neg edx
sbb edx, edx
inc edx
movzx eax, dl
test eax, eax
je 0x43202d
lea ecx, [ebp - 0x114]
test ecx, ecx
je 0x431fec
lea edx, [ebp - 0x10c]
mov dword [ebp - 0x3ba0], edx
jmp 0x431ff6
mov dword [ebp - 0x3ba0], 0
push 0x4a2cec
mov eax, dword [ebp - 0x2e34]
push eax
push 0x4a2610
mov ecx, dword [ebp - 0x3ba0]
push ecx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
jmp 0x431f72
lea edx, [ebp - 0x114]
test edx, edx
je 0x432045
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x3ba4], eax
jmp 0x43204f
mov dword [ebp - 0x3ba4], 0
push 0x4a2ce0
mov ecx, dword [ebp - 0x3ba4]
push ecx
call fcn.0043c030
add esp, 8
jmp 0x431e7f
mov edx, dword [0x4b83e0]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov eax, dword [0x4b8418]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x4b8420]
mov dword [ebp - 0x3470], ecx
mov edx, dword [ebp - 0x3470]
mov dword [ebp - 0x2e38], edx
jmp 0x4320c4
mov eax, dword [ebp - 0x2e38]
mov dword [ebp - 0x3474], eax
mov ecx, dword [ebp - 0x2e38]
add ecx, 0x70
mov dword [ebp - 0x2e38], ecx
mov edx, dword [ebp - 0x3474]
mov dword [ebp - 0x30e4], edx
mov eax, dword [0x4b8424]
mov dword [ebp - 0x3478], eax
mov ecx, dword [ebp - 0x3478]
mov dword [ebp - 0x30e8], ecx
mov edx, dword [ebp - 0x2e38]
sub edx, dword [ebp - 0x30e8]
neg edx
sbb edx, edx
inc edx
movzx eax, dl
neg eax
sbb eax, eax
inc eax
movzx ecx, al
test ecx, ecx
je 0x4321bb
lea edx, [ebp - 0x114]
test edx, edx
je 0x432117
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x3ba8], eax
jmp 0x432121
mov dword [ebp - 0x3ba8], 0
push 0x4a2cd8
mov ecx, dword [ebp - 0x2e38]
add ecx, 0x54
push ecx
push 0x4a2d34
mov edx, dword [ebp - 0x2e38]
add edx, 0x1c
push edx
push 0x4a2d34
mov eax, dword [ebp - 0x2e38]
push eax
push 0x4a2d34
mov ecx, dword [ebp - 0x2e38]
add ecx, 0x38
push ecx
push 0x4a2cd0
mov edx, dword [ebp - 0x3ba8]
push edx
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
push eax
call fcn.0043c3b0
add esp, 8
push eax
call fcn.0043c030
add esp, 8
jmp 0x43209d
mov eax, dword [0x4b8418]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2d58]
call fcn.0041b9a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2d68]
call fcn.00438870
lea ecx, [ebp - 0x114]
test ecx, ecx
je 0x4321fd
lea edx, [ebp - 0x10c]
mov dword [ebp - 0x3bac], edx
jmp 0x432207
mov dword [ebp - 0x3bac], 0
push 0x4a27f0
mov eax, dword [ebp - 0x3bac]
push eax
call fcn.0043c030
add esp, 8
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x114]
call fcn.00436410
mov byte [ebp - 4], 9
cmp dword [ebp - 0x74], 0x10
jb 0x432245
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x347c], edx
jmp 0x432251
lea eax, [ebp - 0x88]
mov dword [ebp - 0x347c], eax
mov ecx, dword [ebp - 0x347c]
mov dword [ebp - 0x30ec], ecx
cmp dword [ebp - 0x74], 0x10
jb 0x432271
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x3bb0], edx
jmp 0x43227d
lea eax, [ebp - 0x88]
mov dword [ebp - 0x3bb0], eax
mov ecx, dword [ebp - 0x3bb0]
add ecx, dword [ebp - 0x78]
mov dword [ebp - 0x3480], ecx
mov edx, dword [ebp - 0x3480]
mov dword [ebp - 0x30f0], edx
cmp dword [ebp - 0x74], 0x10
jb 0x4322ac
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x3484], eax
jmp 0x4322b8
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x3484], ecx
mov edx, dword [ebp - 0x3484]
mov dword [ebp - 0x30f4], edx
mov eax, dword [ebp - 0x30ec]
mov dword [ebp - 0x348c], eax
mov ecx, dword [ebp - 0x30f0]
mov dword [ebp - 0x3490], ecx
