Function at 0x415970
Capabilities:
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Create process on windows
Get number of processors
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x55301a
mov eax, dword fs:[0]
push eax
sub esp, 0xdf0
mov eax, dword [0x5a9f00]
xor eax, esp
mov dword [esp + 0xde8], eax
push ebx
push esi
push edi
mov eax, dword [0x5a9f00]
xor eax, esp
push eax
lea eax, [esp + 0xe00]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x54], vtable.CHwsFile.0
xor ebx, ebx
mov dword [esp + 0xe08], ebx
mov dword [esp + 0x50], vtable.CServiceCtrl.0
mov eax, vtable.CStringUtil.0
mov dword [esp + 0x58], eax
mov edi, 0xf
mov dword [esp + 0x240], edi
mov dword [esp + 0x23c], ebx
mov byte [esp + 0x22c], bl
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0xe0c], 6
call fcn.0041f4b0
lea ecx, [esp + 0x38]
push ecx
call fcn.0041f6b0
mov dword [esp + 0x4c], ebx
lea ecx, [esp + 0x1bc]
mov byte [esp + 0xe08], 7
call fcn.0041f9f0
mov byte [esp + 0xe08], 8
mov eax, dword [esi + 0x1b0]
xor edx, edx
mov ecx, eax
mov dword [esp + 0x390], 7
mov dword [esp + 0x38c], ebx
mov word [esp + 0x37c], dx
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x415a71
sub ecx, esi
sar ecx, 1
push ecx
lea ecx, [esp + 0x380]
call fcn.00408e90
sub esp, 0x1c
mov byte [esp + 0xe24], 9
lea eax, [esp + 0x398]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0041e620
lea ecx, [esp + 0xa4]
call fcn.00405da0
add esp, 0x1c
mov byte [esp + 0xe08], 0xb
cmp dword [esp + 0x390], 8
jb 0x415adc
mov ecx, dword [esp + 0x37c]
push ecx
call fcn.00425301
add esp, 4
mov eax, dword [esp + 0x88]
xor edx, edx
mov esi, 0x10
mov dword [esp + 0x390], 7
mov dword [esp + 0x38c], ebx
mov word [esp + 0x37c], dx
cmp dword [esp + 0x9c], esi
jae 0x415b14
lea eax, [esp + 0x88]
mov ecx, dword [esp + 0x98]
cmp byte [eax + ecx - 1], 0x5c
je 0x415b35
push 1
mov eax, 0x5815e0
lea ecx, [esp + 0x8c]
call fcn.004042e0
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xb0]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x415d3b
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xac]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c50
call fcn.00407d80
add esp, 0x1c
push 3
push 0x582b98
lea ecx, [esp + 0xc8]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
call fcn.00404400
push 1
push ebx
lea ecx, [esp + 0xc8]
push ecx
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x38]
push eax
lea edx, [esp + 0x1d0]
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe1c], 0xc
call fcn.0041eb90
cmp dword [esp + 0xf0], esi
jb 0x415c05
mov ecx, dword [esp + 0xdc]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0xd4], esi
jb 0x415c3b
mov edx, dword [esp + 0xc0]
push edx
call fcn.00425301
add esp, 4
push 3
push 0x582b98
lea ecx, [esp + 0xc8]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
call fcn.00404400
mov byte [esp + 0xe08], 0xd
push 6
push str.SYSTEM
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00404400
push ebx
push ebx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x38]
push edx
lea edx, [esp + 0x80]
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe1c], 0xe
call fcn.0041eb90
cmp dword [esp + 0xf0], esi
jb 0x415cd8
mov eax, dword [esp + 0xdc]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xd
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x80], esi
jb 0x415d0b
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0xd4], esi
jb 0x415d3b
mov edx, dword [esp + 0xc0]
push edx
call fcn.00425301
add esp, 4
push str.website_
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x170]
push ecx
call fcn.00409720
add esp, 0xc
push 1
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe28], 0xf
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x190]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x415db8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x18c]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c50
call fcn.00407d80
add esp, 0x1c
push 1
push 0x58170c
lea ecx, [esp + 0xc8]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
call fcn.00404400
mov byte [esp + 0xe08], 0x10
push 8
push str.everyone
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00404400
push ebx
push 1
lea ecx, [esp + 0xc8]
push ecx
lea edx, [esp + 0x174]
push edx
lea eax, [esp + 0x38]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0xf0]
mov byte [esp + 0xe1c], 0x11
call fcn.0041eb90
cmp dword [esp + 0xf0], esi
jb 0x415e56
mov ecx, dword [esp + 0xdc]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x10
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x80], esi
jb 0x415e89
mov edx, dword [esp + 0x6c]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xf
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0xd4], esi
jb 0x415eb9
mov eax, dword [esp + 0xc0]
push eax
call fcn.00425301
add esp, 4
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push str.log_
lea edx, [esp + 0xac]
push edx
push ecx
call fcn.00409720
add esp, 0xc
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x415f0d
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x2c], esp
push str.log_
lea ecx, [esp + 0xa8]
push ecx
push eax
call fcn.00409720
add esp, 0xc
call fcn.00407d80
add esp, 0x1c
lea eax, [esp + 0x424]
call fcn.00406520
mov dword [esp + 0x10], eax
push str.temp_new_
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0xe14], 0x12
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea edx, [esp + 0x478]
mov byte [esp + 0xe08], 0x13
mov eax, dword [esp + 0x10]
push edx
call fcn.00409800
add esp, 4
push eax
mov eax, 0x5815e0
lea ecx, [esp + 0x118]
mov byte [esp + 0xe0c], 0x14
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0x16
cmp dword [esp + 0x48c], esi
jb 0x415f9e
mov eax, dword [esp + 0x478]
push eax
call fcn.00425301
add esp, 4
mov dword [esp + 0x48c], edi
mov dword [esp + 0x488], ebx
mov byte [esp + 0x478], bl
mov byte [esp + 0xe08], 0x17
cmp dword [esp + 0x470], esi
jb 0x415fd4
mov ecx, dword [esp + 0x45c]
push ecx
call fcn.00425301
add esp, 4
mov dword [esp + 0x470], edi
mov dword [esp + 0x46c], ebx
mov byte [esp + 0x45c], bl
mov byte [esp + 0xe08], 0x18
cmp dword [esp + 0x438], esi
jb 0x41600a
mov edx, dword [esp + 0x424]
push edx
call fcn.00425301
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x138]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov dword [esp + 0x460], edi
mov dword [esp + 0x45c], ebx
mov byte [esp + 0x44c], bl
mov byte [ecx], bl
call fcn.00403c50
call fcn.00407d80
add esp, 0x1c
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x13c]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x4163ab
push 0x12
push 0x582bd0
lea ecx, [esp + 0xc8]
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
call fcn.00404400
lea eax, [esp + 0x114]
lea ecx, [esp + 0xc0]
lea ebx, [esp + 0xdc]
mov byte [esp + 0xe08], 0x19
call fcn.00409440
mov edi, eax
lea esi, [esp + 0x22c]
mov byte [esp + 0xe08], 0x1a
call fcn.00403b10
mov edi, 0x10
mov byte [esp + 0xe08], 0x19
cmp dword [esp + 0xf0], edi
jb 0x416105
mov eax, dword [esp + 0xdc]
push eax
call fcn.00425301
add esp, 4
xor esi, esi
mov ebx, 0xf
mov byte [esp + 0xe08], 0x18
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xec], esi
mov byte [esp + 0xdc], 0
cmp dword [esp + 0xd4], edi
jb 0x416143
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.00425301
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x168], esi
je 0x416181
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
lea eax, [esp + 0x254]