mov edx, dword [ebp - 0x30f4]
mov dword [ebp - 0x3494], edx
jmp 0x432308
mov eax, dword [ebp - 0x3494]
add eax, 1
mov dword [ebp - 0x3494], eax
mov ecx, dword [ebp - 0x348c]
add ecx, 1
mov dword [ebp - 0x348c], ecx
mov edx, dword [ebp - 0x3494]
sub edx, dword [ebp - 0x3490]
neg edx
sbb edx, edx
inc edx
movzx eax, dl
neg eax
sbb eax, eax
inc eax
movzx ecx, al
test ecx, ecx
je 0x43234f
mov edx, dword [ebp - 0x348c]
mov dword [ebp - 0x3488], edx
mov eax, dword [ebp - 0x3494]
mov cl, byte [eax]
push ecx
call fcn.0044ce60
add esp, 4
mov edx, dword [ebp - 0x3488]
mov byte [edx], al
jmp 0x4322ea
mov eax, dword [ebp - 0x348c]
mov dword [ebp - 0x30f8], eax
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x3498], ecx
cmp dword [ebp - 0x74], 0x10
jb 0x432378
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x3bb4], edx
jmp 0x432384
lea eax, [ebp - 0x88]
mov dword [ebp - 0x3bb4], eax
mov ecx, dword [ebp - 0x3498]
push ecx
mov edx, dword [ebp - 0x3bb4]
push edx
push 0
push 0
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.WININET.dll_HttpSendRequestA]
cmp eax, 1
jne 0x4333bf
mov dword [ebp - 0x2e3c], 0x400
push 0
lea ecx, [ebp - 0x2e3c]
push ecx
lea edx, [ebp - 0x2d34]
push edx
push 0x16
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
lea ecx, [ebp - 0x2934]
push ecx
mov edx, dword [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
call fcn.0044cf60
add esp, 0xc
mov dword [ebp - 0x2e3c], 0x400
push str.g_UID
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0048e090
add esp, 8
push 0
lea edx, [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
push 0xffff
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x4333a9
lea edx, [ebp - 0x2934]
push edx
mov eax, dword [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0044cf60
add esp, 0xc
xor edx, edx
cmp dword [0x4b8510], 0
sete dl
mov byte [ebp - 0x2e3d], dl
mov eax, dword [ebp - 0x2e3c]
mov dword [ebp - 0x34a4], eax
push 0
push 0
lea ecx, [ebp - 0x3114]
call fcn.004236e0
mov ecx, dword [ebp - 0x34a4]
push ecx
lea edx, [ebp - 0x2934]
push edx
lea ecx, [ebp - 0x3114]
call fcn.004241c0
lea eax, [ebp - 0x3114]
mov dword [ebp - 0x34a8], eax
mov byte [ebp - 4], 0xa
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x34a8]
push ecx
mov ecx, 0x4b84fc
call fcn.00423530
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x3114]
call fcn.004236e0
call fcn.0046ad90
mov dword [ebp - 0x2e3c], 0x400
push str.g_RenameClient
lea edx, [ebp - 0x2d34]
push edx
call fcn.0048e090
add esp, 8
push 0
lea eax, [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
push 0xffff
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x432970
lea eax, [ebp - 0x2d34]
push eax
call fcn.0048bc60
add esp, 4
test eax, eax
je 0x432970
push 0
push 0
lea ecx, [ebp - 0x2e5c]
call fcn.004236e0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2e3c]
mov dword [ebp - 0x34b4], ecx
mov edx, dword [ebp - 0x34b4]
cmp edx, dword [ebp - 0x2e48]
ja 0x432572
push 0xffffffffffffffff
mov eax, dword [ebp - 0x34b4]
push eax
lea ecx, [ebp - 0x2e5c]
call fcn.004242d0
jmp 0x43258c
push 0
mov ecx, dword [ebp - 0x34b4]
sub ecx, dword [ebp - 0x2e48]
push ecx
lea ecx, [ebp - 0x2e5c]
call fcn.00419840
cmp dword [ebp - 0x2e44], 0x10
jb 0x4325a3
mov edx, dword [ebp - 0x2e58]
mov dword [ebp - 0x34b8], edx
jmp 0x4325af
lea eax, [ebp - 0x2e58]
mov dword [ebp - 0x34b8], eax
mov ecx, dword [ebp - 0x34b8]
mov dword [ebp - 0x3118], ecx
mov edx, dword [ebp - 0x3118]
mov dword [ebp - 0x34c0], edx
mov eax, dword [ebp - 0x2e3c]
lea ecx, [ebp + eax - 0x2d34]
mov dword [ebp - 0x34c4], ecx
lea edx, [ebp - 0x2d34]
mov dword [ebp - 0x34c8], edx
jmp 0x432606
mov eax, dword [ebp - 0x34c8]
add eax, 1
mov dword [ebp - 0x34c8], eax
mov ecx, dword [ebp - 0x34c0]
add ecx, 1
mov dword [ebp - 0x34c0], ecx
mov edx, dword [ebp - 0x34c8]
cmp edx, dword [ebp - 0x34c4]
je 0x43263b
mov eax, dword [ebp - 0x34c0]
mov dword [ebp - 0x34bc], eax
mov ecx, dword [ebp - 0x34c8]
mov dl, byte [ecx]
push edx
call fcn.0044cf90
add esp, 4
mov ecx, dword [ebp - 0x34bc]
mov byte [ecx], al
jmp 0x4325e8
mov edx, dword [ebp - 0x34c0]
mov dword [ebp - 0x311c], edx
push str..exe
call fcn.0048bc60
add esp, 4
push eax
push str..exe
lea ecx, [ebp - 0x2e5c]
call fcn.0041c910
push 0
push 0
lea ecx, [ebp - 0x2e78]
call fcn.004236e0
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x2e64], 0x104
jb 0x432698
push 0xffffffffffffffff
push 0x104
lea ecx, [ebp - 0x2e78]
call fcn.004242d0
jmp 0x4326b1
push 0
mov eax, 0x104
sub eax, dword [ebp - 0x2e64]
push eax
lea ecx, [ebp - 0x2e78]
call fcn.00419840
cmp dword [ebp - 0x2e60], 0x10
jb 0x4326c8
mov ecx, dword [ebp - 0x2e74]
mov dword [ebp - 0x34d4], ecx
jmp 0x4326d4
lea edx, [ebp - 0x2e74]
mov dword [ebp - 0x34d4], edx
mov eax, dword [ebp - 0x34d4]
mov dword [ebp - 0x3120], eax
push 0x104
mov ecx, dword [ebp - 0x3120]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
push 0
lea ecx, [ebp - 0x2e98]
call fcn.004236e0
mov edx, dword [0x4a2ac8]
push edx
push 0
lea eax, [ebp - 0x2e78]
push eax
lea ecx, [ebp - 0x2e98]
call fcn.00423530
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x34da], 0x5c
push 1
push 0xffffffffffffffff
lea ecx, [ebp - 0x34da]
push ecx
lea ecx, [ebp - 0x2e98]
call fcn.00419ba0
mov dword [ebp - 0x2e7c], eax
cmp dword [ebp - 0x2e7c], 0xffffffff
je 0x432937
lea edx, [ebp - 0x2fa4]
push edx
call fcn.00433730
add esp, 4
lea eax, [ebp - 0x2fa4]
push eax
call fcn.00433780
add esp, 4
cmp dword [ebp - 0x2e44], 0x10
jb 0x432787
mov ecx, dword [ebp - 0x2e58]
mov dword [ebp - 0x3bb8], ecx
jmp 0x432793
lea edx, [ebp - 0x2e58]
mov dword [ebp - 0x3bb8], edx
cmp dword [ebp - 0x2e80], 0x10
jb 0x4327aa
mov eax, dword [ebp - 0x2e94]
mov dword [ebp - 0x3800], eax
jmp 0x4327b6
lea ecx, [ebp - 0x2e94]
mov dword [ebp - 0x3800], ecx
mov edx, dword [ebp - 0x3800]
mov dword [ebp - 0x3124], edx
mov eax, dword [ebp - 0x3124]
mov dword [ebp - 0x3804], eax
mov ecx, dword [ebp - 0x3804]
add ecx, dword [ebp - 0x2e7c]
mov dword [ebp - 0x3804], ecx
mov edx, dword [ebp - 0x3804]
mov dword [ebp - 0x3128], edx
mov eax, dword [ebp - 0x3128]
mov dword [ebp - 0x3808], eax
mov ecx, dword [ebp - 0x3808]
add ecx, 1
mov dword [ebp - 0x3808], ecx
mov edx, dword [ebp - 0x3808]
mov dword [ebp - 0x312c], edx
mov eax, dword [ebp - 0x3bb8]
push eax
mov ecx, dword [ebp - 0x312c]
push ecx
call fcn.0048e090
add esp, 8
cmp dword [ebp - 0x2e80], 0x10
jb 0x432840
mov edx, dword [ebp - 0x2e94]
mov dword [ebp - 0x3bbc], edx
jmp 0x43284c
lea eax, [ebp - 0x2e94]
mov dword [ebp - 0x3bbc], eax
cmp dword [ebp - 0x2e60], 0x10
jb 0x432863
mov ecx, dword [ebp - 0x2e74]
mov dword [ebp - 0x3bc0], ecx
jmp 0x43286f
lea edx, [ebp - 0x2e74]
mov dword [ebp - 0x3bc0], edx
mov eax, dword [ebp - 0x3bbc]
push eax
mov ecx, dword [ebp - 0x3bc0]
push ecx
call fcn.0049a8c5
add esp, 8
test eax, eax
je 0x432937
cmp dword [ebp - 0x2e80], 0x10
jb 0x4328a4
mov edx, dword [ebp - 0x2e94]