add esp, 0xc
push eax
call fcn.004052a0
add esp, 0x20
jmp 0x416295
lea ecx, [esp + 0x524]
push ecx
call fcn.0040de90
lea edx, [esp + 0x22c]
push edx
lea ecx, [esp + 0x1dc]
mov byte [esp + 0xe0c], 0x1b
call fcn.0041e780
mov byte [esp + 0xe08], 0x1c
cmp dword [eax + 0x14], 8
jb 0x4161ba
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x18]
call fcn.00410330
mov bl, 0x1d
push 0x582be4
lea ecx, [esp + 0x20]
mov byte [esp + 0xe0c], bl
call fcn.00410330
lea eax, [esp + 0x14]
xor ecx, ecx
push eax
lea eax, [ecx + 3]
lea edx, [esp + 0x20]
lea esi, [esp + 0x528]
mov byte [esp + 0xe0c], 0x1e
call fcn.0040e1d0
mov byte [esp + 0xe08], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416224
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe08], 0x1c
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41624c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe08], 0x1b
cmp dword [esp + 0x1ec], 8
jb 0x41626e
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.00425301
add esp, 4
lea ecx, [esp + 0x524]
call fcn.00433864
lea ecx, [esp + 0x524]
mov byte [esp + 0xe08], 0x18
call fcn.0040e050
mov ebx, 0xf
xor esi, esi
mov byte [esp + 0xe08], 0xf
cmp dword [esp + 0x128], edi
jb 0x4162b6
mov edx, dword [esp + 0x114]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0x128], ebx
mov dword [esp + 0x124], esi
mov byte [esp + 0x114], 0
cmp dword [esp + 0x17c], edi
jb 0x4162ed
mov eax, dword [esp + 0x168]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 8
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x178], esi
mov byte [esp + 0x168], 0
cmp dword [esp + 0x9c], edi
jb 0x416324
mov ecx, dword [esp + 0x88]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 7
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x98], esi
mov byte [esp + 0x88], 0
cmp dword [esp + 0x1d0], edi
jb 0x41635b
mov edx, dword [esp + 0x1bc]
push edx
call fcn.00425301
add esp, 4
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x1d4], ebx
mov dword [esp + 0x1d0], esi
mov byte [esp + 0x1c0], 0
mov byte [esp + 0xe0c], 3
call fcn.0041e900
mov byte [esp + 0xe08], 2
cmp dword [esp + 0x240], edi
jb 0x4163a4
mov ecx, dword [esp + 0x22c]
push ecx
call fcn.00425301
add esp, 4
xor eax, eax
jmp 0x419835
push str.src.zip
lea edx, [esp + 0x118]
push edx
lea eax, [esp + 0x218]
push eax
call fcn.00409720
add esp, 0xc
push 0x82
sub esp, 0x1c
mov byte [esp + 0xe28], 0x1f
mov ecx, esp
mov dword [esp + 0x30], esp
push 3
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x582bf4
mov byte [ecx], bl
call fcn.00404400
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe44], 0x20
mov dword [esp + 0x5c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x254]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
mov eax, dword [esp + 0x50]
push eax
mov byte [esp + 0xe48], 0x1f
call fcn.0041bb70
cmp eax, ebx
jne 0x416626
lea eax, [esp + 0x210]
call fcn.00407d30
mov byte [esp + 0xe08], 0x18
cmp dword [esp + 0x224], esi
jb 0x416462
mov ecx, dword [esp + 0x210]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xf
mov dword [esp + 0x224], edi
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
cmp dword [esp + 0x128], esi
jb 0x416498
mov edx, dword [esp + 0x114]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
cmp dword [esp + 0x17c], esi
jb 0x4164ce
mov eax, dword [esp + 0x168]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 8
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
cmp dword [esp + 0x9c], esi
jb 0x416504
mov ecx, dword [esp + 0x88]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 7
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp dword [esp + 0x1d0], esi
jb 0x41653a
mov edx, dword [esp + 0x1bc]
push edx
call fcn.00425301
add esp, 4
mov dword [esp + 0x1d0], edi
mov dword [esp + 0x1cc], ebx
mov byte [esp + 0x1bc], bl
mov byte [esp + 0xe08], 0x21
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x41656a
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [esp + 0x4c], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x48], vtable.CStringUtil.0
cmp eax, ebx
je 0x4165bc
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
mov esi, eax
cmp eax, ecx
je 0x4165ae
cmp dword [esi + 0x14], 0x10
jb 0x416599
mov eax, dword [esi]
push eax
call fcn.00425301
add esp, 4
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], ebx
mov byte [esi], bl
add esi, 0x1c
cmp esi, dword [esp + 0x10]
jne 0x416588
mov eax, dword [esp + 0x38]
push eax
call fcn.00425301
add esp, 4
mov esi, 0x10
mov byte [esp + 0xe08], 3
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
cmp eax, ebx
je 0x4165ee
mov edi, dword [esp + 0x2c]
call fcn.00409180
mov eax, dword [esp + 0x28]
push eax
call fcn.00425301
add esp, 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0xe08], 2
cmp dword [esp + 0x240], esi
jb 0x4163a4
mov ecx, dword [esp + 0x22c]
push ecx
call fcn.00425301
add esp, 4
xor eax, eax
jmp 0x419835
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
push 0x12c
mov byte [esp + 0xe0c], 0x22
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x138]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe40], 0x23
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x250]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c50
mov byte [esp + 0xe40], 0x22
call fcn.00420980
push 0x12c
cmp al, bl
jne 0x416947
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x210]
call fcn.00407d30
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x168], ebx
je 0x41674d
push 0x12
push 0x582bf8
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00404400
sub esp, 0x1c
mov byte [esp + 0xe24], 0x24
mov eax, dword [esp + 0x30]
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
lea ecx, [esp + 0x94]
add esp, 0xc
push ecx
call fcn.004052a0
add esp, 0x20
mov byte [esp + 0xe08], 0x22
cmp dword [esp + 0x80], esi
jb 0x416822
mov edx, dword [esp + 0x6c]
push edx
call fcn.00425301
add esp, 4
jmp 0x416822
lea eax, [esp + 0x524]
push eax
call fcn.0040de90
push str._eD
lea ecx, [esp + 0x18]
mov byte [esp + 0xe0c], 0x25
call fcn.00410330
push 0x582be4
lea ecx, [esp + 0x20]
mov byte [esp + 0xe0c], 0x26
call fcn.00410330
lea ecx, [esp + 0x14]
push ecx
xor ecx, ecx
lea eax, [ecx + 3]
lea edx, [esp + 0x20]
lea esi, [esp + 0x528]
mov byte [esp + 0xe0c], 0x27
call fcn.0040e1d0
mov byte [esp + 0xe08], 0x26
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4167d0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe08], 0x25
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4167f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x524]
call fcn.00433864
lea ecx, [esp + 0x524]
mov byte [esp + 0xe08], 0x22
call fcn.0040e050
mov edi, 0xf
mov esi, 0x10
mov byte [esp + 0xe08], 0x18
cmp dword [esp + 0x224], esi
jb 0x416843
mov ecx, dword [esp + 0x210]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xf
mov dword [esp + 0x224], edi
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
cmp dword [esp + 0x128], esi
jb 0x416879
mov edx, dword [esp + 0x114]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
cmp dword [esp + 0x17c], esi
jb 0x4168af
mov eax, dword [esp + 0x168]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 8
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
cmp dword [esp + 0x9c], esi
jb 0x4168e5
mov ecx, dword [esp + 0x88]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 7
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp dword [esp + 0x1d0], esi
jb 0x41691b
mov edx, dword [esp + 0x1bc]
push edx