mov dword [ebp - 0x3bc4], edx
jmp 0x4328b0
lea eax, [ebp - 0x2e94]
mov dword [ebp - 0x3bc4], eax
cmp dword [ebp - 0x2e60], 0x10
jb 0x4328c7
mov ecx, dword [ebp - 0x2e74]
mov dword [ebp - 0x3bc8], ecx
jmp 0x4328d3
lea edx, [ebp - 0x2e74]
mov dword [ebp - 0x3bc8], edx
push 0
mov eax, dword [ebp - 0x3bc4]
push eax
mov ecx, dword [ebp - 0x3bc8]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x432937
mov edx, dword [0x4b6670]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2e80], 0x10
jb 0x432911
mov eax, dword [ebp - 0x2e94]
mov dword [ebp - 0x3bcc], eax
jmp 0x43291d
lea ecx, [ebp - 0x2e94]
mov dword [ebp - 0x3bcc], ecx
push 0
push 0
push 0
mov edx, dword [ebp - 0x3bcc]
push edx
push 0x4a2cb0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x2e98]
call fcn.004236e0
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x2e78]
call fcn.004236e0
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x2e5c]
call fcn.004236e0
mov dword [ebp - 0x2e3c], 0x400
push str.g_Upgrade
lea eax, [ebp - 0x2d34]
push eax
call fcn.0048e090
add esp, 8
push 0
lea ecx, [ebp - 0x2e3c]
push ecx
lea edx, [ebp - 0x2d34]
push edx
push 0xffff
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x432d0e
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0048bc60
add esp, 4
test eax, eax
je 0x432d0e
lea edx, [ebp - 0x2934]
push edx
mov eax, dword [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0044cf60
add esp, 0xc
mov edx, dword [ebp - 0x2e3c]
mov dword [ebp - 0x3814], edx
push 0
push 0
lea ecx, [ebp - 0x2fdc]
call fcn.004236e0
mov eax, dword [ebp - 0x3814]
push eax
lea ecx, [ebp - 0x2934]
push ecx
lea ecx, [ebp - 0x2fdc]
call fcn.004241c0
mov byte [ebp - 4], 0xe
push 0
push 0
lea ecx, [ebp - 0x2fc0]
call fcn.004236e0
mov edx, dword [0x4a2ac8]
push edx
push 0
lea eax, [ebp - 0x2fdc]
push eax
lea ecx, [ebp - 0x2fc0]
call fcn.00423530
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x2fa8], 0x10
jb 0x432a67
mov ecx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3820], ecx
jmp 0x432a73
lea edx, [ebp - 0x2fbc]
mov dword [ebp - 0x3820], edx
mov eax, dword [ebp - 0x3820]
mov dword [ebp - 0x3130], eax
cmp dword [ebp - 0x2fa8], 0x10
jb 0x432a96
mov ecx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3bd0], ecx
jmp 0x432aa2
lea edx, [ebp - 0x2fbc]
mov dword [ebp - 0x3bd0], edx
mov eax, dword [ebp - 0x3bd0]
add eax, dword [ebp - 0x2fac]
mov dword [ebp - 0x3824], eax
mov ecx, dword [ebp - 0x3824]
mov dword [ebp - 0x3134], ecx
cmp dword [ebp - 0x2fa8], 0x10
jb 0x432ad7
mov edx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3828], edx
jmp 0x432ae3
lea eax, [ebp - 0x2fbc]
mov dword [ebp - 0x3828], eax
mov ecx, dword [ebp - 0x3828]
mov dword [ebp - 0x3138], ecx
mov edx, dword [ebp - 0x3130]
mov dword [ebp - 0x3830], edx
mov eax, dword [ebp - 0x3134]
mov dword [ebp - 0x3834], eax
mov ecx, dword [ebp - 0x3138]
mov dword [ebp - 0x3838], ecx
jmp 0x432b33
mov edx, dword [ebp - 0x3838]
add edx, 1
mov dword [ebp - 0x3838], edx
mov eax, dword [ebp - 0x3830]
add eax, 1
mov dword [ebp - 0x3830], eax
mov ecx, dword [ebp - 0x3838]
sub ecx, dword [ebp - 0x3834]
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
neg edx
sbb edx, edx
inc edx
movzx eax, dl
test eax, eax
je 0x432b7b
mov ecx, dword [ebp - 0x3830]
mov dword [ebp - 0x382c], ecx
mov edx, dword [ebp - 0x3838]
movsx eax, byte [edx]
push eax
call fcn.0048c48e
add esp, 4
mov ecx, dword [ebp - 0x382c]
mov byte [ecx], al