call fcn.00425301
add esp, 4
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x1d4], edi
mov dword [esp + 0x1d0], ebx
mov byte [esp + 0x1c0], bl
mov byte [esp + 0xe0c], 3
call fcn.0041e900
jmp 0x4165fa
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x210]
call fcn.00407d30
push str.configquitpanel.txt
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0xe4]
push eax
call fcn.00409720
add esp, 0xc
push 1
push 1
lea eax, [esp + 0x1e0]
mov byte [esp + 0xe10], 0x28
call fcn.00406520
mov dword [esp + 0x18], eax
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe2c], 0x29
mov dword [esp + 0x44], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x108]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
mov ecx, dword [esp + 0x34]
call fcn.004056c0
add esp, 0x24
mov byte [esp + 0xe08], 0x28
cmp dword [esp + 0x1ec], esi
jb 0x4169e8
mov eax, dword [esp + 0x1d8]
push eax
call fcn.00425301
add esp, 4
push str.hwsips
lea ecx, [esp + 0x118]
push ecx
lea edx, [esp + 0x18c]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0xc4]
mov byte [esp + 0xe0c], 0x2a
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0x2c
cmp dword [esp + 0x198], esi
jb 0x416a43
mov eax, dword [esp + 0x184]
push eax
call fcn.00425301
add esp, 4
push str.hwsipsd
lea ecx, [esp + 0x118]
push ecx
lea edx, [esp + 0x368]
push edx
mov dword [esp + 0x1a4], edi
mov dword [esp + 0x1a0], ebx
mov byte [esp + 0x190], bl
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x2a0]
mov byte [esp + 0xe0c], 0x2d
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0x2f
cmp dword [esp + 0x374], esi
jb 0x416ab3
mov eax, dword [esp + 0x360]
push eax
call fcn.00425301
add esp, 4
push str.hwsips
lea ecx, [esp + 0x118]
push ecx
lea edx, [esp + 0x34c]
push edx
mov dword [esp + 0x380], edi
mov dword [esp + 0x37c], ebx
mov byte [esp + 0x36c], bl
call fcn.00409720
add esp, 0xc
push eax
mov eax, str.64.sys
lea ecx, [esp + 0x3d4]
mov byte [esp + 0xe0c], 0x30
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0x32
cmp dword [esp + 0x358], esi
jb 0x416b23
mov eax, dword [esp + 0x344]
push eax
call fcn.00425301
add esp, 4
push str.HwsIpsPanel.exe
lea ecx, [esp + 0x118]
push ecx
lea edx, [esp + 0x3bc]
push edx
mov dword [esp + 0x364], edi
mov dword [esp + 0x360], ebx
mov byte [esp + 0x350], bl
call fcn.00409720
add esp, 0xc
push str.update.exe
lea eax, [esp + 0x118]
push eax
lea ecx, [esp + 0x3f4]
push ecx
mov byte [esp + 0xe14], 0x33
call fcn.00409720
add esp, 0xc
lea edx, [esp + 0xc0]
push edx
mov byte [esp + 0xe0c], 0x34
call fcn.00406550
add esp, 4
test eax, eax
je 0x41840c
lea eax, [esp + 0x29c]
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x41840c
lea ecx, [esp + 0x3d0]
push ecx
call fcn.00406550
add esp, 4
test eax, eax
je 0x41840c
lea edx, [esp + 0x3b4]
push edx
call fcn.00406550
add esp, 4
test eax, eax
je 0x41840c
lea eax, [esp + 0x3ec]
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x41840c
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x581489
call fcn.00402c90
push ebx
sub esp, 0x1c
mov byte [esp + 0xe48], 0x35
mov ecx, esp
mov dword [esp + 0x60], esp
push str.hwsipsd
call fcn.00402c90
mov byte [esp + 0xe48], 0x34
call fcn.0041e170
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x581489
call fcn.00402c90
push ebx
sub esp, 0x1c
mov byte [esp + 0xe48], 0x36
mov ecx, esp
mov dword [esp + 0x60], esp
push str.hwsips
call fcn.00402c90
mov byte [esp + 0xe48], 0x34
call fcn.0041e170
push str.hwsips
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x330]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xe0c], 0x37
call fcn.004093f0
add esp, 4
lea ecx, [esp + 0x328]
mov byte [esp + 0xe08], 0x39
call fcn.00402cf0
lea ecx, [esp + 0xc0]
lea edi, [esp + 0x1a0]
call fcn.00413600
cmp eax, ebx
jne 0x416e03
mov ecx, dword [esp + 0x14]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add ecx, 0x16c
push ecx
push eax
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x3a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x214]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x118]
mov byte [esp + 0xe28], 0x3b
call fcn.00402c90
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x88]
mov byte [esp + 0xe24], 0x3c
call fcn.00409440
push eax
mov eax, 0x582c70
lea ecx, [esp + 0x150]
mov byte [esp + 0xe28], 0x3d
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, esi
mov byte [esp + 0xe28], 0x3e
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x3f
push eax
mov byte [esp + 0xe28], 0x44
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x43
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x42
call fcn.00402cf0
mov ecx, ebx
mov byte [esp + 0xe08], 0x41
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x40
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x39
call fcn.00402cf0
xor ebx, ebx
push str.hwsipsd
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x138]
push ecx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0xa8]
mov byte [esp + 0xe0c], 0x45
call fcn.004093f0
add esp, 4
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x46
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x45
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x39
call fcn.00402cf0
lea ecx, [esp + 0x29c]
mov edi, esi
call fcn.00413600
cmp eax, ebx
jne 0x416fb4
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x47
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x214]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x118]
mov byte [esp + 0xe28], 0x48
call fcn.00402c90
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x88]
mov byte [esp + 0xe24], 0x49
call fcn.00409440
push eax
mov eax, 0x582c70
lea ecx, [esp + 0x150]
mov byte [esp + 0xe28], 0x4a
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, esi
mov byte [esp + 0xe28], 0x4b
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x4c
push eax
mov byte [esp + 0xe28], 0x51
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x50
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x4f
call fcn.00402cf0
mov ecx, ebx
mov byte [esp + 0xe08], 0x4e
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x4d
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x39
call fcn.00402cf0
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x582c80
call fcn.00402c90
lea ecx, [esp + 0x430]
call fcn.004075e0
lea esi, [esp + 0x21c]
mov byte [esp + 0xe30], 0x52
call fcn.004051b0
mov ecx, eax
lea eax, [esp + 0x430]
lea ebx, [esp + 0x120]
mov byte [esp + 0xe30], 0x53
call fcn.00409440
push eax
mov eax, str.hwsips
lea ecx, [esp + 0x98]
mov byte [esp + 0xe34], 0x54
call fcn.004093f0
add esp, 0x2c
push eax
mov eax, str.64.s
lea ecx, [esp + 0x134]
mov byte [esp + 0xe0c], 0x55
call fcn.004093f0
add esp, 4
push eax
mov bl, 0x56
mov eax, 0x582ca4
lea ecx, [esp + 0xa8]
mov byte [esp + 0xe0c], bl
call fcn.004093f0
add esp, 4
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x57
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x55
call fcn.00402cf0
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x54
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x53
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
lea ecx, [esp + 0x3d0]
mov edi, esi
call fcn.00413600
test eax, eax
jne 0x41721b
mov ecx, dword [esp + 0x14]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add ecx, 0x16c
push ecx
push eax
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x58
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x214]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x118]