jmp 0x432b15
mov edx, dword [ebp - 0x3830]
mov dword [ebp - 0x313c], edx
cmp dword [ebp - 0x2fa8], 0x10
jb 0x432b9e
mov eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3bd4], eax
jmp 0x432baa
lea ecx, [ebp - 0x2fbc]
mov dword [ebp - 0x3bd4], ecx
push str.crc
mov edx, dword [ebp - 0x3bd4]
push edx
call fcn.0048c340
add esp, 8
mov dword [ebp - 0x2fe4], eax
mov dword [ebp - 0x2fe0], 0xffffffff
cmp dword [ebp - 0x2fe4], 0
je 0x432c0c
cmp dword [ebp - 0x2fa8], 0x10
jb 0x432bee
mov eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3bd8], eax
jmp 0x432bfa
lea ecx, [ebp - 0x2fbc]
mov dword [ebp - 0x3bd8], ecx
mov edx, dword [ebp - 0x2fe4]
sub edx, dword [ebp - 0x3bd8]
mov dword [ebp - 0x2fe0], edx
cmp dword [ebp - 0x2fe0], 0xffffffff
je 0x432ce8
push 0xffffffffffffffff
mov eax, dword [0x4b8474]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x2fe0]
push ecx
push 0
lea edx, [ebp - 0x3158]
push edx
lea ecx, [ebp - 0x2fdc]
call fcn.00416b20
mov dword [ebp - 0x3bdc], eax
mov eax, dword [ebp - 0x3bdc]
mov dword [ebp - 0x383c], eax
mov byte [ebp - 4], 0x10
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x383c]
push ecx
mov ecx, 0x4b8478
call fcn.00423530
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x3158]
call fcn.004236e0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2fe0]
add edx, 5
push edx
lea eax, [ebp - 0x3174]
push eax
lea ecx, [ebp - 0x2fdc]
call fcn.00416b20
mov dword [ebp - 0x3be0], eax
mov ecx, dword [ebp - 0x3be0]
mov dword [ebp - 0x3840], ecx
mov byte [ebp - 4], 0x11
push 0xffffffffffffffff
push 0
mov edx, dword [ebp - 0x3840]
push edx
mov ecx, 0x4b8494
call fcn.00423530
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x3174]
call fcn.004236e0
mov eax, dword [0x4b8474]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x2fc0]
call fcn.004236e0
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x2fdc]
call fcn.004236e0
mov dword [ebp - 0x2e3c], 0x400
push str.g_ServerIPs
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0048e090
add esp, 8
push 0
lea edx, [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
push 0xffff
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x432f27
lea edx, [ebp - 0x2d34]
push edx
call fcn.0048bc60
add esp, 4
test eax, eax
je 0x432f27
lea eax, [ebp - 0x2934]
push eax
mov ecx, dword [ebp - 0x2e3c]
push ecx
lea edx, [ebp - 0x2d34]
push edx
call fcn.0044cf60
add esp, 0xc
mov eax, dword [ebp - 0x2e3c]
mov dword [ebp - 0x385c], eax
push 0
push 0
lea ecx, [ebp - 0x3000]
call fcn.004236e0
mov ecx, dword [ebp - 0x385c]
push ecx
lea edx, [ebp - 0x2934]
push edx
lea ecx, [ebp - 0x3000]
call fcn.004241c0
mov byte [ebp - 4], 0x12
mov eax, dword [0x4b6598]
mov dword [ebp - 0x3860], eax
mov ecx, dword [ebp - 0x3860]
mov dword [ebp - 0x3178], ecx
mov edx, dword [0x4b6594]
mov dword [ebp - 0x3864], edx
mov eax, dword [ebp - 0x3864]
mov dword [ebp - 0x317c], eax
mov ecx, dword [ebp - 0x3178]
push ecx
mov edx, dword [ebp - 0x317c]
push edx
lea eax, [ebp - 0x3180]
push eax
mov ecx, 0x4b6590
call fcn.00435930
push 0x4b6590
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3184], esp
mov dword [ebp - 0x38ac], ecx
push 0
push 0
mov ecx, dword [ebp - 0x38ac]
call fcn.004236e0
mov edx, dword [0x4a2ac8]
push edx
push 0
lea eax, [ebp - 0x3000]
push eax
mov ecx, dword [ebp - 0x38ac]
call fcn.00423530
mov ecx, dword [ebp - 0x38ac]
mov dword [ebp - 0x3be4], ecx
call fcn.00433850
add esp, 0x20
mov dword [ebp - 0x3004], 0