mov byte [esp + 0xe28], 0x59
call fcn.00402c90
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x88]
mov byte [esp + 0xe24], 0x5a
call fcn.00409440
push eax
mov eax, 0x582c70
lea ecx, [esp + 0x150]
mov byte [esp + 0xe28], 0x5b
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, esi
mov byte [esp + 0xe28], 0x5c
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x5d
push eax
mov byte [esp + 0xe28], 0x62
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x61
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x60
call fcn.00402cf0
mov ecx, ebx
mov byte [esp + 0xe08], 0x5f
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x5e
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
push str.HwsIpsPanel.exe
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x63
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
lea ecx, [esp + 0x3b4]
mov edi, esi
call fcn.00413600
test eax, eax
jne 0x41739b
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x64
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x214]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x118]
mov byte [esp + 0xe28], 0x65
call fcn.00402c90
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x88]
mov byte [esp + 0xe24], 0x66
call fcn.00409440
push eax
mov eax, 0x582c70
lea ecx, [esp + 0x150]
mov byte [esp + 0xe28], 0x67
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, esi
mov byte [esp + 0xe28], 0x68
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x69
push eax
mov byte [esp + 0xe28], 0x6e
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x6d
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x6c
call fcn.00402cf0
mov ecx, ebx
mov byte [esp + 0xe08], 0x6b
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x6a
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
push str.update.exe
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x6f
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
lea ecx, [esp + 0x3ec]
mov edi, esi
call fcn.00413600
test eax, eax
jne 0x41751b
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x70
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x214]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x118]
mov byte [esp + 0xe28], 0x71
call fcn.00402c90
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x88]
mov byte [esp + 0xe24], 0x72
call fcn.00409440
push eax
mov eax, 0x582c70
lea ecx, [esp + 0x150]
mov byte [esp + 0xe28], 0x73
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, esi
mov byte [esp + 0xe28], 0x74
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x75
push eax
mov byte [esp + 0xe28], 0x7a
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x79
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x78
call fcn.00402cf0
mov ecx, ebx
mov byte [esp + 0xe08], 0x77
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x76
call fcn.00402cf0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
push str.http_
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x7b
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
push str.http_
lea edx, [esp + 0x118]
push edx
lea eax, [esp + 0x26c]
push eax
call fcn.00409720
add esp, 0xc
push str.index.html
lea ecx, [esp + 0x268]
push ecx
lea edx, [esp + 0x138]
push edx
mov byte [esp + 0xe14], 0x7c
call fcn.00409720
add esp, 0xc
push eax
mov byte [esp + 0xe0c], 0x7d
call fcn.00406550
add esp, 4
lea ecx, [esp + 0x130]
mov esi, eax
mov byte [esp + 0xe08], 0x7c
call fcn.00402cf0
mov ebx, 0x10
test esi, esi
je 0x4175fc
mov ecx, dword [esp + 0x1a0]
cmp dword [esp + 0x1b4], ebx
jae 0x4175eb
lea ecx, [esp + 0x1a0]
test ecx, ecx
je 0x4175f4
call fcn.00412b90
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
lea eax, [esp + 0x1bc]
mov esi, esp
mov dword [esp + 0x2c], esp
call fcn.00402c70
call fcn.00407d80
mov edi, dword [esp + 0x280]
add esp, 0x1c
cmp dword [esp + 0x278], ebx
jae 0x417630
lea edi, [esp + 0x264]
mov eax, dword [esp + 0x88]
cmp dword [esp + 0x9c], ebx
jae 0x417647
lea eax, [esp + 0x88]
push eax
call fcn.004130d0
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x264]
cmp dword [esp + 0x278], ebx
jae 0x41766f
lea ecx, [esp + 0x264]
test ecx, ecx
je 0x417678
call fcn.00412b90
push str.config_
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x7e
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x7c
call fcn.00402cf0
push str.config_
lea edx, [esp + 0x118]
push edx
lea eax, [esp + 0x138]
push eax
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x264]
mov byte [esp + 0xe08], 0x7f
call fcn.00403b10
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x7c
call fcn.00402cf0
push str.config.db
lea ecx, [esp + 0x1a4]
push ecx
lea edx, [esp + 0x74]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov byte [esp + 0xe0c], 0x80
call fcn.00406550
add esp, 4
test eax, eax
lea ecx, [esp + 0x6c]
sete bl
mov byte [esp + 0xe08], 0x7c
call fcn.00402cf0
test bl, bl
je 0x41777f
mov edi, dword [esp + 0x264]
mov eax, 0x10
cmp dword [esp + 0x278], eax
jae 0x417762
mov edi, esi
cmp dword [esp + 0x9c], eax
mov eax, dword [esp + 0x88]
jae 0x417779
lea eax, [esp + 0x88]
push eax
call fcn.004130d0
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esp + 0x278], 0x10
mov ecx, dword [esp + 0x264]
jae 0x4177a2
lea ecx, [esp + 0x264]
xor esi, esi
cmp ecx, esi
je 0x4177ad
call fcn.00412b90
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.w3svc
mov dword [esp + 0x40], esi
call fcn.00402c90
call fcn.0041e4e0
cmp eax, esi
je 0x4177d5
mov dword [esp + 0x20], 1
mov ebx, 0xf
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x258], esi
mov byte [esp + 0x248], 0
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x1f8], esi
mov dword [esp + 0x1fc], esi
sub esp, 0x1c
mov byte [esp + 0xe24], 0x82
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x581489
call fcn.00402c90
lea edx, [esp + 0x130]
lea ecx, [esp + 0x210]
call fcn.004077c0
mov ecx, dword [esp + 0x214]
mov esi, dword [esp + 0x210]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esp, 0x1c
add eax, edx
je 0x41812e
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], eax
jmp 0x417875
mov ebx, 0xf
mov eax, dword [esp + 0x1c]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00403c50
lea esi, [esp + 0x88]
call fcn.004059d0
add esp, 0x1c
mov edi, eax
lea esi, [esp + 0x248]
mov byte [esp + 0xe08], 0x83
call fcn.00403b10
mov byte [esp + 0xe08], 0x82
cmp dword [esp + 0x80], 0x10
jb 0x4178dd
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00425301
add esp, 4
mov ecx, str.readme.txt
lea edi, [esp + 0x248]
call fcn.00409950
test al, al
jne 0x41790e
mov ecx, str.recycle
call fcn.00409950
test al, al
jne 0x41790e
mov ecx, str.sqlite3.dll
call fcn.00409950
test al, al
je 0x41797d
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.004099b0
add esp, 0xc
lea edx, [esp + 0x6c]
push edx
mov byte [esp + 0xe0c], 0x84
call fcn.00406550
add esp, 4
test eax, eax
jne 0x41810e
push 1
sub esp, 0x1c
lea eax, [esp + 0x8c]
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.00402c70
call fcn.004066a0
add esp, 0x20
test eax, eax
jne 0x41810e
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
mov ecx, str.website
lea edi, [esp + 0x248]
call fcn.00409950
test al, al
je 0x417b79
push str.websitemod_hwsips_iis_x64.dll
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.00409720
add esp, 0xc
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x108], 0
mov byte [esp + 0xf8], 0
lea edx, [esp + 0x6c]
mov bl, 0x86
push edx
mov byte [esp + 0xe0c], bl
call fcn.00406550
add esp, 4
test eax, eax
je 0x417a74
push str..old
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0xf8]
mov byte [esp + 0xe08], 0x87
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
mov edx, esi
push edx
call fcn.00406550
add esp, 4
test eax, eax
je 0x417a41
mov eax, esi
call fcn.00407d30
mov ecx, dword [esp + 0x6c]
mov eax, 0x10
cmp dword [esp + 0x80], eax
jae 0x417a57
lea ecx, [esp + 0x6c]
cmp dword [esp + 0x10c], eax
mov eax, dword [esp + 0xf8]
jae 0x417a6e
lea eax, [esp + 0xf8]
push eax
call fcn.004133a0
push str.websitemod_hwsips_iis_x32.dll
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x6c]
mov byte [esp + 0xe08], 0x88
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
mov edx, esi
push edx
call fcn.00406550
add esp, 4
test eax, eax
je 0x417b54
push str..old
mov eax, esi
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0xf8]
mov byte [esp + 0xe08], 0x89
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
mov edx, esi
push edx
call fcn.00406550
add esp, 4
test eax, eax
je 0x417b21
mov eax, esi
call fcn.00407d30
mov ecx, dword [esp + 0x6c]
mov eax, 0x10
cmp dword [esp + 0x80], eax
jae 0x417b37
lea ecx, [esp + 0x6c]
cmp dword [esp + 0x10c], eax
mov eax, dword [esp + 0xf8]
jae 0x417b4e
lea eax, [esp + 0xf8]
push eax
call fcn.004133a0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x85
call fcn.00402cf0
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
mov ecx, str.hwsips.exe
lea edi, [esp + 0x248]
call fcn.00409a70
test al, al
je 0x417d59
mov ecx, str.hwsipsd.exe
call fcn.00409a70
test al, al
je 0x417d59
mov ecx, str.hwsips.sys
call fcn.00409a70
test al, al
je 0x417d59
mov ecx, str.hwsips64.sys
call fcn.00409a70
test al, al
je 0x417d59
mov ecx, str.hwsipspanel.exe
call fcn.00409a70
test al, al
je 0x417d59
mov ecx, str.update.exe
call fcn.00409a70
test al, al
je 0x417d59
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x118]
push ecx
lea edx, [esp + 0xac]
push edx
call fcn.004099b0
add esp, 0xc
mov ecx, 0x10
mov byte [esp + 0xe08], 0x8a
cmp dword [eax + 0x14], ecx
jb 0x417c1d
mov eax, dword [eax]
cmp dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x88]
jae 0x417c34
lea ecx, [esp + 0x88]
push ecx
mov edi, eax
call fcn.004130d0
lea ecx, [esp + 0xa4]
mov esi, eax
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
test esi, esi
jne 0x417d59
mov ecx, dword [esp + 0x14]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x34], esp
push str.logupdate.log
add ecx, 0x16c
push ecx
push eax
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xe24], 0x8b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x118]
call fcn.00406ff0
add esp, 4
mov esi, eax
lea edx, [esp + 0x88]
mov byte [esp + 0xe24], 0x8c
mov ebx, dword [esp + 0x38]
push 0x582d9c
push edx
call fcn.00409880
push eax
mov eax, 0x582d94
lea ecx, [esp + 0x158]
mov byte [esp + 0xe30], 0x8d
call fcn.004093f0
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xc0]
push eax
mov eax, esi
mov byte [esp + 0xe28], 0x8e
call fcn.00409800
add esp, 4
mov byte [esp + 0xe24], 0x8f
push eax
mov byte [esp + 0xe28], 0x93
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x92
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x91
call fcn.00402cf0
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x90
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
mov ecx, str.website
lea edi, [esp + 0x248]
call fcn.00409950
test al, al
je 0x41805e
push str.websitemod_hwsips_iis_x64.dll
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x100]
push edx
call fcn.00409720
add esp, 0xc
lea eax, [esp + 0xf8]
push eax
mov byte [esp + 0xe0c], 0x94
call fcn.00406550
add esp, 4
test eax, eax
je 0x417e41
push 0x582dac
lea ecx, [esp + 0xa8]
call fcn.00402c90
mov bl, 0x95
push str.everyone
lea ecx, [esp + 0x134]
mov byte [esp + 0xe0c], bl
call fcn.00402c90
push 0
push 1
lea ecx, [esp + 0xac]
push ecx
lea edx, [esp + 0x104]
push edx
lea eax, [esp + 0x38]
push eax
lea edx, [esp + 0x144]
lea ecx, [esp + 0x160]
mov byte [esp + 0xe1c], 0x96
call fcn.0041eb90
lea ecx, [esp + 0x14c]
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0x94
call fcn.00402cf0
push str.websitemod_hwsips_iis_x32.dll
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x154]
push edx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0xf8]
mov byte [esp + 0xe08], 0x97
call fcn.00403b10
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0x94
call fcn.00402cf0
mov eax, esi
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x417f28
push 0x582dac
lea ecx, [esp + 0x134]
call fcn.00402c90
mov bl, 0x98
push str.everyone
lea ecx, [esp + 0xa8]
mov byte [esp + 0xe0c], bl
call fcn.00402c90
push 0
push 1
lea ecx, [esp + 0x138]
push ecx
mov edx, esi
push edx
lea eax, [esp + 0x38]
push eax
lea edx, [esp + 0xb8]
lea ecx, [esp + 0x160]
mov byte [esp + 0xe1c], 0x99
call fcn.0041eb90
lea ecx, [esp + 0x14c]
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x94
call fcn.00402cf0
cmp dword [esp + 0x20], 0
je 0x417f49
push str.iisreset
call fcn.00526ab6
add esp, 4
push str.net_start_w3svc
call fcn.00526ab6
add esp, 4
push str.websitemod_hwsips_iis_x32.dll
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x154]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..old
lea ecx, [esp + 0x70]
mov byte [esp + 0xe0c], 0x9a
call fcn.004093f0
add esp, 4
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0x9c
call fcn.00402cf0
lea eax, [esp + 0x6c]
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x417fae
lea eax, [esp + 0x6c]
call fcn.00407d30
push str.websitemod_hwsips_iis_x64.dll
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x138]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov bl, 0x9d
mov eax, str..old
lea ecx, [esp + 0xa8]
mov byte [esp + 0xe0c], bl
call fcn.004093f0
add esp, 4
mov edi, eax
lea esi, [esp + 0x6c]
mov byte [esp + 0xe08], 0x9e
call fcn.00403b10
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0x9c
call fcn.00402cf0
mov eax, esi
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x418039
mov eax, esi
call fcn.00407d30
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x94
call fcn.00402cf0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
mov ecx, str.website
lea edi, [esp + 0x248]
call fcn.00409950
test al, al
je 0x41811f
push str.hwsips
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x154]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x134]
mov byte [esp + 0xe0c], 0x9f
call fcn.004093f0
add esp, 4
mov bl, 0xa1
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
push str.updatewebsite
lea ecx, [esp + 0xa8]
call fcn.00402c90
lea edx, [esp + 0xa4]
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0xa2
call fcn.00408200
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
lea ecx, [esp + 0x130]
jmp 0x418112
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x10]
jne 0x417870
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x582de0
call fcn.00402c90
lea ecx, [esp + 0x200]
call fcn.004075e0
add esp, 0x28
push 0x5815f8
lea ecx, [esp + 0xfc]
mov byte [esp + 0xe0c], 0xa3
call fcn.00402c90
push 0x5816f0
lea ecx, [esp + 0x70]
mov byte [esp + 0xe0c], 0xa4
call fcn.00402c90
lea eax, [esp + 0xf8]
push eax
lea edx, [esp + 0x70]
lea ebx, [esp + 0x1dc]
mov byte [esp + 0xe0c], 0xa5
call fcn.00405bf0
mov edi, 0x10
add esp, 4
mov byte [esp + 0xe08], 0xa4
cmp dword [esp + 0x80], edi
jb 0x4181df
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00425301