jmp 0x432e7d
mov edx, dword [ebp - 0x3004]
add edx, 1
mov dword [ebp - 0x3004], edx
cmp dword [0x4b84d4], 0
jne 0x432e92
mov dword [ebp - 0x3be8], 0
jmp 0x432ea6
mov eax, dword [0x4b84d8]
sub eax, dword [0x4b84d4]
sar eax, 5
mov dword [ebp - 0x3be8], eax
mov ecx, dword [ebp - 0x3004]
cmp ecx, dword [ebp - 0x3be8]
jae 0x432f0f
mov edx, dword [0x4b84d4]
mov dword [ebp - 0x39cc], edx
mov eax, dword [ebp - 0x39cc]
mov dword [ebp - 0x39c4], eax
mov ecx, dword [ebp - 0x39c4]
mov dword [ebp - 0x39d0], ecx
mov edx, dword [ebp - 0x3004]
shl edx, 5
add edx, dword [ebp - 0x39d0]
mov dword [ebp - 0x39d0], edx
mov eax, dword [ebp - 0x39d0]
mov dword [ebp - 0x39c8], eax
mov ecx, dword [ebp - 0x39c8]
push ecx
mov ecx, 0x4b6590
call fcn.00435860
jmp 0x432e6e
call fcn.0046ccd0
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x3000]
call fcn.004236e0
push 0xffffffffffffffff
mov edx, dword [0x4b842c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x60]
push eax
call fcn.0042f8f0
add esp, 4
mov ecx, dword [0x4b842c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x2e3c], 0x400
push 0
lea edx, [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
push 0x21
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x4333a7
lea edx, [ebp - 0x2934]
push edx
mov eax, dword [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0044cf60
add esp, 0xc
mov edx, dword [ebp - 0x2e3c]
mov dword [ebp - 0x3a08], edx
push 0
push 0
lea ecx, [ebp - 0x31a0]
call fcn.004236e0
mov eax, dword [ebp - 0x3a08]
push eax
lea ecx, [ebp - 0x2934]
push ecx
lea ecx, [ebp - 0x31a0]
call fcn.004241c0
lea edx, [ebp - 0x31a0]
mov dword [ebp - 0x3a0c], edx
mov byte [ebp - 4], 0x13
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x3a0c]
push eax
lea ecx, [ebp - 0x48]
call fcn.00423530
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x31a0]
call fcn.004236e0
mov dword [ebp - 0x300c], 0xa
mov dword [ebp - 0x2e3c], 0x400
push str.g_PopupPerDay
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0048e090
add esp, 8
push 0
lea edx, [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
push 0xffff
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x433111
lea edx, [ebp - 0x2934]
push edx
mov eax, dword [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
call fcn.0044cf60
add esp, 0xc
mov edx, dword [ebp - 0x2e3c]
mov dword [ebp - 0x3a1c], edx
push 0
push 0
lea ecx, [ebp - 0x302c]
call fcn.004236e0
mov eax, dword [ebp - 0x3a1c]
push eax
lea ecx, [ebp - 0x2934]
push ecx
lea ecx, [ebp - 0x302c]
call fcn.004241c0
cmp dword [ebp - 0x3014], 0x10
jb 0x4330bd
mov edx, dword [ebp - 0x3028]
mov dword [ebp - 0x3bec], edx
jmp 0x4330c9
lea eax, [ebp - 0x3028]
mov dword [ebp - 0x3bec], eax
mov ecx, dword [ebp - 0x3bec]
push ecx
call fcn.0048bd73
add esp, 4
mov dword [ebp - 0x300c], eax
cmp dword [ebp - 0x300c], 0
jg 0x4330f1
mov dword [ebp - 0x300c], 0
mov edx, dword [0x4b83c0]
mov eax, dword [ebp - 0x300c]
mov dword [edx + 0x2c], eax
push 0
push 1
lea ecx, [ebp - 0x302c]
call fcn.004236e0
jmp 0x433131
xor ecx, ecx
je 0x433127
push str.Invalid_server_response:_PopupsPerDay_field_is_missing._Assuming_240_n
push 0x4a292c
call fcn.0048e023
add esp, 8
mov dword [ebp - 0x300c], 0
mov edx, dword [ebp - 0x300c]
mov dword [ebp - 0x3008], edx
mov dword [ebp - 0x2e3c], 0x400
push str.g_ConnectionPerDay
lea eax, [ebp - 0x2d34]
push eax
call fcn.0048e090
add esp, 8
push 0
lea ecx, [ebp - 0x2e3c]
push ecx