add esp, 4
xor ebx, ebx
mov esi, 0xf
mov byte [esp + 0xe08], 0xa3
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0x10c], edi
jb 0x418216
mov edx, dword [esp + 0xf8]
push edx
call fcn.00425301
add esp, 4
lea eax, [esp + 0xa4]
call fcn.00406520
mov edi, eax
push str.hwsup_
lea eax, [esp + 0x118]
push eax
lea ecx, [esp + 0x154]
push ecx
mov byte [esp + 0xe14], 0xa6
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea edx, [esp + 0x6c]
push edx
mov eax, edi
mov byte [esp + 0xe0c], 0xa7
call fcn.00409800
add esp, 4
push eax
mov eax, str..bat
lea ecx, [esp + 0x2bc]
mov byte [esp + 0xe0c], 0xa8
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0xaa
cmp dword [esp + 0x80], 0x10
jb 0x41829e
mov eax, dword [esp + 0x6c]
push eax
call fcn.00425301
add esp, 4
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xab
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0xac
call fcn.00402cf0
lea ecx, [esp + 0x1d8]
push ecx
lea esi, [esp + 0x2bc]
call fcn.00408170
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
push 0x64
call esi
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x581489
call fcn.00402c90
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xad
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsipsd
call fcn.00402c90
mov byte [esp + 0xe48], 0xac
call fcn.0041e170
push 0x64
call esi
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x581489
call fcn.00402c90
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xae
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsips
call fcn.00402c90
mov byte [esp + 0xe48], 0xac
call fcn.0041e170
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xa3
call fcn.00402cf0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xe08], 0x82
call fcn.00402cf0
lea esi, [esp + 0x1f4]
mov byte [esp + 0xe08], 0x81
call fcn.00408930
lea ecx, [esp + 0x248]
mov byte [esp + 0xe08], 0x7c
call fcn.00402cf0
lea ecx, [esp + 0x264]
mov byte [esp + 0xe08], 0x52
call fcn.00402cf0
lea ecx, [esp + 0x408]
mov byte [esp + 0xe08], 0x39
call fcn.00402cf0
lea ecx, [esp + 0x1a0]
mov byte [esp + 0xe08], 0x34
call fcn.00402cf0
xor ebx, ebx
lea edi, [ebx + 0xf]
lea esi, [ebx + 0x10]
jmp 0x418485
push 0x14
push 0x582f04
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00404400
sub esp, 0x1c
mov byte [esp + 0xe24], 0xaf
mov eax, dword [esp + 0x30]
mov edx, esp
mov dword [esp + 0x34], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
lea ecx, [esp + 0x94]
add esp, 0xc
push ecx
call fcn.004052a0
add esp, 0x20
mov byte [esp + 0xe08], 0x34
cmp dword [esp + 0x80], esi
jb 0x418485
mov edx, dword [esp + 0x6c]
push edx
call fcn.00425301
add esp, 4
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x114]
cmp dword [esp + 0x128], esi
jae 0x4184a7
lea ecx, [esp + 0x114]
cmp ecx, ebx
je 0x4184b0
call fcn.00412b90
mov byte [esp + 0xe08], 0x33
cmp dword [esp + 0x400], esi
jb 0x4184d1
mov eax, dword [esp + 0x3ec]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x32
mov dword [esp + 0x400], edi
mov dword [esp + 0x3fc], ebx
mov byte [esp + 0x3ec], bl
cmp dword [esp + 0x3c8], esi
jb 0x418507
mov ecx, dword [esp + 0x3b4]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x2f
mov dword [esp + 0x3c8], edi
mov dword [esp + 0x3c4], ebx
mov byte [esp + 0x3b4], bl
cmp dword [esp + 0x3e4], esi
jb 0x41853d
mov edx, dword [esp + 0x3d0]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x2c
mov dword [esp + 0x3e4], edi
mov dword [esp + 0x3e0], ebx
mov byte [esp + 0x3d0], bl
cmp dword [esp + 0x2b0], esi
jb 0x418573
mov eax, dword [esp + 0x29c]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x28
mov dword [esp + 0x2b0], edi
mov dword [esp + 0x2ac], ebx
mov byte [esp + 0x29c], bl
cmp dword [esp + 0xd4], esi
jb 0x4185a9
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x22
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
cmp dword [esp + 0xf0], esi
jb 0x4185df
mov edx, dword [esp + 0xdc]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x18
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x224], esi
jb 0x418615
mov eax, dword [esp + 0x210]
push eax
call fcn.00425301
add esp, 4
mov dword [esp + 0x2e8], edi
mov dword [esp + 0x2e4], ebx
mov byte [esp + 0x2d4], bl
push str.hwsips
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x34c]
push edx
mov byte [esp + 0xe14], 0xb0
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x310]
mov byte [esp + 0xe0c], 0xb1
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0xb3
cmp dword [esp + 0x358], esi
jb 0x41868d
mov eax, dword [esp + 0x344]
push eax
call fcn.00425301
add esp, 4
mov dword [esp + 0x358], edi
mov dword [esp + 0x354], ebx
mov byte [esp + 0x344], bl
cmp dword [ebp + 8], ebx
jne 0x418798
lea ecx, [esp + 0x30c]
push ecx
call fcn.00406550
add esp, 4
test eax, eax
je 0x418798
lea edi, [esp + 0x14c]
call fcn.00406900
mov edi, eax
lea esi, [esp + 0x2d4]
mov byte [esp + 0xe08], 0xb4
call fcn.00403b10
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xb3
call fcn.00402cf0
call fcn.00405980
push str.install
lea ecx, [esp + 0x32c]
call fcn.00402c90
mov ecx, eax
mov eax, esi
lea ebx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xb5
call fcn.00409440
mov edx, eax
lea ecx, [esp + 0x30c]
mov byte [esp + 0xe08], 0xb6
call fcn.00408200
mov ecx, ebx
mov byte [esp + 0xe08], 0xb5
call fcn.00402cf0
lea ecx, [esp + 0x328]
mov byte [esp + 0xe08], 0xb3
call fcn.00402cf0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push 0
lea edx, [esp + 0xac]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push edx
mov byte [ecx], 0
call fcn.00403c50
call fcn.00413ba0
xor ebx, ebx
lea edi, [ebx + 0xf]
lea esi, [ebx + 0x10]
push str.hwsipsd
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x368]
push ecx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x39c]
mov byte [esp + 0xe0c], 0xb7
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0xb9
cmp dword [esp + 0x374], esi
jb 0x4187f3
mov edx, dword [esp + 0x360]
push edx
call fcn.00425301
add esp, 4
mov eax, dword [esp + 0x30c]
mov dword [esp + 0x374], edi
mov dword [esp + 0x370], ebx
mov byte [esp + 0x360], bl
cmp dword [esp + 0x320], esi
jae 0x41881f
lea eax, [esp + 0x30c]
push ebx
push 0x581489
push 0x582f28
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [esp + 0x398]
cmp dword [esp + 0x3ac], esi
jae 0x41884e
lea eax, [esp + 0x398]
push ebx
push 0x581489
push 0x582f28
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.hwsips
mov byte [ecx], bl
call fcn.00404400
call fcn.0041e380
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 7
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.hwsipsd
mov byte [ecx], bl
call fcn.00404400
call fcn.0041e380
push str.HwsIpsPanel.exe
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x2f8]
push ecx
call fcn.00409720
add esp, 0xc
mov dword [esp + 0x294], edi
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
mov dword [esp + 0x41c], edi
mov dword [esp + 0x418], ebx
mov byte [esp + 0x408], bl
mov byte [esp + 0xe08], 0xbc
cmp dword [esp + 0x2e4], ebx
je 0x418a80
mov edx, dword [esp + 0x14]
cmp dword [edx + 0xc20], ebx
je 0x418a80
lea eax, [esp + 0x14c]
push str.http:__localhost:6688_
push eax
lea ebx, [esp + 0x2dc]
call fcn.00409880
add esp, 8
mov edi, eax
lea esi, [esp + 0x280]
mov byte [esp + 0xe08], 0xbd
call fcn.00403b10
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xbc
call fcn.00402cf0
lea ecx, [esp + 0x494]
push ecx
call fcn.00410490
sub esp, 0x1c
mov byte [esp + 0xe24], 0xbe
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x581fd8
call fcn.00402c90
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe40], 0xbf
mov dword [esp + 0x48], esp
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x330]
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe5c], 0xc0
mov dword [esp + 0x74], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x34c]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c50
mov byte [esp + 0xe5c], 0xbe
call fcn.004116c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x581fd8
call fcn.00402c90
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe40], 0xc1
mov dword [esp + 0x48], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x2c0]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c50
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe5c], 0xc2
mov dword [esp + 0x74], esp
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
mov byte [ecx], bl
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xe4]
push eax
call fcn.00403c50
mov byte [esp + 0xe5c], 0xbe
call fcn.00411940
lea ecx, [esp + 0x494]
mov byte [esp + 0xe08], 0xbc
call fcn.004105b0
mov edi, esi
lea esi, [edi + 1]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x168], ebx
jne 0x418cfd
cmp dword [esp + 0x290], ebx
jne 0x418d0a
push 0x190
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [esp + 0x198], 0xf
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
push str.getentrylocalurl
lea ecx, [esp + 0x134]
mov byte [esp + 0xe0c], 0xc3
call fcn.00402c90
lea eax, [esp + 0x14c]
mov byte [esp + 0xe08], 0xc4
call fcn.00406520
push eax
mov eax, str..tmp
lea ecx, [esp + 0xe0]
mov byte [esp + 0xe0c], 0xc5
call fcn.004093f0
add esp, 4
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xc7
call fcn.00402cf0
push 0x5816b0
lea edx, [esp + 0x134]
push edx
lea eax, [esp + 0x2c0]
push eax
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xdc]
lea ebx, [esp + 0x328]
mov byte [esp + 0xe08], 0xc8
call fcn.00409440
mov edx, eax
lea ecx, [esp + 0x30c]
mov byte [esp + 0xe08], 0xc9
call fcn.00408200
mov ecx, ebx
mov byte [esp + 0xe08], 0xc8
call fcn.00402cf0
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xc7
call fcn.00402cf0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.temp_
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0xc8]
push edx
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xdc]
lea ebx, [esp + 0x1d8]
mov byte [esp + 0xe08], 0xca
call fcn.00409440
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe08], 0xcc
call fcn.00402cf0
mov eax, ebx
push eax
lea ecx, [esp + 0x188]
call fcn.00405550
add esp, 4
mov eax, ebx
call fcn.00407d30
push str.__entry_
lea ecx, [esp + 0xa8]
call fcn.00402c90
push str._entry_
lea ecx, [esp + 0x2bc]
mov byte [esp + 0xe0c], 0xcd
call fcn.00402c90
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0x2bc]
lea ecx, [esp + 0x188]
lea ebx, [esp + 0x32c]
mov byte [esp + 0xe0c], 0xce
call fcn.00406bd0
add esp, 4
mov edi, eax
lea esi, [esp + 0x280]
mov byte [esp + 0xe08], 0xcf
call fcn.00403b10
mov ecx, ebx
mov byte [esp + 0xe08], 0xce
call fcn.00402cf0
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xcd
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0xcc
call fcn.00402cf0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xe08], 0xc7
call fcn.00402cf0
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe08], 0xc4
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0xc3
call fcn.00402cf0
lea ecx, [esp + 0x184]
mov byte [esp + 0xe08], 0xbc
call fcn.00402cf0
xor ebx, ebx
lea edi, [ebx + 0xf]
lea esi, [ebx + 0x10]
cmp dword [esp + 0x290], ebx
je 0x418f8e
mov eax, 7
xor edx, edx
mov dword [esp + 0x4b4], eax
mov dword [esp + 0x4b0], ebx
mov word [esp + 0x4a0], dx
mov dword [esp + 0x4d0], eax
xor eax, eax
mov dword [esp + 0x4cc], ebx
mov word [esp + 0x4bc], ax
mov byte [esp + 0xe08], 0xd1
call fcn.0041fed0
test eax, eax
je 0x418f79
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x582f80
call fcn.00402c90
lea ecx, [esp + 0xe8]
call fcn.004075e0
lea ecx, [esp + 0xe8]
push ecx
lea ecx, [esp + 0x108]
mov byte [esp + 0xe34], 0xd2
call fcn.00406e60
add esp, 0x2c
mov dword [esp + 0x198], edi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
lea edx, [esp + 0x10]
mov byte [esp + 0xe08], 0xd4
push edx
lea eax, [esp + 0xe0]
mov dword [esp + 0x14], ebx
push eax
lea ecx, [esp + 0x18c]
lea ebx, [esp + 0x49c]
call fcn.00420700
push str.__ip_
lea ecx, [esp + 0xa8]
call fcn.00402c90
push str._ip_
lea ecx, [esp + 0x2bc]
mov byte [esp + 0xe0c], 0xd5
call fcn.00402c90
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0x2bc]
lea ecx, [esp + 0x188]
lea ebx, [esp + 0x1dc]
mov byte [esp + 0xe0c], 0xd6
call fcn.00406bd0
add esp, 4
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xd8
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0xd9
call fcn.00402cf0
mov ecx, ebx
call fcn.00405fc0
test eax, eax
je 0x418f21
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x288]
push edx
mov ecx, 0x5aba00
call fcn.00403c50
push str.:__localhost
lea ecx, [esp + 0x134]
call fcn.00402c90
push 0x582fe8
lea ecx, [esp + 0x32c]
mov byte [esp + 0xe0c], 0xda
call fcn.00402c90
mov ecx, eax
mov eax, ebx
lea ebx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xdb
call fcn.00409440
push eax
lea edx, [esp + 0x134]
mov ebx, 0x5aba00
mov byte [esp + 0xe0c], 0xdc
call fcn.00405bf0
add esp, 4
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], 0xdb
call fcn.00402cf0
lea ecx, [esp + 0x328]
mov byte [esp + 0xe08], 0xda
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0xd9
call fcn.00402cf0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xe08], 0xd4
call fcn.00402cf0
lea ecx, [esp + 0x184]
mov byte [esp + 0xe08], 0xd3
call fcn.00402cf0
lea esi, [esp + 0xdc]
mov byte [esp + 0xe08], 0xd2
call fcn.004086b0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe08], 0xd1
call fcn.00402cf0
xor ebx, ebx
lea edi, [ebx + 0xf]
lea esi, [ebx + 0x10]
lea eax, [esp + 0x494]
push eax
mov byte [esp + 0xe0c], 0xbc
call fcn.0041fe30
lea ecx, [esp + 0x4e4]
push ecx
call fcn.00410490
mov byte [esp + 0xe08], 0xdd
call fcn.00410640
push 0xb
push str.HwsIpsPanel
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00404400
lea edx, [esp + 0x6c]
push edx
lea edx, [esp + 0x2f4]
lea ecx, [esp + 0x444]
mov byte [esp + 0xe0c], 0xde
call fcn.004109d0
mov byte [esp + 0xe08], 0xe0
cmp dword [esp + 0x80], esi
jb 0x419008
mov eax, dword [esp + 0x6c]
push eax
call fcn.00425301
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [ecx + 0x168], ebx
jne 0x4193dc
mov eax, dword [esp + 0x2f0]
cmp dword [esp + 0x304], esi
jae 0x41903e
lea eax, [esp + 0x2f0]
push 8
push 0x581489
push str.autorun
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea esi, [esp + 0x20]
call fcn.004138a0
push 0x581fd8
lea ecx, [esp + 0x188]
mov byte [esp + 0xe0c], 0xe1
call fcn.00402c90
push eax
mov eax, 0x583010
lea ecx, [esp + 0xc4]
mov byte [esp + 0xe0c], 0xe2
call fcn.004093f0
add esp, 4
mov byte [esp + 0xe08], 0xe4
cmp dword [esp + 0x198], 0x10
jb 0x4190b8
mov edx, dword [esp + 0x184]
push edx
call fcn.00425301
add esp, 4
lea edi, [esp + 0x10]
lea eax, [esp + 0x20]
mov dword [esp + 0x198], 0xf
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
mov dword [esp + 0x10], ebx
call fcn.00413920
test eax, eax
je 0x4190f0
cmp dword [esp + 0x10], ebx
jne 0x419377
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x150]
call fcn.00406e60
add esp, 4