lea edx, [ebp - 0x2d34]
push edx
push 0xffff
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x433230
lea ecx, [ebp - 0x2934]
push ecx
mov edx, dword [ebp - 0x2e3c]
push edx
lea eax, [ebp - 0x2d34]
push eax
call fcn.0044cf60
add esp, 0xc
mov ecx, dword [ebp - 0x2e3c]
mov dword [ebp - 0x3a2c], ecx
push 0
push 0
lea ecx, [ebp - 0x3048]
call fcn.004236e0
mov edx, dword [ebp - 0x3a2c]
push edx
lea eax, [ebp - 0x2934]
push eax
lea ecx, [ebp - 0x3048]
call fcn.004241c0
cmp dword [ebp - 0x3030], 0x10
jb 0x4331eb
mov ecx, dword [ebp - 0x3044]
mov dword [ebp - 0x3bf0], ecx
jmp 0x4331f7
lea edx, [ebp - 0x3044]
mov dword [ebp - 0x3bf0], edx
mov eax, dword [ebp - 0x3bf0]
push eax
call fcn.0048bd73
add esp, 4
mov dword [ebp - 0x3008], eax
cmp dword [ebp - 0x3008], 0
jg 0x433221
mov ecx, dword [ebp - 0x300c]
mov dword [ebp - 0x3008], ecx
push 0
push 1
lea ecx, [ebp - 0x3048]
call fcn.004236e0
mov dword [ebp - 0x3010], 1
mov dword [ebp - 0x2e3c], 0x400
push str.g_StatisticsUploadDelay
lea edx, [ebp - 0x2d34]
push edx
call fcn.0048e090
add esp, 8
push 0
lea eax, [ebp - 0x2e3c]
push eax
lea ecx, [ebp - 0x2d34]
push ecx
push 0xffff
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x433318
lea eax, [ebp - 0x2934]
push eax
mov ecx, dword [ebp - 0x2e3c]
push ecx
lea edx, [ebp - 0x2d34]
push edx
call fcn.0044cf60
add esp, 0xc
mov eax, dword [ebp - 0x2e3c]
mov dword [ebp - 0x3a44], eax
push 0
push 0
lea ecx, [ebp - 0x3064]
call fcn.004236e0
mov ecx, dword [ebp - 0x3a44]
push ecx
lea edx, [ebp - 0x2934]
push edx
lea ecx, [ebp - 0x3064]
call fcn.004241c0
cmp dword [ebp - 0x304c], 0x10
jb 0x4332e8
mov eax, dword [ebp - 0x3060]
mov dword [ebp - 0x3bf4], eax
jmp 0x4332f4
lea ecx, [ebp - 0x3060]
mov dword [ebp - 0x3bf4], ecx
mov edx, dword [ebp - 0x3bf4]
push edx
call fcn.0048bd73
add esp, 4
mov dword [ebp - 0x3010], eax
push 0
push 1
lea ecx, [ebp - 0x3064]
call fcn.004236e0
cmp dword [ebp - 0x3010], 0
jne 0x43332b
mov dword [ebp - 0x3010], 1
mov eax, dword [ebp - 0x3010]
cmp eax, dword [ebp - 0x300c]
jle 0x433345
mov ecx, dword [ebp - 0x300c]
mov dword [ebp - 0x3010], ecx
cmp dword [ebp - 0x3008], 0
je 0x433379
mov eax, 0x5265c00
cdq
idiv dword [ebp - 0x3008]
mov edx, dword [0x4b83c0]
mov dword [edx + 0x34], eax
fild dword [ebp - 0x3010]
fidiv dword [ebp - 0x3008]
mov eax, dword [0x4b83c0]
fstp qword [eax + 0x48]
jmp 0x433395
mov ecx, dword [0x4b83c0]
mov dword [ecx + 0x34], 0
mov edx, dword [0x4b83c0]
fld qword [0x4a2d28]
fstp qword [edx + 0x48]
mov ecx, dword [0x4b83c0]
call fcn.0044dfc0
mov dword [ebp - 0x5c], 1
jmp 0x4333bf
xor eax, eax
je 0x4333bf
push str.Invalid_server_response:_client_UID_is_missing_n
push 0x4a292c
call fcn.0048e023
add esp, 8
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x8c]
call fcn.004236e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc0]
call fcn.00436380
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x3a58], edx
mov eax, dword [ebp - 0x3a58]
mov dword [eax], 0x4a2bdc
mov ecx, dword [ebp - 0x3a58]
call fcn.0048a84b
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x130]
call fcn.004236e0
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [0x4b65d0]
add edx, 1
mov dword [0x4b65d0], edx
push 0
call fcn.0048ea23
add esp, 4
mov dword [0x4b65c0], eax
mov dword [0x4b65c4], edx
cmp dword [ebp - 0x5c], 1
jne 0x43347b
push 0
call fcn.0048ea23
add esp, 4
mov dword [0x4b65c8], eax
mov dword [0x4b65cc], edx
push 0
push 0
push 0xd