mov byte [esp + 0xe08], 0xe5
cmp dword [eax + 0x14], 8
jb 0x419119
mov esi, dword [eax]
jmp 0x41911b
mov esi, eax
call fcn.004139b0
lea esi, [esp + 0x14c]
mov edi, eax
mov byte [esp + 0xe08], 0xe4
call fcn.004086b0
cmp edi, ebx
je 0x419159
lea edi, [esp + 0x10]
lea eax, [esp + 0x20]
mov dword [esp + 0x10], ebx
call fcn.00413920
test eax, eax
je 0x419159
cmp dword [esp + 0x10], ebx
jne 0x419377
mov dword [esp + 0xf0], 0xf
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
mov bl, 0xe6
push 0x1a20
lea esi, [esp + 0x150]
mov byte [esp + 0xe0c], bl
call fcn.00407080
add esp, 4
mov edi, eax
lea esi, [esp + 0xdc]
mov byte [esp + 0xe08], 0xe7
call fcn.00403b10
lea ecx, [esp + 0x14c]
mov byte [esp + 0xe08], bl
call fcn.00402cf0
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x583020
call fcn.00402c90
lea ecx, [esp + 0x200]
call fcn.004075e0
add esp, 0x28
mov edi, eax
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov byte [esp + 0xe30], 0xe8
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x583020
lea ebx, [esp + 0xec]
call fcn.00402c90
lea ecx, [esp + 0x158]
call fcn.004075e0
push eax
mov eax, str.____1
lea ecx, [esp + 0xd0]
mov byte [esp + 0xe34], 0xe9
call fcn.004093f0
add esp, 0x2c
mov ecx, eax
mov eax, ebx
lea ebx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xea
call fcn.00409440
push eax
mov eax, 0x583074
lea ecx, [esp + 0x32c]
mov byte [esp + 0xe0c], 0xeb
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0x14c]
push edx
mov eax, edi
mov byte [esp + 0xe0c], 0xec
call fcn.00409800
add esp, 4
mov ecx, eax
mov eax, esi
lea ebx, [esp + 0x29c]
mov byte [esp + 0xe08], 0xed
call fcn.00409440
mov byte [esp + 0xe08], 0xef
lea ecx, [esp + 0x14c]
call fcn.00402cf0
lea ecx, [esp + 0x328]
mov byte [esp + 0xe08], 0xf0
call fcn.00402cf0
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xe08], 0xf1
call fcn.00402cf0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe08], 0xf2
call fcn.00402cf0
lea ecx, [esp + 0x130]
mov byte [esp + 0xe08], 0xf3
call fcn.00402cf0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xe08], 0xf4
call fcn.00402cf0
cmp dword [esp + 0x2b0], 0x10
mov eax, dword [esp + 0x29c]
jae 0x419339
mov eax, ebx
push eax
call fcn.00526ab6
add esp, 4
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x29c]
mov byte [esp + 0xe08], 0xe6
call fcn.00402cf0
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe08], 0xe4
call fcn.00402cf0
xor ebx, ebx
mov byte [esp + 0xe08], 0xe1
cmp dword [esp + 0xd4], 0x10
jb 0x419399
mov eax, dword [esp + 0xc0]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xe0
mov eax, dword [esp + 0x20]
mov dword [esp + 0xd4], 0xf
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
cmp eax, ebx
je 0x4193ce
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x20], ebx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edi, 0xf
lea esi, [edi + 1]
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x22c]
cmp dword [ebp + 8], ebx
je 0x4193fc
push 0xa
push 0x583078
jmp 0x419403
push 0x72
push 0x583088
call fcn.00404400
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x581489
mov byte [ecx], bl
call fcn.00404400
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xf5
mov ecx, esp
mov dword [esp + 0x50], esp
push 6
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.hwsips
mov byte [ecx], bl
call fcn.00404400
mov byte [esp + 0xe48], 0xe0
call fcn.0041e170
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x581489
mov byte [ecx], bl
call fcn.00404400
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xf6
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsipsd
call fcn.00402c90
mov byte [esp + 0xe48], 0xe0
call fcn.0041e170
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x168], ebx
je 0x4194e1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
mov edx, eax
push str.logupdate.log
add edx, 0x16c
push edx
push ecx
call fcn.00409720
lea eax, [esp + 0x254]
add esp, 0xc
push eax
call fcn.004052a0
add esp, 0x20
jmp 0x4195cd
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x581489
call fcn.00402c90
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xf7
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsipsd
call fcn.00402c90
mov byte [esp + 0xe48], 0xe0
call fcn.0041e170
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x581489
call fcn.00402c90
push 1
sub esp, 0x1c
mov byte [esp + 0xe48], 0xf8
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsips
call fcn.00402c90
mov byte [esp + 0xe48], 0xe0
call fcn.0041e170
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x20]
push ebx
push 0x32
push 2
push edx
call dword [sym.imp.USER32.dll_SetTimer]
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x288]
push eax
mov ecx, 0x5ab9e4
call fcn.00403c50
lea ecx, [esp + 0x524]
push ecx
call fcn.0040ec30
lea ecx, [esp + 0x524]
mov byte [esp + 0xe08], 0xf9
call fcn.00433864
lea ecx, [esp + 0x524]
mov byte [esp + 0xe08], 0xe0
call fcn.0040ed40
mov byte [esp + 0xe08], 0xdd
cmp dword [esp + 0x454], esi
jb 0x4195ee
mov edx, dword [esp + 0x440]
push edx
call fcn.00425301
add esp, 4
lea ecx, [esp + 0x4e4]
mov dword [esp + 0x454], edi
mov dword [esp + 0x450], ebx
mov byte [esp + 0x440], bl
mov byte [esp + 0xe08], 0xbc
call fcn.004105b0
mov byte [esp + 0xe08], 0xba
cmp dword [esp + 0x294], esi
jb 0x419638
mov eax, dword [esp + 0x280]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb9
mov dword [esp + 0x294], edi
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
cmp dword [esp + 0x304], esi
jb 0x41966e
mov ecx, dword [esp + 0x2f0]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb3
mov dword [esp + 0x304], edi
mov dword [esp + 0x300], ebx
mov byte [esp + 0x2f0], bl
cmp dword [esp + 0x3ac], esi
jb 0x4196a4
mov edx, dword [esp + 0x398]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb0
mov dword [esp + 0x3ac], edi
mov dword [esp + 0x3a8], ebx
mov byte [esp + 0x398], bl
cmp dword [esp + 0x320], esi
jb 0x4196da
mov eax, dword [esp + 0x30c]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0x18
mov dword [esp + 0x320], edi
mov dword [esp + 0x31c], ebx
mov byte [esp + 0x30c], bl
cmp dword [esp + 0x2e8], esi
jb 0x419710
mov ecx, dword [esp + 0x2d4]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xf
mov dword [esp + 0x2e8], edi
mov dword [esp + 0x2e4], ebx
mov byte [esp + 0x2d4], bl
cmp dword [esp + 0x128], esi
jb 0x419746
mov edx, dword [esp + 0x114]
push edx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 0xb
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
cmp dword [esp + 0x17c], esi
jb 0x41977c
mov eax, dword [esp + 0x168]
push eax
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 8
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
cmp dword [esp + 0x9c], esi
jb 0x4197b2
mov ecx, dword [esp + 0x88]
push ecx
call fcn.00425301
add esp, 4
mov byte [esp + 0xe08], 7
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp dword [esp + 0x1d0], esi
jb 0x4197e8
mov edx, dword [esp + 0x1bc]
push edx
call fcn.00425301
add esp, 4
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x1d4], edi
mov dword [esp + 0x1d0], ebx
mov byte [esp + 0x1c0], bl
mov byte [esp + 0xe0c], 3
call fcn.0041e900
mov byte [esp + 0xe08], 2
cmp dword [esp + 0x240], esi
jb 0x419830
mov ecx, dword [esp + 0x22c]
push ecx
call fcn.00425301
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0xe00]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xde8]
xor ecx, esp
call fcn.00523d1e
mov esp, ebp
pop ebp
ret 4