mov ecx, dword [0x4b8388]
call fcn.0042ff60
call fcn.0046d430
cmp dword [ebp - 0x5c], 0
je 0x4336cf
mov eax, dword [0x4b83c0]
fld qword [eax + 0x50]
fcomp qword [0x4a2d28]
fnstsw ax
test ah, 1
jne 0x4336cf
cmp dword [ebp - 0x54], 0
jne 0x4334b5
mov dword [ebp - 0x3bf8], 0
jmp 0x4334c4
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x54]
sar ecx, 2
mov dword [ebp - 0x3bf8], ecx
mov edx, dword [ebp - 0x3bf8]
sub edx, 1
mov dword [ebp - 0x3068], edx
jmp 0x4334e4
mov eax, dword [ebp - 0x3068]
sub eax, 1
mov dword [ebp - 0x3068], eax
cmp dword [ebp - 0x3068], 0
jl 0x4335a3
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x3a8c], ecx
mov edx, dword [ebp - 0x3a8c]
mov dword [ebp - 0x3a84], edx
mov eax, dword [ebp - 0x3a84]
mov dword [ebp - 0x3a90], eax
mov ecx, dword [ebp - 0x3068]
mov edx, dword [ebp - 0x3a90]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x3a90], eax
mov ecx, dword [ebp - 0x3a90]
mov dword [ebp - 0x3a88], ecx
mov edx, dword [0x4b83f8]
mov dword [ebp - 0x3a94], edx
mov eax, dword [ebp - 0x3a94]
mov dword [ebp - 0x31a4], eax
mov ecx, dword [ebp - 0x3a88]
mov edx, dword [ecx]
mov dword [ebp - 0x3a9c], edx
mov eax, dword [ebp - 0x31a4]
mov dword [ebp - 0x3a98], eax
mov ecx, dword [ebp - 0x3a9c]
imul ecx, ecx, 0x18
add ecx, dword [ebp - 0x3a98]
mov dword [ebp - 0x3a98], ecx
mov edx, dword [ebp - 0x3a98]
mov dword [ebp - 0x31a8], edx
mov eax, dword [ebp - 0x31a8]
push eax
lea ecx, [ebp - 0x31ac]
push ecx
mov ecx, 0x4b83f4
call fcn.00435fe0
jmp 0x4334d5
push 0xffffffffffffffff
mov edx, dword [0x4b8460]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, 0x4b8454
call fcn.00435e50
mov eax, dword [0x4b8460]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov ecx, dword [0x4b8470]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, 0x4b8464
call fcn.00435eb0
mov edx, dword [0x4b8470]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov eax, dword [0x4b83e0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x4b83e8]
mov dword [ebp - 0x3ae0], ecx
mov edx, dword [ebp - 0x3ae0]
mov dword [ebp - 0x31b0], edx
mov eax, dword [0x4b83e8]
mov dword [ebp - 0x3ae4], eax
mov ecx, dword [ebp - 0x3ae4]
mov edx, dword [ecx]
mov dword [ebp - 0x3ae8], edx
mov eax, dword [ebp - 0x3ae8]
mov dword [ebp - 0x31b4], eax
mov ecx, dword [ebp - 0x31b0]
push ecx
mov edx, dword [ebp - 0x31b4]
push edx
lea eax, [ebp - 0x31b8]
push eax
mov ecx, 0x4b83e4
call fcn.00435f10
mov ecx, dword [0x4b83e0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0xffffffffffffffff
mov edx, dword [0x4b8418]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x4b8424]
mov dword [ebp - 0x3b18], eax
mov ecx, dword [ebp - 0x3b18]
mov dword [ebp - 0x31bc], ecx
mov edx, dword [0x4b8420]
mov dword [ebp - 0x3b1c], edx
mov eax, dword [ebp - 0x3b1c]
mov dword [ebp - 0x31c0], eax
mov ecx, dword [ebp - 0x31bc]
push ecx
mov edx, dword [ebp - 0x31c0]
push edx
lea eax, [ebp - 0x31c4]
push eax
mov ecx, 0x4b841c
call fcn.004360c0
mov ecx, dword [0x4b8418]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp dword [0x4b8388], 0
je 0x4336e3
mov ecx, dword [0x4b8388]
call fcn.00433f70
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x31c8], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004191b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00421950
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00421950
mov eax, dword [ebp - 0x31c8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret